AbolFazl retweeted
Re:CACHE - Excessive reflection, type confusion, and 0-click SXSS on Next.js
Nice chain leading to Stored XSS by @zhero___
zhero-web-sec.github.io/rese…
AbolFazl retweeted
Check out my new write-up, hope you enjoy it!
medium.com/@n0body1337/a-uni…
AbolFazl retweeted
Anchor/area tags can leak page URLs (origin, path, query, post-click fragment) by using href="#" with the ping attribute pointing elsewhere.
Works in Chrome and Safari (Firefox disables ping by default).
storage.googleapis.com/nowas…
AbolFazl retweeted
اولین مقاله م به فارسی. توضیح یکی از باگ هام:
Zero Click ATO
فلو یا تریک خاصی نیس. صرفا ریکانه و درک اپلیکیشن
امیدوارم خوشتون بیاد
mey-d.github.io/posts/zero-c…
Quick Tip: Hunting CORS? Go beyond payloads. In DevTools → debugger, search for regex / RegExp and grab any domains you see. Test them as Origins — broken regex on trusted domains can = bypass 🚨 And don’t forget: some may be purchasable 👀
#bugbountytip #bugbountytips
AbolFazl retweeted
A tiny blog post of mine about exploiting self-XSS using disk cache—
inspired by @J0R1AN
Hope you like it!
mey-d.github.io/posts/self-x…
AbolFazl retweeted
Just found an interesting behavior in Firefox that can be used for XSS:
If a response lacks the Content-Type header, Firefox renders it as text/plain.
But if the URL ends with an extension like .html, Firefox treats it as that.
#bugbounty #bugbountytips
AbolFazl retweeted
Explore my blog on XSS WAF bypass, covering various tricks and techniques:
meydi.hashnode.dev/master-of…
#bugbounty #bugbountytip #xss