Skip to content
Back to home

~/writeups

Write-ups.

How the findings and the flags actually happened: recon, mistakes and what I learned. Private report details stay private.

RSS feed

  1. UNESCO: three emails to a Hall of Fame

    A browser extension flagged an exposed configuration file on a UNESCO resource. Verified, reported on 7 June, listed in the Hall of Fame.

    Configuration exposureResponsible disclosure

    1 min read

  2. WHO Hall of Fame: when recon finds /env

    Plain subdomain enumeration and directory brute-forcing led to an exposed configuration endpoint on a World Health Organization admin portal.

    ReconInformation disclosureResponsible disclosure

    1 min read

  3. DCG Coimbatore CTF 2026: 12th of 230+, solo, no LLMs

    Playing solo under a no-LLM rule at DEF CON Group 91422, what the hard challenges exposed, and the full write-up of 21 challenges.

    CTFWrite-upDEF CON Group

    1 min read

Also on Medium.

medium.com/@subadevanc (opens in a new tab)
Esc
↑↓ move select