New Writeup❗️
Date: Sun, 20 Sep 2020 07:56:11 GMT
Title: $25K Instagram Almost XSS Filter Link — Facebook Bug Bounty
Link: https://medium.com/p/798b10c13b83
Date: Sun, 20 Sep 2020 07:56:11 GMT
Title: $25K Instagram Almost XSS Filter Link — Facebook Bug Bounty
Link: https://medium.com/p/798b10c13b83
Medium
$25K Instagram Almost XSS Filter Link — Facebook Bug Bounty
Hii, I’m Andres Alonso, Brazilian 14 years old. Today I am going explain how I accidentally found a critical stored XSS when I was making…
New Writeup❗️
Date: Tue, 04 Dec 2018 02:10:32 GMT
Title: KNOXSS The WAFs Slayer.
Link: https://medium.com/p/eaa9763cda78
Date: Tue, 04 Dec 2018 02:10:32 GMT
Title: KNOXSS The WAFs Slayer.
Link: https://medium.com/p/eaa9763cda78
Medium
KNOXSS The WAFs Slayer.
Knoxss is a famous tool which finds and generates poc for a common web application flaw Cross Site Scripting. Cross site scripting is a…
New Writeup❗️
Date: Wed, 21 Mar 2018 08:23:38 GMT
Title: Google adwords 3133.7$ Stored XSS
Link: https://medium.com/p/27bb083b8d27
Date: Wed, 21 Mar 2018 08:23:38 GMT
Title: Google adwords 3133.7$ Stored XSS
Link: https://medium.com/p/27bb083b8d27
Medium
Google adwords 3133.7$ Stored XSS
welcome my brothers and friends.
New Writeup❗️
Date: Mon, 15 Jan 2018 22:21:47 GMT
Title: KNOXSS for Dummies! A new Detailed Guide to use KNOXSS Pro in real world
Link: https://medium.com/p/585cbfe16063
Date: Mon, 15 Jan 2018 22:21:47 GMT
Title: KNOXSS for Dummies! A new Detailed Guide to use KNOXSS Pro in real world
Link: https://medium.com/p/585cbfe16063
Medium
KNOXSS for Dummies! A new Detailed Guide to use KNOXSS Pro in real world
Hello to all my brothers and friends.
New Writeup❗️
Date: Sat, 02 Sep 2017 03:06:05 GMT
Title: My write up about UBER Cross-site scripting by help of KNOXSS
Link: https://medium.com/p/b1b56f8d090
Date: Sat, 02 Sep 2017 03:06:05 GMT
Title: My write up about UBER Cross-site scripting by help of KNOXSS
Link: https://medium.com/p/b1b56f8d090
Medium
My write up about UBER Cross-site scripting by help of KNOXSS
Sorry for my bad English
New Writeup❗️
Date: Sun, 05 Jul 2020 07:57:15 GMT
Title: Taking Over Files in a chat —IDOR in Microsoft Teams
Link: https://medium.com/p/e5289c2efd0
Date: Sun, 05 Jul 2020 07:57:15 GMT
Title: Taking Over Files in a chat —IDOR in Microsoft Teams
Link: https://medium.com/p/e5289c2efd0
Medium
Taking Over Files in a chat —IDOR in Microsoft Teams
Out of curiosity, I started looking into the file uploading process in the browser version of Microsoft Teams. Found a couple of IDORs in…
New Writeup❗️
Date: Fri, 20 Aug 2021 04:16:04 GMT
Title: Google Summer of Code’21 — Final Submission
Link: https://medium.com/p/597d6f5db901
Date: Fri, 20 Aug 2021 04:16:04 GMT
Title: Google Summer of Code’21 — Final Submission
Link: https://medium.com/p/597d6f5db901
Medium
Google Summer of Code’21 — Final Submission
For the last 2 years, I’ve been working with OWASP Foundation, selected for the Google Summer of Code program. It has been an amazing…
New Writeup❗️
Date: Sat, 22 Aug 2020 06:48:53 GMT
Title: Google Summer of Code — Final Submission
Link: https://medium.com/p/4b5987caf5f9
Date: Sat, 22 Aug 2020 06:48:53 GMT
Title: Google Summer of Code — Final Submission
Link: https://medium.com/p/4b5987caf5f9
Medium
Google Summer of Code — Final Submission
Hello guys. Hope you are doing well in the pandemic!!! If you have not read my Phase#1,#2 in this beautiful journey of GSoC 2020, here’s…
New Writeup❗️
Date: Fri, 31 Jul 2020 15:24:24 GMT
Title: Google Summer of Code — Phase #2
Link: https://medium.com/p/d665416dab16
Date: Fri, 31 Jul 2020 15:24:24 GMT
Title: Google Summer of Code — Phase #2
Link: https://medium.com/p/d665416dab16
Medium
Google Summer of Code — Phase #2
Hello everyone!!
New Writeup❗️
Date: Sat, 27 Jun 2020 20:12:05 GMT
Title: Google Summer of Code—Phase #1
Link: https://medium.com/p/c6acc7c093e5
Date: Sat, 27 Jun 2020 20:12:05 GMT
Title: Google Summer of Code—Phase #1
Link: https://medium.com/p/c6acc7c093e5
Medium
Google Summer of Code—Phase #1
This year I got selected into the GSoC program with OWASP Nettacker. Special thanks to my mentors Ali Razmjoo and Sam Stepanyan from OWASP…
New Writeup❗️
Date: Sat, 25 Apr 2020 09:38:31 GMT
Title: Fun With CORS Misconfiguration — II
Link: https://medium.com/p/927caccfe932
Date: Sat, 25 Apr 2020 09:38:31 GMT
Title: Fun With CORS Misconfiguration — II
Link: https://medium.com/p/927caccfe932
Medium
Fun With CORS Misconfiguration — II
Hello all again, I hope everything in going well on your ends. Today I will explain further about CORS misconfiguration leading to…
New Writeup❗️
Date: Sat, 11 Apr 2020 12:15:22 GMT
Title: CORS Misconfiguration Leads To Steal Sensitive Information Disclosure
Link: https://medium.com/p/fdf050b68b66
Date: Sat, 11 Apr 2020 12:15:22 GMT
Title: CORS Misconfiguration Leads To Steal Sensitive Information Disclosure
Link: https://medium.com/p/fdf050b68b66
Medium
CORS Misconfiguration Leads To Steal Sensitive Information Disclosure
Hello everyone, today I am going to share CORS misconfiguration can leads to sensitive information disclosure.
New Writeup❗️
Date: Fri, 10 Apr 2020 17:04:11 GMT
Title: HTML Injection in Cart Sharing Functionality
Link: https://medium.com/p/f78a5df45657
Date: Fri, 10 Apr 2020 17:04:11 GMT
Title: HTML Injection in Cart Sharing Functionality
Link: https://medium.com/p/f78a5df45657
Medium
HTML Injection in Cart Sharing Functionality
Hello guys!! I am going to share one of the vulnerability I found in a web application.
New Writeup❗️
Date: Thu, 23 Feb 2023 20:56:19 GMT
Title: PENTEST TALES: Dumping a database in 15 minutes or less!
Link: https://medium.com/p/b8b04b330f42
Date: Thu, 23 Feb 2023 20:56:19 GMT
Title: PENTEST TALES: Dumping a database in 15 minutes or less!
Link: https://medium.com/p/b8b04b330f42
Medium
PENTEST TALES: Dumping a database in 15 minutes or less!
Turning a $4.99 paywall into a $4,000 payout
New Writeup❗️
Date: Sat, 05 Nov 2022 02:53:31 GMT
Title: PENTEST TALES: EXIF Data Manipulation
Link: https://medium.com/p/b36beb291229
Date: Sat, 05 Nov 2022 02:53:31 GMT
Title: PENTEST TALES: EXIF Data Manipulation
Link: https://medium.com/p/b36beb291229
Medium
PENTEST TALES: EXIF Data Manipulation
Delivering XSS via unconventional means
New Writeup❗️
Date: Thu, 29 Dec 2022 07:30:19 GMT
Title: Getting Secret Key to Building Custom Burp Extension
Link: https://medium.com/p/c6aeb6fd312a
Date: Thu, 29 Dec 2022 07:30:19 GMT
Title: Getting Secret Key to Building Custom Burp Extension
Link: https://medium.com/p/c6aeb6fd312a
Medium
Getting Secret Key to Building Custom Burp Extension
Oops, can we just wrap up the testing and proceed to report writing? 🤭 NO!!!
New Writeup❗️
Date: Tue, 16 Aug 2022 11:14:13 GMT
Title: 2FA Bypass Do Re Mi
Link: https://medium.com/p/cfcfc3775d2e
Date: Tue, 16 Aug 2022 11:14:13 GMT
Title: 2FA Bypass Do Re Mi
Link: https://medium.com/p/cfcfc3775d2e
Medium
2FA Bypass Do Re Mi
Not all 2FA bypass techniques are made equal, the most common scenario I came across are either one of the following:
New Writeup❗️
Date: Tue, 02 Aug 2022 13:43:34 GMT
Title: Frida Hooking Native Functions
Link: https://medium.com/p/1ad117fc8fec
Date: Tue, 02 Aug 2022 13:43:34 GMT
Title: Frida Hooking Native Functions
Link: https://medium.com/p/1ad117fc8fec
Medium
Frida Hooking Native Functions
Are you ready for Part 3?! This is the continuation from my previous post of Frida Hooking Journey Part 1&2.
New Writeup❗️
Date: Sun, 12 Jun 2022 11:52:36 GMT
Title: How I Create Message Signature using Frida Hooking?
Link: https://medium.com/p/ffdc509e9be3
Date: Sun, 12 Jun 2022 11:52:36 GMT
Title: How I Create Message Signature using Frida Hooking?
Link: https://medium.com/p/ffdc509e9be3
Medium
How I Create Message Signature using Frida Hooking?
Journey to greatness is often lonely and everything worthwhile is uphill, when looking down from a certain mountain peak, you will forget…
New Writeup❗️
Date: Wed, 27 Apr 2022 08:30:46 GMT
Title: Frida Hooking Journey Part 2
Link: https://medium.com/p/7267ede4cb8d
Date: Wed, 27 Apr 2022 08:30:46 GMT
Title: Frida Hooking Journey Part 2
Link: https://medium.com/p/7267ede4cb8d
Medium
Frida Hooking Journey Part 2
“Keep working hard, persevere to dive deeper until you know what you don’t know….” — Rock K
New Writeup❗️
Date: Mon, 04 Apr 2022 14:21:59 GMT
Title: Frida Hooking Journey Part 1
Link: https://medium.com/p/89755980af98
Date: Mon, 04 Apr 2022 14:21:59 GMT
Title: Frida Hooking Journey Part 1
Link: https://medium.com/p/89755980af98
Medium
Frida Hooking Journey Part 1
“If I have seen further, it is by standing on the shoulders of giants.” -Sir Issac Newton