Bilal Researcher – Medium

Bilal Researcher

Bilal Researcher

BugBounty WriteUp — Creative thinking is our everything (Race Condition + Business Logic Error)

So hello everyone! My name is Bilal and this is the happy story of combining two vulnerabilities.

2d ago

BugBounty WriteUp — Creative thinking is our everything (Race Condition + Business Logic Error)

2d ago

Bilal Researcher

Bug Bounty Writeup: $2500 Reward for Session Hijack via Chained Attack

A detailed Bug Bounty Writeup explaining a session hijack vulnerability that was exploited using Cross-Site Scripting (XSS), coupled with a…

2d ago

Bug Bounty Writeup: $2500 Reward for Session Hijack via Chained Attack

2d ago

Bilal Researcher

How Automation Detected Default Admin Credential Worth $500

Hello hackers, I am back with a new bug bounty write-up. In this blog, I am going to show how my automation discovered default admin…

2d ago

How Automation Detected Default Admin Credential Worth $500

2d ago

Bilal Researcher

Accessing deleted comment for $$: A Bug Bounty Writeup

Hello hackers, I am back with a new bug bounty write-up. In this blog, I am going to show how I was able to access deleted comments on a…

2d ago

Accessing deleted comment for $$: A Bug Bounty Writeup

2d ago

Bilal Researcher

PII Disclosure Worth $750

Hello hackers, I am back with a new bug bounty write-up. In this blog, I am going to show how I found PII disclosure. The company is having…

2d ago

PII Disclosure Worth $750

2d ago

Bilal Researcher

All About JavaScript Analysis For Bug Bounty Hunting

JavaScript :

3d ago

3d ago

Bilal Researcher

921$ Privilege Escalation: Unauthorized User Addition to Shared APP Connections

This article is about a bug which i founded in nov. of last year which allow an low level and unauthorized user to add a new user in shared…

3d ago

921$ Privilege Escalation: Unauthorized User Addition to Shared APP Connections

3d ago

Bilal Researcher

500$: MFA bypass By Race Condition

The article is about a bug I found when I was trying to break the other logic in the software. But instead i founded a way to bypass the…

3d ago

500$: MFA bypass By Race Condition

3d ago

Bilal Researcher

The UI Slip I Hit 750$: UI Manipulation Leading to Unauthorized Permission Changes

Discover how an U.I mistake allowed unauthorized permission changes in Private Program and bypass the membership requirements. Learn the…

3d ago

The UI Slip I Hit 750$: UI Manipulation Leading to Unauthorized Permission Changes

3d ago

Bilal Researcher

1500$: CR/LF Injection

Hi Everyone, How you all doing. In this article, I’m going to talk about a CR/LF bug I discovered in an private program which i m going to…

3d ago

1500$: CR/LF Injection

3d ago

Bilal Researcher

Bilal Researcher

Cybersecurity Consultant | Pentester | Bug Bounty Hunter | ContentWriter 🔗 Connect with me on x.com/bilalresearcher and linkedin.com/in/bilalresearcher/

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams