How I got root on OTOY server


Here is a write up about how I’ve rooted OTOY server

Continue reading

Deutsche Telekom Database Dump


Here is a simple and critical vulnerability I’ve found in Deutsche Telekom allowed me to dump the database due to Authorization bypass.

Continue reading

Flickr from SQL Injection to RCE


Today i will write about a new vulnerability i found in

– How I got MYSQL root password of Flickr Database

– RCE on Flickr server

Continue reading