---
title: "Amirmohammad Safari (@AmirSafari) | Hashnode"
description: "Amirmohammad Safari (@AmirSafari) writes on Hashnode. Read their latest articles and follow their work."
url: "https://hashnode.com/@AmirSafari"
---

@AmirSafari

# Amirmohammad Safari

@AmirSafari · Joined February 2025

### [When Two Parsers Disagree: Exploiting Query String Differentials for XSS](https://blog.voorivex.team/when-two-parsers-disagree-exploiting-query-string-differentials-for-xss?utm_source=hashnode&utm_medium=feed)

Discover how differing query string parsers can be exploited for XSS, using examples and detailed explanations of parser behaviors in web security

15 min read · [blog.voorivex.team](https://blog.voorivex.team/when-two-parsers-disagree-exploiting-query-string-differentials-for-xss?utm_source=hashnode&utm_medium=feed)

[Feb 10](https://hashnode.com/posts/when-two-parsers-disagree-exploiting-query-string-differentials-for-xss/698b974dfc8f869658662e84)

### [Shaking the MCP Tree: A Security Deep Dive](https://blog.voorivex.team/shaking-the-mcp-tree?utm_source=hashnode&utm_medium=feed)

MCP server security trade-offs expose vulnerabilities in Dynamic Client Registration, leading to OAuth exploitation and direct server access

14 min read · [blog.voorivex.team](https://blog.voorivex.team/shaking-the-mcp-tree?utm_source=hashnode&utm_medium=feed)

[Feb 3](https://hashnode.com/posts/shaking-the-mcp-tree/69824f1795413d00c32aadff)

### [Cloudflare Image Proxy as a CSPT Gadget: A Cross-Origin CSPT Exploit](https://blog.voorivex.team/cloudflare-image-proxy-as-a-cspt-gadget-a-cross-origin-cspt-exploit?utm_source=hashnode&utm_medium=feed)

Explore Cloudflare's Image Proxy as a CSPT exploit tool, enabling impactful cross-origin path traversal attacks through redirect techniques

4 min read · [blog.voorivex.team](https://blog.voorivex.team/cloudflare-image-proxy-as-a-cspt-gadget-a-cross-origin-cspt-exploit?utm_source=hashnode&utm_medium=feed)

[Oct 19, 2025](https://hashnode.com/posts/cloudflare-image-proxy-as-a-cspt-gadget-a-cross-origin-cspt-exploit/68f508d0f25d5fc4f8bd9447)

### [CSS Data Exfiltration to Steal OAuth Token](https://blog.voorivex.team/css-data-exfiltration-to-steal-oauth-token?utm_source=hashnode&utm_medium=feed)

Use CSS injection to bypass CSP, exfiltrate OAuth tokens through unique chaining techniques. Discover vulnerability and exploit details

7 min read · [blog.voorivex.team](https://blog.voorivex.team/css-data-exfiltration-to-steal-oauth-token?utm_source=hashnode&utm_medium=feed)

[1](https://hashnode.com/posts/css-data-exfiltration-to-steal-oauth-token/67b0ceb5e75041ff9906e0c3) [Feb 15, 2025](https://hashnode.com/posts/css-data-exfiltration-to-steal-oauth-token/67b0ceb5e75041ff9906e0c3)