Improper Access Control means web application or software functions does not restrict or incorrectly restricts access and usage to any hidden resource or private functionality from an unauthorized actor. …

Broken Link Hijacking (BLH) or Link Takeover, whatever you called it, the concept is very simple. If you get any broken links of any website and it’s easy to be taken by someone , then it’s a broken link hijacking or takeover bug. It’s a similar kind of bug like…

Information Disclosure is a kind of bug that is not so hard to find but could make huge impact on target. Some time you can get very sensitive information with less effort. That’s how i got my first report resolved on hackerone. Now let’s discuss how i get my first…

CrazyHD is one of the famous torrent websites in Bangladesh and India. People get pirated movies, paid courses, software, and more in this torrent. Story Behind Pentesting CrazyHD One day I logged into my account on that CrazyHD torrent and I don’t know why I search my name “Mehedi Shakeel” in the search box…

Last night before going to sleep i make a quick search on google a dork to find vulnerable websites and found some interesting result and from one of those website i found the SQL injection vulnerability & successfully able to exploit and retrieve sensitive information from the MySQL db. Here…

Hello! I’m Mehedi Shakeel, IT Security Professional & Have Rich Experience in Ethical Hacking & Web Penetration Testing. Also, I’m verified YouTuber, Instructor & Tech-Enthusiast From Bangladesh. Interested to make videos about technology, information security, ethical hacking, web penetration testing , networking & cyber security on my youtube channels name SSTecTutorials & Mehedi Shakeel. ​ Also, I am the founder of MEHEDI SHAKEEL ACADEMY which is one of the best e-learning platforms in Bangladesh to learn Information Security, Ethical Hacking & Cybersecurity, ethical hacking, and technology. And Part-Time Instructor at Udemy. Here is My Personal Website.