Stories by infosecau

Unlocking any car from X brand in most of the world

Frontier class vulnerabilities: it gets worse before it (maybe) gets better

I found a WordPress RCEs with GPT5.6 and $25

The down fall of bug bounties

High fidelity check for Next.js/RSC RCE (CVE-2025-55182 and CVE-2025-66478)

Analyzing the Next.js Middleware Bypass (CVE-2025-29927)

So, you want to get into bug bounties?

Exploiting Static Site Generators: When Static Is Not Static

Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135)

Cloudflare Pages, part 1: The fellowship of the secret

Hacking a Bank by Finding a 0day in DotCMS

Eliminating Dangling Elastic IP Takeovers with Ghostbuster

Turning Bad SSRF to Good SSRF: Websphere Portal

Exploiting GraphQL

Taking over Uber accounts through voicemail

Hacking IIS

Attack of the clones: Git clients remote code execution

Finding Hidden Files and Folders on IIS Using BigQuery

Hacking on Bug Bounties for Four Years

Taking over Azure DevOps accounts with one click

1