https://awwfensive.github.io/notes/Aniket’s research notebook: experiments, CTF write-ups, security tooling observations, and lessons from testing software.en-UShttps://awwfensive.github.io/container-escape-from-enumeration-to-host-root/https://awwfensive.github.io/container-escape-from-enumeration-to-host-root/Mon, 10 Nov 2025 11:51:55 +0530A practical note on container boundaries and the configurations that commonly collapse them.https://awwfensive.github.io/breaking-authentication-bcrypt-truncation-email-normalization/https://awwfensive.github.io/breaking-authentication-bcrypt-truncation-email-normalization/Sat, 25 Oct 2025 11:51:55 +0530How bcrypt's 72-byte limit and inconsistent email normalization combined into a CTF authentication bypass.https://awwfensive.github.io/exploiting-symlink-upload-and-session-forgery/https://awwfensive.github.io/exploiting-symlink-upload-and-session-forgery/Mon, 01 Sep 2025 00:00:00 +0000Chaining symlink upload, secret disclosure, session forgery, and path traversal in a CTF challenge.