Ayrix Bytes

🔹 Token Brute-Force to Account Take-over to Privilege Escalation to Organization Take-Over 📆 Mon, 10 Dec 2018 14:07:11 GMT #️⃣ #infosec #bug_bounty #information_security

🔹 Account takeover using IDOR and the misleading case of error 403. 📆 Tue, 11 Jun 2019 15:16:08 GMT #️⃣ #intigriti #hackerone #hacking #infosec #bugsbounty

🔹 What do Netcat, SMTP and self XSS have in common? Stored XSS 📆 Tue, 16 Jul 2019 18:00:08 GMT #️⃣ #security #bug_bounty #infosec

🔹 Crossing The Borders : The illegal trade of HTTP requests 📆 Wed, 25 Dec 2019 22:16:05 GMT #️⃣ #hacking #security #bug_bounty #bugsbounty

🔹 How I takeover subdomain by claim unclaimed s3 bucket 📆 Sat, 12 Jan 2019 08:11:42 GMT #️⃣ #subdomain #bucket #aws #takeovers #s3

🔹 Sensitive data exposure -geniebelt.com[responsible disclosure] 📆 Fri, 05 Apr 2019 15:21:04 GMT #️⃣ #amazon #s3 #amazon_web_services #s3_bucket #aws

🔹 How was I able to download customer data dump 📆 Fri, 08 May 2020 12:30:44 GMT #️⃣ #kicks3 #bucket #aws #misconfiguration #s3

🔹 Reflected xss on ASUS. 📆 Sun, 06 Jan 2019 14:10:07 GMT #️⃣ #security

🔹 How I stumbled upon a Stored XSS(My first bug bounty story). 📆 Fri, 04 Jan 2019 18:43:18 GMT #️⃣ #bug_bounty #infosec #web_security #xss_attack #security

🔹 A real XSS in OLX 📆 Thu, 21 Mar 2019 18:13:40 GMT #️⃣ #bug_bounty #security

🔹 How PayPal helped me to generate XSS 📆 Sun, 20 Oct 2019 12:04:51 GMT #️⃣ #bug_bounty #xss_attack #paypal #xss_vulnerability #penetration_testing

🔹 SSRF via FFmpeg HLS processing 📆 Wed, 11 Dec 2019 19:45:19 GMT #️⃣ #security #hacking_training #bugs #bug_bounty #hacking

🔹 Stealing Cookies to Login in any Account 📆 Sun, 16 Jun 2019 05:20:12 GMT #️⃣ #ethical_hacking #security_researchers #bug_bounty #javascript

🔹 Bypassing XSS filter and Stealing User Credit Card Data 📆 Mon, 17 Jun 2019 05:07:01 GMT #️⃣ #bug_hunting #bug_bounty #xss_attack #security_researchers #bugcrowd

🔹 Account Taker with Clickjacking 📆 Wed, 19 Jun 2019 10:14:23 GMT #️⃣ #bug_bounty #bug_hunting #bugcrowd #javascript

🔹 $1800 worth Clickjacking 📆 Fri, 21 Jun 2019 13:50:42 GMT #️⃣ #security_researchers #bugcrowd #javascript #bug_bounty

🔹 CORS To CSRF Attack 📆 Thu, 27 Jun 2019 06:08:18 GMT #️⃣ #bug_bounty #bugcrowd #javascript #security_researchers

🔹 JSON CSRF to FormData Attack 📆 Mon, 19 Aug 2019 18:04:22 GMT #️⃣ #security_researchers #ethical_hacking #bug_hunting #bug_bounty #web_development

🔹 Exploiting JSONP and Bypassing Referer Check 📆 Sat, 07 Sep 2019 08:18:59 GMT #️⃣ #bug_hunting #security_researchers #javascript #bug_bounty

🔹 How i hacked my faculty crush! 📆 Thu, 08 Nov 2018 15:25:40 GMT #️⃣ #phishing #hacking #security #social_engineering #phishing_awareness