vict0ni

• Using search engines for fun and bounties

• A Simple GitHub Pages Subdomain Takeover

• OSINT geolocation challenge or else "How to stalk with Google"

• Open Redirection Guide

• Useful things I tend to forget to do when playing HTB

• Unrestricted CV File Upload

• IDOR leads to Data leakage and Profile Update

• Multiple Host Header Attacks after bypassing protection with... a Header Attack

• XSS on Cookie Pop-up Warning

• HTB Lightweight