Submissions by d0bby

Jason Haddix' XSS Mindmap

OS Command Injection [video]

The Intigriti XSS challenge is over, but still up. Give it a try

Escaping Alcatraz: Breaking Out of [ ] Sandboxed Environments – Kirk Hayes

Fingerprinting Organizations with Collected Archives

Why my job is so easy and how you can make it harder – Pen Test War Stories

Web Cache Deception Attack – Omer Gil

Don't Talk to the Police – James Duane

Exploiting CORS Misconfigurations for BTC and Bounties – James Kettle

0d0a CRLF Injection and More SSRF Magic

RCE in EA's Origin Desktop Client

Attacking Modern Web Technologies – Frans Rosen

@albinowax: CTF Writeup [H1-212]

Illustration: How a Bug Bounty Works

Password Reset and Web-Cache Poisoning (and a Little Surprise in RFC-2616)

Exact String Pattern Recognition [pdf]