Brada, IF you want your friend to learn $BugBounty hunting, send him 2-3 months to Lostsec and forget.<3
12,212 次观看
Here’s a proper PoC I made for PasteJacking XSS. You can test it yourself on my website:
29,991 次观看
i made a simple CORS PoC, just replace the target and test it against a sensitive endpoint, since public ones usually don’t qualify for a valid report..