writeups.xyz writeups.xyz / Harel (@H4r3l)

Title Vulnerabilities Programs Authors
Zoom Session Takeover - Cookie Tossing Payloads, OAuth Dirty Dancing, Browser Permissions Hijacking, and WAF abuse
ChatGPT Account Takeover - Wildcard Web Cache Deception
Caching the Un-cacheables - Abusing URL Parser Confusions (Web Cache Poisoning Technique)