A Python exec chain exploitation that abuses a check->execute->execute chain, with a very restrictive 300 byte limit.
mediumWeb
// security research & field notes
Understand the flaw.
Reproduce the path.
CVE explanations, original research, practical tutorials, engineering notes, and machine writeups—built to be useful after the tab closes.
CVE analysis Research Tutorials
// recently published
all posts →A classic decode-after-check vulnerability to blacklist based WAF bypass, leading to a blind SQLi.
mediumSQL InjectionWeb
A beautiful prototype pollution puzzle on an old Node version, with multiple solutions via symbolic links, Node executable arguments or straight up shell commands.
mediumPrototype PollutionWeb