3 min readNassec, a cybersecurity startup based in Kathmandu, on Sep 10, 2020 pre launched their first product, “ReconwithMe” a web application vulnerability scanner, for Beta testing. ReconwithMe is the first of its type product to be launched by a startup based in Nepal and can be used to find security vulnerabilities present in web applications. Nassec…
3 min readThis write-up is about how I was able to find page/personal account disclosure on Instagram. In my previous blog, I had written about Page admin disclosure and I had got much positive feedback on that blog. Since a lot of people were interested in such vulnerability exposures, I thought why not cover my new discoveries on a…
3 min readFinding an XSS issue in Samy Kamkar’s site, one of the first JavaScript-based worm creator, proves that no system can be 100% secure no matter how much experienced the owner/developer is. It is only a matter of time and the amount of knowledge to discover a new or even existing flaw.
2 min readThis article was originally posted on https://bigomega.dev. Error handling is vital while making AJAX requests in any tool. The solution I propose can be applicable for all kinds of frameworks or libraries. I am used to working with React.JS and in this blog, I talk about the approach I use handling errors that occur during…
3 min readIn this blog post, we are going to give a short light on the Christmas tree attack. It is a type of attack where a specially crafted TCP packet is sent to the target device. This attack is used as a reconnaissance technique to grab information about various operating systems. The attack involves the setting…
3 min readIn this week’s blog, I am writing about how I was able to bypass the eligibility criteria for the Brand Collabs Manager and register my page without meeting the criteria and policy. I wasn’t awarded any bounty for this as Facebook’s production team deemed it unqualified for monetary reward. If you are not familiar with…
