rashahacks

Exploiting GraphQL Aliases

Introduction GraphQL is an API query language that allows developers to write clean code, and get as much data as they want from a single query. GraphQL uses a single endpoint like /graphql or /api/graphql and HTTP method can be POST or GET. It have queries to read data

Reverse Whois - Increase Attack Surface Area

* Introduction to Whois * Whois Flow * What is Reverse Whois? * Reverse Whois Flow * Tools * 100 domains or 84615 domains? Introduction to Whois Whois, is used to query domain names, IP addresses, and  ASN (autonomous system numbers or IP blocks) for their registered information. In simpler terms, if a user owns a

My Favourite 10 Shodan Dorks

If you don't know what is Shodan, I would say just go to shodan.io first. It is one of the best search engines for hackers.

Hacker's Guide to Directory/Endpoint Enumeration

Directory enumeration is when the hacker tries to find more public or hidden/private directories. The root directory of a web server starts from /var/www/<site>. https://rashahacks.com is hosted at /var/www/rashahacks.com

Privacy Violation In Chat System

Introduction/ Background Here’s the write-up for the report I wrote 3 months ago on a Private Program on Hackerone. The bug was present in the chat system where the app is keeping the personal data of the users even after deletion. Privacy Violation Privacy Violation means wrongful disclosure,

rashahacks © 2026