HackTheBox - Web Challenge: ExpressionalRebel

Write up for the HackTheBox web challenge called ExpressionalRebel Expressional Rebel was a very entertaining medium web challenge, the solution involved exploiting a url Uconfusion vulnerability along with a regex injection, something I believe most have not tinkered with (at least it wasn’t the case for me!) The vulnerable application was written in NodeJS, in this case we are provided the source code, which was crucial for this kind of challenge or it would’ve been pretty insane to solve!...

April 14, 2023 · 6 min · 1078 words · Me

Machine Learning Security Evasion Competition

This blogpost contains the process and solution which got me 2nd place in the ML Security Evasion Competition sponsored by Adversa AI, CUJO AI, and Robust Intelligence. The Phishing Challenge The challenge I focused on in this competition was their phishing detection evasion challenge. The goal of the challenge was to evade 8 machine learning models designed to detect phishing pages while maintaining the look of the pages pixel perfect....

September 29, 2022 · 6 min · 1142 words · Me