0xFFFF@blog:~$ – Zero-day exploit development, hacking and cybersecurity research, bug bounty writeups and tutorials, networking, programming and development, quantum computing and security, and many other infosec topics.

Fun Vulns – a new series

15th Jan 2023 — 0 Comments

Hookline – Advanced Spear Phishing Emulation Framework

5th Sep 2022 — 0 Comments

Pretty fly for a URI: a deep-dive into exploitation of custom URI Schemes

3rd Sep 2022 — 0 Comments

Vuln writeup: LFD->RCE chain via HTTP Parameter Pollution, Hash length extension attack, abuse of server-sided input normalization, and selinux bypass.

3rd Sep 2022 — 0 Comments

Ping response from blog.0xffff.info with 1337 bytes of data…

3rd Sep 2022 — 0 Comments

Protected: [PART 6] XSS Exploitation Series – Blind / out-of-band XSS scenarios

18th Jun 2022 — Enter your password to view comments.

Protected: [PART 5] XSS Exploitation Series – Advanced DOM XSS testing: Sources & Sinks

18th Jun 2022 — Enter your password to view comments.

Protected: [PART 4] XSS Exploitation Series – Obfuscated/Stealth-based methods of testing for XSS

18th Jun 2022 — Enter your password to view comments.

Protected: [PART 3] XSS Exploitation Series – Building weaponized/advanced payloads

18th Jun 2022 — Enter your password to view comments.

Protected: [PART 2] XSS Exploitation Series – Filter Evasion

18th Jun 2022 — Enter your password to view comments.