My website

Here is the repo where my website is hosted 🧙

---

Below is a brief summary of the content on my website:

Write-ups

EN | Account Takeover via Web Cache Poisoning based Reflected XSS
EN | Clickjacking to Account Takeover via Drag&Drop
EN | Alert-box Message Content Manipulation based Base64
EN | Account Takeover and Sensitive Data Leakage via CORS Misconfiguration
EN | Stored XSS with Password Recovery Page

Exploits / CVEs (I discovered)

CVE-2020-8512

1. IceWarp WebMail 11.4.4.1 Cross-Site Scripting
   • https://www.exploit-db.com/exploits/47988
   • CVE-2020-8512 IceWarp WebMail XSS Exploitation - https://www.youtube.com/watch?v=WJo3-dn3wy4
   • Online Scanner for CVE-2020-8512
   • 0day.today Record
   • National Vulnerability Database

Hall of Fame

• Apple (Hall of Fame 2019)
• Mozilla (Hall of Fame 1st Quarter 2020)
• Adobe (Acknowledgements 2020)
• Eset (Acknowledgements Letter) (Swag)
• Asus (Hall of Fame Mar 2020)
• Siemens (Hall of Thanks 2019)
• Philips (Hall of Honors)
• Nokia (Hall of Fame Nov 2019)
• Vodafone (Hall of Fame)
• Huawei (Acknowledgements Letter)
• BlackBerry (Acknowledgements 2019)
• Ericsson (Acknowledgements 2020)
• BMW (Hall of Fame 2020)
• BBC (Acknowlegements 2020)
• Telecom Italia (Hall of Fame 2020)
• University of Twente (Hall of Fame 2020)
• Cambridge University (Letter of Appreciation)
• Harvard University (Acknowledgements Letter)
• Drexel University (Acknowledgements Letter) (Hall of Fame)
• Erasmus University (Hall of Fame 2020)
• Utrecht University (Hall of Fame)
• University of York (Hall of Fame)
• Oracle (Acknowledgements)
• MAGIX (Hall of Fame)
• SAP (Acknowledgements Mar 2020)
• Cloudera (Letter of Appreciation)
• Honeywell (Hall of Fame)
• Myob (Acknowledgments)
• Inflectra (Hall of Fame 2019)
• UN Women (Hall of Fame)
• United Nations (2 times) (Hall of Fame)
• European Union (Hall of Fame)
  and others..