Its not a subdomain ( the website are chacking if website.com are on the url or not so if you crate a link evil-website.com) will redirect you to evil-website.com - Mohamed Anani - Medium

Thank you for sharing your knowledge.

0xm1racle

Sep 25

--

Its not a subdomain ( the website are chacking if website.com are on the url or not so if you crate a link evil-website.com) will redirect you to evil-website.com

Mohamed Anani

Written by Mohamed Anani

Someone who will be one of the best Egyptians in this field

More from Mohamed Anani

Discovering 7 Open Redirect Bypasses and 3 XSS Bypasses Within a Single Program Using Same…

Mohamed Anani

Discovering 7 Open Redirect Bypasses and 3 XSS Bypasses Within a Single Program Using Same…

In today’s Write-up, I will share my journey of uncovering 7 open redirects and 3 XSS WAF (Web Application Firewall) bypasse’s

3 min readSep 23

--

3

How i got more than 100 vulnerabilities in just one site? (zseano-challenge)

Mohamed Anani

How i got more than 100 vulnerabilities in just one site? (zseano-challenge)

In this article, I will talk about how I managed to discover over 100 vulnerabilities in a program on HackerOne. I also continued working…

9 min readJul 2

--

12

10 2FA Bypasses Discovered on a Single Program and Page

Mohamed Anani

10 2FA Bypasses Discovered on a Single Program and Page

In this article, I will talk about how I managed to discover over 10 2FA Bypasses on a Single Program and Page

4 min readAug 26

--

1

How i found 8 vulnerabilities in 24h?

Mohamed Anani

How i found 8 vulnerabilities in 24h?

Hello Awesome Hackers, I hope you all doing well! My name is Mohamed Anani Or 0xM5awy.

6 min readNov 18, 2022

--

2

See all from Mohamed Anani

Recommended from Medium

PII Disclosure Worth $750

the_unlucky_guy

PII Disclosure Worth $750

3 min read4 days ago

--

The Billion Dollar Exploit: Collecting Validators Private Keys via Web2 Attacks

Elad Ernst
in
0d--

The Billion Dollar Exploit: Collecting Validators Private Keys via Web2 Attacks

Abstract

13 min readNov 21

--

5

Lists

Staff Picks

519 stories484 saves

Stories to Help You Level-Up at Work

19 stories335 saves

Self-Improvement 101

20 stories980 saves

Productivity 101

20 stories885 saves

I Found A New Passive Income Skill For Beginners

Paul Rose

I Found A New Passive Income Skill For Beginners

And it’s perfect For Beginners

12 min readNov 24

--

51

Mass Google Dorking Techniques for Bug Bounty

Ott3rly

Mass Google Dorking Techniques for Bug Bounty

Discover high or critical severity vulnerabilities by using mass google dorking with the help of Google products themselves.

6 min readNov 24

--

XSS - Weaponization ATO

p4n7h3rx

XSS - Weaponization ATO

Hi fellow hunters, In this write-up I will detail the discovery of a reflected cross-site scripting bug and the subsequent escalation that…

3 min read5 days ago

--

1

Apps I Use And Why You Should Too.

Gowtham Oleti

Apps I Use And Why You Should Too.

Let’s skip past the usual suspects like YouTube, WhatsApp and Instagram. I want to share with you some less familiar apps that have become…

11 min readNov 14

--

32

See more recommendations

Help
Status
About
Careers
Blog
Privacy
Terms
Text to speech
Teams