Hello Everyone I hope you all are doing well. This write-up is about the Paytm Broken Link Hijacking Vulnerability. Broken Link Hijacking (BLH) is a web-based attack where the attackers take over expired, stale, and invalid external links on cre...
Hello People After a long time, I found one interesting bug in Grofers using a simple Shodan search. The vulnerability could have allowed an attacker to access the internal API monitoring dashboard of Grofers. This is my 2nd report to the Grofers Sec...
Hello Everyone! This write-up is about Dunzo's Sensitive Information Disclosure Vulnerability. The vulnerability could have allowed an attacker to access the internal monitoring dashboard of Dunzo. Subdomain Enumeration: I started with subdomain enum...
Hello Everyone….I hope you all are doing well. This write-up is about Flipkart's Cross-site scripting Vulnerability. Cross-site scripting (XSS)Cross-site scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into ot...
Hello Everyone! This is my first write-up. I am Lohith Gowda M (Security Engineer). Due to COVID-19, most of the employees got the work-from-home option. It helped me to learn something new in Bug Bounty. I started my bug bounty journey in June 2020....
