Utrecht, The Netherlands
Joined September 2024
- Tweets47
- Following255
- Followers621
- Likes598
1/5
Had to take a break from bug bounty about 10 months ago because of some things going on in my life. Over the past month, I’ve been trying to get back into hunting.
4/5
These are some of the findings from the past month. Ngl, AI agents handled around 90% of the process, from discovery to exploitation.
1
13
680
Found a neat XSS trick chaining two primitives: `javascript:` scheme + `window.name`
Result:
payload from attacker origin executes on target.com.
can be used to bypass WAFs more conveniently since there is no malicious payload in the URL.
4
21
1,099
چجوری تونستم با DNS Rebinding ولیدیشن رو دور بزنم و نهایتا به ATO برسم:
memoryleaks.ir/dns-rebinding…
نتیجه یک ماه هانت روی Hashnode : چهار تا باگ high severity
تشکر فراوان از یاشار و تیم خوبش. این رایتاپ باعث شد یکی از جذاب ترین وکتور ها برای dns rebinding به ذهنم برسه. یه رایتاپ در موردش مینویسم به زودی.
@voorivex
blog.voorivex.team/account-t…
