⤷ Title: HTB Machine Walkthrough: Magic
════════════════════════
𐀪 Author: Balachandar Gowrisankar
════════════════════════
ⴵ Time: Sun, 05 Jul 2026 16:56:07 GMT
════════════════════════
⌗ Tags: #htb_writeup #sql_injection #file_upload_vulnerability #cybersecurity #penetration_testing
════════════════════════
𐀪 Author: Balachandar Gowrisankar
════════════════════════
ⴵ Time: Sun, 05 Jul 2026 16:56:07 GMT
════════════════════════
⌗ Tags: #htb_writeup #sql_injection #file_upload_vulnerability #cybersecurity #penetration_testing
Medium
HTB Machine Walkthrough: Magic
Magic is a medium difficulty HTB machine which involves SQL injection attack, arbitrary file upload and SUID binary exploitation.
⤷ Title: The File That Answered Back — XXE Hidden in Cell A2
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:28:59 GMT
════════════════════════
⌗ Tags: #xml #bug_bounty_writeup #bug_bounty #file_upload_vulnerability #xxe
════════════════════════
𐀪 Author: Alvin Ferdiansyah
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 06:28:59 GMT
════════════════════════
⌗ Tags: #xml #bug_bounty_writeup #bug_bounty #file_upload_vulnerability #xxe
Medium
The File That Answered Back — XXE Hidden in Cell A2
Most people know XXE. Few think to look for it inside a spreadsheet upload. But beneath every .xlsx is really a ZIP archive full of XML…
⤷ Title: From SQL Injection to Remote Code Execution: A Complete Security Assessment of the NovaCRM CTF
════════════════════════
𐀪 Author: Rajkumaryarra
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 17:11:30 GMT
════════════════════════
⌗ Tags: #vulnerability #rce_vulnerability #login_bypass #sql_injection #file_upload_vulnerability
════════════════════════
𐀪 Author: Rajkumaryarra
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 17:11:30 GMT
════════════════════════
⌗ Tags: #vulnerability #rce_vulnerability #login_bypass #sql_injection #file_upload_vulnerability
Medium
From SQL Injection to Remote Code Execution: A Complete Security Assessment of the NovaCRM CTF
By Raj Kumar
⤷ Title: File Upload Bypass On Indrive
════════════════════════
𐀪 Author: Mahmoud Elsaidy
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 04:19:09 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #amazon_s3 #bug_bounty_writeup
════════════════════════
𐀪 Author: Mahmoud Elsaidy
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 04:19:09 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #amazon_s3 #bug_bounty_writeup
Medium
File Upload Bypass Using a Pre-Signed S3 URL
welcome to my first write-up. I started bug hunting about 3 months ago, and this was one of my first findings, so I would love to share it.
⤷ Title: File Upload Bypass Using a Pre-Signed S3 URL
════════════════════════
𐀪 Author: Mahmoud Elsaidy
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 04:19:09 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #amazon_s3 #bug_bounty_writeup
════════════════════════
𐀪 Author: Mahmoud Elsaidy
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 04:19:09 GMT
════════════════════════
⌗ Tags: #file_upload_vulnerability #amazon_s3 #bug_bounty_writeup
Medium
File Upload Bypass Using a Pre-Signed S3 URL
welcome to my first write-up. I started bug hunting about 3 months ago, and this was one of my first findings, so I would love to share it.
⤷ Title: HackTheBox Walkthrough — Nexus
════════════════════════
𐀪 Author: Indigo Shadow
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 05:51:01 GMT
════════════════════════
⌗ Tags: #git_repo_escape #ethical_hacking #htb_walkthrough_nexus #file_upload_vulnerability #git_objects
════════════════════════
𐀪 Author: Indigo Shadow
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 05:51:01 GMT
════════════════════════
⌗ Tags: #git_repo_escape #ethical_hacking #htb_walkthrough_nexus #file_upload_vulnerability #git_objects
Medium
HackTheBox Walkthrough — Nexus
#Linux #HTBWalkthrough #HTBNexus #FileUpload #Gitea #Gobuster #fuff #subdomainEnumeration #GitPathTraversal #GitObjects
⤷ Title: CTF: Expose TryhackMe Room
════════════════════════
𐀪 Author: Duong
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 19:34:29 GMT
════════════════════════
⌗ Tags: #tryhackme #privilege_escalation #ctf #sqlmap #file_upload
════════════════════════
𐀪 Author: Duong
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 19:34:29 GMT
════════════════════════
⌗ Tags: #tryhackme #privilege_escalation #ctf #sqlmap #file_upload
Medium
CTF: Expose TryhackMe Room
Nmap, sqlmap, wordlists, PHP shell
⤷ Title: How I Found a Bug Worth $3,500 — In a Feature Nobody Was Watching.
════════════════════════
𐀪 Author: Vishw Bhatt
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 15:52:09 GMT
════════════════════════
⌗ Tags: #admin_panel #file_upload #bug_bounty
════════════════════════
𐀪 Author: Vishw Bhatt
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 15:52:09 GMT
════════════════════════
⌗ Tags: #admin_panel #file_upload #bug_bounty
Medium
How I Found a Bug Worth $3,500 — In a Feature Nobody Was Watching.
A storage-exhaustion flaw. A stored XSS that waited for an admin. Both hiding in the same “boring” file upload form that hadn’t been…
⤷ Title: Upload de arquivos não é apenas uma funcionalidade: é uma fronteira de segurança
════════════════════════
𐀪 Author: Cristiano Junior
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 12:58:03 GMT
════════════════════════
⌗ Tags: #application_security #secure_coding #file_upload_security #cybersecurity #web_security
════════════════════════
𐀪 Author: Cristiano Junior
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 12:58:03 GMT
════════════════════════
⌗ Tags: #application_security #secure_coding #file_upload_security #cybersecurity #web_security
⤷ Title: How I Found a Bug Worth $3,500 — In a Feature Nobody Was Watching.
════════════════════════
𐀪 Author: Vishw Bhatt
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:37:44 GMT
════════════════════════
⌗ Tags: #admin_panel #file_upload #bug_bounty
════════════════════════
𐀪 Author: Vishw Bhatt
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 09:37:44 GMT
════════════════════════
⌗ Tags: #admin_panel #file_upload #bug_bounty
Medium
How I Found a Bug Worth $3,500 — In a Feature Nobody Was Watching.
A storage-exhaustion flaw. A stored XSS that waited for an admin. Both hiding in the same “boring” file upload form that hadn’t been…