Bypass

From Github Recon To Account Takeover

Hi everyone , after a long time I am doing a write-up on GitHub recon which leads to full account takeover . Few days ago I got a private invite whe…

Hi everyone, This is my last write-up of 2018, so 6 months ago I got the invite from a Hackerone private program, the program has a huge scope, so …

Hi everyone, so a few months ago I got the invite from a Hackerone private program, the program has huge scope. So I started my recon process. Foun…

Hi guys This bug is a simple sensitive Information Disclosure so lets start So in invision there is functionality where a user can share a pr…

Here goes The Pocket Android app authentication bypass proof of concept In the app there is a old password validation while changing user name , …