https://siberfaqih.com/en/ https://siberfaqih.com/en/about/ https://siberfaqih.com/en/contact/ https://siberfaqih.com/en/cv/ https://siberfaqih.com/en/projects/burp-tcp/ https://siberfaqih.com/en/projects/crapi/evidence/broken-access-control-login-csrf-token-cookie-binding/ https://siberfaqih.com/en/projects/crapi/evidence/broken-function-level-authorization-workshop-management-users-endpoint/ https://siberfaqih.com/en/projects/crapi/evidence/broken-object-level-authorization-shop-return-order/ https://siberfaqih.com/en/projects/crapi/evidence/broken-object-level-authorization-vehicle-location-tracking-unauthenticated/ https://siberfaqih.com/en/projects/crapi/evidence/broken-object-level-authorization-vehicle-location-tracking/ https://siberfaqih.com/en/projects/crapi/evidence/broken-object-level-authorization-workshop-mechanic-report-unauthenticated/ https://siberfaqih.com/en/projects/crapi/evidence/broken-object-level-authorization-workshop-mechanic-report/ https://siberfaqih.com/en/projects/crapi/evidence/improper-inventory-management-authentication-otp-endpoint-versions/ https://siberfaqih.com/en/projects/crapi/evidence/jwt-signature-not-verified-authentication-jwt-validation/ https://siberfaqih.com/en/projects/crapi/evidence/mass-assignment-authentication-user-registration/ https://siberfaqih.com/en/projects/crapi/evidence/nosql-injection-community-coupon-validation-normal-input/ https://siberfaqih.com/en/projects/crapi/evidence/nosql-injection-community-coupon-validation/ https://siberfaqih.com/en/projects/crapi/evidence/otp-bruteforce-protection-authentication-password-reset-per-session-lockout/ https://siberfaqih.com/en/projects/crapi/evidence/otp-bruteforce-protection-bypass-authentication-password-reset/ https://siberfaqih.com/en/projects/crapi/evidence/server-side-request-forgery-workshop-contact-mechanic/ https://siberfaqih.com/en/projects/crapi/evidence/unauthenticated-order-access-shop-order-details/ https://siberfaqih.com/en/projects/crapi/evidence/unrestricted-access-to-sensitive-business-flow-shop-coupon-claim/ https://siberfaqih.com/en/projects/crapi/evidence/unrestricted-resource-consumption-authentication-login-rate-limiting/ https://siberfaqih.com/en/projects/crapi/evidence/unsafe-consumption-of-apis-workshop-contact-mechanic-upstream/ https://siberfaqih.com/en/projects/crapi/report/ https://siberfaqih.com/en/projects/vulnbank/evidence/account-takeover-password-reset-reset-pin-disclosure/ https://siberfaqih.com/en/projects/vulnbank/evidence/active-debug-code-application-server-werkzeug-debugger/ https://siberfaqih.com/en/projects/vulnbank/evidence/broken-function-level-authorization-admin-administrative-endpoints/ https://siberfaqih.com/en/projects/vulnbank/evidence/broken-object-level-authorization-accounts-balance-lookup/ https://siberfaqih.com/en/projects/vulnbank/evidence/broken-object-level-authorization-graphql-transaction-summary/ https://siberfaqih.com/en/projects/vulnbank/evidence/broken-object-level-authorization-merchant-payments-payment-by-id/ https://siberfaqih.com/en/projects/vulnbank/evidence/broken-object-level-authorization-merchant-payments-payments-by-merchant/ https://siberfaqih.com/en/projects/vulnbank/evidence/broken-object-level-authorization-users-user-detail-api/ https://siberfaqih.com/en/projects/vulnbank/evidence/broken-object-level-authorization-virtual-cards-card-operations/ https://siberfaqih.com/en/projects/vulnbank/evidence/excessive-data-exposure-graphql-schema-introspection/ https://siberfaqih.com/en/projects/vulnbank/evidence/insufficient-session-expiration-authentication-jwt-lifetime/ https://siberfaqih.com/en/projects/vulnbank/evidence/jwt-algorithm-confusion-authentication-alg-none/ https://siberfaqih.com/en/projects/vulnbank/evidence/jwt-signature-not-verified-authentication-token-validation/ https://siberfaqih.com/en/projects/vulnbank/evidence/mass-assignment-registration-privilege-fields/ https://siberfaqih.com/en/projects/vulnbank/evidence/path-traversal-profile-picture-upload-filename/ https://siberfaqih.com/en/projects/vulnbank/evidence/race-condition-transfer-balance-check/ https://siberfaqih.com/en/projects/vulnbank/evidence/security-misconfiguration-cors-wildcard-origin/ https://siberfaqih.com/en/projects/vulnbank/evidence/sensitive-data-exposure-debug-endpoint-user-credentials/ https://siberfaqih.com/en/projects/vulnbank/evidence/sensitive-data-exposure-web-root-environment-files/ https://siberfaqih.com/en/projects/vulnbank/evidence/server-side-request-forgery-profile-picture-import-by-url/ https://siberfaqih.com/en/projects/vulnbank/evidence/sql-injection-authentication-login-bypass/ https://siberfaqih.com/en/projects/vulnbank/evidence/sql-injection-graphql-transaction-summary-resolver/ https://siberfaqih.com/en/projects/vulnbank/evidence/stored-cross-site-scripting-user-profile-bio-field/ https://siberfaqih.com/en/projects/vulnbank/evidence/unrestricted-file-upload-profile-picture-file-type-validation/ https://siberfaqih.com/en/projects/vulnbank/evidence/unrestricted-resource-consumption-authentication-login-rate-limiting/ https://siberfaqih.com/en/projects/vulnbank/evidence/unrestricted-resource-consumption-password-reset-pin-rate-limiting/ https://siberfaqih.com/en/projects/vulnbank/report/ https://siberfaqih.com/en/research/ https://siberfaqih.com/id/ https://siberfaqih.com/id/about/ https://siberfaqih.com/id/contact/ https://siberfaqih.com/id/cv/ https://siberfaqih.com/id/projects/burp-tcp/ https://siberfaqih.com/id/projects/crapi/evidence/broken-access-control-login-csrf-token-cookie-binding/ https://siberfaqih.com/id/projects/crapi/evidence/broken-function-level-authorization-workshop-management-users-endpoint/ https://siberfaqih.com/id/projects/crapi/evidence/broken-object-level-authorization-shop-return-order/ https://siberfaqih.com/id/projects/crapi/evidence/broken-object-level-authorization-vehicle-location-tracking-unauthenticated/ https://siberfaqih.com/id/projects/crapi/evidence/broken-object-level-authorization-vehicle-location-tracking/ https://siberfaqih.com/id/projects/crapi/evidence/broken-object-level-authorization-workshop-mechanic-report-unauthenticated/ https://siberfaqih.com/id/projects/crapi/evidence/broken-object-level-authorization-workshop-mechanic-report/ https://siberfaqih.com/id/projects/crapi/evidence/improper-inventory-management-authentication-otp-endpoint-versions/ https://siberfaqih.com/id/projects/crapi/evidence/jwt-signature-not-verified-authentication-jwt-validation/ https://siberfaqih.com/id/projects/crapi/evidence/mass-assignment-authentication-user-registration/ https://siberfaqih.com/id/projects/crapi/evidence/nosql-injection-community-coupon-validation-normal-input/ https://siberfaqih.com/id/projects/crapi/evidence/nosql-injection-community-coupon-validation/ https://siberfaqih.com/id/projects/crapi/evidence/otp-bruteforce-protection-authentication-password-reset-per-session-lockout/ https://siberfaqih.com/id/projects/crapi/evidence/otp-bruteforce-protection-bypass-authentication-password-reset/ https://siberfaqih.com/id/projects/crapi/evidence/server-side-request-forgery-workshop-contact-mechanic/ https://siberfaqih.com/id/projects/crapi/evidence/unauthenticated-order-access-shop-order-details/ https://siberfaqih.com/id/projects/crapi/evidence/unrestricted-access-to-sensitive-business-flow-shop-coupon-claim/ https://siberfaqih.com/id/projects/crapi/evidence/unrestricted-resource-consumption-authentication-login-rate-limiting/ https://siberfaqih.com/id/projects/crapi/evidence/unsafe-consumption-of-apis-workshop-contact-mechanic-upstream/ https://siberfaqih.com/id/projects/crapi/report/ https://siberfaqih.com/id/projects/vulnbank/evidence/account-takeover-password-reset-reset-pin-disclosure/ https://siberfaqih.com/id/projects/vulnbank/evidence/active-debug-code-application-server-werkzeug-debugger/ https://siberfaqih.com/id/projects/vulnbank/evidence/broken-function-level-authorization-admin-administrative-endpoints/ https://siberfaqih.com/id/projects/vulnbank/evidence/broken-object-level-authorization-accounts-balance-lookup/ https://siberfaqih.com/id/projects/vulnbank/evidence/broken-object-level-authorization-graphql-transaction-summary/ https://siberfaqih.com/id/projects/vulnbank/evidence/broken-object-level-authorization-merchant-payments-payment-by-id/ https://siberfaqih.com/id/projects/vulnbank/evidence/broken-object-level-authorization-merchant-payments-payments-by-merchant/ https://siberfaqih.com/id/projects/vulnbank/evidence/broken-object-level-authorization-users-user-detail-api/ https://siberfaqih.com/id/projects/vulnbank/evidence/broken-object-level-authorization-virtual-cards-card-operations/ https://siberfaqih.com/id/projects/vulnbank/evidence/excessive-data-exposure-graphql-schema-introspection/ https://siberfaqih.com/id/projects/vulnbank/evidence/insufficient-session-expiration-authentication-jwt-lifetime/ https://siberfaqih.com/id/projects/vulnbank/evidence/jwt-algorithm-confusion-authentication-alg-none/ https://siberfaqih.com/id/projects/vulnbank/evidence/jwt-signature-not-verified-authentication-token-validation/ https://siberfaqih.com/id/projects/vulnbank/evidence/mass-assignment-registration-privilege-fields/ https://siberfaqih.com/id/projects/vulnbank/evidence/path-traversal-profile-picture-upload-filename/ https://siberfaqih.com/id/projects/vulnbank/evidence/race-condition-transfer-balance-check/ https://siberfaqih.com/id/projects/vulnbank/evidence/security-misconfiguration-cors-wildcard-origin/ https://siberfaqih.com/id/projects/vulnbank/evidence/sensitive-data-exposure-debug-endpoint-user-credentials/ https://siberfaqih.com/id/projects/vulnbank/evidence/sensitive-data-exposure-web-root-environment-files/ https://siberfaqih.com/id/projects/vulnbank/evidence/server-side-request-forgery-profile-picture-import-by-url/ https://siberfaqih.com/id/projects/vulnbank/evidence/sql-injection-authentication-login-bypass/ https://siberfaqih.com/id/projects/vulnbank/evidence/sql-injection-graphql-transaction-summary-resolver/ https://siberfaqih.com/id/projects/vulnbank/evidence/stored-cross-site-scripting-user-profile-bio-field/ https://siberfaqih.com/id/projects/vulnbank/evidence/unrestricted-file-upload-profile-picture-file-type-validation/ https://siberfaqih.com/id/projects/vulnbank/evidence/unrestricted-resource-consumption-authentication-login-rate-limiting/ https://siberfaqih.com/id/projects/vulnbank/evidence/unrestricted-resource-consumption-password-reset-pin-rate-limiting/ https://siberfaqih.com/id/projects/vulnbank/report/ https://siberfaqih.com/id/research/ https://siberfaqih.com/upwork/en/ https://siberfaqih.com/upwork/en/projects/burp-tcp/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/broken-access-control-login-csrf-token-cookie-binding/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/broken-function-level-authorization-workshop-management-users-endpoint/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/broken-object-level-authorization-shop-return-order/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/broken-object-level-authorization-vehicle-location-tracking-unauthenticated/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/broken-object-level-authorization-vehicle-location-tracking/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/broken-object-level-authorization-workshop-mechanic-report-unauthenticated/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/broken-object-level-authorization-workshop-mechanic-report/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/improper-inventory-management-authentication-otp-endpoint-versions/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/jwt-signature-not-verified-authentication-jwt-validation/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/mass-assignment-authentication-user-registration/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/nosql-injection-community-coupon-validation-normal-input/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/nosql-injection-community-coupon-validation/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/otp-bruteforce-protection-authentication-password-reset-per-session-lockout/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/otp-bruteforce-protection-bypass-authentication-password-reset/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/server-side-request-forgery-workshop-contact-mechanic/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/unauthenticated-order-access-shop-order-details/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/unrestricted-access-to-sensitive-business-flow-shop-coupon-claim/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/unrestricted-resource-consumption-authentication-login-rate-limiting/ https://siberfaqih.com/upwork/en/projects/crapi/evidence/unsafe-consumption-of-apis-workshop-contact-mechanic-upstream/ https://siberfaqih.com/upwork/en/projects/crapi/report/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/account-takeover-password-reset-reset-pin-disclosure/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/active-debug-code-application-server-werkzeug-debugger/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/broken-function-level-authorization-admin-administrative-endpoints/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/broken-object-level-authorization-accounts-balance-lookup/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/broken-object-level-authorization-graphql-transaction-summary/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/broken-object-level-authorization-merchant-payments-payment-by-id/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/broken-object-level-authorization-merchant-payments-payments-by-merchant/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/broken-object-level-authorization-users-user-detail-api/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/broken-object-level-authorization-virtual-cards-card-operations/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/excessive-data-exposure-graphql-schema-introspection/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/insufficient-session-expiration-authentication-jwt-lifetime/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/jwt-algorithm-confusion-authentication-alg-none/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/jwt-signature-not-verified-authentication-token-validation/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/mass-assignment-registration-privilege-fields/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/path-traversal-profile-picture-upload-filename/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/race-condition-transfer-balance-check/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/security-misconfiguration-cors-wildcard-origin/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/sensitive-data-exposure-debug-endpoint-user-credentials/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/sensitive-data-exposure-web-root-environment-files/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/server-side-request-forgery-profile-picture-import-by-url/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/sql-injection-authentication-login-bypass/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/sql-injection-graphql-transaction-summary-resolver/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/stored-cross-site-scripting-user-profile-bio-field/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/unrestricted-file-upload-profile-picture-file-type-validation/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/unrestricted-resource-consumption-authentication-login-rate-limiting/ https://siberfaqih.com/upwork/en/projects/vulnbank/evidence/unrestricted-resource-consumption-password-reset-pin-rate-limiting/ https://siberfaqih.com/upwork/en/projects/vulnbank/report/ https://siberfaqih.com/upwork/id/ https://siberfaqih.com/upwork/id/projects/burp-tcp/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/broken-access-control-login-csrf-token-cookie-binding/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/broken-function-level-authorization-workshop-management-users-endpoint/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/broken-object-level-authorization-shop-return-order/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/broken-object-level-authorization-vehicle-location-tracking-unauthenticated/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/broken-object-level-authorization-vehicle-location-tracking/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/broken-object-level-authorization-workshop-mechanic-report-unauthenticated/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/broken-object-level-authorization-workshop-mechanic-report/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/improper-inventory-management-authentication-otp-endpoint-versions/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/jwt-signature-not-verified-authentication-jwt-validation/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/mass-assignment-authentication-user-registration/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/nosql-injection-community-coupon-validation-normal-input/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/nosql-injection-community-coupon-validation/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/otp-bruteforce-protection-authentication-password-reset-per-session-lockout/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/otp-bruteforce-protection-bypass-authentication-password-reset/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/server-side-request-forgery-workshop-contact-mechanic/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/unauthenticated-order-access-shop-order-details/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/unrestricted-access-to-sensitive-business-flow-shop-coupon-claim/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/unrestricted-resource-consumption-authentication-login-rate-limiting/ https://siberfaqih.com/upwork/id/projects/crapi/evidence/unsafe-consumption-of-apis-workshop-contact-mechanic-upstream/ https://siberfaqih.com/upwork/id/projects/crapi/report/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/account-takeover-password-reset-reset-pin-disclosure/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/active-debug-code-application-server-werkzeug-debugger/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/broken-function-level-authorization-admin-administrative-endpoints/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/broken-object-level-authorization-accounts-balance-lookup/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/broken-object-level-authorization-graphql-transaction-summary/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/broken-object-level-authorization-merchant-payments-payment-by-id/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/broken-object-level-authorization-merchant-payments-payments-by-merchant/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/broken-object-level-authorization-users-user-detail-api/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/broken-object-level-authorization-virtual-cards-card-operations/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/excessive-data-exposure-graphql-schema-introspection/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/insufficient-session-expiration-authentication-jwt-lifetime/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/jwt-algorithm-confusion-authentication-alg-none/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/jwt-signature-not-verified-authentication-token-validation/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/mass-assignment-registration-privilege-fields/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/path-traversal-profile-picture-upload-filename/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/race-condition-transfer-balance-check/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/security-misconfiguration-cors-wildcard-origin/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/sensitive-data-exposure-debug-endpoint-user-credentials/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/sensitive-data-exposure-web-root-environment-files/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/server-side-request-forgery-profile-picture-import-by-url/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/sql-injection-authentication-login-bypass/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/sql-injection-graphql-transaction-summary-resolver/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/stored-cross-site-scripting-user-profile-bio-field/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/unrestricted-file-upload-profile-picture-file-type-validation/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/unrestricted-resource-consumption-authentication-login-rate-limiting/ https://siberfaqih.com/upwork/id/projects/vulnbank/evidence/unrestricted-resource-consumption-password-reset-pin-rate-limiting/ https://siberfaqih.com/upwork/id/projects/vulnbank/report/