CHANGE
LOG

Chained OS command injection with privilege escalation to achieve full remote code execution on a production target. Includes payload crafting and post-exploitation notes.

Abused flawed hotel booking logic to obtain subscriptions at $0 and trigger unauthorized discounts across booking flows.

Leveraged mass assignment flaw to escalate privileges and exfiltrate the entire production database via crafted API payloads.

Bypassed multiple WAF rules in a financial app to exploit SQLi and exfiltrate the database. Includes bypass techniques and enumeration approach.

Exploited price parameter tampering to purchase products and services below listed cost, bypassing server-side validation.

Demonstrated full account takeover in a financial web app by exploiting weak session storage implementation and token reuse.

Discovered and exploited DLL hijacking in a widely-used business automation product, leading to persistent RCE on Windows targets.

Deep-dive reference guide covering insecure deserialization concepts, identification techniques, and exploitation across multiple frameworks.

Exploited IDOR to access and enumerate other users' linked bank accounts in a fintech application with no authorization checks on object references.

Identified API security misconfiguration leading to exposure of thousands of PII records with no authentication required on sensitive endpoints.

Exploited time-based blind SQLi to enumerate and exfiltrate the full database. Covers detection, manual exploitation, and automation with sqlmap.

Uncovered and responsibly disclosed a large-scale subdomain takeover vulnerability using automated enumeration with subzy across a large target's external attack surface.

Step-by-step guide to jailbreaking iPhone and configuring a full dynamic analysis environment for iOS application security testing.

Intercepted and manipulated server responses to bypass authentication logic and take over targeted user accounts.

Discovered reflected cross-site scripting vulnerability in a public program, bypassing client-side filters via payload encoding.