BSides-Bangalore CTF - Cookie Tracker Blind XSS Challenge
This was a blind XSS challenge where the goal was to read the admin's cookie. The given website was called "Cookie Tracker" and had three functionalities:
category
writeup
4 posts
Unauthenticated Email Enumeration via API Fuzzing
This blog post explores a recent finding I discovered in a bug bounty target. I stumbled upon a user enumeration issue that exposes email addresses without proper security measures. This vulnerability
Remote Code Execution through Dependency Confusion using Burpsuite Extension
Dependency Confusion(https://fossa.com/blog/dependency-confusion-understanding-preventing-attacks/) is a security vulnerability that affects software dependencies in the software development process.
Stealing Login Credentials using HTTP Request Smuggling
I recently discovered a significant security vulnerability in a target. The vulnerability, HTTP request smuggling, allowed me to manipulate the application's behavior, potentially compromising user cr