Back to directory

WRITEUP #5202

CRLF injection allow => cookie injection in root domain & xss

OtherCRLF injection

byAbdelhak Kharroubi

Program

Bukalapak

Published

Aug 6, 2019

Added to HackDex

Oct 12, 2022

Read Full Writeuphttps://medium.com/@protostar0/crlf-injection-allow-cookie-injection-in-root-domain-xss-812cd807ba5b

▸ RELATED WRITEUPS

Another 1500$: CR/LF Injection

OtherCRLF injection

Data Theft in Salesforce: Manipulating Public Links

OtherSOQL injection

When Certificates Fail: A Story of Bypassed MFA in Remote Access

Other2FA / MFA bypass

SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff

Ghost In The Ppl Part 1: Byovdll

OtherUse-After-Free

Built with ❤️ by Shubham Rawat