2023

Intigriti 0123 Challenge Writeup - Second Order MongoDB JS Injection

2022

SekaiCTF 2022 - safelist writeup
Who pollutes your prototype? Find the libs on cdnjs in an automated way
Intigriti 0822 XSS Challenge Author Writeup
corCTF 2022 writeup - modernblog
Insecure Deserialization in JavaScript: GoogleCTF 2022 Web/HORKOS Writeup
justCTF 2022 - Baby XSLeak Write-up
ångstromCTF 2022 Writeup
Revenge of Intigriti 0422 Challenge Author Writeup
Intigriti 0422 XSS Challenge Author Writeup
How much do you know about script type?
The Magical Features of RegExp and String Replacement in JavaScript
Notes XSS Challenge Author Writeup
SSRF and Account Takeover via XSS in ERPNext
Sensitive Data Disclosure in WordPress Plugin Amelia < 1.0.49
Intigriti 0222 XSS Challenge Author Writeup
Story of critical security flaws I found in Glints