Bypassing Samesite Cookie Restrictions with Method Override
Neat Samesite Bypass Trick
Bypassing Samesite Cookie Restrictions with Method Override
[Read More]
Finding Unblocked Vectors for XSS
Level up your XSS Game
When you have that feeling an input is vulnerable to XSS but something is blocking or removing the payload, you can use this relatively simple trick using Burp Suite’s Intruder to discover which XSS tags and attributes are able to bypass the block.
[Read More]
Dorking on Steroids
Dorking at scale
It’s common knowledge Google dorking is a powerful tool for finding just about anything on targets. Furthermore it’s extra nice that Google has done the majority of the hard work for us, we just know have to know how to search for it.
[Read More]
Escalating reflected XSS with HTTP Smuggling
Increase impact of XSS
This vulnerability was found on a private programme, therefore parts have been redacted.
[Read More]
Cors Blimey
The power of chaining CORS
This vulnerability was found on a private programme, therefore parts have been redacted.
[Read More]