HACKERBADGER

Breaking things. Writing it down.

Visual_ID: HACKERBADGER

Latest Research

[RECORDS_FOUND: 110]

Tanuki: XXE File Read via an Unfiltered DOCTYPE-Assembly Field

2026.07.21

BugForge medium XML External Entity (XXE) file read

Severity: High (CVSS 8.6) CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N (PR:N reflects open self-registration; scoring PR:L instead yields 7.7, still High) ...

#xxe #xml #dtd-injection #file-read #cwe-611 #bugforge #webapp

CopyPasta: Query-Operator Injection Bypasses a Public-Only Visibility Guard

2026.07.19

BugForge easy Query-Operator Injection Authorization Bypass

Part 1: Pentest Report

#broken-access-control #authorization-bypass #query-operator-injection #idor #bugforge

Cheesy Does It: Unicode Username Collision to Full Admin

2026.07.16

BugForge medium Unicode Normalization Privilege Escalation

Part 1: Pentest Report

#bugforge #webapp #privilege-escalation #unicode-normalization #broken-access-control #race-condition #cwe-285 #cwe-289 #cwe-362

Vaultly: Next.js Middleware Authorization Bypass (CVE-2025-29927)

2026.07.15

BugForge medium Next.js Middleware Authorization Bypass (CVE-2025-29927)

Part 1: Pentest Report

#access-control #nextjs #middleware-bypass #cve-2025-29927 #bugforge

Tanuki: XML Entity Smuggling to SQL Injection

2026.07.15

BugForge medium XML Entity Smuggling to SQL Injection

Tanuki SRS Flash Cards: XML Entity Smuggling to SQL Injection

#sqli #xml-entity-smuggling #filter-bypass #blind-sqli #bugforge

Shady Oaks Financial: Server-Side Template Injection via Undocumented Parameter

2026.07.14

BugForge easy Server-Side Template Injection (Undocumented Parameter)

Part 1: Pentest Report

#ssti #template-injection #format-string #information-disclosure #nodejs #express #bugforge

analytics

Activity Log

[2026.07.21] New writeup published: Tanuki: XXE File Read via an Unfiltered DOCTYPE-Assembly Field

[2026.07.19] New writeup published: CopyPasta: Query-Operator Injection Bypasses a Public-Only Visibility Guard

[2026.07.16] New writeup published: Cheesy Does It: Unicode Username Collision to Full Admin

[2026.07.15] New writeup published: Vaultly: Next.js Middleware Authorization Bypass (CVE-2025-29927)

[2026.07.15] New writeup published: Tanuki: XML Entity Smuggling to SQL Injection

construction

Toolkit

web v0.3.0

Caido Workbench

SQLi and JWT workbench plugin for Caido proxy.

speed v1.2.0

Race

HTTP/2 single-packet race condition testing.

key v1.0.0

JWTForge

JWT creation, modification, and signing tool.

more_horiz

More Coming

Additional tools in development.