All posts
How I was Able To Bypass Email Verification
Hello Masters and Learner I hope you are doing well and always put your efforts to secure the world so that no can get benefits unethically. the main reason why i am writing this …
Hacking a Company Through help desk - Ticket Trick | Bug Bounty POC
This Blog is about how i found & used Ticket Trick issue to Hack a Comapnies Help Center and access other users support tickets
P1 Like a Boss | Information Disclosure via Github leads to Employee Account Takeover | Bug Bounty POC
This Blog is About an issue i found in a site where a .js filke on Github contains a valid Email & Password of an Employee that leads to Help center access.
Privilege Escalation like a Boss
[gist]afe596e6eb02612562216da7b0636661[/gist]
Subdomain Takeover via Unsecured S3 Bucket Connected to the Website
This Blog is about an issue i found in a web where an Unsecured S3 Bucket connected to the website gave way to Takeover teh Subdoamin.
IDOR User Account Takeover By Connecting My Facebook Account with victims Account
Blog about an IDOR issue i found in a web where changing user id in FB auth callback request connects my FB account with victims Web Account
Authentication Bypass Using SQL Injection AutoTrader Webmail - Bug Bounty POC
Simple Short POC about an Issue I discovered in AutoTrader Webmail panel that allows Login Bypass and gave me Webmail Admin Panel Access
ZOL Zimbabwe Authentication Bypass to XSS & SQLi Vulnerability - Bug Bounty POC
This Post is About an issues I found in ZOL Zimbabwe Website that was Authentication bypass follwong with XSS and SQLi and could lead to Database Takeover.
