hacking unpacked
TLDR; A class of vulnerabilities exists in AI-powered command-line interfaces (CLI) and IDE that can be exploited to exfiltrate sensitive browser storage data. When these tools automatically open HTML files in a user s browser without explicit confirmation, malicious repositories can leverage this behavior to steal cookies, localStorage, and sessionStorage contents: potentially including API keys…
For over a decade, I’ve been doing bug bounty, security audits, and security consulting. And if there’s one thing I’ve seen repeatedly, it’s this: Most startups call a security engineer or hire a security agency only when a compliance deadline is a few weeks or month away. Whether it’s PCI DSS, ISO 27001, SOC 1, Continue reading Compliance != Security
During my early years in bug bounty programs and security research, I observed firsthand how crypto projects—even those with robust blockchain protocols—often crumble due to overlooked Web2 vulnerabilities. In my 2020 blog post, Common Security Issues with Crypto Websites and APIs, I highlighted prevalent issues such as injection attacks, broken authentication, and insufficient authorization. At…
This post is a continuation of my last blog post on crypto startups front-end security. After my post on common security issues with crypto website and APIs, I had the opportunity to work with more crypto and fintech startups. Most fintech and crypto startups rely on third-party integrations. Looks like most of these integrations happen Continue reading Security issues with FinTech APIs and…
There are many crypto startups coming up with the increasing popularity of cryptocurrencies. As a FinTech enthusiast, I explore as many crypto websites, wallets, DeFi systems as possible and as a bug bounty hunter I get to test some of them. This week I tested a couple of crypto applications and there seems to be Continue reading Common security issues with crypto websites and APIs
Instacart is an American company that operates as a same-day grocery delivery service. Customers select groceries through a web application from various retailers and delivered by a personal shopper. As of 2017, Instacart only has operations and services in the United States. [1] Instacart has a bug bounty program on Hackerone, you can learn more about it at https://hackerone.com/instacart. I ve…
I have been doing bug bounties since September 2013(Asana was the first), participated and qualified in almost all bug bounties at least once. My bucket list had Facebook, Yahoo, Twitter, Dropbox, Github and 100+ such sites (including couple of YC Startups ) but Google VRP was tough nut to crack. I always wanted to start my bug bounty Continue reading Hacking Google for fun and profit
What is CSRF ? Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf) or XSRF, is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the website trusts. Wikipedia CSRF is at 8th position in OWASP Continue reading Understanding CSRF attacks
I printed out my Asana task list of web app security testing,hopefully you ll find it useful. OWASP 10 are the starting points of web testing, followed by other not so common issues. Comments inside my task list are more helpful(provide various attack scenario and test cases) but Asana don t export comments while printing, maybe I ll Continue reading Web application security checklist
Background: I have worked with lots of companies as security consultant through bug bounties either I asked them if they need my service or they approached. I m a big fan of Paul s essay, Hacker News, Startup School and YC as a whole, so thought to document my contribution to YC(nothing technical, just a list). I Continue reading List of Y Combinator companies I have worked with(hacked)