The new write up is released

Weak credentials lead to access to admin panel (Deep Recon)

https://t.co/Mkwl7m3m3A

(Arabic)

https://t.co/3R9RmQKErf

#BugBounty

الحمد لله

Happy for securing new private program

I’m planning to start sharing writeups insha’Allah for the vulnerabilities I find.
Here’s a Telegram channel where I’ll be posting soon: https://t.co/eejx5pqsVL

حياكم الله يوم الثلاثاء بطلع سبيس مع اخوي محمد القحطانى اللي يبي يستفيد وبنفتح مجال الاسئله للي عنده اسئله

حياكم الله 🤍

Live recon on real target episode 4

https://t.co/XfXUQApDkw

What happened here?

1.I found a subdomain via DuckDuckGo dorking.
2.I noticed a login endpoint that’s different from the users endpoint (neither allows registration).
3.I fuzzed that endpoint and discovered a user-management endpoint, but the website redirected…