Yeasir Arafat – Medium

Home

Following

Library

Reading history

Stories

Stats

Yeasir Arafat

How to look for JS files Vulnerability for fun and profit?

Hey Folks, It’s been a while I was away from Bug Hunting. These days I got some chances to focus on hunting again I decided to hunt on…

Aug 27, 2019

How to look for JS files Vulnerability for fun and profit?

Aug 27, 2019

How Outdated JIRA Instances suffers from multiple security vulnerabilities?

Hello friends. This is Yeasir Arafat again here. In this article, I want to share what can we do with if a service is running third-party…

Nov 3, 2018

How Outdated JIRA Instances suffers from multiple security vulnerabilities?

Nov 3, 2018

How Misconfigured API leaked user private information?

Hello folks, it’s been a long since I didn’t post an article about my findings, hence I was busy with my personal life.

Oct 26, 2018

How Misconfigured API leaked user private information?

Oct 26, 2018

A very useful technique to bypass the CSRF protection for fun and profit.

Hi folks, It’s always pleasure to share some good stuff with you guys. The heading of the story may give you an idea that today I’m going…

Oct 26, 2018

Oct 26, 2018

The story behined the Strong XSS filter bypass!

Hi All,

Apr 6, 2018

The story behined the Strong XSS filter bypass!

Apr 6, 2018

IDOR that calls me!You can’t delete but I can (IDOR to Delete Admin Annonations by any user)

Hola everyone,,, This is Yeasir Arafat here and today’s write-up about IDOR that allows me to delete admin anonations without privileged.

Dec 17, 2017

IDOR that calls me!You can’t delete but I can (IDOR to Delete Admin Annonations by any user)

Dec 17, 2017

DEV XSS Protection bypass made my quickest bounty ever!!

Hi All,This is Yeasir Arafat here.I would love to share my last XSS which made my fastest bounty ever.I believe sharing is caring :D

Dec 3, 2017

DEV XSS Protection bypass made my quickest bounty ever!!

Dec 3, 2017

How I hacked United Airlines and got 250,000miles bounty??

Hi good People,

Dec 1, 2017

How I hacked United Airlines and got 250,000miles bounty??

Dec 1, 2017

Posting on Behalf of any user/Without joining posting on Yahoo groups.

This was a interesting issues that I have ever found.After watching Zahid Ali’s and Asadul Islam findings I was trying to find similar…

Aug 9, 2017

Aug 9, 2017

Misconfiguration of Hackster leads All Users Sensitive Information Disclosure.

Hi Hunters,

Aug 8, 2017

Misconfiguration of Hackster leads All Users Sensitive Information Disclosure.

Aug 8, 2017

Yeasir Arafat

Yeasir Arafat

Entrepreneur || 9+ years of experience in Offensive and Defensive Operations. Synack Red Team Member. #Pentest #VAPT #ThreatHunt

Following

Help
Status
About
Careers
Press
Blog
Privacy
Rules
Terms
Text to speech