Bberzelioninblog.berzi.one·Apr 5 · 31 min readDesigning a zero knowledge virtual machine for the future's social media mobile appsPart 1: Mathematical Foundations 1.1 The Field Everything in DenseZK lives over the BN254 scalar field. BN254 is the Barreto-Naehrig curve defined by: $$E : y² = x³ + b over F_p$$ where p is a 254-bit40
Bberzelioninblog.berzi.one·May 4, 2025 · 3 min readTryHackMe Anonymous CTF Writeup 2025💡 please note that “<ip>” in this writeup stands for the target machine’s IP given by THM I did an nmap scan for all possible ports ▶ nmap -p- <ip> Starting Nmap 7.94SVN (https://nmap.org) at 2025-02-01 15:38 EST Nmap scan report for <homeip> Host...00
Bberzelioninblog.berzi.one·Mar 20, 2025 · 3 min readAzure's defense against Subdomain takeoverHow exactly does a subdomain takeover occur? basically it is when what we have a dangling DNS record for an Azure resource (a VM or a Web app). When the Azure resource is deleted, the corresponding CNAME record stays. The attacker can find the respe...00
Bberzelioninblog.berzi.one·Feb 12, 2025 · 2 min readeJPT-CTF-1: Assessment Methodologies: Information Gathering CTF 1This lab focuses on information gathering and reconnaissance techniques to analyze a target website. Participants will explore various aspects of the website to uncover potential vulnerabilities, sensitive files, and misconfigurations. By leveraging ...00
Bberzelioninblog.berzi.one·Feb 4, 2025 · 12 min readBypass Really Simple Security Tryhackme Writeup/WalkthroughWordPress is one of the most popular open-source Content Management Systems (CMS) and it is widely used to build websites ranging from blogs to e-commerce platforms. In November 2024, a critical vulnerability was discovered in the Really Simple Secur...00
