MAHIN VM

White Hat Hacker | Web Pentester | Red Teamer | VAPT | CEH MASTER | Bug Bounty Hunter | Cybersecurity Researcher | 3-CVE Assigned | HOF {Microsoft} {Github} | Founder & CEO at Fegazine | Volunteer at Kerala Police Cyberdome. You can learn more about me here

Tags

Account Takeover IDOR Bug Bounty US Department Of Defense Broken Access Control Cache Poisoning BugCrowd Mass Assignment Synack Critical Dependency Confusion Wordpress Recon personal

#Account Takeover

Nov 07 2020

How I could take over any Account on a USA Department of Defense Website due to a simple IDOR
Dec 18 2020

Broken Access Control on samsung.com subdomain leads to Mass Account Takeover of Samsung employees application accounts

#IDOR

Nov 07 2020

How I could take over any Account on a USA Department of Defense Website due to a simple IDOR

#Bug Bounty

#US Department Of Defense

Nov 07 2020

How I could take over any Account on a USA Department of Defense Website due to a simple IDOR

#Broken Access Control

Dec 18 2020

Broken Access Control on samsung.com subdomain leads to Mass Account Takeover of Samsung employees application accounts

#Cache Poisoning

Feb 25 2021

Poisoning your Cache for 1000$ - Approach to Exploitation Walkthrough

#BugCrowd

Feb 25 2021

Poisoning your Cache for 1000$ - Approach to Exploitation Walkthrough

#Mass Assignment

May 14 2021

Mass Assignment exploitation in the wild - Escalating privileges in style

#Synack

May 14 2021

Mass Assignment exploitation in the wild - Escalating privileges in style

#Critical

#Dependency Confusion

Nov 25 2021

Wordpress Plugin Update Confusion - The full guide how to scan and mitigate the next big Supply Chain Attack

#Wordpress

Nov 25 2021

Wordpress Plugin Update Confusion - The full guide how to scan and mitigate the next big Supply Chain Attack

#Recon

Nov 25 2021

Wordpress Plugin Update Confusion - The full guide how to scan and mitigate the next big Supply Chain Attack

#personal