Blog | MananisPiwPiw

posts / tags / about /

2026

JavaScript Prototype Chain & Prototype Pollution

A deep dive into JavaScript prototype concepts — own properties, inherited properties, getters/setters, prototype chain, and a walkthrough of prototype pollution vulnerability in a deepMerge function.
Hack The Box: Silentium (Writeup)

A walkthrough of the HTB Silentium machine — from initial recon through RCE via privilege escalation exploiting CVE-2025-59528 (Flowise), and CVE-2025-8110 (Gogs).
Hack The Box: Facts (Writeup)

A detailed walkthrough of the HTB Facts machine — from initial recon through RCE via privilege escalation, including analysis of CVE-2025-2304 (Camaleon CMS mass assignment vulnerability).

© 2026 MananisPiwPiw

Press Esc or click anywhere to close