Md. Fahim Shakil Chowdhury·Nov 3“Exploiting Trust: DOM Clobbering to Same-Origin Script Execution in Intigriti’s Registry…Author: Md. Fahim Shakil Chowdhury Target: Intigriti BRP Challenge 1026 challenge-brp.challenges.intigriti.io Vulnerability Class…
Mohammed Hasan Dakhve·Sep 4When a Static Page Wasn’t Really Static: Finding HTML Injection🔥During a security assessment, I came across an endpoint that initially looked completely harmless:
Abdelfattah Elsabagh·Sep 1When a Toast Notification Becomes an Attacker-Controlled UI — $$$ Bug Bountyبسم الله والصلاة والسلام على رسول الله سيدنا محمد صلي الله عليه وعلي اله وصحبه وسلم
Muhammadmaftuhk·Jul 27How I Turned an “Informative” HTML Injection into My First Paid BountyTL;DR: HTML Injection is often marked as Informative or N/A by triagers. However, by demonstrating how a hidden CSS overlay bypassed the…
