← All writings
Jul 16, 2015
Shopify: Remote Code Execution
Oct 15, 2014
HackerOne Vulnerability: Leaking Common Response Titles
Aug 08, 2014
Facebook MailChimp Application OAuth 2.0 Misconfiguration
Aug 08, 2014
Facebook FriendFeed Stored XSS
Mar 27, 2014
Flipkart.com - Elevation of Privilege
Feb 18, 2014
SSRF/XSPA in MailChimp
Sep 21, 2013
PayPal CSRF aids in account takeover!
Jun 13, 2013
Pwning Facebook accounts, taking a little help from Quora
May 21, 2013
Dropbox for Business Mailing List Unsubscribe Users (Permission Issue)
May 16, 2013
Dropbox Team Website Open Redirection