Все публикации

0:03:07

Intigriti Customer Story: Personio

0:10:36

Performing CSRF Exploits Over GraphQL

0:04:53

Misconfig Mapper - Hacker Tools

0:07:12

Bypassing GraphQL Brute Force Protections

0:07:51

Finding a Hidden GraphQL Endpoint

0:05:05

Accidental Exposure of Private GraphQL Fields

0:06:47

Accessing Private GraphQL Posts

0:11:51

Prototype Poisoning and Unicode Case Mapping Collision - Solution to March '24 Challenge

0:18:50

Introduction to GraphQL Attacks

0:18:18

Aggressive Scanning in Bug Bounty (and how to avoid it)

0:10:37

Exploiting Server-side Parameter Pollution in a REST URL

0:24:30

Common Scoping Mistakes

0:11:26

Exploiting Server-side Parameter Pollution in a Query String

0:14:11

Understanding Scope, Ethics and Code of Conduct (CoC)

0:07:20

Exploiting a Mass Assignment Vulnerability

0:21:15

Unicode Normalization and Cookie Path Precedence - Solution to February (Valentines) '24 Challenge

0:07:10

Finding and Exploiting an Unused API Endpoint

0:07:34

Exploiting an API Endpoint using Documentation

0:10:02

Web Shell Upload via Race Condition

0:24:22

DOM Clobbering, CSPP (axios) and XSS - Unintended Solutions to January '24 Challenge

0:08:41

Exploiting Time-sensitive Vulnerabilities

0:02:30

Intigriti Customer Story: Microsoft

0:15:37

Partial Construction Race Conditions

0:07:39

Single-endpoint Race Conditions