Best Practices For Mobile Device Testing

Photo by freestocks on UnsplashMobile testing is done to confirm that all of its features, including its hardware and other software components, are functioning effectively. Technically speaking, it is called the mobile device quality check, which ensures that the software and hardware comply with the actual customer's needs. In...

Read more

Open Redirection in Oauth

Hi there, I am fond of testing API. Whenever a bug bounty program launches their program first of all I look if they have an API or not. I have tested API of many websites like Mapbox ,Mediafire and found many issues. Now I stumbled across a website...

Read more

Insufficient Transport Layer Protection: Mediafire Android Application

Hi there, It was a quite long time since I published my last post sorry for keep you waiting. So this is a story of  a bug which I found in Mediafire android application actually  First of all I want to clarify that I never use rooted devices...

Read more

Bypassing Private Profile Restrictions

So this post is about bypassing the private profile Restrictions on a private program on HackerOne. I will not disclose the program name so lets call it example.com So I got an invitation to a private program on HackerOne. I created an account on it , it was...

Read more

Bug Bounty: Bypassing Account Suspension In order to get full access to account[Mediafire]

Hi there, In this post I am going to discuss about a bug which I found on Mediafire. I noticed that Mediafire have a bug bounty program. What is Mediafire:-  MediaFire is a file hosting, file synchronization, and cloud storage service based in Shenandoah, Texas, United States. Founded...

Read more

Website Sends the Actual Password on the Mobile Number: Considered as the Severe Vulnerability or Not ?

Hi there, I was just looking at some website which provides free SMS sending service. There are a lot of website which provides this functionality in India.  So what is a SMS SMS stands for Short Messaging Service. It uses standardized communication protocols to enable mobile phone devices...

Read more

Bug Bounty: Vulnerability In customer.io

Hi there, First of all sorry for this long pause from my side I was busy in somethings and it took me some time to sort out all the things. So in this post I am going to discuss about a vulnerability I found in customer.io. About customer.io:-...

Read more

Wi-Fi Hacking: Deauthentication Attack

Hi there, So this post is about deauthentication attack. So we can do a deauthentication attack without connecting to a target network. How It works:- So in this process aireplay-ng sends deauthenticate packets to both AP(Access Point or router) and client which is connected to it. It sends...

Read more