Name: PHP Login & User Management Vendor: Jigowatt via the Envato Market Place Vulnerability: Arbitrary File Upload Affected Versions: All versions before 4.1.1 CVE ID: CVE-2018-11392 It goes without saying, but all user-input should not be trusted. This…

Windbg Utility Tools based upon PyKD. Contribute to ohjeongwook/windbgtool development by creating an account on GitHub.

CloudFront bypass: Worked on a public program today ">%0D%0A%0D%0A<x '="foo"><x foo='><img src=x onerror=javascript:alert(`cloudfrontbypass`)//'> Would be interested to know if this is target specific or other CloudFront websites are vulnerable #bugbountytip…

HTML 5 does not do much to solve browser security issues. In fact it actually broadens the scope of what can be exploited, and forces developers to fix code ...

While checking Detectify Lab, I came across XSS Vulnerability on MEGA.CO.NZ which was found by  Frans Rosen  so I  though of doing some test on MEGA  but I  ended with none. I didn’t give up ! after a while I thought of scanning & looking into sub domain…

I’m going to share this concise writeup for a bug reported to one of bug bounty programs on hackerone

Have you ever found some risky behavior, but couldn't quite prove it was exploitable? Our XSS cheat sheet contains virtually every exploit technique we know of, but what should you do if you can't fin

GitHub Gist: instantly share code, notes, and snippets.

:no_entry: offsec batteries included. Contribute to jivoi/pentest development by creating an account on GitHub.

Think out of the Box

膜threedr3am

Scenario time — you’ve just found that you are able to access a whole windows file system via a directory traversal vuln in a webapp. You…