İSHİKA ☆

Learner | CyberSecurityEnthusiast | RHCSA | • Web App Pentester • | Core Team @BarracksArmy

[İSHİKA ☆ @chmodx1sh]

Thankyou RadhaKrishna💜
I will do a writeup for this one.
@Bugcrowd 💜

[Kuldeep Pandya @kuldeepdotexe]

They verify your login in client-side JavaScript, never on the server. So you can walk right in.

New write-up: Client-side Authentication Bypass. 4 real cases (one led to a $4,000 SQLi):

https://t.co/XYNTSx2t6q

#BugBounty #AppSec #InfoSec #BarracksArmy

[Synack Red Team @SynackRedTeam]

When the frontend is doing the auth check, the frontend is the attack surface.

In our latest Exploits Explained, SRT Researcher @kuldeepdotexe breaks down three client-side authentication bypasses he found on real assessments:

1) Forging a JWT and expiry into localStorage after spotting an authRequired: !0 route guard

2) Flipping a sessionStorage loggedIn flag and setting userInfo to {} to satisfy a truthy check

3) Toggling is_active from false to true in an API response to unlock a hidden webhook flow for an inactive user

https://t.co/GMXehXStqU

[Barracks @BarracksArmy]

One of our own just hit their first 3-digit bounty. 🛡️

Every bounty has a story behind it.

Late-night testing.
Duplicates.
Learning from labs.
Community support.

From learning web security fundamentals…
to solving labs…
to attending community events…
to facing multiple duplicates before finally landing a valid bounty.

This is the journey most researchers go through - persistence is the real skill.

Huge congratulations on the milestone and thank you for sharing the journey.

We’re proud to see members of the Barracks community turning learning into real impact.
Welcome to the growing list of Barracks Graduates.

Full story in the comments 👇

[İSHİKA ☆ @chmodx1sh]

@Ben_Khaled1337 @SynackRedTeam Thank you✨️

[İSHİKA ☆ @chmodx1sh]

First SQLi in @SynackRedTeam 🤩🤩

Took a total of 9 hours of manual exploitation 🥲

#bugbounty

[İSHİKA ☆ @chmodx1sh]

@_bergee_ @SynackRedTeam Thank you✨️

[İSHİKA ☆ @chmodx1sh]

@MiteshValvi12 @SynackRedTeam Thank you✨️

[İSHİKA ☆ @chmodx1sh]

@utkarsh404 @SynackRedTeam Thank you ✨️

[İSHİKA ☆ @chmodx1sh]

For reference, I followed this: https://t.co/CIyVVv3GY2

[Security Bsides Mussoorie @BsidesMussoorie]

🔥⚔️ BIG NEWS!
Barracks (@BarracksArmy ) joins BSides Mussoorie as our WarZone Partner!

Hyper-realistic WarZones. Real AppSec chaos. Adapt. Report. Thrive.

Get ready for intense simulations & battle-tested learning. 🚀💥

#BSidesMussoorie #Barracks #CyberSecurity #WarZone #AppSec #TrainingPartner

@Hacker0x01
@caseyjohnellis
@Bugcrowd
@MayhemSec
@intigriti
@Apple
@SentinelOne
@immunefi

[Barracks @BarracksArmy]

Bsides Vadodara 2026 ⚡

[İSHİKA ☆ @chmodx1sh]

@MiteshValvi12 @Bugcrowd Thankyou✨️

[İSHİKA ☆ @chmodx1sh]

Back to the bounty game after a long break.

Thankyou RadhaKrishna 🩷

@Bugcrowd 🩷

[İSHİKA ☆ @chmodx1sh]

@Advik_Kant @Bugcrowd Thankyou✨️

[İSHİKA ☆ @chmodx1sh]

@Fabrikat0r @Bugcrowd ✨️✨️

[İSHİKA ☆ @chmodx1sh]

@Zeno_h2r @Bugcrowd Thankyou✨️

[İSHİKA ☆ @chmodx1sh]

@that_hackergirl @Bugcrowd Thank you✨️

[İSHİKA ☆ @chmodx1sh]

@thedawgyg @Bugcrowd Thankyou✨️

[İSHİKA ☆ @chmodx1sh]

@kuldeepdotexe Thankyouuuuuuuuuu ✨✨

[İSHİKA ☆ @chmodx1sh]

@Bugcrowd Burp