Ioannis Kapolos writes on coding, security, music and philosophy. https://kapolos.com/ 2026-11-11T00:00:00.000Z Ioannis Kapolos https://kapolos.com/writing/security/how-a-photo-caption-became-a-shell/ 2026-11-11T00:00:00.000Z 2026-11-11T00:00:00.000Z

A CTF investigation that led from a caption field through SQL injection to a render worker, a shell and a flag. Written for developers new to exploitation.