Skip to main content

Posts

Follow me on

Twitter: Scalar360


List of writeups and tools, 8 parts every month

Monthly List of blogs, To community from community [APRIL]

List of blogs which are very much worth reading (Latest writups, Old writeup, Tools). Specially for bug bounty hunters.   -To all authors     Thanks a lot for writing and sharing๐Ÿ™ [APRIL] 01/04/2020 1)  Yahoo – Root Access SQL Injection – tw.yahoo.com     2) Best of power shell practical   3) GitHub Enterprise SQL Injection  4) CMS Pentesting article 5) Post Exploitation on Saved Password with LaZagne  6) API pentesting 05/04/2020 1) Exploiting the JSON CSRF with method override technique 2)  Abusing XSS Filter: One ^ leads to XSS(CVE-2016-3212)  3) How I bypassed the OTP verification process? Part — 1 4) How I bypassed the OTP verification process? Part — 2 5) How I bypassed the OTP verification process? Part — 3 6)  SQL Injection Vulnerability bootcamp.nutanix.com 10/04/2020 1) Very cool XXE bug in a Web Service 2) Exploiting an SSRF: Trials and Tribulations 3) Yahoo Mail stored XSS   4)  Combination of techniques lead to DOM Ba

Latest posts

Monthly List of blogs, To community from community [MARCH]

DOS in imgix CDN's image processing application by pixel flood

DOS access to a user's account (Application-Level Denial-of-Service)

A simple Account takeover misusing JWT late expiration