There is no excerpt because this is a protected post.
My explanation of how I found 15 CVEs in 3 nights and my tips on how you can too!
Multiple new CVEs discovered and disclosed! XSS, DoS and a weak password policy!
Multiple new CVEs discovered and disclosed! XSS, file uploads and more!
A detailed walkthrough of CVE-2022-34625 aka a Server-Side Template Injection (SSTI) to Remote Code Execution (RCE)
Denial of Service discovered against Fossil SCM when running on Windows boxes.