Hackerone

2 articles

Ciora

A Bash-based recon automation tool for bug bounty hunters — downloads HackerOne program scope, extracts web assets & wildcards, and performs subdomain enumeration.

1 May 2026 · 2 min read

Writeups

CSRF — Missing Protection on Editor API Endpoint

A state-changing API endpoint in a web application editor had no CSRF protection at all, allowing attackers to silently inject data into victim accounts via a simple HTML form.

14 Jul 2025 · 3 min read