infosec write-ups and ramblings
🔎 Introduction & BackgroundTo get started, I'll give a bit of backstory behind this. I found this bug back in January of 2017 and was one of the first reports I made to a company. I was bored back in January so I decided to hunt for bugs in *.asus.com. After about an hour I came across rog.as…
Corben Leo
Recently, HackerOne hosted their second Hack The World competition. During this time I decided to take a look at Yahoo's bug bounty program because I have heard good things about them and also due to the fact that their scope is pretty big. After finding a few issues in my.yahoo.com and getting paid…
Corben Leo
H1 212 CTF Solution H1-212 CTF Solution.pdf 778 KB .a{fill:none;stroke:curr…
Corben Leo
PHP Code Injection in X Cart PHP Code Injection in X-Cart.pdf 482 KB .a{fil…
Corben Leo
Recently, while my friend Alyssa Herrera and I were collaborating on finding ffmpeg vulnerabilities in bug bounty programs, we came to learn that Bandcamp ran a bug bounty program. If you have never heard of BandCamp, it is essentially a platform that allows artists, fans, and labels to interact, co…
Corben Leo