writeups.xyz writeups.xyz / Yassine Aboukir (@Yassineaboukir)

Title Vulnerabilities Programs Authors
Hunting for Amazon Cognito Security misconfigurations
Exploitation of an SSRF vulnerability against EC2 IMDSv2
Exploiting a double-edged SSRF for server and client-side impact
Neglected DNS records exploited to takeover subdomains
How I discovered a 1000$ open redirect in Facebook