How a Simple Analysis Revealed an IDOR That Exposed User PII
The importance of thorough endpoint analysis can uncover hidden gems...
Read post →← All posts
Filtering by tag
#bugbounty
2 posts found.
From a 404 to RCE via SSTI and Stored XSS
How a simple 404 page hid an exploitation chain that led to Stored XSS and RCE via Twig SSTI — fully compromising the infrastructure.
Read post →