Two Factor Authentication Bypass On Facebook

Summary: I discovered the lack of rate-limiting issue in instagram which could have allowed an attacker to bypass two factor authentication on facebook by confirming the targeted user’s already-confirmed facebook mobile number using the Meta Accounts…

OWASP KTM 0x03 CTF writeup

Hi there! I hope you're all having a good time. Don’t forget to stay hydrated ❤ Today’s writeup is about how we…

How I Hacked 100K+ Godaddy Users And Help To Secure For Free

Introduction:

IDOR Vulnerability: Deleting Website Content Without Admin Access

Disclosing assigned users of any facebook applications connected to business account

During the Mid-April 2021, I found a very new looking UI of Facebook Business Suite in one of my test facebook account. So, within a second I found new business assets sections added…

Deserilaization Disaster in PHP

What really is serialization?

HacktheBox: Soccer Writeup

Hey everyone, I wanted to share my experience doing the HackTheBox machine “Soccer”, which is rated as an “easy”…

PharmingAttack| Type | Working | Implications| Detecting| Preventing|

Imagine innocently typing URL of your banking portal and being redirected to an identical looking fraudulent website. Before you know it, you’re a victim of Pharming attack. It’s a stealthy cybercriminal…