Second Order XXE Exploitation

2022-10-19 :: Kuldeep Pandya
#XXE  #LFI 
A writeup about my finding on Synack that was an XXE that allowed me to read local files stored on the web server.
→

Path Traversal Paradise

2022-01-23 :: Kuldeep Pandya
#LFI  #PathTraversal 
A writeup about the path traversals that I found in Synack Red Team
→

120 Days of High Frequency Hunting

2022-01-15 :: Kuldeep Pandya
#SQLi  #LFI  #XSS  #SSRF  #IDOR  #ACPV  #PathTraversal 
A writeup about my journey to find 120 bugs in 120 days
→