One WebSocket, one Shell: CVE-2026-39987 Explained
How a missing auth check on Marimo's terminal endpoint gives you an interactive shell, and what it took to build a decent client for it
Aug 14, 202610 min read10
Command Palette
Search for a command to run...
#hacking
Articles tagged with #hacking
Malicious Github Repository Analysis
Malware in Github repository
Jun 10, 20266 min read66
Hack the Box - Season 10 - Season of the Underground
Season 10 - Season of the Underground This was a rough season. Moved to a new property towards the end of the season which dropped me in the rankings. Surprised that I bumped back up with just one box
May 31, 20264 min read6
Pathfinder
Automated Recon Tool
Feb 24, 20262 min read17
Hack The Box - Season 9 - Gacha
Season 9 - Gacha
Jan 24, 20261 min read12
Hack The Box: PermX
Writeup - Season 5 - Easy
Jan 9, 20268 min read5