$ grep -rl "authentication-bypass" ~/blog/

Tag: authentication-bypass

5 posts — all tags

Oct 22, 2024@muhammadkhizerjaved#bugbounty-poc
From Staging to Full Admin Control In Prod: A Breakdown of Critical Authentication Flaws
In this blog, I explore a real-world case of an Admin Panel Takeover caused by broken authentication and insecure configurations. By exploiting a misconfigured JWT token from a sta…
Jan 22, 2020@muhammadkhizerjaved#bugbounty-poc
User Account Takeover via Signup Feature | Bug Bounty POC
This blog is about an Account Takeover issue i found in a web app where creating a new account on already existing email will give access to users account,
Nov 5, 2018@muhammadkhizerjaved#bugbounty-poc
Hacking a Company Through help desk - Ticket Trick | Bug Bounty POC
This Blog is about how i found & used Ticket Trick issue to Hack a Comapnies Help Center and access other users support tickets
Sep 10, 2018@muhammadkhizerjaved#bugbounty-poc
Authentication Bypass Using SQL Injection AutoTrader Webmail - Bug Bounty POC
Simple Short POC about an Issue I discovered in AutoTrader Webmail panel that allows Login Bypass and gave me Webmail Admin Panel Access
Sep 9, 2018@muhammadkhizerjaved#bugbounty-poc
ZOL Zimbabwe Authentication Bypass to XSS & SQLi Vulnerability - Bug Bounty POC
This Post is About an issues I found in ZOL Zimbabwe Website that was Authentication bypass follwong with XSS and SQLi and could lead to Database Takeover.

From Staging to Full Admin Control In Prod: A Breakdown of Critical Authentication Flaws