@YoungVanda

YoungVanda

@YoungVandaJoined October 2023

Bug Hunter & Web App Pentester | 2024 Intigriti Champion | Intigriti 2024 Q1 2nd · Q2 3rd Leaderboard | Intigriti Top 50 Hackers

About

Nothing here yet.

Available for

Nothing here yet.

YoungVanda's blogs

Untitled Publicationyoungvanda.hashnode.dev4 posts

youngvanda.hashnode.devSep 23, 2024 · 7 min read

Meteor Subdomain Takeover

In the name of Allah Hi guys, I’m here again, YoungVanda. In this write-up, I’m gonna talk about Meteor Subdomain Takeover. From a simple recon to one of the trickiest exploitations of my life 😉 In this write-up, I explained everything from the beg...

youngvanda.hashnode.devNov 17, 2023 · 4 min read

The Art of Monitoring Bug Bounty Programs

In the name of Allah Hi guys, I’m YoungVanda and in this write-up I wanna talk about how I monitor BBPs (Bug Bounty Programs) + Introducing you to a new made private tool. The Mindset What would’ve happened if you were the first hunter working on a t...

youngvanda.hashnode.devNov 3, 2023 · 3 min read

Swagger XSS Mass Hunting

In the name of Allah Hi guys, I'm YoungVanda and in this write-up, I’m gonna explain my own approach towards Swagger XSS and why I don’t use the Nuclei template ( swagger-api.yaml) ;d The Entire Flow 1. Find as many subdomains as possible 2. cat all_...

youngvanda.hashnode.devOct 31, 2023 · 3 min read

My Second VDP Bug Went Critical: Grafana Admin Panel Bypass

In the Name of Allah Hi guys, I'm YoungVanda and in this write-up, I wanna talk about my own methodology for finding Grafana admin panel and how I was able to get full access. Let’sssssssssssssssssss Gooooooooooooooooooo 🔥🔥🧨🧨(Just Vibing 😂) My...

YoungVanda

About

Available for

YoungVanda's blogs

Meteor Subdomain Takeover

The Art of Monitoring Bug Bounty Programs

Swagger XSS Mass Hunting

My Second VDP Bug Went Critical: Grafana Admin Panel Bypass

Search Hashnode

YoungVanda

About

Available for

YoungVanda's blogs

Meteor Subdomain Takeover

The Art of Monitoring Bug Bounty Programs

Swagger XSS Mass Hunting

My Second VDP Bug Went Critical: Grafana Admin Panel Bypass