How I was able to takeover any users account on a major telecoms website

Self-XSS to ATO via Site Features

How 100% Manual Hacking (Without Even Kali And Burp) Led To 2 Medium Vulnerabilities On YesWeHack

Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities

Bypassing CSP via URL Parser Confusions : XSS on Netlify’s Image CDN

A Story About How I Found XSS in ASUS