Bypass Email Verification in MozillaHi, I’m Amr Kadry, a penetration tester and bug hunter, acknowledged by over 45 companies including Mozilla, CrowdStrike, Canva, Vimeo, and…Nov 214Nov 214
Account Takeover: How I Gained Access to Any User Account Through a Simple Registration FlawHi, I’m Amr Kadry, a penetration tester and bug hunter recognized by over 45 companies, including Mozilla, CrowdStrike, Canva, and Vimeo…Nov 147Nov 147
From an Out-of-Scope Bug to Unlocking Lifetime Premium Accounts in MozillaHi, I’m Amr Kadry, a penetration tester and bug hunter recognized by over 45 companies, including Mozilla, CrowdStrike, Canva, and Vimeo…Nov 77Nov 77
Unauthenticated IDOR in Employee Login Exposes PII to more than 100K Usersبِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِMay 256May 256