PinnedInInfoSec Write-upsbyMrunal chawda·Mar 24Intigriti March 2026 XSS Challenge Writeup: Chaining 3 Bypasses to Steal Admin CookiesHow a DOM clobber, a component hijack, and a hidden JSONP endpoint gave me full cookie exfiltration through DOMPurify + CSP + SANITIZE_DOM…A response icon1A response icon1
PinnedInLevel Up CodingbyMrunal chawda·Dec 4, 2025The React Server Components Exploit That Could Have Hacked 39% of the WebTwo critical vulnerabilities just exposed millions of React and Next.js applications to unauthenticated remote code execution. Here’s what…A response icon1A response icon1
PinnedInLevel Up CodingbyMrunal chawda·Jun 9, 20255 Valuable Lessons I Learned Moving from Bug Bounty Hunter to Security ConsultantHi, I’m Mrunal Chawda. I started my cybersecurity journey as an independent bug bounty hunter. Now, I have around 4 plus years of…
Mrunal chawda·Jun 7No, You Cannot Hack an EVM With a Python ScriptSo, here we are.A response icon1A response icon1
Mrunal chawda·Mar 1India Just Changed How WhatsApp Works - And Most People Are Missing the Real Story
Mrunal chawda·Nov 18, 2025The Day the Internet Blinked: Why Cloudflare Went Down, and Why We Should Care (A Lot)I just knocked my lukewarm hazelnut latte onto my keyboard while trying to refresh Twitter — sorry, X — to see why ChatGPT wasn’t working…
Mrunal chawda·Nov 12, 2025The AI Video Boom Is Here and I’m Watching It Reshape EverythingI’ve tracked AI video for years, yet this November blindsided me. Every alert, every late-night call with founders, every test clip I…
InLevel Up CodingbyMrunal chawda·Jul 14, 2025Branch.io Fallback URL Exploit: How Hackers Redirect UsersLearn how Branch.io fallback URL exploits and exposed API keys let hackers redirect users to malicious sites. Protect your apps with these…
InOSINT TeambyMrunal chawda·Apr 12, 2025A Complete Guide to Securing Secrets in AWS LambdaLearn how to securely manage secrets in AWS Lambda using environment variables, KMS encryption, Secrets Manager, and more.
