Syed AbuthahirDjango debug mode to RCE in Microsoft acquisitionAs usual I was doing recon using Censys (https://censys.io/) and Shodan (https://www.shodan.io/). I was looking for Django debug mode…Aug 19, 20204Aug 19, 20204
Syed AbuthahirHow was I able to download customer data dumpAs usual starting, I enumerate subdomains of target.com using amass tool and I got bunch of subdomains of target.com, then I visit…May 8, 2020May 8, 2020
Syed AbuthahirSensitive data exposure -geniebelt.com[responsible disclosure]Hi folks, I am back with another writeup about my recent finding. I hope this will help you if you are beginner like me.Apr 5, 20191Apr 5, 20191
Syed AbuthahirHow I takeover subdomain by claim unclaimed s3 bucketHi folks, this is not my first writeup already i wrote a writeup about PHP-CTF and not yet published, I will publish that writeup once…Jan 12, 20191Jan 12, 20191