HACKERBADGER

Breaking things. Writing it down.

Visual_ID: HACKERBADGER

Latest Research

[RECORDS_FOUND: 59]

Appointments: Blind Boolean SQL Injection in a Path Parameter

2026.05.22

BugForge easy Blind Boolean SQL Injection

Part 1: Pentest Report

#sqli #blind-sqli #boolean-based #path-parameter #bugforge

Tanuki: Stored XXE via a Hidden JSON Field

2026.05.20

BugForge easy Stored XML External Entity Injection

#xxe #xml-external-entity #mass-assignment #stored #bugforge

Shady Oaks Financial: Broken Access Control on Admin Route Group

2026.05.16

BugForge easy Broken Access Control

Part 1 — Pentest Report

#broken-access-control #idor #admin-route-group #jwt #bugforge #webapp #cwe-285 #cwe-862

Galazy Dash: Cross-Organization IDOR via Sibling-Endpoint Authorization Drift

2026.05.16

BugForge medium Cross-Organization IDOR

Part 1: Pentest Report

#idor #multi-tenant #authorization #sibling-endpoint-drift #bugforge

Tanuki: XXE via XInclude (DOCTYPE Filter Bypass)

2026.05.13

BugForge easy XML External Entity

#xxe #xinclude #file-upload #libxml2 #bugforge #webapp #cwe-611 #owasp-a05

FurHire: SSRF to Internal Reporting Endpoint

2026.05.09

BugForge medium Server-Side Request Forgery

#ssrf #bugforge #webapp #express #cwe-918 #owasp-a10

analytics

Activity Log

[2026.05.22] New writeup published: Appointments: Blind Boolean SQL Injection in a Path Parameter

[2026.05.20] New writeup published: Tanuki: Stored XXE via a Hidden JSON Field

[2026.05.16] New writeup published: Shady Oaks Financial: Broken Access Control on Admin Route Group

[2026.05.16] New writeup published: Galazy Dash: Cross-Organization IDOR via Sibling-Endpoint Authorization Drift

[2026.05.13] New writeup published: Tanuki: XXE via XInclude (DOCTYPE Filter Bypass)

construction

Toolkit

web v0.3.0

Caido Workbench

SQLi and JWT workbench plugin for Caido proxy.

speed v1.2.0

Race

HTTP/2 single-packet race condition testing.

key v1.0.0

JWTForge

JWT creation, modification, and signing tool.

more_horiz

More Coming

Additional tools in development.