https://chengo.dev/ https://chengo.dev/blog/ https://chengo.dev/blog/ai_red_teaming_htb/ 2026-09-03T12:15:00.000Z https://chengo.dev/blog/cartp_opinion/ 2026-06-15T15:15:00.000Z https://chengo.dev/blog/crtp_opinion/ 2025-11-07T16:30:00.000Z https://chengo.dev/blog/cwp_opinion/ 2026-01-26T18:15:00.000Z https://chengo.dev/blog/personal_hacking_ai/ 2025-10-21T16:30:00.000Z https://chengo.dev/certs/ https://chengo.dev/connect/ https://chengo.dev/cv/ https://chengo.dev/projects/ https://chengo.dev/writeups/ https://chengo.dev/writeups/2fa-broken-logic/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/2fa-simple-bypass/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/api-sec_dvwa_walkthrough/ 2025-12-20T11:00:01.000Z https://chengo.dev/writeups/authorisation-bypass_dvwa_walkthrough/ 2025-12-20T11:00:04.000Z https://chengo.dev/writeups/blind-sqli_dvwa_walkthrough/ 2025-12-20T11:00:11.000Z https://chengo.dev/writeups/broken-brute-force-ip-block/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/brute-force_dvwa_walkthrough/ 2025-12-20T11:00:18.000Z https://chengo.dev/writeups/brute-forcing-stay-logged-in-cookie/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/command-injection_dvwa_walkthrough/ 2025-12-20T11:00:17.000Z https://chengo.dev/writeups/cors-basic-origin-reflection/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/cors-trusted-insecure-protocols/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/cors-trusted-null-origin/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/cryptography_dvwa_walkthrough/ 2025-12-20T11:00:02.000Z https://chengo.dev/writeups/csp-bypass_dvwa_walkthrough/ 2025-12-20T11:00:06.000Z https://chengo.dev/writeups/csrf_dvwa_walkthrough/ 2025-12-20T11:00:16.000Z https://chengo.dev/writeups/dom-xss_dvwa_walkthrough/ 2025-12-20T11:00:09.000Z https://chengo.dev/writeups/dvwa_walkthrough/ 2025-12-20T11:00:19.000Z https://chengo.dev/writeups/file-inclusion_dvwa_walkthrough/ 2025-12-20T11:00:15.000Z https://chengo.dev/writeups/file-upload_dvwa_walkthrough/ 2025-12-20T11:00:14.000Z https://chengo.dev/writeups/insecure-captcha_dvwa_walkthrough/ 2025-12-20T11:00:13.000Z https://chengo.dev/writeups/js-attacks_dvwa_walkthrough/ 2025-12-20T11:00:05.000Z https://chengo.dev/writeups/offline-password-cracking/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/open-redirect_dvwa_walkthrough/ 2025-12-20T11:00:03.000Z https://chengo.dev/writeups/password-brute-force-via-password-change/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/password-reset-broken-logic/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/password-reset-poisoning-via-middleware/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/path-traversal-sequences-blocked-absolute-path-bypass/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/path-traversal-sequences-stripped-non-recursively/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/path-traversal-sequences-stripped-superfluous-url/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/path-traversal-simple-case/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/path-traversal-validation-file-extension-null-byte-bypass/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/path-traversal-validation-start-path/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/portswigger_walkthrough/ 2026-08-31T08:30:01.000Z https://chengo.dev/writeups/reflected-xss_dvwa_walkthrough/ 2025-12-20T11:00:08.000Z https://chengo.dev/writeups/sqli_dvwa_walkthrough/ 2025-12-20T11:00:12.000Z https://chengo.dev/writeups/ssrf-basic-against-backend-system/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/ssrf-basic-against-local-server/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/ssrf-blacklist-input-filter/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/ssrf-blind-outofband-detection/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/ssrf-bypass-open-redirection/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/stored-xss_dvwa_walkthrough/ 2025-12-20T11:00:07.000Z https://chengo.dev/writeups/username-enum-account-lock/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/username-enum-different-responses/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/username-enum-response-timing/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/username-enum-subtly-different-responses/ 2026-06-28T11:30:00.000Z https://chengo.dev/writeups/weak-ids_dvwa_walkthrough/ 2025-12-20T11:00:10.000Z https://chengo.dev/writeups/web-llm-ai-agents-destructive-actions/ 2026-08-31T08:30:00.000Z https://chengo.dev/writeups/web-llm-ai-agents-exfiltrate-info/ 2026-08-31T08:30:00.000Z https://chengo.dev/writeups/web-llm-ai-agents-trigger-secondary-vulns/ 2026-08-31T08:30:00.000Z https://chengo.dev/writeups/web-llm-apis-excessive-agency/ 2026-08-31T08:30:00.000Z https://chengo.dev/writeups/web-llm-bypassing-ai-scanner-defenses/ 2026-08-31T08:30:00.000Z https://chengo.dev/writeups/web-llm-exploiting-vulns-llm-apis/ 2026-08-31T08:30:00.000Z https://chengo.dev/writeups/web-llm-indirect-prompt-injection/ 2026-08-31T08:30:00.000Z https://chengo.dev/writeups/websockets-cross-site-websocket-hijacking/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/websockets-manipulating-handshake/ 2026-08-25T18:00:00.000Z https://chengo.dev/writeups/websockets-manipulating-messages/ 2026-08-25T18:00:00.000Z