Full Account Takeover on an MCP OAuth Proxy: Why PKCE Can't Save You
Hacktus
Command Palette
Search for a command to run...
Archive
14 posts published so far
From Tomcat JMX Proxy to RCE via AccessLogValve Injection
Hacktus
How I Tricked an AI Into Thinking I Owned Your Data
Hacktus
What Can You Do With a Leaked Cognito Identity Pool ID?
Hacktus
Can you compromise a multi-billion dollar company via /health?
Hacktus
How a "Fixed" IDOR and an Empty String Led to 5 Million+ File Leaks
Hacktus
More of Games-related Bugs!
Hacktus
Diving Back into Games-related Bugs! , especially, cards related games! 🕹️🎮
Hacktus
🎮 Diving Back into Games-related Bugs!
Hacktus
🔓 Mastering the Enigma of SSL Pinning Bypass for Desktop Apps & Games 🕹️
Hacktus
Unveiling the Arcane Art of Intercepting HTTPS Traffic in Desktop Apps & Games!
Hacktus
OAuth Misconfiguration Leading to Unauthorized Admin Access For All Org Products
Hacktus
Taking Over an Entire Organization - A Journey Through Multiple Bugs
Hacktus
Subdomain Takeover leading to Full Account Takeover
Hacktus