Two solutions for the January 2021 Initigriti XSS Challenge
Source link
Related Articles
All Mix →
JNDI Injection Remote Code Execution via Path Manipulation in MemoryUserDatabaseFactory
In this blog post, I’m going to describe a relative new vector to achieve remote code execution via a JNDI Injection that I found independently…
Happiness: Creation vs. Collection | Daniel Miessler
I have an observation that I’ve been mulling for the last few days: unhealthy people collect things. Healthy people create things. Naturally, statements like these…
Bug Bytes #195 – LastPass discovery, learning to code, and a complete guide to SSRF
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps…
Get as image function pulls any Insights/NRQL data from any New Relic account (IDOR)
This writeup walks you through the full process as to how I found a pretty bad Insecure Direct Object Reference (IDOR) in New Relic. In…
Retail Under Attack: 6 Learnings from a Retail Customer
Table of Contents 1. Retail and E-commerce Are Prone to Credential-based Attacks 2. Utilize Security Best Practices 3. How to Measure Bug Bounty ROI 4.…
The Different Types Of Bug Bounty Hunters
The Different Types Of Bug Bounty Hunters Source link