Ethical Hacker

I completed the Web Security Academy lab: User ID controlled by request parameter, with unpredictable user IDs @WebSecAcademy portswigger.net/web-security/a…

🚀 Lab Completed: DOM XSS using Web Messages and a JavaScript URL Successfully completed another Web Security Academy lab focused on identifying and exploiting a DOM-Based Cross-Site Scripting (XSS) vulnerability. #BugBounty #CyberSecurity #EthicalHacking #WebSecurity #DOMXSS

🚀 Lab Solved: File Path Traversal – Absolute Path Bypass Successfully completed the "File path traversal, traversal sequences blocked with absolute path bypass" lab from PortSwigger Web Security Academy. #CyberSecurity #BugBounty #PathTraversal #OWASP #InformationDisclosure

🐞 Finding & Exploiting an Unused API Endpoint — PortSwigger Web Security Academy আজ আমি PortSwigger Web Security Academy-এর “Finding and exploiting an unused API endpoint” lab successfully complete করেছি। #CyberSecurity #WebSecurity #BugBounty #API #APISecurity #BusinessLogic

🚨 New Security Finding: Mass Assignment Vulnerability Another hands-on application security challenge completed! 🔐 #CyberSecurity #EthicalHacking #BugBounty #SecurityResearch #ApplicationSecurity #BurpSuite #WebSecurity #OWASP #MassAssignment #BusinessLogic #PenetrationTesting

I completed the Web Security Academy lab: Exploiting a mass assignment vulnerability @WebSecAcademy portswigger.net/web-security/a…

This lab reinforced how trusting client-controlled serialized data without proper validation can introduce serious security risks and why secure deserialization is essential in modern web applications. #CyberSecurity #EthicalHacking #BugBounty #WebSecurity #ApplicationSecurity

I completed the Web Security Academy lab: Modifying serialized data types @WebSecAcademy portswigger.net/web-security/d…

1win Security Assessment Report (Summary) Target: 1w.run Assessment Date: July 24, 2026 Testing Scope: 1w.run Domain Findings Overview 🔴 Critical: 3 🟠 High: 2 🟡 Medium: 1 🟢 Informational: 1 🔴 Critical

I completed the Web Security Academy lab: Web shell upload via extension blacklist bypass @WebSecAcademy portswigger.net/web-security/f…

I completed the Web Security Academy lab: 2FA broken logic @WebSecAcademy portswigger.net/web-security/a…

🔐 Responsible Security Disclosure – IDOR Vulnerability I'm excited to share another milestone in my cybersecurity journey. Recently, during independent security testing, I identified an Insecure Direct Object Reference (IDOR) / Broken Object Level Authorization (BOLA)

🚨 High Severity IDOR (Insecure Direct Object Reference) – Responsible Disclosure Recently, I identified and responsibly disclosed a High Severity IDOR (Insecure Direct Object Reference) vulnerability affecting an e-commerce web application. #CyberSecurity #EthicalHacking

🚨 New Security Finding: High Severity Business Logic Flaw Recently, during a security assessment of a WooCommerce-based e-commerce application, I identified a High Severity Business Logic Flaw caused by improper server-side quantity validation. #CyberSecurity #BugBounty

🚨 Clickjacking Vulnerability – UI Redressing Recently, I successfully identified and demonstrated a Clickjacking (UI Redressing) vulnerability affecting a sensitive account management page. #BugBounty #CyberSecurity #EthicalHacking #ApplicationSecurity #WebSecurity #Clickjacking

I completed the Web Security Academy lab: Clickjacking with form input data prefilled from a URL parameter @WebSecAcademy portswigger.net/web-security/c…

🚨 **High Severity IDOR (Broken Access Control) Identified During Security Research** Today I documented a **High Severity IDOR (Insecure Direct Object Reference)** vulnerability while performing security research on a live e-commerce application.

Vulnerability: Blind OS Command Injection with Output Redirection What I learned: ✅ Identifying command injection points ✅ Understanding blind command execution ✅ Using output redirection to verify execution #CyberSecurity #EthicalHacking #BugBounty

Today, I successfully completed a hands-on lab focused on Cross-Site WebSocket Hijacking (CSWSH), #BugBounty #EthicalHacking #CyberSecurity #WebSecurity #WebSocket #CSWSH #OWASP #InfoSec #SecurityResearch #LearningInPublic

I completed the Web Security Academy lab: Cross-site WebSocket hijacking @WebSecAcademy portswigger.net/web-security/w…