17:"$Sreact.suspense" 18:T4f8,

Hi, I'm Rohit (Dedrknex) — cybersecurity enthusiast, backend dev, and bug bounty hunter.

Find all my writeups on Medium.

Highlights:

From a Simple Export Button to Full Data Exposure — Broken Access Control in a SaaS
IDOR exposing PII for 6.4 million users
IDOR Bypass Part 2
HTTP Desync Exploits
Information Disclosure via Recon
Image Upload Bypass → RCE

5:["$","section",null,{"id":"blog","children":[["$","script",null,{"type":"application/ld+json","suppressHydrationWarning":true,"dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"BlogPosting\",\"headline\":\"My Security Writeups\",\"datePublished\":\"2025-05-10\",\"dateModified\":\"2025-05-10\",\"description\":\"Bug bounty writeups covering IDOR, broken access control, RCE, and more.\",\"image\":\"https://github.com/dedrknex8/og?title=My Security Writeups\",\"url\":\"https://github.com/dedrknex8/blog/new-blog\",\"author\":{\"@type\":\"Person\",\"name\":\"Rohit Tiwari\"}}"}}],["$","h1",null,{"className":"title font-medium text-2xl tracking-tighter max-w-[650px]","children":"My Security Writeups"}],["$",