Sep 15A Easy Vertical Privilege Escalation via Session StorageHey everyone 👋, I hope all is well. After a gap of one month, I’m back with another write-up. If you missed my previous story, “A High-Impact Payment Bypass on a Government Website — A Tale of Business Logic Flaw Exploitation” you can catch up on it here:- https://amjadali110.medium.com/a-high-impact-payment-bypass-on-government-website-a-tale-of-business-logic-flaw-exploitation-b158feb7826a In this…Bug Bounty Tips4 min readBug Bounty Tips4 min read
Aug 10A High-Impact Payment Bypass on Government Website - A Tale of Business Logic Flaw ExploitationIntroduction: Greetings, fellow cybersecurity enthusiasts! I am Amjad Ali, a VAPT Analyst, bug hunter, and pentester, excited to share one of my recent findings with you. In this write-up, I will walk you through how I discovered and exploited a business logic flaw to bypass the payment process on a government…Bug Bounty6 min readBug Bounty6 min read
Jul 10Unveiling Access Control Flaws: How a Viewer Became an EditorHey everyone 👋, Hope all are good and fine. I’m back with another write-up. If you missing the previous write-up stories you can check it out from here: https://amjadali110.medium.com/hyperlink-injection-726d8151b216. In this write-up i want to share with you the story of a recent finding I discovered during a Gray Box…Bug Bounty3 min readBug Bounty3 min read
Jul 2Setup an Android Pen Testing Lab with Frida-Tools, Objection, Frida Server, and Bypass SSL PinningHey everyone 👋, Amjad Ali here, a passionate cybersecurity enthusiast and a Pen Tester. Today, I’m thrilled to present an article co-authored by my friend Sahil Choudhary, where we will guide you through the exciting journey of setting up an Android Pen Testing Lab. If you’re eager to enhance your…Penetration Testing7 min readPenetration Testing7 min read
May 11Hyperlink Injection Earned Me $200 within 10 minutesHey everyone 👋, My name is Amjad Ali, and I’m a cybersecurity enthusiast. Recently, I found a hyperlink injection vulnerability within 10 minutes of testing and reported it to the Bugcrowd program. Within 6 hours, I received a $200 bounty, 5 points, Hall Of Fame and a P4 rating for…Bug Bounty3 min readBug Bounty3 min read
