14 POSTS · POST
DATECATTITLETARGETCVSS
2023· 1
24-12POSTRemedy Invitational Challenge WriteupRemedy—2022· 2
26-04POSTVestaCP Multiple VulnerabilitiesVestaCP7.812-02POSTimpressCMS - unauthenticated code executionImpressCMS9.82021· 7
05-12POSTHITCON CTF 2021 Metamon-Verse WriteupHitconCTF 2021—23-11POSTMoodle Blind SQL injection via MNet authenticationMoodle7.222-10POSTMoodle - Stored XSS and blind SSRF possible via feedback answer textMoodle6.120-08POSTVanilla - SSRF via media scrape API through dns rebindingVanilla9.809-08POSTRoxy-WI through 5.2.2.0 pre-auth RCERoxy-wi9.817-05POST3kCTF-2021 - ppaste writeup3kCTF 2021—11-01POSTh1CTF - HackyHolidays walkthroughH1-CTF—2020· 4
31-12POSTiceCTF-2020 - krouter writeup iceCTF 2020—25-07POST3kCTF-2020 - babym1ps writeup3kCTF 2020—25-07POST3kCTF-2020 - reporter writeup3kCTF 2020—25-07POST3kCTF-2020 - Glitch writeup3kCTF 2020—CONTACT
rekter0
PROFESSIONAL SLOPPER
Application security research. vulnerability disclosure, and the occasional pre-auth RCE chain.
28CVE7EXPLOIT14POST