// Ethical Hacking · Bug Bounty · Offensive Security
Open to CollaborationBug bounty writeups &
hacking tutorials.
Real vulnerabilities, full exploitation walkthroughs, and the recon that found them. Notes from the field by Anas — web & API pentester and bug bounty hunter.
✓ CVE-2018-8383 | 20+ public writeups | web · api · mobile
// latest
Recent Writeups
Log4Shell (CVE-2021-44228): Blind RCE on a Major Retailer
An obfuscated JNDI payload sprayed across request headers returned callbacks from internal production servers — blind, unauthenticated remote code execution deep inside the network.
Password-Reset Token Theft via Link Poisoning on Red Bull
A reset link that trusted a user-controlled target. I stole the token four different ways as each fix shipped — XSS, open redirect, and two filter bypasses — every round ending in account takeover.
Address Bar Spoofing in Microsoft Edge (CVE-2018-8383)
A stalled navigation to a dead port froze a trusted domain in Edge's address bar while my fake page stayed on screen. Reported and credited as CVE-2018-8383.
Email Spoofing via IDN Homograph Domains
I didn't forge a domain — I registered one that renders as a trusted brand. The mail passes SPF, DKIM and DMARC cleanly, yet the inbox shows a legitimate sender.
XSS Like a Pro: Beating Filters Across a Private Program
Eleven bugs on one target in a single session. The fun wasn't finding the injection points — it was defeating the filters, including turning the app's own tag-stripping into a bypass.
Cross-Site Scripting (XSS), Explained Properly
What XSS really is, the three types, and why input filters alone never save you — the fundamentals, explained the way I wish they'd been explained to me.
// topics
Dig by topic
// new here?
Start with these
Get new writeups in your inbox
No spam, no tracking — just a note when a new vulnerability writeup or tutorial goes up. Cross-posted on Medium.