Software developer❤ | #Mobile and #Web Dev | Computer Science | ReactJS | NodeJS | Express | Redux | MongoDB | MySQL and use Flutter for my mobile application
My project partner and I realized the importance of this project and the amount of revenue that can be generated to the government with this system. That's why we decided to develop it. The system needs to be implemented in Ghana. The @GhPoliceService department needs it
I Almost Gave Up on this $500 IDOR. At times an endpoint that takes a UUID may look vulnerable but it’s not. Like:
/api/v3/devices/victim-uuid ❌
/api/v3/users/victim-uuid/devices/info ✅
Simple, easy, and everyone can do it.
https://t.co/aiMHKXnBo5
Got paid $1500 for this one. All it took was deep recon to locate a less secure domain .
You don't need long Google dorks, just a well tuned "site:" + endpoints and you'll hit a gold mine.
Read about it here: $1,500 Recon Secrets: Dorks to Dollars https://t.co/gOMDxw8GDO
Luckiest find ever tbh.
> Grab IP from Shodan
> Fuzz with a random wordlist (recursively)
> Discover .env file hidden in sub, sub directory.
> File contains usable API keys
Path: target[.]com/agent/status/.env
@fidexcode It’s funny how this same curiosity led me to backend. I wanted to understand how apis work. I did an internship in a company and the guy who was to mentor me was afraid to build apis..Hihi, he made it look like apis are built by exceptional high IQ people 😂
🧠💻 Did you know that the term “computer bug” isn’t just a tech slang, it came from a literal insect🐜.
In 1947, engineers found a moth trapped in Harvard Mark ll computer’s circuit, causing a failure. They taped it inside a logbook calling it “the first case of bug being
@dev_maims Depending on it too much makes you lose your confidence in solving problems. Worst case scenario where I have to resort to AI, I would prefer to glance at the steps and type it rather than copying and pasting.
@ennycodes I used it in my recently ended project. I used the email and password and the social media (Microsoft) auth providers. Personally I’m not a fan of third party services as I have to have full control of the app but that’s what client wanted.