Hey 馃憢
This is Max鈥檚 (aka w2w) blog dedicated to security research and white hat hacking.
Redacted bugs #3: Hunting for bugs worth $7,750 in an adult content platform
A security research describing 6 subscription-based adult content app-related vulnerabilities resulted in a $7,750 total bounty.
Gift cards security research
A security research describing 9 gift card-related security vulnerabilities resulted in a $6,500 total bounty.
Redacted bugs #2: Privilege escalation during the OAuth app installation
Redacted bugs #1: Chaining linear growth of brute force attempts, no OTP correlation, and other OTP bugs to achieve 2 ATOs
MFA security testing and possible bypasses
This post describes 11 ways of bypassing multi-factor authentication.
Exploitaiton of Cookie-Based XSS vulnerabilities
A guide on how to exploit Cookie-Based XSS bugs
Disclosure of 5 million private Telegram chat links and the possibility of editing any article on Telegra.ph
Hacking cryptocurrency-related companies for $60,000
A story of 7 vulnerabilities in cryptocurrency-related services