Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Tue, 04 Apr 2023 18:40:44 GMT
———————————————
✏️Title: zephal is a bad serverside
———————————————
📎Link: https://medium.com/p/a65a6785f4ba
———————————————
Tags: #server_side #exploiting #roblox #hacking

Medium

zephal is a bad serverside

zephal has no games and is very bad, there staff are also very homophobic and sexist

3 views20:00

Daily Writeups

⤷ Title: Researchers Uncover NonEuclid RAT: Exploiting UAC Bypass and AMSI Evasion Techniques
════════════════════════
𐀪 Author: bytescouts
════════════════════════
ⴵ Time: Thu, 09 Jan 2025 05:06:29 GMT
════════════════════════
⌗ Tags: #amsi_evasion_techniques #hacking #cybersecurity #exploiting_uac_bypass #noneuclid_rat

Medium

Researchers Uncover NonEuclid RAT: Exploiting UAC Bypass and AMSI Evasion Techniques

Cybersecurity researchers have recently uncovered a new Remote Access Trojan (RAT) named NonEuclid, which employs advanced techniques such…

16 views06:04

Daily Writeups

⤷ Title: Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters —…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Mon, 10 Feb 2025 09:05:56 GMT
════════════════════════
⌗ Tags: #exploiting_onclick_xss #bug_bounty #portswigger_xss_lab #stored_xss_bypass #bypass_html_encoding

Medium

Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters — XSS Labs

[Write-up] Stored XSS into Onclick Event with Angle Brackets and Double Quotes HTML-encoded and Single Quotes and Backslash Escaped.

36 views13:04

Daily Writeups

⤷ Title: Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters —…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 11 Feb 2025 06:25:04 GMT
════════════════════════
⌗ Tags: #exploiting_onclick_xss #bug_bounty #portswigger_xss_lab #stored_xss_bypass #bypass_html_encoding

Medium

Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters — XSS Labs

[Write-up] Stored XSS into Onclick Event with Angle Brackets and Double Quotes HTML-encoded and Single Quotes and Backslash Escaped.

32 views07:04

Daily Writeups

⤷ Title: Exploiting Cross-Site Scripting (XSS) to Capture Passwords
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 03:23:17 GMT
════════════════════════
⌗ Tags: #exploiting_xss #bug_bounty #cross_site_scripting #bug_bounty_tips #stored_xss

Medium

Exploiting Cross-Site Scripting (XSS) to Capture Passwords

Learn how attackers exploit stored XSS vulnerabilities to capture login credentials and compromise user accounts.

14 views04:05

Daily Writeups

⤷ Title: Exploiting Cross-Site Scripting (XSS) to Capture Passwords
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Thu, 07 Aug 2025 05:05:58 GMT
════════════════════════
⌗ Tags: #exploiting_xss #bug_bounty #cross_site_scripting #bug_bounty_tips #stored_xss

Medium

Exploiting Cross-Site Scripting (XSS) to Capture Passwords

Learn how attackers exploit stored XSS vulnerabilities to capture login credentials and compromise user accounts.

17 views06:04

Daily Writeups

⤷ Title: Exploiting XSS to Bypass CSRF Defenses: Change Victim’s Email
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Fri, 08 Aug 2025 05:41:13 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #stored_xss_csrf_bypass #exploiting_xss_csrf #cross_site_scripting #bug_bounty

Medium

Exploiting XSS to Bypass CSRF Defenses: Change Victim’s Email

Learn how a stored XSS flaw can be weaponized to defeat CSRF defenses and perform unauthorized actions on behalf of users.

15 views06:04

Daily Writeups

⤷ Title: Exploiting XSS to Bypass CSRF Defenses: Change Victim’s Email
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Fri, 08 Aug 2025 04:32:39 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #stored_xss_csrf_bypass #exploiting_xss_csrf #cross_site_scripting #bug_bounty

Medium

Exploiting XSS to Bypass CSRF Defenses: Change Victim’s Email

Learn how a stored XSS flaw can be weaponized to defeat CSRF defenses and perform unauthorized actions on behalf of users.

22 views06:04

Daily Writeups

⤷ Title: Server-Side Template Injection in a Sandboxed Environment: Escaping Freemarker Template…
════════════════════════
𐀪 Author: Bash Overflow
════════════════════════
ⴵ Time: Tue, 19 Aug 2025 03:10:08 GMT
════════════════════════
⌗ Tags: #exploiting_freemarker #ssti_in_freemarker #ssti_exploit #freemarker_template #bug_bounty

Medium

Server-Side Template Injection in a Sandboxed Environment: Escaping Freemarker Template Restrictions

Learn how server-side template injection (SSTI) in a sandboxed Freemarker environment can be exploited to bypass restrictions and access…

13 views04:04

Daily Writeups

⤷ Title: TryHackMe Writeups (1)
════════════════════════
𐀪 Author: Nuhita Aunillah
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 09:16:19 GMT
════════════════════════
⌗ Tags: #tryhackme #ctf_writeup #smb_enumeration #nmap #exploiting

Medium

TryHackMe Writeups (1)

Nmap: An in depth look at scanning with Nmap, a powerful network scanning tool (1)

16 views10:04

Daily Writeups

⤷ Title: Lab: Exploiting clickjacking vulnerability to trigger DOM-based XSS | Portswigger
════════════════════════
𐀪 Author: L4V4NY4 AGR3
════════════════════════
ⴵ Time: Sun, 01 Feb 2026 14:56:27 GMT
════════════════════════
⌗ Tags: #exploiting_clickjacking #portswigger #dom_based_xss #xss_vulnerability #portswigger_lab

Medium

Lab: Exploiting clickjacking vulnerability to trigger DOM-based XSS | Portswigger

This lab contains an XSS vulnerability that is triggered by a click. Construct a clickjacking attack that fools the user into clicking the…

44 views16:04

About

Blog

Apps

Platform