> For the complete documentation index, see [llms.txt](https://utkarsh24122.gitbook.io/findings/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://utkarsh24122.gitbook.io/findings/master.md). # Discovered Vulnerabilities Hi there 👋 This is a compilation of few of the interesting bugs that I have found so far in my Penetration Tests & bug bounty journey. This is my way of giving back to the community that I learnt so much from. This is a work in progress so I have only included the interesting bugs so far and these are categorized by bug types. Hope you enjoy it 😄. Feedbacks are always welcomed:slight\_smile:. \ Contents: 1. Finding Security Vulnerabilities in Android Applications 2. API Endpoints lead to Sensitive Information Disclosure and PII leakage of Employees 3. HTTP Dangerous Methods Enabled - P1 4. Subdomain Takeover 5. Cross Site Scripting 6. 2FA bypass - Bruteforce Protection Bypass & Response Manipulation 7. Account Highjack 8. OAuth Misconfiguration 9. Open Redirect - Manual & Automated detection \