Swagger XSS Mass Hunting
In the name of Allah
Hi guys, I'm YoungVanda and in this write-up, I’m gonna explain my own approach towards Swagger XSS and why I don’t use the Nuclei template ( swagger-api.yaml) ;d
The Entire Flow
1. Find as many subdomains as possible
2. cat all_...
youngvanda.hashnode.dev3 min read