PinnedJankhJankhTurning Two Low-Risk Vulnerabilities Into System Admin CompromiseLeveraging session fixation to bypass default same-site cookie protections7 min read·Mar 3, 2023----
PinnedJankhJankh0-Days and Tokens and Salts, Oh My! (An overview of my DEFCON AIV CTF Challenges)I wrote 5 CTF challenges for the Defcon 30 AI Village Capture The Flag, I thought I would write a blog post to talk about the solutions…12 min read·Sep 19, 2022----
JankhJankhStealing $100,000 at DEF CON with this one neat trick.At Defcon 31 I stumbled across the payment village. Knowing nothing about the space, I decided to give the workshop and CTF a try. The…11 min read·Aug 20, 2023----