YYoungVandainyoungvanda.hashnode.dev·Sep 23, 2024 · 7 min readMeteor Subdomain TakeoverIn the name of Allah Hi guys, I’m here again, YoungVanda. In this write-up, I’m gonna talk about Meteor Subdomain Takeover. From a simple recon to one of the trickiest exploitations of my life 😉 In this write-up, I explained everything from the beg...00
YYoungVandainyoungvanda.hashnode.dev·Nov 17, 2023 · 4 min readThe Art of Monitoring Bug Bounty ProgramsIn the name of Allah Hi guys, I’m YoungVanda and in this write-up I wanna talk about how I monitor BBPs (Bug Bounty Programs) + Introducing you to a new made private tool. The Mindset What would’ve happened if you were the first hunter working on a t...00
YYoungVandainyoungvanda.hashnode.dev·Nov 3, 2023 · 3 min readSwagger XSS Mass HuntingIn the name of Allah Hi guys, I'm YoungVanda and in this write-up, I’m gonna explain my own approach towards Swagger XSS and why I don’t use the Nuclei template ( swagger-api.yaml) ;d The Entire Flow 1. Find as many subdomains as possible 2. cat all_...00
YYoungVandainyoungvanda.hashnode.dev·Oct 31, 2023 · 3 min readMy Second VDP Bug Went Critical: Grafana Admin Panel BypassIn the Name of Allah Hi guys, I'm YoungVanda and in this write-up, I wanna talk about my own methodology for finding Grafana admin panel and how I was able to get full access. Let’sssssssssssssssssss Gooooooooooooooooooo 🔥🔥🧨🧨(Just Vibing 😂) My...00
