Mar 25 · 4 min read · Assalamualaikum, my name is Syarif Muhammad Sajjad, also known as syarif07 on HackerOne. In this writeup, I’ll walk through one of my findings that was assigned CVE-2025-14812, a high-severity vulnera
Join discussionMar 23 · 6 min read · In Part 1, I followed a packet from my browser to a server.In Part 2, I understood where networks become vulnerable. Everything started making sense. But one question kept bothering me: How do attacke
Join discussion
Mar 21 · 2 min read · This was my first ever valid bug bounty report through a VDP, and it got marked High severity. It was also not a duplicate, so for me this was a huge win. One thing I had heard a lot in bug bounty is
Join discussion
Mar 9 · 5 min read · Recently I came across a relatively lesser known bug bounty platform and decided to hunt on it. While testing the program, I discovered that its JWT-based authentication could be manipulated to gain u
Join discussion
