Beating an unbeatable game by forging the client-side score request. PwnMe 2023 web write-up.
Tracing a target's French life across social media to recover the flag. PwnMe 2023 OSINT write-up.
Exploiting a misconfigured Supabase project leaking the anon key with missing RLS to read other users' data. ImaginaryCTF 2025.
Forging a CRC32 hash collision to defeat a PHP password check and leak the flag. Nullcon Goa HackIM 2025 web write-up.
Enumerating authors and abusing a weak random referral secret to reach an admin-only note. HeroCTF v5 web write-up.
Geolocating three European cities from a target's social posts using jeuxvideo, EuroBillTracker and forum-train. PwnMe 2023 OSINT.
Reading the source of a Flask blog to reach the admin account and trigger Jinja2 SSTI for RCE. PwnMe 2023 web write-up.
Chaining stored XSS, cache poisoning and a password reset to take over the admin of a Django blog. HeroCTF v5 web write-up.
