Sina

@_SecurityAttack • 3,818 subscribers

BugHunting! Jump 0x90 - Graduated in software engineering & Loves Cyber security R&D مشاور امنیت !

Shorts

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

24,247 views