hash length extension on a dot product oracle, and CSS injection + PDF beacon exfiltration
some texsaw 2025 writeups (mucho osint lol)
cold
