IDOR (Insecure Direct Object Reference) leads to listing all valid Users and edit their Profiles

Zomatoooo! IDOR in Saved Payments

How I got my first $13500 bounty through Parameter Polluting (HPP)

The Butterfly Effect: Turning Overlooked - Misconfigurations into Zero Click Account Takeover

A Creative Way To Get Someones YouTube Videos Deleted + A Copyright Strike Against Their YouTube Channel

Bypassing ACLs – IDOR exploitation via HPP