Bypassing Google’s authentication to access their Internal Admin panels — Vishnu Prasad P G

SQL injection with load file and into outfile

Well this submission make me get the patient badge on h1 coz it’s more then 6…

Bug Bounty — Tips / Tricks / JS (JavaScript Files)

#BugBounty — Exploiting CRLF Injection can lands into a nice bounty

Intercepting Network data with MITMProxy on MacOS

The requirement

For a client I was working with recently, there was a need to intercept data on a network. Certain actions needed to be taken after applying business logic on the intercepted data.

#BugBounty — API keys leakage, Source code disclosure in India’s largest e-commerce health care company.

#BugBounty — “How I was able to shop for free!”- Payment Price Manipulation

Hi Guys,

During my recent bug bounty hunt, I came across a critical and yet simple vulnerability.It was payment price manipulation through which I could buy any product at…

#BugBounty — “I don’t need your current password to login into your account” - How could I completely takeover any user’s account in an online classified ads company.

Hi Guys,

“User account compromise” ! Yes, you read right . This was an excellent vulnerability which I have found recently during my…

How an Instagram’s Story drives me to a Remote Code Execution.

DISCLAIMER

How I was able to remotely crash any android user’s Instagram app