Medium

Amr

Amr

·

Feb 11

From YAML to RCE: The PyYAML Deserialization Story

Hi, I’m Amr Kadry, a Red Team Consultant and bug hunter, acknowledged by over 50 companies including Mozilla, CrowdStrike, Canva, Vimeo…

From YAML to RCE: The PyYAML Deserialization Story

Amr

·

Nov 21, 2024

Bypass Email Verification in Mozilla

Hi, I’m Amr Kadry, a penetration tester and bug hunter, acknowledged by over 45 companies including Mozilla, CrowdStrike, Canva, Vimeo, and…

Bypass Email Verification in Mozilla

Amr

·

Nov 14, 2024

Account Takeover: How I Gained Access to Any User Account Through a Simple Registration Flaw

Hi, I’m Amr Kadry, a penetration tester and bug hunter recognized by over 45 companies, including Mozilla, CrowdStrike, Canva, and Vimeo…

Account Takeover: How I Gained Access to Any User Account Through a Simple Registration Flaw

Amr

·

Nov 7, 2024

From an Out-of-Scope Bug to Unlocking Lifetime Premium Accounts in Mozilla

Hi, I’m Amr Kadry, a penetration tester and bug hunter recognized by over 45 companies, including Mozilla, CrowdStrike, Canva, and Vimeo…

From an Out-of-Scope Bug to Unlocking Lifetime Premium Accounts in Mozilla

Amr

·

May 25, 2024

Unauthenticated IDOR in Employee Login Exposes PII to more than 100K Users

بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ

Unauthenticated IDOR in Employee Login Exposes PII to more than 100K Users

Amr

·

Apr 15, 2024

How I got JS Execution (DOM XSS) Via CSTI

بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ

How I got JS Execution (DOM XSS) Via CSTI

Amr

Amr

Penetration Tester & Bug Hunter || Acknowledged by over 45 companies including Mozilla, CrowdStrike, Canva, Vimeo, and others

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech