Application security engineer. Research, write-ups and notes.https://a51f221b.dev/https://a51f221b.dev/writeups/intigriti-1021-halloween/https://a51f221b.dev/writeups/intigriti-1021-halloween/This is the writeup for the Intigriti XSS challenge 1021 - Halloween Has Taken Over. The challenge involves bypassing a Content Security Policy (CSP) and executing a cross-site scripting (XSS) payload.Mon, 14 Jul 2025 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/pwnme-2025-profileeditor/https://a51f221b.dev/writeups/pwnme-2025-profileeditor/A write-up of the ProfileEditor web challenge from PwnMe CTF Quals 2025, a Flask app with a path traversal vulnerability.Mon, 03 Mar 2025 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/htb-pinned/https://a51f221b.dev/writeups/htb-pinned/A write-up of the Hack The Box Android challenge Pinned, covering how SSL pinning is implemented in Java.Mon, 06 Jan 2025 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/flagyard-glide/https://a51f221b.dev/writeups/flagyard-glide/A write-up of the Glide challenge from FlagYardWed, 13 Nov 2024 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/heroctf-samplehub/https://a51f221b.dev/writeups/heroctf-samplehub/A write-up of the SampleHub challenge from HeroCTF v6Mon, 28 Oct 2024 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/heroctf-jinjatic/https://a51f221b.dev/writeups/heroctf-jinjatic/A write-up of the Jinjatic challenge from HeroCTF v6Sat, 26 Oct 2024 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/heroctf-pryzes/https://a51f221b.dev/writeups/heroctf-pryzes/A write-up of the PrYzes challenge from HeroCTF v6Sat, 26 Oct 2024 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/flagyard-ohmypatch/https://a51f221b.dev/writeups/flagyard-ohmypatch/A newly registered user makes itself admin with one JSON Patch request to /patch.Thu, 24 Oct 2024 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/flagyard-meters-flag/https://a51f221b.dev/writeups/flagyard-meters-flag/A write-up of the Meters flag challenge from FlagYardWed, 23 Oct 2024 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/flagyard-feedback/https://a51f221b.dev/writeups/flagyard-feedback/A write-up of the Feedback challenge from FlagYardTue, 22 Oct 2024 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/flagyard-nooter/https://a51f221b.dev/writeups/flagyard-nooter/A write-up of the Nooter challenge from FlagYardTue, 22 Oct 2024 00:00:00 GMTWrite-uphttps://a51f221b.dev/notes/portswigger-web-cache/https://a51f221b.dev/notes/portswigger-web-cache/Notes on how web caching works, as background for web cache poisoning.Fri, 23 Aug 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/portswigger-path-traversal/https://a51f221b.dev/notes/portswigger-path-traversal/Solutions to the PortSwigger Academy path traversal labs.Tue, 09 Jul 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/portswigger-oauth/https://a51f221b.dev/notes/portswigger-oauth/Notes on OAuth 2.0 and solutions to the PortSwigger Academy OAuth authentication labs.Mon, 10 Jun 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/portswigger-deserialization/https://a51f221b.dev/notes/portswigger-deserialization/Short notes made while solving the PortSwigger Academy insecure deserialization labs.Fri, 10 May 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/portswigger-jwt/https://a51f221b.dev/notes/portswigger-jwt/Notes on JWT attacks and solutions to the PortSwigger Academy JWT labs.Fri, 10 May 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/portswigger-ssrf/https://a51f221b.dev/notes/portswigger-ssrf/Solutions to the PortSwigger Academy server-side request forgery (SSRF) labs.Fri, 10 May 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/portswigger-host-header/https://a51f221b.dev/notes/portswigger-host-header/Notes on HTTP Host header attacks and solutions to the PortSwigger Academy labs.Thu, 04 Apr 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/portswigger-graphql/https://a51f221b.dev/notes/portswigger-graphql/GraphQL notes and lab solutions from the PortSwigger Academy GraphQL API vulnerability labs.Sun, 10 Mar 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/portswigger-file-upload/https://a51f221b.dev/notes/portswigger-file-upload/Notes and lab solutions from the PortSwigger Academy file upload vulnerability labs.Mon, 04 Mar 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/portswigger-cors/https://a51f221b.dev/notes/portswigger-cors/Notes and lab solutions from the PortSwigger Academy CORS labs, with side notes on CSRF and the same-origin policy.Thu, 04 Jan 2024 00:00:00 GMTNotehttps://a51f221b.dev/notes/django-basics-2/https://a51f221b.dev/notes/django-basics-2/In this post we explain models in Django and how to use them.Sun, 10 Sep 2023 00:00:00 GMTNotehttps://a51f221b.dev/notes/docker-basics/https://a51f221b.dev/notes/docker-basics/Docker is used to deploy application along with its complete dependencies. Any user can use the Docker container and run the application without installing any extra frameworks or modules.Fri, 08 Sep 2023 00:00:00 GMTNotehttps://a51f221b.dev/notes/django-basics-1/https://a51f221b.dev/notes/django-basics-1/Django is a Python based web framework used to build web applications. It is a high level framework that provides a lot of features out of the box. It is a Model View Template framework.Tue, 29 Aug 2023 00:00:00 GMTNotehttps://a51f221b.dev/notes/git-basics/https://a51f221b.dev/notes/git-basics/Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency.Sat, 08 Jul 2023 00:00:00 GMTNotehttps://a51f221b.dev/notes/computer-cryptography/https://a51f221b.dev/notes/computer-cryptography/The science of Secret writing with the goal of hiding the message.Mon, 11 Apr 2022 00:00:00 GMTNotehttps://a51f221b.dev/notes/assembly-language-3/https://a51f221b.dev/notes/assembly-language-3/Direct memory operand is a reference to storage in the memory.Sat, 09 Apr 2022 00:00:00 GMTNotehttps://a51f221b.dev/notes/assembly-language-1/https://a51f221b.dev/notes/assembly-language-1/Computer Hardware and Software are related to each other through a concept called Virtual Machine. To Understand this concept consider a program written in High level language…Fri, 08 Apr 2022 00:00:00 GMTNotehttps://a51f221b.dev/notes/assembly-language-2/https://a51f221b.dev/notes/assembly-language-2/CPU which is responsible for all the logical operations contains following components:Fri, 08 Apr 2022 00:00:00 GMTNotehttps://a51f221b.dev/notes/web-pentest-guide/https://a51f221b.dev/notes/web-pentest-guide/Open Redirect means when a website redirects user to some other website or domain for a particular task. Vulnerability occurs when we put no checks on the redirect parameter so…Mon, 20 Dec 2021 00:00:00 GMTNotehttps://a51f221b.dev/writeups/tryhackme-blue/https://a51f221b.dev/writeups/tryhackme-blue/Deploy the machine from this link: TryHackMe blue And if you have not signed up yet, what are you waiting for! Sign up Already! TryHackMeThu, 22 Jul 2021 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/tryhackme-further-nmap/https://a51f221b.dev/writeups/tryhackme-further-nmap/Deploy the machine from this link: [tryhackme.com/room/furthernmap And if you have not signed up yet, what are you waiting for! Sign up Already! https://tryhackme.com/Thu, 22 Jul 2021 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/tryhackme-hydra/https://a51f221b.dev/writeups/tryhackme-hydra/We can use Hydra to run through a list and ‘bruteforce’ some authentication service. Imagine trying to manually guess someone’s password on a particular service (SSH, Web…Thu, 22 Jul 2021 00:00:00 GMTWrite-uphttps://a51f221b.dev/writeups/tryhackme-metasploit/https://a51f221b.dev/writeups/tryhackme-metasploit/Metasploit TryHackMe room writeupThu, 22 Jul 2021 00:00:00 GMTWrite-uphttps://a51f221b.dev/notes/cybersecurity-career/https://a51f221b.dev/notes/cybersecurity-career/Why you should consider Cyber-security as your career destinationThu, 22 Jul 2021 00:00:00 GMTNotehttps://a51f221b.dev/notes/evil-twin-wifi/https://a51f221b.dev/notes/evil-twin-wifi/You may have seen evil twins of characters in movies doing utterly opposite of what their twins do, such as in Spider-man! Well, we will be talking about a similar cyber…Thu, 22 Jul 2021 00:00:00 GMTNotehttps://a51f221b.dev/notes/git-explained/https://a51f221b.dev/notes/git-explained/As a beginner in programming or IT you must have wondered what is Git, what is it used for. You must have come across complicated definitions such as:Thu, 22 Jul 2021 00:00:00 GMTNotehttps://a51f221b.dev/notes/html-for-beginners/https://a51f221b.dev/notes/html-for-beginners/HTML stands for Hyper text markup language. It is used to create the structure of our web pages. In earlier years it was used to make documents that were displayed as web…Thu, 22 Jul 2021 00:00:00 GMTNotehttps://a51f221b.dev/notes/python-for-beginners-1/https://a51f221b.dev/notes/python-for-beginners-1/What is a Variable? A variable is simply a location to store a value. Imagine an empty box in a room, it symbolizes a variable in logical terms and whatever you put in that box…Thu, 22 Jul 2021 00:00:00 GMTNotehttps://a51f221b.dev/notes/tor-and-dark-web/https://a51f221b.dev/notes/tor-and-dark-web/TOR refers to a specific kind of network which uses onion technology known as onion circuits to make the data travel over the network using thousands of network overlays…Thu, 22 Jul 2021 00:00:00 GMTNote