Better Exfiltration via HTML Injection ↳...

Better Exfiltration via HTML Injection

↳ https://medium.com/@d0nut/better-exfiltration-via-html-injection-31c72a2dae8b

This is a story about how I (re)discovered an exploitation technique and took a bug with fairly limited impact to a 5 digit bounty by bypassing existing mitigations. André Baptista and Cache-Money were working on a very strange bug….

from Hack+ http://bit.ly/2Kw6Y0j
via IFTTT