writeups.xyz writeups.xyz / Matt Austin (@Mattaustin)

Title Vulnerabilities Programs Authors
XSS to RCE in Atlassian Hipchat
Google Docs 'ClickJacking' (Information Disclosure)
Flickr XSS (Stored / DOM XSS)
Facebook FBML DOM Traversal (Information Disclosure)
Hacking Facebook with FBML and DOM
Facebook XSS via Cross-Origin Resource Sharing