# julichaan notes

## julichaan Docs

- [/whoami](https://julichaan.gitbook.io/julichaan-docs/whoami.md)
- [HackTheBox Writeups](https://julichaan.gitbook.io/julichaan-docs/hackthebox-writeups.md): https://www.hackthebox.com/
- [Active](https://julichaan.gitbook.io/julichaan-docs/hackthebox-writeups/active.md): OS: Windows; Level: Easy
- [Editor](https://julichaan.gitbook.io/julichaan-docs/hackthebox-writeups/editor.md): OS: Linux; Level: Easy
- [Intigriti Challenges Writeups](https://julichaan.gitbook.io/julichaan-docs/intigriti-challenges-writeups.md): https://www.intigriti.com/
- [November 2025 - 1125](https://julichaan.gitbook.io/julichaan-docs/intigriti-challenges-writeups/november-2025-1125.md): Authentication Bypass via JWT algorithm manipulation to SSTI RCE
- [Certifications](https://julichaan.gitbook.io/julichaan-docs/certifications.md): Summaries of the certification exams I have taken
- [Web Red Team Analyst (Web-RTA)](https://julichaan.gitbook.io/julichaan-docs/certifications/web-red-team-analyst-web-rta.md): Pentesting web certification of Cyberwarfare labs
- [SSRF](https://julichaan.gitbook.io/julichaan-docs/portswigger-labs/ssrf.md)
- [Lab: Basic SSRF against the local server](https://julichaan.gitbook.io/julichaan-docs/portswigger-labs/ssrf/lab-basic-ssrf-against-the-local-server.md): This lab has a stock check feature which fetches data from an internal system.  To solve the lab, change the stock check URL to access the admin interface at http://localhost/admin and delete the user
- [Lab: Basic SSRF against another back-end system](https://julichaan.gitbook.io/julichaan-docs/portswigger-labs/ssrf/lab-basic-ssrf-against-another-back-end-system.md): To solve the lab, use the stock check functionality to scan the internal 192.168.0.X range for an admin interface on port 8080, then use it to delete the user carlos.
- [Lab: SSRF with blacklist-based input filter](https://julichaan.gitbook.io/julichaan-docs/portswigger-labs/ssrf/lab-ssrf-with-blacklist-based-input-filter.md): The developer has deployed two weak anti-SSRF defenses that you will need to bypass.
- [SSTI](https://julichaan.gitbook.io/julichaan-docs/portswigger-labs/ssti.md)
- [Lab: Basic server-side template injection](https://julichaan.gitbook.io/julichaan-docs/portswigger-labs/ssti/lab-basic-server-side-template-injection.md)
- [Lab: Basic server-side template injection (code context)](https://julichaan.gitbook.io/julichaan-docs/portswigger-labs/ssti/lab-basic-server-side-template-injection-code-context.md)
- [Lab: Server-side template injection using documentation](https://julichaan.gitbook.io/julichaan-docs/portswigger-labs/ssti/lab-server-side-template-injection-using-documentation.md)
- [Bug Bounty Methodology](https://julichaan.gitbook.io/julichaan-docs/portswigger-labs/bug-bounty-methodology.md)
- [Dorks](https://julichaan.gitbook.io/julichaan-docs/dorks.md): Most used dorks by me