Mohammed Arbaaz Shaikh
ar6aaz

ar6aaz

Follow
homebadges

Lessons from a Live Hacking event

Dec 25, 20226 min read

I recently participated in a virtual Live Hacking event organized by bugbountyhunter.com. This was my first ever Hackevent and I learned a lot of new...

Lessons from a Live Hacking event

Exploiting exposed Spring Boot Heapdump endpoint

Oct 2, 20224 min read

While testing for bugs on a Vulnerability Disclosure Program, I recently came across a subdomain of the program having an application running on...

Exploiting exposed Spring Boot Heapdump endpoint

Learning how to hack AEM Web Apps

Nov 6, 20215 min read

I had to cancel my Diwali vacation plan for some reason. Now, I had 10 days off work not knowing what to do. So, I decided to jump on Hackerone and...

Learning how to hack AEM Web Apps

Testing Password Reset functions

Jun 13, 20218 min read

Password Reset is one of the most common features in web applications. Every website that requires you to make an account also implements a way to...

Testing Password Reset functions

What is IDN Homograph Attack?

Jan 30, 20216 min read

Yesterday, I came across an interesting tweet from Simone(@evilsocket on Twitter). In the tweet, he put a link to goᴏgle.com which on clicking,...

What is IDN Homograph Attack?

Code your own Port Scanner using Python

Jan 26, 20216 min read

Nmap Nmap is one of the most important Information Gathering tools used by a Penetration Tester. Nmap or network mapper is a port scanning program...

Code your own Port Scanner using Python