In the name of Almighty, Allah, i begin. This write up is about how I found my first IDOR in HackerOne and got my first swag.

Learning machine authentication, finding a needle and gaining access to the Google Cloud project of Google Stadia.

Hello everyone, I hope you are well. In this article I will show you how I escalated XSS to Account Takeover. Since the target is private…

The issue is Insecure Direct Object with impact malicious user can expose or determine member on closed group. But the issue have limits…

'A while back, SecurityTrails announced that they would be running a contest dubbed 'Recon Master'. The aim of the game is to find hostnames that resolve to an IPv4 address that are not already found by SecurityTrails'

This finding was an another private bug bounty program. The scope of the target was a ticketing android app (Prod). This app was a major…

Talking of a bug I found a long time back which led to the bypassing of CSP in an electron app :)

Automation helps get easy $$$ rXSS

Mutations are `edit` or `create` queries used in Graphql. Gitlab prevents CSRF in this functionality by sending a POST request with a X-CSRF-Token header. The bug I found here was that, when we...

First to understand postMessage xss attack you need to understand this two things :

New web targets for the discerning hacker

Approaching a target from all angles

What is SAML? Security Assertion Markup Language (SAML) is an open standard for exchanging authentication and authorization data between parties.
Source: Wikipedia
SAML is often used for single-sign on (“Sign in with Google”, “Sign in with Twitter” etc.).…

Unpack the source code of React and other Webpacked Javascript apps!

Site isolation security break uncovered

Cross-Site Scripting and the alert() function have gone hand in hand for decades. Want to prove you can execute arbitrary JavaScript? Pop an alert. Want to find an XSS vulnerability the lazy way? Inje

In this video we walk through how a security researcher named Augusto Zanellato was able to discover a GitHub Personal Access Token (PAT) that had read/write access to private Shopify repositories, and earned them a $50,000USD bounty!

You can read the report…