Quartz 🪬

Tag: write-up

52 items with this tag.

Dec 24, 2025
🚀 Ethernaut
Dec 24, 2025
Mercedes-Benz
- write-up
Dec 24, 2025
MD SDK
Dec 24, 2025
MD OT Security
Dec 24, 2025
Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF
Dec 24, 2025
Fullpage.js Audit
- write-up
Dec 24, 2025
Traveling with OAuth - Account Takeover on Booking.com
Dec 24, 2025
Testing LFI in Windows - How I (never) got a $30000 bounty
Dec 24, 2025
Stored XSS to Account Takeover (ATO) via GraphQL API
Dec 24, 2025
Salt Labs Exposes a New Vulnerability in Popular OAuth Framework
Dec 24, 2025
Oh-Auth - Abusing OAuth to Take over Millions of Accounts
Dec 24, 2025
How We Got Persistent XSS on Every AEM Cloud Site, Thrice
Dec 24, 2025
How I Discovered XSS that Affects around 20 Uber Subdomains
Dec 24, 2025
Bypassing Access Control through OPTIONS Request + Method Smuggling
Dec 24, 2025
Bootstrap Audit
- write-up
Nov 08, 2025
HackerOne Reports - 8
- write-up
Oct 08, 2025
HackerOne Reports - 1
- write-up
Oct 08, 2025
HackerOne Reports - 2
- write-up
Oct 08, 2025
HackerOne Reports - 3
- write-up
Oct 08, 2025
HackerOne Reports - 4
- write-up
Oct 08, 2025
HackerOne Reports - 5
- write-up
Oct 08, 2025
HackerOne Reports - 6
- write-up
Oct 08, 2025
HackerOne Reports - 7
Aug 09, 2025
Bypassing Access Control through OPTIONS Request + Method Smuggling
- write-up
- broken-access-control
Aug 09, 2025
Bypassing HackerOne 2FA Due to Race Condition
Aug 09, 2025
Hacking High-Profile Bug Bounty Targets - Deep Dive into a Client-Side Chain
Aug 09, 2025
How I Discovered XSS that Affects around 20 Uber Subdomains
- XSS
- write-up
Aug 09, 2025
How We Got Persistent XSS on Every AEM Cloud Site, Thrice
- XSS
- write-up
Aug 09, 2025
Oh-Auth - Abusing OAuth to Take over Millions of Accounts
Aug 09, 2025
PayPal Bypass OTP Verification Code Vulnerability Worth $15,000 Bounty
- write-up
- 2fa-bypass
Aug 09, 2025
Salt Labs Exposes a New Vulnerability in Popular OAuth Framework
- oauth-vulns
- write-up
Aug 09, 2025
Stored XSS to Account Takeover (ATO) via GraphQL API
Aug 09, 2025
Testing LFI in Windows - How I (never) got a $30000 bounty
- file-inclusion
- write-up
Aug 09, 2025
Traveling with OAuth - Account Takeover on Booking.com
- write-up
- oauth-vulns
Aug 09, 2025
Trivial Csharp Random Exploitation
Aug 09, 2025
Using Microsoft SSO to Achieve Full Account Takeover
Aug 09, 2025
SEED Lab - ARP Cache Poisoning
Aug 09, 2025
SEED Lab - Cross Site Request Forgery
Aug 09, 2025
SEED Lab - Cross Site Scripting
Aug 09, 2025
SEED Lab - ICMP Redirect Attack
Aug 09, 2025
SEED Lab - Kaminsky Attack
Aug 09, 2025
SEED Lab - Local DNS Attack
Aug 09, 2025
SEED Lab - Mitnick Attack
- write-up
- network-protocol/TCP
Aug 09, 2025
SEED Lab - SQL Injection
Aug 09, 2025
SEED Lab - Sniffing and Spoofing
Aug 09, 2025
SEED Lab - TCP Attacks
Jul 12, 2025
🪙 Web3 Security
Jul 10, 2025
Freepik
- write-up
- bug-bounty
Jun 07, 2025
Bypassing HackerOne 2FA Due to Race Condition
Jun 07, 2025
PayPal Bypass OTP Verification Code Vulnerability Worth $15,000 Bounty
- write-up
- oath-vulns
Apr 08, 2025
Pytorch - SemGrep Report
- write-up
Mar 08, 2025
OAuth Labs

Created with Quartz v4.5.2 © 2025

GitHub
Discord Community