The Dark Side of Contact Forms: How I Identified 7 CVEs in WordPress Plugins |
|
|
|
Chaining Self Blind XSS with Broken Access Control To Make it Non Self Blind XSS |
|
|
|
Exploiting insecure exception logging |
|
|
|
Blind XSS via SMS Support Chat — $1100 Bug Bounty! |
|
|
|
Blind XSS fired on Admin panel worth $2000 |
|
|
|
Blind XSS To SSRF |
|
|
|
“2022: A Year of Fascinating Discoveries” |
|
|
|
Hacking Hackers for fun and profit |
|
|
|
Blind XSS in Email Field; 1000$ bounty |
|
|
|
Vue JS Reflected XSS |
|
|
|
How I took over an admin panel and got $500 |
|
|
|
Russian roulette XSS |
|
|
|
Get Blind XSS within 5 Minutes — $100 |
|
|
|
5000$ for Apple Stored Xss And Another Blind Xss Still under review |
|
|
|
Blind XSS on Admin Portal Leads to Information Disclosure |
|
|
|
Blind XSS and Time-Based SQL Injection to Admin Panel Control and Database Takeover |
|
|
|
$900 Blind XSS |
|
|
|
N/a to $750 bounty for a Blind XSS. |
|
|
|
Blind XSS in Apple School- Enrollment Data Disclosure |
|
|
|
Blind XSS on Google Internal System |
|
|
|
(CRITICAL) Blind Storage XSS — My first Bug Bounty 💰 |
|
|
|
Chaining bugs for the greater good |
|
|
|
[Google VRP] How I Get Blind XSS At Google With Dork (First Bounty and HOF ) |
|
|
|
Blind XSS in Google Analytics Admin Panel — $3133.70 |
|
|
|
Story of the best vulnerability I’ve found so far… |
|
|
|