PinnedHacking API endpoints with IDORHey folks! It’s me, Muhammad Julfikar Hyder(thejulfikar) back again with a new article. I’m writing about an IDOR I identified a few days ago. Let’s get to know what IDOR is first. What are insecure direct object references (IDOR)? Insecure direct object references (IDOR) are a type of access control vulnerability that arises when an application…Bug Bounty Writeups4 min readBug Bounty Writeups4 min read
Mar 20Privilege Escalation through ID ReflectionAs technology continues to advance, companies are becoming increasingly reliant on digital systems to store and manage their data. This has created new opportunities for security researchers to find vulnerabilities and earn rewards through bug bounty programs. In this write-up, we will explore a privilege escalation vulnerability that I discovered…Bug Bounty3 min readBug Bounty3 min read
Sep 8, 2021Hacking Cambridge University, a simple XSS exploit!Hey hackers! I hope you guys are doing well! Here I’m back with another writeup of an easy XSS I found on the University of Cambridge’s website! The bypass or payload was too easy, but finding a valid web security vulnerability in Cambridge makes me feel proud, and only that’s…Xss Attack3 min readXss Attack3 min read
Aug 8, 2020My First Bounty And SSRFHello peoples, I’m Muhammad Julfikar Hyder from Bangladesh, back again with my first bounty story today. You can also read my previous blog on how I hacked LINE’s bucket here. It was 9/24/2019. I was a newbie at bug bounty hunting, and I’m still a newbie there! Whatever, let’s enter…Bug Bounty Writeup3 min readBug Bounty Writeup3 min read
May 9, 2020Hacking LINE’s bucket.I’m Muhammad Julfikar Hyder, a newbie at Bug Bounty hunting. This is my first writeup about Bug Bounty hunting. Today I’m going to share something about my recent findings. Last week, I was hunting for bugs at one of the biggest social media sites, LINE. There, I saw an AWS…Bug Bounty Writeup3 min readBug Bounty Writeup3 min read
