IDIliya Dindarinblog.iliyadindar.site·May 22 · 7 min readDOOM — Chaining CSPT, Open Redirect, and XSSBy Iliya Dindar A walkthrough of the DOOM box. Three "small" bugs that mean nothing on their own, but composed together hand you a one-click XSS that runs on the victim's origin with their session in00
IDIliya Dindarinblog.iliyadindar.site·Apr 3 · 4 min readUNION SELECT Unlocked: A Beginner’s Guide to UNION-Based SQLiTable of Contents 01 - Vulnerability Discovery 02 - Injection Detection 03 - Column Count Enumeration 04 - Reflected Column Discovery 05 - Database Enumeration 06 - Flag Extraction 01 - Vulne00
