Hey all, This story about a sql injection bug i got in SOUQ.com Souq is a subsidiary of Amazon. I started a regular recon and i got the subdomain sell.souq.com from their program policy at hackerone.com/souq i decided to test randomly parameters against possible SQLi attacks so i went to…

Hey all, This writeup describes a full account access using referral code i found in a third party that Shipt uses. I started with a subdomains finding using Sublist3r and i got ambassadors.shipt.com , i saw a normal registration page and i signed up for an account.

Hey All , This writeup describes how i was able to deny new-upcoming users from using Flurry service. According to Wiki , Flurry is an American mobile analytics, monetization, advertising company and a subsidiary of Yahoo. Denial Of Service Attack I created an account regularly from https://login.flurry.com/signup and i spotted…

Hey All, It is my first writeup since i kicked off my cyber security career so lets start, Recently i was trying some OSINT framework tools when i came across a website malware scanner which was urlscan.io this website scans the url for possibility of being a malware or a…