Medi

[Medi @medi_0ne]

@KeiZo_Zo Really cool writeup!

[Medi @medi_0ne]

How Cross-Site Frame Counting Exposes Private Repositories on GitHub. Enjoy!

https://t.co/HdnJOwFdnC

[Medi @medi_0ne]

@sudhanshur705 Thank you Sudi. Seems like you found a race condition because you tweeted it before me :)

[PortSwigger Research @PortSwiggerRes]

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2022!
https://t.co/NXiHK9eUjT

[Medi @medi_0ne]

@samm0uda @albinowax Totally agree, chain it with relative path overwrite attacks is an alternative as I mention in the research. But websites without Doctype declaration or nosniff header are quite rare nowadays, that's why I used the open redirect to load the file from my server.

[James Kettle @albinowax]

Practical client-side path traversal attacks - neat little exploit chain by @medi_0ne
https://t.co/G2uCCGho4u

[Medi @medi_0ne]

Practical Client Side Path Traversal attacks. Enjoy!

https://t.co/XZHCoXF0RD