// POSTS

Posts

Technical writing with the content kept readable and the metadata useful.

Sort

3 postsShowing: NewestFilter and sort update instantly

COMPFEST CTF 2026 Writeup: Egg

A WordPress 7.0 pre-auth RCE chain, from a WAF bypass and SQL injection to a temporary admin and command execution.

Chaining SAML signature wrapping, ASP.NET MVC mass assignment, and Mono BinaryFormatter deserialization into RCE.

A client-side Google Forms routing bypass for LIT CTF 2026's no way out.