<urlset
    xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
    xmlns:xhtml="http://www.w3.org/1999/xhtml"
    ><url>
            <loc>https://blog.xss.am/2026/03/how-we-mitmd-a-crypto-exchange-platform/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/2023/08/cve-2023-39968-jupyter-token-leak/</loc><lastmod>2024-07-03T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/2022/08/offzone-express-notes/</loc><lastmod>2022-08-28T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/2022/08/offzone-delicious-and-point/</loc><lastmod>2022-08-27T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/2021/11/cyhub-padding-oracle-pickle/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/2021/11/cyhub-off-by-slash-xxe/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/2021/11/vuejs-script-gadget-intigriti/</loc><lastmod>2021-11-22T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/2021/02/intigriti-february-xss-challenge/</loc><lastmod>2021-02-22T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/2020/12/intigriti-december-xss-challenge/</loc><lastmod>2020-12-14T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/categories/bug-bounty/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/tags/bug-bounty/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/tags/cache-poisoning/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/categories/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/tags/oauth2/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/tags/openid/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/posts/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/tags/</loc><lastmod>2026-03-15T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>1</priority></url><url>
            <loc>https://blog.xss.am/tags/chromium/</loc><lastmod>2024-07-03T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/client-side-path-traversal/</loc><lastmod>2024-07-03T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/categories/cve/</loc><lastmod>2024-07-03T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/javascript/</loc><lastmod>2024-07-03T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/open-redirect/</loc><lastmod>2024-07-03T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/python/</loc><lastmod>2024-07-03T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/categories/ctf/</loc><lastmod>2022-08-28T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/express/</loc><lastmod>2022-08-28T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/fileupload/</loc><lastmod>2022-08-28T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/nodejs/</loc><lastmod>2022-08-28T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/redis/</loc><lastmod>2022-08-28T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/axios/</loc><lastmod>2022-08-27T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/gadgets/</loc><lastmod>2022-08-27T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/jwt/</loc><lastmod>2022-08-27T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/prototype-pollution/</loc><lastmod>2022-08-27T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/cbc/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/cryptography/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/cyhub/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/deserialization/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/java/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/nginx/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/off-by-slash/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/pickles/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/web-security/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/xxe/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/xxe-gadget/</loc><lastmod>2021-11-28T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/categories/challenges/</loc><lastmod>2021-11-22T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/intigriti/</loc><lastmod>2021-11-22T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/script-gadget/</loc><lastmod>2021-11-22T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/vuejs/</loc><lastmod>2021-11-22T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/xss/</loc><lastmod>2021-11-22T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/challenge/</loc><lastmod>2021-02-22T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/dom-clobbering/</loc><lastmod>2021-02-22T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/eval/</loc><lastmod>2021-02-22T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/unicode/</loc><lastmod>2021-02-22T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/unintended/</loc><lastmod>2020-12-14T01:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/about/</loc><lastmod>2020-09-15T00:00:00&#43;04:00</lastmod><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/categories/category/</loc><changefreq>weekly</changefreq><priority>0.5</priority></url><url>
            <loc>https://blog.xss.am/tags/tag/</loc><changefreq>weekly</changefreq><priority>0.5</priority></url></urlset>
