Canal dedicado al bug bounty 🇪🇸:)
👽
By anubis

Instagram:

@elchicometeorito

Telegram:

@nomepillas

Contacto:

[email protected]

Partial construction race conditions
3:55
Partial construction race conditions
Exploiting time-sensitive vulnerabilities
3:08
Exploiting time-sensitive vulnerabilities
Single-endpoint race conditions
3:15
Single-endpoint race conditions
Multi-endpoint race conditions
3:39
Multi-endpoint race conditions
Bypassing rate limits via race conditions
2:28
Bypassing rate limits via race conditions
Bypassing GraphQL brute force protections
3:08
Bypassing GraphQL brute force protections
Performing CSRF exploits over GraphQL
1:29
Performing CSRF exploits over GraphQL
Limit overrun race conditions
3:59
Limit overrun race conditions
Finding a hidden GraphQL endpoint
2:01
Finding a hidden GraphQL endpoint
Accidental exposure of private GraphQL fields
1:35
Accidental exposure of private GraphQL fields
Accessing private GraphQL posts
2:29
Accessing private GraphQL posts
Visible error-based SQL injection
1:22
Visible error-based SQL injection
SameSite Lax bypass via cookie refresh
3:12
SameSite Lax bypass via cookie refresh
SameSite Strict bypass via sibling domain
3:43
SameSite Strict bypass via sibling domain
SameSite Strict bypass via client-side redirect
2:41
SameSite Strict bypass via client-side redirect
SameSite Lax bypass via method override
1:23
SameSite Lax bypass via method override
Exfiltrating sensitive data via server-side prototype pollution
3:40
Exfiltrating sensitive data via server-side prototype pollution
Remote code execution via server-side prototype pollution
1:27
Remote code execution via server-side prototype pollution
Bypassing flawed input filters for server-side prototype pollution
1:01
Bypassing flawed input filters for server-side prototype pollution
Detecting server-side prototype pollution without polluted property reflection
1:38
Detecting server-side prototype pollution without polluted property reflection
Privilege escalation via server-side prototype pollution
1:46
Privilege escalation via server-side prototype pollution
Discovering vulnerabilities quickly with targeted scanning
2:25
Discovering vulnerabilities quickly with targeted scanning
Client-side prototype pollution via flawed sanitization
3:46
Client-side prototype pollution via flawed sanitization
DOM XSS via an alternative prototype pollution vector
1:15
DOM XSS via an alternative prototype pollution vector
Client-side prototype pollution in third-party libraries
1:47
Client-side prototype pollution in third-party libraries
Client-side prototype pollution via browser APIs
0:54
Client-side prototype pollution via browser APIs
DOM XSS via client-side prototype pollution
1:43
DOM XSS via client-side prototype pollution
Client-side desync
6:50
Client-side desync
Server-side pause-based request smuggling
6:29
Server-side pause-based request smuggling
Browser cache poisoning via client-side desync
6:26
Browser cache poisoning via client-side desync