Recently, I wrote about the  command execution vulnerability  i found in Paypal for which they sent me an initial payme...

Update  - The challenge is still up on hack.me -   https://hack.me/101575/bypass-blacklist-based-waf-challenge.html On 7th January 201...

In this post, i would like to share a very simple logic flaw I found earlier this year I have found a way to circumvent mobile verificat...

Introduction Sucuri Cloud Proxy  is a very well known WAF capable of preventing DOS, SQL Injection, XSS and malware detection and preve...

During my recent research on Mobile browsers i have managed to find couple of interesting vulnerabilities such as SOP bypass, Denial of...