In this blog post, I’ll be sharing about how I was assigned my CVE :) I was reading a blog post by Nimit Jain about his findings on an Open Source software which is “SeedDMS” and he inspired me to give a look at this software and see if I…

Hello, First of all, sorry for not posting for such a long period of time. I was really busy in this lockdown pushing my HackerOne Reputation & other stuff. …

Hi guys, So I would like to start this blog with a question, What was the first vulnerability you learnt when you began into Cyber Security?? Mine was XSS, though it took pretty long for me to find it but yeah! I finally found it ¯\_(ツ)_/¯ Case Study I got an…

Hello everyone, this is the topic in which I’ve really struggled learning it. So I decided to understand it from the various blog post, videos and many more ways. …

Hello guys, I recently encountered an amazing bypass to change my Phone Number in an application that doesn’t allow anyone to change its Phone number after registration. An Easy Win! Case Study As this was a private program all illustrations of vulnerabilities will be represented with the host as redact.com The application…

Hello Guys, Just a Rough analysis of bugs Disclosed Publicly about CRLF injection This analysis is done just because of curiosity about learning new things and tho I found this topic interesting. So Thought of sharing about it with you guys. I started with Reading about disclosed reports about CRLF…

Hello guys, Adding Bash to my bug bounty was the best thing I ever did during my learning process! Tables of Content: Introduction Subdomain Enumeration Subdomain Takeovers CORS Misconfiguration Resources Let’s Start with Some Basics Introduction. Ummm… What’s Bash? (The first question comes.) Bash — Bourne Again Shell Bash is a standard shell, it’s intuitive and flexible. In Linux and macOS, Bash is a…

Hello everyone, it may be just another blog on how to find API keys, but here I’ll try to give every Information about finding the secret API keys and how to use them to authenticate. An Application Programming Interface key (API key) is a unique indentifier that is used to…

Hello hunters, In this blog, I will help you setup-up Autozie and Autorepeater to find IDORs with the help of Burp Suite, but first a little detail about What is IDOR? What is Insecure Direct Object Reference? The fourth one on the list is Insecure Direct Object Reference, also called…