@AmirSafari

Amirmohammad Safari

@AmirSafari

Joined February 2025

Recently published

blog.voorivex.team

When Two Parsers Disagree: Exploiting Query String Differentials for XSS

When you spend enough time hunting for vulnerabilities in real-world applications, you start seeing the same patterns over and over again. One pattern that kept showing up in my audits was this: the backend receives some user input, validates it care...

Feb 1015 min read

blog.voorivex.team

Shaking the MCP Tree: A Security Deep Dive

AI is moving fast. Companies are racing to connect their services to AI assistants, shipping integrations as quickly as possible to stay ahead. But when speed is the priority, security often gets left behind. In this post, I'll show you what happens ...

Feb 314 min read

blog.voorivex.team

Cloudflare Image Proxy as a CSPT Gadget: A Cross-Origin CSPT Exploit

The CSPT (Client-Side Path Traversal) vulnerability has recently attracted considerable attention from bug bounty hunters and security researchers because of its flexibility and the variety of real-world impacts it can enable. CSPT arises when user-c...

Oct 19, 20254 min read

blog.voorivex.team

CSS Data Exfiltration to Steal OAuth Token

Hello, I’m Amir, and this is my first blog post here. Some time ago, @YShahinzadeh shared an endpoint with me and asked me to investigate it. It was vulnerable to HTML injection. Although it couldn't lead to XSS, I started exploring how to make the m...

Feb 15, 20257 min read

Search Hashnode

Amirmohammad Safari

Recently published

When Two Parsers Disagree: Exploiting Query String Differentials for XSS

Shaking the MCP Tree: A Security Deep Dive

Cloudflare Image Proxy as a CSPT Gadget: A Cross-Origin CSPT Exploit

CSS Data Exfiltration to Steal OAuth Token