tag
5 posts
While testing a web application as part of a bug bounty program, I uncovered a critical RCE vulnerability by chaining directory traversal with a subtle CSV parsing abuse. The exploit chain involved a
One of the issues I faced while testing a WebSocket-heavy application is that there aren't many filtering options available for WebSocket traffic — unlike HTTP messages in Burp Suite.
This blog post explores a recent finding I discovered in a bug bounty target. I stumbled upon a user enumeration issue that exposes email addresses without proper security measures. This vulnerability
Dependency Confusion(https://fossa.com/blog/dependency-confusion-understanding-preventing-attacks/) is a security vulnerability that affects software dependencies in the software development process.
I recently discovered a significant security vulnerability in a target. The vulnerability, HTTP request smuggling, allowed me to manipulate the application's behavior, potentially compromising user cr