rashahacks

Soft Deletion of Resources - [Privacy Violation]

Introduction Soft deletion is the process of showing that an entry is removed but not actually removed from the databases. Is it GDPR compliant? No. As per GDPR (General Data Protection Regulation), unauthorized access and unlawful processing of personal data protection must be there. I am Inderjeet Singh aka encodedguy,

Bypassing Okta SSO=> HTTPS/HTTP

Summary: When doing recon on Yahoo assets during Hackerone AWC 2023, I found a host foo.bar.yahoo.com. I thought it must be some internal tool for engineers, few pages are listed but clicking on any of the pages redirects to Okta SSO. I found a bug during black

Slides: GraphQL Hacking

Guide to Parameter Enumeration

Hi folks! I am Inderjeet Singh aka encodedguy. In this blog,  I will write about parameter enumeration, its importance, and the automated/manual approach for enumerating parameters. Introduction A parameter in a URL is a string of characters that follows a question mark (?) within the URL. Parameters are used to

ffuf - Fuzz The Web

Introduction: ffuf, is a web fuzzer written in Golang by @joohoi. Hackers use ffuf to fuzz directories, subdomains, virtual hosts, usernames, passwords, cookies, anything inside a HTTP request. The tool requires URL or HTTP request, and a wordlist to fuzz. Working: FUZZ is the secret. You need to put the

rashahacks © 2026