ჯვრის ტბა

GraphQL - OS Command injection

Self reflect XSS on the portswigger web security academy JWT lab

GraphQL - Chain Introspection with SQLi

Chain File Upload with XSS

Directory Listing - Active scan

Reflect XSS with Content-Type: text/xml

Reflect XSS 1

Dom XSS2

Dom XSS1

Common Files

Login page Brute Force with ffuf

JWT Attack - Exploiting X5U Header injection

JWT attack - Exploiting JKU Header injection

JWT Attack - Exploiting X5C Header

JWT Attack - JWK - JSON Web Key injection

JWT Attack - Weak Key - Secret Brute force with Hashcat

JWT Attack - Secret Brute force with Hashcat

JWT Attack - Signature is not checked

Check Time based SQLi

ჯვრის ტბა

XSS from jpg with Amazon S3 Bucket

From CRLF to XSS on http://yun.oppo.com

s3 Bucket Takeover by me

crlf injection on https://bug.qiwi.com