Recent content by KloudFish

Website Hacking Telegram WebApp: User Impersonation via initData Telegram WebApp uses a non-standard authentication model. The backend does not manage sessions directly and does not issue tokens. Instead, user identification is often derived from data sent by the client. When this data is...

*** Hidden text: You do not have sufficient rights to view the hidden text. Visit the forum thread! ***

*** Hidden text: You do not have sufficient rights to view the hidden text. Visit the forum thread! ***

*** Hidden text: You do not have sufficient rights to view the hidden text. Visit the forum thread! ***

*** Hidden text: You do not have sufficient rights to view the hidden text. Visit the forum thread! ***

Gg

Website Hacking: XSS & SQL Injection This thread covers two classic but still highly relevant web vulnerabilities: Cross-Site Scripting (XSS) and SQL Injection (SQLi). Despite being well-known, both issues are still widely present in real-world applications — especially in legacy code, custom...