achievement_unlocked
@crash ha resuelto
Client-Side Permission Bypass + SVG XSS + Cookie Theft
BBLABS.ESLab Solved
HardVDP
// achievement_unlocked
Client-Side Permission Bypass + SVG XSS + Cookie Theft
Business Logic
May 2026
CR
solved_by@crashMember since May 2026
bblabs.es// real bug bounty practice
dificultad
Difícil
posición
#4
completados
14
sobre_el_hacker
El track record de @crash
labs resueltos
11
flags capturadas
3
// últimos labs resueltos
Media$750
Stored XSS via SVG File Upload
may 2026
DifícilVDP
Blind SSRF with Internal Headers
jul 2026
FácilVDP
Path Traversal via Avatar Upload
jun 2026
FácilVDP
12 DOM XSS Parameters for Automated Scanning
jun 2026
FácilVDP
Mass Assignment Privilege Escalation
jun 2026
FácilVDP
Mass Assignment Privilege Escalation Lab
jun 2026