https://enigma522.github.io/tags/ctf/Recent content in CTF on Enigma WriteupsHugoenmohamedmasmoudi745@gmail.com (Mohamed Masmoudi)mohamedmasmoudi745@gmail.com (Mohamed Masmoudi) Made with 🧠 and ☕ by Enigma | <a href="https://creativecommons.org/licenses/by-nc/4.0/" target="_blank" rel="noopener">CC BY-NC 4.0</a>Fri, 21 Nov 2025 00:00:00 +0000https://enigma522.github.io/posts/articles/nuclei/Fri, 21 Nov 2025 00:00:00 +0000mohamedmasmoudi745@gmail.com (Mohamed Masmoudi)https://enigma522.github.io/posts/articles/nuclei/A beginner-friendly guide to using Nuclei, writing custom XSS fuzzing templates, and integrating it with Burp Suite.https://enigma522.github.io/posts/ctf/gitbad-l3ak/Mon, 14 Jul 2025 00:00:00 +0000mohamedmasmoudi745@gmail.com (Mohamed Masmoudi)https://enigma522.github.io/posts/ctf/gitbad-l3ak/This is my write-up for GitBad one of the web challenges in L3ak CTF. It walks through exploiting an SSRF via Git submodule URLs, bypassing MongoDB filters with $facet and $lookup, and chaining the attack with Varnish caching to exfiltrate the flag.