Stored XSS leads to Zero-Click Account Takeover
Ali Hussainzada
Command Palette
Search for a command to run...
Archive
9 posts published so far
How a Second-Order IDOR Lets You Delete Other Users’ Posts, Profile Picture, and Cover Photo
Ali Hussainzada
From LaTeX Injection to RCE: A Real Bug Bounty Case
Ali Hussainzada
Hunting Vulnerabilities and Securing MizbanApp: Mass Assignment & IDOR
Ali Hussainzada
Is CSRF Dead? Discovering and Exploiting CSRF vulnerabilities in Modern Web Apps
Ali Hussainzada
2500 Dollars in bounties, Hacking GraphQL
Ali Hussainzada
Building Your Own AI-Powered Telegram Bot with Python: A Beginner's Guide
Ali Hussainzada
4500$ bounties on a single Web Application (API Hacking)
Ali Hussainzada
Cache Poisoning Leads to Stored XSS: Manipulation of Response via Accept Header
Ali Hussainzada