BLOG

How I chained DOM Clobbering, a forgotten same-origin JSONP endpoint, and a dynamic script loader to bypass DOMPurify and a strict CSP and walk away with the admin cookie.

A walkthrough of how I found and exploited a stored XSS in InkDrop by chaining a broken markdown renderer, a dangerous script re-execution pattern, and a JSONP callback injection to bypass CSP.

A step-by-step walkthrough of bypassing the Windows 11 lock screen via WinRE binary substitution to obtain an NT AUTHORITY\SYSTEM shell.

A digital-forensics-focused follow-up to the Cobalt Strike attack series, covering static analysis, deofuscation, and network/process/memory investigation with screenshots.

An attack & defense walkthrough of Cobalt Strike, with screenshots and references, focusing on teamserver setup and stageless payload creation.