Offensive security writeups — RCE, XXE, injection, and the occasional CTF.https://blog.noob.ninja/https://httpvoid.com/Apple-RCE.mdhttps://httpvoid.com/Apple-RCE.mdRCE · CriticalFri, 15 Jan 2021 00:00:00 GMThttps://blog.noob.ninja/posts/demystifying-the-server-side/https://blog.noob.ninja/posts/demystifying-the-server-side/Server-Side · TalkWed, 02 Sep 2020 00:00:00 GMThttps://blog.noob.ninja/posts/spilling-local-files-via-xxe-when/https://blog.noob.ninja/posts/spilling-local-files-via-xxe-when/XXE · HighSat, 07 Dec 2019 00:00:00 GMThttps://blog.noob.ninja/posts/exploiting-a-tricky-blind-sql-injection-inside-limit-clause/https://blog.noob.ninja/posts/exploiting-a-tricky-blind-sql-injection-inside-limit-clause/SQLi · HighSun, 21 Jul 2019 00:00:00 GMThttps://hackerone.com/reports/415501https://hackerone.com/reports/415501CTF · CTFFri, 28 Sep 2018 00:00:00 GMThttps://blog.noob.ninja/posts/escalating-low-severity-bugs-to-high-severity/https://blog.noob.ninja/posts/escalating-low-severity-bugs-to-high-severity/XSS · MediumFri, 20 Jul 2018 00:00:00 GMThttps://blog.noob.ninja/posts/local-file-read-via-xss-in-dynamically-generated-pdf/https://blog.noob.ninja/posts/local-file-read-via-xss-in-dynamically-generated-pdf/LFR · HighWed, 08 Nov 2017 00:00:00 GMThttps://blog.noob.ninja/posts/story-of-a-parameter-specific-xss/https://blog.noob.ninja/posts/story-of-a-parameter-specific-xss/XSS · LowTue, 19 Sep 2017 00:00:00 GMT