Pwning a Server using Markdown

Pwning a Server using Markdown

Escalating a bug in a vulnerable markdown parser to exploit LFI and get RCE

Author

·

Exploiting OAuth: Journey to Account Takeover

Exploiting OAuth: Journey to Account Takeover

Author

·

A deep dive into Task Hijacking in Android

A deep dive into Task Hijacking in Android

Author

·

Hacking a Chrome Extension for Fun and Profit

Hacking a Chrome Extension for Fun and Profit

·

One-click SSL-Pinning Bypass Setup

One-click SSL-Pinning Bypass Setup

·

Leveraging XSS to Read Internal Files

Leveraging XSS to Read Internal Files

·

From Android Static Analysis to RCE on Production

From Android Static Analysis to RCE on Production

·

Bypassing Google Maps API Key Restrictions

Bypassing Google Maps API Key Restrictions

·

Exploiting JWT - Lack of Signature Verification

Exploiting JWT - Lack of Signature Verification

·

Android Pentesting CheatSheet

Android Pentesting CheatSheet

·

Exploiting Docker Registry

Exploiting Docker Registry

·