Published in SUDOROOT·Updated Jun 15, 2021SecureCode1: an OSWE-like MachineSource code review? Source code review, also known as Security Code Review is the process of auditing the source code for an application to verify that the proper security controls are present, that they work as intended, and that they have been invoked in all the right places. …Oswe2 min readOswe2 min read
Published in SUDOROOT·Sep 27, 2020Sudan National CTF 2020 | Web Challenges WriteupsHello everyone, in here we are going to discuss the solutions for the web challenges of this CTF orgnized by cybertalents and TrendMicro. we as “ScriptKiddies” team scored the first place with 825 points.Ctf5 min readCtf5 min read
Published in SUDOROOT·Sep 8, 2020[Bug Bounty Writeups] Exploiting Insecure XML Parsers to perform Single-Request Denial-of-ServiceHello @everyone 😅 here is a writeup for a bug reported to one of bug bounty programs. the bug targeted XML parsers and it allows for server resources exhaustion leading to complete denial of service.Bug Hunting4 min readBug Hunting4 min read
Published in SUDOROOT·Apr 30, 2020[Bug Bounty Writeups] Exploiting SQL Injection VulnerabilityI’m going to share this concise writeup for a bug reported to one of bug bounty programs on hackeroneBug Bounty3 min readBug Bounty3 min read
Published in SUDOROOT·Dec 31, 2019Read Cache | Web Challenge | Arab Regional CTF 2018Challenge Name: Read Cache Category: Web Points: 300 Description: this social network is using redis as cache database, and they hide the flag in it http://35.188.196.153/readcache/ Writeup:Ctf1 min readCtf1 min read
Published in SUDOROOT·Dec 31, 2019API | Web Challenge | Arab Regional CTF 2018Challenge Name: API Category: Web Points: 200 Description: this is the url to flag, only admin can view it, can you get it ? http://35.193.45.56/api/api.php?version=2&action=flag Writeup:Ctf1 min readCtf1 min read
![[Bug Bounty Writeups] Exploiting Insecure XML Parsers to perform Single-Request Denial-of-Service](https://miro.medium.com/v2/resize:fill:224:224/1*fT_mHZDjA8FcFjwcDulrfg.jpeg)
![[Bug Bounty Writeups] Exploiting Insecure XML Parsers to perform Single-Request Denial-of-Service](https://miro.medium.com/v2/resize:fill:160:112/1*fT_mHZDjA8FcFjwcDulrfg.jpeg)
![[Bug Bounty Writeups] Exploiting SQL Injection Vulnerability](https://miro.medium.com/v2/resize:fill:224:224/1*Jk-9O20AhzAUxp9gdgYfOQ.jpeg)
![[Bug Bounty Writeups] Exploiting SQL Injection Vulnerability](https://miro.medium.com/v2/resize:fill:160:112/1*Jk-9O20AhzAUxp9gdgYfOQ.jpeg)
