MAMohammed Arbaaz Shaikhina6z.co·Dec 25, 2022 · 6 min readLessons from a Live Hacking eventI recently participated in a virtual Live Hacking event organized by bugbountyhunter.com. This was my first ever Hackevent and I learned a lot of new things and made a bunch of new friends. I thought I'd share some of my findings and learnings from t...00
MAMohammed Arbaaz Shaikhina6z.co·Oct 2, 2022 · 4 min readExploiting exposed Spring Boot Heapdump endpointWhile testing for bugs on a Vulnerability Disclosure Program, I recently came across a subdomain of the program having an application running on Spring Boot. The application had exposed Spring Boot Actuator endpoints in production, which could lead t...00
MAMohammed Arbaaz Shaikhina6z.co·Nov 6, 2021 · 5 min readLearning how to hack AEM Web AppsI had to cancel my Diwali vacation plan for some reason. Now, I had 10 days off work not knowing what to do. So, I decided to jump on Hackerone and practice some hacking to make good use of this time. Luckily, I managed to find six bugs in the first ...01B
MAMohammed Arbaaz Shaikhina6z.co·Jun 13, 2021 · 8 min readTesting Password Reset functionsPassword Reset is one of the most common features in web applications. Every website that requires you to make an account also implements a way to reset your password. And while it is one of the most commonly implemented functions, it is also one of ...01A
MAMohammed Arbaaz Shaikhina6z.co·Jan 30, 2021 · 6 min readWhat is IDN Homograph Attack?Yesterday, I came across an interesting tweet from Simone(@evilsocket on Twitter). In the tweet, he put a link to goᴏgle.com which on clicking, redirects to his Twitter account. Try it, click on the link in this tweet and see where you land up at....03AVF
