| user: | albinowax_ |
| created: | May 31, 2016 |
| karma: | 664 |
| about: | I research novel web attack techniques. More details at https://jameskettle.com/ |
| 1. | Drag and Pwnd: Exploiting VS Code with ASCII(portswigger.net) |
| 2. | |
| 3. | Chaining Three Bugs to Access All Your ServiceNow Data(assetnote.io) |
| 4. | ORM Leak Vulnerabilities(elttam.com) |
| 5. | |
| 6. | Getting XXE in Web Browsers Using ChatGPT(swarm.ptsecurity.com) |
| 7. | Response Filter Denial of Service: shut down a website by triggering WAF rule(blog.sicuranext.com) |
| 8. | Source Code Disclosure in Asp.net via Cookieless Sessions(swarm.ptsecurity.com) |
| 9. | ChatGPT Account Takeover via Wildcard Web Cache Deception(nokline.github.io) |
| 10. | |
| 11. | The curl quirk that exposed Burp Suite and Google Chrome(portswigger.net) |