$ ls ~/blog/2017/

Archive 2017

11 posts

Dec 19, 2017@muhammadkhizerjaved#news
Security Researcher saved Careem from a Data Breach
The Post is about a Researcher found a security loop hole in Careem Cab app that let him takeover 1.4 Million user information,
Dec 19, 2017@muhammadkhizerjaved#bugbounty-poc
Unrestricted File Upload to RCE | Bug Bounty POC
How I bypassed image upload functionality on a project to gain RCE,
Dec 10, 2017@muhammadkhizerjaved#bugbounty-poc
HOW I WAS ABLE TO TAKEOVER FACEBOOK ACCOUNT | Bug Bounty Poc
hey all here is ameer hamza, Facebook has recently introduced login with phone functionality if you have forgotten your password. however I was able to exploit it which leads to a…
Nov 25, 2017@muhammadkhizerjaved#tutorials
My Guide to Basic Recon? | Bug Bounties + Recon | Amazing Love story.
The Post describe basic steps i follow before starting actual hunt for bugs in a bug bounty program, how i map out the target and which tools to use.
Nov 20, 2017@muhammadkhizerjaved#bugbounty-poc
UBER Wildcard Subdomain Takeover | BugBounty POC
one of ubers domain was vulnerable to Wildcard subdomain takeover, Basically as heroku wildcard is Opened and i can register any subdomain & takeover it.
Nov 4, 2017@muhammadkhizerjaved#bugbounty-poc
Accessing Localhost via Vhost | VIRTUAL HOST ENUMERATION | BugBounty POC
The Blog post is about what are Virtual Host, how U can Enumerate them and get access to the vulnerable system, including POC of resent BugBounty Report.
Oct 11, 2017@muhammadkhizerjaved#tutorials
What is Subdomain Hijack/Takeover Vulnerability? How to Identify? & Exploit It?
The post explains the basic of subdomain takeover vulnerability, how to identify and exploit the issue, post contains 5 diff services step to step guide.
Oct 10, 2017@muhammadkhizerjaved#bugbounty-poc
Exploiting Insecure Cross Origin Resource Sharing ( CORS ) | api.artsy.net
How to find & Exploit Insecure Cross Origin Resource Sharing ( CORS ), inspired by geekboy & I successfully exploit the issue in a Bug Bounty program
Oct 10, 2017@muhammadkhizerjaved#bugbounty-poc
Bugcrowd’s Domain & Subdomain Takeover vulnerability!
Bugcrowd's Domain & Subdomain takeover vulnerability Due to Expired/Misconfigured Fastly & Pantheon Services.. A small writeup about how i did it?
Oct 10, 2017@muhammadkhizerjaved#bugbounty-poc
Subdomain Takeover Through Expired Cloudfront Distribution | live.lamborghini.com
I found an Expired Cloudfront distribution on one of the lamborghini.com Subdomains! The Post explains how easy it is to takeover a subdomain!
Oct 10, 2017@muhammadkhizerjaved#bugbounty-poc
SQLi & XSS Vulnerabilities in a Popular Airlines Website!
SQL injection & XSS vulnerabilities in a popular Airlines Websites That can cause complete compromisation of the database and System! Here are the details