HieuPenguinnn Blog
Home CVE Write-up About
Home
CVE
Write-up
About
Type a keyword to search posts
HieuPenguinnn

HieuPenguinnn

CVE & CTF writeups by HieuPenguinnn

41
Posts
10
CVE
31
CTF

Categories

├── CVE (10) │ ├── Broken Access Control (6) │ ├── Information Disclosure (2) │ ├── IDOR (2) │ ├── Webhook Forgery (2) │ ├── SQL Injection (1) │ ├── Payment Bypass (1) │ ├── Stored XSS (1) │ ├── Price Tampering (1) │ └── Account Takeover (1) └── CTF (31) ├── GPNCTF 2026 (8) ├── PTITCTF Quals 2026 (7) ├── TJCTF 2026 (6) ├── UMassCTF 2026 (3) ├── UTCTF 2026 (3) ├── OmniCTF 2026 (2) └── SekaiCTF 2026 (2)

Random Picks

TJCTF2026-web/Vibed Intranet Part 1&2 PTIT Portfolio Renderer Palworld Mod UMassCTF2026-BrOWSER BOSS FIGHT CVE-2026-57408 - Peach Payments Gateway Payment Status Forgery via Unauthenticated Webhook

UTCTF 2026 (3 challenges)

UTCTF 2026

UTCTF2026-Break the Bank

CTF writeup - Break the Bank (UTCTF 2026)

Read
CTF Web UTCTF
UTCTF 2026

UTCTF2026-Crab Mentality

CTF writeup - Crab Mentality (UTCTF 2026)

Read
CTF Web UTCTF
UTCTF 2026

UTCTF2026-Time to Pretend

CTF writeup - Time to Pretend (UTCTF 2026)

Read
CTF Web UTCTF
HieuPenguinnn

HieuPenguinnn

CVE & CTF writeups by HieuPenguinnn

41
Posts
10
CVE
31
CTF

Categories

├── CVE (10) │ ├── Broken Access Control (6) │ ├── Information Disclosure (2) │ ├── IDOR (2) │ ├── Webhook Forgery (2) │ ├── SQL Injection (1) │ ├── Payment Bypass (1) │ ├── Stored XSS (1) │ ├── Price Tampering (1) │ └── Account Takeover (1) └── CTF (31) ├── GPNCTF 2026 (8) ├── PTITCTF Quals 2026 (7) ├── TJCTF 2026 (6) ├── UMassCTF 2026 (3) ├── UTCTF 2026 (3) ├── OmniCTF 2026 (2) └── SekaiCTF 2026 (2)

Random Picks

TJCTF2026-web/Vibed Intranet Part 1&2 CVE-2026-54840 - Newsletters Unauthenticated Subscriber Management Account Takeover Độ Mixi GPNCTF2026-Pharry GPNCTF2026-Secure Secretpickle
10 CVE 31 CTF writeups 41 posts
© 2026 HieuPenguinnn | Powered by Astro & Tailwind | Theme by santisify
Home CVE Write-up About