ArticleRunning ComfyUI on AMD GPUs with ROCm (Pop!_OS / Ubuntu)
Documented a clean, ROCm only setup for running ComfyUI on AMD GPUs. Covers installing ROCm, locking PyTorch to ROCm builds, blocking CUDA entirely,…
Knowledge base
Blog
Practical security research, write-ups, guides, and lessons learned.
- 203
- Entries
Explore
Blog Posts
Page 1 of 17
Article
ArticleSQL injection with filter bypass via XML encoding
Used UNION based SQL injection to bypass a WAF, extract usernames and passwords from the users table, and retrieve the administrator’s credentials. S…
ArticleDOM XSS in jQuery anchor href attribute sink using location.search source
Identified a DOM based XSS vulnerability in the feedback page caused by unsafe jQuery handling of the returnPath URL parameter. By injecting a javasc…
ArticleBlind SQL injection with out-of-band data exfiltration
Exploiting an asynchronous, blind SQL injection vulnerability via Out of Band (OAST) techniques, where the application's TrackingId cookie triggers a…
ArticleBlind SQL injection with out-of-band interaction
exploiting an asynchronous, blind SQL injection vulnerability in a tracking cookie via Out of Band (OOB) techniques. It uses Oracle's EXTRACTVALUE an…
ArticleBlind SQL injection with time delays and information retrieval
I think I already made this one time but I re done the lesson in order to keep the memory fresh
ArticleDOM XSS in innerHTML sink using source location.search
DOM XSS: untrusted location.search is written to innerHTML, enabling script execution. I tested <script alert("hello")</script and <img src=x onerror…
ArticleReflected XSS into HTML context with nothing encoded
Reflected XSS discovered in a search field where user input is rendered unencoded in the HTML response. Injecting a simple <script alert("hello")</sc…
ArticleStored XSS into HTML context with nothing encoded
Stored XSS in blog comments: user input is persisted and rendered into HTML with no sanitization or encoding. Submitting a payload like <svg/onload=a…
ArticleDeep dive: TCP, subnets, and Active Directory — the fundamentals a penetration tester must master
A deep dive into TCP/IP internals, CIDR math, packet reverse engineering, and Active Directory architecture. Focused on core networking concepts and…
ArticleBuilt a Microsoft 365 Email Viewer for my company
Standalone company project: a React + Tailwind Microsoft 365 Email Viewer using MSAL (OAuth2/PKCE) to sign in and fetch mail via Microsoft Graph. Cli…
ArticleImprovements during execution of my bug bounty framework
XsiSec Framework 2k improvements adds reachability checks, Katana based JavaScript harvesting, and high/low hanging fruit ranking to turn noisy subdo…