Frans Rosen and Justin sit down to discuss and drop gold on X-correlation injection, with impacts and POCs ranging from JSON injection to RCE.

akamai waf is SO fun to fuck with. managed to bypass it with this in a JSON request (which then saved my input and output it on another endpoint)

{"ID":'0<h2 onpointerrawupdate="/*','*/prompt``">':"xss"

using onpointerrawupdate=' got blocked by waf. but…

Security flaw in desktop app OAuth allows account takeover with malicious links. Understand attack steps, why it works, and fix strategies

This morning, an advisory was released for Next.js about a vulnerability that leads to RCE in default configurations, with no prerequisites. The root cause of this issue lies in React Server Components, which Next.js utilizes. Over the last day, we have noticed…

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478) - assetnote/react2shell-scanner

For anyone doing recon with the Wayback Machine, sifting through CDX results can be tedious and noisy — tons of historical URLs, not all relevant. To make it easier, I created wayback-cdx-filter, a browser extension that lets you filter out unwanted domains…

This is the most reliable public detection (at this time) to indicate whether a machine is actually exploitable to CVE-2025-55182 / React2Shell without invoking the RCE and limited FP's.

it triggers an internal error and validates the vulnerable version…

CVE-2025-55182 React Server Components RCE POC. GitHub Gist: instantly share code, notes, and snippets.

Anchor/area tags can leak page URLs (origin, path, query, post-click fragment) by using href="#" with the ping attribute pointing elsewhere.

Works in Chrome and Safari (Firefox disables ping by default).

https://t.co/SVt05u6Hxs

Hell nahhh 💀

Find the FLAG and WIN Intigriti swag.

TLDR This post shows how to achieve a full authentication bypass in the Ruby and PHP SAML ecosystem by exploiting several parser-level inconsistencies: including attribute pollution, namespace confusi

Download and play Hogwarts Legacy at the Epic Games Store. Check for platform availability and price!

Writing something after such a long time. While I wrote the last post with some desperation, I really wanted to elaborate on something interesting I discovered, in some clean fashion. I submitted a couple of nice escalations to Cloudflare in the past couple…

A Burp Suite extension for real-time sharing of HTTP traffic between team members with user-based highlighting. - alirezarouhbakhsh/Team-History-Sync