Marouane Belabbassi (Duty1g), Author at Synack

Marouane Belabbassi (Duty1g)

Marouane Belabbassi, known as Duty1g, is an Application Security Specialist, penetration tester, and CTF player on the Synack Red Team. He created SubCat, a fast passive subdomain discovery tool used widely by pentesters and bug bounty hunters. For Synack's Exploits Explained series, he detailed how an unsafe eval() call in a process endpoint enabled dynamic backend routing based on user input, a flaw he chained into a full remote code execution exploit.

Turning Frontend Clues into Backend Compromise: Insecure Routing to RCE

Web Application

Jul 24, 2025

Turning Frontend Clues into Backend Compromise: Insecure Routing to RCE

In this edition of Exploits Explained, SRT member Marouane "Duty1g" Belabbassi recounts how an unsafe eval() call in the process endpoint allowed dynamic backend routing based entirely on user input.

Marouane Belabbassi (Duty1g)

5 min read

Marouane Belabbassi (Duty1g)

Research by Marouane Belabbassi (Duty1g)

Turning Frontend Clues into Backend Compromise: Insecure Routing to RCE