Nov 13, 2022A critical admin panel bypass with the help of an effective ReconGreetings ppl, This is Aravind (aravind0x7) here with another awesome write-up. The people who follows me know that I like to hunt bypass kind of bugs, if this is the first time you are connecting with my blog, visit my page for more write-ups. In this blog am gonna share…Adminbypass3 min readAdminbypass3 min read
Published in The Gray Area·Oct 1, 2022A Simple Admin-Panel Bypass Bug BountyThis article describes one of my recent bug findings, where I was able to bypass the authentication for an admin panel. Bug Hunting Recon First, the target website. I cannot reveal the site here, so we’ll use the domain “target.com” to preserve privacy. After navigating the site for a short time, I was…Hacking3 min readHacking3 min read
Aug 3, 2022When an IDOR becomes EVIL > Total Data Leak😈Hi fellow hackers and friends, This is Aravind here with another awesome article on how an IDOR bug helped me to access all user data of a website. To make it simple, the thing is I was able to get into any user account by just changing one parameter. …Infosec3 min readInfosec3 min read
Jul 27, 2022Approaching a Wordpress Site for Bugs :)Hi Geeks, This is Aravind here with another blog which may help you in finding bugs on Wordpress sites easily. I have also attached few of my personal catches in this blog. Hope this might help you guys. What is Wordpress ? WordPress is an open-source content management system (CMS). It’s a popular tool…Infosec3 min readInfosec3 min read
Jul 8, 2022How Burpsuite-pro helped me to get a 5 digit Bounty !Hello ppl, This is Aravind here with another awesome write-up. So now am gonna tell the story about how burpsuite pro helped me to get a 5 digit bounty and surprisingly this is my highest bounty ever. OKK, now lets get into the kutty story… Back Story The target was an eCommerce…Infosec3 min readInfosec3 min read
Apr 29, 2022OTP Bypass + PATO = 100 Dollars BountyHello ppl! This is Gnana Aravind here with another awesome write-up explaining the story of my recent bounty. This month I was awarded with 100 dollars from a private program for securing their platform, so lets see how I caught those bugs from the bucket… Back Story I was wildly searching for…Bug Bounty3 min readBug Bounty3 min read
Apr 7, 2022The Story Of A Sweet XSSHi wonderful ppl, hope you are doing good. This Gnana Aravind with another write-up. As I was busy with some personal stuffs, I was not able to be consistent here. So here we gonna make a short discussion about a recent finding of sweet XSS. I appreciate my friend Centurion…Hacking2 min readHacking2 min read
Feb 1, 2022USB Rubber Ducky with ArduinoHi everyone in this article , am going to talk about making a hardware hacking device for just 4 $ (300 RS). So lets get started. The USB Rubber Ducky, made popular by Hak5, is an amazing little tool. This innocent looking “USB Drive” actually emulates a computer keyboard and…4 min read4 min read
Dec 8, 2021Bypassing Login Page in 2 MinsHi ppl! This is Gnana Aravind with another write-up on the most curious “Login Page Bypass”. Let’s jump into the story… Back Story Few days back I taught of ordering a product in an eCommerce site and visited it. Found that they were using mobile number and OTP for logging in…Infosec2 min readInfosec2 min read
Sep 16, 2021My first Hall of Fame 🤩Hello ppl ! This is Gnana Aravind, with a new write-up on how i got my first Hall of Fame. So first of all a HOF is something like an institution honouring the achievements of individuals in a particular activity or field and the company where I got my HOF…Infosec2 min readInfosec2 min read
