# Summary

With any in-app redirect - logic/open redirect, HTML or javanoscript injection it's possible to execute arbitrary code within Slack desktop apps. This report demonstrates a specifically...

On June 28th, @say_ch33se reported that it was possible to bypass Shopify's email verification for legacy accounts. Doing so would have allowed a user to access accounts they did not own.

Our...

Introduction to Windows Drivers Exploitation

TL;DR

Pivoting guide for penetrations testers or red team members

Ever come across a system that did so many little things wrong that you were certain you could “get r00t”? You chip away, gradually uncovering the links in the chain, but then you run o…

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis...

Hello Everyone,

SameSite=Lax Cookies by Default is a new browser feature we will look at how to bypass it and what is the security concerns with it..

Contribute to Vi45en/Pesidious development by creating an account on GitHub.

A centralized resource for previously documented WDAC bypass techniques - bohops/UltimateWDACBypassList

An attacker can bypass the HEY.com HTML sanitizer and inject arbitrary unsafe HTML in emails.

To reproduce the bug you have to send raw HTML-formatted email. You can do it e.g. with the Sendmail...

Hello,

## Who we are :

We’re two French security researchers and our respective names are Brice Augras and
Christophe Hauquiert, we worked and found the vulnerability together.

Brice Augras from...

Update 25.01.2021: Added Google engineers exploit method for getting access token.   Google Cloud Monitoring (formerly called Stackdriver)...

Version en español: acá

I used “app” keyword in place of application name as it was private program.

"Use ImageMagick® to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) includ...

Hi guys, this is my first english write-up, so I’m sorry for my bad english grammar.