Search posts, tags, users, and pages
Discover how a clever DOM XSS bypass led to an automated account takeover by exploiting OAuth flows in GIS SDK
HamidSj
@Pitok · Milano, Italy
Software Engineer | Security Researcher
Markdown supported · ⌘↵ to post
Adam Noverian
On first image. How did you find that code? Didn't regex like that happen on backend?
Avaz
Nice writeup XD
AmirAli Kariminasab
That was a much-needed write-up! I really liked your eye for detail.
Elyas Dehaty
سلام چطور میتوانم درس صنف های تان اشتراک کنم؟
loghman nematzadeh
Extremely elegant, comprehensive, and perfectly written. 🔥🔥🔥
VCODER
Nice writeup and excellent work 👏🔥
Adam Noverian
On first image. How did you find that code? Didn't regex like that happen on backend?