Cybersecurity Researcher & Bug Hunter

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Tags hoisting

Tag

hoisting 1

Turning JavaScript Error Handling into XSS Aug 24, 2026

Recently Updated

Turning JavaScript Error Handling into XSS
From a Sanitized Name Field to One-Click Account Takeover
Deanonymizing Users at Scale: When Blocking Becomes an Oracle
A University Web Audit
Cache Deception + CSPT: Turning Non Impactful Findings into Account Takeover

Trending Tags

web-security bug-bounty account-takeover xss blind-xss business-logic cache-deception client-side-path-traversal cookie-bomb cspt

© 2026 Jorge Cerezo Dacosta. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

web-security bug-bounty account-takeover xss blind-xss business-logic cache-deception client-side-path-traversal cookie-bomb cspt

New content available