https://cors.ws/blog/ Recent content in blog on cors.ws Hugo en-us Wed, 14 May 2025 00:00:00 +0200 https://cors.ws/blog/sekai-2025-hqli-me/ Wed, 14 May 2025 00:00:00 +0200 https://cors.ws/blog/sekai-2025-hqli-me/ turning HQL injection into code execution https://cors.ws/blog/sekai-2025-vite/ Wed, 14 May 2025 00:00:00 +0200 https://cors.ws/blog/sekai-2025-vite/ novel prototype pollution gadget in node.js 24 gives rce in vite preview server https://cors.ws/blog/sekai-2024-funny-lfr/ Tue, 27 Aug 2024 23:53:34 +0200 https://cors.ws/blog/sekai-2024-funny-lfr/ race condition in starlette FileResponse allows reading procfs files https://cors.ws/blog/sekai-2024-calcql/ Tue, 27 Aug 2024 00:53:34 +0200 https://cors.ws/blog/sekai-2024-calcql/ how to use monotonic aggregates in CodeQL https://cors.ws/blog/sekai-2024-lookup/ Tue, 27 Aug 2024 00:53:34 +0200 https://cors.ws/blog/sekai-2024-lookup/ path confusion between com.sun.net.httpserver.HttpServer and nginx, exploit JNDI injection in high level jdk usign new commons-scxml gadget https://cors.ws/blog/uiuctf-adminplz/ Thu, 27 Jul 2023 00:53:34 +0200 https://cors.ws/blog/uiuctf-adminplz/ dangling markup injection via log poisoning to bypass strict CSP and leak a session token https://cors.ws/blog/rootme-hardened-binary-4/ Tue, 25 Jul 2023 00:53:34 +0200 https://cors.ws/blog/rootme-hardened-binary-4/ exploiting a 32-bit ELF with full RELRO, stack canary, and NX via a format string vulnerability https://cors.ws/blog/htb-registry-two/ Mon, 24 Jul 2023 00:53:34 +0200 https://cors.ws/blog/htb-registry-two/ HTB machine involving Tomcat RCE, RMI path traversal, and a custom Java deserialization chain