bug bounty writeups

Jun

20

Bypassing Okta SSO=> HTTPS/HTTP

1 min read

Jun

14

Pwning Admin Panel To Change Movie Ticket Prices at Disney

1 min read

Mar

12

How do I approach exploiting access control bugs?

4 min read

Mar

06

Exposing Users Table From a Leaky GraphQL Query

3 min read

Feb

23

Hacking GraphQL API Using Suggestions

4 min read

Feb

14

Guide to Permutations Subdomain Enumeration

4 min read

Feb

13

Setting up Vulnerable REST API Penetration Testing Lab

3 min read

Dec

25

How I Pwned 10 Admin Panels and got rewarded 8000$+?

4 min read

Nov

05

Change Any User Profile Details On Disney

2 min read