github.com/devanshbatham/Awesome-Bugbounty-Writeups @main sqlite

Contents

• Cross Site Scripting (XSS)
• Cross Site Request Forgery (CSRF)
• Clickjacking (UI Redressing Attack)
• Local File Inclusion (LFI)
• Subdomain Takeover
• Denial of Service (DOS)
• Authentication Bypass
• SQL injection
• Insecure Direct Object Reference (IDOR)
• 2FA Related issues
• CORS Related issues
• Server Side Request Forgery (SSRF)
• Race Condition
• Remote Code Execution (RCE)
• Android Pentesting
• Contributing
• Maintainers

Cross Site Scripting (XSS)

• From P5 to P2 to 100 BXSS
• Google Acquisition XSS (Apigee)
• XSS on Microsoft.com via Angular Js template injection
• Researching Polymorphic Images for XSS on Google Scholar
• Netflix Party Simple XSS
• Stored XSS in google nest
• Self XSS to persistent XSS on login portal
• Universal XSS affecting Firefox
• XSS WAF Character limitation bypass like a boss
• Self XSS to Account Takeover
• Reflected XSS on Microsoft subdomains
• The tricky XSS
• Reflected XSS in AT&T
• XSS on Google using Acunetix
• Exploiting websocket application wide XSS
• Reflected XSS with HTTP Smuggling
• XSS on Facebook instagram CDN server bypassing signature protection
• XSS on Facebook's Acquisition Oculus
• XSS on sony Subdomain
• Exploiting Self XSS
• Effortlessly Finding Cross Site Scripting inclusion XSSI
• Bugbounty a DOM XSS
• Blind XSS : a mind Game
• FireFox IOS QR code reader XSS(CVE-2019-17003)
• HTML injection to XSS
• CVE-2020-13487 | Authenticated Stored Cross-site Scripting in bbPress
• XSS at error page of repository code
• XSS like a Pro
• How I turned self XSS to stored XSS via CSRF
• XSS Stored on Outlook web
• XSS Bug 20 Chars Blind XSS Payload
• XSS in AMP4EMAIL(DOM clobbering)
• DOM Based XSS bug bounty writeup
• XSS will never die
• 5000 USD XSS issue at avast desktop antivirus
• XSS to account takeover
• How Paypal helped me to generate XSS
• Bypass Uppercase filters like a PRO(XSS advanced methods)
• Stealing login credentials with reflected XSS
• bughunting xss on cookie popup warning
• XSS is love
• Oneplus XSS vulnerability in customer support portal
• Exploiting cookie based XSS by finding RCE
• Stored XSS on zendesk via macros
• XSS in ZOHO main
• DOM based XSS in private program
• Bugbounty writeup : Take Attention and get stored XSSS
• How I xssed admin account
• Clickjacking XSS on google
• Stored XSS on laporbugid
• Leveraging angularjs based XSS to privilege escalation
• How I found XSS by searching in shodan
• Chaining caache poisining to stored XSS
• XSS to RCE
• XSS on twitter worth 1120
• Reflected XSS in ebay.com
• Cookie based XSS exolpoitation 2300 bug bounty
• What do netcat -SMTP-self XSS have in common
• XSS on google custom search engine
• Story of a Full Account Takeover vulnerability N/A to Accepted
• Yeah I got p2 in 1 minute stored XSS via markdown editor
• Stored XSS on indeed
• Self XSS to evil XSS
• How a classical XSS can lead to persistent ATO vulnerability
• Reflected XSS in tokopedia train ticket
• Bypassing XSS filter and stealing user credit card data
• Googleplex.com blind XSS
• Reflected XSS on error page
• How I was able to get private ticket response panel and fortigate web panel via blind XSS
• Unicode vs WAF
• Story of URI based XSS with some simple google dorking
• Stored XSS on edmodo
• XSSed my way to 1000
• Try harder for XSS
• From parameter pollution to XSS
• MIME sniffing XSS
• Stored XSS on techprofile Microsoft
• Tale of a wormable Twitter XSS
• XSS attacks google bot index manipulation
• From Reflected XSS to Account takeover
• Stealing local storage data through XSS
• CSRF attack can lead to stored XSS
• XSS Reflected (filter bypass)
• XSS protection bypass on hackerone private program
• Just 5 minutes to get my 2nd Stored XSS on edmodo.com
• Multiple XSS in skype.com
• Obtaining XSS using moodle featured and minor bugs
• XSS on 403 forbidden bypass akamai WAF
• How I was turn self XSS into reflected XSS
• A Tale of 3 XSS
• Stored XSS on Google.com
• Stored XSS in the Guides gameplaersion (www.dota2.com)
• Admin google.com reflected XSS
• Paypal Stored security bypass
• Paypal DOM XSS main domain
• Bugbounty : The 5k$ Google XSS
• Facebook stored XSS
• Ebay mobile reflected XSS
• Magix bugbounty XSS writeup
• [Abusing CORS for an XSS on flickr ](https://whitton.io/articles