How I hacked one cryptocurrency service
Target Program: PayKassa
🎯 Vulnerability: Cross-Site Scripting (XSS)
💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.
More Writeups Like This
pentester.land
by Yaniv Nizry (@YNizry)Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities
pentester.land
by Adam CrosserTechnical Advisory: Vulnerabilities Identified within ListServ
pentester.land
by dhakal_bibek (@dhakal__bibek)“2022: A Year of Fascinating Discoveries”
pentester.land
by sid0krypt (@Siddhar07949650)