New Writeup❗️
Date: Tue, 20 Dec 2022 15:58:54 GMT
Title: How I found my first XSS on a Bug Bounty Program
Link: https://medium.com/p/c41107617ce1
Date: Tue, 20 Dec 2022 15:58:54 GMT
Title: How I found my first XSS on a Bug Bounty Program
Link: https://medium.com/p/c41107617ce1
Medium
How I found my first XSS on a Bug Bounty Program
Hello there, Welcome back to my Article.
New Writeup❗️
Date: Tue, 20 Dec 2022 15:41:29 GMT
Title: How I got my SIDN Swag
Link: https://medium.com/p/3c95cef07883
Date: Tue, 20 Dec 2022 15:41:29 GMT
Title: How I got my SIDN Swag
Link: https://medium.com/p/3c95cef07883
Medium
How I got my SIDN Swag
Hello guys, how are you? I’m writing an article after a very long time.
New Writeup❗️
Date: Sun, 16 Jan 2022 10:45:58 GMT
Title: How i was able to see Sensitive Information on One of the India’s best School Website.
Link: https://medium.com/p/5800b5ab834c
Date: Sun, 16 Jan 2022 10:45:58 GMT
Title: How i was able to see Sensitive Information on One of the India’s best School Website.
Link: https://medium.com/p/5800b5ab834c
Medium
How i was able to see Sensitive Information on One of the India’s best School Website.
Hello Readers,
New Writeup❗️
Date: Tue, 11 May 2021 15:05:07 GMT
Title: TryHackMe : Basic Pentesting CTF
Link: https://medium.com/p/e510d9597881
Date: Tue, 11 May 2021 15:05:07 GMT
Title: TryHackMe : Basic Pentesting CTF
Link: https://medium.com/p/e510d9597881
Medium
TryHackMe : Basic Pentesting CTF
Nmap :
New Writeup❗️
Date: Fri, 22 Jan 2021 12:17:35 GMT
Title: $10,000 for automatic email confirmation bug in Microsoft’s Edge browser
Link: https://medium.com/p/22f15ceccb4a
Date: Fri, 22 Jan 2021 12:17:35 GMT
Title: $10,000 for automatic email confirmation bug in Microsoft’s Edge browser
Link: https://medium.com/p/22f15ceccb4a
Medium
$10,000 for automatic email confirmation bug in Microsoft’s Edge browser
Hey folks, welcome to my first bug bounty writeup, which I found on Microsoft Edge (Chromium) browser.
New Writeup❗️
Date: Thu, 03 Dec 2020 08:17:51 GMT
Title: Leaking Credit card Activity in logs? Yes Sir!
Link: https://medium.com/p/b988bb6c0c2
Date: Thu, 03 Dec 2020 08:17:51 GMT
Title: Leaking Credit card Activity in logs? Yes Sir!
Link: https://medium.com/p/b988bb6c0c2
Medium
Leaking Credit card Activity in logs? Yes Sir!
Hello again, This is the easiest bug you can find while testing an android application. When you report it, you’re gonna be the problem…
New Writeup❗️
Date: Sat, 21 Nov 2020 13:26:21 GMT
Title: Weird (im)possible XSS on error page
Link: https://medium.com/p/a0b943ead41
Date: Sat, 21 Nov 2020 13:26:21 GMT
Title: Weird (im)possible XSS on error page
Link: https://medium.com/p/a0b943ead41
Medium
Weird (im)possible XSS on error page
Hello all,
New Writeup❗️
Date: Mon, 09 Jan 2023 13:27:14 GMT
Title: Hacking Hackers for fun and profit
Link: https://medium.com/p/784e6c7897e8
Date: Mon, 09 Jan 2023 13:27:14 GMT
Title: Hacking Hackers for fun and profit
Link: https://medium.com/p/784e6c7897e8
Medium
Hacking Hackers for fun and profit
This story will be in several parts. In each of the situations, I had to face unexpected results. By and large, these are stories that have…
New Writeup❗️
Date: Fri, 19 Nov 2021 08:02:47 GMT
Title: How I accidentally hacked many companies using N/A vulnerability in Atlassian Cloud
Link: https://medium.com/p/d4ff8e7dbef1
Date: Fri, 19 Nov 2021 08:02:47 GMT
Title: How I accidentally hacked many companies using N/A vulnerability in Atlassian Cloud
Link: https://medium.com/p/d4ff8e7dbef1
Medium
How I accidentally hacked many companies using N/A vulnerability in Atlassian Cloud
Below you will learn in detail about the discovered vulnerability that allowed me to get about 15000$ in bounty with all secrets from the…
New Writeup❗️
Date: Tue, 13 Jul 2021 18:52:54 GMT
Title: Credential stuffing in Bug bounty hunting
Link: https://medium.com/p/7168dc1d3153
Date: Tue, 13 Jul 2021 18:52:54 GMT
Title: Credential stuffing in Bug bounty hunting
Link: https://medium.com/p/7168dc1d3153
Medium
Credential stuffing in Bug bounty hunting
Bug hunting is not always about looking for classic vulnerabilities (XSS, SQLi, SSRF, RCE, etc). Sometimes it is a search for a new problem…
New Writeup❗️
Date: Thu, 07 Jan 2021 09:33:09 GMT
Title: $10,000 for a vulnerability that doesn’t exist
Link: https://medium.com/p/9dbc63684e94
Date: Thu, 07 Jan 2021 09:33:09 GMT
Title: $10,000 for a vulnerability that doesn’t exist
Link: https://medium.com/p/9dbc63684e94
Medium
$10,000 for a vulnerability that doesn’t exist
A couple of months ago, an interesting story happened to me. I caught a Path Traversal issue with no chance to reproduce it again.
New Writeup❗️
Date: Wed, 03 Jun 2020 13:17:09 GMT
Title: From CRLF to Account Takeover
Link: https://medium.com/p/a94d7aa0d74e
Date: Wed, 03 Jun 2020 13:17:09 GMT
Title: From CRLF to Account Takeover
Link: https://medium.com/p/a94d7aa0d74e
Medium
From CRLF to Account Takeover
At the beginning of March,while researching one site I discovered the new functionality. The functionality allowed the user to login via…
New Writeup❗️
Date: Fri, 28 May 2021 23:28:53 GMT
Title: The beauty of chaining client-side bugs
Link: https://medium.com/p/759e1091eabf
Date: Fri, 28 May 2021 23:28:53 GMT
Title: The beauty of chaining client-side bugs
Link: https://medium.com/p/759e1091eabf
Medium
The beauty of chaining client-side bugs
This is part of a report of a bug that I sent back in 2020, changing of course the program name for obvious reasons.
New Writeup❗️
Date: Sat, 14 Dec 2019 03:49:41 GMT
Title: Weaponizing BURP to work as an evil SSRF Confluence Server.
Link: https://medium.com/p/e077d71b4ef2
Date: Sat, 14 Dec 2019 03:49:41 GMT
Title: Weaponizing BURP to work as an evil SSRF Confluence Server.
Link: https://medium.com/p/e077d71b4ef2
Medium
Weaponizing BURP to work as an evil SSRF Confluence Server.
I was doing bounty on a private H1 program that interacts with various external services one of them was Atlassian Confluence and Jira.
New Writeup❗️
Date: Fri, 11 Oct 2019 15:45:05 GMT
Title: Bypass Uppercase filters like a PRO (XSS Advanced Methods)
Link: https://medium.com/p/daf7a82673ce
Date: Fri, 11 Oct 2019 15:45:05 GMT
Title: Bypass Uppercase filters like a PRO (XSS Advanced Methods)
Link: https://medium.com/p/daf7a82673ce
Medium
Bypass Uppercase filters like a PRO (XSS Advanced Methods)
While we are not working on Pentesting for companies, we love to Bug Hunting on Hackerone.
New Writeup❗️
Date: Tue, 03 May 2022 19:16:45 GMT
Title: How I got a lousyT-Shirt from the Dutch Goverment.
Link: https://medium.com/p/2a0d13fe7675
Date: Tue, 03 May 2022 19:16:45 GMT
Title: How I got a lousyT-Shirt from the Dutch Goverment.
Link: https://medium.com/p/2a0d13fe7675
Medium
How I got a lousyT-Shirt from the Dutch Goverment.
Hello everyone,
my name is Max. I’m a Computer Science student and ethical hacker from Germany. Today I want to tell you how I hacked the…
my name is Max. I’m a Computer Science student and ethical hacker from Germany. Today I want to tell you how I hacked the…
New Writeup❗️
Date: Fri, 07 Oct 2022 16:37:05 GMT
Title: Insecure Comments
Link: https://medium.com/p/73399193f804
Date: Fri, 07 Oct 2022 16:37:05 GMT
Title: Insecure Comments
Link: https://medium.com/p/73399193f804
Medium
Insecure Comments
Hi All,
New Writeup❗️
Date: Thu, 28 Jul 2022 21:01:19 GMT
Title: Reading Message from Microsoft’s Private Yammer Group
Link: https://medium.com/p/6be844639bca
Date: Thu, 28 Jul 2022 21:01:19 GMT
Title: Reading Message from Microsoft’s Private Yammer Group
Link: https://medium.com/p/6be844639bca
Medium
Reading Message from Microsoft’s Private Yammer Group
Hi All,
New Writeup❗️
Date: Fri, 18 Mar 2022 19:24:09 GMT
Title: Insecure Direct Object Reference Exposes all users of Microsoft Azure Independent Software Vendors
Link: https://medium.com/p/bed3b45e509
Date: Fri, 18 Mar 2022 19:24:09 GMT
Title: Insecure Direct Object Reference Exposes all users of Microsoft Azure Independent Software Vendors
Link: https://medium.com/p/bed3b45e509
Medium
Insecure Direct Object Reference Exposes all users of Microsoft Azure Independent Software Vendors
Hi Everyone,
New Writeup❗️
Date: Wed, 15 Dec 2021 22:06:28 GMT
Title: Broken Access Control
Link: https://medium.com/p/cc6cfd793b15
Date: Wed, 15 Dec 2021 22:06:28 GMT
Title: Broken Access Control
Link: https://medium.com/p/cc6cfd793b15
Medium
Broken Access Control
Part 0x01 | Improper Authorization could allow access to more than 100,000 Microsoft Dynamics 365 for Partner Users