Advait Rane·May 1I Mapped How Attackers Chain 5 API Vulnerabilities Into a Full Admin Takeover — Here’s Every StepFive vulnerabilities. One chain. A complete path from anonymous visitor to admin panel — and what every developer building multi-tier APIs…
Advait Rane·Apr 27The 404 That Leaked a Live JWT and Sentry KeysI requested a URL that didn’t exist. The server handed me an access token, a refresh token, and internal monitoring credentials. Bug…
Advait Rane·Apr 26How I Got Super Admin on My University’s Sports Booking PortalTwo misconfigurations, one exposed RPC endpoint, and zero RLS policies , a short story about what happens when Supabase defaults go…A response icon1A response icon1
