Writeups
-
Medium
Manipulating the WebSocket handshake to exploit vulnerabilities
aggressive but shallow xss filter on a chat socket that bans your ip on a hit, beaten by spoofing X-Forwarded-For in the handshake to shed the ban then slipping an obfuscated oNeRrOr backtick payload
WebSockets 2 min -
Medium
Cross-site WebSocket hijacking
cross-site websocket hijacking where the chat handshake has no csrf token, so an exploit-server page opens an authenticated socket as the victim
WebSockets 3 min -
Easy
Manipulating WebSocket messages to exploit vulnerabilities
manipulating a live chat WebSocket message, editing the intercepted frame after the client html-encodes it so a raw img onerror payload slips through and fires alert() in the support agent’s browser
WebSockets 2 min -
Easy
2FA bypass using a brute force attack
2fa bypass by brute forcing the four digit code
Authentication 3 min -
Easy
broken brute force protection, multiple credentials per request
broken brute force protection that counts login requests rather than guesses, defeated by submitting the entire password list as a JSON array in one request so every candidate is tested against carlos at once
Authentication 2 min -
Easy
Password brute-force via password change
password brute force through the change password form, where sending mismatched new passwords avoids the account lock and makes the error message leak when a guessed current password is correct
Authentication 3 min -
Easy
password reset poisoning via middleware
password reset poisoning where the reset link host is built from the X-Forwarded-Host header
Authentication 3 min
Nothing matched that.
No writeups here yet. Try a broader tag, or clear the filter to see everything.
Clear filters