Casino was a fun medium-level challenge that combined web exploitation with Linux privilege escalation. I went from finding a hidden API endpoint to SSTI vulnerability to privilege escalation throu...

A GraphQL introspection writeup from BugForge Labs. The API happily described its own schema, and that map led straight to an unauthorized mutation and the flag.

A CCNA study note breaking down the TCP/IP model layer by layer - protocols, standards, encapsulation, PDUs, and how it compares to the OSI model.

A JWT algorithm-none attack chained with an API version downgrade writeup from BugForge Labs. The new API rejected the forged token - but the old one didn't.

A predictable admin access token writeup from BugForge Labs. The token looked random at first glance, but comparing it across two accounts revealed a fixed prefix and a brute-forceable 3-character suffix - this is the full process from spotting the cookie to getting the flag.