I work as an instructor and hunter, leading a small team to grow, learn, and innovate.
Nothing here yet.
Mar 21 · 8 min read · When it comes to bug hunting, authentication is my first choice. Nowadays, major companies' authentication systems have many implementations and enormous underlying complexity. So when I start testing
AAdarsh commented
Aug 9, 2025 · 8 min read · Hello, I’m a web guy. Usually, I’m not working on non-web applications since my mind doesn’t know binary and reverse engineering. About one year ago, I started giving myself a shot at working on some macOS applications, and I managed to uncover sever...
MNCTmohammad and 3 more commented
Jun 1, 2025 · 7 min read · Hello! This blog post is a detailed version of the talk given by Amir and me at Nahamcon 2025. We usually choose a topic to focus on, spending time on it - it might turn into a 0day or just a simple checklist. Then we apply our findings to our daily ...
HSCNM13erCheng and 5 more commented
May 6, 2025 · 4 min read · Hello, let’s get straight to the main course. OAuth implementation has many hidden parts that have been discussed before on the internet. The most famous one is Account hijacking using “dirty dancing” in sign-in OAuth-flows, which inspired Omid and l...
MTMMeiad and 2 more commented
Nov 19, 2024 · 15 min read · Hello, today I want to share a research-based story about how I reverse-engineered a famous Android application called MyIrancell. I managed to achieve RCE, reported it to the vendor, and earned a bounty. A few days ago, I received permission from th...
HKheller and 1 more commented
