Status DataClose notification
logo

@AMMAR-OS

Member since: May 29, 2026 Algeria
Rank15566
Reputation41
Paid Reports0
AboutReports (0)Influenced Programs (4)Achievements (0)

Scanning.. [OK] detect_vuln() | CEH | CSOC if threat: protect() AMMAR-OS | Expert since 2010 🛡️

Reports (0)
No disclosed reports at the moment This user has no disclosed reports or reports are in review.
Own articles
Solved Intigriti CTF via Unintended PathI successfully bypassed and solved one of Intigriti's Monthly Web Security CTF challenges. My approach stood out because I discovered an "Unintended Solution," finding an alternative logical path to exploit the flaw that the challenge creators hadn't anticipated. ​The submission was officially reviewed and accepted (Status: Accepted) by the Intigriti triage team (ayoub__intigriti), who highly commended the methodology. They invited me to document the finding to help other security researchers learn from this unique attack vector. ​I have published a detailed technical write-up breaking down the exact execution, methodology, and how the unintended logic flaw was chained to capture the flag.
Critical CSRF in Images Sync Cloudflare PluginDiscovered a Critical Cross-Site Request Forgery (CSRF) vulnerability in Images Sync for Cloudflare WordPress plugin version 1.0.7. This high-severity vulnerability (CVSS Score: 8.8) allows remote unauthenticated attackers to compromise WordPress administrator accounts. [Vulnerability Details] - Type: Cross-Site Request Forgery (CSRF) - Severity: HIGH (CVSS v3.1: 8.8) - CWE: CWE-352 - Attack Vector: Network / Remote - Requires User Interaction: Yes (Admin must visit malicious page) [Technical Description] The plugin fails to implement proper nonce verification in the SettingsPage.php handler. A remote attacker can craft a malicious HTML page that, when visited by a logged-in WordPress administrator, automatically submits a forged POST request to change the Cloudflare API Token and Account ID without authorization. [Exploitation Scenario] An attacker hosts a malicious webpage containing hidden form elements. When a WordPress administrator (who is logged into their WordPress dashboard) visits this page, the form auto-submits in the background, overwriting the Cloudflare credentials without the user's knowledge. [Impact] - Unauthorized modification of Cloudflare API credentials - Complete takeover of image synchronization service - Data redirection to attacker-controlled infrastructure - Privilege Escalation [Affected Component] - SettingsRepo.php - src/Support/TokenStorage.php [Timeline] - Vulnerability Discovered: March 2026 - Vendor Notified: 2026-03-08 via [email protected] - Vendor Response: No response received - Public Disclosure: Ready for assignment [Proof of Concept] Available - demonstrates successful remote exploitation without user interaction beyond visiting a malicious page. [References] - https://wordpress.org/plugins/images-sync-for-cloudflare/ - https://www.spintax.net [Discoverer] AMMAR-OS ([email protected])
Paid Reports (0)
Critical0
High0
Medium0
Low0
None0
Streak
Sep
Oct
Nov
Dec
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Skills
smart contract
Influenced Programs (4) View all