Home
Feed

Extend

Hashnode Pro
Hashnode for Agents

Resources

The foreword
Hashnode gql skill

Buildful - AI coding agent that delivers frontier-level results at a fraction of the cost Bug0 - The AI-native e2e QA regression testing Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Sign in

@SajanGhimire

Sajan Ghimire

@SajanGhimire·Nepal·Joined September 2024

> Exploring web vulnerabilities - Breaking things (ethically)🙂

About

> Exploring web vulnerabilities - Breaking things (ethically)🙂

Available for

>Detailed technical reviews, >Penetration Testing, >Security Consulting

Sajan Ghimire's blogs

Untitled Publicationsajanghimire.hashnode.dev2 posts

Articles Comments

2FA broken logic

This lab's two-factor authentication is vulnerable due to its flawed logic. To solve the lab, access Carlos's account page. Your credentials: wiener:peter Victim's username: carlos Analysis: Step 1: Observing the Authentication Process The first...

Mar 21, 2025 · 4 min readsajanghimire.hashnode.dev

Exploiting Business Logic: Bypassing Client-Side Controls to Manipulate Pricing

Step 1: Log in to the Application Open the lab in your browser. Log in using the provided credentials: Username: wiener Password: peter Navigate to the product page and locate the "Lightweight l33t leather jacket". Step 2: Add the Jacket to...

Mar 20, 2025 · 3 min readsajanghimire.hashnode.dev

About

> Exploring web vulnerabilities - Breaking things (ethically)🙂

Available for

>Detailed technical reviews, >Penetration Testing, >Security Consulting

Sajan Ghimire's blogs

Untitled Publicationsajanghimire.hashnode.dev2 posts

Search Hashnode

Search posts, tags, users, and pages

@SajanGhimire

Sajan Ghimire

@SajanGhimire·Nepal·Joined September 2024

> Exploring web vulnerabilities - Breaking things (ethically)🙂

About

> Exploring web vulnerabilities - Breaking things (ethically)🙂

Available for

>Detailed technical reviews, >Penetration Testing, >Security Consulting

Sajan Ghimire's blogs

Untitled Publicationsajanghimire.hashnode.dev2 posts

Articles Comments

2FA broken logic

This lab's two-factor authentication is vulnerable due to its flawed logic. To solve the lab, access Carlos's account page. Your credentials: wiener:peter Victim's username: carlos Analysis: Step 1: Observing the Authentication Process The first...

Mar 21, 2025 · 4 min readsajanghimire.hashnode.dev

Exploiting Business Logic: Bypassing Client-Side Controls to Manipulate Pricing

Step 1: Log in to the Application Open the lab in your browser. Log in using the provided credentials: Username: wiener Password: peter Navigate to the product page and locate the "Lightweight l33t leather jacket". Step 2: Add the Jacket to...

Mar 20, 2025 · 3 min readsajanghimire.hashnode.dev

About

> Exploring web vulnerabilities - Breaking things (ethically)🙂

Available for

>Detailed technical reviews, >Penetration Testing, >Security Consulting

Sajan Ghimire's blogs

Untitled Publicationsajanghimire.hashnode.dev2 posts