Bilal ResearcherBugBounty WriteUp — Creative thinking is our everything (Race Condition + Business Logic Error)So hello everyone! My name is Bilal and this is the happy story of combining two vulnerabilities.2d ago2d ago
Bilal ResearcherBug Bounty Writeup: $2500 Reward for Session Hijack via Chained AttackA detailed Bug Bounty Writeup explaining a session hijack vulnerability that was exploited using Cross-Site Scripting (XSS), coupled with a…2d ago2d ago
Bilal ResearcherHow Automation Detected Default Admin Credential Worth $500Hello hackers, I am back with a new bug bounty write-up. In this blog, I am going to show how my automation discovered default admin…2d ago2d ago
Bilal ResearcherAccessing deleted comment for $$: A Bug Bounty WriteupHello hackers, I am back with a new bug bounty write-up. In this blog, I am going to show how I was able to access deleted comments on a…2d ago2d ago
Bilal ResearcherPII Disclosure Worth $750Hello hackers, I am back with a new bug bounty write-up. In this blog, I am going to show how I found PII disclosure. The company is having…2d ago2d ago
Bilal Researcher921$ Privilege Escalation: Unauthorized User Addition to Shared APP ConnectionsThis article is about a bug which i founded in nov. of last year which allow an low level and unauthorized user to add a new user in shared…3d ago3d ago
Bilal Researcher500$: MFA bypass By Race ConditionThe article is about a bug I found when I was trying to break the other logic in the software. But instead i founded a way to bypass the…3d ago3d ago
Bilal ResearcherThe UI Slip I Hit 750$: UI Manipulation Leading to Unauthorized Permission ChangesDiscover how an U.I mistake allowed unauthorized permission changes in Private Program and bypass the membership requirements. Learn the…3d ago3d ago
Bilal Researcher1500$: CR/LF InjectionHi Everyone, How you all doing. In this article, I’m going to talk about a CR/LF bug I discovered in an private program which i m going to…3d ago3d ago