corpus.blog
41554 blogs · [ { "id": "01a087dd-b875-70e2-b615-5fc130e173c8", "title": "REGEXSS: How .* Turned Into over $6k in Bounties", "url": "https://sec.stealthcopter.com/regexss/", "published_at": "2025-09-24T07:30:11+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc130f86cba", "title": "Patchstack CTF: Sneaky", "url": "https://sec.stealthcopter.com/patchstack-ctf-sneaky/", "published_at": "2025-02-25T20:00:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc131b4bd2a", "title": "Patchstack CTF: Blocked", "url": "https://sec.stealthcopter.com/patchstack-ctf-blocked/", "published_at": "2025-02-25T12:00:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc1328e504c", "title": "Patchstack CTF: Cool Templates", "url": "https://sec.stealthcopter.com/patchstack-ctf-cool-templates/", "published_at": "2025-02-23T20:00:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc132aaf231", "title": "JupiterX Core: Chaining Limited Vulns from SVG to RCE", "url": "https://sec.stealthcopter.com/jupiterx-chaining-svg-to-rce/", "published_at": "2025-01-11T12:00:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc133583f69", "title": "WPML Multilingual CMS Authenticated Contributor+ Remote Code Execution (RCE) via Twig Server-Side Template Injection (SSTI)", "url": "https://sec.stealthcopter.com/wpml-rce-via-twig-ssti/", "published_at": "2024-08-21T08:30:55+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc133a602b4", "title": "Intigriti August 2024 CTF Defcon Challenge: Safe Notes", "url": "https://sec.stealthcopter.com/intigriti-august-2024-ctf/", "published_at": "2024-08-15T20:35:20+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc1343d9003", "title": "Splashing around in the shallow end: My adventure into Bug Bounty Hunting", "url": "https://sec.stealthcopter.com/splashing-around-in-the-shallow-end/", "published_at": "2024-07-22T19:45:11+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc1350776f9", "title": "Intigriti July 2024 CTF Challenge: Memo", "url": "https://sec.stealthcopter.com/intigriti-july-2024-ctf-challenge-memo/", "published_at": "2024-07-08T12:19:58+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc135203ae4", "title": "NahamCon CTF 2024: My Shop Disaster", "url": "https://sec.stealthcopter.com/nahamcon-ctf-2024-my-shop-disaster/", "published_at": "2024-05-27T12:56:01+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc136173d95", "title": "Unauthenticated RCE in Anti-Malware Security and Brute-Force Firewall GOTMLS WordPress Plugin CVE-2024-22144", "url": "https://sec.stealthcopter.com/cve-2024-22144/", "published_at": "2024-03-12T09:54:54+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc136b44996", "title": "Intigriti February CTF Challenge: Love Letter Storage", "url": "https://sec.stealthcopter.com/intigriti-february-ctf-challenge-love-letter-storage/", "published_at": "2024-02-22T00:01:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc136b7f803", "title": "CVE-2024-0685 Ninja Contact Forms Data Export SQLi", "url": "https://sec.stealthcopter.com/ninja-contact-forms/", "published_at": "2024-02-10T15:06:04+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13761517e", "title": "Intigriti December CTF Challenge: Smarty Pants", "url": "https://sec.stealthcopter.com/intigriti-december-challenge-smarty-pants/", "published_at": "2023-12-21T00:01:50+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc137c02194", "title": "CVE-2022-39841 Medusa's leaky WebSocket", "url": "https://sec.stealthcopter.com/cve-2022-39841/", "published_at": "2022-09-15T08:00:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc138b40ddc", "title": "dCTF - Just Take Your Time", "url": "https://sec.stealthcopter.com/dctf-just-take-your-time/", "published_at": "2021-05-17T06:29:51+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc138eda789", "title": "CVE-2021-31607 SaltStack Minion Privledge Escaltion in Snapper Module", "url": "https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion/", "published_at": "2021-04-17T10:40:52+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc139194d51", "title": "CVE-2020-28243 (2) SaltStack Minion Denial of Service via Argument Injection", "url": "https://sec.stealthcopter.com/cve-2020-28243-v2/", "published_at": "2021-03-23T20:00:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13989f42f", "title": "CVE-2020-28243 SaltStack Minion Local Privilege Escalation", "url": "https://sec.stealthcopter.com/cve-2020-28243/", "published_at": "2021-02-25T19:00:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13a364507", "title": "HTB CTF Write-up: Gunship", "url": "https://sec.stealthcopter.com/htb-ctf-write-up-gunship/", "published_at": "2020-12-10T13:02:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13ad1823b", "title": "HTB CTF Write-up: Cargo Delivery", "url": "https://sec.stealthcopter.com/htb-ctf-writeup-cargo-delivery/", "published_at": "2020-12-10T13:01:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13af5c1cd", "title": "HTB CTF Write-up: Cached Web", "url": "https://sec.stealthcopter.com/htb-ctf-writeup-cached-web/", "published_at": "2020-12-10T13:00:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13b1ddc1d", "title": "Metasploit Community CTF 2020 (Dec) Write-up: 5-of-clubs (port 8101)", "url": "https://sec.stealthcopter.com/metasploit-community-ctf-2020-dec-write-up-5-of-clubs-port-8101/", "published_at": "2020-12-07T21:01:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13c19b500", "title": "Metasploit Community CTF 2020 (Dec) Write-up: 7-of-spades (port 8888)", "url": "https://sec.stealthcopter.com/metasploit-community-ctf-2020-dec-write-up-7-of-spades-port-8888/", "published_at": "2020-12-07T21:01:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13c5db32b", "title": "Metasploit Community CTF 2020 (Dec) Write-up: 9-of-clubs (port 1337)", "url": "https://sec.stealthcopter.com/metasploit-community-ctf-2020-dec-write-up-9-of-clubs-port-1337/", "published_at": "2020-12-07T21:01:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13d303c36", "title": "Metasploit Community CTF 2020 (Dec) Write-up: ace-of-clubs (port 9009)", "url": "https://sec.stealthcopter.com/metasploit-community-ctf-2020-dec-write-up-ace-of-clubs-port-9009/", "published_at": "2020-12-07T21:01:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13dabb0b7", "title": "Metasploit Community CTF 2020 (Dec) Write-up: queen-of-hearts (port 9008 & 9010)", "url": "https://sec.stealthcopter.com/metasploit-community-ctf-2020-dec-write-up-queen-of-hearts-port-9008-9010/", "published_at": "2020-12-07T21:01:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13de461a5", "title": "Metasploit Community CTF 2020 (Dec)", "url": "https://sec.stealthcopter.com/metasploit-community-ctf-2020-dec/", "published_at": "2020-12-07T21:00:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13eb002d6", "title": "About Me", "url": "https://sec.stealthcopter.com/about/", "published_at": "2020-11-13T18:43:47+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc13f975b1f", "title": "New Metasploit Module: enum_containers", "url": "https://sec.stealthcopter.com/metasploit-1-2-3/", "published_at": "2020-08-06T10:10:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc14026f8ef", "title": "New Metasploit Module: docker_privileged_container_escape", "url": "https://sec.stealthcopter.com/docker_privileged_container_escape/", "published_at": "2020-08-04T10:15:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc140fe7375", "title": "Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)", "url": "https://sec.stealthcopter.com/deepce/", "published_at": "2020-07-31T18:59:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc14148e40c", "title": "Portdroid - Network Analysis Kit & Port Scanner", "url": "https://sec.stealthcopter.com/portdroid/", "published_at": "2020-06-15T19:54:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc1417c6f52", "title": "RootBeer - Root Detection Library for Android", "url": "https://sec.stealthcopter.com/rootbeer/", "published_at": "2020-02-08T21:04:00+00:00" }, { "id": "01a087dd-b875-70e2-b615-5fc14272fec2", "title": "Python UUEncode Vulnerability", "url": "https://sec.stealthcopter.com/python-uuencode-vulnerability/", "published_at": "2019-12-02T22:13:00+00:00" } ] posts Claim your blog
Back to sec.stealthcopter.com
Blog · corpus.blog/blogs/sec.stealthcopter.com/posts

sec.stealthcopter.com

sec.stealthcopter.com

2025

REGEXSS: How .* Turned Into over $6k in Bountiesoriginal ↗
24 Sept 2025
Patchstack CTF: Sneakyoriginal ↗
25 Feb 2025
Patchstack CTF: Blockedoriginal ↗
25 Feb 2025
Patchstack CTF: Cool Templatesoriginal ↗
23 Feb 2025
JupiterX Core: Chaining Limited Vulns from SVG to RCEoriginal ↗
11 Jan 2025

2024

WPML Multilingual CMS Authenticated Contributor+ Remote Code Execution (RCE) via Twig Server-Side Template Injection (SSTI)original ↗
21 Aug 2024
Intigriti August 2024 CTF Defcon Challenge: Safe Notesoriginal ↗
15 Aug 2024
Splashing around in the shallow end: My adventure into Bug Bounty Huntingoriginal ↗
22 Jul 2024
Intigriti July 2024 CTF Challenge: Memooriginal ↗
8 Jul 2024
NahamCon CTF 2024: My Shop Disasteroriginal ↗
27 May 2024
Unauthenticated RCE in Anti-Malware Security and Brute-Force Firewall GOTMLS WordPress Plugin CVE-2024-22144original ↗
12 Mar 2024
Intigriti February CTF Challenge: Love Letter Storageoriginal ↗
22 Feb 2024
CVE-2024-0685 Ninja Contact Forms Data Export SQLioriginal ↗
10 Feb 2024

2023

Intigriti December CTF Challenge: Smarty Pantsoriginal ↗
21 Dec 2023

2022

CVE-2022-39841 Medusa's leaky WebSocketoriginal ↗
15 Sept 2022

2021

dCTF - Just Take Your Timeoriginal ↗
17 May 2021
CVE-2021-31607 SaltStack Minion Privledge Escaltion in Snapper Moduleoriginal ↗
17 Apr 2021
CVE-2020-28243 (2) SaltStack Minion Denial of Service via Argument Injectionoriginal ↗
23 Mar 2021
CVE-2020-28243 SaltStack Minion Local Privilege Escalationoriginal ↗
25 Feb 2021

2020

HTB CTF Write-up: Gunshiporiginal ↗
10 Dec 2020
HTB CTF Write-up: Cargo Deliveryoriginal ↗
10 Dec 2020
HTB CTF Write-up: Cached Weboriginal ↗
10 Dec 2020
Metasploit Community CTF 2020 (Dec) Write-up: 5-of-clubs (port 8101)original ↗
7 Dec 2020
Metasploit Community CTF 2020 (Dec) Write-up: 7-of-spades (port 8888)original ↗
7 Dec 2020
Metasploit Community CTF 2020 (Dec) Write-up: 9-of-clubs (port 1337)original ↗
7 Dec 2020
Metasploit Community CTF 2020 (Dec) Write-up: ace-of-clubs (port 9009)original ↗
7 Dec 2020
Metasploit Community CTF 2020 (Dec) Write-up: queen-of-hearts (port 9008 & 9010)original ↗
7 Dec 2020
Metasploit Community CTF 2020 (Dec)original ↗
7 Dec 2020
About Meoriginal ↗
13 Nov 2020
New Metasploit Module: enum_containersoriginal ↗
6 Aug 2020
New Metasploit Module: docker_privileged_container_escapeoriginal ↗
4 Aug 2020
Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)original ↗
31 Jul 2020
Portdroid - Network Analysis Kit & Port Scanneroriginal ↗
15 Jun 2020
RootBeer - Root Detection Library for Androidoriginal ↗
8 Feb 2020

2019

Python UUEncode Vulnerabilityoriginal ↗
2 Dec 2019