#xss
2 articles
Business Logic: Broken. Wallet: Hacked. OTP: Bypassed.
Chaining an OTP bypass, a wallet-balance business-logic flaw, and a stored XSS in file uploads to compromise a virtual assistance platform.
·7 min readXSS Meets IDOR: A Double Vulnerability Story on a Learning Platform 🔥
Chaining a stored HTML injection, an IDOR on predictable blog IDs, and stored XSS into full account takeover on a learning platform.
·5 min read