List: Bypasses | Curated by Sagar Sajeev

Nov 15, 2022

39 stories

5 saves

Bypasses
In
InfoSec Write-ups
by
thanhdat1011
How I found the Authentication Bypass bug and Earn $$$$Hi all,
Dec 15, 2021
4
Dec 15, 2021
4
Ertugrul
OTP bypass with response manipulation.Greetings, I wanted to share with you the OTP Bypass vulnerability that I found in a VDP.
Nov 27, 2021
Nov 27, 2021
Sujay Hazra
Account Takeover via 2FA BypassHello Everyone , This is my first writeup
Aug 31, 2021
2
Aug 31, 2021
2
Ahmed Salah Abdalhfaz (Elsfa7-110)
Two-Factor Authentication BypassWhat is 2fa ?
Sep 26, 2021
1
Sep 26, 2021
1
Arth Bajpai
2fa Bypass by changing Request method to DELETEHello Everyone My name is Arth Bajpai, I’m from Lucknow, India, and I’m back with my third write-up about a 2fa Bypass which I Found a…
Jan 29, 2022
5
Jan 29, 2022
5
Arth Bajpai
IDOR leads to 2fa BypassHello Everyone my name is Arth Bajpai and , I’m back with my another writeup
Jan 17, 2022
1
Jan 17, 2022
1
Damaidec
403 bypass on a fortune 100 financial institution (P3)This is my first P3 Bug and I found it after just a few hours. The method I learned from the Ambassador world cup CTF I used it here in…
Jun 14, 2022
Jun 14, 2022
Vaibhav Gaikwad
2fa Bypass Using Response ManipulationHi Folks I am Vaibhav Gaikwad Bug Bounty Hunter from India and i recently found a 2fa bypass using Response Manipulation bug on Bugcrowd…
Apr 15, 2021
2
Apr 15, 2021
2
In
InfoSec Write-ups
by
Ananda Dhakal
How I was able to bypass OTP token requirement in Razer [The story of a critical bug]A story of turning an Informative bug to critical bug
Oct 16, 2019
7
Oct 16, 2019
7
In
InfoSec Write-ups
by
Tamim Hasan
403 forbidden bypass leads to HALL OF FAMEAssalamu Alaikum
peace be upon you
Jun 21, 2021
8
Jun 21, 2021
8
In
InfoSec Write-ups
by
Pratikkhalane
How I was able to bypass the admin panel without the credentials.This is my first article and I hope you guys will surely learn something new. Since I am not allowed to disclose the information about the…
Jun 11, 2021
9
Jun 11, 2021
9
In
InfoSec Write-ups
by
Anirudh Makkar
Authentication Bypass | Easy P1 in 10 minutesRecon always wins
Jun 16, 2021
8
Jun 16, 2021
8
Prajit Sindhkar
Bypassing 403 Protection To Get Pagespeed Admin AccessHello guys👋👋 ,Prajit here from the BUG XS Team, it’s been a long time since my last story, sorry for the delay was held back in exams and…
Oct 4, 2021
10
Oct 4, 2021
10
Sonu Chaudhary
403 Forbidden Bypass technique.Hi, everyone!
Oct 3, 2021
2
Oct 3, 2021
2
0xJin
New XSS Bypass CLOUDFLARE + Filters.Hello Folks, i want to tell my story of this type of XSS.
Nov 4, 2021
2
Nov 4, 2021
2
Sahil Dari
Easiest Critical Bug triaged on HackerOneGreetings awesome Hackers. I’m Sahil Dari and this is my first blog on my first easiest Critical report triaged on HackerOne. I don’t need…
Aug 8, 2021
Aug 8, 2021
Vishal Barot
Bruteforce Protections BypassHello Hackers!!! I am back with another write-up. Today I will be sharing how I bypassed bruteforce protections on one of my target and…
Jan 16, 2022
4
Jan 16, 2022
4
In
InfoSec Write-ups
by
hosein vita
How i was able to bypass Cloudflare for XSS!In the name of God.
Jul 16, 2021
5
Jul 16, 2021
5
Brandon Roldan
Broken Access control bug : Bypassing 403’s by finding another endpoint that do the same thing.Hi. I found a really interesting bug in my private program and i want to share it through this writeup. Lets get started.
Jul 13, 2021
2
Jul 13, 2021
2
In
InfoSec Write-ups
by
Chirag Soni
Email Verification Bypass- A Strange Case!Hey, What’s Up Fellow Hackers, hope you are staying safe and utilizing this (WFH or Online Classes ) time to increase your knowledge. So…
Apr 30, 2021
2
Apr 30, 2021
2

Bypasses

How I found the Authentication Bypass bug and Earn $$$$

Hi all,

OTP bypass with response manipulation.

Greetings, I wanted to share with you the OTP Bypass vulnerability that I found in a VDP.

Account Takeover via 2FA Bypass

Hello Everyone , This is my first writeup

Two-Factor Authentication Bypass

What is 2fa ?

2fa Bypass by changing Request method to DELETE

Hello Everyone My name is Arth Bajpai, I’m from Lucknow, India, and I’m back with my third write-up about a 2fa Bypass which I Found a…

IDOR leads to 2fa Bypass

Hello Everyone my name is Arth Bajpai and , I’m back with my another writeup

403 bypass on a fortune 100 financial institution (P3)

This is my first P3 Bug and I found it after just a few hours. The method I learned from the Ambassador world cup CTF I used it here in…

2fa Bypass Using Response Manipulation

Hi Folks I am Vaibhav Gaikwad Bug Bounty Hunter from India and i recently found a 2fa bypass using Response Manipulation bug on Bugcrowd…

How I was able to bypass OTP token requirement in Razer [The story of a critical bug]

A story of turning an Informative bug to critical bug

403 forbidden bypass leads to HALL OF FAME

Assalamu Alaikum peace be upon you

How I was able to bypass the admin panel without the credentials.

This is my first article and I hope you guys will surely learn something new. Since I am not allowed to disclose the information about the…

Authentication Bypass | Easy P1 in 10 minutes

Recon always wins

Bypassing 403 Protection To Get Pagespeed Admin Access

Hello guys👋👋 ,Prajit here from the BUG XS Team, it’s been a long time since my last story, sorry for the delay was held back in exams and…

403 Forbidden Bypass technique.

Hi, everyone!

New XSS Bypass CLOUDFLARE + Filters.

Hello Folks, i want to tell my story of this type of XSS.

Easiest Critical Bug triaged on HackerOne

Greetings awesome Hackers. I’m Sahil Dari and this is my first blog on my first easiest Critical report triaged on HackerOne. I don’t need…

Bruteforce Protections Bypass

Hello Hackers!!! I am back with another write-up. Today I will be sharing how I bypassed bruteforce protections on one of my target and…

How i was able to bypass Cloudflare for XSS!

In the name of God.

Broken Access control bug : Bypassing 403’s by finding another endpoint that do the same thing.

Hi. I found a really interesting bug in my private program and i want to share it through this writeup. Lets get started.

Email Verification Bypass- A Strange Case!

Hey, What’s Up Fellow Hackers, hope you are staying safe and utilizing this (WFH or Online Classes ) time to increase your knowledge. So…

Sagar Sajeev