// archive
Tag: Filter Bypass
BUG BOUNTY WRITEUPS
XSS Like a Pro: Beating Filters Across a Private Program
// TL;DR A private Bugcrowd invite, one in-scope test site, and a set of provided credentials. It turned into eleven vulnerabilities in a single session —…
BUG BOUNTY WRITEUPS
A Tricky Open Redirect – Filter Bypass
// TL;DR One of my favourite little findings. A private Bugcrowd program had a login?nextUrl= redirect parameter that rejected the usual open-redirect payloads. A random test…
BUG BOUNTY WRITEUPS
Stored XSS via Email Reply (H1C Private Site)
// TL;DR This is one of the trickier XSS bugs I’ve found. The target was an email-marketing platform, and the injection point wasn’t a web form…