QWERTY Sec

Account takeover in cups.mail.ru

In this year April 1, I quit my job due to some reason and so I can spend some times in Hackerone. I stopped finding bugs in 2018 because I have insecurity for my skills and I feels I don’t have enough skill set to deep dive into full-time bug hunting and so I tried to…

Story of stealing mail conversation, contacts in mail.ru and myMail iOS applications via XSS

How I get started into Threat Hunting

Last two years ago, as a final year student, I was doing internship at one of the leading…

Threat Hunting Diary Part 1- Hunting Mimikatz

This is my very first post about threat hunting series in medium. Please keep…

Stored XSS in Microsoft outlook

Copy from one of my 2018 blog post.

Stored XSS in Yahoo mail IOS app($3500)

Copy from one of my 2018 blog post.

Intro

I want to share about my easy finding in Yahoo mail IOS application, easy but worth $3500.

Lesser Known Web Attack(LKWA) Lab Walk-through

0x0A — Introduction

PostMessage vuln, what is it?

Nowadays JavaScript becomes very popular and application can write with only JavaScript. I want to share…

iOS Outlook Stored XSS Write-Up($3000)

Staying home is really nightmare for me and I am so boring to learn new things. So, I…