Mohsin khan·Jan 27When “Export CSV” Becomes a Data Breach: A Case Study of a IDOR in a Crypto PlatformWhile testing export functionality on a crypto trading platform, I discovered that users’ spot and futures order history CSV files were…A response icon5A response icon5
Mohsin khan·Dec 15, 2025Bug Bounty Burnout and the Boredom of Repetitive TasksTwitter highlights, leaderboard screenshots, five-figure payouts, and “first critical of the month” posts paint a picture of constant…A response icon3A response icon3
Mohsin khan·Dec 9, 2025How I Made $5,000 (₹4.49 Lakh) in Just 1 Hour by Scanning JavaScript FilesHi everyone, It’s been a while since I published something useful, so here’s a quick write-up of how I made $5,000 in about one hour of…A response icon15A response icon15
Mohsin khan·May 4, 2025Bypassing 2FA in a Public Bug Bounty Program: A $6000 JourneyAs a bug bounty hunter, uncovering vulnerabilities in public programs is both thrilling and rewarding. In this post, I’ll walk you through…A response icon14A response icon14
Mohsin khan·Nov 27, 2024The P2 Bug You Could Miss Without Reading the DocumentationHi everyone,A response icon3A response icon3
Mohsin khan·Nov 20, 2024The $2,200 ATO Most Bug Hunters Overlooked by Closing Intruder Too SoonBug hunting is a mix of technical skills, persistence, and curiosity. Sometimes, the simplest bugs are overlooked because of one thing —…A response icon16A response icon16
Mohsin khan·Sep 29, 2024Bypassing Filters: SSRF Exploitation via DNS Rebinding with Just 1 in 30 Successful RequestsHey everyone, hope you’re all doing well! I wanted to share a cool bug story I came across a few months ago. It’s about an SSRF…A response icon6A response icon6
Mohsin khan·Sep 27, 2024I Spent a Month on a Private Program and Earned $$$$$I hope you all are doing great. I’m tweeting about taking on challenge where I will spend an hour on one program and see how it goes.A response icon7A response icon7
Mohsin khan·Sep 6, 2022What would I do if I start bug hunting from 0 again?Hi everyone,A response icon11A response icon11
Mohsin khan·May 21, 2022A business Logic issue worth $1500Hello everyone,A response icon4A response icon4
