Amir coded a vulnerable test bed, you can install and practice with it. He’s also found 2 ATOs and several in-exploitable places with these techniques. I really appreciate him for sharing his knowledge in this web application.

Zeroc00i News & Tricks

https://blog.voorivex.team/leaking-oauth-token-via-referrer-leakage "The problem here is that Chrome applies a new referrer policy, which includes the complete referrer, including the OAuth token, etc. Taking advantage of this, the attacker will receive the…

X (formerly Twitter)

AmirMohammad Safari (@AmirMSafari) on X

I recently discovered several vulnerabilities in MCP servers across different attack scenarios (DOM XSS, Stored XSS, SSRF, etc.) and decided to publish a blog post to share my knowledge. Hope you enjoy it! :D

https://t.co/LvElwhVO1r