Ha$h1m
search
⌘Ctrlk
Bugcrowd Profile
Ha$h1m
  • πŸ’²/dev/null
  • circle-dollarBug Bounty
    • square-downApplication-Level DoS
    • wine-glass-crackBroken Access Control
    • 8IDORs
    • wine-glass-crackLogic Bugs
    • stairsPrivilege Escalations
  • pooVDPs
  • codeAPPs
    • flask-round-poisonWeb Vulnerable LABs
  • booksAll Articles
    • πŸ”₯Some Privilege Escalations + Logic Flaws Led to (DoS, Organization Takeover & more)
    • πŸŸ₯Exploiting the Authentication Flow to Block Any User from Logging In/Resetting Password + An IDOR
    • 🟧Logic flaw k1lled business messaging for all users
    • πŸ”₯H4ck1ng the Same App for a Month -> $$$$
    • 🟩Logic flaw led to a $$$ privilege escalation
    • 🟩Is It Just About Replacing IDs? (I Guess Yes)
    • 🟧Logic flaw led to PrivEsc: I used a feature to bypass a restriction
    • 🟧I'm in love with Privilege Escalations!
    • 🟩Easy $$$ from PrivEsc: Hacking the Hidden Feature
    • 🟩From N/A to $$$: A Simple Python Script Led to Application-Level DoS
    • 🟧Hacking E-Commerce For $$$: IDOR and More
    • πŸŸ₯Logic Flaw: I Can Block You from Accessing Your Own Account
    • πŸŸ₯How Easily I Found My First P2 on Bugcrowd
    • 🟩An Easy RACE CONDITION That Made Me Fame
    • πŸ΄β€β˜ οΈ0xhashimRESETriddle: Vulnerable Web Application
    • 🟩How I Found My First Bug Through Simple Fuzzing
    • hashimXSS
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. circle-dollarBug Bounty

stairsPrivilege Escalations

Regular user today, admin tomorrow.

hashtag
Recent

πŸ”₯Some Privilege Escalations + Logic Flaws Led to (DoS, Organization Takeover & more)chevron-rightπŸ”₯H4ck1ng the Same App for a Month -> $$$$chevron-right🟩Logic flaw led to a $$$ privilege escalationchevron-right🟧Logic flaw led to PrivEsc: I used a feature to bypass a restrictionchevron-right🟧I'm in love with Privilege Escalations!chevron-right🟩Easy $$$ from PrivEsc: Hacking the Hidden Featurechevron-right

PreviousLogic Bugschevron-leftNextVDPschevron-right

Last updated 1 month ago