From Github Recon To Account Takeover
Hi everyone , after a long time I am doing a write-up on GitHub recon which leads to full account takeover . Few days ago I got a private invite whe…
About Me
Information disclose
How I Was Able To Takeover All User Account And Admin Panel
Hi everyone, This is my last write-up of 2018, so 6 months ago I got the invite from a Hackerone private program, the program has a huge scope, so …
How I Hacked Invision Projects
Hi guys This bug is a simple sensitive Information Disclosure so lets start So in invision there is functionality where a user can share a pr…
Accepting Project Invitation On Behalf of Any user Of Mavenlink (User impersonation)
While testing Mavenlink I got a simple Information disclosure by which and user can accept a project invite without accessing the user mailbox …