<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>/blog/xss_at_blogger/</loc>
<lastmod>2013-10-23T21:53:00+00:00</lastmod>
</url>
<url>
<loc>/blog/xss-in-oauth-flow-of-paypal/</loc>
<lastmod>2014-05-31T18:40:00+00:00</lastmod>
</url>
<url>
<loc>/posts/heartbleed-at-slacks-status-server/</loc>
<lastmod>2015-01-03T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/posts/ssrf-at-update-subscription-menu/</loc>
<lastmod>2015-12-13T17:03:01+00:00</lastmod>
</url>
<url>
<loc>/posts/stored-xss-at-parse/</loc>
<lastmod>2015-12-13T17:25:34+00:00</lastmod>
</url>
<url>
<loc>/blog/silently-using-facebook-xmpp/</loc>
<lastmod>2016-03-18T11:19:03+00:00</lastmod>
</url>
<url>
<loc>/posts/stealing-etsys-csrf-token-with-s3-bucket/</loc>
<lastmod>2016-10-11T15:50:08+00:00</lastmod>
</url>
<url>
<loc>/posts/that-which-made-the-difference/</loc>
<lastmod>2016-10-22T00:00:00+00:00</lastmod>
</url>
<url>
<loc>/posts/stored-xss-at-exchange-onavo-com/</loc>
<lastmod>2017-02-12T00:02:52+00:00</lastmod>
</url>
<url>
<loc>/posts/uart-dlink-router-connection/</loc>
<lastmod>2026-05-15T14:30:00+00:00</lastmod>
</url>
<url>
<loc>/posts/unlocking-silicon-hardware-reversing-atmega16a-ctf/</loc>
<lastmod>2026-07-08T13:42:00+00:00</lastmod>
</url>
<url>
<loc>/categories/</loc>
<lastmod>2026-07-08T14:01:56+00:00</lastmod>
</url>
<url>
<loc>/tags/</loc>
<lastmod>2026-07-08T14:01:56+00:00</lastmod>
</url>
<url>
<loc>/archives/</loc>
<lastmod>2026-07-08T14:01:56+00:00</lastmod>
</url>
<url>
<loc>/about/</loc>
<lastmod>2026-07-08T14:01:56+00:00</lastmod>
</url>
<url>
<loc>/</loc>
</url>
<url>
<loc>/tags/security/</loc>
</url>
<url>
<loc>/tags/heartbleed/</loc>
</url>
<url>
<loc>/tags/ssl/</loc>
</url>
<url>
<loc>/tags/vulnerability/</loc>
</url>
<url>
<loc>/tags/slack/</loc>
</url>
<url>
<loc>/tags/facebook/</loc>
</url>
<url>
<loc>/tags/ssrf/</loc>
</url>
<url>
<loc>/tags/domain/</loc>
</url>
<url>
<loc>/tags/dns/</loc>
</url>
<url>
<loc>/tags/subdomain-takeover/</loc>
</url>
<url>
<loc>/tags/uart/</loc>
</url>
<url>
<loc>/tags/dlink/</loc>
</url>
<url>
<loc>/tags/router/</loc>
</url>
<url>
<loc>/tags/serial/</loc>
</url>
<url>
<loc>/tags/embedded/</loc>
</url>
<url>
<loc>/tags/linux/</loc>
</url>
<url>
<loc>/tags/firmware/</loc>
</url>
<url>
<loc>/tags/atmega16a/</loc>
</url>
<url>
<loc>/tags/ctf/</loc>
</url>
<url>
<loc>/tags/hardware-hacking/</loc>
</url>
<url>
<loc>/tags/reverse-engineering/</loc>
</url>
<url>
<loc>/tags/isp/</loc>
</url>
<url>
<loc>/tags/avrdude/</loc>
</url>
<url>
<loc>/tags/ghidra/</loc>
</url>
<url>
<loc>/tags/defcon/</loc>
</url>
<url>
<loc>/categories/security/</loc>
</url>
<url>
<loc>/categories/ssrf/</loc>
</url>
<url>
<loc>/categories/hardware/</loc>
</url>
<url>
<loc>/categories/networking/</loc>
</url>
<url>
<loc>/categories/embedded-systems/</loc>
</url>
<url>
<loc>/categories/reverse-engineering/</loc>
</url>
<url>
<loc>/categories/ctf/</loc>
</url>
<url>
<loc>/page2/</loc>
</url>
</urlset>
