Stories by albinowax_

Microsoft Copilot: From Prompt Injection to Exfiltration of Personal Information

Chaining Three Bugs to Access All Your ServiceNow Data

ORM Leak Vulnerabilities

Hacking millions of modems and investigating who hacked my modem

Getting XXE in Web Browsers Using ChatGPT

Response Filter Denial of Service (RFDoS)

Source Code Disclosure in Asp.net via Cookieless Sessions

ChatGPT Account Takeover via Wildcard Web Cache Deception

Detection and Exploitation of Ivanti's Pulse Connect Secure RCE

The curl quirk that exposed Burp Suite and Google Chrome

Remote code execution in Homebrew by compromising the official Cask repository

Brave browser’s Tor feature found to leak .onion queries to ISPs

Cracking reCAPTCHA, Turbo Intruder Style

The age of browser XSS filters is over

Significant new web hacking techniques from 2018

Abusing Meta Programming for Unauthenticated RCE in Jenkins

Turbo Intruder: Embracing the Billion-Request Attack

An overview of the top web hacking techniques of 2017

Vulnerability in Hangouts Chat a.k.a. how Electron makes open redirects great

Exploiting Open-XChange with Blind XXE via Powerpoint Files