Command Injection PoC

So back in December 2017 i found a command injection vulnerability in one of job listing site. Here is the simple proof…

#BugBounty @ Linkedln-How I was able to bypass Open Redirection Protection

Hi Guys,

Here I’ll be talking about a nice vulnerability that I found couple of months ago in Linkedln. Before jumping into the vulnerability, let me quickly brief you about…

#BugBounty — AWS S3 added to my “Bucket” list!

Hi Guys,

You might remember the Million Dollar Instagram Bug that allowed security researcher Wes Wineberg to access every single image and account on Instagram. This was only possible because he had gained access to…

#BugBounty — How I was able to read chat of users in an Indian Online travel portal

Hi Guys,

While doing my usual bug hunting, I came across an interesting IDOR vulnerability that could aid me to read the complete chat of the users with the…

#BugBounty — How I was able to delete anyone’s account in an Online Car Rental Company

Hi Guys,

One more interesting finding that I recently discovered in a popular online car rental company. Some parameter manipulation combined with CSRF resulted into disabling account of any user. Let’s see how it…