Akash c·Oct 18, 2024Exploiting Session Fixation via Stored XSS and Cookie Jar Overflow AttackAs a Pentester, I know that sometimes finding a vulnerability isn’t enough you also need to demonstrate the real impact to get it taken…A response icon2A response icon2
Akash c·Mar 2, 2023Bypass SSL Pinning on Flutter iOS App Using Frida and OpenVPNFlutter is an open-source mobile app development framework created by Google, that enables developers to create natively compiled…
Akash c·Jan 29, 2023Blind XSS To SSRFDuring bug hunting in a private bug bounty program, I came across a feature within the application that allowed for the generation of PDF…A response icon1A response icon1
Akash c·Jan 28, 2023Bypassing account lockout through password reset functionalityDuring a recent penetration testing engagement, I discovered a vulnerability in the login page of a web application. Specifically, I found…
Akash c·Apr 10, 2021Reflected Cross-site scripting in Triconsole Datepicker Calendar (CVE-2021–27330)Risk: Medium
