Etiqueta: Practitioner

Basic server-side template injection (code context)

Basic server-side template injection

Exploiting vulnerabilities in LLM APIs writeup

Exploiting cross-site scripting to capture passwords

DOM-based open redirection

Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped

Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped

Blind OS command injection with out-of-band data exfiltration

Blind OS command injection with out-of-band interaction

Blind OS command injection with output redirection