Hi all, my name is Abdelkader Mouaz Know as Hamzadzworm my twitter: https://twitter.com/hamzadzworm and today i will share an idor bug that allowed me to get accesst to all users files 1.while browsing website i got a share options for private files but to share them you need two things: …

1.got new private invite ١.وصلتني دعوة من. احد المواقع 2.checked all functions untile i found subscription page ٢.قمت بفحص جميع خاصيات الموقع الى ان وصلت لصفحة الدفع للاشتراك بالموقع 3.redirected to payment page and intercepted response with Burpsuite ٣.تم اعادة توجيهي الى صفحة الدفع وقمت باعتراض رد الموقع عن طريق Burpsuite 4.found cancel/success url ٤.وجدت رابط الغاء الدفع ورابط اكمال الدفع 5.replaced canced url with success url

Hi All My Name Abdelkader Mouaz People know me as(Hamzadzworm -.-) Today i will share an interesting issue That i found At Hackerone Private Program and using it i was able to Block surveys stats of any other user. -.- Intorduction: i received a gmail notification about a private hackerone invite…

Hi Team Iam Abdelkader Mouaz my pseudo is Hamzadzworm today i will share with you a Bug That Lead To Takeover account of any user just if he view my profile I Was Hunting On Apple For Few Days, I Try to Do Subdomain Enumeration Using Multipe Tools To Get…

How I found two Xss At Apple that Lead for high/crirical impact — Hi all, hope you all doing great i usually post as hamzadzworm but my real name is Abdelkader Mouaz im going to share with you two vulnerabilities that i found at apple which are a stored and a blind xss they was at apple after few days of subdomain enumeration…

Hi again, it was a normal day, i go and smoke a cigarette like every morning,i take a cup of coffee then visite twitter and type bugbountytips to read any new tips there,then after some tips i decide to take a look on Hackerone To see if there is any…

Hi , this is my first write up with you in medium and i hope you will like it. Like everyday i wake up and there was nothing to do, no one to talk with -.- so i said, lets go to hackerone and take a look in hacktivity maybe…