Hi everyone, This is my last write-up of 2018, so 6 months ago I got the invite from a Hackerone private program, the program has a huge scope, so currently I am focused on that single program. Found a subdomain let say abc.example.com (As it a priva...
Hi everyone, so a few months ago I got the invite from a Hackerone private program, the program has huge scope. So I started my recon process. Found a subdomain let say test.example.com (As it a private program so we will be using example.com instead...
Hi everyone , here is one of my finding on Buffer.com . Where i managed to bypass the authentication So basically the authentication work flow is like below To change account email user need to provide the current account password If the passw...
Hi everyone , here is one of my write-up on account takeover via password reset functionality . As the site is private let assume as site.com So basically the password reset functionality work flow is like below User requested for password reset...
