Category: Mix
Over the last year I’ve taken a step away from my usual bug bounty work to focus more on building…
This write-up is the collective efforts of collaborating with various hackers on exploring and furthering research that was presented by…
The Story of a Novel Supply Chain Attack Continue reading on Medium » Source link
How to turn bugs into a “passive” income stream! ft Detectify’s Almroot Source link
When is copy-paste payloads not self-XSS? When it’s stored XSS. Recently, I reviewed Zoom’s code to uncover an interesting attack…
On May 27th, I reported a handful of security vulnerabilities to VMWare impacting their vRealize Operations Management Suite (vROps) appliance….
Motivations I recently made a video on how to find hidden files and folders on IIS through the use…
About four or five years ago, friend and fellow bug bounty hunter Sam Curry asked if I had “ever thought…
Overview On August 24th, 2022, we reported a vulnerability to Netlify affecting their Next.js “netlify-ipx” repository which would allow an…
ChiBrrCon 2020: Don’t Cross Me! Same Origin Policy and all the “cross” vulns Source link
![[Google VRP] SSRF in Google Cloud Platform StackDriver – Ron Chan](https://cybernoz.com/wp-content/uploads/2023/03/Google-VRP-SSRF-in-Google-Cloud-Platform-StackDriver-–-Ron-360x270.png "[Google VRP] SSRF in Google Cloud Platform StackDriver – Ron Chan")
During the process of testing GAE after reading this awesome blog post, I found a debug application in Google Cloud…
FROM 0 to $$$$ – MY BIGGEST BUG BOUNTY LEARNINGS! Source link