2026-09-20 3 min
[notes]
SSRF Beyond the Fetch: Renderers, Hooks, Rebinding
DNS rebinding, PDF generators, headless browsers, webhook senders and URL preview crawlers: server-side requests nobody wrote on purpose.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2026-09-20 3 min
[notes]
File Uploads, Path Traversal and Archive Extraction
Canonicalization and encoding, LFI wrappers, image parser bugs and Zip Slip: the path the server actually opens versus the one you thought you sent.
2026-09-20 4 min
[notes]
XML Parsers and Deserialization Gadget Chains
XXE, XSLT and XPath injection, plus Java, .NET, Python pickle and PHP object injection: when stored data carries code across a trust boundary.
2026-09-20 4 min
[notes]
SQL, NoSQL and Command Injection in Modern Stacks
ORMs and JSON filters, second-order and blind SQLi, MongoDB operators as query logic, shell versus argv injection, CRLF and expression language.
2026-09-20 5 min
[notes]
JWT, Sessions and Account Recovery
Key confusion, JWK and kid injection, session lifecycle, password reset, MFA bypass, account recovery and where a passkey still falls back to a weaker channel.