CloudFront bypass: Worked on a public program today ">%0D%0A%0D%0A<x '="foo"><x foo='><img src=x onerror=javascript:alert(`cloudfrontbypass`)//'> Would be interested to know if this is target specific or other CloudFront websites are vulnerable #bugbountytip…

HTML 5 does not do much to solve browser security issues. In fact it actually broadens the scope of what can be exploited, and forces developers to fix code ...

While checking Detectify Lab, I came across XSS Vulnerability on MEGA.CO.NZ which was found by  Frans Rosen  so I  though of doing some test on MEGA  but I  ended with none. I didn’t give up ! after a while I thought of scanning & looking into sub domain…

I’m going to share this concise writeup for a bug reported to one of bug bounty programs on hackerone

Have you ever found some risky behavior, but couldn't quite prove it was exploitable? Our XSS cheat sheet contains virtually every exploit technique we know of, but what should you do if you can't fin

GitHub Gist: instantly share code, notes, and snippets.

:no_entry: offsec batteries included. Contribute to jivoi/pentest development by creating an account on GitHub.

Think out of the Box

膜threedr3am

Scenario time — you’ve just found that you are able to access a whole windows file system via a directory traversal vuln in a webapp. You…

This is the story of how I was able to get remote code execution on Hubspot 's servers by exploiting a vulnerability in  HubL expression la...