S3 Bucket Misconfiguration: From Basics to Pawn
Hello friends, Recently I came across S3 Bucket Misconfiguration vulnerability on one of the private program. I saw many write-ups on how to exploit it but none of them was from Basics. So i...
Category: Vulnerability
Vulnerability bug bounty POC
Any user can edit any list.
Hey There, I hope you guys doing great out there. While i was hunting Instacart , I found that any user from whom a list is shared via link or any random list is...
Privilege Escalation From Manager To Admin.
Hello Users, While i was working around with sentry which is an Public Program over hackerone i found that i was able to escalate myself from manager to admin. An admin is only person...
Coinbase Partial 2FA Bypass On Enabling Recurring Payments.
Hello Users, While i was pentesting Coinbase I noticed that while creating Recurring payment meanwhile when 2FA is enabled it asks a user to enter verification code. So when someone confirm the recurring payment...
Read-only share recipient can restore old versions of file.
Description The restore capability of Nextcloud was not verifying whether an user has only read-only access to a share. Thus an user with read-only access was able to restore old versions. Affected Software Nextcloud...
Non-Deletable Co-Admin Due To Change Name Functionality
Hey Users…. I Found Something Unusual While I Was Working With username.bime.io I Noticed When An Admin Adds A New Admin Lets Name Him X . So After Creating A New User Admin Can...
SSRF Bypass in private website
[ads] SSRF Bypass in private website – Bug Bounty POC Hello BugBountyPoc viewers it’s been while we did not post POC on BugBountyPoc because of we are busy in our new project of forum...
A Unique way to send emails from hackerone support
[ads] A Unique way to send emails from hackerone support – Bug Bounty POC I hope all of you once reached out at hackerone support, if you have some support tickets which are solved...
Email Disclsoure in Coinbase
[ads] Email Disclsoure in Coinbase – Bug Bounty POC Hey Bug Bounty POC viewers,hope you are alright, its been a while some one posted an PoC on the bugbountypoc.So today i will be sharing...
Venom Automatic Shellcode Generator
[ads] Venom 1.0.11 Automatic Shellcode Generator – Bug Bounty POC Hello Bug Bounty POC Viwers,This is Chaitanya today i will gonna talk about a multi shellcode generator know as “Venom“.Yeah it’s called as venom because...
