Tag: Security [2]
- M365 Internal Phish: Abusing the Power Platform for SharePoint/OneDrive Privilege Escalation (May 13, 2022)
An internal phishing POC leveraging Microsoft 365 citizen development tools (Power Platform). Phish for access to a target user's OneDrive and all SharePoint sites they own. - Finding Vulnerabilities in an 18 Year Old MMO (Nov 12, 2021)
Finding and abusing size constrained XSS and a payment gateway bypass in an 18 year old MMO.