Lessons from a Live Hacking eventI recently participated in a virtual Live Hacking event organized by bugbountyhunter.com. This was my first ever Hackevent and I learned a lot of new things and made a bunch of new friends. I thought I'd share some of my findings and learnings from t...Dec 25, 2022 · 6 min reada6z.co
Exploiting exposed Spring Boot Heapdump endpointWhile testing for bugs on a Vulnerability Disclosure Program, I recently came across a subdomain of the program having an application running on Spring Boot. The application had exposed Spring Boot Actuator endpoints in production, which could lead t...Oct 2, 2022 · 4 min reada6z.co
Learning how to hack AEM Web AppsI had to cancel my Diwali vacation plan for some reason. Now, I had 10 days off work not knowing what to do. So, I decided to jump on Hackerone and practice some hacking to make good use of this time. Luckily, I managed to find six bugs in the first ...1BNov 6, 2021 · 5 min reada6z.co
Testing Password Reset functionsPassword Reset is one of the most common features in web applications. Every website that requires you to make an account also implements a way to reset your password. And while it is one of the most commonly implemented functions, it is also one of ...1KJun 13, 2021 · 8 min reada6z.co
What is IDN Homograph Attack?Yesterday, I came across an interesting tweet from Simone(@evilsocket on Twitter). In the tweet, he put a link to goᴏgle.com which on clicking, redirects to his Twitter account. Try it, click on the link in this tweet and see where you land up at....3AVSJan 30, 2021 · 6 min reada6z.co
