HACKERBADGER

Breaking things. Writing it down.

HACKERBADGER

Visual_ID: HACKERBADGER

Latest Research

[RECORDS_FOUND: 92]

FurHire: Client-Side Path Traversal to Account Takeover

BugForge hard Client-Side Path Traversal to Account Takeover

Part 1: Pentest Report

#cspt #client-side-path-traversal #account-takeover #csrf #2fa-bypass #bugforge #webapp

CopyPasta: IDOR Snippet Delete (Broken Object-Level Authorization)

BugForge easy IDOR / Broken Object-Level Authorization

#idor #broken-access-control #bola #verb-tampering #bugforge

Vaultly: Account Takeover via Unbound Password-Reset Token

BugForge hard Password-Reset Account Takeover

#account-takeover #password-reset #broken-access-control #webapp #bugforge

Shady Oaks Financial: UNION-based SQL Injection

BugForge easy UNION-based SQL Injection

#sqli #union-injection #cwe-89 #bugforge #webapp

Ottergram: Private Posts via Dual-Identifier Authorization Drift

BugForge medium Broken Object-Level Authorization

#idor #broken-access-control #bola #client-side-security #dual-identifier #webapp #bugforge

Galaxy Dash: Broken Access Control via Writable Avatar Field

BugForge medium Broken Access Control

Part 1: Pentest Report

#broken-access-control #idor #authorization-bypass #multi-tenant #bugforge

analytics

Activity Log

[2026.06.15] New writeup published: FurHire: Client-Side Path Traversal to Account Takeover

[2026.06.12] New writeup published: CopyPasta: IDOR Snippet Delete (Broken Object-Level Authorization)

[2026.06.10] New writeup published: Vaultly: Account Takeover via Unbound Password-Reset Token

[2026.06.10] New writeup published: Shady Oaks Financial: UNION-based SQL Injection

[2026.06.10] New writeup published: Ottergram: Private Posts via Dual-Identifier Authorization Drift

construction

Toolkit

web v0.3.0

Caido Workbench

SQLi and JWT workbench plugin for Caido proxy.

speed v1.2.0

Race

HTTP/2 single-packet race condition testing.

key v1.0.0

JWTForge

JWT creation, modification, and signing tool.

more_horiz

More Coming

Additional tools in development.