indexe

Cyberbullying and cybersecurity enthusiast

[indexe @_indexe]

@alvandyhamed @voorivex دستخوش

[indexe @_indexe]

@voorivex ❤️❤️❤️

[indexe @_indexe]

@FarzadSec @voorivex 🔥🔥🔥🔥

[indexe @_indexe]

@Muntrive @Hacker0x01 I had a similar case that took me a month, three disclosed reports, and even a research paper just to explain what OAuth and one-click ATO are—only for it to be triaged as Low. Before that, they even insisted I self-close the report to avoid damaging my reputation.

[indexe @_indexe]

@Kian_mehrr @voorivex 🔥🔥🔥

[indexe @_indexe]

@Muntrive @voorivex 🎉🎉🎉

[indexe @_indexe]

@omidxrz 🔥🔥🔥

[indexe @_indexe]

Result:
payload from attacker origin executes on https://t.co/IX1scAV6ka.
can be used to bypass WAFs more conveniently since there is no malicious payload in the URL.

[indexe @_indexe]

Found a neat XSS trick chaining two primitives: `javascript:` scheme + `https://t.co/d7nClKB4Q5`

[indexe @_indexe]

Chaining both:

[indexe @_indexe]

@h3sam تعریف از خود نباشه...

[indexe @_indexe]

@debu8er @voorivex 🔥🔥🔥

[indexe @_indexe]

@Kian_mehrr @DanialXray @voorivex 🔥🔥🔥

[indexe @_indexe]

@intranterr @souren24 @MalekaniPouyan Congrats 🎉

[indexe @_indexe]

@ImErfaniom @voorivex تبریک🔥

[indexe @_indexe]

@Fara_dst @voorivex بهترین keyword برای تست mamad عه

[indexe @_indexe]

@Amirali_hq @voorivex تبریک🔥

[indexe @_indexe]

@debug50 congrats🎉