writeups.xyz writeups.xyz / Mandeep Jadon (@1337tr0lls)

Title Vulnerabilities Programs Authors
Parsing the DOM elements of Other pages via XSS: A Bug Bounty Story
Chaining Improper Authorization To Race Condition To Harvest Credit Card Details : A Bug Bounty Story
Simple Login Brute Force / Current Password Requirement Bypass
That Escalated Quickly : From partial CSRF to reflected XSS to complete CSRF to Stored XSS