Rodolfo Assis (Brute)

695 Followers

Top 10 XSS Payloads

Those are the most useful payloads to prove the vast majority of Cross Site Scripting (XSS) vulnerabilities out there.

Jul 23, 2024

Jul 23, 2024

A Curious Glitch in XSS Sanitizing

When looking for ways to bypass XSS sanitizing (sanitizing, not filtering), I’ve figured out something interesting but almost useless…

Feb 6, 2022

Feb 6, 2022

Get an email whenever Rodolfo Assis (Brute) publishes.

By signing up, you will create a Medium account if you don’t already have one. Review our Privacy Policy for more information about our privacy practices.

Medium sent you an email at to complete your subscription.

Thinking About Simple SQL Injections

About 3 years ago, in 2018, I wrote about some SQL injection in login forms without a quote to break out from string delimiter, in an old…

Sep 15, 2021

Sep 15, 2021

On SSRF (Server Side Request Forgery) or Simple Stuff Rodolfo Found — Part I

I think the most we have to test against an application the better. But as you can see by yourself (correct me if I’m wrong please) the…

Jul 20, 2021

On SSRF (Server Side Request Forgery) or Simple Stuff Rodolfo Found — Part I

Jul 20, 2021