Turning Blind RCE into Good RCE via DNS Exfiltration using Collabfiltrator [Burp Plugin][Updated]
Update: Version 2.0 has been released with lots of bug fixes and added UI features. https://github.com/0xC01DF00D/Collabfiltrator ——————————...
Getting read access on TGI Friday’s online ordering system [FIXED]
TGI Friday’s is an american style restaurant chain that is popular not just in the United States, but also in other countries all over the world. My initial interest sparked when I received a ma...
Getting free food from Panera Bread (MyPanera Rewards) [FIXED]
Panera Bread is a bakery-café chain that originated as the Saint Louis Bread Company in Missouri. They offer a loyalty program called MyPanera Rewards, which allow customers to receive discounts and f...
Revisiting XSS payloads in PNG IDAT chunks
Update 06/17/2016: Hosting your payload on github is free. That will save you hosting fees. I have edited the steps below with details on how to do that. /u/deadmanrose3 has created a python port and...
Getting free food from TGI Friday’s (Give Me More Stripes Rewards) [FIXED]
TGI Friday’s is an american style restaurant chain that is popular not just in the United States, but also in other countries all over the world. They have a rewards program called “Give M...
SpartanNash – Yes! Rewards Mobile Application Vulnerability Exposing Private Customer Information [FIXED]
SpartanNash, formerly Spartan Stores, is a food distributor and grocery store retailer headquartered in Byron Center, Michigan. Some of the popular grocery store chains they own include: D&W Fresh...
DTE Energy Mobile App Vulnerability Exposing Customer Information [FIXED]
DTE Energy is a Detroit, Michigan-based utility company that provides residential and commercial electric and natural gas. Where I’m located, they are the natural gas company we use to heat our ...