writeups.xyz / Null Byte on Steroids

Submitter : c2a

Date: 6 February 2024

Bounty : undisclosed

Vulnerabilities :

• Null-Byte Injection
• Account Takeover
• Password Reset
• SQL Injection
• Path Traversal
• XSS
• WAF Bypass

Programs :

• Undisclosed

Authors :

• Omar (@0x0ld)

Link :
https://medium.com/@0xold/null-byte-on-steroids-23f8104a25ec