Skip to content

$AkashHamal0x01.meAkashHamal0x01.me

Writeups About Security Hall of Fame Contact

COMMAND / SEARCH

Search the site

Jump to a page or find a published writeup.

Search pages and writeups

Pages01WriteupsBrowse the complete vulnerability research archive.↵02AboutHow I approach product logic and responsible disclosure.↵03SecurityHow to report a security issue on this site.↵04Hall of FamePeople credited for valid security reports.↵05ContactContact Akash directly by X or email.↵

Writeups06Privilege escalation through a GraphQL authorization gapA GraphQL authorization gap let a limited Program Admin join privileged groups and gain report and reward permissions.↵07Bypassing HackerOne 2FA due to race condition.A race condition in HackerOne’s 2FA recovery flow created multiple active reset requests, allowing one cancellation to leave others valid.↵08A practical workflow for small-scope bug bounty programsA repeatable workflow for understanding compact targets, exercising every endpoint, and finding product-logic flaws beyond basic reconnaissance.↵

8 results

↑↓Navigate↵OpenescClose

Hall of Fame

Researchers credited for valid security reports.

ResearcherValid reportsPoints

No entries yet.

The first verified report will appear here with the researcher’s permission.

——

Found something valid? Report it privately so I can investigate.

Report a security issue

$AkashHamal0x01.meAkashHamal0x01.me

Security research and bug bounty writeups.

SiteWriteups Security Hall of Fame Privacy

ElsewhereX ↗HackerOne ↗Medium ↗RSS

© 2026 Akash HamalIndependent Security Researcher