~
16 POSTS · POST
DATECATTITLE
2026· 2
17-08POSTLathe - a local workbench for manual AI red teaming13-08POSTWhen Agent Context Compaction Becomes a Security Boundary
2023· 1
24-12POSTRemedy Invitational Challenge Writeup
2022· 2
26-04POSTVestaCP Multiple Vulnerabilities12-02POSTimpressCMS - unauthenticated code execution
2021· 7
05-12POSTHITCON CTF 2021 Metamon-Verse Writeup23-11POSTMoodle Blind SQL injection via MNet authentication22-10POSTMoodle - Stored XSS and blind SSRF possible via feedback answer text20-08POSTVanilla - SSRF via media scrape API through dns rebinding09-08POSTRoxy-WI through 5.2.2.0 pre-auth RCE17-05POST3kCTF-2021 - ppaste writeup11-01POSTh1CTF - HackyHolidays walkthrough
2020· 4
31-12POSTiceCTF-2020 - krouter writeup 25-07POST3kCTF-2020 - reporter writeup25-07POST3kCTF-2020 - babym1ps writeup25-07POST3kCTF-2020 - Glitch writeup
CONTACT
rekter0
PROFESSIONAL SLOPPER

Application security research. vulnerability disclosure, and the occasional pre-auth RCE chain.