Can Android Be XSSed? Account Takeover Through JavaScript Bridge
A clean reflected XSS on an auth-less subdomain that topped out at alert(1), and the investigation that turned it into a critical account...
Tag
#xss
2 posts tagged
A $3500 USD HTML Injection, Escalating a Low Bug with a CSRF-like
A reflected HTML injection my partner was about to file as low. Here is the investigation that turned it into an account takeover, includ...