Archive - Adrian Belen

2017

PoC for robotlegs—a MVC Flex applications vulnerable to CVE-2011-2461

2016

Scriptless attack—Use Unobtrusive scripting in malicious way(Bypassing XSS Mitigations Via Script Gadgets)

Profiles Of The Top 7 Bug Hunters From Around the Globe

Oauth security misconfiguration on facebook

XSS on Jira's Confluence Data Center

Abusing Thumbnails to see Vimeo private video

2014

OCULUS VR account hijacking via password reset vulnerability

Flowdock XSS or RCE(malicious file upload)

Bypass anti CSRF token of Yandex!