DOM-Based XSS on YouTube Services Directory
A detailed walkthrough on how I chained two different tricks (iframe srcdoc and a CSP bypass) to achieve XSS. Then an explanation of how Google patched the vulnerable code.
Posts
Don't Shoot Humanity In The Foot By Writing With AI
Creative writing is on life support because of AI misuse.
Unicode XOR Magic? Steganography with Arabic Diacritics
What magic happens when you XOR two Arabic letters together? English!