Md. Fahim Shakil Chowdhury·Nov 3“Exploiting Trust: DOM Clobbering to Same-Origin Script Execution in Intigriti’s Registry…Author: Md. Fahim Shakil Chowdhury Target: Intigriti BRP Challenge 1026 challenge-brp.challenges.intigriti.io Vulnerability Class…
Mohammed Hasan Dakhve·Sep 4When a Static Page Wasn’t Really Static: Finding HTML Injection🔥During a security assessment, I came across an endpoint that initially looked completely harmless:
Abdelfattah Elsabagh·Sep 1When a Toast Notification Becomes an Attacker-Controlled UI — $$$ Bug Bountyبسم الله والصلاة والسلام على رسول الله سيدنا محمد صلي الله عليه وعلي اله وصحبه وسلم
Muhammadmaftuhk·Jul 27How I Turned an “Informative” HTML Injection into My First Paid BountyTL;DR: HTML Injection is often marked as Informative or N/A by triagers. However, by demonstrating how a hidden CSS overlay bypassed the…
Kamal S·Jun 21bWAPP HTML Injection — Reflected (URL) and Stored (Blog)Web applications heavily rely on user input, but improper handling of this input often introduces security vulnerabilities. One such…
Prashant Raj·Jun 17I Turned a “What’s Your Name?” Field Into a Malicious Link — My First HTML InjectionTryHackMe — How Websites WorkA response icon1A response icon1
Tanisha Bangera·Jun 10Research on HTML InjectionAs part of my cybersecurity internship at EyeQ Dot Net Private Limited | Cyber Security, one of my assigned tasks was to research HTML…
Lasya Anchan·Jun 10Research on HTML InjectionThis research was conducted as a part cybersecurity internship at EyeQ Dot Net Private Limited | Cyber Security
