skip to content
Stellar Vector (Dark Mode)
[ sv @ blog ]
sv@blog sv@find sv@www

Writeups

#xss 1 writeup

filter archive

year & competition

categories

crypto web osint

tags

#rsa #google-maps #base16 #base64 #coppersmith #curl #ecc #ghent #insufficient-defense #invalid-curve-attack
web

PhantomFeed

Multi-stage web exploitation involving a ReDoS-powered race condition, OAuth2-based XSS for token theft, and a final RCE via HTML2PDF font abuse.

by tomvg 6 min