https://blog.nhhoang.io.vn/search/index.html 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/about/index.html 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/arsenal/index.html 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/09/cve-2026-86540-knowns-arbitrary-code-execution-lsp-binary/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/09/cve-2026-86541-knowns-path-traversal-code-replace/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/09/cve-2026-86542-knowns-path-traversal-import-name/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/09/cve-2026-86543-knowns-unauthenticated-management-api/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/09/cve-2026-86775-knowns-path-traversal-document-api/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/10/cve-2026-105744-docling-tikz-tectonic-file-read-write/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/11/cve-2026-123790-comfyui-easy-use-save-preview-rce/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/09/cve-2026-86544-knowns-authorization-bypass-code-actions/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-url-based-access-control-can-be-circumvented/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-user-id-controlled-by-request-parameter-with-data-leakage-in-redirect/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-user-id-controlled-by-request-parameter-with-password-disclosure/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-user-id-controlled-by-request-parameter-with-unpredictable-user-ids/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-user-role-can-be-modified-in-user-profile/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/insecure-direct-object-references/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/unprotected-admin-functionality/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/unprotected-admin-unpredictable-url/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/user-id-controlled-by-request-parameter/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/user-role-controlled-by-request-parameter/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/2026-07-13-cve-2026-57572-crawl4ai-docker-api-argument-injection/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/08/cve-2026-55529-praisonai-mcp-origin-bypass/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/08/cve-2026-55533-praisonai-recipe-auth-fail-open/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/09/cve-2026-86439-knowns-path-traversal-mcp-doc-memory/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/09/cve-2026-86538-knowns-path-traversal-template-preview/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-2fa-broken-logic/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-excessive-trust-in-client-side-controls/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-flawed-enforcement-of-business-rules/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-high-level/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-password-reset-poisoning-via-middleware/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-username-enumeration-via-account-lock/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-username-enumeration-via-different-responses/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-username-enumeration-via-response-timing/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-username-enumeration-via-subtly-different-responses/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/2026-07-10-web/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-2fa-simple-bypass/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-broken-bruteforce-protection-ip-block/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-brute-forcing-a-stay-logged-in-cookie/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-exploiting-api-endpoint-using-documentation/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-exploiting-mass-assignment-vulnerability/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-exploiting-server-side-parameter-pollution-in-query-string/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-exploiting-server-side-parameter-pollution-in-rest-url/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-exploiting-unused-api-endpoint/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-offline-password-cracking/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-password-reset-broken-logic/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-out-of-band/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-querying-database-version-oracle/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-querying-database-version-mysql-microsoft/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-time-delays-info-retrieval/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-time-delays/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-samesite-lax-bypass-via-cookie-refresh/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-conditional-responses/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-samesite-strict-bypass-via-client-side-redirect/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-samesite-lax-bypass-via-method-override/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-samesite-strict-bypass-via-sibling-domain/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-token-tied-to-non-session-cookie/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-token-validation-depends-on-request-method/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-token-validation-depends-on-token-being-present/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-authentication-bypass-via-flawed-state-machine/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-inconsistent-handling-of-exceptional-input/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-inconsistent-security-controls/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-infinite-money/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-insufficient-workflow-validation/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-low-level/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-logic-flaws-weak-isolation-on-dual-use-endpoint/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-token-duplicated-in-cookie/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-token-not-tied-to-user-session/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/05/2026-05-30-methodology/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/06/2026-06-15-cloud-ai/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/06/2026-06-28-ad/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-dom-xss-stored/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-href-attribute-double-quotes-html-encoded/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-html-context-nothing-encoded/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-onclick-event-angle-brackets-double-quotes-html-encoded-single-quotes-backslash-escaped/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/stored-xss-into-html-context-with-nothing-encoded/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-some-svg-markup-allowed/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-angularjs-expression/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-attribute-angle-brackets-html-encoded/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-canonical-link-tag/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-html-context-with-all-standard-tags-blocked/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-html-context-with-most-tags-and-attributes-blocked/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-javascript-string-angle-brackets-double-quotes-encoded-single-quotes-escaped/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-javascript-string-angle-brackets-html-encoded/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-javascript-string-single-quote-backslash-escaped/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-javascript-template-literal-angle-brackets-single-double-quotes-backslash-backticks-escaped/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-document-write-sink/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-dom-xss-reflected/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-innerhtml-sink/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-jquery-href-attribute-sink/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-jquery-selector-hash-change-event/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-perform-csrf/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-stealing-cookies/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-stealing-passwords/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-conditional-errors/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-determine-number-of-columns/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-document-write-sink-inside-select-element/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-find-column-containing-text/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-login-bypass/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-retrieve-data-from-other-tables/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-retrieve-hidden-data/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-retrieve-multiple-values-in-single-column/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-sql-injection-with-filter-bypass-via-xml-encoding/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-listing-database-contents-non-oracle/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-listing-database-contents-oracle/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-no-defenses/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/posts/2026/07/lab-out-of-band-data-exfiltration/ 2026-11-12 monthly 0.6 https://blog.nhhoang.io.vn/ 2026-11-12 daily 1.0 https://blog.nhhoang.io.vn/tags/methodology/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/reporting/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/automation/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/cloud/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/ai-security/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/threat-model/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/active-directory/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/identity/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/graph/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/portswigger/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/web-security/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/xss/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/sql-injection/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/csrf/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/business-logic/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/authentication/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/web/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/api-security/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/access-control/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/idor/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/cve/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/crawl4ai/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/chromium/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/argument-injection/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/rce/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/docker/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/praisonai/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/mcp/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/origin-validation/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/dns-rebinding/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/agent-framework/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/fail-open/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/knowns/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/path-traversal/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/prompt-injection/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/golang/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/cwe-22/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/file-disclosure/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/lsp/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/code-execution/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/workspace-trust/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/cwe-78/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/supply-chain/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/arbitrary-file-write/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/missing-authentication/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/tunnel/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/exposure/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/variant-analysis/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/docling/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/latex/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/tikz/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/tectonic/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/python/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/cwe-73/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/cwe-1188/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/document-parsing/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/rag/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/comfyui/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/comfyui-easy-use/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/aiohttp/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/cwe-306/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/cert-cc/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/authorization/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/privilege-escalation/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/tags/cwe-863/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Notes/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Research/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Notes/Methodology/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Research/Cloud-AI/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/PortSwigger/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/Active-Directory/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/PortSwigger/XSS/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/PortSwigger/SQL-Injection/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/PortSwigger/CSRF/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/PortSwigger/Business-Logic/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/PortSwigger/Authentication/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/Web/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/PortSwigger/API-Testing/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Writeups/PortSwigger/Access-Control/ 2026-11-12 weekly 0.2 https://blog.nhhoang.io.vn/categories/Research/Vulnerability-Research/ 2026-11-12 weekly 0.2