Hola!
This blog is basically where I put my thoughts on anything related to cybersecurity.
Recent Posts
See all posts- JavaScript Prototype Chain & Prototype PollutionA deep dive into JavaScript prototype concepts — own properties, inherited properties, getters/setters, prototype chain, and a walkthrough of prototype pollution vulnerability in a deepMerge function.
- Hack The Box: Silentium (Writeup)A walkthrough of the HTB Silentium machine — from initial recon through RCE via privilege escalation exploiting CVE-2025-59528 (Flowise), and CVE-2025-8110 (Gogs).
- Hack The Box: Facts (Writeup)A detailed walkthrough of the HTB Facts machine — from initial recon through RCE via privilege escalation, including analysis of CVE-2025-2304 (Camaleon CMS mass assignment vulnerability).