The Art of Account Take Over #1: Chaining XSS and non-HttpOnly Session CookieWelcome to my first article in “The Art of Account Takeover” series. I’ll be sharing my journey and insights into various TechniqueNov 28, 2024Nov 28, 2024
OAuth: A Backdoor in Disguise — a $7500 Study CaseIn a recent security assessment, I uncovered two critical vulnerabilities in an application’s authentication system…Oct 14, 2024Oct 14, 2024
Effective XSS methodology : The true way to hunt XSSOK there no need to waste time, i will give you one liner to scan all subdomain then give them to my free API’s, and you can farm XSS…Jul 1, 20247Jul 1, 20247
The Only Methodology you need to Know to earn $$$$ in Bug Bounty in your First DayImagine waking up tomorrow, sipping your morning coffee, and effortlessly discovering vulnerabilities worth thousands of dollars in bug…Jun 30, 20247Jun 30, 20247