@d1pakda5

Introduction To Smart Contract Auditing: Why It's Important

Apr 22, 2023 · 8 min read · Smart contracts are self-executing contracts that are coded with specific conditions, rules, and terms. They are built on blockchain technology, which allows for a decentralized and transparent way of executing agreements. Smart contracts work by aut...

How I Found SSRF In Choreo's REST API Proxy

Aug 16, 2022 · 4 min read · So one night I was looking for some external bug bounty programs. Then I found WSO2 Security Reward and Acknowledgement Program. Within the scope of the program was a product called Choreo. So Choreo is a digital innovation platform that allows you t...

Mylabs COVID-19 Antigen Test Can Cost You Your PII Data

Jun 17, 2021 · 2 min read · So 2 weeks ago I am having cough and cold and I am about to get vaccinated. So I though to get COVID tested before vaccination. Then I got to know that there is a covid-19 antigen test kit available by mylabdiscoverysolutions. Which provides an mobil...

Buying A Gift Can Cost You Your PII Data

Jun 2, 2020 · 1 min read · Almost 1 year ago I reported one PII Data leak to Winni Bug Bounty Program. After 20+ follow up mail I am disclosing the issue though Winni team fixed the issue silently without responding back. So the issue is a pretty straight forward IDOR...

From Github Recon To Account Takeover

Aug 24, 2019 · 2 min read · Hi everyone , after a long time I am doing a write-up on GitHub recon which leads to full account takeover . Few days ago I got a private invite where the in-scope target is only the mobile app. As its a private program we will take it as Example App...