Published in InfoSec Write-ups·PinnedPushing yourself through hard hunting days: A bug hunter’s perspectiveToday I am going to talk about the period when you don’t find bugs for several days, weeks or even months. This talk is going to be non-technical and completely related to mental health. I will try explaining it as simple as possible. During our bug bounty days, specially when…Infosec4 min read
Published in InfoSec Write-ups·Jun 6Hacking Nginx: Best waysNginx is being used in the wild since a while now. We all have seen NGINX name somewhere while coding/hacking. NGINX has always been a target for hackers/bug bounty hunters due to a lot of misconfigurations in it, and as a security researcher/bug bounty hunter, hacking a web server always…Bug Bounty5 min read
Published in InfoSec Write-ups·Mar 6Going beyond the surface: Vulns that pay wellThese days bug bounty hunters have been finding many low-hanging fruits and a lot of them want to go beyond those bugs. This blog is for those who want to find some well-paid bugs which need a little more observation and time. I have put my methodologies and ideas to…Bug Bounty5 min read
Dec 27, 2021Weapons in my quiver: Tools and extension I use in bountiesAs this blog already describes, I will be putting some info about tools and extensions which I use daily in my bounties. For an early reminder, there is no new or self-created tool mentioned here and all the tools/extensions are well known. …Bug Bounty5 min read
Nov 14, 2021The Implementation plan for hacking: What not to do and whereHey guys, I hope you all are doing well and having fun in hacking. It’s been a while I posted any blog here. Didn’t quite get the idea what to write on, so it took some time. However, I came up with this topic and if it works well, you…Bug Bounty5 min read
Published in InfoSec Write-ups·Sep 19, 2021Chaining bugs for better bountiesChaining some low level bugs to a higher level is always fun and challenging at the same time and best thing is you get higher reward if you do it successfully. …Bug Bounty5 min read
Published in InfoSec Write-ups·Aug 12, 2021WAF bypasses: Tearing down the wallBefore we go deep into the ACTUAL bypasses section, It’s really important to understand what is a WAF(Web application firewall) and it’s types. Hi guys, welcome to this new blog and here, we are talking about WAFs which is considered as one of the biggest enemies of hackers. Well, it…Bug Bounty6 min read
Published in InfoSec Write-ups·Jul 2, 2021How Gopher works in escalating SSRFsWe all know about HTTP and HTTPS but how many of us have seen Gopher in wild? The one we use a lot in bypassing and escalating Server side request forgeries. Well, believe me or not, Gopher was conceived in 1991 as one of the Internet’s first data/file access protocols…Bug Bounty5 min read
May 23, 2021Shuffling the codes: Reasons you must learn programming for finding great bugsHello homies! I hope you are doing great and working on your stuff. We are getting pretty good amount of time due to pandemic and luckily we are one of the rarest group of people who are happy with it(I mean people from bounty and stuff). As you can see…Bug Bounty6 min read
Published in InfoSec Write-ups·May 2, 2021Nailing automation with Bash: Core concepts and implementationsHi homies, I hope you all are doing great and learning new things daily. Recently, I had posted a bash oneliner on Twitter which solves some of your automation queries and I got a lot of questions regarding how to, where to with bash. Many of the people found it…Infosec7 min read
