Web

• PostMessage Vulnerabilities. Part II 17 Jul 2020

• PostMessage Vulnerabilities. Part I 12 Jun 2020

• 2 Path Traversal Cases 29 Mar 2020

• WAF Bypassing with Unicode Compatibility 19 Feb 2020

• Detecting valid tags/events on XSS exploitation. 25 Jan 2020

• Exploiting XSS with 20 characters limitation 30 Nov 2019

• HSTS vs SSL Stripping attacks. 11 Nov 2019

• Common Cross-Site Scripting scenarios. 3 Bug Bounty cases 10 Oct 2019

• Second Order SQLI: Automating with sqlmap 29 Apr 2019

• XSS 101 - Solving Google's XSS Challenge 16 Dec 2018

• JS-Recon detailed. Analizying the internal network with a XSS 18 Oct 2018

• Auditing a Payment Processing of a Booking Framework 07 Oct 2018