Medium

Ehtesham Ul Haq

Pinned

Ehtesham Ul Haq

·

Apr 19

Why I Built The Hidden Finds — A Real-World Approach to SaaS Security and Bug Bounty

Free Article Link: Click for free!

Why I Built The Hidden Finds — A Real-World Approach to SaaS Security and Bug Bounty

Pinned

In

InfoSec Write-ups

by

Ehtesham Ul Haq

·

Apr 24, 2025

Bug Hunting for Real: Tools, Tactics, and Truths No One Talks About

Free Article Link: Click for free!

Bug Hunting for Real: Tools, Tactics, and Truths No One Talks About

In

InfoSec Write-ups

by

Ehtesham Ul Haq

·

5d ago

From User Enumeration to PII Exposure: Chaining Two APIs Into a $2,000 Bug

Free Article Link: Click for free!

From User Enumeration to PII Exposure: Chaining Two APIs Into a $2,000 Bug

In

InfoSec Write-ups

by

Ehtesham Ul Haq

·

May 25

How a GraphQL Invitation Flow Exposed Users at Scale

A normal invite feature revealed registered accounts, internal GraphQL identifiers, and user metadata through an overly detailed API…

How a GraphQL Invitation Flow Exposed Users at Scale

In

InfoSec Write-ups

by

Ehtesham Ul Haq

·

Mar 25

From Delaying Certifications to Passing eJPT: My Real Journey

Free Article Link: Click for free!

From Delaying Certifications to Passing eJPT: My Real Journey

In

InfoSec Write-ups

by

Ehtesham Ul Haq

·

Feb 17

Breaking the Trust Boundary: SSRF via a Misconfigured Sentry Tunnel

Free Article Link: Click for free!

Breaking the Trust Boundary: SSRF via a Misconfigured Sentry Tunnel

In

InfoSec Write-ups

by

Ehtesham Ul Haq

·

Jan 5

Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration

Free Article Link: Click for free!

Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration

In

InfoSec Write-ups

by

Ehtesham Ul Haq

·

Dec 3, 2025

Reflected XSS in OAuth Callback Endpoint

Free Article Link: Click for free!

Reflected XSS in OAuth Callback Endpoint

In

InfoSec Write-ups

by

Ehtesham Ul Haq

·

Oct 25, 2025

Google Cybersecurity Certificate — and Why It’s the Easiest Way to Step Into the Field

Free Article Link: Click for free!

Google Cybersecurity Certificate — and Why It’s the Easiest Way to Step Into the Field

In

InfoSec Write-ups

by

Ehtesham Ul Haq

·

Sep 15, 2025

BurpSuite vs Caido: Rethinking Proxy Tools for Bug Hunters

Free Article Link: Click for free!

BurpSuite vs Caido: Rethinking Proxy Tools for Bug Hunters

Ehtesham Ul Haq

Ehtesham Ul Haq

Penetration Tester & Bug Bounty Hunter focused on finding vulnerabilities and helping organizations stay ahead of cyber threats.

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech