New Writeup❗️
Date: Wed, 05 Sep 2018 09:11:41 GMT
Title: Client ==> Firewall Access
Link: https://medium.com/p/4dff7043875e
Date: Wed, 05 Sep 2018 09:11:41 GMT
Title: Client ==> Firewall Access
Link: https://medium.com/p/4dff7043875e
Medium
Client ==> Firewall Access
Recently I ordered two juicer machines from Daraz. I got delivery within 12 days, when I opened my package there were two juicer machines…
New Writeup❗️
Date: Sun, 14 Aug 2022 21:53:17 GMT
Title: Google unrestricted File Upload + XSS and HTML Injection
Link: https://medium.com/p/f6ba3c2cddbf
Date: Sun, 14 Aug 2022 21:53:17 GMT
Title: Google unrestricted File Upload + XSS and HTML Injection
Link: https://medium.com/p/f6ba3c2cddbf
Medium
Google unrestricted File Upload + XSS and HTML Injection
Hi all. I hope you are all good. I am happy to publish another Write-up. This time I was able to identify multiple Vulnerabilities in a…
New Writeup❗️
Date: Sat, 13 Aug 2022 21:51:17 GMT
Title: UN United Nations Host Header Injection leads to any Full Account Takeover (ATO)
Link: https://medium.com/p/795bc9ebc670
Date: Sat, 13 Aug 2022 21:51:17 GMT
Title: UN United Nations Host Header Injection leads to any Full Account Takeover (ATO)
Link: https://medium.com/p/795bc9ebc670
Medium
UN United Nations Host Header Injection leads to any Full Account Takeover (ATO)
Hey all. I hope you are all safe and good. I am happy to publish another new Writeup about an Host Header Injection Vulnerability found in…
New Writeup❗️
Date: Fri, 15 Jul 2022 21:50:43 GMT
Title: UN United Nations weak Reset Password Policy allows anyone to reset the Password to an empty…
Link: https://medium.com/p/5b0ceed4e6c
Date: Fri, 15 Jul 2022 21:50:43 GMT
Title: UN United Nations weak Reset Password Policy allows anyone to reset the Password to an empty…
Link: https://medium.com/p/5b0ceed4e6c
Medium
UN United Nations weak Reset Password Policy allows anyone to reset the Password to an empty Password
HI all,
New Writeup❗️
Date: Fri, 08 Jul 2022 22:00:15 GMT
Title: stored XSS and stored HTML Injection in United Nations Website
Link: https://medium.com/p/db87d445e41
Date: Fri, 08 Jul 2022 22:00:15 GMT
Title: stored XSS and stored HTML Injection in United Nations Website
Link: https://medium.com/p/db87d445e41
Medium
stored XSS and stored HTML Injection in United Nations Website
Hello all i am very happy to publish another Writeup after a long time of missing.
New Writeup❗️
Date: Thu, 19 May 2022 21:28:59 GMT
Title: Stored XSS and HTML Injection in United Nations Web Application
Link: https://medium.com/p/83b6c55af359
Date: Thu, 19 May 2022 21:28:59 GMT
Title: Stored XSS and HTML Injection in United Nations Web Application
Link: https://medium.com/p/83b6c55af359
Medium
Stored XSS and HTML Injection in United Nations Web Application
Hello guys. I am happy to be back after having some stress and no enough time for Bug Bounty.
New Writeup❗️
Date: Tue, 12 Apr 2022 08:52:12 GMT
Title: IDOR (Insecure Direct Object Reference) leads to listing all valid Users and edit their Profiles
Link: https://medium.com/p/2d7bcba78890
Date: Tue, 12 Apr 2022 08:52:12 GMT
Title: IDOR (Insecure Direct Object Reference) leads to listing all valid Users and edit their Profiles
Link: https://medium.com/p/2d7bcba78890
Medium
IDOR (Insecure Direct Object Reference) leads to listing all valid Users and edit their Profiles
Hello friends :)
I am happy to write a blog again after finding an Insecure Direct Object Reference Vulnerability in Drexel University…
I am happy to write a blog again after finding an Insecure Direct Object Reference Vulnerability in Drexel University…
New Writeup❗️
Date: Sun, 10 Apr 2022 21:01:03 GMT
Title: XSS | HTML Injection and File Upload Bypass in HUAWEI Subdomain
Link: https://medium.com/p/64966ba4f4ac
Date: Sun, 10 Apr 2022 21:01:03 GMT
Title: XSS | HTML Injection and File Upload Bypass in HUAWEI Subdomain
Link: https://medium.com/p/64966ba4f4ac
Medium
XSS | HTML Injection and File Upload Bypass in HUAWEI Subdomain
Hi all :) I hope you are all good :)
New Writeup❗️
Date: Sat, 02 Oct 2021 20:45:16 GMT
Title: Admin Username Disclosure
Link: https://medium.com/p/9c03dd30e8dd
Date: Sat, 02 Oct 2021 20:45:16 GMT
Title: Admin Username Disclosure
Link: https://medium.com/p/9c03dd30e8dd
Medium
Admin Username Disclosure
My youtube Channel: https://www.youtube.com/watch?v=IPmpQa1iUEA
Please subscribe and support me :)
Please subscribe and support me :)
New Writeup❗️
Date: Sat, 25 Sep 2021 22:13:37 GMT
Title: Stored and Reflected XSS and reported
Link: https://medium.com/p/e69ac5750fb1
Date: Sat, 25 Sep 2021 22:13:37 GMT
Title: Stored and Reflected XSS and reported
Link: https://medium.com/p/e69ac5750fb1
Medium
Stored and Reflected XSS and reported
My youtube Channel: https://www.youtube.com/watch?v=IPmpQa1iUEA
Please subscribe and support me :)
Please subscribe and support me :)
New Writeup❗️
Date: Thu, 23 Sep 2021 05:21:32 GMT
Title: [Bug Bounty Writeups] Exploiting Cross Site Scripting XSS
Link: https://medium.com/p/5dde1473af3f
Date: Thu, 23 Sep 2021 05:21:32 GMT
Title: [Bug Bounty Writeups] Exploiting Cross Site Scripting XSS
Link: https://medium.com/p/5dde1473af3f
Medium
[Bug Bounty Writeups] Exploiting Cross Site Scripting XSS
This Writeup shows how important it is to test every single input field on any Website even if it is just a form. So let us start :)
New Writeup❗️
Date: Fri, 17 Aug 2018 14:45:30 GMT
Title: YAHOO IDOR -elimination of any comment
Link: https://medium.com/p/e898f4f955f1
Date: Fri, 17 Aug 2018 14:45:30 GMT
Title: YAHOO IDOR -elimination of any comment
Link: https://medium.com/p/e898f4f955f1
Medium
YAHOO IDOR -elimination of any comment
Hello everyone, my name is Bernardo and I’m from Chile, this time I bring you a bug (IDOR) that I found in Yahoo that allows you to remove…
New Writeup❗️
Date: Wed, 13 Jun 2018 16:43:44 GMT
Title: Vulnerability Netflix (cross-site-scripting) XSS
Link: https://medium.com/p/d44010142e2c
Date: Wed, 13 Jun 2018 16:43:44 GMT
Title: Vulnerability Netflix (cross-site-scripting) XSS
Link: https://medium.com/p/d44010142e2c
Medium
Vulnerability Netflix (cross-site-scripting) XSS
Today I wanted to share with you my first vulnerability found in the bugbounty programs. It's the first time I do a POST about a bug. I…
New Writeup❗️
Date: Thu, 16 Feb 2023 07:39:11 GMT
Title: Misusing Azure to get pre-login system shell on your managed device
Link: https://medium.com/p/3f213b976683
Date: Thu, 16 Feb 2023 07:39:11 GMT
Title: Misusing Azure to get pre-login system shell on your managed device
Link: https://medium.com/p/3f213b976683
Medium
Misusing Azure to get pre-login system shell on your managed device
and how you can disable the Bitlocker Recovery key visibility in Azure.
New Writeup❗️
Date: Tue, 22 Nov 2022 09:06:00 GMT
Title: Bug Bounty Tips and Getting Persistence With Electron Applications
Link: https://medium.com/p/c538d4dda446
Date: Tue, 22 Nov 2022 09:06:00 GMT
Title: Bug Bounty Tips and Getting Persistence With Electron Applications
Link: https://medium.com/p/c538d4dda446
Medium
Bug Bounty Tips and Getting Persistence With Electron Applications
By repacking asar files, electron applications, and other bug bounty tips. Starring Signal, Discord, Nordpass, and more
New Writeup❗️
Date: Wed, 16 Nov 2022 09:27:11 GMT
Title: DLL Hijacking Persistence Using Discord
Link: https://medium.com/p/80691a63c559
Date: Wed, 16 Nov 2022 09:27:11 GMT
Title: DLL Hijacking Persistence Using Discord
Link: https://medium.com/p/80691a63c559
Medium
DLL Hijacking Persistence Using Discord
How old hacking techniques like DLL Hijacking still work in the present day and how you can find them yourself.
New Writeup❗️
Date: Sat, 12 Nov 2022 13:28:47 GMT
Title: Getting Stealthy Persistence Using Visual Studio Code
Link: https://medium.com/p/67e731bea34a
Date: Sat, 12 Nov 2022 13:28:47 GMT
Title: Getting Stealthy Persistence Using Visual Studio Code
Link: https://medium.com/p/67e731bea34a
Medium
Getting Stealthy Persistence Using Visual Studio Code
By misusing the settings file
New Writeup❗️
Date: Fri, 11 Nov 2022 07:46:26 GMT
Title: Getting persistence using Git bash
Link: https://medium.com/p/e82c999652f
Date: Fri, 11 Nov 2022 07:46:26 GMT
Title: Getting persistence using Git bash
Link: https://medium.com/p/e82c999652f
Medium
Getting persistence using Git bash
Gething persistence with the windows terminal made me eager to search for more possible persistence methods. Being a full time software…
New Writeup❗️
Date: Wed, 09 Nov 2022 06:50:36 GMT
Title: Stealthy Persistence While Using Windows Terminal.
Link: https://medium.com/p/ff6f4927563a
Date: Wed, 09 Nov 2022 06:50:36 GMT
Title: Stealthy Persistence While Using Windows Terminal.
Link: https://medium.com/p/ff6f4927563a
Medium
Stealthy Persistence While Using Windows Terminal.
By misusing the setting file
New Writeup❗️
Date: Thu, 03 Nov 2022 06:16:49 GMT
Title: How I could have been the administrator for all Dutch companies and create invoices and still can…
Link: https://medium.com/p/de181160cec5
Date: Thu, 03 Nov 2022 06:16:49 GMT
Title: How I could have been the administrator for all Dutch companies and create invoices and still can…
Link: https://medium.com/p/de181160cec5
Medium
How I could have been the administrator for all Dutch companies and create invoices. And still can be…
This is how I got administrator rights for all Dutch companies with the ability to write invoices on a Dutch government agency application.