Valeriy Shevchenko·Jun 30“Mercury Rising”: How German Journalists Exposed a Live NATO Locked Shields SystemI think many of you have seen the 1998 thriller "Mercury Rising". The plot revolves around a young autistic boy who cracks a secret code…
Valeriy Shevchenko·Jan 9, 2023Hacking Hackers for fun and profitThis story will be in several parts. In each of the situations, I had to face unexpected results. By and large, these are stories that have…A response icon2A response icon2
Valeriy Shevchenko·Nov 19, 2021How I accidentally hacked many companies using N/A vulnerability in Atlassian CloudBelow you will learn in detail about the discovered vulnerability that allowed me to get about 15000$ in bounty with all secrets from the…A response icon2A response icon2
Valeriy Shevchenko·Jul 13, 2021Credential stuffing in Bug bounty huntingBug hunting is not always about looking for classic vulnerabilities (XSS, SQLi, SSRF, RCE, etc). Sometimes it is a search for a new problem…A response icon1A response icon1
Valeriy Shevchenko·Jan 7, 2021$10,000 for a vulnerability that doesn’t existA couple of months ago, an interesting story happened to me. I caught a Path Traversal issue with no chance to reproduce it again.
Valeriy Shevchenko·Jun 3, 2020From CRLF to Account TakeoverAt the beginning of March,while researching one site I discovered the new functionality. The functionality allowed the user to login via…
InInfoSec Write-upsbyValeriy Shevchenko·Mar 9, 2020Broke limited scope with a chain of bugsOne morning, I was asked to participate in a private bug bounty program. In general, my experience in security is based on such private…
Valeriy Shevchenko·Sep 2, 2019Critical vulnerabilities in Pulse Secure and Fortinet SSL VPNs in the Wild InternetInfiltrating Corporate Intranet like Banks, Governments, Airports became possible with vulnerable SSL VPN clients.A response icon1A response icon1
Valeriy Shevchenko·Aug 19, 2019Jenkins RCE PoC or simple pre-auth remote code execution on the Server.Once upon a time, a friend of mine asked me a question — "Do you know any fresh RCE for the Jenkins environment ?". I was informed already…
Valeriy Shevchenko·Aug 9, 2019Two Easy RCE in Atlassian ProductsIt was a long time from my last article. It was so many interesting results in my work. Seems that it's right time to share my knowledge…A response icon2A response icon2
