"Good artists copy; great artists steal."
Just another web hacking and vulnerability research blog that details how I use existing knowledge and old ways to discover new vulns ;)
Breaking
- android security
[Advisory] Unpatched URL Address Bar Spoofing Vulnerability in UC Browser 12.11.2.1184 and UC Browser Mini 12.10.1.1192: With the same old one-liner payload...
- corporate secrets
This is how (easily) Indiamart gave away access to their Internal corporate secrets and Dev Instances
- advisory
[Unpatched Vulnerability] CVE-2019-11015: Lock Screen Auth Bypass leading to Sensitive Information Disclosure and an Improper Access Control issue in Xiaomi MIUI OS (latest stable releases affected)
- mobile security
0day Alert: URL Spoofing Bypassed for latest Mint Browser 1.6.4 by Renwa
- 0day
0day Alert: Bypassing CVE-2019-10875 or, Xiaomi's Mint Browser's URL Spoofing patch: Discovered by Renwa
ad
Blog Archive
Menu - Pages
-
So, as promised on Twitter, the wait ends, new security vulnerability full disclosure in Xiaomi! MiSRC team accepted and confirme... -
Introduction Are Chinese device makers on purpose making their software and OS insecure for international markets? Chinese manufactur... -
Brief I discovered an URL Address Bar spoofing vulnerability in the latest version of the UC Browser 12.11.2.1184 and UC Browser Mini ...
-
I tried to reach out to the IndiaMart folks regarding the security issues I found there but sadly didn't find a proper channel to repo... -
The Google Bug Tracker helps them(Google) in tracking through different bugs and security issues, but Gopal, a highly skilled security re...
Archive
Sponsor
Technology
Tags
0day
advisory
android security
beef projec
beef xss framework
Blind SQLi
bug bounty
bug bounty writeup
Business logic bugs
content based
corporate secrets
CVE
data leak
google
google issue tracker bug
hacking
hacking google
hostile subdomain takeovers
Indiamart
InfoSec
internal panel
Mi
MIUI
mobile security
penetration testing
PoC
Reddit
security
security breach
SECURITY RESEARCH
security testing
security vulnerability
security writeup
sensitive information disclosure
SQL injection
SSRF
Subdomain takeovers
ticket trick
UC Browser
UC Browser Security Advisory
UC Browser security vulnerability
unpatched vulnerability
URL Address Bar Spoofing
vulnerability
vulnerability analysis
vulnerability assessment
vulnerability testing framework
Xiaomi
xiaomi browser 0day
xiaomi browser vulnerability
xiaomi security issue
Pages
Tags
0day
(1)
advisory
(1)
android security
(1)
beef projec
(1)
beef xss framework
(1)
Blind SQLi
(1)
bug bounty
(2)
bug bounty writeup
(1)
Business logic bugs
(1)
content based
(1)
corporate secrets
(1)
CVE
(1)
data leak
(1)
google
(1)
google issue tracker bug
(1)
hacking
(2)
hacking google
(1)
hostile subdomain takeovers
(1)
Indiamart
(1)
InfoSec
(1)
internal panel
(1)
Mi
(2)
MIUI
(1)
mobile security
(4)
penetration testing
(1)
PoC
(1)
Reddit
(1)
security
(2)
security breach
(1)
SECURITY RESEARCH
(1)
security testing
(3)
security vulnerability
(2)
security writeup
(2)
sensitive information disclosure
(1)
SQL injection
(1)
SSRF
(1)
Subdomain takeovers
(1)
ticket trick
(1)
UC Browser
(1)
UC Browser Security Advisory
(1)
UC Browser security vulnerability
(1)
unpatched vulnerability
(2)
URL Address Bar Spoofing
(1)
vulnerability
(2)
vulnerability analysis
(1)
vulnerability assessment
(1)
vulnerability testing framework
(1)
Xiaomi
(4)
xiaomi browser 0day
(2)
xiaomi browser vulnerability
(3)
xiaomi security issue
(3)
Recent News
About Me
An independent security researcher.
Learn More →
Categories
Crafted with by TemplatesYard
Socialize