Tag: Security

• M365 Internal Phish: Abusing the Power Platform for SharePoint/OneDrive Privilege Escalation (13 May 2022)
  An internal phishing POC leveraging Microsoft 365 citizen development tools (Power Platform). Phish for access to a target user's OneDrive and all SharePoint sites they own.
• Finding Vulnerabilities in an 18 Year Old MMO (12 Nov 2021)
  Finding and abusing size constrained XSS and a payment gateway bypass in an 18 year old MMO.

---

All Tags

Web POC Hacking JavaScript reverse-engineering Cloud Debugging BugBounty TypeScript Tutorial SharePoint Security Privilege-Escalation PowerApps Power-Platform Microsoft Joplin Game-Hacking Electronjs Development Credential-Dumping Chromium Browser-Extension Browser x64dbg x32dbg pykd mona.py mobile linux il2cpp adb XSS Wordpress WinDbg-Preview WinDbg VPS Unity Race-Condition Python PowerShell Power-Automate Phishing Pentesting Paypal Payment-Gateway Outlook Oracle Optimization OneDrive Microsoft-Teams Microsoft-Edge M365-Services M365 Java Image-Manipulation HackerOne GraphQL Google-Maps GitHub Frida ExpressVPN Email Electron.js Dynamic-Testing CodeQL CodeBuild CTF CICD BurpSuite BugCrowd Blender Azure-DevOps Android AWS .apk