New Writeup❗️
Date: Wed, 04 Nov 2020 20:19:32 GMT
Title: How i got my seconde Bounty in short time using phone
Link: https://medium.com/p/7f8917ab42c9
Date: Wed, 04 Nov 2020 20:19:32 GMT
Title: How i got my seconde Bounty in short time using phone
Link: https://medium.com/p/7f8917ab42c9
Medium
How i got my seconde Bounty in short time using phone
Hi again, it was a normal die, i go and smoke a cigarette like every morning,i take a cup of coffee then visite twitter and type…
New Writeup❗️
Date: Mon, 26 Oct 2020 13:32:37 GMT
Title: How i got 250$ in 5 munites using my phone
Link: https://medium.com/p/91c9b2258282
Date: Mon, 26 Oct 2020 13:32:37 GMT
Title: How i got 250$ in 5 munites using my phone
Link: https://medium.com/p/91c9b2258282
Medium
How i got 250$ in 5 munites using my phone
Hi , this is my first write up with you in medium and i hope you will like it.
New Writeup❗️
Date: Thu, 05 Aug 2021 20:11:16 GMT
Title: Account Takeover (User + Admin) Via Password Reset
Link: https://medium.com/p/322b8020ea6
Date: Thu, 05 Aug 2021 20:11:16 GMT
Title: Account Takeover (User + Admin) Via Password Reset
Link: https://medium.com/p/322b8020ea6
Medium
Account Takeover (User + Admin) Via Password Reset
Hello Everyone!
New Writeup❗️
Date: Wed, 23 Dec 2020 07:15:39 GMT
Title: Phishing scam using LinkedIn page !!!
Link: https://medium.com/p/770ebe91acb4
Date: Wed, 23 Dec 2020 07:15:39 GMT
Title: Phishing scam using LinkedIn page !!!
Link: https://medium.com/p/770ebe91acb4
Medium
Phishing scam using LinkedIn page !!!
Hello Everyone!!
New Writeup❗️
Date: Mon, 29 Mar 2021 05:03:51 GMT
Title: Complex OPEN REDIRECT Exploitation
Link: https://medium.com/p/c5cfd463a6a2
Date: Mon, 29 Mar 2021 05:03:51 GMT
Title: Complex OPEN REDIRECT Exploitation
Link: https://medium.com/p/c5cfd463a6a2
Medium
Complex OPEN REDIRECT Exploitation
Hi readers,
New Writeup❗️
Date: Tue, 19 Jan 2021 04:29:18 GMT
Title: Open-redirect [in email]
Link: https://medium.com/p/c658c248eec1
Date: Tue, 19 Jan 2021 04:29:18 GMT
Title: Open-redirect [in email]
Link: https://medium.com/p/c658c248eec1
Medium
Open-redirect in Acknowledgement email
Hi everyone this is my first writeup about my unique finding open redirect in acknowledgement email. Let’s go
New Writeup❗️
Date: Fri, 25 Mar 2022 12:13:40 GMT
Title: Clipboard hazard with Google Sheets
Link: https://medium.com/p/1c1f3d566907
Date: Fri, 25 Mar 2022 12:13:40 GMT
Title: Clipboard hazard with Google Sheets
Link: https://medium.com/p/1c1f3d566907
Medium
Clipboard hazard with Google Sheets
This is an advisory about an interesting attack vector against Google Sheets that abuses embedded Sheets documents to exfiltrate content…
New Writeup❗️
Date: Mon, 18 Oct 2021 09:57:32 GMT
Title: The Speckle Umbrella story — part 2
Link: https://medium.com/p/fcc0193614ea
Date: Mon, 18 Oct 2021 09:57:32 GMT
Title: The Speckle Umbrella story — part 2
Link: https://medium.com/p/fcc0193614ea
Medium
The Speckle Umbrella story — part 2
Back then in January, I reported a vulnerability to Google that let me spawn a remote shell on Cloud SQL instances, both MySQL and…
New Writeup❗️
Date: Wed, 01 Sep 2021 21:51:34 GMT
Title: Google Cloud Build — under the hood
Link: https://medium.com/p/bc00c68ad9de
Date: Wed, 01 Sep 2021 21:51:34 GMT
Title: Google Cloud Build — under the hood
Link: https://medium.com/p/bc00c68ad9de
Medium
Google Cloud Build — under the hood
This story began shortly after I published an advisory about a DHCP related flaw that affected Google’s Compute Engine. Dávid Schütz…
New Writeup❗️
Date: Tue, 24 Aug 2021 19:35:05 GMT
Title: The Nomulus rift
Link: https://medium.com/p/935a3c4d9300
Date: Tue, 24 Aug 2021 19:35:05 GMT
Title: The Nomulus rift
Link: https://medium.com/p/935a3c4d9300
Medium
The Nomulus rift
In the middle of 2020, I decided to look for vulnerabilities in some open source products of Google. They have many such projects, a public…
New Writeup❗️
Date: Tue, 16 Feb 2021 22:37:50 GMT
Title: Dropping a shell in Google’s Cloud SQL (the speckle-umbrella story)
Link: https://medium.com/p/f9375bd4960d
Date: Tue, 16 Feb 2021 22:37:50 GMT
Title: Dropping a shell in Google’s Cloud SQL (the speckle-umbrella story)
Link: https://medium.com/p/f9375bd4960d
Medium
Dropping a shell in Google’s Cloud SQL (the speckle-umbrella story)
Intro
New Writeup❗️
Date: Wed, 30 Dec 2020 22:52:06 GMT
Title: Getting my first Google VRP trophies
Link: https://medium.com/p/b56d700face
Date: Wed, 30 Dec 2020 22:52:06 GMT
Title: Getting my first Google VRP trophies
Link: https://medium.com/p/b56d700face
Medium
Getting my first Google VRP trophies
Intro
New Writeup❗️
Date: Wed, 15 Jan 2020 07:56:04 GMT
Title: The trouble with Microsoft’s Troubleshooters
Link: https://medium.com/p/6e32fc80b8bd
Date: Wed, 15 Jan 2020 07:56:04 GMT
Title: The trouble with Microsoft’s Troubleshooters
Link: https://medium.com/p/6e32fc80b8bd
Medium
The trouble with Microsoft’s Troubleshooters
An unpatched vulnerability in Microsoft’s Troubleshooting technology
New Writeup❗️
Date: Thu, 07 Jul 2022 10:32:42 GMT
Title: Interesting Privilege Escalation In an Old Private Program
Link: https://medium.com/p/225d27253e13
Date: Thu, 07 Jul 2022 10:32:42 GMT
Title: Interesting Privilege Escalation In an Old Private Program
Link: https://medium.com/p/225d27253e13
Medium
Interesting Privilege Escalation In an Old Private Program
Assalamu Alaikum, I am Zunaid Mahmud from Dhaka, Bangladesh and this is my first write up about a interesting privilege escalation I found…
New Writeup❗️
Date: Wed, 11 May 2022 15:14:51 GMT
Title: eMAPT Certification Exam Review
Link: https://medium.com/p/ed083cebd1df
Date: Wed, 11 May 2022 15:14:51 GMT
Title: eMAPT Certification Exam Review
Link: https://medium.com/p/ed083cebd1df
Medium
eMAPT Certification Exam Review
Hello Everyone, this is my review for the eMAPT certification exam, for which I have received multiple queries regarding exam structure…
New Writeup❗️
Date: Mon, 22 Nov 2021 20:37:57 GMT
Title: CCSK Exam Review
Link: https://medium.com/p/f3d78dec5565
Date: Mon, 22 Nov 2021 20:37:57 GMT
Title: CCSK Exam Review
Link: https://medium.com/p/f3d78dec5565
Medium
~/Certifications/CCSK-Exam_Review
Certificate of Cloud Security Knowledge (CCSK) v4 by Cloud Security Alliance
New Writeup❗️
Date: Sun, 01 Aug 2021 09:36:23 GMT
Title: ~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
Link: https://medium.com/p/49631d9f3bc8
Date: Sun, 01 Aug 2021 09:36:23 GMT
Title: ~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
Link: https://medium.com/p/49631d9f3bc8
Medium
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
#whoami
New Writeup❗️
Date: Sat, 14 Jan 2023 13:49:39 GMT
Title: How Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)
Link: https://medium.com/p/ebaa8711692
Date: Sat, 14 Jan 2023 13:49:39 GMT
Title: How Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)
Link: https://medium.com/p/ebaa8711692
Medium
How Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)
Few days ago, while I was exploring browser based bugs, I read a article over internet explaining about a path traversal vulnerability in…
New Writeup❗️
Date: Fri, 11 Nov 2022 10:54:05 GMT
Title: Bypass Duplicate Tweet Protection using negative tweet id
Link: https://medium.com/p/71e6802955b4
Date: Fri, 11 Nov 2022 10:54:05 GMT
Title: Bypass Duplicate Tweet Protection using negative tweet id
Link: https://medium.com/p/71e6802955b4
Medium
Bypass Duplicate Tweet Protection using negative tweet id
Twitter doesn’t allow making tweets of same content in relatively near time frame.
New Writeup❗️
Date: Fri, 28 Oct 2022 09:25:46 GMT
Title: Blind SSRF in Skype (Microsoft)
Link: https://medium.com/p/6639f4961052
Date: Fri, 28 Oct 2022 09:25:46 GMT
Title: Blind SSRF in Skype (Microsoft)
Link: https://medium.com/p/6639f4961052
Medium
Blind SSRF in Skype (Microsoft)
Server Side Request Forgery is a vulnerability that allows attacker to make server request to attacker controlled network location/path.