Migrating From Ghost to Hugo
In this post I’ll describe how I migrated this blog from the Ghost platform to the static site generator Hugo.
CVE-2023-6294: popup-builder <= 4.2.6 Admin+ SSRF & File Read
In this blog post I’ll describe the details of CVE-2023-6294, a local file inclusion in WordPress’ popup-builder plugin.
CVE-2023-6295: so-widgets-bundle < 1.51.0 - Admin+ Local File Inclusion
In this blog post I’ll describe the details of CVE-2023-6295, a local file inclusion in WordPress’ so-widgets-bundle plugin.
Measuring a Tor Hidden Service's idle Traffic
A month ago, I wondered myself how much traffic an idle hidden service would consume just to keep the necessary circuits open. To answer this question, I set up a Tor node and some iptables rules on my raspberry pi and waited for 30 days. Here are the results.
BalCCon2k20 CTF: Let Me See And Dawsonite Writeups
Last weekend, I had the time to play the BalCCon2k20 CTF and since there are no writeups for the last two web challenges yet, I decided to change that.