Category: #bugbounty

Bug bounty Write Ups and Tips!

Content Type Forcing – The XSS you may have missed.

~#: Introduction It is pretty well known that some Cross Site Scripting vulnerabilities can be browser depended. For example in

#TL;DR; In this post I show how I was able to find a Remote Code Execution vulnerability on a private

Some tips and tricks on exploiting Image File Uploads to achieve Stored XSS.