apibroken-access-controlauth-bypass
API Authentication Bypass via Broken Object Level Authorization
How a missing authorization check on a critical API endpoint allowed full account takeover.
Read more
Back to Security Blog
Picoctf
Posts
xssbugbountywebsec
Bypassing WAF: Reflected XSS in E-Commerce Search Parameter
A detailed walkthrough on discovering a Reflected Cross-Site Scripting (XSS) vulnerability that bypassed an initial WAF filter using clever encoding.
Read more