NRockhouse's Blog – Security advisories and life stories :)

Wargames.MY 2023 – Warmup Web / Pet Store Viewer / My First AI Project / Report Google? / Compromised (Writeup)

Preface (Unrelated, you can skip) Over the weekend on 16 December 2023 (Saturday), I’ve joined Wargames.MY 2023 CTF (Open/Pro Category).…

Hack The Box HTB x Uni Qualifier CTF 2020 – BoneChewerCon (Web) Write-up

Preface (Unrelated, you can skip) Hack The Box x University Qualifier CTF is held over a weekend from 20 November…

Intigriti Easter XSS Challenge Solution Write-Up: The Forbidden 404 Error

TL;DR Final Payload: https://challenge.intigriti.io/#.htaccess/%253Ciframe%2520srcdoc%253D%2522%253C script%2520src%253D%2526quot%253B’%252Balert(document.domain)%252B’%2526quot%25 3B%253E%253C%252Fscript%253E%2522%253E%253C%252Fiframe%253E Question CHALLENGE: Find the XSS in our #EasterChallenge and WIN a @Burp_Suite Pro License!…

How I Found a Bug in a Twitch Streamer’s Open-Source Overlay

At some of my free time, I usually go around Twitch to watch live streams, mainly proper IRL streams which abides to…

How to Hide IP Address in “Recent Logins” Panel of Webmin

Webmin is a web-based interface for system administration for Unix. There might be reasons why you would want to hide…

Streamlabs: Stored XSS in donation page leading to account compromise (and my first reward)!

Introduction to Vulnerable Website Streamlabs is a broadcaster tool software service, and offers services for the user to customize and…

Vienna RSS Reader for Mac: XXE Vulnerability Allows Webmaster to Steal User’s Files!

Introduction to Vulnerable Software Vienna RSS is a free and Open Source RSS/Atom news-reader application for Mac OS X. The…

$:~ ls -al articles