xss
2 writeups
XSS vulns galore (plus a cool shirt!)
When PornHub launched their public bug bounty program, I was pretty sure that most of the low hanging fruits of vulnerabilities would be taken care of and already reported.
Discovering a stored XSS that affects over 900k websites (CVE-2016-9751)
In my free time when I’m not hunting for bugs in paid programs, I like to contribute a bit to the open-source community and check for vulnerabilities that might arise.