Bypasses


- Let's say they use this CSP rule to restrict framing: content-security-policy: frame-ancestors 'self' https://*.foo.foo:* Check if http://foo.foo is claimed. https://blog.ibrahimdraidia.com/bypass-csp-framing-restriction-rule-olx/ #bugbountytip
Cloudfront Bypass -
403 Bypass:

https://twitter.com/RathiArpeet/status/1315593774773334016

https://twitter.com/hackerscrolls/status/1254701239360720900
Tool -
- Price Manipulation -

https://twitter.com/SalahHasoneh1/status/1284869760921014274?s=20
-
-

https://twitter.com/iam_j0ker/status/1303658167205728256?s=20

Last modified 1yr ago