AbolFazl

[XSS Payloads @XssPayloads]

Re:CACHE - Excessive reflection, type confusion, and 0-click SXSS on Next.js
Nice chain leading to Stored XSS by @zhero___
https://t.co/MYCTDLXpxd

[sepehr @sepix0x]

Check out my new write-up, hope you enjoy it!

https://t.co/hbSIlaL4S8

[Nowasky @nowaskyjr]

Anchor/area tags can leak page URLs (origin, path, query, post-click fragment) by using href="#" with the ping attribute pointing elsewhere.

Works in Chrome and Safari (Firefox disables ping by default).

https://t.co/SVt05u6Hxs

[AbolFazl @mp7y0]

@diyar_mhammed the key is invalid

[AbolFazl @mp7y0]

@Rapunza21 درست میشه

[AbolFazl @mp7y0]

@amux_xA اون که عادت شده

[AbolFazl @mp7y0]

@Rapunza21 به اون نمیرسه ولی خو برای مصرف روزانه خوبه

[mehdi parandin @neotrony]

اولین مقاله م به فارسی. توضیح یکی از باگ هام:
Zero Click ATO
فلو یا تریک خاصی نیس. صرفا ریکانه و درک اپلیکیشن
امیدوارم خوشتون بیاد
https://t.co/Nm2GbOh1DC

[AbolFazl @mp7y0]

@CyberScanDev manual

[AbolFazl @mp7y0]

Quick Tip: Hunting CORS? Go beyond payloads. In DevTools → debugger, search for regex / RegExp and grab any domains you see. Test them as Origins — broken regex on trusted domains can = bypass 🚨 And don’t forget: some may be purchasable 👀
#bugbountytip #bugbountytips

[Meydi @mehdiparandin]

A tiny blog post of mine about exploiting self-XSS using disk cache—
inspired by @J0R1AN
Hope you like it!

https://t.co/wk3C0kyYI2

[AbolFazl @mp7y0]

@ammighorbani @W3NDGO

[Meydi @mehdiparandin]

Just found an interesting behavior in Firefox that can be used for XSS:
If a response lacks the Content-Type header, Firefox renders it as text/plain.
But if the URL ends with an extension like .html, Firefox treats it as that.
#bugbounty #bugbountytips

[AbolFazl @mp7y0]

@neotrony Are the ones without bounties part of the VDP?

[AbolFazl @mp7y0]

@_alirx_ روحش شاد 🖤

[AbolFazl @mp7y0]

@zxc29r

[AbolFazl @mp7y0]

@Pouria___sh داش پوری مبارک باشه 🔥❤️

[Souren @souren24]

Me, spraying blind XSS payloads everywhere: