Bijan Murmu (@0xBijan) | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Exploiting iOS app for fun and profit	Account Takeover Information Disclosure	Undisclosed	Bijan Murmu (@0xBijan)
Takeover seller accounts worth billions & millions	IDOR Account Takeover	Undisclosed	Bijan Murmu (@0xBijan)
Stealing cookies from subdomain leads to takeover user accounts at redacted.com	Account Takeover XSS	Undisclosed	Bijan Murmu (@0xBijan)
Deleting account via support ticket	IDOR Broken Access Control	Undisclosed	Bijan Murmu (@0xBijan)
Bug Bounty catches part -1	Authentication Bypass Information Disclosure Broken Access Control	Undisclosed	Bijan Murmu (@0xBijan)
How I found a simple and weird Account takeover bug	Account Takeover Missing Authentication	Undisclosed	Bijan Murmu (@0xBijan)
Facebook BugBounty: Tale of an Instagram bug disclosing user’s phone number via checkpoint	Information Disclosure	Meta / Facebook	Bijan Murmu (@0xBijan)
Facebook BugBounty : Short story on Page admin disclosure	Broken Authorization Privilege Escalation	Meta / Facebook	Bijan Murmu (@0xBijan)
How I was able to get private ticket response panel and FortiGate web panel via blind XSS	Blind XSS	Undisclosed	Bijan Murmu (@0xBijan)

Page 1 of 1