I'm Gaurav Narwani https://validator.w3.org/feed/docs/rss2.html About Me Publications Awards Talks Account Takeover via improper input validation Home Blog Burp Suite Certified Practitioner Exam – Review Blogg OAuth 2.0 Security Misconfigured OAuth leading to Account Takeover Privilege Escalation to Highest Admin Privileges Never Stop at Banner Grabbing Two-Factor Authentication Bypass alert(“A tale of 3 XSS!”) Injecting {{6*200}} to $1200 XSSed my way to 1000$ How I XSSed Admin Account Cookie worth a fortune Admin hijacked by Sea Surf Pirates Escalating Privileges like a Pro Welcome to my blog Luke in the house of jelly radio fenzes. Contact Hall of Fame Swag Bounty CVE-2019-14546 Under Armour The Things Network Sophos Blogg A $1000 Bounty CVE-2019-14550 CVE-2019-14549 CVE-2019-14548 CVE-2019-14547 Luke in the house of jelly radio fenzes. Luke in the house of jelly radio fenzes. Luke in the house of jelly radio fenzes. CVE-2019-15062 Luke in the house of jelly radio fenzes. Luke in the house of jelly radio fenzes. Complete User Account Takeover on an Android Application