Published inInfoSec Write-ups·Sep 1722.6k+ GitHub Stars Note-Taking App Hit by XSS VulnerabilityCVE-2023–3067: Stored Cross Site Scripting Vulnerability on renowned note-taking thick client app Trillium Introduction Every digital creation has flaws, and in this blog, we’ll look at a recent discovery that shook the foundation of this popular open-source hierarchical note-taking application. While testing the thick client application, I discovered stored cross-site scripting…Open Source2 min readOpen Source2 min read
Published inInfoSec Write-ups·Jul 11Smart Contract Vulnerabilities Audit Checklist 2023List of Smart Contract Security Vulnerabilities for Auditing Introduction While we learn to audit smart contracts and be creative in detecting vulnerabilities, it is critical to have a comprehensive checklist of typical vulnerabilities that can be used as a reference to auditing a smart contract written in solidity. This checklist will…Smart Contract Blockchain4 min readSmart Contract Blockchain4 min read
Published inInfoSec Write-ups·Jun 23Smart Contract Best PracticeTop 20 Smart Contract Security Best Practices Checklist Introduction It is essential to stick to recommended practices that change with the constantly shifting environment if you want to make sure that smart contracts are secure. The recommended practices for securing smart contracts will be covered in detail in this blog. Join…Smart Contracts4 min readSmart Contracts4 min read
Published inInfoSec Write-ups·Jun 14Smart Contract Security Overview 2023Detailed Analysis of Projects & Blockchain Compromised Introduction Security is essential since blockchain is a distributed, decentralized system that depends on immutability and trust to function. More than $12.3 billion in financial losses have been caused by smart contract flaws so far in the Web3 industry. What are smart contract vulnerabilities? Yearn Finance was hacked in…Smart Contract Security3 min readSmart Contract Security3 min read
Published inTechiepedia·Apr 15, 2021A Tale of Reflected XSS Affecting Entire Web applicationHello Infosec Community, Hope Everyone is Safe & Doing Well in this pandemic period. WHOAMI ! I am Chirag Agrawal(a.k.a R@iders), a part time Security Researcher , I have been Researching , practicing & Learning from long time now. I am doing Bug Bounties from Six Months Now. Like every…Bug Bounty4 min readBug Bounty4 min read
Published inTechiepedia·Feb 14, 2021API Exploitation →Business Logic BugHello Infosec Community, Hope Everyone is Safe & Doing Well in this pandemic period. WHOAMI ! I am Chirag Agrawal(a.k.a R@iders), a part time Security Researcher , I have been Researching , practicing & Learning from long time now. I started bug bounty around Four months back. Like every bug…Bug Bounty4 min readBug Bounty4 min read
