web
FedCM as a Session Hijacking Gadget
Sites using FedCM with XSS vulnerability are inherently vulnerable to session hijacking.
Entries tagged "auth"
ctf
Portswigger | Authentication Bypass via Encryption Oracle Explained
This post offers a deeper understanding of the encryption oracle mechanics behind this lab.
ctf
CTF | HÄKKSHOP
Wrong check of invitation codes, elevating privileges by triggering an error in the middle a function, wrong session handling (missing session invalidation logic).