# THE CZAR

> Offensive security notes by Ilyas Salioui (TheCzar) — breaking web apps, chasing bugs, and automating recon.

## Pages

- [Home](https://theczar.dev/)
- [About](https://theczar.dev/about/)
- [Security](https://theczar.dev/security/)
- [Colophon](https://theczar.dev/colophon/)
- [Contact](https://theczar.dev/contact/)
- [RSS](https://theczar.dev/rss.xml)
- [JSON Feed](https://theczar.dev/feed.json)
- [Status](https://theczar.dev/status.json)

## Posts

- [One Quote, 107 Tables, One Crit](https://theczar.dev/blog/one-quote-over-a-hundred-tables/)
- [The Bucket Said Yes: A Severity Plot Twist](https://theczar.dev/blog/the-bucket-that-said-yes/)
- [Cookie Tossing: Escalating Low-Impact XSS into Criticals](https://theczar.dev/blog/cookie-tossing/)
- [Stack Traces: Unveiling Attack Surface](https://theczar.dev/blog/stack-traces/)
- [Origin IP Discovery Techniques: How Attackers Bypass WAF Protections](https://theczar.dev/blog/origin-ip-discovery/)
- [Intigriti Monthly Challenge Writeup: JWT Abuse → Admin Panel → SSTI → RCE → Flag](https://theczar.dev/blog/intigriti-jwt-to-rce/)

## Notes

- Static site, no cookies, no third-party tracking.
- Email authentication: SPF, DKIM, DMARC p=reject.
- Security contact: security@theczar.dev
- The vault is somewhere in the DNS.