InInfoSec Write-upsbyBrandon Roldan·Dec 31, 2024Finding vulnerabilities on flask-cors libraryFinding vulnerabilities on cors libraries
Brandon Roldan·Nov 1, 2023Automating CSRF Detection in WordPress Plugins with SemgrepIntroductionA response icon2A response icon2
Brandon Roldan·Jun 6, 2022Behind the Bug: Password reset poisoningIntroductionA response icon2A response icon2
Brandon Roldan·Mar 2, 2022IDOR in support.mozilla.org through Code ReviewI was trying to improve my static analysis code, specifically django apps, so i decided to hack a random project in github. And i found…
Brandon Roldan·Feb 14, 2022Bookwyrm Server Side Request ForgeryWhile reading the code of bookwyrm, i encounter this endpoint
Brandon Roldan·Feb 8, 2022Hacking into school management systems. Reflected XSS To RCEAs a hacker, we are asked a million times before if we can hack into their school system and change their grades.A response icon7A response icon7
Brandon Roldan·Feb 7, 2022Hacking and reverse engineering il2cpp games with ghidraLast writeup, we talk about how to hack unity games compiled on mono. This time, we will be hacking unity games compiled in il2cpp. IL2CPP…A response icon3A response icon3
