PinnedABDELKARIM MOUCHQUELITA·Jul 31, 2025How I got RCE on redbull from recon (CVE-2025–30406)CVE-2025–30406 ViewState ExploitA response icon10A response icon10
PinnedABDELKARIM MOUCHQUELITA·May 13, 2024How I Found My First RCE !Unveiling My First RCE JourneyA response icon10A response icon10
PinnedABDELKARIM MOUCHQUELITA·Nov 5, 2024RCE via Dependency Confusion: A Real-World Attack on Unclaimed npm PackagesHacking Servers Through Misconfigured Node.js PackagesA response icon6A response icon6
PinnedABDELKARIM MOUCHQUELITA·Oct 31, 2023Misconfiguration Leads to P1 XSSReflected XSS via Misconfiguration in Get ParameterA response icon3A response icon3
ABDELKARIM MOUCHQUELITA·Apr 26How I Passed OSWE: The System That Actually Worked for MeThe OSWE exam is not a bug bounty. You don’t find one vulnerability, write it up, and move on. The exam wants a full compromise, and if you…A response icon2A response icon2
ABDELKARIM MOUCHQUELITA·May 15, 2025port-scanning for large scopes can lead to $$$$Hacking Mosquitto: How a Port 1883 Service Led to $$$A response icon2A response icon2
ABDELKARIM MOUCHQUELITA·Mar 12, 2025Authentication Bypass leads to PII = ($$$)Hello folks, Ramadan Kareem !
ABDELKARIM MOUCHQUELITA·Dec 17, 2024HTB UNIV ctf 24 (Armaxix - WEB)In this writeup, we’ll explore a lab instead of focusing on a new bug in bug bounty. While CTF challenges teach us a lot, they often differ…
ABDELKARIM MOUCHQUELITA·Oct 12, 2024Uncovering Path Traversal Through Host MonitoringAutomating Host Monitoring for More Targets
ABDELKARIM MOUCHQUELITA·May 28, 2024Self-XSS via filename + CSRF on contact us ‘multipart/data’ formExploiting Filename Reflection and CSRF in Contact Forms: A Detailed RXSS WalkthroughA response icon5A response icon5
