Skip to content
How XBOW Turned a JavaScript Hint Into a Working File Inclusion
xbow.com | blog | #bug-bounty | #vulnerability-research | #path-traversal | #lfi | #javascript-analysis | #blackbox-testing
Summary
Shows XBOW converting JavaScript analysis of an avatar-upload flow into a working local file inclusion, after methodical path traversal and null-byte attempts on a download endpoint.
- Published
- Collected