Ali Hussainzada (@koalasec)

I Passed HTB CPTS: My Journey, Exam Experience, and Honest Review

Hello, cybersecurity homies! In this article, I’m going to talk about the Certified Penetration Testing Specialist (CPTS) certification, share my personal experience, and give you my honest review. Yo

Sep 15 · 7 min readkoalasec.hashnode.dev

eWPTX Exam Review: My First Certification Experience

Hello folks, In this article, I will write about my very first cybersecurity certification and give you my review of it. I am not sure to what extent I can talk and write about it, but I will try my b

4Jun 15 · 3 min readkoalasec.hashnode.dev

Stored XSS leads to Zero-Click Account Takeover

Hey, yolo guys! Long time no chat! As we already know, bug bounty is a scam (just kidding 🙂). I recently started doing penetration testing for startups in my country. In this case, it was an online marketplace, where I discovered eight security vuln...

Jan 3 · 4 min readkoalasec.hashnode.dev

How a Second-Order IDOR Lets You Delete Other Users’ Posts, Profile Picture, and Cover Photo

Hey Geeks, It was a cool bug, so let’s skip the formalities and dive straight in. So, the target was a social media application, pretty standard stuff. Users could upload profile pictures, cover photos, and post images. For obvious confidentiality re...

1Nov 2, 2025 · 4 min readkoalasec.hashnode.dev

From LaTeX Injection to RCE: A Real Bug Bounty Case

Hello Friends It’s been two months since I took a break from bug bounty hunting. During that time, I graduated from university 🎓, recharged, and now I’m officially back in the game. And guess what? Within just a few days of returning, I landed a cri...

2Aug 25, 2025 · 3 min readkoalasec.hashnode.dev

Ali Hussainzada

About

Available for

Ali Hussainzada's blogs

I Passed HTB CPTS: My Journey, Exam Experience, and Honest Review

eWPTX Exam Review: My First Certification Experience

Stored XSS leads to Zero-Click Account Takeover

How a Second-Order IDOR Lets You Delete Other Users’ Posts, Profile Picture, and Cover Photo

From LaTeX Injection to RCE: A Real Bug Bounty Case

Ali Hussainzada

About

Available for

Ali Hussainzada's blogs

I Passed HTB CPTS: My Journey, Exam Experience, and Honest Review

eWPTX Exam Review: My First Certification Experience

Stored XSS leads to Zero-Click Account Takeover

How a Second-Order IDOR Lets You Delete Other Users’ Posts, Profile Picture, and Cover Photo

From LaTeX Injection to RCE: A Real Bug Bounty Case

Ali Hussainzada

About

Available for

Ali Hussainzada's blogs

I Passed HTB CPTS: My Journey, Exam Experience, and Honest Review

eWPTX Exam Review: My First Certification Experience

Stored XSS leads to Zero-Click Account Takeover

How a Second-Order IDOR Lets You Delete Other Users’ Posts, Profile Picture, and Cover Photo

From LaTeX Injection to RCE: A Real Bug Bounty Case

Search Hashnode

Ali Hussainzada

About

Available for

Ali Hussainzada's blogs

I Passed HTB CPTS: My Journey, Exam Experience, and Honest Review

eWPTX Exam Review: My First Certification Experience

Stored XSS leads to Zero-Click Account Takeover

How a Second-Order IDOR Lets You Delete Other Users’ Posts, Profile Picture, and Cover Photo

From LaTeX Injection to RCE: A Real Bug Bounty Case