<commit_before>{
    "data": [

        {
            "slug" : "hacking-into-internet-connected-light-bulbs",
            "title": "Hacking into Internet Connected Light Bulbs",
            "description": "<NAME> reverse engineered LIFX light bulbs to discover the harcoded wifi credentials used in their internal Wifi component.",
            "urls": ["http://www.contextis.com/resources/blog/hacking-internet-connected-light-bulbs/"],
            "companies": [ "LIFX" ],
            "hosts" : [],
            "domains" : [ "http://lifx.co/" ],
            "tags": [ "LIFX", "ReverseEngineering" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": null,
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@CTXIS" ],
            "published_at": "2014-07-04",
            "created_at": "2015-12-28",
            "updated_at": "2015-12-28",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        ,{
            "slug" : "instagram-million-dollar-bug",
            "title": "Instagram's Million Dollar Bug",
            "description": "<NAME> found multiple vulnerabilities on Instagram, including RCE. The most interesting part is how (badly) Facebook reacted to his findings on his view. <NAME> (Facebook CSO) replied.",
            "urls": [
                "http://www.exfiltrated.com/research-Instagram-RCE.php",
                "https://www.facebook.com/notes/alex-stamos/bug-bounty-ethics/10153799951452929",
                "https://news.ycombinator.com/item?id=10754194",
                "https://www.reddit.com/r/netsec/comments/3x8fsk/instagrams_million_dollar_bug_threats_lies_and/",
                "https://summitroute.com/blog/2015/12/24/instagram_bounty_case_study_for_defense/"
            ],
            "companies": [ "Instagram", "Facebook" ],
            "hosts": [],
            "domains" : ["sensu.instagram.com"],
            "tags": [ "Facebook", "Instagram", "RCE", "Ruby" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": "2015-10-21",
            "reported_at": "2015-10-21",
            "fixed_at": null,
            "rewarded_at": "2015-11-16",
            "reward_amount": 2500,
            "reward_currency": "USD",
            "hacked_by": [ "<NAME>" ],
            "published_at": "2015-12-16",
            "created_at": "2015-12-17",
            "updated_at": "2015-12-17",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        ,{
            "slug" : "owncloud-6-0-0a-from-xss-to-shell",
            "title": "OwnCloud 6.0.0a: From XSS to Shell",
            "description": "<NAME> exploited a XSS that captured the CSRF token that led to a shell upload in the end.",
            "urls": [
                "http://blog.noobroot.com/2014/02/owncloud-600a-when-xss-vulnerability.html",
                "https://www.exploit-db.com/exploits/31427/"
            ],
            "companies": [ "OwnCloud" ],
            "hosts": [],
            "domains" : [],
            "tags": [ "OwnCloud", "XSS", "CSRF", "RCE" ],
            "cve_ids": [ "CVE-2014-1665" ],
            "osvdb_ids": [ "102978" ],
            "hacked_at": null,
            "reported_at": null,
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "<NAME>" ],
            "published_at": "2014-02-05",
            "created_at": "2015-12-14",
            "updated_at": "2015-12-14",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        ,{
            "slug" : "multiple-vulnerabilities-on-pocket",
            "title": "Multiple Vulnerabilities on Pocket",
            "description": "Clint Ruoho exploited many vulnerabilities on Pocket that started with a Server Side Request Forgery (SSRF) to localhost. That led to one vulnerability after another. Pocket took 1 month to fix them all.",
            "urls": [ "https://www.gnu.gl/blog/Posts/multiple-vulnerabilities-in-pocket/" ],
            "companies": [ "Pocket" ],
            "hosts": [],
            "domains" : [ "pocket.com" ],
            "tags": [ "Pocket", "SSRF", "AmazonEC2", "ProtocolHandler" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-07-25",
            "fixed_at": "2015-08-17",
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@ruoho" ],
            "published_at": "2015-08-18",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        ,{
            "slug" : "neglected-dns-records-exploited-to-takeover-subdomains",
            "title": "Neglected DNS records exploited to takeover subdomains",
            "description": "Yassine found a CNAME (DNS entry) on Redbooth that pointed to a Heroku app. He leverage this fact to set a new app there and use the same name.",
            "urls": [ "http://yassineaboukir.com/blog/neglected-dns-records-exploited-to-takeover-subdomains/" ],
            "companies": [ "Redbooth" ],
            "hosts" : [],
            "domains" : [ "redbooth.com" ],
            "tags": [ "Redbooth", "SubdomainTakeover" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-02-09",
            "fixed_at": "2015-02-11",
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@Yassineaboukir" ],
            "published_at": "2015-02-10",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "subdomain-takeover-on-users-tweetdeck-com",
            "title": "Subdomain Takeover on users.tweetdeck.com",
            "description": "@missoum1307 spotted a dangling DNS entry that allowed a TweetDeck subdomain takeover. Twitter fixed on the same day.",
            "urls": ["https://hackerone.com/reports/42236"],
            "companies": [ "Twitter" ],
            "hosts" : [],
            "domains" : [ "users.tweetdeck.com" ],
            "tags": [ "Twitter", "TweetDeck", "SubdomainTakeover", "AmazonS3" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2014-12-31",
            "fixed_at": "2014-12-31",
            "rewarded_at": "2015-01-06",
            "reward_amount": 420,
            "reward_currency": "USD",
            "hacked_by": [ "@missoum1307" ],
            "published_at": "2014-12-31",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "subdomain-takeover-on-media-vine-co",
            "title": "Subdomain Takeover on media.vine.co",
            "description": "<NAME> spotted a dangling DNS entry that allowed a Vine subdomain takeover. Twitter fixed on the same day.",
            "urls": ["https://hackerone.com/reports/32825"],
            "companies": [ "Twitter" ],
            "hosts" : [],
            "domains" : [ "media.vine.co" ],
            "tags": [ "Twitter", "Vine", "SubdomainTakeover", "AmazonS3" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2014-10-25",
            "fixed_at": "2014-10-27",
            "rewarded_at": "2014-11-03",
            "reward_amount": 1680,
            "reward_currency": "USD",
            "hacked_by": [ "@fransrosen" ],
            "published_at": "2014-11-03",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "hacking-paypal-accounts-with-one-click-patched",
            "title": "Hacking PayPal Accounts with one click (Patched)",
            "description": "Yasser ali exploited many vulnerabilities on PayPal starting with CSRF token reuse.",
            "urls": [
                "http://yasserali.com/hacking-paypal-accounts-with-one-click/",
                "http://thehackernews.com/2014/12/hacking-paypal-account.html"
            ],
            "companies": [ "PayPal" ],
            "hosts" : [],
            "domains" : [ "paypal.com" ],
            "tags": [ "PayPal", "CSRF", "SecurityQuestions" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2014-10-09",
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@garagosy" ],
            "published_at": "2014-10-09",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "how-i-hacked-hotmail",
            "title": "How I Hacked Hotmail",
            "description": "<NAME> found a CSRF vulnerability in a critical authentication system used by Hotmail. He earned 24,000 USD for that.",
            "urls": [
                "https://www.synack.com/2015/10/08/how-i-hacked-hotmail/"
            ],
            "companies": [ "Microsoft" ],
            "hosts" : [],
            "domains" : [ "login.live.com" ],
            "tags": [ "Microsoft", "Hotmail", "OAuth", "CSRF" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-08-23",
            "fixed_at": "2015-09-15",
            "rewarded_at": "2015-09-15",
            "reward_amount": 24000,
            "reward_currency": "USD",
            "hacked_by": [ "@synack", "<NAME>" ],
            "published_at": "2014-10-09",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "how-patreon-got-hacked-publicly-exposed-werkzeug-debugger",
            "title": "How Patreon got hacked - Publicly exposed Werkzeug Debugger",
            "description": "Detectify warned Patreon before they got hacked. Patreon had a publicly exposed debugger that allowed attackers to issue arbitrary commands.",
            "urls": [
                "http://labs.detectify.com/post/130332638391/how-patreon-got-hacked-publicly-exposed-werkzeug"
            ],
            "companies": [ "Patreon" ],
            "hosts" : [],
            "domains" : [ "patreon.com" ],
            "tags": [ "Patreon", "WerkzeugDebugger", "RCE" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-09-28",
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@detectify" ],
            "published_at": "2015-10-02",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "xss-to-rce-in-atlassian-hipchat",
            "title": "XSS to RCE in Atlassian Hipchat",
            "description": "<NAME> found multiple vulnerabilities on Atlassian HipChat ranging from XSS, to Protocol Handling exploit and finally Remote Code Execution (RCE).",
            "urls": [
                "http://maustin.net/2015/11/12/hipchat_rce.html"
            ],
            "companies": [ "Atlassian" ],
            "hosts" : [],
            "domains" : [ "hipchat.com" ],
            "tags": [ "Atlassian", "HipChat", "XSS", "RCE", "ProtocolHandler" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": null,
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@mattaustin" ],
            "published_at": "2015-11-15",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "hacking-starbucks-for-unlimited-coffee",
            "title": "Hacking Starbucks for unlimited coffee",
            "description": "<NAME> exploited a race condition vulnerability on Starbucks gift card processing system and got more credits than he would be able to.",
            "urls": [
                "http://sakurity.com/blog/2015/05/21/starbucks.html"
            ],
            "companies": [ "Starbucks" ],
            "hosts" : [],
            "domains" : [ "starbucks.com" ],
            "tags": [ "Starbucks", "RaceCondition" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-03-23",
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@homakov" ],
            "published_at": "2015-05-21",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }
    ]
}


<commit_msg>New Story: Facebook XSS using PNG<commit_after>{
    "data": [

        {
            "slug" : "an-xss-on-facebook-via-pngs-and-wonky-content-types",
            "title": "An XSS on Facebook via PNGs & Wonky Content Types",
            "description": "@fin1te exploited a complex XSS on a CDN used by Facebook by abusing PNG files",
            "urls": ["https://fin1te.net/articles/xss-on-facebook-via-png-content-types/"],
            "companies": [ "Facebook" ],
            "hosts" : [],
            "domains" : [ "http://facebook.com/" ],
            "tags": [ "Facebook", "XSS", "PNG" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": null,
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@fin1te" ],
            "published_at": "2016-01-27",
            "created_at": "2016-01-28",
            "updated_at": "2016-01-28",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        ,{
            "slug" : "hacking-into-internet-connected-light-bulbs",
            "title": "Hacking into Internet Connected Light Bulbs",
            "description": "<NAME> reverse engineered LIFX light bulbs to discover the harcoded wifi credentials used in their internal Wifi component.",
            "urls": ["http://www.contextis.com/resources/blog/hacking-internet-connected-light-bulbs/"],
            "companies": [ "LIFX" ],
            "hosts" : [],
            "domains" : [ "http://lifx.co/" ],
            "tags": [ "LIFX", "ReverseEngineering" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": null,
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@CTXIS" ],
            "published_at": "2014-07-04",
            "created_at": "2015-12-28",
            "updated_at": "2015-12-28",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        ,{
            "slug" : "instagram-million-dollar-bug",
            "title": "Instagram's Million Dollar Bug",
            "description": "<NAME> found multiple vulnerabilities on Instagram, including RCE. The most interesting part is how (badly) Facebook reacted to his findings on his view. <NAME> (Facebook CSO) replied.",
            "urls": [
                "http://www.exfiltrated.com/research-Instagram-RCE.php",
                "https://www.facebook.com/notes/alex-stamos/bug-bounty-ethics/10153799951452929",
                "https://news.ycombinator.com/item?id=10754194",
                "https://www.reddit.com/r/netsec/comments/3x8fsk/instagrams_million_dollar_bug_threats_lies_and/",
                "https://summitroute.com/blog/2015/12/24/instagram_bounty_case_study_for_defense/"
            ],
            "companies": [ "Instagram", "Facebook" ],
            "hosts": [],
            "domains" : ["sensu.instagram.com"],
            "tags": [ "Facebook", "Instagram", "RCE", "Ruby" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": "2015-10-21",
            "reported_at": "2015-10-21",
            "fixed_at": null,
            "rewarded_at": "2015-11-16",
            "reward_amount": 2500,
            "reward_currency": "USD",
            "hacked_by": [ "<NAME>" ],
            "published_at": "2015-12-16",
            "created_at": "2015-12-17",
            "updated_at": "2015-12-17",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        ,{
            "slug" : "owncloud-6-0-0a-from-xss-to-shell",
            "title": "OwnCloud 6.0.0a: From XSS to Shell",
            "description": "<NAME> exploited a XSS that captured the CSRF token that led to a shell upload in the end.",
            "urls": [
                "http://blog.noobroot.com/2014/02/owncloud-600a-when-xss-vulnerability.html",
                "https://www.exploit-db.com/exploits/31427/"
            ],
            "companies": [ "OwnCloud" ],
            "hosts": [],
            "domains" : [],
            "tags": [ "OwnCloud", "XSS", "CSRF", "RCE" ],
            "cve_ids": [ "CVE-2014-1665" ],
            "osvdb_ids": [ "102978" ],
            "hacked_at": null,
            "reported_at": null,
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "<NAME>" ],
            "published_at": "2014-02-05",
            "created_at": "2015-12-14",
            "updated_at": "2015-12-14",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        ,{
            "slug" : "multiple-vulnerabilities-on-pocket",
            "title": "Multiple Vulnerabilities on Pocket",
            "description": "Clint Ruoho exploited many vulnerabilities on Pocket that started with a Server Side Request Forgery (SSRF) to localhost. That led to one vulnerability after another. Pocket took 1 month to fix them all.",
            "urls": [ "https://www.gnu.gl/blog/Posts/multiple-vulnerabilities-in-pocket/" ],
            "companies": [ "Pocket" ],
            "hosts": [],
            "domains" : [ "pocket.com" ],
            "tags": [ "Pocket", "SSRF", "AmazonEC2", "ProtocolHandler" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-07-25",
            "fixed_at": "2015-08-17",
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@ruoho" ],
            "published_at": "2015-08-18",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        ,{
            "slug" : "neglected-dns-records-exploited-to-takeover-subdomains",
            "title": "Neglected DNS records exploited to takeover subdomains",
            "description": "Yassine found a CNAME (DNS entry) on Redbooth that pointed to a Heroku app. He leverage this fact to set a new app there and use the same name.",
            "urls": [ "http://yassineaboukir.com/blog/neglected-dns-records-exploited-to-takeover-subdomains/" ],
            "companies": [ "Redbooth" ],
            "hosts" : [],
            "domains" : [ "redbooth.com" ],
            "tags": [ "Redbooth", "SubdomainTakeover" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-02-09",
            "fixed_at": "2015-02-11",
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@Yassineaboukir" ],
            "published_at": "2015-02-10",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "subdomain-takeover-on-users-tweetdeck-com",
            "title": "Subdomain Takeover on users.tweetdeck.com",
            "description": "@missoum1307 spotted a dangling DNS entry that allowed a TweetDeck subdomain takeover. Twitter fixed on the same day.",
            "urls": ["https://hackerone.com/reports/42236"],
            "companies": [ "Twitter" ],
            "hosts" : [],
            "domains" : [ "users.tweetdeck.com" ],
            "tags": [ "Twitter", "TweetDeck", "SubdomainTakeover", "AmazonS3" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2014-12-31",
            "fixed_at": "2014-12-31",
            "rewarded_at": "2015-01-06",
            "reward_amount": 420,
            "reward_currency": "USD",
            "hacked_by": [ "@missoum1307" ],
            "published_at": "2014-12-31",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "subdomain-takeover-on-media-vine-co",
            "title": "Subdomain Takeover on media.vine.co",
            "description": "<NAME> spotted a dangling DNS entry that allowed a Vine subdomain takeover. Twitter fixed on the same day.",
            "urls": ["https://hackerone.com/reports/32825"],
            "companies": [ "Twitter" ],
            "hosts" : [],
            "domains" : [ "media.vine.co" ],
            "tags": [ "Twitter", "Vine", "SubdomainTakeover", "AmazonS3" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2014-10-25",
            "fixed_at": "2014-10-27",
            "rewarded_at": "2014-11-03",
            "reward_amount": 1680,
            "reward_currency": "USD",
            "hacked_by": [ "@fransrosen" ],
            "published_at": "2014-11-03",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "hacking-paypal-accounts-with-one-click-patched",
            "title": "Hacking PayPal Accounts with one click (Patched)",
            "description": "Yasser ali exploited many vulnerabilities on PayPal starting with CSRF token reuse.",
            "urls": [
                "http://yasserali.com/hacking-paypal-accounts-with-one-click/",
                "http://thehackernews.com/2014/12/hacking-paypal-account.html"
            ],
            "companies": [ "PayPal" ],
            "hosts" : [],
            "domains" : [ "paypal.com" ],
            "tags": [ "PayPal", "CSRF", "SecurityQuestions" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2014-10-09",
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@garagosy" ],
            "published_at": "2014-10-09",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "how-i-hacked-hotmail",
            "title": "How I Hacked Hotmail",
            "description": "<NAME> found a CSRF vulnerability in a critical authentication system used by Hotmail. He earned 24,000 USD for that.",
            "urls": [
                "https://www.synack.com/2015/10/08/how-i-hacked-hotmail/"
            ],
            "companies": [ "Microsoft" ],
            "hosts" : [],
            "domains" : [ "login.live.com" ],
            "tags": [ "Microsoft", "Hotmail", "OAuth", "CSRF" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-08-23",
            "fixed_at": "2015-09-15",
            "rewarded_at": "2015-09-15",
            "reward_amount": 24000,
            "reward_currency": "USD",
            "hacked_by": [ "@synack", "<NAME>" ],
            "published_at": "2014-10-09",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "how-patreon-got-hacked-publicly-exposed-werkzeug-debugger",
            "title": "How Patreon got hacked - Publicly exposed Werkzeug Debugger",
            "description": "Detectify warned Patreon before they got hacked. Patreon had a publicly exposed debugger that allowed attackers to issue arbitrary commands.",
            "urls": [
                "http://labs.detectify.com/post/130332638391/how-patreon-got-hacked-publicly-exposed-werkzeug"
            ],
            "companies": [ "Patreon" ],
            "hosts" : [],
            "domains" : [ "patreon.com" ],
            "tags": [ "Patreon", "WerkzeugDebugger", "RCE" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-09-28",
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@detectify" ],
            "published_at": "2015-10-02",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "xss-to-rce-in-atlassian-hipchat",
            "title": "XSS to RCE in Atlassian Hipchat",
            "description": "<NAME> found multiple vulnerabilities on Atlassian HipChat ranging from XSS, to Protocol Handling exploit and finally Remote Code Execution (RCE).",
            "urls": [
                "http://maustin.net/2015/11/12/hipchat_rce.html"
            ],
            "companies": [ "Atlassian" ],
            "hosts" : [],
            "domains" : [ "hipchat.com" ],
            "tags": [ "Atlassian", "HipChat", "XSS", "RCE", "ProtocolHandler" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": null,
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@mattaustin" ],
            "published_at": "2015-11-15",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }

        , {
            "slug" : "hacking-starbucks-for-unlimited-coffee",
            "title": "Hacking Starbucks for unlimited coffee",
            "description": "<NAME> exploited a race condition vulnerability on Starbucks gift card processing system and got more credits than he would be able to.",
            "urls": [
                "http://sakurity.com/blog/2015/05/21/starbucks.html"
            ],
            "companies": [ "Starbucks" ],
            "hosts" : [],
            "domains" : [ "starbucks.com" ],
            "tags": [ "Starbucks", "RaceCondition" ],
            "cve_ids": [],
            "osvdb_ids": [],
            "hacked_at": null,
            "reported_at": "2015-03-23",
            "fixed_at": null,
            "rewarded_at": null,
            "reward_amount": null,
            "reward_currency": null,
            "hacked_by": [ "@homakov" ],
            "published_at": "2015-05-21",
            "created_at": "2015-12-12",
            "updated_at": "2015-12-12",
            "created_by": "@andersonmvd",
            "updated_by": []
        }
    ]
}



{'fraction_non_alphanumeric': 0.1614459516151587, 'fraction_numerical': 0.04247657670255908, 'mean_word_length': 1.696549773755656, 'pattern_counts': {'":': 483, '<': 25, '<?xml version=': 0, '>': 25, 'https://': 19, 'lorem ipsum': 0, 'www.': 14, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 13, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '3155226', 'n_tokens_mistral': 9918, 'n_tokens_neox': 8846, 'n_words': 1699}