New Writeup❗️
Date: Mon, 14 Nov 2022 12:47:34 GMT
Title: XSS using a username
Link: https://medium.com/p/8a8ab1b79a77
Date: Mon, 14 Nov 2022 12:47:34 GMT
Title: XSS using a username
Link: https://medium.com/p/8a8ab1b79a77
Medium
XSS using a username
XSS triggered by exploiting a vulnerable input field of a signup page.
New Writeup❗️
Date: Sat, 24 Sep 2022 07:19:26 GMT
Title: Escalating SSTI to Reflected XSS using curly braces { }
Link: https://medium.com/p/825685bd93ec
Date: Sat, 24 Sep 2022 07:19:26 GMT
Title: Escalating SSTI to Reflected XSS using curly braces { }
Link: https://medium.com/p/825685bd93ec
Medium
SSTI to XSS using curly braces {}
SSTI -> Self XSS -> RXSS
New Writeup❗️
Date: Sun, 28 Aug 2022 15:03:59 GMT
Title: Unsubscribe any user’s e-mail notifications via IDOR
Link: https://medium.com/p/2c2e05b79dac
Date: Sun, 28 Aug 2022 15:03:59 GMT
Title: Unsubscribe any user’s e-mail notifications via IDOR
Link: https://medium.com/p/2c2e05b79dac
Medium
Unsubscribe any user’s e-mail notifications via IDOR
IDOR allows attacker to unsubscribe any user from the Websites email service.
New Writeup❗️
Date: Mon, 15 Aug 2022 00:31:08 GMT
Title: Business Logic Vulnerability via IDOR
Link: https://medium.com/p/6d510f1caea9
Date: Mon, 15 Aug 2022 00:31:08 GMT
Title: Business Logic Vulnerability via IDOR
Link: https://medium.com/p/6d510f1caea9
Medium
Business Logic Vulnerability via IDOR
Exploiting a Logic Vuln via IDOR. #Bugbounty
New Writeup❗️
Date: Sat, 13 Aug 2022 12:01:07 GMT
Title: Escalating Open Redirect to XSS
Link: https://medium.com/p/d2b9355e5f05
Date: Sat, 13 Aug 2022 12:01:07 GMT
Title: Escalating Open Redirect to XSS
Link: https://medium.com/p/d2b9355e5f05
Medium
Escalating Open Redirect to XSS
Hello everyone. Myself Sagar Sajeev.
New Writeup❗️
Date: Sat, 13 Aug 2022 05:32:56 GMT
Title: An Unusual Tale of Email Verification Bypass
Link: https://medium.com/p/dcf884d544eb
Date: Sat, 13 Aug 2022 05:32:56 GMT
Title: An Unusual Tale of Email Verification Bypass
Link: https://medium.com/p/dcf884d544eb
Medium
An Unusual Tale of Email Verification Bypass
Hey Guys. I’m Sagar Sajeev .
New Writeup❗️
Date: Fri, 12 Aug 2022 09:39:20 GMT
Title: File Upload Bypass to RCE == $$$$
Link: https://medium.com/p/76991b47ad8f
Date: Fri, 12 Aug 2022 09:39:20 GMT
Title: File Upload Bypass to RCE == $$$$
Link: https://medium.com/p/76991b47ad8f
Medium
File Upload Bypass to RCE == $$$$
Multiple ways to Bypass a File upload feature and chain it to an RCE.
New Writeup❗️
Date: Fri, 12 Aug 2022 05:40:21 GMT
Title: Browser Extensions which have landed $$$ !
Link: https://medium.com/p/28ea451d531c
Date: Fri, 12 Aug 2022 05:40:21 GMT
Title: Browser Extensions which have landed $$$ !
Link: https://medium.com/p/28ea451d531c
Medium
Browser Extensions which have landed $$$ !
What’s up everybody. My name is Sagar Sajeev.
New Writeup❗️
Date: Thu, 04 Aug 2022 21:35:52 GMT
Title: Server Side Template Injection-Something Distinct!
Link: https://medium.com/p/f0ac234e379
Date: Thu, 04 Aug 2022 21:35:52 GMT
Title: Server Side Template Injection-Something Distinct!
Link: https://medium.com/p/f0ac234e379
Medium
Server Side Template Injection-Something Distinct!
How’s it going guys! My name is Sagar Sajeev and this is my writeup about one of my recent SSTI (Server Side Template Injection) finding.
New Writeup❗️
Date: Fri, 29 Jul 2022 15:06:30 GMT
Title: Business Logic Vulnerabilities == $$$
Link: https://medium.com/p/b4db2af08aaf
Date: Fri, 29 Jul 2022 15:06:30 GMT
Title: Business Logic Vulnerabilities == $$$
Link: https://medium.com/p/b4db2af08aaf
Medium
Business Logic Vulnerabilities == $$$
According to OWASP , Business Logic Vulnerabilities are ways of using the legitimate processing flow of an application in a way that…
New Writeup❗️
Date: Mon, 02 May 2022 12:08:11 GMT
Title: NahamConCTF — Web Challenges
Link: https://medium.com/p/b54bf2d153f8
Date: Mon, 02 May 2022 12:08:11 GMT
Title: NahamConCTF — Web Challenges
Link: https://medium.com/p/b54bf2d153f8
Medium
NahamConCTF — Web Challenges
What’s going on hackers, this is Shellbr3ak back again with another CTF write up. Today I’ll be showing how I managed to solve 7 out of 8…
New Writeup❗️
Date: Thu, 31 Mar 2022 12:11:12 GMT
Title: XSS — WAF Bypass
Link: https://medium.com/p/128e8b4167fb
Date: Thu, 31 Mar 2022 12:11:12 GMT
Title: XSS — WAF Bypass
Link: https://medium.com/p/128e8b4167fb
Medium
XSS — WAF Bypass
What’s going on everybody, this is $hellbr3ak back again with another blog.
New Writeup❗️
Date: Mon, 31 Jan 2022 08:11:25 GMT
Title: First Time Hacking The Cloud
Link: https://medium.com/p/205751a4c61
Date: Mon, 31 Jan 2022 08:11:25 GMT
Title: First Time Hacking The Cloud
Link: https://medium.com/p/205751a4c61
Medium
First Time Hacking The Cloud
What’s going on hacker folks, this is shellbreak back again with another blog post, but this time, it will be about how I found my first…
New Writeup❗️
Date: Fri, 24 Dec 2021 03:35:25 GMT
Title: TryHackMe — Solar
Link: https://medium.com/p/3dd100c7ec3b
Date: Fri, 24 Dec 2021 03:35:25 GMT
Title: TryHackMe — Solar
Link: https://medium.com/p/3dd100c7ec3b
Medium
TryHackMe — Solar
What’s going on h4x0rs this is shellbr3ak, and today we’re going to be doing something a little bit different then regular CTFs.
New Writeup❗️
Date: Sun, 10 Oct 2021 06:17:26 GMT
Title: DigitalOverDose — CTF
Link: https://medium.com/p/c5c252c0c6e6
Date: Sun, 10 Oct 2021 06:17:26 GMT
Title: DigitalOverDose — CTF
Link: https://medium.com/p/c5c252c0c6e6
Medium
DigitalOverDose — CTF
Hello y’all, this is shellbreak again with another CTF. As I’m working as a web application penetration tester, I focus only on web…
New Writeup❗️
Date: Mon, 20 Sep 2021 07:15:25 GMT
Title: HacktivityconCTF 2021
Link: https://medium.com/p/dd2b03302825
Date: Mon, 20 Sep 2021 07:15:25 GMT
Title: HacktivityconCTF 2021
Link: https://medium.com/p/dd2b03302825
Medium
HacktivityconCTF 2021
Hello all, this is shellbreak, and today I’m going to showcase how I solved some web challenges in the hacktivitycon CTF 2021, so without…
New Writeup❗️
Date: Wed, 26 May 2021 09:44:53 GMT
Title: TryHackMe — Kenobi
Link: https://medium.com/p/bdec4cf6f581
Date: Wed, 26 May 2021 09:44:53 GMT
Title: TryHackMe — Kenobi
Link: https://medium.com/p/bdec4cf6f581
Medium
TryHackMe — Kenobi
TryHackMe — Kenobi What’s going on fellas, this is shellbreak back again with another write up about a room called knobi from TryHackMe, which is an easy room that involves a vulnerable FTP …
New Writeup❗️
Date: Tue, 25 May 2021 02:12:11 GMT
Title: TryHackMe — Vulnversity
Link: https://medium.com/p/a4784c505fe3
Date: Tue, 25 May 2021 02:12:11 GMT
Title: TryHackMe — Vulnversity
Link: https://medium.com/p/a4784c505fe3
Medium
TryHackMe — Vulnversity
TryHackMe — Vulnversity Hello guys, what’s going on, this is shellbreak, and today we’re gonna be doing Vulnversity from TryHackMe which is a pretty simple and straightforward machine that …
New Writeup❗️
Date: Thu, 20 May 2021 00:31:24 GMT
Title: TryHackMe — Blue
Link: https://medium.com/p/a73c11c3577f
Date: Thu, 20 May 2021 00:31:24 GMT
Title: TryHackMe — Blue
Link: https://medium.com/p/a73c11c3577f
Medium
TryHackMe — Blue
Hello guys, what’s going on , this is shellbreak, and today I’ll be doing the Blue room from TryHackMe, which is a pretty easy and fun…
New Writeup❗️
Date: Wed, 19 May 2021 23:45:08 GMT
Title: How I found my first Cross-Site Scripting Vulnerability
Link: https://medium.com/p/fd9ebed2b2a4
Date: Wed, 19 May 2021 23:45:08 GMT
Title: How I found my first Cross-Site Scripting Vulnerability
Link: https://medium.com/p/fd9ebed2b2a4
Medium
How I found my first Cross-Site Scripting Vulnerability
Hello all this is shellbreak, back again with another story of a bug I found apart from CTF challenges.
New Writeup❗️
Date: Sat, 30 Apr 2022 04:46:09 GMT
Title: ATO without any interaction [aws cognito misconfiguration]
Link: https://medium.com/p/d690f4b3da11
Date: Sat, 30 Apr 2022 04:46:09 GMT
Title: ATO without any interaction [aws cognito misconfiguration]
Link: https://medium.com/p/d690f4b3da11
Medium
Account takeover without any interaction [aws cognito misconfiguration]
Hello friends,