What’s IDOR!? IDOR stands for “Insecure Direct Object References.” It’s a type of security vulnerability that occurs when an application allows an attacker to access or manipulate resources directly by modifying input parameters, such as URLs, without proper authorization. …

Hello amazing hackers, here we are with another amazing post, this time we are not going to talk about the effects of a vulnerability on users or even the database. This time we want to talk about taking over an entire organization. …

Discovering XSS in large companies is one of my hobbies. Today I want to talk about Opera XSS which took 15 minutes. The power of finding XSS so fast is searching out-of-the-box endpoints. To do this, you first need to find a list of all subdomains, even the ones that…

Hi Guys, My name is m7arm4n and today I wanna talk about one of my findings on a private program that was vulnerable to Mass Assignment leads to make victim’s accounts inaccessible. …

Hello my friends, Today I want to talk about one of my admin panel bypass methods which leads me to easily bypass the admin panel. In my pervasive write-up, I noticed the power of the Wayback Machine and how it helped me to discover the hidden endpoints and exploit…

Hi amazing researchers, Here is my Privilege Escalation vulnerability on a private program that let attackers take over the whole Company and even kick out the main manager. For discovery such this type of vulnerability, I always recommend working with the website deeply and organizing all features, user levels, etc. …

Hello team, Here again, to review another of my findings but this time on the Citizens Bank, an American bank headquartered in Providence, Rhode Island, which operates in Connecticut, Delaware, etc. Here is the Citizens Bank Responsible Disclosure Program

Hi amazing researcher, Welcome to another review of the vulnerability discovery on ASDA. Today I want to discuss Host Header Poisoning leading to a one-click-to-account takeover BUT that wasn’t a normal one. technically I used open redirect and Port Poisoning to exploit this vulnerability. Be my guest… Let’s talk about…

Hi Guys, Again I'm here to review another of my finding on the Sony program, This write-up is about how to automate process helps you find High or even critical vulnerability easier. What’s the default credential vulnerability !? The term “default credentials vulnerability” describes a security problem where software, hardware…