HNHacker News
TopNewBestAskShowJobs

infosecau

1,265 karma · joined September 7, 2013

submissionscomments

Frontier class vulnerabilities: it gets worse before it (maybe) gets better

shubs.io·1 pts·infosecau·
0

I found a WordPress RCEs with GPT5.6 and $25

slcyber.io·404 pts·infosecau·
227

The down fall of bug bounties

shubs.io·2 pts·infosecau·
0

High fidelity check for Next.js/RSC RCE (CVE-2025-55182 and CVE-2025-66478)

slcyber.io·3 pts·infosecau·
0

Analyzing the Next.js Middleware Bypass (CVE-2025-29927)

slcyber.io·2 pts·infosecau·
0

So, you want to get into bug bounties?

shubs.io·2 pts·infosecau·
0

Exploiting Static Site Generators: When Static Is Not Static

blog.assetnote.io·21 pts·infosecau·
0

Abusing functionality to exploit a super SSRF in Jira Server (CVE-2022-26135)

blog.assetnote.io·1 pts·infosecau·
0

Cloudflare Pages, part 1: The fellowship of the secret

blog.assetnote.io·28 pts·infosecau·
2

Hacking a Bank by Finding a 0day in DotCMS

blog.assetnote.io·3 pts·infosecau·
0

Eliminating Dangling Elastic IP Takeovers with Ghostbuster

blog.assetnote.io·2 pts·infosecau·
0

Turning Bad SSRF to Good SSRF: Websphere Portal

blog.assetnote.io·2 pts·infosecau·
0

Exploiting GraphQL

blog.assetnote.io·2 pts·infosecau·
0

Taking over Uber accounts through voicemail

blog.assetnote.io·15 pts·infosecau·
5

Hacking IIS

drive.google.com·1 pts·infosecau·
0

Attack of the clones: Git clients remote code execution

blog.blazeinfosec.com·5 pts·infosecau·
0

Finding Hidden Files and Folders on IIS Using BigQuery

blog.assetnote.io·1 pts·infosecau·
0

Hacking on Bug Bounties for Four Years

blog.assetnote.io·89 pts·infosecau·
10

Taking over Azure DevOps accounts with one click

blog.assetnote.io·118 pts·infosecau·
25

Expanding the Attack Surface: React Native Android Applications

blog.assetnote.io·37 pts·infosecau·
11

CVE-2019-0604: Details of a Microsoft Sharepoint RCE Vulnerability

thezdi.com·1 pts·infosecau·
0

Discovering a zero day and getting code execution on Mozilla's AWS Network

blog.assetnote.io·4 pts·infosecau·
0

Gaining access to Uber's user data through AMPScript evaluation

blog.assetnote.io·2 pts·infosecau·
0

Leveraging web application vulnerabilities to steal NTLM hashes

wildfire.blazeinfosec.com·1 pts·infosecau·
0

Commonspeak: Content discovery wordlists built with BigQuery

pentester.io·1 pts·infosecau·
0

Breach Detection at Scale with PROJECT SPACECRAB

developer.atlassian.com·1 pts·infosecau·
0

Exploiting Dolphin – Part 1

dougallj.wordpress.com·1 pts·infosecau·
0

Taking Over DigitalOcean Domains via a Lax Domain Import System

thehackerblog.com·385 pts·infosecau·
170

SmashBot – An AI That Plays Super Smash Bros

github.com·1 pts·infosecau·
0

Exploring the QNX shadowed password hash formats

moar.so·3 pts·infosecau·
0
Page 1 of 2Next →