Hello Guys hope you all are doing well, fine and healthy during this hard time. Introduction : Hello, I am Vishal Bharad, from India and working as Penetration Tester, Now today I am going to share how I found Stored Cross-Site Scripting (XSS) in icloud.com. Initial Discovery & Exploitation : …

Hello Members, I am Vishal Bharad. Works as Security Researcher and pursuing OSCP. Here I am Back with another Interesting blog on Full Account Takeover Via Modifying Email ID. Vulnerable Product — Codeigniter 3.0.0 (Authentication) Web Application Framework Vulnerability Type — Insecure Permissions Affected Component — Login page form. Attack…

Introduction : Hello, I am Vishal Bharad. I’m here to share about my findings on Stored XSS on Angular JS 1.4.9 Angular JS is a Javascript Framework used in Many Websites. But in this the XSS will not able to validate on the server side. Its only validate on the…

Introduction : Hello, I am Vishal Bharad & I am Mechanical Engineer :D and working as Penetration Tester. I’m here to share about my findings on Prototype 1.6.0.1 Framework Which is Used in Many Websites. About the Vulnerability : I have got the url like https://support.target.com. So I have got…

Introduction : Hello Guys Again, I am Vishal Bharad, I’m here again to share about my findings on How I Bypass 2 Factor Authentication via CSRF (Cross Site Request Forgery). About the Vulnerability : You all know about the 2FA Bypass Vulnerability. There are some Techniques. Bypassing 2fa using conventional…

Introduction : Hello Again, I am Vishal Bharad, I’m here again to share about my findings on Full Account Takeover on Android Application About the Vulnerability : First of all this is the one of the Simplest Vulnerability which rated in P1 Category. …

Introduction : Hello, I am Vishal Bharad, I am Mechanical Engineer :D and working as Penetration Tester. I’m here to share about my findings on Full Account Takeover. About the Vulnerability : For Discovering the bug I have tested many tricks on the website. Assume redacted.com. …