Menu Home

Stored XSS: Maximizing Your Profits

Introduction: Hello everyone, Today I’d like to share an interesting bug bounty tip with you. In the realm of hunting for vulnerabilities, it’s not uncommon to encounter numerous obstacles that hinder your progress. These challenges might obscure your vision of the situation. However, stepping out from this trap is the […]

Hackfest 2023 – Back to the future

Back to the future

Hello Hackers, For this article, I wanted to take a break from our usual focus on hacking and instead share my unforgettable experience at the Hackfest event, a thrilling gathering of tech enthusiasts and hackers from around the world. Let me dive into the incredible journey and the inspiring moments […]

BugPOC Challenge #4 – Wacky XSS

$ Introduction: Here we are again !! BugPOC team doesn’t stop impressing us by their commitment. Last time, we dealt with a local file inclusion (LFI). This time, a new XSS challenge made with love. This one is close enough to the real world of bug bounty, and it’s worth […]

Bug Bounty – Strange Stored XSS

I found a stored XSS in a private program (I can’t mention it). A user can add a favorite article to his/her watch list to keep track of them for future use.  As an attacker, the request was interecepted, and a malicious javascript is inserted in its parameters. This makes […]