Hello Hackers! I am Inderjeet Singh aka encodedguy from India. In this blog, I will introduce a way to hack GraphQL API using suggestions. At the end, I will also review one of my own finding where I was able to make a custom GraphQL query using suggestions and dump
* What is a subdomain name? * What is permutation subdomain discovery? * Permutations Wordlist Generation * Tools for permutations * DNS Resolution * Tips and Conclusion Subdomain 101 In layman's terms, a subdomain name is a prefix before domain name that highlights a specific service. For example, google.com is a domain name.
In 2-Factor Authentication, when a user enters his password with the intention to log in the web application sends a temporary code to the user’s verified email address and when the user enters the code only then he will be able to interact with his account. Many websites
Hello Hackers, In this post, I will explain how I fuzz APIs for bugs. This blog is more about how to understand your API and then about what tools I use and where to fuzz? 1. Understanding the API 2. Where to fuzz and how to fuzz? Understanding the API?
Hello Hackers, I am Inderjeet Singh aka encodedguy. Today, I will share one of my recent findings where I pwned 10 admin panels and the team rewarded me with $8000+. Background I was invited to a private HackerOne challenge this month. The total bounty pool for this challenge was $15K.