$ cd ~

Writeups / 2

Security research — web, API and Android vulnerabilities.

cybersecurityaws-s3nothing-phone

Hacking Nothing! Unauthorised access to Nothing’s AWS S3 Buckets

Hi everyone! I am Mohammad Kaif and I will share one my findings which I found in one of Nothing’s app. Introduction In this writeup I will share how I…

read writeup →
information-securitybug-bountysecurity

Story of Account Takeover : Using Social Login with Mass Assignment Vulnerability to hack accounts !

Story of Account Takeover : Using Social Login with Mass Assignment Vulnerability to hack accounts ! Hey everyone, this is Mohammad Kaif aka mkahmad an 18…

read writeup →