Ssecurity_researcherinsecurity11.hashnode.dev·Jul 3 · 5 min readBreaking Through the Invisible Walls: How JS Recon and Parameter Pollution Exposed Sensitive KYC DataSome of the best vulnerabilities are hidden not in plain sight, but in the dark, forgotten corners of an application. This writeup details the discovery of a logical flaw chain within a project manage00
Ssecurity_researcherinsecurity11.hashnode.dev·Jul 2 · 8 min readPrivilege Escalation to full-admin via Mass Assignment in Team Invitation FlowPrologue – The Temptation It was a rainy Tuesday afternoon, and I had just finished my third cup of coffee. My target for the week was target.com—a sleek, modern team-collaboration platform that promi00
Ssecurity_researcherinsecurity11.hashnode.dev·Jun 26 · 5 min readFrom SSRF to RCE — Extracting AWS Credentials and Achieving Remote Code ExecutionSummary During testing of an AWS-hosted application, I identified a Server-Side Request Forgery (SSRF) issue in a URL-based feature. The application attempted to fetch user-supplied URLs on the server00
