-
-
Notifications
You must be signed in to change notification settings - Fork 3k
Pull requests: HackTricks-wiki/hacktricks
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
HackNet (HTB) — HTML Attribute Injection → Django SSTI → Que...
#1774
opened Jan 17, 2026 by
carlospolop
Loading…
WhisperPair Bluetooth hijacking and location tracking via br...
#1773
opened Jan 16, 2026 by
carlospolop
Loading…
CAPIG XSS postMessage origin trust becomes a script loader +...
#1771
opened Jan 16, 2026 by
carlospolop
Loading…
Leaking fbevents OAuth code exfiltration via postMessage tru...
#1770
opened Jan 16, 2026 by
carlospolop
Loading…
Carlsberg… probably not the best cybersecurity in the world
#1765
opened Jan 16, 2026 by
carlospolop
Loading…
Pixel 0-click (Part 2) Escaping the mediacodec sandbox via t...
#1764
opened Jan 15, 2026 by
carlospolop
Loading…
Pixel 0-click Part 1 — Exploiting CVE-2025-54957 in the Dolb...
#1763
opened Jan 15, 2026 by
carlospolop
Loading…
CAPIG XSS (Meta Conversions API Gateway) postMessage origin ...
#1762
opened Jan 15, 2026 by
carlospolop
Loading…
Threat Brief MongoDB Vulnerability (CVE-2025-14847)
#1759
opened Jan 14, 2026 by
carlospolop
Loading…
Remote Code Execution With Modern AI/ML Formats and Librarie...
#1756
opened Jan 13, 2026 by
carlospolop
Loading…
Play Integrity API How It Works & How to Bypass It
#1754
opened Jan 13, 2026 by
carlospolop
Loading…
Lack of isolation in agentic browsers resurfaces old vulnera...
#1753
opened Jan 13, 2026 by
carlospolop
Loading…
Flutter SSL Bypass How to Intercept HTTPS Traffic When all o...
#1752
opened Jan 13, 2026 by
carlospolop
Loading…
DaliVM Python Dalvik Bytecode Emulator for Android Static An...
#1751
opened Jan 12, 2026 by
carlospolop
Loading…
Previous Next
ProTip!
What’s not been updated in a month: updated:<2025-12-17.