Bug Bounty
- Google did an Oopsie: a simple IDOR worth $3,133.7 - 02 February 2025
- The forgotten content : information disclosure and reflected XSS on Tokopedia - 01 June 2020
- The Unexpected Bounty: A Story of Zendesk Takeover on REDACTED.com - 25 January 2020
- How i bought a subdomain of Tokopedia’s website (yeah you read it right) - 20 January 2020
- How Inspect Element lead to Subfolder takeover and Stored XSS on Bukalapak’s website - 23 December 2019
- Google did an Oopsie: a simple IDOR worth $3,133.7 - 02 February 2025
Hacking
- Google did an Oopsie: a simple IDOR worth $3,133.7 - 02 February 2025
- The forgotten content : information disclosure and reflected XSS on Tokopedia - 01 June 2020
- The Unexpected Bounty: A Story of Zendesk Takeover on REDACTED.com - 25 January 2020
- How i bought a subdomain of Tokopedia’s website (yeah you read it right) - 20 January 2020
- How Inspect Element lead to Subfolder takeover and Stored XSS on Bukalapak’s website - 23 December 2019
Writeup
- Google did an Oopsie: a simple IDOR worth $3,133.7 - 02 February 2025
- The forgotten content : information disclosure and reflected XSS on Tokopedia - 01 June 2020
- The Unexpected Bounty: A Story of Zendesk Takeover on REDACTED.com - 25 January 2020
- How i bought a subdomain of Tokopedia’s website (yeah you read it right) - 20 January 2020
- How Inspect Element lead to Subfolder takeover and Stored XSS on Bukalapak’s website - 23 December 2019