/posts/HTB-C.O.P-Writeup/ 2022-11-24T00:00:00+00:00 /posts/HTB-ExpressionalRebel-Writeup/ 2022-12-01T00:00:00+00:00 /posts/PentesterLab-XSS-and-MySQL/ 2022-12-25T00:00:00+00:00 /posts/Cach-Hoat-Dong-SSO/ 2023-03-01T00:00:00+00:00 /posts/cach-hoat-dong-https/ 2023-03-02T00:00:00+00:00 /posts/Cach-Hoat-Dong-CDN/ 2023-03-03T00:00:00+00:00 /posts/API-Recon/ 2023-03-05T00:00:00+00:00 /posts/Security-for-KMS-from-Terraform-Config/ 2024-09-13T00:00:00+00:00 /posts/Security-for-S3-from-Terraform-Config/ 2024-09-13T00:00:00+00:00 /posts/Vulnerability-with-function-tarfile.extractall()/ 2024-10-28T00:00:00+00:00 /posts/Research-DoS-Vulnerability-via-Multipart-Form-Data/ 2024-10-30T00:00:00+00:00 /posts/CVE-2024-45601-Path-traversal/ 2024-11-01T00:00:00+00:00 /posts/CVE-2024-52010-OS-Command-Injection/ 2024-11-14T00:00:00+00:00 /posts/HTB-BlackSky-Hailstorm/ 2024-11-15T00:00:00+00:00 /posts/SQL-Injection-in-Go/ 2024-12-02T00:00:00+00:00 /posts/SAMLStorm-Critical-Authentication-Bypass-in-xml-crypto-and-Node.js-libraries/ 2025-03-25T00:00:00+00:00 / /profile/ 2025-06-13T02:28:21+00:00