https://mastomi.id/2025-12-301.0 https://mastomi.id/articles2025-12-300.9 https://mastomi.id/articles/2018-10/blind-xss-on-internal-panel-tokopedia-bahasa2025-07-050.8 https://mastomi.id/articles/2019-08/aws-metadata-disclosure-via-hardcoded-host-download-function2025-07-040.8 https://mastomi.id/articles/2025-01/cegah-website-tampilkan-konten-judi-online-dengan-cloudflare-worker-bahasa-indonesia2025-07-050.8 https://mastomi.id/articles/2019-06/reflected-xss-on-error-page2025-07-040.8 https://mastomi.id/articles/2021-05/ssrf-in-pdf-renderer-using-svg2025-07-040.8 https://mastomi.id/articles/2021-06/full-local-file-read-via-error-based-xxe-using-xliff-file2025-07-040.8 https://mastomi.id/articles/2019-01/how-i-found-multiple-vulnerabilities-on-antihack-me2025-07-050.8 https://mastomi.id/articles/2020-01/how-i-accidentally-found-bug-in-google-search-console2025-07-040.8 https://mastomi.id/articles/2019-09/exploiting-cookie-based-xss-by-finding-rce2025-07-040.8 https://mastomi.id/articles/2019-10/xss-to-account-takeover-bypassing-csrf-header-protection-and-httponly-cookie2025-07-040.8 https://mastomi.id/articles/2020-06/from-unvalidated-redirect-and-parameter-tampering-to-account-takeover2025-07-040.8 https://mastomi.id/articles/2020-12/from-git-folder-disclosure-to-remote-code-execution2025-07-040.8