writeups.xyz writeups.xyz / Bend Theory (@Bendtheory)

Title Vulnerabilities Programs Authors
Remediation Archeology — Finding and Decoding an Ancient XSS
A Case Study of API Vulnerabilities - Part 2, and Empty Heads
Oauth client secret leak and possible IDOR leading to PII Disclosure
Finding and Exploiting Unintended Functionality in Main Web App APIs
Journeys in Quoteless and Multi Reflection XSS