Aditya Shende – Medium

Jan 6

Finding Time Based SQLi injections : Edition 2023

Hi everyone, I am Aditya Shende (Kong) from India. A Bounty Hunter , Biker and Researcher. This is my 4th article , If you found any spell error. Let it be….. Lets start What exactly time based SQL injection is ? An instance of an inferential injection or blind injection attack is time-based SQL injection. A sort of…

4 min read

Finding Time Based SQLi injections : Edition 2023

4 min read

Jul 13, 2021

IDOR to information disclosure + Admin Account Takeover

Hi everyone, I am Aditya Shende (Kong) from India. Bounty Hunter , Biker and Researcher. This is my 3rd article , If you found any spell error. Let it be….. What is IDOR ? Entity names are used to identify application-controlled resources that are supplied in URLs or request parameters…

Bug Bounty

3 min read

IDOR to information disclosure + Admin Account Takeover

Bug Bounty

3 min read

Feb 2, 2021

Hijacking accounts with host manipulation using collaborator

Hi everyone, I am Aditya Shende (Kong) from India. A Bounty Hunter , Biker and Researcher. This is my 2nd article , If you found any spell error. Let it be….. Account takeover via host header is known method. If you don't know then click here . I will start…

2 min read

Hijacking accounts with host manipulation using collaborator

2 min read

Dec 18, 2020

Blind Information Disclosure due to heavy misconfiguration

Hi everyone, I am Aditya Shende (Kong) from India. A bounty hunter , biker and researcher. I know title of story is pretty weird but finding and logic behind it is really awesome(I feel), Without wasting time I will start arrow about my finding . A proper and more functional…

Bug Bounty

4 min read

Blind Information Disclosure due to heavy misconfigurations

Bug Bounty

4 min read