Discover.◆Exploit.◆Own.
Grandmaster Top rank · HackTheBox More below
// about
The short version.
Security researcher and pentester. I find vulnerabilities in web apps and trade prediction markets. The markets have flaws of their own, and I hunt those too.
HTB Academy certified
// Writeups
Latest.
-
Writeup
Jul 21, 2026HackTheBoxEasyLinuxCVE-2019-9053 (CMS Made Simple <=2.2.9 unauth SQLi) → staff-group PATH hijack of run-parts
-
Help
Jul 21, 2026HackTheBoxEasyLinuxGraphQL-leaked creds + HelpDeskZ arbitrary file upload → kernel exploit (CVE-2017-16995) to root
-
GoodGames
Jul 21, 2026HackTheBoxEasyLinuxSQLi auth bypass → SSTI RCE → bind-mount container escape to host root
// Tutorials
Start here.
// standby
No tutorials published yet — a Bun + Rust offensive-tooling course is on the way.