Abhi Sharma – Medium

Home

Following

Library

Reading history

Stories

Stats

Abhi Sharma

Pinned

Published in
InfoSec Write-ups

1500$: CR/LF Injection

Mar 23, 2024

1500$: CR/LF Injection

Mar 23, 2024

Email Disclosure via .git Config in project: $500 Bounty Bug

I’m excited to share a vulnerability I recently discovered a sensitive information disclosure vulnerability in ExaHub that exposed project…

Mar 7

Email Disclosure via .git Config in project: $500 Bounty Bug

Mar 7

Get an email whenever Abhi Sharma publishes.

By signing up, you will create a Medium account if you don’t already have one. Review our Privacy Policy for more information about our privacy practices.

Medium sent you an email at to complete your subscription.

Bypassing Business Logic via Race Condition: A $500 Bounty Bug

Mar 1

Bypassing Business Logic via Race Condition: A $500 Bounty Bug

Mar 1

Published in
InfoSec Write-ups

$1,700 IDOR: Unauthorized Modification of Web Hosting Configuration

Hi Everyone! I recently discovered an IDOR (Insecure Direct Object Reference) vulnerability in ExHub that allowed an attacker to modify the…

Feb 14

$1,700 IDOR: Unauthorized Modification of Web Hosting Configuration

Feb 14

$500 Bounty: Unlocking Premium Job Features with a Simple API Trick!

Hi Everyone, I’m excited to share a vulnerability I recently discovered in ExHub (a pseudonym for a private bug bounty program). This flaw…

Feb 8

$500 Bounty: Unlocking Premium Job Features with a Simple API Trick!

Feb 8

Published in
InfoSec Write-ups

How to choose the Correct Severity or CVSS Score for a Bug: A Practical Guide

Oct 4, 2024

How to choose the Correct Severity or CVSS Score for a Bug: A Practical Guide

Oct 4, 2024

Published in
InfoSec Write-ups

Plan Ristriction Bypass for Slack Integration: 500$ Improper Validation Check Bug

Sep 28, 2024

Plan Ristriction Bypass for Slack Integration: 500$ Improper Validation Check Bug

Sep 28, 2024

Published in
InfoSec Write-ups

500$: Open Redirect Vulnerability

Sep 21, 2024

500$: Open Redirect Vulnerability

Sep 21, 2024

Published in
InfoSec Write-ups

How to Write an Effective Bug Bounty Report: Tips, Structure, and Examples

In the bug bounty world, the quality of your report can make or break your submission. The finding a bug is the first step but writing a…

Sep 13, 2024

How to Write an Effective Bug Bounty Report: Tips, Structure, and Examples

Sep 13, 2024

Published in
InfoSec Write-ups

850$ IDOR:Unauthorized Session Revokation of any user

Sep 7, 2024

850$ IDOR:Unauthorized Session Revokation of any user

Sep 7, 2024

Published in
InfoSec Write-ups

Unauthorized Deletion of Forms by Low-Level Unlicensed Users: A 500$ Access Control Bug

Aug 24, 2024

Unauthorized Deletion of Forms by Low-Level Unlicensed Users: A 500$ Access Control Bug

Aug 24, 2024

Published in
InfoSec Write-ups

Another 1500$: CR/LF Injection

Aug 17, 2024

Another 1500$: CR/LF Injection

Aug 17, 2024

Published in
InfoSec Write-ups

$800 Improper Authorization Flaw: Unauthorized Project Reclaiming Post Transfer

Aug 10, 2024

$800 Improper Authorization Flaw: Unauthorized Project Reclaiming Post Transfer

Aug 10, 2024

Published in
T3CH

How I Earned $469 Bounty: Bypassing Plan Restriction

Aug 3, 2024

How I Earned $469 Bounty: Bypassing Plan Restriction

Aug 3, 2024

Published in
InfoSec Write-ups

Bypass Plan Restriction & Get 350$ Bounty

Jul 28, 2024

Bypass Plan Restriction & Get 350$ Bounty

Jul 28, 2024

Published in
InfoSec Write-ups

1000$ IDOR : Unauthorized Project Inclusion in Expense

Hi Everyone! Today, I’m excited to talk about a critical vulnerability I discovered in a platform (let’s call it ExamFit), which allowed…

Jul 19, 2024

1000$ IDOR : Unauthorized Project Inclusion in Expense

Jul 19, 2024

Published in
OSINT Team

NewLine Character Cause DoS: Folder & File Deletion Flaw

Discover how a subtle flaw in ExampleHub, a pivotal platform for collaborative data management, has exposed users to a security risk. This…

Jul 12, 2024

NewLine Character Cause DoS: Folder & File Deletion Flaw

Jul 12, 2024

Published in
InfoSec Write-ups

$500 for Cracking Invitation Code For Unauthorized Access & Account Takeover

Jul 6, 2024

$500 for Cracking Invitation Code For Unauthorized Access & Account Takeover

Jul 6, 2024

Published in
InfoSec Write-ups

Bypass Rate Limit on authentication endpoints like a pro………!

Feb 24, 2024

Bypass Rate Limit on authentication endpoints like a pro………!

Feb 24, 2024

Published in
InfoSec Write-ups

750$: UI Manipulation Leading to Unauthorized Permission Changes

Feb 4, 2024

750$: UI Manipulation Leading to Unauthorized Permission Changes

Feb 4, 2024

Abhi Sharma

Abhi Sharma

Cybersecurity Consultant | Pentester | Bug Bounty Hunter | ContentWriter 🔗 Connect with me on https://twitter.com/a13h1_ and https://www.linkedin.com/in/a13h1/

Help
Status
About
Careers
Press
Blog
Privacy
Rules
Terms
Text to speech