New Writeup❗️
Date: Sun, 30 Jan 2022 07:25:52 GMT
Title: How to get started hacking django applications
Link: https://medium.com/p/f407564df9c7
Date: Sun, 30 Jan 2022 07:25:52 GMT
Title: How to get started hacking django applications
Link: https://medium.com/p/f407564df9c7
Medium
How To Get Started Hacking Django Based Applications
Django is a python based web framework. In this writeup, i will teach you how to analyze django based applications . For this writeup, i…
New Writeup❗️
Date: Sun, 09 Jan 2022 07:52:25 GMT
Title: 2FA bypass by reading the documentation
Link: https://medium.com/p/3260a372d8a8
Date: Sun, 09 Jan 2022 07:52:25 GMT
Title: 2FA bypass by reading the documentation
Link: https://medium.com/p/3260a372d8a8
Medium
2FA bypass by reading the documentation
This is a fairly simple and short writeup, but i think is worth sharing, so lets get started.
New Writeup❗️
Date: Fri, 20 Nov 2020 14:43:17 GMT
Title: Turning Blind Error Based SQL Injection Into An Exploitable Boolean One
Link: https://medium.com/p/85d6be3ca23b
Date: Fri, 20 Nov 2020 14:43:17 GMT
Title: Turning Blind Error Based SQL Injection Into An Exploitable Boolean One
Link: https://medium.com/p/85d6be3ca23b
Medium
Turning Blind Error Based SQL Injection Into An Exploitable Boolean One
While I was recently hunting on a promising host target, from my well configured (only checking SQLi) active scan results, I found out a…
🗿1
New Writeup❗️
Date: Sun, 19 Apr 2020 14:24:17 GMT
Title: Google Maps API (Not the key) Bugs That I Found Over the Years
Link: https://medium.com/p/781840fc82aa
Date: Sun, 19 Apr 2020 14:24:17 GMT
Title: Google Maps API (Not the key) Bugs That I Found Over the Years
Link: https://medium.com/p/781840fc82aa
Medium
Google Maps API (Not the key) Bugs That I Found Over the Years
After publishing my blog post Unauthorized Google Maps API Key Usage Cases, and Why You Need to Care and scanner script for it, I got…
New Writeup❗️
Date: Sun, 15 Mar 2020 13:40:59 GMT
Title: Using Vulnerability Analytics Feature Like a Boss
Link: https://medium.com/p/655fc1f1543b
Date: Sun, 15 Mar 2020 13:40:59 GMT
Title: Using Vulnerability Analytics Feature Like a Boss
Link: https://medium.com/p/655fc1f1543b
Medium
Using Vulnerability Analytics Feature Like a Boss
For the %90 of my working time, I am hunting bugs on the Synack for 2 reasons:
New Writeup❗️
Date: Wed, 26 Feb 2020 12:37:43 GMT
Title: Write-up: AWS Document Signing Security Control Bypass
Link: https://medium.com/p/2b13a9c22a4d
Date: Wed, 26 Feb 2020 12:37:43 GMT
Title: Write-up: AWS Document Signing Security Control Bypass
Link: https://medium.com/p/2b13a9c22a4d
Medium
Write-up: AWS Document Signing Security Control Bypass
While I prefer more to write/talk about far-going topics instead of just one vulnerability write-up, I decided to make an exception for…
New Writeup❗️
Date: Tue, 11 Feb 2020 18:13:15 GMT
Title: Weird Vulnerabilities Happening on Load Balancers, Shallow Copies and Caches
Link: https://medium.com/p/9194d4f72322
Date: Tue, 11 Feb 2020 18:13:15 GMT
Title: Weird Vulnerabilities Happening on Load Balancers, Shallow Copies and Caches
Link: https://medium.com/p/9194d4f72322
Medium
Weird Vulnerabilities Happening on Load Balancers, Shallow Copies and Caches
When looking for security vulnerabilities on a web application - either for bug hunting or a penetration test project -, I always check 2…
New Writeup❗️
Date: Wed, 05 Feb 2020 15:40:59 GMT
Title: Simple Remote Code Execution Vulnerability Examples for Beginners
Link: https://medium.com/p/985867878311
Date: Wed, 05 Feb 2020 15:40:59 GMT
Title: Simple Remote Code Execution Vulnerability Examples for Beginners
Link: https://medium.com/p/985867878311
Medium
Simple Remote Code Execution Vulnerability Examples for Beginners
Especially when I talk with newbie security researchers/bug bounty hunters, they always make me feel as not thinking theirselves capable…
New Writeup❗️
Date: Wed, 22 Jan 2020 14:19:49 GMT
Title: A Less Known Attack Vector, Second Order IDOR Attacks
Link: https://medium.com/p/14468009781a
Date: Wed, 22 Jan 2020 14:19:49 GMT
Title: A Less Known Attack Vector, Second Order IDOR Attacks
Link: https://medium.com/p/14468009781a
Medium
A Less Known Attack Vector, Second Order IDOR Attacks
Most of you probably familiar within the vulnerability types “IDOR (Insecure Object Direct Reference)” and second order vulnerabilities…
New Writeup❗️
Date: Wed, 09 Mar 2022 06:40:34 GMT
Title: Automate your recon With Censys | HOW Pro hacker use Censys
Link: https://medium.com/p/871aeabd517e
Date: Wed, 09 Mar 2022 06:40:34 GMT
Title: Automate your recon With Censys | HOW Pro hacker use Censys
Link: https://medium.com/p/871aeabd517e
Medium
Automate your recon With Censys | HOW Pro hacker use Censys
Greeting Everyone ! After Long break I decide to create a blog on recon using censys this blog is bit interesting we will explore…
New Writeup❗️
Date: Mon, 04 Oct 2021 11:19:59 GMT
Title: Android Insecure file storage
Link: https://medium.com/p/e770eed9a3fa
Date: Mon, 04 Oct 2021 11:19:59 GMT
Title: Android Insecure file storage
Link: https://medium.com/p/e770eed9a3fa
Medium
Android Insecure file storage
Hello everyone Greeting all,
New Writeup❗️
Date: Thu, 06 May 2021 15:08:18 GMT
Title: How i get p1 to p4 Using Google Dork Some Google Dork Which Give You All Secrets
Link: https://medium.com/p/de9df507a3ca
Date: Thu, 06 May 2021 15:08:18 GMT
Title: How i get p1 to p4 Using Google Dork Some Google Dork Which Give You All Secrets
Link: https://medium.com/p/de9df507a3ca
Medium
How i get p1 to p4 Using Google Dork Some Google Dork Which Give You All Secrets
Greeting Everyone ! Hope Everything Is Going Well Today in this Blog we will Explore A hidden Way to find Critical Information . Here We…
New Writeup❗️
Date: Fri, 26 Feb 2021 17:09:09 GMT
Title: Story About Stop 10000+ users to get Their job notification
Link: https://medium.com/p/6a8aca542c85
Date: Fri, 26 Feb 2021 17:09:09 GMT
Title: Story About Stop 10000+ users to get Their job notification
Link: https://medium.com/p/6a8aca542c85
Medium
Story About Stop 10000+ users to get Their job notification
Greeting Everyone ! Hope Everything Is going good ! This Story Is about to How I able to Stop all Users of example.com to get their…
New Writeup❗️
Date: Tue, 27 Oct 2020 15:23:28 GMT
Title: Make Your Recon Better Recon using automation If Your Beginner !
Link: https://medium.com/p/a4f762205412
Date: Tue, 27 Oct 2020 15:23:28 GMT
Title: Make Your Recon Better Recon using automation If Your Beginner !
Link: https://medium.com/p/a4f762205412
Medium
Make Your Recon Better Recon using automation If Your Beginner !
Greeting Everyone ! Hope Everything Is Going Good ! Today we Are Going to see How Easily You Can Perform Recon Against Your Targeted…
New Writeup❗️
Date: Sat, 15 Aug 2020 19:22:52 GMT
Title: How How i am able to Steal email verification token By Host header Poisoning
Link: https://medium.com/p/875bec0d477d
Date: Sat, 15 Aug 2020 19:22:52 GMT
Title: How How i am able to Steal email verification token By Host header Poisoning
Link: https://medium.com/p/875bec0d477d
Medium
How How i am able to Steal email verification token By Host header Poisoning
Greeting Everyone ! I am pallab Twitter (@PJBorah2) Today I going to share my first Accepted p2 Bug I found on Bugcrowd Private program…
New Writeup❗️
Date: Sat, 23 May 2020 10:49:34 GMT
Title: Story About OTP Bypass To Stored XSS
Link: https://medium.com/p/81bfd735c709
Date: Sat, 23 May 2020 10:49:34 GMT
Title: Story About OTP Bypass To Stored XSS
Link: https://medium.com/p/81bfd735c709
Medium
Story About OTP Bypass To Stored XSS
Hello Hunters!
New Writeup❗️
Date: Fri, 22 May 2020 13:38:36 GMT
Title: XSS Tricky Exploitation
Link: https://medium.com/p/a2ef6dbb31b6
Date: Fri, 22 May 2020 13:38:36 GMT
Title: XSS Tricky Exploitation
Link: https://medium.com/p/a2ef6dbb31b6
Medium
XSS Tricky Exploitation
Hello Hunters !
New Writeup❗️
Date: Tue, 05 Jan 2021 20:06:09 GMT
Title: Privilege Escalation from being a normal user to admin
Link: https://medium.com/p/3f86896f1c93
Date: Tue, 05 Jan 2021 20:06:09 GMT
Title: Privilege Escalation from being a normal user to admin
Link: https://medium.com/p/3f86896f1c93
Medium
Privilege Escalation from being a normal user to admin
Privilege Escalation: Privilege escalation happens when a malicious user exploits a bug, design flaw, or configuration error in an…
New Writeup❗️
Date: Tue, 10 Nov 2020 15:01:14 GMT
Title: Easy win with Broken Link Hijacking
Link: https://medium.com/p/1084007966f3
Date: Tue, 10 Nov 2020 15:01:14 GMT
Title: Easy win with Broken Link Hijacking
Link: https://medium.com/p/1084007966f3
Medium
Easy win with Broken Link Hijacking
What is Broken Link Hijacking?
New Writeup❗️
Date: Tue, 27 Oct 2020 14:36:19 GMT
Title: Automating xss identification with Dalfox & Paramspider
Link: https://medium.com/p/e14283bb7916
Date: Tue, 27 Oct 2020 14:36:19 GMT
Title: Automating xss identification with Dalfox & Paramspider
Link: https://medium.com/p/e14283bb7916
Medium
Automating xss identification with Dalfox & Paramspider
Cross Site Scripting allows an attacker to inject malicious javascript code in the web application through some parameters and can be…
New Writeup❗️
Date: Fri, 09 Oct 2020 11:53:26 GMT
Title: CVE-2018–5230 | JIRA Cross Site Scripting
Link: https://medium.com/p/59ec96b3d75f
Date: Fri, 09 Oct 2020 11:53:26 GMT
Title: CVE-2018–5230 | JIRA Cross Site Scripting
Link: https://medium.com/p/59ec96b3d75f
Medium
CVE-2018–5230 | JIRA Cross Site Scripting
CVE Description