Asem Eleraky·Jun 29, 2025Triple Trouble: Bypassing Sanitization to Steal Microsoft Tokens“If you’ve ever conducted security research or bug hunting on Microsoft’s platforms, you’ve likely tested this endpoint — I’d bet on it!”A response icon6A response icon6
Asem Eleraky·Apr 20, 2025Escalating Impact: Full Account Takeover in Microsoft via XSS in Login FlowMicrosoft’s login system featured a highly secure and complex architecture, built with multiple layers of protection that made analysis…A response icon6A response icon6
Asem Eleraky·Jan 20, 2023Bypassing E2E encryption leads to multiple high vulnerabilities.In today’s blog, I’m going to show you how I was able to bypass the E2E encryption of an application by analyzing an obfuscated javascript…A response icon10A response icon10
Asem Eleraky·May 8, 2022Can analyzing javascript files lead to remote code execution?In today’s blog, I’m going to show you how analyzing javascript files can lead to access unrestricted endpoints and to understand how the…A response icon7A response icon7
InInfoSec Write-upsbyAsem Eleraky·Mar 13, 2022How I bypassed disable_functions in php to get a remote shellToday I will show you how I was able to bypass disable_functions and get a remote shell that lead me to access most of the users' files.A response icon3A response icon3
Asem Eleraky·Aug 23, 2021Intigriti 0821 XSS Challenge WriteupIn this post, I am going to walk you through the Intigriti 0821 XSS Challenge, I hope you enjoy reading.
Asem Eleraky·Aug 1, 2021ASCyberWargames2021 Qualifications | Retention | Web Challenge WalkthroughIn this post, I am going to walk you through a Web CTF challenge from Arab Security Cyber Wargames 2021 Qualifications, Hope you enjoy…
Asem Eleraky·Jul 19, 2021How I Bypassed a tough WAF to steal user cookies using XSS!Hi, I’m Asem Eleraky -aka Melotover- and today I will show you how I could bypass a tough WAF to execute XSS and make a full account…A response icon6A response icon6
Asem Eleraky·Mar 24, 2021How I leveraged XSS to make Privilege Escalation to be Super Admin!Hi, I’m Asem Eleraky -aka Melotover- and today I will show you how I could leverage an XSS vulnerability using XHR request to make the…A response icon3A response icon3
Asem Eleraky·Aug 15, 2020ASCyberWargames2020 Qualifications | MeowNetwork | Forensics Challenge WriteupIn this post, I am going to walk you through a Forensics CTF challenge from Arab Security Cyber Wargames 2020 Qualifications, Hope you…
