CEH Practical Walkthrough
CEH Practical is a 6 hours lab-based practical exam that includes a set of challenges with Web, Host, Forensic, and Network. The exam took place in iLabs, where we are…
Misconfigured WordPress takeover to Remote Code Execution
Hello Everyone, I hope you guys are doing well. I am sharing a recent issue which I discovered today only. And this is the most instant write-up I have ever…
The Tricky XSS
Hello everyone, I would like to share a riveting issue regarding XSS (Cross-Site Scripting ) I endured a few months ago. Cross-site scripting (XSS) is a type of security vulnerability…
Subdomain takeover via pantheon
I hope you are having a great time, I would like to share an issue which i discovered in less than 10 minutes and got rewarded $XXXX bounty within 24…
An inconsistent CSRF
I discovered Cross-Site Request Forgery (CSRF) issue in one of the bug bounty programs but limited to some easy and simple actions only. After spending a few minutes by browsing…
No Rate limiting eligible for bounty ?
I have seen most of the peoples searching for No rate limiting issue at endpoints like password reset resulting into mass email triggering, SMS triggering or sometimes abusing it for…
Parameter Pollution issue in API resulting $XXX
When it comes regarding API pentesting, I am always eager to test it even though I don’t succeed to find critical issues. It was one of the private programs from…
An unexploited CORS misconfiguration reflecting further issues.
Until and unless an issue or loophole present in the application is not exploited and made impactful in a real-life scenario, the term “vulnerability” doesn’t suit as the perfect noun…
How I acquired $XXX bounty by investing 99 cents
I still remember that exhausting day full of failures which are common for bug bounty hunters whenever you don’t find issues in the application. It was one of the public…
Data smuggling with your clothes
With the rapid growth of technology, the mediums of data transfer are in copious amount. Whether they are an analog, classic or digital method all do have traces which can…