HSHossein Shourabiinscript.hashnode.dev·Sep 8, 2024 · 6 min readSelf-XSS to ATO via Site FeaturesHey guys, I hope you are well. First, I want to thank you for sharing your love for my waybackurl extension and for starring the "small tools for hackers" on GitHub. In this article, I want to share a cool self-XSS that I escalated to an account take...01A
HSHossein Shourabiinscript.hashnode.dev·Dec 20, 2023 · 1 min readCertificate Search via DumpCrt (crt.sh) for Wide ReconHi Guys,DumpCrt is a Bash script designed to extract data from the crt.sh database. It provides an easy way to search for certificates based on various criteria such as target, organization name, and more. It has two modes, one for big companies, and...00
HSHossein Shourabiinscript.hashnode.dev·Apr 22, 2023 · 3 min readHow I discovered a web cache deception in Voorivex eventToday, I want to show you how I discovered a web cache deception during a local event as a new hunter. Let's get started. Cache As you know we have several caches in web applications, Browser Cache Server Cache ( CDN /Load Balance/Reverse Proxy) ...00
HSHossein Shourabiinscript.hashnode.dev·Feb 2, 2023 · 1 min read[Solved] Why does WooCommerce refresh the page when I try to generate a REST API key?Recently, I've received reports from customers who are unable to generate a REST API key on the WooCommerce site. I investigated the issue and found that it occurs when they use a non-English language on their profile or website. To resolve this, you...00
HSHossein Shourabiinscript.hashnode.dev·Nov 24, 2022 · 2 min readAre your Github squares not colored?Your Git squares are cold and white? Commit and Push makes green your Github, but it's boring if you want do it every day. let's automate it with bash and plant weed together. purpose this article is work with: Systemd Bash Git Source on Github Fir...00
