Abdelrahman Radwan

MEMBER

// SPECIALIZATION

Web Security

linkedin blog ctftime

Published Works & Writeups

Web

SSRF via Content-Type in Apache — Auditor

Solving “Auditor” challenge from FahemSec, where SSRF was achieved through Apache Content-Type/header injection to reach an internal Flask service and retrieve...

Apacheheader injection

@Agn4by // FahemSec

Read →

Web

IEEE Mansoura CTF Qualifications 2025

Solving three web challenges from IEEE Mansoura CTF Qualifications 2025, featuring exploitation techniques such as XSS, CSP bypass, admin bot abuse, and Bottle...

CSP bypassXSSBottle deserialization/RCE

@Agn4by // IEEE Mansoura 2025

Read →

Web

ASC Cyber WarGames Qualifications 2025

Solving three web challenges from ASC Cyber WarGames 2025 Qualifications, covering exploitation techniques such as IDOR, JWT forgery, SQL injection, race...

sql-injectionPhar Deserializationjwtrace condition

@Agn4by // ASC Cyber WarGames

Read →