Hi, I am Inderjeet Singh, a student in the morning and a bug bounty hunter in night. Today I will write about access control issues and why or why shouldn't you use Autorize or some automated extension to hunt for this bug. Access Control Vulnerabilities Let's
Hello Hackers, I am Inderjeet Singh aka encodedguy on HackerOne. In this blog post, I will give a walkthrough of my recent finding in which I got the data from the users table. Background 0x01: Before starting the attack, let's first understand the background of the application. For
Hello Hackers! I am Inderjeet Singh aka encodedguy from India. In this blog, I will introduce a way to hack GraphQL API using suggestions. At the end, I will also review one of my own finding where I was able to make a custom GraphQL query using suggestions and dump
* What is a subdomain name? * What is permutation subdomain discovery? * Permutations Wordlist Generation * Tools for permutations * DNS Resolution * Tips and Conclusion Subdomain 101 In layman's terms, a subdomain name is a prefix before domain name that highlights a specific service. For example, google.com is a domain name.
Hi, it's me again Inderjeet and today I will talk about how I collect root domain names. This article is about ~1000 words but I wrote it feeling like I am hacking right now. Root Domains I always make sure that I have more root domain names than