Bekziz Security
Open in Telegram
Iβm a bug bounty hunter, ethical hacker, and fast typist ranked #1 on HackerOne in Ethiopia. This channel shares practical tips and insights to help you grow your bug bounty or ethical hacking career.
Show moreThe country is not specifiedThe category is not specified
231
Subscribers
+124 hours
+57 days
+1730 days
Posts Archive
hey everyone
i just wanted to let you know why I havenβt been posting on youtube lately or appearing on camera. Iβve been dealing with a situation that made it difficult for me to record and create content properly.
But donβt worry, Iβll be back soon and I really appreciate everyone who has been waiting and supporting me β€οΈ
Also, Iβd love to hear from you guys what kind of content would you like me to make for my next video? bug bounty, real-world hacking techniques, tutorials, or something else?
Your suggestions would really help me decide what to make next. π
π ααα«α α α²α΅ ααα΅! π
α₯αα³α α2019 α.α α α²α΅ ααα΅ α α αα α α°α¨α³αΉα’
α α²α± ααα΅ α¨α°ααα£ α¨αα
αα£ α¨α€α α₯α α¨α΅α¬α΅ α₯αα²αααα α₯αααααα’
This h1 analyst is something else he doesn't want to argue about your security issue he gives NA all the timeππ most people know this guy mabarer alebin hunt kemaregachin befit
biggest bounty rewarded with high severity it was very close for critical but still not fixedπ«‘π«‘π«‘
glad to be back we have got some bug on pending program review this morningππππ€π
anyone here kezi sewye gar p2p endatseru he scammed me tons of dollars guys take care
guys do you know any alternatives like droidcam for sharing my phone camera to the computer does any one know let me know in the comments ?
Rewarded again by Cloudflare. If you want a video about this bug, let's grow the channel and attract new members interested in bug bounties.π«‘π«‘
Story of the bug:
There are two users: User1 and User2. User1 created a private Custom Dashboard that should only be accessible to them. As a result, User2 should not be able to view, modify, or delete this dashboard.
While testing, I intercepted a request made by User1 to delete the Custom Dashboard. I then modified the request by replacing User1's credentials/session with those of the lower-privileged User2 account. Despite User2 lacking the necessary permissions, the request was successfully processed and the private Custom Dashboard created by User1 was deleted. full explanation on my youtube video -> https://www.youtube.com/watch?v=GLCgqCZNhZ4
