New Writeup❗️
Date: Sun, 18 Jul 2021 22:56:10 GMT
Title: Incomplete List of ways I would theoretically bully and confuse Julius Caesar
Link: https://medium.com/p/b342875d7153
Date: Sun, 18 Jul 2021 22:56:10 GMT
Title: Incomplete List of ways I would theoretically bully and confuse Julius Caesar
Link: https://medium.com/p/b342875d7153
Medium
Incomplete List of ways I would theoretically bully and confuse Julius Caesar
Riding a unicycle or bicycle up and down
New Writeup❗️
Date: Sat, 12 Jun 2021 03:40:29 GMT
Title: Dawn is so beautiful and so perfect.
Link: https://medium.com/p/ddccf843ac1c
Date: Sat, 12 Jun 2021 03:40:29 GMT
Title: Dawn is so beautiful and so perfect.
Link: https://medium.com/p/ddccf843ac1c
Medium
Dawn is so beautiful and so perfect.
The birds seem like they know this secret, as they drift through a world that’s theirs for now.
New Writeup❗️
Date: Tue, 06 Apr 2021 22:23:39 GMT
Title: Thomas’ Pizza Recipe
Link: https://medium.com/p/d5ceb84673c5
Date: Tue, 06 Apr 2021 22:23:39 GMT
Title: Thomas’ Pizza Recipe
Link: https://medium.com/p/d5ceb84673c5
Medium
Thomas’ Pizza Recipe
This is an extended version of Brian’s Pizza Recipe, which, because I’m a dumbass I fucked up a few times, with some amendments also from…
New Writeup❗️
Date: Wed, 31 Mar 2021 16:58:16 GMT
Title: Where The Dragons Are
Link: https://medium.com/p/63a6cfcb4311
Date: Wed, 31 Mar 2021 16:58:16 GMT
Title: Where The Dragons Are
Link: https://medium.com/p/63a6cfcb4311
Medium
Where The Dragons Are
For a discipline operating on the forefront of today’s technology, security for both better and worse has its roots in an almost universal…
New Writeup❗️
Date: Sun, 28 Mar 2021 22:11:42 GMT
Title: The Curse of ‘Fit for Purpose’
Link: https://medium.com/p/fef34357732e
Date: Sun, 28 Mar 2021 22:11:42 GMT
Title: The Curse of ‘Fit for Purpose’
Link: https://medium.com/p/fef34357732e
Medium
The Curse of ‘Fit for Purpose’
A grey kitchen lies before you. Therein stands a person attempting to peel an apple. Painstakingly, they cut it slowly bit-by-bit with a…
New Writeup❗️
Date: Mon, 19 Oct 2020 08:08:35 GMT
Title: Typescript Union Merging
Link: https://medium.com/p/b2ea332f08f1
Date: Mon, 19 Oct 2020 08:08:35 GMT
Title: Typescript Union Merging
Link: https://medium.com/p/b2ea332f08f1
Medium
Typescript Union Merging
Typescript has a concept called ‘Declaration Merging’. The idea is that some kinds of declarations can be specified multiple times, and…
New Writeup❗️
Date: Fri, 01 May 2020 22:20:16 GMT
Title: Why We Don’t Have UIs Like the ones in Neon Genesis
Link: https://medium.com/p/9b6631dc3714
Date: Fri, 01 May 2020 22:20:16 GMT
Title: Why We Don’t Have UIs Like the ones in Neon Genesis
Link: https://medium.com/p/9b6631dc3714
Medium
Why We Don’t Have UIs Like the ones in Neon Genesis
Every now and then, the incredible aesthetic quality of the UIs in Neon Genesis comes up. And for good reason. They’re incredibly cool.
New Writeup❗️
Date: Fri, 02 Aug 2019 15:54:36 GMT
Title: If CORS is just a header, why don’t attackers just ignore it?
Link: https://medium.com/p/63e57c323cef
Date: Fri, 02 Aug 2019 15:54:36 GMT
Title: If CORS is just a header, why don’t attackers just ignore it?
Link: https://medium.com/p/63e57c323cef
Medium
If CORS is just a header, why don’t attackers just ignore it?
Here’s a question form a co-worker I get quite often:
New Writeup❗️
Date: Sat, 15 Dec 2018 23:40:23 GMT
Title: Übersicht Remote Code Execution, Spotify takeover
Link: https://medium.com/p/a5f6fd6809d0
Date: Sat, 15 Dec 2018 23:40:23 GMT
Title: Übersicht Remote Code Execution, Spotify takeover
Link: https://medium.com/p/a5f6fd6809d0
Medium
Übersicht Remote Code Execution, Spotify takeover
some words on the security implications of locally hosted web services
New Writeup❗️
Date: Thu, 04 Aug 2022 10:30:33 GMT
Title: Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]
Link: https://medium.com/p/6a69e04e3beb
Date: Thu, 04 Aug 2022 10:30:33 GMT
Title: Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]
Link: https://medium.com/p/6a69e04e3beb
Medium
Disavow Flow is Not Properly Enforced in Instagram [1000 USD Bounty]
When a malicious actor gets access or changes is done to user account. A disavow email will be sent to the original email of the user. That…
New Writeup❗️
Date: Sat, 30 Apr 2022 12:22:43 GMT
Title: Page Admin Disclosure when Posting a Reel
Link: https://medium.com/p/1bfac9bd7f71
Date: Sat, 30 Apr 2022 12:22:43 GMT
Title: Page Admin Disclosure when Posting a Reel
Link: https://medium.com/p/1bfac9bd7f71
Medium
Page Admin Disclosure when Posting a Reel
Hello , I’m Syd from the Philippines. Today I would like to share one of my findings in Meta Bug Bounty Program. The bug that I found is…
New Writeup❗️
Date: Tue, 05 Apr 2022 05:50:14 GMT
Title: Spoof as another Facebook user to report an impostor account
Link: https://medium.com/p/f2dd6683744d
Date: Tue, 05 Apr 2022 05:50:14 GMT
Title: Spoof as another Facebook user to report an impostor account
Link: https://medium.com/p/f2dd6683744d
Medium
Spoof as another Facebook user to report an impostor account
When I was helping someone take down a poser/impostor account. I tried to check the request body on what’s going on behind the scene. The…
New Writeup❗️
Date: Sat, 15 Jan 2022 07:12:38 GMT
Title: This is how I can Turn Off Your Post Notification
Link: https://medium.com/p/4644d7029a96
Date: Sat, 15 Jan 2022 07:12:38 GMT
Title: This is how I can Turn Off Your Post Notification
Link: https://medium.com/p/4644d7029a96
Medium
This is how I can Turn Off Your Post Notification
Description/Impact: In m.facebook user can turn on post notification on a post. By turning it on user will be notified if someone reacted…
New Writeup❗️
Date: Mon, 10 Jan 2022 10:21:17 GMT
Title: Prevent User Confirm Their Identity To Unlock 2FA Locked Account
Link: https://medium.com/p/2000ed8b1988
Date: Mon, 10 Jan 2022 10:21:17 GMT
Title: Prevent User Confirm Their Identity To Unlock 2FA Locked Account
Link: https://medium.com/p/2000ed8b1988
Medium
Prevent User Confirm Their Identity To Unlock 2FA Locked Account
Description: Two Factor Authentication (2FA) is a security feature that helps Facebook users protect their account in addition to their…
New Writeup❗️
Date: Wed, 28 Dec 2022 03:17:55 GMT
Title: The Joy of Building a Community through Patreon: My Journey with Cyberlix
Link: https://medium.com/p/582ba479e99
Date: Wed, 28 Dec 2022 03:17:55 GMT
Title: The Joy of Building a Community through Patreon: My Journey with Cyberlix
Link: https://medium.com/p/582ba479e99
Medium
The Joy of Building a Community through Patreon: My Journey with Cyberlix
As a cybersecurity professional, I have always been interested in finding ways to improve the security of organizations and individuals…
New Writeup❗️
Date: Sat, 05 Mar 2022 02:03:53 GMT
Title: How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin
Link: https://medium.com/p/3174434b382c
Date: Sat, 05 Mar 2022 02:03:53 GMT
Title: How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin
Link: https://medium.com/p/3174434b382c
Medium
How I Hacked A Crypto Company And Could Steal 1 Million Dollars Worth of Bitcoin
Breaking path normalisation has been my biggest interest in the past couple of years. Let me explain exactly why I have chosen to invest…
New Writeup❗️
Date: Fri, 07 Jan 2022 05:06:07 GMT
Title: Tips For Developing A Hackers Mindset
Link: https://medium.com/p/c4f2788ed751
Date: Fri, 07 Jan 2022 05:06:07 GMT
Title: Tips For Developing A Hackers Mindset
Link: https://medium.com/p/c4f2788ed751
Medium
Tips For Developing A Hacker Mindset
Hey hackers, I hope you are all doing well. This write-up will be about the do’s and don’ts in bug bounty hunting and the pros & cons.
New Writeup❗️
Date: Wed, 05 Jan 2022 07:27:50 GMT
Title: Breaking Parser Logic Gain Access To NGINX Plus API — Read/Write Upstreams.
Link: https://medium.com/p/1cb062aa44ca
Date: Wed, 05 Jan 2022 07:27:50 GMT
Title: Breaking Parser Logic Gain Access To NGINX Plus API — Read/Write Upstreams.
Link: https://medium.com/p/1cb062aa44ca
Medium
Breaking Parser Logic: Gain Access To NGINX Plus API — Read/Write Upstreams.
Hi hackers, in this talk I will explain how I could direct traffic from an internal server to my own by breaking the way their reverse…
New Writeup❗️
Date: Wed, 20 Apr 2022 22:40:23 GMT
Title: What VPS to choose?
Link: https://medium.com/p/1631f059b0a
Date: Wed, 20 Apr 2022 22:40:23 GMT
Title: What VPS to choose?
Link: https://medium.com/p/1631f059b0a
Medium
What VPS to choose?
There are tons of cloud providers that offer different types of servers with a lot of different options. I will talk about the ones I…
New Writeup❗️
Date: Sat, 27 Feb 2021 22:45:00 GMT
Title: SSRF to fetch AWS credentials with full access to various services
Link: https://medium.com/p/18cd08194e91
Date: Sat, 27 Feb 2021 22:45:00 GMT
Title: SSRF to fetch AWS credentials with full access to various services
Link: https://medium.com/p/18cd08194e91
Medium
SSRF to fetch AWS credentials with full access to multiple services
This is a post about how I found a simple yet really critical vulnerability in a bug bounty program. It was the most critical bug I have…