Discovering Null Byte Injection Vulnerability in GoAhead
in Blog
How I found a zero-day in an embedded web server while testing problems for PlaidCTF 2021.
Bypassing Cinemark's Gap Restriction
in Blog
Cinemark doesn’t want people to leave gap seats when reserving tickets, but not badly enough to implement a server-side check…