Posts

Exfiltrate data from Blind SQL Injection (Boolean Based) | Using Scripting

Unexploitable CORS can lead to Stored XSS?

Bug Poc XSS Challenge - Writeup

Using CSRF I Got Weird Account Takeover

Business Logic Bugs!! What is that?!!

[Part 2] What is XSS and Example of Filters & Bypasses

[Leak] Can I take the user information, please?!!

[Part 1] What is XSS and Example of Filters & Bypasses

[Bypass] Cool Open redirect Bypasses

[Duplicated] Self-XSS & CSRF attack lead to Stored XSS

Stored XSS on Edmodo main domain

[SubFl0w] New Tool

Write-Up || Quals: Saudi and Oman CTF 2019 Web Challenges