unSafe.sh - 不安全
我的收藏
今日热榜
公众号文章
导航
Github CVE
Github Tools
编码/解码
文件传输
Twitter Bot
Telegram Bot
Search
Rss
黑夜模式
How I Got a Letter of Recognition from NASA (And How You Can Too)
The GoalGetting a letter of recognition from NASA's Vulnerability Disclosure Program is an accolade...
2026-5-31 01:2:41 | 阅读: 49 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
filetype
letter
dorks
pushed
inurl
HTTP Request Smuggling Lab Basic CL.TE vulnerability
CL.TEPress enter or click to view image in full size(gemini generated)Hello Fellow hackers!!! Today...
2026-5-31 01:2:2 | 阅读: 55 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
sandwich
taker
turkey
sees
chef
I Stopped Trying To Learn Everything In Cybersecurity
The moment I stopped chasing every new tool and trend, learning finally became calmer.Press enter or...
2026-5-31 00:59:12 | 阅读: 37 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
felt
security
0xdiddy
became
Introduction to SQL Injection
SQL injection is included within the Injection category (A03) in the most current official OWASP Top...
2026-5-31 00:58:10 | 阅读: 55 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
injection
database
band
attacker
resultset
Blockchain Kya Hota Hai? Bilkul Zero Se Samjho!
Press enter or click to view image in full sizeSeries: Web3 Security Zero se Advance | Article #1By...
2026-5-31 00:51:40 | 阅读: 43 |
收藏
|
Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com
hai
ka
mein
blockchain
ek
Blockchain Kya Hota Hai? Bilkul Zero Se Samjho!
Press enter or click to view image in full sizeSeries: Web3 Security Zero se Advance | Article #1By...
2026-5-31 00:51:40 | 阅读: 50 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
hai
ka
blockchain
mein
ek
How I Exposed an AI Company’s Finances
Disclosure Notice: This vulnerability was responsibly disclosed to the affected company. The issue h...
2026-5-31 00:50:51 | 阅读: 63 |
收藏
|
Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com
supabase
anon
security
rls
database
How I Exposed an AI Company’s Finances
Disclosure Notice: This vulnerability was responsibly disclosed to the affected company. The issue h...
2026-5-31 00:50:51 | 阅读: 59 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
supabase
anon
security
rls
database
The Regex Said Safe. The Parser Disagreed, NASA Earth Science Platform had a Critical Vulnerability
A sanitizer that understood text. A parser that understood grammar. The gap between them was a CVSS...
2026-5-31 00:49:35 | 阅读: 52 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
attacker
cmr
aql
band
When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a Web Cache Poisoning Bug.
Press enter or click to view image in full sizeBy kjuliusBug bounty hunting is exciting.You find vul...
2026-5-31 00:48:43 | 阅读: 74 |
收藏
|
Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com
poisoning
attacker
sizepoc
malicious
poisoned
When Bug Bounty Hunting Hit Me Back: How Losing $500 Led Me to a Web Cache Poisoning Bug.
Press enter or click to view image in full sizeBy kjuliusBug bounty hunting is exciting.You find vul...
2026-5-31 00:48:43 | 阅读: 47 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
poisoning
attacker
sizepoc
malicious
poisoned
How I Discovered Account Takeover (ATO) via XSS and Open redirect
Hello Everyone,Today, I want to share my experience of discovering an account takeover (ATO) vulnera...
2026-5-31 00:41:48 | 阅读: 52 |
收藏
|
Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com
payload
subdomain
callbackurl
mars
enjoy
SecLeaf Q2 CTF 2026 Writeups
From recon to flag capture: a breakdown of my solutions.Press enter or click to view image in full s...
2026-5-31 00:33:55 | 阅读: 51 |
收藏
|
Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com
secleaf
backup
memory
encryption
intercepted
A $10,000 Bug. One JSON Field. Every Account on the Platform.
One intercepted request. One parameter swap. Full access to any account on the platform.Press enter...
2026-5-29 09:19:27 | 阅读: 51 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
otp
client
victim
bypass
412
Hacking JSON Web Tokens: How Attackers Exploit API Authentication
JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security f...
2026-5-29 09:15:40 | 阅读: 56 |
收藏
|
Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com
rs256
hs256
payload
symmetric
Hacking JSON Web Tokens: How Attackers Exploit API Authentication
JWTs are trusted by millions of APIs worldwide: yet one small misconfiguration can turn a security f...
2026-5-29 09:15:40 | 阅读: 47 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
rs256
hs256
payload
burp
Cybersploit 1 Walkthrough — OffSec | Beginner Guide & Screenshots
I’m a professional penetration tester with hands-on red-team experience and OSCP-style practice. I t...
2026-5-29 09:15:21 | 阅读: 41 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
37292
ssh
itsskv
robots
flag2
Advanced Client Side Injection Secrets Leads To (SSRF , Prev Esc)
Client-Side Injection(Advanced): How Small Bugs Lead To Big Bounties(SSRF , Prev Esc , KeyLogger , 3...
2026-5-29 09:15:10 | 阅读: 49 |
收藏
|
Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com
injection
victim
attacker
postmessage
client
Advanced Client Side Injection Secrets Leads To (SSRF , Prev Esc)
Client-Side Injection(Advanced): How Small Bugs Lead To Big Bounties(SSRF , Prev Esc , KeyLogger , 3...
2026-5-29 09:15:10 | 阅读: 44 |
收藏
|
InfoSec Write-ups - Medium - infosecwriteups.com
injection
victim
attacker
postmessage
bypass
How We Bypassed an Axios Security Patch (CVE-2026–42043): The 16-Million IP Loophole
When a patch for a critical vulnerability drops in a library downloaded over 500 million times a wee...
2026-5-29 09:14:46 | 阅读: 48 |
收藏
|
Bug Bounty in InfoSec Write-ups on Medium - infosecwriteups.com
loopback
axios
proxy
attacker
bypass
Previous
15
16
17
18
19
20
21
22
Next