Instagram story viewer> @aaronamran> Posts

ᴀᴀʀᴏɴ ᴀᴜɢᴜꜱᴛɪɴᴇ

@aaronamran

872

followers

746

following

I wish I knew how to hack computers, do pull-ups and handstands.

POSTS STORIES REELS TAGGED

Download All

The things we do for dopamine rush, even when we know the risks it brings.

I can't disclose what I found this time for the Parliament of New South Wales, Australia, but at least the record stays here.

#ethicalhacker #cybersecurity #vdp by @aaronamran

3

5

7 months ago

While browsing (unhealthily) in the near-hidden corners of the web, I discovered one of @nasa ’s Google Drive that had misconfigured read/write permissions, allowing anyone to edit or delete its contents. I was stunned when I realised this. After responsibly reporting the issue, NASA acknowledged my disclosure. I guess you could say I (ethically) hacked NASA.

On a side note, NASA operates more than 7,000 subdomains, which I previously spent several months reviewing and analysing countless web page source codes.

#nasa #cybersecurity #ethicalhacker taken in Kuching, Sarawak. by @aaronamran

3

12

a year ago

2024: Set a goal with zero knowledge.
2025: Worked daily towards it.
2026: Got it.

#who #ethicalhacker #vdp by @aaronamran

3

1

a month ago

2017: Walked past Bayer HQ in Berlin on my way home for a few months after German language classes.
2026: Broke into one of their VM hosted on AWS via remote code execution, and bypassed sign-in page to reveal company details in dev environment.

Oh how times change people.

#vdp #ethicalhacker #cybersecurity by @aaronamran

3

3

4 months ago

Hunting for cybersecurity flaws on UN's public facing digital assets was one of the toughest personal challenge I have experienced. Now I can move on heh

#vdp #ethicalhacker #cybersecurity taken in United Nations by @aaronamran

3

4

4 months ago

I ethically hacked Motorola Solutions by exploiting a vulnerability that leaked tons of user information, reported it to them and they thanked me for it.

#ethicalhacker #cybersecurity #offensivesecurity by @aaronamran

3

3

4 months ago

Thank you for the surprise birthday dinner 🍰💝 tried new food at a fine dining place that gave us a pause from daily routines and staring at screens by @aaronamran

3

19

5 months ago

Finally crossing UNESCO off my list. Dug deep and discovered an unprotected remote control to a power supply system located in Ecuador.

#ethicalhacker #vdp #cybersecurity #unesco by @aaronamran

3

4

6 months ago

Discovered a publicly exposed datalogger belonging to a Berkeley Lab research team and reported it via their White Hats for Science VDP. Although the page triggered a user login prompt upon loading, cancelling the prompt did not return an HTTP 401 error. Instead, it bypassed the authentication and allowed normal browsing access.

#ethicalhacker #vdp by @aaronamran

3

1

8 months ago

A bit of a late recognition, but I'm glad to be added to UNICEF's Information Security Hall of Fame. I discovered an unprotected ArcGIS server where, unlike the other endpoints that were secured with HTTP 403 blocks, this server allowed unauthorized file uploads. Deleting content was also possible if the item ID was known.

Feel free to read my blogs at https://aaronamran.github.io/ethicalhacking

#ethicalhacker
#cybersecurity #unicef taken in Cyberspace by @aaronamran

3

2

9 months ago

Second round for vulnerability disclosure on US Gov's Berkeley Lab: Reflected HTML injection in a search feature, fully client-side, with Cloudflare's web application firewall in place.

View White Hats for Science page here: https://go.lbl.gov/vdp

#vdp #ethicalhacker #cybersecurity by @aaronamran

3

1

9 months ago

Small win before Christmas 2025! I discovered a Django web server misconfiguration for Lawrence Berkeley National Laboratory, California where the Debug mode is enabled. Playing around with the URL and trying to view a YAML file gave me errors. By further scrolling down it allowed me to view sensitive server details. Berkeley Lab Cybersecurity team responded really fast, despite it being almost midnight in the United States.

View White Hats for Science page here: https://go.lbl.gov/vdp

#vdp #ethicalhacker #cybersecurity by @aaronamran

3

2

10 months ago