InfoSec Engineer. Focusing on web application security.
Prologue GiveWP is one of the popular wordpress plugins to handle fundraising and donation with 100k+ installation. This plugin has main features like setting up donation forms, viewing details of donations/donors and generating a report. There is al...
Chall Description Initial Foothold When first visit the webpage, we get this view of some sort of maps : There is something interesting on the source page and on the JS files : view-source:http://slave2.ctf.arkavidia.id:10021/ <!doctype html> ...
What is Cross Site Request Forgery ? Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated. CSRF attacks specifically target state-changing re...