A WordPress mass assignment bug chained with a custom template SSTI from BugForge Labs. Reading the official WordPress documentation turned out to be the best attack tool here.

A CCNA lab note on switch interface status, speed and duplex settings, auto-negotiation, and the key default-state difference between Cisco routers and switches.

Casino was a fun medium-level challenge that combined web exploitation with Linux privilege escalation. I went from finding a hidden API endpoint to SSTI vulnerability to privilege escalation throu...

A GraphQL introspection writeup from BugForge Labs. The API happily described its own schema, and that map led straight to an unauthorized mutation and the flag.

A CCNA study note breaking down the TCP/IP model layer by layer - protocols, standards, encapsulation, PDUs, and how it compares to the OSI model.