Git Exposure: How a Simple Oversight Led to a Critical Security FlawIn my recent exploration of web applications, I came across a significant security issue that I believe deserves attention. This discovery involved a popular application responsible for managing various user services. While I can't divulge the applic...Aug 12, 2024 · 2 min readblog.lohigowda.in
Securing the Cloud: From S3 Credentials to RDS Database AccessI recently went on a bit of adventure with an application used for webinar and 1:1 meetings. It's a start-up based in Bangalore, and guess what? It ended with me accessing the RDS database! Let me take you through how it all happened. Discovering the...1PApr 18, 2024 · 3 min readblog.lohigowda.in
Unveiling CVE-2024–0953: Firefox iOS Open Redirect VulnerabilityMy recent encounter with a bug in the Firefox iOS app led to the assignment of CVE-2024–0953. This blog post narrates the journey of uncovering this vulnerability As QR codes become more popular in today’s digital age, it’s essential to ensure that t...Feb 6, 2024 · 1 min readblog.lohigowda.in
How I Got Free Travel on Namma MetroAs someone who uses public transportation regularly, I rely on it to get me where I need to go quickly and efficiently. That’s why I was surprised to learn that I could travel for free on Namma Metro due to a critical bug that I discovered. Namma Met...Mar 16, 2023 · 2 min readblog.lohigowda.in
Securing Cloudflare: Addressing the Password Policy Bypass IssueAfter a small break on bug bounty, I started hunting on the Cloudflare Bug Bounty program. This write-up is about the Password Policy Restriction Bypass. Almost Every organization follows a strong password policy on their application. Sometimes It de...Sep 30, 2022 · 2 min readblog.lohigowda.in
