Hacking

How I made $31500 by submitting a bug to Facebook

How did I found SSRF in Facebook — the story of my…

Analyzing WhatsApp Calls with Wireshark, radare2 and Frida

Problems I have faced in Bug Bounty

This is my second blog about #bugbounty. You can check out my first blog that is full of…

How I leveraged an interesting CSRF vulnerability to turn self XSS into a persistent attack?

From CRLF to Account Takeover

At the beginning of March,while researching one site I discovered the…

Using Hydra to Spray User Passwords

How attackers bypass account lockout when brute-forcing passwords

Using a Password Manager to Secure Your Accounts

Installing and using the KeePassXC password manager

Bypassing WAF to perform XSS

Recently I was hunting for some XSS and I come up to a website (lets call it website.com for privacy reason)…

Tale of my First XSS

Hi guys, So I would like to start this blog with a question, What was the first vulnerability you learnt when you began…

Information disclosure and reflected XSS on Tokopedia