Long-form notes from CTF challenges and bug-hunting sessions. Each one is the version I wish I'd had when I was stuck. Note: writeups are written in Vietnamese because my English writeup skills are still a work in progress.
blackbox - GraphQL
blackbox - path traversal
blackbox - requests
whitebox - Zip Slip
blackbox
whitebox - SSRF
blackbox - JWT
Blackbox - SSRF
Blackbox - XSS
Blackbox - Unrestricted File Upload -> RCE
Blackbox - SSTI