$ grep -l "#migrated" ~/blog/*
#migrated
3 posts · all posts
LFI + Unsafe YAML Deserialization leads to RCE
A TryHackMe Industrial Intrusion CTF 2025 write-up: chaining a blacklist-bypass LFI with an unsafe PyYAML loader to read source code and get remote code execution.
My first P1 vulnerability | Hacking Adobe Experience Manager CMS Dispatcher through CVE-2016–0957
How I bypassed an Adobe Experience Manager Dispatcher with CVE-2016-0957 to list a site's internal content directories, and what happened to the report.
My First Bug | Account takeover through OTP bypass
My first ever bug and write-up: an OTP field with no rate limiting let me brute-force the code and take over an account on my ISP's website.