<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://jonbottarini.com/</loc>
<lastmod>2021-12-09T18:36:14.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://jonbottarini.com/about-me/</loc>
<lastmod>2021-12-09T18:36:14.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://jonbottarini.com/dont-reply-a-clever-phishing-method-in-apples-mail-app/</loc>
<lastmod>2021-12-09T18:36:14.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://jonbottarini.com/using-burp-suite-match-and-replace-settings-to-escalate-your-user-privileges-and-find-hidden-features/</loc>
<lastmod>2019-06-17T19:10:39.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://jonbottarini.com/get-as-image-function-pulls-any-insights-nrql-data-from-any-new-relic-account-idor/</loc>
<lastmod>2018-10-09T22:11:20.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://jonbottarini.com/abusing-internal-api-to-achieve-idor-in-new-relic/</loc>
<lastmod>2018-01-02T05:52:34.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://jonbottarini.com/inspect-element-leads-to-stripe-account-lockout-authentication-bypass/</loc>
<lastmod>2017-04-03T00:31:56.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://jonbottarini.com/xss-vulns-galore-plus-a-cool-shirt/</loc>
<lastmod>2017-03-16T23:14:15.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://jonbottarini.com/discovering-a-stored-xss-that-affects-over-900k-websites-cve-2016-9751/</loc>
<lastmod>2017-03-10T22:42:59.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://jonbottarini.com/bypassing-apples-ios-10-restrictions-settings-twice/</loc>
<lastmod>2017-03-09T05:32:50.000Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://jonbottarini.com/category/authentication-bypass/</loc>
<lastmod>2019-06-17T19:10:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://jonbottarini.com/category/cross-site-scripting-xss/</loc>
<lastmod>2017-03-16T23:14:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://jonbottarini.com/category/insecure-direct-object-reference/</loc>
<lastmod>2018-10-09T22:11:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://jonbottarini.com/category/other-bugs/</loc>
<lastmod>2017-03-09T05:32:50.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://jonbottarini.com/category/phishing/</loc>
<lastmod>2021-12-09T18:36:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/bug-bounty/</loc>
<lastmod>2021-12-09T18:36:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/apple/</loc>
<lastmod>2021-12-09T18:36:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/bypass/</loc>
<lastmod>2017-04-03T00:31:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/hackerone/</loc>
<lastmod>2018-10-09T22:11:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/idor/</loc>
<lastmod>2018-10-09T22:11:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/new-relic/</loc>
<lastmod>2018-10-09T22:11:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/xss/</loc>
<lastmod>2017-03-16T23:14:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/authentication/</loc>
<lastmod>2017-04-03T00:31:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/burp-suite/</loc>
<lastmod>2019-06-17T19:10:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/cross-site-scripting/</loc>
<lastmod>2017-03-10T22:42:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/mail/</loc>
<lastmod>2021-12-09T18:36:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/phishing/</loc>
<lastmod>2021-12-09T18:36:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/piwigo/</loc>
<lastmod>2017-03-10T22:42:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/privilege-escalation/</loc>
<lastmod>2019-06-17T19:10:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/stripe/</loc>
<lastmod>2017-04-03T00:31:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://jonbottarini.com/tag/tips/</loc>
<lastmod>2019-06-17T19:10:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.3</priority>
</url>
</urlset>
