NDevTK

UCaI69O-qthcPZT4sM04AlGQ; @NDevTK
18 videos

Fixed postMessage XSS on okx.com

165 views, 2025-04-16

Misleading AI talk on my writeups website :)

6 views, 2024-10-02

googlesource.com access_token leak (Awarded $7500)

55 views, 2024-09-26

Notification permission bypass via intent

4 views, 2024-09-26

CatLeaks (Awarded $1000)

46 views, 2024-09-24

Office Editing for Docs, Sheets & Slides leak (Awarded $3133.70)

59 views, 2024-09-19

intentSpoof

529 views, 2024-09-12

duckSpoof

6 views, 2024-09-12

intentBypass

34 views, 2024-08-02

addtohomescreen

23 views, 2024-08-02

crossOriginIsolated bypass (Awarded $3000)

34 views, 2024-06-21

URL Spoof via documentPictureInPicture (Extension version)

25 views, 2024-06-21

URL Spoof via documentPictureInPicture (Awarded $1000)

26 views, 2024-06-21

URL Spoof via Portal (Awarded $2000)

7 views, 2024-06-21

Tab hijacking on COOP protected websites.

8 views, 2024-06-21

Partial user activation bypass (Awarded $1000)

8 views, 2024-06-21

Iframe sandbox allow-popups-to-escape-sandbox bypass (Awarded $1000)

16 views, 2024-06-21

Abusing the Application Launcher For Drive extension

24 views, 2024-06-21