Welcome to my Blog

About Me

kiro6 - OverviewGitHub

Bug Bounty

Account Take over due XSS with HttpOnly flag set ?! How did i get that

HTTP-Only Sessions: No Problem? ATO Still Lurks via XSS!Medium

CTFs

BlackHat CTF 2024 web writeup

Black Hat MEA 2024 Web write-ups | Kiro Maged's Blog

Reverse Android Memory Creation: BlockCTF - Protect Your API Key

Reverse Android Memory Creation

HTB University CTF 2023 Web writeups

HTB University CTF 2023 Web writeupsMedium

Exploiting Server-Side Request Forgery (SSRF) Through Image Validation Bypass: ICMTC CTF 2024

Exploiting Server-Side Request Forgery (SSRF) Through Image Validation BypassMedium