Articles | Papers

How I made a company’s own AI assistant steal its users’ session tokens, zero-click I want to tell you about the moment I realized I could make a company’s own AI assistant hand me its users’ sess...

Here is how I exploited a unusual SQL Injection Path Based and got rewarded with bounty First of all, here are some sections that will be covered in this article, ┌───────────────Summary─────────...

Here is how I g0t $$ pwning AWS cloud of a bug bounty program at HackerOne First of all, we have some sections that will be covered in this article, ┌───────────────Summary────────────────┐ │ ...