I’m going to talk about a common and strange password reset system that I have seen many times in Bug Hunting and in many VAPT projects. and in many cases this system opens the door to attacker to…

Hey Folks! Hope you guys are doing great.

This article is about an account takeover vulnerability I found on Instagram that allows anyone to hack Instagram accounts without consent permission. Facebook and Instagram security team fixed the issue and rewarded me $10000 as a part of their bounty program. …

All about Password reset configurations

In this article, we will discuss Remote Code Execution (RCE) vulnerability, how to find one and present 25 disclosed reports based on this

Before I began to comprehend the complex science of information security, it seemed to me that Two-Factor Authentication is a guaranteed…

Web CTF CheatSheet 🐈. Contribute to w181496/Web-CTF-Cheatsheet development by creating an account on GitHub.

This is a story of a typical xp_cmdshell giving a RCE which is blind due to some restrictions and how I bypassed those restrictions.

Report created by importer

In this post, I would like to share a binary exploitation example from PicoCTF-2018 called got-2-learn-libc.

This is the writeup of Modern Binary Exploitation course by RIPSEC.

And how printing a string led to code execution?!!

This is the writeup of Modern Binary Exploitation course by RIPSEC.

The HTML5 Herald