sah&

iranian security enthusiast & bug hunter

[Yasho @YShahinzadeh]

Just wrote a writeup about an insecure deep link that resulted in an account takeover vulnerability. I hope you find it useful :)

#bugbounty #bugbountytips
https://t.co/HPW4SMTvfu

[sah& @sahandami]

@HolyBugx best thing is to look for http request smuggling , because probably the array is for previous req😵‍💫

[sah& @sahandami]

I just published Find XSS in wide scope with kxss https://t.co/ZkZzQxGZ4q