Skyle

cybersecurity student & bug hunter recognised by the U.S. government

[Skyle @Meldenftn]

@Behi_Sec Prototype pollution and http request smuggling and poisoning

[Skyle @Meldenftn]

@zack0x01 In which parameter did you insert the payload ? on email= or password= or something else ?

[Skyle @Meldenftn]

@sonahri501 @Rhynorater @Bugcrowd How do you find time based SQL i , do you randomly put a quote in a parameter and hope for somehting abnormal to happen or you just go deep in every parameters and you eventually find a sqli

[Skyle @Meldenftn]

@developer_ali15 @Hacker0x01 What's the vulnerability?

[Skyle @Meldenftn]

@zack0x01 10

[Skyle @Meldenftn]

@zack0x01 Same thing bro with self hosted program that don't reply :) we love that !

[Skyle @Meldenftn]

@Behi_Sec Is this exploitable ? Did you see the response from the ssrf ?

[Skyle @Meldenftn]

@Toshusec_ Normally it's info lol

[Skyle @Meldenftn]

@B_D3aTH @baraa_mansi If there's no signature , you can impersonate anyone no ?

[Skyle @Meldenftn]

@zack0x01 Thx

[Skyle @Meldenftn]

@zack0x01 The victim must already have a registered account in the webapp right ?

[Skyle @Meldenftn]

@zack0x01 For this attack to succeed, The victim must have already have account right ?

[Skyle @Meldenftn]

@HackingTeam777 <details/open/id="&quote;"ontoggle=[JS]>, what can I do with that ?

[Skyle @Meldenftn]

@wh1t3h4ts Learn the fundamentals first, especially network fundamentals

[Skyle @Meldenftn]

@CSB_SCHOOL @OpcoAtlas Merci pour vos informations sur la cyber sécu, c'était très enrichissant 😉

[Skyle @Meldenftn]

@tentacionfn @Domzyy23 That's fake 🤥

[Skyle @Meldenftn]

@CODmwfeed Here hoping.

[Skyle @Meldenftn]

@merlinouwww Here hoping.