Unlocking Dunzo's Internal Dashboard
L
Staff Application Security Engineer
Command Palette
Search for a command to run...
Comments
Join the discussionNo comments yet. Be the first to comment.
More from this blog
Git Exposure: How a Simple Oversight Led to a Critical Security Flaw
In my recent exploration of web applications, I came across a significant security issue that I believe deserves attention. This discovery involved a popular application responsible for managing various user services. While I can't divulge the applic...
Aug 12, 20242 min read548
Securing the Cloud: From S3 Credentials to RDS Database Access
I recently went on a bit of adventure with an application used for webinar and 1:1 meetings. It's a start-up based in Bangalore, and guess what? It ended with me accessing the RDS database! Let me take you through how it all happened. Discovering the...
Apr 18, 20243 min read615
Unveiling CVE-2024–0953: Firefox iOS Open Redirect Vulnerability
My recent encounter with a bug in the Firefox iOS app led to the assignment of CVE-2024–0953. This blog post narrates the journey of uncovering this vulnerability As QR codes become more popular in today’s digital age, it’s essential to ensure that t...
Feb 6, 20241 min read491
How I Got Free Travel on Namma Metro
As someone who uses public transportation regularly, I rely on it to get me where I need to go quickly and efficiently. That’s why I was surprised to learn that I could travel for free on Namma Metro due to a critical bug that I discovered. Namma Met...
Mar 16, 20232 min read484
Securing Cloudflare: Addressing the Password Policy Bypass Issue
After a small break on bug bounty, I started hunting on the Cloudflare Bug Bounty program. This write-up is about the Password Policy Restriction Bypass. Almost Every organization follows a strong password policy on their application. Sometimes It de...
Sep 30, 20222 min read166
