bombon·Feb 23, 2025Let’s Talk About Encryption And IDORs(Yes, IDOR,s Again)— @bxmbnImagine a system designed to protect sensitive user data — like insurance policies — only to have a single misstep turn it into an open…A response icon4A response icon4
bombon·Feb 23, 2025Hijacking Sessions with IDOR and XSS— @bxmbnPicture a platform designed to handle sensitive documentation — think insurance claims or identity verification — turning into a goldmine…A response icon10A response icon10
bombon·Feb 23, 2025Bank offer IDOR Fix Bypassed: How I Accessed Unauthorized Offers and Secured a $10,000 Bounty —…A response icon4A response icon4
bombon·Jan 5, 2024I received a Bank offer in my mailbox and discovered an IDOR vulnerability - $5,000 bounty - @bxmbnIn October 2023, I opened a bank account with the hope of uncovering any vulnerabilities. I had tested this bank program before, however I…A response icon10A response icon10
bombon·Jan 5, 2024How I Prevented a Mass Data Breach - $15,000 bounty - @bxmbnIn July 2023, I received an invite of a significant bug bounty program, with massive assets in-scope, my approach mirrored what I typicallyA response icon11A response icon11
bombon·Jul 21, 2022Ultimate Tips And Tricks To Find More Cross-Site Scripting Vulnerabilities@bxmbnA response icon7A response icon7
bombon·Jul 21, 2022How I Test For Web Cache Vulnerabilities + Tips And Tricks@bxmbnA response icon19A response icon19
InInfoSec Write-upsbybombon·Jan 29, 2022How I Made +$16,500 Hacking CDN Caching Servers — Part 3@bxmbnA response icon4A response icon4
InInfoSec Write-upsbybombon·Jan 29, 2022How I Made +$16,500 Hacking CDN Caching Servers — Part 2@bxmbnA response icon3A response icon3
