Chain

root@johnmatrix:~$ ls ./tags/ | wc -l → 7

Tagged

• WordMess - Gadgets Inside of Gadgets
• Vaultly - NoSQL Operator Injection to Cross-Org SSO Takeover
• WordMess - Born an Administrator
• Vaultly - CORS Origin Reflection to HQ Recovery Key Exfil
• FurHire - CSPT to ATO + 2FA Bypass
• FurHire - Open Redirect + CSPT to XSS + Token Replay
• WordMess - wp2shell Batch Route Confusion