ShaNix

@ShanixHunt

Web Application Security Learner | Bug Bounty enthusiast 🔍

Joined October 2025

15 Following

1 Follower

ShaNix
@ShanixHunt
Dec 25, 2025
I completed the @PortSwigger lab: Chained an [Open Redirect + OAuth misconfiguration → Access Token Leak → Full Account Takeover (Admin)]. Great reminder that “low” bugs become critical when chained properly. #BugBounty #WebSecurity #OAuth #owasp portswigger.net/web-security/o…
ShaNix
@ShanixHunt
Dec 24, 2025
I completed the @WebSecAcademy lab: Testing an OAuth login flow today. With one weak check in the authorization step, it’s possible to access an account without ever knowing the password. OAuth bugs are quiet — but powerful⚠️ #BugBounty #CyberSecurity portswigger.net/web-security/o…
ShaNix
@ShanixHunt
Dec 18, 2025
I completed the @WebSecAcademy lab: Exploiting blind XXE to exfiltrate data using a malicious external DTD✅ I’m not a fan of XXE 😅 but skipping the uncomfortable stuff means skipping progress. #BugBounty #XXE @PortSwigger @voorivex @YShahinzadeh portswigger.net/web-security/x…
Yasho and 3 others
ShaNix
@ShanixHunt
Dec 12, 2025
I completed the @WebSecAcademy lab: Blind SSRF with Shellshock exploitation — my first Expert-level lab! 🔥🩸 Huge thanks to @PortSwigger — this one was intense and super fun. #BugBounty #SSRF #securitymindset portswigger.net/web-security/s…
ShaNix
@ShanixHunt
Dec 8, 2025
I Completed the @WebSecAcademy lab: SameSite Strict bypass via client-side redirect (CSRF). Loved the trick: client-side redirect + path traversal → SameSite=Strict bypass. Huge thanks to @PortSwigger — amazing lab! 🔥🐞 #BugBounty #WebSecurity portswigger.net/web-security/c…

ShaNix

ShaNix’s posts