vdp, write-upHow I hacked XXXX for fun and !profit2025-02-090CommentsI am a little bit late but Happy New Year :) In the beginning of the year I decided to hack one company, let's call it…
Bez kategorii, vdp, write-upFrom AngularJS CSTI to credentials theft2024-07-030CommentsHello again This time I will tell you about the easy way of credentials theft. I was doing some recon on some sites. I stumbled upon a…
Bez kategorii, vdp, write-upHow I found multiple critical bugs in Red Bull2022-12-260CommentsAuth misconfiguration One afternoon I decided to try my luck on the Red Bull VDP program. I gathered the subdomains and looked at interesting ones…
Bez kategorii, vdp, write-upBlind os command injection2022-08-210CommentsHi dear readers. This story is about how to find command injection, which leads to RCE getting "Thank you" in return :). I was hunting on…
Bez kategorii, vdp, write-upFive-minute hunting for hidden XSS2022-08-150CommentsOne night I was about to go to sleep, however, set the goal of finding the bug within a max of 15 minutes. I did…
Bez kategorii, vdp, write-upURL filter bypass, RFI and XSS2022-08-140CommentsIn this story, I tell you how I was able to bypass the URL filtering rule to inject my own files into the server and…
Bez kategorii, vdp, write-upThe forgotten API and XSS filter bypass2022-08-140CommentsOn one site I found the forum section. There was an option to join some groups and then create posts in the group. I created…
Bez kategorii, vdp, write-upXSS via Angular Template Injection2022-08-130CommentsThis time I have a story about several XSS bugs I found across several programs. This type of XSS is called CSTI XSS (Client Side…