Bugmith Research

Bugmith Research

#securityresearch

Articles tagged with #securityresearch

CI4MS Full-chain stored DOM XSS -> 50+ injection points -> full application compromise
Authors: bugmithalchemist (Bugmith | 0xAlchemist) • peeefour (p4)
Apr 26, 20267 min read56
From android reverse engineering to identifying secrets, broken access control and API vulnerabilities:
A Mobile APK Vulnerability Chain in a private program: Client: redacted Method: Static analysis Severity: High to critical Findings: 5 Executive Summary: This write-up details a multi-stage vulnerabil
Apr 1, 20267 min read157