41554 blogs · [ { "id": "01a0873f-0049-736c-841f-f8a68a82050d", "title": "Hijacking an UltraHuman Ring: How Unauthenticated Bluetooth Allows Attackers to Steal and Modify Health Data", "url": "https://bhavukjain.com/blog/2025/03/27/hacking-ultrahuman-ring/", "published_at": "2025-03-26T18:30:00+00:00" }, { "id": "01a0873f-0049-736c-841f-f8a68aee8bcc", "title": "Account Takeover via Custom OTP, No User Interaction Required!", "url": "https://bhavukjain.com/blog/2023/07/08/account-takeover-custom-otp/", "published_at": "2023-07-07T18:30:00+00:00" }, { "id": "01a0873f-0049-736c-841f-f8a68b2ee27a", "title": "Capturing HTTP Requests from a non-proxy-aware Mobile Application", "url": "https://bhavukjain.com/blog/2023/02/19/capturing-requests-non-proxy-aware-application/", "published_at": "2023-02-18T18:30:00+00:00" }, { "id": "01a0873f-0049-736c-841f-f8a68bccf96e", "title": "Zero-day in Sign in with Apple", "url": "https://bhavukjain.com/blog/2020/05/30/zeroday-signin-with-apple/", "published_at": "2020-05-29T18:30:00+00:00" }, { "id": "01a0873f-0049-736c-841f-f8a68c03220b", "title": "Account Takeover Due to Misconfigured Login with Facebook/Google", "url": "https://bhavukjain.com/blog/2017/12/20/facebook-google-login-misconfig/", "published_at": "2017-12-19T18:30:00+00:00" }, { "id": "01a0873f-0049-736c-841f-f8a68cd7fd79", "title": "Zomato Account Takeover using Victim's Facebook ID", "url": "https://bhavukjain.com/blog/2017/08/20/zomato-account-takeover-using-facebook-id/", "published_at": "2017-08-19T18:30:00+00:00" }, { "id": "01a0873f-0049-736c-841f-f8a68d31b891", "title": "Extracting Sensitive PII From a Tracking Number in Grab Parcel", "url": "https://bhavukjain.com/blog/2017/08/19/grab-parcel-pii-leak/", "published_at": "2017-08-18T18:30:00+00:00" } ] posts Claim your blog

Blog · corpus.blog/blogs/bhavukjain.com/posts