4 min read
Escalating Self-XSS for Riches
I have a bit of a love hate relationship with Self XSS. I find them somewhat regularly, and while I do think programs should pay a bounty for them (the lowest they offer), I’m…
All posts · Page 2
2 min read
A Very Brief Look at YesWiki
After I created TemplateSearch.io, I was testing it out by searching for random things and I came across several templates for YesWiki. So I Googled it to see exactly what it is…
1 min read
Funny Bug Bounty Reports #1
This is the first part in my new series "Funny Bug Bounty Reports". These are not judged on their merits, technical abilities, or anything other than if they make me laugh. Today,…
1 min read
Behold! TemplateSearch.io
I was tired of manually searching for the right Nuclei templates to use. The one existing site that lets you search them — while interestingly designed and certainly more stylish…
2 min read
Installing Tailscale on a Wifi Pineapple
I went to install Tailscale on a Wifi Pineapple, and the normal pipe to bash (lol) script didn't work. I had to do it manually like this. YMMV attempt at your own risk . I'm…
1 min read
California Top 25 Researcher 2024
I received an email saying I'm a top 25 researcher in the California VDP from 2024. Not too bad from the thousands of reports they get, I'm sure.
5 min read
Pentesting a ClickHouse DB
I recently ran across an application that allowed access to a ClickHouse DB for my user. The access was allowed, so that isn't an issue. However, when we as pentesters or bug…
1 min read
BugCrowd P1 Warrior Swag
The other day I received an email saying I was eligible for some swag for getting my 25th valid P1 submission on BugCrowd. I don't do too much BB hunting these days, and also not…
1 min read
reMarkable Paper Pro Sleep Screen Changing via "HTML Injection"
That's in quotes, because this is seemingly a self HTML injection with little to no security impact, but it does allow for you to change your reMarkable's sleep screen in a…
3 min read
Mura/Masa CMS - SQL Injection CVE-2024-32640
A while back the illustrious team over at Project Discovery wrote about the discovery of an SQLi in Masa/Mura CMS . It's a good writeup, so go check it out for the technical…