--- title: "Eib (@Eib) | Hashnode" description: "Bug Bounty Hunter, Breaking web app for fun & profit. Read the latest articles by Eib on Hashnode." url: "https://hashnode.com/@Eib" --- @Eib # Eib @Eib · Fct Abuja, Nigeria · Joined September 2024 Bug Bounty Hunter, Breaking web app for fun & profit ### [Crafting a Full Read SSRF: A Journey Through Oauth DCR, Open URL Redirects, and Path Normalization](https://eib.hashnode.dev/crafting-a-full-read-ssrf-a-journey-through-oauth-dcr-open-url-redirects-and-path-normalization?utm_source=hashnode&utm_medium=feed) The Bug This blog post outlines the chains of multiple gadgets to achieve a full read ssrf on a target. Open Dynamic client registration on the MCP server to create an open redirect gadget Path norm 8 min read · [eib.hashnode.dev](https://eib.hashnode.dev/crafting-a-full-read-ssrf-a-journey-through-oauth-dcr-open-url-redirects-and-path-normalization?utm_source=hashnode&utm_medium=feed) [Apr 6](https://hashnode.com/posts/crafting-a-full-read-ssrf-a-journey-through-oauth-dcr-open-url-redirects-and-path-normalization/69d3decf40c9cabf444e5b64) ### [Building a custom JS monitoring tool with no coding knowledge using AI](https://eib.hashnode.dev/building-a-custom-js-monitoring-tool-with-no-coding-knowledge-using-ai?utm_source=hashnode&utm_medium=feed) Background I had a very interesting JavaScript-heavy target I was working on, which was built using a microservice architecture. The main domain contains a lot of sub-apps, so doing subdomain enumeration did not result in any significant success othe... 7 min read · [eib.hashnode.dev](https://eib.hashnode.dev/building-a-custom-js-monitoring-tool-with-no-coding-knowledge-using-ai?utm_source=hashnode&utm_medium=feed) [Feb 16](https://hashnode.com/posts/building-a-custom-js-monitoring-tool-with-no-coding-knowledge-using-ai/69933a857b9e8e48b47ecf47) ### [Full Read SSRF in a PDF generation feature to read data from Internal domains](https://eib.hashnode.dev/full-read-ssrf-in-a-pdf-generation-feature-to-read-data-from-internal-domains?utm_source=hashnode&utm_medium=feed) The Bug The bug is a server-side request forgery vulnerability in a PDF generation feature that enabled me to read data from internal domains that are not publicly reachable The Journey I’ve been working on this application for three months now, and ... 6 min read · [eib.hashnode.dev](https://eib.hashnode.dev/full-read-ssrf-in-a-pdf-generation-feature-to-read-data-from-internal-domains?utm_source=hashnode&utm_medium=feed) [Feb 7](https://hashnode.com/posts/full-read-ssrf-in-a-pdf-generation-feature-to-read-data-from-internal-domains/6987515347f4884f66ca7d1c) ### [SSRF to read data from internal domains](https://eib.hashnode.dev/ssrf-to-read-data-from-internal-domains?utm_source=hashnode&utm_medium=feed) server side request forgery 7 min read · [eib.hashnode.dev](https://eib.hashnode.dev/ssrf-to-read-data-from-internal-domains?utm_source=hashnode&utm_medium=feed) [Oct 28, 2025](https://hashnode.com/posts/ssrf-to-read-data-from-internal-domains/6900d424404abb5ee3432db0) ### [Bypassing Cloudflare WAF with comma symbol to gain RCE using a file upload vulnerability (Ethiack CTF)](https://eib.hashnode.dev/bypassing-cloudflare-waf-with-comma-symbol-to-gain-rce-using-a-file-upload-vulnerability-ethiack-ctf?utm_source=hashnode&utm_medium=feed) cloudflare bypass file upload bug bounty 7 min read · [eib.hashnode.dev](https://eib.hashnode.dev/bypassing-cloudflare-waf-with-comma-symbol-to-gain-rce-using-a-file-upload-vulnerability-ethiack-ctf?utm_source=hashnode&utm_medium=feed) [Sep 7, 2025](https://hashnode.com/posts/bypassing-cloudflare-waf-with-comma-symbol-to-gain-rce-using-a-file-upload-vulnerability-ethiack-ctf/68bd9e10ff464908ef306af7)