⌘Ctrlk

Whoami
Notes
owsap-top-10:2025
write up
How I Turned an Image Upload Feature into Full Server Access Using DNS Queries
How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE
Privilege Escalation via Impersonation Features feature
How I Escalated Simple HTML Injection to SSRF via PDF Rendering
How I was able to discover ATO Via IDOR vulnerability
how I Bypassed SAML Authentication, and had access to Admin Panel.

Powered by GitBook

On this page

owsap-top-10:2025
A05 Injection

Cross Site Scripting

Cross Site Scripting Exploitation Protections

PreviousA05 Injection NextCross Site Scripting

Last updated 1 year ago