Slipping past a single non-recursive ../ strip with a nested ....// sequence to read a file outside the served directory
Writeup for Blogler from LA CTF 2026. A Web challenge involving YAML anchor aliasing and post-validation mutation.
Writeup for WordPress Static Site Generator from Nullcon HackIM CTF 2026. A Web challenge involving Pongo2 SSTI via Path Traversal.
Writeup for Travel Playlist from PascalCTF 2026. A Web challenge involving Path Traversal.
