Prakhar. Prasad
I write about web security, bug bounty hunting, and exploitation. Field notes from real engagements, deep dives into vulnerable code, and tools for the work.
Mar 27, 2014
Flipkart.com - Elevation of Privilege
Feb 18, 2014
SSRF/XSPA in MailChimp
Sep 21, 2013
PayPal CSRF aids in account takeover!
Jun 28, 2013
Triggering an unexploitable DOM-based XSS in Rediff Blogs automagically
Jun 13, 2013
Pwning Facebook accounts, taking a little help from Quora
Jun 06, 2013
Flash-based XSS Mayhem: Most Security Solution Vendors Vulnerable
May 21, 2013
Dropbox for Business Mailing List Unsubscribe Users (Permission Issue)
May 16, 2013
Dropbox Team Website Open Redirection
May 04, 2013
Google Website Translator (Add Editor) CSRF and Google Tasks Clickjacking
Mar 12, 2013
File Upload Bug in PayPal's BillMeLater