Category Index

• Pentest 3
• Cheatsheet 3
• Programming 5
• Ctf 76
• Web exploitation 3
• Reverse 1
• Algorithm 4
• Kuliah 1
• Hackthebox 3
• Cve 1
• Bugbounty 3
• Ctf 1
• Bugbounty 2

Pentest

• Report Lomba Pentest Universitas JemberDecember 22, 2014
• Install De-ice for Virtual Hacking LabSeptember 29, 2014
• Basic Linux Privilage EscalationJuly 17, 2014

Cheatsheet

• Python CheatsheetDecember 09, 2014
• SSTI MindMapsJuly 17, 2014
• SSTI MindMapsJuly 17, 2014

Programming

• Jollybeoj: 18-Duel MautAugust 03, 2016
• Latihan Soal C Part 3December 04, 2014
• Latihan Soal C Part 2November 18, 2014
• Latihan Soal C Part 1November 16, 2014
• Bermain Dengan Bash #1July 17, 2014

Ctf

• Cyberjawara 2023 Web WriteupDecember 04, 2023
• HackerOne H1-2006 2020 CTF WriteupJune 01, 2020
• Writeup Secret Note Keeper (xs-leaks) Facebook CTF 2019July 03, 2019
• Writeup Hackerone 50M CTF H1 702March 27, 2019
• Arkavidia 5: Fancafe LoonaFebruary 14, 2019
• Hacktoday Quals 2018 - LegcounterAugust 05, 2018
• Nuitduhack Quals 2018: PixEditor - 350ptsApril 01, 2018
• Nuitduhack Quals 2018: CoinGame - 200ptsApril 01, 2018
• Angstrom CTF 2018 : Web ChallengesMarch 24, 2018
• Websec.fr babysteps: Level 04 - 1ptsMarch 22, 2018
• Websec.fr babysteps: Level 01 - 1ptsMarch 22, 2018
• CSAW CTF 2017: LittleQuery - 200September 18, 2017
• BeeFest CTF 2017: WriteupsAugust 21, 2017
• SecurityFest CTF 2017 : UnderconstructionJune 02, 2017
• SecurityFest CTF 2017 : Freddy Vs JSONJune 02, 2017
• SecurityFest CTF 2017 : A Temple JestJune 02, 2017
• BitcointCTF 2017: WriteupsMarch 23, 2017
• SQLInjection Challenges Writeup: Level 1 - 8March 20, 2017
• FIT FUNFEST 2017 : EncryptedELFMarch 16, 2017
• FIT FUNFEST 2017 : ProxyMarch 16, 2017
• XSS Appspot Writeup: Level 1 - 5January 31, 2017
• AkiCTF WriteupsJanuary 30, 2017
• ITRACE 2016 : WriteupsOctober 10, 2016
• Hitcon 2016 : Secure PostOctober 10, 2016
• Hitcon 2016 : Are you richOctober 10, 2016
• Pwnerrank CTF 2016 : Web ChallengesSeptember 14, 2016
• Idsecconf CTF 2016 : Webwob - 100August 29, 2016
• Idsecconf CTF 2016 : Signal - 150August 29, 2016
• Idsecconf CTF 2016 : Sequence - 100August 29, 2016
• Idsecconf CTF 2016 : Kopi - 50August 29, 2016
• Idsecconf CTF 2016 : Headshoot - 200August 29, 2016
• Idsecconf CTF 2016 : Bit - Reverse 100ptsAugust 29, 2016
• Compfest CTF 2016 : Maze - Web 90PtsAugust 27, 2016
• Cyber Jawara 2016 : Web Info - 50PtsAugust 25, 2016
• Gemastik CTF 2016 : RSA Factorization - 100August 15, 2016
• Gemastik CTF 2016 : Python Server - 100August 15, 2016
• Gemastik CTF 2016 : Power Plant - 125August 15, 2016
• Gemastik CTF 2016 : Malware Scanning - 125August 15, 2016
• Gemastik CTF 2016 : Lottery Machine - 125August 15, 2016
• Gemastik CTF 2016 : Java Authentication - 50August 15, 2016
• Gemastik CTF 2016 : Intranet Maintenance - 125August 15, 2016
• Gemastik CTF 2016 : Insider Threat - 150August 15, 2016
• Gemastik CTF 2016 : Incident Analysis - 100August 15, 2016
• Gemastik CTF 2016 : Evote System - 150August 15, 2016
• Gemastik CTF 2016 : Encrypted Picture - 75August 15, 2016
• Gemastik CTF 2016 : E-Government Repository - 75August 15, 2016
• Gemastik CTF 2016 : Classic Crypto - 50August 15, 2016
• Gemastik CTF 2016 : Can You See Mee - 50August 15, 2016
• Gemastik CTF 2016 : Administrator Login - 50August 15, 2016
• IceCTF 2015: Statistics - Programming 50September 22, 2015
• IceCTF 2015: Logoventures 2 Reloaded - Forensic 40ptsSeptember 22, 2015
• IceCTF 2015: Bomb - Web 40ptsSeptember 22, 2015
• EkoParty Pre-CTF 2015: Crypto50September 16, 2015
• EkoParty Pre-CTF 2015: Crypto 25September 16, 2015
• IceCTF 2015: WriteupsSeptember 04, 2015
• SchoolCTF 2014 : Unusual redirection 300ptsMay 04, 2015
• SchoolCTF 2014 : Stored Pass 100ptsMay 04, 2015
• SchoolCTF 2014 : Shop of goodness 100ptsMay 04, 2015
• SchoolCTF 2014 : Tacticus abilitus 100ptsMay 04, 2015
• SchoolCTF 2014 : Strange spam 100ptsMay 04, 2015
• SchoolCTF 2014 : School Incident 150ptsMay 04, 2015
• SchoolCTF 2014 : Tricky Authorization 200ptsMay 04, 2015
• SchoolCTF 2014 : Weird Selfie 100ptsMay 04, 2015
• SchoolCTF 2014 : Hidden File 200ptsMay 04, 2015
• Seccon CTF 2014: Reverseit - Binary 100ptsDecember 21, 2014
• Seccon CTF 2014: Get The Key - Forensic 100ptsDecember 21, 2014
• Seccon CTF 2014: Easy Cipher - Crypto 100ptsDecember 21, 2014
• Seccon CTF 2014: Choose the number - Programming 100PtsDecember 21, 2014
• Seccon CTF 2014: Get The Key.txt - Forensic 100PtsDecember 19, 2014
• Seccon CTF 2014: Bleeding “Heartbleed” - Web 300 ptsDecember 09, 2014
• Seccon CTF 2014: REA-JUU WATCH Web 200ptsDecember 09, 2014
• Seccon CTF 2014: The Flag Awakens - QR 300ptsDecember 09, 2014
• Seccon CTF 2014: Get curious “FTP” server - Network 300ptsDecember 09, 2014
• Seccon CTF 2014: Jspuzzle - Web 200ptsDecember 09, 2014
• Seccon CTF 2014: Welcome to SECCON CTFDecember 09, 2014
• Sharif CTF: Mongo Db InjectionOctober 21, 2014

Web exploitation

• Penjelasan PHP Object Injection Via UnserializeOctober 01, 2016
• Multiple Vulnerability xEpan 1.0.4November 28, 2014
• Exploitasi EL InjectionOctober 26, 2014

Reverse

• Belajar Reversee EngineeringNovember 18, 2014

Algorithm

• Review 2-3 TreeJune 16, 2015
• Review Deap TreeJune 16, 2015
• Review Red Black TreeJune 16, 2015
• Pengenalan Binary Search TreeJune 04, 2015

Kuliah

• Rangkuman UTSNovember 09, 2016

Hackthebox

• Writeup Hackthebox - SenseMarch 25, 2018
• Writeup Hackthebox - EnterpriseMarch 18, 2018
• Writeup Hackthebox - ValentineMarch 09, 2018

Cve

• Monstra CMS - 3.0.4 Login Rate Limiting BypassApril 01, 2018

Bugbounty

• Open redirect -> Account Takeover pada bukalapak.comJuly 14, 2020
• How I Hack Tokopedia (3rd server) with Object de-SerializationNovember 21, 2018
• Improper Access Control & XSS on seller.tokopedia.comNovember 14, 2018

Ctf

• Writeup Nahamcon 2021 CTF - Web ChallengesMarch 15, 2021

Bugbounty

• Popping Android Vulnerabilities From Notification to WebView XSSOctober 12, 2024
• Got Access To Dota 2 Admin Panel By Exploiting In-Game FeatureMarch 31, 2022