Amirabbas Ataei

Bug Hunter & Web Application Pentester

[Yasho @YShahinzadeh]

I just dropped a new blog post, happy hacking :)

https://t.co/I9qh8cpNe9

[Amirabbas Ataei @ImAyrix]

@AmirMSafari OnTop 🔥🔥

[AmirMohammad Safari @AmirMSafari]

I wrote this story in a blog post, starting with my old challenge and leading up to this point. Chromium has since patched this attack vector. The full post is linked below, hope you enjoy reading it ;)

https://t.co/cRm6YTGAND

[Yasho @YShahinzadeh]

I published one of the techniques that I've been using against OAuth providers, honetly, it's led me to discover many flaws, and recently I used it to find a 1-click ATO on one of the most widely visited websites,I hope you find it useful :-)

https://t.co/o7OO8Y7e3K

[Yasho @YShahinzadeh]

Feb 24, 2026 08:35PM ➜ submited
Feb 24, 2026 10:46PM ➜ report was triaged
Feb 25, 2026 12:23PM ➜ bug patched
Mar 17, 2026 02:55PM ➜ bounty awarded

[Amirabbas Ataei @ImAyrix]

@YShahinzadeh On Top 🔥❤️

[Amirabbas Ataei @ImAyrix]

@YShahinzadeh @omidxrz 🔥🔥🔥

[Yasho @YShahinzadeh]

It's time for sharing, this is not a simple write-up, we are sharing our methodology and reasoning, detailing how we approached and hunted the flaw, I hope you like it :]

https://t.co/MNmJyNZVBg

[Omid Rezaei @omidxrz]

We got permission from the Samsung Security team to disclose this uXSS that we found in Samsung Browser, it was assigned a CVE (CVE-2025-58485) and patched.

Here is the PoC, expect the write-up in the next upcoming days.

[Amirabbas Ataei @ImAyrix]

Both challenges were interesting
Thanks for sharing.

[Yasho @YShahinzadeh]

Yousef (@samm0uda) gave me a challenge few days ago, it's a redesign of Amir's recent challenge, the solution is quite interesting, I was able to solve it in 10 minutes as I'd previously debugged QS library it, I highly RECOMMEND it, the source code:
https://t.co/D2cgR6v9PA

[Amirabbas Ataei @ImAyrix]

@AmirMSafari 🔥🔥🔥🔥

[AmirMohammad Safari @AmirMSafari]

Thanks for participating in this challenge! I analyzed the qs parser source code and wrote about the inconsistency between the backend and frontend query parsers, along with two possible solutions. Hope you enjoy it!

https://t.co/BRPp2L7TS6

[Amirabbas Ataei @ImAyrix]

@garethheyes @AmirMSafari 🔥👌🏼

[Amirabbas Ataei @ImAyrix]

@AmirMSafari @YShahinzadeh 🔥🔥🔥

[AmirMohammad Safari @AmirMSafari]

I recently discovered several vulnerabilities in MCP servers across different attack scenarios (DOM XSS, Stored XSS, SSRF, etc.) and decided to publish a blog post to share my knowledge. Hope you enjoy it! :D

https://t.co/LvElwhVO1r

[Amirabbas Ataei @ImAyrix]

@YShahinzadeh On Top 🔥❤️

[Amirabbas Ataei @ImAyrix]

After filtering for the most common ones, it became a really useful part of my workflow. Definitely worth a try if you're looking to enhance your fuzzing lists.

[Amirabbas Ataei @ImAyrix]

For the past year, I've been using a private wordlist generated from actual bug bounty reports.

I grabbed disclosed report texts by simply appending .json to the report URLs (as shown below) and fed them into fallparams to mine parameters from the included requests and snippets.

[Amirabbas Ataei @ImAyrix]

https://t.co/9O5zUjv8YA

[Amirabbas Ataei @ImAyrix]

A great article from Hamid about GIS SDK challenges
He explains how he escalated a DOM XSS into a full Account Takeover. Definitely worth your time 👇