tag

xss

3 posts

April 30, 20254 min read

Escalating Self-XSS for Riches

I have a bit of a love hate relationship with Self XSS. I find them somewhat regularly, and while I do think programs should pay a bounty for them (the lowest they offer), I’m…

bug bounty xss hacking penetration testing

October 20, 20234 min read

Hacking RAMADDA, White Box Web Apps, and Bug Bounty Tips

Note: disregard any layout/content/formatting errors as this post was migrated from wordpress to jekyll As mentioned in a previous post, I was the July RotM for the DoD VDP…

appsec cybersecurity debugging hacking infosec java rce white box xss aws bug bounty bugbounty CVE

October 11, 20221 min read

Guitar Pro Directory Traversal and Filename XSS

These were given CVE 2022 43263 and CVE 2022 43264. I found these vulnerabilities in the latest version of Guitar Pro (1.10.2) on the iPad and iPhone. Neither one is that great of…

cybersecurity directory traversal guitar pro hacking infosec xss offensive security offsec

← all tags