{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "TheCzar",
  "home_page_url": "https://theczar.dev/",
  "feed_url": "https://theczar.dev/feed.json",
  "description": "Offensive security notes from Ilyas Salioui (TheCzar) — breaking web apps, chasing bugs, and automating recon.",
  "language": "en",
  "authors": [
    {
      "name": "Ilyas Salioui",
      "url": "https://theczar.dev/"
    }
  ],
  "items": [
    {
      "id": "https://theczar.dev/blog/one-quote-over-a-hundred-tables/",
      "url": "https://theczar.dev/blog/one-quote-over-a-hundred-tables/",
      "title": "One Quote, 107 Tables, One Crit",
      "summary": "A classic first-order SQLi in a legacy parameter, sqlmap, and 107 tables of very sensitive data. Target redacted.",
      "date_published": "2026-11-10T10:00:00.000Z",
      "tags": [
        "bug-bounty",
        "sql-injection",
        "web-security",
        "postgresql",
        "writeup"
      ]
    },
    {
      "id": "https://theczar.dev/blog/the-bucket-that-said-yes/",
      "url": "https://theczar.dev/blog/the-bucket-that-said-yes/",
      "title": "The Bucket Said Yes: A Severity Plot Twist",
      "summary": "A public-write S3 bucket, a harmless .txt PoC, and the classic \"it is only Medium\" plot twist.",
      "date_published": "2026-11-10T09:00:00.000Z",
      "tags": [
        "bug-bounty",
        "cloud-security",
        "access-control",
        "writeup"
      ]
    },
    {
      "id": "https://theczar.dev/blog/cookie-tossing/",
      "url": "https://theczar.dev/blog/cookie-tossing/",
      "title": "Cookie Tossing: Escalating Low-Impact XSS into Criticals",
      "summary": "How a low-impact XSS or a controlled subdomain can become a critical account takeover through cookie tossing — cookie scoping, path precedence, attack patterns, and defenses.",
      "date_published": "2026-02-17T00:00:00.000Z",
      "date_modified": "2026-09-02T00:00:00.000Z",
      "tags": [
        "bug-bounty",
        "web-security",
        "xss",
        "cookies"
      ]
    },
    {
      "id": "https://theczar.dev/blog/stack-traces/",
      "url": "https://theczar.dev/blog/stack-traces/",
      "title": "Stack Traces: Unveiling Attack Surface",
      "summary": "How to find, trigger, and weaponize stack traces during black-box recon — from dorking and Shodan to malformed requests, framework fingerprinting, and exploitation paths.",
      "date_published": "2025-12-31T00:00:00.000Z",
      "date_modified": "2026-01-06T00:00:00.000Z",
      "tags": [
        "recon",
        "web-security",
        "information-disclosure"
      ]
    },
    {
      "id": "https://theczar.dev/blog/origin-ip-discovery/",
      "url": "https://theczar.dev/blog/origin-ip-discovery/",
      "title": "Origin IP Discovery Techniques: How Attackers Bypass WAF Protections",
      "summary": "A practical recon guide to finding a target's origin IP behind Cloudflare and other WAFs — DNS history, favicon hashes, Shodan, certificate matches, and verification.",
      "date_published": "2025-12-09T00:00:00.000Z",
      "date_modified": "2026-08-28T00:00:00.000Z",
      "tags": [
        "recon",
        "cloudflare",
        "waf",
        "bug-bounty"
      ]
    },
    {
      "id": "https://theczar.dev/blog/intigriti-jwt-to-rce/",
      "url": "https://theczar.dev/blog/intigriti-jwt-to-rce/",
      "title": "Intigriti Monthly Challenge Writeup: JWT Abuse → Admin Panel → SSTI → RCE → Flag",
      "summary": "A full Intigriti monthly challenge walkthrough: JWT none-algorithm abuse, admin panel access, stored XSS, SSTI in Jinja2, and RCE to the flag.",
      "date_published": "2025-11-25T00:00:00.000Z",
      "tags": [
        "ctf",
        "writeup",
        "jwt",
        "ssti"
      ]
    }
  ]
}