Subdomain takeover dew to missconfigured project settings for Custom domain .

Self XSS to Good XSS Clickjacking

Severity : High

Complexity: Easy

Weakness: Cross Site Scripting

• While Testing one of the Private on HackerOne , I Land up on the following page.

https://sub.site.com/app…

How i found a 1500$ worth Deserialization vulnerability

Note before you start.

This is not a so called “great writeup”. I m writing this because many of you were In-boxing/messaging me for writeup ,so here it is .

How I got a 1,999₹ worth jersey for 1₹ ?

If you know me at all, then you must know I am a huge fan of CSK (Chennai Super King) the cricket franchise in India, and now that they have had qualified for the playoffs I had to buy their jersey and support them with all I can. Well, that and I had a…

Bug Bounty Toolkit

Last updated: 8th September 2018

Bug bounty platforms and programs

How we got into your PMMS accounts

Note: This post is purely for educational purpose, our motive is never to show wrong usage of this…

How I hacked hundreds of companies through their helpdesk

How I Bypassed Facebook Profile Picture Guard Security.

Something pretty similar happened with me also. I reported critical issues to my university and all I got was a warning to be expelled out of the University. Still guess what they still didn’t fixed any of the issues. 🙂

What will happen if you try to bring innovation in GTU diploma colleges !!!

Hello there! I am smit thakkar, full stack developer and co-founder of Punchit.io . I am a 16 year-old 4th semester Diploma engineering student. From the first day start proving the words of Albert…