Rojan RijalSource Code Analysis in YSurvey — Luminate bugThis is going to be a really short bug and also an example of why you should do source code analysis when applicable.2 min read·Apr 10, 2018--2--2
Rojan RijalH1–212 CTF WriteupThis blog post is a writeup of the CTF published by HackerOne to select top three hackers for the h1–212 event held at NYC on December 9…3 min read·Nov 20, 2017----
Rojan RijalLuminate Internal Privilege Escalation — Admin to OwnerThis is continuation of series of write-ups that will be posted regarding vulnerabilities found in Yahoo while participating in Yahoo’s bug…3 min read·Sep 21, 2017----
Rojan RijalThis domain is my domain — G Suite A record vulnerabilityIn part two of G Suite vulnerability discussion, I am writing about a simple but quite serious vulnerability in yet another part of G Suite…4 min read·Sep 20, 2017----
Rojan RijalDeveloper Luminate IDORContinuing on my work in Yahoo’s bug bounty program, another app i tested was: Luminate Developer app. In this application, I can create…2 min read·Aug 30, 2017----
Rojan RijalLuminate Store Basics defacement and potential takeoverThis vulnerability was found when testing the Stores Basic service of Luminate. In this service, we can create a store from where we can…3 min read·Aug 30, 2017----
Rojan RijalHack more, learn more, earn more and get invited more.This blog is not a writeup for a bug but instead is something that all hackers should know when they are reporting a bug. All platform like…7 min read·Aug 27, 2017----
Rojan RijalMind Reader Challenge — Google CTFThis is writeup for Google CTF challenge: “Mind Reader”.4 min read·Jun 19, 2017----
Rojan RijalInvestigating Zomato & Edmodo HackOn the day of May 17, 2017 Zomato came public with the information that their database was breached and about 7 million user information…4 min read·May 19, 2017----
Rojan RijalI got emails — G Suite VulnerabilityAfter recent finding about Uber and SendGrid bug, I decided to check other third party applications that were also used for similar cases…2 min read·May 5, 2017----