Hi there
This time, a story of my first AI hacking adventure. Well, it all started when, on some private BB program, I found a domain,…
Author page: bergee
bergee
Ho,ho, ho Merry Christmas everyone :)
Xmas is coming, and I am bringing the write-up on the RCE I found in Zip upload functionality.
I tested the…
When I started doing bug bounty I've been using my home computer for all. Recon, host scanning, domain bruteforcing, port scanning, subdomains enumeration, screenshoting websites.…
Hello
In this post, I will tell you how I was able to escalate the bug from HTML injection to stealing credentials via Google Analytics... well,…
Hi there
There was an app which allowed me to buy domains and offered different types of hosting. First I was testing the free features of…
Hello
The title might have been clickbait but it is not. I started from recon and discovered as many subdomains as possible of the target.com company.…
I am a little bit late but Happy New Year :)
In the beginning of the year I decided to hack one company, let's call it…
Hello folks
This time I want to tell you the story how I gained access to some admin functionalities and leaked some sensitive info using FUFF,…
Hello again
This time I will tell you about the easy way of credentials theft.
I was doing some recon on some sites. I stumbled upon a…
Hello there
Another day, another bug :) I started looking at the portal at redacted.com. The portal was written with PHP so I started fuzzing it…