oXnoOneXoA story of a nice SSRF vulnerability.Hello friend, I’ll talk about a SSRF vulnerability i got with my friend Ahmed Elmorsi in a private bug bounty program. I’ll have a quick…Jul 31Jul 31
oXnoOneXoImproper Authentication due to lack of validation of the 2FA processHello Friend, This writeup is about a simple Improper Authentication vulnerability in an API that doesn’t validate if the 2FA process is…Aug 26, 2023Aug 26, 2023
oXnoOneXoCSRF in OAuth flow of a private program.Hello friend, This writeup is about a simple CSRF in a function that’s using OAuth to attach third-party accounts to the user’s dashboard.Aug 11, 20232Aug 11, 20232
oXnoOneXoImproper Authentication in Android App[+] Hello friend, This article will be about a simple Improper Authentication vulnerability that allowed me to bypass the lockout behavior…Mar 10, 2023Mar 10, 2023