Tag
PHP
2
posts
Web Security
Web Security
CyCTF 2023 Challenge: A Whitebox Walkthrough of "The Secret App v1.0"
A whitebox walkthrough of the CyCTF 2023 'Secret App v1.0' challenge — chaining second-order blind SQL injection, a CAPTCHA logic flaw, and insecure session handling into a full admin account takeover.
Hussein Misbah
·
Jun 16, 2026
·
14 min
IoT Security
IoT Security
Remote Code Execution on SolarView Compact Firmware: A Technical Walkthrough
In this post, we demonstrate how we achieved Remote Code Execution (RCE) on a web server connected to a solar system monitoring firmware: SolarView Compact. This walkthrough covers four key stages: Firmware Extraction, Reconnaissance, Code Review, and Exploitation.
Khaled Emad
·
Jun 16, 2026
·
5 min