Tag: web-security

All the articles with the tag "web-security".

• Ghost Whisper - Command Injection via Unicode Normalization

  5 Dec, 2025

  Writeup for the Ghost Whisper challenge on YesWeHack demonstrating a Command Injection vulnerability via Unicode normalization bypass.

• AppSecMaster - Blind XSS to Privilege Escalation

  19 Nov, 2025

  Writeup documenting a Blind XSS vulnerability in a mini blog application from AppSecMaster, leading to privilege escalation.

• JinjaCare - Server-Side Template Injection

  19 Nov, 2025

  Writeup for the Very Easy JinjaCare HTB Challenge demonstrating Server-Side Template Injection in Jinja2.