THM: Towel on the Sunbed
Web challenge exploiting a TOCTOU race condition in a daily reward-claim endpoint using Burp Suite’s parallel Repeater requests to unlock a restricted vault.
Express.js
THM: Do Not Disturb
Linux boot2root combining a NoSQL authentication bypass, Node.js SSTI, Node inspector abuse, and disk-group privilege escalation.