On Public Bug Bounty Program

💬 Subtitle

Hey everyone, I’m Erfan (Maverick). In this write-up, I’m going to show you how I discovered a vulnerability that I’ve named “Zero Click…

Hey everyone, Erfan here! In this write-up, I want to share a fun story about a cache poisoning vulnerability I found that led to a…

بِسْمِ اللَّـهِ الرَّحْمَٰنِ الرَّحِيمِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَىٰ الْمَبْعُوثِ رَحْمَةً لِلْعَالَمِينَ ﷺ

You don’t need fancy tools.  You just need good eyes and the right search queries.  Here’s how I easily find real targets for…

No credentials, no shell, no brute force, just a browser and a hunch.
This TryHackMe room was a clever twist on classic enumeration: find a…

Finding unauth dashboards using FOFA Search Engine

The finding is related to private program on bugcrowd so let us call it target.com 
I have previously (about 2 years ago )reported p1 to…

Introduction

Whether you’re a seasoned penetration tester or just getting into ethical hacking, using the right browser extensions for cybersecurity can…

🔐 Sometimes, it’s not the vulnerability itself… but how you chain it.

“403 Forbidden” — the dreaded message that tells you, “You’re not allowed here.” But what if that wasn’t the end of the road? What if it…

بسم الله الرحمن الرحيم

After my semester exams were over, I decided to select a target and hunt on it.

You ever get kicked out of somewhere but the door takes 10 minutes to actually lock?

Whether you’re diving into bug bounty hunting, preparing for web application penetration testing, or just curious about ethical hacking…

Recon tool for pentesters and bug bounty hunters

Hello everyone! I’m Omar Mohamed, also known as 0xnanashi.
In this post, I’ll talk about a Vulnerability I have found that allows me to…

Discover how FFUF boosts your cybersecurity arsenal. Essential fuzzing guide for pen testers and bug hunters.

Hello everyone! I’m Omar Mohamed, also known as 0xnanashi.
 In this post, I’ll walk you through a sneaky Race Condition vulnerability I…