Feed
Pro
Search

Sign in
Darkshift - a dark factory for software Bug0 - The AI-native e2e QA regression testing The foreword by Hashnode - official blog from the Hashnode team Passmark - The open-source AI framework for regression testing Hashnode gql skill - let your AI agent publish to your Hashnode blog Hackathons Changelog Brand @hashnode on X Hashnode on LinkedIn Support - hello+support@hashnode.com Code of Conduct Terms Privacy Sitemap

Search Hashnode

Search posts, tags, users, and pages

@koalasec

Ali Hussainzada

@koalasec·Joined September 2024

About

Senior Student of Computer Science | 21 y/o Web Application Pentester My HackerOne Profile: https://hackerone.com/amir_shah

Available for

sleeping and learning..

Ali Hussainzada's blogs

KoalaSEC's blogkoalasec.hashnode.dev11 posts

About

Senior Student of Computer Science | 21 y/o Web Application Pentester My HackerOne Profile: https://hackerone.com/amir_shah

Available for

sleeping and learning..

Ali Hussainzada's blogs

KoalaSEC's blogkoalasec.hashnode.dev11 posts

Articles Comments

Recently published

AHAli Hussainzadainkoalasec.hashnode.dev·3d ago · 7 min read

I Passed HTB CPTS: My Journey, Exam Experience, and Honest Review

Hello, cybersecurity homies! In this article, I’m going to talk about the Certified Penetration Testing Specialist (CPTS) certification, share my personal experience, and give you my honest review. Yo

AHAli Hussainzadainkoalasec.hashnode.dev·Jun 15 · 3 min read

eWPTX Exam Review: My First Certification Experience

Hello folks, In this article, I will write about my very first cybersecurity certification and give you my review of it. I am not sure to what extent I can talk and write about it, but I will try my b

AHAli Hussainzadainkoalasec.hashnode.dev·Jan 3 · 4 min read

Stored XSS leads to Zero-Click Account Takeover

Hey, yolo guys! Long time no chat! As we already know, bug bounty is a scam (just kidding 🙂). I recently started doing penetration testing for startups in my country. In this case, it was an online marketplace, where I discovered eight security vuln...

AHAli Hussainzadainkoalasec.hashnode.dev·Nov 2, 2025 · 4 min read

How a Second-Order IDOR Lets You Delete Other Users’ Posts, Profile Picture, and Cover Photo

Hey Geeks, It was a cool bug, so let’s skip the formalities and dive straight in. So, the target was a social media application, pretty standard stuff. Users could upload profile pictures, cover photos, and post images. For obvious confidentiality re...

AHAli Hussainzadainkoalasec.hashnode.dev·Aug 25, 2025 · 3 min read

From LaTeX Injection to RCE: A Real Bug Bounty Case

Hello Friends It’s been two months since I took a break from bug bounty hunting. During that time, I graduated from university 🎓, recharged, and now I’m officially back in the game. And guess what? Within just a few days of returning, I landed a cri...