h4fan security
  • Tags
  • Archive
  • Tools

An unsuccessful expressjs SSTI story

December 14, 2020

Recon Response Header x-powered-by: express. An expressjs website. [Read More]
Tags:
  • ssti
  • expressjs

alert 1337 - jquery prototype pollution

November 5, 2020

challenge here https://msrkp.github.io/ [Read More]
Tags:
  • xss
  • prototype pollution

alert(23) to win - eval(location.pathname)

October 24, 2020

while surfing the internet for some sec news, a xss challenge came across. challenge address https://renwax23.github.io/X/chal/oct22/ [Read More]
Tags:
  • xss
  • ← Newer Posts
  • RSS
  • GitHub
  • Email me

h4fan  •  2026

Powered by Beautiful Jekyll