New Writeup❗️
Date: Tue, 19 Jan 2021 04:29:18 GMT
Title: Open-redirect [in email]
Link: https://medium.com/p/c658c248eec1
Date: Tue, 19 Jan 2021 04:29:18 GMT
Title: Open-redirect [in email]
Link: https://medium.com/p/c658c248eec1
Medium
Open-redirect in Acknowledgement email
Hi everyone this is my first writeup about my unique finding open redirect in acknowledgement email. Let’s go
New Writeup❗️
Date: Fri, 25 Mar 2022 12:13:40 GMT
Title: Clipboard hazard with Google Sheets
Link: https://medium.com/p/1c1f3d566907
Date: Fri, 25 Mar 2022 12:13:40 GMT
Title: Clipboard hazard with Google Sheets
Link: https://medium.com/p/1c1f3d566907
Medium
Clipboard hazard with Google Sheets
This is an advisory about an interesting attack vector against Google Sheets that abuses embedded Sheets documents to exfiltrate content…
New Writeup❗️
Date: Mon, 18 Oct 2021 09:57:32 GMT
Title: The Speckle Umbrella story — part 2
Link: https://medium.com/p/fcc0193614ea
Date: Mon, 18 Oct 2021 09:57:32 GMT
Title: The Speckle Umbrella story — part 2
Link: https://medium.com/p/fcc0193614ea
Medium
The Speckle Umbrella story — part 2
Back then in January, I reported a vulnerability to Google that let me spawn a remote shell on Cloud SQL instances, both MySQL and…
New Writeup❗️
Date: Wed, 01 Sep 2021 21:51:34 GMT
Title: Google Cloud Build — under the hood
Link: https://medium.com/p/bc00c68ad9de
Date: Wed, 01 Sep 2021 21:51:34 GMT
Title: Google Cloud Build — under the hood
Link: https://medium.com/p/bc00c68ad9de
Medium
Google Cloud Build — under the hood
This story began shortly after I published an advisory about a DHCP related flaw that affected Google’s Compute Engine. Dávid Schütz…
New Writeup❗️
Date: Tue, 24 Aug 2021 19:35:05 GMT
Title: The Nomulus rift
Link: https://medium.com/p/935a3c4d9300
Date: Tue, 24 Aug 2021 19:35:05 GMT
Title: The Nomulus rift
Link: https://medium.com/p/935a3c4d9300
Medium
The Nomulus rift
In the middle of 2020, I decided to look for vulnerabilities in some open source products of Google. They have many such projects, a public…
New Writeup❗️
Date: Tue, 16 Feb 2021 22:37:50 GMT
Title: Dropping a shell in Google’s Cloud SQL (the speckle-umbrella story)
Link: https://medium.com/p/f9375bd4960d
Date: Tue, 16 Feb 2021 22:37:50 GMT
Title: Dropping a shell in Google’s Cloud SQL (the speckle-umbrella story)
Link: https://medium.com/p/f9375bd4960d
Medium
Dropping a shell in Google’s Cloud SQL (the speckle-umbrella story)
Intro
New Writeup❗️
Date: Wed, 30 Dec 2020 22:52:06 GMT
Title: Getting my first Google VRP trophies
Link: https://medium.com/p/b56d700face
Date: Wed, 30 Dec 2020 22:52:06 GMT
Title: Getting my first Google VRP trophies
Link: https://medium.com/p/b56d700face
Medium
Getting my first Google VRP trophies
Intro
New Writeup❗️
Date: Wed, 15 Jan 2020 07:56:04 GMT
Title: The trouble with Microsoft’s Troubleshooters
Link: https://medium.com/p/6e32fc80b8bd
Date: Wed, 15 Jan 2020 07:56:04 GMT
Title: The trouble with Microsoft’s Troubleshooters
Link: https://medium.com/p/6e32fc80b8bd
Medium
The trouble with Microsoft’s Troubleshooters
An unpatched vulnerability in Microsoft’s Troubleshooting technology
New Writeup❗️
Date: Thu, 07 Jul 2022 10:32:42 GMT
Title: Interesting Privilege Escalation In an Old Private Program
Link: https://medium.com/p/225d27253e13
Date: Thu, 07 Jul 2022 10:32:42 GMT
Title: Interesting Privilege Escalation In an Old Private Program
Link: https://medium.com/p/225d27253e13
Medium
Interesting Privilege Escalation In an Old Private Program
Assalamu Alaikum, I am Zunaid Mahmud from Dhaka, Bangladesh and this is my first write up about a interesting privilege escalation I found…
New Writeup❗️
Date: Wed, 11 May 2022 15:14:51 GMT
Title: eMAPT Certification Exam Review
Link: https://medium.com/p/ed083cebd1df
Date: Wed, 11 May 2022 15:14:51 GMT
Title: eMAPT Certification Exam Review
Link: https://medium.com/p/ed083cebd1df
Medium
eMAPT Certification Exam Review
Hello Everyone, this is my review for the eMAPT certification exam, for which I have received multiple queries regarding exam structure…
New Writeup❗️
Date: Mon, 22 Nov 2021 20:37:57 GMT
Title: CCSK Exam Review
Link: https://medium.com/p/f3d78dec5565
Date: Mon, 22 Nov 2021 20:37:57 GMT
Title: CCSK Exam Review
Link: https://medium.com/p/f3d78dec5565
Medium
~/Certifications/CCSK-Exam_Review
Certificate of Cloud Security Knowledge (CCSK) v4 by Cloud Security Alliance
New Writeup❗️
Date: Sun, 01 Aug 2021 09:36:23 GMT
Title: ~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
Link: https://medium.com/p/49631d9f3bc8
Date: Sun, 01 Aug 2021 09:36:23 GMT
Title: ~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
Link: https://medium.com/p/49631d9f3bc8
Medium
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
#whoami
New Writeup❗️
Date: Sat, 14 Jan 2023 13:49:39 GMT
Title: How Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)
Link: https://medium.com/p/ebaa8711692
Date: Sat, 14 Jan 2023 13:49:39 GMT
Title: How Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)
Link: https://medium.com/p/ebaa8711692
Medium
How Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)
Few days ago, while I was exploring browser based bugs, I read a article over internet explaining about a path traversal vulnerability in…
New Writeup❗️
Date: Fri, 11 Nov 2022 10:54:05 GMT
Title: Bypass Duplicate Tweet Protection using negative tweet id
Link: https://medium.com/p/71e6802955b4
Date: Fri, 11 Nov 2022 10:54:05 GMT
Title: Bypass Duplicate Tweet Protection using negative tweet id
Link: https://medium.com/p/71e6802955b4
Medium
Bypass Duplicate Tweet Protection using negative tweet id
Twitter doesn’t allow making tweets of same content in relatively near time frame.
New Writeup❗️
Date: Fri, 28 Oct 2022 09:25:46 GMT
Title: Blind SSRF in Skype (Microsoft)
Link: https://medium.com/p/6639f4961052
Date: Fri, 28 Oct 2022 09:25:46 GMT
Title: Blind SSRF in Skype (Microsoft)
Link: https://medium.com/p/6639f4961052
Medium
Blind SSRF in Skype (Microsoft)
Server Side Request Forgery is a vulnerability that allows attacker to make server request to attacker controlled network location/path.
New Writeup❗️
Date: Fri, 16 Sep 2022 06:24:59 GMT
Title: Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !
Link: https://medium.com/p/5885a556eb7c
Date: Fri, 16 Sep 2022 06:24:59 GMT
Title: Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !
Link: https://medium.com/p/5885a556eb7c
Medium
Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !
I usually track acquisitions of websites for which I am hunting bugs regularly…
New Writeup❗️
Date: Fri, 06 May 2022 14:37:59 GMT
Title: 2FA Bypass in PickMyCareer.in
Link: https://medium.com/p/8abbde4c4903
Date: Fri, 06 May 2022 14:37:59 GMT
Title: 2FA Bypass in PickMyCareer.in
Link: https://medium.com/p/8abbde4c4903
Medium
2FA Bypass in PickMyCareer.in
I found a 2fa bypass recently in a responsible disclosure program — pickmycareer.in .
New Writeup❗️
Date: Fri, 15 Apr 2022 09:50:38 GMT
Title: How I passed my CEH (Practical) in first attempt
Link: https://medium.com/p/ceadf719a376
Date: Fri, 15 Apr 2022 09:50:38 GMT
Title: How I passed my CEH (Practical) in first attempt
Link: https://medium.com/p/ceadf719a376
Medium
How I passed my CEH (Practical) in first attempt
First of all, I am not a complete beginner in infosec/cyber security community. I have been doing bugbounty for past 3 years and also my…
New Writeup❗️
Date: Thu, 25 Feb 2021 14:46:40 GMT
Title: Jira Auth Bypass bug in Google Acquisition (Apigee)
Link: https://medium.com/p/ff20cfe11d99
Date: Thu, 25 Feb 2021 14:46:40 GMT
Title: Jira Auth Bypass bug in Google Acquisition (Apigee)
Link: https://medium.com/p/ff20cfe11d99
Medium
Jira Auth Bypass bug in Google Acquisition (Apigee)
I was looking for blogs on GoogleVRP reports as well as noting down it’s popular aquisitions.
New Writeup❗️
Date: Fri, 17 Feb 2023 15:00:27 GMT
Title: $$$$ IDOR’s — How to find IDORs in Ecommerce sites?
Link: https://medium.com/p/d112bd946fcf
Date: Fri, 17 Feb 2023 15:00:27 GMT
Title: $$$$ IDOR’s — How to find IDORs in Ecommerce sites?
Link: https://medium.com/p/d112bd946fcf
Medium
$$$$ IDOR’s — How to find IDORs in Ecommerce sites?
Introduction: