~/research/notes

Writeup

5 posts

2026

  1. writeup 7 min read

    phpIPAM 1.7.4 - Second Order SQL Injection via subnetOrdering

    Second Order SQL Injection in phpIPAM 1.7.4 (CVE-2026-4189) Back in 2022, I found a SQL injection in phpIPAM 1.4.4 (CVE-2022-23046) via the BGP mapping search feature. That was a …

2024

  1. writeup 6 min read

    Nasa Path Traversal and XSS (waf bypass)

    Exploit Path Traversal and XSS in NASA Subdomains In this post, I’ll share my journey of discovering two vulnerabilities on NASA subdomains (Just 4 fun). With a bit of luck (and a …

2023

  1. writeup 4 min read

    Template Injection Kitctf

    In this blog post, we will explore a specific template injection vulnerability discovered in a CTF (Capture The Flag) challenge from kitctf. We will delve into the details of the …

  2. writeup 6 min read

    PHPIPAM CVE

    TL;DR This write up is about a SQL injection which I found 4 days after another researcher reported it :/, however, because of the fact that I haven’t found any write ups or …

2022

  1. writeup 4 min read

    iOS Anti-Tampers Bypass

    Hi everyone, in this blog i'm going to explain a little bit of my journey to solve a iOS challenge proposed by @as0ler. The Challenge can be found at the following link: …