Nothing here yet.
Nothing here yet.
Sep 23, 2024 · 7 min read · In the name of Allah Hi guys, I’m here again, YoungVanda. In this write-up, I’m gonna talk about Meteor Subdomain Takeover. From a simple recon to one of the trickiest exploitations of my life 😉 In this write-up, I explained everything from the beg...
Join discussion
Nov 17, 2023 · 4 min read · In the name of Allah Hi guys, I’m YoungVanda and in this write-up I wanna talk about how I monitor BBPs (Bug Bounty Programs) + Introducing you to a new made private tool. The Mindset What would’ve happened if you were the first hunter working on a t...
Join discussion
Nov 3, 2023 · 3 min read · In the name of Allah Hi guys, I'm YoungVanda and in this write-up, I’m gonna explain my own approach towards Swagger XSS and why I don’t use the Nuclei template ( swagger-api.yaml) ;d The Entire Flow 1. Find as many subdomains as possible 2. cat all_...
Join discussion
Oct 31, 2023 · 3 min read · In the Name of Allah Hi guys, I'm YoungVanda and in this write-up, I wanna talk about my own methodology for finding Grafana admin panel and how I was able to get full access. Let’sssssssssssssssssss Gooooooooooooooooooo 🔥🔥🧨🧨(Just Vibing 😂) My...
Join discussion