Introduction I recently tackled a custom CTF board built around the classic Atmel ATmega16A 8-bit microcontroller from Defcon 33 Bug Bounty Village. This challenge beautifully demonstrated the int...
Introduction UART (Universal Asynchronous Receiver-Transmitter) is a fundamental protocol used in embedded systems and networking devices for serial communication. D-Link routers often have a UART...
A stored XSS vulnerability found on exchange.onavo.com during security research
TL;DR Help Scout did distinguish between regular domain name and trailing dot domains which lead to trivial low risk sub domain takeover After reading The story of EV-SSL, AWS and trailing dot dom...
TLDR; S3 bucket was mis-configured while crossdomain.xml was lenient. So the chain of vulnerabilities threw CSRF Token out of the window.
XMPP login was not listed in Sessions Tab. Facebook could be accessed via XMPP and can be used as messenger. Using Jabber client you can connect at chat.facebook.com:5222
A stored XSS vulnerability found in Parse Gallery
This blog is about the SSRF I found in Facebook. A while ago I was fiddling with Facebook’s Developer Section and I noticed Update Subscription Menu. So, basically this menu allows you to enter...
Slack has a bug bounty program on Hackerone One day I found this status.slack.com This sub-domain looked different, maybe because this server was outside the main network. Though I could not fin...
One fine night while tinkering with Paypal's REST API lead to XSS in their OAuth flow. Paypal REST API provides a simple payment solution, but analyzing the authentication revealed it was only client-side validation.