ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·8h ago · 5 min readAnalyzing the ApplicationIn web application security testing, simply enumerating the application's content — finding all its pages and links — is only a small part of the job. Equally important is deeply analyzing the applica00
ASAbdulaziz Saadinblog.abdulaziz-d.com·1d ago · 10 min readThe $1000 Ticket IDOR: One Number Exposed National IDs and Government Staff PIISeverity: HighBounty: ~$949Program: Private Bug BountyPlatform: Bugbounty.sa This finding started with a very simple endpoint: GET /api/tickets-management/portal/history-by-ticket/<ticket_id> The end10
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·1d ago · 4 min readWeb App Recon (Part-3)Finding Hidden Content and Functionality When assessing a web application's security, its visible structure alone isn't enough. Content and functionality that aren't linked from anywhere within the ap00
ASAbdulaziz Saadinblog.abdulaziz-d.com·2d ago · 12 min readFrom Editor to Owner: One Writable Field Was Enough to Take Over an OrganizationSeverity: HighBounty: ~$315Platform: Standoff365 This one came down to a single field that should never have been writable by an editor: Firm[user_id] The application had a clear permission model. An10
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·2d ago · 3 min readApplication Mapping(PART-2)Hidden Content Discovery & Intelligent Prediction 1. Conceptual Blueprint: Why Hidden Content Exists Leaving hidden files on a server is similar to having unmapped maintenance rooms in a physical buil11Z
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·3d ago · 2 min readApplication Mapping: Web Security FoundationStrategic Rule: Exploitation without reconnaissance is guesswork. Comprehensive mapping reveals the complete attack surface, exposing high-impact vulnerabilities that automated scanners may overlook. 11Z
Mmehveteroinmehvetero.com·3d ago · 3 min readMy first competitive audit. Submitted as HIGH, came back as LOW. That stung for about ten minutes — then I re-read the judge's reasoning and they were right.SweepUnclaimedBonus_Drains_Attacker Summary A permissionless sweepUnclaimedBonus() between a moderator's SURVIVED flag and a corrective CORRUPTED re-flag irreversibly drains the bonus to recoveryAdd00
ZZeroProtocolinwebpentestingdeepdive.hashnode.dev·6d ago · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 10
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 15 min readTryHackMe : WhyHackMe writeupSummary WhyHackMe is an medium Linux box that chains a handful of low-friction bugs into root. Anonymous FTP leaks a hint pointing at a pass.txt file that's only reachable from localhost. The blog app10
ASAbdulaziz Saadinblog.abdulaziz-d.com·Aug 7 · 12 min readA $2,000 API Key: Unauthorized Access to Paid Medical TranscriptionSeverity: HighBounty: $2,000Retest Reward: $150Total Awarded: $2,150Program: Private ProgramPlatform: HackerOne This finding started with a familiar Android testing problem: What secrets were shipped00
