Category: Mix
TL;DR While doing recon for H1-4420, I stumbled upon a WordPress blog that had a plugin enabled called SlickQuiz. Although…
Broken Access Control – Lab #9 UID controlled by param with data leakage in redirect | Short Version Source link
Recently on a BugBounty program I came across my first RCE, discovered and exploited rather quickly on a solution with…
Tom Shelton-Lefley | 15 December 2022 at 14:30 UTC It’s been two years since we unleashed browser powered scanning on…
How to Hunt for Prototype Pollution Vulnerabilities in Open Source Bug Bounty | #methodology Source link
#NahamCon2022EU: Managing a Bug Bounty Program From a Hacker’s Perspective by @0xlupin Source link
Stream 00 : How to Bypass WAF for your XSS ! (OSINT Bonus) 🔥 Source link
My blog runs on Ghost. For some time it has a members feature. Last week I decided to enable it…
