Pinned1day·Sep 22, 2024How I Hacked Into a Nationwide University Database System Exposing Thousands of Student RecordsINTRODUCTIONA response icon51A response icon51
1day·Apr 28How I Discovered a Cognito Misconfiguration That Bypassed Corporate SSO and Exposed a Production…Hey all, I’m back with another article on an issue I discovered recently. If you’ve read my earlier post on AWS Cognito and S3, you already…A response icon1A response icon1
1day·Nov 28, 2025How I Discovered a Rare Vulnerability in MCP ServerINTRODUCTIONA response icon4A response icon4
1day·Oct 7, 2025How to Report a Vulnerability When the Company Has No Responsible Disclosure PolicyA step-by-step guide to responsibly reporting security vulnerabilities when a company has no disclosure policy.A response icon3A response icon3
1day·Aug 13, 2025How I Found a Critical XSS On a Public Bug Bounty ProgramINTRODUCTIONA response icon26A response icon26
1day·Jun 19, 2025Your Kid Might Be Bypassing Screen Time App Limits on macOS Using This TrickHello everyone, I’m an independent security researcher who’s been diving into Apple macOS and iOS for the past few months. This is a quick…A response icon1A response icon1
1day·Jan 29, 2025Uncovering Deepseek AI’s Hidden Flaw: A Dive Into Its Response Filtering SystemHello friends, This will be a quick and short writeup on a simple vulnerability I found on deepseek AI.
1day·Dec 18, 2024$750 Domain Hijacking VulnerabilityA simple P3 on bugcrowdA response icon3A response icon3
InAWS Tipby1day·Dec 9, 2024How I Exploited Amazon Cognito Misconfigurations to Access Confidential S3 DataIntroductionA response icon11A response icon11
1day·Nov 6, 2024An IDOR and Auth Bypass That Led to Mass Account Takeover — KSFEINTRODCUTIONA response icon6A response icon6
