Our team leader found a stored XSS in olx.pt. When submiting a new ad, it was possible to add a XSS payload on data[person]. The ad got approved without reflection on the output of this field, it was sanitized. Afterwards when we try to edit the ad, the payload was launched, so the input wasn't sani...
When our security team leader started his path on HackerOne he started with Adobe bug bounty program. David already was present on their Security Acknowledgements list (2013) but he wanted to get a big company on his HackerOne profile so after a while he found a Reflected XSS (CWE-79) on their we...
David Sopas is the security team leader at Char49 and he is sharing great tips at Cobalt's Blog on how writing great vulnerability reports can have a huge impact in your bug bounties career. The article covers best practices on preparation, writing and also tools used.
Char49 was present at the event ØxＯＰＯＳɆＣ Mɇɇtuᵽ at Blip facilities in Oporto. On the agenda some interesting topics like "Ransomware 101: Threats & Countermeasures" by netshark and "In Headers/ Padlocks / site Seals / CA’s we trust!" by pipas. It a was a nice way to spend the afternoon having fu...
David Sopas is the security team leader in Char49 and he is always looking for a new challenge. Today he presents his top 10 vulnerability list to reach #1 at Cobalt bounty programs, with a clear description of each one. Check out this article on Cobalt Blog from our researcher and team leader...
One of the most interesting vulnerabilities that could potentially allow Remote Code Execution (RCE). Check out this article from our researcher Miguel Regala on Cobalt Blog.
