Root Ghost

Learning Hacking || Ethical Hacker || Cyber Security || Bug Bounty Hunter

[skull @brutecat]

Hacking Google with A.I. for $500,000

https://t.co/S8NbDU9ZaN

[Root Ghost @rootghost404]

@trybughunter Gimme your repo link

[Root Ghost @rootghost404]

I completed the lab: simple logic
Password brute-force via password change

@WebSecAcademy
https://t.co/1VlJscuzwM

[Root Ghost @rootghost404]

I completed the lab: logical
Password reset poisoning via middleware

@WebSecAcademy
https://t.co/RTXVTBaEjP

[Root Ghost @rootghost404]

I completed the lab:
Offline password cracking

@WebSecAcademy
https://t.co/4AIoNZKLdl

[Root Ghost @rootghost404]

Very Critical This Lab:
Brute-forcing a stay-logged-in cookie

@WebSecAcademy
https://t.co/26UhQdzsBb

[Root Ghost @rootghost404]

I completed the lab: more than 2 hours
2FA broken logic

@WebSecAcademy
https://t.co/ukkV5L3PCy

[Root Ghost @rootghost404]

I completed the lab: tricky problem
Username enumeration via account lock

@WebSecAcademy
https://t.co/2aLYUixCMU

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
Broken brute-force protection, IP block

@WebSecAcademy
https://t.co/Wi24W6A5ph

[Root Ghost @rootghost404]

This lab is simple, but very hard if you don't understand

@WebSecAcademy
https://t.co/XIDTrmWrV7

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
Username enumeration via subtly different responses

@WebSecAcademy
https://t.co/scp0DlMuA4

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
Password reset broken logic

@WebSecAcademy
https://t.co/L2Dnlgqjuw

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
2FA simple bypass

@WebSecAcademy
https://t.co/40ov3VmKE1

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
Username enumeration via different responses

@WebSecAcademy
https://t.co/JBAg2w6EtK

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
SSRF with whitelist-based input filter

@WebSecAcademy
https://t.co/x3H49vlvB5

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
Blind SSRF with Shellshock exploitation

@WebSecAcademy
https://t.co/GiCtnoRlhf

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
SSRF with filter bypass via open redirection vulnerability

@WebSecAcademy
https://t.co/DOldGx6vl6

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
SSRF with blacklist-based input filter

@WebSecAcademy
https://t.co/qJ2t6P0qbW

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
Basic SSRF against another back-end system

@WebSecAcademy
https://t.co/HJrlgugIzR

[Root Ghost @rootghost404]

I completed the Web Security Academy lab:
Basic SSRF against the local server

@WebSecAcademy
https://t.co/POEDcvR1k7