https://blog.sicks3c.io/2026-01-24T00:00:00+00:00daily0.5https://blog.sicks3c.io/research/ato-via-open-mcp-dcr/2026-01-24T00:00:00+00:00daily0.5https://blog.sicks3c.io/research/2026-01-24T00:00:00+00:00daily0.5https://blog.sicks3c.io/research/abusing-url-shortners-for-fun-and-profit/2025-02-26T07:32:53+08:00daily0.5https://blog.sicks3c.io/posts/2025-02-26T07:32:53+08:00daily0.5https://blog.sicks3c.io/posts/how-i-scored-2k-bounty-via-an-idor/2025-02-26T07:32:53+08:00daily0.5https://blog.sicks3c.io/research/ato-via-facebook-oauth-due-unsanitized-schema-allows-to-steal-oauth-token/2023-09-01T07:32:53+08:00daily0.5https://blog.sicks3c.io/posts/how-i-got-rce-in-the-world-largest-russian-company/2021-08-19T07:32:53+08:00daily0.5https://blog.sicks3c.io/posts/how-i-scored-1k-bounty-using-waybackurls/2021-08-03T07:32:53+08:00daily0.5https://blog.sicks3c.io/posts/tale-of-xss-in-angular/2021-08-01T00:00:00+00:00daily0.5