Escalating Privileges With SSRF

This post is regarding my findings on Synack Red Team. The findings included a total of 4 SSRFs. One of them being a fully unauthenticated SSRF leading to high privileged account takeover.
Read more →

Holiday Hunting With Aquatone

This blog is about my findings while on a workcation to Goa with my hacker friends.
Read more →

120 Days of High Frequency Hunting

A writeup about my journey to find 120 bugs in 120 days
Read more →