Vulnix Dev·2d agoIntigriti XSS Challenge: Beyond the SanitizerHow a DOM injection and a same-origin script gadget led to JavaScript execution despite HTML sanitization and CSP.
Asad Mohsin·6d agoPractical Bug Bounty Hunting: Finding API Leaks, PII Exposure, and Password Reset VulnerabilitiesIntroduction
Krishnal Panara·Oct 28A Like on X Is Worth 0.66. A Copied Link Is Worth 20.I read X’s open-sourced ranking code (xai-org/x-algorithm). if you’re under 500 followers, this is what actually moves your reach.
Sehaj Sahni·Oct 28How Meta Became the Government’s Online Restricting AgentAnd why I am moving my social changemaking posts to X and YouTube
Sushila Devi·Oct 25X Introduces a $1 Tipping Feature for CreatorsUsers will be able to send money to content creators by long-pressing the Like button.A response icon19A response icon19
Aliudcorp·Oct 24How to get 3,000 followers on X in 30 days (we tracked 1,599 accounts to find out).One account gained 2,046 followers in 12 days. Its replies get 3 views each.
ForgetMeNot·Oct 22No Click, No Login: A Reflected DOM XSS in a Documentation Search Box“A static docs site, a search-index tokeniser and one obscure DOM event turned a single link into arbitrary JavaScript in the target’s own…
Shahadat Fahim·Oct 20WorldWAP — TryHackMe WriteupCategory: Client-Side Exploitation (Stored XSS · Cookie Theft · CORS/CSRF · Same-Origin Exfiltration)
Francis “De Wan” Pwavwe·Oct 19I Hated Zoey’s Racism Episode. Tonight, I Hate That I Did.I hated that Zoey’s Extraordinary Playlist had to spare an entire episode to address racism.
redhunter01·Oct 18How I Turned a Language Parameter Into DOM-Based XSS Across Multiple Affiliate PortalsFrom a harmless-looking URL parameter to browser-confirmed JavaScript execution: a deep dive into unsafe jQuery HTML construction and…
