10
7月

ExploitGym Explained: 869 Real Vulnerabilities and AI That Actually Writes Exploits

5 min read
04
7月

Hands-On with OAuth Labs (Part 1): Exploiting Unstable Claims in Lab 01

7 min read
03
7月

Broken Crystals Field Notes 4: MCP Attack — Full Kill Chain from Unauthenticated Guest to admin Privilege-Escalation RCE

7 min read
03
7月

Broken Crystals Field Notes 3: eval SSJI to root RCE, and an XXE That Reads Files but Can't Do SSRF

5 min read
03
7月

Broken Crystals Field Notes 2: From a Single Query Parameter to a Root Reverse Shell

5 min read