Sina

@_SecurityAttack • 3,795 subscribers

BugHuntingPentest!! Jump 0x90 - Graduated in software engineering & Loves computer security Research

Shorts

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

Race Condition + Host Header Injection + Redis(Cache)= Zero Click XSS The first attempts were not successful and the reflect was not observed, but using the RACE, I saw that my sampler is displayed for the rest of the users 🫥 I will publish it after permission. #BugBounty

24,133 views