Sukhmeet SinghBookMyShow account takeover using social loginDisclaimer: This story is just to give you an idea how misconfigured social login can be exploited.3 min read·Aug 15, 2019--1--1
Sukhmeet SinghReflected XSS in Ebay.comIn Sept. 2013 I found Reflected XSS in ebay.com. Here’s how I triggered XSS in a `display:none` span without using <>3 min read·Jul 22, 2019----