<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="https://blog.nullcorelabs.com/sitemap.xsl"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
<url>
<loc>https://blog.nullcorelabs.com/</loc>
</url>
<url>
<loc>https://blog.nullcorelabs.com/deconstructing-the-escalation-path-from-a-benign-self-xss-to-admin-access.html</loc>
<lastmod>2025-08-01T00:08:12+05:30</lastmod>
<image:image>
<image:loc>https://blog.nullcorelabs.com/media/posts/3/unnamed-10-1.png</image:loc>
<image:title><![CDATA[]]></image:title>
</image:image>
</url>
<url>
<loc>https://blog.nullcorelabs.com/how-an-expired-trial-led-to-a-critical-email-verification-bypass.html</loc>
<lastmod>2025-07-19T23:56:47+05:30</lastmod>
<image:image>
<image:loc>https://blog.nullcorelabs.com/media/posts/2/1unnamed.png</image:loc>
<image:title><![CDATA[]]></image:title>
</image:image>
</url>
</urlset>