hash length extension on a dot product oracle, and CSS injection + PDF beacon exfiltration
cheesing a crypto with a timing side-channel
a few writeups from cubectf
some texsaw 2025 writeups (mucho osint lol)