New Writeup❗️
Date: Tue, 16 Feb 2021 22:37:50 GMT
Title: Dropping a shell in Google’s Cloud SQL (the speckle-umbrella story)
Link: https://medium.com/p/f9375bd4960d
Date: Tue, 16 Feb 2021 22:37:50 GMT
Title: Dropping a shell in Google’s Cloud SQL (the speckle-umbrella story)
Link: https://medium.com/p/f9375bd4960d
Medium
Dropping a shell in Google’s Cloud SQL (the speckle-umbrella story)
Intro
New Writeup❗️
Date: Wed, 30 Dec 2020 22:52:06 GMT
Title: Getting my first Google VRP trophies
Link: https://medium.com/p/b56d700face
Date: Wed, 30 Dec 2020 22:52:06 GMT
Title: Getting my first Google VRP trophies
Link: https://medium.com/p/b56d700face
Medium
Getting my first Google VRP trophies
Intro
New Writeup❗️
Date: Wed, 15 Jan 2020 07:56:04 GMT
Title: The trouble with Microsoft’s Troubleshooters
Link: https://medium.com/p/6e32fc80b8bd
Date: Wed, 15 Jan 2020 07:56:04 GMT
Title: The trouble with Microsoft’s Troubleshooters
Link: https://medium.com/p/6e32fc80b8bd
Medium
The trouble with Microsoft’s Troubleshooters
An unpatched vulnerability in Microsoft’s Troubleshooting technology
New Writeup❗️
Date: Thu, 07 Jul 2022 10:32:42 GMT
Title: Interesting Privilege Escalation In an Old Private Program
Link: https://medium.com/p/225d27253e13
Date: Thu, 07 Jul 2022 10:32:42 GMT
Title: Interesting Privilege Escalation In an Old Private Program
Link: https://medium.com/p/225d27253e13
Medium
Interesting Privilege Escalation In an Old Private Program
Assalamu Alaikum, I am Zunaid Mahmud from Dhaka, Bangladesh and this is my first write up about a interesting privilege escalation I found…
New Writeup❗️
Date: Wed, 11 May 2022 15:14:51 GMT
Title: eMAPT Certification Exam Review
Link: https://medium.com/p/ed083cebd1df
Date: Wed, 11 May 2022 15:14:51 GMT
Title: eMAPT Certification Exam Review
Link: https://medium.com/p/ed083cebd1df
Medium
eMAPT Certification Exam Review
Hello Everyone, this is my review for the eMAPT certification exam, for which I have received multiple queries regarding exam structure…
New Writeup❗️
Date: Mon, 22 Nov 2021 20:37:57 GMT
Title: CCSK Exam Review
Link: https://medium.com/p/f3d78dec5565
Date: Mon, 22 Nov 2021 20:37:57 GMT
Title: CCSK Exam Review
Link: https://medium.com/p/f3d78dec5565
Medium
~/Certifications/CCSK-Exam_Review
Certificate of Cloud Security Knowledge (CCSK) v4 by Cloud Security Alliance
New Writeup❗️
Date: Sun, 01 Aug 2021 09:36:23 GMT
Title: ~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
Link: https://medium.com/p/49631d9f3bc8
Date: Sun, 01 Aug 2021 09:36:23 GMT
Title: ~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
Link: https://medium.com/p/49631d9f3bc8
Medium
~/BugBounty/IDOR/”How I was able to exfiltrate any user’s credit coupons”
#whoami
New Writeup❗️
Date: Sat, 14 Jan 2023 13:49:39 GMT
Title: How Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)
Link: https://medium.com/p/ebaa8711692
Date: Sat, 14 Jan 2023 13:49:39 GMT
Title: How Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)
Link: https://medium.com/p/ebaa8711692
Medium
How Browser’s Save As Feature might lead to Code Execution (CVE-2022–45415)
Few days ago, while I was exploring browser based bugs, I read a article over internet explaining about a path traversal vulnerability in…
New Writeup❗️
Date: Fri, 11 Nov 2022 10:54:05 GMT
Title: Bypass Duplicate Tweet Protection using negative tweet id
Link: https://medium.com/p/71e6802955b4
Date: Fri, 11 Nov 2022 10:54:05 GMT
Title: Bypass Duplicate Tweet Protection using negative tweet id
Link: https://medium.com/p/71e6802955b4
Medium
Bypass Duplicate Tweet Protection using negative tweet id
Twitter doesn’t allow making tweets of same content in relatively near time frame.
New Writeup❗️
Date: Fri, 28 Oct 2022 09:25:46 GMT
Title: Blind SSRF in Skype (Microsoft)
Link: https://medium.com/p/6639f4961052
Date: Fri, 28 Oct 2022 09:25:46 GMT
Title: Blind SSRF in Skype (Microsoft)
Link: https://medium.com/p/6639f4961052
Medium
Blind SSRF in Skype (Microsoft)
Server Side Request Forgery is a vulnerability that allows attacker to make server request to attacker controlled network location/path.
New Writeup❗️
Date: Fri, 16 Sep 2022 06:24:59 GMT
Title: Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !
Link: https://medium.com/p/5885a556eb7c
Date: Fri, 16 Sep 2022 06:24:59 GMT
Title: Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !
Link: https://medium.com/p/5885a556eb7c
Medium
Abusing Broken Link In Fitbit (Google Acquisition)To Collect BugBounty Reports On Behalf Of Google !
I usually track acquisitions of websites for which I am hunting bugs regularly…
New Writeup❗️
Date: Fri, 06 May 2022 14:37:59 GMT
Title: 2FA Bypass in PickMyCareer.in
Link: https://medium.com/p/8abbde4c4903
Date: Fri, 06 May 2022 14:37:59 GMT
Title: 2FA Bypass in PickMyCareer.in
Link: https://medium.com/p/8abbde4c4903
Medium
2FA Bypass in PickMyCareer.in
I found a 2fa bypass recently in a responsible disclosure program — pickmycareer.in .
New Writeup❗️
Date: Fri, 15 Apr 2022 09:50:38 GMT
Title: How I passed my CEH (Practical) in first attempt
Link: https://medium.com/p/ceadf719a376
Date: Fri, 15 Apr 2022 09:50:38 GMT
Title: How I passed my CEH (Practical) in first attempt
Link: https://medium.com/p/ceadf719a376
Medium
How I passed my CEH (Practical) in first attempt
First of all, I am not a complete beginner in infosec/cyber security community. I have been doing bugbounty for past 3 years and also my…
New Writeup❗️
Date: Thu, 25 Feb 2021 14:46:40 GMT
Title: Jira Auth Bypass bug in Google Acquisition (Apigee)
Link: https://medium.com/p/ff20cfe11d99
Date: Thu, 25 Feb 2021 14:46:40 GMT
Title: Jira Auth Bypass bug in Google Acquisition (Apigee)
Link: https://medium.com/p/ff20cfe11d99
Medium
Jira Auth Bypass bug in Google Acquisition (Apigee)
I was looking for blogs on GoogleVRP reports as well as noting down it’s popular aquisitions.
New Writeup❗️
Date: Fri, 17 Feb 2023 15:00:27 GMT
Title: $$$$ IDOR’s — How to find IDORs in Ecommerce sites?
Link: https://medium.com/p/d112bd946fcf
Date: Fri, 17 Feb 2023 15:00:27 GMT
Title: $$$$ IDOR’s — How to find IDORs in Ecommerce sites?
Link: https://medium.com/p/d112bd946fcf
Medium
$$$$ IDOR’s — How to find IDORs in Ecommerce sites?
Introduction:
New Writeup❗️
Date: Sun, 07 Aug 2022 09:57:49 GMT
Title: How I got a $10,000 Penetration Testing Project/Job with Bug Bounty
Link: https://medium.com/p/b38ab4357ce4
Date: Sun, 07 Aug 2022 09:57:49 GMT
Title: How I got a $10,000 Penetration Testing Project/Job with Bug Bounty
Link: https://medium.com/p/b38ab4357ce4
Medium
How I got a $10,000 Penetration Testing Project/Job with Bug Bounty
Introduction:
New Writeup❗️
Date: Wed, 16 Feb 2022 11:04:34 GMT
Title: How I earned $9000 with Privilege escalations
Link: https://medium.com/p/b187d1f8f4fe
Date: Wed, 16 Feb 2022 11:04:34 GMT
Title: How I earned $9000 with Privilege escalations
Link: https://medium.com/p/b187d1f8f4fe
Medium
How I earned $9000 with Privilege escalations
Hello Community, It’s my very first time that I am sharing my experience and knowledge with you guys and I hope it will add some values to…
New Writeup❗️
Date: Fri, 26 Mar 2021 10:43:15 GMT
Title: How to bypass CloudFlare bot protection ?
Link: https://medium.com/p/1f2c6c0c36fb
Date: Fri, 26 Mar 2021 10:43:15 GMT
Title: How to bypass CloudFlare bot protection ?
Link: https://medium.com/p/1f2c6c0c36fb
Medium
How to bypass CloudFlare bot protection ?
Several months ago I submitted what appeared to be a security flaw to CloudFalre’s bugbounty program. According to them, this is not a…
New Writeup❗️
Date: Wed, 14 Jul 2021 07:06:31 GMT
Title: RFD Vulnerability And Content-Disposition Header Bypass Story!
Link: https://medium.com/p/f8f962f54c7d
Date: Wed, 14 Jul 2021 07:06:31 GMT
Title: RFD Vulnerability And Content-Disposition Header Bypass Story!
Link: https://medium.com/p/f8f962f54c7d
Medium
RFD Vulnerability And Content-Disposition Header Bypass Story!
Hey everyone! Hope everyone doing good.
New Writeup❗️
Date: Sat, 29 Aug 2020 08:24:45 GMT
Title: OAuth Phishing - 2020
Link: https://medium.com/p/9b2e1d00888d
Date: Sat, 29 Aug 2020 08:24:45 GMT
Title: OAuth Phishing - 2020
Link: https://medium.com/p/9b2e1d00888d
Medium
OAuth Phishing - 2020
Hello Everyone,