Write-ups

Check The Published Writeups

Reset
WDBTitleTagsProgramsAuthorsTypePublicationAdded
4118How I was able to get private ticket response panel and FortiGate web panel via blind XSS Blind XSS NA Bijan Murmu (@0xBijan) Bug Bounty2019-06-062023-06-13
4069Facebook BugBounty : Short story on Page admin disclosure Authorization flaw Privilege escalation Meta / Facebook Bijan Murmu (@0xBijan) Bug Bounty2019-06-282023-06-13
4013Facebook BugBounty: Tale of an Instagram bug disclosing user’s phone number via checkpoint Information disclosure Meta / Facebook Bijan Murmu (@0xBijan) Bug Bounty2019-07-262023-06-13
3918How I found a simple and weird Account takeover bug Account takeover Missing authentication NA Bijan Murmu (@0xBijan) Bug Bounty2019-09-142023-06-13
1712Bug Bounty catches part -1 Authentication bypass Information disclosure Broken Access Control NA Bijan Murmu (@0xBijan) Bug Bounty2022-03-202023-06-13
1694Deleting account via support ticket IDOR Broken Access Control NA Bijan Murmu (@0xBijan) Bug Bounty2022-03-262023-06-13
1693Stealing cookies from subdomain leads to takeover user accounts at redacted.com Account takeover XSS NA Bijan Murmu (@0xBijan) Bug Bounty2022-03-272023-06-13
1558Takeover seller accounts worth billions & millions IDOR Account takeover NA Bijan Murmu (@0xBijan) Bug Bounty2022-05-122023-06-13
1512Exploiting iOS app for fun and profit Account takeover Information disclosure NA Bijan Murmu (@0xbijan) Bug Bounty2022-05-292023-06-13