PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacker Spotlight: Interview with hazimaslam

hackerone.com | vulnerability | #bug-bounty | #xss | #pakistan | #hacker-interview | #hazimaslam
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Pakistani hacker @hazimaslam got hooked on web security in 2013 after a friend's Yahoo account was hacked, and has since submitted more than 250 vulnerability reports on HackerOne.
Published
Collected

Related coverage

vulnerability · hackerone.com
Hacker Spotlight: Interview with benteveo
Argentine hacker Pedro Worcel (@benteveo), creator of the open-source droopescan tool, has found RCE, SSRF, and XSS bugs since 2014 and was named Verizon Media hacker of the year.
vulnerability · bishopfox.com
Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)
CVE-2026-58113 is a zero-interaction XSS in Siemens Teamcenter’s login redirect that let Bishop Fox silently reassign workflow delegation on a victim’s…
vulnerability · yeswehack.com
How to find IDOR, stored XSS, information disclosure vulnerabilities – from our #1 hunters for these CWEs
Learn how to find IDOR, stored XSS and information disclosure vulnerabilities with practical tips and techniques from YesWeHack’s top-ranked bug hunters.
vulnerability · projectdiscovery.io
Introducing Neo Triage
On October 26, 2026 we're releasing Neo Triage, an autonomous engine for vulnerability triage. While other tools rank your backlog, Neo clears it.
vulnerability · tenzai.com
From XSS to RCE: Two Exploit Chains in ConcreteCMS
We show how in 2026 chaining vulnerabilities is crucial for impact and how production environments differ from source code
vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
Back