The Cherabog
31 posts
The Cherabog
@MrCherna
Vibing with hacking, music, and gaming—plus the occasional chess match to keep things sharp.
Katılım Mart 2024
95 Takip Edilen127 Takipçiler
My first 4 digit bounty on @Hacker0x01 ! Result of Hard work ! Thanks to @zseano and @BugBountyHunt3r ! Time for career change ! #BugBounty
English
Nicely crafted payload for the onbeforematch event handler with @nowaskyjr. I used it to build a payload that bypasses Cloudflare WAF. The interesting part? If you remove }_, the payload stops working :D
Nowasky@nowaskyjr
Combining two techniques I recently showed: attribute merging of <html>/<body> tags and using hidden=until-found to trigger onbeforematch via fragment navigation in Firefox. #xss" target="_blank" rel="nofollow noopener">storage.googleapis.com/nowaskyjr/poc_…
#xss English
Last day I found an XSS that couldn’t be detected with Nuclei, Httpx, X8, ... cause of aggressive connection handling, even with all options, servers just didn’t respond. So I wrote a lightweight Go tool to reliably test GET/POST parameter reflections.
github.com/xkmikze/kzxss/
English
