Party Cat0%

RCE

How JSON-JavaScript Discrepancy Leads to RCE (Lodash)

26/01/26

How JSON-JavaScript Discrepancy Leads to RCE (Lodash)

Official Writeup: gap | 0xL4ugh v5

Next.js DNS Rebinding, Python CRLF & pdfkit Injection

25/01/26

Next.js DNS Rebinding, Python CRLF & pdfkit Injection

Official Writeup: pdf.exe | 0xL4ugh v5

Chaining 6 Bugs to RCE

18/09/25

Chaining 6 Bugs to RCE

Official Writeup: Full Stack Disaster | ConnectorsCTF 2025