Hi everyone, Bagaimana kabar anda? Saya harap kita semua baik-baik saja. Saya ingin membagikan sebuah artikel terkait solusi untuk ChallengeXSS dari Revan AR ( https://tools.revanar.dev/lab/ ) Sebelum memulainya, saya sudah terlebih dahulu meminta izin ke pemilik Challange untuk publish ini, dan akhirnya disetujui. Ikuti Saya :) XSS Challenge V1 Di…

Hi everyone This time I will write a little XSS solution in Open Redirect that uses the attribute rel=”noopener follow” target=”_blank. Here’s the code snippet: <a class=”test” title=”test” href=”javascript:alert()” rel=”noopener follow” target=”_blank”>CLICK</a> Source : Page Title Edit descriptiontest.secrash.com From the code snippet above, I tried to open it through several Modern Browsers: Google Chrome

Hi everyone, In this article, I share the findings of XSS Blind Stored at 2 TikTok Assets. When I decided to hunt for bugs in the TikTok program, and I spent 1 month looking for this XSS. This XSS finding started when I created a product on a TikTok seller…

Hi everyone First, let me introduce a little background, I am a young teenager graduated from Senior High School and IT Security Enthusiast from Indonesia. Now, I am 21 years old. I once had a dream that I wanted to find a valid vulnerability on some Tech Giant Site, and…

Assalamualaikum Bug Hunter & Hi Everyone. This time I want to share a finding of the XSS STORED Vulnerability on Yandex. Previously I have tried to search for vulnerabilities in the Yandex Bug Bounty Program, and as a result I did not find any vulnerabilities in Yandex. …

Hi everyone, In this article I want to share my findings on a Private Program at Hackerone which is very unique. Let’s take a minute to take a look at this :) When I was hunting on a private program on Hackerone, I came across a scope of https://redacted.com/. …

Hi Everyone. This time I would like to share an article about the findings of the XSS STORED Vulnerability in one of Microsoft Forum subdomains, namely https://powerusers.microsoft.com/ . This is my first vulnerability finding in the Microsoft Security Response Center Program (MSRC). …

Hi everyone, On Oct 16 2021, we discovered this XSS STORED vulnerability at https://commons.wikimedia.org/ and at that time we immediately reported it to Team WikiMedia. Let’s take a minute to look at this. At that time, we found a subdomain https://commons.wikimedia.org/ , and there was a File upload feature.

Assalamualaikum Bug Hunter & Hi Everyone This time we want to write an article about “CVE-2021–44855 Blind Stored XSS in VisualEditor media dialog” which we found on Wikipedia. On October 16, 2021, we discovered the XSS STORED vulnerability issue at https://commons.wikimedia.org/ (https://phabricator.wikimedia.org/T293556CVE-2021-44855) …