بسم الله الرحمن الرحيم (Sometimes all what u need is just finding/opening the gate that will walk u to a bigger attack surface) Agenda: Introduction (Story) Reconnaissance Finding...

^_^ السلام عليكم ورحمة الله وبركاته, يالله حيهم Agenda: Authenticated Stored XSS Affects All Drupal Core Versions Exploit Development: Triggering the vulnerability (Basic POC) ...

^_^ السلام عليكم ورحمة الله وبركاته, يالله حيهم Agenda: What's JWK & JWKS? jku Header JWKS Spoofing Attack (Blackbox Approach) Challenge (Whitebox Approach) What's JWKS?: ...

^_^ السلام عليكم ورحمة الله وبركاته, يالله حيهم Agenda: SSL Pinning Bypass Network Traffic Analysis Basic Dynamic Analysis(Genymotion, adb, Frida, Objection) Basic Static Analysis(...