Tips – Progress28

[Tips & Trick] 0-Click Account Takeover via OSINT

By: rootbakar March 1, 2024March 1, 2024

[Tips & Trick] 0-Click Account Takeover via OSINT

By: rootbakar February 20, 2024February 20, 2024

P1 – Account Takeover via Forgot Password API

By: rootbakar February 19, 2024February 19, 2024

P1 – OTP Code Leak to Account Takeover

By: rootbakar July 10, 2023July 10, 2023

P3 – Panel Admin Takeover via Credential Leak on API Documentation Link

By: rootbakar July 9, 2023July 10, 2023

P1 – RCE Via Upload PDF File

By: rootbakar July 8, 2023July 9, 2023

P1 – Time Based Blind SQL Injection on search parameter

By: rootbakar January 21, 2023January 21, 2023

P1 – Default Credential on Username Password Employer

By: rootbakar January 12, 2023January 12, 2023

P3 – Website Not Implement Email Verify (2000$)

By: rootbakar July 14, 2021July 14, 2021

[TIPS] P2 – BYPASS CODE VERIFICATION

By: rootbakar January 5, 2021January 5, 2021

[TIPS] P1 – BYPASS IDOR PROTECTION