Skip to content

Instantly share code, notes, and snippets.

View dvnblj's full-sized avatar
:electron:

Divine B. dvnblj

:electron:
10 followers · 11 following
View GitHub Profile
@dvnblj
dvnblj / GQL-IDOR.md
Last active June 27, 2026 17:37
The writeup shows a disclosed report on how I was able to have unauthorized chat data access of another user.

Cross-User Message Traversal via Unvalidated GraphQL Relation (IDOR)

Severity: Medium
Category: A01:2021-Broken Access Control
Status: Fixed

What Happened

@dvnblj
dvnblj / HTB-CobbleStone.md
Last active June 20, 2026 23:04
A brief walkthrough on HTB CobbleStone.

Overview

Cobblestone is linux machine with a difficulty level of insane. This brief write up will walk you through how i was able to get both user and system flag

HTB CobbleStone

Reconnaissance

  • Nmap scan
  nmap -sC -sV -T4 10.10.11.81