Practical security research, field notes, and ideas from the community.
# When a WAF Blocks the Browser, Not Just the IP ### A practical look at client-side restrictions with UA Spectrum [ for use in Bypass CSP. --- ## 📋 Prerequisites - Node.js & npm install…
Read discussionNo comments yet. Start the conversation.
Hello Brothers, I hope you have a nice day. Today I will share how I discovered price manipulation. During my holiday, I started testing on a private program. The first thing I di…
Read discussionNo comments yet. Start the conversation.
**Hellllllllo brothers, Today I will show how I escalated Reflected XSS to One Click or even Zero Click ATO via escalating the XSS + CORS to OAuth Misconfiguration.** --- While I …
Read discussionNo comments yet. Start the conversation.
Failure to Invalidate Session After Password Change Description When a user updates their password, all previously issued sessions should be invalidated. If this is not enforced, …
Read discussionNo comments yet. Start the conversation.
1️⃣ Failure to Invalidate Session After Password Change Description When a user changes their password, old sessions should be invalidated to prevent an attacker with a stolen ses…
Read discussionNo comments yet. Start the conversation.
[XSS] %22%3E%3Ca%20%20fooooooooooooooooooohref%20h%22r%22+%22%22;%20fooooooooooooooooooohref%20data-=%22%22href=jAvAsCrIpT%3Aconfirm`1`%3ECLICK%3C/a%3E if You Still Blocked You Ca…
Read discussionNo comments yet. Start the conversation.
1. Identify an Unclaimed Dependency Locate the target project’s package.json file and identify unclaimed dependencies. Example: The project references noderedactedsdk, which is no…
Read discussionNo comments yet. Start the conversation.
Description The plugin does not sanitize and escape user input appended to the DOM via malicious Lightbox settings, resulting in a DOM Cross-Site Scripting issue. Proof of Concept…
Read discussionNo comments yet. Start the conversation.
1. Information Gathering Start by gathering API details like documentation and authentication methods. Example Request: GET /api/v1/docs 2. Authentication Testing Check if the API…
Read discussionNo comments yet. Start the conversation.
1. Insufficient Token Expiry Hacker's Steps: The hacker steals the victim’s access token through some means (e.g., XSS, phishing, session hijacking). After a long period, the hack…
Read discussionNo comments yet. Start the conversation.
Overview: This report details how I upgraded the severity of a self XSS vulnerability to a non-self XSS via CSRF, changing its status from P5 to P3. Initial Discovery: Self XSS Id…
Read discussionNo comments yet. Start the conversation.
Overview: This report describes how I discovered an information disclosure vulnerability that earned me a bounty in just 30 minutes. Steps to Discovery: Collecting Subdomains: I b…
Read discussionNo comments yet. Start the conversation.
Overview: This report outlines the process I used to discover an XSS vulnerability through triple URL encoding, which successfully bypassed the Web Application Firewall (WAF). Ste…
Read discussionNo comments yet. Start the conversation.
Hello, XSS Module I am Muhammad, finished this path CBBH. This path is very useful for anyone who wants to enter the bug bounty field. I will explain this path on my site here tod…
Read discussionNo comments yet. Start the conversation.
Subdomain Enumeration using FFUF To perform subdomain enumeration using FFuF, we will use the -w and -u options. -w: Specifies the subdomains word list. -u: Specifies the target. …
Read discussionNo comments yet. Start the conversation.
No Rate Limit on login Function (P4 - Low) How To Test: Visit the login endpoint. Enter any username and password. Intercept the request and send it to the Intruder tab. Select nu…
Read discussionNo comments yet. Start the conversation.
No comments yet. Start the conversation.