Vuk Ivanovic – Medium

Vuk Ivanovic

Vuk Ivanovic
in
InfoSec Write-ups

Disabling js for the win

,or how reading the html code w/ care lead to rce through file upload

3 min readFeb 10, 2023

--

Disabling js for the win

--

Vuk Ivanovic
in
InfoSec Write-ups

Portswigger Lab: JWT authentication bypass via algorithm confusion with no exposed key, a slightly…

, or how I learned the importance of RTFM yet again

5 min readDec 12, 2022

--

Portswigger Lab: JWT authentication bypass via algorithm confusion with no exposed key, a slightly…

--

Vuk Ivanovic
in
InfoSec Write-ups

Fun with TurboIntruder,

or, how to get ffuf with a gui while also doing some py coding

4 min readNov 3, 2022

--

Fun with TurboIntruder,

--

Vuk Ivanovic
in
InfoSec Write-ups

Portswigger Labs, how to get the most out of it

or why looking up the solution underneath the lab isn’t cheating, it’s part of learning

5 min readAug 22, 2022

--

Portswigger Labs, how to get the most out of it

--

Vuk Ivanovic
in
Predict

No matter how you look at we are living in some type of Matrix, the only question is why are some…

Compared to religious view of existence? With the yet another sequel of the Matrix, and everything that has been happening since the first…

4 min readAug 21, 2022

--

No matter how you look at we are living in some type of Matrix, the only question is why are some…

--

Vuk Ivanovic
in
InfoSec Write-ups

Salesforce bug hunting to Critical bug

Or how I learned that some bugs are truly rare

3 min readAug 15, 2022

--

2

Salesforce bug hunting to Critical bug

--

2

Vuk Ivanovic
in
InfoSec Write-ups

FFUF-ing RECON

, or how to get to P1–P3 from a slightly different recon

3 min readJul 17, 2022

--

2

FFUF-ing RECON

--

2

Vuk Ivanovic
in
InfoSec Write-ups

A story of another awesome old school hacking that lead to a cool P1 bug

or how Response 200 OK w/ size 0 doesn’t always mean 0

2 min readOct 22, 2021

--

A story of another awesome old school hacking that lead to a cool P1 bug

--

Vuk Ivanovic
in
Predict

A (clever) numpy hack for template matching

or a lousy yet working code as long as the solution is supported

6 min readOct 14, 2021

--

A (clever) numpy hack for template matching

--

Vuk Ivanovic
in
InfoSec Write-ups

Easy SSRF using Match and Replace, and a bonus on how to have your burp collaborator/server go…

Match and Replace part is present in both paid and free editions of burp, and combined with the below link this should be useful for…

4 min readOct 4, 2021

--

Easy SSRF using Match and Replace, and a bonus on how to have your burp collaborator/server go…

--

Vuk Ivanovic

Vuk Ivanovic

IT Security and bug bounty hunting, knowledge collector especially anything with word quantum, and sometimes writer of fiction.

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams