PinnedHow I made it into the United Nations hall of fame as I sleptThis article is going to be about how I got my name in the United Nations hall of fame for finding a reflected XSS bug as I slept. If you are a beginner in bug hunting you must've read a ton of articles for understanding XSS bugs and finding them…Hacking4 min readHacking4 min read
Published in InfoSec Write-ups·PinnedHow I hacked into one of India’s biggest online book stores(RCE and more)This article is going to be about how I found my 1st RCE on one of India’s biggest e-commerce sites(+ a few more bugs). Oswaal Books is a very popular company among high schoolers in India and the ones studying for competitive exams like JEE, NEET etc. They make guides…Cybersecurity6 min readCybersecurity6 min read
PinnedHow I hacked into one of India’s costliest schools!This article is going to be about how I hacked into one of India’s most famous and costly international schools. For certain reasons, I won’t be able to mention the organisation’s name(they are very rich and might sue me and also have extremely rich clients) and will call it redacted.edu…Cybersecurtiy4 min readCybersecurtiy4 min read
Sep 13, 2021Reflected XSS on Byjus(My first bug)Around a year back, schools had started to implement an online mode of learning. I had to complete my chemistry assignment and was too lazy to study for it. That’s why I went to byjus.com, an Indian ed-tech startup to look for answers to the question. …Bug Bounty3 min readBug Bounty3 min read
Jun 19, 2021Tech_Supp0rt: 1 (VulnHub)This is the first CTF machine I built which is now live on VulnHub. The difficulty is Easy and can be solved by anyone with basic enumeration skills and the ability to understand exploits. Tech_Supp0rt: 1 This website uses 'cookies' to give you the best, most relevant experience. Using this website means you're happy with…www.vulnhub.com This machine is inspired by Indian tech support scammers. It acts as a server which is…Vulnhub6 min readVulnhub6 min read
May 2, 2021Active: Medium(but very very easy)Recon The first step is to simply check for all open ports. For scanning all ports quickly I prefer rustscan.Hackthebox3 min readHackthebox3 min read
Jan 14, 2021Traverxec HTBThis is a just linux server which is hosting a few websites, which we will exploit with the help of a CVE, a config file, ssh keys and a weak sudo rule. Recon The first step is to identify all the running services. …Linux4 min readLinux4 min read
Dec 28, 2020Blunder HTBBlunder from Hack The Box is an easy rated machine made by egotisticalSW which is another Linux box hosting a site with an outdated version of Bludit CMS. ReconHackthebox4 min readHackthebox4 min read
Dec 26, 2020OpenAdmin HTBThis is a just linux server which is hosting a few websites, which we will exploit with the help of a CVE, a config file and a hidden website on thee same server. Recon Let us start with a port scan to identify the running services. …Hackthebox Writeup5 min readHackthebox Writeup5 min read
