Posts

Intro BurpSuite is undoubtedly one of the most widely used tools for web security and bug bounty hunting. In this guide, I will introduce you to the fundamentals of how the tool works and how it can be used effectively. Additionally, I will provide insights on how to leverage BurpSuite for more advanced applications. Miscellaneous SSL/TLS Pass Through Whenever I open a new Burp Project, I always come across these unnecessary URLs, and every time I see them, it is annoying ngl :( ...

Hi folks! Recently while testing a mobile application, I found an interesting OTP Authentication Bypass vulnerability that could lead to account takeover. It was super simple and required just a small parameter modification in the API request. The authentication flow starts with a phone number input page: After entering the phone number, you get redirected to the OTP verification page: I started testing the authentication flow and intercepted the traffic using Burp Suite: ...