PwnSec CTF 2026
PwnSec CTF 26: two easy web solves, a boolean blind SQLi built on a PHP type-confusion crash, and a pickle sandbox escape using OBJ instead of REDUCE
Youssef Kessentini
Security researcher & CTF player. Escalating privileges one machine at a time.
Announcement
🚩 New writeups every week! HTB machines, CTF challenges, and more.
Recent Posts
Tags
HackTheBoxWindowsActive DirectoryDeleted ObjectsbloodyADSMBVS CodeMalicious ExtensionCTFWebForensicsOSINTMiscJWTSteganographyPythonLinuxCVE-2026-23744MCPJam InspectorUnauthenticated RCEJupyterLabWebSocketHardcoded SecretsPrivilege EscalationSQL InjectionCVE-2024-51482CVE-2025-60787ZoneMindermotionEyeCommand InjectionDefault CredsCredential CrackingPortswiggerWeb SecurityPath TraversalLFIBrute ForcePDF InjectionWordPressStored XSS
Website Info
Article Count :
16
Unique Visitors :
Page Views :
Last Update :