https://ulysaicha.com Technical notes, writeups, and research from a cybersecurity portfolio. en https://ulysaicha.com/posts/cve-2025-13997-king-addons-api-key-disclosure/ https://ulysaicha.com/posts/cve-2025-13997-king-addons-api-key-disclosure/ Sun, 22 Mar 2026 00:00:00 GMT A King Addons for Elementor issue where API keys were exposed in rendered page source. https://ulysaicha.com/posts/cve-2025-13587-two-factor-email-2fa-bypass/ https://ulysaicha.com/posts/cve-2025-13587-two-factor-email-2fa-bypass/ Wed, 18 Feb 2026 00:00:00 GMT A WordPress 2FA plugin issue where token handling could let a user skip the email second factor. https://ulysaicha.com/posts/cve-2024-6288-conversios-reflected-xss/ https://ulysaicha.com/posts/cve-2024-6288-conversios-reflected-xss/ Thu, 27 Jun 2024 00:00:00 GMT A reflected cross-site scripting issue in the Conversios WooCommerce tracking plugin. https://ulysaicha.com/posts/cve-2023-6875-post-smtp-bug-bounty/ https://ulysaicha.com/posts/cve-2023-6875-post-smtp-bug-bounty/ Thu, 11 Jan 2024 00:00:00 GMT My POST SMTP Mailer authorization bypass finding, the proof-of-concept flow, and why the impact was high. https://ulysaicha.com/posts/cve-2023-7048-my-sticky-bar-csrf-lead-export/ https://ulysaicha.com/posts/cve-2023-7048-my-sticky-bar-csrf-lead-export/ Wed, 03 Jan 2024 00:00:00 GMT A My Sticky Bar CSRF issue that could trigger contact lead CSV export from an administrator's browser. https://ulysaicha.com/posts/dctf-2021-behind-the-scenes/ https://ulysaicha.com/posts/dctf-2021-behind-the-scenes/ Sun, 16 May 2021 00:00:00 GMT Solving a dCTF image challenge by using Depix and carefully cropping pixelated text. https://ulysaicha.com/posts/dctf-2021-company-leak/ https://ulysaicha.com/posts/dctf-2021-company-leak/ Sun, 16 May 2021 00:00:00 GMT Using ZIP internals and bkcrack to approach a nested encrypted archive challenge. https://ulysaicha.com/posts/dctf-2021-discord-pingpong/ https://ulysaicha.com/posts/dctf-2021-discord-pingpong/ Sun, 16 May 2021 00:00:00 GMT Investigating a Go Discord bot binary and recovering the path to the challenge flag. https://ulysaicha.com/posts/dctf-2021-first-ctf/ https://ulysaicha.com/posts/dctf-2021-first-ctf/ Sun, 16 May 2021 00:00:00 GMT Notes from my first live CTF: the team, the search trail, and a few side discoveries from the weekend. https://ulysaicha.com/posts/dctf-2021-injection/ https://ulysaicha.com/posts/dctf-2021-injection/ Sun, 16 May 2021 00:00:00 GMT Finding a Flask/Jinja SSTI, reading source files, and decoding the final password. https://ulysaicha.com/posts/dctf-2021-leak-spin-devops-vs-secops/ https://ulysaicha.com/posts/dctf-2021-leak-spin-devops-vs-secops/ Sun, 16 May 2021 00:00:00 GMT Finding two dCTF flags through GitHub pages, branches, and GitHub Actions artifacts. https://ulysaicha.com/posts/dctf-2021-simple-web/ https://ulysaicha.com/posts/dctf-2021-simple-web/ Sun, 16 May 2021 00:00:00 GMT Solving a simple web challenge by changing an authorization parameter in the request. https://ulysaicha.com/posts/dctf-2021-strong-password/ https://ulysaicha.com/posts/dctf-2021-strong-password/ Sun, 16 May 2021 00:00:00 GMT Cracking a ZIP password with John the Ripper and learning from a command-line nuance. https://ulysaicha.com/posts/dctf-2021-this-one-is-really-basic/ https://ulysaicha.com/posts/dctf-2021-this-one-is-really-basic/ Sun, 16 May 2021 00:00:00 GMT Solving a recursive base64 challenge with a small decoding script. https://ulysaicha.com/posts/dctf-2021-very-secure-website/ https://ulysaicha.com/posts/dctf-2021-very-secure-website/ Sun, 16 May 2021 00:00:00 GMT Solving a PHP loose comparison challenge with a magic hash.