PinnedInInfoSec Write-upsbyJatin Banga·Jan 23I Found a Bug That Exposed Private Instagram Posts to Anyone.In October 2025, I discovered a server-side vulnerability in Instagram that allowed completely unauthenticated access to private account…A response icon23A response icon23
InInfoSec Write-upsbyJatin Banga·Mar 20How I Scraped Most Dark Stores in India — Blinkit, Zepto & Swiggy InstamartA technical portfolio project: reverse-engineering the store coordinates and delivery geofences of India’s three largest quick-commerce…A response icon5A response icon5
InInfoSec Write-upsbyJatin Banga·Feb 18I Reverse-Engineered Zomato’s Food Rescue Feature — Here’s What I Found InsideZomato’s “Food Rescue” is essentially a race condition. Here’s how I built a headless monitor to win it.A response icon6A response icon6
InInfoSec Write-upsbyJatin Banga·Feb 11Zomato Privacy Flaw: How the ‘Friend Recommendations’ Feature Enables Location StalkingTL;DR: Zomato’s “Friend Recommendations” API allows unilateral contact syncing. By uploading a phone number, bad actors can extract a…
