<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://hackcommander.github.io/posts/2022/09/01/ejpt-certification-review/</loc>
<lastmod>2022-09-01T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2022/09/20/reflected-xss-bypassing-html-tag-removal-sanitization/</loc>
<lastmod>2022-09-20T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2022/10/17/sql-injection-in-a-login-form/</loc>
<lastmod>2022-10-17T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2022/11/12/bypass-httponly-via-php-info-page/</loc>
<lastmod>2022-11-12T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2023/03/06/reflected-xss-bypassing-redirect-due-to-javascript-function/</loc>
<lastmod>2023-03-06T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2023/05/03/te-te-http-request-smuggling-obfuscating-te-header/</loc>
<lastmod>2023-05-03T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2023/06/24/reflected-xss-in-search-filter-clear-button/</loc>
<lastmod>2023-06-24T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2023/11/05/reflected-xss-through-post-request-in-login-form/</loc>
<lastmod>2023-11-05T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2023/11/13/subdomain-takeover-via-unclaimed-azure-vm/</loc>
<lastmod>2023-11-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2023/12/10/reflected-xss-bypassing-hidden-input-tag-and-auto-submit-script/</loc>
<lastmod>2023-12-10T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2024/03/19/human-1-sqlmap-0-defeating-automation-through-manual-exploitation/</loc>
<lastmod>2024-03-19T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2024/03/31/vulnyx-hackingstation/</loc>
<lastmod>2024-03-31T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2024/04/08/vulnyx-diff3r3nts3c/</loc>
<lastmod>2024-04-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2024/06/10/hackernight-2024-my-first-live-hacking-event/</loc>
<lastmod>2024-06-10T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2024/12/07/breaking-the-perimeter-by-exploiting-routing-based-ssrf-via-a-misconfigured-load-balancer/</loc>
<lastmod>2024-12-07T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2025/03/30/defeating-xss-filters-using-unexpected-html-tags-and-attributes/</loc>
<lastmod>2025-03-30T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/posts/2025/12/28/turning-a-harmless-xss-behind-a-waf-into-a-realistic-phishing-vector/</loc>
<lastmod>2025-12-28T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://hackcommander.github.io/404/</loc>
</url>
<url>
<loc>https://hackcommander.github.io/about/</loc>
</url>
<url>
<loc>https://hackcommander.github.io/advertising/</loc>
</url>
<url>
<loc>https://hackcommander.github.io/categories/</loc>
</url>
<url>
<loc>https://hackcommander.github.io/</loc>
</url>
<url>
<loc>https://hackcommander.github.io/search/</loc>
</url>
<url>
<loc>https://hackcommander.github.io/tags/</loc>
</url>
<url>
<loc>https://hackcommander.github.io/year-archive/</loc>
</url>
<url>
<loc>https://hackcommander.github.io/page2/</loc>
</url>
</urlset>
