MS17-010🛡️How I Discovered an RCE Vulnerability in Tesla, Securing a $10,000 BountyMyself: I am Raguraman , Security Researcher 🛡️ | Bug Hunter | CTF Player | Secured @ Tesla,Apple,Amazon,Oracle & moreDec 24, 202322Dec 24, 202322
In2023 OWASP Top 10byAdam DrydenBroken Object Property Level AuthorizationIn this fourth blog post of our 2023 OWASP Top 10 series, we will explore one of the most common and dangerous vulnerabilities in web…Apr 2, 2023Apr 2, 2023
Abdelrhman Allam (sl4x0)How I found XSS on Admin Page without login!IntroductionJan 22, 202311Jan 22, 202311
ShamimahamedAccount Takeover with rate limit bypassHi guys, I’m Shamim Ahamed . It’s my first bug bounty write-up about my valid bug which could have allowed a malicious user to take over…Mar 18, 20232Mar 18, 20232
InSystem WeaknessbysnoopySQL Injection + RCE | How I got a shell on my university websiteHi wonderful hackers.Feb 21, 202310Feb 21, 202310
ShuttlerTechBlind XSS Execution From Feedback Form (Finding Can give you $1000+ Bounty)Hello, Hunters. I know You are here because you are struggling or want to advance in your career. Believe me, things take time. Be…Feb 23, 20233Feb 23, 20233
ShuttlerTechResponse Manipulation & Got 200+K PII Data & (Can give upto $4000+ Bounty)Priviledge Escalation to Admin Dashboard to account takeover & PII Access how this happened and making low level Vulnerability to Critical…Feb 27, 2023Feb 27, 2023
ShuttlerTechOTP Bypass Using Tricky WayIn today’s world, everything we do on the internet requires Authentication.Feb 10, 20232Feb 10, 20232
InInfoSec Write-upsbyRavaanGauing+Nuclei for Instant BountiesBack again with the instant bounties series. Last time we learned how to score instant bounties with Google dorks so check that out if you…Jul 17, 20229Jul 17, 20229