HTB: SmartHire
Exploiting Python's pickle deserialization in MLflow and abusing a poorly configured site.addsitedir() for arbitrary code execution.
Medium Read ↗
Online
HELLO,
I’M SAIF.
WELCOME IN.
I build things, explore various security domains, and share what I learn along the way. Have a look around.
Latest signals
Recently published
Recent projects and challenge walkthroughs.
HTB: Cohort
An easy-difficulty machine with an SSRF vulnerability that exposes internal services and is running an older version of PackageKit.
Easy Read ↗
HTB: Orion
A very simple machine with vulnerable versions of Craft CMS and Telnet.
Easy Read ↗