Published in InfoSec Write-ups·Oct 26, 2021An Effective 5 min recon leads to a Hall of FameHi There, Renganathan Here, I’m an Ethical Hacker & a Security researcher. I’ve been acknowledged by LinkedIn, United Nations, BYJU’s, Nike, Lenovo, Upstox for reporting security vulnerabilities in their web applications. So I came back to bug bounties after almost 2 months. I had exams after the IRCTC bug. Let’s…Github2 min read
Published in InfoSec Write-ups·Sep 12, 2021Exposing Millions of IRCTC Passengers' ticket details.Hi There, Renganathan Here, I’m an Ethical Hacker & a Security researcher. I’ve been acknowledged by LinkedIn, United Nations, BYJU’s, Nike, Lenovo, Upstox for reporting security vulnerabilities in their web applications. What’s IRCTC? IRCTC, India’s largest online ticketing operations site which runs one of the largest e-commerce sites, has around…Bug Bounty3 min read
Published in InfoSec Write-ups·Jul 29, 2021How I could have hacked your medium account by phishing your FB, Twitter & Google credentials.Hi There, Renganathan here. This write-up is about the vulnerability that I found on Medium which will allow me to hack your medium account by phishing your FB, Twitter & Google credentials. YES :P A few months ago I saw Pratik Dabhi was listed in the medium hall of fame…Bug Bounty3 min read
Published in InfoSec Write-ups·Jul 22, 2021Joining any class without the teacher’s invitation in Khan AcademyHi There, Renganathan here. This write-up is about a vulnerability that I found on khanacademy.org. Khan Academy Got a VDP on hackerone. There was a virtual class that may be somewhat similar to google classroom I guess :) I started testing with a few vulnerabilities like privilege escalation from student…Bug Bounty2 min read
Published in Techiepedia·Jun 29, 2021A Server misconfiguration leads to watching a standup comedy show for free. $100 worth bounty.Hi There, Renganathan here. Let’s keep the website as “target.com” target.com doesn’t have a responsible disclosure program, but still, they do give bounties or rewards for security researchers for findings bugs. target.com is a ticket booking platform. You can book tickets for events, shows, concerts, sports matches. …Bug Bounty3 min read
Published in InfoSec Write-ups·Jun 17, 2021Crashing your LinkedIn app with a connection request.Hi There, Renganathan here. This write-up is about an accidental bug that I found on LinkedIn. So that was the early time when I joined LinkedIn and I didn’t know much about the working functionalities. I’ve used only Instagram in my life *_* I was trying to send a connection…Bug Bounty2 min read
Published in Techiepedia·Jun 16, 2021How I made the United Nations Hall of Fame in 3 minutesHi There, Renganathan here. This Write-up is about how I made the United Nations hall of fame in 3 minutes. And this is my first write-up / Blog on Medium. Ps- I don’t know to use Medium. I saw there was a vulnerability reporting program on United Nations (UN) so…Bug Bounty2 min read
