Tips – Progress28

P3 – Panel Admin Takeover via Credential Leak on API Documentation Link

By: rootbakar July 10, 2023July 10, 2023

P3 – Panel Admin Takeover via Credential Leak on API Documentation Link

By: rootbakar July 9, 2023July 10, 2023

P1 – RCE Via Upload PDF File

By: rootbakar July 8, 2023July 9, 2023

P1 – Time Based Blind SQL Injection on search parameter

By: rootbakar January 21, 2023January 21, 2023

P1 – Default Credential on Username Password Employer

By: rootbakar January 12, 2023January 12, 2023

P3 – Website Not Implement Email Verify (2000$)

By: rootbakar July 14, 2021July 14, 2021

[TIPS] P2 – BYPASS CODE VERIFICATION

By: rootbakar January 5, 2021January 5, 2021

[TIPS] P1 – BYPASS IDOR PROTECTION

By: rootbakar December 30, 2020January 9, 2021

[TIPS] OPEN REDIRECT TO ATO VIA GOOGLE AND FACEBOOK OAUTH

By: rootbakar December 25, 2020December 25, 2020

[TIPS] BYPASS INSECURE DIRECT OBJECT REFERENCE (IDOR) PROTECT

By: rootbakar December 25, 2020January 9, 2021

[TIPS] BYPASS FIXED – ATO VIA FORGOT PASSWORD ON MOBILE APP