Medium

Mustafa Adam Gamaraldin Abdalla

Pinned

Mustafa Adam Gamaraldin Abdalla

·

Apr 25

How I Found Critical Zero-Click Account Takeover via Archived / Cached Password Reset Links And Got…

بسم الله الرحمن الرحيم

How I Found Critical Zero-Click Account Takeover via Archived / Cached Password Reset Links And Got…

Pinned

Mustafa Adam Gamaraldin Abdalla

·

Feb 15, 2023

From CORS Misconfigration To CSRF Account Takeover

From CORS Misconfigration To CSRF Account Takeover

Pinned

Mustafa Adam Gamaraldin Abdalla

·

Feb 28, 2025

How i found Blind XSS Vulnerability in Signup Process and got €,€€€

How i found Blind XSS Vulnerability in Signup Process and got €,€€€

Mustafa Adam Gamaraldin Abdalla

·

Jul 6

Breaking Trust, Not Cryptography: A Critical JWT Authentication Design Flaw Worth $1,450

بسم الله الرحمن الرحيم

Breaking Trust, Not Cryptography: A Critical JWT Authentication Design Flaw Worth $1,450

Mustafa Adam Gamaraldin Abdalla

·

Feb 28

A Critical IDOR Vulnerability That Allowed Deletion & Modification of (Any) User’s Address (Mass…

بسم الله الرحمن الرحيم

A Critical IDOR Vulnerability That Allowed Deletion & Modification of (Any) User’s Address (Mass…

Mustafa Adam Gamaraldin Abdalla

·

Aug 1, 2025

Mass Information Disclosure via Exposed i18n JSON File (internal logic, payment flows, and business…

بسم الله الرحمن الرحيم

Mass Information Disclosure via Exposed i18n JSON File (internal logic, payment flows, and business…

Mustafa Adam Gamaraldin Abdalla

·

Jul 12, 2025

Blind/Stored XSS via Referer Header Injection in Company Portal Contact Form

Hello Hunters, It’s Mustafa Adam, Welcome to another Write-up, in this Writeup i will talk about how i found A high Possible Blind/Stored…

Blind/Stored XSS via Referer Header Injection in Company Portal Contact Form

Mustafa Adam Gamaraldin Abdalla

·

Jun 27, 2025

How Abuse of “Send to a Friend” Feature via Client-Side Parameter Tampering Made Me Able to Inject…

بسم الله الرحمن الرحيم

How Abuse of “Send to a Friend” Feature via Client-Side Parameter Tampering Made Me Able to Inject…

Mustafa Adam Gamaraldin Abdalla

·

May 28, 2025

Broken Access Control in a Payment Platform API — How I Was Able to Create and Forge Invoices

Hello Hunters, I am Mustafa Adam, This is a a new Write up and it’s about my Very Interesting Finding ,Its about Broken Access Control in…

Broken Access Control in a Payment Platform API — How I Was Able to Create and Forge Invoices

Mustafa Adam Gamaraldin Abdalla

·

May 16, 2025

How I Got Access to 20,000 Users PIIs Via A JavaScript file Analysis (Critical)

Hello Hunters, It’s Mustafa Adam, This is a a new Write up and it’s about my Best Finding until now, because its a critical finding, and i…

How I Got Access to 20,000 Users PIIs Via A JavaScript file Analysis (Critical)

Mustafa Adam Gamaraldin Abdalla

Mustafa Adam Gamaraldin Abdalla

Python Jeek {🖤🔥🖤}, Bug Bounty Hunter 💻☠️🖤 , Think Out Side The Box 💡👌🏼🖤 https://twitter.com/wadgamaraldeen

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech