Story of Abusing a Fully Secured redirect_uri in an OAuth FlowWhen it comes to bug hunting, authentication is my first choice. Nowadays, major companies' authentication systems have many implementations and enormous underlying complexity. So when I start testing8 min read·blog.voorivex.team2281AMar 21
Hacking Veeam: Several CVEs and $30k BountiesHacking Veeam exposed vulnerabilities, earning $30k in bounties. Discover bug bounty tips and reverse engineering insights8 min read·blog.voorivex.team4MNCAug 9, 2025
Puny-Code, 0-Click Account TakeoverPuny-code inconsistencies can enable account takeovers by exploiting character parsing vulnerabilities, affecting email servers and databases7 min read·blog.voorivex.team61SSJun 1, 2025
Stealing oAuth Token via Referrer Policy OverrideExplore how referrer leakage can expose OAuth tokens in browser implementations and learn methodologies to protect against token theft4 min read·blog.voorivex.team3MOMMay 6, 2025
From an Android Hook to RCE: $5000 BountyDiscover how reverse engineering led to a $5000 bounty by exploiting a critical vulnerability in a popular Android app15 min read·blog.voorivex.team2HANov 19, 2024
