---
title: "shemkar (@shemkar) | Hashnode"
description: "shemkar (@shemkar) writes on Hashnode. Read their latest articles and follow their work."
url: "https://hashnode.com/@shemkar"
---

@shemkar

# shemkar

@shemkar · Joined February 2026

### [One Extra JSON Key: How a Harmless Profile Endpoint Became an ATO Candidate](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed)

A real bug bounty lesson about mass assignment, impact proof, and learning from weak reports.

6 min read · [shemkar.hashnode.dev](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed)

[Apr 26](https://hashnode.com/posts/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate/69ee7c173d6a492cdd4ecfcd)