https://mfkrypt.github.io/blog Recent Posts en-us ammarsuper21@gmail.com (mfkrypt) ammarsuper21@gmail.com (mfkrypt) Thu, 10 Sep 2026 00:00:00 GMT https://mfkrypt.github.io/blog/htb/challenges/web/screencrack https://mfkrypt.github.io/blog/htb/challenges/web/screencrack This challenge has an application that restricts literal IPv4 and local addresses but has a flaw in validating the resolved address was a loopback. Thus, resulting in SSRF talking to the Redis backend using the Gopher protocol. The next step was to leverage Laravel Queues to exploit a command injection vulnerability leading to insecure deserialization Thu, 10 Sep 2026 00:00:00 GMT ammarsuper21@gmail.com (mfkrypt) challengesSSRFlaravellaravel-queuesrediscommand-injectionInsecure-deserialization