webmedium

Recruiter

duckerz

Task: Resume submission site with reflected XSS and Telegram bot that visits submitted links. Solution: Exploit XSS to make HR bot fetch protected endpoint and exfiltrate flag via webhook.

$ ls tags/ techniques/
xsscsrfbot_exploitationdata_exfiltrationreflected_xss
reflected_xssadmin_bot_patterncsrf_via_xsswebhook_exfiltration
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]