Siahaan.

A logbook for writeups, technically?

Security research, writeups and notes by Chrisando ‘Siahaan’ Ryan, explained step by step with the code that matters.

Black Hat Asia 2020 Arsenal speaker Talk 
               ▄▄▄████▄▄▄
            ▄██████▀▀██████▄
          ▄█████        █████▄
         ██████▀        ▀██████
        ████████▄▄▄▄▄▄▄▄████████
       ▄███▄                ▄███▄
       ██████████████████████████
       ▀████████████████████████▀
        ████████████████████████
         ██████▀▀▀▀██▀▀▀▀██████
          ▀█▀              ▀█▀

██   ██           ██     ██         ██
██▄  ██ ▄▄▄   ▄▄▄ ██ ▄   ██▄  ▄▄▄  ▀██▀
██ █ ██  ▄██ ██   ██▀    ██ █  ▄██  ██
██▄▀ ██ ▀▄██ ▀█▄▄ ██▀▄   ██ █ ▀▄██  ▀█▄

           A S I A   2 0 2 0

Latest

Given a website, where a person can login and register. Both are irrelevant to the challenge, so I will cut the chase. The other feature, the ‘relevant’ feature of the challenge, is a feature that allows user to write a note and even send the note to an...

WebXSS 6 min read

All posts

2020

  1. TJCTF2020 - Admin Secrets WebXSS 6 min
  2. Hilltop CTF 2020 - What Is The Deadly Bug Here? WebHash length extensionCommand injectionMy challenges 4 min
  3. Hilltop CTF 2020 - Tornado WebPRNG crackingMy challenges 9 min
  4. Hilltop CTF 2020 - Stock Marked WebDeserializationMy challenges 3 min
  5. Hilltop CTF 2020 - Memoir WebSSTIMy challenges 3 min
  6. Hilltop CTF 2020 - Heist To The Port WebCookie tamperingMy challenges 7 min