$ grep -l "#bug-bounty" ~/blog/*

#bug-bounty

2 posts · all posts

  1. 3 min read

    My first P1 vulnerability | Hacking Adobe Experience Manager CMS Dispatcher through CVE-2016–0957

    How I bypassed an Adobe Experience Manager Dispatcher with CVE-2016-0957 to list a site's internal content directories, and what happened to the report.

  2. 2 min read

    My First Bug | Account takeover through OTP bypass

    My first ever bug and write-up: an OTP field with no rate limiting let me brute-force the code and take over an account on my ISP's website.