New Writeup❗️
Date: Wed, 02 Mar 2022 14:06:42 GMT
Title: IDOR in support.mozilla.org through Code Review
Link: https://medium.com/p/ff2aa8ea1201
Date: Wed, 02 Mar 2022 14:06:42 GMT
Title: IDOR in support.mozilla.org through Code Review
Link: https://medium.com/p/ff2aa8ea1201
Medium
IDOR in support.mozilla.org through Code Review
I was trying to improve my static analysis code, specifically django apps, so i decided to hack a random project in github. And i found…
New Writeup❗️
Date: Mon, 14 Feb 2022 04:48:56 GMT
Title: Bookwyrm Server Side Request Forgery
Link: https://medium.com/p/b1462829d68e
Date: Mon, 14 Feb 2022 04:48:56 GMT
Title: Bookwyrm Server Side Request Forgery
Link: https://medium.com/p/b1462829d68e
Medium
Bookwyrm Server Side Request Forgery
While reading the code of bookwyrm, i encounter this endpoint
New Writeup❗️
Date: Tue, 08 Feb 2022 03:07:49 GMT
Title: Hacking into school management systems. Reflected XSS To RCE
Link: https://medium.com/p/74880c423024
Date: Tue, 08 Feb 2022 03:07:49 GMT
Title: Hacking into school management systems. Reflected XSS To RCE
Link: https://medium.com/p/74880c423024
Medium
Hacking into school management systems. Reflected XSS To RCE
As a hacker, we are asked a million times before if we can hack into their school system and change their grades.
New Writeup❗️
Date: Mon, 07 Feb 2022 09:57:34 GMT
Title: Hacking and reverse engineering il2cpp games with ghidra
Link: https://medium.com/p/5cee894024f2
Date: Mon, 07 Feb 2022 09:57:34 GMT
Title: Hacking and reverse engineering il2cpp games with ghidra
Link: https://medium.com/p/5cee894024f2
Medium
Hacking and reverse engineering il2cpp games with ghidra
Last writeup, we talk about how to hack unity games compiled on mono. This time, we will be hacking unity games compiled in il2cpp. IL2CPP…
New Writeup❗️
Date: Sat, 05 Feb 2022 10:46:27 GMT
Title: Hacking .Net Games With DnSpy
Link: https://medium.com/p/73e1441f81c1
Date: Sat, 05 Feb 2022 10:46:27 GMT
Title: Hacking .Net Games With DnSpy
Link: https://medium.com/p/73e1441f81c1
Medium
Hacking .Net Games With DnSpy
Introduction
New Writeup❗️
Date: Sun, 30 Jan 2022 07:25:52 GMT
Title: How to get started hacking django applications
Link: https://medium.com/p/f407564df9c7
Date: Sun, 30 Jan 2022 07:25:52 GMT
Title: How to get started hacking django applications
Link: https://medium.com/p/f407564df9c7
Medium
How To Get Started Hacking Django Based Applications
Django is a python based web framework. In this writeup, i will teach you how to analyze django based applications . For this writeup, i…
New Writeup❗️
Date: Sun, 09 Jan 2022 07:52:25 GMT
Title: 2FA bypass by reading the documentation
Link: https://medium.com/p/3260a372d8a8
Date: Sun, 09 Jan 2022 07:52:25 GMT
Title: 2FA bypass by reading the documentation
Link: https://medium.com/p/3260a372d8a8
Medium
2FA bypass by reading the documentation
This is a fairly simple and short writeup, but i think is worth sharing, so lets get started.
New Writeup❗️
Date: Fri, 20 Nov 2020 14:43:17 GMT
Title: Turning Blind Error Based SQL Injection Into An Exploitable Boolean One
Link: https://medium.com/p/85d6be3ca23b
Date: Fri, 20 Nov 2020 14:43:17 GMT
Title: Turning Blind Error Based SQL Injection Into An Exploitable Boolean One
Link: https://medium.com/p/85d6be3ca23b
Medium
Turning Blind Error Based SQL Injection Into An Exploitable Boolean One
While I was recently hunting on a promising host target, from my well configured (only checking SQLi) active scan results, I found out a…
🗿1
New Writeup❗️
Date: Sun, 19 Apr 2020 14:24:17 GMT
Title: Google Maps API (Not the key) Bugs That I Found Over the Years
Link: https://medium.com/p/781840fc82aa
Date: Sun, 19 Apr 2020 14:24:17 GMT
Title: Google Maps API (Not the key) Bugs That I Found Over the Years
Link: https://medium.com/p/781840fc82aa
Medium
Google Maps API (Not the key) Bugs That I Found Over the Years
After publishing my blog post Unauthorized Google Maps API Key Usage Cases, and Why You Need to Care and scanner script for it, I got…
New Writeup❗️
Date: Sun, 15 Mar 2020 13:40:59 GMT
Title: Using Vulnerability Analytics Feature Like a Boss
Link: https://medium.com/p/655fc1f1543b
Date: Sun, 15 Mar 2020 13:40:59 GMT
Title: Using Vulnerability Analytics Feature Like a Boss
Link: https://medium.com/p/655fc1f1543b
Medium
Using Vulnerability Analytics Feature Like a Boss
For the %90 of my working time, I am hunting bugs on the Synack for 2 reasons:
New Writeup❗️
Date: Wed, 26 Feb 2020 12:37:43 GMT
Title: Write-up: AWS Document Signing Security Control Bypass
Link: https://medium.com/p/2b13a9c22a4d
Date: Wed, 26 Feb 2020 12:37:43 GMT
Title: Write-up: AWS Document Signing Security Control Bypass
Link: https://medium.com/p/2b13a9c22a4d
Medium
Write-up: AWS Document Signing Security Control Bypass
While I prefer more to write/talk about far-going topics instead of just one vulnerability write-up, I decided to make an exception for…
New Writeup❗️
Date: Tue, 11 Feb 2020 18:13:15 GMT
Title: Weird Vulnerabilities Happening on Load Balancers, Shallow Copies and Caches
Link: https://medium.com/p/9194d4f72322
Date: Tue, 11 Feb 2020 18:13:15 GMT
Title: Weird Vulnerabilities Happening on Load Balancers, Shallow Copies and Caches
Link: https://medium.com/p/9194d4f72322
Medium
Weird Vulnerabilities Happening on Load Balancers, Shallow Copies and Caches
When looking for security vulnerabilities on a web application - either for bug hunting or a penetration test project -, I always check 2…
New Writeup❗️
Date: Wed, 05 Feb 2020 15:40:59 GMT
Title: Simple Remote Code Execution Vulnerability Examples for Beginners
Link: https://medium.com/p/985867878311
Date: Wed, 05 Feb 2020 15:40:59 GMT
Title: Simple Remote Code Execution Vulnerability Examples for Beginners
Link: https://medium.com/p/985867878311
Medium
Simple Remote Code Execution Vulnerability Examples for Beginners
Especially when I talk with newbie security researchers/bug bounty hunters, they always make me feel as not thinking theirselves capable…
New Writeup❗️
Date: Wed, 22 Jan 2020 14:19:49 GMT
Title: A Less Known Attack Vector, Second Order IDOR Attacks
Link: https://medium.com/p/14468009781a
Date: Wed, 22 Jan 2020 14:19:49 GMT
Title: A Less Known Attack Vector, Second Order IDOR Attacks
Link: https://medium.com/p/14468009781a
Medium
A Less Known Attack Vector, Second Order IDOR Attacks
Most of you probably familiar within the vulnerability types “IDOR (Insecure Object Direct Reference)” and second order vulnerabilities…
New Writeup❗️
Date: Wed, 09 Mar 2022 06:40:34 GMT
Title: Automate your recon With Censys | HOW Pro hacker use Censys
Link: https://medium.com/p/871aeabd517e
Date: Wed, 09 Mar 2022 06:40:34 GMT
Title: Automate your recon With Censys | HOW Pro hacker use Censys
Link: https://medium.com/p/871aeabd517e
Medium
Automate your recon With Censys | HOW Pro hacker use Censys
Greeting Everyone ! After Long break I decide to create a blog on recon using censys this blog is bit interesting we will explore…
New Writeup❗️
Date: Mon, 04 Oct 2021 11:19:59 GMT
Title: Android Insecure file storage
Link: https://medium.com/p/e770eed9a3fa
Date: Mon, 04 Oct 2021 11:19:59 GMT
Title: Android Insecure file storage
Link: https://medium.com/p/e770eed9a3fa
Medium
Android Insecure file storage
Hello everyone Greeting all,
New Writeup❗️
Date: Thu, 06 May 2021 15:08:18 GMT
Title: How i get p1 to p4 Using Google Dork Some Google Dork Which Give You All Secrets
Link: https://medium.com/p/de9df507a3ca
Date: Thu, 06 May 2021 15:08:18 GMT
Title: How i get p1 to p4 Using Google Dork Some Google Dork Which Give You All Secrets
Link: https://medium.com/p/de9df507a3ca
Medium
How i get p1 to p4 Using Google Dork Some Google Dork Which Give You All Secrets
Greeting Everyone ! Hope Everything Is Going Well Today in this Blog we will Explore A hidden Way to find Critical Information . Here We…
New Writeup❗️
Date: Fri, 26 Feb 2021 17:09:09 GMT
Title: Story About Stop 10000+ users to get Their job notification
Link: https://medium.com/p/6a8aca542c85
Date: Fri, 26 Feb 2021 17:09:09 GMT
Title: Story About Stop 10000+ users to get Their job notification
Link: https://medium.com/p/6a8aca542c85
Medium
Story About Stop 10000+ users to get Their job notification
Greeting Everyone ! Hope Everything Is going good ! This Story Is about to How I able to Stop all Users of example.com to get their…
New Writeup❗️
Date: Tue, 27 Oct 2020 15:23:28 GMT
Title: Make Your Recon Better Recon using automation If Your Beginner !
Link: https://medium.com/p/a4f762205412
Date: Tue, 27 Oct 2020 15:23:28 GMT
Title: Make Your Recon Better Recon using automation If Your Beginner !
Link: https://medium.com/p/a4f762205412
Medium
Make Your Recon Better Recon using automation If Your Beginner !
Greeting Everyone ! Hope Everything Is Going Good ! Today we Are Going to see How Easily You Can Perform Recon Against Your Targeted…
New Writeup❗️
Date: Sat, 15 Aug 2020 19:22:52 GMT
Title: How How i am able to Steal email verification token By Host header Poisoning
Link: https://medium.com/p/875bec0d477d
Date: Sat, 15 Aug 2020 19:22:52 GMT
Title: How How i am able to Steal email verification token By Host header Poisoning
Link: https://medium.com/p/875bec0d477d
Medium
How How i am able to Steal email verification token By Host header Poisoning
Greeting Everyone ! I am pallab Twitter (@PJBorah2) Today I going to share my first Accepted p2 Bug I found on Bugcrowd Private program…