Authentication & Access Control From OSINT to Exploit: Uncovering Auth Bypass and Leaked Credentials
A Synack Red Team member discovered a cross-site scripting vulnerability in SAP Concur Open.
Home > Archives by MukundBhuva
MukundBhuva
MukundBhuva is a security researcher on the Synack Red Team specializing in mobile, web, and API security assessments. Combining OSINT, APK reverse engineering, JavaScript code analysis, and endpoint fuzzing, he has uncovered a range of critical vulnerabilities for Synack clients, including authentication bypasses, default credentials, JWT signature flaws, and token leaks across mobile and API surfaces.