Curated security research, vulnerabilities, advisories and tools for practitioners.

#ctbb

Security coverage tagged ctbb.

1.

The Dot-Dot-Slash That Frameworks Hand You: CSPT Across Every Major Frontend Framework

research | 2026-04-02 00:00 | lab.ctbb.show | Original ↗ | .md | #path-traversal | #cspt | #frontend

2.

Slacker Slash: Bypassing Bun Security Middleware via Normalization Desync

research | 2026-03-13 00:00 | lab.ctbb.show | Original ↗ | .md | #bun | #auth-bypass | #ctbb

3.

Can a Predicted window.open Target Really Be That Impactful?

research | 2026-02-25 00:00 | lab.ctbb.show | Original ↗ | .md | #web-security | #tab-hijacking | #window-open

4.

Azure DevOps Agent Interception

research | 2026-02-10 00:00 | lab.ctbb.show | Original ↗ | .md | #cloud | #azure-devops | #ctbb

5.

Achieving remote code execution in LangSmith Playground using unsafe template formatting

research | 2026-01-12 00:00 | lab.ctbb.show | Original ↗ | .md | #rce | #uninitialized-memory | #ctbb

6.

Stopping Redirects

research | 2025-12-04 00:00 | lab.ctbb.show | Original ↗ | .md | #client-side | #ctbb | #redirect

7.

Write Path Traversal to a RCE Art Department

research | 2025-11-28 00:00 | lab.ctbb.show | Original ↗ | .md | #rce | #path-traversal | #exploitation

8.

Challenge Two - Stranger XSS

research | 2025-11-24 00:00 | lab.ctbb.show | Original ↗ | .md | #xss | #challenge | #writeup

9.

Challenge One - Strange XSS

research | 2025-11-18 00:00 | lab.ctbb.show | Original ↗ | .md | #xss | #challenge | #writeup

10.

ASP.NET MVC View Engine Search Patterns

research | 2025-11-17 00:00 | lab.ctbb.show | Original ↗ | .md | #web-security | #ctbb | #aspnet-mvc