machiavelli@blog:~# echo 'h3ll0, fr1end!'

Hunting on Microsoft SharePoint | The art of manipulation

4 minute read Published: 2024-04-12

I'll discuss how I discovered that all users' PII was leaked via the Microsoft SharePoint API.

HackTheBox | 0xBOverchunked

2 minute read Published: 2024-02-27

HackTheBox 0xBOverchunked challenge write-up. Are you able to retrieve the 6th character from the database?