Agent P
A multi-stage chain moves from WordPress SQL injection through database credentials, unsafe pickle loading, and a signed-task binary to root.
overflow-the-jackpot
5 posts
Lost Fortune Included
A PHP stream-wrapper bypass defeats the document whitelist and reads arbitrary files from the server.
B1t Recovery
Known plaintext from the THM flag prefix recovers a reused four-byte XOR key and decrypts the challenge file.
Casino Heist
Packet-capture analysis and PyInstaller reverse engineering recover the key used to decrypt exfiltrated jackpot data.
Fresh Powder
A detection-as-code investigation repairs five broken Sigma rules and validates each fix against the incident report.