Back to directory
WRITEUP #1510

How I Used JS files inspection and Fuzzing to do admins/supports stuff

OtherBroken Access Control
by@SirBagoza(Fares Walid)
Program
-
Published
Feb 23, 2023
Added to HackDex
Mar 2, 2023
Read Full Writeuphttps://medium.com/@bag0zathev2/how-i-used-js-files-inspection-and-fuzzing-to-do-admins-supports-stuff-dd4f700605a
▸ RELATED WRITEUPS
Leaking All Users Google Drive Files
OtherBroken Access Control
Hacking Moodle Apps Via External Functions
OtherBroken Access Control
Data Theft in Salesforce: Manipulating Public Links
OtherSOQL injection
When Certificates Fail: A Story of Bypassed MFA in Remote Access
Other2FA / MFA bypass
SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff
OtherSSTI

Built with ❤️ by Shubham Rawat