Nothing here yet.
Nothing here yet.
Jun 26, 2023 · 2 min read · XSS aka Cross Site Scripting is one of the strong enemies of developers. It ruins the whole app. Let me explain: What’s XSS btw? Imagine you have a magical input box on your website where users can leave comments. You as a developer expect a comment ...
Join discussion
Jan 27, 2022 · 3 min read · What is XSS? Simply we can say that XSS (Cross-site scripting) is a JavaScript code injection on web applications. Attackers use vulnerable web apps to inject malicious javascript code or a script. There are several types of XSS attacks. The risks of...
Join discussion
Jan 9, 2022 · 2 min read · The challenge in this writeup is from Portswigger's web security academy lab. You can access it here for Free. The challenge We need to access the admin panel and delete the user called Carlos. We can only access the admin panel from the internal n...
Ggideon commented
Aug 29, 2021 · 11 min read · Making some weird API requests resulted in full user account takeovers, which paid me the highest reward of two bug bounty programs. Account takeovers are critical security vulnerabilities. Making strange API requests can sometimes lead to critical a...
FSSAflorence and 2 more commented
May 1, 2021 · 3 min read · A story about my first SSRF finding on a bug bounty target web app, where I further exploited the SSRF bug into reading internal server files, which leads to AWS instance secret leakage. There were no filtering or firewalls on my target. So let's jum...
Join discussion
