Skip to content
bhavukjain1
Account Takeover via Custom OTP, No User Interaction Required!

Capturing HTTP Requests from a non-proxy-aware Mobile Application

Zero-day in Sign in with Apple

Account Takeover Due to Misconfigured Login with Facebook/Google

Zomato Account Takeover using Victim's Facebook ID

Extracting Sensitive PII From a Tracking Number in Grab Parcel

© 2024 Bhavuk Jain

Built with 💛 + Gatsby