$ grep -rl "recon" ~/blog/

Tag: recon

5 posts — all tags

Mar 31, 2020@muhammadkhizerjaved#bugbounty-poc
Microsoft Apache Solr RCE Velocity Template | Bug Bounty POC
Hey guys so this blog post is about RCE issue reported to Microsoft bug bounty program, Remote Code execution issue existed in microsoft.com subdomain running Apache Solr.
Feb 19, 2020@muhammadkhizerjaved#bugbounty-poc
Hacking SMS API Service Provider of a Company |Android App Static Security Analysis | Bug Bounty POC
This blog post is about static analysis of Android App & due to insecure storage of SMS API credentials I was able to Takeover the SMS API.
Feb 4, 2020@muhammadkhizerjaved#bugbounty-poc
Exploiting Insecure Firebase Database!
this blog post is about Exploiting Insecure Firebase Databases, due to Improper set security rules one can write data to the database in certain conditions here’s a Short POC tutor…
Nov 3, 2018@muhammadkhizerjaved#bugbounty-poc
P1 Like a Boss | Information Disclosure via Github leads to Employee Account Takeover | Bug Bounty POC
This Blog is About an issue i found in a site where a .js filke on Github contains a valid Email & Password of an Employee that leads to Help center access.
Nov 25, 2017@muhammadkhizerjaved#tutorials
My Guide to Basic Recon? | Bug Bounties + Recon | Amazing Love story.
The Post describe basic steps i follow before starting actual hunt for bugs in a bug bounty program, how i map out the target and which tools to use.

Microsoft Apache Solr RCE Velocity Template | Bug Bounty POC