Home / Tag: bug bounty

Tag: bug bounty

How I hacked ASUS?

9 February 2019 Mustafa Kemal Can

Hello folks! Today I want to talk about ASUS RCE vulnerability on rma.asus-europe.eu domain. I was trying to fill out service apply form for my personal laptop. I had a screen issue. I realised that there is an upload part to upload some warranty documents. I was trying to bypass upload restrictions by editing request….

27 December 2017 Mustafa Kemal Can

Articles

0 Comment

bug bounty cyber security file upload xss muskecan mustafa kemal can smartsheet xss unathorized xss vulnerability xss xss vulnerability

Hi, today I want to explain XSS vulnerability that I found on Smartsheet.com. Smartsheet XSS vulnerability is an interesting vulnerability because it occurs via file upload! By the way I want to clarify that, this XSS works with or without authorization, so it is dangerous vulnerability as well as interesting. What is Smartsheet and more…

bypass-two-factor-authentication on login.gov

14 November 2017 Mustafa Kemal Can

Articles

0 Comment

bug bounty bypass bypass 2fa bypass two factor auth bypass two factor authentication hack hackerone login.gov muskecan mustafa kemal can vulnerability

I found a way to bypass two factor authentication on login.gov which contains critical informations in it. This vulnerability occurs because of the misconfigurated token. The account creating process of login.gov is very interesting. You need to confirm your email first, instead of last. I realised that this might cause some security problems. And it…