CTF notes:
Bypass CSP when a custom 404 page is present
data URI scheme (+ XSS)
Easy bash jail with strict restrictions
Express req.query Notes
H2 SQL injection to RCE
Headers for localhost bypass
HTML Encoding Differentials
LFI using proc.
Mime Spoofing + php
On DNS Rebinding
parseInt() in JS
Pydantic email validator + jinja ssti
Python format string
SNI Spoofing
TCP1P Multiplication
When stuck on jinja/flask SSTI
Zip Slip + Absolute Paths
Figures and stuff:
Index for 3D printed miniatures
Ham radio:
Index for Ham Radio Topics
Lockpicking:
Index for 3D Lockpicking Topics
Console Mods:
Index for Modded Consoles