One Click, No File: Upload XSS Without the Upload
How multipart/form-data turns "the victim has to pick a file" into a single link
Written by
Offensive Security Engineer
Offensive security engineer with experience in external penetration testing, web applications, APIs, and Active Directory infrastructure. My research led me to discover new attack techniques and several assigned CVEs. I also have experience from the defensive side (Blue and Purple team operations), incident response, and adversary TTP simulation across SIEM and EDR platforms to improve detection coverage. I hold the OSEP, OSCP, BSCP, OSWP and CCFA certifications.
Responses
Markdown supported · ⌘↵ to post
No responses yet.