bug bounty writeups

Feb
13

How I Got Multiple Privilege Escalations - The Easy Trick?

2 min read
Jun
20

Bypassing Okta SSO=> HTTPS/HTTP

1 min read
Jun
14

Pwning Admin Panel To Change Movie Ticket Prices at Disney

1 min read
Mar
12

How do I approach exploiting access control bugs?

4 min read
Mar
06

Exposing Users Table From a Leaky GraphQL Query

3 min read
Feb
23

Hacking GraphQL API Using Suggestions

4 min read
Feb
14

Guide to Permutations Subdomain Enumeration

4 min read
Feb
13

Setting up Vulnerable REST API Penetration Testing Lab

3 min read
Dec
25

How I Pwned 10 Admin Panels and got rewarded 8000$+?

4 min read
Nov
05

Change Any User Profile Details On Disney

2 min read