writeups.xyz writeups.xyz / Prial Islam Khan (@Prial261)

Title Vulnerabilities Programs Authors
Subdomain Hijacking Of Any Qwilr’s Customer
IDOR Leads To Leak Any Uber Eats Restaurant Analytics
XSS WAF & Character limitation bypass like a boss
Unicode vs WAF — XSS WAF Bypass
How I was able to Harvest other Vine users IP address
XSS bypass using META tag in realestate.postnl.nl
How I earned 5040$ from Twitter by showing a way to Harvest other users IP address
Vine User’s Private information disclosure
Subdomain takeover dew to missconfigured project settings for Custom domain .
Unclaimed Medium Publication takeover in WeTransfer
Story Of a Stored XSS Bypass