tag

penetration testing

4 posts

April 30, 20254 min read

Escalating Self-XSS for Riches

I have a bit of a love hate relationship with Self XSS. I find them somewhat regularly, and while I do think programs should pay a bounty for them (the lowest they offer), I’m…

bug bounty xss hacking penetration testing

April 29, 20252 min read

A Very Brief Look at YesWiki

After I created TemplateSearch.io, I was testing it out by searching for random things and I came across several templates for YesWiki. So I Googled it to see exactly what it is…

hacking bug bounty penetration testing web application cve pentesting research white box

April 28, 20251 min read

Funny Bug Bounty Reports #1

This is the first part in my new series "Funny Bug Bounty Reports". These are not judged on their merits, technical abilities, or anything other than if they make me laugh. Today,…

funnybbreports bug bounty penetration testing

April 1, 20255 min read

Pentesting a ClickHouse DB

I recently ran across an application that allowed access to a ClickHouse DB for my user. The access was allowed, so that isn't an issue. However, when we as pentesters or bug…

db clickhouse cybersecurity misconfigurations bug bounty clickhouse reverse shell penetration testing

← all tags