writeups.xyz writeups.xyz / Viktor Mares

Title Vulnerabilities Programs Authors
ALWAYS test 404 Not Found in Bug Bounties!
Secret Input Header leads to Password Reset Poisoning
P1 Vulnerability by Bypassing the membership payment page
Code Injection via Python Sandbox Escape — how I got a shell inside a network.
Critical Vulnerability through OSINT only
Unusual 403 Bypass to a full website takeover [External Pentest]