Anish Khatri | Blogs https://blog.anishkhatri.com I share my activity, knowledge and experience check regularly to know something new and subscribe to get notified Admin account take-over leading to RCE, XSS and more https://blog.anishkhatri.com/lists/admin-10 Wed, 14 Sep 2022 10:39:54 +0000 https://blog.anishkhatri.com/lists/admin-10 I was able to take over an admin account which made me able to put RCE, XSS and more exploits to the website. Delete any file from amazon storage JUUL https://blog.anishkhatri.com/lists/delete-any-file-from-amazon-storage-juul-9 Sun, 20 Jun 2021 16:03:39 +0000 https://blog.anishkhatri.com/lists/delete-any-file-from-amazon-storage-juul-9 Here's how I could delete any file from amazon bucket of juul. Open Redirect Alibaba https://blog.anishkhatri.com/lists/open-redirect-alibaba-8 Sun, 20 Jun 2021 15:57:10 +0000 https://blog.anishkhatri.com/lists/open-redirect-alibaba-8 open redirect alibaba full detailed report Reset Password Hack https://blog.anishkhatri.com/lists/reset-password-hack-7 Sun, 20 Jun 2021 15:42:51 +0000 https://blog.anishkhatri.com/lists/reset-password-hack-7 Here's I was able to take over any user's account in a website. I have shared detailed information about it. I hacked several accounts from several sites just using VPN https://blog.anishkhatri.com/lists/i-hacked-several-accounts-from-several-sites-just-using-vpn-6 Sun, 26 Jan 2020 21:16:44 +0000 https://blog.anishkhatri.com/lists/i-hacked-several-accounts-from-several-sites-just-using-vpn-6 Here's how I hacked so many accounts with in few hours. Facebook - Unrestricted File Upload https://blog.anishkhatri.com/lists/facebook-unrestricted-file-upload-5 Sat, 18 Jan 2020 16:34:31 +0000 https://blog.anishkhatri.com/lists/facebook-unrestricted-file-upload-5 I found a vulnerability by which i could upload any file and send the to other user. It could also be script files and with this method I could also share porn, violence, illegal graphics/video/image without getting it filtered or removed Get MySql details - WoWonder https://blog.anishkhatri.com/lists/get-mysql-details-wowonder-2 Sun, 15 Dec 2019 14:31:23 +0000 https://blog.anishkhatri.com/lists/get-mysql-details-wowonder-2 Major vulnerability in WoWonder that allows user to download any server files. Stored XSS in Alibaba and Aliexpress https://blog.anishkhatri.com/lists/stored-xss-in-alibaba-and-aliexpress-1 Sun, 15 Dec 2019 12:47:09 +0000 https://blog.anishkhatri.com/lists/stored-xss-in-alibaba-and-aliexpress-1 I found some serious vulnerability in Alibaba and Aliexpress website.