Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Plone Authenticated RCE- 510

cyllectivePosted 4 Years Ago

Argument Injection in Ruby Dragonfly- 509

Michael TsaiPosted 4 Years Ago

RCE in ExifTool on Gitlab- 508

VakzzPosted 4 Years Ago

Terminal escape injection in AWS CloudShell- 507

Felix WilhelmPosted 4 Years Ago

One-click reflected XSS in www.instagram.com- 506

Youssef SammoudaPosted 4 Years Ago

Why Scoping Cookies to Parent Domains is a Bad Idea- 505

AcunetixPosted 4 Years Ago

WordPress XXE Vulnerability in Media Library- 504

wpsecPosted 4 Years Ago

nginx DNS Resolver Off-by-One Heap Write Vulnerability- 503

X41 D-Sec GmbH Posted 4 Years Ago

M1ssing Register Access Controls Leak EL0 State- 502

Hector MartinPosted 4 Years Ago

Better 2FA Bug hunting Approach- 501

admiralarjunPosted 4 Years Ago