Medium

Febin

Febin

·

Apr 1

CVE-2026–24018: A Logic flaw to Local Privilege Escalation 0day $$$

My first CVE of 2026. A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4…

CVE-2026–24018: A Logic flaw to Local Privilege Escalation 0day $$$

Febin

·

Jun 15, 2024

Pwn Challenges writeup — RVCExIITB CTF

Hello PWNers, This is a walkthrough article for the binary exploitation/PWN challenges from RVCExIITB CTF competition.

Pwn Challenges writeup — RVCExIITB CTF

Febin

·

Jan 17, 2024

I found 2 Zero-Days in popular Linux distros that includes Mint, Kali, Parrot

This is the story on how I found 2 Zero-Day Vulnerabilities (4 CVEs). The flaws affected a list popular Linux Desktop distros that…

I found 2 Zero-Days in popular Linux distros that includes Mint, Kali, Parrot

Febin

·

Nov 6, 2023

Decode-E-Cyber CTF 2023 — PWN/Binary Exploitation Writeup — 1

I participated in Decode-E-Cyber CTF 2023 conducted by OWASP VIT Bhopal and we were the Winners! Team Pegasus with 1350 points. We were…

Decode-E-Cyber CTF 2023 — PWN/Binary Exploitation Writeup — 1

Febin

·

Nov 6, 2023

Decode-E-Cyber CTF 2023 — PWN/Binary Exploitation Writeup — 1

I participated in Decode-E-Cyber CTF 2023 conducted by OWASP VIT Bhopal and we were the Winners! Team Pegasus with 1350 points. We were…

Decode-E-Cyber CTF 2023 — PWN/Binary Exploitation Writeup — 1

Febin

·

Nov 2, 2023

Malware Analysis Challenges from Huntress CTF 2023 — Part 1 — ChainSaw Massacre

Huntress CTF is just over, it was a fun ride for 30 days. This blog is a collection of writeups of the Malware Challenges that I solved in…

Malware Analysis Challenges from Huntress CTF 2023 — Part 1 — ChainSaw Massacre

Febin

·

Sep 22, 2023

CVE-2023–39612: CSP bypasss + XSS to achieve Admin Account Takeover + Remote Command Execution in…

My 5th CVE: CVE-2023–39612

CVE-2023–39612: CSP bypasss + XSS to achieve Admin Account Takeover + Remote Command Execution in…

Febin

·

Mar 28, 2022

Post-Exploitation with HackBrowserData.

Steal saved passwords, cookies, bookmarks, and history from the victim’s browser.

Post-Exploitation with HackBrowserData.

Febin

·

Mar 22, 2022

CVE-2021–40662 Chamilo LMS 1.11.14 RCE

This is Febin, a Security Researcher. This article is about my third CVE that I got for finding a Remote Code Execution in a popular…

Febin

·

Jan 28, 2022

Tiny File Manager Authenticated RCE

Introduction

Tiny File Manager Authenticated RCE

Febin

Febin

CEH | CEH(Master) | eJPT | OSCP | CRTP |CyberSecurity Enthusiast | Security Researcher | Bug Hunter | Always seeks for knowledge

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech