Request
GET / HTTP/2Host: sukhmeet.comUser-Agent: youX-HackerOne: madguyyyAccept: text/html
Response
HTTP/2 200 OKServer: MohaliContent-Type: text/htmlX-Alias: MadGuyyyX-Roles: hacker, web-dev, artistX-Also: tech-support, notepad
Sukhmeet
Singh
known online as @MadGuyyy
Hacker, web developer, artist, tech support, notepad. Procrastinator.
About
// TODO: write a bio. (procrastinating)
Stack
Dev
Python, PHP, JavaScript, TypeScript, Node.js, HTML, CSS, WordPress, MySQL, MongoDB, Linux, Nginx, Apache, Git, AWS, Cloudflare, Akamai
Sec
Web app testing, Android testing, APK decompiling, Reverse engineering, Burp Suite, SSL pinning bypass, Recon, nuclei, SecLists, adb, uiautomator, apktool, jadx, Frida, Ghidra
IoT
ESP32, BLE, MQTT, Protobuf
HTTP history · latest posts
3GETHackoween #ZomatoCTFSeries · 16 posts/category/ctf/hackoween-zomatoctf/200CTFHackoween #ZomatoCTF14 Oct 20232GETBookMyShow account takeover using social loginHow a misconfigured social login led to account takeover on BookMyShow./bookmyshow-account-takeover-using-social-login/200Writeup15 Aug 20191GETReflected XSS vulnerability in Ebay.comA 2013 reflected XSS on eBay that earned my first hall of fame./xss-ebay-com/200Writeup28 Oct 2014
Site map · projects
sukhmeet.com
├──hdr-penHTMLPaint HDR highlights onto ordinary photos in the browser and export a real Ultra HDR JPEG. Single file, nothing leaves your machine.hdr-pen.sukhmeet.com
├──decoderJSEncode, decode and hash: URL, HTML, Base64, hex, binary, Unicode escapes, SHA. Runs in your browser.open tool
└──mongodb-srv-converterJSConvert mongodb+srv:// connection strings to the standard mongodb:// URI format. Runs in your browser; credentials never leave it.open tool
npmjs.com/~madguyyy
└──zipcodes-plusTSZero-dependency US ZIP and Canadian postal code lookup: city, state or province, county, coordinates.npm
Acknowledgements
- Auth0
- BookMyShow
- eBay
- Eternal
- JNJ Mobile
- Myntra
- OYO
- Quora
- The Walt Disney Company
- Upwork
- Urban Company
- Yahoo
- 9 private programs
Contact
// Introvert. Please avoid contacting me. If you really need to, email works.