nosa@lab ~ $ ./decrypt
$ ls ~/writeups
Tag Myself in Your Favorite TikTok Artist Video [IDOR]
Sep 20, 2022
7,500$ – IDOR on Apple [consultants.apple.com]
Sep 20, 2022
2 CSRF 1 IDOR on Google Marketing Platform
Sep 6, 2021
[Google VRP] How I Get Blind XSS At Google With Dork (First Bounty and HOF )
Mar 11, 2021
(Shopify.com) Blind Stored XSS Via Staff Name $$$$
Aug 19, 2020
Price Parameter Tampering On Bukalapak
Jul 24, 2019
Multiple Stored XSS On Tokopedia
Feb 19, 2019
Clickjacking on Google MyAccount Worth 7,500$
Nov 11, 2018
Exploiting XSS in POST requests on semrush.com
Aug 15, 2018
How I Accidentally Found Stored XSS On Tokopedia
Apr 5, 2018
Blind XSS in Admin Panel on Name Parameter
Mar 16, 2018
Chaining CSRF With Self-Stored XSS On Tokopedia
Mar 5, 2018
Bypassing Homograph Attack Using `@` On Brave Browser
Feb 22, 2018
Reflected XSS On Search Product via AngularJS Template Injection [ Bukalapak.com ]
Feb 5, 2018
Bypass Stored XSS on User Edit [ MatahariMall.com ]
Oct 5, 2017
Homograph Attack Bypass On Brave Browser
Sep 20, 2017
Missing CSRF Token On Add Admin [Popoji CMS]
Sep 14, 2017
Session Not Expired When Password Has Been Changed [app.cobalt.io]
Sep 4, 2017
Open Redirect On Codepolitan.com
Aug 15, 2017
Missing CSRF Token On Change Picture Request [Tokopedia.com]
May 17, 2017
XSS On Kaskus
Aug 23, 2016