漏洞报告

【Rockstar Games 1,000 USD】Social Club Account Takeover Via RGL And Steam/Epic Linked Account
https://hackerone.com/reports/1235008

【TikTok 500 USD】BYPASSING COMMENTING ON RESTRICTED AUDIENCE VIDEOS
https://hackerone.com/reports/1337351

【GitLab 3,000 USD】Stored XSS via Mermaid Prototype Pollution vulnerability
https://hackerone.com/reports/1280002

【Judge.me 500 USD】Stored XSS in Email Templates via link
https://hackerone.com/reports/1376672

挖洞技巧

Android App Hacking Workshop
https://bughunters.google.com/learn/presentations/5783688075542528

File-Generation @0xAwali
https://docs.google.com/presentation/d/1m4DbtZ3HjU43xeXsEdOJIGe-pkwowH87fsxBS1QK7_4

    说点什么吧...