What are IDORs? IDORs (Indirect Object References) are one of the most common vulnerabilities in any application but they are extremely dangerous and have the most impact on any business. …

Who doesn’t love free groceries? In this write-up, I will be discussing a cart tampering vulnerability that I discovered in the popular online grocery platform, BigBasket. This vulnerability, if exploited, could have allowed an attacker to manipulate the contents and prices of a user’s shopping cart, potentially leading to financial…

“With great power comes great responsibility” Read on to find out how I was able to leverage a simple IDOR + Authorization vulnerability to expose thousands of Visa gift cards on a leading gift card company’s website + Bonus: Found a way to redeem them more than once. Monetary websites…

Open Redirect Vulnerabilities have been around for a long time now, finding one can either be extremely easy, or at the same time can be extremely difficult to find. Read on to find out how I found an Open Redirect Vulnerability on a popular automation application. Report: Open Redirect Vulnerability …

Cross Site Request Forgery (CSRF) attacks are the most common vulnerabilities on the web today, naturally they make their way into the OWASP Top 10. But did you know that there are several different ways in which this can be exploited? …

About the vulnerability Finding your very first vulnerability as a newbie security researcher can be really intimidating and can easily burn you out especially when you don’t know where to start from. …