Ory Corp
Hall of Fame
nday.lol/ security research
MirzəbabaƏhmədov
No Days Allowed Yet...Living Off Land
Independent security researcher and bug bounty hunter.
Based in Azerbaijan. I investigate, document, and responsibly disclose vulnerabilities across public and private programs.
- Location
- Baku, Azerbaijan
- Current
- HackerOne Brand Ambassador
Research focus
Application Security
Burp SuiteLibFuzzerASan
Mobile Application Security
Burp SuiteJADXMobSFFridaAndroid Studio EmulatorGhidraIDA Pro
Web3 / Blockchain Security
FoundrySlitherEchidnaMedusaHardhat
Public record
Blog
Path-Based Access Control Misconfiguration Exposed Internal NASA Resources
A public route exposed limited employee directory details, profile links, and internal presentation templates without authentication.
- Status
- Resolved
- Severity
- P4 / Low
2 min read
Race Condition in Discord Guest Invites Led to Broken Access Control and Secret Message Access
A guest session could remain in a server outside the intended voice-channel lifecycle, without appearing in the member list.
- Status
- Resolved
- Severity
- P2 / High
2 min read
Improper Input Validation in Discord Template Links Caused Request Loops and Account Rate Limits
Malformed template identifiers triggered repeated background requests, client lag, and account-wide rate limiting.
- Status
- Resolved
- Severity
- P2 / High
2 min read
Recognition / Hall of Fame
Responsible disclosure
GitHub
Hall of Fame
Discord
Hall of Fame
U.S. Agency for Global Media
Hall of Fame
State of California
VDP
NASA
VDP recognition · Jan 2025
CERT-EU
Recognition
Bitget Wallet
Hall of Fame
Intel
Hall of Fame
Profiles
External record