Prakhar.Prasad
I write about web security, bug bounty hunting, and exploitation. Field notes from real engagements, deep dives into vulnerable code, and tools for the work.
Posts
29 posts Mar 27, 2014 Flipkart.com - Elevation of Privilege Feb 18, 2014 SSRF/XSPA in MailChimp Sep 21, 2013 PayPal CSRF aids in account takeover! Jun 28, 2013 Triggering an unexploitable DOM-based XSS in Rediff Blogs automagically Jun 13, 2013 Pwning Facebook accounts, taking a little help from Quora Jun 06, 2013 Flash-based XSS Mayhem: Most Security Solution Vendors Vulnerable May 21, 2013 Dropbox for Business Mailing List Unsubscribe Users (Permission Issue) May 16, 2013 Dropbox Team Website Open Redirection May 04, 2013 Google Website Translator (Add Editor) CSRF and Google Tasks Clickjacking Mar 12, 2013 File Upload Bug in PayPal's BillMeLater