bugbounty finding writeups.
In the world of user authentication, ensuring that email addresses are properly validated and managed is crucial. But what happens when an attacker can abuse a third-party authentication system to "reserve" someone else's email, effectively blocking ...
Introduction Sometimes, the most interesting vulnerabilities aren’t the flashy ones — they’re the sneaky, almost accidental bugs that show just how broken the logic behind a system can be. This is one such story where a "simple" password change page ...
The Bug I found a weird issue with the platform’s account deletion flow: When a user deletes their account, their added email addresses were not removed from the system. If the user tried to sign up again using the same email, they couldn’t — the s...
The Bug Found a critical account takeover in a web application’s registration flow.The platform allowed creating the same account (same email) from a different session, even though the account already existed. Step-by-Step PoC Create account with em...
The app can be launched by any other app because its deeplink activity is exported=true. Adb exploit adb shell am start -a android.intent.action.VIEW -n com.redacted.android/"com.redacted.activities.DeepLinkActivity" -d "https://evil.com" Apk Exploi...
Endpoint Requesting an otp but problem is there is no rate limiting. We can request unlimited otp’s. I crafted A ffuf Request to make it fast and easier Exploit.sh #! /bin/bash seq 1 9999 | ffuf -u https://sub.redacted.com/api/v2/otp \ -H 'accessTo...
Description : Attacker can able to delete any file with vulnerable endpoint ..! Endpoint : POST /u/4/deleteShareable?appVersion=20190926_020020 HTTP/1.1 Host: datastudio.google.com Connection: close Content-Length: 54 Sec-Fetch-Mode: cors Origin: htt...
Login with leaked credentials (But how to find the leaked credentials of the specific company 🤔? ) - How to get the plain text passwords of the compa
Scan the vulnerabilities here → nmap -v -- script vuln www.hiddendomainname.info dos : nmap -v --script dos www.hiddendomainname.info smtp access : nmap smtp.damnvulnsite.com -pT:587,465,25 -sV --script=smtp-commands Exploit sites having port 22 ...