Published inTechiepedia·PinnedHow to Report DMARC Vulnerabilities Efficiently To Earn Bounties EasilyHello Guys 👋👋 , Prajit here from the BUG XS Team, so in this write-up I will be discussing the most easy P3-P4 vulnerability found on Bugcrowd 😈, and with which you can earn bounties pretty much easily. So, I have got many many valid and bounties from this bug…Cybersecurity7 min readCybersecurity7 min read
PinnedStored XSS: Non-Privileged User to Anyone Using QR CodeHello guys👋👋 ,Prajit here from the BUG XS Team , recently I got a valid Stored XSS-P2 via QR Code on a Bugcrowd private program, in this write-up I will discuss how I found it. Hope you enjoy it 😉! So first before jumping directly into steps, let me give…Cybersecurity3 min readCybersecurity3 min read
PinnedBypassing 403 Protection To Get Pagespeed Admin AccessHello guys👋👋 ,Prajit here from the BUG XS Team, it’s been a long time since my last story, sorry for the delay was held back in exams and viva😅. So anyway, in this story I will talk about one of my finding “Bypassing 403 Restrictions and gaining access to Global…Cybersecurity3 min readCybersecurity3 min read
PinnedApple Hall Of Fame for a Small Misconfiguration || Unauth Cache PurgingHello guys👋👋 ,Prajit here from the BUG XS Team , recently I got acknowledgement for reporting a valid issue on Apple Program. So that bug is called Unauth Cache Purging. So let us take look at some of the important concepts which are important to understand the vulnerability. What are Caches? Caching is…Cybersecurity3 min readCybersecurity3 min read
PinnedBreaking Reset Password Logic To Get Account Takeover Without User InteractionHello guys👋👋 ,Prajit Here from the BUG XS Team. So, in this write-up I will be sharing the method that how I broke reset password logic to get account takeover without any interaction needed. So before we start into what steps I performed, I need to first explain what was…Cybersecurity3 min readCybersecurity3 min read
Oct 18, 2022WordPress Subdomain Takeover on Bugcrowd Private ProgramHello guys👋👋, Prajit here from the BUG XS Team, recently I got a valid WordPress Subdomain Takeover on a Bugcrowd private program, in this write-up I will discuss how I found it. Hope you enjoy it 😉! So before jumping directly into steps, let me give you a short gist…Cybersecurity4 min readCybersecurity4 min read
Apr 12, 2022Basics of APIHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my 24th task I was given to research about different types of APIs. What is an API? Application Programming Interface (API) is a software interface…Cybersecurity4 min readCybersecurity4 min read
Apr 4, 2022Subdomain Enumeration Tool -DomeHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my 22th task I was given to research about Dome an subdomain enumeration tool. Description: Dome is a subdomain enumeration tool written…Cybersecurity2 min readCybersecurity2 min read
Feb 16, 2022File Inclusion VulnerabilitiesHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my nineteenth task I was given to research about File Inclusion Vulnerability. What is File Inclusion Vulnerability? The File Inclusion vulnerability allows an attacker to include…Cybersecurity3 min readCybersecurity3 min read
Feb 16, 2022Insecure Direct Object ReferenceHello guys👋👋 ,Prajit here from the BUG XS Team and Cyber Sapiens United LLP Cybersecurity and Red Team Intern, in this I am regularly given some interesting tasks, In my eighteenth task I was given to research about Insecure Direct Object Reference Vulnerability. What is IDOR? IDOR stands for “Insecure Direct Object Reference”…Cybersecurity4 min readCybersecurity4 min read
