A deep dive into CWE-338 in @hono/oauth-providers: why using Math.random() for OAuth state and PKCE verifiers defeats CSRF protection, and how to prove it with a deterministic-reconstruction PoC.

An architectural deep dive into uncovering a moderate OAuth Login-CSRF vulnerability in nuxt-auth-utils, affecting 35 out of 48 supported identity providers due to missing state validation.

A full-length offensive security walkthrough of Darkly, the 42 Network web-exploitation project — chaining IDOR, unrestricted file upload, stored XSS against a moderation bot, MD5 reset tokens, mass assignment, XXE-to-SSRF, PocketBase privilege escalation, LFI via path traversal, and a CSRF endpoint with no server-side Origin validation into a complete authentication bypass, then auditing the remaining OWASP Top 10 weaknesses.

A deep-dive technical writeup and source code explanation of my automated Python exploit for Intigriti's Challenge 0726, breaking a polyglot system via JSON duplicate key parsing collisions.

An exhaustive technical narrative of solving the Intigriti LeakyJar CTF challenge — analyzing SameSite=None browser cookie boundaries and forging authenticated cross-site requests to compromise administrative vaults.

Detailed step-by-step writeups and source code walkthroughs for my solutions to the Local CTF at 1337 School (42 Network), covering Web and Misc challenges.

An exhaustive architectural deep-dive into engineering an RFC 2812 compliant Internet Relay Chat server in raw C++98 at 1337 School (42 Network) — exploring non-blocking sockets, TCP stream buffering, poll() multiplexing, memory safety, and offensive security hardening.

An exhaustive architectural deep-dive into engineering an enterprise-grade, secure multi-container web infrastructure from scratch using Docker, Docker Compose, Nginx TLS, PHP-FPM, and MariaDB at 1337 School (42 Network).