Writeups on bug bounty hunting, CTFs, and web application security.https://jineeshak.github.io/https://jineeshak.github.io/posts/Chaining-Directory-Traversal-and-CSV-Parser-Abuse-for-RCE-in-Django/https://jineeshak.github.io/posts/Chaining-Directory-Traversal-and-CSV-Parser-Abuse-for-RCE-in-Django/While testing a web application as part of a bug bounty program, I uncovered a critical RCE vulnerability by chaining directory traversal with a subtle CSV parsing abuse. The exploit chain involved aMon, 30 Jun 2025 00:00:00 GMThttps://jineeshak.github.io/posts/Filtering-WebSocket-Traffic-In-BurpSuite-Using-Bamda/https://jineeshak.github.io/posts/Filtering-WebSocket-Traffic-In-BurpSuite-Using-Bamda/One of the issues I faced while testing a WebSocket-heavy application is that there aren't many filtering options available for WebSocket traffic — unlike HTTP messages in Burp Suite.Wed, 14 May 2025 16:30:00 GMThttps://jineeshak.github.io/posts/Post-Dual-Boot-Cleanup-Guide/https://jineeshak.github.io/posts/Post-Dual-Boot-Cleanup-Guide/This isn't my usual post about vulnerabilities, bug bounty, or web security. This time, it's something different — a persistent issue I hit after removing Ubuntu from a dual-boot setup. It messed up mSun, 20 Apr 2025 15:30:00 GMThttps://jineeshak.github.io/posts/BSides-Bangalore-CTF/https://jineeshak.github.io/posts/BSides-Bangalore-CTF/This was a blind XSS challenge where the goal was to read the admin's cookie. The given website was called "Cookie Tracker" and had three functionalities:Fri, 28 Jun 2024 04:30:00 GMThttps://jineeshak.github.io/posts/Unauthenticated-Email-Enumeration-via-API-Fuzzing/https://jineeshak.github.io/posts/Unauthenticated-Email-Enumeration-via-API-Fuzzing/This blog post explores a recent finding I discovered in a bug bounty target. I stumbled upon a user enumeration issue that exposes email addresses without proper security measures. This vulnerabilityWed, 21 Feb 2024 09:38:00 GMThttps://jineeshak.github.io/posts/Dependency-Confusion/https://jineeshak.github.io/posts/Dependency-Confusion/Dependency Confusion(https://fossa.com/blog/dependency-confusion-understanding-preventing-attacks/) is a security vulnerability that affects software dependencies in the software development process.Sat, 19 Aug 2023 09:38:00 GMThttps://jineeshak.github.io/posts/Request-smuggling/https://jineeshak.github.io/posts/Request-smuggling/I recently discovered a significant security vulnerability in a target. The vulnerability, HTTP request smuggling, allowed me to manipulate the application's behavior, potentially compromising user crTue, 15 Aug 2023 07:03:00 GMT