Security research
Muhammad Hasan — Bug bounty hunter · Web security. Verified findings with full exploit chains.
Muhammad Hasan · Critical
Stored XSS in Microsoft ESI Support Portal: From Client-Side Filter Bypass to Cross-User Takeover
Deep-dive on esisupport.microsoft.com stored XSS in IssueDescription — client-side <> filter bypass via direct API call, unescaped innerHTML sinks, blind-XSS validation, token theft, GetCases IDOR email-attribution chain, attachment MIME bypass, and fixes.
Oct 11, 2026 · 17 min read · XSS, IDOR
JJ Kasper
Dynamic Routing and Static Generation
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Praesent elementum facilisis leo vel fringilla est ullamcorper eget. At imperdiet dui accumsan sit amet nulla facilities morbi tempus.
Mar 16, 2020 · 1 min read
Tim Neutkens
Learn How to Pre-render Pages Using Static Generation with Next.js
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Praesent elementum facilisis leo vel fringilla est ullamcorper eget. At imperdiet dui accumsan sit amet nulla facilities morbi tempus.
Mar 16, 2020 · 1 min read
Joe Haddad
Preview Mode for Static Generation
Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Praesent elementum facilisis leo vel fringilla est ullamcorper eget. At imperdiet dui accumsan sit amet nulla facilities morbi tempus.
Mar 16, 2020 · 1 min read
