#Bugbountytip

Clever #BugBountyTip from @bugraeskici: if you stumble upon a URL whitelist, try special characters (like ğ). Some parsers can't render them and change it to "?", allowing URL whitelist bypass!

[+] #BugbountyTip: Invalidate / Flush Cached Pages From AEM - This is one of the most under rated vulnerability that hardly anyone knows about! I will share all details in

Hey Gucci, You Gucci?How Bradley Martin (@DerpLaughing_) achived RCE on http://Gucci.com & their beloved file transfer service we all know and love.Here's to keeping it secure and online.https://zero.lol/2020-05-09-hey-gucci-you-gucci/#