NGINX // HTTP REQUEST PARSING // REMOTE CODE EXECUTION

N8N // NODE.JS // UNAUTHENTICATED RCE

WINDOWS COMMAND INJECTION // OOB VALIDATION // POWERSHELL RCE

SUBSCRIPTION MANIPULATION // ENCRYPTED PAYLOADS // CHECKOUT PROCESS

MASS ASSIGNMENT // DATABASE DUMP // SENSITIVE DATA EXPOSURE

PRICE MANIPULATION // ENCRYPTED PAYLOADS // CHECKOUT PROCESS

SESSION STORAGE // USER ENUMERATION // COOKIE AUTHENTICATION

JWT ANALYSIS // AWS COGNITO // LOCAL STORAGE AUTHORIZATION BYPASS

CRYPTOGRAPHY // ENCRYPTION REVERSING // WEAK CRYPTO

WINDOWS APPLICATION SECURITY // DLL SEARCH ORDER HIJACKING // WINDOWS PAYLOADS // METERPRETER

HEROKU // DNS MISCONFIGURATION // TAKEOVER

FRIDA // OBJECTION // BURP SUITE // IOS