Samadhan shimple·3d agoSSRF Bug Bounty Methodology: A Practical Hunting Guide | by Samadhan ShimpleServer-Side Request Forgery (SSRF) is one of the web security vulnerabilities I find particularly interesting because it can be hidden…
Samadhan shimple·Oct 28I Found SSRF in 30 Minutes: Here’s My Exact Bug Bounty Workflow (Complete Guide) | by Samadhan…Server-Side Request Forgery (SSRF) is a web security vulnerability that occurs when an application makes a server-side request using input…
InBug Bounty HuntingbySamadhan shimple·Oct 19SSRF to Full Compromise: How One Bug Exposes Everything | by Samadhan ShimpleA practical guide to understanding SSRF, finding potential vulnerabilities, assessing their impact, and preventing them.
InMeetCyberbySamadhan shimple·Oct 9How I Found a Blind SSRF Through a Referer Header — Here’s How I Confirmed It | by Samadhan ShimpleWhile testing a web application’s password-reset functionality, I noticed something that initially looked completely ordinary: a Referer…
Sivanesan M·Sep 29I Asked “What is OAST?” and Fell Down a Rabbit Hole — Here’s What I LearnedA few days ago, I stumbled across a term in a bug bounty write-up: OAST payload. I had no clue what it meant, so I did what anyone would do…