Home|About|Gaming cabinet|Archives|How it works|Starter sites

GeezerVison is showing corben.io — Corben Leo

Corben Leo

I enjoy hacking, building, and analyzing things.

I'm a co-founder of Boring Mattress Co.[EXT]↗see what we've built

Since 2016, I've been hacking organizations like the DoD, PayPal, Facebook, Google, Microsoft, Apple, etc. through bug bounties.

Writing & Research

#

Title

Published

A $1,000,000 bounty? The KuCoin User Information Leak

Adapting to Endure – A Summary.

A Simple SQL Injection in an Air Force Website

A Fun SSRF through a Headless Browser

Learn to Hack Web Apps

Exposed Jenkins to RCE on 8 Adobe Experience Managers

Analysis of an Atlassian Crowd RCE - CVE-2019-11580

CI Knew There Would Be Bugs Here

XSS to XXE in Prince v10 and below (CVE-2018-19858)

Advanced CORS Exploitation Techniques

Chaining Bugs to Steal Yahoo Contacts!

Hacking the Hackers: Leveraging an SSRF in HackerTarget

SQL Injection in rog.asus.com

Tricky CORS Bypass in Yahoo! View

H1-212 CTF Solution.pdf

PHP Code Injection in X-Cart

Stored XSS in Bandcamp

Multiple XSS & CSRF in Pulse Connect Secure v8.3R1

Reflected & Stored XSS in Invision Power Board

Remote Code Execution in AT&T

XSS in mail.aol.com

Leveraging LFI to RCE using zip://.