4696 | XSS in Microsoft subdomain |
XSS |
Microsoft |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2018-07-13 | 2023-06-13 |
4442 | Story about my first bug bounty |
XSS |
Alibaba |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2018-11-30 | 2023-06-13 |
4357 | Reflected XSS in Zomato |
Reflected XSS |
Zomato |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2019-01-21 | 2023-06-13 |
4033 | How Recon helped me to to find a Facebook domain takeover |
Subdomain takeover |
Meta / Facebook |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2019-07-17 | 2023-06-13 |
3746 | Bug Hunting Journey of 2019 |
XSS
Privilege escalation
Information disclosure |
Alibaba
Yahoo! / Verizon Media |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2019-12-31 | 2023-06-13 |
3238 | Reflected XSS in Facebook’s mirror websites |
Reflected XSS |
Meta / Facebook |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2020-08-08 | 2023-06-13 |
2697 | How I made it to Google HOF? |
IDOR |
Google |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2021-03-21 | 2023-06-13 |
1963 | Story of a weird CSRF bug |
CSRF |
NA |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2021-12-29 | 2023-06-13 |
1955 | Bug Hunting Journey of 2021 |
Stored XSS
Open redirect
Token leak
CSRF
Logic flaw
Information disclosure
IDOR
Account takeover |
NA |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2021-12-31 | 2023-06-13 |
1621 | Prototype Pollution in fast-xml-parser |
Prototype pollution |
NA |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2022-04-14 | 2023-06-13 |
636 | Exploring the World of ESI Injection |
ESI injection
WAF bypass
XSS |
NA |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2022-12-29 | 2023-06-13 |
162 | Discord Rich Presence LeonardSSH.vscord |
Information disclosure |
vscord |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2023-04-23 | 2023-06-13 |
33 | Prototype Pollution Akamai |
Client-side prototype pollution
WAF bypass |
NA |
Sudhanshu Rajbhar (@sudhanshur705) |
Bug Bounty | 2023-06-03 | 2023-06-13 |