| Reflected XSS bypass WAF & Page notfound | https://kresec.medium.com/reflected-xss-bypass-waf-page-notfound-e149db1ee6c4?source=rss------bug_bounty-5 | KreSec | xss-attack, security, bug-bounty | 22-Dec-2024 |
| Automate MAC Address Change on Arch Linux at Boot | https://theexploitlab.medium.com/automate-mac-address-change-on-arch-linux-at-boot-893f6ccdb1b4?source=rss------bug_bounty-5 | The Exploit Lab | bug-bounty, bugs, macchanger, cybersecurity | 22-Dec-2024 |
| Payment Bypass Guide for Bug Bounty | 69 case studies | https://medium.com/@illoyscizceneghposter/payment-bypass-guide-for-bug-bounty-69-case-studies-15379b4f76fa?source=rss------bug_bounty-5 | Illoy Scizceneghposter | bug-bounty, bug-bounty-tips, cybersecurity | 21-Dec-2024 |
| The Bounty Hunters: Bug Bounty Programs | https://medium.com/@investigator515/the-bounty-hunters-bug-bounty-programs-8dcd24d5bafa?source=rss------bug_bounty-5 | Investigator515 | hacking, technology, information-security, bug-bounty, cybersecurity | 21-Dec-2024 |
| How I Exploited an OTP Bypass Vulnerability on a Cryptocurrency Platform | https://medium.com/@anonymous512/how-i-exploited-an-otp-bypass-vulnerability-on-a-cryptocurrency-platform-2a817b02b3ea?source=rss------bug_bounty-5 | Wafa Abbas | account-hacking, bug-bounty, authentication-bypass, otp-bypass, vulnerability | 21-Dec-2024 |
| Mastering 403 Forbidden Bypass Techniques ✨ | https://medium.com/@kumawatabhijeet2002/mastering-403-forbidden-bypass-techniques-4ab1482afe49?source=rss------bug_bounty-5 | Abhijeet kumawat | bounty-program, infosec, 403-forbidden, hacking, bug-bounty | 21-Dec-2024 |
| Kali Linux 2024.4: 14 New Tools to Supercharge Your Penetration Testing Arsenal | https://bitpanic.medium.com/kali-linux-2024-4-14-new-tools-to-supercharge-your-penetration-testing-arsenal-543ff8370091?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, technology, cybersecurity, programming, bug-bounty | 21-Dec-2024 |
| Understanding Tycoon 2FA Phishing: A New Era of Security Threats | https://medium.com/@paritoshblogs/understanding-tycoon-2fa-phishing-a-new-era-of-security-threats-19fb14dc83a5?source=rss------bug_bounty-5 | Paritosh | cybersecurity, information-technology, hacking, tycoon-phshing, bug-bounty | 21-Dec-2024 |
| Malicious Rspack & Vant Packages Exploited Using Stolen NPM Tokens | https://medium.com/@wiretor/malicious-rspack-vant-packages-exploited-using-stolen-npm-tokens-0b69df1512fd?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ai, business, hacking, bug-bounty | 21-Dec-2024 |
| FlowerStorm: The New Microsoft Phishing Threat Filling the Void Left by Rockstar2FA | https://medium.com/@wiretor/flowerstorm-the-new-microsoft-phishing-threat-filling-the-void-left-by-rockstar2fa-578144a14487?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, bug-bounty, microsoft, hacking, malware | 21-Dec-2024 |
| LockBit Developer Rostislav Panev Charged for Billions in Global Ransomware Damages | https://medium.com/@wiretor/lockbit-developer-rostislav-panev-charged-for-billions-in-global-ransomware-damages-bee0bfc4c9b9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, malware, bug-bounty, business, ai | 21-Dec-2024 |
| Blind XXE with OOB Interaction via XML Parameter Entities | https://osintteam.blog/blind-xxe-with-oob-interaction-via-xml-parameter-entities-97244bf2b85e?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Café | cybersecurity, bug-bounty-tips, information-security, bug-bounty, pentesting | 20-Dec-2024 |
| CSRF On Delete Profile: High Severity(7.1) HackerOne | https://medium.com/@josuofficial327/csrf-on-delete-profile-high-severity-7-1-hackerone-33bdb598ef67?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty-writeup, bug-bounty, ethical-hacking, bug-bounty-program, cybersecurity | 20-Dec-2024 |
| Part-2 | Deep Recon Methodology for Bug Bounty Hunters | https://medium.com/@kumawatabhijeet2002/part-2-deep-recon-methodology-for-bug-bounty-hunters-644077ee41d4?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-writeup, infosec, bugs, bug-bounty, hacking | 20-Dec-2024 |
| The Most Easiest OTP Bypass Vulnerability I’ve Found: A Critical Flaw in Session Management | https://medium.com/@ajay.kumar.695632/the-most-easiest-otp-bypass-vulnerability-ive-found-a-critical-flaw-in-session-management-09b1555dbf9e?source=rss------bug_bounty-5 | Ajay Kumar | bug-hunting, bug-bounty, bug-bounty-tips, bugs, bug-bounty-writeup | 20-Dec-2024 |
| The Secret World of Hackers: A Beginner’s Guide to Understanding Cyber Attacks | https://medium.com/@paritoshblogs/the-secret-world-of-hackers-a-beginners-guide-to-understanding-cyber-attacks-81377a0b477e?source=rss------bug_bounty-5 | Paritosh | ai, information-technology, cybersecurity, bug-bounty, hacking | 20-Dec-2024 |
| Utilizing machine learning to collect more subdomains using subwiz | https://medium.com/@demonia/utilizing-machine-learning-to-collect-more-subdomains-using-subwiz-2d65cec1ee80?source=rss------bug_bounty-5 | Mohammed Dief | bug-bounty, recon, cybersecurity, reconnaissance, bug-bounty-tips | 20-Dec-2024 |
| Information Disclosure On Password cancel Endpoint | https://medium.com/@regan_temudo/information-disclosure-on-password-cancel-endpoint-4b6f43cc5fd7?source=rss------bug_bounty-5 | Regan Temudo | cybersecurity, information-disclosure, bug-bounty, ethical-hacking, csrf | 20-Dec-2024 |
| OSI Model Explanation | https://medium.com/@hossennaim547/osi-model-explanation-09259ce7a5af?source=rss------bug_bounty-5 | naimHOSSEN | bug-bounty, hacking, osi-model, cybersecurity | 20-Dec-2024 |
| Simple ATO in private program. | https://medium.com/@oXnoOneXo/simple-ato-in-private-program-890cd1485675?source=rss------bug_bounty-5 | oXnoOneXo | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 20-Dec-2024 |
| From Comments to Command Execution: How an E-Book Platform Gave Me RCE | https://imooaaz.medium.com/from-comments-to-command-execution-how-an-e-book-platform-gave-me-rce-f27a079ca584?source=rss------bug_bounty-5 | Moaaz Afifi | bug-bounty, penetration-testing, cybersecurity, rce-vulnerability, xss-attack | 20-Dec-2024 |
| Unlocking Web Security: A Deep Dive into the OWASP Top 10 | https://medium.com/@rootast/unlocking-web-security-a-deep-dive-into-the-owasp-top-10-d669199277bd?source=rss------bug_bounty-5 | Arash shahbazi | cybersecurity, students, owasp-top-10, bug-bounty, university | 20-Dec-2024 |
| Discover All Paths in Next.js Websites | https://rhashibur75.medium.com/discover-all-paths-in-next-js-websites-43e319b24be9?source=rss------bug_bounty-5 | Kazi Hashibur Rahman | bug-bounty, bug-bounty-tips, bug-bounty-writeup, nextjs, penetration-testing | 20-Dec-2024 |
| Ascension Data Breach: 5.6M Health Records Stolen by Black Basta Ransomware | https://medium.com/@wiretor/ascension-data-breach-5-6m-health-records-stolen-by-black-basta-ransomware-a8d2f7ba6856?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, business, malware, ai | 20-Dec-2024 |
| Android Malware on Amazon Appstore Disguised as Health App | https://medium.com/@wiretor/android-malware-on-amazon-appstore-disguised-as-health-app-3cda80dfc856?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, ai, hacking, malware | 20-Dec-2024 |
| SQL Injection via ORDER BY Parameter | https://medium.com/@mfthylmaz/sql-injection-via-order-by-parameter-a7cb7d04017f?source=rss------bug_bounty-5 | mfthylmaz | sql-injection, bug-bounty, web-security, hacking | 20-Dec-2024 |
| Essential Stuff For Your First Hacking Trip. Hacking Gadgets #2 “Assortment For The Little Hacker” | https://medium.com/h7w/essential-stuff-for-your-first-hacking-trip-hacking-gadgets-2-assortment-for-the-little-hacker-e886dba68a11?source=rss------bug_bounty-5 | NnFace | hacking, trip, technology, bug-bounty, cybersecurity | 19-Dec-2024 |
| No Rate Limit Vulnerability on a US Government Website | https://medium.com/@kumawatabhijeet2002/no-rate-limit-vulnerability-on-a-us-government-website-ae47402b663d?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty | 19-Dec-2024 |
| How I Got $1000 AWS Credits and Maximized Its Potential | https://medium.com/@awsdevops183/how-i-got-1000-aws-credits-and-maximized-its-potential-e08650930171?source=rss------bug_bounty-5 | Madhukar Reddy | aws, devops, python, cybersecurity, bug-bounty | 19-Dec-2024 |
| The Day I Found a Cross-Site Scripting (XSS) Vulnerability in a Bug Bounty Program | https://medium.com/@awsdevops183/the-day-i-found-a-cross-site-scripting-xss-vulnerability-in-a-bug-bounty-program-4edec6f09bed?source=rss------bug_bounty-5 | Madhukar Reddy | cybersecurity, bug-bounty, devsecops, cross-site-scripting | 19-Dec-2024 |
| First Google Chrome v8 JIT bug bounty before Christmas . | https://vxrl.medium.com/first-google-chrome-v8-jit-bug-bounty-before-christmas-1338fb2c8255?source=rss------bug_bounty-5 | VXRL | google, v8, chromium, psvr, bug-bounty | 19-Dec-2024 |
| Exploiting a Rate Limiting Bug in the Chat Section of a Health Application (got me $200) | https://medium.com/@awsdevops183/exploiting-a-rate-limiting-bug-in-the-chat-section-of-a-health-application-got-me-200-a06ca465707f?source=rss------bug_bounty-5 | Madhukar Reddy | devsecops, cybersecurity, information-technology, bug-bounty, burpsuite | 19-Dec-2024 |
| POC — CVE-2024–9935 — PDF Generator Addon for Elementor Page Builder <= 1.7.5 | https://medium.com/@verylazytech/poc-cve-2024-9935-pdf-generator-addon-for-elementor-page-builder-1-7-5-2c3436b95fb1?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, arbitrary-file-download, cybersecurity, lfi, cve-2024-9935 | 19-Dec-2024 |
| The Day I Found a Cross-Site Scripting (XSS) Vulnerability in a Bug Bounty Program ( $411) | https://medium.com/@awsdevops183/the-day-i-found-a-cross-site-scripting-xss-vulnerability-in-a-bug-bounty-program-4edec6f09bed?source=rss------bug_bounty-5 | Madhukar Reddy | cybersecurity, bug-bounty, devsecops, cross-site-scripting | 19-Dec-2024 |
| How I Bypassed View-Only Mode with a Simple Trick ( duplicate bug ) | https://medium.com/@mahdisalhi0500/how-i-bypassed-view-only-mode-with-a-simple-trick-duplicate-bug-92e1ec91a8d7?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | security, information-security, bug-bounty, penetration-testing, infosec | 19-Dec-2024 |
| How i Found X-Forwarded Header Injection — Server Be Like, ‘Ab Toh Trust Issues Ho Rahe Hain!’ | https://aiwolfie.medium.com/how-i-found-x-forwarded-header-injection-server-be-like-ab-toh-trust-issues-ho-rahe-hain-220e100332a3?source=rss------bug_bounty-5 | AIwolfie | cybersecurity, bug-bounty, servers, ethical-hacking, host-header-injection | 19-Dec-2024 |
| Subdomain Takeover guides, methodology and exploit POCs | https://aditya-narayan.medium.com/subdomain-takeover-guides-methodology-and-exploit-pocs-9f5dd632c175?source=rss------bug_bounty-5 | Aditya Narayan | bug-bounty-writeup, subdomain-takeover, bug-bounty-tips, reconnaissance, bug-bounty | 19-Dec-2024 |
| Installing Xposed Framework for Enhanced Penetration Testing (SSLunpinning) | https://medium.com/@sumith.ec12/installing-xposed-framework-for-enhanced-penetration-testing-sslunpinning-d50fbb2354c6?source=rss------bug_bounty-5 | sumith p v | bug-bounty, vapt, pentesting, security-testing, ssl-pinning-bypass | 19-Dec-2024 |
| HTML Injection to Mass Phishing | https://infosecwriteups.com/html-injection-to-mass-phishing-5701d495cdc2?source=rss------bug_bounty-5 | Bharat Singh | phishing, bug-bounty, cybersecurity, penetration-testing, bug-bounty-writeup | 19-Dec-2024 |
| Zero-Click Account Takeover Through Response Manipulation | https://medium.com/@abdullayman04/zero-click-account-takeover-through-response-manipulation-ee786a7a06dd?source=rss------bug_bounty-5 | Abdullah Ayman | cybersecurity, bug-bounty, account-takeover, penetration-testing | 19-Dec-2024 |
| How I Found an Authentication Bypass Vulnerability in the Password Change Process | https://medium.com/@ajay.kumar.695632/how-i-found-an-authentication-bypass-vulnerability-in-the-password-change-process-160359fae1bc?source=rss------bug_bounty-5 | Ajay Kumar | bugs, bug-bounty-writeup, bug-bounty-tips, bug-bounty, bug-hunting | 19-Dec-2024 |
| HACKING NASA TO GET APPRECIATION LETTER | https://medium.com/@click2jit/hacking-nasa-to-get-appreciation-letter-a6ff93a3bcbc?source=rss------bug_bounty-5 | Prasenjit Malakar | cybersecurity, bug-bounty, ethical-hacking, programming, xss-attack | 19-Dec-2024 |
| Interpol Replaces “Pig Butchering” with “Romance Baiting” to Protect Victims | https://medium.com/@wiretor/interpol-replaces-pig-butchering-with-romance-baiting-to-protect-victims-4c702d62adaa?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, ai, bug-bounty, malware, hacker | 19-Dec-2024 |
| LFI: Identify the vulnerable endpoint and exploit that by reading |
| the “/etc/passwd” file." | https://medium.com/@aburayhan01734_18069/lfi-identify-the-vulnerable-endpoint-and-exploit-that-by-reading-the-etc-passwd-file-a9d0586f85c9?source=rss------bug_bounty-5 | Md. Abu Rayhan | lfi, bug-bounty, vulnerability, cybersecurity, bug-bounty-writeup | 19-Dec-2024 |
| Beginners Guide for Exploiting Race Conditions | https://bitpanic.medium.com/beginners-guide-for-exploiting-race-conditions-ab73c843b44a?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, programming, cybersecurity, bug-bounty-tips, technology | 19-Dec-2024 |
| “Do Your Best, and Let Allah Do the Rest” led me to a Privilege Escalation Bug | https://medium.com/@mrasg/do-your-best-and-let-allah-do-the-rest-leads-me-to-privilege-escalation-bug-60a3c028c802?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | pentesting, penetration-testing, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 19-Dec-2024 |
| Successfully Gained Full Admin Access and Changed the Password Through Token Manipulation ⚔️ | https://medium.com/@momenrezkk90/successfully-gained-full-admin-access-and-changed-the-password-through-token-manipulation-%EF%B8%8F-fe91fc0d9a0f?source=rss------bug_bounty-5 | Momenrezk | penetration-testing, bug-bounty, cybersecurity | 18-Dec-2024 |
| Easiest P1 $$$$$! | https://medium.com/@mrsingh10978/easiest-p1-702990960a50?source=rss------bug_bounty-5 | Anonymous Traiger | bug-bounty-program, bug-bounty-hunter, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 18-Dec-2024 |
| Mobile Application Bounty Practice: SQL Injection Principles, Vulnerability Discovery and… | https://medium.com/@security.tecno/mobile-application-bounty-practice-sql-injection-principles-vulnerability-discovery-and-3921ad2e6998?source=rss------bug_bounty-5 | TECNO Security | hacking, security, sql, bug-bounty | 18-Dec-2024 |
| FROM STRUGGLES TO SUCCESS: MY JOURNEY TO THE NASA HALL OF FAME | https://rootxabit.medium.com/from-struggles-to-success-my-journey-to-the-nasa-hall-of-fame-38700dd6303a?source=rss------bug_bounty-5 | sudo-xabit | info-sec-writeups, bugcrowd, bug-bounty, hacked, nasa | 18-Dec-2024 |
| Admin Panel Access via Default Credentials | https://infosecwriteups.com/admin-panel-access-via-default-credentials-215b92b030bb?source=rss------bug_bounty-5 | cryptoshant | bug-bounty-tips, pentesting, bug-bounty, hall-of-fame, hacking | 18-Dec-2024 |
| Rate Limit Bypass Using Response Manipulation. | https://aman0.medium.com/rate-limit-bypass-using-response-manipulation-dcce19aff7ef?source=rss------bug_bounty-5 | Aman H | web3, bug-bounty, infosec, bug-bounty-tips, penetration-testing | 18-Dec-2024 |
| $150 Easy HTML Injection Vulnerability | https://medium.com/@kumawatabhijeet2002/150-easy-html-injection-vulnerability-5c176b5d07fa?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, bounty-program, infosec, bug-bounty, bug-bounty-tips | 18-Dec-2024 |
| What is Passive Reconnaissance? ️♂️ | https://theexploitlab.medium.com/what-is-passive-reconnaissance-%EF%B8%8F-%EF%B8%8F-4de8a9ce5003?source=rss------bug_bounty-5 | The Exploit Lab | hacking, bugs, bug-bounty, bug-bounty-tips | 18-Dec-2024 |
| How to Use Enum4linux for SMB Enumeration in Kali Linux | https://theexploitlab.medium.com/how-to-use-enum4linux-for-smb-enumeration-in-kali-linux-d96e27f9391d?source=rss------bug_bounty-5 | The Exploit Lab | bug-bounty, smb, bug-bounty-tips, bugs | 18-Dec-2024 |
| How to Use Corsy for CORS Misconfiguration Scanning | https://theexploitlab.medium.com/how-to-use-corsy-for-cors-misconfiguration-scanning-7ba7b22ee9d5?source=rss------bug_bounty-5 | The Exploit Lab | cors, hacking, bug-bounty, bug-bounty-tips | 18-Dec-2024 |
| Useful Wordlists for Bug Bounty Hunters | https://medium.com/@iamshafayat/useful-wordlists-for-bug-bounty-hunters-09f9b3cd2344?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | bug-bounty, cybersecurity, penetration-testing, bug-bounty-tips, bug-bounty-writeup | 18-Dec-2024 |
| Step-by-Step Guide to Building Secure Web Applications with OWASP Top 10 | https://medium.com/@dhatchu9715/step-by-step-guide-to-building-secure-web-applications-with-owasp-top-10-7c603dda58f3?source=rss------bug_bounty-5 | Dhatchu | owasp, bug-bounty, hacking, networking, cybersecurity | 18-Dec-2024 |
| Bug Bounty Findings: 10 Major Vulnerabilities Exposed in Cloverleaf’s Application - BAC in GraphQL… | https://medium.com/@maakthon/bug-bounty-findings-10-major-vulnerabilities-exposed-in-cloverleafs-application-bac-in-graphql-0ae1ee0eb4d5?source=rss------bug_bounty-5 | Mahmoud Abd Alkarim | cybersecurity, bug-bounty, broken-access-control, bug-bounty-writeup, security-research | 18-Dec-2024 |
| The Dark Side of Shodan | https://yasinspace.medium.com/the-dark-side-of-shodan-2d9b422e28a8?source=rss------bug_bounty-5 | Yasin | red-team, hacking, bug-bounty, shodan, bug-bounty-tips | 18-Dec-2024 |
| This 200$ Gadget Can Hack Anything | https://osintteam.blog/this-200-gadget-can-hack-anything-c482888871e3?source=rss------bug_bounty-5 | Tahir Ayoub | bug-bounty, cybersecurity, technology, cybercrime, hacking | 18-Dec-2024 |
| Best python scripts for cybersecurity analyst | https://medium.com/@paritoshblogs/best-python-scripts-for-cybersecurity-analyst-d5ebc91b4cdb?source=rss------bug_bounty-5 | Paritosh | information-technology, cybersecurity, hacking, bug-bounty, python | 18-Dec-2024 |
| Turning a Known Issue into €100 Bounty: My Bug Bounty Breakthrough✨ | https://medium.com/@anmolv77654/turning-a-known-issue-into-a-100-bounty-my-bug-bounty-breakthrough-3bd89c281ea9?source=rss------bug_bounty-5 | AnmolSecSavvy | web-security, cybersecurity, bug-bounty, ethical-hacking, bug-bounty-tips | 18-Dec-2024 |
| $750 Domain Hijacking Vulnerability | https://1-day.medium.com/750-domain-hijacking-vulnerability-f6e4b4445711?source=rss------bug_bounty-5 | 1day | bug-bounty, information-security, penetration-testing, ethical-hacking, bug-bounty-tips | 18-Dec-2024 |
| Meta Hit with $264M Fine! Irish DPC Takes a Stand on Facebook Data Breach | https://medium.com/@wiretor/meta-hit-with-264m-fine-irish-dpc-takes-a-stand-on-facebook-data-breach-60cb69abe3df?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, ai, business, malware | 18-Dec-2024 |
| Beware of New Ledger Phishing Attack: Protect Your Crypto Wallet! | https://medium.com/@wiretor/beware-of-new-ledger-phishing-attack-protect-your-crypto-wallet-a048705d2b58?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, ai, hacking, business | 18-Dec-2024 |
| CVE-2024–54385 | WordPress Plugin | https://medium.com/@malvinval/cve-2024-54385-wordpress-plugin-7ff0f8e5ad1d?source=rss------bug_bounty-5 | Malvin Valerian | cve, hacking, cybersecurity, bug-bounty, wordpress | 17-Dec-2024 |
| 200$ DLL Hijacking Attack | https://cybersecuritywriteups.com/200-dll-hijacking-attack-fdb4fd46fea9?source=rss------bug_bounty-5 | AbhirupKonwar | cybersecurity, penetration-testing, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 17-Dec-2024 |
| OSINT AND DORKING TOOLS | https://medium.com/@reazatih/osint-and-dorking-tools-67dc970d049d?source=rss------bug_bounty-5 | Re@Za | osint, hacking, dorks, bug-bounty | 17-Dec-2024 |
| Utilizing MITRE ATT&CK Framework: Examples and Practical Applications | https://medium.com/@paritoshblogs/utilizing-mitre-att-ck-framework-examples-and-practical-applications-0c4ea468ad53?source=rss------bug_bounty-5 | Paritosh | mitre-attck, hacking, threat-intelligence, bug-bounty, cybersecurity | 17-Dec-2024 |
| Open Redirect to XSS: Chaining Vulnerabilities for Maximum Impact | https://medium.com/@iPsalmy/open-redirect-to-xss-chaining-vulnerabilities-for-maximum-impact-36ae8dd9f198?source=rss------bug_bounty-5 | iPsalmy | web-application-security, bug-bounty, xss-attack | 17-Dec-2024 |
| API Keys Attack: How to Find and Exploit Secrets in Web Applications | https://medium.com/@bootstrapsecurity/api-keys-attack-how-to-find-and-exploit-secrets-in-web-applications-1896d75d716b?source=rss------bug_bounty-5 | BootstrapSecurity | ethical-hacking, bug-bounty, api, hacking, hacking-team | 17-Dec-2024 |
| Top 9 Books to Master Bug Hunting and Penetration Testing | https://osintteam.blog/top-9-books-to-master-bug-hunting-and-penetration-testing-c40039b330bb?source=rss------bug_bounty-5 | Bicitro Biswas | hacking, cybersecurity, bug-bounty, books, penetration-testing | 17-Dec-2024 |
| Exposing Facebook’s Hidden Goldmine: Creators’ Private Data at Risk | https://gtm0x01.medium.com/exposing-facebooks-hidden-goldmine-creators-private-data-at-risk-01317f3f0031?source=rss------bug_bounty-5 | Gtm Mänôz | graphql, hacking, facebook, infosec, bug-bounty | 17-Dec-2024 |
| SubScanX: A Powerful Recon Tool for Bug Bounty and Pentesting | https://medium.com/@rootspaghetti/subscanx-a-powerful-recon-tool-for-bug-bounty-and-pentesting-ed229128a661?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty-tips, bug-bounty | 17-Dec-2024 |
| Documenting Bug Bounty Journey and Current Approach | https://aditya-narayan.medium.com/documenting-bug-bounty-journey-and-current-approach-334db57e857e?source=rss------bug_bounty-5 | Aditya Narayan | bug-bounty-tips, writeup, hacker, bug-bounty, cybersecurity | 17-Dec-2024 |
| How I got Appreciation Letters for finding bugs. | https://infosecwriteups.com/how-i-got-appreciation-letters-for-finding-bugs-e935f42e2f71?source=rss------bug_bounty-5 | Rivek Raj Tamang ( RivuDon ) | hacking, cybersecurity, ethical-hacking, bug-bounty, bug-bounty-tips | 17-Dec-2024 |
| How I Broke the Speed Limit: A Bug Bounty Tale of Bypassing Rate Limiting | https://infosecwriteups.com/how-i-broke-the-speed-limit-a-bug-bounty-tale-of-bypassing-rate-limiting-29a1ec4e8681?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips, technology | 17-Dec-2024 |
| 6 AI Tools Used by Hackers 2025 | https://ai.plainenglish.io/6-ai-tools-used-by-hackers-2025-dfdda79cf51f?source=rss------bug_bounty-5 | Tahir Ayoub | chatgpt, hacking, ai, cybersecurity, bug-bounty | 17-Dec-2024 |
| 403 Bypass changing http method only | https://rahman0x01.medium.com/403-bypass-changing-http-method-only-f0a32b43a3c8?source=rss------bug_bounty-5 | rahman0x01 | hunting, ethical-hacking, bug-bounty | 17-Dec-2024 |
| Cybersecurity Alert: Texas Tech University System Data Breach Impacts 1.4 Million Patients! | https://medium.com/@wiretor/cybersecurity-alert-texas-tech-university-system-data-breach-impacts-1-4-million-patients-caceb8096be9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, ai, hacking, business | 17-Dec-2024 |
| FBI ALERT: HiatusRAT Malware Attacks Targeting Web Cameras & DVRs! | https://medium.com/@wiretor/fbi-alert-hiatusrat-malware-attacks-targeting-web-cameras-dvrs-37f2eeb2bd01?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, business, hacking, fbi, malware | 17-Dec-2024 |
| Easy 100$ in public Hackerone program under 3 minutes | https://medium.com/@loayahmed686/easy-100-in-public-hackerone-program-under-3-minutes-69b20e185d3b?source=rss------bug_bounty-5 | r00t | bug-bounty | 17-Dec-2024 |
| Uncovering Vulnerabilities Through Swagger UI Directory Enumeration | https://hackersatty.medium.com/uncovering-vulnerabilities-through-swagger-ui-directory-enumeration-49e6b43558cd?source=rss------bug_bounty-5 | hackersatty | cybersecurity, javascript, vulnerability, bug-bounty, swagger | 17-Dec-2024 |
| Top 5 Ways to Hack APIs and find good bugs | https://medium.com/@sreedeep200/top-5-ways-to-hack-apis-and-find-good-bugs-dfd4a7bbb623?source=rss------bug_bounty-5 | Sreedeep cv | cybersecurity, hacking, api, security, bug-bounty | 17-Dec-2024 |
| Exploiting Access Control Misconfiguration: Privilege Escalation via Improper PATCH Method… | https://medium.com/@momenrezkk90/exploiting-access-control-misconfiguration-privilege-escalation-via-improper-patch-method-b653bb92ada6?source=rss------bug_bounty-5 | Momenrezk | bug-bounty, privilege-escalation, cybersecurity, penetration-testing | 17-Dec-2024 |
| HTB University CTF 2024 Web challenges writeup: Armaxis[very easy] | https://medium.com/@0xNayelx/htb-university-ctf-2024-web-challenges-writeup-armaxis-very-easy-404ac9f101b8?source=rss------bug_bounty-5 | 0xNayel | security, web-security, htb, ctf, bug-bounty | 16-Dec-2024 |
| HTB University CTF 2024 Web challenges writeup: Breaking Bank[easy] | https://medium.com/@0xNayelx/htb-university-ctf-2024-web-challenges-writeup-breaking-bank-easy-1c3064092abc?source=rss------bug_bounty-5 | 0xNayel | writeup, htb, bug-bounty, ctf, security | 16-Dec-2024 |
| Advanced Google Dorking | Part14 | https://systemweakness.com/advanced-google-dorking-part14-79b21e11ae25?source=rss------bug_bounty-5 | AbhirupKonwar | penetration-testing, cybersecurity, ethical-hacking, bug-bounty, bug-bounty-tips | 16-Dec-2024 |
| How I Got 200 euro bounty? | https://doordiefordream.medium.com/how-i-got-200-euro-bounty-03bcce712a51?source=rss------bug_bounty-5 | Bug hunter balu | hacking, vulnerability, ethical-hacking, bug-bounty, cybersecurity | 16-Dec-2024 |
| Master the Art of Cyber Defense: Top Open-Source Tools for Threat Intelligence! | https://medium.com/@paritoshblogs/master-the-art-of-cyber-defense-top-open-source-tools-for-threat-intelligence-7c575e69b853?source=rss------bug_bounty-5 | Paritosh | cybersecurity, hacking, bug-bounty, information-technology, threat-intelligence | 16-Dec-2024 |
| How I Discovered SSTI Vulnerability in Just 5 Minutes | $300 Bounty | https://medium.com/@kumawatabhijeet2002/how-i-discovered-ssti-vulnerability-in-just-5-minutes-f7ac31f3f6b0?source=rss------bug_bounty-5 | Abhijeet kumawat | infose, hacking, bug-bounty-tips, bug-bounty, penetration-testing | 16-Dec-2024 |
| Unmasking a Privacy Oversight: A Deep Dive into Persistent User Data | https://medium.com/@najeebkm010/unmasking-a-privacy-oversight-a-deep-dive-into-persistent-user-data-5ee433397021?source=rss------bug_bounty-5 | Najeebkm | bug-bounty, information-disclosure, cyber, security | 16-Dec-2024 |
| RCE in 2 Universities | https://osintteam.blog/rce-in-2-universities-d2f13a2a2afb?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, cybersecurity, cyberattack, penetration-testing, bug-bounty-tips | 16-Dec-2024 |
| Ethical Dilemmas in Using AI for Security Testing and Bug Bounties | https://pointlessai.medium.com/ethical-dilemmas-in-using-ai-for-security-testing-and-bug-bounties-ad6d75e6fab7?source=rss------bug_bounty-5 | PointlessAI Medium | chatgpt, bug-bounty, bugbounty-writeup, ai | 16-Dec-2024 |
| My Bug Hunting Methodology: Recon | https://gentilsecurity.medium.com/my-bug-hunting-methodology-recon-cbc6821708d8?source=rss------bug_bounty-5 | GenTiL | reconnaissance, cybersecurity, hacking, bug-hunting, bug-bounty | 16-Dec-2024 |
| How to Hack JSON Web Tokens (JWT): Weak Implementations for Critical Vulnerabilities | https://medium.com/@bootstrapsecurity/how-to-hack-json-web-tokens-jwt-weak-implementations-for-critical-vulnerabilities-75462988cb11?source=rss------bug_bounty-5 | BootstrapSecurity | ethical-hacking, cybersecurity, jwt-token, bug-bounty, bug-bounty-tips | 16-Dec-2024 |
| A Beginner's guide for Starting Web3 Bug Bounty | https://bitpanic.medium.com/how-to-start-web3-bug-bounty-30f7f968ae11?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, cybersecurity, web3, bug-bounty-tips, technology | 16-Dec-2024 |
| My Bug Hunting Methodology: Recon | by ahmedhamdy0x | https://gentilsecurity.medium.com/my-bug-hunting-methodology-recon-cbc6821708d8?source=rss------bug_bounty-5 | GenTiL | reconnaissance, cybersecurity, hacking, bug-hunting, bug-bounty | 16-Dec-2024 |
| 2FA Testing Tips for Bug Bounty Hunters | https://bevijaygupta.medium.com/2fa-testing-tips-for-bug-bounty-hunters-d6d77322e1b4?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, bug-bounty-tips, 2fa-authentication, bugs, 2fa | 16-Dec-2024 |
| How I Discovered a High-Severity Vulnerability on Discord (and got rewarded) | https://mirzebaba.medium.com/how-i-discovered-a-high-severity-vulnerability-on-discord-and-got-rewarded-bb327902fbb9?source=rss------bug_bounty-5 | Mirzəbaba | vulnerabilit, discord, ethical-hacking, cybersecurity, bug-bounty | 16-Dec-2024 |
| Clop Ransomware Gang Behind Major Cleo Data Breach | https://medium.com/@wiretor/clop-ransomware-gang-behind-major-cleo-data-breach-421b729bafde?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, ai, hacking, business | 16-Dec-2024 |
| ConnectOnCall Breach Exposes 900K+ Records! Don’t Be Next — Get Wire Tor Protection Today | https://medium.com/@wiretor/connectoncall-breach-exposes-900k-records-dont-be-next-get-wire-tor-protection-today-d4dd7de3570d?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, malware, ai, business | 16-Dec-2024 |
| Winnti Hackers Strike Again: New ‘Glutton’ Backdoor Exposed! | https://medium.com/@wiretor/winnti-hackers-strike-again-new-glutton-backdoor-exposed-5cd7bbb0faf0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, business, hacking, malware, ai | 16-Dec-2024 |
| [Hacking Scope] Exposure for tons of secret documents | https://medium.com/@nagashygaballah/hacking-scope-exposure-for-tons-of-secret-documents-5ba5c3906600?source=rss------bug_bounty-5 | 111xNagashy | bug-bounty, penetration-testing, hacking | 16-Dec-2024 |
| Traditional Penetration Testing vs. Bug Bounty Programs | https://medium.com/@hackrate/traditional-penetration-testing-vs-bug-bounty-programs-bb792a4d0d3f?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, penetration-testing, bug-bounty, hacking, cybersecurity | 16-Dec-2024 |
| From Minor Glitches to Major Wins: How I Chained CSRF and IDOR for a Critical Exploit | https://osintteam.blog/from-minor-glitches-to-major-wins-how-i-chained-csrf-and-idor-for-a-critical-exploit-0b110170cd9c?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, programming, cybersecurity, technology, bug-bounty | 16-Dec-2024 |
| Searching web security lessons? | https://medium.com/@l1ttlewing/searching-web-security-lessons-8a4dbefd0d04?source=rss------bug_bounty-5 | littlewing | infosec, cybersecurity, bug-bounty, information-security, web-security | 16-Dec-2024 |
| Wordlists Every Pentester Must Have !! | https://theartificialthinker.medium.com/wordlists-every-pentester-must-have-7ad4c1e46ce5?source=rss------bug_bounty-5 | Abhishek pawar | ethical-hacking, hacker, tech, pentest, bug-bounty | 16-Dec-2024 |
| JWT Auth Gone Wild: The Unexpected Twist! | https://medium.com/@ProwlSec/jwt-auth-gone-wild-the-unexpected-twist-a0b2ed943225?source=rss------bug_bounty-5 | ProwlSec | jwt, bugs, bug-bounty, hacking, pentesting | 15-Dec-2024 |
| What are Low Hanging Bugs? | Easy way to find them️♂️ | https://medium.com/@kumawatabhijeet2002/what-are-low-hanging-bugs-easy-way-to-find-them-%EF%B8%8F-%EF%B8%8F-399b37b354b7?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, bug-bounty-tips, infose, bugs, bug-bounty | 15-Dec-2024 |
| MSSQL (Microsoft SQL Server) — Port 1433 | https://medium.com/@verylazytech/mssql-microsoft-sql-server-port-1433-bc26d0bbdca9?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, mssql, oscp, bug-bounty, cybersecurity | 15-Dec-2024 |
| Automotive Penetration Testing Checklist | https://infosecwriteups.com/automotive-penetration-testing-checklist-8bbe83091c47?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, cybersecurity, information-technology, information-security, bug-bounty | 15-Dec-2024 |
| SQL Injection Vulnerability on a Security Awareness website: From Database Dump to cPanel Access | https://medium.com/@anonymousshetty2003/sql-injection-vulnerability-on-a-security-awareness-website-from-database-dump-to-cpanel-access-4bb3645eef07?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, sql-injection, cybersecurity, ethical-hacking | 15-Dec-2024 |
| How i found a Email Spoofing vulnerability to perform Phishing Attacks | https://medium.com/@anonymousshetty2003/how-i-found-a-email-spoofing-vulnerability-to-perform-phishing-attacks-00ec2cc934bb?source=rss------bug_bounty-5 | Anonymousshetty | email-spoofing, cybersecurity, bug-bounty, ethical-hacking | 15-Dec-2024 |
| ShadowJS: JavaScript File Discovery Tool | https://medium.com/@rootspaghetti/shadowjs-javascript-file-discovery-tool-1ede2f3172b6?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty-tips, bug-bounty | 15-Dec-2024 |
| Ultimate Django Vulnerability Checklist | https://bitpanic.medium.com/ultimate-django-vulnerability-checklist-ceb7f428c45f?source=rss------bug_bounty-5 | Spectat0rguy | technology, cybersecurity, python, bug-bounty, bug-bounty-tips | 15-Dec-2024 |
| LKQ Hacked: Cyberattack Disrupts Canadian Unit Operations and Exposes Company Data | https://medium.com/@wiretor/lkq-hacked-cyberattack-disrupts-canadian-unit-operations-and-exposes-company-data-7db6b9763011?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, xs, bug-bounty, lkq, hacking | 15-Dec-2024 |
| Russia Blocks Viber: Latest Move to Censor Communications | https://medium.com/@wiretor/russia-blocks-viber-latest-move-to-censor-communications-9dce4d823d67?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | russia, malware, viber, hacking, bug-bounty | 15-Dec-2024 |
| JavaScript BugBounty Method | https://medium.com/@cc1a2bb/javascript-bugbounty-method-5b789bfa7f44?source=rss------bug_bounty-5 | cc1a2b | hacking, cybersecurity, javascript, bug-bounty, bug-bounty-tips | 15-Dec-2024 |
| Cybersecurity Roadmap 2025 | https://hackerassociate.medium.com/cybersecurity-roadmap-2025-f7ad9d4ac49c?source=rss------bug_bounty-5 | Harshad Shah | cybersecurity, infosec, bug-bounty, penetration-testing, hacking | 14-Dec-2024 |
| Simplifying Reconnaissance: Building a Custom Bug Hunting Discord Bot | https://medium.com/@najeebkm010/simplifying-reconnaissance-building-a-custom-bug-hunting-discord-bot-6792ab4249bf?source=rss------bug_bounty-5 | Najeebkm | bug-bounty-tool, bug-bounty, cybersecurity | 14-Dec-2024 |
| How I Discovered a $7,000 Critical Vulnerability: IDOR to BAC to Account Takeover | https://medium.com/@najeebkm010/how-i-discovered-a-7-000-critical-vulnerability-idor-to-bac-to-account-takeover-0c195eae2ed2?source=rss------bug_bounty-5 | Najeebkm | bug-bounty-writeup, bug-bounty | 14-Dec-2024 |
| 10 day with Me | OWASP Top 10 | Day -1: Broken Access Control | https://infyra.medium.com/10-day-with-me-owasp-top-10-day-1-broken-access-control-e75572ce157e?source=rss------bug_bounty-5 | Md. EMTIAZ AHMED | broken-access-control, owasp, owasp-top-10, bug-bounty, cybersecurity | 14-Dec-2024 |
| Exploiting API Rate Limiting: Bypassing Restrictions | https://medium.com/@bootstrapsecurity/exploiting-api-rate-limiting-bypassing-restrictions-c89a1bd61aee?source=rss------bug_bounty-5 | BootstrapSecurity | api-security, development, rate-limiting, hacking, bug-bounty | 14-Dec-2024 |
| How I Found a Broken Link Hijacking Vulnerability in 2 Minutes | $250 Bounty | https://medium.com/@kumawatabhijeet2002/how-i-found-a-broken-link-hijacking-vulnerability-in-2-minutes-250-bounty-0d991eb9c61b?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, bugs, infosec, broken-link-hijacking, hacking | 14-Dec-2024 |
| My First Critical Bug: Exposing 3.5 Lakh+ PII! ️ | https://infosecwriteups.com/my-first-critical-bug-exposing-3-5-lakh-pii-%EF%B8%8F-fbad616ddbea?source=rss------bug_bounty-5 | cryptoshant | hacking, bug-bounty-tips, penetration-testing, cybersecurity, bug-bounty | 14-Dec-2024 |
| Git Information Leak: How to Exploit an Exposed .git Repository on a Web Server | https://medium.com/@burhankhansodhar/git-information-leak-how-to-exploit-an-exposed-git-repository-on-a-web-server-ac190ae18928?source=rss------bug_bounty-5 | Itz Burhan Khan | penetration-testing, web-server, directory-listing, bug-bounty, git | 14-Dec-2024 |
| Are you looking for an Intigriti alternative? | https://medium.com/@hackrate/are-you-looking-for-an-intigriti-alternative-4128a25888ed?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, bug-bounty, hacking, ethical-hacking, penetration-testing | 14-Dec-2024 |
| Dubai Police Identity Used in Sophisticated UAE Mobile Scams | https://medium.com/@wiretor/dubai-police-identity-used-in-sophisticated-uae-mobile-scams-36b9d149db17?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, malware, hacking, ai, bug-bounty | 14-Dec-2024 |
| Using Platform Profiles to send Fake in Information: A Security Risk Good logic bug | https://medium.com/@mahdisalhi0500/using-platform-profiles-to-send-fake-in-information-a-security-risk-good-logic-bug-0510d73802b8?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | penetration-testing, cybersecurity, bug-bounty-tips, bug-bounty, security | 14-Dec-2024 |
| P4 bug’s and their POC steps | Part 9 | https://osintteam.blog/p4-bugs-and-their-poc-steps-part-9-c1f873227917?source=rss------bug_bounty-5 | socalledhacker | infosec, bug-bounty, bug-bounty-tips, cybersecurity, hacking | 14-Dec-2024 |
| Reflected XSS on Gaming Blog Website | https://medium.com/@enigma_/reflected-xss-on-gaming-blog-website-edc448d613a3?source=rss------bug_bounty-5 | enigma_ | writeup, bug-bounty-writeup, hackin, penetration-testing, bug-bounty | 13-Dec-2024 |
| Introducing ShodanSpider v2: Your Ultimate Free Tool for CVE Searching and Shodan Data Analysis… | https://shubhamrooter.medium.com/introducing-shodanspider-v2-your-ultimate-free-tool-for-cve-searching-and-shodan-data-analysis-ba7c7b3097b0?source=rss------bug_bounty-5 | Shubham Tiwari | cybersecurity, shodanspider, bug-bounty, redteam-tool, pentesting | 13-Dec-2024 |
| #ERROR! | https://medium.com/meetcyber/hidden-ace-up-hackers-sleeve-hacking-gadgets-1-phone-on-a-simmy-8b3d3cd540cf?source=rss------bug_bounty-5 | NnFace | cybersecurity, hacking, termux, kali-linux, bug-bounty | 13-Dec-2024 |
| Deep Recon Methodology for Bug Bounty Hunters | Part-1 | https://medium.com/@kumawatabhijeet2002/deep-recon-methodology-for-bug-bounty-hunters-part-1-54bdac09dcf4?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, bug-bounty, methodology, bug-bounty-tips | 13-Dec-2024 |
| Critical Unauthorized Access to Admin Pages via Vulnerable Endpoints | https://hackersatty.medium.com/critical-unauthorized-access-to-admin-pages-via-vulnerable-endpoints-e8799b3f7f69?source=rss------bug_bounty-5 | hackersatty | admin-panel, javascript, bug-bounty, hackerone, hackersatty | 13-Dec-2024 |
| Third Party Services Takeover using Oauth Misconfiguration | https://infosecwriteups.com/third-party-services-takeover-using-oauth-misconfiguration-8888a0c1ad86?source=rss------bug_bounty-5 | Ronak Patel | information-security, cybersecurity, ethical-hacking, bug-bounty | 13-Dec-2024 |
| Idor Is Easy ! You may Don’t know ! The Longest PrivEsc I’ve ever faced on Public BBP | https://medium.com/@Ahmex000/idor-is-easy-you-may-dont-know-the-longest-privesc-i-ve-ever-faced-on-public-bbp-1bf67cd699d8?source=rss------bug_bounty-5 | Ahmex000 | bug-bounty, bug-bounty-tips, bug-bounty-hunter, bug-hunting, bugbounty-writeup | 13-Dec-2024 |
| How I Found and Fixed XSS on a Website: A Bug Hunter’s Tale | https://medium.com/@mayankmalaviya3/how-i-found-and-fixed-xss-on-a-website-a-bug-hunters-tale-bc7351043928?source=rss------bug_bounty-5 | Mayank Malaviya (Aiwolfie) | hacking, bug-bounty, security, xss-attack, vulnerability | 13-Dec-2024 |
| 429 Bypasser Extension Guide | https://medium.com/@raxomara/429-bypasser-extension-guide-1d4f86b7d630?source=rss------bug_bounty-5 | Raxomara | cybersecurity, 429-bypasser, rate-limit-bypass, bug-bounty, bug-bounty-tips | 13-Dec-2024 |
| Make Penetration Testing Sexy Again | https://medium.com/@hackrate/make-penetration-testing-sexy-again-with-hackgate-51c556944c0b?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, bug-bounty, cybersecurity, penetration-testing, hacking | 13-Dec-2024 |
| The Growing Threat of Identity Attacks in Cybersecurity | https://medium.com/@paritoshblogs/the-growing-threat-of-identity-attacks-in-cybersecurity-5e847cf4ab6d?source=rss------bug_bounty-5 | Paritosh | information-technology, hacking, cybersecurity, identity, bug-bounty | 13-Dec-2024 |
| Bug Bounty Training Program | https://bevijaygupta.medium.com/bug-bounty-training-program-78c927572385?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-writeup, bug-bounty, bug-bounty-tips, bugs, bug-zero | 13-Dec-2024 |
| A Beginner’s Guide to Testing for Server-Side Request Forgery (SSRF) | https://medium.com/@mcooter/a-beginners-guide-to-testing-for-server-side-request-forgery-ssrf-9a4b5e16fdd2?source=rss------bug_bounty-5 | Michael Cooter | bug-bounty, ssrf, oswa, web-application-security, hacking | 13-Dec-2024 |
| Android vs iOS Security Intro | https://medium.com/@in3tinct/android-vs-ios-security-intro-4a9b5ecc65cf?source=rss------bug_bounty-5 | Vaibhav | security, android, bug-bounty, ios, mobile-app-development | 13-Dec-2024 |
| Bug Bounty Findings: 10 Major Vulnerabilities Exposed in Cloverleaf’s Application — IDOR — Part 2 | https://medium.com/@maakthon/bug-bounty-findings-10-major-vulnerabilities-exposed-in-cloverleafs-application-idor-part-2-932746b6b445?source=rss------bug_bounty-5 | Mahmoud Abd Alkarim | security-research, web-application-security, cybersecurity, bug-bounty, bug-bounty-writeup | 13-Dec-2024 |
| APIS are so easy to exploit | https://medium.com/@momen_besher/apis-are-so-easy-to-exploit-80bf65941e28?source=rss------bug_bounty-5 | steve55555 | api, vulnerability, bug-bounty-tips, cybersecurity, bug-bounty | 13-Dec-2024 |
| 【Award-winning Survey】About Security Vulnerability Submission Function | https://medium.com/@security.tecno/award-winning-survey-about-security-vulnerability-submission-function-c3113e2baec0?source=rss------bug_bounty-5 | TECNO Security | rewards, bugs, surveys, hacking, bug-bounty | 12-Dec-2024 |
| [Bugbounty]SQLI — Data Exfiltration via DNS | https://medium.com/@kauenavarro/bugbounty-sqli-data-exfiltration-via-dns-3e68ece08205?source=rss------bug_bounty-5 | Kauê Navarro | hacking, sqli, bug-hunter, bug-bounty, bugcrowd | 12-Dec-2024 |
| How I Bypassed Email Confirmation: A Playful Journey into the World of Bug Hunting | https://medium.com/@mrasg/how-i-bypassed-email-confirmation-a-playful-journey-into-the-world-of-bug-hunting-30f72d6c2fb6?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | pentesting, bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty | 12-Dec-2024 |
| Measuring the Success of Bug Bounty Programs: Outdated vs. Modern Approaches | https://medium.com/@hackrate/measuring-the-success-of-bug-bounty-programs-outdated-vs-modern-approaches-9cf87655092b?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, penetration-testing, cybersecurity, hacking, bug-bounty | 12-Dec-2024 |
| How I hacked University | https://medium.com/@Wantet/how-i-hacked-university-76097e703cb5?source=rss------bug_bounty-5 | Wantet | penetration-testing, university, bug-bounty, hacking | 12-Dec-2024 |
| How to Find and Identify Race Condition Vulnerabilities as a Penetration Tester | https://cyberw1ng.medium.com/how-to-find-and-identify-race-condition-vulnerabilities-as-a-penetration-tester-9d9ecce6ed56?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, hacking, careers, technology | 12-Dec-2024 |
| Bug Bounty Findings: 10 Major Vulnerabilities Exposed in Cloverleaf’s Application - Open Redirect … | https://medium.com/@maakthon/bug-bounty-findings-10-major-vulnerabilities-exposed-in-cloverleafs-web-application-part-1-95f659ff7d0a?source=rss------bug_bounty-5 | Mahmoud Abd Alkarim | web-application-security, cybersecurity, bug-bounty-writeup, bug-bounty, security-research | 12-Dec-2024 |
| Account Takeover using SSO Logins | https://rikeshbaniya.medium.com/account-takeover-using-sso-logins-fa35f28a358b?source=rss------bug_bounty-5 | Rikesh Baniya | bugcrowd, bug-bounty-writeup, bug-bounty-tips, hackerone, bug-bounty | 12-Dec-2024 |
| Hack The Box Academy — File Inclusion — Skills Assessment | https://medium.com/@d4nglz17/hack-the-box-academy-file-inclusion-skills-assessment-1ca0283a9a06?source=rss------bug_bounty-5 | Danglz | hackthebox, penetration-testing, bug-bounty-writeup, bug-bounty, information-security | 12-Dec-2024 |
| Identity & Access Alert: Microsoft MFA Bypassed via AuthQuake Attack! | https://medium.com/@wiretor/identity-access-alert-microsoft-mfa-bypassed-via-authquake-attack-fc57043fe39a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, microsoft, bug-bounty, ai, business | 12-Dec-2024 |
| Critical Alert: Hackers Exploit Hunk Companion WordPress Plugin! | https://medium.com/@wiretor/critical-alert-hackers-exploit-hunk-companion-wordpress-plugin-50fcf5834f84?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, wordpress, hacking, bug-bounty, malware | 12-Dec-2024 |
| €XXX bounty for 2FA disabled without password and OTP by response manipulation | https://osintteam.blog/xxx-bounty-for-2fa-disabled-without-password-and-otp-by-response-manipulation-499ba5234a4f?source=rss------bug_bounty-5 | socalledhacker | hacking, bug-bounty, infosec, cybersecurity, bug-bounty-tips | 12-Dec-2024 |
| “Bypasseando controles en un POS” (Un poco de humo… del bueno) | https://medium.com/@andresbe.be/bypasseando-controles-en-un-pos-un-poco-de-humo-del-bueno-b18b6ecbc775?source=rss------bug_bounty-5 | Andres Barroso | bypass-restriction, point-of-sale-device, bug-bounty | 12-Dec-2024 |
| How a Race Condition Became an Account Takeover Vulnerability | https://medium.com/@mrasg/how-a-race-condition-became-an-account-takeover-vulnerability-756f14990f38?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty-writeup, bug-bounty-tips, security, pentesting, bug-bounty | 12-Dec-2024 |
| “Bypasseando controles en un POS” | https://medium.com/@andresbe.be/bypasseando-controles-en-un-pos-un-poco-de-humo-del-bueno-b18b6ecbc775?source=rss------bug_bounty-5 | Andres Barroso | bypass-restriction, point-of-sale-device, bug-bounty | 12-Dec-2024 |
| Exposed Git Directory P1 Bug | https://medium.com/@abhirupkonwar04/exposed-git-directory-p1-bug-5fd272a62f51?source=rss------bug_bounty-5 | AbhirupKonwar | vulnerability-management, pentesting, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 11-Dec-2024 |
| We Faced a Brute Force Attack — Here’s What Saved Us! | https://medium.com/@paritoshblogs/we-faced-a-brute-force-attack-heres-what-saved-us-1d33547eca61?source=rss------bug_bounty-5 | Paritosh | information-technology, hacking, cybersecurity, bug-bounty, brute-force | 11-Dec-2024 |
| Exposed Git Directory P1 Bug | https://systemweakness.com/exposed-git-directory-p1-bug-5fd272a62f51?source=rss------bug_bounty-5 | AbhirupKonwar | vulnerability-management, pentesting, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 11-Dec-2024 |
| Email Flooding Without Knowing Victim Email Via CSRF | https://0xshuvo.medium.com/email-flooding-without-knowing-victim-email-via-csrf-8de8bf5de3a3?source=rss------bug_bounty-5 | Shuvo Kumar Saha | email-flooding, csrf, bug-bounty, bugbounty-writeup, bug-bounty-tips | 11-Dec-2024 |
| How I Earned My First $100 in a Bug Bounty Program (And How You Can Too!) | https://medium.com/@divyesh.jagad/how-i-earned-my-first-100-in-a-bug-bounty-program-and-how-you-can-too-57b58b37226a?source=rss------bug_bounty-5 | Divyesh Jagad | passive-income, data-security, bug-bounty, ethical-hacking, cybersecurity | 11-Dec-2024 |
| Easy SQLI in just 30 minutes | https://medium.com/@mohammed01550038865/easy-sqli-in-just-30-minutes-0296038bb473?source=rss------bug_bounty-5 | Muhammed Mubarak | bug-bounty, hackerone, sql-injection, bugcrowd, writing-tips | 11-Dec-2024 |
| IDOR leads to leak private user’s data | https://medium.com/@banertheinrich/idor-leads-to-leak-private-users-data-3a2b59f58826?source=rss------bug_bounty-5 | Adham Heinrich | idor, bug-bounty, idor-vulnerability, cybersecurity, penetration-testing | 11-Dec-2024 |
| Hackrate PTaaS Powered by HackGATE: Redefining Penetration Testing | https://medium.com/@hackrate/hackrate-ptaas-powered-by-hackgate-redefining-penetration-testing-cb91c07ecc8f?source=rss------bug_bounty-5 | Levente Molnar | penetration-testing, bug-bounty, ethical-hacking, cybersecurity, hacking | 11-Dec-2024 |
| Data Breach: 446K Patients & Employees Affected at Center for Vein Restoration | https://medium.com/@wiretor/data-breach-446k-patients-employees-affected-at-center-for-vein-restoration-a75cf6fc1a5e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, bug-bounty, hacking, malware, business | 11-Dec-2024 |
| Urgent Warning: Ivanti CSA Flaw Exposes Admin Controls to Hackers! | https://medium.com/@wiretor/urgent-warning-ivanti-csa-flaw-exposes-admin-controls-to-hackers-d6937ede4389?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, ivanti, ransomware, business | 11-Dec-2024 |
| Critical WPForms Flaw Exposes 6M Sites to Unauthorized Stripe Refunds | https://medium.com/@wiretor/critical-wpforms-flaw-exposes-6m-sites-to-unauthorized-stripe-refunds-da9f48a7bfd0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, wpforms, business, malware | 11-Dec-2024 |
| How I Secured The Indian Army? | https://cybersecuritywriteups.com/how-i-secured-the-indian-army-9a80ba399202?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | bug-bounty-tips, cybersecurity, ethical-hacking, bug-bounty-writeup, bug-bounty | 11-Dec-2024 |
| Mastering JavaScript, Can It Make You an XSS Bug Hunter? | https://rendiero.medium.com/mastering-javascript-can-it-make-you-an-xss-bug-hunter-a0f0aaba0c6f?source=rss------bug_bounty-5 | Rendiero | hacking, penetration-testing, bug-bounty, xss-attack, javascript | 10-Dec-2024 |
| Email and home address disclosure using unauthenticated API endpoint worth $500 | https://vijetareigns.medium.com/email-and-home-address-disclosure-using-unauthenticated-api-endpoint-worth-500-4a497ff0678c?source=rss------bug_bounty-5 | the_unlucky_guy | cybersecurity, bug-bounty, application-security, bug-bounty-writeup, bug-bounty-tips | 10-Dec-2024 |
| Investigating a Linux Machine Security Breach Without Tools! | https://medium.com/@paritoshblogs/investigating-a-linux-machine-security-breach-without-tools-464e14bdeab0?source=rss------bug_bounty-5 | Paritosh | hacking, information-technology, linux, bug-bounty, cybersecurity | 10-Dec-2024 |
| $500 Bypassing Cloudflare WAF to Achieve XSS | https://medium.com/@kumawatabhijeet2002/500-bypassing-cloudflare-waf-to-achieve-xss-f3b9c4acb702?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, xss-vulnerability, bug-bounty-writeup, bug-bounty-tips, bugs | 10-Dec-2024 |
| HackerOne 香港汇丰接收赏金 | https://medium.com/@dem0ns/hackerone-%E9%A6%99%E6%B8%AF%E6%B1%87%E4%B8%B0%E6%8E%A5%E6%94%B6%E8%B5%8F%E9%87%91-353356389bc9?source=rss------bug_bounty-5 | 猫猫虫 | hsbc, h1, bug-bounty, hackerone, 挖洞 | 10-Dec-2024 |
| One way hackers stole API keys, Passwords, Tokens and Secrets. | https://osintteam.blog/one-way-hackers-stole-api-keys-passwords-tokens-and-secrets-4e731435bbd4?source=rss------bug_bounty-5 | Pwndec0c0 | programming, bug-bounty, cybersecurity, hacking, web-development | 10-Dec-2024 |
| Zoho QEngine: Arbitrary File Read | https://infosecwriteups.com/zoho-qengine-arbitrary-file-read-08df3d1e167e?source=rss------bug_bounty-5 | Jayateertha Guruprasad | hacking, cybersecurity, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 10-Dec-2024 |
| NASA P2 Google Dorking | https://medium.com/@srinathkk99/nasa-p3-google-dorking-f7bd4b56d395?source=rss------bug_bounty-5 | Srinath K K | cybersecurity, bug-bounty, nasa, vulnerability, appreciation | 10-Dec-2024 |
| The Ultimate Guide to Starting a Bug Bounty Program: A Company’s Perspective | https://medium.com/@hackrate/the-ultimate-guide-to-starting-a-bug-bounty-program-a-companys-perspective-4feebb585ac4?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, hacking, penetration-testing, cybersecurity, bug-bounty | 10-Dec-2024 |
| I Found 7 Log4j (RCE) in a Single Program! | https://medium.com/@rootplinix/i-found-7-log4j-rce-in-a-single-program-5afb7d02dd06?source=rss------bug_bounty-5 | Abu Hurayra | bug-bounty-tips, cybersecurity, bug-bounty-writeup, log4shell, bug-bounty | 10-Dec-2024 |
| Must-Have Hacking Extensions For Bugbounty Hunters | https://medium.com/@The_scratch/must-have-hacking-extensions-for-bugbounty-hunters-5de4c56c6963?source=rss------bug_bounty-5 | Scratch | reconnaissance, bug-bounty, cybersecurity, hacking, bug-bounty-tips | 10-Dec-2024 |
| Naabu: A Fast and Efficient Port Scanning Tool | https://medium.com/@rootspaghetti/naabu-a-fast-and-efficient-port-scanning-tool-a5f8a4cf0641?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty-tips, hacking, bug-bounty | 10-Dec-2024 |
| OAuth Account Hijacking via redirect_uri | https://osintteam.blog/oauth-account-hijacking-via-redirect-uri-ae8ca7a66930?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Café | bug-bounty, pentesting, bug-bounty-tips, information-security, cybersecurity | 10-Dec-2024 |
| How i bypassed 403 forbidden (private method) | https://medium.com/@reazatih/how-i-bypassed-403-forbidden-private-method-fc066c11f90f?source=rss------bug_bounty-5 | Re@Za | cybersecurity, bug-bounty, penetration-testing, 403-forbidden, hacking | 10-Dec-2024 |
| $50M Crypto Heist Linked to North Korean Hackers in Radiant Capital Attack | https://medium.com/@wiretor/50m-crypto-heist-linked-to-north-korean-hackers-in-radiant-capital-attack-71be5b6515d7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, ai, crypto, bug-bounty, malware | 10-Dec-2024 |
| Chinese Cyber Attack Targets European IT Firms Using Visual Studio Code for Supply-Chain… | https://medium.com/@wiretor/chinese-cyber-attack-targets-european-it-firms-using-visual-studio-code-for-supply-chain-761a472b00b2?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, ai, bug-bounty, malware, hacking | 10-Dec-2024 |
| Romanian Energy Supplier Electrica Hit by Ransomware Attack ⚡ | https://medium.com/@wiretor/romanian-energy-supplier-electrica-hit-by-ransomware-attack-8e1b3d8e453d?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, hacking, malware, romania, bug-bounty | 10-Dec-2024 |
| OpenWrt Sys upgrade Flaw: Hackers Can Push Malicious Firmware Images | https://medium.com/@wiretor/openwrt-sys-upgrade-flaw-hackers-can-push-malicious-firmware-images-088a0d23a1b0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, openwrt, business, bug-bounty, hacking | 10-Dec-2024 |
| Mastering Bug Bounty Recon: Essential Techniques for Ethical Hackers | https://medium.com/@verylazytech/mastering-bug-bounty-recon-essential-techniques-for-ethical-hackers-549c5b472975?source=rss------bug_bounty-5 | Very Lazy Tech | subdomain-enumeration, bug-bounty, github-recon, ethical-hacking, bug-bounty-techniques | 10-Dec-2024 |
| How I Bypassed OTP Like a Devil, Leading to Full Account Takeover | https://infosecwriteups.com/how-i-bypassed-otp-like-a-devil-leading-to-full-account-takeover-7bb7a673f7a0?source=rss------bug_bounty-5 | Ranjan | account-takeover, bug-bounty, ethical-hacking, otp-bypass, hacking | 10-Dec-2024 |
| How I Earned Over 100 Points on HackerOne with Email Spoofing. | https://j0nasdias.medium.com/how-i-earned-over-100-points-on-hackerone-with-email-spoofing-1ae0c4bc6aba?source=rss------bug_bounty-5 | Jonas Dias Rebelo | pentest, vulnerability, email-spoofing, hackerone, bug-bounty | 10-Dec-2024 |
| NASA P3 Google Dorking | https://cybersecuritywriteups.com/nasa-p3-google-dorking-6779970b6f03?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-writeup, cybersecurity, bug-bounty-tips, pentesting, bug-bounty | 09-Dec-2024 |
| Vote Manipulation & Debug Exposure, Another Interesting Finding… | https://medium.com/@josuofficial327/vote-manipulation-debug-exposure-another-interesting-finding-ec31f8cb939c?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | programming, bug-bounty-tips, penetration-testing, cybersecurity, bug-bounty | 09-Dec-2024 |
| How I Exploited Amazon Cognito Misconfigurations to Access Confidential S3 Data | https://1-day.medium.com/how-i-exploited-amazon-cognito-misconfigurations-to-access-confidential-s3-data-badb62cabfab?source=rss------bug_bounty-5 | 1day | bug-bounty-writeup, writeup, pentesting, bug-bounty, aws | 09-Dec-2024 |
| From Couch to Cloud: Bug Hunting Made Easy! | https://udayshelke17-40981.medium.com/from-couch-to-cloud-bug-hunting-made-easy-993039c8208b?source=rss------bug_bounty-5 | sudo uday | hacking, bug-bounty, cybersecurity, cloud-security, bug-bounty-tips | 09-Dec-2024 |
| How I Earned $$$ | Open Redirection | https://medium.com/@A0X-Y0S3TRX/how-i-earned-open-redirection-c26e191dbff2?source=rss------bug_bounty-5 | A0X-Y0S3TRX | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bug-bounty-hunter, bug-bounty-program | 09-Dec-2024 |
| The List of Top Penetration Testing as a Service (PTaaS) Platforms for 2024 | https://medium.com/@hackrate/the-list-of-top-penetration-testing-as-a-service-ptaas-platforms-for-2024-e04969614042?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, cybersecurity, bug-bounty, hacking, penetration-testing | 09-Dec-2024 |
| How I Exploited Amazon Cognito Misconfigurations to Access Confidential S3 Data | https://awstip.com/how-i-exploited-amazon-cognito-misconfigurations-to-access-confidential-s3-data-badb62cabfab?source=rss------bug_bounty-5 | 1day | bug-bounty-writeup, writeup, pentesting, bug-bounty, aws | 09-Dec-2024 |
| VPS for Hackers: Top Picks for Bug Bounty and Cloud Pentesters Enthusiasts 2025 | https://hackerassociate.medium.com/vps-for-hackers-top-picks-for-bug-bounty-and-cloud-pentesters-enthusiasts-2025-195b17eea9f7?source=rss------bug_bounty-5 | Harshad Shah | cybersecurity, bug-bounty, penetration-testing, infosec, vps | 09-Dec-2024 |
| Exposed Prometheus Server Endpoint | https://osintteam.blog/exposed-prometheus-server-endpoint-cfb8e82e441b?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, bug-bounty, bug-bounty-writeup, vulnerability-management, bug-bounty-tips | 09-Dec-2024 |
| 2.9 Billion Records Compromised in NPD Breach: The Largest Data Leak Ever! | https://medium.com/@wiretor/2-9-billion-records-compromised-in-npd-breach-the-largest-data-leak-ever-9edaa25d362c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, ransomware, bug-bounty, breach, malware | 09-Dec-2024 |
| One Phishing Hit Leads to Massive Breach: 11K Children’s Data Exposed | https://medium.com/@wiretor/one-phishing-hit-leads-to-massive-breach-11k-childrens-data-exposed-f8bb80abc574?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | phising, business, malware, bug-bounty, hacking | 09-Dec-2024 |
| Eight Suspected Phishers Arrested in Belgium, Netherlands for Multi-Million Euro Fraud Scheme | https://medium.com/@wiretor/eight-suspected-phishers-arrested-in-belgium-netherlands-for-multi-million-euro-fraud-scheme-2df2e53d1fe3?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, phishing, business, malware, scam | 09-Dec-2024 |
| How to Earn Money with Bug Bounties and Other Platforms | https://medium.com/@tuteja_lovish/how-to-earn-money-with-bug-bounties-and-other-platforms-6a248db1a94d?source=rss------bug_bounty-5 | Lovish Kumar | security-token, bugs, bug-bounty, security, bounties | 09-Dec-2024 |
| QR Codes Bypass Browser Isolation for Malicious C2 Communication ️ | https://medium.com/@wiretor/qr-codes-bypass-browser-isolation-for-malicious-c2-communication-%EF%B8%8F-6dddc201d532?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, business, bug-bounty, qr-code | 09-Dec-2024 |
| Server Security Misconfiguration: Misconfigured DNS — High-Impact Subdomain Takeover (P2) | https://medium.com/@mathewskuruvila32/server-security-misconfiguration-misconfigured-dns-high-impact-subdomain-takeover-p2-cb9e7ccadf2d?source=rss------bug_bounty-5 | Mathews kuruvila | vulnerability, hacking, ethical-hacking, web-app-development, bug-bounty | 09-Dec-2024 |
| The HackerOne-Wayback Machine Saga: An Unofficial Vulnerability or Just Public Oversight? | https://huntrai.medium.com/the-hackerone-wayback-machine-saga-an-unofficial-vulnerability-or-just-public-oversight-22c1fb0112bb?source=rss------bug_bounty-5 | Aditya sunny | bug-bounty, bugs, hacking | 09-Dec-2024 |
| How I Discovered a Critical Vulnerability in WhatsApp’s Admin System | https://huntrai.medium.com/how-i-discovered-a-critical-vulnerability-in-whatsapps-admin-system-ce0a3f2bbcb2?source=rss------bug_bounty-5 | Aditya sunny | infosec, bug-bounty, hackerone, hacking, bugs | 09-Dec-2024 |
| 1-Click Account Takeover (ATO) via CORS Misconfiguration | https://medium.com/@mohammed01550038865/1-click-account-takeover-ato-via-cors-misconfiguration-64dc26d24917?source=rss------bug_bounty-5 | Muhammed Mubarak | hackerone, bugcrowd, bug-bounty-tips, ato, bug-bounty | 09-Dec-2024 |
| From Dev to Disaster: My Hilarious First Attempt at Bug Bounties with Burp Suite Pro | https://medium.com/@zero_4583/from-dev-to-disaster-my-hilarious-first-attempt-at-bug-bounties-with-burp-suite-pro-20fddd3ad295?source=rss------bug_bounty-5 | Nathan Vincent | bug-bounty, burpsuite, appsec, penetration-testing | 08-Dec-2024 |
| Misconfigurations That Paid Me Big: How I Exploited Them (And How You Can Stop Me) | https://systemweakness.com/misconfigurations-that-paid-me-big-how-i-exploited-them-and-how-you-can-stop-me-788a5375aa3c?source=rss------bug_bounty-5 | Akash Ghosh | technology, bug-bounty, cybersecurity, bug-bounty-writeup, programming | 08-Dec-2024 |
| $400 Bounty in 10 sec | https://systemweakness.com/400-bounty-in-10-sec-14d26c2976ec?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-writeup, pentesting, bug-bounty-tips, cybersecurity, bug-bounty | 08-Dec-2024 |
| Critical Authentication Bypass & Account Takeover via Attacker’s MFA Code | https://medium.com/@sharp488/critical-authentication-bypass-account-takeover-via-attackers-mfa-code-fadf36fe6e34?source=rss------bug_bounty-5 | Sharat Kaikolamthuruthil | bug-bounty, information-technology, bug-bounty-writeup, bug-bounty-tips, information-security | 08-Dec-2024 |
| WhiteLevel Error Page / Spring Boot Actuators Hunting | https://0xshuvo.medium.com/whitelevel-error-page-spring-boot-actuators-hunting-b0290c4ccdbd?source=rss------bug_bounty-5 | Shuvo Kumar Saha | bug-bounty-writeup, bug-bounty, infosec, bug-hunting, exploit | 08-Dec-2024 |
| The Dark Side of AI: Inside PyTorch’s Unpatched Vulnerabilities | https://medium.com/@piyushbhor22/the-dark-side-of-ai-inside-pytorchs-unpatched-vulnerabilities-0d8ce74fc9b5?source=rss------bug_bounty-5 | Pi - The Kernel Panic | machine-learning, pytorch, zero-day, exploits-zero-day, bug-bounty | 08-Dec-2024 |
| All About Pentesting & Securing Checkouts and Transactions | https://infosecwriteups.com/all-about-pentesting-securing-checkouts-and-transactions-f7bb1de4fd7b?source=rss------bug_bounty-5 | Xcheater | bug-bounty, appsec, payment-gateway | 08-Dec-2024 |
| Exploiting PHP Insecure Deserialization | https://medium.com/@mayank_prajapati/exploiting-php-insecure-deserialization-2e301557f12f?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | bug-bounty, cybersecurity, red-team, ethical-hacking, penetration-testing | 08-Dec-2024 |
| $200 Recon Bug Bounty | https://medium.com/infosecmatrix/200-recon-bug-bounty-3538566b94dc?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, pentesting, bug-bounty-writeup, ethical-hacking, bug-bounty | 08-Dec-2024 |
| The Ultimate Guide to Starting a Penetration Testing as a Service (PTaaS) Project for Your Company | https://medium.com/@hackrate/the-ultimate-guide-to-starting-a-penetration-testing-as-a-service-ptaas-project-for-your-company-5d7919eed353?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, hacking, penetration-testing, ethical-hacking, cybersecurity | 08-Dec-2024 |
| PoC: Bypass Input with SQL Injection to Gaining Information in SMK Maarif Terpadu Cicalengka and… | https://medium.com/@baracarlo/poc-bypass-input-with-sql-injection-to-gaining-information-in-smk-maarif-terpadu-cicalengka-and-51d56cfbbd60?source=rss------bug_bounty-5 | Baradika | sql-injection, cybersecurity, bug-hunting, bug-bounty | 08-Dec-2024 |
| How I Found Info disclosure vulnerability? | https://doordiefordream.medium.com/how-i-found-info-disclosure-vulnerability-32fa9e9b9a45?source=rss------bug_bounty-5 | Bug hunter balu | ethical-hacking, hacking, cybersecurity, bug-bounty, web3 | 08-Dec-2024 |
| Russia’s ‘BlueAlpha’ APT Hides in Cloudflare Tunnels | https://medium.com/@wiretor/russias-bluealpha-apt-hides-in-cloudflare-tunnels-7d7372615241?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware, business, russia | 08-Dec-2024 |
| Top 5 Must-Read Books to Master Web Penetration Testing (Beginners & Beyond) | https://medium.com/@verylazytech/top-5-must-read-books-to-master-web-penetration-testing-beginners-beyond-9bf99651445f?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, penetration-testing, web-development, web-penetration-testing | 08-Dec-2024 |
| How I Found a Critical Vulnerability and Earned $4,000 in Bug Bounty Hunting | https://medium.com/@zack0x01_/how-i-found-a-critical-vulnerability-and-earned-4-000-in-bug-bounty-hunting-2ce4a1227fdc?source=rss------bug_bounty-5 | zack0x01 | idor, cybersecurity, bug-bounty, hacking | 08-Dec-2024 |
| Mastering Git Conflicts: A Developer’s Guide to Seamless Merges ️⚡ | https://rajuhemanth456.medium.com/mastering-git-conflicts-a-developers-guide-to-seamless-merges-%EF%B8%8F-19718b819da0?source=rss------bug_bounty-5 | Hemanth Raju | bug-bounty, coding, software-development, interview, github | 08-Dec-2024 |
| Privilege Escalation via Impersonation Features feature | https://medium.com/@0x_xnum/privilege-escalation-via-impersonation-features-feature-c49cf3a3dc03?source=rss------bug_bounty-5 | Ahmed Tarek | privilege-escalation, hacking, bug-bounty-tips, bug-bounty, pentesting | 08-Dec-2024 |
| Mastering Internet Scanning: How to Use ZMap and Censys for Ethical Hacking — Part 1 | https://systemweakness.com/mastering-internet-scanning-how-to-use-zmap-and-censys-for-ethical-hacking-part-1-2ca54401e2e0?source=rss------bug_bounty-5 | hacker_might | reconnaissance, recon, ip-security, zmap, bug-bounty | 08-Dec-2024 |
| Unlocking Cybersecurity with Censys: A Guide to Ethical Hacking, Bug Bounties, and Pentesting —… | https://systemweakness.com/unlocking-cybersecurity-with-censys-a-guide-to-ethical-hacking-bug-bounties-and-pentesting-4e1c6e4358c3?source=rss------bug_bounty-5 | hacker_might | fun, bug-bounty, recon, censys, osint | 08-Dec-2024 |
| Mastering Subdomain Visualization: Using Aquatone for Effective Reconnaissanc | https://medium.com/@kalkumbe7745/mastering-subdomain-visualization-using-aquatone-for-effective-reconnaissanc-6409c7846c2c?source=rss------bug_bounty-5 | Rutvik Kalkumbe | ethical-hacking, cybersecurity, bug-bounty, security, aquatone | 08-Dec-2024 |
| How I Test for Cross-Site Scripting | https://osintteam.blog/how-i-test-for-cross-site-scripting-9262de5e949d?source=rss------bug_bounty-5 | Cybersec with Hemmars | writing, technology, cybersecurity, bug-bounty | 08-Dec-2024 |
| My First Bounty of ₹₹₹ | https://osintteam.blog/my-first-bounty-of-37c2d40cbdd9?source=rss------bug_bounty-5 | cryptoshant | password-reset, bug-bounty, journey, cybersecurity, hacking | 07-Dec-2024 |
| From Low Privileges to Owner Rights: A Wild Journey Through an ATO Vulnerability | https://medium.com/@mrasg/from-low-privileges-to-owner-rights-a-wild-journey-through-an-ato-vulnerability-cb21c468634c?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty-tips, bug-bounty-writeup, cybersecurity, hacking, bug-bounty | 07-Dec-2024 |
| P3 Bug in Few Minutes | https://medium.com/meetcyber/p3-bug-in-few-minutes-006f57913f71?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, cybersecurity, bug-bounty, infosec, bug-bounty-tips | 07-Dec-2024 |
| How I Found an ATO Vulnerability in Stripe Program in an Overlooked Corner | https://medium.com/@mrasg/how-i-found-an-ato-vulnerability-in-stripe-program-in-an-overlooked-corner-dce7d2cdaaf9?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | security, bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty | 07-Dec-2024 |
| How to Make a Clickjacking Vulnerability Scanner with Python | https://infosecwriteups.com/how-to-make-a-clickjacking-vulnerability-scanner-with-python-a53f48e70b58?source=rss------bug_bounty-5 | Muhammad Abdullahi | python, cybersecurity, bug-bounty, hacking, python-programming | 07-Dec-2024 |
| Beyond signUP OR resetPassword || Send , Confirm AND Setting ! | https://medium.com/@0xAwali/beyond-signup-or-resetpassword-send-confirm-and-setting-d153f3ab6e17?source=rss------bug_bounty-5 | Mahmoud M. Awali | web-security, bug-bounty | 07-Dec-2024 |
| 5 Ways I Got RCE’s In the Wild | https://medium.com/@red.whisperer/5-ways-i-got-rces-99a78901ba33?source=rss------bug_bounty-5 | Chux | cybersecurity, hacking, bug-bounty, technology, programming | 07-Dec-2024 |
| Code Flaws and Consequences: The Bug That Exposed PII | https://medium.com/@CANITEY/code-flaws-and-consequences-the-bug-that-exposed-pii-3de5251e1484?source=rss------bug_bounty-5 | CANITEY | penetration-testing, bugbounty-writeup, pentesting, cybersecurity, bug-bounty | 07-Dec-2024 |
| When One Isn’t Enough: Multiple SQL Injections Found in 1 VDP | https://osintteam.blog/when-one-isnt-enough-multiple-sql-injections-found-in-1-vdp-f45de0b4c674?source=rss------bug_bounty-5 | #$ubh@nk@r | hackerone, infosec, sql-injection, bug-bounty, web-security | 07-Dec-2024 |
| Ransomware Breach Exposes 310K Patient Records at Anna Jaques Hospital | https://medium.com/@wiretor/ransomware-breach-exposes-310k-patient-records-at-anna-jaques-hospital-8548c120ad63?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, hacking, bug-bounty, business, malware | 07-Dec-2024 |
| Ultralytics AI Supply Chain Breach: Cryptominer Infects Thousands! | https://medium.com/@wiretor/ultralytics-ai-supply-chain-breach-cryptominer-infects-thousands-5a0d82d1c32e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | machine-learning, hacking, bug-bounty, malware, ai | 07-Dec-2024 |
| New Windows Zero-Day Alert: NTLM Credentials at Risk! | https://medium.com/@wiretor/new-windows-zero-day-alert-ntlm-credentials-at-risk-ad6256807d0c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, bug-bounty-tips, windows, hacking | 07-Dec-2024 |
| Police Shut Down Manson Cybercrime Market & Arrest Key Suspects! | https://medium.com/@wiretor/police-shut-down-manson-cybercrime-market-arrest-key-suspects-29bdcbaae6cf?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, bus, bug-bounty, malware, manson | 07-Dec-2024 |
| 11 Must-Read Blogs to Understand IDOR | https://saminbinh.medium.com/11-best-blogs-to-learn-idor-7769511d5e05?source=rss------bug_bounty-5 | SAMIN BIN HUMAYUN | information-technology, cybersecurity, bug-bounty, idor, idor-vulnerability | 07-Dec-2024 |
| How I discovered my first CVE | https://medium.com/@zumiyumi/how-i-discovered-my-first-cve-7b1e2987326c?source=rss------bug_bounty-5 | Zumi Yumi | bug-bounty, xss-attack, cve, code-review, cybersecurity | 07-Dec-2024 |
| Hackers Aren’t Built by Tools — They Build the Tools | https://shuvonsec.medium.com/hackers-arent-built-by-tools-they-build-the-tools-6581f38dbb34?source=rss------bug_bounty-5 | Shariar Shahnawaz Shuvon | hacking, bug-bounty, information-security, cybersecurity, bug-bounty-tips | 07-Dec-2024 |
| Why Are You Not Identifying Bugs in Website 2025 | https://osintteam.blog/why-are-you-not-identifying-bugs-in-website-2025-8ff218815b7d?source=rss------bug_bounty-5 | Tahir Ayoub | hacking, cyber-security-awareness, bug-bounty-tips, bug-bounty, hackathons | 06-Dec-2024 |
| How I Found 3x XSS in 6 Seconds! Without Automated Tools | https://medium.com/@embossdotar/how-i-found-3x-xss-in-6-seconds-without-automated-tools-b0c852dea66f?source=rss------bug_bounty-5 | embossdotar | cybersecurity-awareness, hacking, bug-bounty, cybersecurity, ethical-hacking | 06-Dec-2024 |
| 10 RXSS on HackerOne VDPs | https://medium.com/infosecmatrix/10-rxss-on-hackerone-vdps-5162d3ee42af?source=rss------bug_bounty-5 | AbhirupKonwar | infosec, cybersecurity, xss-attack, bug-bounty, pentesting | 06-Dec-2024 |
| From Newbie to Pro: My Journey to a $3,000 Bug Bounty | https://myselfakash20.medium.com/from-newbie-to-pro-my-journey-to-a-3-000-bug-bounty-61abe935e3db?source=rss------bug_bounty-5 | Akash Ghosh | technology, bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips | 06-Dec-2024 |
| The Art of Pwning Okta For Profit and Fun | https://whoisshuvam.medium.com/the-art-of-pwning-okta-for-profit-and-fun-075dedbc4715?source=rss------bug_bounty-5 | Suvam Adhikari | bug-bounty-tips, cybersecurity, info-sec-writeups, bug-bounty, hackerone | 06-Dec-2024 |
| “The Hidden GPS Threat: Unstripped Metadata on Redacted.com led 5K Rubel in bounties” ️♂️ | https://infosecwriteups.com/the-hidden-gps-threat-unstripped-metadata-on-redacted-com-led-5k-rubel-in-bounties-%EF%B8%8F-%EF%B8%8F-fd044d2031b6?source=rss------bug_bounty-5 | JEETPAL | bug-bounty, bug-bounty-writeup, exif-data, cybersecurity, bugbounty-tips | 06-Dec-2024 |
| 10 Essential Tips for Bug Bounty Beginners: A Fun, Practical, and Slightly Cheeky Guide to Kicking… | https://medium.com/@mrasg/10-essential-tips-for-bug-bounty-beginners-a-fun-practical-and-slightly-cheeky-guide-to-kicking-c7da8a9b1b31?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | hacking, cybersecurity, penetration-testing, bug-bounty, bug-bounty-tips | 06-Dec-2024 |
| Atrium Health Data Breach Impacts 585,000 People: Why Healthcare Cybersecurity Needs Immediate… | https://medium.com/@wiretor/atrium-health-data-breach-impacts-585-000-people-why-healthcare-cybersecurity-needs-immediate-38a479e96e39?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, marketing, business, malware | 06-Dec-2024 |
| ️ BREAKING: U.S. Arrests Scattered Spider Suspect Behind Telecom Hacks & Phishing Scams ️ | https://medium.com/@wiretor/%EF%B8%8F-breaking-u-s-arrests-scattered-spider-suspect-behind-telecom-hacks-phishing-scams-%EF%B8%8F-cd44ea215b09?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, business, ransomware, malware, hacking | 06-Dec-2024 |
| Now let’s set Frida For SSL Pinning Bypass. | https://aman0.medium.com/now-lets-set-frida-for-ssl-pinning-bypass-9ee8ae11b7b5?source=rss------bug_bounty-5 | Aman H | penetration-testing, bug-bounty, mobile-app-development, infosec, hacking | 06-Dec-2024 |
| List of Top Bug Bounty Platforms for 2024 | https://medium.com/@hackrate/list-of-top-bug-bounty-platforms-for-2024-fc31553c2e78?source=rss------bug_bounty-5 | Levente Molnar | penetration-testing, cybersecurity, vulnerability, bug-bounty, ethical-hacking | 06-Dec-2024 |
| Path Traversal Vulnerabilities in Web Applications: Understanding CVE-2024–9935 and How to Protect… | https://chintalatarakaram.medium.com/path-traversal-vulnerabilities-in-web-applications-understanding-cve-2024-9935-and-how-to-protect-40de3cca8ac8?source=rss------bug_bounty-5 | Chintala Taraka Ram | vulnerability, bug-bounty, python, education, web-development | 06-Dec-2024 |
| How I Found 3x XSS in 6 Seconds! Without Automated Tools | https://medium.com/meetcyber/how-i-found-3x-xss-in-6-seconds-without-automated-tools-b0c852dea66f?source=rss------bug_bounty-5 | embossdotar | cybersecurity-awareness, hacking, bug-bounty, cybersecurity, ethical-hacking | 06-Dec-2024 |
| A01: Broken Access Control and A05: Security Misconfiguration Leads to Unauthenticated Access to… | https://medium.com/@enigma_/a01-broken-access-control-and-a05-security-misconfiguration-leads-to-unauthenticated-access-to-0897e3bec491?source=rss------bug_bounty-5 | enigma | cybersecurity, bug-bounty, vulnerability, penetration-testing, ethical-hacking | 06-Dec-2024 |
| How I Turned a Low-Hanging Fruit Bug Into Mass Unauthorized Deletion of Invited Members | https://medium.com/@ahmedsamirghallab/how-i-turned-a-low-hanging-fruit-bug-into-mass-unauthorized-deletion-of-invited-members-6f195deffe11?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty, bug-bounty-tips, bug-bounty-writeup, hacking, penetration-testing | 05-Dec-2024 |
| How To Find Sensitive Log Files Easily.. | https://medium.com/@josuofficial327/how-to-find-sensitive-log-files-easily-1dd14bb5f221?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | ethical-hacking, vulnerability, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 05-Dec-2024 |
| Mission: Exploit – Advanced Bug Bounty Techniques Inspired by James Bond | https://bitpanic.medium.com/mission-exploit-advanced-bug-bounty-techniques-inspired-by-james-bond-a891ee3d0ef9?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, bug-bounty, cybersecurity, programming, technology | 05-Dec-2024 |
| How I Achieved a Full Account Takeover Through Information Disclosure | https://medium.com/@ahmedsamirghallab/how-i-achieved-a-full-account-takeover-through-information-disclosure-16c6f697b76e?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty-tips, penetration-testing, bug-bounty-writeup, bug-bounty, cybersecurity | 05-Dec-2024 |
| How Note-Taking and Hacktivity Analysis Led to Privilege Escalation | https://medium.com/@ahmedsamirghallab/how-note-taking-and-hacktivity-analysis-led-to-privilege-escalation-627aaf3bbd84?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | pentesting, bug-bounty-tips, bug-bounty-writeup, security, bug-bounty | 05-Dec-2024 |
| Unveiling the Unseen: A Journey from Simple Recon Using Shodan to Leaking AWS Secrets | https://medium.com/@security.tecno/unveiling-the-unseen-a-journey-from-simple-recon-using-shodan-to-leaking-aws-secrets-bc7bed1ad16f?source=rss------bug_bounty-5 | TECNO Security | hacking, security, writing, bug-bounty | 05-Dec-2024 |
| How Note-Taking and Hacktivity Analysis Led to Privilege Escalation | https://medium.com/@mrasg/how-note-taking-and-hacktivity-analysis-led-to-privilege-escalation-627aaf3bbd84?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | pentesting, bug-bounty-tips, bug-bounty-writeup, security, bug-bounty | 05-Dec-2024 |
| How I Achieved a Full Account Takeover Through Information Disclosure | https://medium.com/@mrasg/how-i-achieved-a-full-account-takeover-through-information-disclosure-16c6f697b76e?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty-tips, penetration-testing, bug-bounty-writeup, bug-bounty, cybersecurity | 05-Dec-2024 |
| How I Turned a Low-Hanging Fruit Bug Into Mass Unauthorized Deletion of Invited Members | https://medium.com/@mrasg/how-i-turned-a-low-hanging-fruit-bug-into-mass-unauthorized-deletion-of-invited-members-6f195deffe11?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty, bug-bounty-tips, bug-bounty-writeup, hacking, penetration-testing | 05-Dec-2024 |
| How Two Hardcoded Credentials Led To Payment System Takeover, Exposed 20,000 Credit Cards & Enabled… | https://medium.com/@Berserker1337/how-two-hardcoded-credentials-led-to-payment-system-takeover-exposed-20-000-credit-cards-enabled-04b0ac232786?source=rss------bug_bounty-5 | Berserker | bug-hunting, bug-bounty, writeup, cybersecurity, web-security | 05-Dec-2024 |
| Fix “Failed to load BApp” Burp Suite Extensions! | https://medium.com/@d3vilz50n/fix-failed-to-load-bapp-burp-suite-extensions-923efa10659d?source=rss------bug_bounty-5 | d3vilz50n | hacking-tools, hacking, fix, bug-bounty, burpsuite | 05-Dec-2024 |
| How I Earned My First Bug Bounty: A Beginner’s Story | https://medium.com/@kingstar75114/how-i-earned-my-first-bug-bounty-a-beginners-story-58e8a3023cc6?source=rss------bug_bounty-5 | TehanG07 | bugs, bug-hunting, bug-bounty-tips, bug-bounty, bug-hunter | 05-Dec-2024 |
| Correct Innerstanding + Overstanding | https://medium.com/@onelovemafia/correct-innerstanding-overstanding-8d3cfd9baa7d?source=rss------bug_bounty-5 | OneLoveMafia | deep-learning, mysticism, bug-bounty, game-development, zen | 05-Dec-2024 |
| Earn $10,000 XSS in Android Apps Scratch to Advance. | https://medium.com/@anandrishav2228/earn-10-000-xss-in-android-apps-scratch-to-advance-cb3aa6c2b98f?source=rss------bug_bounty-5 | Rishav anand | hacking, bug-bounty, cybersecurity, xss-attack, money | 05-Dec-2024 |
| AZEx Testnet Campaign is LIVE | https://medium.com/@AZEX.io/azex-testnet-campaign-is-live-ac553c18af8a?source=rss------bug_bounty-5 | AZEX | berachain, bug-bounty, testnet, dois, azex | 05-Dec-2024 |
| How I Exploited Passkey to Gain Unauthorized Access and TakeOver Invited Accounts | https://medium.com/@mrasg/how-i-exploited-passkey-to-gain-unauthorized-access-and-takeover-invited-accounts-b8b4547ffe70?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | penetration-testing, pentesting, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 05-Dec-2024 |
| How I Broke Into My Dev Friend’s Website in Less Than 24 Hour | https://infosecwriteups.com/how-i-broke-into-my-dev-friends-website-in-less-than-24-hour-6fdb31ad65a1?source=rss------bug_bounty-5 | sM0ky4 | hacking, bug-bounty, cyberattack, cybersecurity, bug-bounty-writeup | 05-Dec-2024 |
| The Story of How I Hacked an International University in Indonesia | https://infosecwriteups.com/the-story-of-how-i-hacked-an-international-university-in-indonesia-ec819a8c8fc0?source=rss------bug_bounty-5 | JC | bug-bounty-tips, infosec, cybersecurity, bug-bounty-writeup, bug-bounty | 05-Dec-2024 |
| Penetration Testing on Steroids: Revolutionizing Ethical Hacking with Hackrate and HackGATE | https://medium.com/@hackrate/penetration-testing-on-steroids-revolutionizing-ethical-hacking-with-hackrate-and-hackgate-7edaf7244075?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, penetration-testing, ethical-hacking, cybersecurity-news, bug-bounty | 05-Dec-2024 |
| Practical Bug Bounty — TCM Academy | Report writing, Bypass, Best Programs. | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-report-writing-bypass-best-programs-710516804f53?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | penetration-testing, cybersecurity, ethical-hacking, web-penetration-testing, bug-bounty | 05-Dec-2024 |
| Chinese Hackers Salt Typhoon Breach Global Telecom Networks | https://medium.com/@wiretor/chinese-hackers-salt-typhoon-breach-global-telecom-networks-00b40e0ce07e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | telecom, bug-bounty, business, hacking, networking | 05-Dec-2024 |
| New DroidBot Malware Targets 77 Banking & Crypto Apps! | https://medium.com/@wiretor/new-droidbot-malware-targets-77-banking-crypto-apps-1b5105a66625?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bots, hacking, bug-bounty, business, malware | 05-Dec-2024 |
| UK Cracks Down on Russian Money Laundering Networks | https://medium.com/@wiretor/uk-cracks-down-on-russian-money-laundering-networks-4dfae89f9000?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, uk, business, malware, bug-bounty | 05-Dec-2024 |
| ⚠️ Critical Zero-Day Uncovered: Mitel MiCollab Wide Open to Attackers! ⚠️ | https://medium.com/@wiretor/%EF%B8%8F-critical-zero-day-uncovered-mitel-micollab-wide-open-to-attackers-%EF%B8%8F-cdc36da3552e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, zero-day, business, programming | 05-Dec-2024 |
| Bug Hunting | https://medium.com/meetcyber/bug-hunting-ff366260d8df?source=rss------bug_bounty-5 | Nazrul Islam Rana | bug-hunting, platform, hacker, xx, bug-bounty | 05-Dec-2024 |
| From Frustration to Exploitation: How a Link Shortener Helped Me Bypass WAF | https://imooaaz.medium.com/from-frustration-to-exploitation-how-a-link-shortener-helped-me-bypass-waf-03724dca1592?source=rss------bug_bounty-5 | Moaaz Afifi | bug-bounty, bugs, bug-bounty-tips, bug-bounty-writeup, cybersecurity | 05-Dec-2024 |
| How I Climbed to #1 Hacker | https://medium.com/@CipherHawk/how-i-climbed-to-1-hacker-ffb52e2799c3?source=rss------bug_bounty-5 | CipherHawk | networking, bug-bounty-tips, cybersecurity, hacking, bug-bounty | 04-Dec-2024 |
| Modern Security Vulnerabilities: Lessons from Recent Breaches | https://medium.com/@SakshifromKushoAI/modern-security-vulnerabilities-lessons-from-recent-breaches-b925a6928bbf?source=rss------bug_bounty-5 | Sakshi from KushoAI | secure-coding, cybersecurity, bug-bounty, app-security, data-breach | 04-Dec-2024 |
| Path Traversal, bypass file extension validation with null bytes | https://medium.com/@sulthanyluthfi/path-traversal-bypass-file-extension-validation-with-null-bytes-0cedc4fb53f5?source=rss------bug_bounty-5 | Luthfi Sulthany | cybersecurity, bug-bounty, burpsuite, penetration-testing, path-traversal | 04-Dec-2024 |
| Firebase URL Exploitation: Taking Over Android Databases Like a Pro! | https://infosecwriteups.com/firebase-url-exploitation-taking-over-android-databases-like-a-pro-79a00844496d?source=rss------bug_bounty-5 | JEETPAL | bug-bounty, android, cybersecurirty, bug-bounty-tips, bugbountywriteup | 04-Dec-2024 |
| How to Bypass Firewalls and IDS on Filtered Ports: The Ultimate Step-by-Step Guide to Advanced… | https://medium.com/@shaikhminhaz1975/how-to-bypass-firewalls-and-ids-on-filtered-ports-the-ultimate-step-by-step-guide-to-advanced-9cb238d66450?source=rss------bug_bounty-5 | Shaikh Minhaz | firewall, step-by-step-guide, cybersecurity, bug-bounty, penetration-testing | 04-Dec-2024 |
| Critical RCE Vulnerability in Veeam Service Provider Console — Update Now! ️ | https://medium.com/@wiretor/critical-rce-vulnerability-in-veeam-service-provider-console-update-now-%EF%B8%8F-1e147e98458b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, hacking, rce, business | 04-Dec-2024 |
| Critical RCE Flaw Discovered in WhatsUp Gold (CVE-2024–8785) — Update Immediately! ️ | https://medium.com/@wiretor/critical-rce-flaw-discovered-in-whatsup-gold-cve-2024-8785-update-immediately-%EF%B8%8F-8b6e69c183ab?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, bug-bounty, ransomware, malware, rce | 04-Dec-2024 |
| Backdoor Discovered in Solana’s Web3.js npm Library: Crypto Wallets at Risk | https://medium.com/@wiretor/backdoor-discovered-in-solanas-web3-js-npm-library-crypto-wallets-at-risk-605bcb02a292?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, solana-network, business, malware, bug-bounty | 04-Dec-2024 |
| CORS Implementation & Various Headers, CORS series (Part 2) | https://medium.com/@vipulparveenjain/cors-implementation-various-headers-cors-series-part-2-895a04ef481d?source=rss------bug_bounty-5 | Vipul Jain | bug-bounty, cors-vulnerability, cross-origin-resource, web-security, hacking | 04-Dec-2024 |
| Bug Bounty Methodology Checklist for Web Applications (B2B Apps) | https://thexssrat.medium.com/bug-bounty-methodology-checklist-for-web-applications-b2b-apps-b876a20236d0?source=rss------bug_bounty-5 | Thexssrat | bug-bounty-tips, hacker, bug-bounty, hacks, hacking | 04-Dec-2024 |
| My Experience at the 2024 FIRST & AfricaCERT Symposium: A CyberGirl’s Perspective- Part Final | https://medium.com/@.rai/my-experience-at-the-2024-first-africacert-symposium-a-cybergirls-perspective-part-final-b190349785b4?source=rss------bug_bounty-5 | Gamuchirai | forensics, osint, bug-bounty, open-source, digital-marketing | 04-Dec-2024 |
| SQL injection UNION attack, finding a column containing text | https://medium.com/@Laxious8848/sql-injection-union-attack-finding-a-column-containing-text-10a0e36cc062?source=rss------bug_bounty-5 | Laxious | sql-injection, web-penetration-testing, union-based-sql-injection, bug-bounty, web-pen-testing | 04-Dec-2024 |
| Why Penetration Testing as a Service (PTaaS) Outperforms Traditional Pentest Providers | https://medium.com/@hackrate/why-penetration-testing-as-a-service-ptaas-outperforms-traditional-pentest-providers-7b1e6b0a6d0a?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, ethical-hacking, bug-bounty, penetration-testing | 03-Dec-2024 |
| Bug Bounty Tips Series: 10 Ways To Find HTTP Host Header Injection Vulnerability | https://medium.com/@alishoaib5929/bug-bounty-tips-series-10-ways-to-find-http-host-header-injection-vulnerability-1ad56c9dddd2?source=rss------bug_bounty-5 | Shoaib Ali | web-hacking, bug-bounty, bug-bounty-writeup, bug-bounty-tips, web-security | 03-Dec-2024 |
| The Art of Blind Command Injection: Unlocking Internal Secrets | https://medium.com/@yogeshbhandage/the-art-of-blind-command-injection-unlocking-internal-secrets-917daa755463?source=rss------bug_bounty-5 | Yogesh Bhandage | bug-bounty, bug-bounty-tips, hacking, penetration-testing, command-injection | 03-Dec-2024 |
| 20 Bug Bounty CrowdSourced Platforms | https://systemweakness.com/20-bug-bounty-crowdsourced-platforms-a4c486c85671?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, pentesting, infosec, ethical-hacking, bug-bounty | 03-Dec-2024 |
| Practical Bug Bounty — TCM Academy | Other Common Vulnerabilities | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-other-common-vulnerabilities-433dc6b1b3bc?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | penetration-testing, ethical-hacking, bug-bounty, cybersecurity, tcm-academy | 03-Dec-2024 |
| Story Of 15 Vulnerabilities in one public BBP ! | https://medium.com/@Ahmex000/story-of-15-vulnerabilities-in-one-buplic-bbp-561e68213991?source=rss------bug_bounty-5 | Ahmex000 | bug-bounty-hunter, bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips | 03-Dec-2024 |
| Critical Bug: Deny Sign-In & Steal Sensitive Info on Behalf of Victims | https://infosecwriteups.com/critical-bug-deny-sign-in-steal-sensitive-info-on-behalf-of-victims-cad4ced9227d?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, bugbounty-tips, auth-bypass, bug-bounty, bug-bounty-writeup | 03-Dec-2024 |
| Ensuring Comprehensive Ethical Hacking with Penetration Testing as a Service | https://medium.com/@hackrate/ensuring-comprehensive-ethical-hacking-with-penetration-testing-as-a-service-9b67734f46cd?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, penetration-testing, bug-bounty, cybersecurity | 03-Dec-2024 |
| Tricky & Simple EXIF protection Bypass | https://saurabhsanmane.medium.com/tricky-simple-exif-protection-bypass-5d0babd908f3?source=rss------bug_bounty-5 | Saurabh sanmane | bug-bounty, information-disclosure, vulnerability, ethical-hacking, cybersecurity | 03-Dec-2024 |
| Exploring Lightning Bounties: The Intersection of Open-Source and Bitcoin | https://medium.com/@mabramo11/exploring-lightning-bounties-the-intersection-of-open-source-and-bitcoin-8555c6403310?source=rss------bug_bounty-5 | Mike Abramo | bug-bounty, lightning-bounties, open-source, bitcoin, lightning-network | 03-Dec-2024 |
| Cisco Warns of Attacks Exploiting Decade-Old ASA Vulnerability | https://medium.com/@wiretor/cisco-warns-of-attacks-exploiting-decade-old-asa-vulnerability-11462bd60f7b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | programming, business, hacking, bug-bounty, cisco | 03-Dec-2024 |
| Energy Sector Contractor ENGlobal Targeted in Ransomware Attack | https://medium.com/@wiretor/energy-sector-contractor-englobal-targeted-in-ransomware-attack-a56112b119d3?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, energy, business, bug-bounty, malware | 03-Dec-2024 |
| Docker/Kubernetes (K8s)Penetration Testing Checklist | https://infosecwriteups.com/docker-kubernetes-k8s-penetration-testing-checklist-4d0a13c38495?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, bug-bounty, docker, kubernetes, cybersecurity | 03-Dec-2024 |
| How to Create an Android Payload in Just 1 Minute | Ethical Hacking | https://bjamali.medium.com/how-to-create-an-android-payload-in-just-1-minute-ethical-hacking-bc109b368909?source=rss------bug_bounty-5 | Babar Ali Jamali | penetration-testing, ethical-hacking, android, bug-bounty, cybersecurity | 03-Dec-2024 |
| Crack the Code: Earn Up to $500K in InceptionLRT’s Bug Bounty Program | https://medium.com/@InceptionLRT/crack-the-code-earn-up-to-500k-in-inceptionlrts-bug-bounty-program-3b5d2feb6ed6?source=rss------bug_bounty-5 | InceptionLRT | crypto, restaking, bug-bounty, defi, ethereum | 03-Dec-2024 |
| What is Cybersecurity | https://twanstcodes.medium.com/what-is-cybersecurity-52e71fe7dfa2?source=rss------bug_bounty-5 | Twana Muhammed | it, programming, cybersecurity, bug-bounty | 03-Dec-2024 |
| Mastering Bug Bounty Hunting with White Rabbit Neo AI | https://medium.com/@curiouskhanna/mastering-bug-bounty-hunting-with-white-rabbit-neo-ai-452a3bc3adce?source=rss------bug_bounty-5 | Shubham Khanna | hackerone, bug-bounty, ai, security-researchers | 03-Dec-2024 |
| Python — Program Security Headers | https://medium.com/@ibnu.rusdianto55/python-program-security-headers-966786261d5f?source=rss------bug_bounty-5 | Ibnu Rusdianto | python, bug-bounty, security-header, indonesia, keamanan-siber | 03-Dec-2024 |
| How I got access to Credentials easily | https://medium.com/infosecmatrix/how-i-got-access-to-credentials-easily-00ced4ba15bd?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, cybersecurity, ethical-hacking, google-dork, pentest | 02-Dec-2024 |
| How to Master Advanced Threat Hunting | https://medium.com/@paritoshblogs/how-to-master-advanced-threat-hunting-bcfb9d1e159c?source=rss------bug_bounty-5 | Paritosh | cybersecurity, threat-hunting, hacking, ai, bug-bounty | 02-Dec-2024 |
| CTFLearn Series| Challenge 96 : Forensics 101 — Walkthrough | https://medium.com/@rishikeshkhot26/ctflearn-series-challenge-96-forensics-101-walkthrough-13100d9f45fb?source=rss------bug_bounty-5 | Rishikesh_Khot | hacking, forensics, bug-bounty, capture-the-flag, cybersecurity | 02-Dec-2024 |
| Some Easiest P4 Bugs | https://icecream23.medium.com/some-easiest-p4-bugs-561cd710a7e1?source=rss------bug_bounty-5 | Aman Bhuiyan | ethical-hacking, bugbounty-tips, bug-bounty, p4-bugs, bug-hunter | 02-Dec-2024 |
| All UPI IDs in India have Predictable Patterns that allow the disclosure of mail IDs! | https://infosecwriteups.com/all-upi-ids-in-india-have-predictable-patterns-that-allow-the-disclosure-of-mail-ids-eede37a35758?source=rss------bug_bounty-5 | JEETPAL | upi, cybersecurity, bugbounty-tips, bug-bounty, bug-bounty-writeup | 02-Dec-2024 |
| Command Injection: Mastering Exploitation Techniques with a Comprehensive Cheatsheet | https://medium.com/@verylazytech/command-injection-mastering-exploitation-techniques-with-a-comprehensive-cheatsheet-6f549fee46b8?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, command-injection, cybersecurity, bug-bounty, oscp | 02-Dec-2024 |
| $3 Billion Crypto Exchange XT Allegedly Hacked | https://medium.com/@wiretor/3-billion-crypto-exchange-xt-allegedly-hacked-c560c9572168?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | crypto, xt, malware, bug-bounty, ransomeware | 02-Dec-2024 |
| Hackers Steal $17 Million from Uganda’s Central Bank | https://medium.com/@wiretor/hackers-steal-17-million-from-ugandas-central-bank-533dcbabbeff?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacked, ransomeware, bug-bounty, bank-hacked, malware | 02-Dec-2024 |
| Small Bugs, Big Bounties: A Hacker’s Guide to Quick Wins | https://myselfakash20.medium.com/small-bugs-big-bounties-a-hackers-guide-to-quick-wins-46a75dbc3573?source=rss------bug_bounty-5 | Akash Ghosh | programming, technology, bug-bounty, bug-bounty-tips, cybersecurity | 02-Dec-2024 |
| Critical Vulnerability Discovered in Zabbix Network Monitoring Tool | https://medium.com/@wiretor/critical-vulnerability-discovered-in-zabbix-network-monitoring-tool-df358293a1a9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomeware, malware, bug-bounty, zabbix, hacking | 02-Dec-2024 |
| From File Upload To LFI: A Journey To Exploitation | https://medium.com/@red.whisperer/from-file-upload-to-lfi-a-journey-to-exploitation-02ab5e1a7d0a?source=rss------bug_bounty-5 | Chux | bug-bounty, cybersecurity, hacking, ethical-hacking, infosec | 02-Dec-2024 |
| Small Bugs, Big Bounties: A Hacker’s Guide to Quick Wins | https://infosecwriteups.com/small-bugs-big-bounties-a-hackers-guide-to-quick-wins-46a75dbc3573?source=rss------bug_bounty-5 | Akash Ghosh | programming, hacking, technology, bug-bounty, cybersecurity | 02-Dec-2024 |
| Unpacking an IDOR-Based Exploit in International Shipping (70 Million+ PII Data Breach) | https://medium.com/@susapr/unpacking-an-idor-based-exploit-in-international-shipping-70-million-pii-data-breach-8c29cf33347d?source=rss------bug_bounty-5 | susapr | bug-bounty-writeup, cybersecurity, data-breach, information-technology, bug-bounty | 02-Dec-2024 |
| How I got my first Hall of Fame - Bug Bounty | https://medium.com/@pranavrp77/how-i-got-my-first-hall-of-fame-bug-bounty-d296637e37dd?source=rss------bug_bounty-5 | Pranav Patil | bug-bounty, hacking, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 02-Dec-2024 |
| Command Injection: Mastering Exploitation Techniques with a Comprehensive Cheatsheet | https://systemweakness.com/command-injection-mastering-exploitation-techniques-with-a-comprehensive-cheatsheet-6f549fee46b8?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, command-injection, cybersecurity, bug-bounty, oscp | 02-Dec-2024 |
| Understanding the Scope: Navigating Website Pentesting and Bug Bounty Targets | https://medium.com/@zero_4583/understanding-the-scope-navigating-website-pentesting-and-bug-bounty-targets-a6ab701df932?source=rss------bug_bounty-5 | Nathan Vincent | appsec, bug-bounty, pentesting, scopes | 01-Dec-2024 |
| Critical Account Takeover (MFA + Auth Bypass) due to Cookie Misconfiguration | https://medium.com/@sharp488/critical-account-takeover-mfa-auth-bypass-due-to-cookie-misconfiguration-3ca7d1672f9d?source=rss------bug_bounty-5 | Sharat Kaikolamthuruthil | bug-bounty, hackerone, information-security, bug-bounty-writeup, bug-bounty-tips | 01-Dec-2024 |
| Week 4: A Drive to Recharge and Reconnect | https://mokhansec.medium.com/week-4-a-drive-to-recharge-and-reconnect-4d0f8b7258d0?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-writeup, bug-bounty-tips, bugs, cybersecurity, bug-bounty | 01-Dec-2024 |
| From Minor Bug to Major DoS: My Journey with Web Cache Poisoning | https://crunkcode.medium.com/from-minor-bug-to-major-dos-my-journey-with-web-cache-poisoning-4b721e5358f4?source=rss------bug_bounty-5 | Ayushkr | web-exploitation, web-cache-poisoning, bug-bounty, pentesting | 01-Dec-2024 |
| Exploiting Facebook Ads: $2100 Bug Bounty for Role Management DoS | https://infosecwriteups.com/exploiting-facebook-ads-2100-bug-bounty-for-role-management-dos-afe09c1ecbb0?source=rss------bug_bounty-5 | Kiril Krivoguz | facebook, cybersecurity, hacking, information-security, bug-bounty | 01-Dec-2024 |
| Smart Contract Funds Lost Due to Missing Address Validation: $80M in Danger! | https://medium.com/@jeetpal2007/smart-contract-funds-lost-due-to-missing-address-validation-80m-in-danger-a4ec7d823a3f?source=rss------bug_bounty-5 | JEETPAL | smartcontract-audit, cybsersecurity, zeroaddress, web3, bug-bounty | 01-Dec-2024 |
| How I Discovered an API Security Issue: My First Bug Bounty Blog | https://hackersatty.medium.com/how-i-discovered-an-api-security-issue-my-first-bug-bounty-blog-7deec48453ff?source=rss------bug_bounty-5 | hackersatty | bug-bounty, hackersatty, bug-bounty-writeup, swagger-ui, api-security | 01-Dec-2024 |
| Hack IOT devices to earn $100–$200 in an hour. | https://medium.com/@anandrishav2228/hack-iot-devices-to-earn-100-200-in-an-hour-f211a54e87f3?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, penetration-testing, money, bug-bounty, iot | 01-Dec-2024 |
| Ketika Validasi MIME Type Tak Cukup: Perbaikan Aman untuk Upload File | https://medium.com/@ferizco/ketika-validasi-mime-type-tak-cukup-perbaikan-aman-untuk-upload-file-4df4ac6ec0ff?source=rss------bug_bounty-5 | Ferizco | bug-bounty, security, cybersecurity, web-development, php | 01-Dec-2024 |
| Firmware Penetration Testing Checklist | https://infosecwriteups.com/firmware-penetration-testing-checklist-9d5e70388371?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, security, information-technology, bug-bounty, cybersecurity | 01-Dec-2024 |
| Basics of SQL Injection | https://medium.com/@mayank_prajapati/basics-of-sql-injection-88ab0e57588b?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | penetration-testing, vulnerability, hacking, bug-bounty-tips, bug-bounty | 01-Dec-2024 |
| Why I Failed This November: A Clown’s Reflection on Failure | https://jackhavoltrey.medium.com/why-i-failed-this-november-a-clowns-reflection-on-failure-3223fec4451e?source=rss------bug_bounty-5 | Jack Havoltrey | bug-bounty-tips, bug-bounty | 01-Dec-2024 |
| Execution of a clickjacking attack on Gemini (Google’s AI-powered assistant) - which I recently… | https://systemweakness.com/execution-of-a-clickjacking-attack-on-gemini-googles-ai-powered-assistant-which-i-recently-45e60a98316a?source=rss------bug_bounty-5 | NIKHIL KUMAR GANDLA | penetration-testing, cybersecurity, bug-bounty, application-security, information-security | 01-Dec-2024 |
| From Minor Bug to Major DoS: My Journey with Web Cache Poisoning | https://ayushkr12.medium.com/from-minor-bug-to-major-dos-my-journey-with-web-cache-poisoning-4b721e5358f4?source=rss------bug_bounty-5 | Ayushkr | web-exploitation, web-cache-poisoning, bug-bounty, pentesting | 01-Dec-2024 |
| Russia Arrests Cybercriminal Wazawaka Tied to Ransomware Gangs | https://medium.com/@wiretor/russia-arrests-cybercriminal-wazawaka-tied-to-ransomware-gangs-9354c557f1d5?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, hacking, wazawaka, malware, bug-bounty | 01-Dec-2024 |
| SpyLoan Android Malware Installed Over 8 Million Times on Google Play! | https://medium.com/@wiretor/spyloan-android-malware-installed-over-8-million-times-on-google-play-d0331b3c762e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, ransomeware, bug-bounty, spyloan | 01-Dec-2024 |
| picoCTF Web Exploitation: Unminify | https://medium.com/@Kamal_S/picoctf-web-exploitation-unminify-6dd45341b7f5?source=rss------bug_bounty-5 | Kamal S | owasp, unminify, ctf, bug-bounty, picoctf | 01-Dec-2024 |
| Exploring Alternatives to Cobalt: Why Hackrate Stands Out | https://medium.com/@hackrate/exploring-alternatives-to-cobalt-why-hackrate-stands-out-67473c1e74e6?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, bug-bounty, ethical-hacking, penetration-testing | 01-Dec-2024 |
| Web Shell Upload via Extension Blacklist Bypass — File Upload Vulnerability | https://medium.com/@rcxsecurity/web-shell-upload-via-extension-blacklist-bypass-file-upload-vulnerability-f98ee877aff1?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Café | cybersecurity, hacking, information-security, bug-bounty, pentesting | 01-Dec-2024 |
| The Ultimate Guide to Top Pentest-as-a-Service Providers in 2024 | https://medium.com/@hackrate/the-ultimate-guide-to-top-pentest-as-a-service-providers-in-2024-f03b0408b0a5?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, cybersecurity, penetration-testing, bug-bounty, hacking | 01-Dec-2024 |
| SQL injection UNION attack, determining the number of columns returned by the query | https://medium.com/@Laxious8848/sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query-4792d89ad93f?source=rss------bug_bounty-5 | Laxious | sql-injection, web-pen-testing, web-penetration-testing, bug-bounty, union-based-sql-injection | 01-Dec-2024 |
| Out of Scope, Out of Mind? The | https://medium.com/@talatumsolutions/out-of-scope-out-of-mind-the-0e5f558c43ba?source=rss------bug_bounty-5 | Talatum-solutions | talatum, hacking, cyber-security-solutions, pentesting, bug-bounty | 30-Nov-2024 |
| Turn Cybersecurity Tricks Into Cash: Here’s How You Can Start Today | https://medium.com/@divyesh.jagad/turn-cybersecurity-tricks-into-cash-heres-how-you-can-start-today-9ccfff1ee0f4?source=rss------bug_bounty-5 | Divyesh Jagad | trending, bug-bounty, freelancing, infosec, remote-working | 30-Nov-2024 |
| Privilege Escalation via Role Persistence Vulnerability | https://medium.com/@aalgohary950/privilege-escalation-via-role-persistence-vulnerability-0c22a002d6ff?source=rss------bug_bounty-5 | C1pher_1 | hacking, penetration-testing, bug-bounty, access-control, privilege-escalation | 30-Nov-2024 |
| Discovery of Xss / Html Injection by analyzing target source code | https://medium.com/@gheeX/discovery-of-xss-html-injection-by-analyzing-target-source-code-0bc7a96c3ca4?source=rss------bug_bounty-5 | Ghee1337 | vulnerability, bug-bounty-writeup, bug-bounty-tips, xss-attack, bug-bounty | 30-Nov-2024 |
| Delete Account Functionality Helped Me Earn $250 | https://vijetareigns.medium.com/delete-account-functionality-helped-me-earn-250-21baa23c4034?source=rss------bug_bounty-5 | the_unlucky_guy | bug-bounty-tips, bug-bounty, bug-bounty-writeup, application-security, cybersecurity | 30-Nov-2024 |
| Marianas Web — The Danger Part of the Internet! | https://medium.com/@TahirAyoub/marianas-web-the-danger-part-of-the-internet-be69e3118e3d?source=rss------bug_bounty-5 | Tahir Ayoub | cybersecurity, darkweb, bug-bounty, deep-web, hacking | 30-Nov-2024 |
| A massive security breach at Andrew Tate’s platform The Real World has exposed the personal… | https://medium.com/@wiretor/a-massive-security-breach-at-andrew-tates-platform-the-real-world-has-exposed-the-personal-576892ffca1c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware, expose, andrew-tate | 30-Nov-2024 |
| 5 Side Hustles For Ethical Hackers | https://medium.com/@red.whisperer/5-side-hustles-for-ethical-hackers-8f3e0ca983ed?source=rss------bug_bounty-5 | Chux | ethical-hacking, cybersecurity, hacking, bug-bounty, side-hustle | 30-Nov-2024 |
| The Ultimate Guide to Top Ethical Hacking Platforms in 2024 | https://medium.com/@hackrate/the-ultimate-guide-to-top-ethical-hacking-platforms-in-2024-adcfc808caea?source=rss------bug_bounty-5 | Hackrate | bug-bounty, cybersecurity, ethical-hacking, penetration-testing | 30-Nov-2024 |
| ⚠️ Microsoft Hacking Warning 450 Million Windows Users Must Now Act! ️ | https://medium.com/@wiretor/%EF%B8%8F-microsoft-hacking-warning-450-million-windows-users-must-now-act-%EF%B8%8F-a7be6255a338?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, windows, ransomeware, breached, bug-bounty | 30-Nov-2024 |
| Russian Script Kiddie Builds Massive DDoS Botnet | https://medium.com/@wiretor/russian-script-kiddie-builds-massive-ddos-botnet-bac1b6c57e9f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, programming, hacking, russian | 30-Nov-2024 |
| P4 bug’s and their POC steps | Part 8 | https://osintteam.blog/p4-bugs-and-their-poc-steps-part-8-910ee6ba5710?source=rss------bug_bounty-5 | socalledhacker | cybersecurity, infosec, bug-bounty, hacking, bug-bounty-tips | 30-Nov-2024 |
| X(twitter) & my first real bug | https://medium.com/@elkhawaga1900/x-twitter-my-first-real-bug-7c7d26bef48f?source=rss------bug_bounty-5 | sponge2003 | bug-bounty, duplicate | 30-Nov-2024 |
| The Ultimate Guide to Top Ethical Hacking Platforms in 2024 | https://medium.com/@hackrate/the-ultimate-guide-to-top-ethical-hacking-platforms-in-2024-adcfc808caea?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, cybersecurity, ethical-hacking, penetration-testing | 30-Nov-2024 |
| The Ultimate Guide to Top Bug Bounty Platforms in 2024 | https://medium.com/@hackrate/the-ultimate-guide-to-top-bug-bounty-platforms-in-2024-08f53b117063?source=rss------bug_bounty-5 | Hackrate | ethical-hacking, cybersecurity, penetration-testing, bug-bounty | 29-Nov-2024 |
| The Ultimate Guide to Top Bug Bounty Platforms in 2024: Why Hackrate Stands Out | https://medium.com/@hackrate/the-ultimate-guide-to-top-bug-bounty-platforms-in-2024-why-hackrate-stands-out-d402c86c407b?source=rss------bug_bounty-5 | Hackrate | penetration-testing, bug-bounty, ethical-hacking, cybersecurity | 29-Nov-2024 |
| Exploring Alternatives to HackerOne: Why Hackrate Stands Out | https://medium.com/@hackrate/exploring-alternatives-to-hackerone-why-hackrate-stands-out-894092aec0aa?source=rss------bug_bounty-5 | Hackrate | ethical-hacking, penetration-testing, cybersecurity, bug-bounty, hacking | 29-Nov-2024 |
| How To Become Up-To-Date Hacker? 8 Gold Points To Stay Informed During Lifetime-Hacking Story | https://osintteam.blog/how-to-become-up-to-date-hacker-8-gold-points-to-stay-informed-during-lifetime-hacking-story-2e95f33c5d6f?source=rss------bug_bounty-5 | NnFace | bug-bounty, cybersecurity, kali-linux, hacking, technology | 29-Nov-2024 |
| Advanced Google Dorking | Part7 | https://systemweakness.com/advanced-google-dorking-part7-a8df43d00743?source=rss------bug_bounty-5 | AbhirupKonwar | infosec, pentesting, ethical-hacking, cybersecurity, bug-bounty | 29-Nov-2024 |
| Email Verification Bypass Vulnerability: A Critical Flaw Exploited | https://medium.com/@muralidharan1530/email-verification-bypass-vulnerability-a-critical-flaw-exploited-1d7a316b2514?source=rss------bug_bounty-5 | Murali Dharan | bounties, bug-bounty-writeup, bug-bounty, bugs, bug-bounty-tips | 29-Nov-2024 |
| POC — CVE-2024–21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE) due to improper input… | https://medium.com/@verylazytech/poc-cve-2024-21534-jsonpath-plus-vulnerable-to-remote-code-execution-rce-due-to-improper-input-a466ae69aa92?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, cve, exploit, cve-2024-21534, bug-bounty | 29-Nov-2024 |
| hackthebox-Administrator-walkthrough | https://medium.com/@ryuzakiryuga31/hackthebox-administrator-walkthrough-217d01374d00?source=rss------bug_bounty-5 | R09sh | bug-bounty, hackthebox, network-security, network-penetration-test, system-administration | 29-Nov-2024 |
| Google Dorking Made Simpler with GFU | https://medium.com/@sheryx00/google-dorking-made-simpler-with-gfu-20c67c5c8fc4?source=rss------bug_bounty-5 | Sheryx00 | google-dork, open-source, bug-bounty, pentesting, bug-bounty-tips | 29-Nov-2024 |
| Authentication Bypass Vulnerability 🙂 | https://aman0.medium.com/authentication-bypass-vulnerability-a7b8fff3361f?source=rss------bug_bounty-5 | Aman H | authentication-bypass, vulnerability, penetration-testing, bug-bounty-tips, bug-bounty | 29-Nov-2024 |
| Exploring Alternatives to Bugcrowd: Why Hackrate Stands Out | https://medium.com/@hackrate/exploring-alternatives-to-bugcrowd-why-hackrate-stands-out-8d54235f62d1?source=rss------bug_bounty-5 | Hackrate | bug-bounty, cybersecurity, penetration-testing, ethical-hacking | 29-Nov-2024 |
| The Ultimate Bug Bounty Roadmap Zero to Pro | https://medium.com/@adinesh02/the-ultimate-bug-bounty-roadmap-zero-to-pro-56440ac4cef2?source=rss------bug_bounty-5 | DINESH A | technology, tech, bug-bounty, hacking, cybersecurity | 29-Nov-2024 |
| Phishing-as-a-Service (PhaaS): “Rockstar 2FA” Targets Microsoft 365 with AiTM Attacks | https://medium.com/@wiretor/phishing-as-a-service-phaas-rockstar-2fa-targets-microsoft-365-with-aitm-attacks-572617422ea5?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, xs, phaa, american-dream, hacking | 29-Nov-2024 |
| Critical Flaw in ProjectSend Under Active Exploitation — Protect Your Servers! | https://medium.com/@wiretor/critical-flaw-in-projectsend-under-active-exploitation-protect-your-servers-c0903ab96a68?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | xs, malware, bug-bounty, hacking, pentest | 29-Nov-2024 |
| Unmasking Open Redirect Vulnerabilities: A Real-World Discovery | https://medium.com/@360Security/unmasking-open-redirect-vulnerabilities-a-real-world-discovery-348081e5d03e?source=rss------bug_bounty-5 | Anand Patel | penetration-testing, vapt, bug-bounty, web-security, cybersecurity | 29-Nov-2024 |
| Hacking AI — Understanding LLM Attacks and Prompt Injections | https://medium.com/@anmol.sh/hacking-ai-understanding-llm-attacks-and-prompt-injections-9354f26a8353?source=rss------bug_bounty-5 | Anmol Shah | ai, hacking, penetration-testing, artificial-intelligence, bug-bounty | 29-Nov-2024 |
| Website’s for fake mobile numbers and sms services. | https://osintteam.blog/websites-for-fake-mobile-numbers-and-sms-services-9057442ef82b?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, bug-bounty-tips, tips, hacking | 28-Nov-2024 |
| 30 Best Hacking Prompts | https://medium.com/@TahirAyoub/30-best-hacking-prompts-0c10ee61edf4?source=rss------bug_bounty-5 | Tahir Ayoub | bug-bounty, hacking, chatgpt, cybersecurity, ai | 28-Nov-2024 |
| The More Confident You Are About Your Testing, The Bigger the Bug You Missed | https://manishsaini74.medium.com/the-more-confident-you-are-about-your-testing-the-bigger-the-bug-you-missed-189fe169c005?source=rss------bug_bounty-5 | Manish Saini | bug-bounty, test-automation, software-engineering, software-testing, quality-assurance | 28-Nov-2024 |
| 8 Shocking Ways to Protect Your Identity Online | https://medium.com/@paritoshblogs/8-shocking-ways-to-protect-your-identity-online-fe13ad3b92e1?source=rss------bug_bounty-5 | Paritosh | ai, identity, hacking, cybersecurity, bug-bounty | 28-Nov-2024 |
| Finding Low-Hanging Bugs: A Practical Guide with Commands | https://medium.com/@ayansheikh45689/finding-low-hanging-bugs-a-practical-guide-with-commands-d6fb9159857d?source=rss------bug_bounty-5 | Ayan | penetration-testing, bug-finding, bug-bounty, ethical-hacking, cybersecurity | 28-Nov-2024 |
| Finding more subdomains.(part 2) | https://infosecwriteups.com/finding-more-subdomains-part-2-1850ead4dd92?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, penetration-testing, reconnaissance, cybersecurity, hacking | 28-Nov-2024 |
| JWTs: A Comedy of Errors and Exploits | https://jackhavoltrey.medium.com/jwts-a-comedy-of-errors-and-exploits-81d1fb25d24d?source=rss------bug_bounty-5 | Jack Havoltrey | bug-bounty, authentication, bug-bounty-tips, jwt, web-development | 28-Nov-2024 |
| Bug Bounty Chronicles: Exploiting the PUT Method for Remote Code Execution (RCE) | https://medium.com/@pawarpushpak36/bug-bounty-chronicles-exploiting-the-put-method-for-remote-code-execution-rce-c2782bea61da?source=rss------bug_bounty-5 | Pawarpushpak | bug-zero, remote-code-execution, bug-bounty-tips, bug-bounty, infosec | 28-Nov-2024 |
| The Art of Account Take Over #1: Chaining XSS and non-HttpOnly Session Cookie | https://xdead4f.medium.com/the-art-of-account-take-over-1-chaining-xss-and-non-httponly-session-cookie-8e474bc83e5c?source=rss------bug_bounty-5 | 0xdead4f | xs, penetration-testing, bug-bounty, cybersecurity | 28-Nov-2024 |
| How to find Access control vulnerabilities useful Tips PART (1)☢ | https://medium.com/@mahmodziad40/how-to-find-access-control-vulnerabilities-useful-tips-part-1-56ca1a9c60ce?source=rss------bug_bounty-5 | httpzuz | portswigger, penetration-testing, access-control, bug-bounty-tips, bug-bounty | 28-Nov-2024 |
| UK Hospital Network Hit by Cyberattack, Procedures Postponed | https://medium.com/@wiretor/uk-hospital-network-hit-by-cyberattack-procedures-postponed-3b9622eec715?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, malware, cyberattack, uk-hospital-attack, bug-bounty | 28-Nov-2024 |
| T-Mobile Detects Network Intrusion Attempts from Wireline Provider | https://medium.com/@wiretor/t-mobile-detects-network-intrusion-attempts-from-wireline-provider-ee7fab1a7eac?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, xs, t-mobile, hacking | 28-Nov-2024 |
| Malicious npm Library @0xengine/xmlrpc Steals Data and Mines Cryptocurrency | https://medium.com/@wiretor/malicious-npm-library-0xengine-xmlrpc-steals-data-and-mines-cryptocurrency-50171f172ef7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, xs, bug-bounty, malware, ransomeware | 28-Nov-2024 |
| Exploiting CSRF and OTP Reuse: How Weak Token Management Enables Password Reset Attacks, Leading… | https://medium.com/@iPsalmy/exploiting-csrf-and-otp-reuse-how-weak-token-management-enables-password-reset-attacks-leading-to-c2f6b914f398?source=rss------bug_bounty-5 | iPsalmy | bug-bounty, infosec, web-application-security, api-security, cybersecurity | 28-Nov-2024 |
| #HappyThanksgiving from Wire Tor! | https://medium.com/@wiretor/happythanksgiving-from-wire-tor-5a655498f35f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, happy-thanksgiving, happy-thanksgiving-day, malware | 28-Nov-2024 |
| Private IP Disclosure in Bug Bounty Programs: Understanding the Risk and Reward | https://medium.com/@shamzen96/private-ip-disclosure-in-bug-bounty-programs-understanding-the-risk-and-reward-6441aa866db0?source=rss------bug_bounty-5 | Shivam Raj | bug-bounty, bug-bounty-tips | 27-Nov-2024 |
| The P2 Bug You Could Miss Without Reading the Documentation | https://mokhansec.medium.com/the-p2-bug-you-could-miss-without-reading-the-documentation-b0eacc3b7587?source=rss------bug_bounty-5 | Mohsin khan | cybersecurity, bugs, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 27-Nov-2024 |
| Easy Way To Root Your Virtual Device 🙂 | https://aman0.medium.com/easy-way-to-root-your-virtual-device-9d1a2aa99ea1?source=rss------bug_bounty-5 | Aman H | penetration-testing, mobile-app-development, root-android-phone, bug-bounty, app-security-testing | 27-Nov-2024 |
| Install MassDNS in Linux | https://medium.com/@mohamdaminporsalari/install-massdns-in-linux-4a5937829972?source=rss------bug_bounty-5 | MaMad | bug-bounty, dns, massdns, pentesting, bug-bounty-tool | 27-Nov-2024 |
| How I Turned NASA’s Search Bar into a Phishing Gateway | https://systemweakness.com/how-i-turned-nasas-search-bar-into-a-phishing-gateway-697de30859b0?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, cybersecurity, technology, bug-bounty, programming | 27-Nov-2024 |
| 0-Click ATO: How I Can Take Over Every Account on the Website | https://medium.com/@aesmail034/0-click-ato-how-i-can-take-over-every-account-on-the-website-9a69c9afb57c?source=rss------bug_bounty-5 | Ahmed Esmail | hackerone, bug-bounty, cybersecurity, account-takeover | 27-Nov-2024 |
| Race Condition Exploit Enables Free Plan Users to Access Premium Features | https://medium.com/@rawansa3ed2002/race-condition-exploit-enables-free-plan-users-to-access-premium-features-9619d0fa0a53?source=rss------bug_bounty-5 | Rawansaed | bug-bounty, race-condition, hackerone, penetration-testing, cybersecurity | 27-Nov-2024 |
| System Hacking Technique | https://medium.com/@TahirAyoub/system-hacking-technique-ac376bd3f0ef?source=rss------bug_bounty-5 | Tahir Ayoub | bug-bounty, hacking-tools, cybersecurity, hacking, computer-security | 27-Nov-2024 |
| Install MassDNS in Linux | https://medium.com/@MaMad4Ever/install-massdns-in-linux-4a5937829972?source=rss------bug_bounty-5 | MaMad | bug-bounty, dns, massdns, pentesting, bug-bounty-tool | 27-Nov-2024 |
| Introducing JSNinja: Your Ultimate JavaScript Bug Hunting Companion ️♂️ | https://medium.com/@vikas0vks/introducing-jsninja-your-ultimate-javascript-bug-hunting-companion-%EF%B8%8F-%EF%B8%8F-bee1fcc4bd75?source=rss------bug_bounty-5 | Vikas | information-security, bug-bounty-tips, bug-bounty | 27-Nov-2024 |
| SMB Enumeration and Exploitation: Master Ports 139 and 445 for Penetration Testing | https://medium.com/@verylazytech/smb-enumeration-and-exploitation-master-ports-139-and-445-for-penetration-testing-ddca90a384c5?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, oscp, smb, hacking, cybersecurity | 27-Nov-2024 |
| Understanding Ethical Hacking: The Key to Cybersecurity | https://medium.com/@harshkatiyar5556/understanding-ethical-hacking-the-key-to-cybersecurity-454c6671c5f9?source=rss------bug_bounty-5 | Harsh Katiyar | web3, mind-hacking-techniques, ethical-hacking, cybersecurity, bug-bounty | 27-Nov-2024 |
| How to Find DNS Rebinding Vulnerabilities in Bug Bounty Hunting | https://dineshpathro9.medium.com/how-to-find-dns-rebinding-vulnerabilities-in-bug-bounty-hunting-3323da71f5ee?source=rss------bug_bounty-5 | Hunter | bugs, bug-bounty-tips, bug-bounty, bug-zero | 27-Nov-2024 |
| 0-Click ATO: How I Can Take Over Every Account on the Website | https://som3a.medium.com/0-click-ato-how-i-can-take-over-every-account-on-the-website-9a69c9afb57c?source=rss------bug_bounty-5 | Ahmed Esmail | hackerone, bug-bounty, cybersecurity, account-takeover | 27-Nov-2024 |
| IDOR Allows an Admin to Add SuperAdmin (Which is not allowed) | https://medium.com/@mrro0o0tt/idor-allows-an-admin-to-add-superadmin-which-is-not-allowed-239fcc82ff69?source=rss------bug_bounty-5 | Whoami | idor-vulnerability, bug-bounty, broken-access-control, business-logic-bug, bug-bounty-tips | 27-Nov-2024 |
| Researchers Unveil “Bootkitty” — The First UEFI Bootkit Targeting Linux Kernels! | https://medium.com/@wiretor/researchers-unveil-bootkitty-the-first-uefi-bootkit-targeting-linux-kernels-30ff7b7c6819?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | zero-day, cve, bug-bounty, malware, bootkitty | 27-Nov-2024 |
| Interpol Arrests 1,000+ in Massive ‘Operation Serengeti’ Anti-Cybercrime Crackdown | https://medium.com/@wiretor/interpol-arrests-1-000-in-massive-operation-serengeti-anti-cybercrime-crackdown-45ffa24e6f4a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, xss-attack, interpol, hacking, bug-bounty | 27-Nov-2024 |
| New NachoVPN Attack: Rogue VPN Servers Installing Malicious Updates ️ | https://medium.com/@wiretor/new-nachovpn-attack-rogue-vpn-servers-installing-malicious-updates-%EF%B8%8F-262c85645850?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, vpn, malware, bug-bounty, programming | 27-Nov-2024 |
| JS Review and Abuse GraphQL Result 10xBAC + Admin Panel ATO | https://medium.com/@0xbugatti/js-review-and-abuse-graphql-result-10xbac-admin-panel-ato-0f013fe471ea?source=rss------bug_bounty-5 | 0xbugatti | owasp-top-10, bug-bounty, bugbounty-writeup, web-app-security, bugbounty-tips | 27-Nov-2024 |
| How I abled to get users/admins PII Disclosure | https://medium.com/@a7madhacck/how-i-abled-to-get-users-admins-pii-disclosure-6c02fef82c11?source=rss------bug_bounty-5 | Ahmad Yussef | technology, hackerone, bug-bounty-writeup, cybersecurity, bug-bounty | 27-Nov-2024 |
| Automating the Setup of a Bug Bounty Toolkit | https://dineshpathro9.medium.com/automating-the-setup-of-a-bug-bounty-toolkit-05b3e589eb84?source=rss------bug_bounty-5 | hunter | bug-bounty, bug-bounty-tips, bugs, hacking | 26-Nov-2024 |
| VOIP Penetration Testing Checklist | https://infosecwriteups.com/voip-penetration-testing-checklist-890bb4e09bac?source=rss------bug_bounty-5 | Ajay Naik | security, information-technology, penetration-testing, cybersecurity, bug-bounty | 26-Nov-2024 |
| Find Website Vulnerabilities with One Hacking Tool | https://medium.com/@TahirAyoub/find-website-vulnerabilities-with-one-hacking-tool-0008a908c6fd?source=rss------bug_bounty-5 | Tahir Ayoub | cybersecurity, bug-bounty-tips, bug-bounty, hacking, tools | 26-Nov-2024 |
| Bugbounty Hunting: The First Step After Finding Your Target | https://dineshpathro9.medium.com/bugbounty-hunting-the-first-step-after-finding-your-target-998267eeeb28?source=rss------bug_bounty-5 | Hunter | bug-bounty-tips, bug-bounty, bug-zero, bugs | 26-Nov-2024 |
| Challenges and Pitfalls of Automating Bug Bounty Submissions with AI | https://pointlessai.medium.com/challenges-and-pitfalls-of-automating-bug-bounty-submissions-with-ai-adb06ab0d2c6?source=rss------bug_bounty-5 | PointlessAI Medium | ai, bug-bounty, cybersecurity, chatgpt, vulnerability-management | 26-Nov-2024 |
| IBM Fixes RCE Vulnerabilities in Data Virtualization Manager and Security SOAR | https://medium.com/@wiretor/ibm-fixes-rce-vulnerabilities-in-data-virtualization-manager-and-security-soar-dfbc178710f5?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, rce, bug-bounty, malware, ibm | 26-Nov-2024 |
| Firefox and Windows Zero-Days Exploited by Russian RomCom Hackers: A Cybersecurity Wake-Up Call! | https://medium.com/@wiretor/firefox-and-windows-zero-days-exploited-by-russian-romcom-hackers-a-cybersecurity-wake-up-call-a8029dacd27b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, malware, windows-hacking, bug-bounty, firefox-hacked | 26-Nov-2024 |
| Critical Vulnerabilities Discovered in Popular Anti-Spam Plugin for WordPress ️ | https://medium.com/@wiretor/critical-vulnerabilities-discovered-in-popular-anti-spam-plugin-for-wordpress-%EF%B8%8F-353b3a727d7e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacked, malware, wordpress, ransomware, bug-bounty | 26-Nov-2024 |
| Find Website Vulnerabilities with One Hacking Tool | https://blog.cubed.run/find-website-vulnerabilities-with-one-hacking-tool-0008a908c6fd?source=rss------bug_bounty-5 | Tahir Ayoub | cybersecurity, bug-bounty-tips, bug-bounty, hacking, tools | 26-Nov-2024 |
| How I Hacked NASA | https://vikram1337.medium.com/how-i-hacked-nasa-74f4ada6e90c?source=rss------bug_bounty-5 | Vikram | writeup, pentesting, bug-bounty, nasa | 26-Nov-2024 |
| race condition on BBP | https://medium.com/@mohanad9837/race-condition-on-bbp-7294e8582ade?source=rss------bug_bounty-5 | mohaned | bug-bounty, race-condition | 25-Nov-2024 |
| Why Subdomain Enumeration ? | https://ahmed-rezk.medium.com/why-subdomain-enumeration-3e4570dd9aba?source=rss------bug_bounty-5 | Ahmed Rezk | cybersecurity, red-teaming, bug-bounty-tips, pentesting, bug-bounty | 25-Nov-2024 |
| Privilege Escalation in Collaborative Platforms — BugBounty | https://medium.com/@Zero-Ray/privilege-escalation-in-collaborative-platforms-bugbounty-e1e240384b43?source=rss------bug_bounty-5 | Mahmoud Fawzy | privilege-escalation, bug-bounty, bug-bounty-hunter, bugcrowd, bug-bounty-writeup | 25-Nov-2024 |
| HOW I FOUND MY FIRST XSS BUG | https://medium.com/@Zeroo_sec/how-i-found-my-first-xss-bug-553225548d29?source=rss------bug_bounty-5 | Ranjan | ethical-hacking, hacking, bug-bounty, bug-bounty-tips | 25-Nov-2024 |
| Google Dorks for Bug Bounty: The Ultimate Guide | https://medium.com/@verylazytech/google-dorks-for-bug-bounty-the-ultimate-guide-e7611b533aee?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, google-dork, google-hacking, penetration-testing, bug-bounty | 25-Nov-2024 |
| Google dorking the right way. | https://osintteam.blog/google-dorking-the-right-way-27b0eeb31212?source=rss------bug_bounty-5 | an0nbil | bug-bounty-tips, bug-bounty, programming, ethical-hacking, cybersecurity | 25-Nov-2024 |
| Microlise Data Breach Confirmed: SafePay Ransomware Group Claims Responsibility ️ | https://medium.com/@wiretor/microlise-data-breach-confirmed-safepay-ransomware-group-claims-responsibility-%EF%B8%8F-035e36e25afc?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | usa, ransomeware, bug-bounty, malware, xs | 25-Nov-2024 |
| Bangkok Busts High-Tech SMS Scam Operation | https://medium.com/@wiretor/bangkok-busts-high-tech-sms-scam-operation-e13909a2625f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, bug-bounty, hacking, malware, xxe | 25-Nov-2024 |
| Finastra Data Breach: What Financial Institutions Need to Know ️ | https://medium.com/@wiretor/finastra-data-breach-what-financial-institutions-need-to-know-%EF%B8%8F-df9e960c90c7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, pentest, hacking, xs | 25-Nov-2024 |
| SSRF To Internal Data Access Via PDF Print Feature | https://bishal0x01.medium.com/ssrf-to-internal-data-access-via-pdf-print-feature-b8e6a912844a?source=rss------bug_bounty-5 | Bishal Shrestha | ssrf, bug-bounty, information-security | 25-Nov-2024 |
| Bug Bounty Tips and Tricks | https://bevijaygupta.medium.com/bug-bounty-tips-and-tricks-7b25317c8e7e?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, bug-zero, bug-bounty-writeup, bugs, bug-bounty | 25-Nov-2024 |
| Google Dorks for Bug Bounty: The Ultimate Guide | https://systemweakness.com/google-dorks-for-bug-bounty-the-ultimate-guide-e7611b533aee?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, google-dork, google-hacking, penetration-testing, bug-bounty | 25-Nov-2024 |
| here is how I got my first bounty $$$ | https://medium.com/@mohanad9837/here-is-how-i-got-my-first-bounty-78c18da7feeb?source=rss------bug_bounty-5 | mohaned | xss-vulnerability, xss-bypass, bug-bounty, xss-attack | 25-Nov-2024 |
| GitTrash: Digging Deep into Git Repositories for Hidden Treasures | https://medium.com/@sheryx00/gittrash-digging-deep-into-git-repositories-for-hidden-treasures-dfa6b3ff9251?source=rss------bug_bounty-5 | Sheryx00 | pentesting, bug-bounty, open-source, git | 24-Nov-2024 |
| SSRF(Server-Side Request Forgery) | https://medium.com/@mukkagopi50/ssrf-server-side-request-forgery-50329b7e39fb?source=rss------bug_bounty-5 | Gopi Mukka | vapt, ssrf, ssrf-attack, vulnerability-assessment, bug-bounty | 24-Nov-2024 |
| Mastering Web Application Pentesting Part — II | https://infosecwriteups.com/mastering-web-application-pentesting-part-ii-f02898bf48e3?source=rss------bug_bounty-5 | Mukilan Baskaran | web-security, infosec, bug-bounty, cybersecurity, computer-security | 24-Nov-2024 |
| Week 3: When the Drive to Work Fades | https://mokhansec.medium.com/week-3-when-the-drive-to-work-fades-3e94a89559c0?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-writeup, bugs, bug-bounty-tips, bug-bounty, cybersecurity | 24-Nov-2024 |
| Hacking WordPress: Where to Begin? | https://0x4a6f76616e.medium.com/hacking-wordpress-where-to-begin-60179dc403d9?source=rss------bug_bounty-5 | Jovan | bug-bounty, hacking, pentesting, vulnerability, wordpress | 24-Nov-2024 |
| 7 Steps guide to CNAME Subdomain Takeover | https://bitpanic.medium.com/7-steps-guide-to-cname-subdomain-takeover-f10eebd7e952?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, cybersecurity, information-security, bug-bounty | 24-Nov-2024 |
| Cyberattack at French Hospital Exposes Health Data of 750,000 Patients | https://medium.com/@wiretor/cyberattack-at-french-hospital-exposes-health-data-of-750-000-patients-01b8f62893d1?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | pentest, hacking, xs, malware, bug-bounty | 24-Nov-2024 |
| Microsoft Disrupts ONNX Phishing-as-a-Service Operation ️ | https://medium.com/@wiretor/microsoft-disrupts-onnx-phishing-as-a-service-operation-%EF%B8%8F-a1b5535f5d9a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, malware, xs, bug-bounty, pentest | 24-Nov-2024 |
| Microsoft Tests Third-Party Passkey Support in Windows 11: A Passwordless Future | https://medium.com/@wiretor/microsoft-tests-third-party-passkey-support-in-windows-11-a-passwordless-future-92a5fe28571a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | microsoft, pentest, bug-bounty, hacking, xs | 24-Nov-2024 |
| Hackers Exploit Avast Anti-Rootkit Driver to Disable Security Defenses | https://medium.com/@wiretor/hackers-exploit-avast-anti-rootkit-driver-to-disable-security-defenses-13df8a3c313e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, ransomware, bug-bounty, malware, xss-attack | 24-Nov-2024 |
| How I got 50euro bounty? | https://doordiefordream.medium.com/how-i-got-50euro-bounty-71dcf4c6e335?source=rss------bug_bounty-5 | Bug hunter balu | html, cybersecurity, technology, vulnerability, bug-bounty | 24-Nov-2024 |
| Recon. Useful Tips for Bug Bounty — PART 1 | https://medium.com/@dzchalevich/recon-useful-tips-for-bug-bounty-part-1-0defee9bc7cf?source=rss------bug_bounty-5 | theroo@ttt | web-security, bug-bounty-tips, bug-bounty, penetration-testing, recon | 24-Nov-2024 |
| Happy hunting! | https://medium.com/@hacker_33169/happy-hunting-eae0a858b540?source=rss------bug_bounty-5 | B3ntl3y | cybersecurity, bug-bounty, penetration-testing | 24-Nov-2024 |
| Beginner’s Guide to Ethical Hacking: What I Learned from My First Bug Bounty | https://medium.com/@yarmuhammadnizamani556/beginners-guide-to-ethical-hacking-what-i-learned-from-my-first-bug-bounty-724a9f97f38b?source=rss------bug_bounty-5 | Curious Mind | ethical-hacking, cybersecurity, bug-bounty | 24-Nov-2024 |
| Android Pentesting can make you $500/day. | https://medium.com/@anandrishav2228/android-pentesting-can-make-you-500-day-818158f9b43d?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, android, hacking, money, bug-bounty | 24-Nov-2024 |
| How I do my recon and end up finding hidden assets and vulnerabilities before anyone else Pt.2 | https://medium.com/@demonia/how-i-do-my-recon-and-end-up-finding-hidden-assets-and-vulnerabilities-before-anyone-else-pt-2-2c8dd13d6c19?source=rss------bug_bounty-5 | Mohammed Dief | cybersecurity, information-security, bug-bounty, hackerone, recon | 24-Nov-2024 |
| IDOR is NOT only on the ID | https://medium.com/@mshulkhan/idor-is-not-only-on-the-id-8e94b5cc193e?source=rss------bug_bounty-5 | M Shulkhan | google-bug, bug-bounty, hacking, hackerkamp150, sysbraykr | 24-Nov-2024 |
| My Bug Bounty Hunting Methodology | https://cybersechemmars.medium.com/my-bug-bounty-hunting-methodology-51ac0a891978?source=rss------bug_bounty-5 | Cybersec with Hemmars | cybersecurity, writing, bug-bounty, bug-bounty-writeup | 24-Nov-2024 |
| TryHackMe | NoSQLi Walkthrough | https://medium.com/@k3r0/tryhackme-nosqli-walkthrough-155c6380f5b3?source=rss------bug_bounty-5 | Kyrillos nady | penetration-testing, bug-bounty, nosql, web-penetration-testing, hacking | 24-Nov-2024 |
| Bug House Exterminator in Wilton: Your Ultimate Guide to a Pest-Free Home | https://medium.com/@muhammadmohsinsiddique46/bug-house-exterminator-in-wilton-your-ultimate-guide-to-a-pest-free-home-47d56773c394?source=rss------bug_bounty-5 | Muhammadmohsinsiddique | bed-bug-extermination, bug-bounty, wilton, bugs | 23-Nov-2024 |
| 7 Main Sins Of A Hacker, What To Stay Away From During Hacking Story? | https://medium.com/h7w/7-main-sins-of-a-hacker-what-to-stay-away-from-during-hacking-story-115d749952e2?source=rss------bug_bounty-5 | NnFace | faith, hacking, bug-bounty, cybersecurity, kali-linux | 23-Nov-2024 |
| HTML INJECTION- My Second Major Bounty | https://medium.com/@josuofficial327/html-injection-my-second-major-bounty-cb7c3b32ce60?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | owasp-top-10, bug-bounty-tips, cybersecurity, penetration-testing, bug-bounty | 23-Nov-2024 |
| Building a Bug Bounty Journey: Exploring Web Security with a Custom CMS | https://medium.com/@zero_4583/building-a-bug-bounty-journey-exploring-web-security-with-a-custom-cms-06dffc81e969?source=rss------bug_bounty-5 | Nathan Vincent | php, appsec, cms-development, bug-bounty | 23-Nov-2024 |
| Why Bug Bounty Is Just for You 🙂 | https://infosecwriteups.com/why-bug-bounty-is-just-for-you-61541deb62b8?source=rss------bug_bounty-5 | Satyam Pathania | bug-bounty, money, cybersecurity, infosec, technology | 23-Nov-2024 |
| Disallowed but Discoverable: The Hacker’s robots.txt Playbook | https://myselfakash20.medium.com/disallowed-but-discoverable-the-hackers-robots-txt-playbook-73dca570f23e?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, cybersecurity, technology, programming, bug-bounty-writeup | 23-Nov-2024 |
| Vulnerable WordPress October 2024 (Zahhak Castle) | https://medium.com/@onhexgroup/vulnerable-wordpress-october-2024-zahhak-castle-fb7da609b5e1?source=rss------bug_bounty-5 | Onhexgroup | information-security, infosec, cybersecurity, bug-bounty, wordpress | 23-Nov-2024 |
| North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn | https://medium.com/@wiretor/north-korean-hackers-steal-10m-with-ai-driven-scams-and-malware-on-linkedin-25daddc61809?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware, ai, programming | 23-Nov-2024 |
| Over 2,000 Palo Alto Firewalls Hacked Using Recently Patched Bugs | https://medium.com/@wiretor/over-2-000-palo-alto-firewalls-hacked-using-recently-patched-bugs-ccc83ef8b4d6?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, hacking, hacked, xss-attack | 23-Nov-2024 |
| Chinese Hackers Target Linux with WolfsBane Malware | https://medium.com/@wiretor/chinese-hackers-target-linux-with-wolfsbane-malware-c4a313c0e63f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | chinese, linux, hacking, malware, bug-bounty | 23-Nov-2024 |
| Cyber Alert: APT28 Hackers Breach US Firm with Innovative “Nearest Neighbor Attack” | https://medium.com/@wiretor/cyber-alert-apt28-hackers-breach-us-firm-with-innovative-nearest-neighbor-attack-9245d88841d8?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, apt-28, hacking, xss-attack | 23-Nov-2024 |
| Ubuntu Users Alert: Decade-Old Needrestart Flaws Expose Root Privilege Risks | https://medium.com/@wiretor/ubuntu-users-alert-decade-old-needrestart-flaws-expose-root-privilege-risks-a504f5d2b949?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | usa, ubuntu, penetration-testing, bug-bounty, malware | 23-Nov-2024 |
| Step into my Professional Life(:Finding my first Bug:) | https://medium.com/@anshjain722/step-into-my-professional-life-finding-my-first-bug-e8175b1d9601?source=rss------bug_bounty-5 | Ansh Jain | cybersecurity, xss-vulnerability, vulnerability, bugs, bug-bounty | 23-Nov-2024 |
| Methods to bypass 403 & 401 | https://infosecwriteups.com/methods-to-bypass-403-401-38df4cec069e?source=rss------bug_bounty-5 | Dishant Modi | penetration-testing, cybersecurity, bug-bounty-tips, bug-bounty, hacking | 23-Nov-2024 |
| How I Discovered an Email Change Vulnerability Leading to Pre-Account Takeover | p2 | https://medium.com/@dhananjay_00/how-i-discovered-an-email-change-vulnerability-leading-to-pre-account-takeover-p2-7e76e0002eef?source=rss------bug_bounty-5 | Dhananjay Pathak | bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty, hacking | 23-Nov-2024 |
| Why I Switched from Cloud to Local Password Management | https://expectme.medium.com/why-i-switched-from-cloud-to-local-password-management-2b79448495dc?source=rss------bug_bounty-5 | Mamoud Eid | bug-bounty, privacy, cybersecurity | 23-Nov-2024 |
| Bug Bounty Beginner’s Roadmap-02 | https://medium.com/@sheikh.mohammad.adil.71/bug-bounty-beginners-roadmap-02-3236f15df715?source=rss------bug_bounty-5 | SHEIKH MOHAMMAD ADIL | roadmaps, ethical-hacking, bounty-program, bug-bounty | 23-Nov-2024 |
| My OSWA Experience | https://medium.com/@zumyumi/my-oswa-experience-eaa4e94d1797?source=rss------bug_bounty-5 | Zumi Yumi | oswe, oscp, web, oswa, bug-bounty | 23-Nov-2024 |
| ️♂️ Bug Bounty Beginner’s Roadmap-01 | https://medium.com/@sheikh.mohammad.adil.71/%EF%B8%8F-%EF%B8%8F-ultimate-bug-bounty-roadmap-ee81e805ad6b?source=rss------bug_bounty-5 | SHEIKH MOHAMMAD ADIL | bug-bounty, ethical-hacking, hackerone, cybersecurity, roadmaps | 23-Nov-2024 |
| File path traversal, validation of file extension with null byte bypass | https://medium.com/@Laxious8848/file-path-traversal-validation-of-file-extension-with-null-byte-bypass-6625f4a4fbec?source=rss------bug_bounty-5 | Laxious | web-penetration-testing, lfi, lfi-vulnerability, bug-bounty, web-pen-testing | 22-Nov-2024 |
| File path traversal, validation of start of path | https://medium.com/@Laxious8848/file-path-traversal-validation-of-start-of-path-063e8995a55d?source=rss------bug_bounty-5 | Laxious | lfi, web-penetration-testing, web-pen-testing, lfi-vulnerability, bug-bounty | 22-Nov-2024 |
| Ghost Tap Exploits NFC Payments for Fraud | https://medium.com/@wiretor/ghost-tap-exploits-nfc-payments-for-fraud-dc2a263ff603?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ransomware, hacking, programming, bug-bounty | 22-Nov-2024 |
| Oracle Agile PLM Vulnerability Exploited in the Wild: Protect Your Data! | https://medium.com/@wiretor/oracle-agile-plm-vulnerability-exploited-in-the-wild-protect-your-data-129f8d9ac922?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, ransomware, malware, pentest, hacking | 22-Nov-2024 |
| File path traversal, traversal sequences stripped with superfluous URL-decode | https://medium.com/@Laxious8848/file-path-traversal-traversal-sequences-stripped-with-superfluous-url-decode-0b303cfe5b69?source=rss------bug_bounty-5 | Laxious | web-penetration-testing, web-pen-testing, bug-bounty, lfi-vulnerability, lfi | 22-Nov-2024 |
| Resolving the “externally-managed-environment” Error in Python | https://medium.com/@prathameshbagul/resolving-the-externally-managed-environment-error-in-python-b91650d45946?source=rss------bug_bounty-5 | Prath | bug-bounty, python, pentesting, kali-linux, cybersecurity | 22-Nov-2024 |
| ShodanSpider: A Powerful Tool for Cybersecurity Research | https://shubhamrooter.medium.com/shodanspider-a-powerful-tool-for-cybersecurity-research-02eac3ed75e2?source=rss------bug_bounty-5 | Shubham Tiwari | bug-bounty, security-analytics, vapt, shodan, bug-hunting | 22-Nov-2024 |
| My Journey Finding Bugs on NASA | https://cybersecuritywriteups.com/my-journey-finding-bugs-on-nasa-a2296d142b0a?source=rss------bug_bounty-5 | Shridhar Rajaput | bug-bounty-writeup, inspiration, cybersecurity, bug-bounty, information-technology | 22-Nov-2024 |
| Why Bug Bounty Could Be a Career for You 🙂 | https://osintteam.blog/why-bug-bounty-could-be-a-career-for-you-17b6b7b66e16?source=rss------bug_bounty-5 | Satyam Pathania | money, technology, cybersecurity, bug-bounty, infosec | 22-Nov-2024 |
| Unveiling a Critical Bug in One of the World’s Largest Banks: My Barclays Story | https://cybersecuritywriteups.com/unveiling-a-critical-bug-in-one-of-the-worlds-largest-banks-my-barclays-story-34a9fb5f5140?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | bug-bounty-tips, bug-bounty, cybersecurity, bug-bounty-writeup, ethical-hacking | 22-Nov-2024 |
| The $900 Bug: My Journey Through SSRF and LFI Exploits | https://myselfakash20.medium.com/the-900-bug-my-journey-through-ssrf-and-lfi-exploits-222feb276deb?source=rss------bug_bounty-5 | Akash Ghosh | programming, technology, cybersecurity, hacking, bug-bounty | 22-Nov-2024 |
| IDOR Checklist 2025 | https://medium.com/@mohanad9837/idor-checklist-2025-443575a389d4?source=rss------bug_bounty-5 | mohaned | idor, bug-bounty, idor-vulnerability | 22-Nov-2024 |
| Finding and Exploiting open SMB service [bug bounty write-up]. | https://medium.com/@sugamdangal52/finding-and-exploiting-open-smb-service-bug-bounty-write-up-492d72cd2fa3?source=rss------bug_bounty-5 | Sugam Dangal | ethical-hacking, bug-bounty, bug-hunting, hacking, bug-bounty-writeup | 22-Nov-2024 |
| Forbidden Bypass Cloudflare Zero Trust — English Version | https://medium.com/@j0hnZ3RA/forbidden-bypass-cloudflare-zero-trust-english-version-436efff4a548?source=rss------bug_bounty-5 | j0hnZ3RA | bug-bounty, red-team, pentesting, security | 22-Nov-2024 |
| Forbidden Bypass Cloudflare Zero Trust | https://medium.com/@j0hnZ3RA/forbidden-bypass-cloudflare-zero-trust-6bcc7ad464ee?source=rss------bug_bounty-5 | j0hnZ3RA | security, pentesting, bypass, red-team, bug-bounty | 22-Nov-2024 |
| They Ignored My Bug Report but Fixed It Silently: My Experience with Enhancv | https://medium.com/@0xw01f/they-ignored-my-bug-report-but-fixed-it-silently-my-experience-with-enhancv-a8ffe5e3e790?source=rss------bug_bounty-5 | w01f | cybersecurity, bug-bounty, vulnerability, responsibility, ethics | 22-Nov-2024 |
| HTML encode ilə XSS və HTML İnjection hücumlarının qarşısının alınması | https://medium.com/@rootelvin/html-encode-il%C9%99-xss-v%C9%99-html-i%CC%87njection-h%C3%BCcumlar%C4%B1n%C4%B1n-qar%C5%9F%C4%B1s%C4%B1n%C4%B1n-al%C4%B1nmas%C4%B1-01e21dfe11b5?source=rss------bug_bounty-5 | Elvin Nuruyev | appsec-testing, web-pentesting, cyber-security-solutions, secure-coding, bug-bounty | 22-Nov-2024 |
| captainX404 | https://medium.com/@captainX404/captainx404-b41a7f1e3ff3?source=rss------bug_bounty-5 | captainX404 | bug-bounty | 22-Nov-2024 |
| Reconnaissance on archive URLs | https://medium.com/@mayank_prajapati/reconnaissance-on-archive-urls-4125ce7544ed?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | bug-bounty-tips, cybersecurity, bugs, bug-bounty, hacking | 22-Nov-2024 |
| HTML encode ilə XSS və HTML İnjection hücumlarının qarşısının alınması | https://elvinnuruyev.medium.com/html-encode-il%C9%99-xss-v%C9%99-html-i%CC%87njection-h%C3%BCcumlar%C4%B1n%C4%B1n-qar%C5%9F%C4%B1s%C4%B1n%C4%B1n-al%C4%B1nmas%C4%B1-01e21dfe11b5?source=rss------bug_bounty-5 | Elvin Nuruyev | appsec-testing, web-pentesting, cyber-security-solutions, secure-coding, bug-bounty | 22-Nov-2024 |
| Cloud Hacking : flaws.cloud level 1 walkthrough | https://medium.com/@Kinqdathacker/cloud-hacking-flaws-cloud-level-1-walkthrough-9f966da07e82?source=rss------bug_bounty-5 | Kinqdathacker | ctf-writeup, cloud-security, bug-bounty, s3-bucket, hacking | 22-Nov-2024 |
| How i finded a p4 as per bugcrowd. | https://osintteam.blog/how-i-finded-a-p4-as-per-bugcrowd-c7c72718583a?source=rss------bug_bounty-5 | loyalonlytoday | hacking, tips, bugs, bug-bounty, cybersecurity | 21-Nov-2024 |
| Master My Skill Student got highest bounty of $5000 by Vikrant Sharma | https://medium.com/@mastermyskill/master-my-skill-student-got-highest-bounty-of-5000-by-vikrant-sharma-287a9b46522e?source=rss------bug_bounty-5 | Master My Skill | bug-bounty | 21-Nov-2024 |
| Unlock the $4 Million Bounty: Join Microsoft’s Zero Day Quest! | https://byteshiva.medium.com/unlock-the-4-million-bounty-join-microsofts-zero-day-quest-87c6e50c1010?source=rss------bug_bounty-5 | Siva | infosec, cybersecurity, microsoftzerodayquest, hacking, bug-bounty | 21-Nov-2024 |
| Unique XSS Earned Me a $$$ Bounty | https://wgetkb.medium.com/unique-xss-earned-me-a-bounty-b7156c36fd32?source=rss------bug_bounty-5 | Prasad KB | bounty-program, xss-vulnerability, infosec, bug-bounty, security | 21-Nov-2024 |
| Insecure direct object references | https://medium.com/@Laxious8848/insecure-direct-object-references-2ce01fa76018?source=rss------bug_bounty-5 | Laxious | web-pen-testing, idor, idor-vulnerability, webapplicationpentest, bug-bounty | 21-Nov-2024 |
| HTB — Learn the basics of Penetration Testing: Meow | https://medium.com/@febrywiji12/htb-learn-the-basics-of-penetration-testing-meow-6158f97c3c6e?source=rss------bug_bounty-5 | Sheperd01 | telnet, hackthebox, ctf, bug-bounty, tutorial | 21-Nov-2024 |
| How to Find Open Redirect Vulnerabilities: A Comprehensive Guide | https://medium.com/@rupaitanudas/how-to-find-open-redirect-vulnerabilities-a-comprehensive-guide-e2b6e8c965c6?source=rss------bug_bounty-5 | Rupaitanudas | open-redirect, bug-bounty, web-application-security | 21-Nov-2024 |
| BugBoard: The Ultimate Dashboard for Bug Hunters | https://medium.com/@abhinavsingwal/bugboard-the-ultimate-dashboard-for-bug-hunters-1fc7177117bb?source=rss------bug_bounty-5 | Abhinavsingwal | bug-bounty, hacking, hacker, bugboard, hacking-tools | 21-Nov-2024 |
| Introduction to CORS-Cross-origin resource sharing & SOP-Same Origin Policy, CORS series (Part 1) | https://medium.com/@vipulparveenjain/introduction-to-cors-cross-origin-resource-sharing-sop-same-origin-policy-cors-series-part-1-149ad6f77cf6?source=rss------bug_bounty-5 | Vipul Jain | hacking, bug-bounty, web-security-testing, cors-vulnerability, cross-origin-resource | 21-Nov-2024 |
| Antivirus Evasion for Beginners: A Step-by-Step Guide to Bypassing AV for Penetration Testers | https://medium.com/@verylazytech/antivirus-evasion-for-beginners-a-step-by-step-guide-to-bypassing-av-for-penetration-testers-e600de35be20?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, bug-bounty, antivirus-evasion, bypassing-av, hacking | 21-Nov-2024 |
| How I Hacked a Website While Dancing | https://medium.com/@shaikhminhaz1975/how-i-hacked-a-website-while-dancing-22c3e1cd3431?source=rss------bug_bounty-5 | Shaikh Minhaz | hacking, cybersecurity, how-to, ethical-hacking, bug-bounty | 21-Nov-2024 |
| BugBoard: The Ultimate Dashboard for Bug Hunters | https://medium.com/@abhinavsingwal/bugboard-the-ultimate-dashboard-for-bug-hunters-1fc7177117bb?source=rss------bug_bounty-5 | Abhinav Singwal | bug-bounty, hacking, hacker, bugboard, hacking-tools | 21-Nov-2024 |
| Bypass Email Verification in Mozilla | https://0d-amr.medium.com/bypass-email-verification-in-mozilla-2ab45ac36c42?source=rss------bug_bounty-5 | Amr | bug-bounty-tips, cybersecurity, ethical-hacking, penetration-testing, bug-bounty | 21-Nov-2024 |
| Mastering Web Application Pentesting with TryhackMe | https://infosecwriteups.com/mastering-web-application-pentesting-with-tryhackme-24257ef182c5?source=rss------bug_bounty-5 | Mukilan Baskaran | tryhackme, cybersecurity, bug-bounty, tryhackme-walkthrough, infosec | 21-Nov-2024 |
| PART 2: THE NEXT CHAPTER IN MY NASA BUG HUNTING JOURNEY | https://rootxabit.medium.com/part-2-the-next-chapter-in-my-nasa-bug-hunting-journey-1d6338c5f017?source=rss------bug_bounty-5 | sudo-xabit | hacking-nasa, bug-bounty, india, tips, nasa | 21-Nov-2024 |
| File path traversal, simple case | https://medium.com/@Laxious8848/file-path-traversal-simple-case-d0dd8c493981?source=rss------bug_bounty-5 | Laxious | lfi, webapplicationpentest, lfi-vulnerability, bug-bounty, web-pen-testing | 21-Nov-2024 |
| File path traversal, traversal sequences stripped non-recursively | https://medium.com/@Laxious8848/file-path-traversal-traversal-sequences-stripped-non-recursively-647780ace38e?source=rss------bug_bounty-5 | Laxious | web-penetration-testing, web-pen-testing, lfi, bug-bounty, lfi-vulnerability | 21-Nov-2024 |
| File path traversal, traversal sequences blocked with absolute path bypass | https://medium.com/@Laxious8848/file-path-traversal-traversal-sequences-blocked-with-absolute-path-bypass-b909ad161fa2?source=rss------bug_bounty-5 | Laxious | bug-bounty, web-pentesting, web-penetration-testing, lfi-vulnerability, lfi | 21-Nov-2024 |
| HTB — Learn the basics of Penetration Testing: Meow | https://medium.com/@febrywiji/htb-learn-the-basics-of-penetration-testing-meow-6158f97c3c6e?source=rss------bug_bounty-5 | Sheperd01 | telnet, hackthebox, ctf, bug-bounty, tutorial | 21-Nov-2024 |
| Worth 10000$ Cracking the Price Barrier: Exploiting Price Tampering on an E-Commerce Website | https://medium.com/@kumawatabhijeet2002/worth-10000-cracking-the-price-barrier-exploiting-price-tampering-on-an-e-commerce-website-19e3f82f52aa?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bugs | 20-Nov-2024 |
| How I was able to Take over a Subdomain and got Hall of Fame | https://rivudon.medium.com/how-i-was-able-to-take-over-a-subdomain-and-got-hall-of-fame-aca4aaca761b?source=rss------bug_bounty-5 | Rivek Raj Tamang ( RivuDon ) | subdomain-takeover, ethical-hacking, bug-bounty-tips, bug-hunting, bug-bounty | 20-Nov-2024 |
| Web vulnerability bounty rules update | https://medium.com/@security.tecno/web-vulnerability-bounty-rules-update-20bcf6f6e3da?source=rss------bug_bounty-5 | TECNO Security | hacking, web, security, bug-bounty | 20-Nov-2024 |
| Bypassing Password Reuse Restriction A Security Flaw. | https://aman0.medium.com/bypassing-password-reuse-restriction-a-security-flaw-1bf2210d9bbd?source=rss------bug_bounty-5 | Aman H | bug-bounty-writeup, vulnerability, information-security, penetration-testing, bug-bounty | 20-Nov-2024 |
| The $2,200 ATO Most Bug Hunters Overlooked by Closing Intruder Too Soon | https://mokhansec.medium.com/the-2-200-ato-most-bug-hunters-overlooked-by-closing-intruder-too-soon-505f21d56732?source=rss------bug_bounty-5 | Mohsin khan | cybersecurity, bug-bounty, bug-bounty-writeup, bugs, bug-bounty-tips | 20-Nov-2024 |
| Reflected Cross-Site Scripting (XSS) via POST request: | https://ak-rizk.medium.com/reflected-cross-site-scripting-xss-via-post-request-f0d54ee84f99?source=rss------bug_bounty-5 | A-RIZK | xss-attack, web-hacking, pentesting, bug-bounty | 20-Nov-2024 |
| How Hidden 3xXSS got revealed | https://medium.com/@0xbugatti/how-hidden-3xxss-got-revealed-b42f041d36f6?source=rss------bug_bounty-5 | 0xbugatti | bug-bounty, bug-bounty-writeup, web-app-security, web-app-pentesting, bug-bounty-tips | 20-Nov-2024 |
| How I Earned $650 Using Just Recon: A Bug Hunter’s Success Story | https://myselfakash20.medium.com/how-i-earned-650-using-just-recon-a-bug-hunters-success-story-4d78788e46a5?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, programming, penetration-testing, cybersecurity, technology | 20-Nov-2024 |
| Swiss Army Knife of Top Bug Hunters | https://bitpanic.medium.com/swiss-army-knife-of-top-bug-hunters-dd1bf237c513?source=rss------bug_bounty-5 | Spectat0rguy | information-security, bug-bounty-tips, cybersecurity, cyber-security-awareness, bug-bounty | 20-Nov-2024 |
| Honey, did you leave the APIs open again? | https://medium.com/@l_s_/honey-you-left-the-apis-open-again-c382a3a2d917?source=rss------bug_bounty-5 | LS | hacking, api, bug-bounty, cybersecurity, bug-bounty-writeup | 20-Nov-2024 |
| Introduction to Bug Bounty | https://medium.com/@hakoje3813/introduction-to-bug-bounty-5461825079ad?source=rss------bug_bounty-5 | Hacker | aidp, bug-bounty | 20-Nov-2024 |
| How to Start in the Masochistic World of Bug Bounty — what nobody told you before. | https://j0nasdias.medium.com/how-to-start-in-the-masochistic-world-of-bug-bounty-what-nobody-told-you-before-22b789933cdd?source=rss------bug_bounty-5 | Jonas Dias Rebelo | intigriti, hackerone, xs, pentest, bug-bounty | 20-Nov-2024 |
| GhostFilter: Automating URL Filtering for Smarter Bug Hunting | https://osintteam.blog/ghostfilter-automating-url-filtering-for-smarter-bug-hunting-d779d8fc844f?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | hacking, bug-bounty-tips, bug-bounty, ctf, cybersecurity | 20-Nov-2024 |
| Importance of Shodan in Bug Hunting: Your Ultimate Guide to Finding Hidden Gems | https://osintteam.blog/importance-of-shodan-in-bug-hunting-your-ultimate-guide-to-finding-hidden-gems-45cf87201d11?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity, infosec | 19-Nov-2024 |
| Finding subdomains those are hidden in cloud. | https://osintteam.blog/finding-subdomains-those-are-hidden-in-cloud-f0c13d3d80ea?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, bugs, tips, cybersecurity, hacking | 19-Nov-2024 |
| 【Vulnerability Campaign】Earn Your Thanksgiving Bonus Rebate | https://medium.com/@security.tecno/vulnerability-campaign-earn-your-thanksgiving-bonus-rebate-95847ac8b144?source=rss------bug_bounty-5 | TECNO Security | hacking, security, bonus, bug-bounty | 19-Nov-2024 |
| OTP Bypass — Weak brute-force protection | https://medium.com/@Jitheshjithu/otp-bypass-weak-brute-force-protection-42c3f6b7899d?source=rss------bug_bounty-5 | Jithesh | bug-bounty-tips, brute-force, bug-bounty, otp-bypass, burpsuite | 19-Nov-2024 |
| How a CSRF Vulnerability Can Be Exploited to Target Email Accounts — A Practical Walkthrough | https://medium.com/@muhammedgalal66/how-a-csrf-vulnerability-can-be-exploited-to-target-email-accounts-a-practical-walkthrough-60e6c2eac31f?source=rss------bug_bounty-5 | Dg0x6 | bug-bounty, bounty-program, bug-hunting, csrf, hunting | 19-Nov-2024 |
| The Easiest $$$ I Made from a Business Logic Vulnerability | https://medium.com/@0xsussy/the-easiest-i-made-from-a-business-logic-vulnerability-5c11a31ca455?source=rss------bug_bounty-5 | Hamza Khaled | bugbounty-writeup, bugbounty-poc, bug-bounty, bugbounty-tips | 19-Nov-2024 |
| Enumeração de subdomínios através da homepage | https://medium.com/@sarkis093/enumera%C3%A7%C3%A3o-de-subdom%C3%ADnios-atrav%C3%A9s-da-homepage-971d7aa341bf?source=rss------bug_bounty-5 | sarkis093 | shell, pentesting, red-team, osint, bug-bounty | 19-Nov-2024 |
| From User to Admin: The Art of Privilege Escalation | https://bootcampsecurity.medium.com/from-user-to-admin-the-art-of-privilege-escalation-b80a4cd1e89b?source=rss------bug_bounty-5 | Garv Kataria | cybersecurity, privilege-escalation, ethical-hacking, bug-bounty-tips, bug-bounty | 19-Nov-2024 |
| Common Security Risks in Browser Extensions | https://medium.com/@Parag_Bagul/common-security-risks-in-browser-extensions-e61422499f7c?source=rss------bug_bounty-5 | ParagBagul | browser-extension, web-browser-extension, cybersecurity, bug-bounty, extension-development | 19-Nov-2024 |
| Exploiting Business Logic Flaws in e-commerce platforms | https://medium.com/@Pentestforge/exploiting-business-logic-flaws-in-e-commerce-platforms-c3042a240c4a?source=rss------bug_bounty-5 | Joel I Patrick | ethical-hacking, bug-bounty, cybersecurity, web-exploitation, hacking | 19-Nov-2024 |
| Unlock Bug Bounty Brilliance: The Ultimate Guide to Browser Extensions That Supercharge Your… | https://osintteam.blog/unlock-bug-bounty-brilliance-the-ultimate-guide-to-browser-extensions-that-supercharge-your-fbb323e29dc0?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, bug-bounty-tips, extension, bug-bounty-writeup, cybersecurity | 19-Nov-2024 |
| Critical Remote Code Execution (RCE) Bug in VMware vCenter Server Now Exploited in Active… | https://medium.com/@wiretor/critical-remote-code-execution-rce-bug-in-vmware-vcenter-server-now-exploited-in-active-a03c8fe37d02?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | programming, hacking, pentesting, bug-bounty, malware | 19-Nov-2024 |
| Maxar Data Breach: U.S. Space Tech Giant Compromised | https://medium.com/@wiretor/maxar-data-breach-u-s-space-tech-giant-compromised-391640982117?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, pentest, programming, malware, bug-bounty | 19-Nov-2024 |
| Chinese Hackers Exploit Fortinet VPN Zero-Day to Steal Credentials | https://medium.com/@wiretor/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials-b10232aaabef?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, hacking, bug-bounty, progamming, malware | 19-Nov-2024 |
| How I Uncovered an Unsubscribe Exploit While Checking My Internship Applications | https://expl0it32.medium.com/how-i-uncovered-an-unsubscribe-exploit-while-checking-my-internship-applications-9661aacad8f9?source=rss------bug_bounty-5 | eXpl0it_32 | hacking, cybersecurity, idor, bug-report, bug-bounty | 19-Nov-2024 |
| HOW I FOUND A BUG IN NASA | https://rootxabit.medium.com/how-i-found-a-bug-in-nasa-f76800eaf3b9?source=rss------bug_bounty-5 | sudo-xabit | bug-bounty, hacking, hall-of-fame, nasa, vdp | 19-Nov-2024 |
| Bug bounty hunting : Profitable Pursuit or Time Trap? | https://medium.com/@Arsenelupin12/bug-bounty-hunting-profitable-pursuit-or-time-trap-a99ecb11358f?source=rss------bug_bounty-5 | Lupin | bug-bounty, bug-bounty-tips, hackthebox, cybersecurity, hacking | 19-Nov-2024 |
| SQL injection vulnerability in where clause allowing retrieval of hidden data | https://medium.com/@Laxious8848/sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data-c6ca0c949382?source=rss------bug_bounty-5 | Laxious | penetration-testing, bug-bounty, webapplicationpentest, error-based-sql-injection, sql-injection | 19-Nov-2024 |
| BUG BOUNTY HUNTING | https://medium.com/@muazutopclass/bug-bounty-hunting-0536a314d4e4?source=rss------bug_bounty-5 | Mu'azu S. Ahmed | cybersecurity, money, bug-bounty, techie-delight, freelancing | 19-Nov-2024 |
| Easy admin Access By Gaming with JSON | https://medium.com/@0xbugatti/easy-admin-access-by-gaming-with-json-5ec5313e2236?source=rss------bug_bounty-5 | 0xbugatti | bug-bounty, web-security, penetration-testing, bug-bounty-tips, bug-bounty-writeup | 19-Nov-2024 |
| Bug bounty hunting : Profitable Pursuit or Time Trap? | https://medium.com/@Arsenelupin12/bug-bounty-hunting-profitable-pursuit-or-time-trap-a99ecb11358f?source=rss------bug_bounty-5 | Wasted Resources | bug-bounty, bug-bounty-tips, hackthebox, cybersecurity, hacking | 19-Nov-2024 |
| Hackers’ Cache Hotlist | https://medium.com/h7w/hackers-cache-hotlist-5649742c35b1?source=rss------bug_bounty-5 | Lukasz Wierzbicki | bug-bounty, pentesting, hacking, articles, security | 18-Nov-2024 |
| How SubDomainRadar.io Simplifies Your Recon Workflow | https://medium.com/@alexandrevandammepro/how-subdomainradar-io-simplifies-your-recon-workflow-173e4061ceb3?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, cyberattack, bug-bounty, hacking, cybersecurity | 18-Nov-2024 |
| File Upload - Upload. Intercept. Exploit. | https://p4n7h3rx.medium.com/file-upload-upload-intercept-exploit-b5aa18cb8e9d?source=rss------bug_bounty-5 | p4n7h3rx | bug-bounty, pentesting, pentest, bug-bounty-tips, hacking | 18-Nov-2024 |
| BioCorp CTF | https://ghostman01.medium.com/biocorp-ctf-99a072260842?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | ctf, web-hacking, bug-bounty, cybersecurity, hacking | 18-Nov-2024 |
| M4 — Insufficient Input/Output Validation | https://medium.com/@tamires.scruz/m4-insufficient-input-output-validation-fccc6cfc2561?source=rss------bug_bounty-5 | Tamy Angel | cybersecurity, android, pentesting, bug-bounty, vulnerability | 18-Nov-2024 |
| From Novice to Pro: My Journey to Earning Through Bug Bounty Hunting | https://myselfakash20.medium.com/from-novice-to-pro-my-journey-to-earning-through-bug-bounty-hunting-3f123d19c39a?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, ethical-hacking, bug-bounty, cybersecurity, bug-bounty-tips | 18-Nov-2024 |
| Automating XXE Exploitation: A Write-Up on Intigriti CTF 2024 BioCorp Challenge | https://osintteam.blog/biocorp-ctf-99a072260842?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | ctf, web-hacking, bug-bounty, cybersecurity, hacking | 18-Nov-2024 |
| How I Hacked an Entire Company’s IT Infrastructure by Uncovering a Critical Bug Through Effective… | https://medium.com/@0xbedo/how-i-hacked-an-entire-companys-it-infrastructure-by-uncovering-a-critical-bug-through-effective-8322d4d763a8?source=rss------bug_bounty-5 | 0xbedo | bug-bounty, aem, pentesting, cybersecurity, security | 18-Nov-2024 |
| Top 9 Books on Cyber Security | https://medium.com/@bicitrobiswas/top-9-books-on-cyber-security-e3984ec1e48b?source=rss------bug_bounty-5 | Bicitro Biswas | cybersecurity, hacking, programming, bug-bounty, students | 18-Nov-2024 |
| How I Found an IDOR Vulnerability in a Local News App and What You Can Learn From It | https://medium.com/@sulmanfarooq531/how-i-found-an-idor-vulnerability-in-a-local-news-app-and-what-you-can-learn-from-it-0b02a2ab91d5?source=rss------bug_bounty-5 | Sulman Farooq S | cybersecurity, bug-bounty, idor-vulnerability, idor | 18-Nov-2024 |
| How to Use Proxy for Bug Hunting | https://medium.com/@Progsky/how-to-use-proxy-for-bug-hunting-64e08cb33cc1?source=rss------bug_bounty-5 | Progsky | bug-hunting, ethical-hacking, ethical-hacking-tools, bug-bounty, cybersecurity | 18-Nov-2024 |
| AI vs. Human: Why Bug Bounty Hunting Still Needs Human Intuition | https://pointlessai.medium.com/ai-vs-human-why-bug-bounty-hunting-still-needs-human-intuition-40b6e023c184?source=rss------bug_bounty-5 | PointlessAI | bug-bounty-tips, ai, bug-bounty, chatgpt, vulnerability-management | 18-Nov-2024 |
| Data Breaches Demand Proactive Security: AnnieMac Hack Impacts 171,000 Individuals ️ | https://medium.com/@wiretor/data-breaches-demand-proactive-security-anniemac-hack-impacts-171-000-individuals-%EF%B8%8F-27a46bece7d2?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | anniemac-hacked, bug-bounty, data-breach, programming, hacked | 18-Nov-2024 |
| Phishing Emails Using SVG Attachments: A Growing Threat | https://medium.com/@wiretor/phishing-emails-using-svg-attachments-a-growing-threat-c531fe9d3806?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, phising, hacking, email | 18-Nov-2024 |
| How to Start a Career in Cybersecurity: A Step-by-Step Guide for Beginners | https://medium.com/@griffin_dev.il/how-to-start-a-career-in-cybersecurity-a-step-by-step-guide-for-beginners-77a5457aa6e7?source=rss------bug_bounty-5 | GriFfin_Dev.iL | ethical-hacking, cybersecurity, cyber-security-awareness, bug-bounty, careers | 18-Nov-2024 |
| B-Hunters | https://medium.com/@ebraamemil/b-hunters-a5b53aa9df42?source=rss------bug_bounty-5 | Ebraam Emil | bug-bounty-tips, framework, bug-bounty | 18-Nov-2024 |
| 2FA simple bypass | https://medium.com/@kcaaditya976/2fa-simple-bypass-1eb82080b914?source=rss------bug_bounty-5 | Laxious | bug-bounty, web-application-security, web-penetration-testing, mfa-bypass, web-pentesting | 18-Nov-2024 |
| CTF Walkthrough: Grayboard | https://medium.com/@nehalrajesh10/ctf-walkthrough-grayboard-c5955fff6410?source=rss------bug_bounty-5 | Nehal Pillai | ctf, bug-bounty, ctf-walkthrough | 18-Nov-2024 |
| Breaking into Bug Bounties: A Guide to Hunting Business Logic and BAC Vulnerabilities in B2B… | https://thexssrat.medium.com/breaking-into-bug-bounties-a-guide-to-hunting-business-logic-and-bac-vulnerabilities-in-b2b-58a8f4a89711?source=rss------bug_bounty-5 | Thexssrat | idor-vulnerability, penetration-testing, bug-bounty, hacking, hacker | 18-Nov-2024 |
| 2FA simple bypass | https://medium.com/@Laxious8848/2fa-simple-bypass-1eb82080b914?source=rss------bug_bounty-5 | Laxious | bug-bounty, web-application-security, web-penetration-testing, mfa-bypass, web-pentesting | 18-Nov-2024 |
| Vietnamese Hackers Unleash PXA Stealer: Targeting Sensitive Data Across Europe and Asia | https://medium.com/@wiretor/vietnamese-hackers-unleash-pxa-stealer-targeting-sensitive-data-across-europe-and-asia-2d0723c11ff1?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ransomeware, xss-attack, hacking, bug-bounty | 17-Nov-2024 |
| DEEPDATA Malware Exploits Fortinet Flaw to Steal VPN Credentials | https://medium.com/@wiretor/deepdata-malware-exploits-fortinet-flaw-to-steal-vpn-credentials-2605280c2e8c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomeware, xss-attack, bug-bounty, hacking, malware | 17-Nov-2024 |
| Botnet Exploits GeoVision Zero-Day to Install Mirai Malware | https://medium.com/@wiretor/botnet-exploits-geovision-zero-day-to-install-mirai-malware-98ce1622dc21?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, bug-bounty, usa, malware, hacking | 17-Nov-2024 |
| Comprehensive Guide to Exploitation Techniques for Bug Bounty Hunters: From Beginner to Advanced | https://myselfakash20.medium.com/comprehensive-guide-to-exploitation-techniques-for-bug-bounty-hunters-from-beginner-to-advanced-b32001326b9e?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, exploitation, bug-bounty-tips, cybersecurity, bug-bounty | 17-Nov-2024 |
| The $300 Journey from RFI to RCE that Changed Everything | https://medium.com/@dhabaleshward/the-300-journey-from-rfi-to-rce-that-changed-everything-2b4c00c05da0?source=rss------bug_bounty-5 | Dhabaleshwar Das | penetration-testing, bug-bounty, vulnerability, ethical-hacking, cybersecurity | 17-Nov-2024 |
| How I Found open-redirect vulnerability using virus total? | https://doordiefordream.medium.com/how-i-found-open-redirect-using-virus-total-460d721b9596?source=rss------bug_bounty-5 | balu bandi | bug-bounty-tips, ethical-hacking, bug-bounty, cybersecurity, vulnerability | 17-Nov-2024 |
| Week 2: Hard Work Transforms into a 5-Digit Payday | https://mokhansec.medium.com/week-2-hard-work-transforms-into-a-5-digit-payday-8087819bccd9?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-tips, bugs, cybersecurity, bug-bounty, bug-bounty-writeup | 17-Nov-2024 |
| Exposing Open Redirect Vulnerabilities: JavaScript File Analysis in HTTP History Burp Suite | https://medium.com/@gheeX/exposing-open-redirect-vulnerabilities-javascript-file-analysis-in-http-history-burp-suite-c64bd1c93c54?source=rss------bug_bounty-5 | Ghee1337 | bug-bounty-writeup, javascript, vulnerability, bug-bounty-tips, bug-bounty | 17-Nov-2024 |
| XSS in Registration Form: A Bug Bounty Success | https://medium.com/@ziadsakr/xss-in-registration-form-a-bug-bounty-success-6fb9450b0e66?source=rss------bug_bounty-5 | Ziad Sakr | xss-bypass, xss-vulnerability, bug-bounty, xss-attack, firewall | 17-Nov-2024 |
| 8 Advanced Techniques For Novice Bug Bounty Hunters | https://bitpanic.medium.com/8-advanced-techniques-for-novice-bug-bounty-hunters-ab6110185e55?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, information-security, cyber-security-awareness, bug-bounty, bug-bounty-tips | 17-Nov-2024 |
| SQL injection vulnerability allowing login bypass | https://medium.com/@kcaaditya976/sql-injection-vulnerability-allowing-login-bypass-1e9f7bd45adf?source=rss------bug_bounty-5 | Laxious | sql, web-penetration-testing, web-pentesting, bug-bounty, sql-injection | 17-Nov-2024 |
| Bug bounty Cheatsheet | https://medium.com/@shardulsawant67/bug-bounty-cheatsheet-b87d3250bc2e?source=rss------bug_bounty-5 | Shardul Sawant | bug-bounty, bug-bounty-cheatsheet, web-penetration-testing, hacking, website-hacking | 17-Nov-2024 |
| API Hacktics: Unveiling Vulnerabilities in Modern Web APIs | https://myselfakash20.medium.com/api-hacktics-unveiling-vulnerabilities-in-modern-web-apis-e41cc09a2b9d?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bugs, bug-bounty | 17-Nov-2024 |
| How to Find P4 Vulnerabilities and Information Disclosure Bugs | Step-by-Step Guide to All Key… | https://medium.com/@shaikhminhaz1975/how-to-find-p4-vulnerabilities-and-information-disclosure-bugs-step-by-step-guide-to-all-key-6ba8fc84c882?source=rss------bug_bounty-5 | Shaikh Minhaz | penetration-testing, how-to-find-bug, information-disclosure, ethical-hacking, bug-bounty | 17-Nov-2024 |
| Hunting for Default Credentials: A Deeper Dive into the Toolkit | https://medium.com/@defaulty.io/hunting-for-default-credentials-a-deeper-dive-into-the-toolkit-2b3edde86f01?source=rss------bug_bounty-5 | Defaulty.io | cybersecurity, information-security, hacking, bug-bounty, penetration-testing | 17-Nov-2024 |
| FB OAuth Misconfiguration | https://xsametyigit.medium.com/fb-oauth-misconfiguration-d6c2f5d067d8?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, bug-bounty-tips, bug-bounty | 17-Nov-2024 |
| OWASP Top 10–2021 Tryhackme Writeup | https://infosecwriteups.com/owasp-top-10-2021-tryhackme-writeup-56f2a04c895e?source=rss------bug_bounty-5 | Mukilan Baskaran | cybersecurity, bug-bounty, infosec, information-security, web-security | 17-Nov-2024 |
| DOM XSS in document.write sink using source location.search | https://medium.com/@kcaaditya976/dom-xss-in-document-write-sink-using-source-location-search-cc0ba7b461c2?source=rss------bug_bounty-5 | Laxious | xss-attack, web-pen-testing, dom-xss, bug-bounty, xss-vulnerability | 17-Nov-2024 |
| Who needs credentials, when you have the phone number…? | https://medium.com/@thelazypentester/who-needs-credentials-when-you-have-the-phone-number-fc0c8f51b87e?source=rss------bug_bounty-5 | Jobson | idor, bug-bounty, hacking, cybersecurity, sensitive-information | 17-Nov-2024 |
| API Hacktics: Unveiling Vulnerabilities in Modern Web APIs | https://osintteam.blog/api-hacktics-unveiling-vulnerabilities-in-modern-web-apis-e41cc09a2b9d?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bugs, bug-bounty | 17-Nov-2024 |
| Lemons: A Bug Bounty Analogy | https://medium.com/@lixipluv/lemons-a-bug-bounty-analogy-ef427f514b2a?source=rss------bug_bounty-5 | Lixipluv | lemon, introduction, bug-bounty | 16-Nov-2024 |
| Race condition — can cause a flood of forgotten password verification SMS requests | https://medium.com/@viperblitzz/race-condition-can-cause-a-flood-of-forgotten-password-verification-sms-requests-1775a375653d?source=rss------bug_bounty-5 | Viperblitzz | bug-bounty-tips, bug-hunting, bug-bounty | 16-Nov-2024 |
| Chaining CSRF and an Open-Redirect leads to sensitive information disclosure | https://medium.com/@rvanwart_49640/chaining-csrf-and-an-open-redirect-leads-to-sensitive-information-disclosure-5915b24bc53b?source=rss------bug_bounty-5 | Raymond Van Wart | bug-bounty, cybersecurity, web-application-security | 16-Nov-2024 |
| Heroku Subdomain Takeover | https://xsametyigit.medium.com/heroku-subdomain-takeover-39b9f1ce7c4c?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, bug-bounty, subdomain-takeover, bug-bounty-tips | 16-Nov-2024 |
| Secret OSINT Tricks to Dig Up Hidden Info Online! | https://medium.com/@paritoshblogs/secret-osint-tricks-to-dig-up-hidden-info-online-5401ffdd9c89?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, osint, cybersecurity, information-technology | 16-Nov-2024 |
| Chaining CSRF and an Open-Redirect leads to sensitive information disclosure | https://raymondv.medium.com/chaining-csrf-and-an-open-redirect-leads-to-sensitive-information-disclosure-5915b24bc53b?source=rss------bug_bounty-5 | Raymond Van Wart | bug-bounty, cybersecurity, web-application-security | 16-Nov-2024 |
| How I Helped Secure Millions of Users’ Medical Reports — Bug Bounty! | https://kumarmohank889.medium.com/how-i-helped-secure-millions-of-users-medical-reports-bug-bounty-bccf61a8ecee?source=rss------bug_bounty-5 | Mohan Kumar N | cybersecurity, hacking, bug-bounty-tips, ethical-hacking, bug-bounty | 16-Nov-2024 |
| Mastering Recon for Bug Hunters, Part 4: Advanced Strategies & Real-World Examples | https://myselfakash20.medium.com/mastering-recon-for-bug-hunters-part-4-advanced-strategies-real-world-examples-5de1a7aa7f84?source=rss------bug_bounty-5 | Akash Ghosh | bugs, bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-tips | 16-Nov-2024 |
| Account takover via forget password | https://medium.com/@amirreza.marzban/account-takover-via-forget-password-4ec6514f29ee?source=rss------bug_bounty-5 | AmirReza Marzban | bug-bounty, bug-bounty-writeup, hacking, account-takeover, bug-bounty-hunter | 16-Nov-2024 |
| Account takover of an online casino | https://bug-abdelilah.medium.com/account-takover-of-an-online-casino-e13987835266?source=rss------bug_bounty-5 | abdelilah | bug-bounty, xss-attack, penetration-testing, cybersecurity, account-takeover | 16-Nov-2024 |
| How Did I Get My First Collaboration Bounty Of $1000? | https://medium.com/@pguru978/how-did-i-get-my-first-collaboration-bounty-of-1000-dc64ec02a6c7?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | bug-bounty, bug-bounty-writeup, ethical-hacking, cybersecurity, bug-bounty-tips | 16-Nov-2024 |
| Exploiting Android Activities with Drozer: A Step-by-Step Guide | https://medium.com/@ayushkumar12021987/exploiting-android-activities-with-drozer-a-step-by-step-guide-ebc9b564758d?source=rss------bug_bounty-5 | Ayush Kumar | bug-bounty, pentesting, android, bug-bounty-writeup, security | 16-Nov-2024 |
| How I Turned a Low Blind SSRF Into a Critical Vulnerability With Strategic Impact Escalation | https://medium.com/@DrakenKun/how-i-turned-a-low-blind-ssrf-into-a-critical-vulnerability-with-strategic-impact-escalation-536505cc4352?source=rss------bug_bounty-5 | DrakenKun | web-security, pentesting, bug-bounty, ssrf, cybersecurity | 16-Nov-2024 |
| Sensitive Data Exposure in a Moodle Config File | https://medium.com/@mrcix/sensitive-data-exposure-in-a-moodle-config-file-648ca3d54676?source=rss------bug_bounty-5 | mrci0x1 | bug-bounty, information-security, web-security | 16-Nov-2024 |
| These Two Tools Helped Me Earn $40K in Bounties | https://medium.com/@alwalxed/these-two-tools-helped-me-earn-40k-in-bounties-8c688b9deccd?source=rss------bug_bounty-5 | Awa | osint, cybersecurity, bug-bounty, golang, tools | 16-Nov-2024 |
| Bypass of Username Policy: Breaking the Rules with a Simple Trick | https://medium.com/@mrcix/bypass-of-username-policy-breaking-the-rules-with-a-simple-trick-fcf7ce97925c?source=rss------bug_bounty-5 | mrci0x1 | bug-bounty-tips, penetration-testing, bug-bounty-writeup, web-security, bug-bounty | 16-Nov-2024 |
| How Did I Get My First Collaboration Bounty Of $1000? | https://cybersecuritywriteups.com/how-did-i-get-my-first-collaboration-bounty-of-1000-dc64ec02a6c7?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | bug-bounty, bug-bounty-writeup, ethical-hacking, cybersecurity, bug-bounty-tips | 16-Nov-2024 |
| $500 Bounty for Account Takeover on European Bug Bounty Platform | https://0vulns.medium.com/500-bounty-for-account-takeover-on-european-bug-bounty-platform-cd5af3edb1ec?source=rss------bug_bounty-5 | 0vulns | cybersecurity, bug-bounty | 15-Nov-2024 |
| HOW I HACKED BILLION ANDROID USERS SOCIAL AND 3rd PARTY ACCOUNT | A STORY ABOUT 5000$ BUG |… | https://medium.com/@karthithehacker/how-i-hacked-billion-android-users-social-and-3rd-party-account-a-story-about-5000-bug-54d8b6ce75df?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty, bugbounty-writeup | 15-Nov-2024 |
| NahamStore CTF Çözümü: Web Güvenlik Açıklarıyla Bug Bounty Pratiği | https://berkkahya0.medium.com/nahamstore-ctf-%C3%A7%C3%B6z%C3%BCm%C3%BC-web-g%C3%BCvenlik-a%C3%A7%C4%B1klar%C4%B1yla-bug-bounty-prati%C4%9Fi-a1b3d7133329?source=rss------bug_bounty-5 | Berk Kahya | bug-bounty, tryhackme, nahamstore, ctf-writeup, cybersecurity | 15-Nov-2024 |
| Simple RXSS di website insight.kontan.co.id | https://medium.com/@0xRedFox29/simple-rxss-di-website-insight-kontan-co-id-cfb39dd64a3a?source=rss------bug_bounty-5 | kunx90 | bug-bounty-tips, bug-bounty | 15-Nov-2024 |
| TAKEOVER | https://medium.com/@mukkagopi50/takeover-16aa79977e6b?source=rss------bug_bounty-5 | Gopi Mukka | account-takeover-attacks, vulnerability, bug-bounty, takeovers | 15-Nov-2024 |
| Server-Side Request Forgery (SSRF) | https://medium.com/@mukkagopi50/server-side-request-forgery-ssrf-80d168fd82f7?source=rss------bug_bounty-5 | Gopi Mukka | bug-bounty, vulnerability, ssrf | 15-Nov-2024 |
| How to Test for DNS Zone Transfer Attacks | https://dineshpathro9.medium.com/how-to-test-for-dns-zone-transfer-attacks-bf7c604bb28a?source=rss------bug_bounty-5 | hunter | bug-bounty, bug-bounty-writeup, hacking, bugs, bug-bounty-tips | 15-Nov-2024 |
| How I Exploited a Vulnerability to Change a User’s Backup Email Address (Easy P1 vulnerability) | https://medium.com/@hasap134/how-i-exploited-a-vulnerability-to-change-a-users-backup-email-address-easy-p1-vulnerability-f854041f8e91?source=rss------bug_bounty-5 | Beesco | cybersecurity, vulnerability, bug-bounty, bug-bounty-tips, bugs | 15-Nov-2024 |
| Earn $5000 After Learning How to Bypass the Rate Limiting for API Bug Hunting . | https://medium.com/@anandrishav2228/earn-5000-after-learning-how-to-bypass-the-rate-limiting-for-api-bug-hunting-89dc40289120?source=rss------bug_bounty-5 | Rishav anand | api, money, cybersecurity, bug-bounty, hacking-tools | 15-Nov-2024 |
| TALE OF A VULNERABILITY WHICH LEADS TO ACCOUNT TAKEOVER OF GOVERNMENT ANDROID APPLICATION | https://medium.com/@karthithehacker/tale-of-a-vulnerability-which-leads-to-account-takeover-of-government-android-application-6f47a57b8cfb?source=rss------bug_bounty-5 | Karthikeyan.V | vapt, bug-bounty, android | 15-Nov-2024 |
| Easy $20,160 bug from hackerone | https://medium.com/@loaymorad11/easy-20-160-bug-from-hackerone-aeac67ce3e81?source=rss------bug_bounty-5 | Loaymorad | cybersecurity, penetration-testing, bug-bounty, hackerone, bugbounty-writeup | 15-Nov-2024 |
| How did I found Account Takeover Vulnerability on takeuforward.org | https://rajukani100.medium.com/how-did-i-found-account-takeover-vulnerability-on-takeuforward-org-735630b4167c?source=rss------bug_bounty-5 | Raj Ukani | hacking, cyber-security-awareness, bug-bounty, bug-bounty-writeup, developer | 15-Nov-2024 |
| Today How to get $500 Bounty on HackerOne — P3 | https://medium.com/@bugbounty_learners/today-how-to-get-500-bounty-on-hackerone-p3-345fa44f76a3?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-writeup, bugs, bug-bounty-tips, software-development, bug-bounty | 15-Nov-2024 |
| My first bounty | https://medium.com/@josuofficial327/my-first-bounty-fdddb7ef5611?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | penetration-testing, ethical-hacking, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 15-Nov-2024 |
| These books will help to learn bug bounty & penetration testing and ethical hacking. Part 1 . | https://osintteam.blog/these-books-will-help-to-learn-bug-bounty-penetration-testing-and-ethical-hacking-part-1-635781cd3aaa?source=rss------bug_bounty-5 | loyalonlytoday | tips, books, hacking, bug-bounty, cybersecurity | 15-Nov-2024 |
| Known Brands, Government Domains, and More Hijacked via Sitting Ducks Attacks! | https://medium.com/@wiretor/known-brands-government-domains-and-more-hijacked-via-sitting-ducks-attacks-fddd61bd6105?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | usa, hacking, ransomware, malware, bug-bounty | 15-Nov-2024 |
| New Glove Infostealer Malware Bypasses Chrome’s Cookie Encryption: A Growing Threat | https://medium.com/@wiretor/new-glove-infostealer-malware-bypasses-chromes-cookie-encryption-a-growing-threat-e4377ef1f2a7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, programming, hacking | 15-Nov-2024 |
| Critical Plugin Flaw Exposed 4 Million WordPress Websites to Takeover | https://medium.com/@wiretor/critical-plugin-flaw-exposed-4-million-wordpress-websites-to-takeover-7cf7b5984ab4?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | programming, ransomware, malware, bug-bounty, wordpress | 15-Nov-2024 |
| CSRF leads to delete account | https://xsametyigit.medium.com/csrf-leads-to-delete-account-711dde21af1e?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-tips, bugbounty-writeup, bug-bounty | 15-Nov-2024 |
| How I Got Access to an Admin Portal by Response Manipulation | https://medium.com/@anonymousshetty2003/how-i-got-access-to-an-admin-portal-by-response-manipulation-d2abeec7ce58?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-tips, ethical-hacking | 15-Nov-2024 |
| 3 reflected XSS in one program | https://xsametyigit.medium.com/3-reflected-xss-in-one-program-c50469c6d522?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 15-Nov-2024 |
| New Script — Leakix CLI by VECERT | https://medium.com/@vecert/new-script-leakix-cli-by-vecert-68abbf35d08d?source=rss------bug_bounty-5 | VECERT | pentesting, leakix, osint, bug-bounty | 15-Nov-2024 |
| 2 good tools for subdomain enumration. | https://osintteam.blog/2-good-tools-for-subdomain-enumration-ca3ee36fbf81?source=rss------bug_bounty-5 | loyalonlytoday | tips, hacking, bug-bounty, subdomains-enumeration, cybersecurity | 14-Nov-2024 |
| Beginner's guide for Input Data Validation Checklist | https://bitpanic.medium.com/beginners-guide-for-input-data-validation-checklist-2f9d5ef4a341?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, information-technology, bug-bounty, cyber-security-awareness, bug-bounty-tips | 14-Nov-2024 |
| Critical File Upload Vulnerabilities: Exploits and Mitigation Strategies | https://medium.com/@security.tecno/critical-file-upload-vulnerabilities-exploits-and-mitigation-strategies-90230e8a31bf?source=rss------bug_bounty-5 | TECNO Security | blog, scurity, bug-bounty, hacking | 14-Nov-2024 |
| Is HackerOne Support Service Degrading? | https://medium.com/@abdulparkar/is-hackerone-support-service-degrading-cbfa6adc1027?source=rss------bug_bounty-5 | Abdul Rehman Parkar | programming, hackerone, cybersecurity, ethical-hacking, bug-bounty | 14-Nov-2024 |
| ISRO: YouTube Broken Link Hijack | https://infosecwriteups.com/isro-youtube-broken-link-hijack-304a92001b47?source=rss------bug_bounty-5 | Dishant Modi | bug-bounty, bug-bounty-tips, broken-link, hall-of-fame, vulnerability | 14-Nov-2024 |
| Helpful Resources for Bug Hunters | https://medium.com/meetcyber/helpful-resources-for-bug-hunters-53dbe011cdd4?source=rss------bug_bounty-5 | AbhirupKonwar | ethical-hacking, bug-bounty-tips, bug-bounty, pentesting, hacking | 14-Nov-2024 |
| How i hacked NASA (WARNING: Dad Jokes) | https://medium.com/@rootplinix/how-i-hacked-nasa-warning-dad-jokes-7424faec5790?source=rss------bug_bounty-5 | Abu Hurayra | hacking, cybersecurity-awareness, bug-bounty, cybersecurity, bug-bounty-tips | 14-Nov-2024 |
| Finding Security Design Flaw in a FAANG to later be ghosted by Recruiter: A funny Tale | https://medium.com/bug-bounty-hunting/finding-security-design-flaw-in-a-faang-to-later-be-ghosted-by-recruiter-a-funny-tale-73e73fb0d6aa?source=rss------bug_bounty-5 | Ronnie Joseph | google, netflix, bug-bounty, cybersecurity, meta | 14-Nov-2024 |
| AI in Bug Bounty Hunting: A Step-by-Step Tutorial for Beginners | https://prakash888kpk.medium.com/ai-in-bug-bounty-hunting-a-step-by-step-tutorial-for-beginners-673e24aed66c?source=rss------bug_bounty-5 | Lets Unlearn | machine-learning, bug-bounty, bug-bounty-tips, ai, bug-bounty-writeup | 14-Nov-2024 |
| How I Uncovered an SSRF Vulnerability in a Private HackerOne Program | https://medium.com/@josuofficial327/how-i-uncovered-an-ssrf-vulnerability-in-a-private-hackerone-program-4c3146b414ff?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | ethical-hacking, bugbounty-writeup, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 14-Nov-2024 |
| Basics of Stored XSS and Demo | https://medium.com/@kcaaditya976/basics-of-stored-xss-and-demo-d410714a77c0?source=rss------bug_bounty-5 | Laxious | bug-bounty, cybersecurity, bug-bounty-hunting, xss-attack, stored-xss | 14-Nov-2024 |
| Bug Report: Broken Access Control in Google Photos | https://medium.com/@abhinavsingwal/bug-report-broken-access-control-in-google-photos-d9c10ca8c472?source=rss------bug_bounty-5 | Abhinavsingwal | google-vulnerability, bug-bounty, google-bug-report, bug-report, google-photos-bug | 14-Nov-2024 |
| My Journey to Drugs Hall of Fame in just 10 minutes | https://medium.com/@bugbounty_learners/my-journey-to-drugs-hall-of-fame-in-just-10-minutes-dcd03240e42a?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-tips, bug-bounty-writeup, bugs, web-development, bug-bounty | 14-Nov-2024 |
| Mastering Reconnaissance Part 3: Unleashing Advanced Exploitation and Post-Recon Tactics | https://myselfakash20.medium.com/mastering-reconnaissance-part-3-unleashing-advanced-exploitation-and-post-recon-tactics-b81369678040?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, bug-bounty-tips, bug-bounty-writeup, bugbounty-writeup, bug-bounty | 14-Nov-2024 |
| CISA & FBI Confirm China Hacked Telecom Providers for Spying: What Does This Mean for Your… | https://medium.com/@wiretor/cisa-fbi-confirm-china-hacked-telecom-providers-for-spying-what-does-this-mean-for-your-f523b2459c75?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, pentest, bug-bounty, malware, ransomeware | 14-Nov-2024 |
| Idaho Man Sentenced to 10 Years for Hacking, Data Theft, and Extortion | https://medium.com/@wiretor/idaho-man-sentenced-to-10-years-for-hacking-data-theft-and-extortion-003b243e419f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | programming, malware, bug-bounty, zero-day, hacking | 14-Nov-2024 |
| Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions | https://medium.com/@wiretor/windows-zero-day-exploited-by-russia-triggered-with-file-drag-and-drop-delete-actions-0dd82469e486?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, usa, hacking, bug-bounty, ransomware | 14-Nov-2024 |
| Storm-1811’s Quick-Assist phishing could have been worse | https://mrsheepsheep.medium.com/storm-1811s-quick-assist-phishing-could-have-been-worse-fd84e04b0daa?source=rss------bug_bounty-5 | Alexandre Souleau | cybersecurity, xss-attack, bug-bounty, microsoft | 14-Nov-2024 |
| Server-Side Request Forgery $(SSRF)$ allows internal ports scanning | https://medium.com/h7w/server-side-request-forgery-ssrf-allows-internal-ports-scanning-ef7edf6534b7?source=rss------bug_bounty-5 | socalledhacker | hacking, infosec, cybersecurity, bug-bounty-tips, bug-bounty | 14-Nov-2024 |
| Bypass Rate-Limit via X-Forwarded-For | https://medium.com/@null.x.b1ty/bypass-rate-limit-via-x-forwarded-for-ea26c7a25a90?source=rss------bug_bounty-5 | Snoop-dog | hackerone, bug-bounty | 14-Nov-2024 |
| How i Finded a easy dom xss. | https://infosecwriteups.com/how-i-finded-a-easy-dom-xss-6499afc21b5d?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, tips, hacking, xss-attack, cybersecurity | 14-Nov-2024 |
| SQL Injection: How I Secured Personal Information (PII) of 1.1M Job Seekers | https://infosecwriteups.com/sql-injection-how-i-secured-personal-information-pii-of-1-1m-job-seekers-7f7c55d11fbc?source=rss------bug_bounty-5 | brutexploiter | cybersecurity, software-engineering, bug-bounty, technology, programming | 14-Nov-2024 |
| Exposing a Data Leak Vulnerability: My Journey to Discovery | https://infosecwriteups.com/exposing-a-data-leak-vulnerability-my-journey-to-discovery-d7222b48d81c?source=rss------bug_bounty-5 | Abhishek Bhujang | security, hacking, bug-hunting, ethical-hacking, bug-bounty | 14-Nov-2024 |
| Discovering My First Vulnerability in a Few Minutes | https://medium.com/@jagdishdammala/discovering-my-first-vulnerability-in-a-few-minutes-6bbc9419cbfc?source=rss------bug_bounty-5 | Jagdish Dammala | bug-bounty | 14-Nov-2024 |
| Account Takeover: How I Gained Access to Any User Account Through a Simple Registration Flaw | https://0d-amr.medium.com/account-takeover-how-i-gained-access-to-any-user-account-through-a-simple-registration-flaw-96f9f6bdc0ae?source=rss------bug_bounty-5 | Amr | ctf, pentesting, hacking, bug-bounty, security | 14-Nov-2024 |
| Exploiting SSTI Vulnerability on an E-commerce Website: A Professional Walkthrough | https://medium.com/@MianHammadx0root/exploiting-ssti-vulnerability-on-an-e-commerce-website-a-professional-walkthrough-6cc95afb2b38?source=rss------bug_bounty-5 | Mian Hammad | bug-bounty, server-side, server-security, penetration-testing, ssti | 13-Nov-2024 |
| How I Found an SQL Injection in coupon code | https://medium.com/@gheeX/how-i-found-an-sql-injection-in-coupon-code-f31d6eb1a720?source=rss------bug_bounty-5 | Ghee1337 | bug-bounty, infosec, bug-bounty-tips, sql-injection, bug-bounty-writeup | 13-Nov-2024 |
| Breaking In with Guest: My First Bug Bounty | https://ghostman01.medium.com/guest-admin-a7c70aa10ddb?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | hacking, bug-bounty, bug-bounty-writeup, cybersecurity, bug-hunting | 13-Nov-2024 |
| Introducing Loxs: The Ultimate Multi-Vulnerability Scanner for Web Applications | https://anishalx.medium.com/introducing-loxs-the-ultimate-multi-vulnerability-scanner-for-web-applications-907ed2b2004b?source=rss------bug_bounty-5 | Anish alx | hacking-tools, python, pentesting, hacking, bug-bounty | 13-Nov-2024 |
| 1500$ Open Reduction Bug: Performed Restricted Actions in login page | https://medium.com/@bugbounty_learners/1500-open-reduction-bug-performed-restricted-actions-in-login-page-4194359c1fc2?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-writeup, bug-bounty-tips, web-development, bug-bounty, open-redirect | 13-Nov-2024 |
| Blind XSS Bug Hunting Methodology | https://osintteam.blog/blind-xss-bug-hunting-methodology-b997c37a9620?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, cybersecurity, ethical-hacking, xss-attack, bug-bounty | 13-Nov-2024 |
| A Deep Dive into Nmap Scripts for Web Application Testing | https://systemweakness.com/a-deep-dive-into-nmap-scripts-for-web-application-testing-6a9b3a06995e?source=rss------bug_bounty-5 | Khaleel Khan | hacking, nmap, infosec, bug-bounty, cybersecurity | 13-Nov-2024 |
| SQL Injection UNION Attack, Retrieving Data from Other Tables | https://medium.com/@marduk.i.am/sql-injection-union-attack-retrieving-data-from-other-tables-38f471813c57?source=rss------bug_bounty-5 | Marduk I Am | bug-bounty, information-security, sql-injection, portswigger-lab, sqli | 13-Nov-2024 |
| Easy Bug: How I Uncovered and Re-Exploited a Resolved Vulnerability from a Disclosed Report | https://medium.com/@cvjvqmmsm/easy-bug-how-i-uncovered-and-re-exploited-a-resolved-vulnerability-from-a-disclosed-report-ab2211a98b7b?source=rss------bug_bounty-5 | Barbarossa | bug-bounty, bugbounty-writeup | 13-Nov-2024 |
| Common Mistakes in Coding: How to Avoid Them | https://medium.com/@kharodawalam/common-mistakes-in-coding-how-to-avoid-them-9e5c881b0473?source=rss------bug_bounty-5 | Mohammed Kharodawala | mistakes-to-avoid, bug-bounty, data-structure-algorithm, programming, software-development | 13-Nov-2024 |
| Mobile Application Penetration Testing Checklist | https://infosecwriteups.com/mobile-application-penetration-testing-checklist-460deadf3d9f?source=rss------bug_bounty-5 | Ajay Naik | information-security, penetration-testing, information-technology, cybersecurity, bug-bounty | 13-Nov-2024 |
| 5 Golden Tips to Land Your First Job in Offensive Security | https://medium.com/@eran25670/5-golden-tips-to-land-your-first-job-in-offensive-security-e960b4215dc7?source=rss------bug_bounty-5 | Eran | cybersecurity, offensive-security, penetration-testing, bug-bounty-tips, bug-bounty | 13-Nov-2024 |
| clickjacking: definição, impactos, mecanismo e prevenção | https://medium.com/@Poystick/clickjacking-defini%C3%A7%C3%A3o-impactos-mecanismo-e-preven%C3%A7%C3%A3o-46e05a89614b?source=rss------bug_bounty-5 | Tarcísio Luchesi | hacking, bug-bounty, programação | 12-Nov-2024 |
| Mastering Reconnaissance Part 2: Advanced Scanning, Content Discovery, and Automation for Bug… | https://myselfakash20.medium.com/mastering-reconnaissance-part-2-advanced-scanning-content-discovery-and-automation-for-bug-8903a7c190a6?source=rss------bug_bounty-5 | Akash Ghosh | bugbounty-writeup, bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips | 12-Nov-2024 |
| Your Guide to Web Reconnaissance: Mastering the Art of Information Gathering | https://medium.com/@secinfinitylabs/your-guide-to-web-reconnaissance-mastering-the-art-of-information-gathering-32dfee5f2deb?source=rss------bug_bounty-5 | Secinfinity Labs | information-gathering, information-security, penetration-testing, bug-bounty-tips, bug-bounty | 12-Nov-2024 |
| Top 10 Threat Actors of 2024 | https://medium.com/@alexandermr289/top-10-threat-actors-of-2024-4ac605357291?source=rss------bug_bounty-5 | Mr_alexander | osint, cybersecurity, bug-bounty, news, medium | 12-Nov-2024 |
| Become a Writer for Cybersecurity Write-ups! | https://cybersecuritywriteups.com/become-a-writer-for-cybersecurity-write-ups-3f1e780323a8?source=rss------bug_bounty-5 | Abdul Rehman Parkar | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips, bugbounty-writeup | 12-Nov-2024 |
| Showing Impact is Your friend (500$+500$ bounties) | https://medium.com/@noureldin1042/showing-impact-is-your-friend-500-500-bounties-2ed87f3a64b7?source=rss------bug_bounty-5 | Noureldin(0x_5wf) | programming-languages, bug-bounty, bug-bounty-tips, programming, bug-bounty-writeup | 12-Nov-2024 |
| Exploring docker-compose.yaml leads to sensitive disclosure | https://medium.com/@raituzki/exploring-docker-compose-yaml-leads-to-sensitive-disclosure-1feaa3d3317f?source=rss------bug_bounty-5 | Muhamad Raidinoor Pasha | hacking, bug-bounty-tips, docker, yaml, bug-bounty | 12-Nov-2024 |
| How I hacked 100 hackers | https://corneacristian.medium.com/how-i-hacked-100-hackers-5c3c313e8a1a?source=rss------bug_bounty-5 | Cristian Cornea | bug-bounty, intelligence, hacking, cybersecurity, penetration-testing | 12-Nov-2024 |
| Bug Bounty | Here’s Why Your Way To Success Doesn’t Lie In Learning | https://medium.com/@sM0ky4/bug-bounty-heres-why-your-way-to-success-doesn-t-lie-in-learning-bc72d4000b88?source=rss------bug_bounty-5 | sM0ky4 | cybersecurity, bug-bounty-tips, bug-bounty, time-management | 12-Nov-2024 |
| How Can You Be Sure That Ethical Hackers Are TRULY Ethical? | https://medium.com/@hackrate/how-can-you-be-sure-that-ethical-hackers-are-truly-ethical-17ee0fcc6058?source=rss------bug_bounty-5 | Hackrate | bug-bounty, ethical-hacking, hacking, penetration-testing, cybersecurity | 12-Nov-2024 |
| HTTP Desync Attack (Request Smuggling) - Mass Account Takeover | https://medium.com/@bugbounty_learners/http-desync-attack-request-smuggling-mass-account-takeover-0292fcc8c4a4?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty, web-development, bug-bounty-tips, bug-bounty-writeup, bugs | 12-Nov-2024 |
| Complete Guide to Securing Web Applications on Ports 80 and 443 | https://medium.com/@verylazytech/complete-guide-to-securing-web-applications-on-ports-80-and-443-a123def0b82c?source=rss------bug_bounty-5 | Very Lazy Tech | owasp-top-10, web-application-security, bug-bounty, penetration-testing, web-security | 12-Nov-2024 |
| Advanced Techniques for Bypassing Web Filters: A Practical Guide to Identifying and Exploiting XSS… | https://thexssrat.medium.com/advanced-techniques-for-bypassing-web-filters-a-practical-guide-to-identifying-and-exploiting-xss-f6cadeedf9ca?source=rss------bug_bounty-5 | Thexssrat | hacks, bug-bounty, penetration-testing, xss-attack, hacking | 12-Nov-2024 |
| M3 — Insecure Authentication/Authorization | https://medium.com/@tamires.scruz/m3-insecure-authentication-authorization-cedf6e94d1ce?source=rss------bug_bounty-5 | Tamy Angel | bug-bounty, owasp, pentesting, android, cybersecurity | 12-Nov-2024 |
| SHODAN Cheat Sheet — A Comprehensive Guide to Shodan: The Search Engine for Hackers | https://medium.com/@iamshafayat/shodan-cheat-sheet-a-comprehensive-guide-to-shodan-the-search-engine-for-hackers-451b403f328f?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | cheatsheet, shodan, cybersecurity, ethical-hacking, bug-bounty | 12-Nov-2024 |
| Exploiting Server-Side Template Injection (SSTI) with a Custom Exploit: PortSwigger Lab Walkthrough | https://medium.com/@0xA4zOo0/exploiting-server-side-template-injection-ssti-with-a-custom-exploit-portswigger-lab-walkthrough-a661d5c47001?source=rss------bug_bounty-5 | A Z O | bug-bounty, ssti, hacking | 12-Nov-2024 |
| Complete Guide to pentesting Web Applications on Ports 80 and 443 | https://medium.com/@verylazytech/complete-guide-to-securing-web-applications-on-ports-80-and-443-a123def0b82c?source=rss------bug_bounty-5 | Very Lazy Tech | owasp-top-10, web-application-security, bug-bounty, penetration-testing, web-security | 12-Nov-2024 |
| How I Hijacked an Abandoned Twitter Account and Why Broken Link Hijacking Matters | https://medium.com/@anonymousshetty2003/how-i-hijacked-an-abandoned-twitter-account-and-why-broken-link-hijacking-matters-0128e0f562c8?source=rss------bug_bounty-5 | Anonymousshetty | ethical-hacking, broken-link-hijacking, cybersecurity, bug-bounty | 12-Nov-2024 |
| How AI is Making Bug Bounties More Accessible for New Hackers | https://pointlessai.medium.com/how-ai-is-making-bug-bounties-more-accessible-for-new-hackers-726f9a058eac?source=rss------bug_bounty-5 | PointlessAI | bug-bounty-tips, ai, bug-bounty, vulnerability-management | 12-Nov-2024 |
| How I Discovered a Private Key Leak on a Company’s Subdomain | https://medium.com/@anonymousshetty2003/how-i-discovered-a-private-key-leak-on-a-companys-subdomain-929100e7a561?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, cybersecurity, ethical-hacking | 12-Nov-2024 |
| Top Cybersecurity Tools Every Professional Should Know | https://medium.com/@paritoshblogs/top-cybersecurity-tools-every-professional-should-know-0aff34558518?source=rss------bug_bounty-5 | Paritosh | information-security, chatgpt, bug-bounty, cybersecurity, hacking | 12-Nov-2024 |
| North Korean Hackers Use Flutter Apps to Evade macOS Security | https://medium.com/@wiretor/north-korean-hackers-use-flutter-apps-to-evade-macos-security-e22221dd9696?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | pentesting, malware, bug-bounty, ransomware, hacking | 12-Nov-2024 |
| Massive Data Breach Affects Millions of Hot Topic Customers | https://medium.com/@wiretor/massive-data-breach-affects-millions-of-hot-topic-customers-b03fe562e0f7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | pentesting, malware, bug-bounty, ransomware | 12-Nov-2024 |
| Form I-9 Compliance Data Breach Impacts Over 190,000 People | https://medium.com/@wiretor/form-i-9-compliance-data-breach-impacts-over-190-000-people-adee0a89694c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, malware, hacking, bug-bounty, pentesting | 12-Nov-2024 |
| Finding more infromation about a email using a osint tool. | https://osintteam.blog/finding-more-infromation-about-a-email-using-a-osint-tool-d557a0579414?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, osint, bug-bounty, hacking, osint-investigation | 12-Nov-2024 |
| ️♂️Recon For New Bug bounty Hunters — Short Story | https://sud-defcon.medium.com/%EF%B8%8F-%EF%B8%8Frecon-for-new-bug-bounty-hunters-short-story-2992e780fbbb?source=rss------bug_bounty-5 | Sudarshan Patel | reconnaissance, bug-bounty-tips, bug-bounty, recon, bug-bounty-writeup | 12-Nov-2024 |
| Hacking Knowledge Around The Corner. From Where To Learn Hacking Skills? | https://medium.com/meetcyber/hacking-knowledge-around-the-corner-c2a48214d052?source=rss------bug_bounty-5 | NnFace | cybersecurity, kali-linux, bug-bounty, hacking, knowledge | 12-Nov-2024 |
| Volt Typhoon Botnet Rebuilds After FBI Crackdown | https://medium.com/@wiretor/volt-typhoon-botnet-rebuilds-after-fbi-crackdown-e23a74459ff6?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, programming, malware, ransomeware, bug-bounty | 12-Nov-2024 |
| Extract full photos/videos database from any locked Google Pixel phone | https://medium.com/@rus1r105/extract-full-photos-videos-database-from-any-locked-google-pixel-phone-be6da35ad93d?source=rss------bug_bounty-5 | rus1r105 | cybersecurity, android, google-vrp, bug-bounty, writeup | 11-Nov-2024 |
| How I Found an HTML Injection in Email Vulnerability on Samsung, Leading to a $$$$ Payday | https://cybersecuritywriteups.com/how-an-html-injection-vulnerability-in-samsung-emails-led-to-a-payday-3dcfccc12a36?source=rss------bug_bounty-5 | Taha Diwan | bug-bounty, cybersecurity, ethical-hacking, penetration-testing, web-penetration-testing | 11-Nov-2024 |
| [2024 Thanksgiving] Security Technology Research Writing Activity | https://medium.com/@security.tecno/2024-thanksgiving-security-technology-research-writing-activity-325e4b0fd9c8?source=rss------bug_bounty-5 | TECNO Security | writing, research, bug-bounty, security | 11-Nov-2024 |
| Hacking Active Directory and Earn upto $30,000. | https://medium.com/@anandrishav2228/hacking-active-directory-and-earn-upto-30-000-9561858a3c8f?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, active-directory, money, hacking, cybersecurity | 11-Nov-2024 |
| Recon JavaScript Files with Rarely Encountered Techniques | https://zucki.medium.com/recon-javascript-files-with-rarely-encountered-techniques-5882a3ad1955?source=rss------bug_bounty-5 | Marzucki | bug-bounty, automation, recon, automation-testing, javascript | 11-Nov-2024 |
| #Task 20 - HTTP Request Sumgling — Basics & Types -> Only for Bigners | https://medium.com/@bugbounty_learners/task-1-http-request-sumgling-basics-types-only-for-bigners-2157461dca3e?source=rss------bug_bounty-5 | bugbounty_learners | cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty, web-development | 11-Nov-2024 |
| GetSimpleCMS CSRF | Parol Dəyişdirmə Funksiyasında Tapdığım CSRF boşluğu | https://zeynalxan.medium.com/getsimplecms-csrf-parol-d%C9%99yi%C5%9Fdirm%C9%99-funksiyas%C4%B1nda-tapd%C4%B1%C4%9F%C4%B1m-csrf-bo%C5%9Flu%C4%9Fu-8786c125453e?source=rss------bug_bounty-5 | Zeynalxan Quliyev | csrf-attack, csrf, ato, bug-bounty, cybersecurity | 11-Nov-2024 |
| PRE-ACCOUNT TAKEOVER through Oauth misconfiguration on a mailing website | https://infosecwriteups.com/pre-account-takeover-through-misconfigured-oauth-on-a-mailing-website-b906a5c118e9?source=rss------bug_bounty-5 | Harish | cybersecurity, ethical-hacking, cyber-security-awareness, bug-bounty-tips, bug-bounty | 11-Nov-2024 |
| Jumping into Bug Bounty Automation | https://bitpanic.medium.com/jumping-into-bug-bounty-automation-4739abdb6d15?source=rss------bug_bounty-5 | Spectat0rguy | information-security, cybersecurity, bug-bounty, information-technology, infosec | 11-Nov-2024 |
| Won’t Fix Vulnerabilities in Google Colab | https://0xjin.medium.com/wont-fix-vulnerabilities-in-google-colab-fcd3b6581746?source=rss------bug_bounty-5 | 0xJin | bug-bounty, bug-bounty-writeup, google, bug-bounty-tips | 11-Nov-2024 |
| Exposing the Dark Side of Google Dorks: How I Extracted Millions of Emails. | https://pwndecoco.medium.com/exposing-the-dark-side-of-google-dorks-how-i-extracted-millions-of-emails-0fe0f7f6db8b?source=rss------bug_bounty-5 | Pwndec0c0 | hacking, cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 11-Nov-2024 |
| Server-Side Template Injection in an Unknown Language with a Documented Exploit — SSTI… | https://medium.com/@rcxsecurity/server-side-template-injection-in-an-unknown-language-with-a-documented-exploit-ssti-de01a069b946?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Café | hacking, information-security, pentesting, bug-bounty, cybersecurity | 11-Nov-2024 |
| P4 bug’s and their POC steps | Part 7 | $Easy Money$ | https://medium.com/h7w/p4-bugs-and-their-poc-steps-part-7-easy-money-d7cb9270f539?source=rss------bug_bounty-5 | socalledhacker | infosec, hacking, cybersecurity, bug-bounty-tips, bug-bounty | 11-Nov-2024 |
| How I Found a Critical 9.8 Bug — Directory Listing leads to Critical P1 Exposure of PII and more | https://medium.com/@enigma_/how-i-found-a-critical-9-8-9c4d14d82e20?source=rss------bug_bounty-5 | enigma | owasp, bug-bounty, directory-listing, ethical-hacking, hacker | 10-Nov-2024 |
| Addressing OWASP Top 10 Vulnerabilities: Why You Need Wire Tor’s Pentesting Services | https://medium.com/@wiretor/addressing-owasp-top-10-vulnerabilities-why-you-need-wire-tors-pentesting-services-5d2f374c3f22?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | breached, hacking, usa, bug-bounty, malware | 10-Nov-2024 |
| How I was able to inject my malicious link in Email Confirmation Link ( Link Injection / Open… | https://infosecwriteups.com/how-i-able-to-inject-my-malicious-link-in-email-confirmation-link-link-injection-open-redirect-dbf95075f89c?source=rss------bug_bounty-5 | Abdul Rehman Parkar | cybersecurity, bug-bounty-writeup, infosec-write-ups, ethical-hacking, bug-bounty | 10-Nov-2024 |
| Mastering Reconnaissance: The Ultimate Guide for Bug Hunters (Part 1) | https://myselfakash20.medium.com/mastering-reconnaissance-the-ultimate-guide-for-bug-hunters-part-1-b91a2367ee65?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, bug-bounty, bug-bounty-tips, recon, bugbounty-writeup | 10-Nov-2024 |
| Week 1: Documenting My Journey as a Full-Time Bug Hunter | https://mokhansec.medium.com/week-1-documenting-my-journey-as-a-full-time-bug-hunter-fbe1bbefeb79?source=rss------bug_bounty-5 | Mohsin khan | bugs, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 10-Nov-2024 |
| From P5(Informational)to Medium(P3) : How I was able to achieve it it in Dept of Defense VDP? | https://medium.com/@tirqwork1/from-p5-informational-to-medium-p3-how-i-was-able-to-achieve-it-it-in-dept-of-defense-vdp-76e5eda28b5a?source=rss------bug_bounty-5 | ARoy | us-dept-of-defense, data-protection, hackerone, bug-bounty, cybersecurity | 10-Nov-2024 |
| From System Administrator to Bug Bounty Hunter: A Journey into Web Security | https://medium.com/@zero_4583/from-system-administrator-to-bug-bounty-hunter-a-journey-into-web-security-9b37bb52dde2?source=rss------bug_bounty-5 | Nathan Vincent | app-security, learning-to-code-journey, bug-bounty, secure-coding | 10-Nov-2024 |
| How I was able to inject malicious link in Email Confirmation Link ( Link Injection / Open… | https://cybersecuritywriteups.com/how-i-able-to-inject-my-malicious-link-in-email-confirmation-link-link-injection-open-redirect-dbf95075f89c?source=rss------bug_bounty-5 | Abdul Rehman Parkar | cybersecurity, bug-bounty-writeup, infosec-write-ups, ethical-hacking, bug-bounty | 10-Nov-2024 |
| How a Unique Combination Opened the Door to an IDOR | https://infosecwriteups.com/how-a-unique-combination-opened-the-door-to-an-idor-f44a3efe51e8?source=rss------bug_bounty-5 | Supun Halangoda (Suppa) | cybersecurity, bug-bounty-writeup, bug-bounty-tips, secure-coding, bug-bounty | 10-Nov-2024 |
| POC — CVE-2024–10914 Command Injection Vulnerability in `name` parameter for D-Link NAS | https://medium.com/@verylazytech/poc-cve-2024-10914-command-injection-vulnerability-in-name-parameter-for-d-link-nas-194e70f68120?source=rss------bug_bounty-5 | Very Lazy Tech | command-injection, cybersecurity, cve-2024-10914, bug-bounty, remote-code-execution | 10-Nov-2024 |
| CRLF Injection Zero to Master | https://medium.com/@bugbounty_learners/crlf-injection-zero-to-master-17a93afc33a3?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-tips, bug-bounty-writeup, bug-bounty, software-development, web-development | 10-Nov-2024 |
| Possible subdomain takeovers gives me 1000 dollars | https://medium.com/lucky-vulnerabilities/possible-subdomain-takeovers-gives-me-1000-dollars-9f3ad682ddce?source=rss------bug_bounty-5 | Lucky Vulnerabilities | bug-bounty, bug-bounty-tips, bug-hunting, updates, news | 10-Nov-2024 |
| HackTheBox: Information Gathering | https://medium.com/@rodripadisec/hackthebox-information-gathering-7af3526f13f5?source=rss------bug_bounty-5 | pad1ryoshi | reconnaissance, web3, hackthebox-academy, hackthebox, bug-bounty | 10-Nov-2024 |
| Understanding Common Windows Commands and How Threat Actors Use Them: | https://medium.com/@wtrentond/understanding-common-windows-commands-and-how-threat-actors-use-them-34298408e163?source=rss------bug_bounty-5 | Trent W | tech, cybersecurity, microsoft, bug-bounty, technology | 10-Nov-2024 |
| Double Race Condition : Breaking Rules | https://sayedv2.medium.com/double-race-condition-breaking-rules-88850372afb8?source=rss------bug_bounty-5 | Mohamed Sayed | cybersecurity, bugbounty-writeup, race-condition, bugbounty-tips, bug-bounty | 10-Nov-2024 |
| Ethical Hacking — How It Helps Prevent Cyber Attacks | https://medium.com/@RocketMeUpCybersecurity/ethical-hacking-how-it-helps-prevent-cyber-attacks-41d3d791c7c9?source=rss------bug_bounty-5 | RocketMe Up Cybersecurity | ethical-hacking, bug-bounty, cyberattack, penetration-testing, vulnerability-assessment | 10-Nov-2024 |
| Hackers Evade Detection with New ZIP File Concatenation Technique! | https://medium.com/@wiretor/hackers-evade-detection-with-new-zip-file-concatenation-technique-3bd29544f96e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransom, bug-bounty, hacking, pentesting, malware | 10-Nov-2024 |
| HackTheBox: Information Gathering | https://pad1ryoshi.medium.com/hackthebox-information-gathering-7af3526f13f5?source=rss------bug_bounty-5 | pad1ryoshi | reconnaissance, web3, hackthebox-academy, hackthebox, bug-bounty | 10-Nov-2024 |
| 30 Books To Learn H@acking | https://osintteam.blog/30-books-to-learn-h-acking-2911c57f148c?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | programming, bug-bounty, books, technology, hacking | 10-Nov-2024 |
| Understanding Common Windows Commands and How Threat Actors Use Them: | https://medium.com/@wtrentond/understanding-common-windows-commands-and-how-threat-actors-use-them-34298408e163?source=rss------bug_bounty-5 | Trent W | tech, artificial-intelligence, cybersecurity, bug-bounty, technology | 10-Nov-2024 |
| Possible subdomain takeovers gives me 1000 dollars | https://medium.com/lucky-vulnerabilities/possible-subdomain-takeovers-gives-me-1000-dollars-9f3ad682ddce?source=rss------bug_bounty-5 | Lucky Vulnerabilities | bug-bounty, bug-bounty-tips, bug-hunting, updates, news | 10-Nov-2024 |
| BugBounty — Mastering the Basics (along with Resources)[Part-3] | https://medium.com/@iabhipathak/bugbounty-mastering-the-basics-along-with-resources-part-3-1619f6854e20?source=rss------bug_bounty-5 | Abhinav Pathak | security, privacy, cybersecurity, hacking, bug-bounty | 09-Nov-2024 |
| Analyzing JavaScript Files for Retrieving Admin Credentials | https://medium.com/@abdullah12987654/analyzing-javascript-files-for-retrieving-admin-credentials-0c6f25ff507a?source=rss------bug_bounty-5 | Abdullah | web-vulnerabilities, pentesting, cyber-security-services, hacking, bug-bounty | 09-Nov-2024 |
| IDOR and Excessive Data Exposure in Mobile Application — The Tale of an IDOR # 02 | https://medium.com/@abdullah12987654/idor-and-excessive-data-exposure-in-mobile-application-9bab953ea2b6?source=rss------bug_bounty-5 | Abdullah | bug-bounty, idor-vulnerability, hacking, cyber-security-services, pentesting | 09-Nov-2024 |
| Username restrictions bypass on Hackerone program | https://medium.com/@bugbounty_learners/username-restrictions-bypass-on-hackerone-program-61f4c8ff8b44?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-writeup, bug-bounty, bug-zero, bug-bounty-tips, bugs | 09-Nov-2024 |
| API Security Penetration Testing Checklist | https://infosecwriteups.com/api-security-testing-penetration-testing-checklist-bb2969906ec1?source=rss------bug_bounty-5 | Ajay Naik | infosec, information-security, information-technology, bug-bounty, cybersecurity | 09-Nov-2024 |
| how i found 3 open redirect bugs on hackerone public program? | https://doordiefordream.medium.com/how-i-found-3-open-redirect-bugs-on-hackerone-public-program-d6f75850996b?source=rss------bug_bounty-5 | balu bandi | ethical-hacking, hacking, cybersecurity, vulnerability, bug-bounty | 09-Nov-2024 |
| How I Accidentally Found a ‘Cache Magic Trick’ — aka Unauthenticated PURGE on Varnish (Hold My… | https://medium.com/@mayankmalaviya3/how-i-accidentally-found-a-cache-magic-trick-aka-unauthenticated-purge-on-varnish-hold-my-5e13e5056618?source=rss------bug_bounty-5 | Mayank Malaviya (Aiwolfie) | bug-bounty, unauthenticated-purge, penetration-testing, security, unauthenticated | 09-Nov-2024 |
| “Hack Smarter, Not Harder: Google Dorks for Fast Bug Hunting and Recon” | https://myselfakash20.medium.com/hack-smarter-not-harder-google-dorks-for-fast-bug-hunting-and-recon-3029a4004cfd?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, bugs, bug-bounty, bug-bounty-writeup | 09-Nov-2024 |
| John the Ripper in Cybersecurity | https://infosecwriteups.com/john-the-ripper-in-cybersecurity-46c8f5c3a99f?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity-training, cybersecurity, bug-bounty, information-technology, penetration-testing | 09-Nov-2024 |
| Predicting Cyber Threats: Can We Use Threat Intelligence to Forecast Attacks Like Weather? | https://medium.com/@paritoshblogs/predicting-cyber-threats-can-we-use-threat-intelligence-to-forecast-attacks-like-weather-4f57175b25ec?source=rss------bug_bounty-5 | Paritosh | information-technology, bug-bounty, hacking, threat-intelligence, cybersecurity | 09-Nov-2024 |
| Critical Vulnerabilities in Aruba Access Points: What You Need to Know! | https://medium.com/@wiretor/critical-vulnerabilities-in-aruba-access-points-what-you-need-to-know-7053d6349bf1?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | pentesting, malware, bug-bounty, ransomware, hacking | 09-Nov-2024 |
| D-Link Exposes 60,000+ NAS Devices to Unpatched Critical Flaw | https://medium.com/@wiretor/d-link-exposes-60-000-nas-devices-to-unpatched-critical-flaw-c06b62cf67e9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, hacking, xss-attack, malware, bug-bounty | 09-Nov-2024 |
| Critical Veeam RCE Vulnerability Exploited in New Frag Ransomware Attacks | https://medium.com/@wiretor/critical-veeam-rce-vulnerability-exploited-in-new-frag-ransomware-attacks-ae75d32f6bb0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware, ransomware, xss-attack | 09-Nov-2024 |
| Palo Alto Networks Warns of Potential PAN-OS RCE Vulnerability! ️ | https://medium.com/@wiretor/palo-alto-networks-warns-of-potential-pan-os-rce-vulnerability-%EF%B8%8F-148d8b8da5a9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, xss-attack, malware, hacking, ransomware | 09-Nov-2024 |
| How to Integrate Artificial Intelligence in Bug Bounty? | https://bitpanic.medium.com/how-to-integrate-artificial-intelligence-in-bug-bounty-fab592ae6c80?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, cybersecurity, ai, penetration-testing | 09-Nov-2024 |
| My Obsidian Setup | https://cybersechemmars.medium.com/my-obsidian-setup-b3e96516feaa?source=rss------bug_bounty-5 | Cybersec with Hemmars | notetaking, cybersecurity, notes, bug-bounty, obsidian | 09-Nov-2024 |
| Broken Authentication: Full Methodology for Identifying and Exploiting Vulnerabilities | https://dineshpathro9.medium.com/broken-authentication-full-methodology-for-identifying-and-exploiting-vulnerabilities-63a55c3d4399?source=rss------bug_bounty-5 | hunter | bug-zero, bug-bounty, bugs, bug-bounty-tips, bug-bounty-writeup | 09-Nov-2024 |
| Advanced Techniques for CSRF (Cross-Site Request Forgery) Attacks: A Full Methodology Guide | https://dineshpathro9.medium.com/advanced-techniques-for-csrf-cross-site-request-forgery-attacks-a-full-methodology-guide-8db29faecc01?source=rss------bug_bounty-5 | hunter | bug-bounty-tips, csrf, bug-zero, bugs, bug-bounty | 09-Nov-2024 |
| CVE-2023–27350 : PaperCut Tryhackme Write up | https://jawstar.medium.com/cve-2023-27350-papercut-tryhackme-write-up-2237fe48d3a7?source=rss------bug_bounty-5 | Jawstar | technology, bug-bounty, tryhackme, software-development, cybersecurity | 09-Nov-2024 |
| Escalating RXSS with HttpOnly SameSite Session Cookies | https://medium.com/@dhakatedeep909/escalating-rxss-with-httponly-samesite-session-cookies-a1ba3b9e50c1?source=rss------bug_bounty-5 | Deep Dhakate AKA intrud3r | cybersecurity, hacking, bug-bounty | 09-Nov-2024 |
| RCE by finding secret hidden files via Encryption and hashing | https://medium.com/@karim.engmohamed/%D8%A7%D9%84%D8%B3%D9%84%D8%A7%D9%85-%D8%B9%D9%84%D9%8A%D9%83%D9%85-e37717c23cfd?source=rss------bug_bounty-5 | Karim Mohamed | hacker, cybersecurity, hackerone, bug-bounty, bug-bounty-tips | 09-Nov-2024 |
| Fast Setup Mobile Apps Pentest With Burpsuite And memu | https://zucki.medium.com/fast-setup-mobile-apps-pentest-with-burpsuite-and-memu-567d661b6bb9?source=rss------bug_bounty-5 | Marzucki | android-pentesting, android, pentesting, mobile-apps, bug-bounty | 08-Nov-2024 |
| Why is recon so very important? API key exposure by only recon | https://medium.com/@karim.engmohamed/why-is-recon-so-very-important-api-key-exposure-by-only-recon-f8aff4ab1ac3?source=rss------bug_bounty-5 | Karim Mohamed | cybersecurity, hacking, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 08-Nov-2024 |
| Advanced Google Dorking Techniques for Bug Bounty Hunting: Finding Responsible Disclosure Programs… | https://dineshpathro9.medium.com/advanced-google-dorking-techniques-for-bug-bounty-hunting-finding-responsible-disclosure-programs-5a00a0d9d0e9?source=rss------bug_bounty-5 | DiNeSh_PaThRo | bug-bounty, bugbounty-writeup, web-app-security, dorks, bug-bounty-tips | 08-Nov-2024 |
| Metasploit Guide :- Main weapon of Hackers | https://medium.com/@anandrishav2228/metasploit-guide-main-weapon-of-hackers-a791e72df686?source=rss------bug_bounty-5 | Rishav anand | metasploit, cybersecurity, money, hacker, bug-bounty | 08-Nov-2024 |
| SQL Injection UNION Attack, Finding a Column Containing Text | https://medium.com/@marduk.i.am/sql-injection-union-attack-finding-a-column-containing-text-ee28ff48eb30?source=rss------bug_bounty-5 | Marduk I Am | sqli, portswigger-lab, bug-bounty, infosec, sql-injection | 08-Nov-2024 |
| What to Do After Choosing a Bug Bounty Target? Part 2 | Bug Bounty Guide | https://medium.com/@js8971105/what-to-do-after-choosing-a-bug-bounty-target-part-2-bug-bounty-guide-811affb17572?source=rss------bug_bounty-5 | cyberghost | info-sec-writeups, ethical-hacking, reconnaissance-techniques, bug-bounty, cybersecurity | 08-Nov-2024 |
| CyberDef Dokumentasi | Time-Based Blind SQLI | https://hack4funacademy.medium.com/cyberdef-dokumentasi-time-based-blind-sqli-7db756ddf2ad?source=rss------bug_bounty-5 | Hack4Fun Academy | bug-bounty, hacking, cybersecurity | 08-Nov-2024 |
| Finding My First Bug: The Power of Understanding Website Logic ♀️ | https://medium.com/@mahdisalhi0500/finding-my-first-bug-the-power-of-understanding-website-logic-%EF%B8%8F-4197dd08cf29?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, bug-bounty, bug-bounty-tips, ethical-hacking, information-security | 08-Nov-2024 |
| How to Get Started in Web App Bug Bounty: Practical Steps to Keep You Motivated! ️♂️ | https://medium.com/@soorajv910/how-to-get-started-in-web-app-bug-bounty-practical-steps-to-keep-you-motivated-%EF%B8%8F-%EF%B8%8F-c6c1507c84fd?source=rss------bug_bounty-5 | sooraj v | hacking, bug-bounty, bugcrowd, bug-bounty-tips, hackerone | 08-Nov-2024 |
| How i earned easy$$$ by deleting user comments on any post | https://medium.com/thedeephub/how-i-earned-easy-by-deleting-user-comments-on-any-post-c2e226f2157a?source=rss------bug_bounty-5 | Le_Merdien | pentesting, cybersecurity, bug-bounty, penetration-testing, hacker | 08-Nov-2024 |
| “XSS ve Context Örnekleri” | https://medium.com/@sgzldmrc/xss-ve-context-%C3%B6rnekleri-6ba2bc976c1f?source=rss------bug_bounty-5 | Serdar Güzeldemirci | xss-attack, bug-bounty, cyber-security-awareness, xss-bypass | 08-Nov-2024 |
| How to Prepare for the OSEP Roadmap — A Comprehensive Guide for Cybersecurity Professionals | https://medium.com/@verylazytech/how-to-prepare-for-the-osep-roadmap-a-comprehensive-guide-for-cybersecurity-professionals-f3fecede5919?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, ethical-hacking, bug-bounty, osep, cybersecurity | 08-Nov-2024 |
| 20 Open Redirect Bugs in Few Minutes | https://systemweakness.com/20-open-redirect-bugs-in-few-minutes-c9fdabf75642?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, bug-bounty, bug-bounty-tips, cybersecurity, vulnerability | 08-Nov-2024 |
| Web App Fingerprinting in 9 Steps | https://bitpanic.medium.com/web-app-fingerprinting-in-9-steps-5b86615b56f7?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, cybersecurity, bugbounty-tips | 08-Nov-2024 |
| Email HTML injection with a simple tip | https://medium.com/@mohamed.yasser442200/email-html-injection-with-a-simple-tip-aeab346fbefc?source=rss------bug_bounty-5 | Spider4 | bug-bounty, hunting, bugcrowd, cybersecurity, pentesting | 08-Nov-2024 |
| Unpatched Vulnerabilities in Mazda Infotainment Systems Pose Serious Security Risks | https://medium.com/@wiretor/unpatched-vulnerabilities-in-mazda-infotainment-systems-pose-serious-security-risks-b634ae8883d8?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, malware, ransomware, hacking, pentesting | 08-Nov-2024 |
| Texas Oilfield Supplier Newpark Resources Hit by Ransomware Attack | https://medium.com/@wiretor/texas-oilfield-supplier-newpark-resources-hit-by-ransomware-attack-fc374aa6b8dc?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, ransomware, pentesting, malware, hacking | 08-Nov-2024 |
| Malwarebytes Acquires AzireVPN to Enhance Privacy and Security Offerings | https://medium.com/@wiretor/malwarebytes-acquires-azirevpn-to-enhance-privacy-and-security-offerings-194b3bf42554?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, ransomware, hacking, pentesting, malware | 08-Nov-2024 |
| Hackers Leveraging Winos4.0: A Growing Threat in Post-Exploitation Attacks | https://medium.com/@wiretor/hackers-leveraging-winos4-0-a-growing-threat-in-post-exploitation-attacks-e830dac3766b?source=rss------bug_bounty-5 | WIRE TOR | malware, hacking, ransomware, bug-bounty, xss-attack | 08-Nov-2024 |
| A Comprehensive Toolkit for Web Penetration Testing and Bug Hunting | https://dineshpathro9.medium.com/a-comprehensive-toolkit-for-web-penetration-testing-and-bug-hunting-21a7b01d722f?source=rss------bug_bounty-5 | DiNeSh_PaThRo | bug-bounty, bug-zero, hacking, bug-bounty-tips, web-app-security | 08-Nov-2024 |
| Top Search Engines for Pentesters | https://osintteam.blog/top-search-engines-for-pentesters-6fa90ffb6aa0?source=rss------bug_bounty-5 | D.Haddad | cybersecurity, bug-bounty, penetration-testing, hacking-tools, osint | 08-Nov-2024 |
| Unpatched Vulnerabilities in Mazda Infotainment Systems Pose Serious Security Risks | https://medium.com/@wiretor/unpatched-vulnerabilities-in-mazda-infotainment-systems-pose-serious-security-risks-b634ae8883d8?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, ransomware, hacking, pentesting | 08-Nov-2024 |
| Texas Oilfield Supplier Newpark Resources Hit by Ransomware Attack | https://medium.com/@wiretor/texas-oilfield-supplier-newpark-resources-hit-by-ransomware-attack-fc374aa6b8dc?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, ransomware, pentesting, malware, hacking | 08-Nov-2024 |
| Malwarebytes Acquires AzireVPN to Enhance Privacy and Security Offerings | https://medium.com/@wiretor/malwarebytes-acquires-azirevpn-to-enhance-privacy-and-security-offerings-194b3bf42554?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, ransomware, hacking, pentesting, malware | 08-Nov-2024 |
| Hackers Leveraging Winos4.0: A Growing Threat in Post-Exploitation Attacks | https://medium.com/@wiretor/hackers-leveraging-winos4-0-a-growing-threat-in-post-exploitation-attacks-e830dac3766b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, ransomware, bug-bounty, xss-attack | 08-Nov-2024 |
| Google Dorking in Bug Hunting: Uncovering Hidden Vulnerabilities | https://myselfakash20.medium.com/google-dorking-in-bug-hunting-uncovering-hidden-vulnerabilities-aebe773f73be?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, bug-bounty-writeup, dorking, bugs, bug-bounty-tips | 07-Nov-2024 |
| My first acknowledgement from Government NCIIPC India (A unit of NTRO) of my bug Bounty journey… | https://medium.com/@subhajit_taki77/my-first-acknowledgement-from-government-nciipc-india-a-unit-of-ntro-of-my-bug-bounty-journey-fda6637766f9?source=rss------bug_bounty-5 | Subhajit_Taki77 | cybersecurity, bug-bounty, acknowledgement, nciipc | 07-Nov-2024 |
| Bypass Rich Text Editors lead to Stored XSS - $500 Rewards | https://medium.com/@bugbounty_learners/bypass-rich-text-editors-lead-to-stored-xss-500-rewards-077e22eba20f?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-writeup, bug-bounty, bugs, bug-bounty-tips | 07-Nov-2024 |
| Why Bug Bounty Failures Occur — Key Insights for Success | https://r3dw4n4hm3d.medium.com/why-bug-bounty-failures-occur-key-insights-for-success-2813349c5e1a?source=rss------bug_bounty-5 | R3DW4N 4HM3D | bug-bounty, vulnerabilityresearch, cybersecurity, ethical-hacking | 07-Nov-2024 |
| Exploring the OWASP API Security Top 10: A Guide to Securing Your APIs | https://medium.com/@ad.abhi0013/exploring-the-owasp-api-security-top-10-a-guide-to-securing-your-apis-5ee4456cb9c3?source=rss------bug_bounty-5 | Abhishek Adhikari | bug-bounty, owasp-api-security-top-10, api | 07-Nov-2024 |
| Account Takeover for Google SSO Users | https://7odamoo.medium.com/account-takeover-for-google-sso-users-b50f99b49f0d?source=rss------bug_bounty-5 | Mahmoud Hamed | bug-bounty, pentesting | 07-Nov-2024 |
| From an Out-of-Scope Bug to Unlocking Lifetime Premium Accounts in Mozilla | https://0d-amr.medium.com/from-an-out-of-scope-bug-to-unlocking-lifetime-premium-accounts-in-mozilla-fe96371d814c?source=rss------bug_bounty-5 | Amr | ctf, bug-bounty, penetration-testing, cyber-secuity | 07-Nov-2024 |
| Exposing hidden DOS techniques laying in plain sight. | https://medium.com/@omarahmed_13016/exposing-hidden-dos-techniques-laying-in-plain-sight-29965ab1d53b?source=rss------bug_bounty-5 | Omar Ahmed | hacking, vulnerability, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 07-Nov-2024 |
| No Rate Limiting — Bug | https://medium.com/@Jitheshjithu/no-rate-limiting-bug-7107cfc5d175?source=rss------bug_bounty-5 | Jithesh | bug-bounty-writeup, no-rate-limit, bugs, bug-bounty, bug-bounty-tips | 07-Nov-2024 |
| Canada Orders TikTok to Close Canadian Operations Amid Growing Security Concerns | https://medium.com/@wiretor/canada-orders-tiktok-to-close-canadian-operations-amid-growing-security-concerns-45b40c461986?source=rss------bug_bounty-5 | WIRE TOR | hacking, xss-attack, malware, bug-bounty, pentesting | 07-Nov-2024 |
| SteelFox Malware Hits Hard: Protect Your System This Black Friday & Cyber Monday with 50% Off… | https://medium.com/@wiretor/steelfox-malware-hits-hard-protect-your-system-this-black-friday-cyber-monday-with-50-off-d96831583b9e?source=rss------bug_bounty-5 | WIRE TOR | hacking, breached, bug-bounty, malware, usa | 07-Nov-2024 |
| How to Find CSRF Vulnerabilities Using Kali Linux: A Full Methodology | https://dineshpathro9.medium.com/how-to-find-csrf-vulnerabilities-using-kali-linux-a-full-methodology-070a21aee0b5?source=rss------bug_bounty-5 | DiNeSh_PaThRo | bug-bounty-tips, bug-bounty, hacking, csrf, bugbounty-writeup | 07-Nov-2024 |
| North Korean Hackers Target macOS Users with Fake Crypto PDFs | https://medium.com/@wiretor/north-korean-hackers-target-macos-users-with-fake-crypto-pdfs-d6d93c347dfe?source=rss------bug_bounty-5 | WIRE TOR | usa, pentesting, malware, hacking, bug-bounty | 07-Nov-2024 |
| Uygulamalarla XSS’e Gerçekçi Bir Yaklaşım | https://medium.com/@sgzldmrc/uygulamalarla-xsse-ger%C3%A7ek%C3%A7i-bir-yakla%C5%9F%C4%B1m-a3e82ae0be3a?source=rss------bug_bounty-5 | Serdar Güzeldemirci | xss-attack, bug-bounty, xss-vulnerability, web-app-security, cross-site-scripting | 07-Nov-2024 |
| OAuth Misconfiguration Pre-Account Takeover | https://medium.com/h7w/oauth-misconfiguration-pre-account-takeover-535beb8d1987?source=rss------bug_bounty-5 | socalledhacker | infosec, hacking, bug-bounty-tips, cybersecurity, bug-bounty | 07-Nov-2024 |
| China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait | https://medium.com/@wiretor/china-aligned-mirrorface-hackers-target-eu-diplomats-with-world-expo-2025-bait-a289ad3ec600?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, hacking, malware, usa, xss-attack | 07-Nov-2024 |
| How To Automate Your Broad Scope Recon | https://thexssrat.medium.com/how-to-automate-your-broad-scope-recon-a4ff998dea0e?source=rss------bug_bounty-5 | Thexssrat | bug-bounty-writeup, hacks, bug-bounty-tips, hacking, bug-bounty | 07-Nov-2024 |
| Understanding Broken Access Control (BAC): A Comprehensive Guide | https://thexssrat.medium.com/understanding-broken-access-control-bac-a-comprehensive-guide-c0e325c43b04?source=rss------bug_bounty-5 | Thexssrat | hacking, broken-access-control, hacker, hacks, bug-bounty | 07-Nov-2024 |
| Developers Don’t Care About Security | https://medium.com/@krishanthan2022.4.4/developers-dont-care-about-security-e4814ecc4907?source=rss------bug_bounty-5 | R.Krishanthan | bug-bounty, web-security, penetration-testing, vulnerability, development | 06-Nov-2024 |
| Stored HTML Injection to Stored Url Redirection | https://medium.com/@abdullah12987654/stored-html-injection-to-stored-url-redirection-40a1c8452f12?source=rss------bug_bounty-5 | Abdullah | html-injection, url-redirection, hacking, bug-bounty, pentesting | 06-Nov-2024 |
| FUZZING That Leads to Internal Source Code! | https://medium.com/@rootplinix/fuzzing-that-leads-to-internal-source-code-ef992143c015?source=rss------bug_bounty-5 | Abu Hurayra | infosec, cybersecurity, bug-bounty, hacking | 06-Nov-2024 |
| OAuth Under Siege: The Dangers of Account Impersonation | https://medium.com/@ProwlSec/oauth-under-siege-the-dangers-of-account-impersonation-df0e780f1c4f?source=rss------bug_bounty-5 | ProwlSec | hacking, tips, account-takeover, bug-bounty, bug-hunting | 06-Nov-2024 |
| How I Earned $350 Exploiting Clickjacking Vulnerability to Trigger XSS Attack | https://medium.com/@abdulparkar/how-i-earned-350-exploiting-clickjacking-vulnerability-to-trigger-xss-attack-23b3216ca640?source=rss------bug_bounty-5 | Abdul Rehman Parkar | bug-bounty-tips, bug-bounty-writeup, bug-bounty, hacking, ethical-hacking | 06-Nov-2024 |
| SQL Injection UNION Attack, Determining the Number of Columns Returned by the Query | https://medium.com/@marduk.i.am/sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query-a740b76989fe?source=rss------bug_bounty-5 | Marduk I Am | portswigger-lab, bug-bounty, sql-injection, sqli, information-security | 06-Nov-2024 |
| XSS Restction bypass on Hackerone program | https://medium.com/@bugbounty_learners/xss-restction-bypass-on-hackerone-program-a7b37636425d?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty, pentesting, bugs, bug-bounty-tips, cybersecurity | 06-Nov-2024 |
| A Step-by-Step Guide to the Bug Hunting Process: From Reconnaissance to Reporting | https://myselfakash20.medium.com/a-step-by-step-guide-to-the-bug-hunting-process-from-reconnaissance-to-reporting-9991b06314b8?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, bugbounty-writeup, bug-bounty-writeup, bug-hunting, bug-bounty | 06-Nov-2024 |
| Mastering Bug Hunting: A Beginner’s Guide to Effective Methodologies | https://medium.com/@secinfinitylabs/mastering-bug-hunting-a-beginners-guide-to-effective-methodologies-fc7491625645?source=rss------bug_bounty-5 | Secinfinity Labs | bug-hunting, infosecurity, cybersecurity, bug-bounty-tips, bug-bounty | 06-Nov-2024 |
| Bug Hunting Recon | https://medium.com/@prajwalpatil453/bug-hunting-recon-840455f4d71a?source=rss------bug_bounty-5 | Anonstrk | bug-bounty, reconnaissance, bug-bounty-tips, methodology | 06-Nov-2024 |
| Manipulated All Files on Server of a HackerOne Target | https://systemweakness.com/manipulated-all-files-on-server-of-a-hackerone-target-7b60a6dad117?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, pentesting, bug-bounty-tips, infosec, cybersecurity | 06-Nov-2024 |
| My First and easiest Bug i have found | https://aboalezz1.medium.com/my-first-and-easiest-bug-i-have-found-3b7daee5d2f9?source=rss------bug_bounty-5 | Mohamed AboAlezz | web-hacking, bug-hunting, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 06-Nov-2024 |
| Understanding Types of Privileged Accounts and Their Security Risks | https://bitpanic.medium.com/understanding-types-of-privileged-accounts-and-their-security-risks-935605f2232c?source=rss------bug_bounty-5 | Bit Panic | cybersecurity, bugbounty-writeup, bug-bounty | 06-Nov-2024 |
| All About JWT Vulnerabilities | https://medium.com/@0x_xnum/all-about-jwt-vulnerabilities-ef7314c4dd02?source=rss------bug_bounty-5 | Ahmed Tarek | jwt-exploitation, bugbounty-writeup, bug-bounty, authentication, hacking | 06-Nov-2024 |
| Most Commonly Used Tools in Bug Bounty | https://medium.com/@halildeniz313/most-commonly-used-tools-in-bug-bounty-4603382ecee3?source=rss------bug_bounty-5 | Halildeniz | web-security, cyber-security-awareness, bug-bounty-tips, cybersecurity, bug-bounty | 06-Nov-2024 |
| An IDOR and Auth Bypass That Led to Mass Account Takeover — KSFE | https://1-day.medium.com/an-idor-and-auth-bypass-that-led-to-mass-account-takeover-ksfe-db04cec8d730?source=rss------bug_bounty-5 | 1day | bug-bounty-writeup, hacking, bug-bounty, penetration-testing, writeup | 06-Nov-2024 |
| ⚠️ Cyberattack Causes Statewide Outage in Washington Courts | https://medium.com/@wiretor/%EF%B8%8F-cyberattack-causes-statewide-outage-in-washington-courts-cb9bcd6264a4?source=rss------bug_bounty-5 | WIRE TOR | xss-attack, malware, usa, hacking, bug-bounty | 06-Nov-2024 |
| Nokia Breached by IntelBroker: Source Code Allegedly Stolen | https://medium.com/@wiretor/nokia-breached-by-intelbroker-source-code-allegedly-stolen-a1fa5b62a10a?source=rss------bug_bounty-5 | WIRE TOR | malware, hacked, bug-bounty, hacking, xss-attack | 06-Nov-2024 |
| INTERPOL Disrupts Over 22,000 Malicious Servers in Global Crackdown on Cybercrime | https://medium.com/@wiretor/interpol-disrupts-over-22-000-malicious-servers-in-global-crackdown-on-cybercrime-9f4e2840dc6e?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, pentesting, malware, xss-attack, hacking | 06-Nov-2024 |
| Microchip Technology Reports $21.4 Million Loss From Ransomware Attack | https://medium.com/@wiretor/microchip-technology-reports-21-4-million-loss-from-ransomware-attack-a123d2609b91?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, malware, trump, usa, hacking | 06-Nov-2024 |
| Bypassing Promo Code Validation via Response Manipulation Enabled the Creation of a Business… | https://anas0x1.medium.com/bypassing-promo-code-validation-via-response-manipulation-enabled-the-creation-of-a-business-3f926b19c0bb?source=rss------bug_bounty-5 | Anas Ibrahim | penetration-testing, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 06-Nov-2024 |
| IDOR Vulnerability Allowed the Deletion of Any User from an Administrator Account. | https://anas0x1.medium.com/idor-vulnerability-allowed-the-deletion-of-any-user-from-an-administrator-account-da64e79ce1b0?source=rss------bug_bounty-5 | Anas Ibrahim | bug-bounty, bug-bounty-tips, bug-bounty-writeup, penetration-testing, idor | 06-Nov-2024 |
| Behind the Scenes: How I Hacked one of the largest Amusement Park in the Philippines. | https://medium.com/hacking101/behind-the-scenes-how-i-hacked-one-of-the-largest-amusement-park-in-the-philippines-be38566ed563?source=rss------bug_bounty-5 | Pwndec0c0 | bug-bounty-tips, bug-bounty-writeup, penetration-testing, bug-bounty, hacking | 06-Nov-2024 |
| Essential Bug Hunting Tools for Beginners: Start Your Journey in Cybersecurity | https://myselfakash20.medium.com/essential-bug-hunting-tools-for-beginners-start-your-journey-in-cybersecurity-ea51e1f26068?source=rss------bug_bounty-5 | Akash Ghosh | bugbounty-writeup, bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 05-Nov-2024 |
| How I Got Paid for an Out-of-Scope Vulnerability | https://medium.com/@abdulparkar/how-i-got-paid-for-an-out-of-scope-vulnerability-4e51eb93db5c?source=rss------bug_bounty-5 | Abdul Rehman Parkar | bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips, infosec-write-ups | 05-Nov-2024 |
| Remote Code Execution (RCE): An In-Depth Guide with practical | https://medium.com/@anandrishav2228/remote-code-execution-rce-an-in-depth-guide-with-practical-7082a7e17e97?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, money, ai, hacker, bug-bounty | 05-Nov-2024 |
| IDOR Leading To Improper Access Control | https://medium.com/@shadykhaled2002/idor-leading-to-improper-access-control-c3999aa28fc4?source=rss------bug_bounty-5 | Le_Merdien | cybersecurity, bug-bounty, pentesting, penetration-testing | 05-Nov-2024 |
| Alert: Reflected XSS Detected | https://osintteam.blog/alert-reflected-xss-detected-57850c34a61e?source=rss------bug_bounty-5 | Dishant Modi | xss-attack, penetration-testing, bug-bounty-tips, bug-bounty, cybersecurity | 05-Nov-2024 |
| Lesser-Known Tools for Web Bug Bounty Hunting | https://medium.com/@halildeniz313/lesser-known-tools-for-web-bug-bounty-hunting-e10a95fa25bd?source=rss------bug_bounty-5 | Halildeniz | web-security, cyber-security-awareness, bug-bounty-tips, bug-bounty, cybersecurity | 05-Nov-2024 |
| Vulnerabilities Weaponizing — Cross-site Scripting (XSS) | https://medium.com/@aufzayed/vulnerabilities-weaponizing-cross-site-scripting-xss-608a4f45321c?source=rss------bug_bounty-5 | Abdelrhman Zayed | exploit-development, red-teaming, penetration-testing, cybersecurity, bug-bounty | 05-Nov-2024 |
| €50 bounty — Long String DOS Attack Bug and POC Steps | https://medium.com/h7w/50-bounty-long-string-dos-attack-bug-and-poc-steps-eaa8a5777263?source=rss------bug_bounty-5 | socalledhacker | cybersecurity, infosec, bug-bounty, bug-bounty-tips, hacking | 05-Nov-2024 |
| Zero-Day FOMO: The Fear of Missing Out on the Next Big Exploit | https://medium.com/@paritoshblogs/zero-day-fomo-the-fear-of-missing-out-on-the-next-big-exploit-d3b42d35323c?source=rss------bug_bounty-5 | Paritosh | zero-day, vulnerability, cybersecurity, hacking, bug-bounty | 05-Nov-2024 |
| SIP OPTIONS Abuse And Flood Vulnerability (exploit Voip) | https://medium.com/@zpx15266/sip-options-abuse-and-flood-vulnerability-exploit-voip-b9bc030909ae?source=rss------bug_bounty-5 | ramzey elsayed mohamed | bug-bounty-writeup, penetration-testing, bug-bounty, bug-bounty-tips, bugs | 05-Nov-2024 |
| How I Got Paid for an Out-of-Scope Vulnerability $$$ | https://medium.com/@abdulparkar/how-i-got-paid-for-an-out-of-scope-vulnerability-4e51eb93db5c?source=rss------bug_bounty-5 | Abdul Rehman Parkar | bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips, infosec-write-ups | 05-Nov-2024 |
| Tips to Avoid Duplicates or N/A Reports in Bug Bounty Programs | https://bitpanic.medium.com/tips-to-avoid-duplicates-or-n-a-reports-in-bug-bounty-programs-a067a4e54d5e?source=rss------bug_bounty-5 | Bit Panic | cybersecurity, bug-bounty | 05-Nov-2024 |
| 55 YouTube Channels to Learn HACKING!!!!! | https://osintteam.blog/55-youtube-channels-to-learn-hacking-b5167d3125d9?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty, hacking, technology, programming, cybersecurity | 05-Nov-2024 |
| How I found my first bug! | https://medium.com/@karim.engmohamed/how-i-found-my-first-bug-b1f21046deb7?source=rss------bug_bounty-5 | Karim Mohamed | python, bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 05-Nov-2024 |
| Unleashing the Bug Hunter Within: A Curated Toolkit and Proven Process | https://pwndecoco.medium.com/unleashing-the-bug-hunter-within-a-curated-toolkit-and-proven-process-fb2f89c7f1f0?source=rss------bug_bounty-5 | Pwndec0c0 | programming, cybersecurity, penetration-testing, bug-bounty, hacking | 05-Nov-2024 |
| Google Fixes Dangerous Android Exploits | https://medium.com/@wiretor/google-fixes-dangerous-android-exploits-6e6be3465e6c?source=rss------bug_bounty-5 | WIRE TOR | usa, hacking, breached, malware, bug-bounty | 05-Nov-2024 |
| Easy logic bug that leaks the email for every user | https://medium.com/@banertheinrich/easy-logic-bug-that-leaks-the-email-for-every-user-ef2d9d0cf088?source=rss------bug_bounty-5 | Adham Heinrich | bug-bounty, cybersecurity, hackerone, bug-bounty-tips, bug-bounty-writeup | 04-Nov-2024 |
| Panduan “Bug Bounty Programs pada Aplikasi Laravel” berdasarkan kerangka yang telah disusun: | https://medium.com/@_azwar/panduan-bug-bounty-programs-pada-aplikasi-laravel-berdasarkan-kerangka-yang-telah-disusun-7cc3b230397c?source=rss------bug_bounty-5 | azwar | laravel, bug-bounty | 04-Nov-2024 |
| Cloud flare bypass leads to Account Takeover via Password Reset Poisoning | https://medium.com/@abdulparkar/cloud-flare-bypass-leads-to-account-takeover-via-password-reset-poisoning-ba349d784b97?source=rss------bug_bounty-5 | Abdul Rehman Parkar | bug-bounty, ethical-hacking, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 04-Nov-2024 |
| How to Find the Best Resources for Learning Bug Bounty and Cybersecurity |PRO Tip | https://medium.com/@shaikhminhaz1975/how-to-find-the-best-resources-for-learning-bug-bounty-and-cybersecurity-pro-tip-d5e915e82539?source=rss------bug_bounty-5 | Shaikh Minhaz | penetration-testing, best, cybersecurity, bug-bounty, ethical-hacking | 04-Nov-2024 |
| Vibe Yo’Tribe | https://medium.com/@onelovemafia/vibe-yotribe-3d8a0c098ee2?source=rss------bug_bounty-5 | OneLoveMafia | climate-change, machine-learning, bug-bounty, blockchain, philosophy | 04-Nov-2024 |
| How to Configure Proxies in Browser for Bug-Bounty | https://medium.com/@anandrishav2228/how-to-configure-proxies-in-browser-for-bug-bounty-c175c5513e1a?source=rss------bug_bounty-5 | Rishav anand | vpn, proxy, cybersecurity, money, bug-bounty | 04-Nov-2024 |
| Bypass the Blocked IP address while Pentesting. | https://medium.com/@anandrishav2228/bypass-the-blocked-ip-address-while-pentesting-c4c02a8dc14d?source=rss------bug_bounty-5 | Rishav anand | money, cybersecurity, bug-bounty, ip-address, hacking | 04-Nov-2024 |
| bugbountytraining靶场(四) | https://medium.com/@starkxun5215/bugbountytraining%E9%9D%B6%E5%9C%BA-%E5%9B%9B-378fa157f500?source=rss------bug_bounty-5 | xun stark | bug-bounty | 04-Nov-2024 |
| Breaking the Rules: How a Race Condition Allowed Me to Bypass the Limits | https://medium.com/@manibharathi.b/breaking-the-rules-how-a-race-condition-allowed-me-to-bypass-the-limits-by-mani-d6840746a04e?source=rss------bug_bounty-5 | Mani Bharathi B | bug-bounty-tips, bug-bounty, cybersecurity, vulnerability, bug-bounty-writeup | 04-Nov-2024 |
| Account takeover for $3000 | https://sushantdhopat.medium.com/account-takeover-for-3000-722ee6f5fbde?source=rss------bug_bounty-5 | sushantdhopat | bug-bounty, infosec | 04-Nov-2024 |
| Exploit exposed zendesk API Token for $1000 | https://sushantdhopat.medium.com/exploit-exposed-zendesk-api-token-for-1000-847966489070?source=rss------bug_bounty-5 | sushantdhopat | infosec, bug-bounty, information-security | 04-Nov-2024 |
| IDOR leading to broken functionality | https://medium.com/@shadykhaled2002/idor-leading-to-broken-functionality-3b464213fa76?source=rss------bug_bounty-5 | Le_Merdien | penetration-testing, cybersecurity, pentesting, bug-bounty | 04-Nov-2024 |
| The OAuth Oversight: When Configuration Errors Turn into Account Hijacks | https://medium.com/@nightcoders0/the-oauth-oversight-when-configuration-errors-turn-into-account-hijacks-5ed1f9c83d16?source=rss------bug_bounty-5 | Nightcoders | pentesting, hacking, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 04-Nov-2024 |
| How I Found a €100 Bug at DCU: From “Not Applicable” to Cashing In! | https://medium.com/@trffnsec/how-i-found-a-100-bug-at-dcu-from-not-applicable-to-cashing-in-2e58699a8faa?source=rss------bug_bounty-5 | TrffnSec | bugbounty-writeup, hacking, bug-bounty-tips, ethical-hacking, bug-bounty | 04-Nov-2024 |
| Essential One-Liner Commands for Bug Bounty Hunters and Pentesters | https://infosecwriteups.com/essential-one-liner-commands-for-bug-bounty-hunters-and-pentesters-7648ec305c66?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, bug-bounty, automation, cybersecurity | 04-Nov-2024 |
| How I Found HTML Injection? | https://medium.com/@gitlime71/how-i-found-html-injection-bdbbf2861d95?source=rss------bug_bounty-5 | Raccoon | bug-bounty, penetration-testing, bug-bounty-writeup | 04-Nov-2024 |
| Columbus Ransomware Attack: Data of 500,000 Stolen | https://medium.com/@wiretor/columbus-ransomware-attack-data-of-500-000-stolen-93076d58689c?source=rss------bug_bounty-5 | WIRE TOR | malware, pentesting, usa, pentest, bug-bounty | 04-Nov-2024 |
| Unveiling the “Pygmy Goat” Malware: A New Threat in Cybersecurity | https://medium.com/@wiretor/unveiling-the-pygmy-goat-malware-a-new-threat-in-cybersecurity-aaeb360f9497?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, hacking, usa, malware, pentesting | 04-Nov-2024 |
| Meet “Interlock” Ransomware — A New Threat Targeting FreeBSD Servers | https://medium.com/@wiretor/meet-interlock-ransomware-a-new-threat-targeting-freebsd-servers-4be6ba312c62?source=rss------bug_bounty-5 | WIRE TOR | hacking, malware, pentesting, bug-bounty, usa | 04-Nov-2024 |
| Introducing SubdomainRadar.io: | https://medium.com/@alexandrevandammepro/introducing-subdomainradar-io-727d765445f2?source=rss------bug_bounty-5 | Alexandre Vandamme | bug-bounty, vulnerability, bug-bounty-tips, osint, security | 04-Nov-2024 |
| Essential One-Liner Commands for Bug Bounty Hunters and Pentesters | https://systemweakness.com/essential-one-liner-commands-for-bug-bounty-hunters-and-pentesters-7648ec305c66?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, bug-bounty, automation, cybersecurity | 04-Nov-2024 |
| ExploiterX — Vulnerability Scanner Tool | https://anishalx.medium.com/exploiterx-vulnerability-scanner-tool-bc1796e278a1?source=rss------bug_bounty-5 | Anish | web3, python, bug-bounty, penetration-testing, hacking | 03-Nov-2024 |
| Must-Have Tools for Cybersecurity Researchers: A Complete Installation Guide | https://myselfakash20.medium.com/must-have-tools-for-cybersecurity-researchers-a-complete-installation-guide-5738022e535f?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, tools, bug-bounty, recon, reconnaissance | 03-Nov-2024 |
| AcquiFinder | a tool to grab acquisitions of a company by Crunchbase | https://medium.com/@AmmarxLe0x/acquifinder-a-tool-to-grab-acquisitions-of-a-company-by-crunchbase-6315db784813?source=rss------bug_bounty-5 | xLe0x | bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bug-bounty-program, bug-bounty | 03-Nov-2024 |
| “Keyed In” Compromising an entire organization through their API | https://medium.com/@s1renhead/keyed-in-compromising-an-entire-organization-through-their-api-2ed6cb54eec5?source=rss------bug_bounty-5 | S1renhead | bug-bounty-writeup, bug-bounty, hacking, bug-bounty-tips | 03-Nov-2024 |
| [Hacking impact] Acees admin panel | https://medium.com/@nagashygaballah/hacking-impact-acees-admin-panel-a4326a36e208?source=rss------bug_bounty-5 | 111xNagashy | hacker, hackerone, hacking, bug-bounty, security | 03-Nov-2024 |
| How I Discovered RXSS Bug on Microsoft subdomain !!! | https://medium.com/@sayantichy/how-i-discovered-rxss-bug-on-microsoft-subdomain-21082191ad10?source=rss------bug_bounty-5 | Sayanti Chowdhury | xss-vulnerability, bug-bounty, xss-attack, first-bug, reflected-xss | 03-Nov-2024 |
| Getting Back on the Cybersecurity Write-Ups: Return to Medium | https://mukibas37.medium.com/getting-back-on-the-cybersecurity-write-ups-return-to-medium-1ac51c9edde9?source=rss------bug_bounty-5 | Mukilan Baskaran | cybersecurity, infosec, back-to-writing, ctf, bug-bounty | 03-Nov-2024 |
| A Comprehensive Guide to SQL Injection: Types, Hunting Methods, and Tools | https://medium.com/@n4itr0_07/a-comprehensive-guide-to-sql-injection-types-hunting-methods-and-tools-8d716dd34355?source=rss------bug_bounty-5 | N4!TR0 07 | sql-injection, bug-bounty, bug-bounty-tips, bugbounty-writeup, cybersecurity | 03-Nov-2024 |
| IDOR Exploit: Gaining Unauthorized Control Over Users’ Shopping Baskets | https://0xmatrix.medium.com/idor-exploit-gaining-unauthorized-control-over-users-shopping-baskets-122650091cf5?source=rss------bug_bounty-5 | Mo2men Elmady | bug-bounty, hacking, idor, penetration-testing, bugs | 03-Nov-2024 |
| Dstat.cc DDoS Site Seized & Two Suspects Arrested in Germany | https://medium.com/@wiretor/dstat-cc-ddos-site-seized-two-suspects-arrested-in-germany-c8d44187b181?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, malware, hacking, pentesting, usa | 03-Nov-2024 |
| CRA Breach Exposed: Over 62,000 Taxpayer Accounts Compromised! | https://medium.com/@wiretor/cra-breach-exposed-over-62-000-taxpayer-accounts-compromised-62bc0cf3cb9a?source=rss------bug_bounty-5 | WIRE TOR | malware, bug-bounty, hacking, pentesting, usa | 03-Nov-2024 |
| FBI Arrests Suspect in SEC Account Hack: What This Means for Cybersecurity | https://medium.com/@wiretor/fbi-arrests-suspect-in-sec-account-hack-what-this-means-for-cybersecurity-735d8dd72512?source=rss------bug_bounty-5 | WIRE TOR | hacking, usa, bug-bounty, pentesting, malware | 03-Nov-2024 |
| Becoming a Web Security Specialist: Essential Insights and a Roadmap | https://medium.com/@halildeniz313/becoming-a-web-security-specialist-essential-insights-and-a-roadmap-91032925d1aa?source=rss------bug_bounty-5 | Halildeniz | cyber-security-awareness, bug-bounty, cybersecurity, web-security, ethical-hacking | 03-Nov-2024 |
| Time Based SQL Injection Bug Hunting Methodology | https://medium.com/@abhirupkonwar04/time-based-sql-injection-bug-hunting-methodology-be485de5ab9e?source=rss------bug_bounty-5 | AbhirupKonwar | ethical-hacking, bug-bounty, cybersecurity, sql-injection, pentesting | 02-Nov-2024 |
| Time Based SQL Injection Bug Hunting Methodology | https://osintteam.blog/time-based-sql-injection-bug-hunting-methodology-be485de5ab9e?source=rss------bug_bounty-5 | AbhirupKonwar | ethical-hacking, bug-bounty, cybersecurity, sql-injection, pentesting | 02-Nov-2024 |
| Simple Tips for Bug Bounty Beginners: Escalating to XSS (XSS Series Part — 2) | https://medium.com/@anishnarayan/simple-tips-for-bug-bounty-beginners-escalating-to-xss-xss-series-part-2-1d6b75ecf942?source=rss------bug_bounty-5 | Anish Narayan | technology, programming, cybersecurity, bug-bounty-writeup, bug-bounty | 02-Nov-2024 |
| Breaking Into Information Security as a Fresher: A Guide to Starting Your Journey | https://medium.com/@nitinbasera11/breaking-into-information-security-as-a-fresher-a-guide-to-starting-your-journey-caa253c0f5ae?source=rss------bug_bounty-5 | Nitinbasera | bug-bounty, security, cybersecurity, web-app-security, infosec | 02-Nov-2024 |
| My Journey as a Bug Bounty Hunter and Web3 Enthusiast: Tips for Beginners | https://medium.com/@veerendravamshi/my-journey-as-a-bug-bounty-hunter-and-web3-enthusiast-tips-for-beginners-50aa0bfbfc78?source=rss------bug_bounty-5 | Veerendra Vamshi | blockchain, bug-bounty, web3, cryptocurrency, defi | 02-Nov-2024 |
| Hacking For Free. Dodging Paying For Hacking Knowledge System | Primary Hacking School #9 | https://medium.com/@nnface/hacking-for-free-dodging-paying-for-hacking-knowledge-system-primary-hacking-school-9-c86f6dd3752c?source=rss------bug_bounty-5 | NnFace | hacking, cybersecurity, kali-linux, money, bug-bounty | 02-Nov-2024 |
| Microsoft Acknowledges Outlook Freezing Issue and Offers Workarounds | https://medium.com/@wiretor/microsoft-acknowledges-outlook-freezing-issue-and-offers-workarounds-52fa28e41f13?source=rss------bug_bounty-5 | WIRE TOR | hacking, ransomware, malware, pentesting, bug-bounty | 02-Nov-2024 |
| Account Takeover Via Google Auth Misconfiguration | https://medium.com/@abdulparkar/account-takeover-via-google-auth-misconfiguration-af4a59dd82e7?source=rss------bug_bounty-5 | Abdul Rehman Parkar | ethical-hacking, bug-bounty-tips, hacking, bug-bounty, bug-bounty-writeup | 02-Nov-2024 |
| bugbountytraining靶场(三) | https://medium.com/@starkxun5215/bugbountytraining%E9%9D%B6%E5%9C%BA-%E4%B8%89-dfe55be3123f?source=rss------bug_bounty-5 | xun stark | bug-bounty | 01-Nov-2024 |
| Hard Server-Side Request Forgery (SSRF) A bypass method to RCE and Port Scan | https://medium.com/@sarvour/hard-server-side-request-forgery-ssrf-a-bypass-method-to-rce-and-port-scan-61adf085d62a?source=rss------bug_bounty-5 | sarvour | pentesting, security, rce, bug-bounty, writeup | 01-Nov-2024 |
| Template Engines Injection 101 | https://medium.com/@0xAwali/template-engines-injection-101-4f2fe59e5756?source=rss------bug_bounty-5 | Mahmoud M. Awali | bug-bounty, hacking | 01-Nov-2024 |
| Web Application Basics — Tryhackme Walkthrough | https://medium.com/@TRedEye/web-application-basics-tryhackme-walkthrough-ee6a0cf2f1f6?source=rss------bug_bounty-5 | TRedEye | cybersecurity, hacking, bug-bounty, website, tryhackme | 01-Nov-2024 |
| Configuring Burp Suite with Firefox (Step-by-Step) | https://harshbardhanx.medium.com/configuring-burp-suite-with-firefox-step-by-step-40f56a706546?source=rss------bug_bounty-5 | Harsh Bardhan | bug-bounty, cybersecurity, bug-bounty-writeup, burpsuite, bug-bounty-tips | 01-Nov-2024 |
| Hackers Target Critical Zero-Day Vulnerabilities in PTZ Cameras | https://medium.com/@wiretor/hackers-target-critical-zero-day-vulnerabilities-in-ptz-cameras-d2d5023d329d?source=rss------bug_bounty-5 | WIRE TOR | pentest, zero-day, malware, bug-bounty, ransomware | 01-Nov-2024 |
| qBittorrent Security Flaw Fixed After 14 Years Upgrade Now! | https://medium.com/@wiretor/qbittorrent-security-flaw-fixed-after-14-years-upgrade-now-bfa491d214bb?source=rss------bug_bounty-5 | WIRE TOR | xss-attack, bug-bounty, hacking, malware, pentesting | 01-Nov-2024 |
| New LightSpy Spyware Version Targets iPhones with Advanced Surveillance Tactics | https://medium.com/@wiretor/new-lightspy-spyware-version-targets-iphones-with-advanced-surveillance-tactics-154f8887cd42?source=rss------bug_bounty-5 | WIRE TOR | hacking, apple, xss-attack, bug-bounty, malware | 01-Nov-2024 |
| The Pen-Tester’s Muse: Writing Exploits into Earnings on Medium | https://medium.com/illumination/the-pen-testers-muse-writing-exploits-into-earnings-on-medium-a739abaab422?source=rss------bug_bounty-5 | Quintius Walker | bug-bounty, cybersecurity, poetry, creativity, poetry-on-medium | 01-Nov-2024 |
| Reasons for Failure in Bug Bounty Programs and the Path to Success | https://medium.com/@halildeniz313/reasons-for-failure-in-bug-bounty-programs-and-the-path-to-success-af19917f4be9?source=rss------bug_bounty-5 | Halildeniz | bug-bounty-tips, cybersecurity, bug-bounty, pentesting, ethical-hacking | 01-Nov-2024 |
| bugbountytraining靶场(二) | https://medium.com/@starkxun5215/bugbountytraining%E9%9D%B6%E5%9C%BA-%E4%BA%8C-669c3ac29651?source=rss------bug_bounty-5 | xun stark | bug-bounty | 31-Oct-2024 |
| How HTML injection can help to make $1000. | https://medium.com/@anandrishav2228/how-html-injection-can-help-to-make-1000-531c6f7b6672?source=rss------bug_bounty-5 | Rishav anand | html, ai, bug-bounty, money, cybersecurity | 31-Oct-2024 |
| HOW I FOUND CVE-2023–35813? | https://doordiefordream.medium.com/how-i-found-cve-2023-35813-c239c2f03192?source=rss------bug_bounty-5 | balu bandi | cve, ethical-hacking, bug-bounty, cybersecurity, writing | 31-Oct-2024 |
| OAuth Account Takeover (ATO) Vulnerability via Email Manipulation | https://medium.com/@muhammedgalal66/oauth-account-takeover-ato-vulnerability-via-email-manipulation-94e0e942bcb8?source=rss------bug_bounty-5 | Dg0x6 | account-takeover-attacks, account-takeover, bug-bounty-tips, hackerone, bug-bounty | 31-Oct-2024 |
| SSRF to Internal Port Scanning on Self-Hosted Platform | https://infosecwriteups.com/ssrf-to-internal-port-scanning-on-self-hosted-platform-05a17a461eed?source=rss------bug_bounty-5 | JEETPAL | ssrf, bugbounty-tips, bug-bounty, bug-bounty-writeup, cybersecurity | 31-Oct-2024 |
| 7 Real-Life Bug Bounties That Made Headlines: Lessons You Can’t Afford to Miss! | https://medium.com/@qaafqasim/7-real-life-bug-bounties-that-made-headlines-lessons-you-cant-afford-to-miss-4b812b2caafa?source=rss------bug_bounty-5 | Qasim Mahmood Khalid | cyber-security-awareness, bug-bounty-writeup, bug-bounty, ethical-hacking, cybersecurity | 31-Oct-2024 |
| Responsible Discovery, Irresponsible Response: The Cost of Punishing Security Researchers | https://khalifayakub.medium.com/responsible-discovery-irresponsible-response-the-cost-of-punishing-security-researchers-8bbb15f66ab7?source=rss------bug_bounty-5 | Mohammed Yakub Khalifa | ethics, cybersecurity-awareness, cybersecurity, bug-bounty, ethical-hacking | 31-Oct-2024 |
| 0-Click ATO Via reset password weird scenario | https://medium.com/@mos693570/0-click-ato-via-reset-password-weird-scenario-9afa4a88e413?source=rss------bug_bounty-5 | Mo Salah | bug-bounty | 31-Oct-2024 |
| Could a Simple IDOR Vulnerability in Facebook Affects the Outcome of US Elections? | https://medium.com/@bazzounbassem/could-a-simple-idor-vulnerability-in-facebook-affects-the-outcome-of-us-elections-c17bc5e12e30?source=rss------bug_bounty-5 | Bassem M Bazzoun | ethical-hacking, bug-bounty, us-election-2024, cybersecurity | 31-Oct-2024 |
| How One Accidental Find Led to Full App Security Testing | https://medium.com/@hasirhamdan77/how-one-accidental-find-led-to-full-app-security-testing-ea1c317174cb?source=rss------bug_bounty-5 | Hasirhamdan | jwt-exploitation, application-security, bug-bounty, mobile-security, hacking | 31-Oct-2024 |
| Comprehensive Bug Bounty Hunting Methodology (2024 Edition) | https://xalgord.medium.com/comprehensive-bug-bounty-hunting-checklist-2024-edition-4abb3a9cbe66?source=rss------bug_bounty-5 | Krishna Kaushal | cybersecurity, bug-bounty-tips, bug-bounty, hacking, reconnaissance | 31-Oct-2024 |
| Tale of Zendesk 0 day and a potential 25K $ bounty | https://rikeshbaniya.medium.com/tale-of-zendesk-0-day-and-a-potential-25k-bounty-61bcf9c5dc06?source=rss------bug_bounty-5 | Rikesh Baniya | bug-bounty-writeup, bug-bounty-tips, hackerone, security-research, bug-bounty | 31-Oct-2024 |
| XML Upload Challenge: Breaking Boundaries with External Entities | https://medium.com/@josh.beck2006/xml-upload-challenge-breaking-boundaries-with-external-entities-79677649485f?source=rss------bug_bounty-5 | Josh Beck | cybersecurity, ctf-writeup, bug-bounty | 31-Oct-2024 |
| Hunting for IDOR and BAC Vulnerabilities in B2B Applications with Burp Suite’s Authorize Extension | https://thexssrat.medium.com/hunting-for-idor-and-bac-vulnerabilities-in-b2b-applications-with-burp-suites-authorize-extension-597877b53d94?source=rss------bug_bounty-5 | Thexssrat | idor, broken-access-control, bug-bounty, bug-bounty-tips, burpsuite | 31-Oct-2024 |
| LottieFiles Hacked: A Cautionary Tale for the Crypto Community! | https://medium.com/@wiretor/lottiefiles-hacked-a-cautionary-tale-for-the-crypto-community-8cc3b6cf9148?source=rss------bug_bounty-5 | WIRE TOR | malware, xss-attack, hacking, usa, bug-bounty | 31-Oct-2024 |
| Protecting E-Commerce: Understanding the Phish n’ Ships Campaign | https://medium.com/@wiretor/protecting-e-commerce-understanding-the-phish-n-ships-campaign-619cc4f3d150?source=rss------bug_bounty-5 | WIRE TOR | malware, hacking, usa, bug-bounty, xss-attack | 31-Oct-2024 |
| Ex-Disney Employee Charged with Hacking: A Cautionary Tale! | https://medium.com/@wiretor/ex-disney-employee-charged-with-hacking-a-cautionary-tale-d9174351fd7c?source=rss------bug_bounty-5 | WIRE TOR | malware, bug-bounty, xss-attack, usa, hacking | 31-Oct-2024 |
| File Transfer Cheatsheet: Windows and Linux | https://medium.com/@verylazytech/file-transfer-cheatsheet-windows-and-linux-1e36ec9a22ac?source=rss------bug_bounty-5 | Very Lazy Tech | file-transfer, bug-bounty, post-exploitation, exfiltration, cybersecurity | 30-Oct-2024 |
| Hacking your first OAuth on the Web application: Account takeover using Redirect and State… | https://medium.com/@security.tecno/hacking-your-first-oauth-on-the-web-application-account-takeover-using-redirect-and-state-5e857c7b1d43?source=rss------bug_bounty-5 | TECNO Security | research-reports, hacking, bug-bounty, security | 30-Oct-2024 |
| Discovered a Unique Email Verification Bypass | https://mo9khu93r.medium.com/discovered-a-unique-email-verification-bypass-47bb1e955a13?source=rss------bug_bounty-5 | mo9khu93r | penetration-testing, email-verification, hacking, cybersecurity, bug-bounty | 30-Oct-2024 |
| Apple $1,000,000 Bounty: Zero-Click Exploit Achieves Kernel Execution and PAC Bypass on Latest iOS… | https://medium.com/@vintaconnect/apple-1-000-000-bounty-zero-click-exploit-achieves-kernel-execution-and-pac-bypass-on-latest-ios-7cdf35ff8bc6?source=rss------bug_bounty-5 | VintaConnect | apple, apple-bug-bounty, ios, kernel, bug-bounty | 30-Oct-2024 |
| CVE-2024–27954 — WordPress Automatic Plugin < 3.92.1 — Arbitrary File Download and SSRF | https://infosecwriteups.com/cve-2024-27954-wordpress-automatic-plugin-3-92-1-arbitrary-file-download-and-ssrf-34f2e938db54?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, penetration-testing, wordpress, cybersecurity, bug-bounty-hunter | 30-Oct-2024 |
| $200-$10,000 for Command Injection Bug . | https://medium.com/@anandrishav2228/200-10-000-for-command-injection-bug-2279041f3478?source=rss------bug_bounty-5 | Rishav anand | hacking, cybersecurity, bug-bounty, money, command-injection | 30-Oct-2024 |
| My First Remote Code Execution (RCE) | https://medium.com/@prasenjitkantipaul/my-first-remote-code-execution-rce-ea9c3e32943f?source=rss------bug_bounty-5 | Prasenjit Kanti Paul | bug-bounty, bug-bounty-tips, bug-bounty-hunter, rce, bug-bounty-writeup | 30-Oct-2024 |
| CVE-2024–4577 — PHP CGI Argument Injection Remote Code Execution | https://infosecwriteups.com/cve-2024-4577-php-cgi-argument-injection-remote-code-execution-294ed4758e4f?source=rss------bug_bounty-5 | Ajay Naik | medium, penetration-testing, bug-bounty, cybersecurity, information-technology | 30-Oct-2024 |
| A Guide to Burp Suite for Ethical Hackers | https://medium.com/@codingbolt.in/a-guide-to-burp-suite-for-ethical-hackers-e1b985470547?source=rss------bug_bounty-5 | codingbolt | penetration-testing, cybersecurity, bug-bounty, burpsuite, ethical-hacking | 30-Oct-2024 |
| Multi-Step Process with No Access Control on One Step — Access Control Vulnerability | https://medium.com/@rcxsecurity/multi-step-process-with-no-access-control-on-one-step-access-control-vulnerability-599aee989521?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Café | pentesting, cybersecurity, penetration-testing, information-security, bug-bounty | 30-Oct-2024 |
| Chaining Four Vulnerabilities Leading to Account Takeover | https://medium.com/@jke3595/chaining-four-vulnerabilities-leading-to-account-takeover-664f18508600?source=rss------bug_bounty-5 | Joel I Patrick | bounty-program, ethical-hacking, security, bug-bounty, cybersecurity | 30-Oct-2024 |
| Predictable Initial Passwords vulnerability | https://medium.com/@istibaroudissou/predictable-initial-passwords-vulnerability-3292322bfdd4?source=rss------bug_bounty-5 | Istibarou DISSOU | vulnerability, bug-bounty, pentesting | 30-Oct-2024 |
| Lets Get into the Real field. | https://harshbardhanx.medium.com/lets-get-into-the-real-field-b2c9278d0b63?source=rss------bug_bounty-5 | Harsh Bardhan | bug-bounty, bug-bounty-tips, bug-bounty-writeup, cybersecurity, bug-bounty-hunter | 30-Oct-2024 |
| Email Spoofing | https://medium.com/@hacragon/email-spoofing-1a81728f92b3?source=rss------bug_bounty-5 | Subin Kumar | dmarc-record, email-spoofing, bug-bounty | 30-Oct-2024 |
| Exposed Git Configs Lead to 15,000 Stolen Cloud Credentials: The WireTor Solution | https://medium.com/@wiretor/exposed-git-configs-lead-to-15-000-stolen-cloud-credentials-the-wiretor-solution-d6de23eaca26?source=rss------bug_bounty-5 | WIRE TOR | malware, election2024, usa, bug-bounty, pentesting | 30-Oct-2024 |
| WIRE TOR — The Ethical Hacking Services | https://medium.com/@wiretor/wire-tor-the-ethical-hacking-services-bac69e4fa28a?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, pentesting, malware, xss-attack, hacking | 30-Oct-2024 |
| Protect Yourself from Election Scams: Insights from WireTor | https://medium.com/@wiretor/protect-yourself-from-election-scams-insights-from-wiretor-1e118e682f76?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, pentesting, xss-attack, hacking, malware | 30-Oct-2024 |
| Spooktacular Halloween Sale: 50% Off! | https://medium.com/@wiretor/spooktacular-halloween-sale-50-off-f1967438dac0?source=rss------bug_bounty-5 | WIRE TOR | pentesting, bug-bounty, usa, hacking, halloween | 30-Oct-2024 |
| Automating Bug Bounty Hunts with Bash: A Beginner-Friendly Guide | https://pwndecoco.medium.com/automating-bug-bounty-hunts-with-bash-a-beginner-friendly-guide-3fc2b3d7f341?source=rss------bug_bounty-5 | Pwndec0c0 | hacking, bug-bounty-tips, penetration-testing, bug-bounty, cybersecurity | 30-Oct-2024 |
| Full Account Takeover at One of the Largest E-Commerce Companies | https://m0uka.medium.com/full-account-takeover-at-one-of-the-largest-e-commerce-companies-8cf416e9dc7e?source=rss------bug_bounty-5 | m0uka | hackerone, hacking, bug-bounty, bugcrowd, security-research | 29-Oct-2024 |
| Account Linked Domains Takeover | https://medium.com/@ph4nt0mbyt3/account-linked-domains-takeover-852cab92e018?source=rss------bug_bounty-5 | ph4nt0mbyt3 | pentesting, bug-bounty, pentest | 29-Oct-2024 |
| How to find Information Disclouser in any WebTech or Mobile App. and Earn upto $500-$2000 | https://medium.com/@anandrishav2228/how-to-find-information-disclouser-in-any-webtech-or-mobile-app-and-earn-upto-500-2000-7bda67bbe754?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, money, api, bug-bounty, hacker | 29-Oct-2024 |
| From Study Stress to Critical Account Takeover: How a Gym Break and a Little Curiosity Uncovered a… | https://medium.com/@CipherHawk/from-study-stress-to-critical-account-takeover-how-a-gym-break-and-a-little-curiosity-uncovered-a-d15cfc2e142b?source=rss------bug_bounty-5 | CipherHawk | bug-bounty, hackerone, hacking, yeswehack, bugbounty-tips | 29-Oct-2024 |
| How I get Open Redirect Vulnerability in BBP ? | https://medium.com/@keroayman77/how-i-get-open-redirect-vulnerability-in-bbp-6006e5a34602?source=rss------bug_bounty-5 | Kerolos Ayman | bug-bounty-writeup, bug-bounty | 29-Oct-2024 |
| Web cache poisoning explained | https://medium.com/@ad.abhi0013/web-cache-poisoning-explained-f3ddc4bfbf94?source=rss------bug_bounty-5 | Abhishek Adhikari | cybersecurity, web-cache-poisoning, bug-bounty | 29-Oct-2024 |
| Find Open Redirect in Just 2 min - $1000 | https://medium.com/@mdnafeed3/find-open-redirect-in-just-2-min-1000-c527bb3e65fb?source=rss------bug_bounty-5 | H4cker-Nafeed | cybersecurity, bug-bounty, bug-bounty-tips | 29-Oct-2024 |
| How can SQL injection, CSRF, and XSS attacks be prevented in Golang — Bug Bounty Tuesday | https://medium.com/@kerstan/how-can-sql-injection-csrf-and-xss-attacks-be-prevented-in-golang-bug-bounty-tuesday-2f857b2e4b53?source=rss------bug_bounty-5 | kerstan | golang, coding, cybersecurity, hacking, bug-bounty | 29-Oct-2024 |
| How I Started My Bug Bounty Journey…!!! | https://harshbardhanx.medium.com/how-i-started-my-bug-bounty-journey-1b9683fa6252?source=rss------bug_bounty-5 | Harsh Bardhan | bug-hunting, bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-tips | 29-Oct-2024 |
| My step by step process on how I do Bug Bounty Hunting: From finding targets to Submission of the… | https://pwndecoco.medium.com/my-step-by-step-process-on-how-i-do-bug-bounty-hunting-from-finding-targets-to-submission-of-the-c3ad5d4b07ad?source=rss------bug_bounty-5 | Pwndec0c0 | penetration-testing, bug-bounty, cybersecurity, bug-bounty-writeup, hacking | 29-Oct-2024 |
| How do SSL Scanners Work | https://medium.com/@serhatcck/how-do-ssl-scanners-work-b4977308e981?source=rss------bug_bounty-5 | Serhat ÇİÇEK | cryptography, application-security, bug-bounty, hacking, pentesting | 29-Oct-2024 |
| Data Breach Affects 800,000 Citizens in Italy | https://medium.com/@wiretor/data-breach-affects-800-000-citizens-in-italy-1f977df0cab6?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, malware, italian, pentesting, hacking | 29-Oct-2024 |
| Massive PSAUX Ransomware Attack Targets 22,000 CyberPanel Instances! | https://medium.com/@wiretor/massive-psaux-ransomware-attack-targets-22-000-cyberpanel-instances-2925859c759c?source=rss------bug_bounty-5 | WIRE TOR | hacking, bug-bounty, usa, malware, cybersecurity | 29-Oct-2024 |
| WIRE TOR — The Ethical Hacking Services | https://medium.com/@wiretor/wire-tor-the-ethical-hacking-services-47ef9ecf7471?source=rss------bug_bounty-5 | WIRE TOR | hacking, bug-bounty, malware, usa, pentesting | 29-Oct-2024 |
| Payment Bypass via API Request to Activate Premium Plan on Private Bug Bounty Program | https://medium.com/@sharp488/payment-bypass-via-api-request-to-activate-premium-plan-on-private-bug-bounty-program-bbd7fc91ef99?source=rss------bug_bounty-5 | Sharat Kaikolamthuruthil | bug-bounty, information-technology, bug-bounty-tips, bugs, information-security | 28-Oct-2024 |
| How to find a Race-condition Bug and make $1300 | https://medium.com/@anandrishav2228/how-to-find-a-race-condition-bug-and-make-1300-66d7e14040e9?source=rss------bug_bounty-5 | Rishav anand | race-condition, hacker, bug-bounty, cybersecurity, money | 28-Oct-2024 |
| $150,000 Evmos Vulnerability Through Reading Documentation | https://medium.com/@jjordanjjordan/150-000-evmos-vulnerability-through-reading-documentation-d26328590a7a?source=rss------bug_bounty-5 | jayjonah.eth | bug-bounty, crypto, web3, ethereum, blockchain | 28-Oct-2024 |
| Blind Cross Site Scripting in License Application | https://medium.com/@abdullah12987654/blind-cross-site-scripting-in-license-application-aa865c0e0496?source=rss------bug_bounty-5 | Abdullah | penetration-testing, cross-site-scripting, xss-vulnerability, hacking, bug-bounty | 28-Oct-2024 |
| HTTP Request Smuggling: From Needs More Info to Confirmed Impact! | https://medium.com/@rezauditore/http-request-smuggling-from-needs-more-info-to-confirmed-impact-9b36349355ca?source=rss------bug_bounty-5 | rezauditore | bug-bounty, http-request, peace, lgbtq, hacking | 28-Oct-2024 |
| Best AI Tool to Learn Hacking 2025 | https://medium.com/@TahirAyoub/best-ai-tool-to-learn-hacking-2025-e30b11c551c8?source=rss------bug_bounty-5 | Tahir Ayoub | ai, cybersecurity, artificial-intelligence, bug-bounty, hacking | 28-Oct-2024 |
| Easy 400$ Bounty on Hackerone Public BBP | https://medium.com/@kaforybory/easy-400-bounty-on-hackerone-public-bbp-b7a9aa2d6767?source=rss------bug_bounty-5 | Hassan Makki | cybersecurity, infosec, bug-bounty-tips, penetration-testing, bug-bounty | 28-Oct-2024 |
| Exposing a Data Leak Vulnerability: My Journey to Discovery | https://infosecwriteups.com/exposing-a-data-leak-vulnerability-my-journey-to-discovery-7be93ce2c5b0?source=rss------bug_bounty-5 | Abhishek Bhujang | ethical-hacking, security, bug-bounty, bug-hunting, hacking | 28-Oct-2024 |
| Ethical Hacking and Bug Bounty Programs — Harnessing Hackers for Good | https://medium.com/@RocketMeUpCybersecurity/ethical-hacking-and-bug-bounty-programs-harnessing-hackers-for-good-ac8417374af0?source=rss------bug_bounty-5 | RocketMe Up Cybersecurity | security-testing, vulnerability-assessment, white-hat-hacker, ethical-hacking, bug-bounty | 28-Oct-2024 |
| My first bug bounty | https://medium.com/@zatikyan.sevada/my-first-bug-bounty-5dc382b7cd50?source=rss------bug_bounty-5 | Zatikyan Sevada | cybersecurity, information-disclosure, bug-bounty, hacking-tools | 28-Oct-2024 |
| Portswigger Lab: Reflected XSS in a JavaScript URL with some characters blocked | https://medium.com/@iamdeusx/portswigger-lab-reflected-xss-in-a-javascript-url-with-some-characters-blocked-fa15ae95d90e?source=rss------bug_bounty-5 | DeusX | bug-bounty, portswigger, cybersecurity, ctf | 28-Oct-2024 |
| LLM Pentest Services at Wire Tor️ | https://medium.com/@wiretor/llm-pentest-services-at-wire-tor-%EF%B8%8F-e2617eb98a89?source=rss------bug_bounty-5 | WIRE TOR | cybersecurity, malware, hacking, usa, bug-bounty | 28-Oct-2024 |
| Breaking Down My Bug Bounty Find: Exploiting EC-Council’s iClass Platform | https://medium.com/@salaheddine_kalada/breaking-down-my-bug-bounty-find-exploiting-ec-councils-iclass-platform-68bd9a6c8460?source=rss------bug_bounty-5 | Salaheddine KALADA | responsible-disclosure, ethical-hacking, bug-bounty-writeup, bug-bounty, cybersecurity | 28-Oct-2024 |
| How I Leveraged HTML Injection to Create an Account Using Someone Else’s Email | https://infosecwriteups.com/how-i-leveraged-html-injection-to-create-an-account-using-someone-elses-email-b80f83ab9465?source=rss------bug_bounty-5 | Devansh | cybersecurity, html-injection, bug-bounty, information-security | 27-Oct-2024 |
| Use Burp Suite Community version like a professional version Save upto $449 | https://medium.com/@anandrishav2228/use-burp-suite-community-version-like-a-professional-version-2225e9d0404f?source=rss------bug_bounty-5 | Rishav anand | burpsuite, hacking, bug-bounty, money, cybersecurity | 27-Oct-2024 |
| My Roadmap and the Tools I plan to use to aid my journey. | https://cybersechemmars.medium.com/my-roadmap-and-the-tools-i-plan-to-use-to-aid-my-journey-4f720504fce6?source=rss------bug_bounty-5 | Cybersec with Hemmars | bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 27-Oct-2024 |
| Unauthorized Privilege Escalation: Gaining Command Line Access on Unpermitted Company Devices $$$$ | https://sp1der0x.medium.com/unauthorized-privilege-escalation-gaining-command-line-access-on-unpermitted-company-devices-1a67e55f1b63?source=rss------bug_bounty-5 | Spider | hacking, business-logic, privilege-escalation, access-control, bug-bounty | 27-Oct-2024 |
| Bypassing File Upload Defenses: My Journey from Simple Bypass to Near RCE | https://medium.com/@dsmodi484/bypassing-file-upload-defenses-my-journey-from-simple-bypass-to-near-rce-ffbd23400efa?source=rss------bug_bounty-5 | Dishant Modi | bug-bounty, vulnerability, file-upload, methodology, rce | 27-Oct-2024 |
| How to find bugs in Microsoft iis page. | https://infosecwriteups.com/how-to-find-bugs-in-microsoft-iis-page-ef336a229abc?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, cybersecurity, hacking, tips, bug-bounty | 27-Oct-2024 |
| How I Leveraged HTML Injection to Create an Account Using Someone Else’s Email | https://infosecwriteups.com/how-i-leveraged-html-injection-to-create-an-account-using-someone-elses-email-b80f83ab9465?source=rss------bug_bounty-5 | Devansh Doshi | cybersecurity, html-injection, bug-bounty, information-security | 27-Oct-2024 |
| Fog & Akira Ransomware Exploit SonicWall VPN: Is Your Network Safe? | https://medium.com/@wiretor/fog-akira-ransomware-exploit-sonicwall-vpn-is-your-network-safe-81da77b75cae?source=rss------bug_bounty-5 | WIRE TOR | pentesting, hacking, cybersecurity, usa, bug-bounty | 27-Oct-2024 |
| China-Backed Cyber Attack: Donald Trump and JD Vance Targeted! | https://medium.com/@wiretor/china-backed-cyber-attack-donald-trump-and-jd-vance-targeted-004518c60c89?source=rss------bug_bounty-5 | WIRE TOR | malware, bug-bounty, usa, hacking, cybersecurity | 27-Oct-2024 |
| Unauthorized Privilege Escalation: Gaining Command Line Access on Unpermitted Company Devices $$$$ | https://sp1der0x.medium.com/unauthorized-privilege-escalation-gaining-command-line-access-on-unpermitted-company-devices-1a67e55f1b63?source=rss------bug_bounty-5 | Sp1der0x | hacking, business-logic, privilege-escalation, access-control, bug-bounty | 27-Oct-2024 |
| Firefox&Chrome extensions for bugbounty hunters.(PART 2) | https://osintteam.blog/firefox-chrome-extensions-for-bugbounty-hunters-part-2-c3febcb6e64b?source=rss------bug_bounty-5 | loyalonlytoday | tips, hacking, penetration-testing, cybersecurity, bug-bounty | 26-Oct-2024 |
| Free vps for hacking and bug bounty hunting. | https://osintteam.blog/free-vps-for-hacking-and-bug-bounty-hunting-921d1dda71ce?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, hacking, tips-and-tricks, vps, cybersecurity | 26-Oct-2024 |
| Bug Bounty with AI in Real-Time: The Future of Cybersecurity | https://prakash888kpk.medium.com/bug-bounty-with-ai-in-real-time-the-future-of-cybersecurity-b3f783c7f0de?source=rss------bug_bounty-5 | Lets Unlearn | tips-and-tricks, ai, bug-bounty | 26-Oct-2024 |
| Find CSRF and get a bounty of $900 Quickly | https://medium.com/@anandrishav2228/find-csrf-and-get-a-bounty-of-900-quickly-a9c3bf311dfb?source=rss------bug_bounty-5 | Rishav anand | money, bug-bounty, cybersecurity, hacker, ai | 26-Oct-2024 |
| One idea Uncovers Authentication Bypass & Session management flaw | https://medium.com/@CipherHawk/one-idea-uncovers-authentication-bypass-session-management-flaw-2e1536f5c52d?source=rss------bug_bounty-5 | CipherHawk | bug-bounty, hackerone, vulnerability, bugcrowd, hacking | 26-Oct-2024 |
| How to Handle Burnout as a Bug Bounty Hunter: Step-by-Step Guide | https://bevijaygupta.medium.com/how-to-handle-burnout-as-a-bug-bounty-hunter-step-by-step-guide-173bdc11386d?source=rss------bug_bounty-5 | Vijay Gupta | burnout, bug-bounty-writeup, bug-bounty, bugs, bug-bounty-tips | 26-Oct-2024 |
| Curious Case of a Feedback Link | https://medium.com/@thelazypentester/curious-case-of-a-feedback-link-0b1f5b208df0?source=rss------bug_bounty-5 | Jobson | sensitive-information, bug-bounty, cybersecurity, hacking, burpsuite | 26-Oct-2024 |
| Bug Hunting Methodology | https://medium.com/@prajwalpatil453/bug-hunting-methodology-0780e74958be?source=rss------bug_bounty-5 | Anonstrk | cybersecurity, bug-bounty-tips, bug-bounty, methodology, bug-hunting | 26-Oct-2024 |
| 500$ Idor vulnerability. | https://medium.com/@noureldin1042/500-idor-vulnerability-dfc5d6f31119?source=rss------bug_bounty-5 | Noureldin(0x_5wf) | programming, hacking, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 26-Oct-2024 |
| INICON: A One-Stop Recon Tool for Bug Bounty Hunters | https://medium.com/@jwalanth/inicon-a-one-stop-recon-tool-for-bug-bounty-hunters-8e1dcfa90a6c?source=rss------bug_bounty-5 | Kira61(Jwalanth) | cybersecurity, python, pentesting, reconnaissance, bug-bounty | 26-Oct-2024 |
| How I Discovered an Easy 2FA Vulnerability on Logitech | https://medium.com/@dhananjay_00/how-i-discovered-an-easy-2fa-vulnerability-on-logitech-ff0d07178b04?source=rss------bug_bounty-5 | Dhananjay Pathak | bug-bounty-tips, bug-bounty, bugbounty-writeup, hackerone, hacking | 26-Oct-2024 |
| Dependency Confusion Unleashed: How One Misconfiguration Can Compromise an Entire System | https://medium.com/@omargamal4em/dependency-confusion-unleashed-how-one-misconfiguration-can-compromise-an-entire-system-e0df2a26c341?source=rss------bug_bounty-5 | omar gamal | bug-bounty-writeup, bug-bounty, bug-bounty-hunter, bug-bounty-tips | 26-Oct-2024 |
| AIO Web App Pentesting Checklist | https://cristivlad.medium.com/aio-web-app-pentesting-checklist-afe277d735dd?source=rss------bug_bounty-5 | Cristi Vlad | cybersecurity, bug-bounty, infosec, penetration-testing, pentesting | 26-Oct-2024 |
| Apple Paying Big Bucks for Security Flaws: Your Chance to Cash In! | https://medium.com/@v55232352/apple-paying-big-bucks-for-security-flaws-your-chance-to-cash-in-edb0f4f5ad21?source=rss------bug_bounty-5 | Patrick Hoover | cyber-security-services, bug-bounty, apple-security-update | 26-Oct-2024 |
| SQL Injections and the cute $2000 bounty | https://medium.com/@nireshpandian19/sql-injections-and-the-cute-2000-bounty-2d18441ee0e3?source=rss------bug_bounty-5 | JAI NIRESH J | bug-bounty, bug-bounty-writeup, idor-vulnerability, bug-bounty-tips, sql-injection | 26-Oct-2024 |
| Bind Shells: A Practical Guide | https://medium.com/@learntheshell/bind-shells-a-practical-guide-9c00b3d7ad74?source=rss------bug_bounty-5 | LearnTheShell | cybersecurity, bug-bounty, pentesting, bind-shell, bug-bounty-tips | 26-Oct-2024 |
| Cronjobs for hackers (bugbounty article) | https://medium.com/@bag0zathev2/cronjobs-for-hackers-bugbounty-article-7d51588d0fd5?source=rss------bug_bounty-5 | Fares Walid (SirBugs) | cybersecurity, bugbounty-tips, cronjob, bug-bounty, hacking | 26-Oct-2024 |
| BugBounty — Mastering the Basics (along with Resources)[Part-1] | https://medium.com/@iabhipathak/bugbounty-mastering-the-basics-along-with-resources-part-1-47d30eb3d19a?source=rss------bug_bounty-5 | Abhinav Pathak | bug-bounty, cybersecurity, security, ethical-hacking, hacking | 26-Oct-2024 |
| DVWA : Brute Force Vulnerability Solution (Low & Medium Security Level) | https://medium.com/@Kamal_S/dvwa-brute-force-vulnerability-solution-low-medium-security-level-9c01eadf3720?source=rss------bug_bounty-5 | Kamal S | dvwa, burpsuite, brute-force, owasp, bug-bounty | 26-Oct-2024 |
| New Cisco ASA and FTD Features: Blocking VPN Brute-Force Password Attacks! | https://medium.com/@wiretor/new-cisco-asa-and-ftd-features-blocking-vpn-brute-force-password-attacks-c9065ef3ccfd?source=rss------bug_bounty-5 | WIRE TOR | presidential-election-usa, cybersecurity, usa, bug-bounty, hacking | 26-Oct-2024 |
| New Windows Driver Signature Bypass Enables Rootkit Installs! | https://medium.com/@wiretor/new-windows-driver-signature-bypass-enables-rootkit-installs-42d64a4e973a?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, cybersecurity, networking, hacking, malware | 26-Oct-2024 |
| Black Basta Ransomware Targets Teams: Stay Vigilant! | https://medium.com/@wiretor/black-basta-ransomware-targets-teams-stay-vigilant-a76d8550003c?source=rss------bug_bounty-5 | WIRE TOR | hacking, cybersecurity, malware, xss-attack, bug-bounty | 26-Oct-2024 |
| Hunting for Open Redirect Vulnerabilities: A Beginner to Expert Guide | https://medium.com/@360Security/hunting-for-open-redirect-vulnerabilities-a-beginner-to-expert-guide-c33dd1ac1875?source=rss------bug_bounty-5 | 360 Security | web-security, penetration-testing, vulnerability, cybersecurity, bug-bounty | 26-Oct-2024 |
| Red Hat SSO 7.6 Host Header Injection Vulnerability | https://medium.com/@mark.roy.1337/exploiting-and-securing-red-hat-sso-7-6-host-header-injection-vulnerability-654424f6889a?source=rss------bug_bounty-5 | Mark R. | vulnerability, bug-bounty, cybersecurity | 25-Oct-2024 |
| TECNO Security Year-End Reward Sprint Preview: Grand Prizes Await You! | https://medium.com/@security.tecno/tecno-security-year-end-reward-sprint-preview-grand-prizes-await-you-7dec791e12ce?source=rss------bug_bounty-5 | TECNO Security | bug-bounty, hacking, bonus, security | 25-Oct-2024 |
| How I Bypassed Rate Limit on Login | https://mo9khu93r.medium.com/how-i-bypassed-rate-limit-on-login-b600b15158ef?source=rss------bug_bounty-5 | mo9khu93r | bug-bounty, hacking, cybersecurity, pentesting, rate-limit-bypass | 25-Oct-2024 |
| Remote Code Execution - Rage of Race Condition on Gen AI | https://shahjerry33.medium.com/remote-code-execution-rage-of-race-condition-on-gen-ai-6f4cbc1a0e62?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | cybersecurity, penetration-testing, infosec, vulnerability, bug-bounty | 25-Oct-2024 |
| Bug punya severity & priority | https://ilhamday.medium.com/bug-punya-severity-priority-5552885eebd6?source=rss------bug_bounty-5 | Ilham Ferry | testing, bug-bounty, qa, quality-assurance, software-development | 25-Oct-2024 |
| Red Hat SSO 7.6 Host Header Injection Vulnerability | https://medium.com/@mark-r/exploiting-and-securing-red-hat-sso-7-6-host-header-injection-vulnerability-654424f6889a?source=rss------bug_bounty-5 | Mark R. | vulnerability, bug-bounty, cybersecurity | 25-Oct-2024 |
| Advance AI Test Cases For Penetration Testing | https://infosecwriteups.com/advance-ai-testcases-for-penetration-testing-d61b2196311d?source=rss------bug_bounty-5 | Ajay Naik | information-technology, cyberattack, cybersecurity, bug-bounty, ai | 25-Oct-2024 |
| Exploiting BAC: Unlimited Likes in Comment Sections | https://medium.com/@RaunakGupta1922/exploiting-bac-unlimited-likes-in-comment-sections-64f173b951fe?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty-tips, cybersecurity, programming, bug-bounty, technology | 25-Oct-2024 |
| Information Disclosure in Top 500 Company through Source Code | https://medium.com/@anonymousshetty2003/information-disclosure-in-top-500-company-through-source-code-fe91a7806acc?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, cybersecurity, hacking, information-disclosure, security | 25-Oct-2024 |
| WordPress Penetration Testing: A Hacker’s Playbook | https://systemweakness.com/wordpress-penetration-testing-a-hackers-playbook-bb97b8a009b1?source=rss------bug_bounty-5 | Ahmed Makawi | penetration-testing, ethical-hacking, wordpress, bug-bounty | 25-Oct-2024 |
| How to install WhatWeb & usage samples. | https://pwndecoco.medium.com/how-to-install-whatweb-usage-samples-8b735fc4d645?source=rss------bug_bounty-5 | Pwndec0c0 | penetration-testing, whatweb, bug-bounty, cybersecurity, linux | 25-Oct-2024 |
| My step by step process on how I do Bug Bounty Hunting: From finding targets to Submission of the… | https://pwndecoco.medium.com/my-step-by-step-process-on-how-i-do-bug-bounty-program-from-finding-targets-to-submission-of-the-d25939b2a1b3?source=rss------bug_bounty-5 | Pwndec0c0 | bug-bounty-tips, bug-bounty-writeup, bug-bounty, penetration-testing, cybersecurity | 25-Oct-2024 |
| Uncovering Vulnerabilities: My Discovery of Hashed Passwords on a Dutch Government Website | https://medium.com/@anonymousshetty2003/uncovering-vulnerabilities-my-discovery-of-hashed-passwords-on-a-dutch-government-website-f30969e6ebbc?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, security, bug-bounty, hacking, information-disclosure | 25-Oct-2024 |
| Finding Cross-Site Scripting (XSS) vulnerabilities in Bug bounty program | https://medium.com/@curiouskhanna/finding-cross-site-scripting-xss-vulnerabilities-in-bug-bounty-program-2a40bef4c8d7?source=rss------bug_bounty-5 | Shubham Khanna | cybersecurity, earn-money-online, research, bug-bounty | 25-Oct-2024 |
| Cracking JWT Tokens: A Path to Identifying Bugs and Earn upto $700 | https://medium.com/@anandrishav2228/cracking-jwt-tokens-a-path-to-identifying-bugs-and-earn-upto-700-4028bcdcbebf?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, hacking, money, token, cybersecurity | 24-Oct-2024 |
| 50€ Rabbit Hole — Plain as Cake Bugs | https://medium.com/@rootplinix/50-rabbit-hole-plain-as-cake-bugs-e3e0940f93ce?source=rss------bug_bounty-5 | Abu Hurayra | bug-bounty, bug-bounty-writeup, hacking, bug-bounty-tips, cybersecurity | 24-Oct-2024 |
| IDOR+Privilege Escalation+No Rate Limit+Business Logic into a Single Vulnerability | https://medium.com/@hossam_hamada/idor-privilege-escalation-no-rate-limit-business-logic-into-a-single-vulnerability-1e6acc9a3884?source=rss------bug_bounty-5 | Hossam Hamada | hackerone, idor, bug-bounty, privilege-escalation, business-logic | 24-Oct-2024 |
| Bug Bounty Burnout: Stay Motivated and Mentally Strong | https://bevijaygupta.medium.com/bug-bounty-burnout-stay-motivated-and-mentally-strong-9408b92fa6c8?source=rss------bug_bounty-5 | Vijay Gupta | mentally-strong, bug-bounty, motivation, bug-bounty-tips, bugs | 24-Oct-2024 |
| Critical Threat for WordPress Developers and Users, if You are Using a General Password to login… | https://medium.com/@a5adujjaman/critical-threat-for-wordpress-developers-and-users-if-you-are-using-a-general-password-to-login-359ff16fcc45?source=rss------bug_bounty-5 | Asadujjaman Asif | security, two-factor-authentication, bug-bounty, wordpress, wordpress-security | 24-Oct-2024 |
| Web3 BBP Journal: Oct.24, 2024 | https://medium.com/@harryfyx/web3-bbp-journal-oct-24-2024-d3c7083ac416?source=rss------bug_bounty-5 | hhhkb | bug-bounty | 24-Oct-2024 |
| Bugcrowd Triage is Terrible | https://medium.com/@cybersecnoneed/bugcrowd-triage-is-terrible-97065059aaff?source=rss------bug_bounty-5 | Cybersecnoneed | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bug-bounty-hunter, bug-bounty-program | 24-Oct-2024 |
| Unreleased function leads to 150$ bounty | https://medium.com/@noureldin1042/unreleased-function-leads-to-150-bounty-c8521e3e3ba8?source=rss------bug_bounty-5 | Noureldin(0x_5wf) | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bug-hunting, programming | 24-Oct-2024 |
| How I Accessed Microsoft’s ServiceNow — Exposing ALL Microsoft Employee emails, Chat Support… | https://medium.com/@moblig/how-i-accessed-microsofts-servicenow-exposing-all-microsoft-employee-emails-chat-support-5f8d535eb63b?source=rss------bug_bounty-5 | Moblig | bug-bounty, cybersecurity, microsoft, news | 24-Oct-2024 |
| Seprate Active and Dead Subdomains part 4 | https://osintteam.blog/seprate-active-and-dead-subdomains-part-4-18f092dc8423?source=rss------bug_bounty-5 | Mr Abdullah | bugbounty-writeup, subdomains-enumeration, hacking, bug-bounty, web-hacking | 24-Oct-2024 |
| Smart recon to PWN the panel | https://ro0od.medium.com/smart-recon-to-pwn-the-panel-a23b0b9466bb?source=rss------bug_bounty-5 | rood | hacking, bug-bounty, hackerone, writeup, bug-bounty-tips | 24-Oct-2024 |
| Penalized for Responsible Disclosure | https://geochen.medium.com/penalized-for-responsible-disclosure-e36b3f57dc8a?source=rss------bug_bounty-5 | George Chen | big-four, hacking, bug-bounty, cybersecurity, responsible-disclosure | 24-Oct-2024 |
| Bug Bounty with AI: Enhancing Cybersecurity Through Artificial Intelligence | https://prakash888kpk.medium.com/bug-bounty-with-ai-enhancing-cybersecurity-through-artificial-intelligence-fc679204b800?source=rss------bug_bounty-5 | Lets Unlearn | ai-tools, bug-bounty, ai, bugs, bounties | 24-Oct-2024 |
| Cheat Sheet : Utilisation de Nuclei pour les Tests de Sécurité et b | https://medium.com/@Itachi0xf/cheat-sheet-utilisation-de-nuclei-pour-les-tests-de-s%C3%A9curit%C3%A9-et-b-e4d9d57aff32?source=rss------bug_bounty-5 | Itachix0f | hacking, cheatsheet, learning, bug-bounty | 24-Oct-2024 |
| Das CRUD-Prinzip | https://medium.com/@rainer_zufall111/das-crud-prinzip-786530d1a302?source=rss------bug_bounty-5 | R4In3RZuf4LL | cybersecurity, hacking, bug-bounty, api | 24-Oct-2024 |
| How i found exposed db creds on .gov site | https://medium.com/@jenroots/how-i-found-exposed-db-creds-on-gov-site-24588d9eb9c8?source=rss------bug_bounty-5 | Jenroots | bug-bounty-tips, information-security, penetration-testing, bugs, bug-bounty | 24-Oct-2024 |
| Second Strike: Uncovering a GraphQL IDOR That Let Me Delete Anyones Post | https://dukrov.medium.com/second-strike-uncovering-a-graphql-idor-that-let-me-delete-anyones-post-7c6fefd71db7?source=rss------bug_bounty-5 | ͏ ͏Dukrov | bug-bounty, hackerone, cybersecurity, bugbounty-tips, hacking | 24-Oct-2024 |
| How to Handle Burnout as a Bug Bounty Hunter: Step By Step guide | https://medium.com/@shaikhminhaz1975/how-to-handle-burnout-as-a-bug-bounty-hunter-step-by-step-guide-c83b06c4fc1f?source=rss------bug_bounty-5 | Shaikh Minhaz | burnout-prevention, stress-management, cybersecurity, stress, bug-bounty | 23-Oct-2024 |
| How to Find CVEs, Report Them, and Leverage Them for Career Growth and Bounties of $$$$$. | https://medium.com/@anandrishav2228/how-to-find-cves-report-them-and-leverage-them-for-career-growth-and-bounties-of-3b62538c64d1?source=rss------bug_bounty-5 | Rishav anand | ai, money, cybersecurity, cve, bug-bounty | 23-Oct-2024 |
| One Payload for Bugbounty(X$$)! | https://pwndecoco.medium.com/one-payload-for-bugbounty-x-ace7dfd4859d?source=rss------bug_bounty-5 | Pwndec0c0 | penetration-testing, bugbounty-tips, bug-bounty, hacking, bugbounty-writeup | 23-Oct-2024 |
| Hacking Tools That You Need To Learn | https://aircorridor.medium.com/hacking-tools-that-you-need-to-learn-2d8ebb8b47aa?source=rss------bug_bounty-5 | Aircorridor | bug-bounty, cybersecurity, linux, tools, hacking | 23-Oct-2024 |
| Improper Access Control — Generic: How I Gained Full Control Over an Admin Panel | https://medium.com/@rezauditore/improper-access-control-generic-how-i-gained-full-control-over-an-admin-panel-c82587a1a09f?source=rss------bug_bounty-5 | rezauditore | bug-bounty, lgbtq, appsec, ethical-hacking, api | 23-Oct-2024 |
| How I Discovered Sensitive App_ID and App_Key Disclosure in a JavaScript File and Earned $150 | https://medium.com/@dhananjay_00/how-i-discovered-sensitive-app-id-and-app-key-disclosure-in-a-javascript-file-and-earned-150-ad3fb7f942bc?source=rss------bug_bounty-5 | Dhananjay Pathak | penetration-testing, cybersecurity, hacking, bug-bounty, hackerone | 23-Oct-2024 |
| Understanding SMTP User Enumeration via MX Record Attacks | https://hackerhalt.medium.com/smtp-user-enumeration-mx-record-4e5761d52e57?source=rss------bug_bounty-5 | Hacker Halt | pentesting, bugcrowd, bug-bounty, hackerone | 23-Oct-2024 |
| Entering The Dark Web And Explaining The Art Of Deep Anonymity | Primary Hacking School #8 | https://medium.com/@nnface/entering-the-dark-web-and-explaining-the-art-of-deep-anonymity-primary-hacking-school-8-20239706e4fc?source=rss------bug_bounty-5 | NnFace | darkweb, web, hacking, kali-linux, bug-bounty | 23-Oct-2024 |
| Eyeglass Adventures: From Typos to Admin Access — A Hacker’s Tale | https://medium.com/@khode4li/eyeglass-adventures-from-typos-to-admin-access-a-hackers-tale-0a3149acd6e9?source=rss------bug_bounty-5 | Khod4li | security, mass-assignment, bug-bounty, broken-access-control, vulnerability | 23-Oct-2024 |
| Stored XSS Critical or NOT? | https://medium.com/@mrro0o0tt/stored-xss-critical-or-not-da9eb9b19029?source=rss------bug_bounty-5 | Whoami | bug-bounty-hunter, bug-bounty-tips, bug-bounty, hacking, bug-bounty-writeup | 23-Oct-2024 |
| Requisições Web — Tudo que você deve saber para começar em cybersegurança | https://medium.com/@malwarilia/requisi%C3%A7%C3%B5es-web-tudo-que-voc%C3%AA-deve-saber-para-come%C3%A7ar-em-cyberseguran%C3%A7a-ef01a89b250c?source=rss------bug_bounty-5 | Marília Rocha | bug-bounty-tips, pentesting, cybersecurity, infosec, bug-bounty | 22-Oct-2024 |
| Bug Bounty Methodology for SQL Injection with Waybash URLs | https://pwn0sec.medium.com/bug-bounty-methodology-for-sql-injection-with-waybash-urls-d1d13d0ebdaa?source=rss------bug_bounty-5 | Imhunterand | bug-bounty-tips, waybash, sql-injection, bug-bounty-writeup, bug-bounty | 22-Oct-2024 |
| Oracle SQL Injection | Database Recon | https://systemweakness.com/oracle-sql-injection-database-recon-0c384d4a085a?source=rss------bug_bounty-5 | AbhirupKonwar | cybersecurity, sql-injection, bug-bounty, pentesting, bug-bounty-tips | 22-Oct-2024 |
| Forget password OTP flaw lead to Account Takeover. | https://medium.com/@bughunt789/forget-password-otp-flaw-lead-to-account-takeover-b3f2b847952b?source=rss------bug_bounty-5 | BUG HUNTER | bug-bounty, bug-bounty-writeup, response-manipulation, account-takeover, account-takeover-attacks | 22-Oct-2024 |
| How I Hacked Over 150k PII on a Program | https://medium.com/@rootplinix/how-i-hacked-over-150k-pii-on-a-program-f58b8b141d4a?source=rss------bug_bounty-5 | Abu Hurayra | pii-data, infosec, hackerone, bug-bounty-tips, bug-bounty | 22-Oct-2024 |
| SQL Injection Attack, Listing the Database Contents on Oracle | https://medium.com/@marduk.i.am/sql-injection-attack-listing-the-database-contents-on-oracle-3be23e33a43d?source=rss------bug_bounty-5 | Marduk I Am | sqli, information-security, sql-injection, portswigger-lab, bug-bounty | 22-Oct-2024 |
| Discovery of Reflected XSS Vulnerability on a Global Car Website #2 | https://medium.com/@gg20205959/discovery-of-reflected-xss-vulnerability-on-a-global-car-website-2-ddfc7ba9f67d?source=rss------bug_bounty-5 | VulnSniper | xss-attack, xss-vulnerability, bug-bounty, penetration-testing | 22-Oct-2024 |
| LLM Penetration Testing Checklist | https://infosecwriteups.com/llm-penetration-testing-checklist-87eda0ce2991?source=rss------bug_bounty-5 | Ajay Naik | information-technology, information-security, penetration-testing, cybersecurity, bug-bounty | 22-Oct-2024 |
| Security Flaw in Styra’s OPA Exposes NTLM Hashes to Remote Attackers | https://medium.com/@wiretor/security-flaw-in-styras-opa-exposes-ntlm-hashes-to-remote-attackers-f4c9ce201de8?source=rss------bug_bounty-5 | WIRE TOR | penetration-testing, hacking, bug-bounty, cybersecurity, usa | 22-Oct-2024 |
| Shodan Secrets | Hack Hidden Files Easily | https://osintteam.blog/shodan-secrets-hack-hidden-files-easily-94de007def73?source=rss------bug_bounty-5 | AbhirupKonwar | cybersecurity, bug-hunting, shodan, bug-bounty, pentesting | 22-Oct-2024 |
| Hunting Broken Object Level Authorization | https://blackhawkk.medium.com/hunting-broken-object-level-authorization-9b499fc0f327?source=rss------bug_bounty-5 | Tanmay Bhattacharjee | bug-bounty, api-sec, owasp | 22-Oct-2024 |
| Single endpoint leads to two bounties!(400$) | https://medium.com/@noureldin1042/single-endpoint-leads-to-two-bounties-400-7dd96cf601c7?source=rss------bug_bounty-5 | Noureldin(0x_5wf) | bug-bounty, bug-hunting, bug-bounty-writeup, hackerone, bug-bounty-tips | 22-Oct-2024 |
| Breaking Boundaries: Discovering Session Invalidation Failures in User Roles | https://medium.com/@hawkeye69669/breaking-boundaries-discovering-session-invalidation-failures-in-user-roles-84711777f9f2?source=rss------bug_bounty-5 | Hawkeye | bug-bounty-tips, bug-bounty, infosec-write-ups, bug-bounty-writeup, infosec | 22-Oct-2024 |
| Google Warns of Samsung Zero-Day Exploited in the Wild | https://medium.com/@wiretor/google-warns-of-samsung-zero-day-exploited-in-the-wild-fb98c84b3e06?source=rss------bug_bounty-5 | WIRE TOR | usa, cybersecurity, hacking, bug-bounty, malware | 22-Oct-2024 |
| Critical Vulnerabilities Expose mbNET.mini and Helmholz Industrial Routers to Attacks | https://medium.com/@wiretor/critical-vulnerabilities-expose-mbnet-mini-and-helmholz-industrial-routers-to-attacks-feac904b23b5?source=rss------bug_bounty-5 | WIRE TOR | usa, hacking, bug-bounty, cybersecurity, pentesting | 22-Oct-2024 |
| Ransomware Alert: Cicada3301 Emerges as Successor to BlackCat | https://medium.com/@wiretor/ransomware-alert-cicada3301-emerges-as-successor-to-blackcat-e0e468472e08?source=rss------bug_bounty-5 | WIRE TOR | pentesting, bug-bounty, cybersecurity, usa, hacking | 22-Oct-2024 |
| How i tricked Crypto Trading Site into sending Dangerous email to it’s Users | https://medium.com/@Rahulkrishnan_R_Panicker/how-i-tricked-crypto-trading-site-into-sending-dangerous-email-to-its-users-a11a972c470f?source=rss------bug_bounty-5 | Rahulkrishnan R Panicker | bug-bounty, bug-bounty-tips, bug-bounty-writeup, pentesting, security | 21-Oct-2024 |
| Oops, Nykaa! How I Almost Ordered ₹1 Lakh Worth of Makeup (Without Even Logging In!) | https://medium.com/@lungfu-chingchung/oops-nykaa-how-i-almost-ordered-1-lakh-worth-of-makeup-without-even-logging-in-f10679e0d8c9?source=rss------bug_bounty-5 | LungFu | learning, firstwriteup, mastmaula, security, bug-bounty | 21-Oct-2024 |
| Another Dark Reality of Bug Hunting | https://bevijaygupta.medium.com/another-dark-reality-of-bug-hunting-0c8fa62e9867?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, dark-reality, bug-bounty, bugs, bug-zero | 21-Oct-2024 |
| How to Use nslookup from Beginner to Advanced: A Comprehensive Guide | https://medium.com/@anandrishav2228/how-to-use-nslookup-from-beginner-to-advanced-a-comprehensive-guide-846ad93955e4?source=rss------bug_bounty-5 | Rishav anand | money, cybersecurity, hacker, bug-bounty, dns | 21-Oct-2024 |
| How I Found and Reported a High Severity Stored XSS Vulnerability in the UK Ministry of Defence: A… | https://medium.com/@sagarjondhle/how-i-found-and-reported-a-critical-stored-xss-vulnerability-in-the-uk-ministry-of-defence-a-bug-e44497befaa8?source=rss------bug_bounty-5 | IronPurush | bug-bounty, cybersecurity, information-technology, education | 21-Oct-2024 |
| Hacking LLMNR and NBT-NS | https://medium.com/@nishcyber22/hacking-llmnr-and-nbt-ns-3187458ee89d?source=rss------bug_bounty-5 | 0xn1sh | penetration-testing, hacking, cybersecurity, windows-hacking, bug-bounty | 21-Oct-2024 |
| HTTP para Pentesters: Tudo que você precisa saber | https://medium.com/@malwarilia/introdu%C3%A7%C3%A3o-ao-http-para-pentesters-tudo-que-voc%C3%AA-precisa-saber-f3cce97d42e9?source=rss------bug_bounty-5 | Marília Rocha | offensive-security, segurança-da-informação, cybersecurity, bug-bounty, pentes | 21-Oct-2024 |
| What’s Session Management | https://medium.com/@vishalsahu1604/whats-session-management-306c08a9afcf?source=rss------bug_bounty-5 | Vishal Sahoo | bug-bounty, cybersecurity, website-traffic, website, website-development | 21-Oct-2024 |
| Unlocking Cybersecurity with Censys: A Guide to Ethical Hacking, Bug Bounties, and Pentesting —… | https://medium.com/@vulnlabresearcher/unlocking-cybersecurity-with-censys-a-guide-to-ethical-hacking-bug-bounties-and-pentesting-f4c29e89ac54?source=rss------bug_bounty-5 | VulnResearcher | passive-network-scanning, internet-scanning-tools, censys-tutorial, bug-bounty, ethical-hacking | 21-Oct-2024 |
| CSRF-ATTACK-PREVENTION-GUIDE | https://osintteam.blog/csrf-attack-prevention-guide-3afe8791af6d?source=rss------bug_bounty-5 | Asad Mohsin | cyber-security-awareness, cybersecuirty, cyber-attack-prevention, bug-bounty, csrf | 21-Oct-2024 |
| How No rate limiting got me 150$ in 5 minutes. | https://medium.com/@noureldin1042/how-no-rate-limiting-got-me-150-in-5-minutes-e0abbec48f35?source=rss------bug_bounty-5 | Noureldin(0x_5wf) | bug-bounty, bounty-hunter, penetration-testing, bounty-program, bug-hunting | 21-Oct-2024 |
| How i found 22 LFI in the same program using automation tricks | https://medium.com/@zomasec/how-i-found-22-lfi-in-the-same-program-using-automation-tricks-3ea303d24f4a?source=rss------bug_bounty-5 | Hazem El-Sayed | bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips, web-security | 21-Oct-2024 |
| My First $100 Bounty: Exploiting IDOR Vulnerability in Account Section | https://medium.com/@tinu7494/my-first-100-bounty-exploiting-idor-vulnerability-in-account-section-fc81d28dbed9?source=rss------bug_bounty-5 | Whitehat | bug-bounty, penetration-testing, bug-bounty-tips, hacking, cybersecurity | 21-Oct-2024 |
| How Sensitive Information Disclosure Can Lead to Account Takeover | https://medium.com/@D2Cy/how-sensitive-information-disclosure-can-lead-to-account-takeover-vulnerabilities-4d18d2a3711d?source=rss------bug_bounty-5 | Devansh | information-security, bug-bounty, idor, account-takeover | 21-Oct-2024 |
| Mastering Arsenal (How to Use the Nuclei Tool Effectively) | https://medium.com/@bitthr3at/mastering-arsenal-how-to-use-the-nuclei-tool-effectively-5ff976dfaeb0?source=rss------bug_bounty-5 | Naman Gupta (Bitthr3at) | nucleus, scanning, bug-bounty, pentest, tools | 21-Oct-2024 |
| Microsoft Blocks Windows 11 24H2 on Select ASUS Models: A Cautionary Tale for Users | https://medium.com/@wiretor/microsoft-blocks-windows-11-24h2-on-select-asus-models-a-cautionary-tale-for-users-5fc3314e0cfa?source=rss------bug_bounty-5 | WIRE TOR | cybersecurity, bug-bounty, pentest, usa, hacking | 21-Oct-2024 |
| Cisco Takes DevHub Portal Offline Following Hacker Leak of Sensitive Data | https://medium.com/@wiretor/cisco-takes-devhub-portal-offline-following-hacker-leak-of-sensitive-data-b6ca5cffe3c3?source=rss------bug_bounty-5 | WIRE TOR | pentesting, hacking, usa, bug-bounty, cybersecurity | 21-Oct-2024 |
| Massive WordPress Breach: Over 6,000 Sites Hacked by Infostealing Malware Plugins! ️ | https://medium.com/@wiretor/massive-wordpress-breach-over-6-000-sites-hacked-by-infostealing-malware-plugins-%EF%B8%8F-2a4cb7e80d0c?source=rss------bug_bounty-5 | WIRE TOR | pentest, usa, pentesting, bug-bounty, cybersecurity | 21-Oct-2024 |
| North Korean Hackers Exploit Microsoft Zero-Day: APT37’s “Code-on-Toast” Attack Uncovered | https://medium.com/@wiretor/north-korean-hackers-exploit-microsoft-zero-day-apt37s-code-on-toast-attack-uncovered-c10af50cf040?source=rss------bug_bounty-5 | WIRE TOR | cybersecurity, usa, bug-bounty, hacking, malware | 21-Oct-2024 |
| My Bug Hunting Journey Begins | https://medium.com/@ahmsyhmi/my-bug-hunting-journey-begins-c75c291ffe9c?source=rss------bug_bounty-5 | Ahmad Syahmi | bug-bounty-tips, bug-bounty, cybersecurity, bug-bounty-hunter, bug-hunting | 20-Oct-2024 |
| How i got 300euro bounty? | https://doordiefordream.medium.com/how-i-got-300euro-bounty-5e25f0a212de?source=rss------bug_bounty-5 | balu bandi | ethical-hacking, hacking, bug-bounty, writeup, cybersecurity | 20-Oct-2024 |
| How I Found My First P1 Bug ?? | https://medium.com/@prajwalpatil453/how-i-found-my-first-p1-bug-705b6ba5e3e2?source=rss------bug_bounty-5 | Anonstrk | bug-bounty-tips, cybersecurity, tips-and-tricks, vdp, bug-bounty | 20-Oct-2024 |
| How Much Does Penetration Testing Cost? | https://securitylit.medium.com/how-much-does-penetration-testing-cost-945fdb94e973?source=rss------bug_bounty-5 | Security Lit Limited | it-security, penetration-testing, pentesting, services, bug-bounty | 20-Oct-2024 |
| Is CISSP Certification Still Worth It in 2025? Find Out Why You Should Consider It! | https://securitylit.medium.com/is-cissp-certification-still-worth-it-in-2025-find-out-why-you-should-consider-it-dda36a443f80?source=rss------bug_bounty-5 | Security Lit Limited | penetration-testing, it-security, bug-bounty, cybersecurity | 20-Oct-2024 |
| Bypassing Email Uniqueness Check: A Logic Flaw Disrupting Password Recovery | https://medium.com/@0xoroot/bypassing-email-uniqueness-check-a-logic-flaw-disrupting-password-recovery-95464c95b664?source=rss------bug_bounty-5 | 0xoroot | bug-bounty-tips, broken-access-control, hacking, bug-bounty, hackerone | 20-Oct-2024 |
| Mastering SQLMap Tool for Effective SQL Injection Testing | https://medium.com/@prasanna.acharya/mastering-sqlmap-tool-for-effective-sql-injection-testing-38911178d3f6?source=rss------bug_bounty-5 | Prasanna Acharya | sqlmap, sql-injection, bug-bounty-tips, web-penetration-testing, bug-bounty | 20-Oct-2024 |
| Mastering Internet Scanning: How to Use ZMap and Censys for Ethical Hacking — Part 1 | https://medium.com/@vulnlabresearcher/mastering-internet-scanning-how-to-use-zmap-and-censys-for-ethical-hacking-part-1-9d05feb7a382?source=rss------bug_bounty-5 | VulnResearcher | bug-bounty, ethical-hacking, network-scanning, cybersecurity, zmap-tutorial | 20-Oct-2024 |
| Hack Application Pattern Lock | https://medium.com/@k3r0/hack-application-pattern-lock-5ade6b8128dc?source=rss------bug_bounty-5 | Kyrillos nady | bug-bounty, pentesting, hacking, mobi̇le, android | 20-Oct-2024 |
| Bug Bounty Roadmap for Beginner’s | https://medium.com/@kumawatabhijeet2002/bug-bounty-roadmap-for-beginners-de747ab39036?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, hacking, bugbounty-writeup, bug-bounty-tips | 20-Oct-2024 |
| The Deceptive Dance of Self-XSS: How to Protect Yourself from Your Own Browser | https://medium.com/@mrutunjayasenapati0/the-deceptive-dance-of-self-xss-how-to-protect-yourself-from-your-own-browser-303ffe642073?source=rss------bug_bounty-5 | Mrutunjaya Senapati | xss-attack, bug-bounty, vulnerability, bugs, hacking | 20-Oct-2024 |
| My Adventure in Bug Bounty: Sharing My Very First Successful Discovery | https://medium.com/@prateek.baghela/my-adventure-in-bug-bounty-sharing-my-very-first-successful-discovery-526124148107?source=rss------bug_bounty-5 | Prateek Baghela | cybersecurity, hacking, ethical-hacking, bug-bounty | 20-Oct-2024 |
| My first SQLi vulnerability | https://medium.com/@rimed.software/my-first-sqli-vulnerability-f1eaab78eadf?source=rss------bug_bounty-5 | muhammed demir | owasp-top-10, bug-bounty, bug-bounty-writeup, sqli, cybersecurity | 20-Oct-2024 |
| Halloween Special Offer: 25% Off All Cybersecurity Services! | https://medium.com/@wiretor/halloween-special-offer-25-off-all-cybersecurity-services-01ff60356d66?source=rss------bug_bounty-5 | WIRE TOR | hacking, bug-bounty, halloween, cybersecurity, usa | 20-Oct-2024 |
| Finally I got My First Bounty | From Self Hosted Program | https://medium.com/@the.air.cyborg/finally-i-got-my-first-bounty-from-self-hosted-program-71ffe09473c4?source=rss------bug_bounty-5 | the_air_cyborg | clickjacking, bugbounty-writeup, bug-bounty, bugbounty-tips, clickbait | 20-Oct-2024 |
| Mastering Nmap Firewall Evasion Techniques: A Detailed Guide | https://medium.com/@anandrishav2228/mastering-nmap-firewall-evasion-techniques-a-detailed-guide-f5d5b9f00587?source=rss------bug_bounty-5 | Rishav anand | firewall, bug-bounty, nmap, cybersecurity, money | 20-Oct-2024 |
| How to Start Hacking: A Comprehensive Guide to Ethical Hacking and Penetration Testing for… | https://medium.com/@verylazytech/how-to-start-hacking-a-comprehensive-guide-to-ethical-hacking-and-penetration-testing-for-db6e3fcd63ea?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, books, how-to-start-hacking, penetration-testing, cybersecurity | 20-Oct-2024 |
| Superior Tool Untuk Melakukan Google Dorking Dalam Mencari Kerentanan Website | https://medium.com/@bimosp56/superior-tool-untuk-melakukan-google-dorking-dalam-mencari-kerentanan-website-ec7719b05a5b?source=rss------bug_bounty-5 | Bimo Salasa Putra | bug-bounty, bigbountyrecon, vulnerability-assessment, google-dorking, vulnerability | 20-Oct-2024 |
| FINDING A DOS BUG(STEP BY STEP). | https://osintteam.blog/finding-a-dos-bug-step-by-step-5f13d361dc90?source=rss------bug_bounty-5 | loyalonlytoday | hacking, penetration-testing, bug-bounty-tips, cybersecurity, bug-bounty | 20-Oct-2024 |
| $$$ Bounty for PII disclosure through API | https://osintteam.blog/bounty-for-pii-disclosure-through-api-71b660bc984b?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | cybersecurity, hacking, bug-bounty, ethical-hacking, technology | 20-Oct-2024 |
| Security Misconfigurations in Docker Containers: My $500 Win! | https://osintteam.blog/security-misconfigurations-in-docker-containers-my-500-win-241af85882b2?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | ethical-hacking, hacking, bug-bounty, cybersecurity, technology | 20-Oct-2024 |
| Exploiting Auth0 Misconfigurations: A Case Study on Account Linking Vulnerabilities | https://medium.com/@iknowhatodo/exploiting-auth0-misconfigurations-a-case-study-on-account-linking-vulnerabilities-76fb6b9703f8?source=rss------bug_bounty-5 | Hossam Ahmed | security, penetration-testing, bug-bounty, information-security | 20-Oct-2024 |
| What are Cookies? and How Attackers Take Privilege of Cookies | https://medium.com/@vishalsahu1604/what-are-cookies-and-how-attackers-take-privilege-of-cookies-a016145c5fff?source=rss------bug_bounty-5 | Vishal Sahoo | website-development, bug-bounty, technology, cybersecurity, website | 20-Oct-2024 |
| How I could steal Telegram OTPs using SMS relays | https://medium.com/@cyberletmewin/how-i-could-steal-telegram-otps-using-sms-relays-4672769c98e3?source=rss------bug_bounty-5 | Abdelkhalek Beraoud (letmewin) | telegram, information-security, mobile-network, cybersecurity, bug-bounty | 20-Oct-2024 |
| VDP vs CVD vs Bug Bounty | https://medium.com/@ali.abdollahi/vdp-vs-cvd-vs-bug-bounty-bc2402038e4f?source=rss------bug_bounty-5 | Ali Abdollahi | cybersecurity, security, information-security, vulnerability, bug-bounty | 20-Oct-2024 |
| Hackers Exploit Roundcube Webmail Vulnerability to Steal Login Credentials | https://medium.com/@wiretor/hackers-exploit-roundcube-webmail-vulnerability-to-steal-login-credentials-6b2761a7dd81?source=rss------bug_bounty-5 | WIRE TOR | hacking, pentest, usa, cybersecurity, bug-bounty | 20-Oct-2024 |
| Hackers Exploit Redbox Kiosks: A Wake-Up Call for Digital Security | https://medium.com/@wiretor/hackers-exploit-redbox-kiosks-a-wake-up-call-for-digital-security-1d19e18f3a80?source=rss------bug_bounty-5 | WIRE TOR | hacking, usa, cybersecurity, malware, bug-bounty | 20-Oct-2024 |
| How to Find XSS in Real-Life Bug Bounty Targets | https://medium.com/@rupaitanudas/how-to-find-xss-in-real-life-bug-bounty-targets-319177706ad8?source=rss------bug_bounty-5 | Rupaitanudas | xss-attack, bug-bounty, tips-and-tricks | 20-Oct-2024 |
| Internet Archive Breached Again: Urgent Call for Enhanced Cybersecurity | https://medium.com/@wiretor/internet-archive-breached-again-urgent-call-for-enhanced-cybersecurity-4cb161fc5408?source=rss------bug_bounty-5 | WIRE TOR | cybersecurity, bug-bounty, usa, malware, hacking | 20-Oct-2024 |
| how did I lose $5000? | https://medium.com/@mr.matrex00.7/how-did-i-lose-5000-6bf4a5c7cbf7?source=rss------bug_bounty-5 | Mr Matrex | hackthebox, tryhackme, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 20-Oct-2024 |
| Unveiling Hidden Vulnerabilities: A Journey into E-Commerce Security | https://medium.com/@CipherHawk/unveiling-hidden-vulnerabilities-a-journey-into-e-commerce-security-db7993b788cc?source=rss------bug_bounty-5 | CipherHawk | bug-bounty-tips, bug-bounty, bugcrowd, cybersecurity, hackerone | 20-Oct-2024 |
| VDP vs CVD vs Bug Bounty | https://systemweakness.com/vdp-vs-cvd-vs-bug-bounty-bc2402038e4f?source=rss------bug_bounty-5 | Ali Abdollahi | cybersecurity, security, information-security, vulnerability, bug-bounty | 20-Oct-2024 |
| How I Found My First Easy P3 Vulnerability in HackerOne Bug Bounty | https://medium.com/@aryan9868/how-i-found-my-first-easy-p3-vulnerability-in-hackerone-bug-bounty-f9227942c6c0?source=rss------bug_bounty-5 | h4ck3rrawat | bugs, bug-bounty-tips, bugbounty-writeup, hackerone, bug-bounty | 19-Oct-2024 |
| Google Dorking Queries to find vulnurable targets | https://medium.com/@kanishk.k1410/google-dorkingqueries-to-find-vulnurable-targets-89ee672b6996?source=rss------bug_bounty-5 | Kanishk Kumar | google-dorking, hacking, technology, bug-bounty, offensive-security | 19-Oct-2024 |
| How a NoSQL Injection Attack Helped Me Earn $500: A Step-by-Step Guide | https://medium.com/@anandrishav2228/how-a-nosql-injection-attack-helped-me-earn-500-a-step-by-step-guide-51370a95bb93?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, ai, money, nosql, cybersecurity | 19-Oct-2024 |
| A Comprehensive Guide to API Fuzzing: Strengthen Your API Security | https://medium.com/@Code_With_Ssn/a-comprehensive-guide-to-api-fuzzing-strengthen-your-api-security-5c00aac974b0?source=rss------bug_bounty-5 | N4!TR0 07 | api-fuzzing, api, bug-bounty, bug-bounty-writeup, reconnaissance | 19-Oct-2024 |
| From JavaScript Analysis To UUID Pattern Exploration Revealed a Critical IDOR! | https://medium.com/@ozomarzu/from-javascript-analysis-to-uuid-pattern-exploration-revealed-a-critical-idor-5c526451e7ec?source=rss------bug_bounty-5 | CyberOz | bug-bounty-tips, js, idor, bug-bounty-writeup, bug-bounty | 19-Oct-2024 |
| Password Brute-Forcing: The Cybersecurity Game Show You Didn’t Sign Up For | https://medium.com/@mrutunjayasenapati0/password-brute-forcing-the-cybersecurity-game-show-you-didnt-sign-up-for-c03052aedeeb?source=rss------bug_bounty-5 | Mrutunjaya Senapati | hacking, vulnerability, bug-bounty, passwords, bugs | 19-Oct-2024 |
| How I Uncovered a Hidden XSS Vulnerability in a Global Car Website | https://medium.com/@gg20205959/how-i-uncovered-a-hidden-xss-vulnerability-in-a-global-car-website-1e0b86a86a7a?source=rss------bug_bounty-5 | VulnSniper | xss-attack, xss-vulnerability, hacking, alerts, bug-bounty | 19-Oct-2024 |
| How I Uncovered a High-Severity Vulnerability Using a Single HTTP Header | https://medium.com/@ahmeedhisham2019/how-i-uncovered-a-high-severity-vulnerability-using-a-single-http-header-bf678a2775dc?source=rss------bug_bounty-5 | CipherHawk | cybersecurity, ethical-hacking, hackerone, bug-bounty-tips, bug-bounty | 19-Oct-2024 |
| SubdomainRadar.io — The best Subdomain Finder And Port Scanner | https://medium.com/@alexandrevandammepro/subdomainradar-io-the-best-subdomain-finder-and-port-scanner-a5390b5fee67?source=rss------bug_bounty-5 | Alexandre Vandamme | subdomains-enumeration, osint, bug-bounty, infose, cybersecurity | 19-Oct-2024 |
| How I am starting my Bug Bounty Hunting Journey | https://cybersechemmars.medium.com/how-i-am-starting-my-bug-bounty-hunting-journey-6d807a367d80?source=rss------bug_bounty-5 | Cybersec with Hemmars | bug-bounty, bug-bounty-tips, bug-bounty-writeup, bug-bounty-hunter, cybersecurity | 19-Oct-2024 |
| Get easy $50,000 bugbounty hunting from hackerone program | https://medium.com/@loaymorad11/get-easy-50-000-bugbounty-hunting-from-hackerone-program-e5a119d2af0c?source=rss------bug_bounty-5 | Loaymorad | hackerone, writeup, information-disclosure, cybersecurity, bug-bounty | 19-Oct-2024 |
| Attack on Zendesk | https://medium.com/@skirkanna/attack-on-zendesk-6f4f3adf3458?source=rss------bug_bounty-5 | Anna Skirko (unknown_feature) | bug-bounty, apple, zendesk, supply-chain, slack | 19-Oct-2024 |
| How I Uncovered a High-Severity Vulnerability Using a Single HTTP Header | https://medium.com/@CipherHawk/how-i-uncovered-a-high-severity-vulnerability-using-a-single-http-header-bf678a2775dc?source=rss------bug_bounty-5 | CipherHawk | cybersecurity, ethical-hacking, hackerone, bug-bounty-tips, bug-bounty | 19-Oct-2024 |
| How I Found a Subdomain Takeover Bug and Earned a $500 Bounty | https://medium.com/@D2Cy/how-i-found-a-subdomain-takeover-bug-and-earned-a-500-bounty-0edc139fe994?source=rss------bug_bounty-5 | D2Cy | information-security, bug-bounty, bug-bounty-writeup, cybersecurity, subdomain-takeover | 19-Oct-2024 |
| XSS | https://medium.com/@cyberviperx/xss-f5daee1b9e95?source=rss------bug_bounty-5 | Majd abuleil | xss-vulnerability, bug-bounty, cybersecurity, hacking, xss-attack | 19-Oct-2024 |
| 6 BEST Hacking Books for Learning Cybersecurity | https://medium.com/illumination/6-best-hacking-books-for-learning-cybersecurity-bbe0e9bdf0ae?source=rss------bug_bounty-5 | Tahir Ayoub | penetration-testing, bug-bounty, hacking, cybersecurity, ethical-hacking | 19-Oct-2024 |
| Alabama Man Arrested for SEC Social Media Hack That Caused Bitcoin Price Spike | https://medium.com/@wiretor/alabama-man-arrested-for-sec-social-media-hack-that-caused-bitcoin-price-spike-eebee5fe0a88?source=rss------bug_bounty-5 | WIRE TOR | information-technology, cybersecurity, malware, xss-attack, bug-bounty | 19-Oct-2024 |
| Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant | https://medium.com/@wiretor/russian-romcom-attacks-target-ukrainian-government-with-new-singlecamper-rat-variant-89d740937358?source=rss------bug_bounty-5 | WIRE TOR | cybersecurity, xss-attack, hacking, bug-bounty, usa | 19-Oct-2024 |
| Attention WordPress Users! Critical Jetpack Vulnerability Fixed! | https://medium.com/@wiretor/attention-wordpress-users-critical-jetpack-vulnerability-fixed-f52d455499fe?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, usa, sqli, malware, hacking | 19-Oct-2024 |
| How I Found a Subdomain Takeover Bug and Earned a $500 Bounty | https://medium.com/@D2Cy/how-i-found-a-subdomain-takeover-bug-and-earned-a-500-bounty-0edc139fe994?source=rss------bug_bounty-5 | Devansh | information-security, bug-bounty, bug-bounty-writeup, cybersecurity, subdomain-takeover | 19-Oct-2024 |
| 2FA Bypass via OAuth Linking | https://medium.com/@sharp488/2fa-bypass-via-oauth-linking-c8a640519ae8?source=rss------bug_bounty-5 | Sharat Kaikolamthuruthil | bug-bounty-tips, bug-bounty, hacking, information-security, information-technology | 18-Oct-2024 |
| Stored XSS & Privilege Escalation in Profile Field -Private Program | https://cyb3rc4t.medium.com/stored-xss-privilege-escalation-in-profile-field-private-program-2bdde55e34b2?source=rss------bug_bounty-5 | CYB3RC4T | infosec, bugbounty-writeup, bug-bounty, security, privilege-escalation | 18-Oct-2024 |
| Managing and Modifying URLs in SubScope for Bug Bounty Programs: A Comprehensive Guide | https://medium.com/@hunthubspace/managing-and-modifying-urls-in-subscope-for-bug-bounty-programs-a-comprehensive-guide-667df5ed07ab?source=rss------bug_bounty-5 | hunThub | automation, bug-bounty, penetration-testing, cybersecurity, bug-bounty-tips | 18-Oct-2024 |
| I found this Bug in just 5 min. Only and Earn $300. | https://medium.com/@anandrishav2228/i-found-this-bug-in-just-5-min-only-and-earn-300-6b57528a7291?source=rss------bug_bounty-5 | Rishav anand | cors, bug-bounty, cybersecurity, money, vulnerability | 18-Oct-2024 |
| Exploiting Session Fixation via Stored XSS and Cookie Jar Overflow Attack | https://akashc99.medium.com/exploiting-session-fixation-via-stored-xss-and-cookie-jar-overflow-attack-7cf8d60e1f9e?source=rss------bug_bounty-5 | Akash c | cybersecurity, web-app-security, bug-bounty, bug-hunter, hacking | 18-Oct-2024 |
| A Security Researcher’s Journey: Uncovering an Account Takeover Vulnerability | https://medium.com/@cybershree/a-security-researchers-journey-uncovering-an-account-takeover-vulnerability-624763bd4ecd?source=rss------bug_bounty-5 | Shridhar Rajaput | cybersecurity, security, bug-bounty-tips, vulnerability, bug-bounty | 18-Oct-2024 |
| The Harsh Reality of Bug Bounty Hunting Bugcrowd | https://medium.com/@cybershree/the-harsh-reality-of-bug-bounty-hunting-on-bugcrowd-aac3b29e9f43?source=rss------bug_bounty-5 | Shridhar Rajaput | bugcrowd, cybersecurity, bugbounty-writeup, bugs, bug-bounty | 18-Oct-2024 |
| Exploring Session Hijacking: How Attackers Compromise Web Sessions | https://medium.com/@mrutunjayasenapati0/exploring-session-hijacking-how-attackers-compromise-web-sessions-6a1c78e6c718?source=rss------bug_bounty-5 | Mrutunjaya Senapati | vulnerability, bug-bounty, sessions, bug-bounty-tips, hacking | 18-Oct-2024 |
| IDOR: User Information Disclosure | https://systemweakness.com/idor-user-information-disclosure-7c6951a55a7a?source=rss------bug_bounty-5 | Aswin Thambi Panikulangara | cybersecurity, bug-bounty, hacking, bug-bounty-tips, bugbounty-writeup | 18-Oct-2024 |
| How Do Hackers Crack ANY Software | https://medium.com/@TahirAyoub/how-do-hackers-crack-any-software-8e8e201bb169?source=rss------bug_bounty-5 | Tahir Ayoub | hacking, bug-bounty, cybersecurity, medium, pentesting | 18-Oct-2024 |
| Business logic vulnerability : Permanent Comments lock | https://sayedv2.medium.com/business-logic-vulnerability-permanent-comments-lock-f118087967ba?source=rss------bug_bounty-5 | Mohamed Sayed | security, bug-bounty, cybersecurity, business-logic, infosec | 18-Oct-2024 |
| How I Earned $150 for Reporting a Simple Parameter Bug | https://medium.com/@janmaciejewski07/how-i-earned-150-for-reporting-a-simple-parameter-bug-90734441dcd5?source=rss------bug_bounty-5 | Jan Maciejewski | programming, cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-program | 18-Oct-2024 |
| Easy P3 Bug: A Spoofing Vulnerability | https://medium.com/@cybershree/easy-p3-bug-a-spoofing-vulnerability-ca73a62b6f48?source=rss------bug_bounty-5 | Shridhar Rajaput | cybersecurity, penetration-testing, bug-bounty, linkedin, information-technology | 18-Oct-2024 |
| Easy P4 Bug #2: Account Deletion Lacks Password Verification | https://medium.com/@cybershree/p4-bug-2-account-deletion-lacks-password-verification-a8633a00c9fc?source=rss------bug_bounty-5 | Shridhar Rajaput | cybersecurity, bugs, security-research, bug-bounty, information-technology | 18-Oct-2024 |
| Easy P4 Bug : Failure to Invalidate Sessions Post Password Change | https://medium.com/@cybershree/easy-p4-bug-failure-to-invalidate-sessions-post-password-change-56a3aee9e8cc?source=rss------bug_bounty-5 | Shridhar Rajaput | cybersecurity, bug-bounty, information-technology, hackerone, ethical-hacking | 18-Oct-2024 |
| The Harsh Reality of Bug Bounty Hunting on Bugcrowd | https://medium.com/@cybershree/the-harsh-reality-of-bug-bounty-hunting-on-bugcrowd-aac3b29e9f43?source=rss------bug_bounty-5 | Shridhar Rajaput | bugcrowd, cybersecurity, bugbounty-writeup, bugs, bug-bounty | 18-Oct-2024 |
| Microsoft Unveils macOS Vulnerability: A Deep Dive into the HM Surf Flaw ️ | https://medium.com/@wiretor/microsoft-unveils-macos-vulnerability-a-deep-dive-into-the-hm-surf-flaw-%EF%B8%8F-1bb8b77b2a63?source=rss------bug_bounty-5 | WIRE TOR | cybersecurity, cve, bug-bounty, hacking, zero-day | 18-Oct-2024 |
| Hong Kong Crime Ring Swindles Victims Out of $46M Using Deepfakes | https://medium.com/@wiretor/hong-kong-crime-ring-swindles-victims-out-of-46m-using-deepfakes-9dc8cb713248?source=rss------bug_bounty-5 | WIRE TOR | hacking, usa, shell, sql, bug-bounty | 18-Oct-2024 |
| Omni Family Health Impacts 470,000 Individuals | https://medium.com/@wiretor/omni-family-health-impacts-470-000-individuals-d20a82cd0ac8?source=rss------bug_bounty-5 | WIRE TOR | usa, sql, rce, bug-bounty, hacking | 18-Oct-2024 |
| Another Dark Reality of Bug Hunting | https://medium.com/@akashmotkar001/another-dark-reality-of-bug-hunting-6539c60dac31?source=rss------bug_bounty-5 | Akashmotkar | ethical-hacking, hacking, bug-bounty, bugs, cybersecurity | 18-Oct-2024 |
| How Do Hackers Crack ANY Software | https://medium.com/h7w/how-do-hackers-crack-any-software-8e8e201bb169?source=rss------bug_bounty-5 | Tahir Ayoub | hacking, bug-bounty, cybersecurity, medium, pentesting | 18-Oct-2024 |
| Bug Bounty Tools that make you Rich and Independent and Help earn upto $100–$50,000 | https://medium.com/@anandrishav2228/bug-bounty-tools-that-make-you-rich-and-independent-and-help-earn-upto-100-50-000-eddc92485bae?source=rss------bug_bounty-5 | Rishav anand | hacking, tools, bug-bounty, money, cybersecurity | 17-Oct-2024 |
| Bug Bounty Millionaires: Are You Missing Out on Easy Money? | https://medium.com/@paritoshblogs/bug-bounty-millionaires-are-you-missing-out-on-easy-money-e5b10a9e2cc1?source=rss------bug_bounty-5 | Paritosh | information-technology, cybersecurity, money, bug-bounty, hacking | 17-Oct-2024 |
| Electron JS Application Penetration Testing | https://medium.com/@ajaynaikhack/electron-js-application-penetration-testing-b0809af324f6?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, bug-bounty, information-security, electronjs, penetration-testing | 17-Oct-2024 |
| How to Find XSS in Bug Bounty Programs: A Step-by-Step Guide with Source Code Examples | https://medium.com/@shaikhminhaz1975/how-to-find-xss-in-bug-bounty-programs-a-step-by-step-guide-with-source-code-examples-804e4b8a225d?source=rss------bug_bounty-5 | Shaikh Minhaz | cybersecurity, step-by-step-guide, penetration-testing, xss-attack, bug-bounty | 17-Oct-2024 |
| Your approach to finding XSS would change after you read this | https://medium.com/@nireshpandian19/your-approach-to-finding-xss-would-change-after-you-read-this-8292fcafefc1?source=rss------bug_bounty-5 | JAI NIRESH J | idor-vulnerability, bug-bounty, cybersecurity, bug-bounty-writeup, idor | 17-Oct-2024 |
| Electron JS Application Penetration Testing | https://infosecwriteups.com/electron-js-application-penetration-testing-b0809af324f6?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, bug-bounty, information-security, electronjs, penetration-testing | 17-Oct-2024 |
| E-commerce website vulnerability bounty practice sharing（II） | https://medium.com/@security.tecno/e-commerce-website-vulnerability-bounty-practice-sharing-ii-739d47705908?source=rss------bug_bounty-5 | TECNO Security | security, hacking, bonus, bug-bounty | 17-Oct-2024 |
| IDOR lead to Restriction Bypass!! | https://kumarmohank889.medium.com/idor-lead-to-restriction-bypass-7f42d593ffd4?source=rss------bug_bounty-5 | Mohan Kumar N | bug-bounty-tips, bug-bounty, bug-bounty-writeup, cybersecurity, hacking | 17-Oct-2024 |
| Over 7 Million WooCommerce Sites Affected by a Simple HTML Injection: CVE-2024–9944 Analysis | https://dropn0w.medium.com/over-7-million-woocommerce-sites-affected-by-a-simple-html-injection-cve-2024-9944-analysis-ce81c918c39a?source=rss------bug_bounty-5 | drop | cve, cybersecurity, bug-bounty, woocommerce, wordpress | 17-Oct-2024 |
| Advanced IDOR Exploitation: Discovering Hidden Vulnerabilities Through Delayed Object Creation | https://medium.com/@ashfquejahan5/advanced-idor-exploitation-discovering-hidden-vulnerabilities-through-delayed-object-creation-beb9da9e036f?source=rss------bug_bounty-5 | jahanaj | bug-bounty, idor, web | 17-Oct-2024 |
| Unmasking Server-Side Request Forgery (SSRF): How Attackers Exploit Internal Systems | https://medium.com/@mrutunjayasenapati0/unmasking-server-side-request-forgery-ssrf-how-attackers-exploit-internal-systems-286b5b71a46a?source=rss------bug_bounty-5 | Mrutunjaya Senapati | bug-bounty, vulnerability, ethical-hacking, hacking, ssrf-attack | 17-Oct-2024 |
| Bug Bounty — IDOR lead to Restriction Bypass!! | https://kumarmohank889.medium.com/idor-lead-to-restriction-bypass-7f42d593ffd4?source=rss------bug_bounty-5 | Mohan Kumar N | bug-bounty-tips, bug-bounty, bug-bounty-writeup, cybersecurity, hacking | 17-Oct-2024 |
| Maximizing Web3 Security with Bug Bounty Program Data | https://securrtech.medium.com/maximizing-web3-security-with-bug-bounty-program-data-1434315dbcdb?source=rss------bug_bounty-5 | Securr | web3-security, blockchain-technology, bug-bounty, smart-contract-auditing, web3 | 17-Oct-2024 |
| Walkthrough for the Appointment Machine — Hack The Box (HTB) Challenge | https://medium.com/@jessemridley/walkthrough-for-the-appointment-machine-hack-the-box-htb-challenge-b228fe34e2f5?source=rss------bug_bounty-5 | Jesse Ridley | ethical-hacking, cybersecurity, bug-bounty, technology, penetration-testing | 17-Oct-2024 |
| FROM OUT OF SCOPE TO ACCEPTED | https://medium.com/@nightcoders0/from-out-of-scope-to-accepted-4f52e626b734?source=rss------bug_bounty-5 | Nightcoders | bugs, bug-bounty-writeup, ethical-hacking, bug-bounty, bug-bounty-tips | 17-Oct-2024 |
| Hack The Box Challenge: Day 4 — Knowledge Check Walkthrough | https://medium.com/@jessemridley/hack-the-box-challenge-day-4-knowledge-check-walkthrough-ce22f62d0854?source=rss------bug_bounty-5 | Jesse Ridley | cybersecurity, freelancing, technology, bug-bounty, hacking | 17-Oct-2024 |
| Payload Pursuit: XSS Challenge | https://medium.com/@josh.beck2006/payload-pursuit-xss-challenge-40105e34379c?source=rss------bug_bounty-5 | Josh Beck | cybersecurity, ctf-writeup, bug-bounty, ctf | 17-Oct-2024 |
| ACCESS MEDIUM PAID BLOGS FOR YOUR RESEARCH IN BUG BOUNTY | https://medium.com/@anonymousshetty2003/access-medium-paid-blogs-for-your-research-in-bug-bounty-b19395d20e0b?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, hacking, ethical-hacking, bug-bounty | 17-Oct-2024 |
| $600 Bug Bounty: How I Poked Microservices and Got Paid! | https://osintteam.blog/600-bug-bounty-how-i-poked-microservices-and-got-paid-9e1bbe0f45e8?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | vulnerability, programming, cybersecurity, bug-bounty, penetration-testing | 17-Oct-2024 |
| Breaking News: Sudan Brothers Charged in DDoS Attack Service Disruption! | https://medium.com/@wiretor/breaking-news-sudan-brothers-charged-in-ddos-attack-service-disruption-856290eb0dfb?source=rss------bug_bounty-5 | WIRE TOR | usa, virus, bug-bounty, hacking, trojan | 17-Oct-2024 |
| Vulnerability Discovered in Kubernetes Image Builder! | https://medium.com/@wiretor/vulnerability-discovered-in-kubernetes-image-builder-5846cf32cb80?source=rss------bug_bounty-5 | WIRE TOR | bug-bounty, usa, hacking, europe, virus | 17-Oct-2024 |
| Use Case: Bypassing In-App Purchase By Payment Client-Side Validation | https://secfathy0x1.medium.com/use-case-bypassing-in-app-purchase-by-payment-client-side-validation-e87e2c775a9c?source=rss------bug_bounty-5 | Mohamed K. Fathy | bug-bounty-writeup, hacking, bug-bounty, android, cybersecurity | 17-Oct-2024 |
| I Can Crash Anyone’s Instagram Post - Zero Day-Permanent DoS | Meta | BugBounty | 2024 | https://prathapilango.medium.com/i-can-crash-anyones-instagram-post-zero-day-permanent-dos-meta-bugbounty-2024-a2e50ac15caf?source=rss------bug_bounty-5 | Prathapilango | cyebrsecurity, bug-bounty, bug-bounty-writeup, meta-bug-bounty, info-sec-writeups | 17-Oct-2024 |
| Admin Panel Takeover Using a Leaky JS File | https://medium.com/@RaunakGupta1922/admin-panel-takeover-using-a-leaky-js-file-dc41fac0f86d?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | javascript, programming, technology, bug-bounty, cybersecurity | 16-Oct-2024 |
| How I Deleted Users from the Database on Private Bug Bounty Program | https://medium.com/@sharp488/how-i-deleted-users-from-the-database-on-private-bug-bounty-program-f1939e83dd6f?source=rss------bug_bounty-5 | Sharat Kaikolamthuruthil | bugs, bug-bounty, information-technology, information-security, bug-bounty-tips | 16-Oct-2024 |
| Birdie Flies in to Save the Day: Our Custom Bug Tracking Tool for Android & iOS Apps | https://engineering.probo.in/birdie-flies-in-to-save-the-day-our-custom-bug-tracking-tool-for-android-ios-apps-3834ab2bc434?source=rss------bug_bounty-5 | Probo | coding, app-development, engineering, bug-bounty, prediction-markets | 16-Oct-2024 |
| How Website Work | https://medium.com/@Joshua_su/how-website-work-3df5e4e93a61?source=rss------bug_bounty-5 | Joshua Suksakorn | curl, cybersecurity, website, bug-bounty | 16-Oct-2024 |
| How to Find API Bugs and Earn Big with Bug Bounties upto $20,000 | https://medium.com/@anandrishav2228/how-to-find-api-bugs-and-earn-big-with-bug-bounties-upto-20-000-12358743fcf9?source=rss------bug_bounty-5 | Rishav anand | money, api, bug-bounty, hacker, cybersecurity | 16-Oct-2024 |
| Admin Panel Takeover Using a Leaky JS File | https://osintteam.blog/admin-panel-takeover-using-a-leaky-js-file-dc41fac0f86d?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | javascript, programming, technology, bug-bounty, cybersecurity | 16-Oct-2024 |
| Quantity Manipulation Allows Purchases at Reduced Prices | https://medium.com/@abdelrahman0x01/quantity-manipulation-allows-purchases-at-reduced-prices-d2e998b82a02?source=rss------bug_bounty-5 | Abdelrahman0x01 | bug-bounty, information-security, cybersecurity, penetration-testing, cyberattack | 16-Oct-2024 |
| How I do my recon and end up finding hidden assets and vulnerabilities before anyone else Pt.1 | https://medium.com/@demonia/how-i-do-my-recon-and-end-up-finding-hidden-assets-and-vulnerabilities-before-anyone-else-pt-1-30777f987c93?source=rss------bug_bounty-5 | Mohammed Dief | reconnaissance, bug-bounty, hacking, bug-bounty-tips, cybersecurity | 16-Oct-2024 |
| Cracking the HTB Cap Box: A Step-by-Step Walkthrough | https://medium.com/@vignesh6872610/cracking-the-htb-cap-box-a-step-by-step-walkthrough-0b08a4fff3f9?source=rss------bug_bounty-5 | Vignesh P | cap, hackthebox, retiredmachine, bug-bounty-tips, bug-bounty | 16-Oct-2024 |
| How to Earn money online using Cybersecurity knowledge | https://medium.com/@rashad.desk/how-to-earn-money-online-using-cybersecurity-knowledge-ece1078969f4?source=rss------bug_bounty-5 | Rashadul Islam | freelancing, cybersecurity, earn-money-online, bug-bounty | 16-Oct-2024 |
| Unauthorized SQL Injection: Turning ‘No Entry’ Signs into Dollar Signs! | https://medium.com/@Xt3sY/unauthorized-sql-injection-turning-no-entry-signs-into-dollar-signs-80dcf1168dbd?source=rss------bug_bounty-5 | Pushkar Bhagat | bug-bounty, hacking, hackerone, bugcrowd, hacker | 16-Oct-2024 |
| Hidden Reflected XSS via Android Application in VDP | https://cyb3rc4t.medium.com/hidden-reflected-xss-via-android-application-in-vdp-68f4210196f1?source=rss------bug_bounty-5 | CYB3RC4T | bug-bounty-tips, security, infosec, android-pentesting, bug-bounty | 16-Oct-2024 |
| Insecure direct object references | https://medium.com/@codingbolt.in/insecure-direct-object-references-8daea91886f4?source=rss------bug_bounty-5 | codingbolt | bug-bounty, ethical-hacking, idor, cybersecurity, owasp | 16-Oct-2024 |
| User ID controlled by request parameter with password disclosure | https://medium.com/@codingbolt.in/user-id-controlled-by-request-parameter-with-password-disclosure-98e4f9ebe167?source=rss------bug_bounty-5 | codingbolt | ethical-hacking, owasp, owasp-top-10, bug-bounty, cybersecurity | 16-Oct-2024 |
| User ID controlled by request parameter with data leakage in redirect | https://medium.com/@codingbolt.in/user-id-controlled-by-request-parameter-with-data-leakage-in-redirect-65b571611c7b?source=rss------bug_bounty-5 | codingbolt | cybersecurity, ethical-hacking, owasp-top-10, owasp, bug-bounty | 16-Oct-2024 |
| User ID controlled by request parameter, with unpredictable user IDs | https://medium.com/@codingbolt.in/user-id-controlled-by-request-parameter-with-unpredictable-user-ids-b9e12542330d?source=rss------bug_bounty-5 | codingbolt | cybersecurity, bug-bounty, owasp-top-10, ethical-hacking, owasp | 16-Oct-2024 |
| User ID controlled by request parameter | https://medium.com/@codingbolt.in/user-id-controlled-by-request-parameter-7a0bb3006f68?source=rss------bug_bounty-5 | codingbolt | cybersecurity, owasp, owasp-top-10, bug-bounty, ethical-hacking | 16-Oct-2024 |
| User role can be modified in user profile | https://medium.com/@codingbolt.in/user-role-can-be-modified-in-user-profile-eb1a28631358?source=rss------bug_bounty-5 | codingbolt | cybersecurity, bug-bounty, owasp-top-10, owasp, ethical-hacking | 16-Oct-2024 |
| Exposing Vulnerabilities: The Power of Google Dorking in Cybersecurity Part-2 | https://medium.com/@abhilov/exposing-vulnerabilities-the-power-of-google-dorking-in-cybersecurity-part-2-90dbf2e68ded?source=rss------bug_bounty-5 | Abhilov Gupta | bug-bounty, dorking, google, cybersecurity, hacking | 16-Oct-2024 |
| HOW I FIND XXS REFLECTED IN 5 SEC | https://medium.com/@mr.matrex00.7/xxxs-reflected-in-external-programme-1d234bd3b3c3?source=rss------bug_bounty-5 | Mr Matrex | xss-attack, xss-vulnerability, hunter, bug-bounty | 16-Oct-2024 |
| WAF Bypass — Parameter Poisoning | https://medium.com/@unrealdenis2020/waf-bypass-parameter-poisoning-21ad6e0db83c?source=rss------bug_bounty-5 | E1nZ | waf, bugbounty-writeup, waf-bypass, parameter-poisoning, bug-bounty | 16-Oct-2024 |
| Hidden Reflected XSS via Android Application in VDP | https://cyb3rc4t.medium.com/hidden-reflected-xss-via-android-application-in-vdp-68f4210196f1?source=rss------bug_bounty-5 | CYB3RC4T | bug-bounty-tips, cybersecurity, infosec, bug-bounty, hackerone | 16-Oct-2024 |
| Zero-Hero Hacker By Reading. Top 5 Books Designed For Hackers | Primary Hacking School #7 | https://medium.com/@nnface/zero-hero-hacker-by-reading-top-5-books-designed-for-hackers-primary-hacking-school-7-559618b200b3?source=rss------bug_bounty-5 | NnFace | cybersecurity, linux, hacking, bug-bounty, kali-linux | 16-Oct-2024 |
| How Google Dorking Helps me to Earn more than $2,000 in Bug Bounty. | https://medium.com/@anandrishav2228/how-google-dorking-helps-me-to-earn-more-than-2-000-in-bug-bounty-b2ac959b3905?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, google, bug-bounty, money, advanced | 15-Oct-2024 |
| 5 Cybersecurity Projects You Can Build This Weekend (with Python) | https://medium.com/@paritoshblogs/5-cybersecurity-projects-you-can-build-this-weekend-with-python-74bf03c3ba5d?source=rss------bug_bounty-5 | Paritosh | bug-bounty, python, coding, cybersecurity, hacking | 15-Oct-2024 |
| Perform a Command Injection Attack in Large Language Models (LLMs) | https://medium.com/@360Security/perform-a-command-injection-attack-in-large-language-models-llms-86cd7db5e528?source=rss------bug_bounty-5 | 360 Security | penetration-testing, llm, cybersecurity, bug-bounty, ai | 15-Oct-2024 |
| Sensitive Information Disclosure (Critical Finding) | https://medium.com/@bughunt789/sensitive-information-disclosure-critical-finding-8fcbd7fe1704?source=rss------bug_bounty-5 | BUG HUNTER | bắc, bug-bounty, sensitive-information, idor | 15-Oct-2024 |
| Best AI Tool Used by Hacker 2025 | https://medium.com/@TahirAyoub/best-ai-tool-used-by-hacker-2025-715ab6ac8843?source=rss------bug_bounty-5 | Tahir Ayoub | ai, hacking, cybersecurity, ethical-hacking, bug-bounty | 15-Oct-2024 |
| Google Dorks for Bug Bounty | Find Sensitive Information | https://medium.com/@shardulsawant67/google-dorks-for-bug-bounty-find-sensitive-information-6ed3e165bc02?source=rss------bug_bounty-5 | Shardul Sawant | enumeration, hacking, google-dork, google-hacking, bug-bounty | 15-Oct-2024 |
| The 50 Ultimate Fuzzing Guide for Bug Bounty Hunters: Mastering FUZZING | https://medium.com/@pankajkryadav1/the-50-ultimate-fuzzing-guide-for-bug-bounty-hunters-mastering-fuzzing-9f70e5474dc5?source=rss------bug_bounty-5 | Pankaj kr Yadav | bug-bounty-tips, bug-bounty, fuzzing, web-security, ethical-hacking | 15-Oct-2024 |
| How I got Account Take Over in a Bug Bounty Program | https://hiroki-sawada.medium.com/how-i-got-account-take-over-in-a-bug-bounty-program-df3412c46274?source=rss------bug_bounty-5 | Hiroki Sawada | bugcrowd, xss-attack, account-takeover, bug-bounty, hackerone | 15-Oct-2024 |
| Mass Account Takeover via simple IDOR and funny OTP Bypass | https://medium.com/@manibharathi.b/mass-account-takeover-via-simple-idor-and-funny-otp-bypass-23c12979e92d?source=rss------bug_bounty-5 | Mani Bharathi B | bug-bounty, hacker, cybersecurity, ethical-hacking, bug-bounty-tips | 15-Oct-2024 |
| Insufficient Workflow Validation | https://medium.com/@rcxsecurity/insufficient-workflow-validation-795d90f881dc?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Cafe | penetration-testing, cybersecurity, hacking, information-security, bug-bounty | 15-Oct-2024 |
| How I Discovered My First Bug: Worth $150 for Information Exposure Through Debug Logs (CWE-215) | https://medium.com/@rupaitanudas/how-i-discovered-my-first-bug-worth-150-for-information-exposure-through-debug-logs-cwe-215-6a66dd10b21b?source=rss------bug_bounty-5 | Rupaitanudas | yeswehack, hacking, ethical-hacking, hackerone, bug-bounty | 15-Oct-2024 |
| How I Accessed an Admin Panel Without Touching the Keyboard | https://medium.com/@ranjanyadav2003/how-i-accessed-an-admin-panel-without-touching-the-keyboard-43ad45a06f8d?source=rss------bug_bounty-5 | Ranjan_Yadav | bug-bounty, hacking, cybersecurity, web-security, programming | 15-Oct-2024 |
| How I Accidentally Deleted My Medium Account While Hacking Medium (Oops) | https://medium.com/@vivekps143/how-i-accidentally-deleted-my-medium-account-while-hacking-medium-oops-82aa44c6bc69?source=rss------bug_bounty-5 | Vivek PS | bug-hunter, bloging, automation, developer, bug-bounty | 15-Oct-2024 |
| Peeling Back the Layers: Exploring Critical Security Flaws in Chatbot Systems | https://medium.com/@tusharpuri6/peeling-back-the-layers-exploring-critical-security-flaws-in-chatbot-systems-940e14d62ac6?source=rss------bug_bounty-5 | Tusharpuri | infosec, bug-bounty, application-security, penetration-testing, offensive-security | 15-Oct-2024 |
| Attacking organisations with big scope: Part 2 | https://medium.com/@sabirasdev/attacking-organisations-with-big-scope-part-2-6a0ee0387551?source=rss------bug_bounty-5 | S A B I R | cybersecurity, cyberattack, reconnaissance, bug-bounty, dorking | 15-Oct-2024 |
| Best AI Tool Used by Hacker 2025 | https://infosecwriteups.com/best-ai-tool-used-by-hacker-2025-715ab6ac8843?source=rss------bug_bounty-5 | Tahir Ayoub | ai, hacking, cybersecurity, ethical-hacking, bug-bounty | 15-Oct-2024 |
| How I Accessed an Admin Panel Without Touching the Keyboard | https://medium.com/@ranjanyadav2003/how-i-accessed-an-admin-panel-without-touching-the-keyboard-43ad45a06f8d?source=rss------bug_bounty-5 | Ranjan | bug-bounty, hacking, cybersecurity, web-security, programming | 15-Oct-2024 |
| OAuth: A Backdoor in Disguise — a $7500 Study Case | https://xdead4f.medium.com/oauth-a-backdoor-in-disguise-a-7500-study-case-3383a4012295?source=rss------bug_bounty-5 | 0xdead4f | cyber-sec, security-reseach, cybersecurity, bug-bounty, cyber-security-writeup | 14-Oct-2024 |
| Web3 BBP journal: | https://medium.com/@harryfyx/web3-bbp-journal-777d830f35d0?source=rss------bug_bounty-5 | hhhkb | web3, bug-bounty | 14-Oct-2024 |
| Passively Found Secrets in Javascript File on a Private Bug Bounty Program | https://medium.com/@sharp488/passively-found-secrets-in-javascript-file-on-a-private-bug-bounty-program-36eb29c2a35c?source=rss------bug_bounty-5 | Sharat Kaikolamthuruthil | bug-bounty, bug-bounty-tips, burpsuite-extension, burpsuite, bug-bounty-writeup | 14-Oct-2024 |
| Bug bounty programs pada aplikasi Laravel memungkinkan penemuan celah keamanan (vulnerabilities)… | https://medium.com/@_azwar/bug-bounty-programs-pada-aplikasi-laravel-memungkinkan-penemuan-celah-keamanan-vulnerabilities-7db40b405794?source=rss------bug_bounty-5 | azwar | bug-bounty, vulnerability, laravel | 14-Oct-2024 |
| ColdRoot Malware | https://medium.com/@reemmoslem34/coldroot-malware-de44cf04e319?source=rss------bug_bounty-5 | Rem Khalid | bug-bounty, cyberattack, cybersecurity, hacking, malware | 14-Oct-2024 |
| Zerologon Exploit | https://medium.com/@reemmoslem34/zerologon-exploit-ce83a5a8ef3b?source=rss------bug_bounty-5 | Rem Khalid | bug-bounty, hacking, malware, cybersecurity, cyberattack | 14-Oct-2024 |
| List of the Best Free Labs to Start Learning Cybersecurity on TryHackMe | https://medium.com/@malwarilia/list-of-the-best-free-labs-to-start-learning-cybersecurity-on-tryhackme-b94c1803c496?source=rss------bug_bounty-5 | Marília Rocha | bug-bounty, information-security, cybersecurity, pentest, cyberattack | 14-Oct-2024 |
| Finding XSS Vulnerabilities and earn upto $200-$10,000 easily . | https://medium.com/@anandrishav2228/finding-xss-vulnerabilities-and-earn-upto-200-10-000-easily-0aab2c725882?source=rss------bug_bounty-5 | Rishav anand | company, xss-attack, bug-bounty, cybersecurity, money | 14-Oct-2024 |
| Bug on ParrotCTF | https://infosecwriteups.com/bug-on-parrotctf-e64424b0d043?source=rss------bug_bounty-5 | SIDHARTH PANDA | parrotctf, bug-bounty, extention, hacking | 14-Oct-2024 |
| TERGET WEBSITE RECON PROCESS | https://medium.com/@MdAktarujaman.ehp/terget-website-recon-process-d8e38649782e?source=rss------bug_bounty-5 | Md Aktarujjaman | bug-bounty, hacking, penetration-testing, target, website | 14-Oct-2024 |
| GraphQL Hacking 101: Finding and Exploiting APIs for Fun and Profit | https://medium.com/@v1xtron/graphql-hacking-101-finding-and-exploiting-apis-for-fun-and-profit-af34b5ea15f3?source=rss------bug_bounty-5 | v1xtron | graphql, reconnaissance, bug-bounty-tips, bug-bounty, penetration-testing | 14-Oct-2024 |
| Attacking organisation with big scope: Part 1 | https://medium.com/@sabirasdev/attacking-organisation-with-big-scope-part-1-631fdc00e973?source=rss------bug_bounty-5 | S A B I R | cyber-security-awareness, reconnaissance, cybersecurity, bug-bounty | 14-Oct-2024 |
| 10 Habits to Become A PRO Hacker! | https://medium.com/@TahirAyoub/10-habits-to-become-a-pro-hacker-3c826b650192?source=rss------bug_bounty-5 | Tahir Ayoub | bug-bounty, habits, hacking, cybersecurity, ethical-hacking | 14-Oct-2024 |
| JWT Authentication Bypass leads to Admin Control Panel | https://infosecwriteups.com/jwt-authentication-bypass-leads-to-admin-control-panel-dfa6efcdcbf5?source=rss------bug_bounty-5 | Hohky | bug-bounty, bug-bounty-writeup, account-takeover, jwt-token, hacking | 14-Oct-2024 |
| ❤Bug Bounty tool List❤ | https://medium.com/@shardulsawant67/bug-bounty-tool-list-fee6620c0048?source=rss------bug_bounty-5 | Shardul Sawant | bug-bounty-tool, website-hosting, bug-bounty, bug-bounty-tips, web-enumeration | 14-Oct-2024 |
| Social media account hijacking — VDP | https://medium.com/@embossdotar/social-media-account-hijacking-vdp-fa674b25af44?source=rss------bug_bounty-5 | embossdotar | cybersecurity, bug-bounty, it-security, vulnerability, hacking | 14-Oct-2024 |
| Exposing 100,000 User Data : Massive API Bug Exposing | https://medium.com/@360Security/exposing-100-000-user-data-massive-api-bug-exposing-037b56cfe98d?source=rss------bug_bounty-5 | 360 Security | cybersecurity, bug-bounty, penetration-testing, information-security, api-security | 14-Oct-2024 |
| 10 Habits to Become A PRO Hacker! | https://osintteam.blog/10-habits-to-become-a-pro-hacker-3c826b650192?source=rss------bug_bounty-5 | Tahir Ayoub | bug-bounty, habits, hacking, cybersecurity, ethical-hacking | 14-Oct-2024 |
| Blind SSRF Vulnerability | https://medium.com/@guravtushar231/blind-ssrf-vulnerability-97d2f1decfe6?source=rss------bug_bounty-5 | Tushar_infosec | bug-bounty, cybersecurity, ethical-hacking, ssrf, hacking | 14-Oct-2024 |
| Pokémon Developer Game Freak Hacked: 2,600 Employees’ Data Leaked! | https://medium.com/@wiretor/pok%C3%A9mon-developer-game-freak-hacked-2-600-employees-data-leaked-9e00ad9b3b0e?source=rss------bug_bounty-5 | WIRE TOR | virus, pentest, malware, bug-bounty, hacking | 14-Oct-2024 |
| 10 Habits to Become A PRO Hacker! | https://infosecwriteups.com/10-habits-to-become-a-pro-hacker-3c826b650192?source=rss------bug_bounty-5 | Tahir Ayoub | bug-bounty, habits, hacking, cybersecurity, ethical-hacking | 14-Oct-2024 |
| 0dSSRF | Automate Finding SSRF & External Service Interactions & Open Redirects | https://kariiem.medium.com/0dssrf-automate-finding-ssrf-external-service-interactions-open-redirects-944be6770a02?source=rss------bug_bounty-5 | Kariiem Gamal | bug-bounty, bug-bounty-tips, ssrf, web-pen-testing, pentesting | 14-Oct-2024 |
| P4 bug’s and their POC steps | Part 6 | https://medium.com/@socalledhacker/p4-bugs-and-their-poc-steps-part-6-8e3aa981673a?source=rss------bug_bounty-5 | socalledhacker | bugs, infosec, web-security, bug-bounty, cybersecurity | 14-Oct-2024 |
| IDOR chained with JWT token cracking leads to edit, view and deletion of 160000 user accounts. | https://aswinthambipanik07.medium.com/idor-chained-with-jwt-token-cracking-leads-to-edit-view-and-deletion-of-160000-user-accounts-65e65e6dc1f1?source=rss------bug_bounty-5 | Aswin Thambi Panikulangara | bug-bounty, bug-bounty-tips, jwt, hacking, cybersecurity | 13-Oct-2024 |
| No Rate Limit on Forgot Password: Leading to Email Flooding or mail bombing | https://medium.com/@mrutunjayasenapati0/no-rate-limit-on-forgot-password-leading-to-email-flooding-or-mail-bombing-c68d842d6eaf?source=rss------bug_bounty-5 | Mrutunjaya Senapati | cybersecurity, linux, hunting, bug-bounty, hacking | 13-Oct-2024 |
| How I got Time Based SQL Injection in an Old Public Bug Bounty Program | https://medium.com/@kshunya/how-i-got-time-based-sql-injection-in-an-old-public-bug-bounty-program-f6260cd4e75e?source=rss------bug_bounty-5 | Vishal Barot | ethical-hacking, bug-bounty, vapt, cybersecurity, penetration-testing | 13-Oct-2024 |
| IDOR : Step by Step guide to Account Takeover of Any User | https://medium.com/@360Security/idor-step-by-step-guide-to-account-takeover-of-any-user-cb90bbcfd0fc?source=rss------bug_bounty-5 | 360 Security | information-security, cybersecurity, bug-bounty, penetration-testing, vulnerability | 13-Oct-2024 |
| Recon Nədir və Niyə Əhəmiyyətlidir? : Zəifliklərin Aşkar Edilməsi və Etik Hakerlik (Bölüm 2) | https://zeynalxan.medium.com/recon-n%C9%99dir-v%C9%99-niy%C9%99-%C9%99h%C9%99miyy%C9%99tlidir-z%C9%99iflikl%C9%99rin-a%C5%9Fkar-edilm%C9%99si-v%C9%99-etik-hakerlik-b%C3%B6l%C3%BCm-2-c4b554db0c8e?source=rss------bug_bounty-5 | Zeynalxan Quliyev | recon, recon-nece-edilir, bug-bounty-tips, recon-nədir, bug-bounty | 13-Oct-2024 |
| ⚠️ How to crash a PC Forever ⚠️ | https://medium.com/@emailrajdeepmishra/%EF%B8%8F-how-to-crash-a-pc-forever-%EF%B8%8F-09aa122c1844?source=rss------bug_bounty-5 | RAJDEEP MISHRA | bug-bounty, cybersecurity, ethical-hacking, crash, bugs | 13-Oct-2024 |
| Breaking the Game: Score Manipulation and Leaderboard Takeover | https://aminudin.medium.com/breaking-the-game-score-manipulation-and-leaderboard-takeover-b3ab16d02060?source=rss------bug_bounty-5 | Aminudin | bug-bounty-tips, bug-bounty-writeup, bugs, bug-bounty | 13-Oct-2024 |
| A Deep Dive into Subdomain Management Using SubScope | https://medium.com/@hunthubspace/a-deep-dive-into-subdomain-management-using-subscope-43f8653b4593?source=rss------bug_bounty-5 | hunThub | penetration-testing, bug-bounty, bug-bounty-tips, cybersecurity, automation | 13-Oct-2024 |
| Bypassing Location Restrictions on a Android App Using Frida | https://medium.com/@omdubey170/hello-pentester-07209d5d8d42?source=rss------bug_bounty-5 | Omdubey | android, bug-bounty, android-pentesting, hacking, cybersecurity | 13-Oct-2024 |
| The Great Photo Heist: IDOR Vulnerability Strikes Again | https://rofes1337.medium.com/the-great-photo-heist-idor-vulnerability-strikes-again-6ed9a47c8c74?source=rss------bug_bounty-5 | Yousef Muhammedelkhir | hackerone, bug-bounty, poc, idor-vulnerability, idor-poc | 13-Oct-2024 |
| Creating a Honeypot: A Practical Guide to Understanding Cybersecurity Threats | https://medium.com/@paritoshblogs/creating-a-honeypot-a-practical-guide-to-understanding-cybersecurity-threats-9d2e63e90892?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-technology, cybersecurity, hacking, honeypot | 13-Oct-2024 |
| “The Biggest Mistake Holding You Back in Bug Bounty Hunting: Why You’re Not Making Progress” | https://medium.com/@mahdisalhi0500/the-biggest-mistake-holding-you-back-in-bug-bounty-hunting-why-youre-not-making-progress-1475eef8f04b?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, hacking, ethical-hacking, cybersecurity, bug-bounty | 13-Oct-2024 |
| Cracking WordPress Security with WPScan: A Bug Bounty Hunter’s Journey ️️♂️ | https://medium.com/@gouravrathod8788/cracking-wordpress-security-with-wpscan-a-bug-bounty-hunters-journey-%EF%B8%8F-%EF%B8%8F-%EF%B8%8F-c9389c94cc6b?source=rss------bug_bounty-5 | Gourav Singh Rajput | cybersecurity, bug-bounty, bug-bounty-tips, wordpress | 13-Oct-2024 |
| From simple recon to PWN wordpress admin panel writeup | https://ro0od.medium.com/from-simple-recon-to-pwn-wordpress-admin-panel-writeup-622156a1c9b2?source=rss------bug_bounty-5 | rood | bug-bounty, writeup, infosec-write-ups, infosec | 13-Oct-2024 |
| How to create a custom daemon using shell scripts | https://medium.com/@mysticraganork66/how-to-create-a-custom-daemon-using-shell-scripts-ce27c13657d1?source=rss------bug_bounty-5 | 0verlo0ked | hacking, cybersecurity, writeup, daemon, bug-bounty | 13-Oct-2024 |
| Unleashing the Power of Kali Linux Daemons | https://systemweakness.com/unleashing-the-power-of-kali-linux-daemons-c19133db43ec?source=rss------bug_bounty-5 | 0verlo0ked | bug-bounty, penetration-testing, docker, hacking, cybersecurity | 13-Oct-2024 |
| Cache Deception | 450$ | https://medium.com/@0x_karim/cache-deception-450-a02cd655b33f?source=rss------bug_bounty-5 | 0xkarim | bug-bounty, bug-bounty-tips, hacking, web-security, bugs | 13-Oct-2024 |
| OAuth Misconfiguration: How I Hijacked Accounts with 0 Clicks and Got Paid! | https://osintteam.blog/oauth-misconfiguration-how-i-hijacked-accounts-with-0-clicks-and-got-paid-df8f7a20b438?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | technology, programming, cybersecurity, bug-bounty, javascript | 13-Oct-2024 |
| Open Redirect to XSS to Account Takeover to $$$$ | https://osintteam.blog/open-redirect-to-xss-to-account-takeover-to-de8739f9a4f0?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | javascript, technology, programming, cybersecurity, bug-bounty | 13-Oct-2024 |
| UNION Tabanlı SQL Injection | https://medium.com/@kenes7667/union-tabanl%C4%B1-sql-injection-bcc023156b64?source=rss------bug_bounty-5 | EnessKoç | bug-bounty, sql-injection | 12-Oct-2024 |
| Automation in Cyber Defence: The Future of Securing Digital Frontiers | https://medium.com/@paritoshblogs/automation-in-cyber-defence-the-future-of-securing-digital-frontiers-992fa1ceb552?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-technology, coding, cybersecurity, automation | 12-Oct-2024 |
| Clickjacking Is Worth Reporting Nowadays? | Removing all confusion on Clickjacking bugs. | https://medium.com/@the.air.cyborg/clickjacking-is-worth-reporting-nowadays-removing-all-confusion-on-clickjacking-bugs-a1c77fc4e5b8?source=rss------bug_bounty-5 | the_air_cyborg | clickjacking, bug-bounty-tips, bugbounty-writeup, bug-bounty, vulnerability | 12-Oct-2024 |
| Port Scanning Essentials for Bug Bounty Researchers | https://bevijaygupta.medium.com/port-scanning-essentials-for-bug-bounty-researchers-de52c6aa7b8a?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, port-scanning, bounty-program, bugs, bug-bounty-tips | 12-Oct-2024 |
| Cracking ATO via Email HTML Injection | https://medium.com/@dsmodi484/cracking-ato-via-email-html-injection-edd19c8e1b8f?source=rss------bug_bounty-5 | Dishant Modi | email, injection, vulnerability, html, bug-bounty | 12-Oct-2024 |
| How I Discovered Account Takeover (ATO) via Cross-Site Scripting (XSS) | https://osintteam.blog/how-i-discovered-account-takeover-ato-via-cross-site-scripting-xss-34698ee54009?source=rss------bug_bounty-5 | JEETPAL | ato, bug-bounty-tips, xss-attack, bug-bounty, bug-bounty-writeup | 12-Oct-2024 |
| Understanding Server-Side Request Forgery (SSRF): A Critical Web Vulnerability | https://medium.com/@mrutunjayasenapati0/understanding-server-side-request-forgery-ssrf-a-critical-web-vulnerability-11a7ee2d87f7?source=rss------bug_bounty-5 | Mrutunjaya Senapati | owasp, vulnerability, hacking, ssrf, bug-bounty | 12-Oct-2024 |
| Cybersecurity Breach Forces Calgary Public Library to Shut Down All Locations ️ | https://medium.com/@wiretor/cybersecurity-breach-forces-calgary-public-library-to-shut-down-all-locations-%EF%B8%8F-f1c0921f40e8?source=rss------bug_bounty-5 | WIRE TOR | hacked, bug-bounty, hacker, data, breach | 12-Oct-2024 |
| Unlocking Some Effective Information Gathering Methodologies | https://medium.com/@prasanna.acharya/unlocking-some-effective-information-gathering-methodologies-1f67787019d1?source=rss------bug_bounty-5 | Prasanna Acharya | bug-bounty, web-security, bug-bounty-tips, information-gathering, web-penetration-testing | 12-Oct-2024 |
| From NA to P1, How i was able to get access to a Bank Admin Panel | https://medium.com/@yousefmoh15/from-na-to-p1-how-i-was-able-to-get-access-to-a-bank-admin-panel-52e5f9ef7ef5?source=rss------bug_bounty-5 | Yousef Mohamed | hacking, bug-bounty, wordpress, bugcrowd | 12-Oct-2024 |
| Uncovering Path Traversal Vulnerabilities Through Host Monitoring | https://mchklt.medium.com/uncovering-path-traversal-vulnerabilities-through-host-monitoring-c8abb65f48f5?source=rss------bug_bounty-5 | ABDELKARIM MOUCHQUELITA | automation, ethical-hacking, penetration-testing, bug-bounty-hunter, bug-bounty | 12-Oct-2024 |
| Uncovering Path Traversal Through Host Monitoring | https://mchklt.medium.com/uncovering-path-traversal-vulnerabilities-through-host-monitoring-c8abb65f48f5?source=rss------bug_bounty-5 | ABDELKARIM MOUCHQUELITA | automation, ethical-hacking, penetration-testing, bug-bounty-hunter, bug-bounty | 12-Oct-2024 |
| Effective Port Scanning for Finding Vulnerabilities in Bug Bounties | https://bevijaygupta.medium.com/effective-port-scanning-for-finding-vulnerabilities-in-bug-bounties-0c16871a7e0b?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, bugs, bug-bounty-tips, vulnerability, port-scanning | 11-Oct-2024 |
| Bug Hunting Recon Methodology | Part2 | LegionHunter | https://osintteam.blog/bug-hunting-recon-methodology-part2-legionhunter-4bb925e3e1bf?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, pentesting, infosec, cybersecurity, bug-bounty-tips | 11-Oct-2024 |
| How to Find SQL Vulnerabilities in Web Applications and Websites and Earn up to $500—$10,000 | https://medium.com/@anandrishav2228/how-to-find-sql-vulnerabilities-in-web-applications-and-websites-and-earn-up-to-500-10-000-f0935e9d4892?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, money, ai, cybersecurity, india | 11-Oct-2024 |
| How I Made $6,200 in a Single Bug Bounty Using SubdomainRadar.io | https://medium.com/@alexandrevandammepro/how-i-made-6-200-in-a-single-bug-bounty-using-subdomainradar-io-a557f2baae0b?source=rss------bug_bounty-5 | Alexandre Vandamme | pentesting, cybersecurity, osint, bug-bounty, bug-bounty-tips | 11-Oct-2024 |
| How I Got $250 with a Weak Signup Flow | https://infosecwriteups.com/how-i-got-250-with-a-weak-signup-flow-3d87d34059fa?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty, technology, programming, cybersecurity | 11-Oct-2024 |
| Hacking Documentaries and Movies for Bug Bounty Hunters | https://medium.com/cyberscribers-exploring-cybersecurity/hacking-documentaries-and-movies-for-bug-bounty-hunters-92e02b6ab264?source=rss------bug_bounty-5 | Tahir Ayoub | cybersecurity, documentary, hacking, security, bug-bounty | 11-Oct-2024 |
| CVE-2024–0195 Improper Control of Generation of Code (‘Code Injection’) | https://infosecwriteups.com/cve-2024-0195-improper-control-of-generation-of-code-code-injection-c292836e03ec?source=rss------bug_bounty-5 | Ajay Naik | vulnerability, bugs, bug-bounty, cyber-security-awareness, cybersecurity | 11-Oct-2024 |
| Introduction to Netcat | https://medium.com/@Code_With_Ssn/introduction-to-netcat-af57e11ee756?source=rss------bug_bounty-5 | N4!TR0 07 | bug-bounty-writeup, bug-bounty-tips, netcat, bug-bounty, cybersecurity | 11-Oct-2024 |
| One Cookie Paid Me $500 in under a minute | https://medium.com/@nireshpandian19/one-cookie-paid-me-500-in-under-a-minute-8a9fb1a034ae?source=rss------bug_bounty-5 | JAI NIRESH J | bug-bounty-tips, cybersecurity, programming, technology, bug-bounty | 11-Oct-2024 |
| Lenfi Successfully Concludes Its Bug Bounty Program | https://medium.com/@lenfi/lenfi-successfully-concludes-its-bug-bounty-program-e317df3967b2?source=rss------bug_bounty-5 | Lenfi | defi, bug-bounty, cardano, project-catalyst, lenfi | 11-Oct-2024 |
| File Path Traversal Sequences Stripped Non-Recursively | https://medium.com/@rcxsecurity/file-path-traversal-sequences-stripped-non-recursively-6d8a6a2d92d4?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Cafe | information-security, cybersecurity, red-team, penetration-testing, bug-bounty | 11-Oct-2024 |
| Understanding Security Logging and Monitoring Failures: A Crucial Vulnerability in Web Security | https://medium.com/@mrutunjayasenapati0/understanding-security-logging-and-monitoring-failures-a-crucial-vulnerability-in-web-security-d63a7b42062e?source=rss------bug_bounty-5 | Mrutunjaya Senapati | hacking, vulnerability, bugs, bug-bounty, owasp | 11-Oct-2024 |
| How I discovered 2FA bypass leading to potential ATO lead funds loss in a web3 | https://medium.com/@jeetpal2007/how-i-discovered-2fa-bypass-leading-to-potential-ato-lead-funds-loss-in-a-web3-dc19f5588fbd?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, bug-bounty, bugbounty-writeup, ato, web3 | 11-Oct-2024 |
| How I discovered 2FA bypass leading to potential ATO lead funds loss in a web3 | https://medium.com/h7w/how-i-discovered-2fa-bypass-leading-to-potential-ato-lead-funds-loss-in-a-web3-e498ce26b29e?source=rss------bug_bounty-5 | JEETPAL | bug-bounty, bugbounty-writeup, ato, web3, cybersecurity | 11-Oct-2024 |
| Broken Access Control Vulnerability in an Order Management System | https://medium.com/@omdubey170/broken-access-control-vulnerability-in-an-order-management-system-8a1097b03926?source=rss------bug_bounty-5 | Omdubey | bug-bounty, infosec, hacking, cybersecurity, vulnerability | 11-Oct-2024 |
| Effective Domain Management for Bug Bounty Programs Using SubScope | https://medium.com/@hunthubspace/effective-domain-management-for-bug-bounty-programs-using-subscope-f74b7a0db428?source=rss------bug_bounty-5 | hunThub | programming, penetration-testing, automation, bug-bounty, bug-bounty-tips | 11-Oct-2024 |
| Endpoint confusion lead to 2FA bypass | https://medium.com/@mohamed0xmuslim/endpoint-confusion-lead-to-2fa-bypass-67015dbb4c70?source=rss------bug_bounty-5 | Muhammad_Mostafa | bug-bounty-hunter, bug-bounty, bug-bounty-writeup, penetration-testing, bug-bounty-tips | 11-Oct-2024 |
| CVE-2024-44000 - WordPress Debug Log Exposure Leading to Session Cookie Hijacking | https://infosecwriteups.com/cve-2024-44000-wordpress-debug-log-exposure-leading-to-session-cookie-hijacking-afcfada02c44?source=rss------bug_bounty-5 | Ajay Naik | vulnerability, vulnerability-management, penetration-testing, cybersecurity, bug-bounty | 11-Oct-2024 |
| Bypass WAF & Grab a $200 Bug Bounty! | https://osintteam.blog/bypass-waf-grab-a-200-bug-bounty-4442621cd90a?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | technology, bug-bounty, cybersecurity, javascript, programming | 11-Oct-2024 |
| Firefox&Chrome extensions for bugbounty hunters. | https://osintteam.blog/firefox-chrome-extensions-for-bugbounty-hunters-4006707ee87b?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, hacking, penetration-testing, bug-bounty, tips | 11-Oct-2024 |
| Bypass WAF & Grab a $300 Bug Bounty! | https://osintteam.blog/bypass-waf-grab-a-200-bug-bounty-4442621cd90a?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | technology, bug-bounty, cybersecurity, javascript, programming | 11-Oct-2024 |
| Unlocking the Potential of OSINT: Shaping the Future of Intelligence in Our Data-Driven World | https://medium.com/@narayanadasbalaji2004/unlocking-the-potential-of-osint-shaping-the-future-of-intelligence-in-our-data-driven-world-b0cda62d6bb5?source=rss------bug_bounty-5 | Narayanadas Balaji | hacking, osint, cybersecurity, bugbounty-tips, bug-bounty | 10-Oct-2024 |
| Streamlining Your Bug Bounty Projects: Adding and Managing Programs via SubScope | https://medium.com/@hunthubspace/streamlining-your-bug-bounty-projects-adding-and-managing-programs-via-subscope-e394acfdf711?source=rss------bug_bounty-5 | hunThub | automation, bug-bounty-tips, bug-bounty, penetration-testing, cybersecurity | 10-Oct-2024 |
| How I Earned $250 for Reporting a simple Bug To CodaPayments | https://medium.com/@aligoodluck427/how-i-earned-250-for-reporting-a-simple-bug-to-codapayments-b8f1be275138?source=rss------bug_bounty-5 | Aligoodluck | bugbounty-tips, bug-bounty, bugbounty-automation, bugbounty-writeup, bugbounty-poc | 10-Oct-2024 |
| First Bug, Big Win: How a $100 IDOR Bug Kicked-off My Bug Bounty Journey | https://dukrov.medium.com/first-bug-big-win-how-a-100-idor-bug-kicked-off-my-bug-bounty-journey-69e2e7179477?source=rss------bug_bounty-5 | ͏ ͏Dukrov | hackerone, bugbounty-tips, hacking, cybersecurity, bug-bounty | 10-Oct-2024 |
| How i got my first Letter of Appreciation + Hall of Fame | https://rivudon.medium.com/how-i-got-my-first-letter-of-appreciation-hall-of-fame-a3c0079e60ef?source=rss------bug_bounty-5 | Rivek Raj Tamang ( RivuDon ) | bug-bounty-tips, bug-bounty, infosec, information-security, cybersecurity | 10-Oct-2024 |
| Critical IDOR Vulnerability leads to PII leakage | https://snc0pe.medium.com/critical-idor-vulnerability-leads-to-pii-leakage-684795ede850?source=rss------bug_bounty-5 | Snc0pe | bug-bounty, web-app-security, idor | 10-Oct-2024 |
| How to Use ChatGPT Effectively for Bug Bounty Hunting | https://medium.com/@anandrishav2228/how-to-use-chatgpt-effectively-for-bug-bounty-hunting-47ff0762139e?source=rss------bug_bounty-5 | Rishav anand | chatgpt, money, ai, bug-bounty, cybersecurity | 10-Oct-2024 |
| The Truth About Bug Bounty Hunting. | https://medium.com/@thebughunttribe/the-truth-about-bug-bounty-hunting-597e54acd2a0?source=rss------bug_bounty-5 | The Hunt Tribe | bug-bounty-hunter, bug-bounty, bugs, bugbounty-tips, bugbounty-writeup | 10-Oct-2024 |
| Forced OAuth Profile Linking Lead to Account Takeover | https://medium.com/@0xtal3at/forced-oauth-profile-linking-lead-to-account-takeover-954114158818?source=rss------bug_bounty-5 | 0Xtal3at | bug-bounty, bugbounty-writeup, cybersecurity | 10-Oct-2024 |
| Understanding Software and Data Integrity Failures: A Critical Vulnerability in Web Security | https://medium.com/@mrutunjayasenapati0/understanding-software-and-data-integrity-failures-a-critical-vulnerability-in-web-security-9d3f96f20bb9?source=rss------bug_bounty-5 | Mrutunjaya Senapati | hacking, bugs, bug-bounty, vulnerability, owasp | 10-Oct-2024 |
| Bypassing Multiple Checks on Android Applications: A Security Researcher’s Experience | https://medium.com/@sc128496/bypassing-multiple-checks-on-android-applications-a-security-researchers-experience-2ec1a3005b60?source=rss------bug_bounty-5 | Sahil Choudhary | android, pentesting, bug-bounty, cybersecurity, reverse-engineering | 10-Oct-2024 |
| How i found my first open redirect | https://medium.com/@yagomartins30/how-i-found-my-first-open-redirect-cd9ca60d307d?source=rss------bug_bounty-5 | Yago Martins | hacking, bug-bounty, programming, writeup, pentesting | 10-Oct-2024 |
| Top 10 Cybersecurity Tools Every Business Should Use in 2024 | https://cyberconsultingcompany.medium.com/top-10-cybersecurity-tools-every-business-should-use-in-2024-f7b93c208722?source=rss------bug_bounty-5 | Cyber Consulting Company | cyber, cyber-security-awareness, cyber-security-solutions, bug-bounty, cyber-security-services | 09-Oct-2024 |
| Unlock Unlimited Access to ChatGPT-4: A Step-by-Step Guide to Using Images and Files Without Limits | https://medium.com/@shaikhminhaz1975/unlock-unlimited-access-to-chatgpt-4-a-step-by-step-guide-to-using-images-and-files-without-limits-0f1db3ca57d8?source=rss------bug_bounty-5 | Shaikh Minhaz | bug-bounty, gpt-4, cybersecurity, free, chatgpt | 09-Oct-2024 |
| Bug Hunting Recon Methodology | Part1 | LegionHunter | https://systemweakness.com/bug-hunting-recon-methodology-part1-legionhunter-975b7bbe3231?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, pentesting, bug-hunting, legionhunter, bug-bounty-tips | 09-Oct-2024 |
| Port Scanning Demystified for Bug Bounty Success | https://bevijaygupta.medium.com/port-scanning-demystified-for-bug-bounty-success-a820c2c632cd?source=rss------bug_bounty-5 | Vijay Gupta | port-scanning, bug-bounty-tips, bugs, bug-zero, bug-bounty | 09-Oct-2024 |
| E-commerce website vulnerability bounty practice sharing: Pre-Authentication takeover, API security… | https://medium.com/@security.tecno/e-commerce-website-vulnerability-bounty-practice-sharing-pre-authentication-takeover-api-security-b27b51edfaff?source=rss------bug_bounty-5 | TECNO Security | hacking, web, security, bug-bounty | 09-Oct-2024 |
| How I Found SSRF in 5 minutes | https://medium.com/@gguzelkokar.mdbf15/how-i-found-ssrf-in-5-minutes-a3a58e3d53e1?source=rss------bug_bounty-5 | Gökhan Güzelkokar | bug-bounty, web-security, application-security, hacking, ssrf | 09-Oct-2024 |
| Curated List of Awesome Hacker Search Engines for Penetration Testing and Cybersecurity… | https://osintteam.blog/curated-list-of-awesome-hacker-search-engines-for-penetration-testing-and-cybersecurity-9f0b9cb63a1d?source=rss------bug_bounty-5 | Ajay Naik | vulnerability, information-security, cybersecurity, bug-bounty, bug-bounty-tips | 09-Oct-2024 |
| How to Start Your Hacking Journey and Choose the Right Role in Cybersecurity | https://medium.com/@harshkatiyar5556/how-to-start-your-hacking-journey-and-choose-the-right-role-in-cybersecurity-9eff1ec5e7f2?source=rss------bug_bounty-5 | Harsh Katiyar | ethical-hacking, bug-bounty, careers, penetration-testing, cybersecurity | 09-Oct-2024 |
| My Active Subdomain Enumeration Technique | https://mr-abdullah.medium.com/my-active-subdomain-enumeration-technique-57a508343fc4?source=rss------bug_bounty-5 | Mr Abdullah | bug-bounty, web-hacking, enumeration, hacking, information | 09-Oct-2024 |
| SSRF via Flawed Request Parsing | https://medium.com/@rcxsecurity/ssrf-via-flawed-request-parsing-7b32a119f047?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Cafe | penetration-testing, information-security, hacking, cybersecurity, bug-bounty | 09-Oct-2024 |
| Understanding Identification and Authentication Failures: A Critical Vulnerability in Web Security | https://medium.com/@mrutunjayasenapati0/understanding-identification-and-authentication-failures-a-critical-vulnerability-in-web-security-88a4bcbcc783?source=rss------bug_bounty-5 | Mrutunjaya Senapati | bug-bounty, bugs, vulnerability, hacking, owasp | 09-Oct-2024 |
| Understanding Vulnerable and Outdated Components: A Critical Vulnerability in Web Security | https://medium.com/@mrutunjayasenapati0/understanding-vulnerable-and-outdated-components-a-critical-vulnerability-in-web-security-f8a9a9ae0b10?source=rss------bug_bounty-5 | Mrutunjaya Senapati | owasp, hacking, bug-bounty, vulnerability, bugs | 09-Oct-2024 |
| No Easy P1s on the fly if your site runs WP or Drupal | https://medium.com/@nireshpandian19/no-easy-p1s-on-the-fly-if-your-site-runs-wp-or-drupal-a7700650f86b?source=rss------bug_bounty-5 | JAI NIRESH J | bug-bounty, wordpress, bug-bounty-writeup, ethical-hacking, idor | 09-Oct-2024 |
| Finding a no ratelimit bug on invite teammate page. | https://osintteam.blog/finding-a-no-ratelimit-bug-on-invite-teammate-page-02c97e845b00?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, cybersecurity, bug-bounty, tips, hacking | 09-Oct-2024 |
| Easy P1s on the fly if your site runs WP or Drupal | https://medium.com/@nireshpandian19/no-easy-p1s-on-the-fly-if-your-site-runs-wp-or-drupal-a7700650f86b?source=rss------bug_bounty-5 | JAI NIRESH J | bug-bounty, wordpress, bug-bounty-writeup, ethical-hacking, idor | 09-Oct-2024 |
| Race Condition leads to Cache Poisoning ?! | https://ltidi.medium.com/race-condition-leads-to-cache-poisoning-77bdfb9483fd?source=rss------bug_bounty-5 | LTiDi | web-cache-poisoning, bug-bounty | 08-Oct-2024 |
| Unlocking Hidden Vulnerabilities: How to Automate Your Bug Bounty Game with GitHub Actions | https://theshaco.com/unlocking-hidden-vulnerabilities-how-to-automate-your-bug-bounty-game-with-github-actions-3f6c9501fe64?source=rss------bug_bounty-5 | Khaleel Khan | hacking, bug-bounty, bug-bounty-tips, cybersecurity, infosec | 08-Oct-2024 |
| From Ports to Payouts: Scanning Strategies for Bug Bounties | https://bevijaygupta.medium.com/from-ports-to-payouts-scanning-strategies-for-bug-bounties-a2861077a0d8?source=rss------bug_bounty-5 | Vijay Gupta | scanning, bug-bounty-tips, bug-bounty, payouts, ports | 08-Oct-2024 |
| How I Discovered an Email Verification Bypass | https://mo9khu93r.medium.com/how-i-discovered-an-email-verification-bypass-e487270a61d3?source=rss------bug_bounty-5 | mo9khu93r | vulnerability, hacking, bug-bounty, cybersecurity, pentesting | 08-Oct-2024 |
| Understanding and Detecting XSS Vulnerabilities: A Complete Guide | https://medium.com/@anandrishav2228/understanding-and-detecting-xss-vulnerabilities-a-complete-guide-4d3a85e4bed0?source=rss------bug_bounty-5 | Rishav anand | ai, bug-bounty, testing, cybersecurity, money | 08-Oct-2024 |
| A quick P2 vulnerability, just like that ! | https://medium.com/@nireshpandian19/a-quick-p2-vulnerability-just-like-that-5fc4f25f3b09?source=rss------bug_bounty-5 | JAI NIRESH J | bug-bounty, hackerone, bug-bounty-writeup, idor, ethical-hacking | 08-Oct-2024 |
| Methods to Bypass Captchas: A Deep Dive into Common Techniques | https://medium.com/@dasmanish6176/methods-to-bypass-captchas-a-deep-dive-into-common-techniques-309006f28923?source=rss------bug_bounty-5 | Dasmanish | bug-bounty, ethical-hacking, vapt, captcha | 08-Oct-2024 |
| How i found endpoints from reading hacker-one reports | https://medium.com/@anonymousshetty2003/how-i-found-endpoints-from-reading-hacker-one-reports-20cfd6f0f62c?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, hacking, dorking, bug-bounty | 08-Oct-2024 |
| Blind XSS Practical Guide — Bug Bounty Tuesday | https://medium.com/@kerstan/blind-xss-practical-guide-bug-bounty-tuesday-3126bd52fae6?source=rss------bug_bounty-5 | kerstan | hacking, cybersecurity, bug-bounty | 08-Oct-2024 |
| ironCTF 2024 Writeup | https://medium.com/@pphreak313/ironctf-2024-writeup-782f41854341?source=rss------bug_bounty-5 | Shlok K | ctf-writeup, cybersecurity, bug-bounty, ctf | 08-Oct-2024 |
| From 401 — Unauthorized Access to 3000 $ Bounty from Microsoft. | https://medium.com/@bashir69emceeaka5/from-401-unauthorized-access-to-3000-bounty-from-microsoft-53b086379a08?source=rss------bug_bounty-5 | Bashir Mohammed | red-team, microsoft, bug-bounty, bugbounty-writeup, security | 08-Oct-2024 |
| How I Hacked an Admin Panel in Just 2 Minutes | https://medium.com/@ranjanyadav2003/how-i-hacked-an-admin-panel-in-just-2-minutes-19d145820ee7?source=rss------bug_bounty-5 | Ranjan_Yadav | bug-bounty, cybersecurity | 08-Oct-2024 |
| CVE-2024–25600: WordPress Bricks Builder Remote Code Execution Vulnerability -$$$$ BOUNTY | https://infosecwriteups.com/cve-2024-25600-wordpress-bricks-builder-remote-code-execution-vulnerability-bounty-997d488fd54e?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, cyberattack, rewards, cybersecurity, information-technology | 08-Oct-2024 |
| Exploiting NoSQL operator injection to extract unknown fields | https://medium.com/@codingbolt.in/exploiting-nosql-operator-injection-to-extract-unknown-fields-b0d58bea9bbe?source=rss------bug_bounty-5 | codingbolt | cybersecurity, bug-bounty, nosql-injection, nosql, ethical-hacking | 08-Oct-2024 |
| Exploiting NoSQL injection to extract data | https://medium.com/@codingbolt.in/exploiting-nosql-injection-to-extract-data-70fea37ed111?source=rss------bug_bounty-5 | codingbolt | ethical-hacking, nosql-injection, cybersecurity, nosql, bug-bounty | 08-Oct-2024 |
| Exploiting NoSQL operator injection to bypass authentication | https://medium.com/@codingbolt.in/exploiting-nosql-operator-injection-to-bypass-authentication-9239353b9424?source=rss------bug_bounty-5 | codingbolt | ethical-hacking, nosql-injection, bug-bounty, cybersecurity, nosql | 08-Oct-2024 |
| How Disabling 2FA Could End with a Bug? | https://7odamoo.medium.com/hacking-hackerone-how-disabling-2fa-could-end-with-a-bug-b637c154ce06?source=rss------bug_bounty-5 | Mahmoud Hamed | bug-bounty, pentesting | 08-Oct-2024 |
| Breaking into the Shoutcast Server of a Multimedia Company | https://medium.com/@anonymousshetty2003/breaking-into-the-shoutcast-server-of-a-multimedia-company-e13dae3b17a3?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, hacking, bug-bounty, vapt, wapt | 08-Oct-2024 |
| Understanding Security Misconfiguration: A Critical Vulnerability in Web Security | https://medium.com/@mrutunjayasenapati0/understanding-security-misconfiguration-a-critical-vulnerability-in-web-security-4c87a5de4937?source=rss------bug_bounty-5 | Mrutunjaya Senapati | hacking, owasp, bug-bounty, server-misconfiguration, vulnerability | 08-Oct-2024 |
| Account Takeover via Hidden Parameters in BBP | https://cyb3rc4t.medium.com/account-takeover-via-hidden-parameters-in-bbp-f65ce42ca96f?source=rss------bug_bounty-5 | CYB3RC4T | bounty-program, bug-bounty, infosec, account-takeover, hackerone | 8-Oct-2024 |
| Using ‘Waymore’ to Uncover Archived Treasures and Customer Data | https://sl4x0.medium.com/using-waymore-to-uncover-archived-treasures-and-customer-data-a969474447a7?source=rss------bug_bounty-5 | Abdelrhman Allam (sl4x0) | bugcrowd, hackerone, web-security, pentesting, bug-bounty | 8-Oct-2024 |
| How I got a 5000 $ Bounty from Microsoft | https://medium.com/@bashir69emceeaka5/how-i-got-a-5000-bounty-from-microsoft-fb2e27fd40f7?source=rss------bug_bounty-5 | Bashir Mohammed | red-team, bug-bounty-tips, security, bug-bounty-writeup, bug-bounty | 8-Oct-2024 |
| How I got a 5000 $ Bounty from Microsoft | https://medium.com/@bashir69emceeaka5/how-i-got-a-5000-bounty-from-microsoft-fb2e27fd40f7?source=rss------bug_bounty-5 | Bashir Mohamed | red-team, bug-bounty-tips, security, bug-bounty-writeup, bug-bounty | 08-Oct-2024 |
| From 401 — Unauthorized Access to 3000 $ Bounty from Microsoft. | https://medium.com/@bashir69emceeaka5/from-401-unauthorized-access-to-3000-bounty-from-microsoft-53b086379a08?source=rss------bug_bounty-5 | Bashir Mohamed | red-team, microsoft, bug-bounty, bugbounty-writeup, security | 08-Oct-2024 |
| HOW TO INSTALL GO IN KALILINUX. | https://osintteam.blog/how-to-install-go-in-kalilinux-95924b5e9cde?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, hacking, go, tips | 08-Oct-2024 |
| Top 10 BurpSuite Extensions Every Bug Bounty Hunter Needs | https://osintteam.blog/top-10-burpsuite-extensions-every-bug-bounty-hunter-needs-67b6fddf612b?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | programming, ethical-hacking, hacking, burpsuite, bug-bounty | 08-Oct-2024 |
| Asset discovery with favicon hash. | https://osintteam.blog/asset-discovery-with-favicon-hash-515d1c8a85cd?source=rss------bug_bounty-5 | loyalonlytoday | hacking, tips, bug-bounty-tips, cybersecurity, bug-bounty | 07-Oct-2024 |
| Finding a easy p4 as per bugcrowd vrt | https://osintteam.blog/finding-a-easy-p4-as-per-bugcrowd-vrt-3e5c132f28d0?source=rss------bug_bounty-5 | loyalonlytoday | bugs, tips, bug-bounty, cybersecurity, hacking | 07-Oct-2024 |
| Bug Bounty VS Motivation | https://osintteam.blog/bug-bounty-vs-motivation-27c3c37f2c28?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | programming, motivation, hacking, cybersecurity, bug-bounty | 07-Oct-2024 |
| Subdomain Enumeration | BBOT ✅>= Subfinder + Sublist3r + Assetfinder + Amass ❌ | https://medium.com/@kumawatabhijeet2002/subdomain-enumeration-bbot-subfinder-sublist3r-assetfinder-amass-e4880cf4ab5b?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-tips, subdomain-takeover, subdomain-enumeration, bug-bounty, bug-bounty-writeup | 07-Oct-2024 |
| Scanning Kerentanan Website zero.webappsecurity.com | https://medium.com/@bimosp56/scanning-kerentanan-website-zero-webappsecurity-com-ce1d10f730b7?source=rss------bug_bounty-5 | Bimo Salasa Putra | cybersecurity, scanning, bug-bounty, vulnerabili, pentesting | 07-Oct-2024 |
| Chinese Hackers Breach US Court Wiretap System | https://medium.com/@wiretor/chinese-hackers-breach-us-court-wiretap-system-b7181fbe93b2?source=rss------bug_bounty-5 | WIRE TOR | cybersecurity, bug-bounty, hacking, pentesting, xss-attack | 07-Oct-2024 |
| How a Simple Bug Could Have Taken Down Your Instagram Tags | https://medium.com/@kiril.krivogyz/how-a-simple-bug-could-have-taken-down-your-instagram-tags-d3247e931c9d?source=rss------bug_bounty-5 | Kiril Krivogyz | bug-bounty, bug-bounty-tips, bug-bounty-writeup, hacking, instagram | 07-Oct-2024 |
| Accidental Exposure of Private GraphQL Fields | https://medium.com/@codingbolt.in/accidental-exposure-of-private-graphql-fields-729b3fb99471?source=rss------bug_bounty-5 | codingbolt | api, bug-bounty, graphql, cybersecurity, api-penetration-testing | 07-Oct-2024 |
| Exploiting server-side parameter pollution in a REST URL | https://medium.com/@codingbolt.in/exploiting-server-side-parameter-pollution-in-a-rest-url-2ed599aafdbc?source=rss------bug_bounty-5 | codingbolt | cybersecurity, bugs, api-penetration-testing, api-testing, bug-bounty | 07-Oct-2024 |
| Exploiting a mass assignment vulnerability | https://medium.com/@codingbolt.in/exploiting-a-mass-assignment-vulnerability-07dd9e598302?source=rss------bug_bounty-5 | codingbolt | api-testing, api-penetration-testing, bug-bounty, apihacking, cybersecurity | 07-Oct-2024 |
| Finding and Exploiting an Unused API Endpoint | https://medium.com/@codingbolt.in/finding-and-exploiting-an-unused-api-endpoint-0a79f47f38f1?source=rss------bug_bounty-5 | codingbolt | bugs, cybersecurity, bug-bounty, api-penetration-testing, api-testing | 07-Oct-2024 |
| Introducing Bug Bounty Program For Thorn Protocol | https://thornprotocol.medium.com/introducing-bug-bounty-program-for-thorn-protocol-4d7a89d898e0?source=rss------bug_bounty-5 | Thorn Protocol | bug-bounty | 07-Oct-2024 |
| xmlrpc.php allows SSRF! | https://take0verx0.medium.com/xmlrpc-php-allows-ssrf-5357049d43e9?source=rss------bug_bounty-5 | Shahariar Amin | bug-bounty, cybersecurity, bug-bounty-tips | 07-Oct-2024 |
| cURL for API Testing & Automation: Advanced Commands for Penetration Testers and Developers | https://theshaco.com/curl-for-api-testing-automation-advanced-commands-for-penetration-testers-and-developers-67b2ce7d8f4f?source=rss------bug_bounty-5 | Khaleel Khan | hacking, infosec, kali-linux, cybersecurity, bug-bounty | 07-Oct-2024 |
| Finding a Hidden GraphQL Endpoint | https://medium.com/@codingbolt.in/finding-a-hidden-graphql-endpoint-56001ab29f85?source=rss------bug_bounty-5 | codingbolt | graphql, api, api-testing, cybersecurity, bug-bounty | 07-Oct-2024 |
| How I Got my First Bounty €€ ? | https://medium.com/@muralidharan1530/how-i-got-my-first-bounty-776e8487f9a0?source=rss------bug_bounty-5 | Murali Dharan | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugs | 07-Oct-2024 |
| Finding DOM XSS via File Upload | https://medium.com/@0Xdarsh/finding-dom-xss-via-file-upload-2a533a97cfaa?source=rss------bug_bounty-5 | 0Xdarsh | pentesting, web-penetration-testing, bug-hunting, bug-bounty | 07-Oct-2024 |
| My 2nd bounty : Referer-based access control + Response manipulation | https://medium.com/@adebayosec/my-2nd-bounty-referer-based-access-control-response-manipulation-2ab7f54d083f?source=rss------bug_bounty-5 | Torious | penetration-testing, broken-access-control, hacking, bug-bounty, cybersecurity | 07-Oct-2024 |
| Bypassing GraphQL brute force protections | https://medium.com/@codingbolt.in/bypassing-graphql-brute-force-protections-5cce7b3657c8?source=rss------bug_bounty-5 | codingbolt | api, api-testing, cybersecurity, bug-bounty, graphql | 07-Oct-2024 |
| First Bug report as a beginner in Bug Bounty | https://blue3dot.medium.com/first-bug-report-as-a-beginner-in-bug-bounty-367e406cd960?source=rss------bug_bounty-5 | Manikanta G | info-sec-writeups, hackerone, cybersecurity, bug-bounty | 07-Oct-2024 |
| How I found Cache Deception in a private bug bounty program. | https://medium.com/@mos693570/how-i-found-cache-deception-in-a-private-bug-bounty-program-0e3056d15858?source=rss------bug_bounty-5 | Mo Salah | web-cache-deception, bug-bounty | 07-Oct-2024 |
| IDOR Attack Slips Through the Cracks: Vulnerability Scanners Miss Critical Security Flaw! | https://medium.com/@Aman-Gupta.cse/idor-attack-slips-through-the-cracks-vulnerability-scanners-miss-critical-security-flaw-c0061ea8c122?source=rss------bug_bounty-5 | Aman Gupta | bug-bounty, news, idor-vulnerability, cybersecurity, automation | 07-Oct-2024 |
| tool to generate xss payloads. | https://medium.com/h7w/tool-to-generate-xss-payloads-09bf1e519121?source=rss------bug_bounty-5 | loyalonlytoday | hacking, bug-bounty-tips, cybersecurity, bug-bounty, xss-attack | 07-Oct-2024 |
| 5 Most Usefull Programming Language For Hackers | Primary Hacking School #6 | https://medium.com/@nnface/5-most-usefull-programming-language-for-hackers-primary-hacking-school-6-21b5979f0fe6?source=rss------bug_bounty-5 | NnFace | programming, kali-linux, cybersecurity, bug-bounty, hacking | 07-Oct-2024 |
| How i get to find no rate limit bug worth $300 | https://medium.com/@sreejihkn43073/how-i-get-to-find-no-rate-limit-bug-worth-300-5036b0abbc7f?source=rss------bug_bounty-5 | Sreejihkn | bugcrowd, cybersecurity, bug-bounty, no-rate-limit, bug-bounty-tips | 06-Oct-2024 |
| What To Do After Installing Kali #2? | Primary Hacking School #5 | https://medium.com/@nnface/what-to-do-after-installing-kali-2-primary-hacking-school-5-e9a4a8272dfa?source=rss------bug_bounty-5 | NnFace | cybersecurity, hacking, kali-linux, bug-bounty, linux | 06-Oct-2024 |
| Enhancing Vulnerability Detection: Leveraging Shodan and ChatGPT for Efficient CIDR Scanning | https://medium.com/@malzureedi/enhancing-vulnerability-detection-leveraging-shodan-and-chatgpt-for-efficient-cidr-scanning-48970d4b94fa?source=rss------bug_bounty-5 | Malzureedi | red-team, bug-bounty-tips, cybersecurity, penetration-testing, bug-bounty | 06-Oct-2024 |
| Exploiting server-side parameter pollution in a query string | https://medium.com/@codingbolt.in/exploiting-server-side-parameter-pollution-in-a-query-string-38768943c6ca?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, bug-bounty, api-security, cybersecurity, bug-bounty-writeup | 06-Oct-2024 |
| I Studied 100+ SSRF Reports, and Here’s What I Learned | https://infosecwriteups.com/i-studied-100-ssrf-reports-and-heres-what-i-learned-1654c72ee2df?source=rss------bug_bounty-5 | Aditya Sawant | bug-bounty, cybersecurity, penetration-testing, appsec, bug-bounty-tips | 06-Oct-2024 |
| Exploiting an API endpoint using documentation | https://medium.com/@codingbolt.in/exploiting-an-api-endpoint-using-documentation-d07d3cedfddc?source=rss------bug_bounty-5 | codingbolt | bug-bounty, api-penetration-testing, cybersecurity, bug-bounty-tips, api-testing | 06-Oct-2024 |
| High-Risk Vulnerabilities in Apache HTTP Server’s mod_proxy Encoding Problem Allow Authentication… | https://infosecwriteups.com/high-risk-vulnerabilities-in-apache-http-servers-mod-proxy-encoding-problem-allow-authentication-cbe8d422738d?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, cyberattack, bug-bounty, vulnerability, bug-bounty-tips | 06-Oct-2024 |
| Understanding Insecure Design: A Critical Vulnerability in Web Security | https://medium.com/@mrutunjayasenapati0/understanding-insecure-design-a-critical-vulnerability-in-web-security-1185e989ba0c?source=rss------bug_bounty-5 | Mrutunjaya Senapati | bug-bounty, vulnerability, insecure-design, owasp, hacking | 06-Oct-2024 |
| How i found the rxss on hackerone vdp program? | https://doordiefordream.medium.com/how-i-found-the-rxss-on-hackerone-vdp-program-c14530481c90?source=rss------bug_bounty-5 | balu bandi | ethical-hacking, cybersecurity, bug-bounty, xss-attack, bugs | 06-Oct-2024 |
| How I Secured the Data of 15 Million Consumers: Uncovering Critical Vulnerabilities in Gujarat’s… | https://medium.com/@yashprajapati791/how-i-secured-the-data-of-15-million-consumers-uncovering-critical-vulnerabilities-in-gujarats-6dc453323851?source=rss------bug_bounty-5 | Yash Virendra Prajapati | responsible-disclosure, bug-bounty, unauthorized-access, trending, ethical-hacking | 06-Oct-2024 |
| Conditional Error Blind SQLi — Real World vs. Portswigger Labs | https://medium.com/@rodriguezjorgex/conditional-error-blind-sqli-real-world-vs-portswigger-labs-75d8eaee8c13?source=rss------bug_bounty-5 | Rodriguezjorgex | sql-injection, bug-bounty, hacking | 06-Oct-2024 |
| Race Condition , Allows creation of unlimited projects, bypassing free-tier limits. | https://dark0x.medium.com/race-condition-allows-creation-of-unlimited-projects-bypassing-free-tier-limits-109dd91c6783?source=rss------bug_bounty-5 | Mahmoud Hatem (0xDark) | sybersecurity, bugs, bug-bounty, hacking, bug-bounty-writeup | 06-Oct-2024 |
| Network Penetration Testing: A Comprehensive Guide to Securing Your Infrastructure | https://systemweakness.com/network-penetration-testing-a-comprehensive-guide-to-securing-your-infrastructure-64ce44712dd2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, technology, bug-bounty, hacking, careers | 06-Oct-2024 |
| Why I Quit Bug Bounty Hunting 🙁 | https://infosecwriteups.com/why-i-quit-bug-bounty-hunting-95e81c907a6f?source=rss------bug_bounty-5 | Satyam Pathania | bug-bounty, technology, hacking, cybersecurity, information-technology | 06-Oct-2024 |
| Critical Vulnerabilities in porte_plume plugin to Remote Exploits -$$$$ Bounty -CVE-2024–7954 | https://infosecwriteups.com/critical-vulnerabilities-in-porte-plume-plugin-to-remote-exploits-bounty-cve-2024-7954-3dbee45134ac?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, rewards, information-security, cybersecurity, penetration-testing | 06-Oct-2024 |
| Finding a easy bug in profile picture field. | https://infosecwriteups.com/finding-a-easy-bug-in-profile-picture-field-a9b5f853a5bf?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, bug-bounty, bug-bounty-tips, hacking, penetration-testing | 06-Oct-2024 |
| Unrestricted File Upload in AWS S3 Bucket | https://infosecwriteups.com/unrestricted-file-upload-in-aws-s3-bucket-2a764a3965f4?source=rss------bug_bounty-5 | mo9khu93r | pentesting, aws, bug-bounty, hacking, cybersecurity | 06-Oct-2024 |
| Understanding XSS Vulnerability For Beginners: A Deep Dive into Web Security Risks | https://medium.com/@error.not.known.404/understanding-xss-vulnerability-a-deep-dive-into-web-security-risks-189276a2d695?source=rss------bug_bounty-5 | Error | hacking, bug-bounty, ethical-hacking, security, bug-bounty-tips | 06-Oct-2024 |
| Write-Up — Telegram Anonymous Chat Hack Bot | https://medium.com/@EroHack/write-up-telegram-anonymous-chat-hack-bot-ad3497f813ed?source=rss------bug_bounty-5 | EroHack | bug-bounty, telegram-bot, hacking, pentesting, writeup | 05-Oct-2024 |
| Sensitive Data Leak using Cors Misconfiguration in prominent Domain Registrar | https://infosecwriteups.com/sensitive-data-leak-using-cors-misconfiguration-in-prominent-domain-registrar-b3010e4e6501?source=rss------bug_bounty-5 | Ronak Patel | bug-bounty, bug-bounty-writeup, ethical-hacking, information-security | 05-Oct-2024 |
| SQL Injection Due To Weak Filtering in PHP | https://medium.com/@bountyget/sql-injection-due-to-weak-filtering-in-php-51f9e8d705c0?source=rss------bug_bounty-5 | Dhiren Kumar Pradhan | sql-injection, info-sec-writeups, bug-bounty, secure-coding, infosec | 05-Oct-2024 |
| Burp Suite and Android: A Step-by-Step Connection Guide #part 1 | https://medium.com/@mahdisalhi0500/burp-suite-and-android-a-step-by-step-connection-guide-part-1-550dab3aa4c5?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | penetration-testing, androidhacking, infosec, ethical-hacking, bug-bounty | 05-Oct-2024 |
| Uncovering Hidden Vulnerabilities: How I Earned Two Bounties for the Same Issue | https://medium.com/@milanjain7906/uncovering-hidden-vulnerabilities-how-i-earned-two-bounties-for-the-same-issue-f55cf960110d?source=rss------bug_bounty-5 | Milanjain | bug-bounty, hacker, bugbounty-writeup, hacking, cybersecurity | 05-Oct-2024 |
| Resource Exhaustion: Leveraging Denial-of-Service Attacks for Maximum Impact | https://medium.com/@tusharpuri6/unleashing-the-chaos-my-dive-into-denial-of-service-dos-attacks-1ad06478b89a?source=rss------bug_bounty-5 | Tusharpuri | penetration-testing, infosec, bug-bounty, application-security, offensive-security | 05-Oct-2024 |
| #6. Bug Bounty Series: Vertical Privilege Escalation via Session Storage | https://cyb3rmind.medium.com/6-bug-bounty-series-vertical-privilege-escalation-via-session-storage-be377380bfe4?source=rss------bug_bounty-5 | Cyb3r M!nds | penetration-testing, bug-bounty-tips, privilege-escalation, hacking, bug-bounty | 05-Oct-2024 |
| Understanding Coordinated Vulnerability Disclosure (CVD) & Vulnerability Disclosure Programs (VDP) | https://medium.com/@yotamperkal/understanding-coordinated-vulnerability-disclosure-cvd-vulnerability-disclosure-programs-vdp-27ea33c882e0?source=rss------bug_bounty-5 | Yotam Perkal | information-security, cybersecurity, bug-bounty, ethical-hacking, vulnerability-management | 05-Oct-2024 |
| Understanding Injection: A Critical Vulnerability in Web Security | https://medium.com/@mrutunjayasenapati0/understanding-injection-a-critical-vulnerability-in-web-security-7c5c5b692958?source=rss------bug_bounty-5 | Mrutunjaya Senapati | owasp, bug-bounty, hacking, injection, vulnerability | 05-Oct-2024 |
| WHAT IS THE IMPORTANCE OF FINDING AQUISITIONS FOR BUG BOUNTY. | https://osintteam.blog/what-is-the-importance-of-finding-aquisitions-for-bug-bounty-02688ef90553?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, tips, cybersecurity, hacking, bug-bounty-tips | 05-Oct-2024 |
| Bug Bounty VS Procrastination | https://osintteam.blog/bug-bounty-vs-procrastination-66fadc0a3ace?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | programming, bug-bounty, patience, procrastination, cybersecurity | 05-Oct-2024 |
| Subdomain Enumeration & Takeovers (Part-3: Takeovers) | https://medium.com/@bitthr3at/subdomain-enumeration-takeovers-part-3-takeovers-e5c2b66be7fa?source=rss------bug_bounty-5 | Naman Gupta (Bitthr3at) | bug-bounty, recon, web, attack-surface, subdomain-takeover | 05-Oct-2024 |
| Power of SQL Injection: How a Simple Query Can Lead to Complete Database Compromise | https://cyberw1ng.medium.com/power-of-sql-injection-how-a-simple-query-can-lead-to-complete-database-compromise-11ddbefd9e9a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, cybersecurity, technology, bug-bounty | 05-Oct-2024 |
| Full Privilege Escalation from Agent to Admin Leads to Team Takeover | https://medium.com/@abdelrahman0x01/full-privilege-escalation-from-agent-to-admin-leads-to-team-takeover-2819507af2f1?source=rss------bug_bounty-5 | Abdelrahman0x01 | cybersecurity, cyberattack, bug-bounty-tips, penetration-testing, bug-bounty | 05-Oct-2024 |
| My First XSS Vulnerability Discovery on WebApp | https://medium.com/@sultonhasan017/my-first-xss-vulnerability-discovery-on-webapp-60cfad40f67a?source=rss------bug_bounty-5 | Sulton hasan | bug-bounty, dom-based-xss, xss-vulnerability, penetration-testing | 05-Oct-2024 |
| Well, now that you’ve put your mind in the right direction and started testing a website, the first… | https://medium.com/@shaikhminhaz1975/well-now-that-youve-put-your-mind-in-the-right-direction-and-started-testing-a-website-the-first-c900776d6f89?source=rss------bug_bounty-5 | Shaikh Minhaz | brute-force, bug-bounty, ethical-hacking, cybersecurity, penetration-testing | 04-Oct-2024 |
| Guarding the Gateway: Understanding and Preventing File Upload Attacks | https://medium.com/@wintersoldiers/guarding-the-gateway-understanding-and-preventing-file-upload-attacks-b116abd5eef0?source=rss------bug_bounty-5 | Winter_Soldiers | file-upload-vulnerability, web-security, hacking, bug-bounty, rce-vulnerability | 04-Oct-2024 |
| Directory Brute-Forcing: All Methods You Need to Know — File Extension, Status Filter, and… | https://medium.com/@shaikhminhaz1975/well-now-that-youve-put-your-mind-in-the-right-direction-and-started-testing-a-website-the-first-c900776d6f89?source=rss------bug_bounty-5 | Shaikh Minhaz | brute-force, bug-bounty, ethical-hacking, cybersecurity, penetration-testing | 04-Oct-2024 |
| SQL injection with filter bypass via XML encoding | https://medium.com/@codingbolt.in/sql-injection-with-filter-bypass-via-xml-encoding-754808d7d29a?source=rss------bug_bounty-5 | codingbolt | bug-bounty, sql-injection-attack, sql-injection, bug-bounty-tips, cybersecurity | 04-Oct-2024 |
| Identifying the LLM Attack Surface: A Beginner’s Guide | https://medium.com/@360Security/identifying-the-llm-attack-surface-a-beginners-guide-190b6e1c0aba?source=rss------bug_bounty-5 | Anand | llm, bug-bounty, vapt, penetration-testing, cybersecurity | 04-Oct-2024 |
| GraphQL vs REST: Comparison and exploit | https://medium.com/@kabi_777/graphql-vs-rest-comparison-and-security-insights-f481f3389e43?source=rss------bug_bounty-5 | Kabi_777 | bug-bounty, bug-bounty-writeup, bug-bounty-hunter, cybersecurity, bug-bounty-tips | 04-Oct-2024 |
| Unlocking Cybersecurity: The Power of Bug Bounty Programs in 2024 | https://medium.com/@eyowas1994/unlocking-cybersecurity-the-power-of-bug-bounty-programs-in-2024-d77d33137e64?source=rss------bug_bounty-5 | CyberSec Tactics | ethical-hacking, bug-bounty, cybersecurity, hacking, web-security | 04-Oct-2024 |
| From File Upload to Remote Code Execution (RCE) | https://medium.com/@lukasz.wierzbicki/from-file-upload-to-remote-code-execution-rce-d8f210b22a8c?source=rss------bug_bounty-5 | Lukasz Wierzbicki | security-testing, security-research, bug-bounty, pentesting, pentest | 04-Oct-2024 |
| Broken Access Control — Unprotected admin functionality | https://medium.com/@codingbolt.in/broken-access-control-unprotected-admin-functionality-9905f57fa88a?source=rss------bug_bounty-5 | codingbolt | access-control, privilege-escalation, cybersecurity, bug-bounty, broken-access-control | 04-Oct-2024 |
| A Methodology Guide to Bypassing RASP and Root Detection in Mobile Apps with Frida | https://medium.com/@abhijithknamboothiri96/a-methodology-guide-to-bypassing-rasp-and-root-detection-in-mobile-apps-with-frida-17e4f97b88bc?source=rss------bug_bounty-5 | Abhijith Namboothiry | cybersecurity, mobile-pentesting, penetration-testing, bug-bounty, security | 04-Oct-2024 |
| Understanding Cryptographic Failures: A Key Vulnerability in Web Security | https://medium.com/@mrutunjayasenapati0/understanding-cryptographic-failures-a-key-vulnerability-in-web-security-bb024a4c41ca?source=rss------bug_bounty-5 | Mrutunjaya Senapati | owasp-top-10, bug-bounty, web-penetration-testing, cyrptography, hacking | 04-Oct-2024 |
| How to choose the Correct Severity or CVSS Score for a Bug: A Practical Guide | https://medium.com/@a13h1/how-to-choose-the-correct-severity-or-cvss-score-for-a-bug-a-practical-guide-7a83be0096f3?source=rss------bug_bounty-5 | Abhi Sharma | cybersecurity, bug-bounty, bug-bounty-tips, hacking, infosec | 04-Oct-2024 |
| Are you ready to take over entire infrastructure? | https://medium.com/@alex122303q/are-you-ready-to-take-over-entire-infrastructure-a93d2a0f902c?source=rss------bug_bounty-5 | Nebty | ctf, malicious-document, standoff365, bug-bounty, penetration-testing | 04-Oct-2024 |
| US Trading Account Fund Exploit: An IDOR Vulnerability Walkthrough | https://medium.com/@360Security/us-trading-account-fund-exploit-an-idor-vulnerability-walkthrough-a61ba5186874?source=rss------bug_bounty-5 | 360 Security | vapt, web-security, bug-bounty, cybersecurity, penetration-testing | 04-Oct-2024 |
| Identifying the LLM Attack Surface: A Beginner’s Guide | https://medium.com/@360Security/identifying-the-llm-attack-surface-a-beginners-guide-190b6e1c0aba?source=rss------bug_bounty-5 | 360 Security | llm, bug-bounty, vapt, penetration-testing, cybersecurity | 04-Oct-2024 |
| Command Injection: How Exploiting User Input Can Lead to Full System Compromise | https://systemweakness.com/command-injection-how-exploiting-user-input-can-lead-to-full-system-compromise-6becf5b981a1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, hacking, technology, bug-bounty | 04-Oct-2024 |
| one of the best tool for subdomains finding. | https://osintteam.blog/one-of-the-best-tool-for-subdomains-finding-0769dff261f4?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips, hacking | 04-Oct-2024 |
| easy bug bounty as a beginner part 1 | https://medium.com/@canonminibeast/easy-bug-bounty-as-a-beginner-part-1-38833747da8d?source=rss------bug_bounty-5 | Canonminibeast | hacking-tools, hacking, web-penetration-testing, bug-bounty, bugbounty-poc | 04-Oct-2024 |
| Are you ready to take over entire infrastructure? | https://medium.com/@nebty/are-you-ready-to-take-over-entire-infrastructure-a93d2a0f902c?source=rss------bug_bounty-5 | Nebty | ctf, malicious-document, standoff365, bug-bounty, penetration-testing | 04-Oct-2024 |
| Some XSS Situation | https://medium.com/@haticezkmnl/some-xss-situation-31fa64e113fe?source=rss------bug_bounty-5 | Hatice Zehra Kamanlı | cyber, xss-attack, bug-bounty, exploitation, cybersecurity | 03-Oct-2024 |
| OTP Bypass Methods | Bug Bounty | https://medium.com/@arrheniuspaelongan09/otp-bypass-methods-bug-bounty-4a988573c12a?source=rss------bug_bounty-5 | Qchad | programming, bug-bounty, penetration-testing, technology, hacking | 03-Oct-2024 |
| Understanding Broken Access Control: A Critical Vulnerability in Web Security | https://medium.com/@mrutunjayasenapati0/understanding-broken-access-control-a-critical-vulnerability-in-web-security-6ebd33ad4d35?source=rss------bug_bounty-5 | Mrutunjaya Senapati | bug-bounty, web-penetration-testing, owasp, hacking, broken-access-control | 03-Oct-2024 |
| Hacker Kali Toolkit Zero-Hero | Primary Hacking School #4 | https://medium.com/@nnface/hacker-kali-toolkit-zero-hero-primary-hacking-school-4-a489aafb7f75?source=rss------bug_bounty-5 | NnFace | linux, cybersecurity, hacking, bug-bounty, kali-linux | 03-Oct-2024 |
| Visible error-based SQL injection | https://medium.com/@codingbolt.in/visible-error-based-sql-injection-46b8bafe9059?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, sql-injection, bug-bounty, sql-injection-attack, cybersecurity | 03-Oct-2024 |
| Blind SQL injection with conditional errors | https://medium.com/@codingbolt.in/blind-sql-injection-with-conditional-errors-f7c05ef531ad?source=rss------bug_bounty-5 | codingbolt | sql-injection, cybersecurity, sql-injection-attack, bug-bounty-tips, bug-bounty | 03-Oct-2024 |
| Blind SQL injection with conditional responses | https://medium.com/@codingbolt.in/blind-sql-injection-with-conditional-responses-7ffa3a1ac84d?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, sql-injection, bug-bounty, sql-injection-attack, cybersecurity | 03-Oct-2024 |
| SQL injection UNION attack, retrieving multiple values in a single column | https://medium.com/@codingbolt.in/sql-injection-union-attack-retrieving-multiple-values-in-a-single-column-ed5ce734abf2?source=rss------bug_bounty-5 | codingbolt | sql-injection-attack, cybersecurity, bug-bounty-tips, bug-bounty, sql-injection | 03-Oct-2024 |
| SQL injection UNION attack, retrieving data from other tables | https://medium.com/@codingbolt.in/sql-injection-union-attack-retrieving-data-from-other-tables-11cc211f5ad3?source=rss------bug_bounty-5 | codingbolt | sql-injection-attack, sql-injection, bug-bounty, cybersecurity, bug-bounty-tips | 03-Oct-2024 |
| DNS — Port 53 — Pentesting | https://medium.com/@verylazytech/dns-port-53-pentesting-7b8ca6307d54?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, bug-bounty, hacking, dns-exploit, dns | 03-Oct-2024 |
| VDP: Broken Session Management Allows Unlimited Free Scans on Pentesting Website | https://medium.com/@enigma_/vdp-broken-session-management-allows-unlimited-free-scans-on-pentesting-website-99467dce1d3c?source=rss------bug_bounty-5 | enigma | penetration-testing, hacking, owasp, bug-bounty, bug-bounty-writeup | 03-Oct-2024 |
| Subdomain Enumeration & Takeovers (Part-2: Active Enumeration) | https://medium.com/@bitthr3at/subdomain-enumeration-takeovers-part-2-active-enumeration-304cb3381813?source=rss------bug_bounty-5 | Naman Gupta (Bitthr3at) | recon, subdomain-enumeration, web, bug-bounty, attack-surface | 03-Oct-2024 |
| How I hacked RD Sharma’s Publisher Website? | https://abhayvis.medium.com/how-i-hacked-rd-sharmas-publisher-website-7a76b3cb12ae?source=rss------bug_bounty-5 | Abhay Vishwakarma | sql-injection, hacking, bug-bounty | 03-Oct-2024 |
| Blind SQL injection with out-of-band data exfiltration | https://medium.com/@codingbolt.in/blind-sql-injection-with-out-of-band-data-exfiltration-0a08129bfad5?source=rss------bug_bounty-5 | codingbolt | sql-injection, cybersecurity, bug-bounty-tips, sql-injection-attack, bug-bounty | 03-Oct-2024 |
| Blind SQL injection with out-of-band interaction | https://medium.com/@codingbolt.in/blind-sql-injection-with-out-of-band-interaction-e44f6f75bc47?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, sql-injection-attack, cybersecurity, sql-injection, bug-bounty | 03-Oct-2024 |
| Blind SQL injection with time delays and information retrieval | https://medium.com/@codingbolt.in/blind-sql-injection-with-time-delays-and-information-retrieval-fa38f3618a99?source=rss------bug_bounty-5 | codingbolt | sql-injection-attack, cybersecurity, sql-injection, bug-bounty, bug-bounty-tips | 03-Oct-2024 |
| Blind SQL injection with time delays | https://medium.com/@codingbolt.in/blind-sql-injection-with-time-delays-94cc5d962902?source=rss------bug_bounty-5 | codingbolt | cybersecurity, sql-injection-attack, bug-bounty, sql-injection, bug-bounty-tips | 03-Oct-2024 |
| Pre-Account Takeover via Facebook OAuth Misconfiguration | https://nyein-chan-aung.medium.com/pre-account-takeover-via-facebook-oauth-misconfiguration-e16b984b7953?source=rss------bug_bounty-5 | Nyein Chan Aung | bug-bounty-tips, takeovers, bug-bounty | 03-Oct-2024 |
| XML External Entity (XXE) Injection: How Malicious XML Payloads Can Breach Your Application | https://systemweakness.com/xml-external-entity-xxe-injection-how-malicious-xml-payloads-can-breach-your-application-4837f732781e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, cybersecurity, hacking, bug-bounty, careers | 03-Oct-2024 |
| How ChatGPT Made Me a Hacker. | https://medium.com/@wajeehakhan9797/how-chatgpt-made-me-a-hacker-b89b1cce992b?source=rss------bug_bounty-5 | Wajeeha Khan | learning, openai, large-language-models, hacking, bug-bounty | 03-Oct-2024 |
| Critical Vulnerabilities in DrayTek Vigor Routers: Over 700,000 Devices Exposed to Remote Exploits… | https://infosecwriteups.com/critical-vulnerabilities-in-draytek-vigor-routers-over-700-000-devices-exposed-to-remote-exploits-2f3f731b50d9?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, penetration-testing, bug-bounty, rewards, hacking | 03-Oct-2024 |
| Blind SQL injection with out-of-band data exfiltration | https://systemweakness.com/blind-sql-injection-with-out-of-band-data-exfiltration-0a08129bfad5?source=rss------bug_bounty-5 | codingbolt | sql-injection, cybersecurity, bug-bounty-tips, sql-injection-attack, bug-bounty | 03-Oct-2024 |
| Critical Information Disclosure Vulnerability via CNAME (AUTOMATED SCAN) | https://offsec01.medium.com/critical-information-disclosure-vulnerability-via-cname-automated-scan-be0f6597ac5e?source=rss------bug_bounty-5 | Facundo Fernandez | bug-bounty, penetration-testing, ethical-hacking, hacking, cybersecurity | 03-Oct-2024 |
| https://forms.gle/bHE9FbPTuzYzREAz7 | https://medium.com/@a1il7j99h/https-forms-gle-bhe9fbptuzyzreaz7-5f9f5d561a4b?source=rss------bug_bounty-5 | Re$@T!l< | cyber, bug-bounty, hacker | 02-Oct-2024 |
| How I Earned $4000+ from a Simple Information Disclosure Bug | https://medium.com/@rajauzairabdullah/how-i-earned-4000-from-a-simple-information-disclosure-bug-d644c47803c1?source=rss------bug_bounty-5 | Raja Uzair Abdullah | information-disclosure, bug-bounty-tips, bug-bounty, penetration-testing | 02-Oct-2024 |
| Seri Belajar APT (Advanced Persistent Threat) Secara Sederhana Pada Target OS Linux — Pengumpulan… | https://medium.com/@mrp.bpp/seri-belajar-apt-advanced-persistent-threat-secara-sederhana-pada-target-os-linux-pengumpulan-967c3c2f46cc?source=rss------bug_bounty-5 | Mada Perdhana | hacking, apt, linux-hacking, bug-bounty, ethical-hacking-tips | 02-Oct-2024 |
| Seri Belajar APT (Advanced Persistent Threat) Secara Sederhana Pada Target OS Linux — Pengumpulan… | https://medium.com/@mrp.bpp/seri-belajar-apt-advanced-persistent-threat-secara-sederhana-pada-target-os-linux-pengumpulan-4cbd83db98af?source=rss------bug_bounty-5 | Mada Perdhana | apt, nmap, hacking, bug-bounty, ethical-hacking-tips | 02-Oct-2024 |
| How i got my first bounty of $$$ | https://rivudon.medium.com/how-i-got-my-first-bounty-of-e163f970d1e0?source=rss------bug_bounty-5 | Rivek Raj Tamang ( RivuDon ) | infosec, hackerone, bug-bounty-tips, bug-bounty | 02-Oct-2024 |
| Mastering Code Quality | https://python.plainenglish.io/mastering-code-quality-2f595404d547?source=rss------bug_bounty-5 | rahul bhatia | coverage, python, code-quality, bug-bounty, bug-detection | 02-Oct-2024 |
| $175 Prototype Pollution Vulnerability — My first bounty | https://1-day.medium.com/175-prototype-pollution-vulnerability-my-first-bounty-197738a32330?source=rss------bug_bounty-5 | 1day | writeup, penetration-testing, bug-bounty, hacking, bug-bounty-writeup | 02-Oct-2024 |
| Boost Your Code Quality with Python Coverage | https://python.plainenglish.io/mastering-code-quality-2f595404d547?source=rss------bug_bounty-5 | rahul bhatia | coverage, python, code-quality, bug-bounty, bug-detection | 02-Oct-2024 |
| Comment j’ai découvert une vulnérabilité d’Information Disclosure sur un site que j’utilise | https://medium.com/@Itachi0xf/comment-jai-d%C3%A9couvert-une-vuln%C3%A9rabilit%C3%A9-d-information-disclosure-sur-un-site-que-j-utilise-3a9fed9daa02?source=rss------bug_bounty-5 | Itachix0f | information-disclosure, hacking, apihacking, bug-bounty | 02-Oct-2024 |
| How to Find Bugs and Vulnerabilities Using ChatGPT: Guaranteed Results | https://bevijaygupta.medium.com/how-to-find-bugs-and-vulnerabilities-using-chatgpt-guaranteed-results-288ff81dfe40?source=rss------bug_bounty-5 | Vijay Gupta | bugs, bug-bounty, vulnerability, bug-bounty-tips, chatgpt | 02-Oct-2024 |
| SQL injection attack, listing the database contents on non-Oracle databases | https://medium.com/@codingbolt.in/sql-injection-attack-listing-the-database-contents-on-non-oracle-databases-718de8ba755a?source=rss------bug_bounty-5 | codingbolt | bugs, bug-bounty, cybersecurity, sql-injection, bug-bounty-tips | 02-Oct-2024 |
| SQL injection UNION attack, determining the number of columns returned by the query | https://medium.com/@codingbolt.in/sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query-f04154bd5b3c?source=rss------bug_bounty-5 | codingbolt | sql-injection-attack, sql-injection, bug-bounty, bug-bounty-tips, cybersecurity | 02-Oct-2024 |
| Exfiltration of Data from a Standalone PC | https://roadtooscp.medium.com/exfiltration-of-data-from-a-standalone-pc-00a538f0f773?source=rss------bug_bounty-5 | RoadToOSCP | bug-bounty, hacking, red-teaming, malware, data-security | 02-Oct-2024 |
| Découverte d’une vulnérabilité XSS avec contournement de la CSP via unpkg.com | https://medium.com/@Itachi0xf/d%C3%A9couverte-dune-vuln%C3%A9rabilit%C3%A9-xss-avec-contournement-de-la-csp-via-unpkg-com-02437e0eac34?source=rss------bug_bounty-5 | Itachix0f | hacking, xss-attack, csp-bypass, bug-bounty, xss-bypass | 02-Oct-2024 |
| “A Vulnerability, A Treasure: Go on a Fun Treasure Hunt with OWASP Top 10!” | https://medium.com/@rootspaghetti/a-vulnerability-a-treasure-go-on-a-fun-treasure-hunt-with-owasp-top-10-d9fe21911856?source=rss------bug_bounty-5 | Root@Spaghetti | hacking, bug-bounty, bug-bounty-tips | 02-Oct-2024 |
| SQL injection attack, listing the database contents on Oracle | https://medium.com/@codingbolt.in/sql-injection-attack-listing-the-database-contents-on-oracle-ceb843466f32?source=rss------bug_bounty-5 | codingbolt | sql-injection, bug-bounty-tips, bug-bounty-writeup, cybersecurity, bug-bounty | 02-Oct-2024 |
| Exploiting Blind XSS to Access Admin Dashboard for Bounty Rewards | https://medium.com/@arrheniuspaelongan09/exploiting-blind-xss-to-access-admin-dashboard-for-bounty-rewards-fcdd54ddea7c?source=rss------bug_bounty-5 | Qchad | technology, hacking, bug-bounty, penetration-testing, hacker | 02-Oct-2024 |
| Which path to choose in cybersecurity? | https://medium.com/@mr_prey3r/which-path-to-choose-in-cybersecurity-ca048e621ba0?source=rss------bug_bounty-5 | Rubayet Hasan aka MR_Prey3r | cybersecurity, hacking, bug-bounty, ethical-hacking | 02-Oct-2024 |
| OWASP Top 10: 2021 vs. 2017 — A Comparative Analysis | https://medium.com/@mrutunjayasenapati0/owasp-top-10-2021-vs-2017-a-comparative-analysis-70990e5570f8?source=rss------bug_bounty-5 | Mrutunjaya Senapati | bug-bounty, bugs, vulnerability, owasp, hacking | 02-Oct-2024 |
| Deep Dive in Reconnaissance | https://medium.com/@bitthr3at/deep-dive-in-reconnaissance-a1e88cfdebf5?source=rss------bug_bounty-5 | Naman Gupta (Bitthr3at) | recon, subdomains-enumeration, bug-bounty, web, attack-surface | 02-Oct-2024 |
| Bug Bounty Proqramlarına Giriş: Zəifliklərin Aşkar Edilməsi və Etik Hakerlik (Bölüm 1) | https://zeynalxan.medium.com/bug-bounty-proqramlar%C4%B1na-giri%C5%9F-z%C9%99iflikl%C9%99rin-a%C5%9Fkar-edilm%C9%99si-v%C9%99-etik-hakerlik-b%C3%B6l%C3%BCm-1-8caa7eb90dd8?source=rss------bug_bounty-5 | Zeynalxan Quliyev | etik-xaker, bug-bounty, whitehat, bug-bounty-nədir, hakerlik | 2-Oct-2024 |
| A Comprehensive Bug Bounty Checklist for Beginners. | https://medium.com/@anandrishav2228/a-comprehensive-bug-bounty-checklist-for-beginners-f96ba591cf3d?source=rss------bug_bounty-5 | Rishav anand | computer-science, security, cybersecurity, engineering, bug-bounty | 2-Oct-2024 |
| Cross-Origin Resource Sharing (CORS) Misconfiguration: How Attackers Exploit Weak Policies to Steal… | https://cyberw1ng.medium.com/cross-origin-resource-sharing-cors-misconfiguration-how-attackers-exploit-weak-policies-to-steal-5902af92d71f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, technology, bug-bounty, cybersecurity | 2-Oct-2024 |
| SQL injection UNION attack, finding a column containing text | https://medium.com/@codingbolt.in/sql-injection-union-attack-finding-a-column-containing-text-09d913162e0f?source=rss------bug_bounty-5 | codingbolt | sql-injection, sql-injection-attack, bug-bounty, cybersecurity, bug-bounty-tips | 2-Oct-2024 |
| Reverse Shells: A Practical Guide | https://medium.com/@learntheshell/reverse-shells-a-practical-guide-af1815bc3127?source=rss------bug_bounty-5 | LearnTheShell | bug-bounty, bug-bounty-tips, reverse-shell, cybersecurity, pentesting | 02-Oct-2024 |
| Secrets Manager exposed (HasiCorp Vault) | https://medium.com/@manumanram2/secrets-manager-exposed-hasicorp-vault-7075539a9e1e?source=rss------bug_bounty-5 | SrPatoMan | information-disclosure, hacking, bug-bounty | 02-Oct-2024 |
| Cross-Origin Resource Sharing (CORS) Misconfiguration: How Attackers Exploit Weak Policies to Steal… | https://systemweakness.com/cross-origin-resource-sharing-cors-misconfiguration-how-attackers-exploit-weak-policies-to-steal-5902af92d71f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, technology, bug-bounty, cybersecurity | 02-Oct-2024 |
| Utilizing AI Model for Hacking: Bypassing CAPTCHAs using AI leads to Account Takeover | Bug Bounty | https://ph-hitachi.medium.com/utilizing-ai-model-for-hacking-bypassing-captchas-using-ai-leads-to-account-takeover-bug-bounty-028804b779a0?source=rss------bug_bounty-5 | Ph.Hitachi | vulnerability, bug-bounty, captcha, security, ai | 01-Oct-2024 |
| Chaining Application-Level DoS with CSRF: A Sneaky Exploit to Block User Logins | https://medium.com/@dsmodi484/chaining-application-level-dos-with-csrf-a-sneaky-exploit-to-block-user-logins-4caaac781883?source=rss------bug_bounty-5 | Dishant Modi | hackerone, bug-bounty, csrf, python, vulnerability | 01-Oct-2024 |
| Top 10 Documentation Every Hacker Should Know | https://medium.com/@RaunakGupta1922/top-10-documentation-every-hacker-should-know-f28e73f7c207?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | ethical-hacking, cybersecurity, bug-bounty, programming, infosec | 01-Oct-2024 |
| Mastering XSS (Cross-Site Scripting) Attacks: A Comprehensive Guide to become Professional Bug… | https://medium.com/@kumawatabhijeet2002/mastering-xss-cross-site-scripting-attacks-a-comprehensive-guide-to-become-professional-bug-6251058c576e?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, xss-vulnerability, bug-bounty-tips, dom-based-xss, xss-attack | 01-Oct-2024 |
| Don’t Miss Out! The Best Platforms to Report Vulnerabilities and Earn Big! | https://medium.com/@paritoshblogs/dont-miss-out-the-best-platforms-to-report-vulnerabilities-and-earn-big-787bbb03607a?source=rss------bug_bounty-5 | Paritosh | how-to, vulnerability, hacking, bug-bounty, cybersecurity | 01-Oct-2024 |
| Why can’t Bug Bounty Hunter find a bug? | https://m0hitrawat.medium.com/why-cant-bug-bounty-hunter-find-a-bug-b5c9bc72a30d?source=rss------bug_bounty-5 | Mohit Rawat | pentesting-checklist, bug-bounty, bug-bounty-writeup, pentesting-guide, bug-bounty-tips | 01-Oct-2024 |
| Android Application Pentesting Part 2 | Android Platform Architecture | https://dkcyberz.medium.com/android-application-pentesting-part-2-android-platform-architecture-0db5e27f209a?source=rss------bug_bounty-5 | Harpy Hunter | android-pentesting, bug-bounty, bugbounty-writeup, pentesting, ethical-hacking | 01-Oct-2024 |
| Understanding the OWASP Top 10: Your Guide to Web Application Security | https://medium.com/@mrutunjayasenapati0/understanding-the-owasp-top-10-your-guide-to-web-application-security-fab59537db8b?source=rss------bug_bounty-5 | Mrutunjaya Senapati | hacking, bug-bounty, owasp-top-10, hunting, bounty-program | 01-Oct-2024 |
| Why Web3Projects Should Start with Smaller Bug Bounties | https://medium.com/@rangashree.rangaraja/why-web3projects-should-start-with-smaller-bug-bounties-a391777bc559?source=rss------bug_bounty-5 | Rangashree Rangaraja | bug-bounty, web3-security, web3, blockchain, blockchain-technology | 01-Oct-2024 |
| Exploiting the Unprotected: How I Gained Unauthorized Access to Redis | https://medium.com/@impratikdabhi/exploiting-the-unprotected-how-i-gained-unauthorized-access-to-redis-5070eea7da35?source=rss------bug_bounty-5 | Pratik Dabhi | hacking, hacking-tools, bugcrowd, hackerone, bug-bounty | 01-Oct-2024 |
| Taming Post Claps | https://medium.engineering/taming-post-claps-273d97ce1ced?source=rss------bug_bounty-5 | Ryan Lattanzi | dynamodb, software-development, programming, bug-bounty | 01-Oct-2024 |
| 4 Burpsuite Intruder Attack Types You Should Know —Bug Tuesday | https://medium.com/@kerstan/4-burpsuite-intruder-attack-types-you-should-know-bug-tuesday-5c7a0900cb56?source=rss------bug_bounty-5 | kerstan | bug-bounty, hacking, cybersecurity | 01-Oct-2024 |
| Escalating stored XSS to Account Takeover | https://nyein-chan-aung.medium.com/escalating-stored-xss-to-account-takeover-28c549cd5f6b?source=rss------bug_bounty-5 | Nyein Chan Aung | bug-bounty, bug-bounty-writeup, bug-bounty-tips | 01-Oct-2024 |
| Unauthenticated PHP Object Injection in GiveWP Plugin for WordPress | https://infosecwriteups.com/unauthenticated-php-object-injection-in-givewp-plugin-for-wordpress-5fffa8df79c8?source=rss------bug_bounty-5 | Ajay Naik | rewards, hacking, bug-bounty, vulnerability, cybersecurity | 01-Oct-2024 |
| File Upload (RCE) to Bounty | HackerOne | https://starlox.medium.com/file-upload-rce-to-bounty-hackerone-928e8e5b375e?source=rss------bug_bounty-5 | #$ubh@nk@r | infosec, hacking, pentesting, bug-bounty, cybersecurity | 01-Oct-2024 |
| Sneaking into your documents: How I hacked DigiLocker? | https://medium.com/codechef-vit/sneaking-into-your-documents-how-i-hacked-digilocker-ae6dc44267fb?source=rss------bug_bounty-5 | Prateek Srivastava | bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips, penetration-testing | 01-Oct-2024 |
| Cross-Site Request Forgery (CSRF): How Attackers Exploit Trust to Hijack User Actions | https://systemweakness.com/cross-site-request-forgery-csrf-how-attackers-exploit-trust-to-hijack-user-actions-94d29d787e47?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, bug-bounty, technology, hacking | 01-Oct-2024 |
| How I Manipulated A User’s Email: A CSRF PoC Walkthrough from TCM Academy | https://medium.com/@trixiahorner/csrf-walkthrough-5876cdf437ea?source=rss------bug_bounty-5 | Trixia Horner | cybersecurity, hacking, bug-bounty, vulnerability, website | 01-Oct-2024 |
| Nmap: A Comprehensive Guide for Web Application Bug Hunting | https://medium.com/@anandrishav2228/nmap-a-comprehensive-guide-for-web-application-bug-hunting-d8c2a0ef360a?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, nmap, bug-bounty, engineering, hacking | 01-Oct-2024 |
| Bug in a Mailing List Exposed Hundreds of American Universities: How I Found and Exploited the… | https://medium.com/@sarvagnpathak/bug-in-a-mailing-list-exposed-hundreds-of-american-universities-how-i-found-and-exploited-the-cf5df54baf37?source=rss------bug_bounty-5 | Sarvagn Pathak | cybersecurity, bug-bounty, awareness, hacking | 01-Oct-2024 |
| AllSafe Challenges | https://medium.com/@soliman_almansor/all-safe-challenges-599a09cce447?source=rss------bug_bounty-5 | Soliman Almansor | hacking, bug-bounty, information-security, android-pentesting, infosec | 01-Oct-2024 |
| Excited to announce our Industrial Security Training Program at @security_lit! | https://securitylit.medium.com/excited-to-announce-our-industrial-security-training-program-at-security-lit-82a21753634e?source=rss------bug_bounty-5 | Security Lit Limited | it-security, cybersecurity, penetration-testing, bug-bounty, traning | 01-Oct-2024 |
| Open Redirect Bug | wedohacks | https://wedohack.medium.com/open-redirect-bug-wedohacks-26012e51d50c?source=rss------bug_bounty-5 | WE DO HACKS | open-redirect, bug-bounty, bugs, bug-hunting, hacking | 01-Oct-2024 |
| CORS Vulnerability with Trusted Insecure Protocols | https://medium.com/@rcxsecurity/cors-vulnerability-with-trusted-insecure-protocols-09df3304e3d8?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Cafe | bug-bounty, information-security, penetration-testing, cybersecurity, hacking | 01-Oct-2024 |
| Remote code Execution | https://medium.com/@roshiniyathakula/remote-code-execution-9b2e9f26963d?source=rss------bug_bounty-5 | Roshiniyathakula | rce-vulnerability, penetration-testing, bug-bounty, reverse-shell, hacking | 30-Sep-2024 |
| Uncovering Hidden Subdomains with Favicons: Advanced Enumeration Techniques | https://systemweakness.com/uncovering-hidden-subdomains-with-favicons-advanced-enumeration-techniques-e92cb30cbcc3?source=rss------bug_bounty-5 | Khaleel Khan | bug-bounty-tips, hacking, cybersecurity, infosec, bug-bounty | 30-Sep-2024 |
| Discovering Facebook OAuth Misconfigurations: A Journey into Pre-Account Takeover | https://medium.com/@cybershree/discovering-facebook-oauth-misconfigurations-a-journey-into-pre-account-takeover-92a38254cbec?source=rss------bug_bounty-5 | cybershree | bug-bounty, bug-bounty-tips, writing, cybersecurity, bugcrowd | 30-Sep-2024 |
| Android Application Penetration Testing Part 1 | Introduction | https://dkcyberz.medium.com/android-application-penetration-testing-part-1-introduction-738351fe8806?source=rss------bug_bounty-5 | Harpy Hunter | bug-bounty, pentesting, mobile-pentesting, android-pentesting, bugbounty-writeup | 30-Sep-2024 |
| How to use AI for Bug Bounty in 2024 | https://medium.com/@anandrishav2228/how-to-use-ai-for-bug-bounty-in-2024-39ef4d2a518a?source=rss------bug_bounty-5 | Rishav anand | ai, networking, security, cybersecurity, bug-bounty | 30-Sep-2024 |
| SQL Injection vulnerability in CRMEB v.5.2.2 — $$$$ Bounty | https://osintteam.blog/sql-injection-vulnerability-in-crmeb-v-5-2-2-bounty-7bc056a19cce?source=rss------bug_bounty-5 | Ajay Naik | vulnerability, sql, rewards, bug-bounty, sql-injection | 30-Sep-2024 |
| Easy P2 — Pre account takeover via Facebook OAuth misconfiguration | https://sudosuraj.medium.com/easy-p2-pre-account-takeover-via-facebook-oauth-misconfiguration-23c681ba8f07?source=rss------bug_bounty-5 | sudosuraj | cybersecurity, bug-bounty, bug-bounty-tips, bug-bounty-writeup, penetration-testing | 30-Sep-2024 |
| SQL Injection Vulnerability on Login Page Allows Unauthorized Database Dump | https://medium.com/@harshitha431/sql-injection-sqli-9675e21cc54a?source=rss------bug_bounty-5 | Harshitha | bug-bounty, vulnerability, hacking, penetration-testing, sql-injection | 30-Sep-2024 |
| Prototype Pollution: How a JavaScript Quirk Can Lead to Complete Application Takeover | https://cyberw1ng.medium.com/prototype-pollution-how-a-javascript-quirk-can-lead-to-complete-application-takeover-9adb5e4f6b6b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, hacking, cybersecurity, technology | 30-Sep-2024 |
| CVE-2024–23897 — Jenkins File Read Vulnerability — POC | https://medium.com/@verylazytech/cve-2024-23897-jenkins-file-read-vulnerability-poc-6a1dfdbfd6f2?source=rss------bug_bounty-5 | Very Lazy Tech | cve-2024-23897, jenkins, cybersecurity, bug-bounty, pentesting | 30-Sep-2024 |
| XSS + OAuth Misconfigs = Token Theft and ATO | https://7odamoo.medium.com/xss-oauth-misconfigs-token-theft-and-ato-d0837c44cd31?source=rss------bug_bounty-5 | Mahmoud Hamed | penetration-testing, bug-bounty, cybersecurity | 30-Sep-2024 |
| How to Use Medusa for Fast, Multi-Protocol Brute-Force Attacks | https://medium.com/@stealthsecurity/how-to-use-medusa-for-fast-multi-protocol-brute-force-attacks-0627997c5686?source=rss------bug_bounty-5 | Stealth Security | ethical-hacking, penetration-testing, cybersecurity, bug-bounty, hacking | 30-Sep-2024 |
| Prototype Pollution: How a JavaScript Quirk Can Lead to Complete Application Takeover | https://infosecwriteups.com/prototype-pollution-how-a-javascript-quirk-can-lead-to-complete-application-takeover-9adb5e4f6b6b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, hacking, cybersecurity, technology | 30-Sep-2024 |
| OWASP juice shop -How I get account takeover from XSS | https://medium.com/@abdo-eg/owasp-juice-shop-how-i-get-account-takeover-from-xss-ae3cfc978381?source=rss------bug_bounty-5 | Abdullah Ahmed | xss-attack, owasp, hashing, bug-bounty, ato | 29-Sep-2024 |
| Hacking with Linux: Your Ultimate Guide to Cyber Security Mastery | https://medium.com/@RaunakGupta1922/hacking-with-linux-your-ultimate-guide-to-cyber-security-mastery-e8f8bb38510c?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | cybersecurity, linux, ethical-hacking, bug-bounty, hacking | 29-Sep-2024 |
| OWASP juice-shop login as an admin using SQLi and OSINT | https://medium.com/@abdo-eg/owasp-juice-shop-login-as-an-admin-using-sqli-and-osint-90c4abc4322b?source=rss------bug_bounty-5 | Abdullah Ahmed | web-security, ethical-hacking, owasp, bug-bounty, penetration-testing | 29-Sep-2024 |
| H7CTF — WEB CHALLENGES | https://medium.com/@josangeorge27/h7ctf-web-challenges-db1883775dfd?source=rss------bug_bounty-5 | Josan George | ctf, ctf-walkthrough, cybersecurity, bug-bounty, web-application-security | 29-Sep-2024 |
| Essential Port Scanning Skills for Bug Bounty Hunters | https://bevijaygupta.medium.com/essential-port-scanning-skills-for-bug-bounty-hunters-f0e09f3612ce?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, port-scanning, bug-zero, bugs, bug-bounty-tips | 29-Sep-2024 |
| Bypassing Filters: SSRF Exploitation via DNS Rebinding with Just 1 in 30 Successful Requests | https://mokhansec.medium.com/bypassing-filters-ssrf-exploitation-via-dns-rebinding-with-just-1-in-30-successful-requests-2fdc3a9cfd7d?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-writeup, bug-bounty-tips, bug-bounty, ssrf, bugs | 29-Sep-2024 |
| Privacy concern bug | https://osintteam.blog/privacy-concern-bug-72b30aead215?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, tips, bug-bounty, cybersecurity, hacking | 29-Sep-2024 |
| How to Find Bugs and Vulnerabilities Using ChatGPT: Guaranteed Results | https://medium.com/@shaikhminhaz1975/how-to-find-bugs-and-vulnerabilities-using-chatgpt-guaranteed-results-3b630fae4691?source=rss------bug_bounty-5 | Shaikh Minhaz | bug-bounty, chatgpt, penetration-testing, cybersecurity, how-to | 29-Sep-2024 |
| Find Vulnerabilities With This Single Nmap Command | https://medium.com/@josuofficial327/find-vulnerabilities-with-this-single-nmap-command-a4476c16c82c?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | ethical-hacking, cybersecurity, vulnerability, bug-bounty-tips, bug-bounty | 29-Sep-2024 |
| Performing a Dependency Confusion Attack with Remote Code Execution (RCE): A Step-by-Step Guide | https://medium.com/@360Security/performing-a-dependency-confusion-attack-with-remote-code-execution-rce-a-step-by-step-guide-8d6055aa53e4?source=rss------bug_bounty-5 | Anand | vapt, cybersecurity, sdlc, rce, bug-bounty | 29-Sep-2024 |
| Critical bug in MediaTek Chips:CVE-2024–20017 | https://medium.com/@dudleydaniel.raj2005/critical-bug-in-mediatek-chips-cve-2024-20017-6e955ad56923?source=rss------bug_bounty-5 | Hydra_101 | mediatek, chips, cybersecurity, bug-bounty, wifi | 29-Sep-2024 |
| Mastering Advanced Google Dorks for Ethical Hacking and Vulnerability Discovery | https://osintteam.blog/mastering-advanced-google-dorks-for-ethical-hacking-and-vulnerability-discovery-6d9e3dde0433?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, cybersecurity, rewards, medium, google-dork | 29-Sep-2024 |
| SMTP/s — Port 25,465,587 For pentesters | https://medium.com/@verylazytech/smtp-s-port-25-465-587-3e5706e081e9?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, cybersecurity, smtp, penetration-testing, hacking | 29-Sep-2024 |
| how i found union based sql injection in hackerone public vdp program? | https://doordiefordream.medium.com/how-i-found-union-based-sql-injection-in-hackerone-public-vdp-program-7c76d61f6c77?source=rss------bug_bounty-5 | cybersecurity researcher | ethical-hacking, cyber-security-awareness, bug-bounty-writeup, bug-bounty, cybersecurity | 29-Sep-2024 |
| KidRecon: The Ultimate Automated Subdomain Reconnaissance Tool for Ethical Hackers | https://angixblack.medium.com/kidrecon-the-ultimate-automated-subdomain-reconnaissance-tool-for-ethical-hackers-afb8ed8ea883?source=rss------bug_bounty-5 | Angix black | infosec, bug-bounty, recon, automation, bug-bounty-tips | 29-Sep-2024 |
| Server-Side Request Forgery (SSRF): How Attackers Can Exploit Internal Networks | https://systemweakness.com/server-side-request-forgery-ssrf-how-attackers-can-exploit-internal-networks-417ed78ae69b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, careers, technology, cybersecurity | 29-Sep-2024 |
| Best Bug Bounty and VA/PT Tools in 2024: Use Cases & Commands | https://medium.com/@anandrishav2228/best-bug-bounty-and-va-pt-tools-in-2024-use-cases-commands-42986d594190?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, bug-bounty, company, pentesting, computer-science | 29-Sep-2024 |
| Why is Bug Triage Important in Software Testing? | https://medium.com/@divyarajsinhdev/why-is-bug-triage-important-in-software-testing-678decfb727f?source=rss------bug_bounty-5 | Divyarajsinh Dodia | automation, qa, bug-bounty, testing | 29-Sep-2024 |
| Understanding Bug Triage: A Crucial Process for Efficient Software Testing | https://medium.com/@divyarajsinhdev/understanding-bug-triage-a-crucial-process-for-efficient-software-testing-790b9b353177?source=rss------bug_bounty-5 | Divyarajsinh Dodia | test, qa, automation, bug-bounty, testing | 29-Sep-2024 |
| DVWA : Cross Site Scripting (XSS) Vulnerability Solution (Low Security Level) | https://medium.com/@Kamal_S/dvwa-cross-site-scripting-xss-vulnerability-solution-low-security-level-452396997b5a?source=rss------bug_bounty-5 | Kamal S | security-testing, xs, bug-bounty, dvwa, owasp | 29-Sep-2024 |
| Mac Spoofing | https://bob218.medium.com/mac-spoofing-ad0b180f3fad?source=rss------bug_bounty-5 | bob218 | cybersecurity, network-security, cyberattack, osint, bug-bounty | 29-Sep-2024 |
| Life Sucks P-1 | https://medium.com/@janpreet9697/life-sucks-p-1-182d702bab02?source=rss------bug_bounty-5 | Janpreet | cybersecurity, life, engineering, bug-bounty, motivation | 29-Sep-2024 |
| How Bug Bounty Programs can enable widespread fraud | https://medium.com/@hacktheplanet/how-bug-bounty-programs-can-enable-widespread-fraud-b027f36a49ef?source=rss------bug_bounty-5 | SirHaxAlot | bug-bounty, hacking, fraud, cybersecurity | 28-Sep-2024 |
| Stories of a sporadic bug bounty hunter | https://jayaye15.medium.com/stories-of-a-sporadic-bug-bounty-hunter-a09cd32cf0a2?source=rss------bug_bounty-5 | jb00gie | cybersecurity, sql-injection, bug-bounty | 28-Sep-2024 |
| My First Bounty Report Experience | https://medium.com/@sreedeepcs.gurukripa/my-first-bounty-report-experience-71095e5c34cd?source=rss------bug_bounty-5 | ambuhecker | bug-bounty, cybersecurity, bug-hunting, hacking | 28-Sep-2024 |
| Account Takeover and DoS: Weaponizing Enumeration, IDOR, and Registration Flooding | https://medium.com/@tusharpuri6/account-takeover-and-dos-weaponizing-enumeration-idor-and-registration-flooding-4b88fce20f4b?source=rss------bug_bounty-5 | Tusharpuri | penetration-testing, bug-bounty, offensive-security, application-security, infosec | 28-Sep-2024 |
| Exploiting a Logic Bug in Discounts Code Generation | https://medium.com/@sam_0x0/exploiting-a-logic-bug-in-discount-code-generation-a7f624bb396f?source=rss------bug_bounty-5 | Eslam Omar | bug-bounty, logic-bug, hackerone, bug-bounty-tips, bug-bounty-writeup | 28-Sep-2024 |
| Exploring the Role of Port Scanning in Bug Bounty Hunting | https://bevijaygupta.medium.com/exploring-the-role-of-port-scanning-in-bug-bounty-hunting-a365e9006b6e?source=rss------bug_bounty-5 | Vijay Gupta | port-scanning, bug-bounty-hunter, scanning, bug-bounty, bugs | 28-Sep-2024 |
| Essential Tools for Bug Bounty Hunters | https://medium.com/@jatniwalafizza786/essential-tools-for-bug-bounty-hunters-3c2788cf64ae?source=rss------bug_bounty-5 | Jatniwalafizza | cybersecurity, cybersecurity-course, bug-bounty-courses, bug-bounty | 28-Sep-2024 |
| 500$ Email Verification Token Leaks in Request | https://medium.com/@0xchoudhary/500-email-verification-token-leaks-in-request-4f0b5ff4b121?source=rss------bug_bounty-5 | Sushil Choudhary | hackerone, bug-bounty, hacking, bounty-program, bugbounty-writeup | 28-Sep-2024 |
| Top 20 Must-Have Hacking Gadgets for Cybersecurity Professionals | https://medium.com/@ajaynaikhack/top-20-must-have-hacking-gadgets-for-cybersecurity-professionals-bec4dfe896cf?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, bug-bounty, gadgets, hacking, information-security | 28-Sep-2024 |
| Security Misconfiguration: Identifying and Preventing This Common Vulnerability | https://medium.com/@mrutunjayasenapati0/security-misconfiguration-identifying-and-preventing-this-common-vulnerability-14ab1c4989ac?source=rss------bug_bounty-5 | Mrutunjaya Senapati | vulnerability, hacking, security-misconfiguration, bug-bounty, penetration-testing | 28-Sep-2024 |
| Insecure Direct Object References (IDOR): Understanding and Preventing This Vulnerability | https://medium.com/@mrutunjayasenapati0/insecure-direct-object-references-idor-understanding-and-preventing-this-vulnerability-4c8e831f17b4?source=rss------bug_bounty-5 | Mrutunjaya Senapati | bug-bounty, idor, idor-vulnerability, vulnerability, hacking | 28-Sep-2024 |
| Exploiting a Logic Bug in Discount Codes Generation | https://medium.com/@sam_0x0/exploiting-a-logic-bug-in-discount-code-generation-a7f624bb396f?source=rss------bug_bounty-5 | Eslam Omar | bug-bounty, logic-bug, hackerone, bug-bounty-tips, bug-bounty-writeup | 28-Sep-2024 |
| Why Go is the Perfect Choice for CLIs | https://medium.com/@rezauditore/why-go-is-the-perfect-choice-for-clis-477281989ace?source=rss------bug_bounty-5 | rezauditore | peace, lgbtq, golang, bug-bounty, programming | 28-Sep-2024 |
| Exposed private key leads to Google cloud service account takeover — Privilege Escalation | https://vettrivel007.medium.com/exposed-private-key-leads-to-google-cloud-service-account-takeover-privilege-escalation-6f031e20c819?source=rss------bug_bounty-5 | VETTRIVEL | bug-bounty-tips, bounty-program, pentesting, bug-bounty, cybersecurity | 28-Sep-2024 |
| Broken Authentication: A Common Vulnerability Exposing User Accounts | https://cyberw1ng.medium.com/broken-authentication-a-common-vulnerability-exposing-user-accounts-2b48b6f9b644?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, careers, cybersecurity, technology | 28-Sep-2024 |
| Nuclei ile Zafiyet Tespiti | https://medium.com/@alperenkeskk/nuclei-ile-zafiyet-tespiti-ec94aa180aab?source=rss------bug_bounty-5 | Alperen Keskin | cyber-security-awareness, bug-bounty-tips, security, tools, bug-bounty | 28-Sep-2024 |
| HackTheBox Broken Authentication (Skills Assessment) | https://medium.com/@N0UR0X01/hackthebox-broken-authentication-skills-assessment-c43feaab1a52?source=rss------bug_bounty-5 | N0UR0x01 | htb-writeup, htb-academy, bug-bounty, htb-academy-writeup, broken-authentication | 28-Sep-2024 |
| How to google dork effectively for private and other bug bounty programs | https://medium.com/@malikirtizameg/how-to-google-dork-effectively-for-private-and-other-bug-bounty-program-d54f9e7b4d57?source=rss------bug_bounty-5 | bug bounty | penetration-testing, python, bug-bounty, cybersecurity, hacking | 28-Sep-2024 |
| Full Account Takeover via Facebook OAuth Misconfiguration | https://medium.com/@0x_xnum/full-account-takeover-via-facebook-oauth-misconfiguration-9e30fe1c1da1?source=rss------bug_bounty-5 | Ahmed Tarek | bug-bounty, oauth, bugbounty-writeup, bugcrowd, account-takeover | 28-Sep-2024 |
| SQL injection attack, querying the database type and version on MySQL and Microsoft | https://medium.com/@codingbolt.in/sql-injection-attack-querying-the-database-type-and-version-on-mysql-and-microsoft-162715c6cd0e?source=rss------bug_bounty-5 | codingbolt | sql-injection-attack, sql-injection, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 28-Sep-2024 |
| SQL injection attack, querying the database type and version on Oracle | https://medium.com/@codingbolt.in/sql-injection-attack-querying-the-database-type-and-version-on-oracle-f78a035c654d?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, sql-injection, bug-bounty-writeup, bug-bounty, sql-injection-attack | 28-Sep-2024 |
| ORM HQL Injection | https://medium.com/@oscuridad1010/orm-hql-injection-e072207e8942?source=rss------bug_bounty-5 | Gamiel Manbiotan | infosec, hackerone, bugcrowd, developer, bug-bounty | 28-Sep-2024 |
| How to use built with for bugbounty | https://osintteam.blog/how-to-use-built-with-for-bugbounty-9f58ba501f5a?source=rss------bug_bounty-5 | loyalonlytoday | hacking, bug-bounty-tips, cybersecurity, bug-bounty, recon | 28-Sep-2024 |
| P4 bug’s and their POC steps | Part 5 | https://medium.com/@socalledhacker/p4-bugs-and-their-poc-steps-part-5-242eddd02fd0?source=rss------bug_bounty-5 | socalledhacker | infosec, hacking, bug-bounty, web-security, bug-bounty-tips | 28-Sep-2024 |
| Level Up your Bug Bounty Game — to P1s and P2s Series : PART 1 | https://medium.com/@nireshpandian19/level-up-your-bug-bounty-game-to-p1s-and-p2s-series-part-1-edaa702c8499?source=rss------bug_bounty-5 | JAI NIRESH J | bug-bounty-writeup, bug-bounty, cybersecurity, ethical-hacking, bug-hunting | 27-Sep-2024 |
| Web App Hacking Tips & Trick—Celah File Upload — Bagian 1 | https://medium.com/@mrp.bpp/web-app-hacking-tips-trick-celah-file-upload-bagian-1-1df16a844279?source=rss------bug_bounty-5 | Mada Perdhana | file-upload-vulnerability, hacking, bug-bounty-tips, bug-bounty, web-hacking | 27-Sep-2024 |
| Sedikit Tips & Trick Saat Testing API — Bagian 2 | https://medium.com/@mrp.bpp/sedikit-tips-trick-saat-testing-api-bagian-2-a548a85bcea6?source=rss------bug_bounty-5 | Mada Perdhana | web-hacking, api-hacing, bug-bounty, bug-hunting, bug-bounty-tips | 27-Sep-2024 |
| Sedikit Tips & Trick Saat Testing API — Bagian 1 | https://medium.com/@mrp.bpp/sedikit-tips-trick-saat-testing-api-bagian-1-3983017fec4d?source=rss------bug_bounty-5 | Mada Perdhana | hacking-apis, web-hacking, bug-bounty, bug-bounty-tips, bug-hunting | 27-Sep-2024 |
| Deep Dive in Reconnaissance (Chapter 1 [part-2] — Root Domain Enumeration) | https://medium.com/@bitthr3at/deep-dive-in-reconnaissance-chapter-1-part-2-root-domain-enumeration-87765a50d125?source=rss------bug_bounty-5 | Naman Gupta (Bitthr3at) | appsec, recon, osint, attack-surface-discovery, bug-bounty | 27-Sep-2024 |
| How to Become a Bug Bounty Hunter: A Complete Guide for Beginners | https://medium.com/@anandrishav2228/how-to-become-a-bug-bounty-hunter-a-complete-guide-for-beginners-316c27bb2c8c?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, hackerspaces, hacking, website, cybersecurity | 27-Sep-2024 |
| SQL injection vulnerability allowing login bypass | https://medium.com/@codingbolt.in/sql-injection-vulnerability-allowing-login-bypass-7f1de7d77a6a?source=rss------bug_bounty-5 | codingbolt | bug-bounty, sql-injection, bug-bounty-tips, bug-bounty-writeup, cybersecurity | 27-Sep-2024 |
| SQL injection vulnerability in WHERE clause allowing retrieval of hidden data | https://medium.com/@codingbolt.in/sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data-8ea2be5f13df?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, bug-bounty-writeup, sql-injection, bugs, bug-bounty | 27-Sep-2024 |
| NMAP Usage | https://medium.com/@mohanmecktro/nmap-usage-780a7f4ccdcc?source=rss------bug_bounty-5 | Mohan Mecktro | hacking-tools, nmap, bug-bounty, penetration-testing, kali | 27-Sep-2024 |
| Web App Hacking Tips & Trick — Celah File Upload — Bagian 2 | https://medium.com/@mrp.bpp/web-app-hacking-tips-trick-celah-file-upload-bagian-2-fdc536d3045e?source=rss------bug_bounty-5 | Mada Perdhana | file-upload-vulnerability, bug-bounty, web-hacking, bug-bounty-tips, hacking | 27-Sep-2024 |
| Cross-Site Request Forgery (CSRF): Understanding the Threat and How to Mitigate It | https://medium.com/@mrutunjayasenapati0/cross-site-request-forgery-csrf-understanding-the-threat-and-how-to-mitigate-it-fb5db007f13b?source=rss------bug_bounty-5 | Mrutunjaya Senapati | hunting, hacking, vulnerability, csrf, bug-bounty | 27-Sep-2024 |
| 5 Key Factors to Help You Choose the Best Bug Bounty Program on HackerOne | https://medium.com/@blackarazi/5-key-factors-to-help-you-choose-the-best-bug-bounty-program-on-hackerone-b27bb2159d07?source=rss------bug_bounty-5 | Azhari Harahap | bug-bounty-tips, hackerone, bug-bounty-program, bug-bounty | 27-Sep-2024 |
| I Spent a Month on a Private Program and Earned $$$$$ | https://mokhansec.medium.com/i-spent-a-month-on-a-private-program-and-earned-c57b4c3d7dba?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-tips, bugs, bug-bounty | 27-Sep-2024 |
| What is Bug Bounty | https://medium.com/@iabhipathak/what-is-bug-bounty-fc9fe6a73e16?source=rss------bug_bounty-5 | Abhinav Pathak | information-security, hacking, bug-bounty, security, cybersecurity | 27-Sep-2024 |
| Unlocking Success: My Journey to Bypassing 2FA and Winning My First Bounty $800 | https://medium.com/@mihad0x1/unlocking-success-my-journey-to-bypassing-2fa-and-winning-my-first-bounty-800-c6e7654feea4?source=rss------bug_bounty-5 | mihad0x1 | hacking, security-research, bugbounty-writeup, bug-bounty, hacker | 27-Sep-2024 |
| High vs. Low Severity Bugs: A Complete Guide to Bug Classification in Software and Cybersecurity | https://medium.com/@shoaibjamal663/classification-of-bugs-high-vs-low-severity-bugs-62ce16630ddf?source=rss------bug_bounty-5 | Muhammad Shoaib Jamal | software-development, bugs, risk-management, cybersecurity, bug-bounty | 27-Sep-2024 |
| NoSQL Injection Attacks | https://medium.com/@majix_de/nosql-injection-attacks-1397fd366c28?source=rss------bug_bounty-5 | Majix | hacking, bug-bounty, penetration-testing, nosql, bug-bounty-tips | 27-Sep-2024 |
| ️ Information Disclosure Vulnerability: Exposing API Keys and Tokens in a Private Program | https://medium.com/@kumawatabhijeet2002/%EF%B8%8F-information-disclosure-vulnerability-exposing-api-keys-and-tokens-in-a-private-program-e06c4d110552?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, information-disclosure, vulnerability, bug-bounty-tips, pii-data | 27-Sep-2024 |
| From Enumeration to Takeover: Crack the Code of Subdomain Vulnerabilities! | https://enigma96.medium.com/from-enumeration-to-takeover-crack-the-code-of-subdomain-vulnerabilities-4fea92cd0374?source=rss------bug_bounty-5 | enigma | bug-bounty-tips, pentesting, bug-bounty, bugs, hacking | 27-Sep-2024 |
| How a Simple Exploit Can Lead to a $500 Bounty — Cache Deception | https://infosecwriteups.com/how-a-simple-exploit-can-lead-to-a-500-bounty-cache-deception-8da0583f6013?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, technology, bug-bounty, cybersecurity, careers | 27-Sep-2024 |
| How I Found an Authentication Flaw in a Chat Feature | https://medium.com/@krishnast545/my-first-high-severity-bug-how-i-found-an-authentication-flaw-in-a-chat-feature-58fb0f939a4a?source=rss------bug_bounty-5 | Krishna | bugs, bug-bounty | 27-Sep-2024 |
| Privilege Escalation on Amazon Linux (SageMaker) | https://medium.com/@rickconsole/privilege-escalation-on-amazon-linux-sagemaker-cf115042ea5f?source=rss------bug_bounty-5 | Rick Console | bug-bounty, cloud-computing, cybersecurity, aws, penetration-testing | 27-Sep-2024 |
| Web App Hacking Tips & Trick — Celah File Upload — Bagian 3 | https://medium.com/@mrp.bpp/web-app-hacking-tips-trick-celah-file-upload-bagian-3-8ec192d1633b?source=rss------bug_bounty-5 | Mada Perdhana | hacking, bug-hunting, bug-bounty-tips, bug-bounty, file-upload-vulnerability | 27-Sep-2024 |
| Web Cache Poisoning with Multiple Headers | https://medium.com/@rcxsecurity/web-cache-poisoning-with-multiple-headers-d4e27497288e?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Cafe | information-security, information-technology, penetration-testing, cybersecurity, bug-bounty | 27-Sep-2024 |
| It’s not a bug. It really is a feature. | https://medium.com/@info_11548/its-not-a-bug-it-really-is-a-feature-b758f1454970?source=rss------bug_bounty-5 | Cloette Zager with FranGuardian Corporation | bug-bounty, features, featured, featured-stories, bugs | 27-Sep-2024 |
| Vulnerability: Multiple Vulnerabilities in Linux CUPS (CVSS 9.9) | https://infosecwriteups.com/vulnerability-multiple-vulnerabilities-in-linux-cups-cvss-9-9-49dbdcd73cb0?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, vulnerability, rewards, information-security, cybersecurity | 27-Sep-2024 |
| my first easy IDOR in a big company | https://medium.com/@malikirtizameg/my-first-easy-idor-in-a-big-company-104ee6c4a7ff?source=rss------bug_bounty-5 | bug bounty | bug-bounty-tips, cybersecurity, bug-bounty, hacking, ethical-hacking | 27-Sep-2024 |
| Shodan Revealed: How to Discover Vulnerabilities Across the Web | https://medium.com/@RejuKole.com/shodan-revealed-how-to-discover-vulnerabilities-across-the-web-925a382bb9bd?source=rss------bug_bounty-5 | Reju Kole | bug-bounty, ethical-hacking, shodan, bug-bounty-tips, web | 27-Sep-2024 |
| The Art of the Phantom Deposit: a study on vulnerabilities in crypto exchanges | https://medium.com/@silviosaturnowk/the-art-of-the-phantom-deposit-a-study-on-vulnerabilities-in-crypto-exchanges-3a356153bfe2?source=rss------bug_bounty-5 | Silvio Saturno | exploit, cybersecurity, bug-bounty, smart-contracts, solidity | 27-Sep-2024 |
| How to install Subdominator & how to find subdomains using Subdominator !! | https://medium.com/@sherlock297/how-to-install-subdominator-how-to-find-subdomains-using-subdominator-fe9b48be2aea?source=rss------bug_bounty-5 | Ravindra Dagale | windows, tools, tutorial, bug-bounty, subdominator | 26-Sep-2024 |
| 10 Essential Blog Sites For Bug Bounty Hunters | https://medium.com/@RaunakGupta1922/10-essential-blog-sites-for-bug-bounty-hunters-8309cbbe3756?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | knowledge, learning, articles, hacking, bug-bounty | 26-Sep-2024 |
| Deep Dive in Reconnaissance (Chapter 1 [part-1] — Root Domain Enumeration) | https://medium.com/@bitthr3at/deep-dive-in-reconnaissance-chapter-1-part-1-root-domain-enumeration-7ddfda1283fd?source=rss------bug_bounty-5 | Naman Gupta (Bitthr3at) | osint, appsec, recon, attack-surface-discovery, bug-bounty | 26-Sep-2024 |
| Exploiting SMTP on Metasploitable 2: Unveiling the Power of Port 25 | https://medium.com/@thefellowhacker/exploiting-smtp-on-metasploitable-2-unveiling-the-power-of-port-25-4fab583855f8?source=rss------bug_bounty-5 | Taahir Mujawarr | hacker, hacking, cybersecurity, technology, bug-bounty | 26-Sep-2024 |
| Cross-Site Scripting (XSS): Understanding and Mitigating a Common Web Vulnerability | https://medium.com/@mrutunjayasenapati0/cross-site-scripting-xss-understanding-and-mitigating-a-common-web-vulnerability-fe82824c24f5?source=rss------bug_bounty-5 | Mrutunjaya Senapati | hacking, hunting, xss-attack, vulnerability, bug-bounty | 26-Sep-2024 |
| Story of Time Machines: Where Archived URLs and Juicy Information Handshake Each Other | https://medium.com/@security.tecno/story-of-time-machines-where-archived-urls-and-juicy-information-handshake-each-other-11efd831da46?source=rss------bug_bounty-5 | TECNO Security | security, bug-bounty, research, hacking | 26-Sep-2024 |
| Vulnerable WordPress August 2024 (Museum of Ostad Bohtouni) | https://medium.com/@onhexgroup/vulnerable-wordpress-august-2024-museum-of-ostad-bohtouni-dad683a3ef15?source=rss------bug_bounty-5 | Onhexgroup | wordpress-security, wordpress, bug-bounty, info, cybersecurity | 26-Sep-2024 |
| Top 7 Free Cybersecurity Tools Every Beginner Must Try Today! | https://medium.com/@paritoshblogs/top-7-free-cybersecurity-tools-every-beginner-must-try-today-44eea1aa91b8?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, projects, cybersecurity, free | 26-Sep-2024 |
| Analyzing a Real HTTP Request Smuggling Attack. What Happened here? | https://medium.com/@rezauditore/analyzing-a-real-http-request-smuggling-attack-what-happened-here-19dbc6edf9a4?source=rss------bug_bounty-5 | rezauditore | pentesting, bug-bounty, ctf-writeup, lgbtq, tips | 26-Sep-2024 |
| CVE-2024–45519 in Zimbra — Bounty 1000 USD | https://infosecwriteups.com/cve-2024-45519-in-zimbra-bounty-1000-usd-0304b2a813f3?source=rss------bug_bounty-5 | Ajay Naik | hacking, vulnerability, bug-bounty, rewards, cybersecurity | 26-Sep-2024 |
| Mastering IDS: A Comprehensive Guide with Snort Implementation | https://medium.com/@hackeraakash2002/mastering-ids-a-comprehensive-guide-with-snort-implementation-4ccc8192a0cf?source=rss------bug_bounty-5 | HackwithAJ | network-security, bug-bounty, hacking, cyber-security-awareness, ids-ips | 26-Sep-2024 |
| SSH Hacking: How to Exploit Port 22 Vulnerabilities for Penetration Testing | https://medium.com/@verylazytech/ssh-hacking-how-to-exploit-port-22-vulnerabilities-for-penetration-testing-601d257ee491?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, hacking, penetration-testing, bug-bounty, exploit | 26-Sep-2024 |
| Bug bounty – Recon Tips for subdomain enumeration | https://medium.com/@tharunteja725_8686/bug-bounty-recon-tips-for-subdomain-enumeration-0b3d51ad1cc8?source=rss------bug_bounty-5 | Chidurala Tharun teja | bug-bounty-tips, bug-bounty-writeup, bug-bounty, cybersecurity, oscp | 26-Sep-2024 |
| Akamai WAF Bypass Lead To Discover 30 XSS bugs | https://medium.com/@nagashygaballah/akamai-waf-bypass-lead-to-discover-30-xss-bugs-bea0f8be1dd4?source=rss------bug_bounty-5 | 111xNagashy | tips-and-tricks, cybersecurity, xss-attack, penetration-testing, bug-bounty | 26-Sep-2024 |
| SUBDOMAIN ENUMERATION — BUGBOUNTY | https://medium.com/@tharunteja725_8686/subdomain-enumeration-bugbounty-2831b70ee735?source=rss------bug_bounty-5 | Chidurala Tharun teja | penetration-testing, bug-bounty, cybersecurity, oscp, bug-bounty-tips | 26-Sep-2024 |
| Reflected XSS with event handlers and href attributes blocked | https://medium.com/@codingbolt.in/reflected-xss-with-event-handlers-and-href-attributes-blocked-b333eb18942e?source=rss------bug_bounty-5 | codingbolt | xss-attack, xss-vulnerability, cyberattack, cybersecurity, bug-bounty | 26-Sep-2024 |
| Reflected XSS with AngularJS sandbox escape and CSP | https://medium.com/@codingbolt.in/reflected-xss-with-angularjs-sandbox-escape-and-csp-e68867138b6f?source=rss------bug_bounty-5 | codingbolt | xss-attack, cybersecurity, bug-bounty, cybercrime, bug-bounty-tips | 26-Sep-2024 |
| Reflected XSS with AngularJS sandbox escape without strings | https://medium.com/@codingbolt.in/reflected-xss-with-angularjs-sandbox-escape-without-strings-e434c669ac56?source=rss------bug_bounty-5 | codingbolt | bug-bounty, xss-attack, cyberattack, cybersecurity, bug-bounty-tips | 26-Sep-2024 |
| Exploiting XSS to perform CSRF | https://medium.com/@codingbolt.in/exploiting-xss-to-perform-csrf-1aac291690bd?source=rss------bug_bounty-5 | codingbolt | xss-attack, bug-bounty-writeup, bug-bounty-tips, bug-bounty, cybersecurity | 26-Sep-2024 |
| How To Configure Metasploitable Machine To Hack? | Primary Hacking School #3 | https://medium.com/@nnface/how-to-configure-metasploitable-machine-to-hack-primary-hacking-school-3-083cd63c47cf?source=rss------bug_bounty-5 | NnFace | hacking-tools, hacking, bug-bounty, cybersecurity, kali-linux | 26-Sep-2024 |
| White Hat vs Black Hat Hackers: What’s the Real Difference & Which One Are You? | https://codingrasi.medium.com/white-hat-vs-black-hat-hackers-whats-the-real-difference-which-one-are-you-f2c7327d77a7?source=rss------bug_bounty-5 | CodingRasi | youtube-creators, hacking, bug-bounty, ethical-hacking, hacker | 26-Sep-2024 |
| Reflected XSS protected by CSP, with CSP bypass | https://medium.com/@codingbolt.in/reflected-xss-protected-by-csp-with-csp-bypass-58d46ec1fc71?source=rss------bug_bounty-5 | codingbolt | xss-attack, xss-vulnerability, bug-bounty, bug-bounty-tips, cybersecurity | 26-Sep-2024 |
| Reflected XSS protected by very strict CSP, with dangling markup attack | https://medium.com/@codingbolt.in/reflected-xss-protected-by-very-strict-csp-with-dangling-markup-attack-029d16b86163?source=rss------bug_bounty-5 | codingbolt | xss-vulnerability, xss-attack, bug-bounty-tips, bug-bounty, cybersecurity | 26-Sep-2024 |
| SSRF Simplified (OWASP 2021-A10) | https://medium.com/@kannnannmk/ssrf-simplified-owasp-2021-a10-62586a3468f4?source=rss------bug_bounty-5 | Neelamegha Kannan S | penetration-testing, vulnerability, cybersecurity, bug-bounty, information-security | 26-Sep-2024 |
| Reflected XSS in a JavaScript URL with some characters blocked | https://medium.com/@codingbolt.in/reflected-xss-in-a-javascript-url-with-some-characters-blocked-7decfa413c79?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, cybersecurity, bugs, xss-attack, bug-bounty | 26-Sep-2024 |
| Finding subdomains using security trails api key | https://osintteam.blog/finding-subdomains-using-security-trails-api-key-8b45d5a4629e?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, hacking, bug-bounty-tips, cybersecurity, bug-bounty | 26-Sep-2024 |
| IDORS — leaking 1.5 crore user details | https://medium.com/@nireshpandian19/idors-leaking-1-5-crore-user-details-5bbc3b9368e2?source=rss------bug_bounty-5 | JAI NIRESH J | bug-bounty, idor-vulnerability, ethical-hacking, idor, cybersecurity | 25-Sep-2024 |
| Exploring the Role of Port Scanning in Bug Bounty Hunting | https://bevijaygupta.medium.com/exploring-the-role-of-port-scanning-in-bug-bounty-hunting-169a1d723bb0?source=rss------bug_bounty-5 | Vijay Gupta | port-scanning, bug-bounty, bugs, bug-bounty-writeup, bug-bounty-tips | 25-Sep-2024 |
| My First Easy IDOR: A Simple Guide to Understanding Insecure Direct Object References | https://medium.com/@Alireza.salmani/my-first-easy-idor-a-simple-guide-to-understanding-insecure-direct-object-references-8b48aa1da8ea?source=rss------bug_bounty-5 | Alireza Salmani | bug-bounty, access-control, ethical-hacking, web-application-security, cybersecurity | 25-Sep-2024 |
| Golang edge case: when “defer” will never work out in your code | https://waclawthedev.medium.com/golang-edge-case-when-defer-will-never-work-out-in-your-code-f783518679e9?source=rss------bug_bounty-5 | Wacław The Developer | golang, bug-bounty, defer, go, backend | 25-Sep-2024 |
| Finding a p4 as per bugcrowd vrt | https://medium.com/@loyalonlytoday/finding-a-p4-as-per-bugcrowd-vrt-9f08278a75ae?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, penetration-testing, web-hacking, bugbounty-writeup, bugs | 25-Sep-2024 |
| How I Discovered DOM XSS by Analyzing Javascript Code | https://medium.com/@fajarsylvana/how-i-discovered-dom-xss-by-analyzing-javascript-code-6fa57c680a0e?source=rss------bug_bounty-5 | Fajar Sylvana | pentesting, bug-bounty-tips, hacking, penetration-testing, bug-bounty | 25-Sep-2024 |
| FTP Hacking: How to Exploit Port 21 Vulnerabilities for Penetration Testing | https://medium.com/@verylazytech/ftp-hacking-how-to-exploit-port-21-vulnerabilities-for-penetration-testing-bbd65e2238da?source=rss------bug_bounty-5 | Very Lazy Tech | network-security, ethical-hacking, bug-bounty, cybersecurity, penetration-testing | 25-Sep-2024 |
| Cracking the Code: How I Took Over Admin Accounts Across Organizations | https://medium.com/@ismailsaid1603/cracking-the-code-how-i-took-over-admin-accounts-across-organizations-5d135ba152b4?source=rss------bug_bounty-5 | Esmail Saied (0xSp1DeR) | tips-and-tricks, hackerone, bugcrowd, bugbounty-writeup, bug-bounty | 25-Sep-2024 |
| How I proved impact with Google Map API Key | https://r0b0ts.medium.com/how-i-proved-impact-with-google-map-api-key-7aa801616abb?source=rss------bug_bounty-5 | r0b0ts | bug-bounty-writeup, bug-bounty-tips, bugbounty-writeup, bug-bounty, bug-bounty-hunter | 25-Sep-2024 |
| website leaking otp in inspect elemet | https://osintteam.blog/website-leaking-otp-in-inspect-elemet-8da71ae4004d?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, hacking, bugbounty-writeup, bug-bounty-tips, penetration-testing | 25-Sep-2024 |
| Reflected XSS into a JavaScript string with single quote and backslash escaped | https://medium.com/@codingbolt.in/reflected-xss-into-a-javascript-string-with-single-quote-and-backslash-escaped-621b6a187f04?source=rss------bug_bounty-5 | codingbolt | bugs, bug-bounty-tips, xss-attack, bug-bounty, xss-vulnerability | 25-Sep-2024 |
| Reflected XSS in canonical link tag | https://medium.com/@codingbolt.in/reflected-xss-in-canonical-link-tag-c4902808a6e7?source=rss------bug_bounty-5 | codingbolt | xss-attack, bug-hunting, bug-bounty, bug-bounty-tips, bugs | 25-Sep-2024 |
| Kerentanan Kritis : Bypass Autentikasi (CVE-2024–7593) pada Ivanti vTM: Penjelasan dan Tindakan… | https://medium.com/@mrp.bpp/kerentanan-bypass-autentikasi-kritis-cve-2024-7593-pada-ivanti-vtm-penjelasan-dan-tindakan-77d159f53199?source=rss------bug_bounty-5 | Mada Perdhana | bug-bounty, hacking, ivanti-service-manager, exploit, 0-day-attacks | 25-Sep-2024 |
| Eksfiltrasi Data Menggunakan Komunikasi DNS (Out-of-Band) | https://medium.com/@mrp.bpp/eksfiltrasi-data-menggunakan-komunikas-idns-out-of-band-7932a1ab335f?source=rss------bug_bounty-5 | Mada Perdhana | oob, bug-bounty, bug-bounty-tips, hacking | 25-Sep-2024 |
| Exploiting cross-site scripting to steal cookies | https://medium.com/@codingbolt.in/exploiting-cross-site-scripting-to-steal-cookies-8f57e316e8d3?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, xss-attack, xss-vulnerability, cookies, bug-bounty | 25-Sep-2024 |
| Understanding Common Web Vulnerabilities: A Guide for Beginners | https://medium.com/@mrutunjayasenapati0/understanding-common-web-vulnerabilities-a-guide-for-beginners-398e8987cc4f?source=rss------bug_bounty-5 | Mrutunjaya Senapati | beginner, bug-bounty, vulnerability, beginners-guide, guides-and-tutorials | 25-Sep-2024 |
| Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and… | https://medium.com/@codingbolt.in/reflected-xss-into-a-template-literal-with-angle-brackets-single-double-quotes-backslash-and-5acbbd9f2631?source=rss------bug_bounty-5 | codingbolt | bug-bounty, bug-bounty-writeup, bug-bounty-tips, xss-attack | 25-Sep-2024 |
| Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes… | https://medium.com/@codingbolt.in/stored-xss-into-onclick-event-with-angle-brackets-and-double-quotes-html-encoded-and-single-quotes-9af43308602b?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, bug-bounty, xss-vulnerability, bugs, xss-attack | 25-Sep-2024 |
| Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and… | https://medium.com/@codingbolt.in/reflected-xss-into-a-javascript-string-with-angle-brackets-and-double-quotes-html-encoded-and-e1ad9b482189?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, xss-attack, xss-vulnerability, bugs, bug-bounty | 25-Sep-2024 |
| Skrip Otomatisasi XSS (Cross-Site Scripting) | https://medium.com/@mrp.bpp/skrip-otomatisasi-xss-cross-site-scripting-6b6064da0408?source=rss------bug_bounty-5 | Mada Perdhana | bug-bounty, xss-attack, tools, hacking, bug-bounty-tips | 25-Sep-2024 |
| How to Create a Fun, Engaging, and Long-Lasting Bug Bounty Program for Your Community | https://medium.com/@GrowthKingdom/how-to-create-a-fun-engaging-and-long-lasting-bug-bounty-program-for-your-community-f67da7fb230a?source=rss------bug_bounty-5 | Growth Kingdom | dapps, blockchain, web3, crypto, bug-bounty | 25-Sep-2024 |
| Understanding SQL Injection: A Deep Dive into One of the Most Common Web Vulnerabilities | https://medium.com/@mrutunjayasenapati0/understanding-sql-injection-a-deep-dive-into-one-of-the-most-common-web-vulnerabilities-2c5d031180c6?source=rss------bug_bounty-5 | Mrutunjaya Senapati | sql-injection, hacking, injection, bug-bounty, sql | 25-Sep-2024 |
| How Bug Bounties Strengthen Defenses -InITScienceAI | https://medium.com/@initscienceaiandlooklivenews/how-bug-bounties-strengthen-defenses-initscienceai-c727d3b8a2d3?source=rss------bug_bounty-5 | InITScienceAi | bug-bounty-tips, bugs, bugbounting, bug-bounty, bug-bounty-hunter | 24-Sep-2024 |
| Advanced Port Scanning Techniques for Bug Bounty Programs | https://bevijaygupta.medium.com/advanced-port-scanning-techniques-for-bug-bounty-programs-fd22a049ed37?source=rss------bug_bounty-5 | Vijay Gupta | bugs, bug-bounty, bug-bounty-tips, port-scanning, bug-zero | 24-Sep-2024 |
| test:test not Part 2 | https://medium.com/@bxrowski0x/test-test-not-part-2-492fb030c8c2?source=rss------bug_bounty-5 | Omar ElSayed | bug-bounty, keycloak, bug-bounty-tips, bug-bounty-writeup, cybersecurity | 24-Sep-2024 |
| Unlocking Web3 Success: Why Code4rena & Codehawk Are the Ultimate Bug Bounty Platforms for Newbies | https://medium.com/@firmanregar/unlocking-web3-success-why-code4rena-codehawk-are-the-ultimate-bug-bounty-platforms-for-newbies-c1c041117934?source=rss------bug_bounty-5 | Firman Siregar | bug-bounty, smart-contract-security | 24-Sep-2024 |
| Mastering Subdomain Takeover | https://medium.com/@verylazytech/mastering-subdomain-takeover-48d9b9d593a9?source=rss------bug_bounty-5 | Very Lazy Tech | subdomain-takeover, cybersecurity, bug-bounty, subdomain, hacking | 24-Sep-2024 |
| DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded | https://medium.com/@codingbolt.in/dom-xss-in-angularjs-expression-with-angle-brackets-and-double-quotes-html-encoded-51f3b873d180?source=rss------bug_bounty-5 | codingbolt | hacking, web-hacking, bug-bounty, xss-attack, xss-vulnerability | 24-Sep-2024 |
| DOM XSS in document.write sink using source location.search inside a select element | https://medium.com/@codingbolt.in/dom-xss-in-document-write-sink-using-source-location-search-inside-a-select-element-80223838d4af?source=rss------bug_bounty-5 | codingbolt | xss-attack, xss-vulnerability, bug-bounty, hacking, bugs | 24-Sep-2024 |
| What Are Bugs in Cybersecurity? Understanding the Basics | https://medium.com/@shoaibjamal663/what-are-bugs-in-cybersecurity-understanding-the-basics-84f2f9ef7304?source=rss------bug_bounty-5 | Muhammad Shoaib Jamal | bugs, cybersecurity, vulnerability, bug-bounty, bug-bounty-tips | 24-Sep-2024 |
| Price Tampering | Buying course at ₹1! | https://medium.com/@anchalrajawat009/price-tampering-buying-course-at-1-09759112e9a4?source=rss------bug_bounty-5 | Aanchal Singh Rajawat | bug-bounty, business-logic-flaw, hacking | 24-Sep-2024 |
| $1500-P1-Business logic/Failed Defense Vulnerability | https://itsravikiran25.medium.com/1500-p1-business-logic-failed-defense-vulnerability-0b1915aca994?source=rss------bug_bounty-5 | ravikiraN | infosec, cybersecurity, bug-bounty, hacking, bugbounty-tips | 24-Sep-2024 |
| Panduan Bagi Pemula untuk Memasuki Dunia Bug Bounty | https://medium.com/@mrp.bpp/panduan-bagi-pemula-untuk-memasuki-dunia-bug-bounty-bba812d0f680?source=rss------bug_bounty-5 | Mada Perdhana | bug-bounty-writeup, bug-bounty, bug-bounty-tips, bug-bounty-hunter, panduan-pemula | 24-Sep-2024 |
| Going Crazy with Farming VDPs: Extplorer Admin Panel Bypass & Remote Code Execution (RCE) | https://infosecwriteups.com/going-crazy-with-farming-vdps-extplorer-admin-panel-bypass-remote-code-execution-rce-ed6ae27bbce9?source=rss------bug_bounty-5 | YoungVanda | infosec, technology, cybersecurity, hacking, bug-bounty | 24-Sep-2024 |
| Unlock the Hidden Doors of the Android World: Legendary Recon Tools for Bug Bounty! | https://medium.com/@rootspaghetti/unlock-the-hidden-doors-of-the-android-world-legendary-recon-tools-for-bug-bounty-9065e3aa6268?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty, bug-bounty-tips | 24-Sep-2024 |
| An IDOR leads to leak users details | https://medium.com/@mohameddiv77/an-idor-leads-to-leak-users-details-b54a2280e0f9?source=rss------bug_bounty-5 | Mohamed Ibrahim | bug-bounty-tips, bug-bounty | 24-Sep-2024 |
| diffrent types of burpsuite extenstions for bughunting | https://medium.com/@loyalonlytoday/diffrent-types-of-burpsuite-extenstions-for-bughunting-d411b3d002e1?source=rss------bug_bounty-5 | loyalonlytoday | hacking, bugs, bug-bounty-tips, bug-bounty, burpsuite | 24-Sep-2024 |
| Reflected XSS with some SVG markup allowed | https://medium.com/@codingbolt.in/reflected-xss-with-some-svg-markup-allowed-e7aafbf02378?source=rss------bug_bounty-5 | codingbolt | xss-attack, xss-vulnerability, ethical-hacking, bug-bounty, cybersecurity | 24-Sep-2024 |
| Reflected XSS into HTML context with most tags and attributes blocked | https://medium.com/@codingbolt.in/reflected-xss-into-html-context-with-most-tags-and-attributes-blocked-0bb80ac37064?source=rss------bug_bounty-5 | codingbolt | bug-bounty, xss-attack, bug-bounty-tips, xss-vulnerability, bug-bounty-writeup | 24-Sep-2024 |
| $1500-P1-Business logic/Failed Defense Vulnerability | https://itsravikiran25.medium.com/1500-p1-business-logic-failed-defense-vulnerability-0b1915aca994?source=rss------bug_bounty-5 | r@v!k!r@n | cybersecurity, bug-bounty, hacking, infosec-write-ups, bugbounty-tips | 24-Sep-2024 |
| Mendapatkan Akses SMTP Melalui Celah SQL Injection | https://rdnzx.medium.com/mendapatkan-akses-smtp-melalui-celah-sql-injection-f6d593fcad5e?source=rss------bug_bounty-5 | Radian ID | cybersecurity, bug-bounty, sql-injection, bug-bounty-writeup, bug-bounty-tips | 24-Sep-2024 |
| You Won’t Find Any Vulnerabilities Without This Technique: Get Your First Bug Bounty | https://medium.com/@shaikhminhaz1975/you-wont-find-any-vulnerabilities-without-this-technique-get-your-first-bug-bounty-dee2af93e607?source=rss------bug_bounty-5 | Shaikh Minhaz | cybersecurity, red-team, penetration-testing, vulnerability, bug-bounty | 23-Sep-2024 |
| Master the subdomain hunting Part 2 | https://infosecwriteups.com/master-the-subdomain-hunting-part-2-dea0ee035019?source=rss------bug_bounty-5 | ʏᴀꜱʜʜ | 2fa, subdomain, bug-bounty-tips, bugs, bug-bounty | 23-Sep-2024 |
| Automate Bug Hunting With This Tool | https://medium.com/@josuofficial327/automate-bug-hunting-with-this-tool-68dfbbaaa0b1?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | cybersecurity, info-sec-writeups, ethical-hacking, bug-bounty, bug-bounty-hunter | 23-Sep-2024 |
| From Developer to Hacker: Breaking into GraphQL | https://medium.com/@jonathanmondaut/from-developer-to-hacker-breaking-into-graphql-6083c80b4588?source=rss------bug_bounty-5 | Jonathan Mondaut | bug-bounty, graphql, hacker, hacking, technology | 23-Sep-2024 |
| Unlocking Bug Bounties: The Power of Port Scanning | https://bevijaygupta.medium.com/unlocking-bug-bounties-the-power-of-port-scanning-ebca71c898a7?source=rss------bug_bounty-5 | Vijay Gupta | port-scanning, bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugs | 23-Sep-2024 |
| Best Platforms to Learn for Becoming a Pentester or Bug Bounty Hunter | https://rendiero.medium.com/best-platforms-to-learn-for-becoming-a-pentester-or-bug-bounty-hunter-6c6aa8cbdd64?source=rss------bug_bounty-5 | Rendiero | bug-bounty, penetration-testing, hacker, learning, resources | 23-Sep-2024 |
| RXSS with My Approach | https://medium.com/@nomad8061/rxss-with-my-approach-c9a989d3ba0b?source=rss------bug_bounty-5 | Ahmed Badry | bug-bounty-tips, bug-bounty-writeup, bug-zero, bugs, bug-bounty | 23-Sep-2024 |
| From CORS Misconfiguration to Account Takeover | https://medium.com/@majix_de/from-cors-misconfiguration-to-account-takeover-1231f263a90e?source=rss------bug_bounty-5 | Majix | bug-bounty-tips, bug-bounty, hacking, penetration-testing, programming | 23-Sep-2024 |
| Unauthenticated API Endpoint to Create Support Ticket Worth $500 | https://vijetareigns.medium.com/unauthenticated-api-endpoint-to-create-support-ticket-worth-500-789e91ad9a00?source=rss------bug_bounty-5 | the_unlucky_guy | bug-bounty, cybersecurity, bug-bounty-tips, bugbounty-writeup, bug-bounty-writeup | 23-Sep-2024 |
| DOM XSS using Web Messages and a JavaScript URL | https://medium.com/@rcxsecurity/dom-xss-using-web-messages-and-a-javascript-url-dcced7fa4195?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Cafe | information-technology, information-security, cybersecurity, penetration-testing, bug-bounty | 23-Sep-2024 |
| Uncovering a Stored XSS Vulnerability on Drugs.com | https://medium.com/@regan_temudo/uncovering-a-stored-xss-vulnerability-on-drugs-com-1748ccbecc16?source=rss------bug_bounty-5 | Regan Temudo | cross-site-scripting, bug-bounty, xx, cybersecurity, stored-xxs | 23-Sep-2024 |
| How to Guide to SQL Injection Testing: Manual Testing Techniques and SQLMap Usage | https://medium.com/@mustafa_kamal/how-to-guide-to-sql-injection-testing-manual-testing-techniques-and-sqlmap-usage-5e45046b07bf?source=rss------bug_bounty-5 | Mustafa Khan | sql, hacking, bug-bounty, sql-injection, sqlmap | 23-Sep-2024 |
| finding a easy p4 | https://medium.com/@loyalonlytoday/finding-a-easy-p4-08272e48f778?source=rss------bug_bounty-5 | loyalonlytoday | bugs, penetration-testing, bug-bounty, bugbounty-writeup, bug-bounty-tips | 23-Sep-2024 |
| Bypassing restrictions using special characters | https://medium.com/@youssefmoner2022/bypassing-restrictions-using-special-characters-8f11af75d278?source=rss------bug_bounty-5 | Youssefmoner | bug-bounty, hacking, vulnerability | 23-Sep-2024 |
| Turning a Closed Bug Report into $650: The Art of Demonstrating Impact! | https://hasanka-amarasinghe.medium.com/turning-a-closed-bug-report-into-650-the-art-of-demonstrating-impact-730a3df78df8?source=rss------bug_bounty-5 | Hasanka Amarasinghe | bugbounty-writeup, salesforce, bug-bounty, infosec, cybersecurity | 23-Sep-2024 |
| Cross-Site-Scripting (XSS): Understanding and Mitigating Web Vulnerabilities | https://medium.com/@RejuKole.com/cross-site-scripting-xss-understanding-and-mitigating-web-vulnerabilities-b2b5a2c606fc?source=rss------bug_bounty-5 | Reju Kole | bug-bounty-tips, bug-bounty, web, xss-attack, xss-vulnerability | 23-Sep-2024 |
| Reflected XSS into a JavaScript string with angle brackets HTML encoded | https://medium.com/@codingbolt.in/reflected-xss-into-a-javascript-string-with-angle-brackets-html-encoded-b9b60f4b2823?source=rss------bug_bounty-5 | codingbolt | xss-attack, bug-bounty, bugs, xss-vulnerability, bug-bounty-tips | 23-Sep-2024 |
| Stored XSS into anchor href attribute with double quotes HTML-encoded | https://medium.com/@codingbolt.in/stored-xss-into-anchor-href-attribute-with-double-quotes-html-encoded-9f384d27aa95?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, bugs, bug-bounty, xss-attack, xss-vulnerability | 23-Sep-2024 |
| 750$ in 5 Minutes - XXE to LFI | https://skramthu.medium.com/750-in-5-minutes-xxe-to-lfi-897bca9c304c?source=rss------bug_bounty-5 | Ram | hackerone, money, security, bug-bounty, infosec | 23-Sep-2024 |
| How to Guide SQL Injection: Manual Testing Techniques and SQLMap Usage | https://medium.com/@mustafa_kamal/how-to-guide-to-sql-injection-testing-manual-testing-techniques-and-sqlmap-usage-5e45046b07bf?source=rss------bug_bounty-5 | Mustafa Khan | sql, hacking, bug-bounty, sql-injection, sqlmap | 23-Sep-2024 |
| When a Session Token Isn’t Enough, A Full Account Takeover Story | https://medium.com/@ahmedramadan.ar16148/when-a-session-token-isnt-enough-a-full-account-takeover-story-cf99421bb1e3?source=rss------bug_bounty-5 | Ahmed Ramadan | oauth2, oauth, penetration-testing, authentication, bug-bounty | 23-Sep-2024 |
| Hacking The butler — Jenkins hacking 101 | https://thexssrat.medium.com/hacking-the-butler-jenkins-hacking-101-e437ed557460?source=rss------bug_bounty-5 | Thexssrat | hacks, bug-bounty, hacking, jenkins | 23-Sep-2024 |
| P4 bug’s and their POC steps | Part 4 | https://medium.com/@socalledhacker/p4-bugs-and-their-poc-steps-part-4-fd81b91fd368?source=rss------bug_bounty-5 | socalledhacker | bugs, web-security, infosec, bug-bounty, cybersecurity | 23-Sep-2024 |
| TECNO Security Response Center 3rd Anniversary | Safeguarding Product Security, Grateful for Our… | https://medium.com/@security.tecno/tecno-security-response-center-3rd-anniversary-safeguarding-product-security-grateful-for-our-550016adce10?source=rss------bug_bounty-5 | TECNO Security | birthday, security, hacking, bug-bounty | 22-Sep-2024 |
| Practical Incident Response: A Step-by-Step Guide | https://medium.com/@paritoshblogs/practical-incident-response-a-step-by-step-guide-290dadca6e2d?source=rss------bug_bounty-5 | Paritosh | information-technology, incident-response, cybersecurity, bug-bounty, ai | 22-Sep-2024 |
| 5 unique Lesser-known methods to find vulnerabilities for bug bounty hunters | https://harish45.medium.com/5-unique-lesser-known-methods-to-find-vulnerabilities-for-bug-bounty-hunters-03799e73c153?source=rss------bug_bounty-5 | Harish | cybersecurity, bug-bounty, bug-bounty-tips, ethical-hacking, hackerrank | 22-Sep-2024 |
| Port Scanning Tactics to Boost Your Bug Bounty Success | https://bevijaygupta.medium.com/port-scanning-tactics-to-boost-your-bug-bounty-success-5d46191fa92e?source=rss------bug_bounty-5 | Vijay Gupta | bugs, bug-bounty-tips, bug-bounty, tactics, port-scanning | 22-Sep-2024 |
| How I Leveraged Open Redirect to Account Takeover | https://medium.com/@abdelrahman0x01/how-i-leveraged-open-redirect-to-account-takeover-b0ff213d23dc?source=rss------bug_bounty-5 | Abdelrahman0x01 | cyberattack, account-takeover, penetration-testing, cybersecurity, bug-bounty | 22-Sep-2024 |
| Finding emails for this issue. Finding a easy bug to get a easy $$$ | https://medium.com/@loyalonlytoday/finding-emails-for-this-issue-finding-a-easy-bug-to-get-a-easy-5bc4cd00d112?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, penetration-testing, bugbounty-writeup, hacking, bug-bounty-tips | 22-Sep-2024 |
| How i got 250 euro bounty | https://doordiefordream.medium.com/how-i-got-250-euro-bounty-9e523fdf807d?source=rss------bug_bounty-5 | cybersecurity researcher | bug-bounty, bugs, cybersecurity, ethical-hacking | 22-Sep-2024 |
| How I Discovered an Account Takeover from a Reset Password Vulnerability | https://medium.com/@bountyget/how-i-discovered-an-account-takeover-from-a-reset-password-vulnerability-aa39fe0896b5?source=rss------bug_bounty-5 | Dhiren Kumar Pradhan | cybersecurity, infosec, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 22-Sep-2024 |
| From Simple File Import to Full Server Exposure: The Power of SSRF Exploitation | https://medium.com/@tusharpuri6/from-simple-file-import-to-full-server-exposure-the-power-of-ssrf-exploitation-64ee925e54dc?source=rss------bug_bounty-5 | Tusharpuri | infosec, bug-bounty, penetration-testing, offensive-security, application-security | 22-Sep-2024 |
| 5 unique Lesser-known methods to find vulnerabilities for bug bounty hunters | https://osintteam.blog/5-unique-lesser-known-methods-to-find-vulnerabilities-for-bug-bounty-hunters-03799e73c153?source=rss------bug_bounty-5 | Harish | cybersecurity, bug-bounty, bug-bounty-tips, ethical-hacking, hackerrank | 22-Sep-2024 |
| How I was decrypting the traffic and getting from low privilege user to full admin access | https://sadc0d3r.medium.com/how-i-was-decrypting-the-traffic-and-getting-from-low-privilege-user-to-full-admin-access-6a2f3b743ac5?source=rss------bug_bounty-5 | Ahmed Rabeaa Mosaa (SadC0d3r) | penetration-test, penetration-testing, cybersecurity, web-attack, bug-bounty | 22-Sep-2024 |
| How I Hacked Into a Nationwide University Database System Exposing Thousands of Student Records | https://1-day.medium.com/how-i-hacked-into-a-nationwide-university-database-system-exposing-thousands-of-student-records-65dce4e4ee23?source=rss------bug_bounty-5 | 1day | bug-bounty-writeup, penetration-testing, writeup, hacking, bug-bounty | 22-Sep-2024 |
| Join any project = Critical | https://medium.com/@etfchg18/join-any-project-critical-b3625d09876e?source=rss------bug_bounty-5 | iiiwaleed | bug-bounty, web-security, bug-bounty-tips | 22-Sep-2024 |
| Top 3 subdomain takeovers | https://infosecwriteups.com/top-3-subdomain-takeovers-ea51ecd911fd?source=rss------bug_bounty-5 | Hicham Almakroudi | ethical-hacking, hackerone, subdomain-takeover, bug-report, bug-bounty | 22-Sep-2024 |
| #1 Bug Hunting: Subdomain Enumeration — Explained | https://infosecwriteups.com/1-bug-hunting-subdomain-enumeration-explained-389e6fcb3f62?source=rss------bug_bounty-5 | Om Maniya | cybersecurity, enumeration, bug-bounty, programming, bug-bounty-tips | 21-Sep-2024 |
| Understanding Insecure Deserialization | https://medium.com/@kannnannmk/understanding-insecure-deserialization-faea7bc5ff5e?source=rss------bug_bounty-5 | Neelamegha Kannan S | bug-bounty, insecure-deserialization, bug-bounty-tips, cybersecurity, penetration-testing | 21-Sep-2024 |
| Mastering Port Scanning for Bug Bounty Hunters | https://bevijaygupta.medium.com/mastering-port-scanning-for-bug-bounty-hunters-226c8d007023?source=rss------bug_bounty-5 | Vijay Gupta | port-scanning, bug-bounty-tips, bug-bounty, bugs, port-scan | 21-Sep-2024 |
| Email Injection | Unseen Threat | https://medium.com/@abolfazl.vaziri/email-injection-unseen-threat-6db7e32ab656?source=rss------bug_bounty-5 | Abolfazl Vaziri | email, email-attack, bug-bounty, hacking, email-injection | 21-Sep-2024 |
| My First CVE: A Dream Realized | https://medium.com/@mAd13/my-first-cve-a-dream-realized-8bad3ede900a?source=rss------bug_bounty-5 | Makwana Abhik | hacking, cve, cybersecurity, cve-2024-8042, bug-bounty | 21-Sep-2024 |
| DOM-based XSS: Exploiting `document.write` with `location.search` | https://medium.com/@codingbolt.in/dom-based-xss-exploiting-document-write-with-location-search-b5276b34b51b?source=rss------bug_bounty-5 | Coding Bolt | xss-attack, bug-bounty, xss-vulnerability, bug-hunting, bugs | 21-Sep-2024 |
| Some Token Leak Can Lead to Disclose a Lot of Users’ Personal Data | https://r0b0ts.medium.com/some-token-leak-can-lead-to-disclose-a-lot-of-users-personal-data-6b5b7748ccec?source=rss------bug_bounty-5 | r0b0ts | bug-bounty-writeup, pentesting, bug-bounty, web-security, bug-bounty-tips | 21-Sep-2024 |
| 500$: Open Redirect Vulnerability | https://medium.com/@a13h1/500-open-redirect-vulnerability-9cc9fd4d9b7b?source=rss------bug_bounty-5 | Abhi Sharma | programming, cybersecurity, open-redirect, infosec, bug-bounty | 21-Sep-2024 |
| My First CVE: A Dream Realized | https://medium.com/@mAd13/my-first-cve-a-dream-realized-8bad3ede900a?source=rss------bug_bounty-5 | Abhik Makwana | hacking, cve, cybersecurity, cve-2024-8042, bug-bounty | 21-Sep-2024 |
| Simple IDOR vulnerability can lead to leak Email address of all users | https://r0b0ts.medium.com/simple-idor-vulnerability-can-lead-to-leak-email-address-of-all-users-055ada3ba3fc?source=rss------bug_bounty-5 | r0b0ts | bug-bounty, bug-bounty-tips, bug-bounty-writeup, web-security, pentesting | 21-Sep-2024 |
| How Hackers Crack Active Directory Passwords and Exploit MFA : Are You Next? | https://medium.com/@paritoshblogs/how-hackers-crack-active-directory-passwords-and-exploit-mfa-are-you-next-11cfdd0feb20?source=rss------bug_bounty-5 | Paritosh | chatgpt, active-directory, hacking, bug-bounty, cybersecurity | 21-Sep-2024 |
| Welcome to My Cybersecurity Journey | https://medium.com/@mrutunjayasenapati0/welcome-to-my-cybersecurity-journey-e795aebd096d?source=rss------bug_bounty-5 | Mrutunjaya Senapati | ethical-hacking, bugs, bug-bounty, bug-bounty-tips, cybersecurity | 21-Sep-2024 |
| DOM-based XSS: Exploiting `document.write` with `location.search` | https://medium.com/@codingbolt.in/dom-based-xss-exploiting-document-write-with-location-search-b5276b34b51b?source=rss------bug_bounty-5 | codingbolt | xss-attack, bug-bounty, xss-vulnerability, bug-hunting, bugs | 21-Sep-2024 |
| Reflected XSS into Attribute with HTML-Encoded | https://medium.com/@codingbolt.in/reflected-xss-into-attribute-with-html-encoded-ffe97e2c1439?source=rss------bug_bounty-5 | codingbolt | bugs, xss-vulnerability, xss-attack, bug-bounty, cybersecurity | 21-Sep-2024 |
| Taking ffuf Fuzzing Further | https://medium.com/@learntheshell/taking-ffuf-fuzzing-further-016be44d0b07?source=rss------bug_bounty-5 | LearnTheShell | bug-bounty, hacking, ffuf, bug-bounty-tips, fuzzing | 21-Sep-2024 |
| Finding a easy Bug | https://medium.com/@loyalonlytoday/finding-a-easy-bug-caed2e199b1d?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, hacking, bug-bounty, bug-bounty-tips, bugbounty-writeup | 21-Sep-2024 |
| DOM XSS in jQuery: The Danger of `href` Attribute with `location.search` Source | https://medium.com/@codingbolt.in/dom-xss-in-jquery-the-danger-of-href-attribute-with-location-search-source-b2d883cbec59?source=rss------bug_bounty-5 | codingbolt | bug-hunting, bug-bounty, xss-attack, bug-bounty-tips, bugs | 21-Sep-2024 |
| DOM-based XSS: The Case of `innerHTML` and `location.search` | https://medium.com/@codingbolt.in/dom-based-xss-the-case-of-innerhtml-and-location-search-373c47866c56?source=rss------bug_bounty-5 | codingbolt | bug-bounty, bug-bounty-writeup, xss-vulnerability, xss-attack, bug-bounty-tips | 21-Sep-2024 |
| Accessing full history of Firepad users. | https://medium.com/@adityaahuja.work/accessing-full-history-of-firepad-users-ddc889e73936?source=rss------bug_bounty-5 | Aditya Ahuja | owasp-top-10, cybersecurity, bug-bounty, information-disclosure, cyber-awareness | 21-Sep-2024 |
| test:test type of bug | https://medium.com/@bxrowski0x/test-test-type-of-bug-cfb352d9bf85?source=rss------bug_bounty-5 | Omar ElSayed | bug-bounty, cybersecurity, keycloak, bug-bounty-writeup, bug-bounty-tips | 21-Sep-2024 |
| XSS via Cookie Injection: A Deep Dive into the Discovery | https://medium.com/@ayushkr99732/xss-via-cookie-injection-a-deep-dive-into-the-discovery-9ef70e22eceb?source=rss------bug_bounty-5 | Ayushkr | pentesting, cross-site-scripting, bug-bounty, cookie-injection | 21-Sep-2024 |
| Persistent XSS via Cookie Injection: A Deep Dive into the Discovery | https://medium.com/@ayushkr99732/xss-via-cookie-injection-a-deep-dive-into-the-discovery-9ef70e22eceb?source=rss------bug_bounty-5 | Ayushkr | pentesting, cross-site-scripting, bug-bounty, cookie-injection | 21-Sep-2024 |
| Safety above all else! MoreLogin joins Bugrap Bug Bounty Platform | https://medium.com/@moreloginbrowser/safety-above-all-else-morelogin-joins-bugrap-bug-bounty-platform-b92a99d7e4d7?source=rss------bug_bounty-5 | MoreLogin Browser | security, bug-bounty, antidetect-browser, white-hat-hacker, cybersecurity | 20-Sep-2024 |
| Common Job Roles in Cyber Security | https://medium.com/@RaunakGupta1922/common-job-roles-in-cyber-security-e792d367af67?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | cyber-security-awareness, bug-bounty, diversity, jobs, hacking | 20-Sep-2024 |
| A Perfect Story Which help to Understand Bug Bounty | https://medium.com/@Butcher_hell/a-perfect-story-which-help-to-understand-bug-bounty-c0a699239629?source=rss------bug_bounty-5 | W H I Z H A W K | cybersecurity, storytelling, hacking, bug-bounty, technology | 20-Sep-2024 |
| How to Learn and Participate in Bug Bounties | https://rendiero.medium.com/how-to-learn-and-participate-in-bug-bounties-1a2e71dd190b?source=rss------bug_bounty-5 | Rendiero | cybersecurity, beginners-guide, learning, bug-bounty, hacking | 20-Sep-2024 |
| Bypassing Rate Limits: All Known Techniques | https://medium.com/@raxomara/bypassing-rate-limits-all-known-techniques-25891bb5ca59?source=rss------bug_bounty-5 | Raxomara | rate-limit-bypass, bug-bounty-tips, security-research, cybersecurity, bug-bounty | 20-Sep-2024 |
| Finding a easy p4 | https://medium.com/@loyalonlytoday/finding-a-easy-p4-e32c47c8b54a?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugs | 20-Sep-2024 |
| The Ultimate Guide to Forgot Password Test Cases | https://medium.com/@chinmaya_ramana/the-ultimate-guide-to-forgot-password-test-cases-059e483fdc40?source=rss------bug_bounty-5 | Chinmaya Ramana | security, hacking, bug-bounty, web-application-security, application-security | 20-Sep-2024 |
| Clickjacking Vulnerability to trigger Reflacted XSS | https://medium.com/@g52238317/clickjacking-vulnerability-to-trigger-reflacted-xss-9029cc5fd676?source=rss------bug_bounty-5 | Abdelrhman Yasser | cybersecurity, clickjacking, xss-attack, bug-bounty | 20-Sep-2024 |
| Bypassing Date Restrictions in an Educational Platform: A Logic Flaw Exploit | https://medium.com/@ahmed_ashraf/bypassing-date-restrictions-in-an-educational-platform-a-logic-flaw-exploit-fdd3d0e3a1cb?source=rss------bug_bounty-5 | Ahmedashraf | business-logic-flaw, privilege-escalation, cybersecurity, bug-bounty, penetration-testing | 20-Sep-2024 |
| Bug Bounty Dark Reality: The Hidden Truth of Successful Bug Hunting | https://medium.com/@yashpawar1199/bug-bounty-dark-reality-the-hidden-truth-of-successful-bug-hunting-0b9ed547802d?source=rss------bug_bounty-5 | Yash Pawar @HackersParadise | bug-bounty-dark-reality, bug-bounty, howu-hnters-find-bugs, bounty-efforts-fail, successful-bug-hunting | 20-Sep-2024 |
| Unlocking Restricted Features: A Vulnerability Analysis of Organization’s Role Management | https://0xmatrix.medium.com/unlocking-restricted-features-a-vulnerability-analysis-of-organizations-role-management-aa6a4f7bd0d3?source=rss------bug_bounty-5 | Mo2men Elmady | hacking, penetration-testing, bug-bounty-tips, bug-bounty, cybersecurity | 20-Sep-2024 |
| Exploiting GraphQL API Suggestions | https://nir-choubey-2011.medium.com/exploiting-graphql-api-suggestions-7695e5b8c3ef?source=rss------bug_bounty-5 | niraj choubey | api-security, bug-bounty, security, graphql-security | 20-Sep-2024 |
| Safety above all else! MoreLogin joins Bugrap Bug Bounty Platform | https://medium.com/@moreloginbrowser/safety-above-all-else-morelogin-joins-bugrap-bug-bounty-platform-cdc178fd6e7e?source=rss------bug_bounty-5 | MoreLogin Browser | bug-bounty, cybersecurity, morelogin, antidetect-browser, security | 19-Sep-2024 |
| Best Bug Bounty and Pentesting Methodology for Beginners: A Step-by-Step Guide | https://bevijaygupta.medium.com/best-bug-bounty-and-pentesting-methodology-for-beginners-a-step-by-step-guide-a68170d3acc8?source=rss------bug_bounty-5 | Vijay Gupta | bugs, penetration-testing, bug-bounty, bug-bounty-tips, pentesting | 19-Sep-2024 |
| How to get shodan membership upgrade for free | https://medium.com/@hichamalmakroudi/how-to-get-shodan-membership-upgrade-for-free-4f21122d2d73?source=rss------bug_bounty-5 | Hicham Almakroudi | shodan, hacking-tools, ethical-hacking, bug-bounty, free | 19-Sep-2024 |
| Nikto A Powerful Web Server Scanner for Vulnerability Assessment | https://medium.com/@yashpawar1199/nikto-a-powerful-web-server-scanner-for-vulnerability-assessment-1bd257204f41?source=rss------bug_bounty-5 | Yash Pawar @HackersParadise | bug-bounty, hacking, penetration-testing, cybersecurity, nikto | 19-Sep-2024 |
| How a 403 bypass got me a bounty | https://medium.com/@ehsameer/how-a-403-bypass-got-me-a-bounty-7b2d58c0fd88?source=rss------bug_bounty-5 | ehsameer | bug-bounty-tips, bugbounty-writeup, bug-bounty, hackerone | 19-Sep-2024 |
| How Hackers Trick You Into Actions You Never Meant to Do ! | https://medium.com/@yassentaalab51/how-hackers-trick-you-into-actions-you-never-meant-to-do-c0993c8f1bbe?source=rss------bug_bounty-5 | Yassen Taalab | owasp, penetration-testing, bug-bounty, cybersecurity, clickjacking | 19-Sep-2024 |
| How to install Bug Bounty Hunting Tools on Linux and Windows by using Golang(Go)[ProjectDiscovery] | https://medium.com/@abdulrahman.muhammad.qarni52/getting-started-with-projectdiscovery-tools-on-linux-and-windows-70e644f1198c?source=rss------bug_bounty-5 | OxLegacy52 | hacking, tools-for-hacking, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 19-Sep-2024 |
| Finding a easy bug to get a easy $$$ | https://medium.com/@loyalonlytoday/finding-a-easy-bug-to-get-a-easy-f008b2b25f73?source=rss------bug_bounty-5 | loyalonlytoday | hacking, bug-bounty-tips, penetration-testing, bugbounty-writeup, bug-bounty | 19-Sep-2024 |
| Primary Hacking School #2 After Installing Kali | https://medium.com/@nnface/primary-hacking-school-2-after-installing-kali-6a226c68e7de?source=rss------bug_bounty-5 | NnFace | kali-linux, linux, bug-bounty, cybersecurity, hacking | 19-Sep-2024 |
| Understanding File Permissions and Ownership | https://cyberw1ng.medium.com/understanding-file-permissions-and-ownership-d73c07f373e2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, technology, bug-bounty, careers, cybersecurity | 19-Sep-2024 |
| How I hacked multiple Indian universities (AGAIN). | https://medium.com/@alimuhammadsecured/how-i-hacked-multiple-indian-universities-again-d1b9c2a0e01d?source=rss------bug_bounty-5 | Alimuhammadsecured | ctf, cybersecurity, hacking, bug-bounty, malware | 19-Sep-2024 |
| How Hackers Trick You Into Actions You Never Meant to Do ! | https://medium.com/@yassentaalab51/how-hackers-trick-you-into-actions-you-never-meant-to-do-c0993c8f1bbe?source=rss------bug_bounty-5 | Killua | owasp, penetration-testing, bug-bounty, cybersecurity, clickjacking | 19-Sep-2024 |
| Understanding File Permissions and Ownership | https://systemweakness.com/understanding-file-permissions-and-ownership-d73c07f373e2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, technology, bug-bounty, careers, cybersecurity | 19-Sep-2024 |
| [2,500$ Bug Bounty Write-Up] Remote Code Execution (RCE) via unclaimed Node package | https://medium.com/@p0lyxena/2-500-bug-bounty-write-up-remote-code-execution-rce-via-unclaimed-node-package-6b9108d10643?source=rss------bug_bounty-5 | Fuleki Ioan | bugcrowd, bug-bounty, writeup, cybersecurity, remote-code-execution | 18-Sep-2024 |
| Write up : Business Logic Flaw in Payment Discount Calculation Allows Excessive Discount… | https://medium.com/@jakboubmostefa/write-up-business-logic-flaw-in-payment-discount-calculation-allows-excessive-discount-19d567f5da18?source=rss------bug_bounty-5 | Mostefa Jakboub | vulnerability, bug-bounty, cybersecurity | 18-Sep-2024 |
| 10 Essential Browser Extensions for Bug Bounty Hunters | https://medium.com/@firdansp/10-essential-browser-extensions-for-bug-bounty-hunters-f17f8b001bcc?source=rss------bug_bounty-5 | 0verRida | bug-bounty-tips, writeup, bug-hunting, extension, bug-bounty | 18-Sep-2024 |
| How to Perform a Cybersecurity Risk Assessment: The Simple Guide | https://medium.com/@paritoshblogs/how-to-perform-a-cybersecurity-risk-assessment-the-simple-guide-b37d1b986682?source=rss------bug_bounty-5 | Paritosh | bug-bounty, risk, hacking, chatgpt, cybersecurity | 18-Sep-2024 |
| Leveling Up the Wrong Way: Exploiting API Vulnerabilities in Game Progression | https://aminudin.medium.com/leveling-up-the-wrong-way-exploiting-api-vulnerabilities-in-game-progression-19f883f48da8?source=rss------bug_bounty-5 | Aminudin | hacker, bug-bounty, bug-bounty-tips | 18-Sep-2024 |
| Scanning ip’s got from virustotal | https://medium.com/@loyalonlytoday/scanning-ips-got-from-virustotal-7baa7398ba83?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, bug-bounty, penetration-testing, hacking, bug-bounty-writeup | 18-Sep-2024 |
| Mastering Cybersecurity “A Guide to Effective Learning” | https://rendiero.medium.com/mastering-cybersecurity-a-guide-to-effective-learning-9e32bd8c5926?source=rss------bug_bounty-5 | Rendiero | cybersecurity, bug-bounty, penetration-testing, hacking, learning | 18-Sep-2024 |
| Scanning ip’s got from virustotal to find a bug | https://medium.com/@loyalonlytoday/scanning-ips-got-from-virustotal-7baa7398ba83?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, bug-bounty, penetration-testing, hacking, bug-bounty-writeup | 18-Sep-2024 |
| The Reality of Cybersecurity Jobs: Why Freshers Should Focus on Defense✨ Over Hacking | https://medium.com/@mohammedthoufeeq_25137/the-reality-of-cybersecurity-jobs-why-freshers-should-focus-on-defense-over-hacking-002cd641a453?source=rss------bug_bounty-5 | Mohamed Thoufeeq | cybersecurity, hacking, cyberattack, programming, bug-bounty | 18-Sep-2024 |
| 😞The Reality of Cybersecurity Jobs: Why Freshers Should Focus on Defense✨ Over Hacking 😎 | https://medium.com/@shari7a0x/protect-your-account-zero-click-account-takeover-for-admin-support-through-password-update-d155c7966b6e?source=rss------bug_bounty-5 | Shari7a0x | bug-bounty-tips, bug-bounty, ato, bugs | 18-Sep-2024 |
| Real Bug Bounty & Penetration Testing on Live Websites: Step-by-Step Guide (Part 2) | https://medium.com/@shaikhminhaz1975/real-bug-bounty-penetration-testing-on-live-websites-step-by-step-guide-part-2-19ca30b17b93?source=rss------bug_bounty-5 | Shaikh Minhaz | ethical-hacking, bug-bounty, cybersecurity, penetration-testing, chatgpt | 18-Sep-2024 |
| How Black Hat Hackers Hack into your Telegram Groups !!! | https://medium.com/@josuofficial327/how-black-hat-hackers-hack-into-your-telegram-groups-6970a93a20e1?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | penetration-testing, ethical-hacking, bug-bounty, hacking, cybersecurity | 18-Sep-2024 |
| Missing Rate Limit Vulnerability: How to Test and Identify It | https://medium.com/@octayus/missing-rate-limit-vulnerability-how-to-test-and-identify-it-2f3937e903e6?source=rss------bug_bounty-5 | OctaYus | cybersecurity, infosec, hacking, bug-bounty, twitter | 18-Sep-2024 |
| How I Utilized AI to Discover an Amazon S3 Bucket Takeover Vulnerability in Red Bull’s Bug Bounty… | https://medium.com/@mohamedsaqibc/how-i-utilized-ai-to-discover-an-amazon-s3-bucket-takeover-vulnerability-in-red-bulls-bug-bounty-503d3c4d995f?source=rss------bug_bounty-5 | Mohamed Saqib C | hacking, artificial-intelligence, cybersecurity, bug-bounty | 18-Sep-2024 |
| Hunting APIs for Bounties: How to Hack and Win Big in Bug Bounties! | https://medium.com/@rootspaghetti/hunting-apis-for-bounties-how-to-hack-and-win-big-in-bug-bounties-942d0f4e0885?source=rss------bug_bounty-5 | Root@Spaghetti | hacking, bug-bounty, bug-bounty-tips | 18-Sep-2024 |
| P4 bug’s and their POC steps | Part 3 | https://medium.com/@socalledhacker/p4-bugs-and-their-poc-steps-part-3-298087630cac?source=rss------bug_bounty-5 | socalledhacker | web, web-security, p4-bugs, bug-bounty, vulnerability | 18-Sep-2024 |
| Live Bug Bounty Walkthrough: How to Hunt & Report Bugs Effectively (Part 2) | https://medium.com/cyberscribers-exploring-cybersecurity/real-bug-bounty-penetration-testing-on-live-websites-step-by-step-guide-part-2-19ca30b17b93?source=rss------bug_bounty-5 | Shaikh Minhaz | ethical-hacking, bug-bounty, cybersecurity, penetration-testing, chatgpt | 18-Sep-2024 |
| Using Application Functionality to Exploit Insecure Deserialization | https://medium.com/@rcxsecurity/using-application-functionality-to-exploit-insecure-deserialization-b4e7c6abdae1?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Cafe | information-security, penetration-testing, bug-bounty, information-technology, cybersecurity | 17-Sep-2024 |
| First-Time Penetration Testing: How to Uncovered Critical Flaws at a Company (Interactive Guide) | https://medium.com/@paritoshblogs/first-time-penetration-testing-how-to-uncovered-critical-flaws-at-a-company-interactive-guide-4275f79c02ce?source=rss------bug_bounty-5 | Paritosh | hacking, bug-bounty, ai, penetration-testing, cybersecurity | 17-Sep-2024 |
| From GitHub Recon to Hotstar Admin Access: A Deep Dive into Security Flaws | https://infosecwriteups.com/from-github-recon-to-hotstar-admin-access-a-deep-dive-into-security-flaws-2e4ae0ec937e?source=rss------bug_bounty-5 | Vishal Vishwakarma | hacking, cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 17-Sep-2024 |
| “ part 2 Beginner’s Bug Bounty Methodology: A Journey from Writeups to Real-World Application” | https://medium.com/@mahdisalhi0500/part-2-beginners-bug-bounty-methodology-a-journey-from-writeups-to-real-world-application-5d62f79e039f?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | cybersecurity, bug-bounty-tips, bug-bounty, ethical-hacking, infose | 17-Sep-2024 |
| How To Find Clickjacking Easily… | https://medium.com/@josuofficial327/how-to-find-clickjacking-under-a-minute-751089be3f74?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | penetration-testing, bug-bounty, cybersecurity, info-sec-writeups, bug-bounty-tips | 17-Sep-2024 |
| #5. Bug Bounty Series: $$$ by AWS S3 Bucket misconfigurations | https://cyb3rmind.medium.com/5-bug-bounty-series-by-aws-s3-bucket-misconfigurations-fb645057d03e?source=rss------bug_bounty-5 | Cyb3r M!nds | penetration-testing, takeovers, bug-bounty, subdomain-takeover, s3-bucket | 17-Sep-2024 |
| How I got my first $$$ bounty? | https://medium.com/@yashsomalkar/how-i-got-my-first-bounty-098d75ae650d?source=rss------bug_bounty-5 | Rudrakshacker | bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-tips, idor-vulnerability | 17-Sep-2024 |
| Platforms and vulnerable webapps for practing and learning webpentesting | https://medium.com/@loyalonlytoday/platforms-and-vulnerable-webapps-for-practing-and-learning-webpentesting-b76df42e3ec4?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, penetration-testing, hacking, bugbounty-writeup, web-penetration-testing | 17-Sep-2024 |
| Direct Volume Access Attack | https://medium.com/@reemmoslem34/direct-volume-access-attack-dfbb2d73e406?source=rss------bug_bounty-5 | Rem Khalid | bug-bounty, cryptocurrency, malware, hacking, cybersecurity | 17-Sep-2024 |
| Dll Side Loading Attack | https://medium.com/@reemmoslem34/dll-side-loading-attack-80ea716fd588?source=rss------bug_bounty-5 | Rem Khalid | python, malware, cybersecurity, hacking, bug-bounty | 17-Sep-2024 |
| A bypass on GitLab’s Login Email Verification via OAuth ROPC flow. | https://cybxis.medium.com/a-bypass-on-gitlabs-login-email-verification-via-oauth-ropc-flow-e194242cad96?source=rss------bug_bounty-5 | cybxis | hackerone, gitlab, oauth2, bug-bounty | 17-Sep-2024 |
| Type of Cyber Security | https://medium.com/@RaunakGupta1922/type-of-cyber-security-c43047a34fe7?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | hacking, bug-bounty, social-media, cybersecurity, basics | 16-Sep-2024 |
| Menguasai Reconnaissance: Metode lengkap untuk mengumpulkan informasi | https://hack4funacademy.medium.com/menguasai-reconnaissance-metode-lengkap-untuk-mengumpulkan-informasi-acdeba7dc054?source=rss------bug_bounty-5 | Hack4Fun Academy | programming, bug-bounty, hacking, cybersecurity, networking | 16-Sep-2024 |
| How to Set Up Proxychains in Kali Linux | https://medium.com/@vignesh6872610/how-to-set-up-proxychains-in-kali-linux-ddd44c3502af?source=rss------bug_bounty-5 | Vignesh P | bug-bounty, bug-bounty-writeup, proxychains, linux-tutorial, bug-bounty-tips | 16-Sep-2024 |
| Three Months of Full-Time Bug Bounty Hunting as a Newbie in 2024 | https://medium.com/@nchaitreddyutilities/three-months-of-full-time-bug-bounty-hunting-as-a-newbie-in-2024-a941977b61f1?source=rss------bug_bounty-5 | Chaitanya Reddy | bug-bounty-tips, cybersecurity, bug-bounty, writeup | 16-Sep-2024 |
| WhatsApp View Once Privacy Issue Initial Fix Assessment: The Good, the Bad and The Ugly | https://medium.com/@TalBeerySec/whatsapp-view-once-privacy-issue-initial-fix-assessment-the-good-the-bad-and-the-ugly-be97ec1cc2e5?source=rss------bug_bounty-5 | Tal Be'ery | security, web-development, bug-bounty, privacy, whatsapp | 16-Sep-2024 |
| Guide to Finding and Exploiting Web Cache Poisoning | https://systemweakness.com/guide-to-finding-and-exploiting-web-cache-poisoning-f32d0962d28d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, careers, technology, bug-bounty | 16-Sep-2024 |
| The Curious Case Of MutantBedrog’s Trusted-Types CSP Bypass | https://blog.confiant.com/the-curious-case-of-mutantbedrogs-trusted-types-csp-bypass-950b19a38b4f?source=rss------bug_bounty-5 | Eliya Stein | bug-bounty, malvertising, hacking, cybersecurity, threat-intelligence | 16-Sep-2024 |
| How I Found Live Traffic Exposure on a Public Server: One of my interesting findings | https://medium.com/@josuofficial327/how-i-found-live-traffic-exposure-on-a-public-server-one-of-my-interesting-findings-0ecde16813a8?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty, cybersecurity, penetration-testing, bugbounty-writeup, bug-bounty-hunter | 16-Sep-2024 |
| Using Full potential of Virustotal for Bugbounty | https://medium.com/@loyalonlytoday/using-full-potential-of-virustotal-for-bugbounty-8d80221ab2e4?source=rss------bug_bounty-5 | loyalonlytoday | bugbounty-tips, penetration-testing, hacking, bug-bounty, bugbounty-writeup | 16-Sep-2024 |
| How i accidently found a server side template injection | https://medium.com/@malikirtizameg/how-i-accidently-found-a-server-side-template-injection-f5e7aec0b64d?source=rss------bug_bounty-5 | Insbat Arshad | cybersecurity, bug-bounty, programming, devops, python | 16-Sep-2024 |
| CloudSek CTF 2024 Writeup | https://naumankh4n.medium.com/cloudsek-ctf-aug-2024-writeup-6b4409675f88?source=rss------bug_bounty-5 | Nauman Khan | hacking, bug-bounty, ctf, penetration-testing, ctf-writeup | 16-Sep-2024 |
| Subdomain takeover amazon S3 | https://medium.com/@hichamalmakroudi/subdomain-takeover-amazon-s3-21de0af8a1d3?source=rss------bug_bounty-5 | Hicham Almakroudi | bug-bounty, aws, hacking, s3, subdomain-takeover | 16-Sep-2024 |
| How To Get Easy critical 0 click account takeover on public bug bounty program at hackerone ! | https://medium.com/@kaforybory/how-to-get-easy-critical-0-click-account-takeover-on-public-bug-bounty-program-at-hackerone-8b1859cc7738?source=rss------bug_bounty-5 | Hassan Makki | infosec, bug-bounty-tips, cybersecurity, bug-bounty, bug-hunting | 16-Sep-2024 |
| Structure your recon files before they structure you | https://medium.com/@paractmol/structure-your-recon-files-before-they-structure-you-ba3509a182f0?source=rss------bug_bounty-5 | paractmol | golang, recon, tools, bug-bounty, automation-tools | 16-Sep-2024 |
| How to Kick Off Your Journey into Bug Hunting: A Beginner's Guide | https://medium.com/@justluke5691/how-to-kick-off-your-journey-into-bug-hunting-a-beginners-guide-eb5a551f4edb?source=rss------bug_bounty-5 | K. Niraj Chandra Singha | bug-bounty, technology, cybersecurity | 16-Sep-2024 |
| very easy and helpfull for new hunters, how i accidently found a server side template injection | https://medium.com/@malikirtizameg/how-i-accidently-found-a-server-side-template-injection-f5e7aec0b64d?source=rss------bug_bounty-5 | Insbat Arshad | cybersecurity, bug-bounty, programming, devops, python | 16-Sep-2024 |
| Structure your recon files before they become unstructured | https://medium.com/@paractmol/structure-your-recon-files-before-they-structure-you-ba3509a182f0?source=rss------bug_bounty-5 | paractmol | golang, recon, tools, bug-bounty, automation-tools | 16-Sep-2024 |
| #3 HOW TO FIND OPEN REDIRECT EASILY ??? | https://medium.com/@josuofficial327/3-how-to-find-open-redirect-easily-fd8a7ea6e12b?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | threat-intelligence, bug-bounty, bug-bounty-tips, threat-hunting, cybersecurity | 15-Sep-2024 |
| Subdomain Takeovers for Beginners | https://medium.com/@hichamalmakroudi/subdomain-takeovers-for-beginners-a51ed74db543?source=rss------bug_bounty-5 | Hicham Almakroudi | subdomain-takeover, bug-bounty, bug-bounty-tips, ethical-hacking, hacking | 15-Sep-2024 |
| XSS — Cross Site Scripting | https://medium.com/@codingboltacademy/xss-cross-site-scripting-65e1981817df?source=rss------bug_bounty-5 | Coding Bolt Academy | xss-vulnerability, xss-attack, bug-bounty, cross-site-scripting, ethical-hacking | 15-Sep-2024 |
| IDOR — Broken Access Control | https://medium.com/@codingboltacademy/idor-broken-access-control-efeb6698919f?source=rss------bug_bounty-5 | Coding Bolt Academy | ethical-hacking, penetration-testing, cybersecurity, bug-bounty, idor | 15-Sep-2024 |
| How i got 100$ bounty | https://medium.com/@mukkumukku110/how-i-got-100-bounty-b3dd58e82e00?source=rss------bug_bounty-5 | bughunter | bug-bounty, bugs, bug-bounty-writeup, bug-bounty-tips | 15-Sep-2024 |
| Hunting for Corporate Accounts: Exploiting IDOR and Parameter Pollution in Web Applications | https://medium.com/@tusharpuri6/hunting-for-corporate-accounts-exploiting-idor-and-parameter-pollution-in-web-applications-1792294e0c48?source=rss------bug_bounty-5 | Tusharpuri | bug-bounty, application-security, penetration-testing, offensive-security, infosec | 15-Sep-2024 |
| Live Bug Bounty & Penetration Testing on Real Websites: Step-by-Step Guide (Part 1) | https://medium.com/@shaikhminhaz1975/live-bug-bounty-penetration-testing-on-real-websites-step-by-step-guide-part-1-971ccc9b9587?source=rss------bug_bounty-5 | Shaikh Minhaz | bug-bounty, bug-bounty-tips, penetration-testing, cybersecurity, information-gathering | 15-Sep-2024 |
| SQL Injetion | https://medium.com/@adhikarisudip869/sql-injetion-f6f5f4291cbc?source=rss------bug_bounty-5 | Sudip Adhikari | sql, sql-injection, bug-bounty | 15-Sep-2024 |
| How to Find IDOR Vulnerabilities: A Guide for Bug Bounty Hunters and Developers | https://cyberw1ng.medium.com/how-to-find-idor-vulnerabilities-a-guide-for-bug-bounty-hunters-and-developers-3d2ba2a766f5?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, cybersecurity, technology, careers | 15-Sep-2024 |
| BugBounty platforms List | https://medium.com/@loyalonlytoday/bugbounty-platforms-list-ed3a5af3a8a2?source=rss------bug_bounty-5 | loyalonlytoday | bugbounty-writeup, bug-bounty-tips, hacking, bug-bounty, penetration-testing | 15-Sep-2024 |
| Automating the CORS Vulnerability Scan | https://angixblack.medium.com/automating-the-cors-vulnerability-scan-66d57752cc36?source=rss------bug_bounty-5 | Angix black | cors, infosec, pentesting, bug-bounty, corsan | 15-Sep-2024 |
| A very easy bug anyone can find | https://medium.com/@malikirtizameg/a-very-easy-bug-anyone-can-find-8d2b11a768c7?source=rss------bug_bounty-5 | Insbat Arshad | programming, cybersecurity, bug-bounty, software-engineering, devops | 15-Sep-2024 |
| How to Find IDOR Vulnerabilities: A Guide for Bug Bounty Hunters and Developers | https://systemweakness.com/how-to-find-idor-vulnerabilities-a-guide-for-bug-bounty-hunters-and-developers-3d2ba2a766f5?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, cybersecurity, technology, careers | 15-Sep-2024 |
| Mastering WordPress Pentesting: The Ultimate Resource Guide | https://medium.com/@RaunakGupta1922/mastering-wordpress-pentesting-the-ultimate-resource-guide-423bc1e1ddef?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | hacking, cybersecurity, wordpress, bug-bounty, wordpress-plugins | 14-Sep-2024 |
| Telnet Takedown: The Port 23 Exploit on Metasploitable 2, Part III | https://medium.com/@thefellowhacker/telnet-takedown-the-port-23-exploit-on-metasploitable-2-part-iii-a10a6e15b468?source=rss------bug_bounty-5 | Taahir Mujawarr | cybersecurity, bug-bounty, metasploitable, hacking, penetration-testing | 14-Sep-2024 |
| Open Redirect via Image Upload | https://medium.com/@osamamohamed21212121/open-redirect-via-image-upload-bf6f87f8d447?source=rss------bug_bounty-5 | Osamamohamed | bug-bounty-tips, bug-bounty, bugs, bug-zero, bug-bounty-writeup | 14-Sep-2024 |
| SSRF Via Image Upload | https://medium.com/@osamamohamed21212121/ssrf-via-image-upload-f046e2d0e692?source=rss------bug_bounty-5 | Osamamohamed | bug-bounty, bug-zero, bug-bounty-writeup, bugs, bug-bounty-tips | 14-Sep-2024 |
| Critical Data Breach Exposed: A Deep Dive into a Government Agency’s Security Flaw | https://medium.com/@contact.adnanks/critical-data-breach-exposed-a-deep-dive-into-a-government-agencys-security-flaw-3c4a9b431de6?source=rss------bug_bounty-5 | Adnan K S | bug-bounty-tips, security, cybersecurity, bug-bounty-writeup, bug-bounty | 14-Sep-2024 |
| Unlocking Admin Privileges: How I Exploited an IDOR Vulnerability | https://medium.com/@cybsersec/unlocking-admin-privileges-how-i-exploited-an-idor-vulnerability-6829b595889a?source=rss------bug_bounty-5 | Cybsersec | cybersecurity, security-research, bug-bounty | 14-Sep-2024 |
| Unlocking Admin Privileges: How I Exploited an IDOR Vulnerability | https://medium.com/@Krypton09/unlocking-admin-privileges-how-i-exploited-an-idor-vulnerability-6829b595889a?source=rss------bug_bounty-5 | Krypton | cybersecurity, security-research, bug-bounty | 14-Sep-2024 |
| How I Discovered a Major Security Flaw in Keltron’s Server Using Google Dorking | https://medium.com/@contact.adnanks/how-i-discovered-a-major-security-flaw-in-keltrons-server-using-google-dorking-f8bb3c784803?source=rss------bug_bounty-5 | Adnan K S | cybersecurity, security, owncloud, bug-bounty-tips, bug-bounty | 14-Sep-2024 |
| how to install kali linux on windows using wsl(windows subsystem linux) | https://medium.com/@loyalonlytoday/how-to-install-kali-linux-on-windows-using-wsl-windows-subsystem-linux-92019022ac57?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, penetration-testing, wsl-2, hacking, wsl | 14-Sep-2024 |
| fisher: Cybertalents Cybersecurity Bootcamp Cohort 8 | https://medium.com/@bridget4/fisher-cybertalents-cybersecurity-bootcamp-cohort-8-cfb9aa6b7a6c?source=rss------bug_bounty-5 | Bridget | careers, bug-bounty, cybersecurity, learning, cyber-talents | 14-Sep-2024 |
| What is Prototype Pollution? | https://systemweakness.com/what-is-prototype-pollution-4e2049f68fca?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, technology, careers, hacking, cybersecurity | 14-Sep-2024 |
| How I Discovered a Major Security Flaw in Keltron’s Server Using Google Dorking | https://medium.com/@contact.adnanks/how-i-discovered-a-major-security-flaw-in-keltrons-server-using-google-dorking-e8a8c1dae09b?source=rss------bug_bounty-5 | Adnan K S | hacking, bug-bounty, cybersecurity, ethical-hacking, bug-bounty-tips | 14-Sep-2024 |
| How I Gained Access to a Corporate CCTV Surveillance System Using Shodan | https://medium.com/@contact.adnanks/how-i-gained-access-to-a-corporate-cctv-surveillance-system-using-shodan-daac1fa3b37a?source=rss------bug_bounty-5 | Adnan K S | bug-bounty, surveillance, cctv, cybersecurity, hacking | 14-Sep-2024 |
| How I Discovered a Critical Vulnerability and Took Over an Organization Using Burp Suite | https://medium.com/@contact.adnanks/how-i-discovered-a-critical-vulnerability-and-took-over-an-organization-using-burp-suite-fb2d52adc944?source=rss------bug_bounty-5 | Adnan K S | research, bug-bounty-tips, cybersecurity, bug-bounty, ethical-hacking | 14-Sep-2024 |
| Critical Data Breach Exposed: A Deep Dive into a Government Agency’s Security Flaw (Part 2) | https://medium.com/@contact.adnanks/critical-data-breach-exposed-a-deep-dive-into-a-government-agencys-security-flaw-part-2-ba190920e945?source=rss------bug_bounty-5 | Adnan K S | bug-bounty, grafana, research-reports, cybersecurity, bug-bounty-tips | 14-Sep-2024 |
| Let the Hunt Begin with Nuclei: The Secret Weapon of the Bug Bounty World! | https://medium.com/@rootspaghetti/let-the-hunt-begin-with-nuclei-the-secret-weapon-of-the-bug-bounty-world-9b2491d3a9cb?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty-tips, hacking, bug-bounty | 14-Sep-2024 |
| Mastering GraphQL API Pentesting: The Ultimate Resource Guide | https://medium.com/@RaunakGupta1922/mastering-graphql-api-pentesting-the-ultimate-resource-guide-7755c08bddd2?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | vulnerability, cybersecurity, graphql, bug-bounty, hacking | 13-Sep-2024 |
| Deleting a folder led to the deactivation of the company’s accounts. | https://medium.com/@hossam_hamada/deleting-a-folder-led-to-the-deactivation-of-the-companys-accounts-3759b6b92927?source=rss------bug_bounty-5 | Hossam Hamada | bug-bounty-tips, hackerone, bug-bounty, penetration-testing, bugcrowd | 13-Sep-2024 |
| #2 ANOTHER EASY BUG- HTML INJECTION | https://medium.com/@josuofficial327/2-another-easy-bug-html-injection-0447a79b6c66?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty-hunter, bug-bounty, linux, vulnerability, cybersecurity | 13-Sep-2024 |
| How Unguessable IDOR Worth me €1000 On Intigriti | https://medium.com/@manan_sanghvi/how-unguessable-idor-worth-me-1000-on-intigriti-7ab6f928b3d9?source=rss------bug_bounty-5 | Manan Sanghvi | bounty-program, bug-bounty, intigriti, idor, hacking | 13-Sep-2024 |
| Logic Flaw: I Can Block You from Accessing Your Own Account | https://medium.com/@hashimamin/logic-flaw-i-can-block-you-from-accessing-your-own-account-63fc2a88bb72?source=rss------bug_bounty-5 | Hashim Amin | bug-bounty-tips, bug-bounty, bugs, ethical-hacking, infosec | 13-Sep-2024 |
| What is an Open Redirect Vulnerability? And How to Find It | https://systemweakness.com/what-is-an-open-redirect-vulnerability-and-how-to-find-it-7d94a3b9d0ef?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, technology, bug-bounty, hacking | 13-Sep-2024 |
| Log4j Exploit Lab: Reverse Shell with JNDI Exploit Kit | https://medium.com/@josh.beck2006/log4j-exploit-lab-reverse-shell-with-jndi-exploit-kit-21f015204e29?source=rss------bug_bounty-5 | Josh Beck | bug-bounty, cybersecurity, ctf | 13-Sep-2024 |
| How to find and exploit bugsnag API Key | https://medium.com/@socalledhacker/how-to-find-and-exploit-bugsnag-api-key-312e0f216735?source=rss------bug_bounty-5 | socalledhacker | cybersecurity, bug-bounty, web-security, bug-bounty-tips, infosec | 13-Sep-2024 |
| How to Write an Effective Bug Bounty Report: Tips, Structure, and Examples | https://infosecwriteups.com/how-to-write-an-effective-bug-bounty-report-tips-structure-and-examples-3248d81dd759?source=rss------bug_bounty-5 | Abhi Sharma | bug-bounty, hacking, bug-bounty-tips, cybersecurity, infosec | 13-Sep-2024 |
| Finding a easy p4 it can be worth 200$ | https://medium.com/@loyalonlytoday/finding-a-easy-p4-it-can-be-worth-200-10d6682f6923?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, bug-bounty, bugbounty-writeup, website-hacking, hacking | 13-Sep-2024 |
| Subdomain Enumeration Part 2 (Manual & Automation) | https://osintteam.blog/subdomain-enumeration-part-2-manual-automation-77a46d93e2ed?source=rss------bug_bounty-5 | Mr Abdullah | ethical-hacking, hacking, web-hacking, bug-bounty, bug-bounty-tips | 13-Sep-2024 |
| Unleashing GitHub Dorks: The Ultimate Hack for Finding Hidden Secrets in Bug Bounties! | https://enigma96.medium.com/unleashing-github-dorks-the-ultimate-hack-for-finding-hidden-secrets-in-bug-bounties-125b83fd9c93?source=rss------bug_bounty-5 | enigma | github-dorking, penetration-testing, bug-bounty, hackin, bug-bounty-tips | 13-Sep-2024 |
| Stored XSS via Image Upload | https://medium.com/@osamamohamed21212121/stored-xss-via-image-upload-b75edecf1e54?source=rss------bug_bounty-5 | Osamamohamed | bug-bounty-tips, bugs, bug-bounty, bug-zero, bug-bounty-writeup | 13-Sep-2024 |
| IDOR in Bug Bounty Program | https://medium.com/@osamamohamed21212121/idor-in-bug-bounty-program-8fbbffe32f6e?source=rss------bug_bounty-5 | Osamamohamed | bug-bounty, bugs, bug-bounty-writeup, bug-zero, bug-bounty-tips | 13-Sep-2024 |
| Mastering Dirsearch: Finding Hidden Web Directories | https://medium.com/@bootstrapsecurity/mastering-dirsearch-finding-hidden-web-directories-f57327c06fed?source=rss------bug_bounty-5 | BootstrapSecurity | ethical-hacking, cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-hunter | 12-Sep-2024 |
| Computer Security: How Bureaucracies Ignore Unexploded Ordinance | https://kf106.medium.com/computer-security-how-bureaucracies-ignore-unexploded-ordinance-319e8e931ad5?source=rss------bug_bounty-5 | Keir Finlow-Bates | bureaucracy, bug-bounty, security, cybersecurity, hacker | 12-Sep-2024 |
| The Secrets to Writing Threat Intelligence Reports That Actually Stop Cyber Attacks! | https://medium.com/@paritoshblogs/the-secrets-to-writing-threat-intelligence-reports-that-actually-stop-cyber-attacks-330fd6fc37a5?source=rss------bug_bounty-5 | Paritosh | ai, hacking, threat-intelligence, bug-bounty, cybersecurity | 12-Sep-2024 |
| Password Reset Flaws: Key Methods for Finding Vulnerabilities | https://medium.com/@dsmodi484/password-reset-flaws-key-methods-for-finding-vulnerabilities-eb843440e06c?source=rss------bug_bounty-5 | Dishant Modi | bug-bounty, vulnerability, bug-bounty-tips, account-takeover, testing | 12-Sep-2024 |
| Leveraging GreyNoise for Enhanced Threat Detection and Intelligence | https://medium.com/@ajaynaikhack/leveraging-greynoise-for-enhanced-threat-detection-and-intelligence-437aac815d38?source=rss------bug_bounty-5 | Ajay Naik | rewards, vulnerability, cybersecurity, bug-bounty, threat-detection | 12-Sep-2024 |
| Insecure Direct Object Reference (IDOR) | https://medium.com/@security.tecno/insecure-direct-object-reference-idor-ffecf6cbc211?source=rss------bug_bounty-5 | TECNO Security | bug-bounty, security, research, hacking | 12-Sep-2024 |
| Mastering IDOR: The Ultimate Resource Guide | https://medium.com/@RaunakGupta1922/mastering-idor-the-ultimate-resource-guide-84e44052f70c?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty, hacking, cybersecurity, college, idor | 12-Sep-2024 |
| [IDOR] View other users’ transaction details | https://rhidayah.medium.com/idor-view-other-users-transaction-details-73c0c80aada6?source=rss------bug_bounty-5 | Rohmad Hidayah | broken-access-control, idor, bug-bounty, idor-vulnerability, information-disclosure | 12-Sep-2024 |
| Zero-Click Calendar invite — Critical zero-click vulnerability chain in macOS | https://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b?source=rss------bug_bounty-5 | Mikko Kenttälä | vulnerability, macos, information-security, bug-bounty | 12-Sep-2024 |
| Hide & Seek - Hidden Open Redirect | Bug Hunting | https://mo9khu93r.medium.com/hide-seek-hidden-open-redirect-bug-hunting-88499f5e0e99?source=rss------bug_bounty-5 | mo9khu93r | hacking, pentesting, bug-bounty, cybersecurity, kali-linux | 12-Sep-2024 |
| Hydra for bruteforcing | https://medium.com/@tharunteja725_8686/hydra-for-bruteforcing-3784a98bab6a?source=rss------bug_bounty-5 | Chidurala Tharun teja | hacking, oscp, bug-bounty, bug-bounty-tips, cybersecurity | 12-Sep-2024 |
| How an Open Redirect Vulnerability Got a Bug Bounty of $500 | https://cyberw1ng.medium.com/how-an-open-redirect-vulnerability-got-a-bug-bounty-of-500-13ece7a987d8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, technology, bug-bounty, careers, cybersecurity | 12-Sep-2024 |
| My first Account-take-over | https://medium.com/@osamamohamed21212121/my-first-account-take-over-f6590c4a3a54?source=rss------bug_bounty-5 | Osamamohamed | bugs, bug-bounty, bug-zero, bug-bounty-writeup, bug-bounty-tips | 12-Sep-2024 |
| My journey to find CSRF (Cross-Site Request Forgery ) | https://medium.com/@osamamohamed21212121/my-journey-to-find-csrf-cross-site-request-forgery-ddf1e1bd579d?source=rss------bug_bounty-5 | Osamamohamed | bug-bounty-writeup, bug-bounty-tips, bug-bounty, bugs, bug-zero | 12-Sep-2024 |
| Stored XSS via File upload(using .svg file Extension ) | https://ch4ndan.medium.com/stored-xss-via-file-upload-using-svg-file-extension-515e23536d4d?source=rss------bug_bounty-5 | Ch4ndan das | cybersecurity, xss-attack, bug-bounty, bugs, bug-bounty-tips | 12-Sep-2024 |
| My first XSS: Reflected XSS | https://medium.com/@osamamohamed21212121/my-first-xss-reflected-xss-0949992b94ab?source=rss------bug_bounty-5 | Osamamohamed | bugs, bug-bounty-tips, bug-bounty, bug-zero, bug-bounty-writeup | 12-Sep-2024 |
| Hack Google Like a Pro: Automate Google Dorks with Bash for Bug Bounties! | https://enigma96.medium.com/hack-google-like-a-pro-automate-google-dorks-with-bash-for-bug-bounties-7611818a4bf0?source=rss------bug_bounty-5 | enigma | hacker, bug-bounty, pentesting, bug-bounty-tips, dorks | 12-Sep-2024 |
| How to learn Game Hacking in 6 minutes | Part 1 | https://medium.com/@deadoverflow/how-to-learn-game-hacking-in-10-minutes-part-1-19991004fd99?source=rss------bug_bounty-5 | Imad Husanovic | games, hacking, bug-bounty-tips, bug-bounty, cybersecurity | 12-Sep-2024 |
| How to learn Game Hacking in 6 minutes | Part 1 | https://systemweakness.com/how-to-learn-game-hacking-in-10-minutes-part-1-19991004fd99?source=rss------bug_bounty-5 | Imad Husanovic | games, hacking, bug-bounty-tips, bug-bounty, cybersecurity | 12-Sep-2024 |
| Introduction to Bug Bounty Hunting | https://medium.com/@kanishkar22052004/introduction-to-bug-bounty-hunting-183f133c7d0d?source=rss------bug_bounty-5 | Kanishkar | bug-bounty, ethical-hacking, cybersecurity | 11-Sep-2024 |
| Understanding the OWASP Top 10 in 2024 | https://bootstrapsecurity.medium.com/understanding-the-owasp-top-10-in-2024-245b600737f9?source=rss------bug_bounty-5 | BootstrapSecurity | bug-bounty-tips, bug-bounty, ethical-hacking, cybersecurity, infosec-write-ups | 11-Sep-2024 |
| Understanding the OWASP Top 10 in 2024 | https://medium.com/@bootstrapsecurity/understanding-the-owasp-top-10-in-2024-245b600737f9?source=rss------bug_bounty-5 | BootstrapSecurity | bug-bounty-tips, bug-bounty, ethical-hacking, cybersecurity, infosec-write-ups | 11-Sep-2024 |
| HTB Academy: Information Gathering — Web Edition (Updated). | https://medium.com/@mazalwebdesign/htb-academy-information-gathering-web-edition-updated-50058fdec55e?source=rss------bug_bounty-5 | maz4l | htb-walkthrough, htb-writeup, penetration-testing, bug-bounty, ethical-hacking | 11-Sep-2024 |
| API Bug Bounty Hunting: Reconnaissance and Reverse Engineering an API | https://towardsdev.com/api-bug-bounty-hunting-reconnaissance-and-reverse-engineering-an-api-1d61f82b5d72?source=rss------bug_bounty-5 | Adithyakrishna V | cybersecurity, bug-bounty, hacking, api | 11-Sep-2024 |
| NGINX HTTP/3 QUIC Module Vulnerability -CVE-2024–35200 | https://infosecwriteups.com/nginx-http-3-quic-module-vulnerability-cve-2024-35200-e2f6aaea2a68?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, security, cve, vulnerability, rewards | 11-Sep-2024 |
| BIG-IP HSB vulnerability CVE-2024–39778 | https://medium.com/@ajaynaikhack/big-ip-hsb-vulnerability-cve-2024-39778-9fd33cc4d5e5?source=rss------bug_bounty-5 | Ajay Naik | rewards-and-recognition, vulnerability, bug-bounty, security | 11-Sep-2024 |
| Why Django’s [DEBUG=True] is a Goldmine for Hackers | https://medium.com/@verylazytech/why-djangos-debug-true-is-a-goldmine-for-hackers-01486289607d?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, cybersecurity, django, bug-bounty, misconfiguration | 11-Sep-2024 |
| Best Bug Bounty and Pentesting Methodology for Beginners(Step By Step) | https://medium.com/@shaikhminhaz1975/best-bug-bounty-and-pentesting-methodology-for-beginners-step-by-step-b6167128156a?source=rss------bug_bounty-5 | Shaikh Minhaz | cybersecurity, methodology, penetration-testing, bug-bounty, ethical-hacking | 11-Sep-2024 |
| MY First Bug Hunt: A Beginner’s Guide to Cybersecurity with Google Dorks | https://medium.com/@KpCyberInfo/my-first-bug-hunt-a-beginners-guide-to-cybersecurity-with-google-dorks-b62a28214d38?source=rss------bug_bounty-5 | Krunal Patel | bug-bounty, cybersecurity, google-dork, beginner, security | 11-Sep-2024 |
| How Finding an SQL Injection Vulnerability Earned a $1000 Bug Bounty | https://systemweakness.com/how-finding-an-sql-injection-vulnerability-earned-a-1000-bug-bounty-af2ee0b62f6c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, technology, bug-bounty, hacking | 11-Sep-2024 |
| Interesting Story of an Account Takeover Vulnerability | https://medium.com/@deepanshudev369/interesting-story-of-an-account-takeover-vulnerability-140a45a058a3?source=rss------bug_bounty-5 | Deepanshu(golu369) | cybersecurity, ethical-hacking, vulnerability-assessment, bug-bounty, research | 11-Sep-2024 |
| P4 bug’s and their POC steps | Part 2 | https://medium.com/@socalledhacker/p4-bugs-and-their-poc-steps-part-2-17b6583c57d9?source=rss------bug_bounty-5 | socalledhacker | web-security, hacking, bug-bounty-tips, vulnerability, bug-bounty | 11-Sep-2024 |
| Pemburuan Hacker Penpie: Menyediakan Hingga 10% dari Dana yang Dikembalikan sebagai Hadiah | https://blog.penpiexyz.io/pemburuan-hacker-penpie-menyediakan-hingga-10-dari-dana-yang-dikembalikan-sebagai-hadiah-6e81cc0f610b?source=rss------bug_bounty-5 | 0xJultoshi | defi, bahasa, bug-bounty, investasi, crypto | 11-Sep-2024 |
| Primary Hacking School #1 Installing Kali | https://medium.com/@nnface/primary-hacking-school-1-installing-kali-a3e249c41730?source=rss------bug_bounty-5 | NnFace | bug-bounty, cybersecurity, hacking, linux, kali-linux | 11-Sep-2024 |
| How I Stole a Player Spot with Simple XSS | https://medium.com/@ali_guell/how-i-stole-a-player-spot-with-simple-xss-6a8fa2776a84?source=rss------bug_bounty-5 | black_wheatear | writeup, bug-bounty, hacking, web-development, cybersecurity | 11-Sep-2024 |
| Securing Your Applications Against CSRF Attacks: Best Practices for Cybersecurity Experts | https://medium.com/@kpishear/securing-your-applications-against-csrf-attacks-best-practices-for-cybersecurity-experts-4e572b9fc032?source=rss------bug_bounty-5 | kpishear | bug-bounty, tech, cybersecurity, trading, technology | 10-Sep-2024 |
| Free Bug Bounty Course For Beginners ️ | https://medium.com/@amanktec12/free-bug-bounty-course-for-beginners-%EF%B8%8F-f126b9907c96?source=rss------bug_bounty-5 | Cyberxeal | free-bug-hunting-course, free, course, bug-bounty, bug-hunting | 10-Sep-2024 |
| Would you mind to tell me what your bank balance is? No? Okay, I’ll hack it. | https://infosecwriteups.com/would-you-mind-to-tell-me-what-your-bank-balance-is-no-okay-ill-hack-it-b3f49810cfe2?source=rss------bug_bounty-5 | Manav Bankatwala | bank-hack, cybersecurity, information-security, idor, bug-bounty | 10-Sep-2024 |
| My first Hall of Fame (HoF) | Bug Bounty Journey. | https://rivudon.medium.com/my-first-hall-of-fame-hof-bug-bounty-journey-59a56b1e96c2?source=rss------bug_bounty-5 | Rivek Raj Tamang ( RivuDon ) | bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips, infosec-writeup | 10-Sep-2024 |
| The “Who Needs Secure Attachments Anyway?” Saga | https://medium.com/@shobitsharma/the-who-needs-secure-attachments-anyway-saga-6026dc61a371?source=rss------bug_bounty-5 | Shobit Sharma | bug-bounty, cybersecurity, bug-bounty-tips, infosec-write-ups, bug-bounty-writeup | 10-Sep-2024 |
| How Hackers Can Steal Your Data in 15 Seconds | https://medium.com/@kerstan/how-hackers-can-steal-your-data-in-15-seconds-798bbed9cbac?source=rss------bug_bounty-5 | kerstan | hacking, cybersecurity, bug-bounty | 10-Sep-2024 |
| Basic Challenge Level 11 | https://aftab700.medium.com/basic-challenge-level-11-eaa689246c31?source=rss------bug_bounty-5 | Aftab Sama | ctf, cybersecurity, information-security, bug-bounty, ethical-hacking | 10-Sep-2024 |
| Basic Challenge Level 10 | https://aftab700.medium.com/basic-challenge-level-10-afaac3919778?source=rss------bug_bounty-5 | Aftab Sama | cybersecurity, bug-bounty, ctf-writeup, ctf, information-security | 10-Sep-2024 |
| Basic Challenge Level 9 | https://aftab700.medium.com/basic-challenge-level-9-588ab110cc2d?source=rss------bug_bounty-5 | Aftab Sama | ctf-writeup, ctf, bug-bounty, information-security, cybersecurity | 10-Sep-2024 |
| OWASP top 10 A09:Security Logging and Monitoring failures | https://medium.com/@shivamsharma.ss484/owasp-top-10-a09-security-logging-and-monitoring-failures-e2f4bdc50fbe?source=rss------bug_bounty-5 | Shivamsharma | owasp, hacking, cybersecurity, owasp-top-10, bug-bounty | 10-Sep-2024 |
| ‘find’ command for Recon | https://medium.com/@DatBoyBlu3/find-command-for-recon-4f3cf296c5d5?source=rss------bug_bounty-5 | Daniel Edwards | cybersecurity, linux, bug-bounty, unix, penetration-testing | 10-Sep-2024 |
| Top Reconnaissance Tools for Ethical Security Testing | https://medium.com/@ajaynaikhack/top-reconnaissance-tools-for-ethical-security-testing-2b4088106b81?source=rss------bug_bounty-5 | Ajay Naik | reconnaissance, ethical-hacking, bug-bounty, rewards, vulnerability | 10-Sep-2024 |
| Introducing FavFreak: Unlock the Power of Favicon Hashing for Bug Bounty Hunting | https://medium.com/@unreal_umber_hyena_37/introducing-favfreak-unlock-the-power-of-favicon-hashing-for-bug-bounty-hunting-0361dbb629c3?source=rss------bug_bounty-5 | Cyber Sentinel X | security, cybersecurity, penetration-testing, bug-bounty, ethical-hacking | 10-Sep-2024 |
| How I got RCE on an Indian university without admin credentials Tale of directory listing, SQL… | https://medium.com/@alimuhammadsecured/how-i-got-rce-on-an-indian-university-without-admin-credentials-tale-of-directory-listing-sql-1f77e2933011?source=rss------bug_bounty-5 | Alimuhammadsecured | bug-bounty, bug-bounty-writeup, ctf, rce, hacking | 10-Sep-2024 |
| TryHackMe | Simple CTF | Walkthrough | By HexaHunter | https://hexahunter.medium.com/tryhackme-simple-ctf-walkthrough-by-hexahunter-b9457e4d7d16?source=rss------bug_bounty-5 | Momal Naz | web-security, penetration-testing, tryhackme-walkthrough, ctf-writeup, bug-bounty | 09-Sep-2024 |
| Mastering Reconnaissance with Nmap: Unveiling Your Target’s Secrets | https://infosecwriteups.com/mastering-reconnaissance-with-nmap-unveiling-your-targets-secrets-ec940d05a140?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, information-security, nmap, bug-bounty, infosec-write-ups | 09-Sep-2024 |
| Self-XSS to ATO via Quick Login feature | https://thecatfather.medium.com/self-xss-to-ato-via-quick-login-feature-532df12d1c08?source=rss------bug_bounty-5 | The CatFather | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 09-Sep-2024 |
| Exploiting Firestore Database Rules: A Pathway to Data Breaches | https://medium.com/@S3THU/exploiting-firestore-database-rules-a-pathway-to-data-breaches-aa945476cc16?source=rss------bug_bounty-5 | Sethu Satheesh | firebase, hacking, cybersecurity, bug-bounty, pentesting | 09-Sep-2024 |
| Google Dorks for Bug Bounty Part 3: Exposing Hidden Admin Panels & Login Portals | https://enigma96.medium.com/google-dorks-for-bug-bounty-part-3-exposing-hidden-admin-panels-login-portals-52b600e3f10b?source=rss------bug_bounty-5 | enigma | bug-bounty, bug-bounty-tips, pentesting, hacking, penetration-testing | 09-Sep-2024 |
| 2nd Order SQL Injection | https://medium.com/@bountyget/2nd-order-sql-injection-e2ac60e792a4?source=rss------bug_bounty-5 | Dhiren Kumar Pradhan | bug-bounty-tips, sql-injection, cybersecurity, penetration-testing, bug-bounty | 09-Sep-2024 |
| {إِنَّ اللَّهَ وَمَلائِكَتَهُ يُصَلُّونَ عَلَى النَّبِيِّ يَا أَيُّهَا الَّذِينَ آمَنُوا صَلُّوا… | https://medium.com/@mahdisalhi0500/%D8%A5%D9%90%D9%86%D9%8E%D9%91-%D8%A7%D9%84%D9%84%D9%8E%D9%91%D9%87%D9%8E-%D9%88%D9%8E%D9%85%D9%8E%D9%84%D8%A7%D8%A6%D9%90%D9%83%D9%8E%D8%AA%D9%8E%D9%87%D9%8F-%D9%8A%D9%8F%D8%B5%D9%8E%D9%84%D9%8F%D9%91%D9%88%D9%86%D9%8E-%D8%B9%D9%8E%D9%84%D9%8E%D9%89-%D8%A7%D9%84%D9%86%D9%8E%D9%91%D8%A8%D9%90%D9%8A%D9%90%D9%91-%D9%8A%D9%8E%D8%A7-%D8%A3%D9%8E%D9%8A%D9%8F%D9%91%D9%87%D9%8E%D8%A7-%D8%A7%D9%84%D9%8E%D9%91%D8%B0%D9%90%D9%8A%D9%86%D9%8E-%D8%A2%D9%85%D9%8E%D9%86%D9%8F%D9%88%D8%A7-%D8%B5%D9%8E%D9%84%D9%8F%D9%91%D9%88%D8%A7-4cdb13f5ff52?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | hacking, information-security, ethical-hacking, bug-bounty, information-technology | 09-Sep-2024 |
| SQL Injection Attack, Listing the Database Contents on Non-Oracle Databases | https://medium.com/@marduk.i.am/sql-injection-attack-listing-the-database-contents-on-non-oracle-databases-825485566585?source=rss------bug_bounty-5 | Marduk I Am | bug-bounty, portswigger-lab, sqli, information-security, sql-injection | 09-Sep-2024 |
| Hunting for Hidden API Endpoints Using Katana and Hakraler | https://anasbetis023.medium.com/hunting-for-hidden-api-endpoints-using-katana-and-hakraler-ba0bd6b9611f?source=rss------bug_bounty-5 | Anas H Hmaidy | bug-bounty, penetration-testing, bug-bounty-tips, cybersecurity | 09-Sep-2024 |
| Optimal Ethical Hacker Setup for Penetration Testing | https://infosecwriteups.com/optimal-ethical-hacker-setup-for-penetration-testing-4847a8afbe45?source=rss------bug_bounty-5 | Ajay Naik | security, bug-bounty, vulnerability, desktop | 09-Sep-2024 |
| Unveiling Hidden Threats: Advanced Recon Techniques and the Path to Automation | https://medium.com/@rootspaghetti/unveiling-hidden-threats-advanced-recon-techniques-and-the-path-to-automation-4c1b3dd885a3?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty-tips, bug-bounty, hacking | 09-Sep-2024 |
| P4 bug’s and their POC steps | Part 1 | https://medium.com/@socalledhacker/p4-bugs-and-their-poc-steps-part-1-1cef0152d1a5?source=rss------bug_bounty-5 | socalledhacker | vulnerability, p4-bugs, hacking, web-app-security, bug-bounty | 09-Sep-2024 |
| How HTTP Request Smuggling Vulnerability Gets You a $750 Bug Bounty | https://cyberw1ng.medium.com/how-http-request-smuggling-vulnerability-gets-you-a-750-bug-bounty-3dfe9063fd8d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, careers, cybersecurity, technology | 09-Sep-2024 |
| Introducing CorScan: A Comprehensive Tool for CORS Vulnerability Detection | https://angixblack.medium.com/introducing-corscan-a-comprehensive-tool-for-cors-vulnerability-detection-4ce83be6870e?source=rss------bug_bounty-5 | Angix black | penetration-testing, bug-bounty, cors, bugbounty-automation, corscan | 09-Sep-2024 |
| Lap 1: JWT authentication bypass via unverified signature | https://abdelrahmansalaheldeen.medium.com/lap-1-jwt-authentication-bypass-via-unverified-signature-8e450a7b2f59?source=rss------bug_bounty-5 | Abdelrahman Salaheldeen | cybersecurity, web-application-security, web-app-pentesting, jwt, bug-bounty | 08-Sep-2024 |
| The Only Oscp Tip You Need | https://medium.com/@issam.qsous/the-only-oscp-tip-you-need-cfac65948f68?source=rss------bug_bounty-5 | Essam Qsous | oscp, bug-bounty, cybersecurity, pentesting, hacking | 08-Sep-2024 |
| JSON Web Token attacks (JWT) | https://abdelrahmansalaheldeen.medium.com/json-web-token-attacks-jwt-c082d76f3e4c?source=rss------bug_bounty-5 | Abdelrahman Salaheldeen | jwt, web-penetration-testing, web-application-security, bug-bounty, cybersecurity | 08-Sep-2024 |
| 0-Click Mass Account Takeover via Password Reset Functionality | https://0d-samii.medium.com/0-click-mass-account-takeover-via-password-reset-functionality-68cdf27e028d?source=rss------bug_bounty-5 | 0d_samii | bugs, bug-bounty-tips, bug-bounty, cybersecurity | 08-Sep-2024 |
| How To Stay Ahead of 99% of Bug Bounty Hunters | https://bevijaygupta.medium.com/how-to-stay-ahead-of-99-of-bug-bounty-hunters-d77030705ed5?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, bugs, hackthebox, bug-bounty, bounty-hunter | 08-Sep-2024 |
| Discovering a Stored XSS Vulnerability on a Bug Bounty Program | https://anmolvishwakarma7466.medium.com/discovering-a-stored-xss-vulnerability-on-a-bug-bounty-program-8dad1b475695?source=rss------bug_bounty-5 | Anmolvishwakarma | xss-attack, appsec, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 08-Sep-2024 |
| Found Bugs, Got Paid, Stayed Poor: Making a Living with Bug Bounties | https://bevijaygupta.medium.com/found-bugs-got-paid-stayed-poor-making-a-living-with-bug-bounties-a30355564d32?source=rss------bug_bounty-5 | Vijay Gupta | money-making-ideas, bug-bounty-tips, bug-bounty, money-management, bugs | 08-Sep-2024 |
| Nmap: The Best Network Scanning Utility for Security Expert | https://medium.com/@mohanmecktro/nmap-the-best-network-scanning-utility-for-security-expert-ea7a6fd01efb?source=rss------bug_bounty-5 | Mohan Mecktro | bug-bounty-hunter, penetration-testing, bug-bounty, nmap, kali-linux-tools | 08-Sep-2024 |
| How I Become Google HOF | https://medium.com/@lijoparappur/how-i-become-google-hof-ef697b8b5963?source=rss------bug_bounty-5 | Lijoparappur | bug-bounty, google-hacking | 08-Sep-2024 |
| How i found xss in goverment website with one tools. | https://medium.com/@sulthanyluthfi/how-i-found-xss-in-goverment-website-with-one-tools-5dd5d431ed03?source=rss------bug_bounty-5 | Luthfi Sulthany | xss-attack, bug-bounty, linux, penetration-testing, cybersecurity | 08-Sep-2024 |
| Day 30of 30 Day — 30 Vulnerabilities | Cross-Site Request Forgery (CSRF) | https://medium.com/@kumawatabhijeet2002/day-30of-30-day-30-vulnerabilities-cross-site-request-forgery-csrf-062ff53c5efd?source=rss------bug_bounty-5 | Abhijeet kumawat | 30dayswritingchallenge, bug-bounty, bug-bounty-tips, csrf | 08-Sep-2024 |
| My recon methodology for hunting CVE-2021–42063 led to discovering an RXSS vulnerability in the… | https://medium.com/@karthithehacker/my-recon-methodology-for-hunting-cve-2021-42063-led-to-discovering-an-rxss-vulnerability-in-the-27a7aa435fd3?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty, infosec, bugbounty-writeup, ethical-hacking, cybersecurity | 08-Sep-2024 |
| The Weak Link in Two-Factor Authentication: Exploiting Reusable OTPs | https://medium.com/@tusharpuri6/the-weak-link-in-two-factor-authentication-exploiting-reusable-otps-ed30bd8bf4da?source=rss------bug_bounty-5 | Tusharpuri | offensive-security, bug-bounty, penetration-testing, vulnerability, application-security | 08-Sep-2024 |
| OWASP top 10 A08:Software and Data Integrity Failures | https://medium.com/@shivamsharma.ss484/owasp-top-10-a08-software-and-data-integrity-failures-bd41b5f9db2c?source=rss------bug_bounty-5 | Shivamsharma | owasp-top-10, bug-bounty, cybersecurity, hacking, owasp | 08-Sep-2024 |
| Post-Exploitation Techniques: What Happens After a Hack? | https://cyberw1ng.medium.com/post-exploitation-techniques-what-happens-after-a-hack-961ddc068fb6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, technology, hacking, cybersecurity, careers | 08-Sep-2024 |
| Post-Exploitation Techniques: What Happens After a Hack? | https://systemweakness.com/post-exploitation-techniques-what-happens-after-a-hack-961ddc068fb6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, technology, hacking, cybersecurity, careers | 08-Sep-2024 |
| Bug Bounty Road ️ Map ️ | https://osintteam.blog/bug-bounty-road-%EF%B8%8F-map-%EF%B8%8F-b42c14750a6a?source=rss------bug_bounty-5 | Mr Abdullah | bug-bounty-roadmap, bug-bounty, bug-bounty-writeup, ethical-hacking, cybersecurity | 07-Sep-2024 |
| Users without roles are able to find out whether the “Invite other people” feature on a Pinterest… | https://rhidayah.medium.com/users-without-roles-are-able-to-find-out-whether-the-invite-other-people-feature-on-a-pinterest-b1cf86305337?source=rss------bug_bounty-5 | Rohmad Hidayah | pinterest, bug-bounty, privacy, business-logic-flaw | 07-Sep-2024 |
| Exploiting the Silent Threat: Time-Based Blind SQL Injection via the Object_ID Parameter | https://harshit3.medium.com/exploring-time-based-blind-sql-injection-vulnerability-via-the-object-id-parameter-7cd377c6e00d?source=rss------bug_bounty-5 | Harshit | owasp, vulnerability, cybersecurity, bug-bounty, information-security | 07-Sep-2024 |
| Account takeover through no rate limits | https://rhidayah.medium.com/account-takeover-through-no-rate-limits-3d7a82a69779?source=rss------bug_bounty-5 | Rohmad Hidayah | account-takeover, no-rate-limit, bug-bounty, broken-authentication | 07-Sep-2024 |
| The Rise of AI in Cybersecurity: Opportunities and Threats | https://bootstrapsecurity.medium.com/the-rise-of-ai-in-cybersecurity-opportunities-and-threats-531b42f9bef9?source=rss------bug_bounty-5 | BootstrapSecurity | bug-bounty-tips, bug-bounty, cybersecurity, ethical-hacking, ai-in-cybersecurity | 07-Sep-2024 |
| how i finded a google map it’s worths 300$ | https://systemweakness.com/how-i-finded-a-google-map-its-worths-300-9fe5fe32e6de?source=rss------bug_bounty-5 | loyalonlytoday | bugs, penetration-testing, hacking, bug-bounty, bug-bounty-tips | 07-Sep-2024 |
| Subdomain Takeover : The Hacker’s Jackpot (And How You Can Hit It Too!) | https://medium.com/@Kaizen2977/subdomain-takeover-the-hackers-jackpot-and-how-you-can-hit-it-too-76d49b916bc1?source=rss------bug_bounty-5 | Kapil Chotalia | bug-bounty, subdomain-takeover, subdomains-enumeration, hacking, penetration-testing | 07-Sep-2024 |
| Users without roles are able to find out whether the “Invite other people” feature on a Pinterest… | https://rhidayah.medium.com/users-without-roles-are-able-to-find-out-whether-the-invite-other-people-feature-on-a-pinterest-b1cf86305337?source=rss------bug_bounty-5 | Rohmad Hidayah | pinterest, bug-bounty, privacy, bugcrowd, business-logic-flaw | 07-Sep-2024 |
| Day 29 of 30 Day — 30 Vulnerabilities | Remote Code Execution (RCE) | https://medium.com/@kumawatabhijeet2002/day-29-of-30-day-30-vulnerabilities-remote-code-execution-rce-eb3f8f7ccf62?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-tips, rce, bug-bounty, 30dayswritingchallenge, remote-code-execution | 07-Sep-2024 |
| Vulnerability Scanner | https://medium.com/@hydra_/vulnerability-scanner-1ad628218979?source=rss------bug_bounty-5 | hydra | bug-bounty, vulnerability-scanner, infosec | 07-Sep-2024 |
| Understanding window.postMessage() and Its XSS Risks | https://medium.com/@spideyyy/understanding-window-postmessage-and-its-xss-risks-5a96bcd90428?source=rss------bug_bounty-5 | spidey | cybersecurity, bug-bounty, web-security, hacking, xss-attack | 07-Sep-2024 |
| Find Your First 5 Bug Bounties in Easy Ways | https://infosecwriteups.com/find-your-first-5-bug-bounties-in-easy-ways-3aaca5c57a2d?source=rss------bug_bounty-5 | Subh Dhungana | hackerone, infosec, cybersecurity, bug-bounty, hacking | 07-Sep-2024 |
| My recon methodology for hunting CVE-2021–42063 led to discovering an RXSS vulnerability in the… | https://medium.com/@karthithehacker/my-recon-methodology-for-hunting-cve-2021-42063-led-to-discovering-an-rxss-vulnerability-in-the-80bd4ca0f623?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty, infosec, cybersecurity | 07-Sep-2024 |
| Hunting in the Cyber World: Effective Recon Strategies for a Successful Bug Bounty | https://medium.com/@rootspaghetti/hunting-in-the-cyber-world-effective-recon-strategies-for-a-successful-bug-bounty-8ec5f27bd9ae?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty, cybersecurity, hacking, bug-bounty-tips | 07-Sep-2024 |
| 850$ IDOR:Unauthorized Session Revokation of any user | https://infosecwriteups.com/850-idor-unauthorized-session-revokation-of-any-user-93f9cb92fdfe?source=rss------bug_bounty-5 | Abhi Sharma | cybersecurity, infosec, idor, bug-bounty, programming | 07-Sep-2024 |
| Google Dorks Secrets: Discover Hidden Endpoints & Parameters with Google Dorks | https://enigma96.medium.com/google-dorks-secrets-discover-hidden-endpoints-parameters-with-google-dorks-7c3bb3257ef9?source=rss------bug_bounty-5 | enigma | web-security-testing, hacking, bug-bounty-tips, bug-bounty, penetration-testing | 07-Sep-2024 |
| cyberExploring Client-Side Desync: Understanding the Risk and Mitigating the Threat | https://cyberw1ng.medium.com/cyberexploring-client-side-desync-understanding-the-risk-and-mitigating-the-threat-b375dec78f21?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, technology, cybersecurity, careers | 07-Sep-2024 |
| Day 28 of 30 Day — 30 Vulnerabilities | DOM-based XSS | https://medium.com/@kumawatabhijeet2002/day-28-of-30-day-30-vulnerabilities-dom-based-xss-e7bfadc56b2f?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, 30dayswritingchallenge, bug-bounty-tips, dom-based-xss | 06-Sep-2024 |
| Bounty Hunter’s Handbook: Practical Tips for Bug Hunting | https://medium.com/@security.tecno/bounty-hunters-handbook-practical-tips-for-bug-hunting-b3a8b03d1101?source=rss------bug_bounty-5 | TECNO Security | hacking, hunting, tips, bug-bounty | 06-Sep-2024 |
| [$12000] 3 Critical 0-click TikTok Account Takeover Vulnerabilities, 2FA bypass & more security… | https://vojtechcekal.medium.com/12000-3-critical-0-click-tiktok-account-takeover-vulnerabilities-2fa-bypass-more-security-78554827cfc3?source=rss------bug_bounty-5 | Vojtech Cekal | vulnerability, bug-bounty-writeup, bug-bounty-tips, cybersecurity, bug-bounty | 06-Sep-2024 |
| OAuth Based CSRF: Exploiting The Flaw In Implementation Of State Parameter | https://medium.com/@cyberpro151/oaauth-based-csrf-exploiting-the-flaw-in-implementation-of-state-parameter-36bfae68aa65?source=rss------bug_bounty-5 | cyberpro151 | bug-bounty, cybersecurity, appsec, hacking, pentest | 06-Sep-2024 |
| Google Map API Key Exposure $$$ | Just 2 Minutes | Don’t Miss Your Bounty | https://dkcyberz.medium.com/google-map-api-key-exposure-just-2-minutes-dont-miss-your-bounty-380eac7b9dd9?source=rss------bug_bounty-5 | Harpy Hunter | bug-bounty-tips, bugbounty-writeup, google-map-api, bug-bounty, owasp-top-10 | 06-Sep-2024 |
| Google Dork Mastery Part 1 : Finding Hidden Critical Files with Google Dorks Like a Pro | https://enigma96.medium.com/google-dork-mastery-part-1-finding-hidden-critical-files-with-google-dorks-like-a-pro-d28ad159e9ae?source=rss------bug_bounty-5 | enigma | penetration-testing, hacking, bug-bounty-tips, web-security, bug-bounty | 06-Sep-2024 |
| Master Mobile Traffic Hacking: Intercept Android App Data with Burp Suite | https://medium.com/@WillFromSwiss/master-mobile-traffic-hacking-intercept-android-app-data-with-burp-suite-9278163310ad?source=rss------bug_bounty-5 | WillFromSwiss | cybersecurity, application-security, hacking, android, bug-bounty | 06-Sep-2024 |
| As Luck Would Have It — tales of good fortune in bug bounty | https://medium.com/@l_s_/as-luck-would-have-it-tales-of-good-fortune-in-bug-bounty-9c56d31b3ef5?source=rss------bug_bounty-5 | LS | infosec, information-security, bug-bounty-writeup, hacking, bug-bounty | 06-Sep-2024 |
| How I Explored Further and Chained HTTP Request Smuggling with Other Vulnerabilities | https://cyberw1ng.medium.com/how-i-explored-further-and-chained-http-request-smuggling-with-other-vulnerabilities-cfb974e1e8aa?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, technology, hacking, bug-bounty, cybersecurity | 06-Sep-2024 |
| How 100% Manual Hacking (Without Even Kali And Burp) Led To 2 Medium Vulnerabilities On YesWeHack | https://medium.com/@manan_sanghvi/how-100-manual-hacking-without-even-kali-and-burp-led-to-2-medium-vulnerabilities-on-yeswehack-bbda00fcd84e?source=rss------bug_bounty-5 | Manan Sanghvi | vulnerability, bug-bounty, xss-attack, cybersecurity, ethical-hacking | 05-Sep-2024 |
| Day 27 of 30 Day — 30 Vulnerabilities | Server-Side Template Injection (SSTI) | https://medium.com/@kumawatabhijeet2002/day-27-of-30-day-30-vulnerabilities-server-side-template-injection-ssti-f12c851d7e08?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, server-side-technology, 30dayswritingchallenge, ssti, bug-bounty-tips | 05-Sep-2024 |
| Exploiting Salesforce Lightning Permissions Issues | https://medium.com/@theodorejackson.us/exploiting-salesforce-lightning-permissions-issues-5c04f202c887?source=rss------bug_bounty-5 | Ted Jackson | pentesting, bug-bounty, security, salesforce, cybersecurity | 05-Sep-2024 |
| RCE Exploits Explained: Techniques & Tools in 2024 | https://bootstrapsecurity.medium.com/rce-exploits-explained-techniques-tools-in-2024-79dbbbc67ba6?source=rss------bug_bounty-5 | BootstrapSecurity | ethical-hacking, vulnerability-assessment, cybersecurity, bug-bounty-tips, bug-bounty | 05-Sep-2024 |
| What is WAF? & Secret Techniques to Bypass It | https://medium.com/huntersec-security/what-is-waf-secret-techniques-to-bypass-it-2a4de4768131?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, firewall-security, infosec | 05-Sep-2024 |
| SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff | https://medium.com/@ali.zamini/ssti-in-bug-bounty-program-the-time-i-played-with-handlebars-and-broke-stuff-7dc1f9834a3d?source=rss------bug_bounty-5 | Ali Zamini | bug-hunting, bug-bounty, hacking, web-app-pentesting, ssti | 05-Sep-2024 |
| Blocking Users from Registration | https://medium.com/@patidarbhuwan44/blocking-users-from-registration-e3a584f25e4b?source=rss------bug_bounty-5 | Bhuwan Patidar | bug-bounty, hacking, bug-bounty-tips, web, cybersecurity | 05-Sep-2024 |
| Uncover Hidden Subdomains with Sublist3r and curl: Boost Your Bug Hunting Success | https://enigma96.medium.com/uncover-hidden-subdomains-with-sublist3r-and-curl-boost-your-bug-hunting-success-a80b180a9377?source=rss------bug_bounty-5 | enigma | bug-bounty, bug-bounty-tips, penetration-testing, hacking, web-security | 05-Sep-2024 |
| Find SSRF , LFI , XSS using httpx , waybackurls , gf , gau , qsreplace | https://medium.com/@SatyamPathania/find-ssrf-lfi-xss-using-httpx-waybackurls-gf-gau-qsreplace-96c4794e404c?source=rss------bug_bounty-5 | Satyam Pathania | earn-money-online, cybersecurity, bug-bounty, hacking, money | 05-Sep-2024 |
| Cybersecurity 101 : Subdomain Scanner ทำงานยังไง ? | https://medium.com/@nengapi/cybersecurity-101-subdomain-scanner-%E0%B8%97%E0%B8%B3%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%A2%E0%B8%B1%E0%B8%87%E0%B9%84%E0%B8%87-04c9993620ed?source=rss------bug_bounty-5 | Neng Apichet | subdomain, bug-bounty, subdomain-enumeration, cybersecurity | 05-Sep-2024 |
| Practical Bug Bounty — TCM Academy | Automated Tools | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-automated-tools-ed177aab16f6?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | web-penetration-testing, bug-bounty, penetration-testing, ethical-hacking, cybersecurity | 05-Sep-2024 |
| Dependency Confusion: A Namespace Takeover Story | https://medium.com/@sakshirathore3478/dependency-confusion-a-namespace-takeover-story-fa334533bd50?source=rss------bug_bounty-5 | Sakshi Rathore | bug-bounty-tips, webapplicationpentest, bug-bounty, cybersecurity, bug-bounty-hunter | 05-Sep-2024 |
| Reflected XSS | US Department of Education Recognition | https://codingninjablogs.tech/reflected-xss-us-department-of-education-recognition-270ec27e7f5f?source=rss------bug_bounty-5 | #$ubh@nk@r | vulnerability, bug-bounty, cybersecurity, infosec, hacking | 05-Sep-2024 |
| My first Bug : Uncovering a Reflected XSS with a Simple Payload | https://medium.com/@firdansp/my-first-bug-uncovering-a-reflected-xss-with-a-simple-payload-270b5e3742bb?source=rss------bug_bounty-5 | Firda Nurelia | xs, bug-bounty, bug-bounty-tips, xss-vulnerability, writeup | 05-Sep-2024 |
| How I Discovered an HTTP Request Smuggling Vulnerability in a Major Web Console | https://cyberw1ng.medium.com/how-i-discovered-an-http-request-smuggling-vulnerability-in-a-major-web-console-5188b2b4c539?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, technology, bug-bounty, cybersecurity | 05-Sep-2024 |
| Hidden Reflected XSS on 403 Page. | https://medium.com/@Hacker_Yogi/hidden-reflected-xss-on-403-page-0cbb46683138?source=rss------bug_bounty-5 | Ruben (Hacker_Yogi) | pentesting, bug-bounty-tips, information-security, xss-attack, bug-bounty | 05-Sep-2024 |
| Broken Authentication Leads to the Ability to Unsubscribe Other Users' Payment Reminders | https://medium.com/@blackarazi/broken-authentication-leads-to-the-ability-to-unsubscribe-other-users-payment-reminders-0fdb1a63edec?source=rss------bug_bounty-5 | Azhari Harahap | bug-bounty, broken-authentication, api-security, application-security, bug-bounty-writeup | 04-Sep-2024 |
| Ultimate FFUF Cheatsheet: Advanced Fuzzing Tactics for Pro Bug Hunters! | https://medium.com/h7w/ultimate-ffuf-cheatsheet-advanced-fuzzing-tactics-for-pro-bug-hunters-492598750150?source=rss------bug_bounty-5 | Khaleel Khan | hacking-tools, bug-bounty, hacking, cybersecurity, infosec | 04-Sep-2024 |
| dirsearch: Panduan Lengkap untuk Pengumpulan Informasi Web yang Efektif! | https://medium.com/@adriansyah1230/dirsearch-panduan-lengkap-untuk-pengumpulan-informasi-web-yang-efektif-c7fdee43b2d4?source=rss------bug_bounty-5 | Adrian Syah Abidin | bug-bounty, cybersecurity, infosec, dirsearch, pentesting | 04-Sep-2024 |
| Aquatone: Solusi Cerdas untuk Inspeksi Visual Website yang Mendalam! | https://medium.com/@adriansyah1230/aquatone-solusi-cerdas-untuk-inspeksi-visual-website-yang-mendalam-68811f0735c7?source=rss------bug_bounty-5 | Adrian Syah Abidin | cybersecurity, aquatone, keamanan-informasi, bug-bounty, infosec | 04-Sep-2024 |
| A Comprehensive Guide to FFUF for Bug Hunters | https://maelstromenigma.medium.com/a-comprehensive-guide-to-ffuf-for-bug-hunters-76942e90f92b?source=rss------bug_bounty-5 | enigma | webservices-testing, bug-bounty-tips, bug-bounty, bug-hunting, recon | 04-Sep-2024 |
| Nmap: Pemindai Keamanan Jaringan yang Kuat dan Alat Unggulan untuk Pengumpulan Informasi! | https://medium.com/@adriansyah1230/nmap-pemindai-keamanan-jaringan-yang-kuat-dan-alat-unggulan-untuk-pengumpulan-informasi-ce2186eda0d1?source=rss------bug_bounty-5 | Adrian Syah Abidin | nmap-command, cybersecurity, infosec, bug-bounty, nmap | 04-Sep-2024 |
| Subdomain Enumeration | BBOT ✅>= Subfinder + Sublist3r + Assetfinder + Amass | https://dkcyberz.medium.com/bbot-subfinder-sublist3r-assetfinder-amass-subdomain-enumeration-c42bbbf76052?source=rss------bug_bounty-5 | Harpy Hunter | bug-bounty, subdomain-takeover, bugbounty-tips, subdomains-enumeration, bugbounty-writeup | 04-Sep-2024 |
| OWASP Amass: Alat Canggih untuk Pengumpulan Informasi dan Strategi Pemetaan Serangan yang Efektif! | https://medium.com/@adriansyah1230/owasp-amass-alat-canggih-untuk-pengumpulan-informasi-dan-strategi-pemetaan-serangan-yang-efektif-7859ad0515ad?source=rss------bug_bounty-5 | Adrian Syah Abidin | massa, owasp, bug-bounty, pentest, cybersecurity | 04-Sep-2024 |
| Day 26 of 30 Day — 30 Vulnerabilities | Race Conditions | https://medium.com/@kumawatabhijeet2002/day-26-of-30-day-30-vulnerabilities-race-conditions-e6b761e006b1?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-tips, bug-bounty, 30dayswritingchallenge, race-condition | 04-Sep-2024 |
| reNgine: Framework Otomatisasi Terbaik untuk Pengumpulan Informasi dan Pengujian Penetrasi Web! | https://medium.com/@adriansyah1230/rengine-framework-otomatisasi-terbaik-untuk-pengumpulan-informasi-dan-pengujian-penetrasi-web-13e338edff02?source=rss------bug_bounty-5 | Adrian Syah Abidin | infosec, bug-bounty, keamanan-informasi, rengine, cybersecurity | 04-Sep-2024 |
| Exploring the World of `magicRecon`: A Fun Guide to Target Information Gathering | https://medium.com/@rootspaghetti/exploring-the-world-of-magicrecon-a-fun-guide-to-target-information-gathering-03a9e2bb7e39?source=rss------bug_bounty-5 | Root@Spaghetti | cybersecurity, bug-bounty-tips, hacking, bug-bounty | 04-Sep-2024 |
| Zomatoooo! IDOR in Saved Payments | https://prateeksrivastavaa.medium.com/zomatoooo-idor-in-saved-payments-f8c014879741?source=rss------bug_bounty-5 | Prateek Srivastava | bug-bounty-writeup, bug-bounty, cybersecurity, penetration-testing, bug-bounty-tips | 04-Sep-2024 |
| Openredirect CSRF SSRF XSS And Sqli vulnerability | https://medium.com/@shadowhackr_87285/openredirect-csrf-ssrf-xss-and-sqli-vulnerability-6a9f3a5662e2?source=rss------bug_bounty-5 | Shadowhackr | xss-attack, cybersecurity, bug-bounty, vulnerability, sql | 04-Sep-2024 |
| Zero-Day Exploits: An Inconspicuous Danger | https://medium.com/@mohanmecktro/zero-day-exploits-an-inconspicuous-danger-7e3ca32c164e?source=rss------bug_bounty-5 | Mohan Mecktro | bug-bounty-tips, cyber, cybersecurity, bug-bounty, hacking | 04-Sep-2024 |
| Decoding the Enigma: A Deep Dive into the /home/000~ROOT~000/ Directory | https://soltanali0.medium.com/decoding-the-enigma-a-deep-dive-into-the-home-000-root-000-directory-3be592f05525?source=rss------bug_bounty-5 | soltanali0 | information-security, bug-bounty, directory-listing, security-research, lfi | 04-Sep-2024 |
| TeamCity Takedown: Breach, Backup, and Break-in. | https://medium.com/@josh.beck2006/teamcity-takedown-breach-backup-and-break-in-3ce333b63788?source=rss------bug_bounty-5 | Josh Beck | cybersecurity, bug-bounty, ctf-writeup | 04-Sep-2024 |
| Advanced Strategies to Defend Against HTTP Request Smuggling: A Deep Dive | https://cyberw1ng.medium.com/advanced-strategies-to-defend-against-http-request-smuggling-a-deep-dive-ba7c0abe911a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, bug-bounty, technology, penetration-testing | 04-Sep-2024 |
| Shodan: Senjata Rahasia Wajib Bagi Peretas dan Peneliti Keamanan untuk Pengumpulan Informasi yang… | https://medium.com/@adriansyah1230/shodan-senjata-rahasia-wajib-bagi-peretas-dan-peneliti-keamanan-untuk-pengumpulan-informasi-yang-a3f86dd47eed?source=rss------bug_bounty-5 | Adrian Syah Abidin | infosec, shodan, bug-bounty, hacking, cybersecurity | 03-Sep-2024 |
| Bug Bounty: Your Guide to Ethical Hacking, Rewards, and the Best Learning Resources | https://medium.com/@akatrigger53/bug-bounty-your-guide-to-ethical-hacking-rewards-and-the-best-learning-resources-071c6eb14a27?source=rss------bug_bounty-5 | Akansh Panday | bug-bounty, hacking, darkweb, cybersecurity | 03-Sep-2024 |
| How to overcome the pause point in BugBounty | https://anonysm.medium.com/how-to-overcome-the-pause-point-in-bugbounty-02b849cfcff8?source=rss------bug_bounty-5 | Muthu D | cybersecurity, bug-bounty, penetration-testing, motivation, hacking | 03-Sep-2024 |
| DNSDumpster: Eksplorasi Informasi Domain Mendalam | https://medium.com/@adriansyah1230/dnsdumpster-eksplorasi-informasi-domain-mendalam-d20fa2635596?source=rss------bug_bounty-5 | Adrian Syah Abidin | keamanan-informasi, cybersecurity, infosec, bug-bounty, dnsdumpster | 03-Sep-2024 |
| Day 25 of 30 Day — 30 Vulnerabilities | HTTP Request Smuggling | https://medium.com/@kumawatabhijeet2002/day-25-of-30-day-30-vulnerabilities-http-request-smuggling-722c3f01dbc4?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, http-request-smuggling, bug-bounty-tips, 30dayswritingchallenge | 03-Sep-2024 |
| How to Bypass Web Application Firewalls (WAFs) | https://bootstrapsecurity.medium.com/how-to-bypass-web-application-firewalls-10cec76e8276?source=rss------bug_bounty-5 | BootstrapSecurity | bugbounty-tips, cybersecurity, ethical-hacking, bug-bounty | 03-Sep-2024 |
| The removed employee can see whether the users he invited to the victim’s Pinterest business… | https://rhidayah.medium.com/the-removed-employee-can-see-whether-the-users-he-invited-to-the-victims-pinterest-business-085d2ee8e14e?source=rss------bug_bounty-5 | Rohmad Hidayah | bugcrowd, bug-bounty, pinterest, business-logic-flaw | 03-Sep-2024 |
| [IDOR] Update another user’s profile | https://rhidayah.medium.com/idor-update-another-users-profile-79d0158ae60c?source=rss------bug_bounty-5 | Rohmad Hidayah | idor, bug-bounty | 03-Sep-2024 |
| Pre account takeover via google sign in | https://rhidayah.medium.com/pre-account-takeover-via-google-sign-in-bb442f4c32a2?source=rss------bug_bounty-5 | Rohmad Hidayah | bug-bounty, account-takeover | 03-Sep-2024 |
| P3 (Medium) : How I Gain Access To NASA's Internal Workspace?! | https://medium.com/@srishavinkumar/p3-medium-how-i-gain-access-to-nasas-internal-workspace-d0896fee563c?source=rss------bug_bounty-5 | Sri Shavin Kumar | bug-bounty, bug-bounty-tips, cybersecurity, technology, programming | 03-Sep-2024 |
| Improper Authorization via Mass Assignment of Membership Parameters | https://ahmedtamer0.medium.com/improper-authorization-via-mass-assignment-of-membership-parameters-7245925b09f5?source=rss------bug_bounty-5 | Ahmed Tamer | bug-hunting, api, mass-assignment, writeup, bug-bounty | 03-Sep-2024 |
| How Bypassed KonyLab Code Protection | https://medium.com/@xmosb7/how-bypassed-konylab-code-protection-cac53da01ad1?source=rss------bug_bounty-5 | Mahmoud Mosbah | mobilesec, infosec, cybersecurity, cyberattack, bug-bounty | 03-Sep-2024 |
| Subdomain Enumeration part 1 (Manual & Automation) | https://mrunknown124154.medium.com/subdomain-enumeration-part-1-manual-automation-45108388bdb2?source=rss------bug_bounty-5 | Mr Abdullah | subdomains-enumeration, hacking, bug-bounty, web-hacking, web-penetration-testing | 03-Sep-2024 |
| API VULNERABILITIES | https://medium.com/@adithyakrishnav001/api-vulnerabilities-9b68a0bd87a8?source=rss------bug_bounty-5 | Adithyakrishna V | cybersecurity, hacking, aad1, api-security, bug-bounty | 03-Sep-2024 |
| HTTP Request Smuggling: The Hidden Web Threat You Need to Know About | https://cyberw1ng.medium.com/http-request-smuggling-the-hidden-web-threat-you-need-to-know-about-71ff45c7f94a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, cybersecurity, bug-bounty, hacking, careers | 03-Sep-2024 |
| My First Bounty: How I Exploited a CORS Misconfiguration | https://anas0x1.medium.com/my-first-bounty-how-i-exploited-a-cors-misconfiguration-bc1f9137b272?source=rss------bug_bounty-5 | Anas Ibrahim | cors, bug-bounty, bug-hunting, hackerone, cybersecurity | 03-Sep-2024 |
| How I Discovered a Hidden XSS and What I Learned | https://medium.com/@issam.qsous/how-i-discovered-a-hidden-xss-and-what-i-learned-9a34995ebbd2?source=rss------bug_bounty-5 | Essam Qsous | web-development, hacking, penetration-testing, security, bug-bounty | 03-Sep-2024 |
| The Accidental Discovery | https://medium.com/@Kinqdathacker/the-accidental-discovery-8ed6f9622b0c?source=rss------bug_bounty-5 | Kinqdathacker | cybersecurity, hacking, technology, web-hacking, bug-bounty | 02-Sep-2024 |
| Day 23 of 30 Days — 30 Vulnerabilities | JSON Web Token (JWT) Attacks | https://medium.com/@kumawatabhijeet2002/day-23-of-30-days-30-vulnerabilities-json-web-token-jwt-attacks-e77c719fe22d?source=rss------bug_bounty-5 | Abhijeet kumawat | web, bug-bounty, bug-bounty-tips, 30dayswritingchallenge | 02-Sep-2024 |
| Advanced Web Application Security Checklist | https://securitycipher.medium.com/advanced-web-application-security-checklist-6f7ed5917c72?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | cybersecurity, bug-bounty-tips, bug-bounty, technology, security | 02-Sep-2024 |
| How I Hacked into Yamaha using CVE 2017-5487 | https://medium.com/@josuofficial327/how-i-found-an-easy-cve-in-yamaha-964366a34b59?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | cybersecurity, bug-bounty, bug-bounty-hunter, bug-bounty-writeup, bug-bounty-tips | 02-Sep-2024 |
| [Specially Customized] TECNO Security 3rd Anniversary Bug Hunting Competition! | https://medium.com/@security.tecno/specially-customized-tecno-security-3rd-anniversary-bug-hunting-competition-8a4e6501e91e?source=rss------bug_bounty-5 | TECNO Security | bug-bounty, bounty-program, hacking, hunting | 02-Sep-2024 |
| Hunting JavaScript Files for Bug Hunters | https://bevijaygupta.medium.com/hunting-javascript-files-for-bug-hunters-7355df2215ec?source=rss------bug_bounty-5 | Vijay Gupta | hunting, javascript, bugs, bug-bounty, bug-hunting | 02-Sep-2024 |
| A Story About How i Found CVE-2020–27838 in TVH responsible disclosure | https://medium.com/@karthithehacker/a-story-about-how-i-found-cve-2020-27838-in-tvh-responsible-disclosure-16946f8f8faf?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty, cybersecurity, infosec, web-security | 02-Sep-2024 |
| Advanced Web Application Security Checklist | https://infosecwriteups.com/advanced-web-application-security-checklist-6f7ed5917c72?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | cybersecurity, bug-bounty-tips, bug-bounty, technology, security | 02-Sep-2024 |
| Business logic / Failed defense Vulnerability in bug bounty | https://itsravikiran25.medium.com/business-logic-failed-defense-vulnerability-in-bug-bounty-4ab932a1a200?source=rss------bug_bounty-5 | Ravikiran | bug-bounty-writeup, cybersecurity, penetration-testing, bug-bounty, hacking | 02-Sep-2024 |
| A Story About How i Found CVE-2020–27838 in TVH responsible disclosure | https://infosecwriteups.com/a-story-about-how-i-found-cve-2020-27838-in-tvh-responsible-disclosure-16946f8f8faf?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty, cybersecurity, infosec, web-security | 02-Sep-2024 |
| HTML Form Injection Vulnerability in Gmail | https://medium.com/@h4x0r_dz/html-form-injection-vulnerability-in-gmail-152a01f6d423?source=rss------bug_bounty-5 | h4x0r_dz | google, web, bug-bounty, vulnerability, security | 02-Sep-2024 |
| Easy 500$ Bounty with Host Header Injection By Ramthulla | https://skramthu.medium.com/easy-500-bounty-with-host-header-injection-by-ramthulla-bb556ebd4c46?source=rss------bug_bounty-5 | Ram | infosec-write-ups, bounty-program, hackerone, bug-bounty, bugbounty-writeup | 02-Sep-2024 |
| Pentesting vs Bug Bounty: Apa Perbedaannya dan Bagaimana Tahapannya? | https://medium.com/@adriansyah1230/pentesting-vs-bug-bounty-apa-perbedaannya-dan-bagaimana-tahapannya-182cc05a2721?source=rss------bug_bounty-5 | Adrian Syah Abidin | hacking, bug-bounty, pentesting, cybersecurity | 02-Sep-2024 |
| How to Automate Subdomain Takeover Finding: Low Hang Fruit… | https://dkcyberz.medium.com/how-to-automate-subdomain-takeover-finding-low-hang-fruit-5733f2794df1?source=rss------bug_bounty-5 | Harpy Hunter | bug-bounty-tips, how-to-takeover-s3-bucket, bug-bounty, bug-bounty-writeup, subdomain-takeover | 02-Sep-2024 |
| Secure your Instagram Account Today, Or be a victim. | https://mayur-jadhav.medium.com/secure-your-instagram-account-today-or-be-a-victim-9f476937a5e2?source=rss------bug_bounty-5 | Mayur Jadhav | bug-bounty, social-media, hacking, cybersecurity | 02-Sep-2024 |
| 26.18 Lab: Web cache poisoning via HTTP/2 request tunnelling | https://cyberw1ng.medium.com/26-18-lab-web-cache-poisoning-via-http-2-request-tunnelling-72abd219dc68?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, technology, careers, hacking, bug-bounty | 02-Sep-2024 |
| SSRF via DNS Rebinding That Leads to Several Clouds Access (Arabic) | https://medium.com/@Berserker1337/ssrf-via-dns-rebinding-that-leads-to-several-clouds-access-arabic-db9f9a9c530c?source=rss------bug_bounty-5 | Berserker | bug-bounty, infosec | 02-Sep-2024 |
| Lessons Learned #1: One line of code can make your application vulnerable (Pre-Auth RCE in Metabase… | https://medium.com/appsec-untangled/lessons-learned-1-one-line-of-code-can-make-your-application-vulnerable-pre-auth-rce-in-metabase-a8579ca0102d?source=rss------bug_bounty-5 | Mohamed AboElKheir | threat-modeling, vulnerability, bug-bounty, application-security, cybersecurity | 02-Sep-2024 |
| Insider Secrets to Earning $100 to $250 in Bug Bounties | https://medium.com/@ajaynaikhack/insider-secrets-to-earning-100-to-250-in-bug-bounties-9dd6adb2a304?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, bug-bounty | 02-Sep-2024 |
| The Wild World of Path Traversal: Sneaking Around the Web’s Dark Corners | https://cluelesszay.medium.com/the-wild-world-of-path-traversal-sneaking-around-the-webs-dark-corners-088f5522e371?source=rss------bug_bounty-5 | zaythecluelessdev | path-traversal, web-security, cybersecurity, bug-bounty, ethical-hacking | 01-Sep-2024 |
| Race condition to bypass email verify, part #2 | https://siratsami71.medium.com/race-condition-to-bypass-email-verify-part-2-5efca002cf24?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | bug-bounty-tips, cybersecurity, bugbounty-writeup, bug-bounty | 01-Sep-2024 |
| How I found exif metdata leak and earned small bounty | https://medium.com/@deepk007/how-i-found-exif-metdata-leak-and-earned-small-bounty-34c93de2fa2e?source=rss------bug_bounty-5 | DEep | bug-bounty, ethical-hacking, hacking, bug-bounty-tips, cybersecurity | 01-Sep-2024 |
| Advanced Techniques for Exploiting SSRF Vulnerabilities | https://bootstrapsecurity.medium.com/advanced-techniques-for-exploiting-ssrf-vulnerabilities-9996cade3a64?source=rss------bug_bounty-5 | BootstrapSecurity | bug-bounty-tips, bug-bounty-hunter, cybersecurity, ethical-hacking, bug-bounty | 01-Sep-2024 |
| Port Scanning for Bug Bounties | https://bevijaygupta.medium.com/port-scanning-for-bug-bounties-1b660ea41483?source=rss------bug_bounty-5 | Vijay Gupta | bug-fixes, port-scanning, bugs, bug-bounty, bug-bounty-tips | 01-Sep-2024 |
| Subdomain Discovery Tool | https://medium.com/@World-Breaker/subdomain-discovery-tool-7403e38a760f?source=rss------bug_bounty-5 | usu@rioZ3r0 | python, enum, enumeration, subdomain, bug-bounty | 01-Sep-2024 |
| OWASP A05 :Security Misconfiguration | https://medium.com/@shivamsharma.ss484/owasp-a05-security-misconfiguration-10518396c757?source=rss------bug_bounty-5 | Shivamsharma | owasp, owasp-top-10, cybersecurity, bug-bounty, oscp | 01-Sep-2024 |
| A Story About How I Found XSS in ASUS | https://infosecwriteups.com/a-story-about-how-i-found-xss-in-asus-cb233ce3bb9c?source=rss------bug_bounty-5 | Karthikeyan.V | bugbounty-tips, infosec, bugbounty-writeup, bug-bounty, bugbounty-poc | 01-Sep-2024 |
| # 5 Install OWASP Juice Shop on Kali Linux — Guide for Burp Suite | https://securitycipher.medium.com/5-install-owasp-juice-shop-on-kali-linux-guide-for-burp-suite-6b31c1ece398?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | bug-bounty-tips, security, technology, cybersecurity, bug-bounty | 01-Sep-2024 |
| How I found My first P1 Bug which ended up ….$? | https://medium.com/@yashsomalkar/how-i-found-my-first-p1-bug-which-ended-up-5e6cffdbb066?source=rss------bug_bounty-5 | Yashsomalkar | bugbounty-writeup, bugbounty-poc, aws, bug-bounty, cybersecurity | 01-Sep-2024 |
| How I Got $250 For My Second Bug In HackerOne | https://medium.com/@likithteki76/how-i-got-250-for-my-second-bug-in-hackerone-35c75cbd84bd?source=rss------bug_bounty-5 | Likith Teki | hackerone, bug-bounty, bug-bounty-tips, bug-hunting, bugbounty-writeup | 01-Sep-2024 |
| 26.18 Lab: Bypassing access controls via HTTP/2 request tunneling | https://cyberw1ng.medium.com/26-18-lab-bypassing-access-controls-via-http-2-request-tunneling-f92ae50661bc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, bug-bounty, cybersecurity, careers | 01-Sep-2024 |
| How I found My first P1 Bug which ended up ….$? | https://medium.com/@yashsomalkar/how-i-found-my-first-p1-bug-which-ended-up-5e6cffdbb066?source=rss------bug_bounty-5 | Rudrakshacker | bugbounty-writeup, bugbounty-poc, aws, bug-bounty, cybersecurity | 01-Sep-2024 |
| How I Got $250 For My Second Bug on HackerOne | https://medium.com/@likithteki76/how-i-got-250-for-my-second-bug-in-hackerone-35c75cbd84bd?source=rss------bug_bounty-5 | Likith Teki | hackerone, bug-bounty, bug-bounty-tips, bug-hunting, bugbounty-writeup | 01-Sep-2024 |
| 26.17 Lab: Exploiting HTTP request smuggling to perform web cache deception | https://cyberw1ng.medium.com/26-17-lab-exploiting-http-request-smuggling-to-perform-web-cache-deception-69a6e9654b7e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, careers, bug-bounty, cybersecurity | 31-Aug-2024 |
| All You Need to know About Broken Authentication and Session Management | https://medium.com/@ahmed.hilal/all-you-need-to-know-about-broken-authentication-and-session-management-26920f100714?source=rss------bug_bounty-5 | X0_AhMeD_0X | bug-bounty, pentesting, cybersecurity, bugs, vulnerability | 31-Aug-2024 |
| DEPENDENCY CONFUSION CAN LEAD TO P5 OR P2 BASED ON LUCK | https://medium.com/@anonymousshetty2003/dependency-confusion-can-lead-to-p5-or-p2-based-on-luck-64a5b94b80c1?source=rss------bug_bounty-5 | Anonymousshetty | hacking, dependency-confusion, cybersecurity, bug-bounty | 31-Aug-2024 |
| “Boost Your Productivity: Essential Tips for Organizing Your Work as a Bug Bounty Hunter” | https://medium.com/@mahdisalhi0500/boost-your-productivity-essential-tips-for-organizing-your-work-as-a-bug-bounty-hunter-8de1517dc6a4?source=rss------bug_bounty-5 | Mahdisalhi | bug-bounty, bug-bounty-tips, ethical-hacking, infosec, hacking | 31-Aug-2024 |
| HOW I GOT ACCESS TO ACCOUNT BY OTP BYPASS | https://medium.com/@anonymousshetty2003/how-i-got-access-to-account-by-otp-bypass-c49eb0490744?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, hacking, bug-bounty, otp-bypass | 31-Aug-2024 |
| Bug bounty Hunting 101 | https://medium.com/@sys_br3ach3r/bug-bounty-hunting-101-7d2258a3b21d?source=rss------bug_bounty-5 | sys_br3ach3r | bug-bounty-tips, bug-bounty | 31-Aug-2024 |
| OTP bypass through the Response manipulation | https://itsravikiran25.medium.com/otp-bypass-through-the-response-manipulation-4f25ab36f60b?source=rss------bug_bounty-5 | Ravikiran | cybersecurity, bugbounty-writeup, bug-bounty, hacking, otp-bypass | 31-Aug-2024 |
| The Discovery of CVE-2024–5947: Authentication Bypass in Deep Sea Electronics DSE855 | https://medium.com/@karthithehacker/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty, infosec, information-security, bugbounty-tips, bugbounty-writeup | 31-Aug-2024 |
| Using Default Credential to Admin Account Takeover | https://ch4ndan.medium.com/using-default-credential-to-admin-account-takeover-04c557e67969?source=rss------bug_bounty-5 | Ch4ndan das | bugs, bug-bounty-tips, hacking, bug-bounty, cybersecurity | 31-Aug-2024 |
| How to Take Over a Subdomain Through S3 Bucket Takeover… | https://dkcyberz.medium.com/how-to-take-over-a-subdomain-through-s3-bucket-takeover-a53238499b81?source=rss------bug_bounty-5 | Harpy Hunter | bug-bounty, bug-hunting, hackerone, s3-bucket, subdomain-takeover | 31-Aug-2024 |
| How to Get Started in Bug Bounty Hunting: A Comprehensive Beginner’s Guide | https://shubhdhungana.medium.com/how-to-get-started-in-bug-bounty-hunting-a-comprehensive-beginners-guide-4cdaf3dcd910?source=rss------bug_bounty-5 | Subh Dhungana | bug-bounty, cybersecurity, hacking, hackerone, infosec | 31-Aug-2024 |
| Most Asked Questions from Cybersecurity Beginners with Answers | https://medium.com/@cham3leon/most-asked-questions-from-cybersecurity-beginners-with-answers-91b7c680e967?source=rss------bug_bounty-5 | cham3leon | faq, cybersecurity, guides-and-tutorials, pentesting, bug-bounty | 31-Aug-2024 |
| The Discovery of CVE-2024–5947: Authentication Bypass in Deep Sea Electronics DSE855 | https://infosecwriteups.com/the-discovery-of-cve-2024-5947-authentication-bypass-in-deep-sea-electronics-dse855-5fa2e89cbdfb?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty, infosec, information-security, bugbounty-tips, bugbounty-writeup | 31-Aug-2024 |
| Bypassing CSP via URL Parser Confusions : XSS on Netlify’s Image CDN | https://sudhanshur705.medium.com/bypassing-csp-via-url-parser-confusions-xss-on-netlifys-image-cdn-755a27065fd9?source=rss------bug_bounty-5 | Sudhanshu Rajbhar | bug-bounty, csp, xss-attack | 31-Aug-2024 |
| Parameter tampering result in product price manipulation | https://medium.com/@RaunakGupta1922/parameter-tampering-result-in-product-price-manipulation-356c07a571e5?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | business, cybersecurity, hacking, college, bug-bounty | 31-Aug-2024 |
| IIS welcome page to source code review to LFI! | https://medium.com/@omarahmed_13016/iis-welcome-page-to-source-code-review-to-lfi-23ec581049f5?source=rss------bug_bounty-5 | Omar Ahmed | bug-bounty, hackerone, application-security, bug-bounty-tips | 31-Aug-2024 |
| How to Get Started in Bug Bounty Hunting: A Comprehensive Beginner’s Guide | https://infosecwriteups.com/how-to-get-started-in-bug-bounty-hunting-a-comprehensive-beginners-guide-4cdaf3dcd910?source=rss------bug_bounty-5 | Subh Dhungana | bug-bounty, cybersecurity, hacking, hackerone, infosec | 31-Aug-2024 |
| From Reset to Takeover: The Exploitation Potential of IDOR in Password Recovery Systems | https://medium.com/@tusharpuri6/from-reset-to-takeover-the-exploitation-potential-of-idor-in-password-recovery-systems-5d1b6f53530a?source=rss------bug_bounty-5 | Tusharpuri | bug-bounty, application-security, penetration-testing, offensive-security, authentication | 31-Aug-2024 |
| How to find webcams using the Google Dorking. | https://bob218.medium.com/how-to-find-webcams-using-the-google-dorking-4c7b491fa856?source=rss------bug_bounty-5 | bob218 | hacking, bug-bounty, osint, cybersecurity, google-dork | 31-Aug-2024 |
| How Attackers Sneak in Hidden Requests and What You Can Do About It | https://cyberw1ng.medium.com/how-attackers-sneak-in-hidden-requests-and-what-you-can-do-about-it-cc085f245b4e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, hacking, penetration-testing | 31-Aug-2024 |
| Day 23 of 30 Days — 30 Vulnerabilities | JSON Web Token (JWT) Attacks | https://medium.com/@kumawatabhijeet2002/day-23-of-30-days-30-vulnerabilities-json-web-token-jwt-attacks-d9509595ebd8?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-tips, bug-bounty, jwt-token, jwt-authentication, 30dayswritingchallenge | 30-Aug-2024 |
| New trick to make self xss impactful | https://medium.com/@Rahulkrishnan_R_Panicker/new-trick-to-make-self-xss-impactful-073d52a07d4f?source=rss------bug_bounty-5 | Rahulkrishnan R Panicker | bug-bounty-tips, bug-bounty-writeup, cybersecurity, bug-bounty, xss-attack | 30-Aug-2024 |
| How to install dnsReaper and use of dnsReaper | https://medium.com/@sherlock297/how-to-install-dnsreaper-and-use-of-dnsreaper-bc69d66d8c08?source=rss------bug_bounty-5 | Ravindra Dagale | dnsreaper, tools, bug-bounty, how-to, subdomain-takeover | 30-Aug-2024 |
| Google Dorks | https://medium.com/@twinkspap/google-dorks-c83abf0918ef?source=rss------bug_bounty-5 | twinks | bug-bounty, google-dork, learning, skills, cybersecurity | 30-Aug-2024 |
| Top 100Vulnerabilities: Identifying and Addressing Security Risks | https://medium.com/@0xvan/top-100vulnerabilities-identifying-and-addressing-security-risks-bce861b5fa31?source=rss------bug_bounty-5 | 0xvan | bug-bounty-tips, security, cybersecurity, bug-bounty, web-security | 30-Aug-2024 |
| ./Fingerprinting Web Technologies | https://gauravdavre.medium.com/fingerprinting-web-technologies-fde6631f9ef7?source=rss------bug_bounty-5 | Gaurav Davre | bug-bounty, cybersecurity, open-source-intelligence, reconnaissance, web-technology | 30-Aug-2024 |
| 26.16 Lab: Exploiting HTTP request smuggling to perform web cache poisoning | https://cyberw1ng.medium.com/26-16-lab-exploiting-http-request-smuggling-to-perform-web-cache-poisoning-fa35ac4fdf4c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, bug-bounty, careers, cybersecurity | 30-Aug-2024 |
| Unlock Hidden Web Vulnerabilities: Advanced ParamSpider Tactics Every Hacker Must Know! | https://systemweakness.com/unlock-hidden-web-vulnerabilities-advanced-paramspider-tactics-every-hacker-must-know-62487db3e8c8?source=rss------bug_bounty-5 | Khaleel Khan | penetration-testing, bug-bounty, hacking, infosec, cybersecurity | 30-Aug-2024 |
| The Easiest Bug For Beginners | https://medium.com/@josuofficial327/the-easiest-bug-for-beginners-491986cbc53c?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty-hunter, cybersecurity, ethical-hacking, hacking, bug-bounty | 30-Aug-2024 |
| The Hunt for XXE to LFI: How I Uncovered CVE-2019–9670 in a Bug Bounty Program | https://medium.com/@karthithehacker/the-hunt-for-xxe-to-lfi-how-i-uncovered-cve-2019-9670-in-a-bug-bounty-program-5668e4afa806?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty, information-security, infosec, bugbounty-writeup, bug-bounty-tips | 30-Aug-2024 |
| When Giving Out Cheap Hotel Deals Go Wrong: | https://medium.com/@ralph.andalis92/when-giving-out-cheap-hotel-deals-go-wrong-bfea34fa3cde?source=rss------bug_bounty-5 | Ralph Andalis | bug-bounty-tips, pentesting, bug-bounty, web-application-security, web-security | 30-Aug-2024 |
| My Five Minute Critical Vulnerability Discovery on Hackerone | https://medium.com/@0xvan/my-five-minute-critical-vulnerability-discovery-on-hackerone-067258333c80?source=rss------bug_bounty-5 | 0xvan | bug-bounty-writeup, bug-bounty-tips, ethical-hacking, pentesting, bug-bounty | 30-Aug-2024 |
| DVWA Cheat Sheet (Low & Medium) | https://medium.com/@loaysalah276/dvwa-cheat-sheet-low-medium-c7490e76f1b5?source=rss------bug_bounty-5 | Loay Salah | bug-bounty, cybersecurity, penetration-testing, owasp-top-10, dvwa | 30-Aug-2024 |
| Understanding Bugcrowd’s Vulnerability Rating Taxonomy (VRT): | https://medium.com/@js8971105/understanding-bugcrowds-vulnerability-rating-taxonomy-vrt-d5bc946443b5?source=rss------bug_bounty-5 | jatin singh | bug-bounty, web-security, hacking, vrt, web | 30-Aug-2024 |
| Top 100 Vulnerabilities: Identifying and Addressing Security Risks | https://medium.com/@0xvan/top-100vulnerabilities-identifying-and-addressing-security-risks-bce861b5fa31?source=rss------bug_bounty-5 | 0xvan | bug-bounty-tips, security, cybersecurity, bug-bounty, web-security | 30-Aug-2024 |
| Subdomain Analysis for Bug Bounty Hunting: A Comprehensive Guide | https://bughunteralltime.medium.com/subdomain-analysis-for-bug-bounty-hunting-a-comprehensive-guide-920e33a59a91?source=rss------bug_bounty-5 | Bug_Hunter_All_Time | bug-bounty | 30-Aug-2024 |
| How to Hunt for Sensitive Directories in Bug Bounty Hunting | https://bughunteralltime.medium.com/how-to-hunt-for-sensitive-directories-in-bug-bounty-hunting-f61a7f61d8fb?source=rss------bug_bounty-5 | Bug_Hunter_All_Time | bug-bounty-tips, bug-bounty, hacking | 30-Aug-2024 |
| How to Map Out a Target for Bug Bounty Hunting | https://bughunteralltime.medium.com/how-to-map-out-a-target-for-bug-bounty-hunting-acea0ed59783?source=rss------bug_bounty-5 | Bug_Hunter_All_Time | bug-bounty-tips, bug-bounty, hacking, bugs | 30-Aug-2024 |
| How To FindWeb Technology Identification for Effective Bug Bounty Hunting | https://bughunteralltime.medium.com/how-to-findweb-technology-identification-for-effective-bug-bounty-hunting-a0f57c80b67b?source=rss------bug_bounty-5 | Bug_Hunter_All_Time | hacking, bug-bounty-tips, bug-bounty, bug-fixes, web-development | 30-Aug-2024 |
| Interview joke 2: Application Security (Prod. | https://medium.com/@kannnannmk/interview-joke-2-application-security-prod-7a0c4c6cdd1a?source=rss------bug_bounty-5 | Neelamegha Kannan S | bug-bounty, application-security, code-review, pentesting, bug-bounty-tips | 30-Aug-2024 |
| Easy Subdomain Enumeration Tools & Commands | https://medium.com/@josuofficial327/easy-subdomain-enumeration-tools-commands-5f8a8fe0f3a0?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | cybersecurity, ethical-hacking, bug-bounty-tips, bug-hunting, bug-bounty | 30-Aug-2024 |
| Interview joke 1: Application Security (Prod. | https://medium.com/@kannnannmk/application-security-prod-3868c0b8cb64?source=rss------bug_bounty-5 | Neelamegha Kannan S | bug-bounty-tips, interview, bug-bounty, web-security, application-security | 30-Aug-2024 |
| OWASP A04:2021 INSECURE DESIGN | https://medium.com/@shivamsharma.ss484/owasp-a04-2021-insecure-design-34ef11e83e6f?source=rss------bug_bounty-5 | Shivamsharma | owasp, owasp-top-10, bug-bounty, hacking, cybersecurity | 30-Aug-2024 |
| A Comprehensive AI Security Model for Penetration Testing leverages advanced AI techniques to… | https://medium.com/@ajaynaik_16635/a-comprehensive-ai-security-model-for-penetration-testing-leverages-advanced-ai-techniques-to-9caa4febfc21?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty-tips, bug-bounty, ai-security, ethical-hacking | 30-Aug-2024 |
| Bad Effect Of Bug In Domain. | https://medium.com/@nazmulhasan017191/bad-effect-of-bug-in-domain-e0cfd62cb3bc?source=rss------bug_bounty-5 | Nazmul Hasan | technical-analysis, information-security, cybersecurity, bug-hunting, bug-bounty | 30-Aug-2024 |
| How to Find Clickjacking Vulnerabilities Using the Command Line in Kali Linux | https://bughunteralltime.medium.com/how-to-find-clickjacking-vulnerabilities-using-the-command-line-in-kali-linux-a07cc64437f3?source=rss------bug_bounty-5 | Bug_Hunter_All_Time | bug-bounty-tips, hacking, bugs, bug-bounty | 30-Aug-2024 |
| Understanding Log Stealer and Its Role in Security Testing — Part 1 | https://medium.com/haktrak-cybersecurity-squad/understanding-log-stealer-and-its-role-in-security-testing-part-1-5f2223b47847?source=rss------bug_bounty-5 | YoKo Kho | security-testing, stealer-logs, stealer-malware, broken-access-control, bug-bounty | 30-Aug-2024 |
| Understanding Stealer Logs and Its Role in Security Testing — Part 1 | https://medium.com/haktrak-cybersecurity-squad/understanding-log-stealer-and-its-role-in-security-testing-part-1-5f2223b47847?source=rss------bug_bounty-5 | YoKo Kho | stealer-logs, stealer-malware, red-team, broken-access-control, bug-bounty | 30-Aug-2024 |
| A Comprehensive AI Security Model for Penetration Testing leverages advanced AI techniques to… | https://medium.com/@ajaynaikhack/a-comprehensive-ai-security-model-for-penetration-testing-leverages-advanced-ai-techniques-to-9caa4febfc21?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty-tips, bug-bounty, ai-security, ethical-hacking | 30-Aug-2024 |
| Overview CVE-2024–38063 is a critical zero-click remote code execution (RCE) vulnerability… | https://medium.com/@ajaynaikhack/overview-cve-2024-38063-is-a-critical-zero-click-remote-code-execution-rce-vulnerability-9be862382548?source=rss------bug_bounty-5 | Ajay Naik | hacking, bug-bounty, cve, network-security, windows | 30-Aug-2024 |
| Day 22 of 30 Days — 30 Vulnerabilities | Business Logic Flaws | https://medium.com/@kumawatabhijeet2002/day-22-of-30-days-30-vulnerabilities-business-logic-flaws-734c2f4b0575?source=rss------bug_bounty-5 | Abhijeet kumawat | business-logic, bug-bounty-tips, business-logic-flaw, 30dayswritingchallenge, bug-bounty | 29-Aug-2024 |
| Part -2: Uncovering a Critical Parameter Tampering Vulnerability on a Major OTT Platform | https://medium.com/@sulmanfarooq531/uncovering-a-critical-parameter-tampering-vulnerability-on-a-major-ott-platform-e3342cd3437c?source=rss------bug_bounty-5 | Sulman Farooq S | cybersecurity, bug-bounty, http-parameter-pollution, ethical-hacking, ott | 29-Aug-2024 |
| How Hackers Use Cross-Site Scripting to Break Through Web Application Firewalls! | https://theshaco.com/how-hackers-use-cross-site-scripting-to-break-through-web-application-firewalls-ab101f1778a1?source=rss------bug_bounty-5 | Khaleel Khan | web-development, cybersecurity, infosec, hacking, bug-bounty | 29-Aug-2024 |
| Practical Bug Bounty — TCM Academy | Module 8 pt.3 (SSTI, XXE, Insecure File Uploads) | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-module-8-pt-3-ssti-xxe-insecure-file-uploads-1ed7056ea0c7?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | bug-bounty, web-penetration-testing, cybersecurity, ethical-hacking, tcm-academy | 29-Aug-2024 |
| Part 2 — How I Found Vulnerabilities in NASA and Got into the Hall of Fame — 4 Bugs | Karthikeyan… | https://systemweakness.com/part-2-how-i-found-vulnerabilities-in-nasa-and-got-into-the-hall-of-fame-4-bugs-karthikeyan-79c3ec17a336?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, careers, cybersecurity, hacking, bug-bounty | 29-Aug-2024 |
| Disable Any Customer Ability To Create Service Account With Business Logic Vulnerability | https://medium.com/@bilalresearcher/disable-any-customer-ability-to-create-service-account-with-business-logic-vulnerability-05ab37901a4a?source=rss------bug_bounty-5 | Bilal Researcher | hacking, bug-bounty-writeup, cybersecurity, bug-bounty, bugbounty-writeup | 29-Aug-2024 |
| Reflected XSS To Account Takeover Without Stealing Session Cookie | https://medium.com/@bilalresearcher/reflected-xss-to-account-takeover-without-stealing-session-cookie-413e522aac40?source=rss------bug_bounty-5 | Bilal Researcher | hacking, bug-bounty-writeup, bug-bounty, bugbounty-writeup, cybersecurity | 29-Aug-2024 |
| Detecting Blind Injection Attacks with Discord Webhooks | https://medium.com/@bilalresearcher/detecting-blind-injection-attacks-with-discord-webhooks-9a9d3b566bf1?source=rss------bug_bounty-5 | Bilal Researcher | hacking, cybersecurity, bugbounty-writeup, bug-bounty, bug-bounty-writeup | 29-Aug-2024 |
| A Beautiful Bug: Interesting URL scheme bypass + Race Condition | https://medium.com/@bilalresearcher/a-beautiful-bug-interesting-url-scheme-bypass-race-condition-e8ff79361740?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bugbounty-writeup, hacking, cybersecurity, bug-bounty-writeup | 29-Aug-2024 |
| Stored XSS to Account Takeover (AWS Cognito) | https://medium.com/@bilalresearcher/stored-xss-to-account-takeover-aws-cognito-bd29d241e5d1?source=rss------bug_bounty-5 | Bilal Researcher | xss-vulnerability, bug-bounty-tips, bugbounty-writeup, cybersecurity, bug-bounty | 29-Aug-2024 |
| My Journey to the United Nations Hall of Fame: A Story of Lucky Me | https://medium.com/@siddharth_1/my-journey-to-the-united-nations-hall-of-fame-a-story-of-lucky-me-d489d93bd363?source=rss------bug_bounty-5 | Siddharth | cybersecurity, united-nations, vulnerability, bug-bounty, bug-bounty-writeup | 29-Aug-2024 |
| XSS Web Application Firewall Bypass Techniques | https://medium.com/@bilalresearcher/xss-web-application-firewall-bypass-techniques-e10476b5fa72?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bug-bounty-writeup, hacking, bugbounty-writeup, cybersecurity | 29-Aug-2024 |
| OAuth CSRF: Exploiting the Authorization Code Flow for Account Takeover | https://medium.com/@bilalresearcher/oauth-csrf-exploiting-the-authorization-code-flow-for-account-takeover-b1e3790416b7?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bugbounty-writeup, cybersecurity, hacking, bug-bounty-writeup | 29-Aug-2024 |
| Two Factor Authentication Bypass via using Victim’s DeviceID | https://medium.com/@bilalresearcher/two-factor-authentication-bypass-via-using-victims-deviceid-1fc10bfe95c9?source=rss------bug_bounty-5 | Bilal Researcher | hacking, bugbounty-writeup, bug-bounty-writeup, bug-bounty, cybersecurity | 29-Aug-2024 |
| Bypassed an Admin Panel Using SQL Payloads | https://medium.com/@bilalresearcher/bypassed-an-admin-panel-using-sql-payloads-572574b41d1c?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, hacking, cybersecurity, bug-bounty-writeup, bugbounty-writeup | 29-Aug-2024 |
| Hunting JavaScript File for Bug Hunters | https://medium.com/@bilalresearcher/hunting-javascript-file-for-bug-hunters-ae4af0479a9c?source=rss------bug_bounty-5 | Bilal Researcher | cybersecurity, bugbounty-writeup, hacking, bug-bounty, bug-bounty-writeup | 29-Aug-2024 |
| Common 403 Bypasses Part 2 | https://medium.com/@bilalresearcher/common-403-bypasses-part-2-80fd094a86fe?source=rss------bug_bounty-5 | Bilal Researcher | bugbounty-writeup, hacking, bug-bounty, cybersecurity, bug-bounty-writeup | 29-Aug-2024 |
| Common 403 Bypasses Part 1 | https://medium.com/@bilalresearcher/common-403-bypasses-part-1-a693a8413108?source=rss------bug_bounty-5 | Bilal Researcher | cybersecurity, bugbounty-writeup, bug-bounty-writeup, bug-bounty, hacking | 29-Aug-2024 |
| Advanced SQLMap Customization | https://medium.com/@bilalresearcher/advanced-sqlmap-customization-34d04b6c0984?source=rss------bug_bounty-5 | Bilal Researcher | cybersecurity, hacking, bug-bounty, bug-bounty-writeup, bugbounty-writeup | 29-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-91) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-91-bcac49fd0f29?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, cybersecurity, money, bug-bounty, hacking | 28-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-90) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-90-0f7e5ae09f8c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, hacking, ethical-hacking, money | 28-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-89) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-89-f7771af9355f?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | money, bug-bounty, hacking, cybersecurity, ethical-hacking | 28-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-88) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-88-5fba54f61fd0?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, money, hacking, cybersecurity, ethical-hacking | 28-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-87) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-87-d78ff97837fd?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | money, hacking, cybersecurity, ethical-hacking, bug-bounty | 28-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-86) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-86-dfcf154a34d3?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, cybersecurity, money, bug-bounty, ethical-hacking | 28-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-85) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-85-46305e104b6f?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, ethical-hacking, cybersecurity, bug-bounty, money | 28-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-84) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-84-d3a454db9673?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking, money, cybersecurity, hacking | 28-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-83) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-83-45728838a32c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, hacking, bug-bounty, cybersecurity, money | 28-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-82) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-82-8c89ec5c5ef7?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | money, bug-bounty, hacking, cybersecurity, ethical-hacking | 28-Aug-2024 |
| Day 21 of 30 Days — 30 Vulnerabilities | OAuth Misconfigurations | https://medium.com/@kumawatabhijeet2002/day-21-of-30-days-30-vulnerabilities-oauth-misconfigurations-693c16cf5476?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, web-security-testing, bug-bounty-tips, 30dayswritingchallenge, oauth | 28-Aug-2024 |
| How to Scan a Range of IP Addresses with Nmap | https://medium.com/@sherlock297/how-to-scan-a-range-of-ip-addresses-with-nmap-d802dc168846?source=rss------bug_bounty-5 | Ravindra Dagale | tools, nmap, information-technology, bug-bounty, security | 28-Aug-2024 |
| The Secret to Finding Anyone’s Digital Footprint: Master OSINT in 7 Easy Steps! | https://medium.com/@paritoshblogs/the-secret-to-finding-anyones-digital-footprint-master-osint-in-7-easy-steps-bd278a058c73?source=rss------bug_bounty-5 | Paritosh | information-technology, cybersecurity, osint, hacking, bug-bounty | 28-Aug-2024 |
| Exploiting Second-Order IDOR Vulnerabilities | https://medium.com/@bountyget/exploiting-second-order-idor-vulnerabilities-6d2554eb1319?source=rss------bug_bounty-5 | Dhiren Kumar Pradhan | bug-bounty, infosec, information-security, bug-bounty-tips, bug-bounty-writeup | 28-Aug-2024 |
| Exploiting IDORs in APIs That Use Static Keywords | https://medium.com/@bountyget/exploiting-idors-in-apis-that-use-static-keywords-f94b7797634a?source=rss------bug_bounty-5 | Dhiren Kumar Pradhan | information-security, bug-bounty-writeup, bug-bounty-tips, infosec, bug-bounty | 28-Aug-2024 |
| IDOR : Deleting Comments Like a Boss! | https://medium.com/@tanyago/idor-deleting-comments-like-a-boss-0413a375024f?source=rss------bug_bounty-5 | Tanya Goyal | bug-bounty, bug-bounty-tips, bug-bounty-writeup, idor, bug-hunting | 28-Aug-2024 |
| 25.7 Lab: Password reset poisoning via dangling markup | https://cyberw1ng.medium.com/25-7-lab-password-reset-poisoning-via-dangling-markup-cee4cc5a20f3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, hacking, penetration-testing | 28-Aug-2024 |
| The Ultimate List of Browser Extensions for Bug Bounty Hunters | https://medium.com/@k4r7hx/the-ultimate-list-of-browser-extensions-for-bug-bounty-hunters-5e349437e063?source=rss------bug_bounty-5 | Karthikeyan | extension, ethical-hacking, bug-bounty, penetration-testing, web | 28-Aug-2024 |
| How important Cookies can be? | https://medium.com/@alireza.razaghzadegan1999/how-important-cookies-can-be-86c7a3fdd790?source=rss------bug_bounty-5 | Alireza Razaghzadegan | technology, website, bug-bounty, security | 28-Aug-2024 |
| Blind Command Injection Leads to Nothing!! | https://medium.com/@kush.kira/blind-command-injection-leads-to-nothing-ea56f6662a58?source=rss------bug_bounty-5 | Kira | os-command-injection, command-injection, ssrf, bug-bounty, hacking | 28-Aug-2024 |
| OTP Bypassing with Response Manipulation | https://medium.com/@sahilkushwaha275/otp-bypassing-with-response-manipulation-238498b02737?source=rss------bug_bounty-5 | S33NU | bug-hunting, cybersecurity, hacking, pentesting, bug-bounty | 28-Aug-2024 |
| Dramatic Surge in Password-Stealing Attacks Targeting Amazon, Facebook, and Google Users | https://medium.com/@realahmedmoses/dramatic-surge-in-password-stealing-attacks-targeting-amazon-facebook-and-google-users-011f6bd3315a?source=rss------bug_bounty-5 | Moses Ahmed | technology, coding, bug-bounty, cybersecurity, programming | 28-Aug-2024 |
| How To Get Stored Xss & RCE Using Bypass Signature & Extension Via File Upload |_| | https://medium.com/@bilalresearcher/how-to-get-stored-xss-rce-using-bypass-signature-extension-via-file-upload-9b3e8d9348cd?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-writeup, bugbounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips | 27-Aug-2024 |
| Find Blind XSS like a pro. | https://medium.com/@bilalresearcher/find-blind-xss-like-a-pro-ddc9ef8d5e89?source=rss------bug_bounty-5 | Bilal Researcher | bugbounty-writeup, bug-bounty, bug-bounty-writeup, hacking, bug-bounty-tips | 27-Aug-2024 |
| The only recon methodology you need to know. | https://medium.com/@bilalresearcher/the-only-recon-methodology-you-need-to-know-9feb257ca4a2?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, idor, bug-bounty-writeup, cybersecurity, bugbounty-writeup | 27-Aug-2024 |
| Advanced Web Cache Poisoning Techniques (Part 2): Tools, Methods, and Exploits | https://medium.com/@bilalresearcher/advanced-web-cache-poisoning-techniques-part-2-tools-methods-and-exploits-b379aeb7ab36?source=rss------bug_bounty-5 | Bilal Researcher | idor, hacking, bug-bounty-writeup, bug-bounty, bugbounty-writeup | 27-Aug-2024 |
| Unraveling Web Cache Poisoning: A Deep Dive (Part 1) | https://medium.com/@bilalresearcher/unraveling-web-cache-poisoning-a-deep-dive-part-1-49fa00e81d1a?source=rss------bug_bounty-5 | Bilal Researcher | bugbounty-writeup, cybersecurity, idor, bug-bounty, bug-bounty-writeup | 27-Aug-2024 |
| Finding IDOR Vulnerabilities: Key Endpoints and Resources | https://medium.com/@bilalresearcher/finding-idor-vulnerabilities-key-endpoints-and-resources-e4c2457aa231?source=rss------bug_bounty-5 | Bilal Researcher | idor, bug-bounty-writeup, bugbounty-writeup, bug-bounty, hacking | 27-Aug-2024 |
| How I was able to discover ATO Via IDOR vulnerability | https://medium.com/@bilalresearcher/how-i-was-able-to-discover-ato-via-idor-vulnerability-c31d074a62e8?source=rss------bug_bounty-5 | Bilal Researcher | cybersecurity, hacking, bug-bounty, bug-bounty-writeup, bugbounty-writeup | 27-Aug-2024 |
| SAML Authentication Bypass Leading to Admin Panel Access | https://medium.com/@bilalresearcher/saml-authentication-bypass-leading-to-admin-panel-access-751380db249e?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bugbounty-writeup, cybersecurity, bug-bounty-writeup, hacking | 27-Aug-2024 |
| Critical Security Vulnerability Discovered on Reserve Bank of India’s Website: A Wake-Up Call… | https://medium.com/@psychomong/critical-security-vulnerability-discovered-on-reserve-bank-of-indias-website-a-wake-up-call-06fd08db0559?source=rss------bug_bounty-5 | psychomong | bugs, hacker, bug-bounty, no-rate-limit, hacking | 27-Aug-2024 |
| Day 20 0f 30 Days — 30 Vulnerabilities | Host Header Injection | https://medium.com/@kumawatabhijeet2002/day-20-0f-30-days-30-vulnerabilities-host-header-injection-9bc006b4734c?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-writeup, bug-bounty, host-header-injection, bug-bounty-tips, hostattack | 27-Aug-2024 |
| Day 19 of 30 Days — 30 Vulnerabilities | Rate Limiting Bypass | https://medium.com/@kumawatabhijeet2002/day-19-of-30-days-30-vulnerabilities-rate-limiting-bypass-896c8e2bdfc1?source=rss------bug_bounty-5 | Abhijeet kumawat | 30dayswritingchallenge, bug-bounty-tips, bug-bounty, rate-limit-bypass | 27-Aug-2024 |
| 24.13 Lab: Internal cache poisoning | https://cyberw1ng.medium.com/24-13-lab-internal-cache-poisoning-2c328e4d4a6d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, hacking, penetration-testing | 27-Aug-2024 |
| Practical Bug Bounty — TCM Academy | Module 8 pt. 2 (XSS, CMDI) | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-module-8-pt-2-xss-cmdi-b8728aa5261d?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | bug-bounty, xss-attack, web-penetration-testing, ethical-hacking, cybersecutiy | 27-Aug-2024 |
| $15k RCE Through Monitoring Debug Mode | https://medium.com/@0xold/15k-rce-through-monitoring-debug-mode-4f474d8549d5?source=rss------bug_bounty-5 | 0xold | local-file-inclusion, pentesting, hacking, bug-bounty, rce | 27-Aug-2024 |
| Exploiting IDORs via JSON Globbing | https://medium.com/@bountyget/exploiting-idors-via-json-globbing-e4c6e2c0535c?source=rss------bug_bounty-5 | Dhiren Kumar Pradhan | penetration-testing, idor, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 27-Aug-2024 |
| How i get OTP bypass leads to ATO | https://kiraadx.medium.com/how-i-get-otp-bypass-leads-to-ato-a7645ade3a90?source=rss------bug_bounty-5 | KiRaaDx | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 27-Aug-2024 |
| Discovering Two Out-of-Scope Blind/Stored XSS Vulnerabilities in an Admin Panel on a Public Bug… | https://medium.com/@octayus/discovering-two-out-of-scope-blind-stored-xss-vulnerabilities-in-an-admin-panel-on-a-public-bug-c0262fa35238?source=rss------bug_bounty-5 | OctaYus | bug-bounty, python, xss-attack, penetration-testing, cybersecurity | 27-Aug-2024 |
| CSRF Bypass Using Domain Confusion Leads To ATO | https://infosecwriteups.com/csrf-bypass-using-domain-confusion-leads-to-ato-ac682dd17722?source=rss------bug_bounty-5 | Osama Aly | bug-bounty, cybersecurity, hackerone | 27-Aug-2024 |
| How did I manage to get my first p2 vulnerability using only ffuf | https://medium.com/@loayahmed686/how-did-i-manage-to-get-my-first-p2-vulnerability-using-only-ffuf-a8a70d965d33?source=rss------bug_bounty-5 | r00t | bug-bounty, cybersecurity | 27-Aug-2024 |
| Fundora on Testnet Bounty Hunt: Spotting Bugs and Reaping Rewards | https://gingerjoygames.medium.com/fundora-on-testnet-bounty-hunt-spotting-bugs-and-reaping-rewards-7529ec61b1cc?source=rss------bug_bounty-5 | Ginger Joy Games | games, testnet, mobile-games, web3, bug-bounty | 27-Aug-2024 |
| Monitoring Gitlab Snippets for secrets with TruffleHog | https://medium.com/@learntheshell/monitoring-gitlab-snippets-for-secrets-with-trufflehog-5c77281ff5b7?source=rss------bug_bounty-5 | LearnTheShell | trufflehog, bug-bounty, git, bug-bounty-tips, gitlab | 27-Aug-2024 |
| How I Got Sensitive Directory Using Shodan | https://ch4ndan.medium.com/how-i-got-sensitive-directory-using-shodan-10e5b91cda86?source=rss------bug_bounty-5 | Ch4ndan das | bug-bounty, cybersecurity, bug-bounty-tips, bugs, information-disclosure | 27-Aug-2024 |
| Unveiling the Secrets of Malware Traffic: Analyzing Malware Infected pcap with Wireshark | https://medium.com/@dsksatheesh35/unveiling-the-secrets-of-malware-traffic-analyzing-malware-infected-pcap-with-wireshark-5989a9b013fd?source=rss------bug_bounty-5 | D Satheesh Kumar | malware-analysis, bug-bounty, cybersecurity, wireshark, network-security | 27-Aug-2024 |
| HTML Injection in email via fname field | https://medium.com/@hossam_hamada/html-injection-in-email-via-fname-field-564c3657e8ad?source=rss------bug_bounty-5 | Hossam Hamada | penetration-testing, bug-bounty, hackerone, bugcrowd, html-injection | 27-Aug-2024 |
| How I Took Over Two Subdomains: A Step-by-Step Guide | https://medium.com/@0xSphinx/how-i-took-over-two-subdomains-a-step-by-step-guide-df5d9eecbb2e?source=rss------bug_bounty-5 | 0xSphinx | cybersecurity, security, aws, hacking, bug-bounty | 27-Aug-2024 |
| Day 17 of 30 Days — 30 Vulnerabilities | Path/Directory Traversal | https://medium.com/@kumawatabhijeet2002/day-17-of-30-days-30-vulnerabilities-path-directory-traversal-008e92c07f23?source=rss------bug_bounty-5 | Abhijeet kumawat | 30dayswritingchallenge, bug-bounty-tips, path-traversal, bug-bounty | 26-Aug-2024 |
| Thief Raccoon — Login Phishing Tool | https://medium.com/@bountyget/thief-raccoon-login-phishing-tool-59c574687aae?source=rss------bug_bounty-5 | Bountyget | python3, infosec, info-sec-writeups, bug-bounty, penetration-testing | 26-Aug-2024 |
| From Developer to Hacker — Entering the Red team | https://medium.com/@jonathanmondaut/from-developer-to-hacker-entering-the-red-team-8b50989b9464?source=rss------bug_bounty-5 | Jonathan Mondaut | bug-bounty, youtube, networking, twitter, cybersecurity | 26-Aug-2024 |
| New Malware Uses PHP Exploit to Backdoor Windows Systems - Stay Informed! | https://medium.com/@realahmedmoses/new-malware-uses-php-exploit-to-backdoor-windows-systems-stay-informed-8df12e89391a?source=rss------bug_bounty-5 | Moses Ahmed | technology, bug-bounty, data-science, cybersecurity, programming | 26-Aug-2024 |
| Password Reset Glitch Leads to Instant Account Takeover | https://bevijaygupta.medium.com/password-reset-glitch-leads-to-instant-account-takeover-a4e67b667eaf?source=rss------bug_bounty-5 | Vijay Gupta | vulnerability, reset, bug-bounty, passwords, glitch | 26-Aug-2024 |
| DNS enumeration methodology and techniques | https://systemweakness.com/dns-enumeration-methodology-and-techniques-1945fa4164fd?source=rss------bug_bounty-5 | Harsh Hatej | kali-linux, cybersecurity, linux, subdomains-enumeration, bug-bounty | 26-Aug-2024 |
| Account Take Over | P1 — Critical | https://irsyadsec.medium.com/account-take-over-p1-critical-5468ce8218b9?source=rss------bug_bounty-5 | Irsyad Muhammad Fawwaz | writeup, bugcrowd, bug-bounty, cybersecurity, bug-bounty-tips | 26-Aug-2024 |
| Understanding Robots.txt: The Key to Managing Web Crawlers | https://medium.com/@kanishk.k1410/understanding-robots-txt-the-key-to-managing-web-crawlers-04eda892ec92?source=rss------bug_bounty-5 | Kanishk Kumar | information-technology, investigation, cybersecurity, osint, bug-bounty | 26-Aug-2024 |
| Hacking My College panel using University Website Like a Pro | https://medium.com/@RaunakGupta1922/hacking-my-college-panel-using-university-website-like-a-pro-9dd075133dce?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | hacking, bugbounty-writeup, college, cybersecurity, bug-bounty | 26-Aug-2024 |
| Exposing Hidden Risks: Uncovering Sensitive Data on a Government Website using Google Dorks | https://medium.com/@sulmanfarooq531/exposing-hidden-risks-uncovering-sensitive-data-on-a-government-website-using-google-dorks-51748e4f3695?source=rss------bug_bounty-5 | Sulman Farooq S | cybersecurity, government, google-dork, google, bug-bounty | 26-Aug-2024 |
| “Like” Bypass on Customer Reviews — €500 bounty | https://medium.com/@asharm.khan7/like-bypass-on-customer-reviews-500-bounty-b8d45a98c096?source=rss------bug_bounty-5 | Ashar Mahmood | hacking-for-defense, ethical-hacking, bug-bounty, bug-bounty-tips, hacking | 26-Aug-2024 |
| Best Attack Surface Visualization Tools | https://netlas.medium.com/best-attack-surface-visualization-tools-8034e681807d?source=rss------bug_bounty-5 | Netlas.io | bug-bounty, penetration-testing, attack-surface, cybersecurity, attack-surface-management | 26-Aug-2024 |
| Meet Dobby: Your New Bug Bounty Assistant | https://medium.com/@h3llbl4ckk/meet-dobby-your-new-bug-bounty-assistant-f5bebfeb7607?source=rss------bug_bounty-5 | Mehmet Kaya | cybersecurity, github, open-source, hacking, bug-bounty | 26-Aug-2024 |
| Account Takeover (Same OTP) | https://medium.com/@raxomara/account-takeover-same-otp-81bfba35d9b3?source=rss------bug_bounty-5 | Raxomara | account-takeover, bug-bounty-tips, cybersecurity, bug-bounty, race-condition | 26-Aug-2024 |
| WebSec — CSRF/XSRF (Cross-Site Request Forgery) | https://medium.com/@meryemddalgali/websec-csrf-xsrf-cross-site-request-forgery-6c048c6323d1?source=rss------bug_bounty-5 | Meryem Dalgalı | bug-bounty, web-security, xsrf, csrf-attack, vulnerability | 26-Aug-2024 |
| 24.12 Lab: Cache key injection vulnerabilities | https://cyberw1ng.medium.com/24-12-lab-cache-key-injection-vulnerabilities-22429a13eebf?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, careers, cybersecurity, penetration-testing | 26-Aug-2024 |
| Day 18 of 30 Days — 30 Vulnerabilities | Insecure Deserialization | https://medium.com/@kumawatabhijeet2002/day-18-of-30-days-30-vulnerabilities-insecure-deserialization-29656c0d212a?source=rss------bug_bounty-5 | Abhijeet kumawat | serialization, insecure-design, 30dayswritingchallenge, bug-bounty-tips, bug-bounty | 26-Aug-2024 |
| How I was able to give verification badge to any YouTube channel and bypass needed requirements | https://xtt0k.medium.com/how-i-was-able-to-give-verification-badge-to-any-youtube-channel-and-bypass-needed-requirements-b88855afe4b7?source=rss------bug_bounty-5 | Vojtech Cekal | youtube, bug-bounty, bounty-hunter, bugs, vulnerability | 26-Aug-2024 |
| OSINT, ChatGPT, and Password Spraying to Takeover System Administrator Account | https://medium.com/@mmaulanaabdullah/osint-chatgpt-and-password-spraying-to-takeover-system-administrator-account-b0a6295edbbc?source=rss------bug_bounty-5 | M Maulana Abdullah | cybersecurity, infosec, chatgpt, ai, bug-bounty | 26-Aug-2024 |
| How I found XSS and open redirect in Kamiapp.com accidentally | https://medium.com/@alimuhammadsecured/how-i-found-xss-and-open-redirect-in-kamiapp-com-accidentally-2ff0d3c2b61b?source=rss------bug_bounty-5 | Alimuhammadsecured | bbp, ctf, bug-bounty, hacking | 26-Aug-2024 |
| How do I chain multiple Nuclei templates together in a single scan? | https://medium.com/@sherlock297/how-do-i-chain-multiple-nuclei-templates-together-in-a-single-scan-621a3fb8787f?source=rss------bug_bounty-5 | Ravindra Dagale | linux, bug-bounty, how-to, cybersecurity, tips | 25-Aug-2024 |
| How to get your first valid bug by reading disclosed reports | https://anonysm.medium.com/how-to-get-your-first-valid-bug-by-reading-disclosed-reports-2663c9987bf3?source=rss------bug_bounty-5 | Muthu D | cybersecurity, ethical-hacking, bug-bounty, hacking, penetration-testing | 25-Aug-2024 |
| Bypass Brute-force IP Block | https://icecream23.medium.com/bypass-brute-force-ip-block-870a4329c3be?source=rss------bug_bounty-5 | Aman Bhuiyan | ethical-hacking, bypassing, ip, bug-bounty | 25-Aug-2024 |
| The Evolution of Phishing Attacks: A Growing Cybersecurity Challenge | https://medium.com/@paritoshblogs/the-evolution-of-phishing-attacks-a-growing-cybersecurity-challenge-800b0eeacf00?source=rss------bug_bounty-5 | Paritosh | phishing, hacking, social-media, cybersecurity, bug-bounty | 25-Aug-2024 |
| Vulnerable WordPress July 2024 (Ash-e_doogh) | https://medium.com/@onhexgroup/vulnerable-wordpress-july-2024-ash-e-doogh-c7e71d7d94d5?source=rss------bug_bounty-5 | Onhexgroup | wordpress-security, wordpress, bug-bounty, cybersecurity, infosec | 25-Aug-2024 |
| Finding origin ip address | https://systemweakness.com/finding-origin-ip-address-672ca2e2967b?source=rss------bug_bounty-5 | loyalonlytoday | bugbounty-writeup, bug-bounty, bug-bounty-tips, hacking, penetration-testing | 25-Aug-2024 |
| Explore Koii Network’s DEPIN world with a $10,000 Bug Bounty reward | https://medium.com/coinmonks/explore-koii-networks-depin-world-with-a-10-000-bug-bounty-reward-6a57a5450a44?source=rss------bug_bounty-5 | xeefox | ai, koii, depin, koii-network, bug-bounty | 25-Aug-2024 |
| Defensive Strategies and Best Practices to Protect Against Web Cache Poisoning | https://cyberw1ng.medium.com/defensive-strategies-and-best-practices-to-protect-against-web-cache-poisoning-7d9b855658c7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, bug-bounty, penetration-testing, careers | 25-Aug-2024 |
| HOW TO START IN BUG BOUNTY HUNTING | https://medium.com/@gouravrathod8788/how-to-start-in-bug-bounty-hunting-848f5c74807f?source=rss------bug_bounty-5 | Gourav Singh Rajput | cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 25-Aug-2024 |
| TOP USEFUL CYBR SECURITY & BUG HUNTING TOOL | https://medium.com/@gouravrathod8788/top-useful-cybr-security-bug-hunting-tool-de9ae281e12f?source=rss------bug_bounty-5 | Gourav Singh Rajput | cybersecurity, hacking-tools, bug-bounty, ethical-hacking, hacking | 25-Aug-2024 |
| Solving the Prompt Airlines CTF | https://infosecwriteups.com/solving-the-prompt-airlines-ctf-2235c725050b?source=rss------bug_bounty-5 | hackerdevil | bug-bounty, ctf, ctf-writeup, promptairlines, cybersecurity | 25-Aug-2024 |
| Hitting the jackpot with RCE! | https://medium.com/@gokulsspace/hitting-the-jackpot-with-rce-43755cac1415?source=rss------bug_bounty-5 | Gokulsspace | pentesting, cybersecurity, kerala, ethical-hacking, bug-bounty | 25-Aug-2024 |
| How I was able to Edit/Read Users Workspaces/Data without any access to it | https://medium.com/@octayus/how-i-was-able-to-edit-read-users-workspaces-data-without-any-access-to-it-aed616dbde8e?source=rss------bug_bounty-5 | OctaYus | information-technology, cybersecurity, infosec, bug-bounty, bounty-program | 25-Aug-2024 |
| How I got $24000 Bounty from a Log4j RCE in Apple App Store. | https://medium.com/@meharhuzaifa777/exploiting-log4j-rce-in-apple-app-store-ca99a549de1f?source=rss------bug_bounty-5 | Meharhuzaifa | cybersecurity, bug-bounty-writeup, ethical-hacking, bug-bounty | 25-Aug-2024 |
| Intruder + Frida to Account Takeover | https://medium.com/@bilalresearcher/intruder-frida-to-account-takeover-548d4dd785ef?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bug-bounty-writeup, cybersecurity, bugbounty-writeup, hacking | 25-Aug-2024 |
| Using E-Notation to bypass Access Control restrictions to access arbitrary user PII-discussions | https://medium.com/@bilalresearcher/using-e-notation-to-bypass-access-control-restrictions-to-access-arbitrary-user-pii-discussions-d16bbad42394?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-writeup, idor, hacking, cybersecurity, bug-bounty | 25-Aug-2024 |
| PwnOS-1 Walkthrough | https://erdemstar.medium.com/pwnos-1-walkthrough-fec01bd0e8d4?source=rss------bug_bounty-5 | Erdemstar | bug-bounty, oscp-preparation, oscp, cybersecurity, security | 25-Aug-2024 |
| Kioptrix Level 4 Walkthrough | https://erdemstar.medium.com/kioptrix-level-4-walkthrough-96d46095c789?source=rss------bug_bounty-5 | Erdemstar | oscp-preparation, bug-bounty-tips, oscp, cybersecurity, bug-bounty | 25-Aug-2024 |
| LOLbins / LOLBAS Attack ! | https://medium.com/@reemmoslem34/lolbins-lolbas-attack-006aad1ac364?source=rss------bug_bounty-5 | Rem Khalid | bug-bounty, cybersecurity, malware, python, cryptocurrency | 25-Aug-2024 |
| What Really Provides Security in the Cloud? | https://medium.com/@paritoshblogs/what-really-provides-security-in-the-cloud-2f0cc83d113a?source=rss------bug_bounty-5 | Paritosh | information-technology, bug-bounty, information-security, cybersecurity, infosec | 24-Aug-2024 |
| Practical Bug Bounty — TCM Academy | Module 8 | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-module-8-44663b4f87e3?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | sqli, bug-bounty, sql-injection, tcm-academy, web-penetration-testing | 24-Aug-2024 |
| Cross-Site Origin Policy (CORS) | https://itsravikiran25.medium.com/cross-site-origin-policy-cors-c82e4b0208f8?source=rss------bug_bounty-5 | Ravikiran | infosec-write-ups, vulnerability-assessment, cybersecurity, bug-bounty, cors | 24-Aug-2024 |
| Exploiting Privilege Escalation via Role Parameter Manipulation | https://medium.com/@tusharpuri6/exploiting-privilege-escalation-via-role-parameter-manipulation-5f8df062eb71?source=rss------bug_bounty-5 | Tusharpuri | penetration-testing, offensive-security, privilege-escalation, application-security, bug-bounty | 24-Aug-2024 |
| MASS HUNTING TO FIND XSS(CROSS SITE SCRIPTING) | https://systemweakness.com/mass-hunting-to-find-xss-cross-site-scripting-27cc687e58e0?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, xss-vulnerability, bugbounty-automation, bug-bounty, bug-bounty-tips | 24-Aug-2024 |
| Unleash Your Inner Hacker with Koii’s $10,000 Bug Bounty Challenge | https://medium.com/nest-of-rin/unleash-your-inner-hacker-with-koiis-10-000-bug-bounty-challenge-d37c23969df1?source=rss------bug_bounty-5 | Rin | koii-network, koii, developer, hackathons, bug-bounty | 24-Aug-2024 |
| Top 5 Vulnerabilities That Can Earn You Big in Bug Bounties | https://medium.com/@verylazytech/top-5-vulnerabilities-that-can-earn-you-big-in-bug-bounties-4541878d7e19?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, cybersecurity, hacking, bug-bounty, cyber | 24-Aug-2024 |
| What I Learned from Reading 217* Subdomain Takeover Bug Reports | https://bevijaygupta.medium.com/what-i-learned-from-reading-217-subdomain-takeover-bug-reports-5c6caae2b5da?source=rss------bug_bounty-5 | Vijay Gupta | subdomain, bugs, bug-report, subdomain-takeover, bug-bounty | 24-Aug-2024 |
| Reset password Checklist | https://medium.com/@hozayfan782/reset-password-checklist-1ebabdd6c0f3?source=rss------bug_bounty-5 | Hozayfa Nasser | bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity, research | 24-Aug-2024 |
| How do I run Nuclei in silent mode to avoid unnecessary output? | https://medium.com/@sherlock297/how-do-i-run-nuclei-in-silent-mode-to-avoid-unnecessary-output-25fbb9d2e26d?source=rss------bug_bounty-5 | Ravindra Dagale | nucleus, information-security, bug-bounty, output, how-to | 24-Aug-2024 |
| Unauthorized Deletion of Forms by Low-Level Unlicensed Users: A 500$ Access Control Bug | https://medium.com/@a13h1/unauthorized-deletion-of-forms-by-low-level-unlicensed-users-a-500-access-control-bug-98dc50c8c193?source=rss------bug_bounty-5 | Abhi Sharma | programming, bug-bounty, infosec, cybersecurity, access-control | 24-Aug-2024 |
| Essential Resources for Exploiting Web Cache Poisoning: Tools, Techniques, and Learning Materials | https://cyberw1ng.medium.com/essential-resources-for-exploiting-web-cache-poisoning-tools-techniques-and-learning-materials-cbbef5221392?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, penetration-testing, cybersecurity, bug-bounty | 24-Aug-2024 |
| Beware of fake bug bounty programs, my real life experience | https://harish45.medium.com/beware-of-fake-bug-bounty-programs-my-real-life-experience-ce009d435ed8?source=rss------bug_bounty-5 | Harish | bug-bounty, cybersecurity-awareness, cybersecurity, ethical-hacking, bug-bounty-tips | 24-Aug-2024 |
| Find Bugs From Google Dorks | https://ch44nd.medium.com/find-bugs-from-google-dorks-ec574c01471b?source=rss------bug_bounty-5 | Chandan das | bug-bounty, information-disclosure, bugs, hacking, google-dork | 24-Aug-2024 |
| One-click Account Take Over | https://medium.com/@bilalresearcher/one-click-account-take-over-50e4128c990d?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-writeup, hacking, bug-bounty-tips, bugbounty-writeup, bug-bounty | 24-Aug-2024 |
| 0-click Full Account Takeover | https://medium.com/@bilalresearcher/0-click-full-account-takeover-0ddc951e14ae?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-writeup, bug-bounty, hacking, bug-bounty-tips, bugbounty-writeup | 24-Aug-2024 |
| Drupal Website Takeover | Admin Dashboard | https://medium.com/@bilalresearcher/drupal-website-takeover-admin-dashboard-6ae4a34d0689?source=rss------bug_bounty-5 | Bilal Researcher | hacking, bug-bounty-writeup, bug-bounty-tips, bugbounty-writeup, bug-bounty | 24-Aug-2024 |
| STRIPE Live Key Exposed:: Bounty: $1000 | https://medium.com/@bilalresearcher/stripe-live-key-exposed-bounty-1000-57018f1d4520?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bug-bounty-writeup, bug-bounty-program, hacking, bug-bounty-tips | 24-Aug-2024 |
| [GraphQL IDOR]Leaking credit card information of 1000s of users [External Audit] | https://medium.com/@bilalresearcher/graphql-idor-leaking-credit-card-information-of-1000s-of-users-external-audit-1404256b761f?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-writeup, hacking, bugbounty-writeup, bug-bounty-tips, bug-bounty | 24-Aug-2024 |
| Exposing Database Creds via SVN: A $400 Discovery | https://medium.com/@bilalresearcher/exposing-database-creds-via-svn-a-400-discovery-fa7c2de288bf?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-tips, bug-bounty-writeup, bug-bounty, hacking, bugbounty-writeup | 24-Aug-2024 |
| SQL Injections for bug bounty | https://medium.com/@boogsta/sql-injections-for-bug-bounty-3a608babd9b1?source=rss------bug_bounty-5 | Boogsta | hacking, bug-bounty, cybersecurity, programming, cyber | 24-Aug-2024 |
| Chain of Rate Limit Bypass and Weak Token Expiry Leads To Account Take Over | https://medium.com/@bilalresearcher/chain-of-rate-limit-bypass-and-weak-token-expiry-leads-to-account-take-over-0cf794fef31c?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bug-bounty-writeup, bugbounty-writeup, bug-bounty-tips, hacking | 24-Aug-2024 |
| CSRF Bypass Combined with IDOR To Complete Account Takeover! | https://medium.com/@bilalresearcher/csrf-bypass-combined-with-idor-to-complete-account-takeover-588b34b9cf60?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-writeup, bug-bounty-tips, bug-bounty, hacking, bugbounty-writeup | 24-Aug-2024 |
| User information disclosure via message reactions | https://medium.com/@bilalresearcher/user-information-disclosure-via-message-reactions-affc72cfd8de?source=rss------bug_bounty-5 | Bilal Researcher | bugbounty-writeup, hacking, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 24-Aug-2024 |
| IDOR Lead to Data Leak | https://medium.com/@bilalresearcher/idor-lead-to-data-leak-6943ade0a3d6?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bug-bounty-tips, bugbounty-writeup, bug-bounty-writeup, hacking | 24-Aug-2024 |
| XSS & IDOR & CSRF to ATO | https://medium.com/@bilalresearcher/xss-idor-csrf-to-ato-0e898876789d?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-tips, bug-bounty-writeup, hacking, bugbounty-writeup, bug-bounty | 24-Aug-2024 |
| How I Turned a Rate-Limit Bypass into an Account Takeover | https://medium.com/@bilalresearcher/how-i-turned-a-rate-limit-bypass-into-an-account-takeover-5a50b0f4dc6a?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-tips, bugbounty-writeup, bug-bounty-writeup, hacking, bug-bounty | 24-Aug-2024 |
| $$$ Bypassing SSRF Restrictions on a Google Product: A Journey Through DNS Rebinding | https://medium.com/@bilalresearcher/bypassing-ssrf-restrictions-on-a-google-product-a-journey-through-dns-rebinding-caaf00ebe479?source=rss------bug_bounty-5 | Bilal Researcher | bugbounty-writeup, bug-bounty-writeup, bug-bounty-tips, bug-bounty, hacking | 24-Aug-2024 |
| Discovering a Session Persistence Vulnerability That Led to a $$$$ Bounty | https://medium.com/@bilalresearcher/discovering-a-session-persistence-vulnerability-that-led-to-a-bounty-bbf3dd526f01?source=rss------bug_bounty-5 | Bilal Researcher | bugbounty-writeup, bug-bounty-tips, hacking, bug-bounty-writeup, bug-bounty | 24-Aug-2024 |
| Bypassing methods that I used to find CSRF vulnerabilities | https://medium.com/@bilalresearcher/bypassing-methods-that-i-used-to-find-csrf-vulnerabilities-0709cc8a3c4d?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-writeup, bugbounty-writeup, bug-bounty, bug-bounty-tips, hacking | 24-Aug-2024 |
| Mobile Pentesting: A Walkthrough of the First 10 Challenges on Injured Android App-Part1 | https://medium.com/@mly57003/mobile-pentesting-a-walkthrough-of-the-first-10-challenges-on-injured-android-app-part1-0e85c600494f?source=rss------bug_bounty-5 | mohamed ali | bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-hunter | 24-Aug-2024 |
| Can AI and ML Stop Cyber Attacks? | https://medium.com/@paritoshblogs/can-ai-and-ml-stop-cyber-attacks-291c6425d0e8?source=rss------bug_bounty-5 | Paritosh | ai, cybersecurity, machine-learning, bug-bounty, chatgpt | 23-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-81) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-81-833084004f21?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking, money, cybersecurity, hacking | 23-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-80) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-80-ae2ad3c7f971?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, ethical-hacking, bug-bounty, hacking, money | 23-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-79) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-79-415c1bd4f7c3?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, hacking, money, ethical-hacking, cybersecurity | 23-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-78) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-78-85e87ffc94f9?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking, money, cybersecurity, hacking | 23-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-77) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-77-b9b1354812cc?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty, cybersecurity, money, hacking | 23-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-76) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-76-07a4d8f583c0?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty, cybersecurity, skills, hacking | 23-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-75) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-75-8d5930bd46dc?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, skills, hacking, ethical-hacking, bug-bounty | 23-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-74) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-74-778fd4767e52?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty, ethical-hacking, hacking, skills | 23-Aug-2024 |
| Elevate Your Cybersecurity Skills with Expert Training and Penetration Testing! | https://imranthe3rd3ye.medium.com/elevate-your-cybersecurity-skills-with-expert-training-and-penetration-testing-b16e8b122642?source=rss------bug_bounty-5 | Md. Imran Chowdhury | learn-hacking, ethical-hacking, penetration-testing, kali-linux, bug-bounty | 23-Aug-2024 |
| Monitoring Gists for secrets with Trufflehog | https://medium.com/@learntheshell/monitoring-gists-with-trufflehog-612b7d9dbab5?source=rss------bug_bounty-5 | LearnTheShell | github, git, bug-bounty, trufflehog, bug-bounty-tips | 23-Aug-2024 |
| Hidden in Plain Sight: Uncovering RCE on a Forgotten Axis2 Instance | https://medium.com/@domenicoveneziano/hidden-in-plain-sight-uncovering-rce-on-a-forgotten-axis2-instance-86ddc91f1415?source=rss------bug_bounty-5 | Domenico Veneziano | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 23-Aug-2024 |
| Finally, SSL Pinning for Flutter Bypassed After Frustration.. | https://wahaz.medium.com/finally-ssl-pinning-for-flutter-bypassed-after-frustration-4573e15ed18e?source=rss------bug_bounty-5 | Rizaldi Wahaz | bug-bounty, cybersecurity, hacking, flutter, penetration-testing | 23-Aug-2024 |
| How I Got an Appreciation Letter from NASA for Finding a Simple Bug | https://infosecwriteups.com/how-i-got-an-appreciation-letter-from-nasa-for-finding-a-simple-bug-8812852d0337?source=rss------bug_bounty-5 | Om Arora | bug-bounty, programming, technology, cybersecurity, infosec | 23-Aug-2024 |
| Web Cache Poisoning: Understanding the Threat and How to Protect Your Website | https://cyberw1ng.medium.com/web-cache-poisoning-understanding-the-threat-and-how-to-protect-your-website-82ebaba2f0e8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, cybersecurity, hacking, careers, bug-bounty | 23-Aug-2024 |
| Day 16 of 30 Days — 30 Vulnerabilities | Subdomain Takeover | https://medium.com/@kumawatabhijeet2002/day-16-of-30-days-30-vulnerabilities-subdomain-takeover-01088ad1d525?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-tips, subdomain-takeover, bug-bounty, 30dayswritingchallenge | 23-Aug-2024 |
| how i got into the server of our university. | https://medium.com/@mesterx54/how-i-got-into-the-server-of-our-university-aae2782bcc64?source=rss------bug_bounty-5 | Abdeladime Mk (mesterx54) | bug-bounty, rce, bug-bounty-tips, sqli, pentesting | 23-Aug-2024 |
| Stealing Admin Cookies: An XSS Challenge from TCM Security’s Practical Bug Bounty Course | https://medium.com/@trixiahorner/stealing-admin-cookies-an-xss-challenge-from-tcm-securitys-practical-bug-bounty-course-b08a990cca84?source=rss------bug_bounty-5 | Trixia Horner | penetration-testing, ethical-hacking, hacking, cybersecurity, bug-bounty | 23-Aug-2024 |
| Boost Subdomain Discovery with Subfinder and API Integrations | https://saurabh-jain.medium.com/integrating-shodan-and-censys-api-keys-into-subfinder-c28452af2efb?source=rss------bug_bounty-5 | Saurabh Jain | bug-bounty-writeup, bug-bounty, subdomains-enumeration, subfinder, hacking | 23-Aug-2024 |
| Response Manipulation FTW: Understanding and Exploiting Response Manipulation | https://medium.com/@security.tecno/response-manipulation-ftw-understanding-and-exploiting-response-manipulation-6ad2d81f2eb4?source=rss------bug_bounty-5 | TECNO Security | security, reserach, hacking, bug-bounty | 22-Aug-2024 |
| 10 Secrets Ethical Hackers Don’t Want You to Know (But We’re Revealing Them Anyway!) | https://medium.com/@paritoshblogs/10-secrets-ethical-hackers-dont-want-you-to-know-but-we-re-revealing-them-anyway-094ca920c3d8?source=rss------bug_bounty-5 | Paritosh | cybersecurity, bug-bounty, hacking, information-technology, ethical-hacking | 22-Aug-2024 |
| CORRUPT SEBI INDIA JEOPARDIZING DIRECTOES FINANCIAL INFO, ZOMATO BUG BOUNTY HACKERONE FRAUD | https://medium.com/@krivadna_87390/corrupt-sebi-india-jeopardizing-directoes-financial-info-zomato-bug-bounty-hackerone-fraud-f27145ccfad8?source=rss------bug_bounty-5 | Krivadna | android, social-media, bug-bounty, cybersecurity, bugbounty-writeup | 22-Aug-2024 |
| Grep tips for Javascript Analysis | Bug Bounty | https://0xmaruf.medium.com/grep-tips-for-javascript-analysis-bug-bounty-7dce88266121?source=rss------bug_bounty-5 | Md Maruf Hosan (0xMaruf) | cybersecurity, bug-bounty-tips, bug-bounty | 22-Aug-2024 |
| TESLA MOTORS VIN NUMBER LEAK THROUGH IT’S API ENDPOINT, THEY CALL IT NO SECURITY IMPACT.. | https://medium.com/@krivadna_87390/tesla-motors-vin-number-leak-through-its-api-endpoint-they-call-it-no-security-impact-bb30fb5f1314?source=rss------bug_bounty-5 | Krivadna | android, bug-bounty, penetration-testing, bugbounty-writeup, cybersecurity | 22-Aug-2024 |
| CORRUPT SEBI INDIA JEOPARDIZING DIRECTOR'S FINANCIAL INFO • PAN NUMBER LEAK ZOMATO BUG BOUNTY… | https://medium.com/@krivadna_87390/corrupt-sebi-india-jeopardizing-directoes-financial-info-zomato-bug-bounty-hackerone-fraud-f27145ccfad8?source=rss------bug_bounty-5 | Krivadna | android, social-media, bug-bounty, cybersecurity, bugbounty-writeup | 22-Aug-2024 |
| Exposing Source Code via SVN: A $400 Discovery | https://infosecwriteups.com/exposing-source-code-via-svn-a-400-discovery-9fc54b3f3f31?source=rss------bug_bounty-5 | Vipul Sahu | bug-bounty-tips, bug-bounty, information-security, cybersecurity | 22-Aug-2024 |
| 安全賞金計劃來了,獎金最高達￥6000! | https://medium.com/@AdsPowerHK/%E5%AE%89%E5%85%A8%E8%B3%9E%E9%87%91%E8%A8%88%E5%8A%83%E4%BE%86%E4%BA%86-%E7%8D%8E%E9%87%91%E6%9C%80%E9%AB%98%E9%81%94-6000-672c3dcf1483?source=rss------bug_bounty-5 | AdsPower 指紋瀏覽器 | adspower, 指纹浏览器, 漏洞, bug-bounty, 指纹浏览器ip | 22-Aug-2024 |
| Automating the Hunt for Reflected XSS: Essential One-Liners for Web Security | https://medium.com/@garvsanwariya60/automating-the-hunt-for-reflected-xss-essential-one-liners-for-web-security-025bbd82f95d?source=rss------bug_bounty-5 | Garvsanwariya | xss-attack, cybersecurity, hacking, web-security, bug-bounty | 22-Aug-2024 |
| Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center | https://medium.com/@scriptshuva/instagram-and-meta-2fa-bypass-by-unprotected-backup-code-retrieval-in-accounts-center-c735ff650f10?source=rss------bug_bounty-5 | Shuva Saha | bug-bounty-writeup, bug-bounty, facebook-bug-bounty, 2fa-bypass, meta-bug-bounty | 22-Aug-2024 |
| Exposing Database Creds via SVN: A $400 Discovery | https://infosecwriteups.com/exposing-source-code-via-svn-a-400-discovery-9fc54b3f3f31?source=rss------bug_bounty-5 | Vipul Sahu | bug-bounty-tips, bug-bounty, information-security, cybersecurity | 22-Aug-2024 |
| How I can easily get four P1 at NASA using Simple Google Dorking. | https://k4tedu.medium.com/how-i-can-easily-get-four-p1-at-nasa-using-simple-google-dorking-d4457bec1971?source=rss------bug_bounty-5 | k4tedu | bug-bounty, dorking, penetration-testing, nasa-vdp, pentest-web | 22-Aug-2024 |
| WebSec — SSTI (Server Site Template Injection) | https://medium.com/@meryemddalgali/websec-ssti-server-site-template-injection-1a9603caa51e?source=rss------bug_bounty-5 | Meryem Dalgalı | vulnerability, application-security, bug-bounty, pentest-learnings, web-security | 22-Aug-2024 |
| Bypassing methods that I used to find CSRF vulnerabilities | https://anonysm.medium.com/bypassing-methods-that-i-used-to-find-csrf-vulnerabilities-b7dbf88cdb0a?source=rss------bug_bounty-5 | Muthu D | cybersecurity, ethical-hacking, hacking, bug-bounty, penetration-testing | 22-Aug-2024 |
| How I Found Vulnerabilities in NASA and Got into the Hall of Fame — 4 Bugs | https://infosecwriteups.com/how-i-found-vulnerabilities-in-nasa-and-got-into-the-hall-of-fame-4-bugs-78e0fc4cc5cc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hall-of-fame, careers, cybersecurity, bug-bounty, hacking | 22-Aug-2024 |
| Easy Bug | Email Spoofing | https://saeidmicro.medium.com/easy-bug-email-spoofing-5d1bfc1a885e?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty | 22-Aug-2024 |
| Blind SSRF | https://saeidmicro.medium.com/blind-ssrf-ee5f0e6ed86f?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty | 22-Aug-2024 |
| Battle of the Web Security Titans: Burp Suite vs. OWASP ZAP | https://shaifsec.medium.com/battle-of-the-web-security-titans-burp-suite-vs-owasp-zap-e3da58d36203?source=rss------bug_bounty-5 | Shaif Ali | penetration-testing, bug-bounty, web-security, cybersecurity, shaifsec | 22-Aug-2024 |
| Advanced Web Cache Poisoning Techniques (Part 2): Tools, Methods, and Exploits | https://medium.com/@dsmodi484/advanced-web-cache-poisoning-techniques-part-2-tools-methods-and-exploits-d35619d4bd75?source=rss------bug_bounty-5 | Dishant Modi | resources, vulnerability, web-cache-poisoning, bug-bounty, methodology | 21-Aug-2024 |
| Secrets of Red Teaming: Must-Know Tips and Tricks for Beginners! | https://medium.com/@paritoshblogs/secrets-of-red-teaming-must-know-tips-and-tricks-for-beginners-7a0dbf8eb021?source=rss------bug_bounty-5 | Paritosh | red-teaming, hacking, bug-bounty, pentesting, cybersecurity | 21-Aug-2024 |
| Beyond the Login The Path Traversal Attack | https://medium.com/@rajqureshi07/beyond-the-login-the-path-traversal-attack-30c1cfc09b3a?source=rss------bug_bounty-5 | Raj Qureshi | bug-bounty, information-technology, infosec, bug-bounty-tips, information-security | 21-Aug-2024 |
| Deploying Rust Smart Contracts | https://medium.com/@bugbountydegen/deploying-rust-smart-contracts-7a22e04c4cd9?source=rss------bug_bounty-5 | bugbountydegen | rust, bug-bounty, smart-contract-security, blockchain | 21-Aug-2024 |
| Forging a Path to Account Takeover: Copy Password Reset Link Vulnerability worth $$$$. | https://medium.com/@bilalresearcher/forging-a-path-to-account-takeover-copy-password-reset-link-vulnerability-worth-3135c3df60d6?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-tips, bug-bounty-writeup, bug-bounty, hacking, cybersecurity | 21-Aug-2024 |
| [Account Take Over] through reset password token leaked in response, 2500 € Reward | https://medium.com/@bilalresearcher/account-take-over-through-reset-password-token-leaked-in-response-2500-reward-97cc22d0b65d?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bug-bounty-writeup, cybersecur, hacking, bugbounty-writeup | 21-Aug-2024 |
| Discovering a $5000 RCE via Dependency Confusion Vulnerability | https://medium.com/@bilalresearcher/discovering-a-5000-rce-via-dependency-confusion-vulnerability-9a1cd88ddb0c?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, cybersecurity, hacking, bug-bounty-tips, bug-bounty-writeup | 21-Aug-2024 |
| A Simple 2FA Bypass | https://medium.com/@bilalresearcher/a-simple-2fa-bypass-368a2861c6df?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-writeup, bug-bounty, hacking, bug-bounty-tips, cybersecurity | 21-Aug-2024 |
| Account Takeover using IDOR in Password reset Functionality | https://medium.com/@bilalresearcher/account-takeover-using-idor-in-password-reset-functionality-b736a85f4f02?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bugbounty-writeup, cybersecurity, info-sec-writeups, bug-bounty-writeup | 21-Aug-2024 |
| How I got my first $13500 bounty through Parameter Polluting (HPP) | https://medium.com/@bilalresearcher/how-i-got-my-first-13500-bounty-through-parameter-polluting-hpp-237bd8cdfeff?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty, cybersecurity | 21-Aug-2024 |
| Authorization bypass due to cache misconfiguration | https://rikeshbaniya.medium.com/authorization-bypass-due-to-cache-misconfiguration-fde8b2332d2d?source=rss------bug_bounty-5 | Rikesh Baniya | security-research, bug-bounty-writeup, hackerone, bug-bounty-tips, bug-bounty | 21-Aug-2024 |
| The Future of Web Cache Poisoning Defense: Anticipating New Threats and Adopting Next-Generation… | https://cyberw1ng.medium.com/the-future-of-web-cache-poisoning-defense-anticipating-new-threats-and-adopting-next-generation-56a62d115bcd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, penetration-testing, bug-bounty, hacking | 21-Aug-2024 |
| Race Condition on Likes of Product Leads to Products can appear more popular | https://medium.com/@omdubey170/race-condition-on-likes-of-product-leads-to-products-can-appear-more-popular-a39038d16203?source=rss------bug_bounty-5 | Omdubey | cache, bug-bounty-tips, security, bug-bounty, race-condition | 21-Aug-2024 |
| Authorization bypass due to cache misconfiguration | https://medium.com/@bilalresearcher/authorization-bypass-due-to-cache-misconfiguration-7407aa1c6374?source=rss------bug_bounty-5 | Bilal Researcher | bugbounty-writeup, bug-bounty-writeup, bug-bounty, hacking, cybersecurity | 21-Aug-2024 |
| Day 15 of 30 Days — 30 Vulnerabilities | ClickJacking | https://medium.com/@kumawatabhijeet2002/day-15-of-30-days-30-vulnerabilities-clickjacking-33e38c25d528?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, 30-day-challenge, bug-bounty-tips, 30dayswritingchallenge, clickjacking | 20-Aug-2024 |
| Information Disclosure : 80+ Emails and LongID Disclosed !! | https://pushkarhax.medium.com/information-disclosure-80-emails-and-longid-disclosed-8952e2c6978b?source=rss------bug_bounty-5 | Pushkar Nandwalkar | bugbounty-tips, offensive-security, bug-bounty, cybersecurity, hacking | 20-Aug-2024 |
| Unveiling a Critical Vulnerability: Exposing AWS Credentials in a Penetration Test | https://notifybugme.medium.com/unveiling-a-critical-vulnerability-exposing-aws-credentials-in-a-penetration-test-2f7119a7c816?source=rss------bug_bounty-5 | Santosh Kumar Sha (@killmongar1996) | penetration-testing, bug-bounty, ethical-hacking, security, aws | 20-Aug-2024 |
| How a Lazy Bug Bounty Hunter got a place on NASA HOF ( An XSS Story). | https://medium.com/@trffnsec/how-a-lazy-bug-bounty-hunter-got-a-place-on-nasa-hof-an-xss-story-e14fccc326e2?source=rss------bug_bounty-5 | Augustinetriffin | xss-attack, bug-bounty, cybersecurity, hacking, nasa | 20-Aug-2024 |
| How a Lazy Bug Bounty Hunter got a place on NASA HOF ( An XSS Story). | https://medium.com/@trffnsec/how-a-lazy-bug-bounty-hunter-got-a-place-on-nasa-hof-an-xss-story-e14fccc326e2?source=rss------bug_bounty-5 | TrffnSec | xss-attack, bug-bounty, cybersecurity, hacking, nasa | 20-Aug-2024 |
| My first XSS: Reflected XSS in hidden parameter | https://anonysm.medium.com/my-first-xss-reflected-xss-in-hidden-parameter-4142a02edfb1?source=rss------bug_bounty-5 | Muthu D | cybersecurity, hacking, penetration-testing, ethical-hacking, bug-bounty | 20-Aug-2024 |
| cyberseReal-World Applications and Case Studies: Combating Web Cache Poisoning in Complex… | https://cyberw1ng.medium.com/cybersereal-world-applications-and-case-studies-combating-web-cache-poisoning-in-complex-5bf41b0073c1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, penetration-testing, hacking, bug-bounty | 20-Aug-2024 |
| Invitation link hijacking on a bug bounty program | https://harish45.medium.com/invitation-link-hijacking-on-a-bug-bounty-program-50d3b92d5532?source=rss------bug_bounty-5 | Harish | hackerone, bugcrowd, bug-bounty, bug-bounty-tips, ethical-hacking | 20-Aug-2024 |
| Best Directory Brute-forcing Tools for Beginner Bug Hunters | https://medium.com/@josuofficial327/best-directory-brute-forcing-tools-for-beginner-bug-hunters-3388dd97c055?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | ethical-hacking, bug-bounty, bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup | 19-Aug-2024 |
| 0-click Full Account Takeover | https://dynnyd20.medium.com/0-click-full-account-takeover-9bb6b4d692a9?source=rss------bug_bounty-5 | dynnyd20 | cybersecurity, pentest, ato, bug-bounty, pentesting | 19-Aug-2024 |
| Beyond Web Caching Vulnerabilities | https://medium.com/@0xAwali/beyond-web-caching-vulnerabilities-c617d8cdbb85?source=rss------bug_bounty-5 | Mahmoud M. Awali | web-security, bug-bounty | 19-Aug-2024 |
| Discovering a Session Persistence Vulnerability That Led to a $$$$ Bounty | https://anonysm.medium.com/discovering-a-session-persistence-vulnerability-225e4b38e605?source=rss------bug_bounty-5 | Muthu D | cybersecurity, penetration-testing, infosec, bug-bounty, ethical-hacking | 19-Aug-2024 |
| Advanced Techniques for Mitigating Web Cache Poisoning Attacks | https://cyberw1ng.medium.com/advanced-techniques-for-mitigating-web-cache-poisoning-attacks-8f818fd7eb00?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, cybersecurity, bug-bounty, penetration-testing | 19-Aug-2024 |
| How to Bypass Company Email Feature While Creating an Account | https://medium.com/@josuofficial327/how-to-bypass-company-email-feature-while-creating-an-account-f792b37a231f?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty-hunter, cybersecurity, bug-bounty-tips, vulnerability, bug-bounty | 18-Aug-2024 |
| BugBounty WriteUp — Creative thinking is our everything (Race Condition + Business Logic Error) | https://medium.com/@bilalresearcher/bugbounty-writeup-creative-thinking-is-our-everything-race-condition-business-logic-error-c7cfcc6d9125?source=rss------bug_bounty-5 | Bilal Researcher | hacking, writeup, bug-bounty, penetration-testing, programming | 18-Aug-2024 |
| Bug Bounty Writeup: $2500 Reward for Session Hijack via Chained Attack | https://medium.com/@bilalresearcher/bug-bounty-writeup-2500-reward-for-session-hijack-via-chained-attack-b5ad443bc9b9?source=rss------bug_bounty-5 | Bilal Researcher | ethical-hacking, cybersecurity, xss-attack, bug-bounty-tips, bug-bounty | 18-Aug-2024 |
| How Automation Detected Default Admin Credential Worth $500 | https://medium.com/@bilalresearcher/how-automation-detected-default-admin-credential-worth-500-9f2c3ed460c4?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty-writeup, bug-bounty, bug-bounty-tips, cybersecurity | 18-Aug-2024 |
| Accessing deleted comment for $$: A Bug Bounty Writeup | https://medium.com/@bilalresearcher/accessing-deleted-comment-for-a-bug-bounty-writeup-085e836660c1?source=rss------bug_bounty-5 | Bilal Researcher | cybersecurity, bug-bounty, writeup, bug-bounty-tips, bug-bounty-writeup | 18-Aug-2024 |
| PII Disclosure Worth $750 | https://medium.com/@bilalresearcher/pii-disclosure-worth-750-1f9caeac484f?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bug-bounty-tips, bugbounty-writeup, cybersecurity, bug-bounty-writeup | 18-Aug-2024 |
| Burp Suite Filtering Trick — Reducing Log Noise with TLS Pass-Through | https://systemweakness.com/burp-suite-filtering-trick-reducing-log-noise-with-tls-pass-through-468d00fbc7dc?source=rss------bug_bounty-5 | Khaleel Khan | ethical-hacking, infosec, bug-bounty-tips, cybersecurity, bug-bounty | 18-Aug-2024 |
| Day 15 of 30 Days — 30 Vulnerabilities | ClickJacking | https://it4chis3c.medium.com/day-15-of-30-days-30-vulnerabilities-clickjacking-592505aff54d?source=rss------bug_bounty-5 | It4chis3c | web-security, bug-bounty, clickjacking, 30dayswritingchallenge, bug-bounty-tips | 18-Aug-2024 |
| How I Bypassed 2FA and Earned My First Bounty $$$ | https://anonysm.medium.com/how-i-bypassed-2fa-and-earned-my-first-bounty-3fdc58938347?source=rss------bug_bounty-5 | Muthu D | cybersecurity, bug-bounty, ethical-hacking, hacking, penetration-testing | 18-Aug-2024 |
| SQL Vulnerability in WordPress Automatic Plugin (CVE-2024–27956) | https://roadtooscp.medium.com/sql-vulnerability-in-wordpress-automatic-plugin-cve-2024-27956-3635f1d32b4e?source=rss------bug_bounty-5 | RoadToOSCP | bug-bounty, penetration-testing, wordpress-plugins, ethical-hacking, wordpress-security | 18-Aug-2024 |
| HTML Injection in Mobile App Support Ticket Form on target.tech | https://medium.com/@shobitsharma/html-injection-in-mobile-app-support-ticket-form-on-target-tech-f45d2de510af?source=rss------bug_bounty-5 | Shobit Sharma | html-injection, owasp, bug-bounty, vulnerability, bug-bounty-tips | 18-Aug-2024 |
| Advanced Techniques and Emerging Trends in Web Cache Poisoning | https://cyberw1ng.medium.com/advanced-techniques-and-emerging-trends-in-web-cache-poisoning-d2c8d3807d46?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, hacking, penetration-testing | 18-Aug-2024 |
| Title: Mastering CSRF Exploits with Port Swigger Academy Lab: How to Bypass SameSite Strict via… | https://medium.com/@dsksatheesh35/title-mastering-csrf-exploits-with-port-swigger-academy-lab-how-to-bypass-samesite-strict-via-7976c3f42d12?source=rss------bug_bounty-5 | D Satheesh Kumar | penetration-testing, bug-bounty, csrf-attack, csrf-bypass, ctf-walkthrough | 18-Aug-2024 |
| Day 14 of 30 Days — 30 Vulnerabilities | HTTP Parameter Pollution (HPP) Vulnerability | https://medium.com/@kumawatabhijeet2002/day-14-of-30-days-30-vulnerabilities-http-parameter-pollution-hpp-vulnerability-6c767a9227d8?source=rss------bug_bounty-5 | Abhijeet kumawat | http-parameter-pollution, bug-bounty-tips, 30dayswritingchallenge, bug-bounty | 18-Aug-2024 |
| XSS CHECKLIST | https://medium.com/@mehmetfarisacar/xss-checklist-a2bf18ed6992?source=rss------bug_bounty-5 | Mehmet Faris Acar | bug-bounty, xss-vulnerability, cybersecurity, xss-attack | 18-Aug-2024 |
| Day 13 of 30 Days — 30 Vulnerabilities | XML External Entity (XXE) | https://medium.com/@kumawatabhijeet2002/day-13-of-30-days-30-vulnerabilities-xml-external-entity-xxe-93118ac3a167?source=rss------bug_bounty-5 | Abhijeet kumawat | xxe-attack, 30dayswritingchallenge, xxe, bug-bounty, bug-bounty-tips | 17-Aug-2024 |
| Everything about CSP (Content Security Policy)and bypassing it Like a PRO!! | https://shauryasharma05.medium.com/everything-about-csp-content-security-policy-and-bypassing-it-like-a-pro-290d3b06b721?source=rss------bug_bounty-5 | Shaurya Sharma | bugbounty-writeup, cybersecurity, bug-bounty, hacking, bug-bounty-tips | 17-Aug-2024 |
| A Step-by-Step Guide to Installing and Using dirsearch | https://medium.com/@sherlock297/a-step-by-step-guide-to-installing-and-using-dirsearch-7833d9dbe6c3?source=rss------bug_bounty-5 | Ravindra Dagale | tools, dirsearch, bug-bounty, tips, information-technology | 17-Aug-2024 |
| Targeting Hidden API Endpoints in IDOR Exploits | https://systemweakness.com/targeting-hidden-api-endpoints-in-idor-exploits-269b6ae0f16e?source=rss------bug_bounty-5 | Khaleel Khan | infosec, bug-bounty, cybersecurity, hacking, bug-bounty-tips | 17-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-73) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-73-210a9520bff3?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, ethical-hacking, money, hacking, bug-bounty | 17-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-72) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-72-a2bf155d3162?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, ethical-hacking, cybersecurity, money, bug-bounty | 17-Aug-2024 |
| Broken Access Control in a Crypto Trading Platform | Auth Bypass worth $$$$ | https://medium.com/@midnight-mihir/how-i-found-broken-access-control-in-a-crypto-trading-platform-auth-bypass-worth-b0048eb87e09?source=rss------bug_bounty-5 | Mihir | ethical-hacking, bug-bounty-tips, bug-bounty, cybersecurity | 17-Aug-2024 |
| Another 1500$: CR/LF Injection | https://infosecwriteups.com/1500-cr-lf-injection-59152daaf413?source=rss------bug_bounty-5 | Abhi Sharma | crlf-injection, infosec, bug-bounty, programming, cybersecurity | 17-Aug-2024 |
| Security Flaws in Privilege Downgrades: How Users Can Exploit API Keys and Privilege escalation | https://medium.com/@Az3m/security-flaws-in-privilege-downgrades-how-users-can-exploit-api-keys-and-privilege-escalation-886b37c2344d?source=rss------bug_bounty-5 | Az3m | bug-bounty-tips, privilege-escalation, bugs, bug-bounty | 17-Aug-2024 |
| Sub-finder tool methodology | https://medium.com/@tharunteja725_8686/sub-finder-tool-methodology-1dcb2622b0d5?source=rss------bug_bounty-5 | Chidurala Tharun teja | bug-bounty, bug-bounty-tips, bug-bounty-writeup, cybersecurity, bug-bounty-hunter | 17-Aug-2024 |
| IDOR Vulnerabilities Between Admin Privilege Users in the Same Organization | https://medium.com/@Az3m/idor-vulnerabilities-between-admin-privilege-users-in-the-same-organization-7718192bba0e?source=rss------bug_bounty-5 | Az3m | bug-bounty-tips, idor, bug-bounty, idor-vulnerability | 17-Aug-2024 |
| How Find Multi open redirect Bugs with Bing search engine | https://medium.com/@Az3m/how-find-multi-open-redirect-bugs-with-bing-search-engine-14d953b707ec?source=rss------bug_bounty-5 | Az3m | bugs, open-redirect, bug-bounty-tips, bug-bounty | 17-Aug-2024 |
| Boost Your Bug Bounty Game: Get Started with Free VPS on Krutrim Cloud | https://infosecwriteups.com/boost-your-bug-bounty-game-get-started-with-free-vps-on-krutrim-cloud-6a37444a9ce0?source=rss------bug_bounty-5 | Vicky Aryan | krutrim-cloud, bug-bounty, vps, cloud, hacking | 17-Aug-2024 |
| Understanding Web Cache Poisoning: How It Works and How to Prevent It | https://cyberw1ng.medium.com/understanding-web-cache-poisoning-how-it-works-and-how-to-prevent-it-55af897e1eb5?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, bug-bounty, cybersecurity, hacking | 17-Aug-2024 |
| $$$ Bypassing SSRF Restrictions on a Google Product: A Journey Through DNS Rebinding | https://anonysm.medium.com/bypassing-ssrf-restrictions-on-a-google-product-a-journey-through-dns-rebinding-a4e9d18213af?source=rss------bug_bounty-5 | Muthu D | bug-bounty, cybersecurity, ethical-hacking, penetration-testing, hacking | 17-Aug-2024 |
| Understanding Open Redirect Vulnerabilities: A Simple Discovery | https://shaifsec.medium.com/understanding-open-redirect-vulnerabilities-a-simple-discovery-476a675839f7?source=rss------bug_bounty-5 | Shaif Ali | web-security, cybersecurity, shaifsec, penetration-testing, bug-bounty | 17-Aug-2024 |
| Top 20 Open Redirect Bug Bounty Reports | https://medium.com/@thenumberof9/top-20-open-redirect-bug-bounty-reports-610c57fb006f?source=rss------bug_bounty-5 | TheNumberOf-9 | host-redirect, bug-bounty, open-redirect, hacking, ethical-hacking | 16-Aug-2024 |
| How to find a easy bug it worth $100 | https://medium.com/@sangamahesh650/how-to-find-a-easy-bug-it-worth-100-7485f9bf638f?source=rss------bug_bounty-5 | loyalonlytoday | bugbounty-writeup, hacking, bug-bounty-tips, penetration-testing, bug-bounty | 16-Aug-2024 |
| The Bug Bounty Billionaire | https://medium.com/@shwetapapnai783/the-bug-bounty-billionaire-acaa5e64959e?source=rss------bug_bounty-5 | Shweta Papnai | security, cybersecurity, billionaires, bug-bounty, technology | 16-Aug-2024 |
| ️ Reconnaissance and Vulnerability Scanning Script️ | https://securitycipher.medium.com/%EF%B8%8F-reconnaissance-and-vulnerability-scanning-script-%EF%B8%8F-086f4051eeba?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | cybersecurity, coding, technology, bug-bounty, hacking | 16-Aug-2024 |
| Complete Guide on Attack Surface Discovery | https://osintteam.blog/complete-guide-on-attack-surface-discovery-d684710d6a3e?source=rss------bug_bounty-5 | Netlas.io | bug-bounty, attack-surface, attack-surface-discovery, cybersecurity, penetration-testing | 16-Aug-2024 |
| Easy Critical Bugs: Uncovering Treasure Troves in Adobe Experience Manager (AEM) | https://anonysm.medium.com/easy-critical-bugs-uncovering-treasure-troves-in-adobe-experience-manager-aem-59ce8656ef9b?source=rss------bug_bounty-5 | Muthu D | penetration-testing, bug-bounty, cybersecurity, pentesting, hacking | 16-Aug-2024 |
| Two Factor Authentication Bypass via using Victim’s DeviceID | https://medium.com/@cyberpro151/two-factor-authentication-bypass-via-using-victims-deviceid-b46afb4fe7a5?source=rss------bug_bounty-5 | cyberpro151 | application-security, hacking, bug-bounty, cybersecurity, hackerone | 16-Aug-2024 |
| BlackhatOps #1: A Syndicate Of Hackers | https://medium.com/@red.whisperer/blackhatops-1-a-syndicate-of-hackers-3f599f6f9c63?source=rss------bug_bounty-5 | Chux | cybersecurity, pentesting, red-team, bug-bounty, hacking | 16-Aug-2024 |
| Forced SSO Session Fixation | https://infosecwriteups.com/forced-sso-session-fixation-5d3b457b79cb?source=rss------bug_bounty-5 | Serj Novoselov | bug-bounty, vulnerability, penetration-testing, information-security, writeup | 16-Aug-2024 |
| 24.10 Lab: Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability… | https://cyberw1ng.medium.com/24-10-lab-web-cache-poisoning-to-exploit-a-dom-vulnerability-via-a-cache-with-strict-cacheability-78d30bb559e4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, hacking, careers, bug-bounty, cybersecurity | 16-Aug-2024 |
| 500$ From Meta by reporting a HTMLi(Accidental Bug) | https://armx64.medium.com/500-from-meta-by-reporting-a-htmli-accidental-bug-fef2e5a0f4c4?source=rss------bug_bounty-5 | A.R Maheer | bug-bounty, accidental-bug | 16-Aug-2024 |
| NewLine Character Cause DoS: Folder & File Deletion Flaw | https://medium.com/@bilalresearcher/newline-character-cause-dos-folder-file-deletion-flaw-2b128252720b?source=rss------bug_bounty-5 | Bilal Researcher | infosec, denial-of-service, programming, cybersecurity, bug-bounty | 16-Aug-2024 |
| 1000$ IDOR : Unauthorized Project Inclusion in Expense | https://medium.com/@bilalresearcher/1000-idor-unauthorized-project-inclusion-in-expense-da9176a96015?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, cybersecurity, idor, information-security, broken-access-control | 16-Aug-2024 |
| Bypass Plan Restriction & Get 350$ Bounty | https://medium.com/@bilalresearcher/bypass-plan-restriction-get-350-bounty-105790e994cb?source=rss------bug_bounty-5 | Bilal Researcher | privilege-escalation, bug-bounty, cybersecurity, programming, access-control | 16-Aug-2024 |
| How I Earned $469 Bounty: Bypassing Plan Restriction | https://medium.com/@bilalresearcher/how-i-earned-469-bounty-bypassing-plan-restriction-6c215221b6f6?source=rss------bug_bounty-5 | Bilal Researcher | access-control, infosec, bug-bounty, cybersecurity, programming | 16-Aug-2024 |
| $800 Improper Authorization Flaw: Unauthorized Project Reclaiming Post Transfer | https://medium.com/@bilalresearcher/800-improper-authorization-flaw-unauthorized-project-reclaiming-post-transfer-d99ee6b2708c?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, bug-bounty-tips, idor, idor-vulnerability, cybersecurity | 16-Aug-2024 |
| 921$ Privilege Escalation: Unauthorized User Addition to Shared APP Connections | https://medium.com/@bilalresearcher/921-privilege-escalation-unauthorized-user-addition-to-shared-app-connections-681d807ccd1e?source=rss------bug_bounty-5 | Bilal Researcher | programming, bug-bounty, privilege-escalation, cybersecurity, hacking | 16-Aug-2024 |
| 500$: MFA bypass By Race Condition | https://medium.com/@bilalresearcher/500-mfa-bypass-by-race-condition-8952b6718b89?source=rss------bug_bounty-5 | Bilal Researcher | cybersecurity, 2fa, programming, bug-bounty, race-condition | 16-Aug-2024 |
| The UI Slip I Hit 750$: UI Manipulation Leading to Unauthorized Permission Changes | https://medium.com/@bilalresearcher/the-ui-slip-i-hit-750-ui-manipulation-leading-to-unauthorized-permission-changes-23c544918111?source=rss------bug_bounty-5 | Bilal Researcher | cybersecurity, user-interface, programming, bug-bounty, hacking | 16-Aug-2024 |
| 1500$: CR/LF Injection | https://medium.com/@bilalresearcher/1500-cr-lf-injection-09b7ae3cfaef?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, crlf-injection, cybersecurity, hacking, programming | 16-Aug-2024 |
| $500 for Cracking Invitation Code For Unauthorized Access & Account Takeover | https://medium.com/@bilalresearcher/500-for-cracking-invitation-code-for-unauthorized-access-account-takeover-b0b693b2ae47?source=rss------bug_bounty-5 | Bilal Researcher | bug-bounty, cybersecurity, account-takeover | 16-Aug-2024 |
| Exploiting phar stream wrapper | https://rudrasarkar.medium.com/exploiting-phar-stream-wrapper-d2140592c6e7?source=rss------bug_bounty-5 | Rudra Sarkar | source-code-analysis, php, bug-bounty, hackthebox | 15-Aug-2024 |
| Unauthorized Deletion of Reports via Folder Manipulation | https://medium.com/@hossam_hamada/unauthorized-deletion-of-reports-via-folder-manipulation-d0760582e168?source=rss------bug_bounty-5 | Hossam Hamada | idor, hackerone, idor-vulnerability, bug-bounty, bugcrowd | 15-Aug-2024 |
| Day 12: Mastering Server Side Request Forgery Vulnerability — Essential Tricks & Techniques Based… | https://medium.com/@kumawatabhijeet2002/day-12-mastering-server-side-request-forgery-vulnerability-essential-tricks-techniques-based-21dc8b576e37?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, ssrf-bug, ssrf, ssrf-attack, bug-bounty-tips | 15-Aug-2024 |
| Hacking Large Corporations: The Art and Science of Reconnaissance | https://harshit3.medium.com/hacking-large-corporations-the-art-and-science-of-reconnaissance-1a6fc8f90616?source=rss------bug_bounty-5 | Harshit | bug-bounty, information-technology, corporations, cybersecurity, ethical-hacking | 15-Aug-2024 |
| 23.7 Lab: Server-side template injection with a custom exploit | https://cyberw1ng.medium.com/23-7-lab-server-side-template-injection-with-a-custom-exploit-263dcc38653e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, hacking, careers, bug-bounty, cybersecurity | 15-Aug-2024 |
| Fourth Layer And Attacks ! | https://medium.com/@reemmoslem34/fourth-layer-and-attacks-7bcdbbf6b53c?source=rss------bug_bounty-5 | Rem Khalid | cybersecurity, security, bug-bounty | 15-Aug-2024 |
| 2FA Bypass - IDN Mischief | https://shahjerry33.medium.com/2fa-bypass-idn-mischief-157f06cb6904?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | vulnerability, bug-bounty, infosec, cybersecurity, 2fa | 15-Aug-2024 |
| Cracking the Armour: Bypassed WAF using Ibrahimxss Tool for easy | https://medium.com/@jitinyaduvanshi/cracking-the-armour-bypassed-waf-using-ibrahimxss-tool-for-easy-6867cfcd850b?source=rss------bug_bounty-5 | Jitinyaduvanshi | cybersecurity, xss-attack, bug-bounty | 15-Aug-2024 |
| Swisstronik: A Blockchain Solution for Privacy and Compliance. | https://medium.com/@danishkhatri023/swisstronik-a-blockchain-solution-for-privacy-and-compliance-73c662eadf7a?source=rss------bug_bounty-5 | Danish Khatri | testnet, blockchain, gui̇de, bug-bounty, swisstronik | 15-Aug-2024 |
| Protecting against multi-step SQL injections: A shield for your data | https://medium.com/@Progsky/protecting-against-multi-step-sql-injections-a-shield-for-your-data-bf14e41dc412?source=rss------bug_bounty-5 | Progsky | bug-bounty, web-security, hacking | 15-Aug-2024 |
| Passenger Information Disclosure Vulnerability Over the MQTT Protocol | https://medium.com/@moradloo1779/passenger-information-disclosure-vulnerability-over-the-mqtt-protocol-667402289583?source=rss------bug_bounty-5 | Moradloo | bugbounty-writeup, bug-bounty, pentest | 15-Aug-2024 |
| Account takeover on 8 years old public program | https://medium.com/@pranshux0x/account-takeover-on-8-years-old-public-program-c0c0a30cfdd2?source=rss------bug_bounty-5 | priyanshu shakya | account-takeover, bug-bounty, bug-bounty-tips, hacking, vulnerability | 14-Aug-2024 |
| New Bug Bounty Alert | https://medium.com/@vic-thor/new-bug-bounty-alert-874fefd2ea6b?source=rss------bug_bounty-5 | vic | tech, online, technology, cybersecurity, bug-bounty | 14-Aug-2024 |
| XSS Tipleri için Test Caseler | https://medium.com/@NadirSensoy/xss-tipleri-i%C3%A7in-test-caseler-ce006d2cd57f?source=rss------bug_bounty-5 | Nadir Sensoy | xss-attack, bug-bounty, xss-vulnerability, cybersecurity | 14-Aug-2024 |
| My journey towards Bug Bounty and Ambassador World Cup 2023 Recap | https://bhattaraiprashant98.medium.com/my-journey-towards-bug-bounty-and-ambassador-world-cup-2023-recap-bc5fc1d00e72?source=rss------bug_bounty-5 | Prashant Bhattarai | bug-bounty, hacking, hackerone, cybersecurity | 14-Aug-2024 |
| Server-side template injection in Web App Penetration Testing | 2024 | https://cyberw1ng.medium.com/server-side-template-injection-in-web-app-penetration-testing-2024-67961a32cadd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, penetration-testing, bug-bounty, hacking | 14-Aug-2024 |
| Automate your Google Dorking to Find Bugs | https://mrunknown124154.medium.com/automate-your-google-dorking-to-find-bugs-f7d86dc2d279?source=rss------bug_bounty-5 | Mr Abdullah | bug-bounty, cybersecurity, google-dorking, cyber-security-awareness, dorking | 14-Aug-2024 |
| Authentication Bypass -MFA , Account Takeover… | https://medium.com/@prakashchand72/authentication-bypass-mfa-account-takeover-32166aedb3b9?source=rss------bug_bounty-5 | ASTUTE | bypass, hacking, bug-bounty, authentication-bypass, account-takeover | 14-Aug-2024 |
| My journey towards Bug Bounty and Ambassador World Cup 2023 Recap | https://g0ndaar.medium.com/my-journey-towards-bug-bounty-and-ambassador-world-cup-2023-recap-bc5fc1d00e72?source=rss------bug_bounty-5 | Prashant Bhattarai | bug-bounty, hacking, hackerone, cybersecurity | 14-Aug-2024 |
| Open S3 Buckets Through Reconnaissance | https://offsec01.medium.com/open-s3-buckets-through-reconnaissance-920f8b35be47?source=rss------bug_bounty-5 | Facundo Fernandez | bug-bounty-tips, bug-bounty, penetration-testing, hacking, offensive-security | 14-Aug-2024 |
| A Critical 403 Bypass Vulnerability Lead to a Staging Environment with User Enumeration | https://ay0ub-n0uri.medium.com/a-critical-403-bypass-vulnerability-lead-to-a-staging-environment-with-user-enumeration-25b94ebadcfa?source=rss------bug_bounty-5 | Ay0ub N0uri | offensive-security, bug-bounty-tips, penetration-testing, cybersecurity, bug-bounty | 14-Aug-2024 |
| How I Prevented a Data Breach by Reporting an IDOR in a System Exposing over 500,000 US Passports | https://offsec01.medium.com/how-i-prevented-a-data-breach-by-reporting-an-idor-in-a-system-exposing-over-500-000-us-passports-bc6bec99aa3d?source=rss------bug_bounty-5 | Facundo Fernandez | passport, bug-bounty, penetration-testing, data-breach, hacking | 14-Aug-2024 |
| Identifying and Exploiting SQL Injection Vulnerabilities | https://im4x.medium.com/identifying-and-exploiting-sql-injection-vulnerabilities-cdfaa90b7b04?source=rss------bug_bounty-5 | Ahmed Najeh | bug-bounty, bugs, sqlmap | 14-Aug-2024 |
| Finding a easy p3 bug | https://medium.com/@sangamahesh650/finding-a-easy-p3-bug-05b54f70e14c?source=rss------bug_bounty-5 | loyalonlytoday | bugbounty-writeup, bug-bounty-tips, penetration-testing, bug-bounty, hacking | 13-Aug-2024 |
| Hidden Form Fields Reveal Test Answers for Easy Perfect Score | https://osintteam.blog/hidden-form-fields-reveal-test-answers-for-easy-perfect-score-c4d202416ad7?source=rss------bug_bounty-5 | enigma | bug-bounty, ethical-hacking, penetration-testing, cybersecurity, misconfiguration | 13-Aug-2024 |
| NoSQL Injection | Try Hack Me | https://ahmed-makawi.medium.com/nosql-injection-try-hack-me-e624fa71743f?source=rss------bug_bounty-5 | Ahmed Makawi | cybersecurity, bug-bounty, it, penetration-testing, sql-injection | 13-Aug-2024 |
| Role-based Privilege Escalation Worth $2000 in a bug bounty program | https://medium.com/@_K3rnel/role-based-privilege-escalation-worth-2000-in-a-bug-bounty-program-0ca40a4cecb9?source=rss------bug_bounty-5 | _K3rnel | bugbounting, bug-bounty, bugs, bug-bounty-tips, bugbounty-writeup | 13-Aug-2024 |
| Threat Modeling 101: Mapping OWASP Top 10 to STRIDE | https://justm0rph3u5.medium.com/threat-modeling-101-mapping-owasp-top-10-to-stride-cb8e8613e396?source=rss------bug_bounty-5 | Divyanshu | stride, bug-bounty, owasp, threat-model, pasta | 13-Aug-2024 |
| 23.6 Lab: Server-side template injection in a sandboxed environment | https://cyberw1ng.medium.com/23-6-lab-server-side-template-injection-in-a-sandboxed-environment-f731eacf2530?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, penetration-testing, cybersecurity, careers | 13-Aug-2024 |
| Logic Flaw: User Account Lockout | https://medium.com/@raxomara/logic-flaw-user-account-lockout-8865c622cef0?source=rss------bug_bounty-5 | Raxomara | penetration-testing, bug-bounty, cybersecurity, bug-bounty-tips, bug-hunting | 13-Aug-2024 |
| NoSQL Injection | Try Hack Me | https://systemweakness.com/nosql-injection-try-hack-me-e624fa71743f?source=rss------bug_bounty-5 | Ahmed Makawi | cybersecurity, bug-bounty, it, penetration-testing, sql-injection | 13-Aug-2024 |
| My first bounty report was a duplicate | https://medium.com/@World-Breaker/my-first-bounty-report-was-a-duplicate-ad2ba4ec595e?source=rss------bug_bounty-5 | usu@rioZ3r0 | bug-bounty | 13-Aug-2024 |
| Effortless Go Language Setup: Installing Go Lang Like a Pro! | https://imran407704.medium.com/effortless-go-language-setup-installing-go-lang-like-a-pro-e668c51454c3?source=rss------bug_bounty-5 | Imran | bug-bounty, go-language, go-language-tutorial | 13-Aug-2024 |
| How I Discovered a Directory Listing Vulnerability on a NASA Subdomain | https://medium.com/@shubhammpawar7438/how-i-discovered-a-directory-listing-vulnerability-on-a-nasa-subdomain-979883e47874?source=rss------bug_bounty-5 | Shubham pawar | vulnerability-disclosure, bug-bounty, cybersecurity, web-security, nasa-security | 13-Aug-2024 |
| How To Get free burpsuite professional | https://medium.com/@sangamahesh650/how-to-get-free-burpsuite-professional-b6ebca7a60a3?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, pentesting, bug-bounty-tips, hacking, bugbounty-writeup | 13-Aug-2024 |
| Breaking the Barrier: Admin Panel Takeover Worth $3500 | https://medium.com/@noob.assassin/breaking-the-barrier-admin-panel-takeover-worth-3500-78da79089ca3?source=rss------bug_bounty-5 | Aditya Sharma | bug-bounty-tips, bug-bounty, hacker, hacking, vulnerability | 13-Aug-2024 |
| Simple but Elegant DOM XSS on Hidden Parameter— Bypassing Filter | https://medium.com/@YourFinalSin/simple-but-elegant-dom-xss-on-hidden-parameter-bypassing-filter-ab58ca1e6135?source=rss------bug_bounty-5 | SIN | xss-vulnerability, bug-bounty, xss-attack, bug-bounty-tips, bug-bounty-writeup | 13-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-71) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-71-3232e47be803?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, cybersecurity, bug-bounty, skills, ethical-hacking | 13-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-70) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-70-f603b2fde234?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty, hacking, cybersecurity, skills | 13-Aug-2024 |
| Insecure Direct Object Reference | https://medium.com/@yassentaalab51/insecure-direct-object-reference-6bddf9be8dcd?source=rss------bug_bounty-5 | Yassen Taalab | idor, bug-bounty, owasp, cybersecurity, broken-access-control | 13-Aug-2024 |
| CloudBrute — Awesome Cloud Enumerator | https://medium.com/@pentesterclubpvtltd/cloudbrute-awesome-cloud-enumerator-b6d86e168b2c?source=rss------bug_bounty-5 | Pentester Club | bug-bounty, hacking, ethical-hacking, cybersecurity, cloud-computing | 13-Aug-2024 |
| Embedding Beacon Payloads in PDF Files | https://medium.com/@pentesterclubpvtltd/embedding-beacon-payloads-in-pdf-files-e789820f340b?source=rss------bug_bounty-5 | Pentester Club | hacking, cobalt-strike, bug-bounty, cybersecurity, pdf | 13-Aug-2024 |
| DOM XSS — Simple but Elegant on Hidden Parameter— Bypassing Filter | https://medium.com/@YourFinalSin/simple-but-elegant-dom-xss-on-hidden-parameter-bypassing-filter-ab58ca1e6135?source=rss------bug_bounty-5 | SIN | xss-vulnerability, bug-bounty, xss-attack, bug-bounty-tips, bug-bounty-writeup | 13-Aug-2024 |
| Common Types of Bugs in Software Testing | https://medium.com/optimizory-apps/common-types-of-bugs-in-software-testing-aea2ff2138bd?source=rss------bug_bounty-5 | Divyansh Vats | bug-bounty, bugs, software-testing | 12-Aug-2024 |
| How to balance bug fix costs with software performance? | https://medium.com/@harleyrose981/how-to-balance-bug-fix-costs-with-software-performance-92e9df481c36?source=rss------bug_bounty-5 | Harley Rose | web3, technology, bug-bounty, web-development, seo | 12-Aug-2024 |
| 3rd Anniversary Fun Activity: TECNO Security Bug Bounty Rules Challenging Test | https://medium.com/@security.tecno/3rd-anniversary-fun-activity-tecno-security-bug-bounty-rules-challenging-test-d6dac9f552e7?source=rss------bug_bounty-5 | TECNO Security | testing, bug-bounty, activity, security | 12-Aug-2024 |
| 5 Minutes to Take Over the System Administrator Account of a GPS Tracker Solution Provider | https://medium.com/@mmaulanaabdullah/5-minutes-for-taking-over-system-administrator-account-of-gps-tracker-solution-provider-system-24bd083f1559?source=rss------bug_bounty-5 | M Maulana Abdullah | api, disruption, bug-bounty, information-security, infosec | 12-Aug-2024 |
| Maintaining Software Excellence: The Importance of Bug Fixes and Maintenance | https://medium.com/@harleyrose981/maintaining-software-excellence-the-importance-of-bug-fixes-and-maintenance-87db9a864a5f?source=rss------bug_bounty-5 | Harley Rose | technology, software-development, web-development, tech, bug-bounty | 12-Aug-2024 |
| From Fries to Flaws : My Journey into Web App Security (Part V) | https://infosecwriteups.com/from-fries-to-flaws-my-journey-into-web-app-security-part-v-f0ea86e55845?source=rss------bug_bounty-5 | OiQ | penetration-testing, vulnerability, bug-bounty-tips, cybersecurity, bug-bounty | 12-Aug-2024 |
| The Importance of Functionality and Usability in Web Applications | https://medium.com/@owaisbagali2/the-importance-of-functionality-and-usability-in-web-applications-65f5cf44374d?source=rss------bug_bounty-5 | OwaisB | self-awareness, bug-bounty, audi, software-testing, basics | 12-Aug-2024 |
| Earned $188 in bug bounty simply through the invitation feature. | https://medium.com/@Mu1berry/earned-188-in-bug-bounty-simply-through-the-invitation-feature-534486d6ec1c?source=rss------bug_bounty-5 | Mu1berry | bugcrowd, vulnerability, money, bug-bounty, hacker | 12-Aug-2024 |
| Detecting Blind Injection Attacks with Discord Webhooks | https://osintteam.blog/detecting-injection-attacks-with-discord-webhooks-5df22a5679c5?source=rss------bug_bounty-5 | mrunoriginal | web-application-security, cybersecurity, bug-bounty, information-security, ethical-hacking | 12-Aug-2024 |
| New Reconnaissance Methodologies/Tools for Bug Bounty Hunting & Ethical Hacking | https://medium.com/@retr0x/new-reconnaissance-methodologies-tools-for-bug-bounty-hunting-ethical-hacking-be7ca14a7ae2?source=rss------bug_bounty-5 | R3tr0x | Vinay Kumar | cyber, ethical-hacking, cyber-security-awareness, cybersecurity, bug-bounty | 12-Aug-2024 |
| “My Journey to Earning the First Bounty” | https://medium.com/@asharm.khan7/my-journey-to-earning-the-first-bounty-5314d1780f84?source=rss------bug_bounty-5 | Ashar Mahmood | bug-bounty, hacking, cyber-security-awareness, ethical-hacking, find-your-first-bug | 12-Aug-2024 |
| 21.4 Lab: Exploiting insecure output handling in LLMs | https://cyberw1ng.medium.com/21-4-lab-exploiting-insecure-output-handling-in-llms-4b17d8401fe6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, hacking, cybersecurity, bug-bounty, careers | 12-Aug-2024 |
| Getting all ips from Shodan easy | https://medium.com/@sangamahesh650/getting-all-ips-from-shodan-easy-400706799e53?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, hacking, bugbounty-writeup, penetration-testing, bug-bounty | 12-Aug-2024 |
| Cross-Site Scripting Explained: Protect Your Website from Modern Threats | https://7hecoder.medium.com/secure-your-site-xss-guide-d780dd2ad098?source=rss------bug_bounty-5 | Aamir Khan | xss-vulnerability, web-development, secure-coding, bug-bounty, cybersecurity | 12-Aug-2024 |
| The Hidden Threat: How Reverse Shells Packaged as .pyz Files Evade Detection | https://medium.com/@psychomong/the-hidden-threat-how-reverse-shells-packaged-as-pyz-files-evade-detection-e82d1f234187?source=rss------bug_bounty-5 | psychomong | hacker, hacking, meta, bug-bounty, whatsapp | 12-Aug-2024 |
| How Much Did I Make in My First Year of Bug Bounty Work? | https://medium.com/@bountyget/how-much-did-i-make-in-my-first-year-of-bug-bounty-work-2f0583002db6?source=rss------bug_bounty-5 | Bountyget | infosec-write-ups, bug-bounty, earn-money-online, bug-bounty-tips, hacking | 12-Aug-2024 |
| How I Hacked Into the World’s Top Universities Including MIT Cambridge & University of Oxford | https://medium.com/@josuofficial327/how-i-hacked-into-the-worlds-top-universities-including-mit-cambridge-university-of-oxford-a2e209d8abf7?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | cybersecurity, bug-bounty, vulnerability, ethical-hacking, hacking | 12-Aug-2024 |
| Stored XSS in LibreOffice | https://bunny0417.medium.com/stored-xss-in-libreoffice-ed4ad22e0f56?source=rss------bug_bounty-5 | Aayush kumar | bug-bounty-tips, xs, libreoffice, stored-xss, bug-bounty | 11-Aug-2024 |
| From Fries to Flaws : My Journey into Web App Security (Part IV) | https://infosecwriteups.com/from-fries-to-flaws-my-journey-into-web-app-security-part-iv-956c3fcbec68?source=rss------bug_bounty-5 | OiQ | bug-bounty, web-app-security, vulnerability, bug-bounty-tips, penetration-testing | 11-Aug-2024 |
| Internal and External Network penetration Testing | https://gaya3-r.medium.com/internal-and-external-network-penetration-testing-6a9421394618?source=rss------bug_bounty-5 | gayatri r | tools, bug-bounty, penetration-testing, owasp | 11-Aug-2024 |
| How I found my first P3 bug (disclosure of PII/Privilege Escalation) | https://medium.com/@the.bugcrowd.testerpawan/how-i-found-my-first-p3-bug-disclosure-of-pii-privilege-escalation-148dbf610334?source=rss------bug_bounty-5 | the_air_cyborg | bug-bounty-tips, bugbounty-writeup, bug-bounty | 11-Aug-2024 |
| Introduction to JWT | https://medium.com/@chanpreetkaur2005/introduction-to-jwt-f69162b59c24?source=rss------bug_bounty-5 | Chanpreet Kaur | web-exploitation, cybersecurity, bug-bounty, jwt, web-development | 11-Aug-2024 |
| 20.10 Lab: Using PHAR deserialization to deploy a custom gadget chain | https://cyberw1ng.medium.com/20-10-lab-using-phar-deserialization-to-deploy-a-custom-gadget-chain-39270975163f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, careers, cybersecurity | 11-Aug-2024 |
| Udemy Course off 50% CYBER082024 | https://cyberbruharmy.medium.com/udemy-course-off-50-cyber082024-c61d755d2714?source=rss------bug_bounty-5 | CyberBruhArmy | bug-bounty, firewall, bug-bounty-tips, security, cybersecurity | 11-Aug-2024 |
| Hacking the System: How I Beat Subscription Restrictions in Admin Controls | https://0xmatrix.medium.com/hacking-the-system-how-i-beat-subscription-restrictions-in-admin-controls-5684fd90279a?source=rss------bug_bounty-5 | Mo2men Elmady | hacking, bugs, penetration-testing, red-team, bug-bounty | 11-Aug-2024 |
| How I Got $150 on HackerOne for My First Bug | https://medium.com/@likithteki76/how-i-got-150-on-hackerone-for-my-first-bug-8af0ed515e79?source=rss------bug_bounty-5 | Likith Teki | bug-bounty-tips, 2fa-bypass, vulnerability, bug-bounty, ethical-hacking | 11-Aug-2024 |
| IDOR — How I Leaked Data of 50k+ Users | https://medium.com/@YourFinalSin/idor-how-i-leaked-data-of-50k-users-bc44201e777a?source=rss------bug_bounty-5 | SIN | idor, bug-bounty-hunter, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 10-Aug-2024 |
| How I got my first $13500 bounty through Parameter Polluting (HPP) | https://infosecwriteups.com/how-i-got-my-first-13500-bounty-through-parameter-polluting-hpp-179666b8e8bb?source=rss------bug_bounty-5 | rAmpancist | hacking, bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips | 10-Aug-2024 |
| IDOR — Exposing private forms $$$ | https://medium.com/@hellother18/idor-exposing-private-forms-0204c1ed560a?source=rss------bug_bounty-5 | Manthan_ mahale | hacking, cybersecurity, ethical-hacking, bug-bounty, bugbounty-writeup | 10-Aug-2024 |
| Day 8 of 30 Days — 30 Vulnerabilities | Security Misconfiguration | https://medium.com/@kumawatabhijeet2002/day-8-of-30-days-30-vulnerabilities-security-misconfiguration-5d8ee574e7e3?source=rss------bug_bounty-5 | Abhijeet kumawat | security-misconfiguration, bug-bounty, bug-bounty-tips | 10-Aug-2024 |
| What is a Bug Bounty Program? | https://medium.com/@pasan62nanayakkara/what-is-a-bug-bounty-program-f64c90197229?source=rss------bug_bounty-5 | Ravindu Nanayakkara | bug-bounty, cybersecurity, security | 10-Aug-2024 |
| $800 Improper Authorization Flaw: Unauthorized Project Reclaiming Post Transfer | https://medium.com/@a13h1/800-improper-authorization-flaw-unauthorized-project-reclaiming-post-transfer-15fe36976604?source=rss------bug_bounty-5 | Abhi Sharma | improper-authorization, cybersecurity, bug-bounty, idor, programming | 10-Aug-2024 |
| Practice Lab Setup for Application Security Testing | https://medium.com/@Kamal_S/practice-lab-setup-for-application-security-testing-9fa2c9b45917?source=rss------bug_bounty-5 | Kamal S | bug-bounty, vapt, security-testing, appsec, owasp | 10-Aug-2024 |
| The Evolution of Deserialization Attacks: Understanding the Risks and Future Trends | https://cyberw1ng.medium.com/the-evolution-of-deserialization-attacks-understanding-the-risks-and-future-trends-0e485ec7e833?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, careers, cybersecurity, hacking, bug-bounty | 10-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-69) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-69-fa42b90989a1?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty, skills, hacking, cybersecurity | 10-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-68) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-68-8e3af48d1c65?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, ethical-hacking, cybersecurity, bug-bounty, skills | 10-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-67) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-67-01756817b60c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, skills, ethical-hacking, bug-bounty, hacking | 10-Aug-2024 |
| How to Mitigate SQL Injection | https://medium.com/@dhiren.pradhan263/how-to-mitigate-sql-injection-20a26cfa96f5?source=rss------bug_bounty-5 | Dhiren Pradhan | security, bug-bounty, information-security | 09-Aug-2024 |
| How to find P1 SQL injection in indian website. | https://medium.com/@padhyepushkar/how-to-find-p1-sql-injection-in-indian-website-59ad091a9e1b?source=rss------bug_bounty-5 | Pushkar Padhye | bug-bounty | 09-Aug-2024 |
| How to Mitigate SQL Injection | https://medium.com/@bountyget/how-to-mitigate-sql-injection-20a26cfa96f5?source=rss------bug_bounty-5 | Bountyget | security, bug-bounty, information-security | 09-Aug-2024 |
| Bug Bounty Programs Launched in August 2024 | https://medium.com/@vic-thor/bug-bounty-programs-launched-in-august-2024-ab698f18b7c5?source=rss------bug_bounty-5 | vic | bug-bounty, technology, tech, money, cybersecurity | 09-Aug-2024 |
| Part 3: Enhancing Database Items in Angular using the Decorator Design Pattern: Bug Prevention… | https://medium.com/@nemanjablagojevic/part-3-enhancing-database-items-in-angular-using-the-decorator-design-pattern-bug-prevention-e965373a6219?source=rss------bug_bounty-5 | Nemanja Blagojevic | singleton, programming, angular, bug-bounty, ecommerce-web-development | 09-Aug-2024 |
| From Developer to Hacker: Putting on the White Hat | https://medium.com/@jonathanmondaut/from-developer-to-hacker-putting-on-the-white-hat-b4292af8c1d4?source=rss------bug_bounty-5 | Jonathan Mondaut | cybersecurity, technology, bug-bounty, ethical-hacking, programming | 09-Aug-2024 |
| How I Turned a Rate-Limit Bypass into an Account Takeover | https://anonysm.medium.com/how-i-turned-a-rate-limit-bypass-into-an-account-takeover-4588541c2d29?source=rss------bug_bounty-5 | Muthu D | ethical-hacking, hacking, pentesting, bug-bounty, penetration-testing | 09-Aug-2024 |
| Enriching Nuclei results with Vulnerability Intel | https://medium.com/@nvi_90805/enriching-nuclei-results-with-vulnerability-intel-d760b756b066?source=rss------bug_bounty-5 | NVI - North Vulnerability Intelligence | vulnerability, cve, bug-bounty, nuclei-template, exploit | 09-Aug-2024 |
| Mastering Subfinder for Subdomain Enumeration: A Quick Guide for Bug Bounty Hunters | https://medium.com/@k4r7hx/mastering-subfinder-for-subdomain-enumeration-a-quick-guide-for-bug-bounty-hunters-5d6c3d471896?source=rss------bug_bounty-5 | Karthikeyan | subdomain-enumeration, subdomains-enumeration, subdomain, bug-bounty, subdomain-takeover | 09-Aug-2024 |
| Bug Bounty Methodology — Step By Step Guide To Find Subdomains And Vulnerable URLs | https://medium.com/@shaikhminhaz1975/bug-bounty-methodology-step-by-step-guide-to-find-subdomains-and-vulnerable-urls-18bdd76e979f?source=rss------bug_bounty-5 | Shaikh Minhaz | cybersecurity, reconnaissance, subdomains-enumeration, bug-bounty, methodology | 09-Aug-2024 |
| 20 Essential Google Dorking Queries to find vulnerable targets | https://offsec01.medium.com/20-essential-google-dorking-queries-to-find-vulnerable-targets-a98b657dc66d?source=rss------bug_bounty-5 | Facundo Fernandez | offensive-security, google-dorking, hacking-training, bug-bounty, hacking | 09-Aug-2024 |
| Day 7 of 30 Days — 30 Vulnerability | IDOR (Insecure Direct Object Reference) | https://medium.com/@kumawatabhijeet2002/day-7-of-30-days-30-vulnerability-idor-insecure-direct-object-reference-79b8051d67e2?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, 30dayswritingchallenge, idor-vulnerability, idor, bug-bounty-tips | 09-Aug-2024 |
| How dirsearch Uncovered a $750 Bounty | https://medium.com/@bountyget/how-dirsearch-uncovered-a-750-bounty-fd215c925eb7?source=rss------bug_bounty-5 | Bountyget | infosec, dirsearch, wordlist, bug-bounty, hackerone | 09-Aug-2024 |
| What After Recon ? Part 01 Bug Bounty Methodology | https://omarora1603.medium.com/what-after-recon-part-01-bug-bounty-methodology-25ff3705a738?source=rss------bug_bounty-5 | Om Arora | infosec, bug-bounty, bug-bounty-writeup, methodology, hacking | 09-Aug-2024 |
| Embracing Proactive Security Measures: Future-Proofing Against PHAR Deserialization and Beyond | https://cyberw1ng.medium.com/embracing-proactive-security-measures-future-proofing-against-phar-deserialization-and-beyond-49e1dec9000d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, hacking, penetration-testing, bug-bounty | 09-Aug-2024 |
| How i hacked NASA? NASA VDP. | https://medium.com/@momos1337/how-i-hacked-nasa-bug-bounty-6975b833eb45?source=rss------bug_bounty-5 | Fadhli Almunawar | cybersecurity, bug-bounty | 09-Aug-2024 |
| How dirsearch Uncovered a $750 Bounty | https://medium.com/@bountyget/how-dirsearch-uncovered-a-750-bounty-fd215c925eb7?source=rss------bug_bounty-5 | Bountyget | infosec, dirsearch, wordlist, info-sec-writeups, bug-bounty | 09-Aug-2024 |
| L6 — Postbook | https://scissor07.medium.com/l6-postbook-8d5b322a0801?source=rss------bug_bounty-5 | scissor_seven | writeup, cybersecurity, bug-bounty, hackerone, ctf | 08-Aug-2024 |
| Web App Security Scanner- Vex Scanner | https://medium.com/@pentesterclubpvtltd/web-app-security-scanner-vex-scanner-e150e9a03ffc?source=rss------bug_bounty-5 | Pentester Club | cybersecurity, scalability, bug-bounty, hacking, security | 08-Aug-2024 |
| OAuth Impersonation Attack: Misconfiguration of Facebook and Google OAuth Leading to Account… | https://medium.com/@security.tecno/oauth-impersonation-attack-misconfiguration-of-facebook-and-google-oauth-leading-to-account-9f838439de31?source=rss------bug_bounty-5 | TECNO Security | bug-bounty, security, hacker | 08-Aug-2024 |
| Hijacking User Privileges: The Story of a Patched Vulnerability in Open Bug Bounty | https://take0verx0.medium.com/hijacking-user-privileges-the-story-of-a-patched-vulnerability-in-open-bug-bounty-4db81fa0fd1f?source=rss------bug_bounty-5 | Shahariar Amin | bug-bounty, bug-bounty-tips, web-security, openbugbounty | 08-Aug-2024 |
| Last Week in tech — 5th edition | https://medium.com/@azefox/last-week-in-tech-5th-edition-0f559055dcf6?source=rss------bug_bounty-5 | Azefox | cloud-computing, ai, bug-bounty, infosec, news | 08-Aug-2024 |
| O manual do Hacker Moderno | https://medium.com/@espectrx/o-manual-do-hacker-moderno-2a715e35184c?source=rss------bug_bounty-5 | Rafael Henrique | hackingrévolution, hackerone, hacker-ético, bug-bounty, hacking | 08-Aug-2024 |
| Building a Resilient Security Framework: Long-Term Strategies for Combating PHAR Deserialization… | https://cyberw1ng.medium.com/building-a-resilient-security-framework-long-term-strategies-for-combating-phar-deserialization-de5b38c6aff2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, hacking, penetration-testing, careers | 08-Aug-2024 |
| Easiest P3 You May Not Know | https://muneebalamkhan.medium.com/easiest-p3-you-may-not-know-54ae73cd3361?source=rss------bug_bounty-5 | Muneeb Alam Khan | bug-bounty-tips, penetration-testing, bug-bounty, bounty-hunter, penetration-test | 07-Aug-2024 |
| SSRF: Blacklist and Whitelist-Based Input Filters | https://infosecwriteups.com/ssrf-blacklist-and-whitelist-based-input-filters-1c602b872731?source=rss------bug_bounty-5 | Neetrox | cybersecurity, cyber-security-awareness, bug-bounty, cyberattack, technology | 07-Aug-2024 |
| Client-Side Desync in HTTP: Understanding the Vulnerabilities and How to Mitigate Them | https://medium.com/@miladkeivanfar/client-side-desync-in-http-understanding-the-vulnerabilities-and-how-to-mitigate-them-f3552164a6c9?source=rss------bug_bounty-5 | Milad keivanfar | security, pentesting, desync, bug-bounty, smuggling | 07-Aug-2024 |
| Nahamsec’s Intro to Bug Bounty Labs: Your Setup Guide | https://medium.com/@k4r7hx/nahamsecs-intro-to-bug-bounty-labs-your-setup-guide-145199ee948a?source=rss------bug_bounty-5 | Karthikeyan | bug-bounty, ethical-hacking, penetration-testing, nahamstore, hacking | 07-Aug-2024 |
| ALL ABOUT TRAVA BUG BOUNTY — FINDING THE FAULTS IN TRAVA.FINANCE | https://blog.trava.finance/all-about-trava-bug-bounty-finding-the-faults-in-trava-finance-ebdcf476c1d6?source=rss------bug_bounty-5 | Trava.Finance | dapps, web3, bug-bounty, blockchain | 07-Aug-2024 |
| Easiest P3/P4 security misconfiguration to make $$ as a beginner. | https://medium.com/@sugamdangal52/easiest-p3-p4-security-misconfiguration-to-make-as-a-beginner-d4f019ad4b85?source=rss------bug_bounty-5 | Sugam Dangal | bug-bounty-program, bug-bounty, bug-bounty-hunter, bug-bounty-writeup, bug-bounty-tips | 07-Aug-2024 |
| Real-World Applications and Case Studies of PHAR Deserialization Defense | https://cyberw1ng.medium.com/real-world-applications-and-case-studies-of-phar-deserialization-defense-f65b67c503aa?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, cybersecurity, bug-bounty, hacking | 07-Aug-2024 |
| Day 5 of 30 Days — 30 Vulnerabilities | Open Redirects | https://medium.com/@kumawatabhijeet2002/day-5-of-30-days-30-vulnerabilities-open-redirects-386ea2fa1a66?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, bug-bounty-tips, open-redirect, 30dayschallenge, 30dayswritingchallenge | 07-Aug-2024 |
| Mastering Dirsearch for Bug Hunting | https://medium.com/@josuofficial327/mastering-dirsearch-for-bug-hunting-f34272c0ba28?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty, bug-bounty-tips, ethical-hacking, cybersecurity, hacking | 06-Aug-2024 |
| SSRF to Server Takeover PoC (Bug Bounty Writeup) | https://medium.com/@malvinval/ssrf-to-server-takeover-poc-bug-bounty-writeup-82d6715e333d?source=rss------bug_bounty-5 | Malvin Valerian | cybersecurity, ethical-hacking, bug-bounty-tips, hacking, bug-bounty | 06-Aug-2024 |
| From Fries to Flaws : My Journey into Web App Security (Part III) | https://infosecwriteups.com/from-fries-to-flaws-my-journey-into-web-app-security-part-iii-ce91eb384da7?source=rss------bug_bounty-5 | OiQ | penetration-testing, broken-access-control, web-app-security, bug-bounty, bug-bounty-tips | 06-Aug-2024 |
| My First Bug Bounty: CORS Misconfiguration | https://r0b0ts.medium.com/my-first-bug-bounty-cors-misconfiguration-3e6f38835c4e?source=rss------bug_bounty-5 | r0b0ts | bug-bounty-writeup, bug-bounty, secu, bug-bounty-tips, bug-bounty-hunter | 06-Aug-2024 |
| Reflected HTML injection leads to redirection and what’s not! | https://medium.com/@shahariarwalid/reflected-html-injection-leads-to-redirection-and-whats-not-3de256b16c30?source=rss------bug_bounty-5 | Shahariar Amin | bug-bounty, web-hacking, poc | 06-Aug-2024 |
| Race Condition About The User Version and Ignored | https://r0b0ts.medium.com/race-condition-about-the-user-version-and-ignored-c98fec642d1b?source=rss------bug_bounty-5 | r0b0ts | bug-bounty-tips, bug-bounty-writeup, bug-bounty, security, bug-bounty-hunter | 06-Aug-2024 |
| Mastering Network Reconnaissance with Nmap: A Comprehensive Guide | https://medium.com/@WillFromSwiss/mastering-network-reconnaissance-with-nmap-a-comprehensive-guide-e37fe3cdf8ff?source=rss------bug_bounty-5 | WillFromSwiss | pentesting, hacking, bug-bounty, recon, nmap | 06-Aug-2024 |
| Bypass Admin Panel Access Steps — Bug Tuesday | https://medium.com/@kerstan/bypass-admin-panel-access-steps-bug-tuesday-36e7be470dae?source=rss------bug_bounty-5 | kerstan | cybersecurity, bug-bounty, hacking | 06-Aug-2024 |
| Discovering and Exploiting an XSS Vulnerability in an Admin Panel | https://soltanali0.medium.com/discovering-and-exploiting-an-xss-vulnerability-in-an-admin-panel-8abbc97931fd?source=rss------bug_bounty-5 | soltanali0 | admin-panel, xss-attack, hackerone, bug-bounty-tips, bug-bounty | 06-Aug-2024 |
| Reflected HTML injection leads to redirection and what’s not! | https://take0verx0.medium.com/reflected-html-injection-leads-to-redirection-and-whats-not-3de256b16c30?source=rss------bug_bounty-5 | Shahariar Amin | bug-bounty, web-hacking, poc | 06-Aug-2024 |
| Advanced Defense Mechanisms and Continuous Monitoring Against PHAR Deserialization | https://cyberw1ng.medium.com/advanced-defense-mechanisms-and-continuous-monitoring-against-phar-deserialization-00512489faf1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, bug-bounty, careers, hacking | 06-Aug-2024 |
| Hacking OWASP Juice Shop: Part 5- Privilege Escalation via Manipulated User Registration | https://infosecwriteups.com/hacking-owasp-juice-shop-part-5-privilege-escalation-via-manipulated-user-registration-4b1c5227aa81?source=rss------bug_bounty-5 | callgh0st | hacking, manipulation, logic, privilege-escalation, bug-bounty | 06-Aug-2024 |
| From Secure to Breached: The Journey from Confidence to Compromise | https://medium.com/@armandjasharaj/from-secure-to-breached-the-journey-from-confidence-to-compromise-38fcb7e9ef7c?source=rss------bug_bounty-5 | Armand Jasharaj | penetration-testing, bug-bounty, cybersecurity, information-security | 06-Aug-2024 |
| Understanding and Mitigating Open Redirection Vulnerability (CVE-2021–36580) in Webmail/Basic… | https://medium.com/@anonymousshetty2003/understanding-and-mitigating-open-redirection-vulnerability-cve-2021-36580-in-webmail-basic-24b12c3df17d?source=rss------bug_bounty-5 | Anonymousshetty | open-redirection, ethical-hacking, cybersecurity, bug-bounty | 06-Aug-2024 |
| How to Use Netcat as a Persistent Backdoor Utility? | https://medium.com/@pentesterclubpvtltd/how-to-use-netcat-as-a-persistent-backdoor-utility-57bb01cbf9cc?source=rss------bug_bounty-5 | Pentester Club | hacking, bug-bounty-tips, bug-bounty, metasploit, cybersecurity | 06-Aug-2024 |
| Ping a site to find out information about it. | https://medium.com/@pentesterclubpvtltd/ping-a-site-to-find-out-information-about-it-43efdb62b4a0?source=rss------bug_bounty-5 | Pentester Club | cyber-security-awareness, bug-bounty, cybersecurity, ping, cybercrime | 05-Aug-2024 |
| Maltego — The Automated OSINT Tool for Ethical Hackers | https://medium.com/@pentesterclubpvtltd/maltego-the-automated-osint-tool-for-ethical-hackers-d6bc5737812e?source=rss------bug_bounty-5 | Pentester Club | bug-bounty, ethical-hacking, maltego, cybersecurity, osint | 05-Aug-2024 |
| Recon-ng — Complete Scan — Emails, Sub Domains & Hidden Files | https://medium.com/@pentesterclubpvtltd/recon-ng-complete-scan-emails-sub-domains-hidden-files-b357cffd1e0b?source=rss------bug_bounty-5 | Pentester Club | scan, recon, enumeration, cybersecurity, bug-bounty | 05-Aug-2024 |
| Perform Network Tracerouting in Linux Machines | https://medium.com/@pentesterclubpvtltd/perform-network-tracerouting-in-linux-machines-28b6bf57bf71?source=rss------bug_bounty-5 | Pentester Club | bug-bounty, machine-learning, linux, networking, cybersecurity | 05-Aug-2024 |
| Gather Information About a Target Website Using Photon | https://medium.com/@pentesterclubpvtltd/gather-information-about-a-target-website-using-photon-839612a85319?source=rss------bug_bounty-5 | Pentester Club | web-design, cybersecurity, bug-bounty, web-development, web3 | 05-Aug-2024 |
| Mirror a Target Website Using HTTrack website Copier | https://medium.com/@pentesterclubpvtltd/mirror-a-target-website-using-httrack-website-copier-0489c23d66b3?source=rss------bug_bounty-5 | Pentester Club | web3, website-design, web-development, cybersecurity, bug-bounty | 05-Aug-2024 |
| Extract Companys Website Data Using Web Data Extractor | https://medium.com/@pentesterclubpvtltd/extract-companys-website-data-using-web-data-extractor-a2957c56fd3f?source=rss------bug_bounty-5 | Pentester Club | data, website, bug-bounty, web3, cybersecurity | 05-Aug-2024 |
| Gather Personal Information Using PeekYou online People Search Service | https://medium.com/@pentesterclubpvtltd/gather-personal-information-using-peekyou-online-people-search-service-8a523a180f0d?source=rss------bug_bounty-5 | Pentester Club | data, bug-bounty, cybersecurity, people, search-engine-optimizati | 05-Aug-2024 |
| Mastering Angry IP Scanner: Unleashing the Power of Network Diagnostics | https://medium.com/@pentesterclubpvtltd/mastering-angry-ip-scanner-unleashing-the-power-of-network-diagnostics-43388a593650?source=rss------bug_bounty-5 | Pentester Club | networking, bug-zero, cybersecurity, bug-bounty, angry | 05-Aug-2024 |
| Uncover the Shocking Truth Behind HTTP Header Injection Attacks: Protect Yourself Now! | https://systemweakness.com/the-hidden-danger-lurking-in-your-http-headers-3f93474933cb?source=rss------bug_bounty-5 | Khaleel Khan | hacking, bug-bounty, cybersecurity, infosec, web-development | 05-Aug-2024 |
| Exploit Public-Facing Application concepts | https://medium.com/@alimostafaeiorg/exploit-public-facing-application-concepts-95c9d9efe76b?source=rss------bug_bounty-5 | Ali Mostafaei | pentest, exploit, xs, exploit-public-facing, bug-bounty | 05-Aug-2024 |
| You might have never understood the OSI Model this way. | https://medium.com/@rohillachhavi12/you-might-have-never-understood-the-osi-model-this-way-2b3d234c5bac?source=rss------bug_bounty-5 | Chhavi Rohilla | networking, technology, bug-bounty, learning, cybersecurity | 05-Aug-2024 |
| SQL Injection Part 1️⃣ | https://infosecwriteups.com/sql-injection-part-1%EF%B8%8F%E2%83%A3-eead93a673a2?source=rss------bug_bounty-5 | Neetrox | cybersecurity, sql, data, bug-bounty, cyber-security-awareness | 05-Aug-2024 |
| Discovering and Exploiting an XSS Vulnerability in a Bug Bounty Program Scope | https://medium.com/@anonymousshetty2003/discovering-and-exploiting-an-xss-vulnerability-in-a-bug-bounty-program-scope-383327e7f290?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, bug-bounty, xss-vulnerability, ethical-hacking | 05-Aug-2024 |
| From Detection to Notification: Security Automation to Earn $$$$ | https://vijetareigns.medium.com/from-detection-to-notification-security-automation-to-earn-4ea1a13576bc?source=rss------bug_bounty-5 | the_unlucky_guy | bugbounty-writeup, cybersecurity, technology, bug-bounty, automation | 05-Aug-2024 |
| How i found Host Header Injection on SpaceX | https://medium.com/@gitlime71/how-i-found-host-header-injection-on-spacex-3a9b45db70e8?source=rss------bug_bounty-5 | Raccoon | penetration-testing, bug-bounty, pentesting, hacking, bug-bounty-tips | 05-Aug-2024 |
| Zero-Click account Take-over | https://0xebn-taimia.medium.com/zero-click-account-take-over-deb0fae7a6c1?source=rss------bug_bounty-5 | 0xEbn-Taimia | bug-bounty, cybersecurity, bugs, ato | 05-Aug-2024 |
| Advanced Techniques and Defenses Against PHAR Deserialization Exploits | https://cyberw1ng.medium.com/advanced-techniques-and-defenses-against-phar-deserialization-exploits-c65074fa5035?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, bug-bounty, hacking, careers | 05-Aug-2024 |
| Day 3 of 30 Days — 30 Vulnerability | CSRF | https://medium.com/@kumawatabhijeet2002/day-3-of-30-days-30-vulnerability-csrf-3958560fb941?source=rss------bug_bounty-5 | Abhijeet kumawat | vulnerability, bug-bounty, cybersecurity, csrf-attack | 05-Aug-2024 |
| Unveiling Remote Code Execution in AI chatbot workflows | https://infosecwriteups.com/unveiling-remote-code-execution-in-ai-chatbot-workflows-3c7f633f63c3?source=rss------bug_bounty-5 | Anurag__Verma | ethical-hacking, infosec, penetration-testing, bugs, bug-bounty | 05-Aug-2024 |
| How I Got Critical P2 Bug on Google VRP | https://medium.com/@rhashibur75/how-i-got-critical-p2-bug-on-google-vrp-165017145af8?source=rss------bug_bounty-5 | Kazi Hashibur Rahman | google-bug, bugs, bug-bounty-tips, bug-bounty, google | 04-Aug-2024 |
| Insecure Deserialization — Why it is a vulnerability | https://medium.com/@nanak.singh/insecure-deserialization-why-it-is-a-vulnerability-74e22e878cf4?source=rss------bug_bounty-5 | Nanak Singh Khurana | web-security, insecure-deserialization, hacking, bug-bounty | 04-Aug-2024 |
| Simple Authentication Bypass By Response Manipulation. | https://medium.com/@test123cybertest/simple-authentication-bypass-by-response-manipulation-44ba530e803b?source=rss------bug_bounty-5 | praveenarsh0xx0 | hacking, tips-and-tricks, cybersecurity, pentest, bug-bounty | 04-Aug-2024 |
| Hacking OWASP Juice Shop: Part 3- Exploiting Insufficient Server-Side Checks:::Bypassing Input… | https://infosecwriteups.com/hacking-owasp-juice-shop-part-3-exploiting-insufficient-server-side-checks-bypassing-input-6b4368449c2f?source=rss------bug_bounty-5 | callgh0st | hacking, input-validation, burpsuite, consistency, bug-bounty | 04-Aug-2024 |
| SQL Injection Attack, Querying the Database Type and Version on MySQL and Microsoft | https://medium.com/@marduk.i.am/sql-injection-attack-querying-the-database-type-and-version-on-mysql-and-microsoft-caf947d0208a?source=rss------bug_bounty-5 | Marduk I Am | sqli, sql-injection, bug-bounty, information-security, portswigger-lab | 04-Aug-2024 |
| Hacking OWASP Juice Shop: Part4 — Exploiting Payment and Input Validation Loopholes | https://infosecwriteups.com/hacking-owasp-juice-shop-part4-exploiting-payment-and-input-validation-loopholes-59f6b8485c3e?source=rss------bug_bounty-5 | callgh0st | prompt, bypass, consistency, hacking, bug-bounty | 04-Aug-2024 |
| Simple logic flaw lead to P3 bug in public BBP | https://medium.com/@mohamed0xmuslim/simple-logic-flaw-lead-to-p3-bug-in-public-bbp-7cf21a4fb7c6?source=rss------bug_bounty-5 | Muhammad_Mostafa | bug-bounty, bugcrowd, bugbounty-writeup, bug-bounty-tips, hackerone | 04-Aug-2024 |
| curityPHAR Deserialization: Exploiting Hidden Vulnerabilities in PHP | https://cyberw1ng.medium.com/curityphar-deserialization-exploiting-hidden-vulnerabilities-in-php-c68891254c13?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, cybersecurity, penetration-testing, hacking | 04-Aug-2024 |
| Kioptrix Level 3 Walkthrough | https://erdemstar.medium.com/kioptrix-level-3-walkthrough-25dce894e7e3?source=rss------bug_bounty-5 | Erdemstar | oscp-preparation, bug-bounty, pentesting, oscp, bug-bounty-tips | 04-Aug-2024 |
| Exploiting Negative Quantity Manipulation for Total Price Reduction | https://medium.com/@adhammedhat101/s-e615c50a1798?source=rss------bug_bounty-5 | SemZ | cybersecurity, bug-bounty, bugbounty-writeup, penetration-testing, web-app-security | 04-Aug-2024 |
| Don’t Know Where to Look for Bugs? A Beginner’s Guide to Bug Hunting | https://medium.com/@paritoshblogs/dont-know-where-to-look-for-bugs-a-beginner-s-guide-to-bug-hunting-780780eec09b?source=rss------bug_bounty-5 | Paritosh | bug-bounty-tips, bug-bounty, information-technology, information-security, cybersecurity | 03-Aug-2024 |
| How I prevented a mass leak of user data at one of the largest Tech companies | https://medium.com/@syarifsajjad07/how-i-prevented-a-mass-leak-of-user-data-at-one-of-the-largest-tech-companies-caea05474af8?source=rss------bug_bounty-5 | Syarifsajjad | hackerone, bug-bounty-tips, cybersecurity, bug-bounty, bugbounty-writeup | 03-Aug-2024 |
| 30 Days — 30 Vulnerability Challenge | https://it4chis3c.medium.com/30-days-30-vulnerability-challenge-28edae3b25d4?source=rss------bug_bounty-5 | It4chis3c | bug-bounty-tips, bug-bounty, 30dayswritingchallenge | 03-Aug-2024 |
| Day 1 of 30 Days — 30 Vulnerabilities Tips & Tricks | https://it4chis3c.medium.com/day-1-of-30-days-30-vulnerabilities-tips-tricks-4cff7b2756a2?source=rss------bug_bounty-5 | It4chis3c | 30dayswritingchallenge, xss-attack, xss-vulnerability, bug-bounty-tips, bug-bounty | 03-Aug-2024 |
| How I Hacked and Secured a Croatian Government Website: A White Hat Journey | https://harshit3.medium.com/how-i-hacked-and-secured-a-croatian-government-website-a-white-hat-journey-d452fbb8e711?source=rss------bug_bounty-5 | Harshit | ethical-hacking, bug-bounty, security, vulnerability, cybersecurity | 03-Aug-2024 |
| How a Host Header Injection Bug Earned Me My Fourth Hall of Fame Spot at Apple | https://medium.com/@MohaseenK/how-a-host-header-injection-bug-earned-me-my-fourth-hall-of-fame-spot-at-apple-b5d880acbba2?source=rss------bug_bounty-5 | Mohaseen | infosec, hall-of-fame, hackerone, bug-bounty, apple | 03-Aug-2024 |
| Your AI Conversations Aren’t Safe: How We Stole Them | https://h0tak88r.medium.com/your-ai-conversations-arent-safe-how-we-stole-them-02c17db2ed72?source=rss------bug_bounty-5 | sallam | bug-bounty-tips, prompt-injection-attack, ai-hacking, bug-bounty, oauth | 03-Aug-2024 |
| How I Earned $469 Bounty: Bypassing Plan Restriction | https://medium.com/@a13h1/how-i-earned-469-bounty-bypassing-plan-restriction-58f6d3120b6e?source=rss------bug_bounty-5 | Abhi Sharma | access-control, programming, infosec, cybersecurity, bug-bounty | 03-Aug-2024 |
| How to Find Vulnerabilities and Bugs with the Help of ChatGPT and Get Bounty | https://medium.com/@shaikhminhaz1975/how-to-find-vulnerabilities-and-bugs-with-the-help-of-chatgpt-and-get-bounty-f1ee5b6b0dd0?source=rss------bug_bounty-5 | Shaikh Minhaz | bug-bounty-with-ai, bug-bounty, chatgpt, cybersecurity, find-bug-with-chatgpt | 03-Aug-2024 |
| how I found a critical bug using response manipulation | https://matrixm0x1.medium.com/how-i-found-a-critical-bug-using-response-manipulation-4403a562db12?source=rss------bug_bounty-5 | matrixm0x1 | security, vulnerability, cybersecurity, bugs, bug-bounty | 03-Aug-2024 |
| 20.9 Lab: Developing a custom gadget chain for PHP deserialization | https://cyberw1ng.medium.com/20-9-lab-developing-a-custom-gadget-chain-for-php-deserialization-c173ff462156?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, hacking, penetration-testing | 03-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-66) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-66-9a60c229db5e?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, skills, hacking, bug-bounty, cybersecurity | 03-Aug-2024 |
| How could privilege escalation vulnerability lead to full account takeover? | https://medium.com/@moxallam/how-could-privilege-escalation-vulnerability-lead-to-full-account-takeover-0d49d3d5fbee?source=rss------bug_bounty-5 | 3llam | pentesting, web-application-security, bug-bounty, cyber-security-services, bug-bounty-writeup | 03-Aug-2024 |
| Uncovering a Reflected XSS Vulnerability in an Insurance Company’s Website | https://medium.com/@anonymousshetty2003/uncovering-a-reflected-xss-vulnerability-in-an-insurance-companys-website-ee56c3492381?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, cybersecurity, ethical-hacking | 03-Aug-2024 |
| Discovering a Reflected XSS Vulnerability in an Shopping Website | https://medium.com/@anonymousshetty2003/discovering-a-reflected-xss-vulnerability-in-an-shopping-website-d9ea72be73ef?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, xss-vulnerability, ethical-hacking, cybersecurity | 03-Aug-2024 |
| The first $100 from Bug Hunter | https://medium.com/@osamamohamed21212121/the-first-100-from-bug-hunter-aaee9a0ac547?source=rss------bug_bounty-5 | Osamamohamed | cybersecurity, security, vulnerability, bug-bounty, bus | 03-Aug-2024 |
| How I Escalated N/A to High and Got Rewarded £££: Bug Hunting Journey | https://medium.com/@iamrizwanvp/how-i-escalated-n-a-to-medium-and-got-rewarded-bug-hunting-journey-c6e6097fe93c?source=rss------bug_bounty-5 | iamrizwanvp | bug-bounty, penetration-testing, cybersecurity, bugbounty-writeup | 03-Aug-2024 |
| From Fries to Flaws : My Journey into Web App Security (Part II) | https://infosecwriteups.com/from-fries-to-flaws-my-journey-into-web-app-security-part-ii-6127ecc7d93f?source=rss------bug_bounty-5 | OiQ | bug-bounty, web-application-security, cybersecurity, xss-vulnerability, bug-bounty-tips | 03-Aug-2024 |
| Tips about bug bounty for complete begginers | https://medium.com/@mrkimia097/tips-about-bug-bounty-for-complete-begginers-0fa1c85594ad?source=rss------bug_bounty-5 | Mrkimia | bug-bounty, hacker, bugbounty-tips | 03-Aug-2024 |
| How I Escalated N/A to High and Got Rewarded $$$: Bug Hunting Journey | https://medium.com/@iamrizwanvp/how-i-escalated-n-a-to-medium-and-got-rewarded-bug-hunting-journey-c6e6097fe93c?source=rss------bug_bounty-5 | iamrizwanvp | bug-bounty-tips, bug-bounty, penetration-testing, cybersecurity, bugbounty-writeup | 03-Aug-2024 |
| #4. Bug Bounty Series: Exploiting Boolean-based SQL Injection | https://cyb3rmind.medium.com/4-bug-bounty-series-exploiting-boolean-based-sql-injection-3455d800892e?source=rss------bug_bounty-5 | Cyb3r M!nds | pentesting, hacking, bug-bounty, sql-injection | 02-Aug-2024 |
| Bounty Hunting — Complete Guide (Part-65) | https://medium.com/@rafid19/bounty-hunting-complete-guide-part-65-885040ada45a?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | skills, hacking, cybersecurity, ethical-hacking, bug-bounty | 02-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-64) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-64-aa6bc5c45197?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, ethical-hacking, hacking, skills, bug-bounty | 02-Aug-2024 |
| Bug Bounty Hunting — Complete Guide (Part-63) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-63-fdea83c2c38f?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, ethical-hacking, skills, hacking | 02-Aug-2024 |
| Best youtube channels to learn bughunting and penetration testing | https://medium.com/@sangamahesh650/best-youtube-channels-to-learn-bughunting-and-penetration-testing-eea2e78a202a?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, bug-bounty-writeup, bugbounty-tips, bug-bounty-tips, bug-bounty | 02-Aug-2024 |
| Finding subdomains from google | https://medium.com/@sangamahesh650/finding-subdomains-from-google-7f370fe60ad1?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, bugbounting, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 02-Aug-2024 |
| Search engines for hackers and bughunters | https://medium.com/@sangamahesh650/search-engines-for-hackers-and-bughunters-16139aa60752?source=rss------bug_bounty-5 | loyalonlytoday | bugbounty-writeup, bug-bounty-tips, bug-bounty, hacking, penetration-testing | 02-Aug-2024 |
| Finding more subdomains | https://medium.com/@sangamahesh650/finding-more-subdomains-1f5221e79310?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, bugbounty-tips, bug-bounty-tips | 02-Aug-2024 |
| Overview of API Penetration Testing | https://medium.com/@aakashgupthagwapt/overview-of-api-penetration-testing-2065f6722f4e?source=rss------bug_bounty-5 | Aakashguptha | penetration-testing, api-penetration-testing, bug-bounty, cybersecurity, api | 02-Aug-2024 |
| 20.8 Lab: Developing a custom gadget chain for Java deserialization | https://cyberw1ng.medium.com/20-8-lab-developing-a-custom-gadget-chain-for-java-deserialization-01b85e1e998a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, careers, hacking, bug-bounty, cybersecurity | 02-Aug-2024 |
| I found RCE on Viber. | https://medium.com/@deadoverflow/i-found-rce-on-viber-432cf9e17eb0?source=rss------bug_bounty-5 | Imad Husanovic | cyber-security-awareness, programming, hacking, rce, bug-bounty | 02-Aug-2024 |
| Email Verification Bypass Easy-P4 | https://medium.com/@Ajakcybersecurity/email-verification-bypass-easy-p4-70039d0b8fd9?source=rss------bug_bounty-5 | AjakCybersecurity | technology, penetration-testing, bug-bounty, hacking, ethical-hacking | 02-Aug-2024 |
| Client-Side XSS: The DOM-based Debacle (Cross Site Scripting) | https://medium.com/@godsxfinger/client-side-xss-the-dom-based-debacle-cross-site-scripting-7a14904934d9?source=rss------bug_bounty-5 | Aadi (godsxfinger) | xs, web-app-security, bug-bounty, cybersecurity, bug-bounty-tips | 01-Aug-2024 |
| Serialization and Deserialization: Advanced Concepts and Best Practices | https://cyberw1ng.medium.com/serialization-and-deserialization-advanced-concepts-and-best-practices-c6562fce9e4b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, careers, penetration-testing, cybersecurity | 01-Aug-2024 |
| Understanding Cross-Site Scripting (XSS) | https://medium.com/@soheilvanaee.net/understanding-cross-site-scripting-xss-5610d02cc5c4?source=rss------bug_bounty-5 | Soheilvanaee Net | bug-bounty, cybersecurity, web-hacking | 01-Aug-2024 |
| First Bug Report: HTML Injection Vulnerability ️♂️ | https://medium.com/@youseftamereg/first-bug-report-html-injection-vulnerability-%EF%B8%8F-%EF%B8%8F-7a5e042d6548?source=rss------bug_bounty-5 | yousef tamer | html-injection, writeup, bug-bounty | 01-Aug-2024 |
| Wasabi Bucket Takeover | Bug Bounty | https://mo9khu93r.medium.com/wasabi-bucket-takeover-bug-bounty-7520e8decde7?source=rss------bug_bounty-5 | mo9khu93r | ethical-hacking, cybersecurity, subdomain-takeover, bug-bounty | 31-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-62) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-62-4ff0fce045ca?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, ethical-hacking, skills, bug-bounty, hacking | 31-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-61) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-61-1c6514a2067b?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, cybersecurity, bug-bounty, skills, hacking | 31-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-60) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-60-76ea9ba1551c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | skills, bug-bounty, hacking, cybersecurity, ethical-hacking | 31-Jul-2024 |
| Step-by-Step Guide On How to Find Your First Bug in Web Applications | https://medium.com/@shaikhminhaz1975/step-by-step-guide-on-how-to-find-your-first-bug-in-web-applications-0080f6a7f945?source=rss------bug_bounty-5 | Shaikh Minhaz | cybersecurity, bug-bounty, vulnerability, information-disclosure, ethical-hacking | 31-Jul-2024 |
| How To Find Your 1st Bug For Bug Bounty Hunters (Step by Step Guide) Guarantee Result | https://medium.com/@shaikhminhaz1975/step-by-step-guide-on-how-to-find-your-first-bug-in-web-applications-0080f6a7f945?source=rss------bug_bounty-5 | Shaikh Minhaz | cybersecurity, bug-bounty, vulnerability, information-disclosure, ethical-hacking | 31-Jul-2024 |
| SAML Authentication Bypass Leading to Admin Panel Access | https://medium.com/@0x_xnum/saml-authentication-bypass-leading-to-admin-panel-access-24f23812ed76?source=rss------bug_bounty-5 | Ahmed Tarek | bug-bounty, saml, privilege-escalation, broken-access-control, authentication-bypass | 31-Jul-2024 |
| Don’t know where to look for bugs ?? In Depth Recon Bug Bounty — Part 02 | https://omarora1603.medium.com/dont-know-where-to-look-for-bugs-in-depth-recon-bug-bounty-part-02-9d7c55e045aa?source=rss------bug_bounty-5 | Om Arora | bug-bounty-writeup, hacking, bug-bounty, methodology, infosec | 31-Jul-2024 |
| My Journey into Cybersecurity: Learning Bug Bounty from Scratch | https://medium.com/@akashathare411/my-journey-into-cybersecurity-learning-bug-bounty-from-scratch-abc2b45f04c5?source=rss------bug_bounty-5 | Akash Athare | learning, cybersecurity, bug-bounty, iit, masters-degree | 31-Jul-2024 |
| Serialization and Deserialization: An Essential Guide | https://cyberw1ng.medium.com/serialization-and-deserialization-an-essential-guide-30552a9cf379?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, careers, cybersecurity, penetration-testing | 31-Jul-2024 |
| Hack and make money — Bug Bounty | https://medium.com/@victoras.croitoru/hack-and-make-money-bug-bounty-d9db818eb33e?source=rss------bug_bounty-5 | vic | online, ethical-hacking, hacking, money, bug-bounty | 31-Jul-2024 |
| NgeSec Bebas #3 — How to Avoid N/A on Submissions | https://muh-hidayat7799.medium.com/ngesec-bebas-3-how-to-avoid-n-a-on-submissions-9acf14ef7ba1?source=rss------bug_bounty-5 | Muhamad Hidayat | methodology, risk-management, bug-bounty, app-security, penetration-testing | 31-Jul-2024 |
| Don’t know where to look for bugs ?? In Depth Recon Bug Bounty — Part 02 | https://infosecwriteups.com/dont-know-where-to-look-for-bugs-in-depth-recon-bug-bounty-part-02-9d7c55e045aa?source=rss------bug_bounty-5 | Om Arora | bug-bounty-writeup, hacking, bug-bounty, methodology, infosec | 31-Jul-2024 |
| Why bug bounty program should be a part of your security strategy — ET CISO | https://nowitsanurag.medium.com/why-bug-bounty-program-should-be-a-part-of-your-security-strategy-et-ciso-ad5abf991292?source=rss------bug_bounty-5 | Anurag | cybersecurity, bug-bounty, ransomware, vulnerability | 31-Jul-2024 |
| Uncovering Sensitive Information: A Case Study on a Government Website | https://medium.com/@anonymousshetty2003/uncovering-sensitive-information-a-case-study-on-a-government-website-1f5ad0e158ec?source=rss------bug_bounty-5 | Anonymousshetty | hacking, ethical-hacking, bug-bounty, wpscan, cybersecurity | 31-Jul-2024 |
| Stored XSS: When Bad Code Happens to Good Websites (Cross Site Scripting) | https://medium.com/@godsxfinger/stored-xss-when-bad-code-happens-to-good-websites-a5d6b4e629ca?source=rss------bug_bounty-5 | Aadi (godsxfinger) | bug-bounty, cross-site-scripting, xs, web-app-security, cybersecurity | 31-Jul-2024 |
| Reflected XSS: Navigating the Web’s Wild West (Cross-Site Scripting) | https://medium.com/@godsxfinger/reflected-xss-navigating-the-webs-wild-west-cross-site-scripting-a1e092e58b73?source=rss------bug_bounty-5 | Aadi (godsxfinger) | cybersecurity, cross-site-scripting, xs, bug-bounty, web-app-security | 31-Jul-2024 |
| From Fries to Flaws : My Journey into Web App Security (Part I) | https://infosecwriteups.com/from-fries-to-flaws-my-journey-into-web-app-security-part-i-958c67c20771?source=rss------bug_bounty-5 | OiQ | web-application-security, web-vulnerabilities, bug-bounty, bug-bounty-tips, cybersecurity | 31-Jul-2024 |
| ICMTC Final CTF 2024 Web Hackig Challenges | https://medium.com/@medohythem2019/icmtc-final-ctf-2024-web-hackig-challenges-5135cccf09ba?source=rss------bug_bounty-5 | 0xdragon | bug-bounty, hacking, pentesting, ctf | 30-Jul-2024 |
| LFI WITH PHPINFO TO RCE | https://infosecwriteups.com/lfi-with-phpinfo-to-rce-78318f0dc9ce?source=rss------bug_bounty-5 | c0d3x27 | bug-bounty, hacking-tools, hacking, web-development, cybersecurity | 30-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-59) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-59-a0a4a25d7f97?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, cybersecurity, ethical-hacking, bug-bounty, skills | 30-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-58) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-58-f4102848b19d?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty, ethical-hacking, cybersecurity, skills | 30-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-57) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-57-1c470cccf094?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, ethical-hacking, bug-bounty, skills, hacking | 30-Jul-2024 |
| Triple XSS in a Private Bug Bounty Program via a Hidden Parameter | https://infosecwriteups.com/triple-xss-in-a-private-bug-bounty-program-via-a-hidden-parameter-b42d0263f56d?source=rss------bug_bounty-5 | Andrea | hacking, bug-bounty, xss-attack | 30-Jul-2024 |
| Interesting Business Logic Error leads to Pre-Account Takeover via Verification bypass on GoogleVRP | https://medium.com/@jerryhackgather/interesting-business-logic-error-leads-to-pre-account-takeover-via-verification-bypass-on-googlevrp-d362f9469e3d?source=rss------bug_bounty-5 | Jerry1319 | cybersecurity, bug-bounty-tips, bug-bounty, bugbounty-writeup | 30-Jul-2024 |
| Cross-Site Scripting (XSS) Vulnerabilities: | https://medium.com/@yassentaalab51/cross-site-scripting-xss-vulnerabilities-1397653cef7d?source=rss------bug_bounty-5 | Yassen Taalab | owasp, web-vulnerabilities, bug-bounty, web-security, xss-attack | 30-Jul-2024 |
| 6 tips for finding security vulnerabilities with GitHub Code Search — Bug Bounty Tuesday | https://medium.com/@kerstan/6-tips-for-finding-security-vulnerabilities-with-github-code-search-bug-bounty-tuesday-d4035bc7e302?source=rss------bug_bounty-5 | kerstan | hacking, bug-bounty, cybersecurity | 30-Jul-2024 |
| Stealing First Party Access Token of Facebook Users: Meta Bug Bounty | https://iamsaugat.medium.com/stealing-first-party-access-token-of-facebook-users-meta-bug-bounty-44b3b2e87d07?source=rss------bug_bounty-5 | Saugat Pokharel | meta, cybersecurity, facebook-bug-bounty, bug-bounty, hacking | 30-Jul-2024 |
| 第一次课程笔记整理 | https://medium.com/@starkxun5215/%E7%AC%AC%E4%B8%80%E6%AC%A1%E8%AF%BE%E7%A8%8B%E7%AC%94%E8%AE%B0%E6%95%B4%E7%90%86-52d34c91f3fc?source=rss------bug_bounty-5 | xun stark | bug-bounty | 30-Jul-2024 |
| Race Conditions Uncovered: A Practical Guide | https://yaseenzubair.medium.com/race-conditions-uncovered-a-practical-guide-3cb69d73c946?source=rss------bug_bounty-5 | Yaseen Zubair | web-security, penetration-testing, bug-bounty, bug-bounty-tips, race-condition | 30-Jul-2024 |
| Navigating the Dangers of Insecure Deserialization | https://cyberw1ng.medium.com/navigating-the-dangers-of-insecure-deserialization-73254b5ed415?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, cybersecurity, bug-bounty, hacking, careers | 30-Jul-2024 |
| How I got my first valid bug on nasa | https://medium.com/@mrkimia097/how-i-got-my-first-valid-bug-on-nasa-bf5e95531f00?source=rss------bug_bounty-5 | Mrkimia | bug-bounty | 30-Jul-2024 |
| Top Google Dorks Explained | https://infosecwriteups.com/top-google-dorks-explained-ee6cac1673da?source=rss------bug_bounty-5 | Mike Takahashi (TakSec) | information-security, seo, hacking, cybersecurity, bug-bounty | 30-Jul-2024 |
| Exposing OTP Bypass Vulnerabilities: Step-by-Step Bug Bounty Case Study | https://b0mk35h.medium.com/exposing-otp-bypass-vulnerabilities-step-by-step-bug-bounty-case-study-0dc39dc543bd?source=rss------bug_bounty-5 | Pronay Biswas | penetration-testing, hacking, bug-bounty, vulnerability, cybersecurity | 29-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-56) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-56-5d2efa89b759?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty, ethical-hacking, cybersecurity, skills | 29-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-55) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-55-1032e6222b41?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, ethical-hacking, skills, bug-bounty, hacking | 29-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-54) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-54-8e83629a6942?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, hacking, ethical-hacking, skills, bug-bounty | 29-Jul-2024 |
| Exploiting Open Redirection $1000 | https://medium.com/@mdnafeed3/how-about-exploiting-open-redirection-how-base64-encoding-can-uncover-hidden-vulnerabilities-cb5beb11b763?source=rss------bug_bounty-5 | H4cker-Nafeed | cybersecurity, web3, infosec, hacking, bug-bounty | 29-Jul-2024 |
| Insecure Deserialization Vulnerabilities: A Deep Dive into Risks and Mitigations | https://cyberw1ng.medium.com/insecure-deserialization-vulnerabilities-a-deep-dive-into-risks-and-mitigations-5c37f297c763?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, bug-bounty, penetration-testing, hacking | 29-Jul-2024 |
| Discovering and Exploiting an XSS Vulnerability in a Large Finance Website | https://medium.com/@anonymousshetty2003/discovering-and-exploiting-an-xss-vulnerability-in-a-large-finance-website-f125dbd6d984?source=rss------bug_bounty-5 | Anonymousshetty | xss-vulnerability, cybersecurity, ethical-hacking, hacking, bug-bounty | 29-Jul-2024 |
| Advanced scan with Bash | https://mosec0.medium.com/advanced-scan-with-bash-52005537a63c?source=rss------bug_bounty-5 | Mohamed Ali | pentester, bug-bounty, new-security-tool | 29-Jul-2024 |
| Uncovering Sensitive File Information: A Case Study in Web Security | https://medium.com/@anonymousshetty2003/uncovering-sensitive-file-information-a-case-study-in-web-security-f5d03f2c5cd4?source=rss------bug_bounty-5 | Anonymousshetty | sensitive-data, cybersecurity, ethical-hacking, bug-bounty, dorking | 29-Jul-2024 |
| Kioptrix Level 2 Walkthrough | https://erdemstar.medium.com/kioptrix-level-2-walkthrough-439c56f87c?source=rss------bug_bounty-5 | Erdemstar | vulnerability, oscp-preparation, bug-bounty-tips, bug-bounty, oscp | 29-Jul-2024 |
| JS Link Finder Burp Suite Extension Guide | https://infosecwriteups.com/js-link-finder-burp-suite-extension-guide-e4809a6da268?source=rss------bug_bounty-5 | Mike Takahashi (TakSec) | information-security, cybersecurity, hacking, bug-bounty, appsec | 29-Jul-2024 |
| New Plans | https://medium.com/@nnface/new-plans-0b11cfa5495d?source=rss------bug_bounty-5 | NnFace | bugs, bug-bounty, bug-bounty-writeup, hacker, hacking | 29-Jul-2024 |
| Chain Reaction On Big Player | https://medium.com/@nnface/chain-reaction-on-big-player-4e331faf57b9?source=rss------bug_bounty-5 | NnFace | bug-bounty, bug-bounty-tips, bugs, bugs-bunny, hacking | 29-Jul-2024 |
| JavaScript: Hunting And Analyzing for Bug Bounty.. | https://hacktivistattacker.medium.com/javascript-hunting-and-analyzing-for-bug-bounty-a15416de32cd?source=rss------bug_bounty-5 | Hacktivist-Attacker | bug-bounty, ethical-hacking, code-analysis, education, javascript | 28-Jul-2024 |
| Hunting for Vulnerabilities that are ignored by most of the Bug Bounty Hunters — Part 2 | https://medium.com/@kshunya/hunting-for-vulnerabilities-that-are-ignored-by-most-of-the-bug-bounty-hunters-part-2-d2a51edaa8e8?source=rss------bug_bounty-5 | Vishal Barot | pentesting, infosec, bug-bounty, penetration-testing, vapt | 28-Jul-2024 |
| Hacking OWASP Juice Shop: Part 2 — Exposing Critical Vulnerabilities in the Payment Flow | https://callgh0st.medium.com/hacking-owasp-juice-shop-part-2-exposing-critical-vulnerabilities-in-the-payment-flow-45630ed1633e?source=rss------bug_bounty-5 | callgh0st | vulnerability, hacking, bug-bounty, payments, logic | 28-Jul-2024 |
| Unveiling Hidden Git Repositories: A Deep Dive into the Git Source Code Disclosure Scanner | https://maordayanofficial.medium.com/unveiling-hidden-git-repositories-a-deep-dive-into-the-git-source-code-disclosure-scanner-f704470de59a?source=rss------bug_bounty-5 | Maor Dayan | threat-hunting, vulnerability, white-hat-hacker, bug-bounty | 28-Jul-2024 |
| How I bypass Safegurads of meta AI (Llama) | https://medium.com/@jeetpal2007/how-i-bypass-safegurads-of-meta-ai-llama-d735b521da2b?source=rss------bug_bounty-5 | JEETPAL | llamas, bug-bounty, llm, bugbounty-tips, bugbounty-writeup | 28-Jul-2024 |
| How to Fight Procrastination as a Bug Hunter | https://medium.com/@Progsky/how-to-fight-procrastination-as-a-bug-hunter-48d0d280e572?source=rss------bug_bounty-5 | Progsky | bug-bounty, hacking, pentesting, penetration-testing, procrastination | 28-Jul-2024 |
| Exploiting Insecure Deserialization Vulnerabilities | https://cyberw1ng.medium.com/exploiting-insecure-deserialization-vulnerabilities-cb9c586cd146?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, penetration-testing, hacking | 28-Jul-2024 |
| Subdomain Takeover | https://medium.com/@mukkagopi50/subdomain-takeover-1de38466fdcc?source=rss------bug_bounty-5 | Gopi Mukka | bug-bounty | 28-Jul-2024 |
| Bypass Plan Restriction & Get 350$ Bounty | https://infosecwriteups.com/bypass-plan-restriction-get-350-bounty-2df24f406462?source=rss------bug_bounty-5 | Abhi Sharma | privilege-escalation, bug-bounty, programming, cybersecurity, access-control | 28-Jul-2024 |
| Here are some common parameters to test for XSS (Cross-Site Scripting) vulnerabilities: | https://medium.com/@BugHunterMan/here-are-some-common-parameters-to-test-for-xss-cross-site-scripting-vulnerabilities-fbe25f1968cc?source=rss------bug_bounty-5 | BugHUnterMan | bug-bounty, vulnerability | 28-Jul-2024 |
| Hacking OWASP Juice Shop: Part 2 — Exposing Critical Vulnerabilities in the Payment Flow | https://infosecwriteups.com/hacking-owasp-juice-shop-part-2-exposing-critical-vulnerabilities-in-the-payment-flow-45630ed1633e?source=rss------bug_bounty-5 | callgh0st | vulnerability, hacking, bug-bounty, payments, logic | 28-Jul-2024 |
| 0-Click ATO Due to Weak Reset Password Tokens and Lack of Rate Limiting | https://h0tak88r.medium.com/0-click-ato-due-to-weak-reset-password-tokens-and-lack-of-rate-limiting-b7fe20487a45?source=rss------bug_bounty-5 | sallam | cybersecurity, ato, bug-bounty, account-takeover, bug-bounty-tips | 28-Jul-2024 |
| how did i find leakage of information just by fuzzing? | https://medium.com/@onader104/how-did-i-find-leakage-of-information-just-by-fuzzing-888d6ce6d8f7?source=rss------bug_bounty-5 | Omar Nader | infosec, bug-bounty, cybersecurity, bug-bounty-tips, info-sec-writeups | 28-Jul-2024 |
| The Looming Threat: How an IDOR Vulnerability Could Have Exposed Millions of Merchants Details. | https://medium.com/@cy3erbeast/the-looming-threat-how-an-idor-vulnerability-could-have-exposed-millions-of-merchants-details-f488725489a0?source=rss------bug_bounty-5 | Rahul | bug-bounty-writeup, bug-bounty, idor-vulnerability, bug-bounty-tips, data-breach | 28-Jul-2024 |
| Discovered Sensitive Data Exposure on Wati.com: A Case Study Using Sublist3r and DirBuster | https://medium.com/@anonymousshetty2003/discovered-sensitive-data-exposure-on-wati-com-a-case-study-using-sublist3r-and-dirbuster-409a03f8f75d?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, hacking, cybersecurity, ethical-hacking | 27-Jul-2024 |
| Open Redirect Vulnerability in Microsoft Create Portal | https://zeynalxan.medium.com/open-redirect-vulnerability-in-microsoft-create-portal-6654eb3e6b7a?source=rss------bug_bounty-5 | Zeynalxan Quliyev | bug-bounty, microsoft-hack, open-redirect, bug-bounty-writeup, microsoft-open-redirect | 27-Jul-2024 |
| How I found a Privilege Escalation bug in bug bounty. | https://medium.com/@gitlime71/how-i-found-a-privilege-escalation-bug-in-bug-bounty-eff018f19020?source=rss------bug_bounty-5 | Raccoon | hacking, bug-bounty, penetration-testing, pentesting, bug-bounty-tips | 27-Jul-2024 |
| Jailbreak of Meta AI (Llama -3.1) revealing configuration details | https://medium.com/@kiranmaraju/jailbreak-of-meta-ai-llama-3-1-revealing-configuration-details-9f0759f5006a?source=rss------bug_bounty-5 | Kiran Maraju | llm, nlp, cybersecurity, bug-bounty, chatbots | 27-Jul-2024 |
| Subdomain Takeover | https://medium.com/@ibnibrahim/subdomain-takeover-34bd662b5a7a?source=rss------bug_bounty-5 | TestUser | cybersecurity, hacking, ethical-hacking, bug-bounty, information-security | 27-Jul-2024 |
| Exploiting insecure deserialization vulnerabilities | https://cyberw1ng.medium.com/exploiting-insecure-deserialization-vulnerabilities-3595e4c24e2d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, penetration-testing, cybersecurity, careers | 27-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-48) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-48-241d35293a81?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, cybersecurity, hacking, skills, bug-bounty | 26-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-47) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-47-8d21d898cc97?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, skills, cybersecurity, ethical-hacking, hacking | 26-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-46) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-46-e851213880f4?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | skills, bug-bounty, ethical-hacking, hacking, cybersecurity | 26-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-45) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-45-7a90d1667a7a?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, skills, ethical-hacking, bug-bounty, hacking | 26-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-44) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-44-e4649fab9a0c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking | 26-Jul-2024 |
| 30-day Time Limit: Swagshop Credit-Giving Activity | https://medium.com/@security.tecno/30-day-time-limit-swagshop-credit-giving-activity-61454ef3757b?source=rss------bug_bounty-5 | TECNO Security | bug-bounty, security, bonus, hacker | 26-Jul-2024 |
| SIMPLE IDEA IN 2FA BYPASS LEADS TO $$$$ & CRITICAL IMPACT ! | https://medium.com/@alderson.philip/simple-idea-in-2fa-bypass-leads-to-critical-impact-a98e7c6a4190?source=rss------bug_bounty-5 | Philip Alderson | hacker, bugs, bug-bounty, 2fa-bypass | 26-Jul-2024 |
| Inside the Bug Bounty World: Challenges, Rewards, and Tips for Success | https://medium.com/codex/inside-the-bug-bounty-world-challenges-rewards-and-tips-for-success-74ea37cbfd9c?source=rss------bug_bounty-5 | Security Lit Limited | bug-bounty, vulnerability, bug-bounty-tips, cybersecurity, penetration-testing | 26-Jul-2024 |
| Quick Guide: API Penetration Testing | https://medium.com/@miladkeivanfar/quick-guide-api-penetration-testing-496c2e356a2e?source=rss------bug_bounty-5 | Milad keivanfar | pentesting, api-penetration-testing, bug-bounty, bug-bounty-tips, api-security | 26-Jul-2024 |
| Solving an extremely difficult cryptography CTF pack: Level 1 | https://medium.com/@f3tch/day-1-of-solving-an-extremely-difficulty-level-cryptography-ctf-pack-level-1-b8b3d89a531c?source=rss------bug_bounty-5 | f3tch | hacking, ctf-writeup, ctf, bug-bounty, cryptography | 26-Jul-2024 |
| ElasticSearch Smash & Grab | https://hogarth45.medium.com/elasticsearch-smash-grab-99cf36cdefbb?source=rss------bug_bounty-5 | Jess | elasticsearch, hacking, bug-bounty | 26-Jul-2024 |
| Pentesting vs. Bug Bounty: Understanding the Differences and Choosing the Right Approach | https://ip-specialist.medium.com/pentesting-vs-bug-bounty-understanding-the-differences-and-choosing-the-right-approach-0af4e0569193?source=rss------bug_bounty-5 | IPSpecialist | difference, pentester, pentesting, bug-bounty, security | 26-Jul-2024 |
| 18.7 Lab: Clobbering DOM attributes to bypass HTML filters | https://cyberw1ng.medium.com/18-7-lab-clobbering-dom-attributes-to-bypass-html-filters-d1af9a33ae41?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, penetration-testing, careers, hacking | 26-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-49) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-49-2ef3a8eb3b4b?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty, cybersecurity, ethical-hacking, skills | 26-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-53) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-53-bea2f5cf6a14?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | skills, cybersecurity, hacking, ethical-hacking, bug-bounty | 26-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-52) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-52-26b5cc12f0c2?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty | 26-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-51) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-51-379ea39fb723?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, skills, cybersecurity, ethical-hacking, hacking | 26-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-50) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-50-4a59a3c4f97b?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, skills, ethical-hacking, hacking | 26-Jul-2024 |
| IDOR : Payment Fraud on GYM Membership website | https://uzet.medium.com/idor-payment-fraud-on-gym-membership-website-d4e67f07db57?source=rss------bug_bounty-5 | Timotius Benhur | bug-bounty, pentesting, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 25-Jul-2024 |
| SQL Injection in 5 mins //Just because of CURIOSITY // | https://larebsec.medium.com/sql-injection-in-5-mins-just-because-of-curiosity-56e186f6296d?source=rss------bug_bounty-5 | Lareb | sql-injection, hacking, cybersecurity, security, bug-bounty | 25-Jul-2024 |
| Useful JavaScript functions & API’s to exploit XSS (Cross-Site Scripting) | https://medium.com/@godsxfinger/useful-javascript-functions-apis-to-exploit-xss-cross-site-scripting-5d99a93d9899?source=rss------bug_bounty-5 | Aadi (godsxfinger) | cross-site-scripting, xs, bug-bounty, cybersecurity | 25-Jul-2024 |
| Bypassing OTP Verification in a Signup Page | https://medium.com/@rat010/bypassing-otp-verification-in-a-signup-page-13976f724017?source=rss------bug_bounty-5 | Kanhaiya Kumar Singh | bug-bounty, web-application-security, web-app-testing, bug-hunting, bug-bounty-tips | 25-Jul-2024 |
| 18.6 Lab: Exploiting DOM clobbering to enable XSS | https://cyberw1ng.medium.com/18-6-lab-exploiting-dom-clobbering-to-enable-xss-640dd7c5fcf8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, hacking, penetration-testing | 25-Jul-2024 |
| The Importance of Cybersecurity in Today’s Digital Age | https://medium.com/@erkankavas/the-importance-of-cybersecurity-in-todays-digital-age-8d5a61d47416?source=rss------bug_bounty-5 | Erkan Kavas | cybersecurity, bug-bounty, threat-intelligence | 25-Jul-2024 |
| Automatiser la découverte des XSS | https://medium.com/@hazeprojecte/automatiser-la-d%C3%A9couverte-des-xss-9810f89172a4?source=rss------bug_bounty-5 | Itachix0f | xss-attack, automatisation, bug-bounty-tips, bug-bounty | 25-Jul-2024 |
| Automatiser la découverte des XSS | https://medium.com/@Itachi0xf/automatiser-la-d%C3%A9couverte-des-xss-9810f89172a4?source=rss------bug_bounty-5 | Itachix0f | xss-attack, automatisation, bug-bounty-tips, bug-bounty | 25-Jul-2024 |
| The Basic SQLmap Tutorial and SQLInjection | PortswiggerLab with SQLMap | https://medium.com/@barsavak/the-basic-sqlmap-tutorial-and-sqlinjection-portswiggerlab-with-sqlmap-1bb0cdf086fb?source=rss------bug_bounty-5 | bariss30 | bug-bounty, test, sql-injection, web-vulnerabilities, tools | 24-Jul-2024 |
| Bug Bounty basic for beginners & Types of bug bounty programs | https://systemweakness.com/bug-bounty-basic-for-beginners-types-of-bug-bounty-programs-e4a8dab68fcd?source=rss------bug_bounty-5 | Harsh Hatej | bug-bounty, bug-bounty-program, kali-linux, bug-bounty-tips, bounty-program | 24-Jul-2024 |
| 14.30 Lab: Reflected XSS protected by CSP, with CSP bypass | https://cyberw1ng.medium.com/14-30-lab-reflected-xss-protected-by-csp-with-csp-bypass-779c76173f7a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, cybersecurity, careers, hacking | 24-Jul-2024 |
| Android PenTesting Tools | https://medium.com/@evilprince007/android-pentesting-tools-efd0685ffeb7?source=rss------bug_bounty-5 | Prathamesh Khatavkar | android, bug-bounty, hacking, cybersecurity, mobile | 24-Jul-2024 |
| Hacking Moodle Apps Via External Functions | https://medium.com/@dub-flow/hacking-moodle-apps-via-external-functions-1fc88a6d697c?source=rss------bug_bounty-5 | Florian Walter | penetration-testing, moodle, ethical-hacking, cybersecurity, bug-bounty | 24-Jul-2024 |
| Accelerating Cybersecurity Learning with Speed Reading and Memory Training | https://medium.com/@enigma_/accelerating-cybersecurity-learning-with-speed-reading-and-memory-training-97305b666660?source=rss------bug_bounty-5 | enigma | bug-bounty, memory-improvement, ethical-hacking, speed-reading, cybersecurity | 24-Jul-2024 |
| How Almost Sacrificing a University Group Project led to a Microsoft Bug Bounty | https://medium.com/@pyrus369/how-almost-sacrificing-a-university-group-project-led-to-a-microsoft-bug-bounty-9801e0f8f006?source=rss------bug_bounty-5 | Pyrus | microsoft, cybersecurity, web-security, bug-bounty, infosec | 23-Jul-2024 |
| How Almost Sacrificing a University Group Project led to a Microsoft Bug Bounty | https://medium.com/@ericdesquivel3/how-almost-sacrificing-a-university-group-project-led-to-a-microsoft-bug-bounty-7e1b4eaabe22?source=rss------bug_bounty-5 | Eric Esquivel | bug-bounty, web-app-security | 23-Jul-2024 |
| Unmasking Keystroke Secrets: How Hackers Exploit Your Keyboard — A Deep Dive into… | https://systemweakness.com/unmasking-keystroke-secrets-how-hackers-exploit-your-keyboard-a-deep-dive-into-5bdb1bbabb25?source=rss------bug_bounty-5 | Khaleel Khan | infosec, bug-bounty, python, hacking, cybersecurity | 23-Jul-2024 |
| Preparing Your VPS for Bug Bounty Operations: A Complete Guide | https://medium.com/@adityasingh4180/preparing-your-vps-for-bug-bounty-operations-a-complete-guide-f55c30331df0?source=rss------bug_bounty-5 | Security Empire | cybersecurity, vps, bugcrowd, automation-testing, bug-bounty | 23-Jul-2024 |
| 5 Tips For Writing Bug Bounty Reports — Bug Bounty Tuesday | https://medium.com/@kerstan/5-tips-for-writing-bug-bounty-reports-bug-bounty-tuesday-0c5ed937a657?source=rss------bug_bounty-5 | kerstan | hacking, bug-bounty, cybersecurity | 23-Jul-2024 |
| Complex Attack Types: Sample Scenarios 48 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-48-410ddcb3010e?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, bug-bounty, cyberattack, cybersecurity, penetration-testing | 23-Jul-2024 |
| Top 10 XSS Payloads | https://rodoassis.medium.com/top-10-xss-payloads-e4774a43e285?source=rss------bug_bounty-5 | Rodolfo Assis (Brute) | xss-vulnerability, xss-attack, web-security, bug-bounty, web-hacking | 23-Jul-2024 |
| How i created my first XSS tool:-XSS-Pro #BugBounty | https://medium.com/@mithun_/how-i-created-my-first-xss-tool-xss-pro-bugbounty-982a16079baf?source=rss------bug_bounty-5 | Mithun | xss-vulnerability, xss-attack, pentesting, bug-bounty, automation | 23-Jul-2024 |
| I made a big mistake… | https://medium.com/@deadoverflow/i-made-a-big-mistake-a3e2dac4138c?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty, cybsersecurity, bug-bounty-tips, hacking, programming | 23-Jul-2024 |
| How to start Bug Hunting | https://medium.com/@hackerhyaato/how-to-start-bug-hunting-73ce283db5ac?source=rss------bug_bounty-5 | Hackerhyaato | how-to-start-bug-hunting, bug-bounty, bug-hunting, bugbounty-tips, how-to-start-bug-bounty | 23-Jul-2024 |
| What is CSP (content security policy)? | https://cyberw1ng.medium.com/what-is-csp-content-security-policy-cb3580832442?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, penetration-testing, bug-bounty, hacking | 23-Jul-2024 |
| How to Install websocat on linux (Debian / Ubuntu) | https://medium.com/@brianokinyi/how-to-install-websocat-on-linux-debian-ubuntu-85893655355e?source=rss------bug_bounty-5 | Brian Okinyi | websocket, bug-bounty, linux, pentesting | 22-Jul-2024 |
| Case Studies: High-Profile Vulnerabilities Discovered Through Bug Bounty Programs | https://medium.com/@paritoshblogs/case-studies-high-profile-vulnerabilities-discovered-through-bug-bounty-programs-2a063561f733?source=rss------bug_bounty-5 | Paritosh | information-technology, hacking, bug-bounty, cybersecurity, information-security | 22-Jul-2024 |
| OverTheWire — Bandit27 | https://medium.com/@evilprince007/overthewire-bandit27-465df4274d80?source=rss------bug_bounty-5 | Prathamesh Khatavkar | hacking, cybersecurity, bug-bounty | 22-Jul-2024 |
| TapSwap Clone Script Your Gateway to a Lucrative Tap-to-Earn Game !!! | https://medium.com/@peterkester96/tapswap-clone-script-your-gateway-to-a-lucrative-tap-to-earn-game-68a589821305?source=rss------bug_bounty-5 | Peterkester | players, bug-bounty, telegram, profit, reflections | 22-Jul-2024 |
| Burp Suite Made Easy: A Step-By-Step Tutorial (Part 1 of 2) | https://medium.com/@trixiahorner/burp-suite-made-easy-a-step-by-step-tutorial-part-1-of-2-451695ce84b1?source=rss------bug_bounty-5 | Trixia Horner | tryhackme, ethical-hacking, cybersecurity, penetration-testing, bug-bounty | 22-Jul-2024 |
| 14.28 Lab: Reflected XSS in a JavaScript URL with some characters blocked | https://cyberw1ng.medium.com/14-28-lab-reflected-xss-in-a-javascript-url-with-some-characters-blocked-db67819d5aa6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, careers, cybersecurity, penetration-testing | 22-Jul-2024 |
| What is IDOR (along with IDOR Attack Method) | https://medium.com/@errorfiathck/what-is-idor-along-with-idor-attack-method-e183b28e8546?source=rss------bug_bounty-5 | Errorfiathck | vulnerability, hacking, bug-bounty, idor, idor-vulnerability | 22-Jul-2024 |
| The First Bug bounty forum ! | https://elb4rt0.medium.com/the-first-bug-bounty-forum-ba0399fb70c0?source=rss------bug_bounty-5 | Elb4rt0 | bug-bounty-hunter, bug-bounty-tips, bugs, bug-bounty, bug-bounty-writeup | 22-Jul-2024 |
| First €200 bug that started my Bug Bounty Career | https://medium.com/@sugamdangal52/first-200-bug-that-started-my-bug-bounty-career-c11a871e116f?source=rss------bug_bounty-5 | Sugam Dangal | bug-bounty-hunter, bug-bounty, bug-bounty-tips, bugs, bug-bounty-writeup | 22-Jul-2024 |
| My Encounter with an Admin Panel in a Gas Agency Website | https://medium.com/@parthh_rana/my-encounter-with-an-admin-panel-in-a-gas-agency-website-72ded4fa4345?source=rss------bug_bounty-5 | Parth Rana | laravel, admin-panel, cybersecurity, bug-bounty, directory-listing | 22-Jul-2024 |
| HACKERONE IS A SCAM | https://medium.com/@proseizala/hackerone-is-a-scam-1623a5030284?source=rss------bug_bounty-5 | Proseizala | cybersecurity, hackerone, hacker, bug-bounty | 22-Jul-2024 |
| Complex Attack Types: Sample Scenarios 47 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-47-c0314c0e0b02?source=rss------bug_bounty-5 | Baris Dincer | penetration-testing, freedomofinternet, bug-bounty, cyberattack, cybersecurity | 22-Jul-2024 |
| Discovering Account Takeover Vulnerability Through Source Map Analysis | https://medium.com/@eduardinholuiz691/discovering-account-takeover-vulnerability-through-source-map-analysis-0cd4038cbc04?source=rss------bug_bounty-5 | Daniel Silva | vulnerability, bug-bounty, bug-bounty-writeup, reconnaissance | 22-Jul-2024 |
| Discovering Account Takeover Vulnerability Through Source Map Analysis | https://medium.com/@danielsilva691/discovering-account-takeover-vulnerability-through-source-map-analysis-0cd4038cbc04?source=rss------bug_bounty-5 | Daniel Silva | vulnerability, bug-bounty, bug-bounty-writeup, reconnaissance | 22-Jul-2024 |
| CVE-2024–40725 and CVE-2024–40898: Critical Vulnerabilities in Apache HTTP Server | https://infosecwriteups.com/cve-2024-40725-and-cve-2024-40898-critical-vulnerabilities-in-apache-http-server-d292084255dc?source=rss------bug_bounty-5 | ElNiak | apache, cybersecurity, https, bug-bounty, vulnerability | 21-Jul-2024 |
| TryHackMe — NahamStore — Walkthrough | https://medium.com/@nayanjyoti16/tryhackme-nahamstore-walkthrough-d4ecfe586c96?source=rss------bug_bounty-5 | Nayanjyoti Kumar | tryhackme, hacking, web, nahamstore, bug-bounty | 21-Jul-2024 |
| How I bypassed payment in one of the popular mobile apk and got free subsciption | https://medium.com/@deepk007/how-i-bypassed-payment-in-one-of-the-popular-mobile-apk-and-got-free-subsciption-46e94f61c089?source=rss------bug_bounty-5 | DEep | bug-bounty, bug-bounty-tips, ethical-hacking, red-team, cybersecurity | 21-Jul-2024 |
| Community Building in Bug Bounties: The Power of Networking and Collaboration | https://sarthakbhingare15.medium.com/community-building-in-bug-bounties-the-power-of-networking-and-collaboration-6adcdea4435b?source=rss------bug_bounty-5 | Sarthak Bhingare | community, improve, bug-bounty-tips, bug-bounty, tips | 21-Jul-2024 |
| 14.27 Lab: Reflected XSS with event handlers and href attributes blocked | https://cyberw1ng.medium.com/14-27-lab-reflected-xss-with-event-handlers-and-href-attributes-blocked-d2f9871fc8a8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, penetration-testing, careers, bug-bounty | 21-Jul-2024 |
| How To Setup Private Interactsh Server | https://medium.com/@learntheshell/how-to-setup-private-interactsh-server-016c344a10b3?source=rss------bug_bounty-5 | LearnTheShell | bug-bounty, bug-bounty-tips, cybersecurity, linux | 21-Jul-2024 |
| Advanced XXE Injection | https://medium.com/illumination/advanced-xxe-injection-fb269f281a40?source=rss------bug_bounty-5 | Quintius Walker | poetry, poetry-writing, poetry-on-medium, illumination, bug-bounty | 21-Jul-2024 |
| BSOD error due to crowdstrike. | https://gaya3-r.medium.com/bsod-error-due-to-crowdstrike-d675c348d09e?source=rss------bug_bounty-5 | gayatri r | bug-bounty, crowdstrike, crowdstrike-outage, bsod-error, information-security | 21-Jul-2024 |
| Email verification bypass due to race condition. | https://medium.com/@mohamed.yasser442200/email-verification-bypass-due-to-race-condition-8e4492313208?source=rss------bug_bounty-5 | Spider4 | race-condition, red-team, bug-bounty, security, pentesting | 21-Jul-2024 |
| Community Building in Bug Bounties: The Power of Networking and Collaboration | https://sarthakbhingare15.medium.com/community-building-in-bug-bounties-the-power-of-networking-and-collaboration-6adcdea4435b?source=rss------bug_bounty-5 | Sarthak Raju Bhingare | community, improve, bug-bounty-tips, bug-bounty, tips | 21-Jul-2024 |
| Uncovering a Critical Vulnerability: Unauthorized Access to Sensitive Data | https://medium.com/@anonymousshetty2003/uncovering-a-critical-vulnerability-unauthorized-access-to-sensitive-data-024182daa127?source=rss------bug_bounty-5 | Anonymousshetty | penetration-testing, bug-bounty, dorking, cybersecurity, ethical-hacking | 20-Jul-2024 |
| Discovering a High-Severity Bug in a Major Mobile Distribution Company | https://medium.com/@anonymousshetty2003/discovering-a-high-severity-bug-in-a-major-mobile-distribution-company-3fdb2a0f1987?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, ethical-hacking, bug-bounty | 20-Jul-2024 |
| How I was able to escalate my privileges and Bypass 403 Forbidden | https://medium.com/@momen_besher/how-i-was-able-to-escalate-my-privileges-and-bypass-403-forbidden-17b8aea4cba6?source=rss------bug_bounty-5 | steve55555 | cybersecurity, bug-bounty, bug-bounty-tips | 20-Jul-2024 |
| Kali Linux: Starting Out with Bug Bounty Hunting | https://medium.com/@nimrashahidktk3/kali-linux-starting-out-with-bug-bounty-hunting-d7a0150645bd?source=rss------bug_bounty-5 | Nimra Shahid | penetration-testing, cybersecurity, kali-linux, bug-bounty | 20-Jul-2024 |
| 14.26 Lab: Reflected XSS with AngularJS sandbox escape and CSP | https://cyberw1ng.medium.com/14-26-lab-reflected-xss-with-angularjs-sandbox-escape-and-csp-b98791b2a5a6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, penetration-testing, bug-bounty, hacking | 20-Jul-2024 |
| Complex Attack Types: Sample Scenarios 46 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-46-a6707ef9e910?source=rss------bug_bounty-5 | Baris Dincer | penetration-testing, cyberattack, bug-bounty, freedomofinternet, cybersecurity | 20-Jul-2024 |
| The Type of Bug That We Can’t See | https://medium.com/illumination/the-type-of-bug-that-we-cant-see-82ff07cdcd71?source=rss------bug_bounty-5 | Quintius Walker | creative-writing, poetry-on-medium, poetry, bug-bounty, illumination | 20-Jul-2024 |
| This is how i escalated self XSS with CSRF | https://medium.com/@pvnk24/this-is-how-i-escalated-self-xss-with-csrf-80113ab3080e?source=rss------bug_bounty-5 | Pavan K | cybersecurity, bug-bounty, penetration-testing, security, pentesting | 20-Jul-2024 |
| Basic Pentesting 1 Walkthrough | https://erdemstar.medium.com/basic-pentesting-1-walkthrough-4e447a2ac35d?source=rss------bug_bounty-5 | Erdemstar | oscp-preparation, oscp, bug-bounty, application-security, penetration-testing | 20-Jul-2024 |
| Discovering an XML File Upload Vulnerability Lead to SSRF: My Bug Hunting Journey | https://javroot.medium.com/discovering-an-xml-file-upload-vulnerability-lead-to-ssrf-my-bug-hunting-journey-8e1bac89f60f?source=rss------bug_bounty-5 | Javroot | xml, bug-bounty, vulnerability, cybersecurity, bug-bounty-tips | 20-Jul-2024 |
| The Type of Bug That We Can’t See | https://medium.com/@The_StarHack3r/the-type-of-bug-that-we-cant-see-82ff07cdcd71?source=rss------bug_bounty-5 | Quintius Walker | creative-writing, poetry-on-medium, poetry, bug-bounty, illumination | 20-Jul-2024 |
| 14.25 Lab: Reflected XSS with AngularJS sandbox escape without strings | https://cyberw1ng.medium.com/14-25-lab-reflected-xss-with-angularjs-sandbox-escape-without-strings-6ffac9f6bdf4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, cybersecurity, careers | 19-Jul-2024 |
| Subdomain Takeover on hatenablog.com (はてなブログ) | https://medium.com/@daichiharada/subdomain-takeover-hatenablog-2cb3576bf881?source=rss------bug_bounty-5 | Daichi Harada | subdomain-takeover, security, bug-bounty | 19-Jul-2024 |
| 1000$ IDOR : Unauthorized Project Inclusion in Expense | https://medium.com/@a13h1/1000-idor-unauthorized-project-inclusion-in-expense-b9ce08b28c71?source=rss------bug_bounty-5 | Abhi Sharma | cybersecurity, idor, bug-bounty, broken-access-control, information-security | 19-Jul-2024 |
| Information Disclosure that made me $2000 in under 5 minutes | https://medium.com/@sugamdangal52/information-disclosure-that-made-me-2000-in-under-5-minutes-63e1ce00ca07?source=rss------bug_bounty-5 | Sugam Dangal | information-disclosure, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 19-Jul-2024 |
| Common Technique To Exploit File Upload Vulnerability | https://medium.com/@p00dl3/common-technique-to-exploit-file-upload-vulnerability-bf84beed7207?source=rss------bug_bounty-5 | p00dl3 | cybersecurity, bug-bounty, file-upload | 19-Jul-2024 |
| Complete Cybersecurity Roadmap 2024 (Part-1) | https://osintteam.blog/complete-cybersecurity-roadmap-2024-part-1-c69986288f16?source=rss------bug_bounty-5 | LogicTech | cybersecurity, osint, bug-bounty, hacking, roadmaps | 19-Jul-2024 |
| Hello ….. | https://medium.com/@rutujasoundale693/hello-4a42a834d006?source=rss------bug_bounty-5 | Rutujasoundale | cybersecurity, bug-bounty | 19-Jul-2024 |
| Complex Attack Types: Sample Scenarios 45 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-45-17057d9de6dd?source=rss------bug_bounty-5 | Baris Dincer | cybersecurity, bug-bounty, penetration-testing, freedomofinternet, cyberattack | 19-Jul-2024 |
| Não Experimente a Tela Azul da Microsoft(BUG?) | https://medium.com/@liviaxavier200317/n%C3%A3o-experimente-a-tela-azul-da-microsoft-bug-9f631ea24c8d?source=rss------bug_bounty-5 | Livia Xavier | crowdstrike, cibernéticos, bug-bounty, microsoft, bugs | 19-Jul-2024 |
| Specialized Bug Sweeps for Unique Environments | https://medium.com/@siddiquiasad2299/specialized-bug-sweeps-for-unique-environments-43a1ea56930c?source=rss------bug_bounty-5 | Asad Siddiqui | bug-detection, tscm, bug-bounty, bug-sweep | 19-Jul-2024 |
| Kursus Cyber Security Di Linuxhackingid | https://medium.com/@linuxhackingid_official/kursus-cyber-security-di-linuxhackingid-dc4e52760661?source=rss------bug_bounty-5 | Linuxhackingid | hacker, bug-bounty, cybersecurity, linuxhackingid, hacking | 18-Jul-2024 |
| Top 50+ XSS Bug Bounty Writeups | Cross-Site Scripting(XSS) Attacks Reports | https://medium.com/@proseizala/top-50-xss-bug-bounty-writeups-cross-site-scripting-xss-attacks-reports-700332ed6c87?source=rss------bug_bounty-5 | Proseizala | hacker, hacking, bug-bounty, cybersecurity | 18-Jul-2024 |
| Sub Domains Finder Tools | https://medium.com/@proseizala/sub-domains-finder-tools-fefa2b44bb34?source=rss------bug_bounty-5 | Proseizala | bug-bounty, cybersecurity, hacker | 18-Jul-2024 |
| 13.5 Lab: Exploiting server-side parameter pollution in a REST URL | https://cyberw1ng.medium.com/13-5-lab-exploiting-server-side-parameter-pollution-in-a-rest-url-a1876056a5f6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, bug-bounty, hacking, cybersecurity | 18-Jul-2024 |
| Critical Logic Flaw Allows Overwrite of Any User Account | https://medium.com/@elcapitano7x/critical-logic-flaw-allows-overwrite-of-any-user-account-015b102e1da7?source=rss------bug_bounty-5 | Elcapitano | bug-bounty, bug-bounty-tips, hackerone, bugbounty-writeup, hacking | 18-Jul-2024 |
| How I Found and Bypassed a Spring Boot Actuator Information Disclosure Bug | https://cametom006.medium.com/how-i-found-and-bypassed-a-spring-boot-actuator-information-disclosure-bug-c4930b740a50?source=rss------bug_bounty-5 | Fahad Faisal | bug-bounty | 18-Jul-2024 |
| Summary Of The Basics of Web Hacking, PRT 2 | https://medium.com/@zghzwbcn/summary-of-the-basics-of-web-hacking-prt-2-e3d7bdbf902d?source=rss------bug_bounty-5 | Henrietta Awosoberekon | bug-bounty, technology, cybersecurity, web-development, web-vulnerabilities | 18-Jul-2024 |
| IDOR at the Get Payment Data Endpoint Leads to Personal Identifiable Information (PII) Disclosure | https://medium.com/@blackarazi/idor-at-the-get-payment-data-endpoint-leads-to-personal-identifiable-information-pii-disclosure-7956c57058af?source=rss------bug_bounty-5 | Azhari Harahap | api-security, broken-access-control, application-security, bug-bounty-writeup, bug-bounty | 17-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-43) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-43-0699b919a514?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, hacking, cybersecurity, skills, bug-bounty | 17-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-42) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-42-4cb955de4cc7?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty, skills, hacking, cybersecurity | 17-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-41) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-41-7b2b5aed416c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, cybersecurity, skills, bug-bounty, ethical-hacking | 17-Jul-2024 |
| Why does you all guys think that you really need Python for hacking | https://systemweakness.com/why-does-you-all-guys-think-that-you-really-need-python-for-hacking-b50b65238401?source=rss------bug_bounty-5 | Imran Niaz | programming-languages, penetration-testing, cybersecurity, data-science, bug-bounty | 17-Jul-2024 |
| Temenos Transact Vulnerable to Reflected XSS (CVE-2022–38322) | https://qotoz.medium.com/temenos-transact-vulnerable-to-reflected-xss-cve-2022-38322-7b1e2f681db1?source=rss------bug_bounty-5 | ِAshraf Harb | cve, bug-bounty, penetration-testing, temenos | 17-Jul-2024 |
| Bypassing Account Suspension Using Anonymous Posting | Facebook Bug Bounty | https://ph-hitachi.medium.com/bypassing-account-suspension-using-anonymous-posting-facebook-bug-bounty-b204433c98d1?source=rss------bug_bounty-5 | Ph.Hitachi | bug-bounty, facebook-bug-bounty, bypass-restriction | 17-Jul-2024 |
| Practical Bug Bounty — TCM Academy | Module 6 | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-module-6-9cab8d004034?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | ethical-hacking, bug-bounty, cybersecurity, appsec, fuzzing | 17-Jul-2024 |
| Default Credentials Leads to $1200 Bounty Reward (Quest NetVault CVE-2017–17417) | https://medium.com/@tester333/default-credentials-leads-to-1200-bounty-reward-quest-netvault-cve-2017-17417-b34c6e0e7a86?source=rss------bug_bounty-5 | Tester | cybersecurity, bug-bounty-tips, bug-bounty, penetration-testing, ethical-hacking | 17-Jul-2024 |
| The WordPress bug very few know about. | https://osintteam.blog/the-wordpress-bug-very-few-know-about-1bf16ee4a2a6?source=rss------bug_bounty-5 | an0nbil | wordpress, programming, vulnerability, web-development, bug-bounty | 17-Jul-2024 |
| Exploiting Server-Side Parameter Pollution in a REST URL | https://cyberw1ng.medium.com/exploiting-server-side-parameter-pollution-in-a-rest-url-0d52d4261c86?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, hacking, cybersecurity, bug-bounty | 17-Jul-2024 |
| How Easily I Found My First P2 on Bugcrowd | https://medium.com/@hashimamin/how-easily-i-found-my-first-p2-on-bugcrowd-ed827a79a50c?source=rss------bug_bounty-5 | Hashim Amin | csrf, recon, csrf-bypass, bug-bounty-tips, bug-bounty | 17-Jul-2024 |
| OS CTF | https://medium.com/@Shaybaa/os-ctf-27cc9a8ab0cc?source=rss------bug_bounty-5 | Shaybaa | bug-bounty, web-security, idor-vulnerability | 17-Jul-2024 |
| Hacker Himself | https://medium.com/@nnface/hacker-himself-01d4978e189c?source=rss------bug_bounty-5 | NnFace | bugbounty-writeup, bug-bounty, hacking, cybersecurity, bug-bounty-tips | 17-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-40) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-40-f1b43fb596ae?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, cybersecurity, skills, ethical-hacking, bug-bounty | 16-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-39) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-39-740c7ada54ea?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty, cybersecurity, ethical-hacking, skills | 16-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-38) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-38-fa2ceb6f8bbd?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking, cybersecurity, hacking, skills | 16-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-37) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-37-20111980eaa5?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | skills, ethical-hacking, hacking, bug-bounty, cybersecurity | 16-Jul-2024 |
| Exploiting CVE-2024–22274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense… | https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5 | Khaleel Khan | infosec, cybersecurity, ethical-hacking, hacking, bug-bounty | 16-Jul-2024 |
| Complex Attack Types: Sample Scenarios 44 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-44-83d2bc9b2d7d?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, information-technology, cybersecurity, bug-bounty, cyberattack | 16-Jul-2024 |
| How Use 6 Step To Find Ssrf — Bug Bounty Tuesday | https://medium.com/@kerstan/how-use-6-step-to-find-ssrf-bug-bounty-tuesday-acc44d806c08?source=rss------bug_bounty-5 | kerstan | cybersecurity, hacking, bug-bounty | 16-Jul-2024 |
| API Recon and Testing for Bug Bounty | https://cyberw1ng.medium.com/api-recon-and-testing-for-bug-bounty-3969d1f90f5c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, bug-bounty, penetration-testing, cybersecurity | 16-Jul-2024 |
| Intro to Debugging Java Web Servers Without Source Code For Security Researchers | https://infosecwriteups.com/intro-to-debugging-java-web-servers-without-source-code-for-security-researchers-80ff00de4753?source=rss------bug_bounty-5 | Jayateertha Guruprasad | bug-bounty, pentesting, cybersecurity, java, infosec | 16-Jul-2024 |
| Reflected XSS via Base64-encoded on My college website. | https://uzet.medium.com/reflected-xss-via-base64-encoded-on-my-college-website-2df9755b1856?source=rss------bug_bounty-5 | Timotius Benhur | penetration-testing, pentesting, bug-bounty, bug-hunting, bug-bounty-tips | 15-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-36) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-36-a8fd178e9b07?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, cybersecurity, hacking, bug-bounty, skills | 15-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-35) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-35-adbfa228814a?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, ethical-hacking, skills, hacking | 15-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-34) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-34-73069fab6ff6?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, ethical-hacking, bug-bounty, hacking, skills | 15-Jul-2024 |
| My First Bounty: A story of a Blind SQL Injection | https://medium.com/@adebayosec/my-first-bounty-a-story-of-a-blind-sql-injection-69d9ad6716b6?source=rss------bug_bounty-5 | Victorious | sql-injection, penetration-testing, cybersecurity, bug-bounty, burpsuite | 15-Jul-2024 |
| CVE-2024–23692: A Critical Vulnerability in Rejetto HTTP File Server | https://infosecwriteups.com/cve-2024-23692-a-critical-vulnerability-in-rejetto-http-file-server-1df322a2e688?source=rss------bug_bounty-5 | ElNiak | bug-bounty, python, cybersecurity, system, ssti | 15-Jul-2024 |
| My First Bounty: A story of a Blind SQL Injection | https://medium.com/@adebayosec/my-first-bounty-a-story-of-a-blind-sql-injection-69d9ad6716b6?source=rss------bug_bounty-5 | Torious | sql-injection, penetration-testing, cybersecurity, bug-bounty, burpsuite | 15-Jul-2024 |
| Echidna | https://medium.com/@Progsky/echidna-b9e454de096b?source=rss------bug_bounty-5 | Progsky | hacking-tools, pentesting, penetration-testing, bug-bounty, blockchain | 15-Jul-2024 |
| Complex Attack Types: Sample Scenarios 43 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-43-39deed779c6c?source=rss------bug_bounty-5 | Baris Dincer | penetration-testing, cyberattack, freedomofinternet, bug-bounty, cybersecurity | 15-Jul-2024 |
| Understanding White Hat Hacking: The Guardians of Cybersecurity | https://medium.com/@cosmiczoomies/understanding-white-hat-hacking-the-guardians-of-cybersecurity-87200caf5820?source=rss------bug_bounty-5 | GalaxyGoose | cybersecurity, hacking, white-hat-hacker, bug-bounty, penetration-testing | 15-Jul-2024 |
| 11.9 Lab: Exploiting XXE to retrieve data by repurposing a local DTD | https://cyberw1ng.medium.com/11-9-lab-exploiting-xxe-to-retrieve-data-by-repurposing-a-local-dtd-30f4098a7789?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, careers, hacking, cybersecurity, bug-bounty | 15-Jul-2024 |
| XSS Türleri için Test Case Yazma | https://medium.com/@tugbaglsn/xss-t%C3%BCrleri-i%C3%A7in-test-case-yazma-1832eb0a27f9?source=rss------bug_bounty-5 | Tuğba Gülşen | cybersecurity, xss-attack, xss-vulnerability, bug-bounty | 15-Jul-2024 |
| How to Easily Earn a $200 Bounty | https://medium.com/@xiaodongsec/how-to-easily-earn-a-200-bounty-6e27eaaec13f?source=rss------bug_bounty-5 | Mu1berry | bugcrowd, hacker, bug-bounty, money, vulnerability | 14-Jul-2024 |
| Review: AppSec Pentesting eXpert (CAPenX) from The SecOps Group | https://medium.com/@p0lyxena/review-appsec-pentesting-expert-capenx-from-the-secops-group-eb5674e4bf8d?source=rss------bug_bounty-5 | Fuleki Ioan | bug-bounty, penetration-testing, certification, cybersecurity, capenx | 14-Jul-2024 |
| Detection Engineering: A Comprehensive Overview | https://medium.com/@paritoshblogs/detection-engineering-a-comprehensive-overview-92fc01973ce7?source=rss------bug_bounty-5 | Paritosh | detection-engineering, information-technology, cybersecurity, hacking, bug-bounty | 14-Jul-2024 |
| Hunting for Firebase Enums in Android Application | https://medium.com/@tanish.saxena26/hunting-for-firebase-enums-in-android-application-42b79e9b76f8?source=rss------bug_bounty-5 | Tanish Saxena | cloud, bug-bounty, firebase, android, gcp | 14-Jul-2024 |
| My First Critical Vulnerability | https://medium.com/@0xchoudhary/my-first-critical-vulnerability-fd83a81f70b3?source=rss------bug_bounty-5 | Sushil Choudhary | bugbounty-writeup, bug-hunting, bug-bounty-tips, hackerone, bug-bounty | 14-Jul-2024 |
| How I Can Get P1 Nasa easily — Dorking | https://0xc4thack.medium.com/how-i-can-get-p1-nasa-easily-dorking-c9c4a4cee251?source=rss------bug_bounty-5 | 0xc4t | pentesting, nasa-vdp, pentest-web, bug-bounty, dorking | 14-Jul-2024 |
| New York Flankees Room TryHackMe Walkthrough | https://matsecurity.medium.com/new-york-flankees-room-tryhackme-walkthrough-ef6862c781f1?source=rss------bug_bounty-5 | MatSec | ctf-writeup, tryhackme-writeup, bug-bounty, tryhackme, tryhackme-walkthrough | 14-Jul-2024 |
| The easiest admin panel bypass | https://medium.com/@paraskhorwal9/the-easiest-admin-panel-bypass-4b6fb4d7d1ea?source=rss------bug_bounty-5 | Paraskhorwal | bug-bounty, penetration-testing, admin-panel | 14-Jul-2024 |
| Complex Attack Types: Sample Scenarios 42 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-42-d0a11c84cc73?source=rss------bug_bounty-5 | Baris Dincer | cyberattack, freedomofinternet, bug-bounty, penetration-testing, cybersecurity | 14-Jul-2024 |
| New York Flankees TryHackMe Room Walkthrough: Step-by-Step Youtube Guide | https://matsecurity.medium.com/new-york-flankees-room-tryhackme-walkthrough-ef6862c781f1?source=rss------bug_bounty-5 | MatSec | ctf-writeup, tryhackme-writeup, bug-bounty, tryhackme, tryhackme-walkthrough | 14-Jul-2024 |
| Automate Subdomain Monitoring | https://medium.com/@Aftab700/automate-subdomain-monitoring-171338c66dd5?source=rss------bug_bounty-5 | Aftab Sama | bug-bounty, monitoring, infosec, automation, hacking | 14-Jul-2024 |
| What is XML external entity (XXE) injection | https://cyberw1ng.medium.com/what-is-xml-external-entity-xxe-injection-8914620c2d24?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, cybersecurity, penetration-testing, careers | 14-Jul-2024 |
| Escaping the Citrix Sandbox — Understanding Citrix Breakout | https://medium.com/@suprajabaskaran8/escaping-the-citrix-sandbox-understanding-citrix-breakout-80320a3d44af?source=rss------bug_bounty-5 | Suprajabaskaran | bug-bounty-tips, hacking, bug-bounty, pentesting, penetration-testing | 14-Jul-2024 |
| Vulnerable WordPress June 2024 (Turkish delight) | https://medium.com/@onhexgroup/vulnerable-wordpress-june-2024-turkish-delight-96cae8ef8161?source=rss------bug_bounty-5 | Onhexgroup | bug-bounty, infosec, web-security, information-security, wordpress | 14-Jul-2024 |
| Escaping the Citrix Sandbox — Understanding Citrix Breakout | https://infosecwriteups.com/escaping-the-citrix-sandbox-understanding-citrix-breakout-80320a3d44af?source=rss------bug_bounty-5 | Suprajabaskaran | bug-bounty-tips, hacking, bug-bounty, pentesting, penetration-testing | 14-Jul-2024 |
| Airplane TryHackMe Room Walkthrough | MatSec Youtube | https://matsecurity.medium.com/airplane-tryhackme-room-walkthrough-matsec-youtube-7fca40406a20?source=rss------bug_bounty-5 | MatSec | tryhackme-walkthrough, bug-bounty, tryhackme-writeup, tryhackme, ctf-writeup | 13-Jul-2024 |
| 10.7 Lab: SSRF with whitelist-based input filter | https://cyberw1ng.medium.com/10-7-lab-ssrf-with-whitelist-based-input-filter-36db84b1a13d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, hacking, cybersecurity, bug-bounty | 13-Jul-2024 |
| Securing Crypto Company: Addressing Web 2.0 Vulnerabilities | https://metanetwebhostingsecurity.medium.com/securing-crypto-company-addressing-web-2-0-vulnerabilities-209bd7fc3d85?source=rss------bug_bounty-5 | metanetwebhosting security | cryptocurrency, cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 13-Jul-2024 |
| Linux Exploitation: Stack Smashing | https://medium.com/@boogsta/linux-exploitation-stack-smashing-70c1bf6c13d2?source=rss------bug_bounty-5 | Boogsta | hacking, cybersecurity, bug-bounty, cyber, hacker | 13-Jul-2024 |
| My First Bug: Gitingore exposure combined with 403 bypass | https://medium.com/@nnface/my-first-bug-gitingore-exposure-combined-with-403-bypass-5db750e211ff?source=rss------bug_bounty-5 | NnFace | bug-bounty, bug-bounty-tips, cybersecurity, hacking, low-hanging-fruit | 13-Jul-2024 |
| Here is the story of how i found Stored XSS on a target | https://medium.com/@pvnk24/here-is-the-story-of-how-i-found-stored-xss-on-a-target-7baaeed76765?source=rss------bug_bounty-5 | Pavan K | penetration-testing, bug-bounty, pentesting, hacking, ethical-hacking | 13-Jul-2024 |
| Complex Attack Types: Sample Scenarios 41 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-41-48e4f10a07ef?source=rss------bug_bounty-5 | Baris Dincer | penetration-testing, freedomofinternet, information-security, bug-bounty, cybersecurity | 13-Jul-2024 |
| Email Update Restricted Bypass | https://medium.com/@mahfujwhh/email-update-restricted-bypass-f6af935da67e?source=rss------bug_bounty-5 | mahfujwhh | cybersecurity, bug-bounty | 13-Jul-2024 |
| Credential stuffing in bug bounties | https://bunny0417.medium.com/credential-stuffing-in-bug-bounties-d51b8e321135?source=rss------bug_bounty-5 | Aayush kumar | credential-stuffing, leaked-passwords, bug-bounty, darkweb, bugbounty-writeup | 12-Jul-2024 |
| Can bug bounty be a full time career? | https://medium.com/@shwetapapnai783/can-bug-bounty-be-a-full-time-career-5606f1ddd440?source=rss------bug_bounty-5 | Shweta Papnai | security, cybersecurity, technology, money, bug-bounty | 12-Jul-2024 |
| The Hidden Pitfalls of Bug Bounties on Indian Government Sites: My First Experience | https://medium.com/@rolextital/the-hidden-pitfalls-of-bug-bounties-on-indian-government-sites-my-first-experience-9204312a8325?source=rss------bug_bounty-5 | Rolextital | hacking, bug-bounty, govt, idor | 12-Jul-2024 |
| Firmware Analysis: Hands-on Guide | https://hackerassociate.medium.com/firmware-analysis-hands-on-guide-19913a5166ca?source=rss------bug_bounty-5 | Harshad Shah | bug-bounty, infosec, cybersecurity, hacking, iot | 12-Jul-2024 |
| DΞX Points Fest | https://d3xxyz.medium.com/d%CE%BEx-points-fest-e39019566b3f?source=rss------bug_bounty-5 | DΞX | airdrop, bounty-program, bug-bounty | 12-Jul-2024 |
| Windows privilege escalation: Abusing npm’s design patterns to escalate your permissions | https://medium.com/@demonia/windows-privilege-escalation-abusing-npms-design-patterns-to-escalate-your-permissions-da0ac6c96d72?source=rss------bug_bounty-5 | Mohammed Dief | cybersecurity, npm, bug-bounty, windows, privilege-escalation | 12-Jul-2024 |
| VULNERABILITY RESEARCH | https://medium.com/@workwithsane/vulnerability-research-896c0ba07a57?source=rss------bug_bounty-5 | Sane | bug-bounty, cybersecurity, bug-bounty-tips | 12-Jul-2024 |
| My First Bug!!!Stored Cross Site Scripting(XSS) | https://medium.com/@shahariarwalid/my-first-bug-stored-cross-site-scripting-xss-d84051ee4e86?source=rss------bug_bounty-5 | Shahariar Amin | bug-bounty, xss-vulnerability, stored-xss | 12-Jul-2024 |
| File Upload se kuch hatke : File Inclusion aur Path Traversal Vulnerabilites | https://medium.com/@yashprajapati791/file-upload-se-kuch-hatke-file-inclusion-aur-path-traversal-vulnerabilites-d10e16be0d7a?source=rss------bug_bounty-5 | Yash Virendra Prajapati | penetration-testing, bug-bounty, file-inclusion, vulnerability, file-upload | 12-Jul-2024 |
| How i got Bug -XSS | https://medium.com/@basxth/how-i-got-bug-xss-8eec781ab58b?source=rss------bug_bounty-5 | Mohammed Basith K B | bug-bounty, xss-attack, google-dorking, xss-bypass, cybersecurity | 12-Jul-2024 |
| Master Bug Bounty Hunting with Top Recon Tools | https://medium.com/@labcodetech/master-bug-bounty-hunting-with-top-recon-tools-83516a4bcc54?source=rss------bug_bounty-5 | Codetech Lab | vulnerability, recon, bug-bounty, penetration-testing | 12-Jul-2024 |
| NewLine Character Cause DoS: Folder & File Deletion Flaw | https://medium.com/@a13h1/newline-character-cause-dos-folder-file-deletion-flaw-8bec3079ed85?source=rss------bug_bounty-5 | Abhi Sharma | cybersecurity, bug-bounty, programming, denial-of-service, infosec | 12-Jul-2024 |
| 10.6 Lab: Blind SSRF with Shellshock Exploitation | https://cyberw1ng.medium.com/10-6-lab-blind-ssrf-with-shellshock-exploitation-a13e25b27dbc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, cybersecurity, bug-bounty, penetration-testing | 12-Jul-2024 |
| Setting up a private Burp Collaborator Server | https://medium.com/@AstroKrypTech/setting-up-a-private-burp-collaborator-server-71c55ff85815?source=rss------bug_bounty-5 | AstroKrypTech | web-application-security, bug-bounty-tips, bug-bounty | 12-Jul-2024 |
| Git Gone Wrong: Application Compromise via Exposed .git Directory | https://medium.com/@cybersekler/git-gone-wrong-application-compromise-via-exposed-git-directory-392806b23435?source=rss------bug_bounty-5 | Cyber Sekler | penetration-testing, hacking, application-security, bug-bounty | 12-Jul-2024 |
| RECON IS IMPORTANT !!! In Depth Recon Methodology Bug Bounty Part 01 | https://omarora1603.medium.com/recon-is-important-in-depth-recon-methodology-bug-bounty-part-01-2b69c3b168fe?source=rss------bug_bounty-5 | Om Arora | methodology, infosec, hacking, bug-bounty, bug-bounty-tips | 12-Jul-2024 |
| NewLine Character Cause DoS: Folder & File Deletion Flaw | https://infosecwriteups.com/newline-character-cause-dos-folder-file-deletion-flaw-8bec3079ed85?source=rss------bug_bounty-5 | Abhi Sharma | cybersecurity, bug-bounty, programming, denial-of-service, infosec | 12-Jul-2024 |
| RECON IS IMPORTANT !!! In Depth Recon Methodology Bug Bounty Part 01 | https://infosecwriteups.com/recon-is-important-in-depth-recon-methodology-bug-bounty-part-01-2b69c3b168fe?source=rss------bug_bounty-5 | Om Arora | methodology, infosec, hacking, bug-bounty, bug-bounty-tips | 12-Jul-2024 |
| How I Make Two SQL Injections Exploitable under the Magic Restricts in WordPress | https://medium.com/@zpbrent/how-i-make-two-sql-injections-exploitable-under-the-magic-restricts-in-wordpress-817cd60dc80a?source=rss------bug_bounty-5 | Peng Zhou | wordpress-plugins, wordpress, infosec, bug-bounty, web-security | 12-Jul-2024 |
| آسیب پذیری های Jira را برطرف کنید | https://medium.com/@pardis.cloud/%D8%A2%D8%B3%DB%8C%D8%A8-%D9%BE%D8%B0%DB%8C%D8%B1%DB%8C-%D9%87%D8%A7%DB%8C-jira-%D8%B1%D8%A7-%D8%A8%D8%B1%D8%B7%D8%B1%D9%81-%DA%A9%D9%86%DB%8C%D8%AF-b28879e65c2e?source=rss------bug_bounty-5 | PardisCo Professional Tech Team | آسیبپذیری, bug-bounty, سرور, jira | 11-Jul-2024 |
| How I Can Still See Your Image on Facebook After You Deleted It | Meta | BugBounty | 2024 | https://prathapilango.medium.com/how-i-can-still-see-your-image-on-facebook-after-you-deleted-it-meta-bugbounty-2024-3fa63022c4fc?source=rss------bug_bounty-5 | Prathapilango | cybersecurity, meta, bug-bounty, bugbounty-writeup | 11-Jul-2024 |
| Host Header Injection | https://medium.com/@nareshkumar76191/host-header-injection-bd6ffdafe1c0?source=rss------bug_bounty-5 | Nareshkumar | red-team, hacker, bounty-program, bug-bounty, bug-bounty-tips | 11-Jul-2024 |
| Admin panel Bypassed Just by reading “support team quotes” | https://medium.com/@Ajakcybersecurity/admin-panel-bypassed-just-by-reading-support-team-quotes-5462538ea3a4?source=rss------bug_bounty-5 | AjakCybersecurity | bug-bounty, hacking, penetration-testing, ethical-hacking, cybersecurity | 11-Jul-2024 |
| Cross-Account Profile Picture Deletion via CSRF Token Bypass paid me 500$. | https://mustafa2.medium.com/cross-account-profile-picture-deletion-via-csrf-token-bypass-paid-me-500-60d5f4529a7b?source=rss------bug_bounty-5 | Hajus | bug-bounty-tips, csrf-bypass, bug-bounty | 11-Jul-2024 |
| A Revolutionary Bug Bounty Platform: Zero-Knowledge Proofs in Web3 | https://medium.com/@JohnnyTime/a-revolutionary-bug-bounty-platform-zero-knowledge-proofs-in-web3-5e9aaa536084?source=rss------bug_bounty-5 | Johnny Time | bug-bounty, web3, bug-hunting, rewards, smart-contracts | 11-Jul-2024 |
| Building an Ethical Hacking Playground at Home | https://l00pinfinity.medium.com/building-an-ethical-hacking-playground-at-home-98439af54a78?source=rss------bug_bounty-5 | Collins K. Boit | network, hacking, security-analysts, ethical-hacking, bug-bounty | 11-Jul-2024 |
| 9.6 Lab: Partial construction race conditions | https://cyberw1ng.medium.com/9-6-lab-partial-construction-race-conditions-303bfc70b5f8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, penetration-testing, bug-bounty, careers | 11-Jul-2024 |
| Practical Bug Bounty — TCM Academy | Module 5 | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-module-5-508b7fad93f1?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | information-security, appsec, cybersecurity, bug-bounty, penetration-testing | 11-Jul-2024 |
| Disclose the email address and phone number of chinese business reseller | https://gtm0x01.medium.com/disclose-the-email-address-and-phone-number-of-chinese-business-reseller-f882978b8733?source=rss------bug_bounty-5 | Gtm Mänôz | bug-bounty-writeup, facebook, hacking, bug-bounty, facebook-bug-bounty | 11-Jul-2024 |
| XSS Zafiyetleri Test Case | https://medium.com/@beyzatekinli/xss-t%C3%BCrleri-test-case-18f91987fb63?source=rss------bug_bounty-5 | Beyzanur Tekinli | gallipoli, xss-vulnerability, bug-bounty, xss-attack, xss-challenge | 11-Jul-2024 |
| Abusing CORS for an XSS on Flickr | https://medium.com/@proseizala/abusing-cors-for-an-xss-on-flickr-a820e3f28083?source=rss------bug_bounty-5 | Proseizala | bug-bounty, hacker, cybersecurity, bug-bounty-tips | 11-Jul-2024 |
| No Way Out: Enforced and Inescapable Organizational Membership | https://0xmatrix.medium.com/no-way-out-enforced-and-inescapable-organizational-membership-a2247caa1790?source=rss------bug_bounty-5 | Mo2men Elmady | hacking, bug-bounty, cybersecurity, penetration-testing | 11-Jul-2024 |
| Complex Attack Types: Sample Scenarios 40 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-40-117efeaeaf61?source=rss------bug_bounty-5 | Baris Dincer | cybersecurity, penetration-testing, bug-bounty, information-technology, freedomofinternet | 11-Jul-2024 |
| No Way Out: Enforced and Inescapable Organizational Membership | https://0xmatrix.medium.com/no-way-out-enforced-and-inescapable-organizational-membership-125ae7f52d61?source=rss------bug_bounty-5 | Mo2men Elmady | bug-bounty, hacking, penetration-testing, cybersecurity | 11-Jul-2024 |
| Reconnaissance Basic | https://medium.com/@ronyhassan091101/reconnaissance-basic-bf292dc3b705?source=rss------bug_bounty-5 | M. Mahmudul Hassan | bug-bounty | 11-Jul-2024 |
| Cracking the Code: A Walkthrough of the W1seGuy Room on TryHackMe | https://matsecurity.medium.com/cracking-the-code-a-walkthrough-of-the-w1seguy-room-on-tryhackme-678673298429?source=rss------bug_bounty-5 | MatSec | cybersecurity, bug-bounty, tryhackme-walkthrough, ethical-hacking, cryptography | 11-Jul-2024 |
| Bypass CSRF Protection | https://medium.com/@dr4040x00/bypass-csrf-protection-707b81c04149?source=rss------bug_bounty-5 | Ahmed Mohamed | csrf-attack, xss-vulnerability, bug-bounty, csrf, xss-attack | 11-Jul-2024 |
| Tryhackme W1seGuy Room Walkthrough | MatSec Youtube | https://matsecurity.medium.com/cracking-the-code-a-walkthrough-of-the-w1seguy-room-on-tryhackme-678673298429?source=rss------bug_bounty-5 | MatSec | cybersecurity, bug-bounty, tryhackme-walkthrough, ethical-hacking, cryptography | 11-Jul-2024 |
| Bug Bounty Hunting 101: A Comprehensive Guide for Beginners | https://cyberw1ng.medium.com/bug-bounty-hunting-101-a-comprehensive-guide-for-beginners-41fa78ff0bbd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, cybersecurity, careers | 10-Jul-2024 |
| Magix Bug Bounty: magix.com (RCE, SQLi) and xara.com (LFI, XSS) | https://medium.com/@proseizala/magix-bug-bounty-magix-com-rce-sqli-and-xara-com-lfi-xss-c4e8492bbf3e?source=rss------bug_bounty-5 | Proseizala | bug-bounty-tips, hackerone, cybersecurity, bug-bounty, hacking | 10-Jul-2024 |
| Rate Limit Bypass $150 | https://medium.com/@mr_ayyan/rate-limit-bypass-150-d4fecc05d31b?source=rss------bug_bounty-5 | Mrayyanirfan | rewards, rate-limit, bug-bounty, bugs, hunting | 10-Jul-2024 |
| The most important HTTP security headers | https://medium.com/@ronyhassan091101/the-most-important-http-security-headers-be4238f181d7?source=rss------bug_bounty-5 | M. Mahmudul Hassan | bug-bounty | 10-Jul-2024 |
| Complex Attack Types: Sample Scenarios 39 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-39-5ed408a9075d?source=rss------bug_bounty-5 | Baris Dincer | bug-bounty, information-security, penetration-testing, cybersecurity, freedomofinternet | 10-Jul-2024 |
| Bug Bounty Program for Gluon on Ergo | https://news.stability.nexus/bug-bounty-program-for-gluon-on-ergo-0ca233ce2d9a?source=rss------bug_bounty-5 | Zahnentferner | crypto, cryptocurrency, stable-coin, blockchain, bug-bounty | 10-Jul-2024 |
| Host Header Poisoning Vulnerability: A Critical Web Security Flaw | https://zierax.medium.com/host-header-poisoning-vulnerability-a-critical-web-security-flaw-1c2991177e8c?source=rss------bug_bounty-5 | Zierax | penetration-testing, cybersecurity, bug-bounty, hacking, vulnerability | 10-Jul-2024 |
| The Ultimate Guide to Finding and Escalating XSS Bugs | https://medium.com/@proseizala/the-ultimate-guide-to-finding-and-escalating-xss-bugs-22894ef03fc4?source=rss------bug_bounty-5 | Proseizala | bug-bounty-tips, hacker, cybersecurity, bug-bounty, hacking | 10-Jul-2024 |
| My First Bug Bounty | https://vikasrai11.medium.com/my-first-bug-bounty-975c47b3f5b5?source=rss------bug_bounty-5 | Vikas Rai | ethical-hacking, security, vulnerability, hacking, bug-bounty | 10-Jul-2024 |
| Exploiting IDOR Vulnerability in PostgREST | https://aminudin.medium.com/exploiting-idor-vulnerability-in-postgrest-ba0e980032b7?source=rss------bug_bounty-5 | Aminudin | bugs, bug-bounty-tips, writeup, bug-bounty | 10-Jul-2024 |
| HackerOne 2FA Bypass Vulnerability Exposed! | https://medium.com/@lucas.verdan/hackerone-2fa-bypass-vulnerability-exposed-f41f61d6e7be?source=rss------bug_bounty-5 | Lucas Verdan | cybersecurity, cyber-attack-prevention, hackerone, bug-bounty-tips, bug-bounty | 09-Jul-2024 |
| Detecting and exploiting limit overrun race conditions with Burp Repeater | https://cyberw1ng.medium.com/detecting-and-exploiting-limit-overrun-race-conditions-with-burp-repeater-43c26128642d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, careers, bug-bounty, cybersecurity, hacking | 09-Jul-2024 |
| Airbnb — When Bypassing JSON Encoding, XSS Filter, WAF, CSP, and Auditor turns into Eight… | https://medium.com/@proseizala/airbnb-when-bypassing-json-encoding-xss-filter-waf-csp-and-auditor-turns-into-eight-92a004f1cbe8?source=rss------bug_bounty-5 | Proseizala | hacker, bug-bounty-tips, cybersecurity, bug-bounty | 09-Jul-2024 |
| XSS TÜRLERİ TEST CASE | https://medium.com/@aarda418/xss-t%C3%BCrleri%CC%87-test-case-a4ab5849100f?source=rss------bug_bounty-5 | Arda Aslan | xss-attack, bug-bounty, xss-vulnerability | 09-Jul-2024 |
| Become a Digital Detective: Earn Dollars by Testing Apps and Websites | https://medium.com/@wnaim11/become-a-digital-detective-earn-dollars-by-testing-apps-and-websites-00a45433d3e8?source=rss------bug_bounty-5 | The EmpowHERtech Collective | testing, software-testing, bugs, crowdtesting, bug-bounty | 09-Jul-2024 |
| Complex Attack Types: Sample Scenarios 38 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-38-10e2ee4d4316?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, threat-intelligence, cybersecurity, penetration-testing, bug-bounty | 09-Jul-2024 |
| Nmap Cheat Sheet For Penetration Testing. | https://medium.com/@umarhere4u/nmap-cheat-sheet-for-penetration-testing-70b555b91285?source=rss------bug_bounty-5 | Mohammad Umar Kachi | ethical-hacking, penetration-testing, nmap, hacking, bug-bounty | 09-Jul-2024 |
| Account Takeover via Weak Reset Token Entropy | https://medium.com/@majix_de/account-takeover-via-weak-reset-token-entropy-c475268daae6?source=rss------bug_bounty-5 | Majix | programming, penetration-testing, bugbounty-writeup, bug-bounty, python | 09-Jul-2024 |
| Subdomain Enumeration | https://medium.com/@ronyhassan091101/subdomain-enumeration-4370bac688e1?source=rss------bug_bounty-5 | M. Mahmudul Hassan | bug-bounty | 09-Jul-2024 |
| 10 tips and questions to help you find secondary context bugs — Bug Bounty Tuesday | https://medium.com/@kerstan/10-tips-and-questions-to-help-you-find-secondary-context-bugs-bug-bounty-tuesday-b8b3f9173522?source=rss------bug_bounty-5 | kerstan | hacking, bug-bounty, cybersecurity | 09-Jul-2024 |
| What Is The Attacks On Session Layer! | https://medium.com/@reemmoslem34/what-is-the-attacks-on-session-layer-d3ac90d9c4cb?source=rss------bug_bounty-5 | Rem Khalid | cybersecurity, malware, bug-bounty, programming, security | 09-Jul-2024 |
| What Is The Attacks On Presentation Layer ! | https://medium.com/@reemmoslem34/what-is-the-attacks-on-presentation-layer-d98cbde4005b?source=rss------bug_bounty-5 | Rem Khalid | programming, security, cybersecurity, malware, bug-bounty | 09-Jul-2024 |
| What Is The Attacks On Application Layer! | https://medium.com/@reemmoslem34/%D8%B7%D9%8A%D8%A8-%D8%AA%D8%B9%D8%A7%D9%84%D9%88%D8%A7-%D8%A3%D8%AE%D8%AA%D8%B5%D8%B1-%D8%A7%D9%84%D8%AD%D9%88%D8%A7%D8%B1-6e6617528bba?source=rss------bug_bounty-5 | Rem Khalid | security, bug-bounty, cybersecurity, malware, programming | 09-Jul-2024 |
| Unearthing Hidden Assets: The Power of Active DNS Brute Forcing in Subdomain Discovery | https://bunny0417.medium.com/unearthing-hidden-assets-the-power-of-active-dns-brute-forcing-in-subdomain-discovery-44ec7f1250d4?source=rss------bug_bounty-5 | Aayush kumar | subdomains-enumeration, infosec, dns-brute-forcing, bug-bounty-tips, bug-bounty | 09-Jul-2024 |
| Bypassing Admin Authentication Website Kampus | https://uzet.medium.com/bypassing-admin-authentication-website-kampus-b59bc43b6c98?source=rss------bug_bounty-5 | Timotius Benhur | bug-bounty-tips, penetration-testing, bug-hunting, programming, bug-bounty | 08-Jul-2024 |
| Revolutionizing Content Issue Detection with CiBI: A Game-Changer in Automation | https://argotriwidodo.medium.com/revolutionizing-content-issue-detection-with-cibi-a-game-changer-in-automation-1e0f0b6e8ce9?source=rss------bug_bounty-5 | Argo triwidodo | qa, bug-bounty, ai, automation | 08-Jul-2024 |
| Web3 Development: Key Security Considerations | https://securrtech.medium.com/web3-development-key-security-considerations-5358015e767a?source=rss------bug_bounty-5 | Securr | blockchain, security, securr, web3, bug-bounty | 08-Jul-2024 |
| Discovering a Sigma SQLi Vulnerability in Explore CMS 1.0 | https://soltanali0.medium.com/discovering-a-sigma-sqli-vulnerability-in-explore-cms-1-0-f68599f0e5dd?source=rss------bug_bounty-5 | soltanali0 | sqli, programming, bug-bounty-tips, bug-bounty, hackerone | 08-Jul-2024 |
| PII Disclosure on NASA | https://medium.com/@psychomong/pii-disclosure-on-nasa-667a96d3c31c?source=rss------bug_bounty-5 | psychomong | bugs, sensitive, hacker, bug-bounty, pii | 08-Jul-2024 |
| Last week in tech 4th edition | https://medium.com/@azefox/last-week-in-tech-4th-edition-ec091e853fd3?source=rss------bug_bounty-5 | Azefox | tech, cybersecurity, infosec, cloud, bug-bounty | 08-Jul-2024 |
| Ctrl + U to Bounty: How I Found Sensitive Info in the Source Code | https://rofes1337.medium.com/ctrl-u-to-bounty-how-i-found-sensitive-info-in-the-source-code-e583528ee2fe?source=rss------bug_bounty-5 | Yousef Muhammedelkhir | bug-bounty-writeup, hackerone, bug-bounty, information-disclosure, bugbounty-poc | 08-Jul-2024 |
| Complex Attack Types: Sample Scenarios 37 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-37-2cd4d68b23f6?source=rss------bug_bounty-5 | Baris Dincer | bug-bounty, freedomofinternet, penetration-testing, information-security, cybersecurity | 08-Jul-2024 |
| Burpsuite SQL Injection Lab 4(U | https://medium.com/@paradoxicalThief/burpsuite-sql-injection-lab-4-u-065f1592531f?source=rss------bug_bounty-5 | The Cyber Guy | bug-bounty, ctf, web-security, infosec, ethical-hacking | 08-Jul-2024 |
| Partial construction race conditions | https://cyberw1ng.medium.com/partial-construction-race-conditions-007c478c53af?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, cybersecurity, bug-bounty, hacking, careers | 08-Jul-2024 |
| Disguising Malicious Files to Look Like Normal EXE or PDFs | https://osintteam.blog/disguising-malicious-files-to-look-like-normal-exe-or-pdfs-d785e116e989?source=rss------bug_bounty-5 | Meerabell | hacking, osint-tool, bug-bounty, cybersecurity, microsoft | 08-Jul-2024 |
| IDOR in Multinational Retail Company Leading to Unauthorized Access and Modifications | https://medium.com/@kamalinux/idor-in-multinational-retail-company-leading-to-unauthorized-access-and-modifications-e36f8ea9e859?source=rss------bug_bounty-5 | Kamal | bug-bounty, application-security, cybersecurity, penetration-testing, web-security | 08-Jul-2024 |
| Zero to OSWE: Navigating the Journey with HTB | https://adipsharif.medium.com/zero-to-oswe-navigating-the-journey-with-htb-b1972b99a646?source=rss------bug_bounty-5 | ADIP | bug-bounty, penetration-testing, bug-bounty-tips, infosec-write-ups, infosec | 08-Jul-2024 |
| The world’s most expensive insect… weighs 5 grams and costs 75 lakhs, know why people are crazy… | https://medium.com/@blogy.bub/the-worlds-most-expensive-insect-weighs-5-grams-and-costs-75-lakhs-know-why-people-are-crazy-ce77bc2d8204?source=rss------bug_bounty-5 | Blogy Hub | bug-bounty, health, news, news-articles, bugs | 08-Jul-2024 |
| Find XSS on the Fly ( Full guide ) | https://medium.com/@zack0x01_/find-xss-on-the-fly-full-guide-300f07fb86ae?source=rss------bug_bounty-5 | zack0x01 | hacking, bug-bounty-writeup, bug-bounty-tips, bug-bounty, bugbounty-poc | 08-Jul-2024 |
| Escalating XSS in PhantomJS Image Rendering to SSRF/Local-File Read | https://medium.com/@proseizala/escalating-xss-in-phantomjs-image-rendering-to-ssrf-local-file-read-9e11e94c480a?source=rss------bug_bounty-5 | Proseizala | bug-bounty, bug-bounty-tips, hacking, cybersecurity | 08-Jul-2024 |
| CVE-2024–34750 Apache Tomcat DoS vulnerability in HTTP/2 connector | https://medium.com/@proseizala/cve-2024-34750-apache-tomcat-dos-vulnerability-in-http-2-connector-54033187cd4b?source=rss------bug_bounty-5 | Proseizala | cybersecurity, bugs, hacking, bug-bounty | 08-Jul-2024 |
| I found an email verification bypass | https://medium.com/@pvnk24/i-found-an-email-verification-bypass-982b00864366?source=rss------bug_bounty-5 | Pavan K | ethical-hacking, security, web-security, penetration-testing, bug-bounty | 07-Jul-2024 |
| Demystifying HTTP Parameters for beginners | https://medium.com/@mrunoriginal/demystifying-http-parameters-for-beginners-219d5c65499e?source=rss------bug_bounty-5 | mrunoriginal | information-security, web-application-security, web-application-hacking, bug-bounty, cybersecurity | 07-Jul-2024 |
| Everything About CISM: Your Comprehensive Guide to the Certified Information Security Manager… | https://medium.com/@mazharshadab292/everything-about-cism-your-comprehensive-guide-to-the-certified-information-security-manager-3d57969a066d?source=rss------bug_bounty-5 | Shadab Mazhar | certification, cybersecurity, hacking, bug-bounty | 07-Jul-2024 |
| Practical Bug Bounty — TCM Academy | Module 1 | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-module-1-17dadeda56a0?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | information-security, tcm-security, bug-bounty, cybersecurity, ethical-hacking | 07-Jul-2024 |
| Exposing Sensitive Data: A Journey into CDN Path Traversal Vulnerabilities | https://medium.com/@sulmanfarooq531/exposing-sensitive-data-a-journey-into-cdn-path-traversal-vulnerabilities-fec1c7917a86?source=rss------bug_bounty-5 | Sulman Farooq S | bug-bounty, cybersecurity, hacking, path-traversal, cdn | 07-Jul-2024 |
| Hunting the Hunters: Exposing the Fake SBI YONO APK | https://medium.com/@tirqwork1/hunting-the-hunters-exposing-the-fake-sbi-yono-apk-0dd979aad23f?source=rss------bug_bounty-5 | ARoy | information-security, cybersecurity, bug-bounty, scammer-exposed, info-sec-writeups | 07-Jul-2024 |
| Using ChatGPT for Bug Bounty and finding vulnerabilities | https://medium.com/@siratsami71/using-chatgpt-for-bug-bounty-and-finding-vulnerabilities-4a04de771a68?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | hacker, chatgpt, bug-bounty, cybersecurity | 07-Jul-2024 |
| Cracking the Runner: A Step-by-Step Guide to Hacking a Medium-Level Machine on Hack The Box | https://medium.com/@niranjanshinde2325/cracking-the-runner-a-step-by-step-guide-to-hacking-a-medium-level-machine-on-hack-the-box-ae6f55ca01bd?source=rss------bug_bounty-5 | Niranjan | ethical-hacking, hack-the-box-writeup, bug-bounty, penetration-testing, cybersecurity | 07-Jul-2024 |
| 8.6 Lab: Web shell upload via race condition | https://cyberw1ng.medium.com/8-6-lab-web-shell-upload-via-race-condition-1870707752d3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, bug-bounty, penetration-testing, cybersecurity | 07-Jul-2024 |
| Avoid ‘OR 1=1’ while doing SQL Injection, Why? | https://medium.com/@aaftaba.k47/avoid-or-1-1-while-doing-sql-injection-why-5e7cc0716ef3?source=rss------bug_bounty-5 | Aaftab A. Kadavaikar | cybersecurity-awareness, bug-bounty, sql-injection, web-penetration-testing | 07-Jul-2024 |
| How i got Cross-site Scripting (XSS)Reflected Using an unknown technique | https://medium.com/@0xmekky/how-i-got-cross-site-scripting-xss-reflected-using-an-unknown-technique-ca4984827465?source=rss------bug_bounty-5 | abdelrahem mekky | xss-vulnerability, xss-attack, bug-bounty | 07-Jul-2024 |
| Race Conditions Attacks To limit bypass | https://sharmajijvs.medium.com/race-conditions-attacks-to-limit-bypass-c9dee647145b?source=rss------bug_bounty-5 | Jay Sharma | bug-report, bug-bounty-hunter, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 07-Jul-2024 |
| Complex Attack Types: Sample Scenarios 36 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-36-c648fd8d55bd?source=rss------bug_bounty-5 | Baris Dincer | threat-intelligence, penetration-testing, freedomofinternet, cybersecurity, bug-bounty | 07-Jul-2024 |
| 404 Not Found to Google cloud service account credentials disclosure! | https://kumarmohank889.medium.com/404-not-found-to-google-cloud-service-account-credentials-disclosure-3b5f64e80fd5?source=rss------bug_bounty-5 | Mohan Kumar N | bug-bounty-tips, bug-bounty, infosec-write-ups, hacking, security-research | 07-Jul-2024 |
| Bug Hunter? If only… | https://medium.com/@ded3y3/bug-hunter-if-only-5fabca6cffb7?source=rss------bug_bounty-5 | cr00k3d3y3 | cybersecurity, bug-bounty, life | 07-Jul-2024 |
| Stored XSS in PDF Viewer | https://medium.com/@osamaavvan/stored-xss-in-pdf-viewer-9cc5b955de2b?source=rss------bug_bounty-5 | Osama Avvan | bug-bounty, cybersecurity, pdf, xss-attack | 06-Jul-2024 |
| Understanding and Preventing Server-Side Request Forgery (SSRF) | https://medium.com/@ashhadali2019/understanding-and-preventing-server-side-request-forgery-ssrf-15d939dc9529?source=rss------bug_bounty-5 | Ashhadali | ssrf, bug-bounty, web, cybersecurity | 06-Jul-2024 |
| MerlinChain Partners with BugRap, Launches $200,000 Bug Bounty to Enhance BTC Ecosystem Security | https://medium.com/@BugRap_Team/merlinchain-partners-with-bugrap-launches-200-000-bug-bounty-to-enhance-btc-ecosystem-security-17ef71444914?source=rss------bug_bounty-5 | BugRap Team | crypto, security, web3, btc, bug-bounty | 06-Jul-2024 |
| A Simple 2FA Bypass | https://infosecwriteups.com/a-simple-2fa-bypass-43c8af9006ec?source=rss------bug_bounty-5 | hackerdevil | bug-bounty, hacking, bug-bounty-tips, bug-bounty-writeup, penetration-testing | 06-Jul-2024 |
| Complex Attack Types: Sample Scenarios 35 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-35-bc24cffb5f95?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, cybersecurity, information-technology, bug-bounty, penetration-testing | 06-Jul-2024 |
| From Long-Term Hacking to Instant Rewards: Finding SQLi in 3 Minutes Worth $3125 | https://medium.com/@gguzelkokar.mdbf15/from-long-term-hacking-to-instant-rewards-finding-sqli-in-3-minutes-worth-3125-ac36c6e950bf?source=rss------bug_bounty-5 | Gökhan Güzelkokar | sql, hacking, bug-bounty, hackerone, sql-injection | 06-Jul-2024 |
| $500 for Cracking Invitation Code For Unauthorized Access & Account Takeover | https://medium.com/@a13h1/500-for-cracking-invitation-code-for-unauthorized-access-account-takeover-558c663fb947?source=rss------bug_bounty-5 | Abhi Sharma | rate-limiting, bug-bounty, account-takeover, base64, cybersecurity | 06-Jul-2024 |
| Rate Limit Bypass Due to Cryptographic Weakness | https://javroot.medium.com/rate-limit-bypass-due-to-cryptographic-weakness-2cdb3a112bba?source=rss------bug_bounty-5 | Javroot | security-token, bug-bounty, web, cryptography, research | 06-Jul-2024 |
| Exploiting flawed validation of file uploads | https://cyberw1ng.medium.com/exploiting-flawed-validation-of-file-uploads-8a089992e3a1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, careers, cybersecurity, penetration-testing | 06-Jul-2024 |
| Identifying, ChronosCodeFail, a Critical Bug in the Dayforce Clock System | https://medium.com/@quantumsquint/identifying-chronoscodefail-a-critical-bug-in-the-dayforce-clock-system-58cb98c00d32?source=rss------bug_bounty-5 | Quantum Squint Research Dept. | developer-tools, penetration-testing, bug-bounty, regression-analysis, cybersecurity | 06-Jul-2024 |
| Penjelasan Wifi Deauth Attack dan Demonstrasinya | https://hack4funacademy.medium.com/penjelasan-wifi-deauth-attack-dan-demonstrasinya-1cecaca53915?source=rss------bug_bounty-5 | Hack4Fun Academy | ethical-hacking, wifi, cybersecurity, hacking, bug-bounty | 05-Jul-2024 |
| BountyDork: Your Ultimate Automatic Dorking Testing Companion For Bug Bounty | https://infosecwriteups.com/bountydork-your-ultimate-automatic-dorking-testing-companion-for-bug-bounty-b2bd41cb7344?source=rss------bug_bounty-5 | ElNiak | google-dork, python, bug-bounty, cybersecurity, technology | 05-Jul-2024 |
| How to Install Bwapp in Virtualbox | https://medium.com/@bhardwajshekhar/how-to-install-bwapp-in-virtualbox-6bf7f1ba9a0f?source=rss------bug_bounty-5 | Shekhar Bhardwaj | owasp-top-10, bwapp, pentesting, bug-bounty | 05-Jul-2024 |
| How I Found Critical Bugs :: SQL Injection → Compromised 10+ Govt. website’s Whole Databases !! | https://medium.com/@p.ra.dee.p_0xx01/how-i-found-critical-bugs-sql-injection-compromised-10-govt-websites-whole-databases-ad55899ff5db?source=rss------bug_bounty-5 | Professor0xx01 | cybersecurity, bug-bounty, offensive-security, penetration-testing, vdp | 05-Jul-2024 |
| How to Find Subdomains Using Various Tools and Methods | https://medium.com/@j0k3r01/how-to-find-subdomains-using-various-tools-and-methods-583a7311c897?source=rss------bug_bounty-5 | J0k3R | subdomains-enumeration, recon, penetration-testing, bug-bounty, osint | 05-Jul-2024 |
| Complex Attack Types: Sample Scenarios 34 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-34-48d60e2bb0fb?source=rss------bug_bounty-5 | Baris Dincer | threat-intelligence, penetration-testing, bug-bounty, cybersecurity, freedomofinternet | 05-Jul-2024 |
| Everything About OSCP: A Comprehensive Guide | https://medium.com/@mazharshadab292/everything-about-oscp-a-comprehensive-guide-36794d325e67?source=rss------bug_bounty-5 | Shadab Mazhar | hacking, bug-bounty, certification, programming | 05-Jul-2024 |
| Penggunaan Tools Steghide, ExifTool dan Uji Coba Automation Scanner Bug Bounty (Dalfox) | https://medium.com/@anggitaniaaurien/penggunaan-tools-steghide-exiftool-dan-uji-coba-automation-scanner-bug-bounty-dalfox-4fbe93e83eb3?source=rss------bug_bounty-5 | Anggitania Aurien | bug-bounty, exiftool, xs, steghide, kxss | 05-Jul-2024 |
| The PDF Trojan Horse: Leveraging HTML Injection for SSRF and Internal Resource Access | https://uchihamrx.medium.com/the-pdf-trojan-horse-leveraging-html-injection-for-ssrf-and-internal-resource-access-fbf69efcb33d?source=rss------bug_bounty-5 | Abdelrhman Amin | cybersecurity, web-penetration-testing, penetration-testing, bug-bounty, bug-bounty-tips | 05-Jul-2024 |
| Unlocking the Power of Nmap: Your Ultimate Guide to Network Scanning | https://medium.com/@josuofficial327/unlocking-the-power-of-nmap-your-ultimate-guide-to-network-scanning-3cb66fe66d75?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | hacking, cybersecurity, bug-bounty, penetration-testing, linux | 05-Jul-2024 |
| 2.14 Lab: 2FA bypass using a brute-force attack | https://cyberw1ng.medium.com/2-14-lab-2fa-bypass-using-a-brute-force-attack-ad74afd23fcd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, penetration-testing, hacking | 05-Jul-2024 |
| A Big Gmail Flaw: Sending Hidden Viruses in Gmail. | https://medium.com/@azanulrana/a-big-gmail-flaw-sending-hidden-viruses-in-gmail-09b52dd891e9?source=rss------bug_bounty-5 | 0xazanul | infosec-write-ups, infosec, hackerone, bug-bounty | 05-Jul-2024 |
| How I Found Critical Bugs :: SQL Injection → Compromised 10+ Govt. website’s Whole Databases !! | https://medium.com/@p.ra.dee.p_0xx01/how-i-found-critical-bugs-sql-injection-compromised-10-govt-websites-whole-databases-ad55899ff5db?source=rss------bug_bounty-5 | Professor.0xx01 | cybersecurity, bug-bounty, offensive-security, penetration-testing, vdp | 05-Jul-2024 |
| How to Use Google Dorks to Access Online Cameras | https://medium.com/@mirabelle.dib/how-to-use-google-dorks-to-access-online-cameras-251e83106f6b?source=rss------bug_bounty-5 | Meerabell | information-security, cybersecurity, bug-bounty, hacking, google-dork | 05-Jul-2024 |
| Nuclei Kullanımı | https://medium.com/@sabriacun552/nuclei-kullan%C4%B1m%C4%B1-7038742dc53e?source=rss------bug_bounty-5 | Sabriacun | vulnerability-scanning, cybersecurity, bug-bounty, penetration-testing | 05-Jul-2024 |
| SSRF Vulnerability in HiTranslate: A Technical Breakdown | https://medium.com/@security.tecno/ssrf-vulnerability-in-hitranslate-a-technical-breakdown-a5f517467a5b?source=rss------bug_bounty-5 | TECNO Security | hacking, security, bug-bounty, apps | 04-Jul-2024 |
| Mastering Bug Bounty with Professor: Strategies for Success | https://bughuntar.medium.com/mastering-bug-bounty-with-professor-strategies-for-success-436fac3c7e28?source=rss------bug_bounty-5 | Professor the Hunter | cybersecurity, professorthehunter, bug-bounty, bug-bounty-tips, bughuntar | 04-Jul-2024 |
| Google launches $250,000 bug bounty, this time targeting KVM, a virtual machine element | https://medium.com/@tothe21century/google-launches-250-000-bug-bounty-this-time-targeting-kvm-a-virtual-machine-element-d73cfbd63243?source=rss------bug_bounty-5 | RICH CHOI | bug-bounty | 04-Jul-2024 |
| How I Found an IDOR Vulnerability in a Public Program on HackerOne | https://medium.com/@muhammadfurqanoffical/how-i-found-an-idor-vulnerability-in-a-public-program-on-hackerone-44c6724b0292?source=rss------bug_bounty-5 | Muhammad Furqan | bug-bounty-writeup, infosec-write-ups, bug-bounty, idor, hackerone | 04-Jul-2024 |
| Apa itu XSS dan Bagaimana cara saya menemukan puluhan XSS Vulnerability | https://hack4funacademy.medium.com/apa-itu-xss-dan-bagaimana-cara-saya-menemukan-puluhan-xss-vulnerability-46fba9491bba?source=rss------bug_bounty-5 | Hack4Fun Academy | vulnerability, xss-attack, hacking, cybersecurity, bug-bounty | 04-Jul-2024 |
| Understanding Request Smuggling: A Hidden Web Vulnerability (K-Edition) | https://medium.com/@friendly_/understanding-request-smuggling-a-hidden-web-vulnerability-k-edition-6ffab38d5aa1?source=rss------bug_bounty-5 | Friendly | hacking, bug-bounty, bugbounty-writeup, bug-bounty-tips | 04-Jul-2024 |
| How I Used Keylogger XSS to Capture Credentials Leading to ATO | https://medium.com/@yyaminn/how-i-used-keylogger-xss-to-capture-credentials-leading-to-ato-06593e7a0798?source=rss------bug_bounty-5 | yyaminn | cybersecurity, bug-bounty, xss-attack, bugbounty-writeup, infosec | 04-Jul-2024 |
| HACKBAR: A BROWSER EXTENSION FOR WEB SECURITY TESTING | https://medium.com/@Progsky/hackbar-a-browser-extension-for-web-security-testing-461b97d1a9e9?source=rss------bug_bounty-5 | Progsky | hacking, bug-bounty, pentesting, penetration-testing, web-security | 04-Jul-2024 |
| How I earned $500 bounty for privilege escalation vulnerability !! | https://kumarmohank889.medium.com/how-i-earned-500-bounty-for-privilege-escalation-vulnerability-c42977abcc52?source=rss------bug_bounty-5 | Mohan Kumar N | hacking, bug-bounty, security, bug-bounty-tips, security-research | 04-Jul-2024 |
| 2.13 Lab: Broken brute-force protection, multiple credentials per request | https://cyberw1ng.medium.com/2-13-lab-broken-brute-force-protection-multiple-credentials-per-request-1beb6a85b12c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, hacking, bug-bounty, penetration-testing | 04-Jul-2024 |
| Tools For Beginner Bug Hunter, Penetration Tester or Web Security Engineer | https://medium.com/@a5adujjaman/tools-for-beginner-bug-hunter-penetration-tester-or-web-security-engineer-a5510748fc5a?source=rss------bug_bounty-5 | Asadujjaman Asif | web-security, penetration-testing, security, bug-bounty, hacking | 04-Jul-2024 |
| 0 star rating got me 40 EUR. MY first bug I got paid for. | https://medium.com/@siyamhassan.main/0-star-rating-got-me-40-eur-my-first-bug-i-got-paid-for-18417f76a707?source=rss------bug_bounty-5 | 2004siyam_hassan | bug-bounty, bunty | 04-Jul-2024 |
| IDOR to change other’s Account Name | https://codingninjablogs.tech/idor-to-change-others-account-name-43ddf7cfe429?source=rss------bug_bounty-5 | #$ubh@nk@r | idor, hacking, bug-bounty, infosec, web-security | 04-Jul-2024 |
| The Problem With Bug Bounties | https://kf106.medium.com/the-problem-with-bug-bounties-0c5d956411d8?source=rss------bug_bounty-5 | Keir Finlow-Bates | bug-bounty, bug-bounty-program, hacking, computer-security, cryptocurrency | 04-Jul-2024 |
| Mass Hunting XSS vulnerabilities | https://systemweakness.com/mass-hunting-xss-vulnerabilities-8d4785968727?source=rss------bug_bounty-5 | Imran Niaz | cross-site-scripting, bug-bounty-hunter, bug-bounty, bug-bounty-tips, xss-vulnerability | 04-Jul-2024 |
| 0 star rating got me 40 EUR. MY first bug I got paid for. | https://medium.com/@siyamhassan.main/0-star-rating-got-me-40-eur-my-first-bug-i-got-paid-for-18417f76a707?source=rss------bug_bounty-5 | Clasher | bug-bounty, bunty | 04-Jul-2024 |
| IDOR vulnerability allow attacker to make a checkout order on behalf of other users | https://medium.com/@omarataallah98/idor-vulnerability-allow-attacker-to-make-an-order-checkout-on-behalf-other-users-accounts-2bdc4c7b8eca?source=rss------bug_bounty-5 | Omarataallah | security-testing, hacking, bug-bounty, hacks, idor-vulnerability | 03-Jul-2024 |
| How to find wildcard bug bounty assets owned by a company. | https://medium.com/@tom.sh/how-to-find-wildcard-bug-bounty-assets-owned-by-a-company-991db585a554?source=rss------bug_bounty-5 | Tom | bug-bounty, recon, reconnaissance, cybersecurity, hacking | 03-Jul-2024 |
| 26.1 Lab: Exploiting LLM APIs with excessive agency | https://cyberw1ng.medium.com/26-1-lab-exploiting-llm-apis-with-excessive-agency-bb94aa506893?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, hacking, cybersecurity, penetration-testing | 03-Jul-2024 |
| Complex Attack Types: Sample Scenarios 32 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-32-7c47b8e5d139?source=rss------bug_bounty-5 | Baris Dincer | cybersecurity, bug-bounty, threat-intelligence, penetration-testing, freedomofinternet | 03-Jul-2024 |
| Mobile App Testing with Android Studio & Frida | https://medium.com/@jaylinscorner/mobile-app-testing-with-android-studio-frida-b65484121ba6?source=rss------bug_bounty-5 | Jaylin Nelson | bug-bounty, penetration-testing, cybersecurity, mobile-app-testing, frida | 03-Jul-2024 |
| Blind OS Command Injection with time delays from Theory to Practical POC | https://medium.com/@dhruvsingh0203/hola-hackers-im-dhruv-singh-a-cybersecurity-enthusiast-passionate-about-exploring-the-depths-834a9d140115?source=rss------bug_bounty-5 | Dhruv Singh | ethical-hacking, command-injection, bug-bounty, hacking | 03-Jul-2024 |
| IDOR vulnerability allow attacker to make a checkout order on behalf of other users | https://medium.com/@Bug_Bounty/idor-vulnerability-allow-attacker-to-make-a-checkout-order-on-behalf-of-other-users-397b16ece8fc?source=rss------bug_bounty-5 | Bug Bounty | bug-bounty, bountytips, togetherwehitharder, idor | 03-Jul-2024 |
| Meta MFA bypass security bug was turned down, calling it a feature! What do you think? | https://medium.com/@kannnannmk/meta-mfa-bypass-security-bug-was-turned-down-calling-it-a-feature-what-do-you-think-9663e7c5a65e?source=rss------bug_bounty-5 | Neelamegha Kannan S | bug-bounty-tips, bug-bounty, cybersecurity, penetration-testing, meta | 03-Jul-2024 |
| Aylık Özet Haziran 2024: Incognitee Hata Ödülü Lansmanı, Polkadot Hazine Teklifi ve Daha Fazlası | https://medium.com/@integriteetr/ayl%C4%B1k-%C3%B6zet-haziran-2024-incognitee-hata-%C3%B6d%C3%BCl%C3%BC-lansman%C4%B1-polkadot-hazine-teklifi-ve-daha-fazlas%C4%B1-22beabdf77aa?source=rss------bug_bounty-5 | Integriteetr | integritee, bug-bounty, blockchain, polkadot, wrap-up | 03-Jul-2024 |
| PortSwigger LABs- SQL Injection | https://medium.com/@1dnz/lab-sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data-ec0d03f83574?source=rss------bug_bounty-5 | H-ACK-ing | hacks, portswigger-lab, bug-bounty, hacking | 03-Jul-2024 |
| A story of a nice SSRF vulnerability. | https://medium.com/@oXnoOneXo/a-story-of-a-nice-ssrf-vulnerability-51e16ff6a33f?source=rss------bug_bounty-5 | oXnoOneXo | hackerone, bug-bounty, ssrf | 03-Jul-2024 |
| #IBRAHIMXSS TOOL RELEASE | https://ibrahimxss.medium.com/ibrahimxss-tool-release-97ba90fc3419?source=rss------bug_bounty-5 | #IbrahimXSS | xss-challenge, xss-bypass, xss-attack, xss-vulnerability, bug-bounty | 03-Jul-2024 |
| How I Discovered Authentication Bypass That Blocks Users from Accessing the Website ? | https://sayedv2.medium.com/how-i-discovered-authentication-bypass-that-blocks-users-from-accessing-the-website-93140fa180ac?source=rss------bug_bounty-5 | Mohamed Sayed | bug-bounty-writeup, bug-bounty-tips, hackerone, authentication, bug-bounty | 03-Jul-2024 |
| Bypassing Input Validation $0 - $1000 | https://medium.com/@mdnafeed3/bypassing-input-validation-0-1000-799682d547ba?source=rss------bug_bounty-5 | H4cker-Nafeed | technology, infosec, cybersecurity, bug-bounty | 02-Jul-2024 |
| Understanding Admin Login Bypass: A Critical Security Discussion | https://farrosfr.medium.com/understanding-admin-login-bypass-a-critical-security-discussion-2641e54e60fd?source=rss------bug_bounty-5 | Mochammad Farros Fatchur Roji | php, programming, bug-bounty, web, cybersecurity | 02-Jul-2024 |
| Do Hackers Really Need Coding Skills? Let’s Understand . . . | https://d3athcod3.medium.com/do-hackers-really-need-coding-skills-lets-understand-51e60e16c978?source=rss------bug_bounty-5 | D3athCod3 | technology, hacking, cybersecurity, bug-bounty, computer-science | 02-Jul-2024 |
| 18.4 Lab: Arbitrary object injection in PHP | https://cyberw1ng.medium.com/18-4-lab-arbitrary-object-injection-in-php-30a164de4595?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, careers, hacking, cybersecurity | 02-Jul-2024 |
| Secret phishing bug google dont want you to know | https://medium.com/@eyaalgabay/secret-phishing-bug-google-dont-want-you-to-know-4d6d7616fa3f?source=rss------bug_bounty-5 | Eyaalgabay | web-hacking, bug-bounty, hacking, cybersecurity, unicode | 02-Jul-2024 |
| LendingOwl introduces Bug Bounty Program. | https://medium.com/@valeriecameron70/lendingowl-introduces-bug-bounty-program-739910791826?source=rss------bug_bounty-5 | Valerie Cameron | lending, fintech, p2p, bug-bounty, news-articles | 02-Jul-2024 |
| How I found IDOR in NASA | https://infosecwriteups.com/how-i-found-idor-in-nasa-4186a03455b4?source=rss------bug_bounty-5 | Eslam Omar | hacking, bug-bounty, bug-bounty-tips, nasa | 02-Jul-2024 |
| AT&T Bug Bounty Program Scope | https://medium.com/@imusabkhan/at-t-bug-bounty-program-scope-ae256fbf1bf9?source=rss------bug_bounty-5 | Mohammad Musab Khan | bug-bounty, ethical-hacking, att, writeup, hackerone | 02-Jul-2024 |
| Monthly Wrap-Up June 2024: Incognitee Bug Bounty Launch, Polkadot Treasury Proposal & More | https://medium.com/integritee/monthly-wrap-up-june-2024-incognitee-bug-bounty-launch-polkadot-treasury-proposal-more-c3623df413d4?source=rss------bug_bounty-5 | Integritee Network | bug-bounty, integritee, polkadot, wrap-up, blockchain | 02-Jul-2024 |
| How to Find Your First CVE: A Guide for Aspiring Security Researchers | https://medium.com/@khammassilouay21/how-to-find-your-first-cve-a-guide-for-aspiring-security-researchers-c1e5eb9e819a?source=rss------bug_bounty-5 | Khammassilouay | cve, web-security, bug-bounty, cybersecurity | 02-Jul-2024 |
| Self XSS + Login CSRF + OAuth = Account Takeover | https://medium.com/@l_s_/self-xss-login-csrf-oauth-account-takeover-6357f3395b49?source=rss------bug_bounty-5 | LS | bug-bounty, xss-attack, oauth, csrf, hacking | 02-Jul-2024 |
| INFORMATION DISCLOSURE THROUGH AN ORGANIZATION’S NETWORK | https://hackhive.medium.com/information-disclosure-through-an-organizations-network-1f4e0bac1c55?source=rss------bug_bounty-5 | HackHive | bug-bounty, pentesting, vulnerability-assessment, information-security, information-disclosure | 02-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-33) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-33-31e20416b7aa?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | skills, cybersecurity, hacking, ethical-hacking, bug-bounty | 02-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-32) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-32-044ea32fd931?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, hacking, skills, cybersecurity, bug-bounty | 02-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-31) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-31-401155afb539?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, skills, hacking, bug-bounty, ethical-hacking | 02-Jul-2024 |
| File upload to RCE — Bug Bounty Tuesday | https://medium.com/@kerstan/file-upload-to-rce-bug-bounty-tuesday-f8dda0ed4077?source=rss------bug_bounty-5 | kerstan | hacking, cybersecurity, bug-bounty | 02-Jul-2024 |
| The Dark Side of Contact Forms: How I Identified 7 CVEs in WordPress Plugins | https://dropn0w.medium.com/the-dark-side-of-contact-forms-how-i-identified-7-cves-in-wordpress-plugins-30f6111dfebf?source=rss------bug_bounty-5 | drop | bug-bounty, hacking, information-security, wordpress, cybersecurity | 02-Jul-2024 |
| How to Find Your First CVE: A Guide for Aspiring Security Researchers | https://systemweakness.com/how-to-find-your-first-cve-a-guide-for-aspiring-security-researchers-c1e5eb9e819a?source=rss------bug_bounty-5 | Khammassilouay | cve, web-security, bug-bounty, cybersecurity | 02-Jul-2024 |
| How to Use Google Dorks to Find Vulnerabilities | https://medium.com/@meerabell/how-to-use-google-dorks-to-find-vulnerabilities-da782f05826e?source=rss------bug_bounty-5 | Meerabell | hacking, information-security, bug-bounty, google-dork, cybersecurity | 02-Jul-2024 |
| Exploiting Response Manipulation for Account Takeover | https://medium.com/@sdarmwal17/exploiting-response-manipulation-for-account-takeover-b19ce1494109?source=rss------bug_bounty-5 | Shubham Darmwal | otp-bypass, cybersecurity, account-takeover, bug-bounty, response-manipulation | 02-Jul-2024 |
| Complex Attack Types: Sample Scenarios 31 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-31-b4f0ee2f90ac?source=rss------bug_bounty-5 | Baris Dincer | bug-bounty, cybersecurity, active-directory, penetration-testing, freedomofinternet | 02-Jul-2024 |
| How to Use Google Dorks to Find Vulnerabilities | https://medium.com/@mirabelle.dib/how-to-use-google-dorks-to-find-vulnerabilities-da782f05826e?source=rss------bug_bounty-5 | Meerabell | hacking, information-security, bug-bounty, google-dork, cybersecurity | 02-Jul-2024 |
| Effective XSS methodology : The true way to hunt XSS | https://xdead4f.medium.com/effective-xss-methodology-the-true-way-to-hunt-xss-4f4d740035cc?source=rss------bug_bounty-5 | 0xdead4f | xss-attack, bug-hunting, bug-bounty, cybersecurity | 01-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-29) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-29-d5e656812d96?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, cybersecurity, bug-bounty, hacking, skills | 01-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-28) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-28-ae3cb3e93960?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | skills, bug-bounty, cyber-security-awareness, ethical-hacking, hacking | 01-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-27) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-27-f5c03938d8fb?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cyber-security-awareness, ethical-hacking, hacking, bug-bounty-tips | 01-Jul-2024 |
| Understanding and Mitigating Smart Contract Vulnerabilities | https://securrtech.medium.com/understanding-and-mitigating-smart-contract-vulnerabilities-291b7fe168f2?source=rss------bug_bounty-5 | Securr | vulnerability, bug-bounty, cybersecurity, securr, smart-contracts | 01-Jul-2024 |
| 18.3 Using application functionality to exploit insecure deserialization | https://cyberw1ng.medium.com/18-3-using-application-functionality-to-exploit-insecure-deserialization-d6f18fe4811c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, hacking, penetration-testing, bug-bounty, careers | 01-Jul-2024 |
| Phishing or What?? How I Got Access to the Internal Email of a Company | https://infosecwriteups.com/phishing-or-what-how-i-got-access-to-the-internal-email-of-a-company-a098fb08728?source=rss------bug_bounty-5 | whit3ros3 | infosec, ethical-hacking, hacking, bug-bounty, bug-bounty-tips | 01-Jul-2024 |
| Bug Bounty Hunting — Complete Guide (Part-30) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-30-e3519045da6d?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, skills, cybersecurity, bug-bounty, hacking | 01-Jul-2024 |
| Unmasking the Danger: Open Redirection via Referer Header | https://medium.com/@sulmanfarooq531/unmasking-the-danger-open-redirection-via-referer-header-a527ab4e7be1?source=rss------bug_bounty-5 | Sulman Farooq S | cybersecurity, bug-bounty, hacking, open-redirect | 01-Jul-2024 |
| How I Found CVE-2019-9826 on one of famous crypto company. $$$$ | https://medium.com/@a7madhacck/how-i-found-cve-2019-9826-on-one-of-famous-crypto-company-f23d9ba69861?source=rss------bug_bounty-5 | Ahmad Yussef | bug-bounty-writeup, cybersecurity, bug-bounty-tips, hacking, bug-bounty | 01-Jul-2024 |
| 3 Easy cash via cache | https://medium.com/@mohamed0xmuslim/3-easy-cash-via-cache-99d600565ac5?source=rss------bug_bounty-5 | Muhammad_Mostafa | bug-bounty | 01-Jul-2024 |
| Story of a 1000$ Open Redirect | https://infosecwriteups.com/story-of-a-1000-open-redirect-1405fb8a0e7a?source=rss------bug_bounty-5 | Debangshu Kundu | cybersecurity, medium, bug-bounty, hacking, technology | 01-Jul-2024 |
| Hacking Hidden Gems: Content Discovery with Webseek | https://medium.com/@hackertam1/hacking-hidden-gems-content-discovery-with-webseek-cf5a00c97d72?source=rss------bug_bounty-5 | Tahir Mujawar | cybersecurity, bug-bounty, recon, ethical-hacking, penetration-testing | 01-Jul-2024 |
| How I found Bug on NASA | https://medium.com/@psychomong/how-i-found-bug-on-nasa-b2408e14aa17?source=rss------bug_bounty-5 | psychomong | bug-bounty, real-world-bug-hunting, nasa, hacking, hacker | 01-Jul-2024 |
| My 60 Days Journey To Find My First Bug | https://medium.com/@binarysleuth247/my-60-days-journey-to-find-my-first-bug-59a2e676fda8?source=rss------bug_bounty-5 | binarysleuth247 | bug-bounty | 01-Jul-2024 |
| VPS -Virtual Private Server- | https://medium.com/@haticezkmnl/vps-virtual-private-server-f37ffab2f3f1?source=rss------bug_bounty-5 | Hatice Zehra Kamanlı | servers, website, bug-bounty, public, vps | 01-Jul-2024 |
| THM — Blog walkthrough | https://medium.com/@riickyrick/thm-blog-walkthrough-21f2844eafda?source=rss------bug_bounty-5 | Riicky | thm, bug-bounty, metasploit, wordpress, writeup | 01-Jul-2024 |
| Mengumpulkan javascript file pada suatu websites untuk menemukan information disclosure | https://hack4funacademy.medium.com/mengumpulkan-javascript-file-pada-suatu-websites-untuk-menemukan-information-disclosure-8126fcccd77d?source=rss------bug_bounty-5 | Hack4Fun Academy | pentesting, cybersecurity, bug-bounty, bug-bounty-tips, hacking | 30-Jun-2024 |
| XSS Deep Learning and Test Case Preparation | https://medium.com/@barsavak/xss-deep-learning-and-test-case-preparation-3f796a7ad5ed?source=rss------bug_bounty-5 | bariss30 | bug-bounty-tips, bug-bounty, xss-vulnerability | 30-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-26) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-26-49760a380496?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bug-bounty-program, bug-bounty | 30-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-25) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-25-25328dcc629f?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-hunter, bug-bounty-writeup, bug-bounty-program, bug-bounty, bug-bounty-tips | 30-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-24) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-24-17e137c514ed?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-hunter, bug-bounty-program, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 30-Jun-2024 |
| The Only Methodology you need to Know to earn $$$$ in Bug Bounty in your First Day | https://xdead4f.medium.com/the-only-methodology-you-need-to-know-to-earn-in-bug-bounty-in-your-first-day-e8a361c89eb5?source=rss------bug_bounty-5 | 0xdead4f | bug-bounty, side-hustle, bug-bounty-methodology | 30-Jun-2024 |
| Guide to Using ffuf | https://medium.com/@learntheshell/guide-to-using-ffuf-74824770076b?source=rss------bug_bounty-5 | LearnTheShell | bug-bounty, cybersecurity, fuzzing, hacking, linux | 30-Jun-2024 |
| Bug Report from Product Testing https://hng.tech/ | https://medium.com/@teslimahsalahudeen/bug-report-from-product-testing-https-hng-tech-98e290fe3c0e?source=rss------bug_bounty-5 | CyberGoodness^ | product-testing, bug-bounty, security | 30-Jun-2024 |
| XSS TEST CASE TASK | https://medium.com/@avar.talha08/xss-test-case-task-7a4bfd5b223a?source=rss------bug_bounty-5 | Talha Acar | bug-bounty-writeup, bug-bounty, php | 30-Jun-2024 |
| Cisco Finesse Remote File Inclusion (CVE-2024–20405) | https://0x3zzat.medium.com/cisco-finesse-remote-file-inclusion-cve-2024-20405-7947c3327e0c?source=rss------bug_bounty-5 | Abd El Rahman Ezzat | cve, penetration-testing, bug-bounty, cve-2024-20405, cisco | 30-Jun-2024 |
| Cisco Finesse Server Side Request Forgery (CVE-2024–20404) | https://0x3zzat.medium.com/cisco-finesse-server-side-request-forgery-cve-2024-20404-5d74b449a4a2?source=rss------bug_bounty-5 | Abd El Rahman Ezzat | cve-2024-20404, penetration-testing, cve, cisco, bug-bounty | 30-Jun-2024 |
| 18.2 Modifying Serialized Data Types | https://cyberw1ng.medium.com/18-2-modifying-serialized-data-types-726426fb3350?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, cybersecurity, bug-bounty, penetration-testing | 30-Jun-2024 |
| XSS 101: XSS Nedir ? | https://medium.com/@kormorphus/xss-101-xss-nedir-15b04f7e4269?source=rss------bug_bounty-5 | Kormorphus | bug-bounty, cybersecurity, xss-attack | 30-Jun-2024 |
| How to use Cheat Engine on Opera Gx | https://medium.com/@MrRipperoni/how-to-use-cheat-engine-on-opera-gx-ea6b121f0301?source=rss------bug_bounty-5 | Mr.Ripperoni | programming, bug-bounty, hacking, gamehacking, hacking-tools | 30-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-23) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-23-9f3497d279f1?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, bug-bounty-writeup, bug-bounty-hunter, bug-bounty-program, bug-bounty | 29-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-22) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-22-8edd54306b83?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, bug-bounty-program, bug-bounty-hunter, bug-bounty-writeup, bug-bounty | 29-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-21) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-21-e008298773da?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-writeup, bug-bounty-hunter, bug-bounty, bug-bounty-tips, bug-bounty-program | 29-Jun-2024 |
| XSS TEST CASE | https://medium.com/@aarda418/xss-test-case-6158aad30604?source=rss------bug_bounty-5 | Arda Aslan | bug-bounty-tips, xss-vulnerability, bug-bounty | 29-Jun-2024 |
| 14.9 Lab: CSRF where token is tied to non-session cookie | https://cyberw1ng.medium.com/14-9-lab-csrf-where-token-is-tied-to-non-session-cookie-926338db4ba7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, careers, hacking, cybersecurity, bug-bounty | 29-Jun-2024 |
| Using AI to hunt for XSS. | https://medium.com/@deadoverflow/using-ai-to-hunt-for-xss-e04ba8d32ba8?source=rss------bug_bounty-5 | Imad Husanovic | cybersecurity, ethical-hacking, bug-bounty-tips, bug-bounty, hacking | 29-Jun-2024 |
| XSS TEST CASE | https://medium.com/@mehmetfarisacar/xss-test-case-199e0bec59a6?source=rss------bug_bounty-5 | Mehmet Faris Acar | bug-bounty, xss-vulnerability, bug-bounty-tips | 29-Jun-2024 |
| LEARNING PROCESS module from HTB بالعربي | https://medium.com/@am3002297/learning-process-module-from-htb-%D8%A8%D8%A7%D9%84%D8%B9%D8%B1%D8%A8%D9%8A-37675b8144b0?source=rss------bug_bounty-5 | 30obd | cybersecurity, bug-bounty | 29-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-19) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-19-7dfd1bd2d1ba?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bug-bounty, bug-bounty-program | 28-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-18) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-18-5179747f60c3?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, bug-bounty, bug-bounty-writeup, bug-bounty-hunter, bug-bounty-program | 28-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-20) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-20-a60e30106e0c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-program, bug-bounty-writeup, bug-bounty-hunter, bug-bounty, bug-bounty-tips | 28-Jun-2024 |
| Race Condition Vulnerability to bypass email confirmation | https://medium.com/@siratsami71/race-condition-vulnerability-to-bypass-email-confirmation-2af8d916fe61?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | hacking, bug-bounty, cybersecurity | 28-Jun-2024 |
| XSS Zafiyeti Hakkında: | https://medium.com/@hhuseyinuyar17/xss-zafiyeti-hakk%C4%B1nda-98b5849d4700?source=rss------bug_bounty-5 | Hhuseyinuyar | reflected-xss, xss-attack, dom-xss, stored-xss, bug-bounty | 28-Jun-2024 |
| An Easy RACE CONDITION Bug That Made Me Fame | https://medium.com/@hashimamin/an-easy-race-condition-bug-that-made-me-fame-97d6921ae7f4?source=rss------bug_bounty-5 | Hashim Amin | vulnerability, race-condition, infosec, bugbounty-writeup, bug-bounty | 28-Jun-2024 |
| Why is programming so important in bug bounty? | https://medium.com/@deadoverflow/why-is-programming-so-important-in-bug-bounty-b7d7889ae026?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty-tips, cybersecurity, programming, bug-bounty, hacking | 28-Jun-2024 |
| HTML Injection — HTB lab | https://zhunter12.medium.com/html-injection-htb-lab-cd7bdcd8fd93?source=rss------bug_bounty-5 | Oscar Romero | htb-academy, htb, html-injection, cybersecurity, bug-bounty | 28-Jun-2024 |
| 14.8 Lab: CSRF where token is duplicated in cookie | https://cyberw1ng.medium.com/14-8-lab-csrf-where-token-is-duplicated-in-cookie-d688fd0ac2ac?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, cybersecurity, bug-bounty, careers | 28-Jun-2024 |
| 0-click Account Takeover (ATO) via Google Authentication | https://medium.com/@elcapitano7x/0-click-account-takeover-ato-via-google-authentication-b63a01a80a03?source=rss------bug_bounty-5 | Elcapitano | bug-bounty-tips, hackerone, bug-bounty-writeup, account-takeover, bug-bounty | 28-Jun-2024 |
| [Bounty Weekend] Phone Verification Bypass With Business Logic Vulnerability | https://medium.com/@rifqihz/bounty-weekend-phone-verification-bypass-with-business-logic-vulnerability-1b2844b93d5a?source=rss------bug_bounty-5 | Rifqi Hilmy Zhafrant | hackerone, writeup, bug-bounty | 28-Jun-2024 |
| Writeup: Discovering and Exploiting XSS Vulnerabilities — My First Bug Hunting Reward | https://medium.com/@heyrm/writeup-discovering-and-exploiting-xss-vulnerabilities-my-first-bug-hunting-reward-0dfb0ebfd6aa?source=rss------bug_bounty-5 | heyrm | bug-bounty-writeup, cybersecurity, bug-bounty, xss-attack, bug-hunting | 27-Jun-2024 |
| Writeup: Menemukan dan Mengeksploitasi Kerentanan XSS — Reward Bug Hunting Pertamaku | https://medium.com/@heyrm/writeup-menemukan-dan-mengeksploitasi-kerentanan-xss-reward-bug-hunting-pertamaku-cbf76c9eaf65?source=rss------bug_bounty-5 | heyrm | xss-vulnerability, bug-bounty, cybersecurity, xss-attack, bug-hunting | 27-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-17) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-17-8d38292448cf?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-hunter, bug-bounty-program, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 27-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-16) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-16-aacc2aab0f71?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, bug-bounty, bug-bounty-program, bug-bounty-hunter, bug-bounty-writeup | 27-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-15) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-15-2cd3a0188386?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, bug-bounty-writeup, bug-bounty-program, bug-bounty-tips, bug-bounty-hunter | 27-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-14) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-14-985969cf2f17?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, bug-bounty-hunter, bug-bounty-writeup, bug-bounty-program, bug-bounty-tips | 27-Jun-2024 |
| Hunting Bugs for RE Hunter 350 | https://vijetareigns.medium.com/hunting-bugs-for-re-hunter-350-81338c4ebf20?source=rss------bug_bounty-5 | the_unlucky_guy | bug-bounty, bug-bounty-tips, bug-bounty-writeup, bugbounty-writeup, cybersecurity | 27-Jun-2024 |
| Malicious Document Analysis: Emotet Case I | https://medium.com/@brsdncr/malicious-document-analysis-emotet-case-i-4a5f1ca8c565?source=rss------bug_bounty-5 | Baris Dincer | cybersecurity, threat-intelligence, penetration-testing, bug-bounty, freedomofinternet | 27-Jun-2024 |
| IDORs Never Disappoint Me— Hacking Into Online Bookings ($$$$) | https://aravind07.medium.com/idors-never-disappoint-me-hacking-into-online-bookings-5b2f34e1af25?source=rss------bug_bounty-5 | Gnana Aravind K | cybersecurity, penetration-testing, infosec, hacking, bug-bounty | 27-Jun-2024 |
| How I was able to steal cookies via stored XSS | https://medium.com/@xnum.1/how-i-was-able-to-steal-cookies-via-stored-xss-c7f172fe114c?source=rss------bug_bounty-5 | Ahmed Tarek | stored-xss, xss-attack, bug-bounty, cookies, javascript | 27-Jun-2024 |
| 14.7 Lab: CSRF where token is not tied to user session | https://cyberw1ng.medium.com/14-7-lab-csrf-where-token-is-not-tied-to-user-session-841faddd036a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, cybersecurity, bug-bounty, careers, hacking | 27-Jun-2024 |
| XSS Test Cases Preperation | https://medium.com/@NadirSensoy/xss-test-cases-preperation-566e34ff94fb?source=rss------bug_bounty-5 | Nadir Sensoy | bug-bounty-tips, bug-bounty, xss-vulnerability | 27-Jun-2024 |
| Front End y Back End: Lab HTB Exposición de Datos Sensibles | https://zhunter12.medium.com/front-end-y-back-end-lab-htb-exposici%C3%B3n-de-datos-sensibles-a21431c08d9d?source=rss------bug_bounty-5 | Oscar Romero | cybersecurity, frontend, sensitive-data-exposure, htb-academy, bug-bounty | 27-Jun-2024 |
| How I was able to steal cookies via stored XSS | https://medium.com/@0x_xnum/how-i-was-able-to-steal-cookies-via-stored-xss-c7f172fe114c?source=rss------bug_bounty-5 | Ahmed Tarek | stored-xss, xss-attack, bug-bounty, cookies, javascript | 27-Jun-2024 |
| How long did it take me to find my first bug? | https://medium.com/@deadoverflow/how-long-did-it-take-me-to-find-my-first-bug-969699fa9080?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty-tips, hacking, cybersecurity, bug-bounty, programming | 27-Jun-2024 |
| ICMTC CTF 2024 (Web Exploitation) | https://0x0anas.medium.com/icmtc-ctf-2024-web-exploitation-57998a15107b?source=rss------bug_bounty-5 | Anas Ibrahim | ctf, icmtc-ctf, pentesting, bug-bounty | 27-Jun-2024 |
| IDORs Never Disappoint Me — Hacking Into Online Bookings ($$$$) | https://aravind07.medium.com/idors-never-disappoint-me-hacking-into-online-bookings-5b2f34e1af25?source=rss------bug_bounty-5 | Gnana Aravind K | cybersecurity, penetration-testing, infosec, hacking, bug-bounty | 27-Jun-2024 |
| Checklist for Forgot Password functionality | https://infosecwriteups.com/checklist-for-forgot-password-functionality-3f61c34a15eb?source=rss------bug_bounty-5 | Suprajabaskaran | penetration-testing, passwords, bug-bounty, bug-bounty-tips, pentesting | 26-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-13) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-13-b7bc7fa2123b?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-hunter, bug-bounty-program, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 26-Jun-2024 |
| Basic Cyber Security Course First Day | https://mrunknown124154.medium.com/basic-cyber-security-course-first-day-c6ad0cb7d907?source=rss------bug_bounty-5 | Mr Abdullah | cyber-security-awareness, ethical-hacking, bug-bounty, cybersecurity | 26-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-12) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-12-4b892dc13d9f?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-hunter, bug-bounty-program, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 26-Jun-2024 |
| XSS: Demonstrating Impact Without Credentials | https://infosecwriteups.com/xss-demonstrating-impact-without-credentials-db7fff38792a?source=rss------bug_bounty-5 | Shlok K | xss-attack, vulnerability, infosec, bug-bounty, cross-site-scripting | 26-Jun-2024 |
| Penetration Testing with Termux: A Newbie’s Success Story | https://medium.com/@yp400215/penetration-testing-with-termux-a-newbies-success-story-649e3393a311?source=rss------bug_bounty-5 | Yash Pawar | bug-bounty, penetration-testing, idor-vulnerability | 26-Jun-2024 |
| Come back | https://medium.com/@anonymous19999/come-back-802e211927f6?source=rss------bug_bounty-5 | Anonymous | life, love, bug-bounty, comeback | 26-Jun-2024 |
| Learn Android Penetration Testing Skill with This Vulnerable APK | https://medium.com/@phyowathone/learn-android-penetration-testing-skill-with-this-vulnerable-apk-94d9300a11c4?source=rss------bug_bounty-5 | Phyo WaThone Win | android-pentesting, android-security, application-security, android-bug-bounty, bug-bounty | 26-Jun-2024 |
| How I found XSS and open redirect in Kamiapp.com accidentally | https://medium.com/@alimuhammadsecured/how-i-found-xss-and-open-redirect-in-kamiapp-com-accidentally-364ef7db939d?source=rss------bug_bounty-5 | Alimuhammadsecured | xss-attack, cybersecurity, hacking, bug-bounty | 26-Jun-2024 |
| Complex Attack Types: Sample Scenarios 26 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-26-9b05b2b26815?source=rss------bug_bounty-5 | Baris Dincer | bug-bounty, penetration-testing, freedomofinternet, cybersecurity, information-security | 26-Jun-2024 |
| Unveiling the Secrets of Server-Side Template Injection (SSTI) in Flask and Jinja2 | https://medium.com/@baraiprince0111/unveiling-the-secrets-of-server-side-template-injection-ssti-in-flask-and-jinja2-25c57ab3199f?source=rss------bug_bounty-5 | Baraiprince | ctf, hacking, cybersecurity, trends, bug-bounty | 26-Jun-2024 |
| Unveiling OAuth Vulnerabilities: Exploring Account Access Without Email Verification | https://medium.com/@sulmanfarooq531/unveiling-oauth-vulnerabilities-exploring-account-access-without-email-verification-d36762361df7?source=rss------bug_bounty-5 | Sulman Farooq S | bug-bounty, cybersecurity, oauth, hacking, oauth2 | 26-Jun-2024 |
| How i’ve found : ( IDOR + XSS ) = all USERS account takeover 🙂 ? | https://medium.com/@zack0x01_/how-ive-found-idor-xss-all-users-account-takeover-a49d59cf5108?source=rss------bug_bounty-5 | zack0x01 | bugbounty-tips, bug-bounty, bugbounty-poc, hacking, bugbounty-writeup | 26-Jun-2024 |
| VRP [IDOR] Menghapus dan Melihat Data Korban | https://medium.com/@anvilleofficial/vrp-idor-menghapus-dan-melihat-data-korban-a9e1f8978798?source=rss------bug_bounty-5 | barr | idor, bug-bounty | 26-Jun-2024 |
| How I compromised 1500 accounts/month with no technical skill | https://theclemvp.medium.com/how-i-compromised-1500-accounts-month-with-no-technical-skill-6a83ecd5c8eb?source=rss------bug_bounty-5 | Clément | cybersecurity, pentesting, penetration-testing, hacking, bug-bounty | 26-Jun-2024 |
| 14.6 Lab: CSRF Vulnerability where token validation depends on request method | https://cyberw1ng.medium.com/14-6-lab-csrf-vulnerability-where-token-validation-depends-on-request-method-78f2a2c33173?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, careers, cybersecurity | 26-Jun-2024 |
| OTP Bypass through Response Manipulation | https://medium.com/@xnum.1/otp-bypass-through-response-manipulation-905bc70e5ff4?source=rss------bug_bounty-5 | Ahmed Tarek | authentication-bypass, authentication, bug-bounty, otp-verification, otp-bypass | 26-Jun-2024 |
| Explotando Vulnerabilidades de Validación de Entrada en un Workflow de Compras — Web Sec Academy | https://zhunter12.medium.com/explotando-vulnerabilidades-de-validaci%C3%B3n-de-entrada-en-un-workflow-de-compras-web-sec-academy-a1e3265c46b8?source=rss------bug_bounty-5 | Oscar Romero | ciberseguridad, portswigger-lab, bug-bounty, business-logic-flaw, burpsuite | 26-Jun-2024 |
| Understanding Web Security Concepts: A Comprehensive Guide | https://medium.com/@cybe3king/understanding-web-security-concepts-a-comprehensive-guide-61ced70c3337?source=rss------bug_bounty-5 | Cybe3king | bug-bounty, cybersecurity, penetration-testing, web-security, ethical-hacking | 26-Jun-2024 |
| Securing Your Home Network: Final Steps | https://medium.com/@jessemridley/securing-your-home-network-final-steps-676b1d7c3787?source=rss------bug_bounty-5 | Jesse Ridley | bug-bounty, network-security, hackathons, freelancing, cybersecurity | 25-Jun-2024 |
| 13.31 Lab: Exploiting XSS to perform CSRF | https://cyberw1ng.medium.com/13-31-lab-exploiting-xss-to-perform-csrf-0fffd6243312?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, bug-bounty, hacking, cybersecurity | 25-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-10) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-10-466f0806866b?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, bug-bounty-writeup, bug-bounty-program, bug-bounty-tips, bug-bounty-hunter | 25-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-9) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-9-f76dc4218c1c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-hunter, bug-bounty, bug-bounty-program, bug-bounty-writeup, bug-bounty-tips | 25-Jun-2024 |
| #3. Bug Bounty Series: OTP Verification Bypass | https://cyb3rmind.medium.com/3-bug-bounty-series-otp-verification-bypass-468526b76720?source=rss------bug_bounty-5 | Cyb3r M!nds | bug-bounty, otp-bypass, hacking, bug-bounty-tips, pentesting | 25-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-11) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-11-f5009818fb39?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-program, bug-bounty, bug-bounty-start-up, bug-bounty-tips, bug-bounty-hunting | 25-Jun-2024 |
| The Role of Ethical Hackers in Web3 Security | https://securrtech.medium.com/the-role-of-ethical-hackers-in-web3-security-e858b516b43d?source=rss------bug_bounty-5 | Securr | blockchain, bug-bounty, web3bugbounty, web3-security, web3 | 25-Jun-2024 |
| “Onerror” Ne Demek ? | https://medium.com/@beratkolay37/onerror-ne-demek-bb751f8e6a1b?source=rss------bug_bounty-5 | Berat K. | kali-linux, html, bug-bounty, onerror, javascript | 25-Jun-2024 |
| #3. Bug Bounty Series: OTP Verification bypass leads to unauthorized booking appointment | https://cyb3rmind.medium.com/3-bug-bounty-series-otp-verification-bypass-468526b76720?source=rss------bug_bounty-5 | Cyb3r M!nds | bug-bounty, otp-bypass, hacking, bug-bounty-tips, pentesting | 25-Jun-2024 |
| ZDay Olarak Bulduğum PostMessage XSS Zafiyetinin Analizi | https://grolar.medium.com/zday-olarak-buldu%C4%9Fum-postmessage-xss-zafiyetinin-analizi-4c81471e32e5?source=rss------bug_bounty-5 | Grolar | bug-bounty-writeup, dom-xss, bug-bounty, xss-vulnerability, web-security | 25-Jun-2024 |
| Testing SolarWinds Serv-U Path Directory Transversal Vulnerability (CVE-2024–28995) | https://noorhomaid.medium.com/testing-solarwinds-serv-u-path-directory-transversal-vulnerability-cve-2024-28995-d80e60d31a8d?source=rss------bug_bounty-5 | NoorHomaid | cybersecurity, cve, penetration-testing, bug-bounty, solarwinds-hack | 25-Jun-2024 |
| The one where I owned a customer service platform | https://medium.com/@un1tycyb3r/the-one-where-i-owned-a-customer-service-platform-2fd4cff11b28?source=rss------bug_bounty-5 | Un1tycyb3r | bug-bounty | 25-Jun-2024 |
| Find Sensitive Data’s using via network analysis make me 250$ | https://medium.com/@test123cybertest/find-sensitive-datas-using-via-network-analysis-make-me-250-a0b23b0cb03b?source=rss------bug_bounty-5 | praveenarsh0xx0 | pentesting, bug-bounty, cybersecurity, bug-bounty-tips | 25-Jun-2024 |
| How I Found a Vulnerability in Paytm and Received a Bounty | https://mufazmi.medium.com/how-i-found-a-vulnerability-in-paytm-and-received-a-bounty-d580ea14e9a8?source=rss------bug_bounty-5 | Umair Farooqui ✪ | paytm-bug-bounty, mufazmi, bug-bounty, umair-farooqui, paytm-bug | 25-Jun-2024 |
| Hackathon CTF VulnHub | Writeup | Walkthrough | https://shamsulmehmood.medium.com/hackathon-ctf-vulnhub-writeup-walkthrough-aa36adedc49e?source=rss------bug_bounty-5 | SHAMS UL MEHMOOD | vulnerability, cybersecurity, ai, hacker, bug-bounty | 25-Jun-2024 |
| My First Bug Hunting Experience: A Journey from Disappointment to Success | https://b0mk35h.medium.com/my-first-bug-hunting-experience-a-journey-from-disappointment-to-success-ae92c222a0d0?source=rss------bug_bounty-5 | Pronay Biswas | bug-bounty, ethical-hacking, cybersecurity, web-security, cyberattack | 24-Jun-2024 |
| Unseen Dangers: How Cloud Misconfigurations Could Be Your Company’s Biggest Threat | https://medium.com/@paritoshblogs/unseen-dangers-how-cloud-misconfigurations-could-be-your-companys-biggest-threat-c1ed86b10093?source=rss------bug_bounty-5 | Paritosh | cloud-computing, cybersecurity, hacking, bug-bounty, cloud | 24-Jun-2024 |
| Roadmap to Becoming a Professional Penetration Tester with Estimated Learning Time | https://medium.com/@cuncis/roadmap-to-becoming-a-professional-penetration-tester-with-estimated-learning-time-d352bdd43fbe?source=rss------bug_bounty-5 | Cuncis | cybersecurity, penetration-test, bug-bounty, penetration-testing, hacker | 24-Jun-2024 |
| Understanding Cybersecurity: Exploits, CVEs, and More | https://systemweakness.com/understanding-cybersecurity-exploits-cves-and-more-59b41bf679dc?source=rss------bug_bounty-5 | Khaleel Khan | cybersecurity, bug-bounty, hacking, infosec, ethical-hacking | 24-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-6) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-6-2ad674553fa0?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-writeup, bug-bounty-tips, bug-bounty, bug-bounty-program, bug-bounty-hunter | 24-Jun-2024 |
| CVE Seeker — Unveiling Cyber Threats: From Assets to Vulnerability Insights | https://anmolksachan.medium.com/cve-seeker-unveiling-cyber-threats-from-assets-to-vulnerability-insights-b4b485a7aefb?source=rss------bug_bounty-5 | Anmol K Sachan | recon, shodan, asm, bug-bounty, attack-surface-management | 24-Jun-2024 |
| 13.30 Lab: Exploiting cross-site scripting to capture passwords | https://cyberw1ng.medium.com/13-30-lab-exploiting-cross-site-scripting-to-capture-passwords-bd3714035b4a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, penetration-testing, careers, cybersecurity | 24-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-8) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-8-3d5a833a4842?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, bug-bounty, bug-bounty-program, bug-bounty-hunter, bug-bounty-writeup | 24-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-7) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-7-6a8786ecb6f4?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-program, bug-bounty, bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup | 24-Jun-2024 |
| OTP Bypass through Session Manipulation | https://medium.com/@n4if/otp-bypass-through-session-manipulation-d73deceaa42f?source=rss------bug_bounty-5 | 0xNAiF | penetration-testing, bug-bounty, computer-science, cybersecurity | 24-Jun-2024 |
| Insecure Direct Object Reference (IDOR) Walkthrough — VulnLab by Yavuzlar | https://medium.com/@muhammadriva/insecure-direct-object-reference-idor-walkthrough-vulnlab-by-yavuzlar-3d16ce3f5345?source=rss------bug_bounty-5 | Muhammad Riva Fanzury S | cybersecurity, bug-bounty, ethical-hacking, penetration-testing, idor-vulnerability | 24-Jun-2024 |
| Cross Site Scripting (XSS) Walkthrough — VulnLab XSS by Yavuzlar | https://medium.com/@muhammadriva/cross-site-scripting-xss-walkthrough-vulnlab-xss-by-yavuzlar-149d14ab2d6b?source=rss------bug_bounty-5 | Muhammad Riva Fanzury S | cross-site-scripting, bug-bounty, cybersecurity, penetration-testing, ethical-hacking | 24-Jun-2024 |
| OAuth CSRF: Exploiting the Authorization Code Flow for Account Takeover | https://medium.com/@cyberpro151/oauth-csrf-exploiting-the-authorization-code-flow-for-account-takeover-f67cee914d39?source=rss------bug_bounty-5 | cyberpro151 | web-security, account-takeover, bug-bounty, appsec, hacking | 24-Jun-2024 |
| Bypassing Reset Password ATO (Account takeover) through JavaScript Breakpoints | https://medium.com/@asaad0x/bypassing-reset-password-ato-account-takeover-through-javascript-breakpoints-e71187ad7171?source=rss------bug_bounty-5 | Ahmad Asaad | account-takeover, bug-bounty, penetration-testing, cybersecurity, infosec | 24-Jun-2024 |
| Poodle Haney Bug Bounty | https://medium.com/@haneypoodle/poodle-haney-bug-bounty-1b0a10a03689?source=rss------bug_bounty-5 | Poodle Haney | memecoins, haney, bug-bounty, poodle-haney | 24-Jun-2024 |
| Tutorial Install Burpsuite Beginner | https://medium.com/@muhammadriva/tutorial-install-burpsuite-beginner-927375c22f94?source=rss------bug_bounty-5 | Muhammad Riva Fanzury S | bug-bounty, penetration-testing, cybersecurity, junior-pentester, burpsuite | 24-Jun-2024 |
| Unrestricted File Upload Walkthrough — VulnLab by Yavuzlar | https://medium.com/@muhammadriva/unrestricted-file-upload-walkthrough-vulnlab-by-yavuzlar-76854ebafe84?source=rss------bug_bounty-5 | Muhammad Riva Fanzury S | penetration-testing, bug-bounty, remote-code-execution, cybersecurity, backdoor | 24-Jun-2024 |
| Bypassing Reset Password ATO (Account takeover) through JavaScript Breakpoints | https://read.martiandefense.llc/bypassing-reset-password-ato-account-takeover-through-javascript-breakpoints-e71187ad7171?source=rss------bug_bounty-5 | Ahmad Asaad | account-takeover, bug-bounty, penetration-testing, cybersecurity, infosec | 24-Jun-2024 |
| Next.js and cache poisoning: a quest for the black hole | https://medium.com/@zhero_/next-js-and-cache-poisoning-a-quest-for-the-black-hole-1ae634170a1e?source=rss------bug_bounty-5 | Rachid.A | hacking, bug-bounty, nextjs, web-security, javascript | 24-Jun-2024 |
| Bug Bounty Programs: How Outsourcing Can Help Your Project — Sinhala Translation | https://medium.com/@integriteesrilanka/bug-bounty-programs-how-outsourcing-can-help-your-project-sinhala-translation-0a40a97e58c7?source=rss------bug_bounty-5 | Integritee Sri Lanka | bug-bounty, immunefi, blockchain | 24-Jun-2024 |
| OTP Bypass through Session Manipulation | https://medium.com/@n4if/otp-bypass-through-session-manipulation-d73deceaa42f?source=rss------bug_bounty-5 | 0xn4if | penetration-testing, bug-bounty, computer-science, cybersecurity | 24-Jun-2024 |
| How i got easy multiple RXSS | https://medium.com/@0xmekky/how-i-got-easy-multiple-rxss-dd3a6bc521dd?source=rss------bug_bounty-5 | abdelrahem mekky | xss-attack, penetration-testing, reflected-xss, web-app-security, bug-bounty | 23-Jun-2024 |
| Complex Attack Types: Sample Scenarios 23 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-23-c0079166f4d9?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, threat-intelligence, cybersecurity, penetration-testing, bug-bounty | 23-Jun-2024 |
| 13.29 Exploiting cross-site scripting to steal cookies | https://cyberw1ng.medium.com/13-29-exploiting-cross-site-scripting-to-steal-cookies-21c7d5851ea3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, penetration-testing, cybersecurity, bug-bounty | 23-Jun-2024 |
| Duplicate P1 in public program | https://medium.com/@mohamed.yasser442200/duplicate-p1-in-public-program-aa9ade8f61c3?source=rss------bug_bounty-5 | Spider4 | pentesting, bug-bounty-tips, authentication, hacking, bug-bounty | 23-Jun-2024 |
| New 100$ Bug in My Methodology! | https://medium.com/@rewmcode/new-100-bug-in-my-methodology-60d99f0dafe2?source=rss------bug_bounty-5 | Ali Rem | bug-bounty-tips, hacking, hacker, bug-bounty | 23-Jun-2024 |
| Chaining bugs for Account Takeover | https://medium.com/@hbenja47/chaining-bugs-for-account-takeover-0b90a2d952af?source=rss------bug_bounty-5 | Benja (bronxi) | hacking, bug-bounty | 23-Jun-2024 |
| Guide to Using httpx | https://medium.com/@learntheshell/guide-to-using-httpx-a542cbdc4ed4?source=rss------bug_bounty-5 | LearnTheShell | cybersecurity, httpx, bug-bounty, linux, hacking | 22-Jun-2024 |
| The Ultimate Shodan Search Guide for Cybersecurity Analysts | https://systemweakness.com/the-ultimate-shodan-search-guide-for-cybersecurity-analysts-283f17f56182?source=rss------bug_bounty-5 | Khaleel Khan | hacking, cybersecurity, infosec, bug-bounty, cheatsheet | 22-Jun-2024 |
| How I Found a Simple IDOR Bug That Exposed Sensitive Data | https://medium.com/@dra0x0/how-i-found-a-simple-idor-bug-that-exposed-sensitive-data-36e6e9b508db?source=rss------bug_bounty-5 | dra0x0 | application-security, ethical-hacking, cybersecurity, software-testing, bug-bounty | 22-Jun-2024 |
| How I found a .env file and can access the whole server of mysql | https://medium.com/@jeetpal2007/how-i-found-a-env-file-and-can-access-the-whole-server-of-mysql-a21af69cbd12?source=rss------bug_bounty-5 | JEETPAL | bug-bounty-tips, bug-bounty, cybersecurity, bugbounty-writeup, env-file | 22-Jun-2024 |
| Practical Threat Hunting Using Known IOC IPs | https://medium.com/@paritoshblogs/practical-threat-hunting-using-known-ioc-ips-26a4eab0b616?source=rss------bug_bounty-5 | Paritosh | cybersecurity, incident-response, bug-bounty, ransomware, threat-hunting | 22-Jun-2024 |
| CVE-2024–28999 SolarWinds Race Condition | https://medium.com/@0xSphinx/cve-2024-28999-solarwinds-race-condition-62e175339b46?source=rss------bug_bounty-5 | 0xSphinx | cybersecurity, bug-bounty, hacking, cyber-security-awareness, security | 22-Jun-2024 |
| 13.28 Lab: Reflected XSS into a template literal with angle brackets, single, double quotes… | https://cyberw1ng.medium.com/13-28-lab-reflected-xss-into-a-template-literal-with-angle-brackets-single-double-quotes-45602869f45f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, bug-bounty, penetration-testing, cybersecurity | 22-Jun-2024 |
| Found Bugs, Got paid, Stayed poor: Making a Living with Bug Bounties | https://slava-moskvin.medium.com/found-bugs-got-paid-stayed-poor-making-a-living-with-bug-bounties-04ba1fbbab73?source=rss------bug_bounty-5 | Path Cybersec [Slava Moskvin] | pentesting, reverse-engineering, cybersecurity, bug-bounty, offensive-security | 22-Jun-2024 |
| Update on DNS problem with Lubuntu 24.04 | https://ariedwikusuma9.medium.com/update-on-dns-problem-with-lubuntu-24-04-5c48a903026f?source=rss------bug_bounty-5 | Ariekusuma | linux, lubuntu, ubuntu, wireguard, bug-bounty | 21-Jun-2024 |
| Bypassing iCloud Web Access Restriction | https://ltsirkov.medium.com/bypassing-icloud-web-access-restriction-30cdf12b979c?source=rss------bug_bounty-5 | Lyubomir Tsirkov | bug-bounty, bug-bounty-tips, bugbounty-writeup, cybersecurity | 21-Jun-2024 |
| How I Found 3 Bugs in a Single Day | https://medium.com/@dsmodi484/how-i-found-3-bugs-in-a-single-day-a690e2abd4fb?source=rss------bug_bounty-5 | Dishant Modi | offensive-security, vapt, idor, bugs, bug-bounty | 21-Jun-2024 |
| Dork Like a Pro: Exploiting Google for Bug Bounty Wins | https://medium.com/@RaunakGupta1922/dork-like-a-pro-exploiting-google-for-bug-bounty-wins-fd2612d7fde3?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | google-dork, bug-bounty, vulnerability, hacking, cyber-security-awareness | 21-Jun-2024 |
| Complex Attack Types: Sample Scenarios 22 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-22-f720da3d9dc3?source=rss------bug_bounty-5 | Baris Dincer | information-technology, penetration-testing, bug-bounty, cybersecurity, freedomofinternet | 21-Jun-2024 |
| Broken Access Control on an E-commerce website allows attackers to lengthen trial plan | https://medium.com/@p00dl3/broken-access-control-on-an-e-commerce-website-allows-attackers-to-lengthen-trial-plan-e59f5976bca3?source=rss------bug_bounty-5 | p00dl3 | cybersecurity, bug-bounty | 21-Jun-2024 |
| Say Goodbye to Pesky Bugs: Top Bug Zappers for Perfect Family Gatherings | https://medium.com/@seng4k2/say-goodbye-to-pesky-bugs-top-bug-zappers-for-perfect-family-gatherings-b23f405ac0c5?source=rss------bug_bounty-5 | Kear Seng | mosquito, insects, bugs, bug-bounty, pest-control | 21-Jun-2024 |
| 13.27 Lab: Reflected XSS into a JavaScript string with a single quote and backslash-escaped | https://cyberw1ng.medium.com/13-27-lab-reflected-xss-into-a-javascript-string-with-a-single-quote-and-backslash-escaped-2fbc757feb1a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, bug-bounty, careers, cybersecurity | 21-Jun-2024 |
| Exploring Web Infrastructure: Tools and Techniques for Effective Recon | https://medium.com/@Kaizen2977/exploring-web-infrastructure-tools-and-techniques-for-effective-recon-11907b7ec938?source=rss------bug_bounty-5 | kapil Chotalia | bug-bounty, penetration-testing, dns, email, cybersecurity | 21-Jun-2024 |
| Quick & Easy $100 Bug That You Can Find In 5 minutes | https://levelup.gitconnected.com/quick-easy-100-bug-that-you-can-find-in-5-minutes-aeb4b16745d9?source=rss------bug_bounty-5 | Hamza Avvan | ethical-hacking, bug-bounty, cybersecurity, earn-money-online, api | 21-Jun-2024 |
| Best Practices for Securing Your Decentralized Application | https://securrtech.medium.com/best-practices-for-securing-your-decentralized-application-d049a9ec547d?source=rss------bug_bounty-5 | Securr | blockchain, web3, security, securr, bug-bounty | 21-Jun-2024 |
| Everything About EC-Council CEH | https://medium.com/@mazharshadab292/everything-about-ec-council-ceh-fb47b0392104?source=rss------bug_bounty-5 | Shadab Mazhar | hacking, social-media, computer-science, cybersecurity, bug-bounty | 21-Jun-2024 |
| If youre looking for thorough and professional penetration testing services, youve come to the… | https://medium.com/@kafim3137/if-youre-looking-for-thorough-and-professional-penetration-testing-services-youve-come-to-the-ea3d1129b61f?source=rss------bug_bounty-5 | Farhad | bug-bounty, penetration-test, vulnerability, vulnerability-assessment, penetration-testing | 21-Jun-2024 |
| Part 1- Everything You Need to Know About Browser Security Policies — SOP, CORS. | https://medium.com/@vikramroot/part-1-everything-you-need-to-know-about-browser-security-policies-sop-cors-3eb025fd3ab8?source=rss------bug_bounty-5 | vikram naidu | bugbounty-writeup, penetration-testing, application-security, cybersecurity, bug-bounty | 21-Jun-2024 |
| Part 2- Everything You Need to Know About Browser Security Policies — CSP, Cookie Attributes, etc. | https://medium.com/@vikramroot/part-2-everything-you-need-to-know-about-browser-security-policies-csp-cookie-attributes-etc-3ea98f737b3a?source=rss------bug_bounty-5 | vikram naidu | penetration-testing, bug-bounty, product-security, cybersecurity, application-security | 21-Jun-2024 |
| Microsoft Subdomain XSS Report — Published | https://ibrahimxss.medium.com/microsoft-subdomain-xss-report-published-3e4f54eea93c?source=rss------bug_bounty-5 | #IbrahimXSS | xss-attack, xss-bypass, bug-bounty, microsoft, xss-vulnerability | 21-Jun-2024 |
| Discovering an XSS Vulnerability on Vue.js 2.6.10 WebApp | https://ibrahimxss.medium.com/discovering-an-xss-vulnerability-on-vue-js-2-6-10-webapp-e6c0cc88e840?source=rss------bug_bounty-5 | #IbrahimXSS | xss-attack, bug-bounty, xss-bypass, hacking, xss-vulnerability | 21-Jun-2024 |
| Being Better at Burp | https://medium.com/@fat_zombi/being-better-at-burp-b9585186aa08?source=rss------bug_bounty-5 | Fatzombi | appsec, bug-bounty, proxy, burpsuite | 20-Jun-2024 |
| OWASP Top 10 SQL Injection Vulnerability | https://medium.com/@Joshua_sk/owasp-top-10-sql-injection-vulnerability-97168af8978e?source=rss------bug_bounty-5 | Joshua_sk | vulnerability, web-hacking, bug-bounty, sql-injection, owasp-top-10 | 20-Jun-2024 |
| Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw | https://medium.com/@malikijlal/kraken-crypto-exchange-hit-by-3-million-theft-exploiting-zero-day-flaw-6f218c3aef57?source=rss------bug_bounty-5 | Malik Ijlal | bug-bounty, cryptocurrency, cybersecurity, hacking, kraken | 20-Jun-2024 |
| Getting Into Cybersecurity: A Roadmap | https://medium.com/@majix_de/getting-into-cybersecurity-a71cde8a57b3?source=rss------bug_bounty-5 | Majix | cybersecurity-tips, bug-bounty, infoseccareer, ethical-hacking, hack-to-learn | 20-Jun-2024 |
| Untold story of Zomato XSS | https://medium.com/@info_4040/untold-story-of-zomato-xss-148c91d2faec?source=rss------bug_bounty-5 | Bug Detector's | xss-vulnerability, bug-bounty, bug-bounty-tips, penetration-testing, xss-attack | 20-Jun-2024 |
| TryHackMe SQLMap Room | https://medium.com/@Joshua_sk/tryhackme-sqlmap-room-06fd30f8a0b1?source=rss------bug_bounty-5 | Joshua_sk | tryhackme, cybersecurity, sqlmap, bug-bounty, sql-injection | 20-Jun-2024 |
| Kraken Faces Extortion Attempt After $3M Bug Exploit | https://medium.com/@whalecrypto/kraken-faces-extortion-attempt-after-3m-bug-exploit-f086f479a4f1?source=rss------bug_bounty-5 | Crypto Whale Medium | kraken, crypto-hack, blockchain-security, cryptoextortion, bug-bounty | 20-Jun-2024 |
| Complex Attack Types: Sample Scenarios 21 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-21-e65a13b96002?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, threat-intelligence, bug-bounty, penetration-testing, cybersecurity | 20-Jun-2024 |
| OAuth Misconfiguration: Preemptive Account Registration Exploitation | https://mmnahian.medium.com/oauth-misconfiguration-preemptive-account-registration-exploitation-407be50d6037?source=rss------bug_bounty-5 | mmnahian | bug-bounty, information-security, bug-bounty-tips, sso, oauth | 20-Jun-2024 |
| What is prototype pollution? | https://cyberw1ng.medium.com/what-is-prototype-pollution-76694f0db76a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, hacking, penetration-testing | 20-Jun-2024 |
| Very damn vulnerable government site 2.0 | https://medium.com/@bl4cksku11/very-damn-vulnerable-government-site-2-0-cf9535cbdb4e?source=rss------bug_bounty-5 | Bl4cksku11 | vulnerability, bug-bounty, research, hacking, red-team | 20-Jun-2024 |
| IF YOU DON.T HAVE money, SELL YOUR CROSS SITE SCRIPTING | https://medium.com/@1daytosee/if-you-don-t-have-money-sell-your-cross-site-scripting-dc4b6bdd046f?source=rss------bug_bounty-5 | 1day2see | xss-attack, bug-bounty, pentesting, selling, hacking | 20-Jun-2024 |
| Inside the Kraken $3M Hack: What Happened? | https://medium.com/@cryptopiannews/inside-the-kraken-3m-hack-what-happened-4a0af98c498e?source=rss------bug_bounty-5 | Cryptopiannews | bug-bounty, kraken, kraken-3m-hack, cryptopiannews, crypto-hack | 20-Jun-2024 |
| How Static Analysis Uncovers Hidden Malware Threats ! | https://medium.com/@paritoshblogs/how-static-analysis-uncovers-hidden-malware-threats-7c62d132f7f8?source=rss------bug_bounty-5 | Paritosh | cybersecurity, malware, bug-bounty, static-malware-analysis, hacking | 19-Jun-2024 |
| Analyzing a Major Web3 Vulnerability and Its Resolution | https://securrtech.medium.com/analyzing-a-major-web3-vulnerability-and-its-resolution-69955d55a0f6?source=rss------bug_bounty-5 | Securr | blockchain, bug-bounty, web3, security, securr | 19-Jun-2024 |
| 29.9 Lab: Remote code execution via server-side prototype pollution | https://cyberw1ng.medium.com/29-9-lab-remote-code-execution-via-server-side-prototype-pollution-d5c98bfe3e73?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, bug-bounty, cybersecurity, penetration-testing | 19-Jun-2024 |
| Code Execution Vulnerability in Behave: A Deep Dive | https://medium.com/@piyushbhor22/code-execution-vulnerability-in-behave-a-deep-dive-b8c7431a71f9?source=rss------bug_bounty-5 | Pi | security-research, bug-bounty, code-review, cybersecurity, vulnerability-research | 19-Jun-2024 |
| Mastering Bug Bounty: Tips and Strategies for Success | https://medium.com/@whitehatcyber404/mastering-bug-bounty-tips-and-strategies-for-success-df27b24f2009?source=rss------bug_bounty-5 | Cyber_catz | bug-bounty-writeup, bugbounty-writeup, bug-bounty-tips, bug-bounty, bugbounty-tips | 19-Jun-2024 |
| Complex Attack Types: Sample Scenarios 19 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-19-2a39b7806616?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, cybersecurity, bug-bounty, information-technology, penetration-testing | 19-Jun-2024 |
| The Best Resources for Cybersecurity Pros and Bug Bounty Hunters | https://medium.com/@turvsec/the-best-resources-for-cybersecurity-pros-and-bug-bounty-hunters-f674c2abebb2?source=rss------bug_bounty-5 | TurvSec | pentesting, infosec, bug-bounty, cybersecurity | 19-Jun-2024 |
| Unlocking the Future of Web Security with the #IBRAHIMXSS Tool | https://ibrahimxss.medium.com/unlocking-the-future-of-web-security-with-the-ibrahimxss-tool-a33843cdc259?source=rss------bug_bounty-5 | #IbrahimXSS | xss-vulnerability, bug-bounty, xss-attack, hacking, xss-bypass | 19-Jun-2024 |
| A Place for Cybersecurity and Bug Bounty Content Creators to Shine | https://medium.com/@turvsec/a-place-for-cybersecurity-and-bug-bounty-content-creators-to-shine-fa0096ce2559?source=rss------bug_bounty-5 | TurvSec | bug-bounty, cybersecurity, infosec | 19-Jun-2024 |
| Complex Attack Types: Sample Scenarios 20 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-20-f2f9e8f6725e?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, cybersecurity, penetration-testing, bug-bounty, information-technology | 19-Jun-2024 |
| Mastering Bug Bounty: Tips and Strategies for Success | https://medium.com/@cyber_catz/mastering-bug-bounty-tips-and-strategies-for-success-df27b24f2009?source=rss------bug_bounty-5 | cyber_catz | bug-bounty-writeup, bugbounty-writeup, bug-bounty-tips, bug-bounty, bugbounty-tips | 19-Jun-2024 |
| Web App Sec RECON — Black Box Foundations and TTPs | https://medium.com/@meshcode/web-app-sec-recon-black-box-foundations-and-ttps-4bf095b7c004?source=rss------bug_bounty-5 | Mateusz (meshcode) | recon, stealth, web-app-security, infosec, bug-bounty | 19-Jun-2024 |
| IDOR on HackerOne Embedded Submission Form | https://medium.com/pinoywhitehat/idor-on-hackerone-embedded-submission-form-9e59c6f044b3?source=rss------bug_bounty-5 | Japz Divino | hacking, pinoywhitehat, infosec, bug-bounty | 19-Jun-2024 |
| Kraken’s $3 Million Bug Bounty Breach: Ethical Dilemmas and Security Challenges | https://medium.com/@MiamiCryptoCom/krakens-3-million-bug-bounty-breach-ethical-dilemmas-and-security-challenges-cc459b015fd8?source=rss------bug_bounty-5 | Miami Crypto | cryptocurrency-security, kraken, ethical-hacking, bug-bounty | 19-Jun-2024 |
| Web App Sec RECON — Black Box Foundations and TTPs | https://medium.com/cyberpower-telenoia/web-app-sec-recon-black-box-foundations-and-ttps-4bf095b7c004?source=rss------bug_bounty-5 | Mateusz (meshcode) | recon, stealth, web-app-security, infosec, bug-bounty | 19-Jun-2024 |
| Web App Sec RECON — Black Box Foundations and TTPs | https://medium.com/cyberpower-telenoia/web-app-sec-recon-black-box-foundations-and-ttps-4bf095b7c004?source=rss------bug_bounty-5 | Matty K. | recon, stealth, web-app-security, infosec, bug-bounty | 19-Jun-2024 |
| Unmasking the Invisible Threat: The Ultimate Guide to Malware Analysis | https://medium.com/@paritoshblogs/unmasking-the-invisible-threat-the-ultimate-guide-to-malware-analysis-d287c4d74e7d?source=rss------bug_bounty-5 | Paritosh | malware-analysis, cybersecurity, information-technology, malware, bug-bounty | 18-Jun-2024 |
| A Comprehensive Guide to Android App Pentesting for Bug Bounty Hunter | https://medium.com/@pankajkryadav1/a-comprehensive-guide-to-android-app-pentesting-for-bug-bounty-hunter-ada51e521814?source=rss------bug_bounty-5 | Pankaj kr Yadav | methodology, bug-bounty, android-pentesting, bug-bounty-tips | 18-Jun-2024 |
| Exploring the DAO Hack: Lessons Learned for Web3 Security | https://securrtech.medium.com/exploring-the-dao-hack-lessons-learned-for-web3-security-08d23984af79?source=rss------bug_bounty-5 | Securr | dao, securr, web3, bug-bounty, web3-security | 18-Jun-2024 |
| Subdomains Enumeration: Tools, Techniques, and Tips | https://medium.com/@Kaizen2977/subdomains-enumeration-tools-techniques-and-tips-4d43ea31dc0f?source=rss------bug_bounty-5 | kapil Chotalia | infosec, penetration-testing, bug-bounty, subdomain, enumeration | 18-Jun-2024 |
| Intentions HackTheBox Walkthrough | https://d3athcod3.medium.com/intentions-hackthebox-walkthrough-ad2eb053e224?source=rss------bug_bounty-5 | D3athCod3 | cybersecurity, ethical-hacking, development, bug-bounty, hackthebox | 18-Jun-2024 |
| How I got started in Cyber Security | Getting my first job and How you can too.. | https://captain-pool.medium.com/how-i-got-started-in-cyber-security-getting-my-first-job-and-how-you-can-too-dc52da614d6d?source=rss------bug_bounty-5 | Captain Pool | web-app-security, hackthebox, cybersecurity, bug-bounty, hacking | 18-Jun-2024 |
| Server Access: Admin Panel and RFU Bypass | https://zvitox.medium.com/server-access-admin-panel-and-rfu-bypass-45af32057a2d?source=rss------bug_bounty-5 | Mohammad Sadra Naderi | report, tips, security, bug-bounty, hacking | 18-Jun-2024 |
| How ChatGPT Turned Me into a Hacker | https://medium.com/@jonathanmondaut/how-chatgpt-turned-me-into-a-hacker-7469d5b43026?source=rss------bug_bounty-5 | Jonathan Mondaut | bug-bounty, openai, large-language-models, hacking, learning | 18-Jun-2024 |
| Day 22 of our #CyberQuest1095 Day Challenge | https://d3athcod3.medium.com/day-22-of-our-cyberquest1095-day-challenge-c993ded22604?source=rss------bug_bounty-5 | D3athCod3 | bug-bounty, development, cybersecurity, hacking, challenge | 18-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-5) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-5-efb95db2210b?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-program, bug-bounty-tips, bug-bounty-writeup, bug-bounty, bug-bounty-hunter | 18-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part -4) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-4-00e815fa8026?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-program, bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bug-bounty | 18-Jun-2024 |
| 29.8 Lab: Bypassing flawed input filters for server-side prototype pollution | https://cyberw1ng.medium.com/29-8-lab-bypassing-flawed-input-filters-for-server-side-prototype-pollution-fa379f811a06?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, hacking, careers, bug-bounty, penetration-testing | 18-Jun-2024 |
| Server Access: Admin Panel and RFU Bypass | https://zvitox.medium.com/server-access-admin-panel-and-rfu-bypass-45af32057a2d?source=rss------bug_bounty-5 | Mohammad Sadra Naderi (ZVitoX) | report, tips, security, bug-bounty, hacking | 18-Jun-2024 |
| A Learning Journey: Attempting to Turn a WordPress Theme CVE into a PoC | https://medium.com/@motoko_ayanami/a-learning-journey-attempting-to-turn-a-wordpress-theme-cve-into-a-poc-225cde954493?source=rss------bug_bounty-5 | Motoko Ayanami | wordpress, wpscan, hacking, bug-bounty | 18-Jun-2024 |
| Demystifying Bug Bounty Hunting: A Deep Dive into Cybersecurity's Hidden Gem | https://medium.com/@biswalsandeep594/demystifying-bug-bounty-hunting-a-deep-dive-into-cybersecuritys-hidden-gem-d8ad2d2d7fcb?source=rss------bug_bounty-5 | Sandeep priyadarshi Biswal | bug-bounty, hacking, cryptocurrency, software-engineering, cybersecurity | 18-Jun-2024 |
| Guide to Using Nuclei | https://medium.com/@learntheshell/guide-to-using-nuclei-9c37869be30e?source=rss------bug_bounty-5 | LearnTheShell | bug-bounty, linux, vulnerability-scanning, cybersecurity | 18-Jun-2024 |
| Brand-new prototype pollution gadget in MongoDB leading to RCE | https://medium.com/@vuusale/brand-new-prototype-pollution-gadget-in-mongodb-leading-to-rce-8c5e0087c15e?source=rss------bug_bounty-5 | Vuusale | cybersecurity, vulnerability, bug-bounty, npm | 17-Jun-2024 |
| Breaking into the VIP Club: A Tale of Parameter Tampering Exploits | https://systemweakness.com/breaking-into-the-vip-club-a-tale-of-parameter-tampering-exploits-83df7b6b9691?source=rss------bug_bounty-5 | Jody ritonga | web, bug-bounty, hacking, bugs, bug-bounty-tips | 17-Jun-2024 |
| Understanding Web3 Bug Bounties: How They Enhance Blockchain Security | https://securrtech.medium.com/understanding-web3-bug-bounties-how-they-enhance-blockchain-security-ac9e8361d7cf?source=rss------bug_bounty-5 | Securr | web3, bug-bounty, hacker, web3bugbounty, security | 17-Jun-2024 |
| Hunting for Origin IP: A Beginner’s Guide | https://medium.com/@pruthu.raut/hunting-for-origin-ip-a-beginners-guide-70235f3dd415?source=rss------bug_bounty-5 | PRUTHU RAUT | cyber-security-awareness, bug-bounty, cybersecurity, bug-bounty-tips, bug-hunting | 17-Jun-2024 |
| 29.7 Lab: Detecting server-side prototype pollution without polluted property reflection | https://cyberw1ng.medium.com/29-7-lab-detecting-server-side-prototype-pollution-without-polluted-property-reflection-50e36dbe2629?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, hacking, bug-bounty, penetration-testing, careers | 17-Jun-2024 |
| OSINT FOR BUG HUNTER | https://medium.com/@Progsky/osint-for-bug-hunter-4ae5c700a13a?source=rss------bug_bounty-5 | Progsky | osint, hacking, bug-bounty | 17-Jun-2024 |
| Cross-Site Scripting via Web Cache Poisoning and WAF bypass | https://ltsirkov.medium.com/cross-site-scripting-via-web-cache-poisoning-and-waf-bypass-6cb3412d9e11?source=rss------bug_bounty-5 | Lyubomir Tsirkov | bug-bounty, bug-bounty-tips | 17-Jun-2024 |
| Naabu | https://medium.com/@roymemory2018/naabu-21c5438e05ae?source=rss------bug_bounty-5 | Audity Memory Roy | naabu, port-scanner, kali-tools, bug-bounty, penetration-testing | 17-Jun-2024 |
| 0xhashimRESETriddle: Vulnerable Web Application | https://medium.com/@hashimamin/0xhashimresetriddle-4f3270411800?source=rss------bug_bounty-5 | Hashim Amin | vulnerability-management, bug-bounty, vulnerability, portswigger, cybersecurity | 17-Jun-2024 |
| Brand-new prototype pollution gadget in MongoDB leading to RCE | https://systemweakness.com/brand-new-prototype-pollution-gadget-in-mongodb-leading-to-rce-8c5e0087c15e?source=rss------bug_bounty-5 | Vuusale | cybersecurity, vulnerability, bug-bounty, npm | 17-Jun-2024 |
| 29.6 Lab: Privilege escalation via server-side prototype pollution | https://cyberw1ng.medium.com/29-6-lab-privilege-escalation-via-server-side-prototype-pollution-4895762ce7d6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, penetration-testing, careers, hacking | 16-Jun-2024 |
| Broken Link Hijacking | https://medium.com/@saeidmicro/broken-link-hijacking-8ff4808a6cd2?source=rss------bug_bounty-5 | Saeid Khater | broken-link-hijacking, bug-bounty, cybersecurity | 16-Jun-2024 |
| Bug Zero — This month in CyberSecurity (June 1–15) | https://blog.bugzero.io/bug-zero-this-month-in-cybersecurity-june-1-15-51c4d918b5ae?source=rss------bug_bounty-5 | Akila Maithripala | cybersecurity, bug-zero, newsletter, bug-bounty | 16-Jun-2024 |
| Mastering Unauthenticated XSS Detection: Best Burp Suite Configurations for XSS Hunting | https://medium.com/@mayank_prajapati/mastering-unauthenticated-xss-detection-best-burp-suite-configurations-for-xss-hunting-523d78ecfda8?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | bug-bounty, xss-attack, hunting, hacking, penetration-testing | 16-Jun-2024 |
| Introducing r3conwhal3: Your Go-To Recon Automation Framework | https://ibrahimtahaistikbal.medium.com/introducing-r3conwhal3-your-go-to-recon-automation-framework-c8840f3a4e0b?source=rss------bug_bounty-5 | İbrahim Taha İstikbal | bug-bounty, security-tool, bug-bounty-tool, penetration-testing, reconnaissance | 16-Jun-2024 |
| Direct access to admin dashboard via leaked credentials | https://medium.com/@saeidmicro/direct-access-to-admin-dashboard-via-leaked-credentials-d1ed9bd18edb?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty, cybersecurity | 16-Jun-2024 |
| Complex Attack Types: Sample Scenarios 17 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-17-b73b1854ddbd?source=rss------bug_bounty-5 | Baris Dincer | cybersecurity, bug-bounty, threat-intelligence, freedomofinternet, penetration-testing | 16-Jun-2024 |
| Hacking (not only) for Money | https://medium.com/@guce/hacking-not-only-for-money-e71d72ab8c55?source=rss------bug_bounty-5 | gu ce | cybersecurity, bug-bounty, bug-bounty-program, vulnerability-assessment | 16-Jun-2024 |
| Day 20 of Our #CyberQuest1095 Day Challenge | https://d3athcod3.medium.com/day-20-of-our-cyberquest1095-day-challenge-680fbd060cb5?source=rss------bug_bounty-5 | D3athCod3 | cybersecurity, challenge, penetration-testing, hacker, bug-bounty | 16-Jun-2024 |
| Enumeração de subdomínios de diferentes fontes | https://medium.com/@souzaw/enumera%C3%A7%C3%A3o-de-subdom%C3%ADnios-de-diferentes-fontes-9c67f5bc59e3?source=rss------bug_bounty-5 | Wagner Souza | shell, bug-bounty, pentest, osint | 16-Jun-2024 |
| Complex Attack Types: Sample Scenarios 18 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-18-efaf527942ba?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, bug-bounty, penetration-testing, information-technology, cybersecurity | 16-Jun-2024 |
| Secrets in the Wild: Uncovering Hidden Threats | https://medium.com/@dzianisskliar29/secrets-in-the-wild-uncovering-hidden-threats-9b26bf180d0c?source=rss------bug_bounty-5 | Dzianis Skliar | bug-bounty, cybersecurity, threat-intelligence, penetration-testing | 16-Jun-2024 |
| Top 10 Search Engines Every Cybersecurity Professional Should Know | https://ikhaleelkhan.medium.com/top-10-search-engines-every-cybersecurity-professional-should-know-ad92a80ce5e6?source=rss------bug_bounty-5 | Khaleel Khan | bug-bounty, ethical-hacking, hacking, cybersecurity, infosec | 15-Jun-2024 |
| [Bounty Weekend] View Any User Design With Simple Path Traversal IDOR | https://medium.com/@rifqihz/bounty-weekend-view-any-user-design-with-simple-path-traversal-idor-5fe0f59f56a6?source=rss------bug_bounty-5 | Rifqi Hilmy Zhafrant | hackerone, bug-bounty, broken-access-control | 15-Jun-2024 |
| [Bounty Weekend] Possible Code Execution With Integration Script Tampering | https://medium.com/@rifqihz/bounty-weekend-possible-code-execution-with-integration-script-tampering-f38691e99d4b?source=rss------bug_bounty-5 | Rifqi Hilmy Zhafrant | hackerone, bug-bounty, cloud | 15-Jun-2024 |
| Unveiling the Secret World of Google Dorks: How Hackers Use These Search Tricks to Access Your… | https://systemweakness.com/unveiling-the-secret-world-of-google-dorks-how-hackers-use-these-search-tricks-to-access-your-117c53c05705?source=rss------bug_bounty-5 | Khaleel Khan | cybersecurity, bug-bounty, infosec, hacking, google | 15-Jun-2024 |
| Top 10 Search Engines Every Cybersecurity Professional Should Know | https://medium.com/the-shaco/top-10-search-engines-every-cybersecurity-professional-should-know-ad92a80ce5e6?source=rss------bug_bounty-5 | Khaleel Khan | bug-bounty, ethical-hacking, hacking, cybersecurity, infosec | 15-Jun-2024 |
| 29.5 Lab: Client-side prototype pollution in third-party libraries | https://cyberw1ng.medium.com/29-5-lab-client-side-prototype-pollution-in-third-party-libraries-e767b8352862?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, careers, cybersecurity, bug-bounty | 15-Jun-2024 |
| Intelligence HackTheBox Walkthrough | Active Directory | https://d3athcod3.medium.com/intelligence-hackthebox-walkthrough-active-directory-d9cb695201ce?source=rss------bug_bounty-5 | D3athCod3 | computer-science, bug-bounty, cybersecurity, hackthebox, hacking | 15-Jun-2024 |
| Desvendando uma Vulnerabilidade no Single Sign-On do Facebook: Minha Jornada e Recompensa de $3.000 | https://medium.com/@patrick-mns/desvendando-uma-vulnerabilidade-no-single-sign-on-do-facebook-minha-jornada-e-recompensa-de-3-000-9c1bcd2a9f4d?source=rss------bug_bounty-5 | Patrick Manoel | hackerone, meta, facebook, hacker, bug-bounty | 15-Jun-2024 |
| Complex Attack Types: Sample Scenarios 16 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-16-2424fcc0af62?source=rss------bug_bounty-5 | Baris Dincer | bug-bounty, information-technology, freedomofinternet, cybersecurity, penetration-testing | 15-Jun-2024 |
| How I hacked a marriage database: tale of IDOR | https://medium.com/@alimuhammadsecured/how-i-hacked-a-marriage-database-tale-of-idor-b4f951d23aa6?source=rss------bug_bounty-5 | Alimuhammadsecured | web-app-security, bug-bounty, penetration-testing, cybersecurity | 14-Jun-2024 |
| Postmortem a HTTP Request | https://medium.com/@RaunakGupta1922/postmortem-a-http-request-9599bb9d994b?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | hacking, burpsuite, http-request, web, bug-bounty | 14-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part — 3) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-3-141b7bfa6ed6?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bug-bounty-hunter, bug-bounty-program | 14-Jun-2024 |
| Complex Attack Types: Sample Scenarios 15 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-15-44899075e8fd?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, penetration-testing, information-technology, bug-bounty, cybersecurity | 14-Jun-2024 |
| How I Discovered a Critical Vulnerability in a Message Tracking System | https://adarshkrduaby.medium.com/how-i-discovered-a-critical-vulnerability-in-a-message-tracking-system-590b3518dcb8?source=rss------bug_bounty-5 | Adarsh Kumar | hacking, bug-report, programming, bug-hunting, bug-bounty | 14-Jun-2024 |
| 29.4 Lab: DOM XSS via an alternative prototype pollution vector | https://cyberw1ng.medium.com/29-4-lab-dom-xss-via-an-alternative-prototype-pollution-vector-6ad80e62c8c8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, hacking, cybersecurity, penetration-testing | 14-Jun-2024 |
| Discovering Critical Security Vulnerabilities: My Journey into Microsoft’s Release Plans Subdomain | https://ibrahimxss.medium.com/discovering-critical-security-vulnerabilities-my-journey-into-microsofts-release-plans-subdomain-c47621b2da2d?source=rss------bug_bounty-5 | #IbrahimXSS | html-injection, microsoft, xss-attack, bug-bounty, stored-xss | 14-Jun-2024 |
| How i discovered my first CVE | https://1-day.medium.com/how-i-discovered-my-first-cve-3692fab374ab?source=rss------bug_bounty-5 | 1day | bug-bounty, bug-bounty-tips, cve, bug-hunting, ethical-hacking | 14-Jun-2024 |
| Bug bounty: managing disappointment, avoiding burnout and consistent growth | https://medium.com/@un1tycyb3r/bug-bounty-managing-disappointment-avoiding-burnout-and-consistent-growth-df1e6195ca4e?source=rss------bug_bounty-5 | Un1tycyb3r | bug-bounty | 14-Jun-2024 |
| Discovering a Reflected XSS Vulnerability: My Journey into Microsoft’s Xbox.com | https://ibrahimxss.medium.com/discovering-a-reflected-xss-vulnerability-my-journey-into-microsofts-xbox-com-d607751be100?source=rss------bug_bounty-5 | #IbrahimXSS | bug-bounty, xss-attack, microsoft, xss-vulnerability, xbox | 14-Jun-2024 |
| Discovering 10 XSS Vulnerabilities: My Journey into Microsoft’s Support Platforms | https://ibrahimxss.medium.com/discovering-10-xss-vulnerabilities-my-journey-into-microsofts-support-platforms-b19c4e520c90?source=rss------bug_bounty-5 | #IbrahimXSS | xss-attack, xss-filter-bypass, microsoft, bug-bounty, xss-vulnerability | 14-Jun-2024 |
| Discovering Critical Security Vulnerabilities: My Journey into Microsoft’s Tech Community Portal | https://ibrahimxss.medium.com/discovering-critical-security-vulnerabilities-my-journey-into-microsofts-tech-community-portal-068505cd4316?source=rss------bug_bounty-5 | #IbrahimXSS | xss-attack, microsoft, bug-bounty, xss-bypass, xss-vulnerability | 14-Jun-2024 |
| Discovering Critical Security Vulnerabilities: My Journey into Microsoft’s Power Apps Portal | https://ibrahimxss.medium.com/discovering-critical-security-vulnerabilities-my-journey-into-microsofts-power-apps-portal-86e28311448e?source=rss------bug_bounty-5 | #IbrahimXSS | xss-attack, xss-vulnerability, bug-bounty, microsoft, xss-filter-bypass | 14-Jun-2024 |
| Discovering a Reflected XSS Filter Bypass: My Journey into Microsoft’s Support UAT Subdomain | https://ibrahimxss.medium.com/discovering-a-reflected-xss-filter-bypass-my-journey-into-microsofts-support-uat-subdomain-f9be22d8d795?source=rss------bug_bounty-5 | #IbrahimXSS | microsoft, xss-vulnerability, filter-bypass, xss-bypass, bug-bounty | 14-Jun-2024 |
| Discovering a CRLF Injection Vulnerability: My Journey into the MSRC Blog Website | https://ibrahimxss.medium.com/discovering-a-crlf-injection-vulnerability-my-journey-into-the-msrc-blog-website-5285169adddb?source=rss------bug_bounty-5 | #IbrahimXSS | bug-bounty, microsoft, xss-attack, crlf-injection | 14-Jun-2024 |
| Discovering a Critical Security Vulnerability: My Journey into Microsoft’s Lists Subdomain | https://ibrahimxss.medium.com/discovering-a-critical-security-vulnerability-my-journey-into-microsofts-lists-subdomain-f3e95ce68929?source=rss------bug_bounty-5 | #IbrahimXSS | bug-bounty, xss-bypass, microsoft, xss-attack, xss-vulnerability | 14-Jun-2024 |
| List of Easy P4 $$$$ | https://medium.com/@anonymoustriager/list-of-easy-p4-85ffb9d493ed?source=rss------bug_bounty-5 | Anonymous Triager | hacking, bugbounty-tips, easy-money, bugbounty-writeup, bug-bounty | 13-Jun-2024 |
| ICMTC CTF 2023 — International Competition of the Military Technical College | https://0xm4r5h4l.medium.com/icmtc-ctf-2023-international-competition-of-the-military-technical-college-65788f3c01a0?source=rss------bug_bounty-5 | 0xM4r5h4l | ctf-writeup, bug-bounty, ctf, ctf-walkthrough, cybersecurity | 13-Jun-2024 |
| The Best Games for Practicing Game Hacking | https://medium.com/@MrRipperoni/the-best-games-for-practicing-game-hacking-baba13493db8?source=rss------bug_bounty-5 | Mr.Ripperoni | bug-bounty, reverse-engineering, hacking, gamehacking, coding | 13-Jun-2024 |
| Path Traversal and RCE in Online Compilers | https://medium.com/@amal_n47h/path-traversal-and-rce-in-online-compilers-454a446effca?source=rss------bug_bounty-5 | Amal Nath | rce, online-compiler, bug-bounty, path-traversal, vulnerability | 13-Jun-2024 |
| Hacking Using Shodan | https://medium.com/@umarhere4u/hacking-using-shodan-3c4d46df81df?source=rss------bug_bounty-5 | Mohammad Umar Kachi | shodan, cybersecurity, bug-bounty, tips, search-engine-optimizati | 13-Jun-2024 |
| Understanding and Mitigating Cross-Site Request Forgery (CSRF) | https://medium.com/technology-hits/understanding-and-mitigating-cross-site-request-forgery-csrf-399d26627e60?source=rss------bug_bounty-5 | Yeu Lind Yeo | web-security, csrf, cybersecurity-awareness, bug-bounty, hacker | 13-Jun-2024 |
| Stealing credentials using XSS (xss on login page) Your password my password . | https://medium.com/@brutal_panda/stealing-credentials-using-xss-xss-on-login-page-your-password-my-password-059354240801?source=rss------bug_bounty-5 | Eliezer Binyam | bug-bounty | 13-Jun-2024 |
| Interview with Georgi Krastenov: Diving Deep into Web3 Security | https://web3-bug-bounty-platform.medium.com/interview-with-georgi-krastenov-diving-deep-into-web3-security-f6fae1f290f1?source=rss------bug_bounty-5 | Bug Bounty Platform | security-audit, web3, bug-bounty, cybersecurity | 13-Jun-2024 |
| Finding the newest and top-rated cybersecurity tools and content. | https://medium.com/@turvsec/finding-the-newest-and-top-rated-cybersecurity-tools-and-content-a06c9cb54e41?source=rss------bug_bounty-5 | TurvSec | pentesting, bug-bounty, cybersecurity, infosec | 13-Jun-2024 |
| Direct SSRF Leads to Exposing GitHub Codespaces Sensitive Metadata Instance on Azure Cloud | https://ph-hitachi.medium.com/direct-ssrf-leads-to-exposing-github-codespaces-sensitive-metadata-instance-on-azure-cloud-eb8ac4f076b1?source=rss------bug_bounty-5 | Ph.Hitachi | ssrf, bug-bounty, tips-and-tricks, metadata | 13-Jun-2024 |
| Hata Ödül Programları: Dış Kaynak Kullanımı Projenize Nasıl Yardımcı Olabilir? | https://medium.com/@integriteetr/hata-%C3%B6d%C3%BCl-programlar%C4%B1-d%C4%B1%C5%9F-kaynak-kullan%C4%B1m%C4%B1-projenize-nas%C4%B1l-yard%C4%B1mc%C4%B1-olabilir-9e55995ec74a?source=rss------bug_bounty-5 | Integriteetr | bug-bounty, immunefi, blockchain | 13-Jun-2024 |
| 29.3 Lab: Client-side prototype pollution via flawed sanitization | https://cyberw1ng.medium.com/29-3-lab-client-side-prototype-pollution-via-flawed-sanitization-ce78a48758fa?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, careers, bug-bounty, hacking | 13-Jun-2024 |
| Breaking Business Logic — Part: 42–4= 2 | https://thehemdeep.medium.com/breaking-business-logic-part-42-4-2-d8509ef70436?source=rss------bug_bounty-5 | Hemdeep Gamit | web-penetration-testing, web-security-testing, web-security, bug-bounty | 13-Jun-2024 |
| You Won’t Believe What We Found Using Shodan! | https://medium.com/@paritoshblogs/you-wont-believe-what-we-found-using-shodan-e796e13417a3?source=rss------bug_bounty-5 | Paritosh | cybersecurity, bug-bounty, information-security, hacking, shodan | 12-Jun-2024 |
| Using Shodan to Find and Exploit FTP Servers with Anonymous Access: A Step-by-Step Guide | https://systemweakness.com/using-shodan-to-find-and-exploit-ftp-servers-with-anonymous-access-a-step-by-step-guide-86a5b6e72f75?source=rss------bug_bounty-5 | Khaleel Khan | ethical-hacking, pentesting, hacking, bug-bounty, ctf-writeup | 12-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part-2) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-2-ef65d69de157?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-program, bug-bounty, bug-bounty-writeup, bug-bounty-hunter, bug-bounty-tips | 12-Jun-2024 |
| Hacking the Imaginary: A Journey to Discovering a Blind SSRF | https://medium.com/@kandar.souvik6/hacking-the-imaginary-a-journey-to-discovering-a-blind-ssrf-657aac60d8d0?source=rss------bug_bounty-5 | hacker_might | penetration-testing, server-side-request, ssrf, bug-bounty, imaginaries | 12-Jun-2024 |
| Securing 10,000+ Restaurants’ Customer PII Data | https://infosecwriteups.com/securing-10-000-restaurants-customer-pii-data-60013c9b44dc?source=rss------bug_bounty-5 | Renganathan | it-solutions, information-technology, bug-bounty, cybersecurity, bug-bounty-tips | 12-Jun-2024 |
| 29.2 Lab: DOM XSS via client-side prototype pollution | https://cyberw1ng.medium.com/29-2-lab-dom-xss-via-client-side-prototype-pollution-ebee89f58933?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, hacking, bug-bounty, penetration-testing | 12-Jun-2024 |
| ExtPenPy: Accelerate Your Reconnaissance Phase with Ease | https://medium.com/@maliktawfiq12/extpenpy-accelerate-your-reconnaissance-phase-with-ease-e79a164d4f68?source=rss------bug_bounty-5 | Maliktawfiq | cybersecurity, penetration-testing, bug-bounty-tips, bug-bounty, external-pentest | 12-Jun-2024 |
| Securing 10,000+ Restaurants’ Customer PII Data | https://renganathanofficial.medium.com/securing-10-000-restaurants-customer-pii-data-60013c9b44dc?source=rss------bug_bounty-5 | Renganathan | it-solutions, information-technology, bug-bounty, cybersecurity, bug-bounty-tips | 12-Jun-2024 |
| How I get an easy Blind SSRF by just reading writeups | https://medium.com/@mohamed0xmuslim/how-i-get-an-easy-blind-ssrf-by-just-reading-writeups-a5459bbdf96d?source=rss------bug_bounty-5 | Muhammad_Mostafa | bug-bounty, bugbounty-writeup, bug-bounty-tips | 12-Jun-2024 |
| HackerOne’s Double Standards: A Security Researcher’s Nightmare | https://medium.com/@redworld/hackerones-double-standards-a-security-researcher-s-nightmare-642be91ca64b?source=rss------bug_bounty-5 | Red | cybersecurity, bug-bounty, hackerone, scam-alert, scam | 11-Jun-2024 |
| Account Takeover (ATO) Checklist | https://medium.com/@anonymoustriager/account-takeover-ato-checklist-f67d2543b01f?source=rss------bug_bounty-5 | Anonymous Triager | bug-bounty-program, bug-bounty-writeup, bugbounty-tips, bugbounty-poc, bug-bounty | 11-Jun-2024 |
| BBB #2 — Introducing Daneel | https://medium.com/@JakobTheDev/bbb-2-introducing-daneel-69a391294654?source=rss------bug_bounty-5 | Jakob Pennington | software-development, bug-bounty | 11-Jun-2024 |
| How I found OpenHAB Automation Panels Accessible Without Authentication | https://medium.com/@jeetpal2007/how-i-found-openhab-automation-panels-accessible-without-authentication-d9edbb3280fd?source=rss------bug_bounty-5 | JEETPAL | bug-bounty-writeup, bug-bounty, authentication-bypass, bugbounty-tips, openhab-panel | 11-Jun-2024 |
| How to exploit CVE-2024–24919 path traversal | https://medium.com/@jeetpal2007/how-to-exploit-cve-2024-24919-path-traversal-5493c50d2581?source=rss------bug_bounty-5 | JEETPAL | bug-bounty, bug-bounty-writeup, bug-bounty-tips, path-traversal, cve-2024-24919 | 11-Jun-2024 |
| Forensic Investigation Operations — Basic Linux File System Analysis | https://medium.com/@brsdncr/forensic-investigation-operations-basic-linux-file-system-analysis-52025d7b2ec2?source=rss------bug_bounty-5 | Baris Dincer | forensics, penetration-testing, bug-bounty, freedomofinternet, cybersecurity | 11-Jun-2024 |
| 1250 $ For 3 Stored XSS AND PII Disclosure , Let’s See How FIS Scammed Me AND Bugcrowd Covered It… | https://medium.com/@0xAwali/1250-for-3-stored-xss-and-pii-disclosure-lets-see-how-fis-scammed-me-and-bugcrowd-covered-it-8561d9ce57b5?source=rss------bug_bounty-5 | Mahmoud M. Awali | bug-bounty | 11-Jun-2024 |
| Explaining the OWASP ZAP Proxy & Burp Suite tool in one video in just one hour | https://gentilsecurity.medium.com/explaining-the-owasp-zap-proxy-burp-suite-tool-in-one-video-in-just-one-hour-537bd7801134?source=rss------bug_bounty-5 | GenTiL | owaspzap, automation-testing, burpsuite, penetration-testing, bug-bounty | 11-Jun-2024 |
| شرح اداة OWASP ZAP Proxy & Burp Suite في فيديو واحد في ساعة واحدة فقط | https://gentilsecurity.medium.com/%D8%B4%D8%B1%D8%AD-%D8%A7%D8%AF%D8%A7%D8%A9-owasp-zap-proxy-burp-suite-%D9%81%D9%8A-%D9%81%D9%8A%D8%AF%D9%8A%D9%88-%D9%88%D8%A7%D8%AD%D8%AF-%D9%81%D9%8A-%D8%B3%D8%A7%D8%B9%D8%A9-%D9%88%D8%A7%D8%AD%D8%AF%D8%A9-%D9%81%D9%82%D8%B7-4e4c5e1142bf?source=rss------bug_bounty-5 | GenTiL | owaspzap, automation-testing, bug-bounty, penetration-testing, burpsuite | 11-Jun-2024 |
| 29.1 Lab: Client-side prototype pollution via browser APIs | https://cyberw1ng.medium.com/29-1-lab-client-side-prototype-pollution-via-browser-apis-642e91b8159d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, bug-bounty, penetration-testing, cybersecurity | 11-Jun-2024 |
| Uncovering Hidden Web Content with ffuf | https://medium.com/@umang.gulati19/uncovering-hidden-web-content-with-ffuf-55d29b21e627?source=rss------bug_bounty-5 | Math and Code | cybersecurity, bug-bounty, webfuzzing, web-security, infosec | 11-Jun-2024 |
| OWASP Mobile Top 10 for Android Penetration Testing and Checklist | https://medium.com/@phyowathone/owasp-mobile-top-10-52987725a12c?source=rss------bug_bounty-5 | Phyo WaThone Win | bug-bounty, bug-bounty-tips, androidhacking, android-security, android-pentesting-series | 11-Jun-2024 |
| Understand the world of Bug Bounty | https://medium.com/@hydd3n.sec/understand-the-world-of-bug-bounty-595c99b6782d?source=rss------bug_bounty-5 | Hydd3n | mindset, bug-bounty, infosec, goals | 10-Jun-2024 |
| Automation Tool for Easy P4 | https://medium.com/@anonymoustriager/automation-tool-for-easy-p4-c159bcae0cf2?source=rss------bug_bounty-5 | Anonymous Triager | bugbounty-tips, bug-bounty-program, hacking, bug-bounty, bugbounty-writeup | 10-Jun-2024 |
| 28.5 Lab: Server-side template injection with information disclosure via user-supplied objects | https://cyberw1ng.medium.com/28-5-lab-server-side-template-injection-with-information-disclosure-via-user-supplied-objects-bbb18def43e1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, hacking, careers, penetration-testing | 10-Jun-2024 |
| Communication and Network Security | https://medium.com/@paritoshblogs/communication-and-network-security-bb6c5558aa51?source=rss------bug_bounty-5 | Paritosh | cybersecurity, communication, bug-bounty, network-security, hacking | 10-Jun-2024 |
| Top 10 Cybersecurity Vulnerabilities and it’s Mitigation Methods | https://securrtech.medium.com/top-10-cybersecurity-vulnerabilities-and-its-mitigation-methods-0a5d75aceb34?source=rss------bug_bounty-5 | Securr | bug-bounty, cybersecurity, xss-attack, hacking, vulnerability | 10-Jun-2024 |
| Become a White Hat: Your Guide to Learning Ethical Hacking | https://medium.com/@itsamanyadav/become-a-white-hat-your-guide-to-learning-ethical-hacking-022842c49eec?source=rss------bug_bounty-5 | Its Aman Yadav | hacker, cybersecurity, hacking, learn-ethical-hacking, bug-bounty | 10-Jun-2024 |
| Why Bad Reviews Can Kill Your Software | https://medium.com/@joseph_52850/why-bad-reviews-can-kill-your-software-928f4af30a53?source=rss------bug_bounty-5 | Joseph Lacsamana | software-testing, software-development, bug-bounty, software-company, software-engineering | 10-Jun-2024 |
| I reported Zero-Day (CVE-2024–24919) … and got informative. | https://systemweakness.com/i-reported-zero-day-cve-2024-24919-and-got-informative-25409fac9765?source=rss------bug_bounty-5 | Sumedh Dawadi | cve-2024-24919, recon, hacking, zero-day-vulnerability, bug-bounty | 10-Jun-2024 |
| POC — CVE-2024–4956 -Unauthenticated Path Traversal | https://medium.com/@verylazytech/poc-cve-2024-4956-unauthenticated-path-traversal-f24b1a595e0e?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, cve-2023-4966, vulnerability, cybersecurity | 10-Jun-2024 |
| Bug Bounty Programs: How Outsourcing Can Help Your Project | https://medium.com/integritee/bug-bounty-programs-how-outsourcing-can-help-your-project-644539de575a?source=rss------bug_bounty-5 | Integritee Network | blockchain, bug-bounty, immunefi | 10-Jun-2024 |
| How I Found My First Bug Through Simple Fuzzing | https://medium.com/@hashimamin/how-i-found-my-first-bug-through-simple-fuzzing-c7d694a59a6b?source=rss------bug_bounty-5 | Hashim Amin | bugbounty-writeup, bug-bounty-tips, bugcrowd, bug-bounty, infosec | 10-Jun-2024 |
| Bug Bounty Hunting — Complete Guide (Part -1) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-1-21a87e35fdfa?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, bug-bounty-writeup, bug-bounty-hunter, bug-bounty, hacking | 09-Jun-2024 |
| How to Identify Vulnerable Hikvision Devices (IoT) to CVE-2017–7921 | https://blog.bugzero.io/how-to-identify-vulnerable-hikvision-devices-iot-to-cve-2017-7921-88b294645687?source=rss------bug_bounty-5 | Kawya De Silva | hikvison-cameras, security-alert, cybersecurity, bug-zero, bug-bounty | 09-Jun-2024 |
| How to Become a Hacker in 2024: A Comprehensive Guide | https://medium.com/@itsamanyadav/how-to-become-a-hacker-in-2024-a-comprehensive-guide-9bae6cfa6b15?source=rss------bug_bounty-5 | Its Aman Yadav | bug-bounty, become-a-hacker, hacker-in-2024, how-to-be-a-hacker, hacking-courses | 09-Jun-2024 |
| Discovering a vulnerability in HackerOne | https://medium.com/@loaymorad11/discovering-a-vulnerability-in-hackerone-00bbfc438d90?source=rss------bug_bounty-5 | Loaymorad | penetration-testing, hackerone, bug-bounty, cybersecurity | 09-Jun-2024 |
| Advanced Exploitation Techniques for Bug Bounty: Beyond the Basics | https://medium.com/@verylazytech/advanced-exploitation-techniques-for-bug-bounty-beyond-the-basics-2ee9cbc12773?source=rss------bug_bounty-5 | Very Lazy Tech | cyber, hacking, cybersecurity, bug-bounty, exploit | 09-Jun-2024 |
| 28.4 Lab: Server-side template injection in an unknown language with a documented exploit | https://cyberw1ng.medium.com/28-4-lab-server-side-template-injection-in-an-unknown-language-with-a-documented-exploit-df988ccf6277?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, penetration-testing, cybersecurity, bug-bounty | 09-Jun-2024 |
| Complex Attack Types: Sample Scenarios 13 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-13-8a5008c396db?source=rss------bug_bounty-5 | Baris Dincer | freedomofinternet, bug-bounty, cybersecurity, threat-intelligence, penetration-testing | 09-Jun-2024 |
| STRIPE API-Key Disclosure to Bounty | https://starlox.medium.com/stripe-api-key-disclosure-to-bounty-239d069f2455?source=rss------bug_bounty-5 | #$ubh@nk@r | bug-bounty, hacking, infosec, bug-hunting, information-disclosure | 09-Jun-2024 |
| HOW I HACKED NASA? | https://infosecwriteups.com/how-i-hacked-nasa-0715b6b5d7b8?source=rss------bug_bounty-5 | Krishnadev P Melevila | bug-bounty, hallof-fame, vdp, cybersecurity, nasa | 09-Jun-2024 |
| Day 13 of Our #CyberQuest1095 Challenge — Rust, Hack The Box, and Active Directory Adventures! | https://d3athcod3.medium.com/day-13-of-our-cyberquest1095-challenge-rust-hack-the-box-and-active-directory-adventures-442cd2c48f41?source=rss------bug_bounty-5 | D3athCod3 | bug-bounty, challenge, hacking, cybersecurity, cyberquest1095 | 09-Jun-2024 |
| Walk-Through of Bepractical.tech lab #4 | https://medium.com/@ross.jubert/walk-through-of-bepractical-tech-lab-4-bd4a96dc56bd?source=rss------bug_bounty-5 | Ross Jubert | bug-bounty, red-team, account-takeover, ethical-hacking, account-takeover-attacks | 09-Jun-2024 |
| The Ultimate Guide to Chaining Bugs: How I Found a Reverse Shell in a Bug Bounty Program | https://b0mk35h.medium.com/the-ultimate-guide-to-chaining-bugs-how-i-found-a-reverse-shell-in-a-bug-bounty-program-9dca54c20674?source=rss------bug_bounty-5 | Pronay Biswas | ethical-hacking, hunting, bug-bounty, cyberse, xss-attack | 09-Jun-2024 |
| How to preform recon in Bug Bounty? | https://systemweakness.com/how-to-preform-recon-in-bug-bounty-8d37a1fd262f?source=rss------bug_bounty-5 | Imad Husanovic | programming, cybersecurity, hacking, bug-bounty-tips, bug-bounty | 09-Jun-2024 |
| ʟᴀɴᴢᴀᴍɪᴇɴᴛᴏ ɪɴᴄᴇɴᴛɪᴠᴀᴅᴏ ᴅᴇ ᴛᴇsᴛɴᴇᴛ | https://medium.com/@Tallomania/%CA%9F%E1%B4%80%C9%B4%E1%B4%A2%E1%B4%80%E1%B4%8D%C9%AA%E1%B4%87%C9%B4%E1%B4%9B%E1%B4%8F-%C9%AA%C9%B4%E1%B4%84%E1%B4%87%C9%B4%E1%B4%9B%C9%AA%E1%B4%A0%E1%B4%80%E1%B4%85%E1%B4%8F-%E1%B4%85%E1%B4%87-%E1%B4%9B%E1%B4%87s%E1%B4%9B%C9%B4%E1%B4%87%E1%B4%9B-df0c7d1e77cd?source=rss------bug_bounty-5 | Ay Zed | rewards, testnet, bug-bounty, ai | 09-Jun-2024 |
| [Bounty Weekend] Disable Any Customer Ability To Create Service Account With Business Logic… | https://medium.com/@rifqihz/bounty-weekend-disable-any-customer-ability-to-create-service-account-with-business-logic-b83baa893b4d?source=rss------bug_bounty-5 | Rifqi Hilmy Zhafrant | bug-bounty-tips, penetration-testing, hackerone, bug-bounty | 08-Jun-2024 |
| [Bounty Weekend] CTF Level XSS in a Real-World Application | https://medium.com/@rifqihz/bounty-weekend-ctf-level-xss-in-a-real-world-application-7a9278bc7018?source=rss------bug_bounty-5 | Rifqi Hilmy Zhafrant | hackerone, penetration-testing, bug-bounty-tips, bug-bounty | 08-Jun-2024 |
| How to Find Bugs and Get Bucks: 2024 Edition | https://medium.com/@itsamanyadav/how-to-find-bugs-and-get-bucks-2024-edition-776c5b098b3e?source=rss------bug_bounty-5 | Its Aman Yadav | bug-bounty, how-to-find-bug, 2024, how-to-be-a-hacker, hacking | 08-Jun-2024 |
| Capturing Android App Traffic via Wireshark - Android Pentesting | https://medium.com/@phyowathone/capturing-android-app-traffic-via-wireshark-android-pentesting-d0ee1539089f?source=rss------bug_bounty-5 | Phyo WaThone Win | cybersecurity, android-pentesting, bug-bounty-hunting, pentesting, bug-bounty | 08-Jun-2024 |
| 28.3 Lab: Server-side template injection using documentation | https://cyberw1ng.medium.com/28-3-lab-server-side-template-injection-using-documentation-3e8f761b0ca8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, careers, cybersecurity, penetration-testing | 08-Jun-2024 |
| Day 12 of Our #CyberQuest1095 Day Challenge | https://d3athcod3.medium.com/day-12-of-our-cyberquest1095-day-challenge-977225c7ce97?source=rss------bug_bounty-5 | D3athCod3 | cyberquest1095, security, cybersecurity, hacking, bug-bounty | 08-Jun-2024 |
| Abusing auto mail responders to access internal workplaces | https://rikeshbaniya.medium.com/abusing-auto-mail-responders-to-access-internal-workplaces-04fcc8ba2c99?source=rss------bug_bounty-5 | Rikesh Baniya | bounties, pentest, hackerone, bounty-reward, bug-bounty | 08-Jun-2024 |
| POV HTB Writeup | https://medium.com/@damaidec/pov-htb-writeup-becf386c6dc0?source=rss------bug_bounty-5 | Damaidec | hacking, ethical-hacking, bug-bounty, hackthebox, ctf-writeup | 08-Jun-2024 |
| Super Blind SQL Injection- $20000 bounty | Thousands of targets still vulnerable | https://medium.com/@pranshux0x/super-blind-sql-injection-20000-bounty-thousands-of-targets-still-vulnerable-f9b013765448?source=rss------bug_bounty-5 | priyanshu shakya | bug-bounty | 08-Jun-2024 |
| Create Your Own Public-Private Key Pair in Just 5 Minutes! (Cybersecurity) | https://medium.com/@paritoshblogs/create-your-own-public-private-key-pair-in-just-5-minutes-cybersecurity-535038665ad9?source=rss------bug_bounty-5 | Paritosh | hacking, keys, cryptography, cybersecurity, bug-bounty | 08-Jun-2024 |
| Vulnerable WordPress May 2024 (Leylan) | https://medium.com/@onhexgroup/vulnerable-wordpress-may-2024-leylan-bd429d56d300?source=rss------bug_bounty-5 | Onhexgroup | wordpress-security, infosec, wordpress, bug-bounty, web-security | 08-Jun-2024 |
| Cracking the Code: How Cryptography Safeguards Your Digital World | https://medium.com/@paritoshblogs/cracking-the-code-how-cryptography-safeguards-your-digital-world-c1c1887c84ae?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-technology, cryptography, hacking, cybersecurity | 07-Jun-2024 |
| I got my First Bounty $$$ after three years of hard work | https://medium.com/@mr_ayyan/i-got-my-first-bounty-after-three-years-of-hard-work-856c43bbb6c1?source=rss------bug_bounty-5 | Mrayyanirfan | bounty-program, rewards-programs, vulnerability, bug-bounty, first-bounty | 07-Jun-2024 |
| JS for Bug Bounties 2.0 Extreme Edition 2024 | https://kongsec.medium.com/js-for-bug-bounties-2-0-extreme-edition-2024-f167fa48276a?source=rss------bug_bounty-5 | Kongsec | recon, bugcrowd, hackerone, javascript, bug-bounty | 07-Jun-2024 |
| 28.2 Lab: Basic server-side template injection (code context) | https://cyberw1ng.medium.com/28-2-lab-basic-server-side-template-injection-code-context-2a927ed117e6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, bug-bounty, penetration-testing, hacking | 07-Jun-2024 |
| Simulating a Ransomware Attack with Caldera. | https://medium.com/@josh.beck2006/simulating-a-ransomware-attack-with-caldera-3d77d0cb95d2?source=rss------bug_bounty-5 | Josh Beck | cybersecurity, penetration-testing, ctf, bug-bounty | 07-Jun-2024 |
| Hacking Porn and Dating sites — a Theme Based Bugbounty Hunting | https://medium.com/@nithissh/hacking-porn-and-dating-sites-a-theme-based-bugbounty-hunting-d024b8137bc7?source=rss------bug_bounty-5 | Nithissh | bugbounty-writeup, research, bug-bounty | 07-Jun-2024 |
| Complex Attack Types: Sample Scenarios 12 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-12-0d93a70ee8f4?source=rss------bug_bounty-5 | Baris Dincer | cybersecurity, freedomofinternet, bug-bounty, penetration-testing, threat-intelligence | 07-Jun-2024 |
| Another Easy P4 you miss!!! | https://medium.com/@anonymoustriager/another-easy-p4-you-miss-dcadf65adbcb?source=rss------bug_bounty-5 | Anonymous Triager | bugbounty-poc, bugs, bug-bounty, bug-bounty-tips, bug-bounty-hunter | 06-Jun-2024 |
| Unlock Any PC Remotely with Just an Image: The Ultimate VNC Hack! | https://medium.com/@paritoshblogs/unlock-any-pc-remotely-with-just-an-image-the-ultimate-vnc-hack-a92b22637094?source=rss------bug_bounty-5 | Paritosh | cybersecurity, remote-working, hacking, vnc, bug-bounty | 06-Jun-2024 |
| The only recon methodology you need. | https://an0nbil.medium.com/the-only-recon-methodology-you-need-cf6c3aff1af1?source=rss------bug_bounty-5 | an0nbil | ethical-hacking, bug-bounty, bug-bounty-tips, reconnaissance, programming | 06-Jun-2024 |
| Decimal x Securr | https://decimalchain.medium.com/decimal-x-securr-96114c277d70?source=rss------bug_bounty-5 | DecimalChain | bug-bounty, decimal, securr | 06-Jun-2024 |
| Scope Sentry is a tool with functions such as asset mapping… | https://medium.com/@Autumn52/scope-sentry-is-a-tool-with-functions-such-as-asset-mapping-fe0af70ace0a?source=rss------bug_bounty-5 | Autumn | hacker, hackathons, bug-bounty, tools, bug-bounty-tips | 06-Jun-2024 |
| Securing the Future: Understanding Vulnerabilities in Large Language Models | https://medium.com/@tusharsaini484/securing-the-future-understanding-vulnerabilities-in-large-language-models-13bbfeac95cf?source=rss------bug_bounty-5 | Tushar Saini | blog, artificial-intelligence, bug-bounty, large-language-models, cybersecurity | 06-Jun-2024 |
| Bug bounty — Cybersecurity subcontractor exposes business data to other customers | https://theclemvp.medium.com/bug-bounty-cybersecurity-subcontractor-exposes-business-data-to-other-customers-d8e1a011ff4b?source=rss------bug_bounty-5 | Clément | cybersecurity, bug-bounty | 06-Jun-2024 |
| 28.1 Lab: Basic Server-side template injection | https://cyberw1ng.medium.com/28-1-lab-basic-server-side-template-injection-0744f96c74b8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, hacking, careers, penetration-testing | 06-Jun-2024 |
| Understanding Cybersecurity : Keeping Our Digital World Safe | https://adnancodestech.medium.com/understanding-cybersecurity-keeping-our-digital-world-safe-1abdd2876a7c?source=rss------bug_bounty-5 | Cryptify | cybersecurity, penetration-testing, bug-bounty-tips, bug-bounty, pentesting | 06-Jun-2024 |
| Getting started with Bug Bounty | https://securrtech.medium.com/getting-started-with-bug-bounty-8fd72650184f?source=rss------bug_bounty-5 | Securr | web3, cybersecurity, ai, bug-bounty, learn | 06-Jun-2024 |
| Discovering a Critical Vulnerability in application : The Journey of an Accidental Admin | https://adarshkrduaby.medium.com/discovering-a-critical-vulnerability-in-application-the-journey-of-an-accidental-admin-1aebe9d31e09?source=rss------bug_bounty-5 | Adarsh Kumar | bug-zero, cyber-security-research, critical-vulnerabilities, securityflaw, bug-bounty | 06-Jun-2024 |
| Stored XSS to Account Takeover (AWS Cognito) | https://medium.com/@majix_de/stored-xss-to-account-takeover-aws-cognito-c5f76f04befe?source=rss------bug_bounty-5 | Majix | cybersecurity, account-takeover, pentest, bug-bounty, cognito | 06-Jun-2024 |
| Easy Latest Critical Severity? | https://medium.com/@anonymoustriager/easy-latest-critical-severity-fc9413d57d80?source=rss------bug_bounty-5 | Anonymous Triager | hacking, bug-bounty, bug-bounty-tips, bugbounty-writeup, bug-bounty-program | 05-Jun-2024 |
| Active Directory Red Teaming: A Comprehensive Guide | https://medium.com/@paritoshblogs/active-directory-red-teaming-a-comprehensive-guide-06b1f008d0d4?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, hacking, information-technology, active-directory | 05-Jun-2024 |
| EMPIRE CTF: LUPINONE VulnHub Walkthrough | Writeup | https://shamsulmehmood.medium.com/empire-ctf-lupinone-vulnhub-walkthrough-writeup-bea8558ea03b?source=rss------bug_bounty-5 | SHAMS UL MEHMOOD | bug-bounty, pentesting, cybersecurity, machine-learning, hacking | 05-Jun-2024 |
| Master Bug Bounty Hunting: Your Comprehensive Bug Bounty Course in Hindi | https://medium.com/@marketing_94387/master-bug-bounty-hunting-your-comprehensive-bug-bounty-course-in-hindi-ab990527f9b0?source=rss------bug_bounty-5 | Skilcamp | online-learning-platform, bug-bounty-tips, skilcamp, bug-bounty | 05-Jun-2024 |
| 27.5 Lab: DOM-based cookie manipulation | https://cyberw1ng.medium.com/27-5-lab-dom-based-cookie-manipulation-b939af57ef06?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, bug-bounty, careers, hacking | 05-Jun-2024 |
| SmartAuditor.AI and new ChatGPT bot for audits | https://medium.com/@bugbountydegen/smartauditor-ai-and-new-chatgpt-bot-for-audits-a8361ec7f52d?source=rss------bug_bounty-5 | Bug Bounty Degen | openai, smart-contracts, bug-bounty, cybersecurity, chatgpt | 05-Jun-2024 |
| CVE-2024–4358 Critical Flaw Found in Progress Telerik Report Server | https://medium.com/@arafatx90n/cve-2024-4358-critical-flaw-found-in-progress-telerik-report-server-0f379f844819?source=rss------bug_bounty-5 | ARAFAT | ethical-hacking, bug-bounty, cybersecurity | 05-Jun-2024 |
| Insecure Firebase Unauthorized Write Access on Crypto Exchange Bug Bounty | https://scr1pty.medium.com/insecure-firebase-unauthorized-write-access-on-crypto-exchange-bug-bounty-9e9187b627b1?source=rss------bug_bounty-5 | Scr1pty | penetration-testing, bug-bounty-tips, crypto, bug-bounty, security | 05-Jun-2024 |
| Another Easy P4? | https://medium.com/@anonymoustriager/another-easy-p4-ceaa67ef7e52?source=rss------bug_bounty-5 | Anonymous Triager | bugbounty-writeup, bug-bounty-tips, bug-bounty-program, cybersecurity, bug-bounty | 05-Jun-2024 |
| CVE-2024–4956: UNAUTHENTICATED PATH TRAVERSAL IN NEXUS REPOSITORY MANAGER 3 | https://codewithvamp.medium.com/cve-2024-4956-unauthenticated-path-traversal-in-nexus-repository-manager-3-b4e811ad7e37?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | bug-bounty, cve, coding, hacking, cybersecurity | 05-Jun-2024 |
| Easiest P4? | https://medium.com/@anonymoustriager/easiest-p4-feb9e9302562?source=rss------bug_bounty-5 | Anonymous Triager | bug-bounty-tips, hacking, swag, bounty-program, bug-bounty | 04-Jun-2024 |
| My report on using lubuntu 24.04 | https://ariedwikusuma9.medium.com/my-report-on-using-lubuntu-24-04-3040bbdb9bab?source=rss------bug_bounty-5 | Ariekusuma | bug-bounty, ubuntu, wireguard, lubuntu, linux | 04-Jun-2024 |
| The Chronicle Protocol Bug Bounty is Live | https://medium.com/@ChronicleProtocol/the-chronicle-protocol-bug-bounty-is-live-05b5332e6c76?source=rss------bug_bounty-5 | Chronicle Protocol | oracle, bug-bounty, blockchain, cantina, chronicle-protocol | 04-Jun-2024 |
| Hacking Android Apps: A Comprehensive Guide | https://medium.com/@roguepayload/hacking-android-apps-a-comprehensive-guide-9905c075021f?source=rss------bug_bounty-5 | Rogue Payload | hacking, bug-bounty-tips, pentesting, android, bug-bounty | 04-Jun-2024 |
| 27.4 Lab: DOM-based open redirection | https://cyberw1ng.medium.com/27-4-lab-dom-based-open-redirection-e00e760c9046?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, hacking, penetration-testing, bug-bounty | 04-Jun-2024 |
| How We Got $$$$$ For a Blind Stored XSS To ATO | https://medium.com/@shari7a0x/how-we-got-for-a-blind-stored-xss-to-ato-2e9b939055ec?source=rss------bug_bounty-5 | Shari7a0x | bugs, hackerone, bug-bounty-tips, bug-bounty, xss-attack | 04-Jun-2024 |
| Exposing Login Page Vulnerabilities with Time-Based SQL Injection | https://medium.com/@sachinkewat809/exposing-login-page-vulnerabilities-with-time-based-sql-injection-694a04911e93?source=rss------bug_bounty-5 | Sachin kewat | bug-bounty-tips, cybersecurity, penetration-testing, bug-bounty, security | 03-Jun-2024 |
| How I Got My First €€€€ Bounty | https://machiavellli.medium.com/how-i-got-my-first-bounty-65ad8a1763de?source=rss------bug_bounty-5 | Machiavelli | cybersecurity, bug-bounty, information-security | 03-Jun-2024 |
| Earning Your First $1000 as a Cybersecurity Researcher, Hacker, or Hunter | https://securrtech.medium.com/earning-your-first-1000-as-a-cybersecurity-researcher-hacker-or-hunter-8532bcaa48b6?source=rss------bug_bounty-5 | Securr | dollar, cyber-security-awareness, earn, bug-bounty, web-development | 03-Jun-2024 |
| My First Finding Bug on a Bugcrowd BBP | https://medium.com/@bhuiyanaman71/my-first-bug-on-a-bbp-fdd512307284?source=rss------bug_bounty-5 | Aman Bhuiyan | xss-vulnerability, bug-bounty, hacking, injection | 03-Jun-2024 |
| 27.2 Lab: DOM XSS using web messages and JSON.parse | https://cyberw1ng.medium.com/27-2-lab-dom-xss-using-web-messages-and-json-parse-79dbe4290efb?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, cybersecurity, hacking, bug-bounty, careers | 03-Jun-2024 |
| Hack and Pay Later: Bypassing Online Payment Method | https://medium.com/@tirqwork1/hack-and-pay-later-bypassing-online-payment-method-8b366e0dc7ee?source=rss------bug_bounty-5 | ARoy | bug-bounty, cybersecurity, bugbounty-writeup, payment-gateway, infosec | 03-Jun-2024 |
| 27.3 Lab: DOM XSS using web messages and JSON.parse | https://cyberw1ng.medium.com/27-2-lab-dom-xss-using-web-messages-and-json-parse-79dbe4290efb?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, cybersecurity, hacking, bug-bounty, careers | 03-Jun-2024 |
| UPI Recon | Scammed on Instagram /Telegram? | https://medium.com/@anonymoustriager/upi-recon-scammed-on-instagram-telegram-3713f9dd77cd?source=rss------bug_bounty-5 | Anonymous Triager | hacker, telegram, recon, cybersecurity, bug-bounty | 02-Jun-2024 |
| Bug Zero — 2 Weeks in Cybersecurity (May 15–31) | https://blog.bugzero.io/bug-zero-2-weeks-in-cybersecurity-may-15-31-dbc07d60dfe5?source=rss------bug_bounty-5 | Akila Maithripala | bug-zero, sri-lanka, cybersecurity, bug-bounty | 02-Jun-2024 |
| BBB #1 — Back Hacking | https://medium.com/@JakobTheDev/bbb-1-back-hacking-acafd03d7d4e?source=rss------bug_bounty-5 | Jakob Pennington | bug-bounty, application-security, hacking | 02-Jun-2024 |
| 27.2 Lab: DOM XSS using web messages and a JavaScript URL | https://cyberw1ng.medium.com/27-2-lab-dom-xss-using-web-messages-and-a-javascript-url-3d29822c295d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, hacking, penetration-testing | 02-Jun-2024 |
| A simple IDOR worth $400. | https://el-cezeri.medium.com/a-simple-idor-worth-400-65663937a5f4?source=rss------bug_bounty-5 | Samet Yiğit | bugbounty-tips, bug-bounty, ödülavcılığı | 02-Jun-2024 |
| Mastering Sway-Analyzer | https://medium.com/@angelos404/mastering-sway-analyzer-27379d7903db?source=rss------bug_bounty-5 | angelos404 | smart-contracts, web3, blockchain, bug-bounty, sway | 02-Jun-2024 |
| Easy $$$$ Bounty for leaked token in java script url | https://medium.com/@eslammonex/easy-bounty-for-leaked-token-in-java-script-url-5491cf567328?source=rss------bug_bounty-5 | EslamMonex | bug-bounty | 02-Jun-2024 |
| How To Escalate P5 Email HTML Injection to P4. | https://medium.com/@Ajakcybersecurity/how-to-escalate-p5-email-html-injection-to-p4-19a61a85a76b?source=rss------bug_bounty-5 | AjakCybersecurity | bug-bounty, hacking, penetration-testing, cybersecurity, technology | 02-Jun-2024 |
| شرح اللاب بطريقة سهلة ومبسطة لفهم نوع ال Reflected XSS into HTML context with nothing encoded | https://gentilsecurity.medium.com/%D8%B4%D8%B1%D8%AD-%D8%A7%D9%84%D9%84%D8%A7%D8%A8-%D8%A8%D8%B7%D8%B1%D9%8A%D9%82%D8%A9-%D8%B3%D9%87%D9%84%D8%A9-%D9%88%D9%85%D8%A8%D8%B3%D8%B7%D8%A9-%D9%84%D9%81%D9%87%D9%85-%D9%86%D9%88%D8%B9-%D8%A7%D9%84-reflected-xss-into-html-context-with-nothing-encoded-9dde8cf2baa3?source=rss------bug_bounty-5 | GenTiL | owasp, web-development, penetration-testing, cybersecurity, bug-bounty | 01-Jun-2024 |
| ماذا تعرف عن ثغرة XSS? (Cross-Site Script) | https://gentilsecurity.medium.com/%D9%85%D8%A7%D8%B0%D8%A7-%D8%AA%D8%B9%D8%B1%D9%81-%D8%B9%D9%86-%D8%AB%D8%BA%D8%B1%D8%A9-xss-cross-site-script-d45ecf75b0a6?source=rss------bug_bounty-5 | GenTiL | xss-attack, bug-bounty, vulnerability, technology, hacking | 01-Jun-2024 |
| كيفية استخدام أداة ParamSpider — لبرنامج الجوائز الأمنية (Bug Bounty) | https://gentilsecurity.medium.com/%D9%83%D9%8A%D9%81%D9%8A%D8%A9-%D8%A7%D8%B3%D8%AA%D8%AE%D8%AF%D8%A7%D9%85-%D8%A3%D8%AF%D8%A7%D8%A9-paramspider-%D9%84%D8%A8%D8%B1%D9%86%D8%A7%D9%85%D8%AC-%D8%A7%D9%84%D8%AC%D9%88%D8%A7%D8%A6%D8%B2-%D8%A7%D9%84%D8%A3%D9%85%D9%86%D9%8A%D8%A9-bug-bounty-c1361d476c4a?source=rss------bug_bounty-5 | GenTiL | paramspider, penetration-testing, bug-bounty, web-development, penetration-testing-tools | 01-Jun-2024 |
| هل مازلت محتار في الاختلاف بين Reflected XSS و DOM XSS؟ اليوم ستحسم المسألة بكل ثقة | https://gentilsecurity.medium.com/%D9%87%D9%84-%D9%85%D8%A7%D8%B2%D9%84%D8%AA-%D9%85%D8%AD%D8%AA%D8%A7%D8%B1-%D9%81%D9%8A-%D8%A7%D9%84%D8%A7%D8%AE%D8%AA%D9%84%D8%A7%D9%81-%D8%A8%D9%8A%D9%86-reflected-xss-%D9%88-dom-xss-%D8%A7%D9%84%D9%8A%D9%88%D9%85-%D8%B3%D8%AA%D8%AD%D8%B3%D9%85-%D8%A7%D9%84%D9%85%D8%B3%D8%A3%D9%84%D8%A9-%D8%A8%D9%83%D9%84-%D8%AB%D9%82%D8%A9-c4224d126056?source=rss------bug_bounty-5 | GenTiL | reflected-xss, hacking, dom-xss, web-penetration-testing, bug-bounty | 01-Jun-2024 |
| MY FIRST BUG ! | https://medium.com/@amjadkhan_72632/my-first-bug-8d52edf256c7?source=rss------bug_bounty-5 | Amjad Khan | cybersecurity, bug-bounty | 01-Jun-2024 |
| SQLi, SSRF And Code Secrets — All In One | https://medium.com/@red.whisperer/sqli-ssrf-and-code-secrets-all-in-one-a387c734c84f?source=rss------bug_bounty-5 | Chux | security, hacking, cybersecurity, infosec, bug-bounty | 01-Jun-2024 |
| Are you still confused about the difference between Reflected XSS and DOM XSS? | https://gentilsecurity.medium.com/are-you-still-confused-about-the-difference-between-reflected-xss-and-dom-xss-45715d0fe37b?source=rss------bug_bounty-5 | GenTiL | dom-xss, hacking, bug-bounty, web-penetration-testing, reflected-xss | 01-Jun-2024 |
| Chaining NOSQLi and XSS to Take Over a Server — HackTheBox Stocker Walkthrough | https://medium.com/@The_Hiker/chaining-nosqli-and-xss-to-take-over-a-server-hackthebox-stocker-walkthrough-e549bf3f8bbf?source=rss------bug_bounty-5 | TheHiker | hackthebox, hackthebox-writeup, web-exploitation, hacking, bug-bounty | 01-Jun-2024 |
| Unveiling the Sneaky CSV Injection: VDP vs. Objective-Based Offensive Tactics | https://abawazeeer.medium.com/unveiling-the-sneaky-csv-injection-vdp-vs-objective-based-offensive-tactics-208b22b8bba1?source=rss------bug_bounty-5 | AliBawazeEer | vulnerability-disclosure, bug-bounty, vulnerability-assessment, owasp-top-10, application-security | 01-Jun-2024 |
| cy27.1 Lab: DOM XSS using web messages | https://cyberw1ng.medium.com/cy27-1-lab-dom-xss-using-web-messages-5c2346edc08b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, hacking, careers, cybersecurity | 01-Jun-2024 |
| Use FFUF to bypass Burp Suite’s Intruder attacks delay!!! | https://hackermater.medium.com/use-ffuf-to-bypass-burp-suite-intruder-attacks-delay-c5087c912741?source=rss------bug_bounty-5 | hackermater | bug-bounty-writeup, burpsuite, hacking, bug-bounty-tips, bug-bounty | 01-Jun-2024 |
| 90 Days Cybersecurity Learning Challenge | https://medium.com/@unknow.com/90-days-cybersecurity-learning-challenge-81e1777b31f5?source=rss------bug_bounty-5 | Cyber_hunter | bug-bounty, careers, cybersecurity | 01-Jun-2024 |
| Attacking Web Applications with Ffuf | Skills Assessment — Walkthrough | https://medium.com/@Mx0o14/attacking-web-applications-with-ffuf-skills-assessment-walkthrough-5af4160fe75b?source=rss------bug_bounty-5 | Mohamed Ashraf | hackthebox, bug-bounty, cybersecurity, hacking | 31-May-2024 |
| The Planets CTF | Earth CTF | Vulnhub | WriteUp | Walkthrough | https://shamsulmehmood.medium.com/the-planets-ctf-earth-ctf-vulnhub-writeup-walkthrough-38d13c16643c?source=rss------bug_bounty-5 | SHAMS UL MEHMOOD | hacking, cybersecurity, bug-bounty, bugs, cybercrime | 31-May-2024 |
| Pattern Scanning Intro (For Game Hacking) | https://medium.com/@MrRipperoni/pattern-scanning-intro-for-game-hacking-b13401b562fb?source=rss------bug_bounty-5 | Mr.Ripperoni | coding, reverse-engineering, games, bug-bounty, hacking | 31-May-2024 |
| How i get XSS & HTMLi with FUFF | https://kiraadx.medium.com/how-i-get-xss-htmli-with-fuff-0c8a4b094636?source=rss------bug_bounty-5 | KiRaaDx | bug-bounty, cybersecurity, bug-bounty-tips | 31-May-2024 |
| OSCP Review | https://medium.com/@nosignalrightnow/oscp-review-3a9568bf9c5d?source=rss------bug_bounty-5 | cowabunga | bug-bounty, offensive-security, penetration-testing, oscp, cybersecurity | 31-May-2024 |
| 26.3 Lab: Indirect prompt injection | https://cyberw1ng.medium.com/26-3-lab-indirect-prompt-injection-27d35f2e0e90?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, careers, cybersecurity, bug-bounty | 31-May-2024 |
| CVE-2024–24919: Zero-Day Vulnerability leads to unauthorized Information Disclosure in Checkpoint | https://codewithvamp.medium.com/cve-2024-24919-zero-day-vulnerability-leads-to-unauthorized-information-disclosure-in-checkpoint-97873b47d160?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | computer-science, hacking, bug-bounty, cybersecurity, cve | 31-May-2024 |
| How I Found a Vulnerability in Apple: A Journey of Discovery and Impact | https://medium.com/@husnainsuleman/how-i-found-a-vulnerability-in-apple-a-journey-of-discovery-and-impact-0e55f14eef75?source=rss------bug_bounty-5 | Husnain Suleman | bug-bounty, storytelling, security, cybersecurity, apple | 31-May-2024 |
| IDOR Exploit: A Tale of Account Takeover | https://danial1337.medium.com/idor-exploit-a-tale-of-account-takeover-51ab2c47c246?source=rss------bug_bounty-5 | Muhammad Danial | penetration-testing, hacking, cybersecurity, web-security, bug-bounty | 31-May-2024 |
| Advanced Web Cache Poisoning | https://medium.com/@majix_de/advanced-web-cache-poisoning-e6e17d5290ce?source=rss------bug_bounty-5 | Majix | web-cache-poisoning, penetration-testing, hacking, bug-bounty, pentesting | 31-May-2024 |
| Creative Steps | Reflected XSS into HTML context with nothing encoded | https://gentilsecurity.medium.com/creative-steps-reflected-xss-into-html-context-with-nothing-encoded-0a30d4f2dc24?source=rss------bug_bounty-5 | GenTiL | cybersecurity, bug-bounty, owasp, penetration-testing, web-development | 30-May-2024 |
| Exported Activity In Android Application Allowing Access to Payments Information | https://medium.com/@mohanad.hussam23/exported-activity-in-android-application-allowing-access-to-payments-information-166dfee5008e?source=rss------bug_bounty-5 | Muhanad Israiwi | hacking, bugs, penetration-testing, bug-bounty, androidhacking | 30-May-2024 |
| Static Testing of iOS Applications | https://sandeepvi.medium.com/static-testing-of-ios-applications-cb09bd8f2927?source=rss------bug_bounty-5 | Sandeep Vishwakarma | hacking, bug-bounty, ios, static-code-analysis | 30-May-2024 |
| Secrets of Data Security : Trendy Tools and Tips You Can’t Ignore! | https://medium.com/@paritoshblogs/secrets-of-data-security-trendy-tools-and-tips-you-cant-ignore-a5d72eb7eedf?source=rss------bug_bounty-5 | Paritosh | data-security, hacking, cybersecurity, bug-bounty, security | 30-May-2024 |
| Exciting Announcement: We’re Collaborating with Aptron to Boost Web3 Security! | https://securrtech.medium.com/exciting-announcement-were-collaborating-with-aptron-to-boost-web3-security-4f58726c3ae0?source=rss------bug_bounty-5 | Securr | web3, ai, web3-security, bug-bounty, blockchain | 30-May-2024 |
| Enhancing Cybersecurity: Lessons from a Critical XSS Vulnerability in DMRC’s Website | https://hackerhalt.medium.com/enhancing-cybersecurity-lessons-from-a-critical-xss-vulnerability-in-dmrcs-website-a0e39aeb0318?source=rss------bug_bounty-5 | Hacker Halt Live | hacker, hacking, bug-bounty, security, cybersecurity | 30-May-2024 |
| Application Level DoS - The Lagging Nightmare | https://shahjerry33.medium.com/application-level-dos-the-lagging-nightmare-d3332f2ade86?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | pentesting, cybersecurity, bug-bounty, infosec, vulnerability | 30-May-2024 |
| 26.2 Lab: Exploiting vulnerabilities in LLM APIs | https://cyberw1ng.medium.com/26-2-lab-exploiting-vulnerabilities-in-llm-apis-83150b4cdf98?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, cybersecurity, careers, hacking, bug-bounty | 30-May-2024 |
| WAF as a weapon and DOS as a bullet | https://medium.com/@zhero_/waf-as-a-weapon-and-dos-as-a-bullet-46acad12a9b6?source=rss------bug_bounty-5 | Rachid.A | infosec, bug-bounty, firewall, hacking, cybersecurity | 30-May-2024 |
| Low hanging fruit in real website: Cookie invalidation. | https://medium.com/@siyamhassan.main/low-hanging-fruit-in-real-website-cookie-invalidation-bd24556dc673?source=rss------bug_bounty-5 | 2004siyam_hassan | authentication, session-invalidation, bug-bounty | 30-May-2024 |
| Buy Multiple Translink Travel Ticket for the Price of One. | https://medium.com/@aswinmanikandan/buy-multiple-translink-travel-ticket-for-the-price-of-one-82014216c510?source=rss------bug_bounty-5 | Aswin Manikandan | bug-bounty, bug-bounty-tips | 30-May-2024 |
| (1)بالمصري Bug Bounty Bootcamp ملخص | https://medium.com/@am3002297/1-%D8%A8%D8%A7%D9%84%D9%85%D8%B5%D8%B1%D9%8A-bug-bounty-bootcamp-%D9%85%D9%84%D8%AE%D8%B5-8cdf2bf4e108?source=rss------bug_bounty-5 | 30obd | bug-bounty-hunter, tech-bootcamp, bug-bounty, infosec, information-security | 30-May-2024 |
| Microsoft IIS Server Shortnames & Tilde Magic | https://retkoussa.medium.com/microsoft-iis-server-shortnames-tilde-magic-64df65d26450?source=rss------bug_bounty-5 | Firas Al-Koussa | hacking, bug-bounty, penetration-testing, cybersecurity, penetration-testing-tools | 30-May-2024 |
| How I Found My First Bug in My Bug Bounty Journey | https://medium.com/@HuseyinAdgzl/how-i-found-my-first-bug-in-bug-bounty-journey-49a318874ed8?source=rss------bug_bounty-5 | Hüseyin Adiguzel | bug-bounty-tips, bug-bounty, api, security, bugs | 30-May-2024 |
| A Beautiful Bug: Interesting URL scheme bypass + Race Condition. | https://medium.com/@Nightbloodz/a-beautiful-bug-interesting-url-scheme-bypass-race-condition-61109771a250?source=rss------bug_bounty-5 | Alvaro Balada | cybersecurity, xss-attack, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 30-May-2024 |
| Understanding Fileless Malware: How It Works and Real-World Examples | https://medium.com/@paritoshblogs/understanding-fileless-malware-how-it-works-and-real-world-examples-76085c99543d?source=rss------bug_bounty-5 | Paritosh | hacking, bug-bounty, fileless-malware, malware, cybersecurity | 29-May-2024 |
| An interesting Bug that I found in Android Mobile Application | https://medium.com/@jooelsaka/an-interesting-bug-that-i-found-in-android-mobile-application-becf25c8c4d8?source=rss------bug_bounty-5 | dnelsaka | security, pentesting, mobile-security, android, bug-bounty | 29-May-2024 |
| Subdomain takeover via AWS s3 bucket | https://infosecwriteups.com/subdomain-takeover-via-aws-s3-bucket-9c54b1b71c46?source=rss------bug_bounty-5 | Bikram kharal | vulnerability, subdomain-takeover, bug-bounty, penetration-testing, hacking | 29-May-2024 |
| Unauthenticated Cache Purge, Really a Bug? | https://medium.com/@anonymoustriager/unauthenticated-cache-purge-really-a-bug-1da44d6fbfd9?source=rss------bug_bounty-5 | Anonymous Triager | hacker, bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup | 29-May-2024 |
| Bypassing Discord marked links filter | https://nickguitar.medium.com/bypassing-discord-marked-links-filter-88bcd7946f2a?source=rss------bug_bounty-5 | Nickguitar | hacking, bug-bounty, bypass, discord, pentest | 29-May-2024 |
| Bug Bounty Automations | https://medium.com/@michellepantelouris/bug-bounty-automations-65f4a4dd6121?source=rss------bug_bounty-5 | Michelle Pantelouris | bug-bounty, cybersecurity, penetration-testing | 29-May-2024 |
| Building tech profile of a company | https://netlas.medium.com/building-tech-profile-of-a-company-f2145dedad31?source=rss------bug_bounty-5 | Netlas.io | reconnaissance, cybersecurity, osint, penetration-testing, bug-bounty | 29-May-2024 |
| Content Discovery: Directories, Files And Links Enumeration: | https://hacktivistattacker.medium.com/content-discovery-directories-files-and-links-enumeration-38e407b8ff0a?source=rss------bug_bounty-5 | Hacktivist-Attacker | content-discovery, bug-bounty, web-penetration-testing, reconnaissance-bug-bounty, educação | 29-May-2024 |
| Bug Bounty Tips and Tricks: Improve Your Success Rate | https://medium.com/@verylazytech/bug-bounty-tips-and-tricks-improve-your-success-rate-37fa7941d05f?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, hacking, bug-bounty-program, cyber, cybersecurity | 29-May-2024 |
| S3 bucket enumeration simplified. | https://secureitmania.medium.com/s3-bucket-enumeration-simplified-80bdcdf581d7?source=rss------bug_bounty-5 | secureITmania | hacking, cloud-services, devops, bug-bounty, it-security | 29-May-2024 |
| Agent Sudo Walkthrough | https://medium.com/@anubhavbali2004/agent-sudo-walkthrough-0a2954d2bb7e?source=rss------bug_bounty-5 | Anubhav Bali | ctf-walkthrough, ctf-writeup, bug-bounty, ctf, cybersecurity | 29-May-2024 |
| Mastering Burp Suite for Web Application Security Testing | https://medium.com/@zerodayfreak/mastering-burp-suite-for-web-application-security-testing-9ac8919f89a8?source=rss------bug_bounty-5 | ZeroDay Freak | bug-bounty, infosec, burpsuite, web-hacking, penetration-testing | 29-May-2024 |
| The Easiest Vulnerability to Find and How to bypass the WAF | https://medium.com/@probza261/the-easiest-vulnerability-to-find-and-how-to-bypass-the-waf-3dbcc422aa7e?source=rss------bug_bounty-5 | OctaYus | bug-bounty, infosec, web-security | 29-May-2024 |
| [Low]Unintended Feature: Exploiting an “Invisible” Delete Function for Temporary Premium Access | https://r4v3n0r.medium.com/low-unintended-feature-exploiting-an-invisible-delete-function-for-temporary-premium-access-909812add8eb?source=rss------bug_bounty-5 | Fabian Cruz | web-application-security, cybersecurity, idor, bug-bounty, information-security | 29-May-2024 |
| What do you know about XSS? (Cross-Site Script) | https://gentilsecurity.medium.com/what-do-you-know-about-xss-cross-site-script-fa050d37be1c?source=rss------bug_bounty-5 | GenTiL | bug-bounty, vulnerability, hacking, technology, xss-attack | 28-May-2024 |
| Hacking NASA: Critical SSRF + Subdomain Takeover + XSS | https://nickguitar.medium.com/hacking-nasa-critical-ssrf-subdomain-takeover-xss-699be0ce3c06?source=rss------bug_bounty-5 | Nickguitar | pentesting, bug-bounty, hacking, web-application-security, writeup | 28-May-2024 |
| Bug Bounty In 2024 | https://medium.com/@Code_With_Ssn/bug-bounty-in-2024-54b1f0c3fe75?source=rss------bug_bounty-5 | Salik Seraj Naik | cybersecurity, bug-bounty, software-development, blockchain, data-science | 28-May-2024 |
| 8 Different Ways to Bypass SSL Pinning in iOS Applications | https://medium.com/@vaishalinagori112/8-different-ways-to-bypass-ssl-pinning-in-ios-applications-427dfcbe8bf7?source=rss------bug_bounty-5 | Vaishali Nagori | bug-bounty, vapt-services, hacking, ciso, ssl-pinning-bypass | 28-May-2024 |
| Talkpal — vulnerability disclosure | https://karol-mazurek.medium.com/talkpal-vulnerability-disclosure-70b18d14772f?source=rss------bug_bounty-5 | Karol Mazurek | cybersecurity, bug-bounty, information-technology, penetration-testing, information-security | 28-May-2024 |
| Cross-Site Script _XSS_ Extract Here | https://gentilsecurity.medium.com/cross-site-script-xss-extract-here-d76053546fe3?source=rss------bug_bounty-5 | GenTiL | technology, bug-bounty, ethical-hacking, cybersecurity, web-development | 28-May-2024 |
| RCE Exploitation via Report Upload + Leveraging MachineKeys to Forge ASPXAUTH Cookies to privesc… | https://medium.com/@ph4nt0mbyt3/rce-exploitation-via-report-upload-leveraging-machinekeys-to-forge-aspxauth-cookies-to-privesc-50d38991da2e?source=rss------bug_bounty-5 | ph4nt0mbyt3 | pentesting, hacking, bug-bounty, cookies, aspnetcore | 28-May-2024 |
| PENTESTING DAY — 01 | https://medium.com/@workwithsane/pentesting-day-01-7eba23231870?source=rss------bug_bounty-5 | Sane | offensive-security, pentesting, bug-bounty, defensive-security, ethical-hacking | 28-May-2024 |
| A Whistledown Exclusive: Netflix’s Journey to One Million in Bug Bounty and Beyond | https://netflixtechblog.medium.com/a-whistledown-exclusive-netflixs-journey-to-one-million-in-bug-bounty-and-beyond-9087ffebc3e1?source=rss------bug_bounty-5 | Netflix Technology Blog | vulnerability-management, application-security, cybersecurity, bug-bounty | 28-May-2024 |
| 25.8 Lab: Web cache poisoning via a fat GET request | https://cyberw1ng.medium.com/25-8-lab-web-cache-poisoning-via-a-fat-get-request-ee8a42d01868?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, careers, penetration-testing, cybersecurity | 28-May-2024 |
| Self-XSS via filename + CSRF on contact us ‘multipart/data’ form | https://mchklt.medium.com/self-xss-via-filename-csrf-on-contact-us-multipart-data-form-f852dd539547?source=rss------bug_bounty-5 | ABDELKARIM MOUCHQUELITA | cyberattack, tips, bug-bounty, cybersecurity, hacking | 28-May-2024 |
| PENTESTING INTRODUCTION | https://medium.com/@workwithsane/pentesting-day-01-7eba23231870?source=rss------bug_bounty-5 | Sane | offensive-security, pentesting, bug-bounty, defensive-security, ethical-hacking | 28-May-2024 |
| Best Packet Sniffers For Reverse Engineering Game Servers | https://medium.com/@MrRipperoni/best-packet-sniffers-for-reverse-engineering-game-servers-c09987c46b33?source=rss------bug_bounty-5 | Mr.Ripperoni | games, bug-bounty, hacking, penetration-testing, reverse-engineering | 28-May-2024 |
| 25.9 Lab: URL normalization in Web Cache Poisioning | https://cyberw1ng.medium.com/25-9-lab-url-normalization-in-web-cache-poisioning-9a4b72e10a5e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, cybersecurity, hacking, bug-bounty | 28-May-2024 |
| شمارع خاله اردبیل شماره خاله رامسرشماره خاله یزدشماره خاله نورآباد09333709804 | https://medium.com/@xgxtccbj/%D8%B4%D9%85%D8%A7%D8%B1%D8%B9-%D8%AE%D8%A7%D9%84%D9%87-%D8%A7%D8%B1%D8%AF%D8%A8%DB%8C%D9%84-%D8%B4%D9%85%D8%A7%D8%B1%D9%87-%D8%AE%D8%A7%D9%84%D9%87-%D8%B1%D8%A7%D9%85%D8%B3%D8%B1%D8%B4%D9%85%D8%A7%D8%B1%D9%87-%D8%AE%D8%A7%D9%84%D9%87-%DB%8C%D8%B2%D8%AF%D8%B4%D9%85%D8%A7%D8%B1%D9%87-%D8%AE%D8%A7%D9%84%D9%87-%D9%86%D9%88%D8%B1%D8%A2%D8%A8%D8%A7%D8%AF09333709804-045d16786c2a?source=rss------bug_bounty-5 | فاطمه | bug-bounty, vjosa, cj, cjng, bybit-event | 28-May-2024 |
| 25.7 Lab: Parameter cloaking in Web Cache Poisoning | https://cyberw1ng.medium.com/25-7-lab-parameter-cloaking-in-web-cache-poisoning-ee64feeb01c1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, hacking, bug-bounty, careers, penetration-testing | 27-May-2024 |
| Earning with Exploits: The Bug Bounty Journey | https://deepseng.medium.com/earning-with-exploits-the-bug-bounty-journey-9d864743c011?source=rss------bug_bounty-5 | Deep SenGupta | cybersecurity, appsec, information-security, careers, bug-bounty | 27-May-2024 |
| How To Stay Ahead of 99% Of Bug Bounty Hunters | https://infosecwriteups.com/how-to-stay-ahead-of-99-of-bug-bounty-hunters-a51fb3fc2ecb?source=rss------bug_bounty-5 | Om Arora | methodology, infosec, hacking, bug-bounty-tips, bug-bounty | 27-May-2024 |
| The bugs: List of weird vulnerabilities | https://noobsixt9.medium.com/the-bugs-list-of-weird-vulnerabilities-6bc98fc5c1cc?source=rss------bug_bounty-5 | Rajan Kshedal | writeup, bug-bounty, bug-bounty-writeup, bug-bounty-tips, information-security | 27-May-2024 |
| How I got my first US Dollar bounty | https://medium.com/@deepk007/how-i-got-my-first-us-dollar-bounty-4df50ee82fc6?source=rss------bug_bounty-5 | DEep | cybersecurity, bug-bounty, red-team, ethical-hacking, vulnerability | 27-May-2024 |
| 25.6 Lab: Web cache poisoning via an unkeyed query parameter | https://cyberw1ng.medium.com/25-6-lab-web-cache-poisoning-via-an-unkeyed-query-parameter-ca2544560b5e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, cybersecurity, careers, bug-bounty, hacking | 26-May-2024 |
| Embarking on the Bug Bounty Journey | https://medium.com/@verylazytech/embarking-on-the-bug-bounty-journey-e199897617a5?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, technology, programming, cybersecurity, cyber | 26-May-2024 |
| Kokurate journey in Cyber Security | https://kokurate.medium.com/kokurate-journey-in-cyber-security-633e546eb175?source=rss------bug_bounty-5 | Kokurate | bug-bounty, blue-team, journey, cybersecurity, red-team | 26-May-2024 |
| Network Penetration Testing: A Comprehensive Guide | https://medium.com/@paritoshblogs/network-penetration-testing-a-comprehensive-guide-1ba8fcb7c570?source=rss------bug_bounty-5 | Paritosh | pentesting, networking, ai, cybersecurity, bug-bounty | 26-May-2024 |
| Open Redirect via login page | https://medium.com/@saeidmicro/open-redirect-via-login-page-fe144f279da8?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty, open-redirect, cybersecurity | 26-May-2024 |
| My Journey in Cyber Security | https://kokurate.medium.com/kokurate-journey-in-cyber-security-633e546eb175?source=rss------bug_bounty-5 | Kokurate | bug-bounty, blue-team, journey, cybersecurity, red-team | 26-May-2024 |
| ### Uncovering a Critical Security Bug: Email Duplication in Password Reset Mechanism | https://medium.com/@siyamhassan.main/uncovering-a-critical-security-bug-email-duplication-in-password-reset-mechanism-44eed804203f?source=rss------bug_bounty-5 | 2004siyam_hassan | bug-bounty, password-reset, authentication | 26-May-2024 |
| ### Discovering an OTP Reuse Vulnerability: My First Bug Report | https://medium.com/@siyamhassan.main/discovering-an-otp-reuse-vulnerability-my-first-bug-report-1a4c555113ab?source=rss------bug_bounty-5 | 2004siyam_hassan | authentication, otp-verification, bug-bounty | 26-May-2024 |
| HTTP Headers | https://medium.com/@Zephyr_Night/http-headers-958a5d73ffd6?source=rss------bug_bounty-5 | Anshu(Zephyr_Night) | bug-bounty, http-protocol, http-headers, http-authentication | 26-May-2024 |
| WordPress application vulnerable to DoS attack via wp-cron.php | https://medium.com/@saeidmicro/wordpress-application-vulnerable-to-dos-attack-via-wp-cron-php-da521e854fe5?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty, dos-attack, cybersecurity | 26-May-2024 |
| ❇️ Web Hack Tool ❇️ | https://medium.com/@logicTech/%EF%B8%8F-web-hack-tool-%EF%B8%8F-0123843704ed?source=rss------bug_bounty-5 | LogicTech | bug-bounty-tips, github, tools, hacking, bug-bounty | 26-May-2024 |
| Insecure Account Removal | https://medium.com/@saeidmicro/insecure-account-removal-867357ad9a08?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty, cybersecurity | 26-May-2024 |
| How I Got IDOR lead to PII In Login Page | https://medium.com/@shari7a0x/how-i-got-idor-lead-to-pii-in-login-page-12135f661c77?source=rss------bug_bounty-5 | Shari7a0x | bugs, hacker, idor-vulnerability, bugcrowd, bug-bounty | 26-May-2024 |
| How I Found 2 IDORS on My Phone and Made $1,500 | https://medium.com/@zack0x01_/how-i-found-2-idors-on-my-phone-and-made-1-500-8b088f5b28db?source=rss------bug_bounty-5 | zack0x01 | bug-bounty, cyber, idor, bug-bounty-tips, hacking | 26-May-2024 |
| Session invalidation after updating e-mail. | https://medium.com/@siyamhassan.main/session-invalidation-after-updating-e-mail-f03c8bb1fb0c?source=rss------bug_bounty-5 | 2004siyam_hassan | bug-bounty, session-invalidation, help | 26-May-2024 |
| All About API Security Pentesting | https://infosecwriteups.com/all-about-api-security-pentesting-60dba50e2766?source=rss------bug_bounty-5 | Xcheater | api-security, owasp-api-security-top-10, bug-bounty, pentesting, api-security-testing | 26-May-2024 |
| JNDI Injection — Attack Flow | https://medium.com/@prajeet67/jndi-injection-attack-flow-2061e792fef3?source=rss------bug_bounty-5 | Pradeep Kumar | web-penetration-testing, pentest, bug-bounty, java, jndi | 25-May-2024 |
| CSRF Vulnerabilities: How to Exploit and Defend Against Attacks | https://xamiron.medium.com/csrf-vulnerabilities-how-to-exploit-and-defend-against-attacks-ca06e0fc0bf0?source=rss------bug_bounty-5 | Sabuj Kumar Modak | penetration-testing, burpsuite, csrf-attack, bug-bounty, web-app-pentesting | 25-May-2024 |
| Outlook Hijacked: A Step-by-Step Recovery and Investigation | https://raoshaab.medium.com/outlook-hijacked-a-step-by-step-recovery-and-investigation-02ea09136301?source=rss------bug_bounty-5 | Devender Rao | bug-bounty, phishing, hacking, cybersecurity, microsoft | 25-May-2024 |
| Unauthenticated IDOR in Employee Login Exposes PII to more than 100K Users | https://amrkadry7.medium.com/unauthenticated-idor-in-employee-login-exposes-pii-to-more-than-100k-users-830fa8121b33?source=rss------bug_bounty-5 | Amr | cybersecurity, bug-bounty | 25-May-2024 |
| How I Hacked India Today Subscription for 2 years | https://anudeep-vysyaraju.medium.com/how-i-hacked-india-today-subscription-for-2-years-4e49701fa7c8?source=rss------bug_bounty-5 | Anudeep Vysyaraju | cybersecurity, penetration-testing, ethical-hacking, hacking, bug-bounty | 25-May-2024 |
| HOW HACKERS USE REVERSE ENGINEERING | https://medium.com/@Progsky/how-hackers-use-reverse-engineering-7f8940e2108a?source=rss------bug_bounty-5 | Progsky | bug-bounty, hacking, reverse-engineering | 25-May-2024 |
| HTB PDFy Challenge | https://medium.com/@Pdaysec/htb-pdfy-challenge-490e678bd521?source=rss------bug_bounty-5 | Erfan | cybersecurity, htb, bug-bounty, challenge, htb-writeup | 25-May-2024 |
| Uncovering the Hidden Vulnerability: How I Found an Authentication Bypass on Shopify’s Exchange… | https://medium.com/@niraj1mahajan/uncovering-the-hidden-vulnerability-how-i-found-an-authentication-bypass-on-shopifys-exchange-cc2729ea31a9?source=rss------bug_bounty-5 | Niraj Mahajan | bug-bounty, account-takeover, ato, authentication-bypass, bug-bounty-tips | 25-May-2024 |
| Prototype Pollution: The Hidden Danger in JavaScript | https://medium.com/@mayank_prajapati/prototype-pollution-the-hidden-danger-in-javascript-c8b17002e8da?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | hacking, bug-bounty, security, web, pentesting | 25-May-2024 |
| Bypassing WAFs: The Art of Payload Obfuscation | https://systemweakness.com/bypassing-wafs-the-art-of-payload-obfuscation-d4093c110713?source=rss------bug_bounty-5 | David Eduardo Karpinski | web3, bug-bounty, firewall, cybersecurity, hacking | 25-May-2024 |
| JavaScript Prototype Pollution Attack: A Simplified Guide | https://medium.com/@dodir.sec/javascript-prototype-pollution-attack-a-simplified-guide-c3b4ba8a6441?source=rss------bug_bounty-5 | dodir | bug-bounty, penetration-testing, web, javascript, cybersecurity | 25-May-2024 |
| How i got xss in unusual way | https://medium.com/@cvjvqmmsm/how-i-got-xss-in-unusual-way-7c4f2d8dfaf6?source=rss------bug_bounty-5 | Barbarossa | xss-attack, bug-bounty | 25-May-2024 |
| HTB-PDFy | https://medium.com/@Pdaysec/htb-pdfy-challenge-490e678bd521?source=rss------bug_bounty-5 | Erfan | cybersecurity, htb, bug-bounty, challenge, htb-writeup | 25-May-2024 |
| Logic Bug | Forget password link not expiring after email change | https://medium.com/@saeidmicro/logic-bug-forget-password-link-not-expiring-after-email-change-4edc6f2dce22?source=rss------bug_bounty-5 | Saeid Khater | cybersecurity, bug-bounty | 24-May-2024 |
| How to Use ParamSpider Tool — For Bug Bounty | https://gentilsecurity.medium.com/how-to-use-paramspider-tool-for-bug-bounty-2cfb3e4c402c?source=rss------bug_bounty-5 | GenTiL | penetration-testing, automation-tools, parameter, paramspider, bug-bounty | 24-May-2024 |
| Analyzing JavaScript Files To Find Bugs | https://medium.com/@hrofficial62/analyzing-javascript-files-to-find-bugs-7b277d1df435?source=rss------bug_bounty-5 | Mr Horbio | hacking, bug-bounty-tips, cybersecurity, programming, bug-bounty | 24-May-2024 |
| Bypassing 403 Protection To Get Admin Access | https://medium.com/@hrofficial62/bypassing-403-protection-to-get-admin-access-fe5b8888a935?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, 403-forbidden, bug-bounty-tips, hacking | 24-May-2024 |
| Bug Bounty Tutorial : Login Bypass Technique | https://medium.com/@hrofficial62/bug-bounty-tutorial-login-bypass-technique-ec4801b505c2?source=rss------bug_bounty-5 | Mr Horbio | bugs, penetration-testing, hacking, bug-bounty, cybersecurity | 24-May-2024 |
| How to Earn Bug Bounty as a Professional Bug hunter | https://medium.com/@hrofficial62/how-to-earn-bug-bounty-as-a-professional-bug-hunter-cf11c1d16add?source=rss------bug_bounty-5 | Mr Horbio | earn-money-online, cybersecurity, ethical-hacking, bugs, bug-bounty | 24-May-2024 |
| How to Find First Bug (For Beginners) | https://medium.com/@hrofficial62/how-to-find-first-bug-for-beginners-677ef726df2e?source=rss------bug_bounty-5 | Mr Horbio | python, cybersecurity, bug-bounty, hacking, programming | 24-May-2024 |
| How to learn Hacking From 0 to Hero | https://medium.com/@hrofficial62/how-to-learn-hacking-from-0-to-hero-b7a13a72d035?source=rss------bug_bounty-5 | Mr Horbio | hacking, horbio, programming, bug-bounty, cybersecurity | 24-May-2024 |
| How to extract Google Chrome Saved Password | https://medium.com/@hrofficial62/how-to-extract-google-chrome-saved-password-b6d6db825f36?source=rss------bug_bounty-5 | Mr Horbio | ethical-hacking, hacking, bug-bounty, passwords, cyber | 24-May-2024 |
| Referrer-based access control Bug Bounty Tips | https://medium.com/@hrofficial62/referrer-based-access-control-bug-bounty-tips-16112ae530cc?source=rss------bug_bounty-5 | Mr Horbio | hacking, programming, hacker, cybersecurity, bug-bounty | 24-May-2024 |
| Python Libraries for Hackers | https://medium.com/@hrofficial62/python-libraries-for-hackers-52a64f54131c?source=rss------bug_bounty-5 | Mr Horbio | hacking, python-programming, python, bug-bounty, cybersecurity | 24-May-2024 |
| Easy Bug | PHP info page disclosure | https://medium.com/@saeidmicro/easy-bug-php-info-page-disclosure-d062dbc66a0e?source=rss------bug_bounty-5 | Saeid Khater | cybersecurity, bug-bounty | 24-May-2024 |
| Logic Bug: Easy Privilege Escalation | https://medium.com/@saeidmicro/logic-bug-easy-privilege-escalation-7d3878816395?source=rss------bug_bounty-5 | Saeid Khater | cybersecurity, bug-bounty, privilege-escalation | 24-May-2024 |
| Logic Bug: Easy Privilege Escalation | https://medium.com/@saeidmicro/logic-bug-easy-privilege-escalation-d12be8946e36?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty, privilege-escalation, cybersecurity | 24-May-2024 |
| Easy Bug | Email HTML Injection | https://medium.com/@saeidmicro/easy-bug-email-html-injection-8d15e1db69e0?source=rss------bug_bounty-5 | Saeid Khater | cybersecurity, html-injection, bug-bounty | 24-May-2024 |
| How to get your first $500 from an XSS vulnerability | https://gentilsecurity.medium.com/how-to-get-your-first-500-from-an-xss-vulnerability-2c3800490e7a?source=rss------bug_bounty-5 | GenTiL | make-money-online, technology, xss-vulnerability, bug-bounty, xss-attack | 24-May-2024 |
| [Bug Report] Medium Bug 3 d | https://minerofideas.medium.com/bug-report-medium-bug-3-d-851c28f844cb?source=rss------bug_bounty-5 | Miner Of Ideas | python, medium, bug-bounty, medium-brasil, bugs | 24-May-2024 |
| Using BBRF for tracking Javascript files | https://medium.com/@michal.lubicz/using-bbrf-for-tracking-javascript-files-76901a03939f?source=rss------bug_bounty-5 | Michał Lubicz | bug-bounty-tips, bug-bounty, cybersecurity, pentesting | 24-May-2024 |
| Busting CSRF: The Hidden Dangers of JSON Exploited | https://medium.com/@hack3dby0mar/busting-csrf-the-hidden-dangers-of-json-exploited-fd4aeb4cf47e?source=rss------bug_bounty-5 | Omar Essam (hack3dby0mar) | web-security, bug-bounty, cybersecurity | 24-May-2024 |
| 25.4 Lab: Targeted web cache poisoning using an unknown header | https://cyberw1ng.medium.com/25-4-lab-targeted-web-cache-poisoning-using-an-unknown-header-18d261dcbf7a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, hacking, bug-bounty, cybersecurity | 24-May-2024 |
| Exciting Announcement: We’re Collaborating with DAOPeople to Boost Web3 Security | https://securrtech.medium.com/exciting-announcement-were-collaborating-with-daopeople-to-boost-web3-security-0e4b70699385?source=rss------bug_bounty-5 | Securr | bug-bounty, web3, web3-security, dao, blockchain | 24-May-2024 |
| Flipping a ‘False’ to ‘True’: The Google Bug That Paid Off | https://medium.com/@hellother18/flipping-a-false-to-true-the-google-bug-that-paid-off-c9c3b11944fb?source=rss------bug_bounty-5 | Manthan_ mahale | penetration-testing, bugbounty-tips, bug-bounty, cybersecurity, hacker | 24-May-2024 |
| Session fixation | Cookie injection leading to ATO Write-Up | https://infosecwriteups.com/session-fixation-cookie-injection-leading-to-ato-write-up-98e29d2851b9?source=rss------bug_bounty-5 | rAmpancist | hacking, account-takeover, cybersecurity, bugbounty-writeup, bug-bounty | 24-May-2024 |
| Top Tools Every Bug Bounty Hunter Should Use | https://medium.com/@verylazytech/top-tools-every-bug-bounty-hunter-should-use-7ebec61a0f76?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, bug-bounty-tips, cyber, cybersecurity | 24-May-2024 |
| Tips & Tricks To Get Hall of Fame In NASA | https://medium.com/@Ajakcybersecurity/tips-tricks-to-get-hall-of-fame-in-nasa-53819d8221d3?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, ethical-hacking, bug-bounty, cybersecurity, penetration-testing | 24-May-2024 |
| 25.5 Lab: Web cache poisoning via an unkeyed query string | https://cyberw1ng.medium.com/25-5-lab-web-cache-poisoning-via-an-unkeyed-query-string-c264fccb80d0?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, cybersecurity, careers | 24-May-2024 |
| Always Test Default Credentials on Bug Bounty even if it’s 2024 | https://scr1pty.medium.com/always-test-default-credentials-on-bug-bounty-even-if-its-2024-75e511e4ad7c?source=rss------bug_bounty-5 | Scr1pty | ethical-hacking, hacking, bug-bounty, security, bug-bounty-tips | 23-May-2024 |
| HTML Injection | https://medium.com/@0xchoudhary/html-injection-cc6f8e3a09f8?source=rss------bug_bounty-5 | Sushil Choudhary | bug-bounty-tips, hackerone, cybersecurity, bug-hunting, bug-bounty | 23-May-2024 |
| 25.3 Lab: Web cache poisoning with multiple headers | https://cyberw1ng.medium.com/25-3-lab-web-cache-poisoning-with-multiple-headers-65e4e83ace3a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, hacking, penetration-testing | 23-May-2024 |
| Unlocked Secrets: How Leaked Credentials Fuel Bug Bounties | https://medium.com/@cyberpro151/unlocked-secrets-how-leaked-credentials-fuel-bug-bounties-fe5032caf5f4?source=rss------bug_bounty-5 | cyberpro151 | admin-panel, infosec, breach, bug-bounty, hacking | 23-May-2024 |
| Aleo Bug Bounty Program | https://daonft.medium.com/aleo-bug-bounty-program-97a7fda9ceed?source=rss------bug_bounty-5 | Bogdan | bug-bounty, web3, aleo | 23-May-2024 |
| CSRF leading to Account Takeover | https://medium.com/@katmaca2014/csrf-leading-to-account-takeover-abb32bae0ba5?source=rss------bug_bounty-5 | Kaan Atmaca | bug-bounty, penetration-testing, pentesting, cybersecurity, hacking | 23-May-2024 |
| Exploiting XML Injection to Establish Unauthorized SSH Connection | https://medium.com/@katmaca2014/exploiting-xml-injection-to-establish-unauthorized-ssh-connection-7c9bbc50a4d4?source=rss------bug_bounty-5 | Kaan Atmaca | hacking, coding, bug-bounty, penetration-testing, pentesting | 23-May-2024 |
| How I Found Multiple XSS Vulnerabilities. | https://medium.com/@helalmm71/how-i-found-multiple-xss-vulnerabilities-34bf8655f4e7?source=rss------bug_bounty-5 | MD Helal | vulnerability, penetration-testing, cybersecurity, bug-bounty, ctf | 23-May-2024 |
| How I use to find vulnerabilities like XSS,sqli using mixture of 3 simple tools | https://medium.com/@sreejihkn43073/how-i-use-to-find-vulnerabilities-like-xss-sqli-using-mixture-of-3-simple-tools-5108068646d2?source=rss------bug_bounty-5 | Sreejihkn | xss-vulnerability, cybersecurity-training, bug-bounty, github, tools | 23-May-2024 |
| Ink Finance Arbitrum Testnet Bug Bounty Hunt | https://inkfinance.medium.com/ink-finance-arbitrum-testnet-bug-bounty-hunt-85ca215118fa?source=rss------bug_bounty-5 | Ink Finance | dao, defi, testnet, arbitrum, bug-bounty | 23-May-2024 |
| Chrome 125 Update Resolves High-Severities Bugs Reported by External Researchers | https://medium.com/@elnjasi/chrome-125-update-resolves-high-severities-bugs-reported-by-external-researchers-74be654feb3a?source=rss------bug_bounty-5 | eL Njas!™ | bug-bounty, vulnerbaility, google | 23-May-2024 |
| Easy Bug: No Rate Limiting on Form which Triggers Emails | https://medium.com/@saeidmicro/easy-bug-no-rate-limiting-on-form-which-triggers-emails-4cecb5dd80a8?source=rss------bug_bounty-5 | Saeid Khater | cybersecurity, bug-bounty | 23-May-2024 |
| First Swag from HackerRank | https://codingninjablogs.tech/first-swag-from-hackerrank-df55cb2605b5?source=rss------bug_bounty-5 | #$ubh@nk@r | hacking, swag, ethical-hacking, security, bug-bounty | 23-May-2024 |
| Ink Finance Arbitrum Testnet User Experience & Bug Bounty Hunt | https://inkfinance.medium.com/ink-finance-arbitrum-testnet-bug-bounty-hunt-85ca215118fa?source=rss------bug_bounty-5 | Ink Finance | dao, defi, testnet, arbitrum, bug-bounty | 23-May-2024 |
| Second Factor Authentication (2FA) Bypass in Private BBP | https://medium.com/@saeidmicro/second-factor-authentication-2fa-bypass-in-private-bbp-325017cd187e?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty, cybersecurity | 23-May-2024 |
| Logic Bug | Old Session Does Not Expires After Password Change | https://medium.com/@saeidmicro/logic-bug-old-session-does-not-expires-after-password-change-cd1fca05c33e?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty, cybersecurity | 23-May-2024 |
| Second bug on VDP program | https://medium.com/@devMRT/second-bug-on-vdp-program-f1c4e67a3e42?source=rss------bug_bounty-5 | devMRT | bugbounty-writeup, bug-bounty-tips, bug-bounty | 23-May-2024 |
| Advanced Web Application Scanning Step-by-Step Guide | https://0xm4r5h4l.medium.com/advanced-web-application-scanning-step-by-step-guide-4d59dff9c491?source=rss------bug_bounty-5 | 0xM4r5h4l | hacking, web-penetration-testing, cybersecurity, bug-bounty, web-scanner | 22-May-2024 |
| How I Found XSS in Swagger-UI Leading to Account Takeover on Bug Bounty | https://scr1pty.medium.com/how-i-found-xss-in-swagger-ui-leading-to-account-takeover-on-bug-bounty-8d419c6b95d5?source=rss------bug_bounty-5 | Scr1pty | bug-bounty, ethical-hacking, penetration-testing, bug-bounty-tips, it | 22-May-2024 |
| Time-Based Google OAuth Account Takeover: Adventures in Bug Bounties | https://medium.com/@iamrizwanvp/time-based-google-oauth-account-takeover-my-bug-bounty-journey-a0f534227bc6?source=rss------bug_bounty-5 | RIZWAN | bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup, bugs | 22-May-2024 |
| Silk Central : Bug Tracking Tutorial | https://medium.com/@niranjanky14/silk-central-bug-tracking-tutorial-781e4a6550c6?source=rss------bug_bounty-5 | Nine Pages Of My Life | testing, software-development, bug-bounty, silk, app-development | 22-May-2024 |
| Open-Redirect Through HTTP Parameter Pollution | https://medium.com/@davidkarpinski1/open-redirect-through-http-parameter-pollution-ce5a3be7c78e?source=rss------bug_bounty-5 | David Eduardo Karpinski | web3, bug-bounty, hacking, cybersecurity, pollution | 22-May-2024 |
| Exciting Announcement: Our New Collaboration with jumboBlockchain to Enhance Web3 Security! | https://securrtech.medium.com/exciting-announcement-our-new-collaboration-with-jumboblockchain-to-enhance-web3-security-fe0489ca2524?source=rss------bug_bounty-5 | Securr | bug-bounty, layer-1, blockchain, web3-security, web3 | 22-May-2024 |
| Swagger-UI XSS Leading to Account Takeover on Crypto Exchange | https://scr1pty.medium.com/how-i-found-xss-in-swagger-ui-leading-to-account-takeover-on-bug-bounty-8d419c6b95d5?source=rss------bug_bounty-5 | Scr1pty | bug-bounty, ethical-hacking, penetration-testing, bug-bounty-tips, it | 22-May-2024 |
| 25.2 Lab: Web cache poisoning with an unkeyed cookie | https://cyberw1ng.medium.com/25-2-lab-web-cache-poisoning-with-an-unkeyed-cookie-3f4884ee1105?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, penetration-testing, careers, cybersecurity | 22-May-2024 |
| SubActive: Cracking the Digital Code | https://medium.com/@tamhacker1/subactive-cracking-the-digital-code-447769fdb6e2?source=rss------bug_bounty-5 | Tahir Mujawar | bugbounty-writeup, hacker, hacking, cybersecurity, bug-bounty | 22-May-2024 |
| Best tool to find subdomains | https://medium.com/@sreejihkn43073/best-tool-to-find-subdomains-170ad5d6e034?source=rss------bug_bounty-5 | Sreejihkn | bug-bounty, subdomain, cybersecurity, cyber-security-awareness, pentesting | 22-May-2024 |
| Top Network Hacking Techniques Familiar with Every Bug-Bounty Hunter | https://medium.com/@logicTech/top-network-hacking-techniques-familiar-with-every-bug-bounty-hunter-a01d7319cadc?source=rss------bug_bounty-5 | LogicTech | hacking, network-security, bug-bounty, bug-bounty-tips, bugs | 22-May-2024 |
| Pentesting: AI: WEB 1 | Privilege Escalation Attack | Python Reverse Shell | Vulnerabilities | SQL… | https://shamsulmehmood.medium.com/pentesting-ai-web-1-privilege-escalation-attack-python-reverse-shell-vulnerabilities-sql-7f9994a42ec1?source=rss------bug_bounty-5 | SHAMS UL MEHMOOD | ai, cybersecurity, bugs, bug-bounty, ctf-writeup | 21-May-2024 |
| Hackers Online Tools in 2024 | https://medium.com/@logicTech/hackers-online-tools-in-2024-da8f5aa232e5?source=rss------bug_bounty-5 | LogicTech | osint, hackathons, bug-bounty, tools, hacking | 21-May-2024 |
| Authentication Bypass due to Sensitive Data Exposure in Local Storage | https://medium.com/@kritikasingh06/authentication-bypass-due-to-sensitive-data-exposure-in-local-storage-8a706c798800?source=rss------bug_bounty-5 | Kritika Singh | vulnerability-assessment, webapplicationpentest, bug-bounty, penetration-testing, hacking | 21-May-2024 |
| 25.1 Lab: Web cache poisoning with an unkeyed header | https://cyberw1ng.medium.com/25-1-lab-web-cache-poisoning-with-an-unkeyed-header-177f24f0538e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, penetration-testing, hacking, cybersecurity | 21-May-2024 |
| Complex Attack Types: Sample Scenarios 7 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-7-9e7ad4454fe9?source=rss------bug_bounty-5 | Baris Dincer | bug-bounty, cybersecurity, freedomofinternet, threat-intelligence, penetration-testing | 21-May-2024 |
| Curiosity part #2 with $5000 bounty. | https://medium.com/@nanwinata/curiosity-part-2-with-5000-bounty-025536feced7?source=rss------bug_bounty-5 | nanwn | cybersecurity, telnet, hackerone, bug-bounty, vulnerability | 21-May-2024 |
| Next Generation Nuclei: Detecting SQLi with Logic | https://medium.com/@serhatcck/next-generation-nuclei-detecting-sqli-with-logic-05549c34885b?source=rss------bug_bounty-5 | Serhat ÇİÇEK | hacking-tools, hacking, penetration-testing, application-security, bug-bounty | 21-May-2024 |
| CSRF Leads to Delete Account | https://medium.com/@happyjester80/csrf-leads-to-delete-account-241f2cf8950b?source=rss------bug_bounty-5 | Happy Jester | android-pentesting, bug-bounty, android, hacking | 21-May-2024 |
| How to find View Angles for Aimbots | Explained | https://medium.com/@yannik603/how-to-find-view-angles-for-aimbots-explained-f70c303a353c?source=rss------bug_bounty-5 | Yannik Castro | games, hacking-tools, bug-bounty, hacking, reverse-engineering | 21-May-2024 |
| Working with a client, I came across a CSRF vulnerability in their existing web application. | https://medium.com/@darkly_splendid/working-with-a-client-i-came-across-a-csrf-vulnerability-in-their-existing-web-application-6c256b74684d?source=rss------bug_bounty-5 | FF E4 | cybersecurity, csrf, bug-bounty | 20-May-2024 |
| Bug Zero — This month in Cybersecurity [01–15 May] | https://blog.bugzero.io/bug-zero-this-month-in-cybersecurity-01-15-may-354fd002d5e4?source=rss------bug_bounty-5 | Akila Maithripala | bug-bounty, cybersecurity, sri-lanka, bug-zero | 20-May-2024 |
| Open-Redirects Uncovered: Real-World Bypass Techniques Revealed | https://systemweakness.com/open-redirects-uncovered-real-world-bypass-techniques-revealed-7b7422f02049?source=rss------bug_bounty-5 | David Eduardo Karpinski | cybersecurity, hacking, web3, programming, bug-bounty | 20-May-2024 |
| How I Hacked NASA Using Google Dork in Just 10 Minutes | https://medium.com/@gaurish.main/how-i-hacked-nasa-using-google-dork-in-just-10-minutes-6ce3b3401512?source=rss------bug_bounty-5 | Gaurish Bahurupi | cybersecurity, penetration-testing, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 20-May-2024 |
| Bypassed the OTP verification process using “Turbo Intruder” Extension. | https://xamiron.medium.com/bypassed-the-otp-verification-process-using-turbo-intruder-extension-2f56ac3d400d?source=rss------bug_bounty-5 | Sabuj Kumar Modak | web-app-pentesting, cybersecurity, bug-bounty, burpsuite-extension, penetration-testing | 20-May-2024 |
| IDOR Explained: Discover It Through a Simple Story! | https://medium.com/@1hehaq/idor-explained-discover-it-through-a-simple-story-ca4a018f6d4c?source=rss------bug_bounty-5 | haq | idor, bug-bounty-tips, bug-bounty, idor-vulnerability | 20-May-2024 |
| Your Account is Now Mine! | https://medium.com/@karimelsayed0x1/your-account-is-now-mine-fd80ad56f868?source=rss------bug_bounty-5 | z3r0xk | pentesting, bug-bounty, account-takeover, vulnerability | 20-May-2024 |
| Reflected XSS Leading to Account Takeover | https://0onoproblem.medium.com/reflected-xss-leading-to-account-takeover-bea862cba885?source=rss------bug_bounty-5 | 0_oNoProblem | bug-bounty, xss-attack, cybersecurity, bug-bounty-writeup, vulnerability | 20-May-2024 |
| Discovering a $5000 RCE via Dependency Confusion Vulnerability | https://nvk0x.medium.com/discovering-a-5000-rce-via-dependency-confusion-vulnerability-6b0c08ecd5de?source=rss------bug_bounty-5 | Naveen kumawat | bug-bounty, hacking, bug-bounty-tips, bug-bounty-writeup, supply-chain | 20-May-2024 |
| Let’s Understand Price Oracle Manipulation | https://securrtech.medium.com/lets-understand-price-oracle-manipulation-927ab725f131?source=rss------bug_bounty-5 | Securr | bug-bounty, smart-contract-auditing, web3, blockchain, web3-security | 20-May-2024 |
| How I Hacked NASA LDAP Server | https://medium.com/@maxcyber882/how-i-hacked-nasa-ldap-server-b7cbb8cd0eee?source=rss------bug_bounty-5 | Maxcyber | bug-hunting, cybersecurity, penetration-testing, bug-bounty | 20-May-2024 |
| How I found XSS from a medium article | https://medium.com/@jsamia/how-i-from-xss-from-a-medium-article-94d1b4e7e742?source=rss------bug_bounty-5 | Jaeden Samia | infosec, bug-bounty, ethical-hacking | 20-May-2024 |
| How I got Hall of Fame in NASA | https://medium.com/@Ajakcybersecurity/how-i-got-hall-of-fame-in-nasa-4d098c413f9e?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, penetration-testing, ethical-hacking, bug-bounty, cybersecurity | 20-May-2024 |
| Walk-Through of Bepractical.tech lab #3 | https://medium.com/@ross.jubert/walk-through-of-bepractical-tech-lab-3-07079a7ad5c2?source=rss------bug_bounty-5 | Ross Jubert | account-takeover, ethical-hacking, bug-bounty, bugbounty-writeup, account-takeover-attacks | 19-May-2024 |
| Hacker101: Micro-CMS v1 | https://medium.com/@0xfxiii/hacker101-micro-cms-v1-982c61d24e3e?source=rss------bug_bounty-5 | 0xf | hackerone, bug-bounty-tips, bug-bounty, hacking | 19-May-2024 |
| Dependency Confusion | https://deephunt3r.medium.com/dependency-confusion-4d675eb36e0f?source=rss------bug_bounty-5 | Rakesh | bugbounty-writeup, bug-bounty | 19-May-2024 |
| How I Found Multiple Vulnerabilities on Dutch Government | https://medium.com/@neupanesindhu3/how-i-found-multiple-vulnerabilities-on-dutch-government-438059bcf88d?source=rss------bug_bounty-5 | sindhuneupane | bug-bounty, swag, writeup, bug-hunting, infosec | 19-May-2024 |
| How I Find Another Arbitrary File Upload Vulnerability and Bypass the Patch Twice | https://medium.com/@zpbrent/how-i-find-another-arbitrary-file-upload-vulnerability-and-bypass-the-patch-twice-193eaaf0b8dc?source=rss------bug_bounty-5 | Peng Zhou | wordpress-plugins, infosec, bug-bounty, wordpress, web-security | 19-May-2024 |
| How I got an High IDOR + PII in few minutes. Bounty: €500 | https://medium.com/@ivoaabreu/how-i-got-an-high-idor-pii-in-few-minutes-bounty-500-88833b6e1807?source=rss------bug_bounty-5 | Ivoabreu | idor, bug-bounty | 19-May-2024 |
| JavaScript tools for BugBounty 2024 | https://medium.com/@logicTech/javascript-tools-for-bugbounty-2024-fc281111c7c0?source=rss------bug_bounty-5 | LogicTech | tools-and-resources, osint, hacking, hacker, bug-bounty | 19-May-2024 |
| VulnCon 2024 CTF — Internal Leaks | https://medium.com/@pphreak313/vulncon-2024-ctf-internal-leaks-0a7bf21bf96d?source=rss------bug_bounty-5 | Shlok K | ctf-writeup, ctf, ctf-walkthrough, vulncon, bug-bounty | 19-May-2024 |
| A basic Android Pentest Lab Setup | https://medium.com/@majix_de/a-basic-android-pentest-lab-setup-e601c22c71ae?source=rss------bug_bounty-5 | Majix | setup-guide, android, pentest, bug-bounty, pentesting | 19-May-2024 |
| 22.5 Lab: JWT authentication bypass via jku header injection | https://cyberw1ng.medium.com/22-5-lab-jwt-authentication-bypass-via-jku-header-injection-1ec5032245b3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, hacking, bug-bounty, careers | 19-May-2024 |
| 22.6 Lab: JWT authentication bypass via kid header path traversal | https://cyberw1ng.medium.com/22-6-lab-jwt-authentication-bypass-via-kid-header-path-traversal-3f4392547f7d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, bug-bounty, hacking, careers | 19-May-2024 |
| First bug on VDP program | https://medium.com/@devMRT/first-bug-on-vdp-program-0f9e0baf43c7?source=rss------bug_bounty-5 | devMRT | bug-bounty, bugbounty-writeup, bug-bounty-tips | 19-May-2024 |
| HOW I HACKED INTO HARVARD UNIVERSITY’S DIGITAL INFRASTRUCTURE -Cycus Pectus | https://medium.com/@pectuscycus/how-i-hacked-into-harvard-universitys-digital-infrastructure-cycus-pectus-5d5e65e74a61?source=rss------bug_bounty-5 | Cycus Pectus | hacking, cybersecurity, bug-bounty-tips, ethical-hacking, bug-bounty | 18-May-2024 |
| Mastering Network Scanning: Exploring Essential Nmap Commands (Part -2) :- | https://medium.com/@shaikhwasim8120/mastering-network-scanning-exploring-essential-nmap-commands-part-2-9d24e2291fb6?source=rss------bug_bounty-5 | Wasim Shaikh | cybersecurity, ethical-hacking, nmap-command, bug-bounty, penetration-testing | 18-May-2024 |
| Mastering Network Scanning: Exploring Essential Nmap Commands :- | https://medium.com/@shaikhwasim8120/mastering-network-scanning-exploring-essential-nmap-commands-3843f01e419e?source=rss------bug_bounty-5 | Wasim Shaikh | cybersecurity, bug-bounty, nmap-command, penetration-testing, ethical-hacking | 18-May-2024 |
| 22.4 Lab: JWT authentication bypass via jwk header injection | https://cyberw1ng.medium.com/22-4-lab-jwt-authentication-bypass-via-jwk-header-injection-0bddcdbb2f31?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, hacking, cybersecurity, careers | 18-May-2024 |
| Analyzing JavaScript Files To Find Bugs | https://rajput623929.medium.com/analyzing-javascript-files-to-find-bugs-2b7d67a52c4e?source=rss------bug_bounty-5 | Mr.Horbio | bug-bounty, hacking, bug-bounty-tips, cybersecurity, ethical-hacking | 18-May-2024 |
| Interesting .DS_Store finding worth $$$ | https://medium.com/@akrachliy/interesting-ds-store-finding-worth-6ee7cc46458d?source=rss------bug_bounty-5 | Yassine Akrachli | bug-bounty, hacking, ethical-hacking, python, enumeration | 18-May-2024 |
| Pay 0$, Get ∞ books! | https://medium.com/@karimelsayed0x1/pay-0-get-books-0e093a5eb0de?source=rss------bug_bounty-5 | z3r0xk | penetration-testing, cybersecurity, bug-bounty, bussines-logic, vulnerability | 18-May-2024 |
| Found Bug: Cross-Site Scripting (XSS) in Laravel Debug Mode !! | https://medium.com/@p.ra.dee.p_0xx01/found-bug-cross-site-scripting-xss-in-laravel-debug-mode-a91939284541?source=rss------bug_bounty-5 | Professor0xx01 | bug-bounty, information-security, laravel-framework, xss-attack, web-security | 18-May-2024 |
| My 6 Month bug hunting journey, what to expect. | https://medium.com/@tom.sh/my-6-month-bug-hunting-journey-what-to-expect-be7532e187d4?source=rss------bug_bounty-5 | Tom | opinion, bug-bounty, bpp, hacking | 18-May-2024 |
| Top 50 Ports & Vulnerability | https://medium.com/@logicTech/top-50-ports-vulnerability-572de4274305?source=rss------bug_bounty-5 | LogicTech | bug-bounty, osint, networking, vulnerability, hacking | 18-May-2024 |
| Broken Object Level Authorization — BOLA (ex crAPI) | https://medium.com/@amaraltohami30/broken-object-level-authorization-bola-ex-crapi-e5a0d30eed2b?source=rss------bug_bounty-5 | Ammar Ahmed | pentesting, api, cybersecurity, hacking, bug-bounty | 18-May-2024 |
| How a Single Parameter Led to Two ATO Cases | https://cametom006.medium.com/how-a-single-parameter-led-to-two-ato-cases-c3cf2f4d00c2?source=rss------bug_bounty-5 | Fahad Faisal | bug-bounty, hackerone, bug-bounty-tips, twitter | 18-May-2024 |
| CVE-2023–52424: The WiFi SSID Confusion Attack Explained | https://infosecwriteups.com/cve-2023-52424-the-wifi-ssid-confusion-attack-explained-26e43f5cff40?source=rss------bug_bounty-5 | ElNiak | wifi, bug-bounty, technology, cybersecurity, penetration-testing | 17-May-2024 |
| The Hacker’s Mind -Recon Mind map | https://medium.com/@tamhacker1/the-hackers-mind-recon-mind-map-39d14e3750fb?source=rss------bug_bounty-5 | Tahir Mujawar | bug-bounty-writeup, mindmap, ethical-hacking, bug-bounty, cybersecurity | 17-May-2024 |
| Simple Tips for Bug Bounty Beginners: Finding PII Vulnerabilities | https://medium.com/@anishnarayan/simple-tips-for-bug-bounty-beginners-finding-pii-vulnerabilities-3db5a7151dd4?source=rss------bug_bounty-5 | Anish Narayan | bug-bounty-writeup, bug-bounty, bug-bounty-hunting, cybersecurity, bug-bounty-tips | 17-May-2024 |
| How I found my first mistake Or why you shouldn’t overlook the obvious. | https://medium.com/@nagavicyn2/how-i-found-my-first-mistake-or-why-you-shouldnt-overlook-the-obvious-1f1d443afa6b?source=rss------bug_bounty-5 | Jionin | bug-bounty, wordpress, first-bug, pentesting, cve | 17-May-2024 |
| 22.3 Lab: JWT authentication bypass via weak signing key | https://cyberw1ng.medium.com/22-3-lab-jwt-authentication-bypass-via-weak-signing-key-f49138b16441?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, careers, cybersecurity | 17-May-2024 |
| How to Know If Your Android Device Has Been Hacked and What to Do About It | https://rajput623929.medium.com/how-to-know-if-your-android-device-has-been-hacked-and-what-to-do-about-it-740ea5a18b9c?source=rss------bug_bounty-5 | Mr.Horbio | hacking, phone-hacking, bug-bounty, cybersecurity, ethical-hacking | 17-May-2024 |
| A Story of Zero-click complete Account Takeover | https://medium.com/@shravanisheshasai/a-story-of-zero-click-complete-account-takeover-650784c2d229?source=rss------bug_bounty-5 | Shravani_kb | vulnerability, web-vulnerabilities, hacking, bug-bounty, ethical-hacking | 17-May-2024 |
| Breaking Barriers: A Personal Journey Through the World of Bug Bounty Hunting | https://medium.com/@un1tycyb3r/breaking-barriers-a-personal-journey-through-the-world-of-bug-bounty-hunting-a30331db12fa?source=rss------bug_bounty-5 | Un1tycyb3r | bug-bounty | 16-May-2024 |
| How to Create a Cloud Lab for Anonymous Bug Bounty Hunting | https://medium.com/@paritoshblogs/how-to-create-a-cloud-lab-for-anonymous-bug-bounty-hunting-e80ed3a68d8c?source=rss------bug_bounty-5 | Paritosh | cloud, hacking, ai, cybersecurity, bug-bounty | 16-May-2024 |
| Discovery Worth $$$ in KYC Verification Feature : Bug Bounty | https://medium.com/@srishavinkumar/unveiling-a-surprising-bug-in-kyc-verification-the-discovery-worth-a82f3282b033?source=rss------bug_bounty-5 | Sri Shavin Kumar | bug-bounty-writeup, bug-bounty, infosec-write-ups, ethical-hacking, cybersecurity | 16-May-2024 |
| Account takeover with a sad ending | https://imwaiting18.medium.com/account-takeover-with-a-sad-ending-31ab82f09a5b?source=rss------bug_bounty-5 | imwaiting18 | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips | 16-May-2024 |
| Vulnerable WordPress April 2024 (Arasbaran) | https://medium.com/@onhexgroup/vulnerable-wordpress-april-2024-arasbaran-e9ae2acb8898?source=rss------bug_bounty-5 | Onhexgroup | wordpress, infosec, web-security, bug-bounty, nuclei-template | 16-May-2024 |
| 21.5 Lab: Stealing OAuth access tokens via an open redirect | 2024 | https://cyberw1ng.medium.com/21-5-lab-stealing-oauth-access-tokens-via-an-open-redirect-2024-88c3679cf0a3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, careers, penetration-testing, cybersecurity | 16-May-2024 |
| Reflected XSS via Cache Poisoning | https://medium.com/@majix_de/reflected-xss-via-cache-poisoning-5f57317b7c71?source=rss------bug_bounty-5 | Majix | penetration-testing, cache-poisoning, xs, bug-bounty, hacking | 16-May-2024 |
| Reflected XSS to Account Takeover | https://medium.com/@majix_de/reflected-xss-to-account-takeover-0fc429be34e8?source=rss------bug_bounty-5 | Majix | xs, account-takeover, bug-bounty, hacking, penetration-testing | 16-May-2024 |
| How I got Critical IDOR in one of India’s Best Known Food Delivery Website | https://medium.com/@bajajkrrish11/how-i-got-critical-idor-in-one-of-indias-best-known-food-delivery-website-5349c521e44b?source=rss------bug_bounty-5 | Krrish Bajaj | bug-bounty-tips, bug-bounty-writeup, bug-bounty-program, bug-bounty, medium | 16-May-2024 |
| How I Hacked One of These Big Companies (JS files analysis) | https://l0da.medium.com/how-i-hacked-one-of-these-big-companies-js-files-analysis-7cf47372b642?source=rss------bug_bounty-5 | L0da | bug-bounty, cybersecurity, hacking, penetration-testing, bug-bounty-tips | 16-May-2024 |
| The Art of OSINT: Discovering Locations with Image Analysis and Aritifical Intelligence Tools | https://medium.com/@enigma_/the-art-of-osint-discovering-locations-with-image-analysis-and-aritifical-intelligence-tools-820a4b74d426?source=rss------bug_bounty-5 | enigma | hacking, osint, cybersecurity, bug-bounty, ai | 16-May-2024 |
| How to execute a Proof of Concept (PoC) for any CVEs | https://medium.com/@CTRL2030/how-to-execute-a-proof-of-concept-poc-for-any-cves-e343cb528f2e?source=rss------bug_bounty-5 | CTRL | soc, penetration-testing, bug-bounty, cve, cybersecurity | 16-May-2024 |
| Account takeover using Blind XSS? | https://imwaiting18.medium.com/account-takeover-with-a-sad-ending-31ab82f09a5b?source=rss------bug_bounty-5 | imwaiting18 | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips | 16-May-2024 |
| Broken Access Control (IDOR) & Credential Leak at Legacy API Video Transcode | https://medium.com/@blackarazi/broken-access-control-idor-credential-leak-at-legacy-api-video-transcode-9b5d729fb2d6?source=rss------bug_bounty-5 | Azhari Harahap | broken-access-control, api-security, application-security, bug-bounty, bug-bounty-writeup | 15-May-2024 |
| CVE-2024–4761: Exploiting Chrome’s JavaScript Engine Highly Exploited (PoC presented) | https://infosecwriteups.com/cve-2024-4761-exploiting-chromes-javascript-engine-highly-exploited-poc-presented-dcf9cab95c00?source=rss------bug_bounty-5 | ElNiak | bug-bounty, google, penetration-testing, cybersecurity, javascript | 15-May-2024 |
| How I Got My First Bounty: The Exciting Story of My Bug Bounty Breakthrough | https://infosecwriteups.com/how-i-got-my-first-bounty-the-exciting-story-of-my-bug-bounty-breakthrough-d8391973ed41?source=rss------bug_bounty-5 | whit3ros3 | bug-bounty, graphql, bounty-program, hacking, bug-bounty-tips | 15-May-2024 |
| Subdomain Takeover: What is It? How to Exploit? How to Find Them? | https://medium.com/@dub-flow/subdomain-takeover-what-is-it-how-to-exploit-how-to-find-them-d2b6b82b155b?source=rss------bug_bounty-5 | Florian Walter | bug-bounty, application-security, cybersecurity, penetration-testing, web-application-security | 15-May-2024 |
| How I Was Able to Perform a Subdomain Takeover Attack | https://medium.com/@karnrishabh25/subdomain-takeover-00d2c5599715?source=rss------bug_bounty-5 | Rishabh Karn | bug-bounty, hacking, subdomain-takeover, bugs, attack | 15-May-2024 |
| 21.4 Lab: OAuth account hijacking via redirect_uri | 2024 | https://cyberw1ng.medium.com/21-4-lab-oauth-account-hijacking-via-redirect-uri-2024-4a8bfbb95d12?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, penetration-testing, bug-bounty, hacking | 15-May-2024 |
| Multiple Business Logic Errors in APPLE music/TV allowing bypass of parental controls | https://medium.com/@sam0-0/multiple-business-logic-errors-in-apple-music-tv-allowing-bypass-of-parental-controls-0d870d4870c5?source=rss------bug_bounty-5 | Sam | apple, infosec, bug-bounty | 15-May-2024 |
| Gaining Control: How Response Manipulation Leads to Higher Privileges (PoC) | https://medium.com/@mrmaulik191/gaining-control-how-response-manipulation-leads-to-higher-privileges-394bdf5f552b?source=rss------bug_bounty-5 | Mr.MG | cybersecurity-research, cybersecurity, privilege-escalation, bug-hunting, bug-bounty | 15-May-2024 |
| A Arte de Explorar SQL Injection: Uma abordagem profunda | https://medium.com/@davidkarpinski1/sql-injection-masterclass-d68f65cd71ae?source=rss------bug_bounty-5 | David Eduardo Karpinski | bug-bounty, hacking, sql, mysql, sql-injection | 15-May-2024 |
| 5 bugs in one program $$$ | https://el-cezeri.medium.com/5-bugs-in-one-program-80b550c06a67?source=rss------bug_bounty-5 | Samet Yiğit | ödülavcılığı, bug-bounty-tips, bug-bounty | 15-May-2024 |
| XSS via HTML Injection in Chatbot | https://medium.com/@nidishms1999/xss-via-html-injection-in-chatbot-a24c4f25dc92?source=rss------bug_bounty-5 | Nidish Nk | vapt, cybersecurity, bug-bounty | 15-May-2024 |
| Why I want to become a bug bounty hunter | https://medium.com/@riccilovesdogs/why-i-want-to-become-a-bug-bounty-hunter-135e4f584af6?source=rss------bug_bounty-5 | Ricci | bug-bounty, coding, make-money-online | 15-May-2024 |
| XSS via HTML Injection in Chatbot | https://medium.com/@nidishms1999/xss-via-html-injection-in-chatbot-a24c4f25dc92?source=rss------bug_bounty-5 | Nidish Nk | vapt, cybersecurity, hacking, bug-bounty | 15-May-2024 |
| Walk Through of Bepractical.tech lab #2 | https://medium.com/@ross.jubert/walk-through-of-bepractical-tech-lab-2-bef06b00ccfc?source=rss------bug_bounty-5 | Ross Jubert | ethical-hacking, cybersecurity, bug-bounty, red-team, ethical-hacking-training | 14-May-2024 |
| XSS on TikTok | https://19whoami19.medium.com/xss-on-tiktok-d2aa209c746d?source=rss------bug_bounty-5 | WHO AM I ? | bug-bounty-tips, cross-site-scripting, cybersecurity, bug-bounty, xss-attack | 14-May-2024 |
| An Email Authentication Bypass, But Marked as N/A in NASA domain | https://medium.com/@Ajakcybersecurity/an-email-authentication-bypass-but-marked-as-n-a-in-nasa-domain-a47977aed8bd?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, penetration-testing, cybersecurity, hacking, bug-bounty | 14-May-2024 |
| An easy way to find bugs: Enter wrong data | https://systemweakness.com/an-easy-way-to-find-bugs-enter-wrong-data-0765ed4e9afd?source=rss------bug_bounty-5 | Nasrin | audit, web-app-security, pentesting, bug-bounty | 14-May-2024 |
| 21.3 Lab: SSRF via OpenID dynamic client registration | 2024 | https://cyberw1ng.medium.com/21-3-lab-ssrf-via-openid-dynamic-client-registration-2024-c9ffd445e438?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, careers, cybersecurity | 14-May-2024 |
| JNDI Injection — The Complete Story | https://infosecwriteups.com/jndi-injection-the-complete-story-4c5bfbb3f6e1?source=rss------bug_bounty-5 | Pradeep Kumar | java, pentesting, bug-bounty, jndi, web-penetration-testing | 14-May-2024 |
| Root user account takeover via SQL Injection | https://medium.com/@stopvvar/root-user-account-takeover-via-sql-injection-5c21a6091d4c?source=rss------bug_bounty-5 | SW | sql-injection, hacking, bug-bounty, infose, sql-server | 13-May-2024 |
| RCE Through Account Takeover | https://medium.com/@iamrajchavan/rce-through-account-takeover-10a938a241d9?source=rss------bug_bounty-5 | Rajdip Chavan | security, vapt, bug-bounty, web-application-security | 13-May-2024 |
| Root user account takeover via SQL Injection | https://infosecwriteups.com/root-user-account-takeover-via-sql-injection-5c21a6091d4c?source=rss------bug_bounty-5 | SW | sql-injection, hacking, bug-bounty, infose, sql-server | 13-May-2024 |
| Story of Hall of Fame in Red Hat Linux | https://medium.com/@hritombhattacharya029/story-of-hall-of-fame-in-red-hat-linux-e267b9f22d06?source=rss------bug_bounty-5 | Hritom Bhattacharya | redhat-linux, xss-vulnerability, bug-bounty, hall-of-fame, hacking | 13-May-2024 |
| Unintended File Downloads in Remote Desktop Environments: A Security Vulnerability | https://medium.com/@Wolverineisstillalive/unintended-file-downloads-in-remote-desktop-environments-a-security-vulnerability-04114297665a?source=rss------bug_bounty-5 | Shark | bug-bounty, cybersecurity, microsoft, red-team, pentesting | 13-May-2024 |
| Week 1 | https://medium.com/@fulltimebughunter/week-1-bad3f3f9e214?source=rss------bug_bounty-5 | . | bugs, bug-bounty-tips, infosec, bug-bounty, infosec-write-ups | 13-May-2024 |
| 21.2 Lab: Forced OAuth profile linking | 2024 | https://cyberw1ng.medium.com/21-2-lab-forced-oauth-profile-linking-2024-e625dcfc319b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, penetration-testing, hacking, cybersecurity | 13-May-2024 |
| $350 bounty: How I Got It | Broken linked Hijacked | https://deepseng.medium.com/350-bounty-how-i-got-it-broken-linked-hijacked-3e72511e2571?source=rss------bug_bounty-5 | Deep SenGupta | cybersecurity, bug-bounty, broken-link-hijacking | 13-May-2024 |
| How To Find And Test S3 Buckets For Bug Bounty | https://medium.com/@dante.falls/how-to-find-and-test-s3-buckets-for-bug-bounty-b91166f9b4e0?source=rss------bug_bounty-5 | Dante Falls | aws, amazon-web-services, bug-bounty, cybersecurity, cloud-services | 13-May-2024 |
| Broken Access Control leads to Take Admin Role | https://0xebn-taimia.medium.com/broken-access-control-leads-to-take-admin-role-920e46d496b9?source=rss------bug_bounty-5 | 0xEbn-Taimia | penetration-testing, bug-bounty-tips, cybersecurity, bug-bounty, hunting | 13-May-2024 |
| 403 Jump: HTTP 403 Bypass tool | https://medium.com/@anzeemashib/403-jump-http-403-bypass-tool-8b17204110d9?source=rss------bug_bounty-5 | Itsmeanzeem | tools, bug-bounty, 403-forbidden, penetration-testing, cybersecurity | 13-May-2024 |
| How I Found My First RCE ! | https://mchklt.medium.com/how-i-found-my-first-rce-f80073626fff?source=rss------bug_bounty-5 | ABDELKARIM MOUCHQUELITA | apache, cyberattack, cybersecurity, bug-bounty, hacking | 13-May-2024 |
| Hundreds of companies’ internal data exposed — Part 2: The FreshService misconfiguration | https://infosecwriteups.com/hundreds-of-companies-internal-data-exposed-part-2-the-freshservice-misconfiguration-a9432c0b5dc8?source=rss------bug_bounty-5 | Mohammed Moiz Pasha | bug-bounty, security, hacking, vulnerability, ethical-hacking | 13-May-2024 |
| $350 bounty: How I Got It | Broken linked Hijacked | https://deepseng.medium.com/350-bounty-how-i-got-it-broken-linked-hijacked-31bfbc15ac0e?source=rss------bug_bounty-5 | Deep SenGupta | broken-link-hijacking, cybersecurity, bug-bounty, burpsuite | 13-May-2024 |
| How I found a IDOR at Monitor Mozilla ? | https://medium.com/@abnid312/how-i-found-a-idor-at-monitor-mozilla-313fc6c52f25?source=rss------bug_bounty-5 | ryujinx | bug-bounty, bug-hunter, information-technology, info-sec-writeups, hackerone | 13-May-2024 |
| ZoneTransfer — ./Hope | https://ezecias.medium.com/zonetransfer-hope-6261d5c7ac0a?source=rss------bug_bounty-5 | Ezecias | bug-bounty-tips, tools, bug-bounty | 13-May-2024 |
| How I Found My First RCE ! | https://mchklt.medium.com/how-i-found-my-first-rce-f80073626fff?source=rss------bug_bounty-5 | ABDELKARIM MOUCHQUELITA | apache, cyberattack, cybersecurity, bug-bounty, hacking | 13-May-2024 |
| A simple file upload bypass causing XSS attack | https://medium.com/@xiaodongsec/a-simple-file-upload-bypass-causing-xss-attack-6cbbb4c42070?source=rss------bug_bounty-5 | Xiaodong | xss-attack, bypass, vulnerability, bug-bounty, hacker | 12-May-2024 |
| Read Code Like a Hacker With SAST | https://medium.com/@matejsmycka/read-code-like-a-hacker-with-sast-28dab6506e45?source=rss------bug_bounty-5 | Matejsmycka | bug-bounty, static-code-analysis, testing, ethical-hacking, hacking | 12-May-2024 |
| How I Found PII Disclosure of Users & PHPInfo() Page :: #NCIIPC #RVDP | https://medium.com/@p.ra.dee.p_0xx01/how-i-found-pii-disclosure-of-users-phpinfo-page-nciipc-rvdp-58bec4ba27da?source=rss------bug_bounty-5 | Professor0xx01 | security, ethical-hacking, infosec, cybersecurity, bug-bounty | 12-May-2024 |
| 24.15 Lab: HTTP request smuggling, obfuscating the TE header | 2024 | https://cyberw1ng.medium.com/24-15-lab-http-request-smuggling-obfuscating-the-te-header-2024-efdbc0698848?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, cybersecurity, hacking, careers | 12-May-2024 |
| Hacking more than 130 000 car worldwide in 5 minutes | https://ahmadmansourr.medium.com/hacking-more-than-130-000-car-worldwide-in-5-minutes-766e76003c67?source=rss------bug_bounty-5 | Ahmad Mansour | bug-bounty, bug-bounty-tips, cybersecurity, pentesting | 12-May-2024 |
| 16 Times Forced Browsing Leads to Authentication bypass [ 300$ Bounty ] | https://medium.com/@jav333d/16-times-forced-browsing-leads-to-authentication-bypass-300-bounty-efc8bd52d310?source=rss------bug_bounty-5 | Javeed.sk | authentication-bypass, bugs, ethical-hacking, bug-bounty-tips, bug-bounty | 12-May-2024 |
| Breaking Down DOM-based XSS: A Practical Exploration | https://medium.com/@osamaavvan/breaking-down-dom-based-xss-a-practical-exploration-929d44f10906?source=rss------bug_bounty-5 | Osama Avvan | xss-attack, dom-xss, bug-bounty, cybersecurity, javascript | 11-May-2024 |
| My LLM Bug Bounty Journey on Hugging Face Hub via Protect AI | https://infosecwriteups.com/my-llm-bug-bounty-journey-on-hugging-face-hub-via-protect-ai-9f3a1bc72c2e?source=rss------bug_bounty-5 | Peng Zhou | protect-ai, hugging-face, bug-bounty, llm-security, ai-security | 11-May-2024 |
| NMAP Command Options | https://medium.com/@sherlock297/nmap-command-options-114b7582b993?source=rss------bug_bounty-5 | Ravindra Dagale | nmap, commands, information-security, bug-bounty, vulnerability | 11-May-2024 |
| #2. Bug Bounty POC: Time-Based SQL Injection to Dump Database | https://cyb3rmind.medium.com/2-bug-bounty-poc-time-based-sql-injection-to-dump-database-f8cfa089f393?source=rss------bug_bounty-5 | Cyb3r M!nds | sqli, hacking, pentesting, bug-bounty, sql-injection | 11-May-2024 |
| 24.14 Lab: HTTP request smuggling, basic TE.CL vulnerability | 2024 | https://cyberw1ng.medium.com/24-14-lab-http-request-smuggling-basic-te-cl-vulnerability-2024-f0159b2569d0?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, hacking, careers, cybersecurity, bug-bounty | 11-May-2024 |
| Exploiting Acunetix Vulnweb SQL Injection | https://medium.com/@davidkarpinski1/exploiting-acunetix-vulnweb-sql-injection-5fa5c24b2466?source=rss------bug_bounty-5 | David Eduardo Karpinski | sql, hacking, mysql, bug-bounty, sql-injection | 11-May-2024 |
| Unveiling an Account Takeover Vulnerability in a Leading Automobile Brand | https://medium.com/@anekantsinghai/unveiling-an-account-takeover-vulnerability-in-a-leading-automobile-brand-aa41a4e94bfb?source=rss------bug_bounty-5 | Anekant Singhai Jain | infosec, hacking, bug-bounty, cybersecurity, bug-bounty-tips | 11-May-2024 |
| دي روود ماب علشان تبدا web pentest | https://medium.com/@akaramany3/%D8%AF%D9%8A-%D8%B1%D9%88%D9%88%D8%AF-%D9%85%D8%A7%D8%A8-%D8%B9%D9%84%D8%B4%D8%A7%D9%86-%D8%AA%D8%A8%D8%AF%D8%A7-web-pentest-91ea9560dbf6?source=rss------bug_bounty-5 | 09x99 | python, cybersecurity, bug-bounty, web-development, javascript | 11-May-2024 |
| Mastering Subdomain Takeovers | https://tanishqshahsays.medium.com/mastering-subdomain-takeovers-c9a531fe5d3b?source=rss------bug_bounty-5 | Tanishq Sachin Shah | bug-bounty, bugs, vulnerability, subdomain, cybersecurity | 11-May-2024 |
| Linux Privilege Escalation — Capstone Challenge | TryHackMe | https://medium.com/@NoOne./linux-privilege-escalation-capstone-challenge-tryhackme-e69c798204bc?source=rss------bug_bounty-5 | Asim Anwar | hacking, privilege-escalation, linux, bug-bounty, tryhackme | 11-May-2024 |
| 4 XSSs With A Simple & Optimized Payload | https://levelup.gitconnected.com/4-xsss-with-a-simple-optimized-payload-900753538e90?source=rss------bug_bounty-5 | Hamza Avvan | ethical-hacking, xss-uppercase-bypass, bug-bounty, xss-attack, cybersecurity | 11-May-2024 |
| My Hunt: Discovering Microsoft Bugs | https://infosecwriteups.com/my-hunt-discovering-microsoft-bugs-f6a9c790bec0?source=rss------bug_bounty-5 | c0d3x27 | microsoft, hacking, bug-bounty, software-development, cybersecurity | 11-May-2024 |
| Today I am going to walk through bepractical.tech | https://medium.com/@ross.jubert/today-i-am-going-to-walk-through-bepractical-tech-c15e1df8aa06?source=rss------bug_bounty-5 | Ross Jubert | cybersecurity, bug-bounty, ethical-hacking, account-takeover, account-takeover-attacks | 11-May-2024 |
| Exploiting Acunetix Vulnweb SQL Injection | https://systemweakness.com/exploiting-acunetix-vulnweb-sql-injection-5fa5c24b2466?source=rss------bug_bounty-5 | David Eduardo Karpinski | sql, hacking, mysql, bug-bounty, sql-injection | 11-May-2024 |
| IDOR and Missing Authorization leads to free content | https://medium.com/@enigma_/idor-and-missing-authorization-leads-to-free-content-b12037a887a0?source=rss------bug_bounty-5 | enigma | cybersecurity, hacking, idor, oscp, bug-bounty | 10-May-2024 |
| How I Discovered a CVE by Scanning Open Source Repositories | https://infosecwriteups.com/how-i-discovered-a-cve-by-scanning-open-source-repositories-a5922d21b797?source=rss------bug_bounty-5 | Scott Lindh | bug-bounty, xss-attack, open-source, application-security, hacking | 10-May-2024 |
| CSRF Bypass Combined with IDOR To Complete Account Takeover! | https://medium.com/@ozomarzu/csrf-bypass-combined-with-idor-to-complete-account-takeover-f4995c5946d3?source=rss------bug_bounty-5 | CyberOz | cybersecurity, idor, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 10-May-2024 |
| 24.13 Lab: HTTP request smuggling, basic CL.TE vulnerability | 2024 | https://cyberw1ng.medium.com/24-13-lab-http-request-smuggling-basic-cl-te-vulnerability-2024-862e743cb078?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, hacking, careers, bug-bounty, cybersecurity | 10-May-2024 |
| A Strange Tale of Email Verification Bypass | https://medium.com/@Arioex/a-strange-tale-of-email-verification-bypass-5eda231d14d8?source=rss------bug_bounty-5 | Huntsman | bug-bounty-writeup, cybersecurity, vulnerability, bug-bounty, hacking | 10-May-2024 |
| Linux Privilege Escalation | TryHackMe — Part 2 | https://medium.com/@NoOne./linux-privilege-escalation-tryhackme-part-2-9a4cddba01ab?source=rss------bug_bounty-5 | Asim Anwar | bug-bounty, tryhackme, linux, privilege-escalation, hacking | 10-May-2024 |
| From Novice to Ninja: Unraveling Bug Bounty Beginnings through Cache Poisoning | https://cametom006.medium.com/from-novice-to-ninja-unraveling-bug-bounty-beginnings-through-cache-poisoning-40de3f8fd211?source=rss------bug_bounty-5 | Fahad Faisal | hackerone, bug-bounty, security, bug-bounty-tips | 10-May-2024 |
| Database Info Disclose by Client-Side DOS | https://starlox.medium.com/database-info-disclose-by-client-side-dos-7fb25a26fae8?source=rss------bug_bounty-5 | #$ubh@nk@r | dos-attack, infosec, hacking, bug-bounty | 10-May-2024 |
| Inside the Life of a Full-Time Bug Hunter: Weekly Insights and Goals | https://medium.com/@fulltimebughunter/inside-the-life-of-a-full-time-bug-hunter-weekly-insights-and-goals-6da07694fb0d?source=rss------bug_bounty-5 | . | cybersecurity, bug-bounty, bug-bounty-tips, infosec, hacking | 09-May-2024 |
| XSS | Here’s how I got my first bounty | https://medium.com/@sM0ky4/xss-heres-how-i-got-my-first-bounty-4f64785fe6f8?source=rss------bug_bounty-5 | sM0ky4 | bug-bounty-writeup, bug-bounty, xss-vulnerability, xss-attack, first-post | 09-May-2024 |
| idor affects all users | https://medium.com/@mohamadfadelababede/how-are-you-my-friends-d60c44c29da0?source=rss------bug_bounty-5 | Mohamad Fade Lababede | bug-bounty | 09-May-2024 |
| 24.12 Lab: CL.0 request smuggling | 2024 | https://cyberw1ng.medium.com/24-12-lab-cl-0-request-smuggling-2024-5b480979e285?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, careers, cybersecurity, hacking | 09-May-2024 |
| idor affects all users | https://medium.com/@mohamadfadelababede/idor-affects-all-users-d3f3f12a11c2?source=rss------bug_bounty-5 | Mohamad Fade Lababede | bug-bounty | 09-May-2024 |
| HOW I FOUND MY FIRST BUG | https://medium.com/@irenevenunye55/how-i-found-my-first-bug-7d66915a3fbb?source=rss------bug_bounty-5 | Irene Venunye | bug-bounty, bug-bounty-hunting, bug-bounty-tips, bug-bounty-hunter, bug-bounty-program | 09-May-2024 |
| Fingerprinting♨♨: Identifying Technologies Of Our Target. | https://hacktivistattacker.medium.com/fingerprinting-identifying-technologies-of-our-target-d3b0c021da0f?source=rss------bug_bounty-5 | Hacktivist-Attacker | fingerprinting, fingerprint-system, bug-bounty, penetration-test, reconnaissance | 09-May-2024 |
| Linux Privilege Escalation | TryHackMe — Part 1 | https://medium.com/@NoOne./linux-privilege-escalation-tryhackme-part-1-f0ae442e6864?source=rss------bug_bounty-5 | Asim Anwar | bug-bounty, hacking, tryhackme, privilege-escalation, linux | 09-May-2024 |
| How I Found XSS In Another Govt. Site :: NCIIPC VDP !! | https://medium.com/@p.ra.dee.p_0xx01/how-i-found-xss-in-another-govt-site-nciipc-vdp-84d78c0319c2?source=rss------bug_bounty-5 | Professor0xx01 | infosec, security, information-security, bug-bounty, security-research | 09-May-2024 |
| An easy bounty using fuzzing | https://medium.com/@xnum.1/an-easy-bounty-using-fuzzing-d602ad06f562?source=rss------bug_bounty-5 | Ahmed Tarek | bug-bounty, hacking, penteration-testing, fuzzing, pentesting | 09-May-2024 |
| Exploiting JWT Token Leads To IDOR | https://medium.com/@Ajakcybersecurity/exploiting-jwt-token-leads-to-idor-ec48cb8888bb?source=rss------bug_bounty-5 | AjakCybersecurity | penetration-testing, hacking, cybersecurity, ethical-hacking, bug-bounty | 09-May-2024 |
| Simple bug on Indian government website | Govt. bug hunting | https://medium.com/@sidharthpanda1/simple-bug-on-indian-government-website-govt-bug-hunting-0522af40a6ff?source=rss------bug_bounty-5 | SIDHARTH PANDA | bug-bounty, government, indian, hacking, bug-bounty-tips | 08-May-2024 |
| ETHICAL AND LEGAL ASPECTS OF BUG HUNTING: RESPONSIBLE DISCLOSURE, SCOPE, NDA AND OTHERS | https://medium.com/@Progsky/ethical-and-legal-aspects-of-bug-hunting-responsible-disclosure-scope-nda-and-others-4832b13a1622?source=rss------bug_bounty-5 | Progsky | documentation, bug-bounty, contracts, ethical-hacking | 08-May-2024 |
| NCIIPC VDP Bug : Open Redirection Vulnerability In Govt. Site !! | https://medium.com/@p.ra.dee.p_0xx01/nciipc-vdp-bug-open-redirection-vulnerability-in-govt-site-b048860f5d2d?source=rss------bug_bounty-5 | Professor0xx01 | bug-bounty, security, vulnerability, information-security, infosec | 08-May-2024 |
| Revealing a Critical Vulnerability: The Price Manipulation Flaw | https://medium.com/@pawarpushpak36/revealing-a-critical-vulnerability-the-price-manipulation-flaw-cfd640cacf46?source=rss------bug_bounty-5 | Pawarpushpak | penetration-testing, info-sec-writeups, pentesting, bug-zero, bug-bounty | 08-May-2024 |
| Unlocking Bug Bounties: Your Comprehensive Guide to Getting Started | https://medium.com/@sachin.hack/unlocking-bug-bounties-your-comprehensive-guide-to-getting-started-427a51d7e875?source=rss------bug_bounty-5 | Sachin Kumar | for-beginners, bug-bounty-tips, bug-bounty, cybersecurity, begineers | 08-May-2024 |
| 24.11 Lab: HTTP/2 request splitting via CRLF injection |2024 | https://cyberw1ng.medium.com/24-11-lab-http-2-request-splitting-via-crlf-injection-2024-ddb2adaf0cce?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, hacking, careers, penetration-testing | 08-May-2024 |
| Hack Any Browser With One Link | https://medium.com/@vishalchaudharydevsec/hack-any-browser-with-one-link-8d890b804627?source=rss------bug_bounty-5 | Vishal Chaudhary | security, hacking, cybersecurity, beef, bug-bounty | 08-May-2024 |
| Exposed Key In Page Source Led To Bypass Captcha | https://medium.com/@mohanad.hussam23/exposed-key-in-page-source-led-to-bypass-captcha-add64f8d133b?source=rss------bug_bounty-5 | Muhanad Israiwi | hacking, captcha, bug-bounty, bugs, penetration-testing | 08-May-2024 |
| Writing your First Nuclei Template | https://medium.com/@technolifts/writing-your-first-nuclei-template-f88575635ea8?source=rss------bug_bounty-5 | TechnoLifts | nucleus, nuclei-template, cybersecurity, offensive-security, bug-bounty | 08-May-2024 |
| XSS vulnerability caused by modifying the Content-Type | https://medium.com/@xiaodongsec/xss-vulnerability-caused-by-modifying-the-content-type-5118e2d02286?source=rss------bug_bounty-5 | Xiaodong | vulnerability, xss-attack, money, bug-bounty, hacker | 08-May-2024 |
| Modify the request path to bypass upload restrictions, leading to an XSS vulnerability. | https://medium.com/@xiaodongsec/modify-the-request-path-to-bypass-upload-restrictions-leading-to-an-xss-vulnerability-0610a893ff1a?source=rss------bug_bounty-5 | Xiaodong | money, hacker, vulnerability, bug-bounty, xss-attack | 08-May-2024 |
| An easily accomplished account takeover | https://medium.com/@xiaodongsec/an-easily-accomplished-account-takeover-cc2fd1c287ec?source=rss------bug_bounty-5 | Xiaodong | bug-bounty, hacker, china, money, vulnerability | 07-May-2024 |
| Title: Understanding Vertical Privilege Escalation in Cybersecurity | https://alvinbijo.medium.com/title-understanding-vertical-privilege-escalation-in-cybersecurity-2a12c42f8d83?source=rss------bug_bounty-5 | Alvin bijo | bug-bounty | 07-May-2024 |
| 24.10 Lab: HTTP/2 request smuggling via CRLF injection | 2024 | https://cyberw1ng.medium.com/24-10-lab-http-2-request-smuggling-via-crlf-injection-2024-8970aa222b46?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, hacking, bug-bounty, penetration-testing, careers | 07-May-2024 |
| Securitydegen.com Feature Update! | https://medium.com/@bugbountydegen/securitydegen-com-feature-update-d0bda8b236c0?source=rss------bug_bounty-5 | Bug Bounty Degen | vulnerability, web3, blockchain-security-audit, bug-bounty, smart-contracts | 07-May-2024 |
| A Thrilling Dive into Cloud Penetration Testing | https://adipsharif.medium.com/a-thrilling-dive-into-cloud-penetration-testing-fc88855f7f15?source=rss------bug_bounty-5 | ADIP | bug-bounty, information-security, cloud, info-sec-writeups, penetration-testing | 07-May-2024 |
| Threat Modeling for OAuth 2.0 Authorization Framework | https://medium.com/@jayeshkunwal/threat-modeling-for-oauth-2-0-authorization-framework-fcab66226fd7?source=rss------bug_bounty-5 | Jayesh kunwal | threat-modeling, bug-bounty, oauth, cybersecurity, vapt | 07-May-2024 |
| How I got $250 for IDOR via Business Logic Error | https://medium.com/@aryamanav.028/how-i-got-250-for-idor-via-business-logic-error-f3ba502baa5e?source=rss------bug_bounty-5 | Manav Arya | cybersecurity, information-security, vulnerability, bug-bounty, bugcrowd | 07-May-2024 |
| Athena TryHackMe Walkthrough | https://medium.com/@boogsta/athena-tryhackme-walkthrough-58eb432f0daa?source=rss------bug_bounty-5 | Boogsta | cybersecurity, bug-bounty, hacking, tryhackme, cyber | 07-May-2024 |
| A Comprehensive Review of the Guided Hacking Forum | https://medium.com/@yannik603/a-comprehensive-review-of-the-guided-hacking-forum-918231ab4f68?source=rss------bug_bounty-5 | Yannik Castro | reverse-engineering, bug-bounty, games, ctf, hacking | 07-May-2024 |
| IDN Bootcamp Bug Bounty : Langkah awal Menjadi Bug Hunter | https://medium.com/@cornelius.yuli.r/idn-bootcamp-bug-bounty-langkah-awal-menjadi-bug-hunter-a1fce0850681?source=rss------bug_bounty-5 | Cornelius | idn-bootcamp, bug-bounty | 06-May-2024 |
| Crypto bounty program got me $500 — Rate Limit Bypass | https://mo9khu93r.medium.com/crypto-bounty-program-got-me-500-rate-limit-bypass-d573f7b7d390?source=rss------bug_bounty-5 | mo9khu93r | cryptocurrency, security, hacking, web3, bug-bounty | 06-May-2024 |
| IDN Bootcamp Bug Bounty : Langkah awal Menjadi Bug Hunter | https://cornelius-y.medium.com/idn-bootcamp-bug-bounty-langkah-awal-menjadi-bug-hunter-a1fce0850681?source=rss------bug_bounty-5 | Cornelius Yuli | idn-bootcamp, bug-bounty | 06-May-2024 |
| Bounty Beginnings: My First Bug Discovery | https://cyberojas.medium.com/bounty-beginnings-my-first-bug-discovery-c4fea0b0c5c3?source=rss------bug_bounty-5 | cyberOjas | bug-bounty, vulnerability, bugcrowd | 06-May-2024 |
| Web3 Bug Bounty V/S Smart Contract Auditing | https://securrtech.medium.com/web3-bug-bounty-v-s-smart-contract-auditing-94207960469d?source=rss------bug_bounty-5 | Securr | blockchain, smart-contract-auditing, bug-bounty, web3, web3-security | 06-May-2024 |
| alasan ingin belajar bug bounty IDN bootcamp | https://medium.com/@ilhamsabana100/alasan-ingin-belajar-bug-bounty-idn-bootcamp-abf359e6a628?source=rss------bug_bounty-5 | Ilhamsabana | bug-bounty | 06-May-2024 |
| Blog mengenai saya sebagai syarat Bug Bounty IDN Bootcamp | https://medium.com/@081335097475a/blog-mengenai-saya-sebagai-syarat-bug-bounty-idn-bootcamp-ba3a6d8cdf36?source=rss------bug_bounty-5 | Mohamad Fachry Ali | cybersecurity, bug-bounty | 06-May-2024 |
| Pengalaman saya dibidang CyberSecurity | https://medium.com/@ahmadfauzyhafidz/pengalaman-saya-dibidang-cybersecurity-6919e17302d8?source=rss------bug_bounty-5 | Ahmad Fauzy Hafidz | coding, cybersecurity, bug-bounty, capture-the-flag | 06-May-2024 |
| My Journey to Become a Bug Hunters | Bug Bounty IDN Bootcamp | https://wahyukiddies.medium.com/my-journey-to-become-a-bug-hunters-bug-bounty-idn-bootcamp-9cc04860c874?source=rss------bug_bounty-5 | Wahyu Priambodo | technology, bug-bounty, experience, cybersecurity, bootcamp | 06-May-2024 |
| Bug bounty IDN Bootcamp: Perjalanan menjadi pentester dan bug hunter | https://medium.com/@rizkiarifsaifudin/bug-bounty-idn-bootcamp-perjalanan-menjadi-pentester-dan-bug-hunter-bf4eee8b64f5?source=rss------bug_bounty-5 | Rizki Arif Saifudin | programming, bug-bounty, linux, cybersecurity | 06-May-2024 |
| Pengalaman Menemukan Celah Keamanan (Bug) Pada Sebuah Website (Prelude Bug Bounty IDN Bootcamp) | https://medium.com/@nugrohoandyreza/pengalaman-menemukan-celah-keamanan-bug-pada-sebuah-website-prelude-bug-bounty-idn-bootcamp-7c4d6ad2af1f?source=rss------bug_bounty-5 | Andy R. Nugroho | bug-bounty | 06-May-2024 |
| Guide To Subdomain Takeovers: DNS Resolutions:-Vertical Recon. | https://hacktivistattacker.medium.com/dns-resolutions-guide-to-subdomain-takeovers-vertical-recon-9da92433e973?source=rss------bug_bounty-5 | Hacktivist-Attacker | reconnaissance, subdomain-takeover, penetration-testing, subdomain, bug-bounty | 06-May-2024 |
| Network Infrastructure Recon | https://medium.com/@davidkarpinski1/network-infrastructure-recon-3d5741eec73b?source=rss------bug_bounty-5 | David Eduardo Karpinski | dns, hacking, networking, cybersecurity, bug-bounty | 06-May-2024 |
| BugBountyTraining Lab: FastFoodHackings Part 1 | https://hoppp3r.medium.com/bugbountytraining-lab-fastfoodhackings-part-1-39a7b06fdef9?source=rss------bug_bounty-5 | Hoppp3r | bug-bounty-writeup, bugbountytraining, fastfoodhackings, bug-bounty, bug-bounty-labs | 05-May-2024 |
| Bug Bounty IDN Bootcamp | https://medium.com/@nurdin8/bug-bounty-idn-bootcamp-dffeeba84854?source=rss------bug_bounty-5 | Senudin Nurdin | bug-bounty | 05-May-2024 |
| Hack Like a Pro: Precon’s Simple Subdomain Secrets | https://medium.com/@tamhacker1/hack-like-a-pro-precons-simple-subdomain-secrets-a87e5b741b0b?source=rss------bug_bounty-5 | Tamhacker | ethical-hacking, bug-bounty, hacker, hacking, cybersecurity | 05-May-2024 |
| Exposing Information Of All Users “Email,Mobile Number ..etc” | https://medium.com/@dr4040x00/exposing-information-of-all-users-email-mobile-number-etc-697c328e0584?source=rss------bug_bounty-5 | Dr404 | information-disclosure, web-pen-testing, bug-bounty, bug-bounty-tips | 05-May-2024 |
| 24.9 Lab: H2.CL request smuggling | 2024 | https://cyberw1ng.medium.com/24-9-lab-h2-cl-request-smuggling-2024-792b86db2c2a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, penetration-testing, cybersecurity, hacking | 05-May-2024 |
| An Impactful ‘No Rate Limiting’ Bug | https://medium.com/@duncanochieng682/an-impactful-no-rate-limiting-bug-29eb5158fd14?source=rss------bug_bounty-5 | JateloCybersec | ethical-hacking, web-app-security, bug-bounty, pentesting, bugs | 05-May-2024 |
| Information gathering with OSINT | https://medium.com/@davidkarpinski1/information-gathering-with-osint-3b8af60a194d?source=rss------bug_bounty-5 | David Eduardo Karpinski | hacking, osint, bug-bounty, cybersecurity, pentesting | 05-May-2024 |
| JS-Snooper: Get More Bounty With Easy Bugs | https://aravind07.medium.com/js-snooper-get-more-bounty-with-easy-bugs-9d7b410f070e?source=rss------bug_bounty-5 | Gnana Aravind K | cybersecurity, infosec, bug-bounty, bug-bounty-tips, hacking | 05-May-2024 |
| Proxying Web Traffic Via SSH | https://medium.com/@mu.gl/proxying-web-traffic-via-ssh-f3cf09c35d46?source=rss------bug_bounty-5 | Mark El-Khoury | bug-bounty, ssh, pentesting, cybersecurity, infosec | 04-May-2024 |
| LEARNING THE BUG BOUNTY PROGRAM | https://medium.com/@basithrazaky/learning-the-bug-bounty-program-ffdfc54b3dee?source=rss------bug_bounty-5 | Ramadhani Basith Razaky | capture-the-flag, bug-bounty, cybersecurity, linux, networking | 04-May-2024 |
| 24.8 Lab: Response queue poisoning via H2.TE request smuggling | 2024 | https://cyberw1ng.medium.com/24-8-lab-response-queue-poisoning-via-h2-te-request-smuggling-2024-33bdb4b56b0b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, cybersecurity, hacking, bug-bounty | 04-May-2024 |
| # Certifcates | https://medium.com/@scumdestroy/certifcates-f51eace48a7e?source=rss------bug_bounty-5 | ︎ | penetration-testing, bug-bounty, recon, hacking, reconnaissance | 04-May-2024 |
| Get Your First Award by Joining IDN Bootcamp Bug Bounty | https://medium.com/@oktaa_/get-your-first-award-by-joining-idn-bootcamp-bug-bounty-7dd927ebe6b3?source=rss------bug_bounty-5 | okta | bug-bounty, linux, network, penetration-testing, hacker | 04-May-2024 |
| Alasan Kenapa Ingin Mengikuti “Bootcamp Bug Bounty IDN” | https://medium.com/@naurayaffakamila/alasan-kenapa-ingin-mengikuti-bootcamp-bug-bounty-idn-2d4a5889518c?source=rss------bug_bounty-5 | Naursyy_ | bug-bounty, technology, cybersecurity | 04-May-2024 |
| LEARNING BUG BOUNTY IDN BOOTCAMP | https://medium.com/@basithrazaky/learning-the-bug-bounty-program-ffdfc54b3dee?source=rss------bug_bounty-5 | Ramadhani Basith Razaky | capture-the-flag, bug-bounty, cybersecurity, linux, networking | 04-May-2024 |
| 24.7 Lab: Exploiting HTTP request smuggling to deliver reflected XSS | 2024 | https://cyberw1ng.medium.com/24-7-lab-exploiting-http-request-smuggling-to-deliver-reflected-xss-2024-334de5c0d400?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, cybersecurity, careers, hacking | 03-May-2024 |
| Empire Breakout Vulnhub: WriteUp | Walkthrough | VulnHub CTF | Privilege Escalation Attack | Python… | https://shamsulmehmood.medium.com/empire-breakout-vulnhub-writeup-walkthrough-vulnhub-ctf-privilege-escalation-attack-python-235087d3db54?source=rss------bug_bounty-5 | SHAMS UL MEHMOOD | cybersecurity, information-security, cyberattack, infosec, bug-bounty | 03-May-2024 |
| Unleashing the Ethical Hacker Within: Cybersecurity Insights, Bug Bounty Tips, and the Art of… | https://kd-200.medium.com/unleashing-the-ethical-hacker-within-cybersecurity-insights-bug-bounty-tips-and-the-art-of-2ebdb65a9ff3?source=rss------bug_bounty-5 | Nitin yadav | tech, infosec, technology, bug-bounty, cybersecurity | 03-May-2024 |
| 3 easiest bugs that you can find right now [guarantied] | https://medium.com/@deadoverflow/3-easiest-bugs-that-you-can-find-right-now-guarantied-71ef89efd1a7?source=rss------bug_bounty-5 | Imad Husanovic | cybersecurity, hacking, bug-bounty-tips, programming, bug-bounty | 03-May-2024 |
| Why and how to hide usernames on your WordPresss. | https://medium.com/@izmir.suat/why-and-how-to-hide-usernames-on-your-wordpresss-b01320642838?source=rss------bug_bounty-5 | Izmir Suat | wordpress, bug-bounty, information-security, pentest | 03-May-2024 |
| XSS leads to HALL OF FAME on a French website | https://medium.com/@KaranMoudgil/xss-leads-to-hall-of-fame-on-a-french-website-95bd3a96ad24?source=rss------bug_bounty-5 | Karan Moudgil | bug-bounty | 03-May-2024 |
| Alasan saya ingin megikuti Bug Bounty IDN Bootcamp | https://wildan14ar.medium.com/alasan-saya-ingin-megikuti-bug-bounty-idn-bootcamp-339aa385b45b?source=rss------bug_bounty-5 | WILDAN ABDURRASYID | bootcamp, bug-bounty, idn, cybersecurity, sytem | 03-May-2024 |
| How I bypassed OTP in unexpected way | https://medium.com/@ckachhadiya007/how-i-bypassed-otp-in-unexpected-way-2d4b478db512?source=rss------bug_bounty-5 | DEep | hacking, bug-bounty, red-team, cybersecurity, vulnerability | 03-May-2024 |
| Real World GitLab Account Take Over | https://medium.com/@red.whisperer/real-world-gitlab-account-take-over-b2e9896a1835?source=rss------bug_bounty-5 | Chux | hacking, cybersecurity, infosec, red-team, bug-bounty | 03-May-2024 |
| IDOR lead to PII Disclosure | https://medium.com/@karimelsayed0x1/idor-lead-to-pii-disclosure-121502394277?source=rss------bug_bounty-5 | z3r0xk | idor, bug-bounty, web-security | 03-May-2024 |
| How I Bypassed Rate limiting To Account Takeover | https://medium.com/@Ajakcybersecurity/how-i-bypassed-rate-limiting-to-account-takeover-1df722a527d5?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, cybersecurity, penetration-testing, bug-bounty, ethical-hacking | 03-May-2024 |
| DNS Resolutions: Identifying Live Targets : Vertical RECON. | https://hacktivistattacker.medium.com/dns-resolutions-identifying-live-targets-vertical-recon-2a2aed49bd6b?source=rss------bug_bounty-5 | Hacktivist-Attacker | penetration-testing, reconnaissance, bug-bounty, education, résolutions | 03-May-2024 |
| what is RCE-[Remote code Execution]❓ | https://medium.com/@mmdesvand1386/what-is-rce-remote-code-execution-fee04264fe30?source=rss------bug_bounty-5 | mamad | bug-bounty, website, security, cyber-security-website, social-security-website | 03-May-2024 |
| Sql İnjection Nedir &Karşılaştığım Vaka | https://medium.com/@akostak/sql-i%CC%87njection-nedir-kar%C5%9F%C4%B1la%C5%9Ft%C4%B1%C4%9F%C4%B1m-vaka-708b17f5da9d?source=rss------bug_bounty-5 | Ali | bug-bounty-tips, bug-bounty, sql-injection, vulnerability, bugs | 03-May-2024 |
| Bug Bounty ID | https://medium.com/@nurdin8/bug-bounty-id-33c529b2cd1a?source=rss------bug_bounty-5 | Senudin Nurdin | free-course, linux, network, cyberse, bug-bounty | 02-May-2024 |
| 24.6 Lab: Exploiting HTTP request smuggling to capture other users requests | 2024 | https://cyberw1ng.medium.com/24-6-lab-exploiting-http-request-smuggling-to-capture-other-users-requests-2024-fd10d3b638bc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, cybersecurity, penetration-testing, careers | 02-May-2024 |
| Langkah Awal Menuju Bug Bounty IDN BootCamp | https://medium.com/@caomaysss/langkah-awal-menuju-bug-bounty-idn-bootcamp-42bcc61ba7ef?source=rss------bug_bounty-5 | Caomay | bug-bounty, xiaocaomay, idn, idn-network | 02-May-2024 |
| Become a Bug Bounty hunter: Unveiling the Secrets to Success! | https://adipsharif.medium.com/become-a-bug-bounty-hunter-unveiling-the-secrets-to-success-90dfab4c2832?source=rss------bug_bounty-5 | ADIP | infosec, bug-bounty-tips, info-sec-writeups, penetration-testing, bug-bounty | 02-May-2024 |
| Google VRP Targets by Tier | https://uprootsecurity.medium.com/google-vrp-targets-by-tier-c0679c27e545?source=rss------bug_bounty-5 | UprootSecurity | infosec, pentest, bug-bounty, cybersecurity, vapt | 02-May-2024 |
| Alasan ingin belajar pada Bug Bounty IDN Bootcamp | https://medium.com/@putrantosurya38/alasan-ingin-belajar-bug-bounty-9f33d7d75161?source=rss------bug_bounty-5 | Putranto Surya | cybersecurity, bug-bounty, bug-bounty-idn-bootcamp | 02-May-2024 |
| How I Gained Account Access: Exploring the Risks of Password Reset Links in Cybersecurity | https://kd-200.medium.com/how-i-gained-account-access-exploring-the-risks-of-password-reset-links-in-cybersecurity-5811e914c289?source=rss------bug_bounty-5 | Nitin yadav | cybersecurity, bug-bounty, hacking, hackerone, technology | 02-May-2024 |
| Mengapa bug bounty? | https://medium.com/@rayyaramburambani11/mengapa-bug-bounty-0f77b824cc6c?source=rss------bug_bounty-5 | rayya | newbie, roboti̇k, bug-bounty-idn-bootcamp, bug-bounty | 02-May-2024 |
| How i got admin panel without opening the target | https://thesafdari.medium.com/how-i-got-admin-panel-without-opening-the-target-8ca4a2c219be?source=rss------bug_bounty-5 | Milad Safdari (TheSafdari) | github, hacking, github-secret, bug-bounty, cybersecurity | 02-May-2024 |
| Diving into the Depths: Unveiling Bug Bounty Adventures and Insights into Linux, Programming, and… | https://medium.com/@mansorihack/diving-into-the-depths-unveiling-bug-bounty-adventures-and-insights-into-linux-programming-and-952cc8957dc0?source=rss------bug_bounty-5 | Mansorihack | linux, bug-bounty, pentesting | 02-May-2024 |
| Bug Bounty IDN Bootcamp | By Eky | https://medium.com/@muhr6128/bug-bounty-idn-bootcamp-by-eky-7a65bc3f6844?source=rss------bug_bounty-5 | person | cybersecurity, ethical-hacking, ctf, bug-bounty | 02-May-2024 |
| Complex Attack Types: Sample Scenarios 3 | https://medium.com/@brsdncr/complex-attack-types-sample-scenarios-3-bcd472d684cf?source=rss------bug_bounty-5 | Baris Dincer | cybersecurity, threat-intelligence, bug-bounty, penetration-testing, freedomofinternet | 02-May-2024 |
| Real-World Example of Race Condition Exploits “adding Money” | https://medium.com/@dr4040x00/real-world-example-of-race-condition-exploits-adding-money-c8fe62964067?source=rss------bug_bounty-5 | Dr404 | race-condition, web-penetration-testing, vulnerability, bug-bounty | 02-May-2024 |
| #01: Path traversal | https://medium.com/@karimelsayed0x1/01-path-traversal-0c52daffd26e?source=rss------bug_bounty-5 | z3r0xk | source-code-review, path-traversal, web-security, nodejs, bug-bounty | 02-May-2024 |
| My Journey to the Nokia Security Hall of Fame | https://mufazmi.medium.com/my-journey-to-the-nokia-security-hall-of-fame-4e9cf4d8b5e9?source=rss------bug_bounty-5 | Umair Farooqui | hof, bug-bounty, mufazmi, nokia-hall-of-fame, umair-farooqui | 01-May-2024 |
| Harnessing the Power of Crowd-Sourced Security | https://medium.com/@paritoshblogs/harnessing-the-power-of-crowd-sourced-security-1326641d81b7?source=rss------bug_bounty-5 | Paritosh | cybersecurity, information-technology, information-security, cloud-computing, bug-bounty | 01-May-2024 |
| My First Verified Bug Bounty: Unmasking Flaws in University Web Apps | https://medium.com/@rafisyafrinaldi17/my-first-verified-bug-bounty-unmasking-flaws-in-university-web-apps-6c6b5fb1e8da?source=rss------bug_bounty-5 | Impeony | Rafi | vulnerability-assessment, cybersecurity, bug-bounty-writeup, bug-bounty | 01-May-2024 |
| How I Bypass CSP that allow a iframe injection in a chat bot + HTML injection on emails | https://medium.com/@jeetpal2007/how-i-bypass-csp-that-allow-a-iframe-injection-in-a-chat-bot-html-injection-on-emails-9d588aeef4c3?source=rss------bug_bounty-5 | JEETPAL | bug-bounty, htmli, bug-bounty-writeup, chatbotbugs, bug-bounty-tips | 01-May-2024 |
| €150 Bounty: Chaining Vulns to fully Exploit CORS Misconfiguration | https://r4v3n0r.medium.com/150-bounty-chaining-vulns-to-fully-exploit-cors-misconfiguration-521a0cd97316?source=rss------bug_bounty-5 | Fabian Cruz | information-security, bug-bounty, infrastructure-security, cybersecurity, penetration-testing | 01-May-2024 |
| How can I bypass the limit on the number of team members | https://medium.com/@xiaodongsec/how-can-i-bypass-the-limit-on-the-number-of-team-members-c3dd56d265a0?source=rss------bug_bounty-5 | Xiaodong | china, vulnerability, money, bug-bounty, hacker | 01-May-2024 |
| €400 Bounty: Unveiling a More Impactful CORS Misconfiguration Exploit | https://r4v3n0r.medium.com/400-bounty-unveiling-a-more-impactful-cors-misconfiguration-exploit-6db0a1b39bdc?source=rss------bug_bounty-5 | Fabian Cruz | web-security, bug-bounty, information-security, penetration-testing, cybersecurity | 01-May-2024 |
| FortiClient Android App | https://medium.com/@3ed0x92/forticlient-android-app-958f942cb5b7?source=rss------bug_bounty-5 | Mohamed Eid Wahby | bug-bounty, mobile-pentest, mobile-pentesting, penetration-testing, bug-bounty-tips | 01-May-2024 |
| Partnering with fewerClicks- To Provide Robust Web3 Security | https://securrtech.medium.com/partnering-with-fewerclicks-to-provide-robust-web3-security-007328375783?source=rss------bug_bounty-5 | Securr | smart-contract-auditing, bug-bounty, pentesting, web3 | 01-May-2024 |
| 1500$ bounty: how unprotected directory leaked sensitive info | https://medium.com/@aa.pietruczuk/1500-bounty-how-unprotected-directory-leaked-sensitive-info-929b55515232?source=rss------bug_bounty-5 | Agnieszka Pietruczuk | pentesting, bug-bounty | 01-May-2024 |
| Exposed Secrets: The Peril of Broken Access Control | https://kd-200.medium.com/exposed-secrets-the-peril-of-broken-access-control-928223c62547?source=rss------bug_bounty-5 | Nitin yadav | cybersecurity, bug-bounty, technology, hacking, penetration-testing | 01-May-2024 |
| BBRADAR: A WEB TOOL TO FIND THE LATEST BUG BOUNTY PROGRAMS | https://medium.com/@Progsky/bbradar-a-web-tool-to-find-the-latest-bug-bounty-programs-833ba632f7a6?source=rss------bug_bounty-5 | Progsky | web-hacking, web-security, bug-bounty | 01-May-2024 |
| I sent 1,000,000 Requests to a server | https://imwaiting18.medium.com/i-sent-1-000-000-requests-to-a-server-dcb6b41d5d7f?source=rss------bug_bounty-5 | imwaiting18 (Virang Rajyaguru) | hacking, cybersecurity, bug-bounty, ethical-hacking | 01-May-2024 |
| AWS S3 Bucket Misconfiguration Exposes PII and Documents of Job Seekers | https://infosecwriteups.com/aws-s3-bucket-misconfiguration-exposes-pii-and-documents-of-job-seekers-7b1332b0ecf1?source=rss------bug_bounty-5 | brutexploiter | cybersecurity, cloud, india, information-security, bug-bounty | 01-May-2024 |
| Learning Offensive Cybersecurity — Day 2 | https://medium.com/@n4rkwh4l/learning-offensive-cybersecurity-day-2-73a682ba1e4d?source=rss------bug_bounty-5 | N4RKWH4L | offensive-security, cybersecurity, bug-bounty, learning, tech | 01-May-2024 |
| Billions Bug Bounty Program | https://billionsquest.medium.com/billions-bug-bounty-program-c86689b4fb29?source=rss------bug_bounty-5 | Billions Quest | bug-bounty-tips, bug-bounty, bug-bounty-hunter, bugs | 01-May-2024 |
| Binary Exploitation: PicoCTF clutter-overflow challenge walk through | https://medium.com/@boogsta/binary-exploitation-picoctf-clutter-overflow-challenge-walk-through-80e2f775102c?source=rss------bug_bounty-5 | Boogsta | bug-bounty, hacking, hackathons, cyber, cybersecurity | 01-May-2024 |
| 1,000,000 requests 2FA bypass | https://imwaiting18.medium.com/i-sent-1-000-000-requests-to-a-server-dcb6b41d5d7f?source=rss------bug_bounty-5 | imwaiting18 (Virang Rajyaguru) | hacking, cybersecurity, bug-bounty, ethical-hacking | 01-May-2024 |
| Javascript code inside HTML | https://medium.com/@thewhiteside2000/javascript-code-inside-html-389a71060bf0?source=rss------bug_bounty-5 | Thewhiteside | bugs, bug-bounty-tips, bug-bounty | 01-May-2024 |
| How OSINT Helped Me To Find User Credentials And Discover An OTP Bypass | https://medium.com/@mohammed0x04/how-osint-helped-me-to-find-user-credentials-and-discover-an-otp-bypass-afb6b9e23b45?source=rss------bug_bounty-5 | Mohammed Waleed | recon, osint, bug-bounty-tips, cybersecurity, bug-bounty | 30-Apr-2024 |
| Bypassing SSL Pinning with Frida and Objection in Mobile Applications | https://medium.com/@ria.banerjee005/bypassing-ssl-pinning-with-frida-and-objection-in-mobile-applications-0b42a778b0f2?source=rss------bug_bounty-5 | Ria Banerjee | bug-bounty, cybersecurity, ssl-pinning, mobile-security, mobile-app-testing | 30-Apr-2024 |
| Another ATO, will I get paid this time? | https://imwaiting18.medium.com/another-ato-will-i-get-paid-this-time-ba86ed272f3e?source=rss------bug_bounty-5 | imwaiting18 (Virang Rajyaguru) | hacking, ethical-hacking, security, bug-bounty, cyber-security-awareness | 30-Apr-2024 |
| Useful GoogleDocks Tips — Bug Bounty Tuesday | https://medium.com/@kerstan/useful-googledocks-tips-bug-bounty-tuesday-45eddc06bf93?source=rss------bug_bounty-5 | kerstan | cybersecurity, bug-bounty, hacking | 30-Apr-2024 |
| How I found three Critical Vulnerability in one site. | https://medium.com/@ckachhadiya007/how-i-found-three-critical-vulnerability-in-one-site-70fc513669d8?source=rss------bug_bounty-5 | DEep | vulnerability, hacking, cybersecurity, red-team, bug-bounty | 30-Apr-2024 |
| O melhor curso de hacking etico do Brasil | https://medium.com/@rafael.code77/o-melhor-curso-de-hacking-etico-do-brasil-cec8eec850bb?source=rss------bug_bounty-5 | Rafael Henrique | tryhackme-writeup, hacking, bug-bounty, hacker, hackerone | 30-Apr-2024 |
| 24.4 Lab: Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE | https://cyberw1ng.medium.com/24-4-lab-exploiting-http-request-smuggling-to-bypass-front-end-security-controls-cl-te-458923cda52d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, penetration-testing, bug-bounty, hacking | 30-Apr-2024 |
| Learning OffensiveCybersecurity — Day 1 | https://medium.com/@n4rkwh4l/learning-offensivecybersecurity-day-1-b5c26c55522c?source=rss------bug_bounty-5 | N4RKWH4L | bug-bounty, cybersecurity, offensive-security, learning, tech | 30-Apr-2024 |
| Adding Certificates to Postman & Burp Suite for API Testing | https://medium.com/r3d-buck3t/adding-certificates-to-postman-burp-suite-for-api-testing-06339a6d072a?source=rss------bug_bounty-5 | Nairuz Abulhul | security, bug-bounty, penetration-testing, hacking, infosec | 30-Apr-2024 |
| Bug Bounty Challenge (final): [CONCLUSION] | https://wallotry.medium.com/bug-bounty-challenge-final-day-10-30-04-2024-75a6f93d2687?source=rss------bug_bounty-5 | Wallotry | bug-bounty-tips, bug-bounty, bug-bounty-hunter, bug-bounty-writeup | 30-Apr-2024 |
| Finding a viper in the curved lawn | https://medium.com/@kupiasec/finding-a-viper-in-the-curved-lawn-e43401997cce?source=rss------bug_bounty-5 | KupiaSec | curve-finance, bug-bounty, audit, blockchain, security | 30-Apr-2024 |
| ineligible for bounty !!! | https://medium.com/@thewhiteside2000/ineligible-for-bounty-d4b720bfb596?source=rss------bug_bounty-5 | Thewhiteside | bug-bounty | 30-Apr-2024 |
| postMessage() security | https://noobstain.medium.com/postmessage-security-e6c55ef1f1bd?source=rss------bug_bounty-5 | Sumeet darekar | bug-bounty, xss-vulnerability, replit, postmessage, javascript | 30-Apr-2024 |
| Learning Offensive Cybersecurity — Day 1 | https://medium.com/@n4rkwh4l/learning-offensivecybersecurity-day-1-b5c26c55522c?source=rss------bug_bounty-5 | N4RKWH4L | bug-bounty, cybersecurity, offensive-security, learning, tech | 30-Apr-2024 |
| Bug Bounty Challenge (final): CONCLUSION | https://wallotry.medium.com/bug-bounty-challenge-final-day-10-30-04-2024-75a6f93d2687?source=rss------bug_bounty-5 | Wallotry | bug-bounty-tips, bug-bounty, bug-bounty-hunter, bug-bounty-writeup | 30-Apr-2024 |
| do FUZZ well! | https://medium.com/@ugs20b126_cic.rajesh/do-fuzz-well-07cb19bb0675?source=rss------bug_bounty-5 | Rajesh Sagar | bug-bounty, fuzzing, bug-bounty-tips | 30-Apr-2024 |
| E-Commerce Application Penetration Testing- My Favourite Business Logical Flaw | https://medium.com/@vaishalinagori112/e-commerce-application-penetration-testing-my-favourite-business-logical-flaw-bac0367ad60c?source=rss------bug_bounty-5 | Vaishali Nagori | application-security, ciso, bug-bounty, penetration-testing, vapt | 29-Apr-2024 |
| The Silent Threat: Uncovering IDOR Vulnerabilities Before They’re Exploited (PoC) | https://medium.com/@mrmaulik191/the-silent-threat-uncovering-idor-vulnerabilities-before-theyre-exploited-poc-f98d2b8aec8d?source=rss------bug_bounty-5 | Mr.MG | idor, penetration-testing, blog, cybersecurity, bug-bounty | 29-Apr-2024 |
| The Story of a Mass Account Takeover Though Stored XSS (Cross-Site Scripting). | https://medium.com/@iamrajchavan/the-story-of-a-mass-account-takeover-though-stored-xss-cross-site-scripting-bd2e484a0bd1?source=rss------bug_bounty-5 | Rajdip Chavan | vapt, cybersecurity, bug-hunting, web-app-pentesting, bug-bounty | 29-Apr-2024 |
| The Fuzzy Wuzzy: Unveiling Hidden Parameters | https://medium.com/@mendurim.r/the-fuzzy-wuzzy-unveiling-hidden-parameters-24169dfc9371?source=rss------bug_bounty-5 | m3nd00 | bug-bounty, fuzzing, ffuf | 29-Apr-2024 |
| Explorando Acunetix Vulneweb SQL Injection | https://medium.com/@davidkarpinski1/explorando-acunetix-vulneweb-sql-injection-23360cf2d5f3?source=rss------bug_bounty-5 | David Eduardo Karpinski | sql-injection, sql, bug-bounty, mysql, vulnerability | 29-Apr-2024 |
| 24.3 Lab: Exploiting HTTP request smuggling to bypass front-end security controls, CL.TE | https://cyberw1ng.medium.com/24-3-lab-exploiting-http-request-smuggling-to-bypass-front-end-security-controls-cl-te-3a5f92a939d2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, penetration-testing, hacking, cybersecurity | 29-Apr-2024 |
| Temu glitch - Temu system hacked and let me buy free items! | https://medium.com/@verylazytech/temu-glitch-temu-system-hacked-and-let-me-buy-free-items-356fad19ae4a?source=rss------bug_bounty-5 | Very Lazy Tech | temu, hacking, shopping, free, bug-bounty | 29-Apr-2024 |
| The Fuzzy Wuzzy: Unveiling Hidden Parameters | https://medium.com/@mendurim.r/the-fuzzy-wuzzy-unveiling-hidden-parameters-24169dfc9371?source=rss------bug_bounty-5 | ScriptTease | bug-bounty, fuzzing, ffuf | 29-Apr-2024 |
| Broken Link Hijacking: A Hidden Threat $350 Bounty | https://medium.com/@chouhanhimanshu532/broken-link-hijacking-a-hidden-threat-350-bounty-bb5978177b1d?source=rss------bug_bounty-5 | Himanshu Chouhan | bug-bounty, bugcrowd, bugs, broken-link-hijacking, bug-bounty-tips | 29-Apr-2024 |
| Embracing Downtime: Why “Wasting Time” Can Be Beneficial for Bug Hunters | https://securitylit.medium.com/embracing-downtime-why-wasting-time-can-be-beneficial-for-bug-hunters-62d83da87a14?source=rss------bug_bounty-5 | Security Lit Limited | bug-bounty, cybersecurity, penetration-testing, bug-bounty-tips | 29-Apr-2024 |
| Crypto Attacks Cheat-Sheet | https://medium.com/@davidkarpinski1/brute-forcing-cheat-sheet-30a9f58e024e?source=rss------bug_bounty-5 | David Eduardo Karpinski | hacking, bug-bounty, dictionary, cheating, crack | 29-Apr-2024 |
| Bug Bounty Challenge (final): Day 9–29/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-final-day-9-29-04-2024-9643d90e3ccf?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 29-Apr-2024 |
| The Last Dance (HackTheBox Writeup) | https://medium.com/@krishgera1/the-last-dance-hackthebox-writeup-ab0ffda6264f?source=rss------bug_bounty-5 | Krish Gera | ctf, cybersecurity, hackthebox, hackerone, bug-bounty | 29-Apr-2024 |
| Find PII Info Disclosure Bugs With this Simple GUI Tool-Easy P1 | https://medium.com/@Ajakcybersecurity/find-pii-info-disclosure-bugs-with-this-simple-gui-tool-easy-p1-7507a34ae172?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, cybersecurity, bug-bounty, hacking, penetration-testing | 29-Apr-2024 |
| Bug Zero at a Glance [01–15 April] | https://blog.bugzero.io/bug-zero-at-a-glance-01-15-april-1a761018d605?source=rss------bug_bounty-5 | Januka Dharmapriya | cybersecurity, sri-lanka, bug-zero, newsletter, bug-bounty | 28-Apr-2024 |
| 2FA bypass that made me $______ | https://imwaiting18.medium.com/2fa-bypass-that-made-me-6d32d3b762b4?source=rss------bug_bounty-5 | imwaiting18 (Virang Rajyaguru) | csrf, bug-bounty, cybersecurity, 2fa-bypass, hacking | 28-Apr-2024 |
| How to choose less competitive Bug Bounty Programs ( No VDPs) | https://medium.com/@h3mantsaini/how-to-choose-less-competitive-bug-bounty-programs-no-vdps-0acc3ddfe9b8?source=rss------bug_bounty-5 | H3mant | bug-bounty-tips, bugbounty-writeup, bug-bounty, bug-bounty-writeup | 28-Apr-2024 |
| Starting in Bug Bounty — First Master This Before Hunting. | https://medium.com/@shuklaneel525/starting-in-bug-bounty-first-master-this-before-hunting-74d266a874a0?source=rss------bug_bounty-5 | NEEL SHUKLA | bug-bounty, ethical-hacking, penetration-testing, bounty-program, bug-bounty-tips | 28-Apr-2024 |
| Unveiling the Secrets of Internal Pentest Monitoring: A Game-Changer for Security Leaders | https://medium.com/@anirumble6776/unveiling-the-secrets-of-internal-pentest-monitoring-a-game-changer-for-security-leaders-09e57b46f9ef?source=rss------bug_bounty-5 | Aniniikethr12 | bug-bounty, pentesting, cybersecurity | 28-Apr-2024 |
| Never use the GET method for Sensitive Actions in Web App: Ft. CSRF | https://secureitmania.medium.com/never-use-the-get-method-for-sensitive-actions-in-web-app-ft-csrf-f106df3c228b?source=rss------bug_bounty-5 | secureITmania | bug-bounty, penetration-testing, information-security, hacking, web-development | 28-Apr-2024 |
| Ability to Deny Subaccounts feature from all users | https://medium.com/@mostafaaboelnour19/ability-to-deny-subaccounts-feature-from-all-users-e8fca424ffb9?source=rss------bug_bounty-5 | 0xAb031n0uR | bugbounty-writeup, bug-bounty, cybersecurity | 28-Apr-2024 |
| IDOR leads to Account Takeover of all users (ATO). | https://medium.com/@xnum.1/idor-leads-to-account-takeover-of-all-users-ato-27af312c8481?source=rss------bug_bounty-5 | Ahmed Tarek | penteration-testing, account-takeover, bug-bounty, pentesting, hacking | 28-Apr-2024 |
| Mi camino en el Bug Bounty comienza, pero antes.. | https://medium.com/@cyb3rbyt3/mi-camino-en-el-bug-bounty-comienza-pero-antes-e649661dddc0?source=rss------bug_bounty-5 | Cib3r Byt3 | bug-bounty | 28-Apr-2024 |
| 24.2 Lab: HTTP request smuggling, confirming a TE.CL | https://cyberw1ng.medium.com/24-2-lab-http-request-smuggling-confirming-a-te-cl-1917e523470e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, cybersecurity, bug-bounty, hacking | 28-Apr-2024 |
| How I Hacked an Indian Government Website and Accessed Their Database Server | https://medium.com/@kamilrahman32/how-i-hacked-an-indian-government-website-and-accessed-their-database-server-02a81842cce8?source=rss------bug_bounty-5 | Kamil Rahuman | bug-hunting, cybersecurity, bug-bounty, hacking | 28-Apr-2024 |
| Bug Bounty Challenge (final): Day 8–28/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-final-day-8-28-04-2024-67bac40e6a35?source=rss------bug_bounty-5 | Wallotry | bug-bounty-tips, bug-bounty-writeup, bug-bounty-hunter, bug-bounty | 28-Apr-2024 |
| How We Hacked Voice Communication Solutions Company And Found BAC + Info Disclosure + IDOR 😀 | https://medium.com/@eslam.zayedw/how-we-hacked-voice-communication-solutions-company-and-found-bac-info-disclosure-idor-d-6884037064f0?source=rss------bug_bounty-5 | D0loresH4ze | bug-bounty, bug-bounty-tips, cybersecurity, hacking, penetration-testing | 28-Apr-2024 |
| Flamingo Finance Bug Bounty Program | https://medium.com/@kdmytro336/flamingo-finance-bug-bounty-program-e5736de7bfa0?source=rss------bug_bounty-5 | Dmytro Kovalenko | web-security, bug-bounty, security, web3, flamingo-finance | 28-Apr-2024 |
| VAPT: The Secret Weapon for Security Superheroes | https://securitylit.medium.com/vapt-the-secret-weapon-for-security-superheroes-27fcdd79b16e?source=rss------bug_bounty-5 | Security Lit Limited | vapt, bug-bounty, cybersecurity, cyberattack | 28-Apr-2024 |
| Security Testing Trends 2024 | https://innovateqa.medium.com/security-testing-trends-2024-38d9129fde4d?source=rss------bug_bounty-5 | InnovateQA | security-testing, devsecops, genai, bug-bounty, pentesting | 27-Apr-2024 |
| Hidden parameters | https://medium.com/@thewhiteside2000/hidden-parameters-e818d572ea3e?source=rss------bug_bounty-5 | Thewhiteside | bug-bounty, bug-bounty-tips | 27-Apr-2024 |
| Top Ten Books for Bug Bounty | https://medium.com/@verylazytech/top-ten-books-for-bug-bounty-95e8a42fb519?source=rss------bug_bounty-5 | Very Lazy Tech | pentesting, money, cybersecurity, bug-bounty, oscp | 27-Apr-2024 |
| How to setup in 30 min your Web3 lab in Windows | https://coinsbench.com/how-to-setup-in-30-min-your-web3-lab-in-windows-e0026185b64?source=rss------bug_bounty-5 | Bug Bounty Degen | web3, hacking-tools, ethereum, bug-bounty, blockchain | 27-Apr-2024 |
| 2:00 AM IDOR leads to some Adrenaline rush | https://imwaiting18.medium.com/2-00-am-idor-leads-to-some-adrenaline-rush-996f710bd55a?source=rss------bug_bounty-5 | imwaiting18 (Virang Rajyaguru) | bug-bounty | 27-Apr-2024 |
| Logic Loopholes: The Fun Flaws | https://medium.com/@khode4li/logic-loopholes-the-fun-flaws-5a8e14b09dc7?source=rss------bug_bounty-5 | Khod4li | business-logic, web-penetration, bug-bounty, pentest, xss-attack | 27-Apr-2024 |
| How I Exploited an Auth0 Misconfiguration to Bypass Login Restrictions | https://amjadali110.medium.com/how-i-exploited-an-auth0-misconfiguration-to-bypass-login-restrictions-c5d8c20d5505?source=rss------bug_bounty-5 | Amjad Ali | penetration-testing, infosec, bug-bounty-tips, bug-bounty, cybersecurity | 27-Apr-2024 |
| How A Blackbox Target Turned To Whitebox With Recon | https://medium.com/@red.whisperer/how-a-blackbox-target-turned-to-whitebox-with-recon-e46536672702?source=rss------bug_bounty-5 | Chux | infosec, cybersecurity, red-team, hacking, bug-bounty | 27-Apr-2024 |
| Spotting Sensitive Data in iOS Applications A Penetration Tester’s Guide | https://adipsharif.medium.com/spotting-sensitive-data-in-ios-applications-a-penetration-testers-guide-06f84af9cb0a?source=rss------bug_bounty-5 | ADIP | pentesting, penetration-testing, infosec, information-security, bug-bounty | 27-Apr-2024 |
| 24.1 Lab: HTTP request smuggling, confirming a CL.TE | https://cyberw1ng.medium.com/24-1-lab-http-request-smuggling-confirming-a-cl-te-c53051cf5875?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, careers, penetration-testing, cybersecurity | 27-Apr-2024 |
| privilege escalation allow the app admin to add the user as organization admin (on Microsoft own… | https://medium.com/@amitkhandebharad5/privilege-escalation-allow-the-app-admin-to-add-the-user-as-organization-admin-on-microsoft-own-e24352219a24?source=rss------bug_bounty-5 | Amitkhandebharad | security, bug-bounty, bugcrowd, privilege-escalation, bug-hunter | 27-Apr-2024 |
| Exploring the Filliquid Testnet Launch Bug Bounty Program! | https://medium.com/@dekachi17/exploring-the-filliquid-testnet-launch-bug-bounty-program-e67c76557cc5?source=rss------bug_bounty-5 | I. Tobias Darlington | filecoin, bug-bounty, testnet, defi, filliquid | 27-Apr-2024 |
| How I Hacked NASA Website and find a Criticial Source Code leak BUG on their website | https://medium.com/@phantom9863/how-i-hacked-nasa-website-and-find-a-criticial-source-code-leak-bug-on-their-website-9be0c38299fd?source=rss------bug_bounty-5 | Phantom | bugs, bug-bounty-tips, bug-fixes, bug-bounty, bug-zero | 27-Apr-2024 |
| Unveiling Strategies to Identify Potentially Sensitive Data Stored by iOS Applications | https://adipsharif.medium.com/spotting-sensitive-data-in-ios-applications-a-penetration-testers-guide-06f84af9cb0a?source=rss------bug_bounty-5 | ADIP | pentesting, penetration-testing, infosec, information-security, bug-bounty | 27-Apr-2024 |
| What is HTTP request smuggling? | https://cyberw1ng.medium.com/what-is-http-request-smuggling-7ab91748c6db?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, careers, cybersecurity, bug-bounty | 26-Apr-2024 |
| I found a simple but rare misconfiguration and got $200 on a hackerone program | https://harish45.medium.com/i-found-a-simple-but-rare-misconfiguration-and-got-200-on-a-hackerone-program-5863b6c51538?source=rss------bug_bounty-5 | Harish | hackerone, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 26-Apr-2024 |
| Private Interact.sh server setup with a web dashboard | https://infosecwriteups.com/private-interact-sh-server-setup-with-a-web-dashboard-6b0320645536?source=rss------bug_bounty-5 | Serj Novoselov | tutorial, hacking, tools, cybersecurity, bug-bounty | 26-Apr-2024 |
| Found Multiple Bugs :: XSS, MITM, Sec-MisConf :: In an Educational Site | https://medium.com/@p.ra.dee.p_0xx01/found-multiple-bugs-xss-mitm-sec-misconf-in-an-educational-site-5a3804085da0?source=rss------bug_bounty-5 | Professor0xx01 | security, bugs, bug-bounty, information-security, xss-attack | 26-Apr-2024 |
| The Ultimate Guide to CISSP’s Eight Security Territories | https://systemweakness.com/the-ultimate-guide-to-cissps-eight-security-territories-836ec7bec836?source=rss------bug_bounty-5 | Gagan Yalamuri | startup, information-security, information-technology, cybersecurity, bug-bounty | 26-Apr-2024 |
| Unraveling the Nuances of 403 Bypass: Strengthening Web Application Security | https://medium.com/@dasmanish6176/unraveling-the-nuances-of-403-bypass-strengthening-web-application-security-ac2e8e885c3f?source=rss------bug_bounty-5 | Dasmanish | 403-forbidden, ethical-hacking, bug-bounty | 26-Apr-2024 |
| How to baypass scaping filter(\) | https://medium.com/@thewhiteside2000/how-to-baypass-scaping-filter-14393a23af4f?source=rss------bug_bounty-5 | Thewhiteside | bug-bounty-tips, bug-bounty | 26-Apr-2024 |
| How We Prevented a Mass Breach On One OF The Biggest CryptoCurrency Gateways On A Web3 Platform. | https://medium.com/@eslam.zayedw/how-we-prevented-a-mass-breach-on-one-of-the-biggest-cryptocurrency-gateways-on-a-web3-platform-2d8393070b10?source=rss------bug_bounty-5 | D0loresH4ze | cybersecurity, bugbounty-writeup, bug-bounty, bug-bounty-tips, penetration-testing | 26-Apr-2024 |
| Found Multiple Bugs :: XSS, MITM, Sec-MisConf :: In a GOVT Educational Site | https://medium.com/@p.ra.dee.p_0xx01/found-multiple-bugs-xss-mitm-sec-misconf-in-an-educational-site-5a3804085da0?source=rss------bug_bounty-5 | Professor0xx01 | security, bugs, bug-bounty, information-security, xss-attack | 26-Apr-2024 |
| Bug Bounty Tools | https://medium.com/@malishakali2002/bug-bounty-tools-bedcf7b94f8d?source=rss------bug_bounty-5 | Malisha_kali | ctf, bug-bounty-writeup, reconnaissance, bug-bounty, bug-bounty-tool | 25-Apr-2024 |
| this is how I Bypassed the 2FA page in a big site… | https://medium.com/@hannorayousef/this-is-how-i-bypassed-the-2fa-page-in-a-big-site-77c6a3b7596d?source=rss------bug_bounty-5 | Bar_0_0_n | bug-bounty, 2fa, pentesting, bug-bounty-tips, cybersecurity | 25-Apr-2024 |
| Android Pentesting Lab Setup step to step . Part -1 | https://medium.com/@adityasingh4180/android-pentesting-lab-setup-step-to-step-part-1-c50d210d118d?source=rss------bug_bounty-5 | Security Empire | bug-bounty-tips, cybersecurity, android-pentesting, bug-bounty, cyber-sec | 25-Apr-2024 |
| Bug Bounty Champions: Real Stories of Cybersecurity Triumphs | https://medium.com/@paritoshblogs/bug-bounty-champions-real-stories-of-cybersecurity-triumphs-35c0c976469a?source=rss------bug_bounty-5 | Paritosh | cybersecurity, bug-bounty, ai, hacking, information-security | 25-Apr-2024 |
| Understanding 403 Bypass: A Critical Vulnerability in Web Application Security | https://infosecwriteups.com/understanding-403-bypass-a-critical-vulnerability-in-web-application-security-2b9f0318f3a4?source=rss------bug_bounty-5 | Abhishek Bhujang | bug-bounty, 403-bypass, cybersecurity, vulnerability, web-app-security | 25-Apr-2024 |
| Hacking one of the largest Legal tech in MENA | https://ahmadmansourr.medium.com/hacking-one-of-the-largest-legal-tech-in-mena-92365c276654?source=rss------bug_bounty-5 | Ahmad Mansour | pentest, hacking, securing, bug-bounty | 25-Apr-2024 |
| Cyber Detectives Unite: Advanced Tools for Web Security | https://medium.com/@gaganak.yalamuri/cyber-detectives-unite-advanced-tools-for-web-security-bb675f46b46e?source=rss------bug_bounty-5 | Gagan Yalamuri | ethical-hacking, information-security, cybersecurity, bug-bounty, computer-science | 25-Apr-2024 |
| How a ‘.git’ file Leads to Zendesk Panel Takeover | https://sl4x0.medium.com/how-a-git-file-leads-to-zendesk-panel-takeover-11e8d2812076?source=rss------bug_bounty-5 | Abdelrhman Allam (sl4x0) | bug-bounty-tips, admin-panel, pentesting, bug-bounty, hacking | 25-Apr-2024 |
| Privilege Escalation to Admin through an Import Feature | https://cristivlad.medium.com/privilege-escalation-to-admin-through-an-import-feature-ac8ac6b6abad?source=rss------bug_bounty-5 | Cristi Vlad | bug-bounty, cybersecurity, penetration-testing, pentesting, infosec | 25-Apr-2024 |
| Unexpected gain, arbitrary forgery of user tokens. | https://medium.com/@xiaodongsec/unexpected-gain-arbitrary-forgery-of-user-tokens-cb0dc1c4bd9f?source=rss------bug_bounty-5 | Xiaodong | china, hacker, vulnerability, bug-bounty, money | 25-Apr-2024 |
| How to monitor your internal pentesters? | https://medium.com/@levente.b.molnar/how-to-monitor-your-internal-pentesters-6fe0e18f9fd0?source=rss------bug_bounty-5 | Hackrate | bug-bounty, cybersecurity, it-security, penetration-testing-tools, penetration-testing | 25-Apr-2024 |
| Find This Easy CSRF in Every Website- A Sweet P4 | https://medium.com/@Ajakcybersecurity/find-this-easy-csrf-in-every-website-a-sweet-p4-372a3198bf47?source=rss------bug_bounty-5 | AjakCybersecurity | penetration-testing, technology, bug-bounty, hacking, cybersecurity | 25-Apr-2024 |
| Bug Bounty Challenge (final): Day 5–25/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-final-day-5-25-04-2024-a8d33630fe73?source=rss------bug_bounty-5 | Wallotry | bug-bounty-writeup, bug-bounty-hunter, bug-bounty, bug-bounty-tips | 25-Apr-2024 |
| Cyber Detectives Unite: Advanced Tools for Web Security | https://systemweakness.com/cyber-detectives-unite-advanced-tools-for-web-security-bb675f46b46e?source=rss------bug_bounty-5 | Gagan Yalamuri | ethical-hacking, information-security, cybersecurity, bug-bounty, computer-science | 25-Apr-2024 |
| 20.6 Lab: Host validation bypass via connection state attack | 2024 | https://cyberw1ng.medium.com/20-6-lab-host-validation-bypass-via-connection-state-attack-2024-ba5ddd95edc4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, hacking, cybersecurity, penetration-testing | 25-Apr-2024 |
| Privilege escalation mediante Race Condition. | https://medium.com/@duality084/privilege-escalation-mediante-race-condition-0254df6ffbd8?source=rss------bug_bounty-5 | Matias Ramirez | bug-bounty, bug-bounty-tips, bugbounty-writeup, hacking | 25-Apr-2024 |
| A very useful asset collection tool: Asset Reconnaissance Lighthouse. | https://medium.com/@xiaodongsec/a-very-useful-asset-collection-tool-asset-reconnaissance-lighthouse-94204f093c92?source=rss------bug_bounty-5 | Xiaodong | hacks, hunting, tools, bug-bounty, china | 24-Apr-2024 |
| Hack Stories: Hacking Hackers EP:3 | https://infosecwriteups.com/hack-stories-hacking-hackers-ep-3-11b1f0e002e8?source=rss------bug_bounty-5 | c0d3x27 | software, programming, cybersecurity, hacking, bug-bounty | 24-Apr-2024 |
| #1. Bug Bounty POC: IDOR leads to Account Takeover | https://cyb3rmind.medium.com/1-bug-bounty-poc-idor-leads-to-account-takeover-e500701a8004?source=rss------bug_bounty-5 | Cyb3r M!nds | idor, account-takeover, web-penetration-testing, bug-bounty, pentesting | 24-Apr-2024 |
| BALMER PEAK AND BUG HUNTING | https://medium.com/@Progsky/balmer-peak-and-bug-hunting-8ea030eaa4a4?source=rss------bug_bounty-5 | Progsky | humor, bug-bounty | 24-Apr-2024 |
| 20.5 Lab: SSRF via flawed request parsing | 2024 | https://cyberw1ng.medium.com/20-5-lab-ssrf-via-flawed-request-parsing-2024-77a91ca47898?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, careers, cybersecurity, hacking | 24-Apr-2024 |
| Unveiling the Hidden: A Guide to Passive Subdomain Enumeration | https://medium.com/@gaganak.yalamuri/unveiling-the-hidden-a-guide-to-passive-subdomain-enumeration-6f1db9a8bb50?source=rss------bug_bounty-5 | Gagan Yalamuri | web-security, technology, security, bug-bounty, hacking | 24-Apr-2024 |
| Bug Bounty Challenge (final): Day 4–24/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-final-day-4-24-04-2024-ad138e4d1357?source=rss------bug_bounty-5 | Wallotry | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter | 24-Apr-2024 |
| Embarking on My Bug Bounty Hunting Journey | https://medium.com/@nikhil-/embarking-on-my-bug-bounty-hunting-journey-d4064cd28905?source=rss------bug_bounty-5 | Nikhil | my-journey-in-tech, cybersecurity, bug-bounty | 24-Apr-2024 |
| Unveiling the Hidden: A Guide to Passive Subdomain Enumeration | https://systemweakness.com/unveiling-the-hidden-a-guide-to-passive-subdomain-enumeration-6f1db9a8bb50?source=rss------bug_bounty-5 | Gagan Yalamuri | web-security, technology, security, bug-bounty, hacking | 24-Apr-2024 |
| How easy I made $$$$ | https://anasbetis023.medium.com/how-easy-i-made-24edb0fd1364?source=rss------bug_bounty-5 | Anas H Hmaidy | penetration-testing, bug-bounty-tips, cybersecurity, bug-bounty | 23-Apr-2024 |
| Bug :: CORS Misconfiguration ~ could lead to disclosure of sensitive info..!!! | https://medium.com/@p.ra.dee.p_0xx01/bug-cors-misconfiguration-could-lead-to-disclosure-of-sensitive-info-ad95e35162fd?source=rss------bug_bounty-5 | Professor0xx01 | cors, bug-bounty, threat-hunting, information-security, vulnerability | 23-Apr-2024 |
| What are Some Ethical Considerations for Bug Bounty Hunters When Negotiating Rewards or Disclosing… | https://medium.com/mynextdeveloper/what-are-some-ethical-considerations-for-bug-bounty-hunters-when-negotiating-rewards-or-disclosing-3008e87a6173?source=rss------bug_bounty-5 | MyNextDeveloper | bug-bounty, ethics, data-breach, ethical-hacking, cybersecurity | 23-Apr-2024 |
| IOS Penetration Testing: Guide to Static Analysis | https://medium.com/@adityasawant00/ios-penetration-testing-guide-to-static-analysis-4a9dea5d672d?source=rss------bug_bounty-5 | Aditya Sawant | cybersecurity, static-analysis, bug-bounty, i̇os, penetration-testing | 23-Apr-2024 |
| How I found my First Valid bug | https://medium.com/@tanyago/how-i-found-my-first-valid-bug-2a9c87ce7a91?source=rss------bug_bounty-5 | Tanya Goyal | bug-bounty, bug-hunting, bug-bounty-writeup, bug-bounty-tips | 23-Apr-2024 |
| Bypassing CloudFlare Error 1015: You Are Being Rate Limited | https://medium.com/@mdnafeed3/bypassing-cloudflare-error-1015-you-are-being-rate-limited-f25f4e8f7bb2?source=rss------bug_bounty-5 | H4cker-Nafeed | bug-bounty, vulnerability, cybersecurity, hacking | 23-Apr-2024 |
| QUICK ROADMAP TO BUG BOUNTY(things you need to know) | https://medium.com/@joybhavanadam/quick-roadmap-to-bug-bounty-things-you-need-to-know-0aa1b64b9cdf?source=rss------bug_bounty-5 | Adam Paulo Antony | tips, bug-bounty-tips, roadmaps, bug-bounty | 23-Apr-2024 |
| VERTICAL RECON : SUBDOMAINS ENUMERATION. THE ART OF RECONISM: | https://hacktivistattacker.medium.com/vertical-recon-subdomains-enumeration-the-art-of-reconism-66d3be42d5d0?source=rss------bug_bounty-5 | Hacktivist-Attacker | subdomain-enumeration, information-gathering, subdomains-enumeration, bug-bounty, reconnaissance | 23-Apr-2024 |
| 20.4 Lab: Routing-based SSRF Vulnerability | 2024 | https://cyberw1ng.medium.com/20-4-lab-routing-based-ssrf-vulnerability-2024-c34402e8b6dd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, cybersecurity, bug-bounty, careers | 23-Apr-2024 |
| Browser Extension Security Testing: Part 1 | https://codewithvamp.medium.com/browser-extension-security-testing-part-1-0178766d2252?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | bug-bounty, hacking, browser-extension, bug-bounty-tips, testing | 23-Apr-2024 |
| Email Verification Bypass via Remember Me | https://infosecwriteups.com/email-verification-bypass-via-remember-me-c6d34e6060e9?source=rss------bug_bounty-5 | mo9khu93r | bug-bounty, cybersecurity, pentesting, red-team, hacking | 22-Apr-2024 |
| (Insecure Dangerous Component) Developer Backdoor `DebugActivity` included in the Production Game… | https://medium.com/@hazeemyasseer/insecure-dangerous-component-developer-backdoor-debugactivity-included-in-the-production-game-390dddea9363?source=rss------bug_bounty-5 | Hazeem' Yasseer | android-pentesting, android-pentest, bug-bounty-tips, bug-bounty, cybersecurity | 22-Apr-2024 |
| 20.3 Lab: Web cache poisoning via ambiguous requests | 2024 | https://cyberw1ng.medium.com/20-3-lab-web-cache-poisoning-via-ambiguous-requests-2024-8ab074dec0e4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, careers, penetration-testing, bug-bounty | 22-Apr-2024 |
| How many months took you to find your first bug ?! Let s see | https://medium.com/@aiz3nsk/how-many-months-took-you-to-find-your-first-bug-let-s-see-c48e4cce0c29?source=rss------bug_bounty-5 | Aiz3n Sk | bug-bounty, bug-bounty-tips, bug-bounty-hunter, bug-bounty-program, bug-bounty-writeup | 22-Apr-2024 |
| Don’t overlook any parameter, because the vulnerability lies within! | https://medium.com/@xiaodongsec/dont-overlook-any-parameter-because-the-vulnerability-lies-within-d0107d0c4f3e?source=rss------bug_bounty-5 | Xiaodong | hacker, vulnerability, china, money, bug-bounty | 22-Apr-2024 |
| Exploiting PostMessage for cool XSS vulnerabilities | https://manasharsh.medium.com/exploiting-postmessage-for-cool-xss-vulnerabilities-cbea132398e1?source=rss------bug_bounty-5 | Manas Harsh | hacking, xss-vulnerability, bug-bounty, application-security | 22-Apr-2024 |
| Google Map API Key Exposure: A Bug Bounty Journey | https://medium.com/@iamrizwanvp/google-map-api-key-exposure-a-bug-bounty-journey-6e0bb1560961?source=rss------bug_bounty-5 | RIZWAN | pentesting, bug-bounty, cybersecurity, bugbounty-writeup | 22-Apr-2024 |
| Auto Bug Bounty Script — Unleash Your Hunting Potential | https://medium.com/@psychomong/auto-bug-bounty-script-unleash-your-hunting-potential-7ecd6ad417ea?source=rss------bug_bounty-5 | psychomong | bug-bounty, vapt, hacker, bug-bounty-tips, automation | 22-Apr-2024 |
| How i Find Database Credentials via Mass Recon & Recon Scoping on Gcash | https://ph-hitachi.medium.com/how-i-find-database-credentials-via-mass-recon-recon-scoping-on-gcash-f43a0dae3ec1?source=rss------bug_bounty-5 | Ph.Hitachi | pentest, reconnaissance, recon, bug-bounty, gcash | 22-Apr-2024 |
| What is SSRF and how to Detect them on Web Application | https://alvinbijo.medium.com/what-is-ssrf-and-how-to-detect-them-on-web-application-687820c4d097?source=rss------bug_bounty-5 | Alvin bijo | bug-bounty-tips, bug-bounty, xs, ssrf | 22-Apr-2024 |
| Bug Bounty Challenge (final): Day 3–22/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-final-day-3-22-04-2024-51adde52bf60?source=rss------bug_bounty-5 | Wallotry | bug-bounty, bug-bounty-hunter, bug-bounty-writeup, bug-bounty-tips | 22-Apr-2024 |
| Cross-Site Scripting Detection | https://medium.com/@b.c114303/cross-site-scripting-detection-b35e4bd744b3?source=rss------bug_bounty-5 | Anni0p | bug-bounty, cybersecurity, xss-attack | 22-Apr-2024 |
| Beware of Method Swapping: Unveiling a Potential Security Vulnerability | https://infosecwriteups.com/beware-of-method-swapping-unveiling-a-potential-security-vulnerability-cc66c867e3b2?source=rss------bug_bounty-5 | HooS | bug-bounty, bug-bounty-writeup, hacking, bug-bounty-tips | 22-Apr-2024 |
| How to avoid burnouts in bugbounty? | https://medium.com/@mr_prey3r/how-to-avoid-burnouts-in-bugbounty-4d97e14f1ff1?source=rss------bug_bounty-5 | Rubayet Hasan aka MR_Prey3r | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 22-Apr-2024 |
| Beware of Method Swapping: Unveiling a Potential Security Vulnerability | https://medium.com/@hoosgamer/beware-of-method-swapping-unveiling-a-potential-security-vulnerability-cc66c867e3b2?source=rss------bug_bounty-5 | HooS | bug-bounty, bug-bounty-writeup, hacking, bug-bounty-tips | 22-Apr-2024 |
| Beware of Method Swapping: Unveiling a Potential Security Vulnerability | https://medium.com/@hohky_/beware-of-method-swapping-unveiling-a-potential-security-vulnerability-cc66c867e3b2?source=rss------bug_bounty-5 | Hohky | bug-bounty, bug-bounty-writeup, hacking, bug-bounty-tips | 22-Apr-2024 |
| Project discovery`s Chaos: Subdomains Discovery for all Bug Bounty Programs | https://medium.com/@miladkeivanfar/project-discovery-s-chaos-subdomains-discovery-for-all-bug-bounty-programs-b9e39fe3589d?source=rss------bug_bounty-5 | Milad keivanfar | security, subdomains-enumeration, bug-bounty, penetration-testing | 21-Apr-2024 |
| SQL Injection Vulnerability in WHERE Clause Allowing Retrieval of Hidden Data | https://medium.com/@marduk.i.am/sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data-96beb7f99d0c?source=rss------bug_bounty-5 | Marduk I Am | portswigger-lab, sql-injection, information-security, bug-bounty, cybersecurity | 21-Apr-2024 |
| Unraveling the Secrets of CWE and CVE in easily way | https://medium.com/@abdallahhendy15/unraveling-the-secrets-of-cwe-and-cve-in-easily-way-fc332b0294d6?source=rss------bug_bounty-5 | Abdallahhendy | penetration-testing, cwe, cybersecurity, cve, bug-bounty | 21-Apr-2024 |
| Such a simple zero-payment vulnerability. | https://medium.com/@xiaodongsec/such-a-simple-zero-payment-vulnerability-8e29421cbf58?source=rss------bug_bounty-5 | Xiaodong | money, vulnerability, bug-bounty, china, hacker | 21-Apr-2024 |
| Linux Mastery, Practical Exercises for Effective Command Line Skills | https://medium.com/@muhammadriva/linux-mastery-practical-exercises-for-effective-command-line-skills-e769d1010f73?source=rss------bug_bounty-5 | Muhammad Riva | cyber-security-awareness, penetration-testing, cybersecurity, bug-bounty, kali-linux | 21-Apr-2024 |
| What is server-side template injection? | https://cyberw1ng.medium.com/what-is-server-side-template-injection-77b7e4d0cad2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, cybersecurity, penetration-testing, careers | 21-Apr-2024 |
| How I could have hacked one LG website with a simple recon… | https://medium.com/@rubixrub/how-i-could-have-hacked-one-lg-website-with-a-simple-recon-8306e6e4be54?source=rss------bug_bounty-5 | RubX | hacking, bug-bounty, cybersecurity, bug-bounty-tips | 21-Apr-2024 |
| HACKTHEBOX CBBH REVIEW | https://medium.com/@admiralhr99/hackthebox-cbbh-review-76944984a573?source=rss------bug_bounty-5 | Admiralhr | web-application-security, bug-bounty, cybersecurity, cbbh, hackthebox | 21-Apr-2024 |
| How do I get Started in Cyber Security? — My Perspective & Learning Path! | https://medium.com/@aadhaarkoul2002/how-do-i-get-started-in-cyber-security-my-perspective-learning-path-cd45846dbe63?source=rss------bug_bounty-5 | Aadhaarkoul | bug-bounty, infosec, technology, hacking, learning | 21-Apr-2024 |
| Bug Bounty Challenge (final): Day 1–21/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-final-day-1-21-04-2024-f832f23f0464?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 21-Apr-2024 |
| Bug Bounty Challenge (final): Day 2–21/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-final-day-1-21-04-2024-f832f23f0464?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 21-Apr-2024 |
| Unsecured Content Provider leads to Account Takeover | https://medium.com/@ahmedelmorsy312/unsecure-content-provider-led-to-account-takeover-1e45d716bd7c?source=rss------bug_bounty-5 | Ahmed Elmorsi | hacker, bugbounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 20-Apr-2024 |
| Best Bug Bounty Tips | https://bevijaygupta.medium.com/best-bug-bounty-tips-af66fd076eb4?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, bug-fixes, bugs, bug-bounty, bug-zero | 20-Apr-2024 |
| Unraveling the Millennium Bug: A Digital Apocalypse | https://medium.com/@ak123aryan/unraveling-the-millennium-bug-a-digital-apocalypse-39af9dbadc0b?source=rss------bug_bounty-5 | Akshay Aryan | java, bugs, software-development, bug-bounty | 20-Apr-2024 |
| My methodology for hunting for open Redirect vulnerabilities | https://medium.com/@hozayfan782/my-methodology-for-hunting-for-open-redirect-vulnerabilities-fb79f2d24c22?source=rss------bug_bounty-5 | Hozayfa Nasser | tips, open-redirect, bug-bounty, tips-and-tricks | 20-Apr-2024 |
| 19.5 Lab: Finding a hidden GraphQL endpoint | 2024 | https://cyberw1ng.medium.com/19-5-lab-finding-a-hidden-graphql-endpoint-2024-aeb8cec440d1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, hacking, penetration-testing | 20-Apr-2024 |
| Paramspider Upgraded Version | https://medium.com/@pushkrajdhuri07/paramspider-upgraded-version-b14c1e8f9810?source=rss------bug_bounty-5 | PushkaraJ | hacking, bug-bounty, cybersecurity, redteam-tool, infosec | 20-Apr-2024 |
| Bug Bounty Challenge (final): Day 1–20/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-final-day-1-20-04-2024-2db4a6c86cc2?source=rss------bug_bounty-5 | Wallotry | bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup, bug-bounty | 20-Apr-2024 |
| April 2024 Reading List | https://daytontp.medium.com/april-2024-reading-list-e570dd5143c9?source=rss------bug_bounty-5 | Dayton Pruet | bug-bounty, network-security, cloud-computing, google-cloud-platform, linux | 19-Apr-2024 |
| Race Condition on Change Email Leads to Arbitrary Email Forgery | https://medium.com/@blackarazi/race-condition-on-change-email-leads-to-arbitrary-email-forgery-741b720ac840?source=rss------bug_bounty-5 | Azhari Harahap | bug-bounty, application-security, api-security, race-condition, bug-bounty-writeup | 19-Apr-2024 |
| Blockchain Bug Bounty | https://bevijaygupta.medium.com/blockchain-bug-bounty-a84c5f5ac684?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, bug-bounty-tips, blockchain, blockchain-technology, bugs | 19-Apr-2024 |
| OTP Bypass Security Issues and Remediations | https://pratham-08.medium.com/otp-bypass-security-issues-and-remediations-f207eecebbea?source=rss------bug_bounty-5 | Pratham Mittal | secure-coding, software-development, otp-bypass, bug-bounty, security | 19-Apr-2024 |
| Reconnaissance in Bug Bounty Programs | https://bevijaygupta.medium.com/reconnaissance-in-bug-bounty-programs-d46fadeb4508?source=rss------bug_bounty-5 | Vijay Gupta | bugs, bug-bounty-tips, footprinting, reconnaissance, bug-bounty | 19-Apr-2024 |
| First valid critical vulnerability of mine | https://medium.com/@shalabhdevliyal/first-valid-critical-vulnerability-of-mine-1143ceaffefc?source=rss------bug_bounty-5 | Shalabhdevliyal | vulnerability, hackerone, bug-bounty, cybersecurity | 19-Apr-2024 |
| OOGWAY — Vulnerability Search Tool | https://symbolexe.medium.com/oogway-vulnerability-search-tool-494587f0c00d?source=rss------bug_bounty-5 | Yasin | bug-bounty, cybersecurity, vulnerability, cve | 19-Apr-2024 |
| An Interesting Case of XSS Caused by File Upload | https://medium.com/@xiaodongsec/an-interesting-case-of-xss-caused-by-file-upload-86bdfb09408f?source=rss------bug_bounty-5 | Xiaodong | china, security, bug-bounty, money, hacks | 19-Apr-2024 |
| How I Disclosed Employees PII | The mistake I made..| | https://medium.com/@the.bugcrowd.testerpawan/how-i-disclosed-employees-pii-the-mistake-i-made-ca299a155440?source=rss------bug_bounty-5 | the_air_sharma | bug-bounty-hunter, bug-bounty-program, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 19-Apr-2024 |
| 19.4 Lab: Performing CSRF exploits over GraphQL | 2024 | https://cyberw1ng.medium.com/19-4-lab-performing-csrf-exploits-over-graphql-2024-8362148aee53?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, careers, penetration-testing, hacking | 19-Apr-2024 |
| let’s Unlock Advanced Permissions | https://rofes1337.medium.com/lets-unlock-advanced-permissions-d8529e9048e4?source=rss------bug_bounty-5 | Yousef Muhammedelkhir | bug-bounty-tips, penteration-testing, bug-bounty, web-app-pentesting, privilege-escalation | 19-Apr-2024 |
| Defence Methodologie | https://medium.com/@haticezkmnl/defence-methodologie-bd3aa669d90e?source=rss------bug_bounty-5 | Hatice Zehra Kamanlı | pentesting, bug-bounty, soc, prevention, cybersecurity | 19-Apr-2024 |
| A CRASH COURSE ON NETWORK PROTOCOLS FOR BUG HUNTERS | https://medium.com/@binarymaster/a-crash-course-on-network-protocols-for-bug-hunters-d2648b79ab0e?source=rss------bug_bounty-5 | Binarymaster | hacking, bug-bounty, network | 19-Apr-2024 |
| Rest API Pentesting Resources | https://medium.com/@m14r41/rest-api-pentesting-resources-3155985b8c4d?source=rss------bug_bounty-5 | Madhurendra Kumar | pentesting, checklist, bug-bounty, api, hacking | 19-Apr-2024 |
| A CRASH COURSE ON NETWORK PROTOCOLS FOR BUG HUNTERS | https://medium.com/@Progsky/a-crash-course-on-network-protocols-for-bug-hunters-d2648b79ab0e?source=rss------bug_bounty-5 | Progsky | hacking, bug-bounty, network | 19-Apr-2024 |
| Stored XSS chain on NASA VDP | https://medium.com/@ph4nt0mbyt3/stored-xss-chain-on-nasa-vdp-93814e2df863?source=rss------bug_bounty-5 | ph4nt0mbyt3 | bug-bounty, vulnerability, nasa | 18-Apr-2024 |
| Introducing SHIFU: Your Comprehensive CVE Finder Toolkit | https://symbolexe.medium.com/introducing-shifu-your-comprehensive-cve-finder-toolkit-4b036cce55c6?source=rss------bug_bounty-5 | Yasin | cybersecurity, cve, bug-bounty | 18-Apr-2024 |
| How Shodan Helps me to Find SMTP misconfiguration | https://thesafdari.medium.com/how-shodan-helps-me-to-find-smtp-misconfiguration-56f63f1116a5?source=rss------bug_bounty-5 | Milad Safdari | bug-bounty, finding-smtp-misconfig, finding-vulnerabilities | 18-Apr-2024 |
| Jamtangan Bug Bounty | https://bevijaygupta.medium.com/jamtangan-bug-bounty-7c49fc09881f?source=rss------bug_bounty-5 | Vijay Gupta | bugs, bug-zero, bug-bounty-tips, bug-bounty, jam-tangan | 18-Apr-2024 |
| IDOR Bug Bounty | https://bevijaygupta.medium.com/idor-bug-bounty-282d62d91691?source=rss------bug_bounty-5 | Vijay Gupta | idor, bugs, bug-zero, bug-bounty, bug-bounty-tips | 18-Apr-2024 |
| Yahoo Bug Bounty | https://bevijaygupta.medium.com/yahoo-bug-bounty-a8a711e9ec3a?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, yahoo-bug-bounty, bugs, yahoo, bug-bounty-tips | 18-Apr-2024 |
| A Beginner’s Guide To Insecure Deserialization | https://medium.com/@four0four/a-beginners-guide-to-insecure-deserialization-d359adffb207?source=rss------bug_bounty-5 | four0four | programming, cybersecurity, bug-bounty | 18-Apr-2024 |
| How I found HTMLi on main domain of program | https://medium.com/@jeetpal2007/how-i-found-htmli-on-main-domain-of-program-5c88a8e1af9a?source=rss------bug_bounty-5 | JEETPAL | bug-bounty-tips, html-injection, bug-bounty | 18-Apr-2024 |
| IDOR Lead to Data Leak | https://melguerdawi.medium.com/idor-lead-to-data-leak-c5107094f9ca?source=rss------bug_bounty-5 | Mostafa Elguerdawi | bug-bounty, cybersecurity, bug-bounty-tips | 18-Apr-2024 |
| VulnersX Tool | https://symbolexe.medium.com/vulnersx-tool-7a10b3090bbf?source=rss------bug_bounty-5 | Yasin | cybersecurity, cve, vulnerability, bug-bounty | 18-Apr-2024 |
| How Shodan Helps me to Find SMTP misconfiguration | https://thesafdari.medium.com/how-shodan-helps-me-to-find-smtp-misconfiguration-56f63f1116a5?source=rss------bug_bounty-5 | Milad Safdari (TheSafdari) | bug-bounty, finding-smtp-misconfig, finding-vulnerabilities | 18-Apr-2024 |
| How i Hacked Globe/Gcash services and manage to get access on multiple databases including ssh… | https://ph-hitachi.medium.com/how-i-hacked-globe-gcash-services-and-manage-to-get-access-on-multiple-databases-including-ssh-9ca781348e8f?source=rss------bug_bounty-5 | Ph.Hitachi | bug-bounty, public-disclosure, pentesting, gcash | 18-Apr-2024 |
| SSL Pinning Bypass Simplified | https://medium.com/@evilprince007/ssl-pinning-bypass-simplified-48c0d5294a6c?source=rss------bug_bounty-5 | Prathamesh Khatavkar | bug-bounty, cybersecurity, android | 18-Apr-2024 |
| Unveiling Access Control Flaws: Taking over an entire organization | https://medium.com/@im0thmann/unveiling-access-control-flaws-taking-over-an-entire-organization-23505eb75d89?source=rss------bug_bounty-5 | mohamed othman | cybersecurity, bug-bounty | 18-Apr-2024 |
| 19.3 Lab: Bypassing GraphQL brute force protections | 2024 | https://cyberw1ng.medium.com/19-3-lab-bypassing-graphql-brute-force-protections-2024-ae9df787c7c7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, careers, bug-bounty, hacking | 18-Apr-2024 |
| How I Used the ‘Everything’ Service to Uncover Two High-Risk Threats and Earn Over $700 in Rewards | https://medium.com/@xiaodongsec/how-i-used-the-everything-service-to-uncover-two-high-risk-threats-and-earn-over-700-in-rewards-c42d002707ad?source=rss------bug_bounty-5 | Xiaodong | china, bug-bounty, money, hacker, vulnerability | 17-Apr-2024 |
| Uber Bug Bounty Program | https://bevijaygupta.medium.com/uber-bug-bounty-program-04cfe5050cd1?source=rss------bug_bounty-5 | Vijay Gupta | uber, bug-bounty, bug-bounty-tips, bug-zero, bugs | 17-Apr-2024 |
| “Mastering Bug Bounty Hunting: Unveiling Secrets to Finding Hidden Vulnerabilities” | https://medium.com/@faizalin5555/mastering-bug-bounty-hunting-unveiling-secrets-to-finding-hidden-vulnerabilities-0b5088e213d4?source=rss------bug_bounty-5 | Faizal N | bug-bounty-tips, bug-bounty, cybersecurity, penetration-testing, vulnerability | 17-Apr-2024 |
| Bug Bounty POC | https://bevijaygupta.medium.com/bug-bounty-poc-e7fefda2fad0?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, poc, bug-bounty-tips, bug-zero, bugs | 17-Apr-2024 |
| Vulnerability Bounty Tool Recommendation: WIH | https://medium.com/@xiaodongsec/vulnerability-bounty-tool-recommendation-wih-1e7b559b5fbc?source=rss------bug_bounty-5 | Xiaodong | china, tools, hacker, bug-bounty, money | 17-Apr-2024 |
| Leveraging XSS to Execute CSRF Attacks | https://medium.com/@dodir.sec/leveraging-xss-to-execute-csrf-attacks-421edb662b40?source=rss------bug_bounty-5 | dodir | bug-bounty, cybersecurity, penetration-testing, csrf, xss-attack | 17-Apr-2024 |
| API Mis configuration: How Employee can change Manager’s review for him. (Part 2) | https://interc3pt3r.medium.com/api-mis-configuration-how-employee-can-change-managers-review-for-him-part-2-28b242216b40?source=rss------bug_bounty-5 | Aneesha D | web-development, bug-bounty, tips, cybersecurity, hacking | 17-Apr-2024 |
| 19.2 Lab: Accidental exposure of private GraphQL fields | 2024 | https://cyberw1ng.medium.com/19-2-lab-accidental-exposure-of-private-graphql-fields-2024-0d0836dc82ba?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, hacking, bug-bounty, careers | 17-Apr-2024 |
| How I approach Account takeover due to no rate limit on OTP | https://medium.com/@jeetpal2007/how-i-approach-account-takeover-due-to-no-rate-limit-on-otp-10a7fe056184?source=rss------bug_bounty-5 | JEETPAL | bug-bounty, bountytips, no-rate-limit, account-takeover | 17-Apr-2024 |
| How I found a P1 bug in just 40 minutes | https://medium.com/@jeetpal2007/how-i-found-a-p1-bug-in-just-40-minutes-4f3614abe974?source=rss------bug_bounty-5 | JEETPAL | api-key, p1bugs, bug-bounty-tips, bug-bounty | 17-Apr-2024 |
| OTP Bruteforce Chained with Response Manipulation Leads to Zero Click Account Takeover | https://medium.com/@cyberpro151/otp-bruteforce-chained-with-response-manipulation-leads-to-zero-click-account-takeover-7d1bee79a19f?source=rss------bug_bounty-5 | cyberpro151 | cybersecurity, account-takeover, bug-bounty, web-hacking, hacking | 17-Apr-2024 |
| (Part 2) API Mis configuration: How Employee can change Manager’s review for him. | https://interc3pt3r.medium.com/api-mis-configuration-how-employee-can-change-managers-review-for-him-part-2-28b242216b40?source=rss------bug_bounty-5 | Aneesha D | web-development, bug-bounty, tips, cybersecurity, hacking | 17-Apr-2024 |
| TCM Security — Practical Ethical Hacking Course — Find & Exploit Common Web Vulnerabilities — XSS… | https://shibushivansh.medium.com/tcm-security-practical-ethical-hacking-course-find-exploit-common-web-vulnerabilities-xss-00dbb33d45e2?source=rss------bug_bounty-5 | Shivansh Seth | cross-site-scripting, blog, command-injection, bug-bounty, cybersecurity | 16-Apr-2024 |
| PayPal Bug Bounty | https://bevijaygupta.medium.com/paypal-bug-bounty-7838f8bc5e4b?source=rss------bug_bounty-5 | Vijay Gupta | bugs, paypal, paypal-account, bug-bounty, bug-bounty-tips | 16-Apr-2024 |
| Discord Bug Bounty | https://bevijaygupta.medium.com/discord-bug-bounty-e2d0d3829c99?source=rss------bug_bounty-5 | Vijay Gupta | bugs, discord, bug-bounty-tips, bug-bounty, discord-bot | 16-Apr-2024 |
| Top 5 books to learn bug hunting beginner to advance | https://medium.com/@buglearners.com/top-5-books-to-learn-bug-hunting-beginner-to-advance-9006c34ea126?source=rss------bug_bounty-5 | Buglearners.com | bug-bounty, cybersecurity, bug-hunting, advance, books | 16-Apr-2024 |
| 18.4 Lab: Exploiting Ruby deserialization using a documented gadget chain | 2024 | https://cyberw1ng.medium.com/18-4-lab-exploiting-ruby-deserialization-using-a-documented-gadget-chain-2024-2e02be94c6f8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, careers, bug-bounty, penetration-testing | 16-Apr-2024 |
| Email Template Draft Feature Triggers SSRF, Earns ¥3000! | https://medium.com/@xiaodongsec/email-template-draft-feature-triggers-ssrf-earns-3000-d59af1ffbae6?source=rss------bug_bounty-5 | Xiaodong | hacker, vulnerability, china, money, bug-bounty | 16-Apr-2024 |
| WhatWeb!? | https://thehackersmeetup.medium.com/whatweb-c132eb13927c?source=rss------bug_bounty-5 | The Hackers Meetup | tools, bug-bounty, whatweb, kali, web | 16-Apr-2024 |
| XSS (Міжсайтовий скриптинг): детальний розбір | https://medium.com/@max.pavlenko.dev/xss-%D0%BC%D1%96%D0%B6%D1%81%D0%B0%D0%B9%D1%82%D0%BE%D0%B2%D0%B8%D0%B9-%D1%81%D0%BA%D1%80%D0%B8%D0%BF%D1%82%D0%B8%D0%BD%D0%B3-%D0%B4%D0%B5%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%B8%D0%B9-%D1%80%D0%BE%D0%B7%D0%B1%D1%96%D1%80-23c36e5a7483?source=rss------bug_bounty-5 | Max Pavlenko (Certified Vue.js Developer) | bug-bounty, security, front-end-development, xss-vulnerability | 16-Apr-2024 |
| Reverse Engineering Sitecore Vulnerabilities-3 | https://medium.com/@nilayp799/reverse-engineering-sitecore-vulnerabilities-3-ba8a99563ca4?source=rss------bug_bounty-5 | Nilay Patel | bug-bounty, vulnerability, automation, hacking, sitecore | 16-Apr-2024 |
| Reverse Shell Scripting Concept. | https://rahman0x01.medium.com/reverse-shell-scripting-concept-1bf1f60686a7?source=rss------bug_bounty-5 | rahman0x01 | netcat, bash-scripting, bug-bounty, reverse-shell, bash-script | 16-Apr-2024 |
| I Found An IDOR Flaw where users' attached pictures and documents were leaked. | https://medium.com/@Ajakcybersecurity/i-found-an-idor-flaw-where-users-attached-pictures-and-documents-were-leaked-961d564ce72f?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, cybersecurity, money, bug-bounty, penetration-testing | 16-Apr-2024 |
| Bug Bounty Automation | https://bevijaygupta.medium.com/bug-bounty-automation-f1fa68e3d903?source=rss------bug_bounty-5 | Vijay Gupta | automation-tools, automation-testing, bug-bounty-tips, automation, bug-bounty | 15-Apr-2024 |
| Dell Bug Bounty | https://bevijaygupta.medium.com/dell-bug-bounty-a578dc53d7bb?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, dell, dell-laptop, bugs, bug-bounty | 15-Apr-2024 |
| CVE-2024–3400: A Critical Vulnerability in PAN-OS Firewalls | https://infosecwriteups.com/cve-2024-3400-a-critical-vulnerability-in-pan-os-firewalls-a7f8c66a10d2?source=rss------bug_bounty-5 | ElNiak | bug-bounty, penetration-testing, command-injection, firewall, cybersecurity | 15-Apr-2024 |
| Story of a strange IDOR without ID | https://m7arm4n.medium.com/story-of-a-strange-idor-without-id-6735fd3dcd27?source=rss------bug_bounty-5 | M7arm4n | hacking, bug-bounty, bug-bounty-tips, security, hacker | 15-Apr-2024 |
| CSRF (1/3) | https://medium.com/@karimelsayed0x1/csrf-1-3-22050bf9c92c?source=rss------bug_bounty-5 | z3r0xk | bug-bounty, bug-bounty-tips, bug-bounty-writeup, csrf, web-attack | 15-Apr-2024 |
| Advance XSS payload List | https://medium.com/@psychomong/advance-xss-payload-list-7b5d1a4df61c?source=rss------bug_bounty-5 | psychomong | hacking, bug-bounty-tips, bugs, bug-bounty, xss-attack | 15-Apr-2024 |
| 18.3 Lab: Exploiting PHP deserialization with a pre-built gadget chain | 2024 | https://cyberw1ng.medium.com/18-3-lab-exploiting-php-deserialization-with-a-pre-built-gadget-chain-2024-64dcb875e23c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, hacking, penetration-testing, bug-bounty | 15-Apr-2024 |
| How I got JS Execution (DOM XSS) Via CSTI | https://medium.com/@amrkadry7/how-i-got-js-execution-dom-xss-via-csti-58a4171c2963?source=rss------bug_bounty-5 | Amr | cybersecurity, bug-bounty | 15-Apr-2024 |
| Acer Bug Bounty | https://bevijaygupta.medium.com/acer-bug-bounty-9ce4d49c1051?source=rss------bug_bounty-5 | Vijay Gupta | acer, bug-zero, bug-bounty, bug-bounty-tips, bugs | 14-Apr-2024 |
| My Bug Bounty Journey | https://bevijaygupta.medium.com/my-bug-bounty-journey-b07f663c8ff8?source=rss------bug_bounty-5 | Vijay Gupta | bug-zero, bug-bounty-tips, my-journey, bugs, bug-bounty | 14-Apr-2024 |
| Ten Tips You Have to Know for WordPress Bug Bounty | https://medium.com/@zpbrent/ten-tips-you-have-to-know-for-wordpress-bug-bounty-b2b070f07add?source=rss------bug_bounty-5 | Peng Zhou | bug-bounty, wordpress, infosec, hacker, bug-bounty-tips | 14-Apr-2024 |
| How I Exploited the Account Cancellation Feature to Farm Rewards | https://medium.com/@xiaodongsec/how-i-exploited-the-account-cancellation-feature-to-farm-rewards-19f6d6c0e181?source=rss------bug_bounty-5 | Xiaodong | hacks, bug-bounty, skills, vulnerability, china | 14-Apr-2024 |
| How I Hack Web Applications (Part 1) | https://infosecwriteups.com/how-i-hack-web-applications-part-1-0833c002cc9a?source=rss------bug_bounty-5 | Rafin Rahman Chy | ethical-hacking, penetration-testing, bug-bounty, infosec, application-security | 14-Apr-2024 |
| A unique SSRF hunt ( Invite user functionality vulnerable to blind SSRF attack ) | https://medium.com/@abhishek8602314652/a-unique-ssrf-hunt-invite-user-functionality-vulnerable-to-blind-ssrf-attack-c6804b2b398b?source=rss------bug_bounty-5 | Abhishek singh ( a6h1) | bug-bounty, ssrf, bug-bounty-tips, bug-hunting, bug-bounty-writeup | 14-Apr-2024 |
| A click can cause 1600$ | Auth0 misconfig . | https://naumankh4n.medium.com/a-click-can-cause-1600-auth0-misconfig-9234aedad55c?source=rss------bug_bounty-5 | Nauman Khan | penetration-testing, bug-bounty, hacking, cybersecurity, money | 14-Apr-2024 |
| 18.2 Lab: Exploiting Java deserialization with Apache Commons | 2024 | https://cyberw1ng.medium.com/18-2-lab-exploiting-java-deserialization-with-apache-commons-2024-7ba379e97b52?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, cybersecurity, careers, penetration-testing | 14-Apr-2024 |
| Access to transparent security testing — Why we made HackGATE™ available to everyone | https://medium.com/@levente.b.molnar/access-to-transparent-security-testing-why-we-made-hackgate-available-to-everyone-11c3e0efe44c?source=rss------bug_bounty-5 | Hackrate | bug-bounty, penetration-testing, pentesting, security, cybersecurity | 14-Apr-2024 |
| THE ART OF RECONISM: HORIZONTAL RECON FOR PENETRATION TESTING: | https://hacktivistattacker.medium.com/the-art-of-reconism-horizontal-recon-for-penetration-testing-fea5399af186?source=rss------bug_bounty-5 | Hacktivist-Attacker | reconnaissance, horizonatl-reconaissance, scope-finding, bug-bounty, information-gathering | 13-Apr-2024 |
| Power of CSRF | https://medium.com/@hillrane24/power-of-csrf-43b736c74280?source=rss------bug_bounty-5 | NIKHIL RANE | otp-bypass, bug-bounty, csrf, authentication-bypass | 13-Apr-2024 |
| Unauthorized Admin Account Access via Google Authentication | https://nullr3x.medium.com/unauthorized-admin-account-access-via-google-authentication-a38d42577ac9?source=rss------bug_bounty-5 | Sahil Mehra | cybersecurity, web, bug-bounty, vulnerability, penetration-testing | 13-Apr-2024 |
| Bancor Bug Bounty | https://bevijaygupta.medium.com/bancor-bug-bounty-9c40e9389ab5?source=rss------bug_bounty-5 | Vijay Gupta | bug-zero, bug-bounty, bug-bounty-tips, bugs, bancor | 13-Apr-2024 |
| Facebook Bug Bounty | https://bevijaygupta.medium.com/facebook-bug-bounty-e9e73ce56f11?source=rss------bug_bounty-5 | Vijay Gupta | facebook, bug-bounty-tips, bug-bounty, bugs, facebook-bug-bounty | 13-Apr-2024 |
| Menggali Potensi Bug Bounty: Menghasilkan Uang atau Menemukan Keamanan? | https://medium.com/@kaizen100801/menggali-potensi-bug-bounty-menghasilkan-uang-atau-menemukan-keamanan-170c44d2904e?source=rss------bug_bounty-5 | Zen | bug-bounty, bug-bounty-tips, cybersecurity, hacking, cyber-security-awareness | 13-Apr-2024 |
| Api Bug Bounty | https://bevijaygupta.medium.com/api-bug-bounty-5f2aafced9a4?source=rss------bug_bounty-5 | Vijay Gupta | bugs, api, bug-bounty, api-development, bug-bounty-tips | 13-Apr-2024 |
| How I saved over 200,000 job seekers’ data on staterecruit.in from a potential data breach. | https://brutexploiter.medium.com/how-i-saved-over-200-000-job-seekers-data-on-staterecruit-in-from-a-potential-data-breach-7db5bad1c9e0?source=rss------bug_bounty-5 | brutexploiter | cybersecurity, web-development, web-security, sql-injection, bug-bounty | 13-Apr-2024 |
| How do insecure deserialization vulnerabilities arise? | https://cyberw1ng.medium.com/how-do-insecure-deserialization-vulnerabilities-arise-233c336b305b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, careers, hacking, bug-bounty | 13-Apr-2024 |
| How Did I Easily Find Stored XSS at Apple and earn $5000 ? | https://medium.com/@xrypt0/how-did-i-easily-find-stored-xss-at-apple-and-earn-5000-3aadbae054b2?source=rss------bug_bounty-5 | Crypto | security, xss-attack, apple, bug-bounty, web-security | 13-Apr-2024 |
| TryHackMe Creative Write-Up | https://blog.devgenius.io/tryhackme-creative-write-up-f29e2cdbf7ae?source=rss------bug_bounty-5 | Joseph Alan | tryhackme-walkthrough, tryhackme, cybersecurity, tryhackme-writeup, bug-bounty | 13-Apr-2024 |
| Broken Access Control (IDOR) on Forgot Password Could Lead to Attacker Change Password for Every… | https://medium.com/@blackarazi/broken-access-control-idor-on-forgot-password-could-lead-to-attacker-change-password-for-every-e1b18e075b5a?source=rss------bug_bounty-5 | Azhari Harahap | bug-bounty-writeup, bug-bounty, account-takeover, application-security, broken-access-control | 12-Apr-2024 |
| How I managed to bypass 2FA on image line | https://medium.com/@bishwajeetb1/how-i-managed-to-bypass-2fa-on-image-line-11f123fc32ea?source=rss------bug_bounty-5 | Bishwajeet | cybersecurity, bug-bounty, application-security, web-application-testing, web-application-security | 12-Apr-2024 |
| Using E-Notation to bypass Access Control restrictions to access arbitrary user PII-discussions | https://medium.com/@keizobugbounty/using-e-notation-to-bypass-access-control-restrictions-to-access-arbitrary-user-pii-discussions-1fa014b544d4?source=rss------bug_bounty-5 | Keizo | bugbounty-writeup, cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 12-Apr-2024 |
| The Critical Role Of Bug Bounties in Ensuring Web3 Security | https://securrtech.medium.com/the-critical-role-of-bug-bounties-in-ensuring-web3-security-084cf518234b?source=rss------bug_bounty-5 | Securr | web3-security, bug-bounty, web3 | 12-Apr-2024 |
| How I Find My First Internet Bug Bounty for Apache Airflow | https://medium.com/@zpbrent/how-i-find-my-first-internet-bug-bounty-for-apache-airflow-9d3c1ec29b24?source=rss------bug_bounty-5 | Peng Zhou | bug-bounty, open-source, airflow, python, infosec | 12-Apr-2024 |
| Bug Zero at a Glance [16–31 March] | https://blog.bugzero.io/bug-zero-at-a-glance-16-31-march-4f4cd6823a75?source=rss------bug_bounty-5 | Januka Dharmapriya | cybersecurity, sri-lanka, bug-zero, bug-bounty, newsletter | 12-Apr-2024 |
| How i Almost got 2K$ through a Race condition | https://medium.com/@0x3adly/how-i-almost-got-2k-through-a-race-condition-3b09232b3a25?source=rss------bug_bounty-5 | Anas Eladly ( 0x3adly ) | bug-bounty, bug-bounty-tips, race-condition, infosec, web-penetration-testing | 12-Apr-2024 |
| A Comprehensive Guide to Static Analysis in Android Pentesting | https://medium.com/@samireddisaimanikanta939/a-comprehensive-guide-to-static-analysis-in-android-pentesting-66023053ed18?source=rss------bug_bounty-5 | Intrud3rX | penetration-testing, ethical-hacking, android-static-analysis, android-pentesting, bug-bounty | 12-Apr-2024 |
| Learn Bug Bounty | https://bevijaygupta.medium.com/learn-bug-bounty-d67654f0c01f?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, bugs, bug-bounty, learn, bug-zero | 12-Apr-2024 |
| Microsoft Bug Bounty | https://bevijaygupta.medium.com/microsoft-bug-bounty-1295263b135e?source=rss------bug_bounty-5 | Vijay Gupta | microsoft, microservices, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 12-Apr-2024 |
| How I Bypassed Offer Limits to Gain Multiple Membership Benefits | https://medium.com/@xiaodongsec/how-i-bypassed-offer-limits-to-gain-multiple-membership-benefits-affea84c0844?source=rss------bug_bounty-5 | Xiaodong | bug-bounty, hacker, china, vulnerability | 12-Apr-2024 |
| Latest Bug Bounty And Web Hacking Tools Bug Bunty And Web Hacking Tools | https://medium.com/@haidertallal786/latest-bug-bounty-and-web-hacking-tools-bug-bunty-and-web-hacking-tools-feff2224b200?source=rss------bug_bounty-5 | Muhammad haider Tallal | bug-bounty, web-penetration-testing, hacking | 12-Apr-2024 |
| Zoho Account Takeover: How a Single Click Can Lead to Full Control on your Zoho account | https://medium.com/@0xUsername/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-on-your-zoho-account-04a5ea069382?source=rss------bug_bounty-5 | HackerWithOutHat | security, cybersecuirty, bug-bounty, infosec, information-security | 12-Apr-2024 |
| Random account takeover via misconfigured OAuth | https://medium.com/@Berserker1337/random-account-takeover-via-misconfigured-oauth-5dc2cbbbe905?source=rss------bug_bounty-5 | Berserker | bug-bounty, cybersecurity, information-security, infosec, vulnerability | 12-Apr-2024 |
| 16.5 Lab: Multistep clickjacking in Bug Bounty | 2024 | https://cyberw1ng.medium.com/16-5-lab-multistep-clickjacking-in-bug-bounty-2024-a5eb20de6900?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, careers, cybersecurity, hacking | 12-Apr-2024 |
| 5 Methods I Use To Discover APIs | https://medium.com/@red.whisperer/5-methods-i-use-to-discover-apis-6d646baa3ffb?source=rss------bug_bounty-5 | Chux | api, red-team, pentesting, hacking, bug-bounty | 12-Apr-2024 |
| Token-Based Authentication vulnerability | https://medium.com/@paulovitorcl/token-based-authentication-vulnerability-37d97efcca62?source=rss------bug_bounty-5 | Paulo Vitor Costa Lima | bug-bounty, cybersecurity | 12-Apr-2024 |
| Hunting on Microsoft SharePoint: The art of manipulation. | https://machiavellli.medium.com/hunting-on-microsoft-sharepoint-the-art-of-manipulation-25c96ee1de3a?source=rss------bug_bounty-5 | Machiavelli | infosec, bug-bounty | 12-Apr-2024 |
| How I Discovered Vulnerabilities by Modifying App Memory | https://medium.com/@xiaodongsec/how-i-discovered-vulnerabilities-by-modifying-app-memory-5a87b685ed3d?source=rss------bug_bounty-5 | Xiaodong | hacker, china, bug-bounty, vulnerability, money | 12-Apr-2024 |
| How I Exposed a High-Risk SSRF Vulnerability in an AI Model | https://medium.com/@xiaodongsec/how-i-exposed-a-high-risk-ssrf-vulnerability-in-an-ai-model-e40d6f96a5e1?source=rss------bug_bounty-5 | Xiaodongsec | hacker, bug-bounty, ai | 11-Apr-2024 |
| Building My Own Packet Sniffer for Game Security Testing | https://medium.com/@yannik603/building-my-own-packet-sniffer-for-game-security-testing-8baf58a94d0c?source=rss------bug_bounty-5 | Yannik Castro | gamehacking, bug-bounty, reverse-engineering, hacking, hacking-tools | 11-Apr-2024 |
| Meta Bug Bounty | https://bevijaygupta.medium.com/meta-bug-bounty-cc842ca0f614?source=rss------bug_bounty-5 | Vijay Gupta | bugs, bug-zero, bug-bounty, metaverse, bug-bounty-tips | 11-Apr-2024 |
| How to Fuzz Prototype Pollution by Reusing Public CVEs for Fun and Research | https://medium.com/@zpbrent/how-to-fuzz-prototype-pollution-by-reusing-public-cves-for-fun-and-research-40891013bf0b?source=rss------bug_bounty-5 | Peng Zhou | web-security, nodejs, fuzzing, infosec, bug-bounty | 11-Apr-2024 |
| How I Exposed a High-Risk SSRF Vulnerability in an AI Model | https://medium.com/@xiaodongsec/how-i-exposed-a-high-risk-ssrf-vulnerability-in-an-ai-model-e40d6f96a5e1?source=rss------bug_bounty-5 | Xiaodong | hacker, bug-bounty, ai | 11-Apr-2024 |
| How I Uncovered a Payment Vulnerability | https://medium.com/@xiaodongsec/how-i-uncovered-a-payment-vulnerability-6355e15d1702?source=rss------bug_bounty-5 | Xiaodong | vulnerability, china, bug-bounty, hacker | 11-Apr-2024 |
| Indian software firms cheated me by failing to provide the promised bounty after I reported… | https://medium.com/@mangbho28/indian-software-firms-cheated-me-by-failing-to-provide-the-promised-bounty-after-i-reported-ffc7fcc83993?source=rss------bug_bounty-5 | MB007 | bug-bounty-tips, bug-bounty-hunter, bug-bounty, bug-bounty-program | 11-Apr-2024 |
| Bypassed the Amazon CloudFront Logic and got XSS at the National Weather Agency of the U.S. | https://royzsec.medium.com/bypassed-the-amazon-cloudfront-logic-and-got-xss-at-the-national-weather-agency-of-the-u-s-100af330430a?source=rss------bug_bounty-5 | Prince Roy(RoyzSec) | web-development, hacking, bug-bounty, cybersecurity, penetration-testing | 11-Apr-2024 |
| 7 Essential Skills Every Bug Bounty Hunter Needs to Succeed | https://medium.com/mynextdeveloper/7-essential-skills-every-bug-bounty-hunter-needs-to-succeed-0e6ac8afa483?source=rss------bug_bounty-5 | MyNextDeveloper | penetration-testing, cybersecurity, kali-linux, darkweb, bug-bounty | 11-Apr-2024 |
| GitHub Bug Bounty | https://bevijaygupta.medium.com/github-bug-bounty-afa61eb789f3?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, bug-zero, bugs, github, bug-bounty | 11-Apr-2024 |
| 16.4 Lab: Exploiting clickjacking vulnerability to trigger DOM-based XSS | 2024 | https://cyberw1ng.medium.com/16-4-lab-exploiting-clickjacking-vulnerability-to-trigger-dom-based-xss-2024-71c5b567fb4b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, cybersecurity, bug-bounty, careers | 11-Apr-2024 |
| Secret BurpSuite Extension For BugBounty~ Part-2 | https://medium.com/@Ajakcybersecurity/secret-burpsuite-extension-for-bugbounty-part-2-58b644b9222c?source=rss------bug_bounty-5 | AjakCybersecurity | blog, bug-bounty, penetration-testing, ethical-hacking, hacking | 11-Apr-2024 |
| How to Fuzz Prototype Pollution by Reusing Public CVEs for Fun and Research | https://medium.com/@zpbrent/how-to-fuzz-prototype-pollution-by-reusing-public-cves-for-fun-and-research-40891013bf0b?source=rss------bug_bounty-5 | Peng Zhou | javascript, web-security, nodejs, infosec, bug-bounty | 11-Apr-2024 |
| Bug Bounty Challenge: Day 16–11/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-16-11-04-2024-effc5c820319?source=rss------bug_bounty-5 | Wallotry | bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bug-bounty | 11-Apr-2024 |
| CVE-2024–24576: A Critical Rust Vulnerability on Windows | https://infosecwriteups.com/cve-2024-24576-a-critical-rust-vulnerability-on-windows-4f0bb1a332e9?source=rss------bug_bounty-5 | ElNiak | cybersecurity, windows, rust, penetration-testing, bug-bounty | 10-Apr-2024 |
| How I Find an Arbitrary File Upload Vulnerability with a Unique Bypass | https://medium.com/@zpbrent/how-i-find-an-arbitrary-file-upload-vulnerability-with-a-unique-bypass-8d679f45a497?source=rss------bug_bounty-5 | Peng Zhou | infosec, wordpress-plugins, web-security, bug-bounty, wordpress | 10-Apr-2024 |
| Bug Bounty Certification | https://bevijaygupta.medium.com/bug-bounty-certification-27c95b8a1b80?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, bugs, bug-bounty, bug-zero, bug-bounty-certification | 10-Apr-2024 |
| Android Bug Bounty | https://bevijaygupta.medium.com/android-bug-bounty-9a2daf0d2270?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, android-bug-bounty, android, bugs, bug-bounty | 10-Apr-2024 |
| Apple Bug Bounty | https://bevijaygupta.medium.com/apple-bug-bounty-88002b2c159d?source=rss------bug_bounty-5 | Vijay Gupta | apple-bug-bounty, bug-zero, bug-bounty, bug-bounty-tips, bugs | 10-Apr-2024 |
| SQL Injection: A Simple Beginner’s Guide. | https://ishengoma.medium.com/sql-injection-a-simple-beginners-guide-58d237ff18da?source=rss------bug_bounty-5 | Ishengoma | vulnerability-assessment, sql-injection, hacking, vulnerability-management, bug-bounty | 10-Apr-2024 |
| Privilege Escalation by manipulating endpoint | https://medium.com/@vijayrockstar.verma5/privilege-escalation-by-manipulating-endpoint-10feb974bab5?source=rss------bug_bounty-5 | Vijay Verma | infosec, hacking, bug-bounty, cybersecurity, pentesting | 10-Apr-2024 |
| Vulnerable WordPress March 2024 (Kandovan) | https://medium.com/@onhexgroup/vulnerable-wordpress-march-2024-kandovan-24103451060b?source=rss------bug_bounty-5 | Onhexgroup | wordpress, bug-bounty, wordpress-security, infosec, exploitation | 10-Apr-2024 |
| Clickjacking: A Comprehensive Guide to Finding Clickjacking Vulnerabilities | https://cyberw1ng.medium.com/clickjacking-a-comprehensive-guide-to-finding-clickjacking-vulnerabilities-3f51d8e63a41?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, security, bug-bounty, careers | 10-Apr-2024 |
| Bug: No rate limiting on Email verification leads to huge Mass Mailing :: P4 | https://medium.com/@deypradip87jk/bug-no-rate-limiting-on-email-verification-leads-to-huge-mass-mailing-p4-b72c666d6e56?source=rss------bug_bounty-5 | Professor0xx01 | information-security, bug-bounty-tips, cybersecurity, bug-bounty, infosec-write-ups | 09-Apr-2024 |
| How I Found Bug :: Reflected XSS (Cross-Site-Scripting) On a BBP. | https://medium.com/@deypradip87jk/how-i-found-bug-reflected-xss-cross-site-scripting-on-a-bbp-9f57611eda91?source=rss------bug_bounty-5 | Professor0xx01 | bug-bounty, cyber-security-solutions, infosec-write-ups, offensive-security, bug-bounty-tips | 09-Apr-2024 |
| Bug: No rate limiting on Email verification leads to huge Mass Mailing :: P4 | https://medium.com/@p.ra.dee.p_0xx01/bug-no-rate-limiting-on-email-verification-leads-to-huge-mass-mailing-p4-b72c666d6e56?source=rss------bug_bounty-5 | Professor0xx01 | information-security, bug-bounty-tips, cybersecurity, bug-bounty, infosec-write-ups | 09-Apr-2024 |
| How I Found Bug :: Reflected XSS (Cross-Site-Scripting) On a BBP. | https://medium.com/@p.ra.dee.p_0xx01/how-i-found-bug-reflected-xss-cross-site-scripting-on-a-bbp-9f57611eda91?source=rss------bug_bounty-5 | Professor0xx01 | bug-bounty, cyber-security-solutions, infosec-write-ups, offensive-security, bug-bounty-tips | 09-Apr-2024 |
| Bug Bounty Reports | https://bevijaygupta.medium.com/bug-bounty-reports-8a6480d06a80?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, bug-bounty-tips, bugs, bug-bounty-reports, bug-zero | 09-Apr-2024 |
| Bug Hunting Methodology for Beginners | https://bevijaygupta.medium.com/bug-hunting-methodology-for-beginners-ce7ee1b11c25?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-hunter, bug-hunting, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 09-Apr-2024 |
| Information Disclosure: Story of 500€ + 400$ Bounty | https://v3d.medium.com/information-disclosure-story-of-500-400-bounty-97d3b343f9ad?source=rss------bug_bounty-5 | V3D | bug-bounty, penetration-testing, information-technology, cybersecurity, hacking | 09-Apr-2024 |
| Card Payment Functionality Checklist — Bug Bounty Tuesday | https://medium.com/@kerstan/card-payment-functionality-checklist-bug-bounty-tuesday-6eab127d0126?source=rss------bug_bounty-5 | kerstan | technology, hacking, cybersecurity, bug-bounty, security | 09-Apr-2024 |
| Mass automation for finding XSS vulnerabilities in large scope targets | https://medium.com/@oumzarkar/mass-automation-for-finding-xss-vulnerabilities-in-large-scope-targets-019996b0515c?source=rss------bug_bounty-5 | dextro | bug-bounty-tips, cybersecurity, walkthrough, automation, bug-bounty | 09-Apr-2024 |
| How I Found My First Stored XSS || WAF & Characters Limitation Bypass | https://kariiem.medium.com/how-i-found-my-first-stored-xss-waf-characters-limitation-bypass-cc414c4fadde?source=rss------bug_bounty-5 | Kariiem Gamal | bug-bounty-tips, bug-hunting, bug-bounty, waf-bypass, bugbounty-writeup | 09-Apr-2024 |
| My WordPress Bug Bounty Journey on Patchstack | https://medium.com/@zpbrent/from-first-rejection-to-monthly-top-c0dedd4bbc7f?source=rss------bug_bounty-5 | Peng Zhou | bug-bounty-program, bug-bounty-hunter, wordpress-security, ethical-hacking, bug-bounty | 09-Apr-2024 |
| Simple Tips for Bug Bounty Beginners: Finding Blind XSS Vulnerabilities | https://medium.com/@anishnarayan/simple-tips-for-bug-bounty-beginners-finding-blind-xss-vulnerabilities-ab67977ff756?source=rss------bug_bounty-5 | Anish Narayan | bug-bounty-tips, bug-bounty, xss-attack, cross-site-scripting, cybersecurity | 09-Apr-2024 |
| 15.3 Lab: CORS vulnerability with trusted insecure protocols | 2024 | https://cyberw1ng.medium.com/15-3-lab-cors-vulnerability-with-trusted-insecure-protocols-2024-2ba1967daecc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, penetration-testing, bug-bounty, cybersecurity, hacking | 09-Apr-2024 |
| Hunting Bugs and Striking Gold: Forward Calls for Elite Hunters in the Bug Bounty Campaign | https://forwardprotocol.medium.com/hunting-bugs-and-striking-gold-forward-calls-for-elite-hunters-in-the-bug-bounty-campaign-057e686c8577?source=rss------bug_bounty-5 | Forward Protocol | blockchain-technology, bug-bounty, bug-bounty-hunter, web3, blockchain-developer | 09-Apr-2024 |
| Is Your Business a Sitting Duck for Credit Card Hackers? Here’s How PCI DSS Can Save You! | https://medium.com/@josuofficial327/is-your-business-a-sitting-duck-for-credit-card-hackers-heres-how-pci-dss-can-save-you-97d7b6562131?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | cybersecurity, payment-gateway, bug-bounty, hacking, bug-bounty-tips | 08-Apr-2024 |
| Google Bug Hunters | https://bevijaygupta.medium.com/google-bug-hunters-673e2f5c2600?source=rss------bug_bounty-5 | Vijay Gupta | bug-hunter, bug-bounty-writeup, google, bug-bounty, bug-bounty-tips | 08-Apr-2024 |
| Unleashing the Power of Bug Bounty Dorks: A Comprehensive Guide | https://bevijaygupta.medium.com/unleashing-the-power-of-bug-bounty-dorks-a-comprehensive-guide-b121fce9e5e4?source=rss------bug_bounty-5 | Vijay Gupta | google, bug-bounty, bug-bounty-tips, google-dork, bug-zero | 08-Apr-2024 |
| How I Got Multiple Privilege Escalations — The Easy Trick? | https://medium.com/@Mdabdulrahman/how-i-got-multiple-privilege-escalations-the-easy-trick-e915110bc08a?source=rss------bug_bounty-5 | Md Abdul Rahman | win-privilege-escalation, bug-bounty, penetration-testing, privilege-escalation | 08-Apr-2024 |
| Hacking Swisscom’s End-to-End Encrypted Cloud Storage for $4,000 | https://medium.com/@thomashouhou/hacking-swisscoms-end-to-end-encrypted-cloud-storage-for-4-000-3660722196ec?source=rss------bug_bounty-5 | Thomas Houhou | web-security, hacking, bug-bounty-tips, bug-bounty, cybersecurity | 08-Apr-2024 |
| XSS on out of scope domain? CORS is your secret weapon! | https://c4rrilat0r.medium.com/xss-on-out-of-scope-domain-cors-is-your-secret-weapon-93e433278080?source=rss------bug_bounty-5 | c4rrilat0r | bug-bounty, bug-bounty-tips, hackerone, xss-attack, cors | 08-Apr-2024 |
| Breaking Free: 26 Advanced Techniques to Escape Docker Containers | https://infosecwriteups.com/breaking-free-26-advanced-techniques-to-escape-docker-containers-530049816b55?source=rss------bug_bounty-5 | ElNiak | bug-bounty, cybersecurity, penetration-testing, kubernetes, docker | 08-Apr-2024 |
| 15.2 Lab: CORS vulnerability with trusted null origin | 2024 | https://cyberw1ng.medium.com/15-2-lab-cors-vulnerability-with-trusted-null-origin-2024-a84020e4e254?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, hacking, cybersecurity, careers, bug-bounty | 08-Apr-2024 |
| Why You Should Attend Cybersecurity Conferences: Unlock Opportunities | https://medium.com/@a13h1/why-you-should-attend-cybersecurity-conferences-unlock-opportunities-2a16dfe4658e?source=rss------bug_bounty-5 | Abhi Sharma | networking, information-security, cybersecurity, conference, bug-bounty | 07-Apr-2024 |
| How to Start Your Journey into Cybersecurity in 2024 (or how I did) | https://medium.com/@j0hnc0nn0r/how-to-start-your-journey-into-cybersecurity-in-2024-or-how-i-did-ebe4910acdc7?source=rss------bug_bounty-5 | John Connor | cybersecurity, penetration-testing, bug-bounty, tryhackme, hackthebox | 07-Apr-2024 |
| How to Start Your Journey into Cybersecurity in 2024 (or how I did) | https://medium.com/@j0hnc0nn0r/how-to-start-your-journey-into-cybersecurity-in-2024-or-how-i-did-ebe4910acdc7?source=rss------bug_bounty-5 | J0hn C0nn0r | cybersecurity, penetration-testing, bug-bounty, tryhackme, hackthebox | 07-Apr-2024 |
| How Employee can change Manager’s review for him. | https://interc3pt3r.medium.com/how-employee-can-change-managers-review-for-him-a903bd329111?source=rss------bug_bounty-5 | Aneesha D | bug-bounty, cybersecurity, hacking, security, bugs | 07-Apr-2024 |
| Unofficial Guide to OWASP Top 10:2021 | https://medium.com/@rafinrahmanchy/unofficial-guide-to-owasp-top-10-2021-87eebd03b614?source=rss------bug_bounty-5 | Rafin Rahman Chy | pentesting, web-security, bug-bounty, hacking, infosec | 07-Apr-2024 |
| TryHackMe CTF: Vulnversity — Walkthrough | https://medium.com/@suyogpatil1810/tryhackme-ctf-vulnversity-walkthrough-2f375c5521a6?source=rss------bug_bounty-5 | Suyog Patil | software-development, computer-science, hacking, ethical-hacking, bug-bounty | 07-Apr-2024 |
| Mastering CORS: A Comprehensive Guide to Finding Cross-origin resource sharing Vulnerabilities |… | https://cyberw1ng.medium.com/mastering-cors-a-comprehensive-guide-to-finding-cross-origin-resource-sharing-vulnerabilities-c22a5659f95f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, cybersecurity, security, penetration-testing | 07-Apr-2024 |
| How We Found a 25K$ Bug in a Blockchain Project by Mistake | Bounty Hunting Journey | https://0d.dwalletlabs.com/how-we-found-a-25k-bug-in-a-blockchain-project-by-mistake-bounty-hunting-journey-21c0c20440f6?source=rss------bug_bounty-5 | Elad Ernst | blockchain, exploitation, web3, bug-bounty, icon-foundation | 07-Apr-2024 |
| IDOR Leads To Account Takeover | https://medium.com/@adityasawant00/idor-leads-to-account-takeover-28fe6e300a49?source=rss------bug_bounty-5 | Aditya Sawant | idor, account-takeover, bug-bounty, penetration-testing, web-application-security | 07-Apr-2024 |
| How Did I Find Reflected XSS In Domino’s ? | https://medium.com/@xrypt0/how-did-i-find-reflected-xss-in-dominos-d1d41b120598?source=rss------bug_bounty-5 | Crypto | cloudflare, bug-bounty, penetration-testing, xss-attack, web-security | 07-Apr-2024 |
| File Upload Vulnerability Checklist | https://medium.com/@dasmanish6176/file-upload-vulnerability-checklist-254c4680aa74?source=rss------bug_bounty-5 | Dasmanish | web-application-security, bug-bounty, web-penetration-testing, vapt, file-upload-vulnerability | 07-Apr-2024 |
| Bug Bounties in Web3: Investing in Security for Sustainable Growth | https://medium.com/@charliekaru/bug-bounties-in-web3-investing-in-security-for-sustainable-growth-5b4092474d3d?source=rss------bug_bounty-5 | Charlie Karunaratne | web3, defi-security, bug-bounty, web3-security | 07-Apr-2024 |
| Teaching Spotify a Cryptography Lesson | https://medium.com/@Fanicia/teaching-spotify-a-cryptography-lesson-51f5ee0b0f5c?source=rss------bug_bounty-5 | Security Guy | openid-connect, blue-team, bug-bounty, cybersecurity, bug-bounty-tips | 07-Apr-2024 |
| Finding CSRF on Graphql Application | https://medium.com/@alpernae/finding-csrf-on-graphql-application-3ffa1105a30d?source=rss------bug_bounty-5 | Alperen | bug-bounty-tips, graphql, cybersecurity, bug-bounty, csrf | 7-Apr-2024 |
| The Fast and the Curious: Finding a Race Condition in Worldcoin | https://medium.com/@gonzo-hacks/the-fast-and-the-curious-finding-a-race-condition-in-worldcoin-621c89bfbd61?source=rss------bug_bounty-5 | Dane Sherrets | bug-bounty, bug-fixes, bug-bounty-tips, blockchain, hacking | 7-Apr-2024 |
| “Fortify Your Cyber Space: Embark on the Dominant Cyber Boot Camp Journey” | https://medium.com/@rizvi4600779/fortify-your-cyber-space-embark-on-the-dominant-cyber-boot-camp-journey-3071bd0b1ec7?source=rss------bug_bounty-5 | Syed Muhammad Minhal Rizvi | hacking, writeup, cyber, bug-bounty, cybersecurity | 7-Apr-2024 |
| Host Header Manipulation Leading to Unauthorized Access to Apple’s Internal Slack bot (Bug Bounty) | https://amineaboud.medium.com/unauthorized-access-to-an-internal-app-used-by-apple-to-protect-confidential-information-shared-on-c8835a80079b?source=rss------bug_bounty-5 | Amine Aboud | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 07-Apr-2024 |
| This Cryptocurrency exchange paid me $200 for reporting vulnerability in their website | https://medium.com/@abhishek8602314652/this-cryptocurrency-exchange-paid-me-200-for-reporting-vulnerability-in-their-website-6755b38702a8?source=rss------bug_bounty-5 | Abhishek singh ( a6h1) | cybersecurity, cryptocurrency, vulnerability, bug-hunting, bug-bounty | 07-Apr-2024 |
| Wordfence otorga su mayor bounty hasta la fecha | https://casi-cincuenta-monos.medium.com/wordfence-otorga-su-mayor-bounty-hasta-la-fecha-f2d9aa561f05?source=rss------bug_bounty-5 | Casi Cincuenta Monos | wordpress, cybersecurity, bug-bounty | 06-Apr-2024 |
| Recon automation with Telegram Notification | https://medium.com/@tamhacker1/recon-automation-with-telegram-notification-d4c6b564ed58?source=rss------bug_bounty-5 | Tamhacker | cybersecurity, hacker, bug-bounty, reconnaissance, hacking | 06-Apr-2024 |
| How To Fix bWAPP Unknown Database Error Windows/Linux | https://hamzaavvan.medium.com/how-to-fix-bwapp-unknown-database-error-windows-linux-acefd1a4568b?source=rss------bug_bounty-5 | Hamza Avvan | bwapp, php, ethical-hacking, bug-fixes, bug-bounty | 06-Apr-2024 |
| Easiest way to find Broken links in a website | https://medium.com/@jeetpal2007/easiest-way-to-find-broken-links-in-a-website-cccbc1f0b6d2?source=rss------bug_bounty-5 | JEETPAL | broken-link, easy-bug-to-find, bug-bounty, bug-bounty-tips, broken-link-hijacking | 06-Apr-2024 |
| Advanced XSS Discovery: Streamlining Your Attack Strategy with Cutting-Edge Automation Tools | https://medium.com/@0xelkot/advanced-xss-discovery-streamlining-your-attack-strategy-with-cutting-edge-automation-tools-88cfd0f68c8e?source=rss------bug_bounty-5 | 0xElkot | hackerone, xss-attack, methodology, bug-bounty, hacking | 06-Apr-2024 |
| 14.6 Lab: SameSite Strict bypass via sibling domain | 2024 | https://infosecwriteups.com/14-6-lab-samesite-strict-bypass-via-sibling-domain-2024-f2ad5f0167d1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, bug-bounty, penetration-testing, hacking | 06-Apr-2024 |
| Bug Bounty: Secure Camino Network, Earn Rewards | https://medium.com/@obobo/bug-bounty-secure-camino-network-earn-rewards-329a686da0b9?source=rss------bug_bounty-5 | O Bobo | web3, hexen, travel, camino-network, bug-bounty | 06-Apr-2024 |
| Step by Step Complete Beginners guide of iOS penetration testing with corellium | https://infosecwriteups.com/step-by-step-complete-beginners-guide-of-ios-penetration-testing-with-corellium-2b9e9c6382c2?source=rss------bug_bounty-5 | Sandeep Vishwakarma | mobile-pentesting, bug-bounty, corellium, ios-penetration-testing, pentesting | 05-Apr-2024 |
| Unmasking an Open Redirect on the India’s Government Website | https://medium.com/@nilkhant30/unmasking-an-open-redirect-on-the-indias-government-website-3f808b10bff9?source=rss------bug_bounty-5 | I AM Raja | open-redirect, bug-bounty, hacking, bug-bounty-tips, security-research | 05-Apr-2024 |
| IDOR To view other private users profile pictures in un.org | https://medium.com/@Ajakcybersecurity/idor-to-view-other-private-users-profile-pictures-in-un-org-358e464335e8?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, bug-bounty, cybersecurity, ethical-hacking, penetration-testing | 05-Apr-2024 |
| Apple’s Bug: From SQLi Suspicions to UI Bug Discovery | https://medium.com/@MohaseenK/apples-bug-from-sqli-suspicions-to-ui-bug-discovery-0e71e228b336?source=rss------bug_bounty-5 | Mohaseen | apple, hof, bug-bounty, hackerone, bugcrowd | 05-Apr-2024 |
| Race Condition Authentication Bypass Leads to Full Account Takeover | https://medium.com/@keizobugbounty/race-condition-authentication-bypass-leads-to-full-account-takeover-6b5c9bc0a54d?source=rss------bug_bounty-5 | Keizo | cybersecurity, bugbounty-writeup, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 05-Apr-2024 |
| Don’t Trust the Cache: Exposing Web Cache Poisoning and Deception vulnerabilities | https://anasbetis023.medium.com/dont-trust-the-cache-exposing-web-cache-poisoning-and-deception-vulnerabilities-3a829f221f52?source=rss------bug_bounty-5 | Anas H Hmaidy | bug-bounty-tips, penetration-testing, cybersecurity, web-security, bug-bounty | 05-Apr-2024 |
| FB OAuth Misconfigurations to Account Takeover | https://medium.com/@hbenja47/fb-oauth-misconfigurations-to-account-takeover-e264a06ae4a0?source=rss------bug_bounty-5 | Benja (bronxi) | hacking, bug-bounty, oauth, infosec | 05-Apr-2024 |
| UUIDs Unmasked: Exploiting IDOR for User Data Access | https://medium.com/@cybersolution2172/uuids-unmasked-exploiting-idor-for-user-data-access-b199e3b08563?source=rss------bug_bounty-5 | Satyam Singh | bug-bounty-tips, owasp, bug-bounty, idor-vulnerability, bug-bounty-writeup | 05-Apr-2024 |
| 14.5 Lab: CSRF with broken Referer validation | 2024 | https://cyberw1ng.medium.com/14-5-lab-csrf-with-broken-referer-validation-2024-9948aa660023?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, hacking, cybersecurity, careers, bug-bounty | 05-Apr-2024 |
| Beetlebug Android Walkthrough & Basics Android application security | https://medium.com/@yousefneuer13/beetlebug-android-walkthrough-basics-android-application-security-c5e0fb9b284b?source=rss------bug_bounty-5 | Yousef Elsheikh | cybersecurity, bug-bounty, android-security, ctf-writeup, ctf-walkthrough | 05-Apr-2024 |
| One IP led to 4 bugs made the company delete the domain | https://kalawy.medium.com/one-ip-led-to-4-bugs-made-the-company-delete-the-domain-f28a9e898a8a?source=rss------bug_bounty-5 | Kalawy | bug-bounty-tips, bug-bounty, hackerone | 04-Apr-2024 |
| How to discovery vulnerabilities in your network? | https://medium.com/@info_81845/how-to-discovery-vulnerabilities-in-your-network-a6fd140ad4d6?source=rss------bug_bounty-5 | BugFixing | penetration-testing, penetration-test-company, bug-bounty, hacking, vulnerability-assessment | 04-Apr-2024 |
| Art of onscrollend | Demonstrating XSS through scroll events write-up | https://medium.com/@rAmpancist/art-of-onscrollend-demonstrating-xss-through-scroll-events-write-up-d3b33afaaf64?source=rss------bug_bounty-5 | rAmpancist | bug-bounty, bug-bounty-tips, xss-attack, cybersecurity, hacking | 04-Apr-2024 |
| HTB Academy | CROSS_SITE SCRIPTING (XSS) - | https://medium.com/@mazalwebdesign/htb-academy-cross-site-scripting-xss-7dc78e69b100?source=rss------bug_bounty-5 | Sara Mazal M. | maz4l | ethical-hacking, htb, htb-academy-writeup, htb-walkthrough, bug-bounty | 04-Apr-2024 |
| FB OAuth Misconfiguration Leads to Takeover any Account | https://sl4x0.medium.com/fb-oauth-misconfiguration-leads-to-takeover-any-account-061316a5b31b?source=rss------bug_bounty-5 | Abdelrhman Allam (sl4x0) | oauth2, account-takeover, bug-bounty, hacking, bug-bounty-tips | 04-Apr-2024 |
| S3 Bucket Misconfiguration | https://medium.com/@scorpiankapil/s3-bucket-misconfiguration-64d459abdb71?source=rss------bug_bounty-5 | Kapil Patel | bug-bounty | 04-Apr-2024 |
| 14.4 Lab: CSRF where Referer validation depends on header being present | 2024 | https://cyberw1ng.medium.com/14-4-lab-csrf-where-referer-validation-depends-on-header-being-present-2024-2db1c7496091?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, cybersecurity, bug-bounty, penetration-testing | 04-Apr-2024 |
| NFS | https://medium.com/@mirackucuk595/nfs-873d049131b8?source=rss------bug_bounty-5 | Miraç Küçük | footprinting, bug-bounty, information-gathering, hack-the-box-writeup, nfs-server | 04-Apr-2024 |
| Escalation of Admin and Supervisor Privileges Enables Organization Takeover and Access to Any… | https://medium.com/@elcapitano7x/escalation-of-admin-and-supervisor-privileges-enables-organization-takeover-and-access-to-any-6d1eb82bbe08?source=rss------bug_bounty-5 | Elcapitano | bug-bounty, hacking, idor-vulnerability, bug-bounty-tips, account-takeover | 04-Apr-2024 |
| Bug Bounty Challenge: Day 10–04/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-10-04-04-2024-d7d40e226af2?source=rss------bug_bounty-5 | Wallotry | bug-bounty-tips, bug-bounty, bug-bounty-hunter, bug-bounty-writeup | 04-Apr-2024 |
| My methodology to bypass CSRF | https://medium.com/@0x7irix/my-methodology-to-bypass-csrf-957b4e552ae7?source=rss------bug_bounty-5 | 0x7irix | csrf-attack, csrf-token, csrf-bypass, csrf, bug-bounty | 04-Apr-2024 |
| How I hacked medium and they didn’t pay me | https://medium.com/@super_burgundy_weasel_439/how-i-hacked-medium-and-they-didnt-pay-me-f6c89cca3af7?source=rss------bug_bounty-5 | YouGotItComing | hacking, bug-bounty, medium, neglect, bugs | 04-Apr-2024 |
| ShentuChain’s OpenBounty Hackers and Projects Referral Program | https://shentuchain.medium.com/shentuchains-openbounty-hackers-and-projects-referral-program-29b4b73c20c0?source=rss------bug_bounty-5 | Shentu Chain | bug-bounty, ethical-hacker, cybersecurity, referral-program, web3 | 03-Apr-2024 |
| SQLI with extract Huge Data just Got N/A | https://medium.com/@nomad8061/sqli-with-extract-huge-data-just-got-n-a-5956c3b5297b?source=rss------bug_bounty-5 | Ahmed Badry | bug-bounty, sqlite, infosec, information-technology, ctf | 03-Apr-2024 |
| Cracking the Code: XSS Exploits and Their Power in Phishing Warfare | https://hackerhalt.medium.com/cracking-the-code-xss-exploits-and-their-power-in-phishing-warfare-252d04e9792e?source=rss------bug_bounty-5 | Hacker Halt Live | bugbounty-writeup, phishing, xs, bug-bounty, phishing-attacks | 03-Apr-2024 |
| Hack ChatGPT, Make Money | https://medium.com/@david.azad.merian/hack-chatgpt-make-money-644bb4a7a529?source=rss------bug_bounty-5 | David Merian | bug-bounty, hacking, cybersecurity, fuzzing, ai | 03-Apr-2024 |
| How I Secured 50+ Brand & Startups in Shopify Stores | XSS | Responsible Disclosure | https://prathapilango.medium.com/how-i-secured-50-brand-startups-in-shopify-stores-xss-responsible-disclosure-e38a72cf4a47?source=rss------bug_bounty-5 | Prathapilango | infosec, info-sec-writeups, cybersecurity, cross-site-scripting, bug-bounty | 03-Apr-2024 |
| Bug Bounty Challenge: Day 9–03/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-9-03-04-2024-f7a6303bb674?source=rss------bug_bounty-5 | Wallotry | bug-bounty, bug-bounty-writeup, bug-bounty-hunter, bug-bounty-tips | 03-Apr-2024 |
| I asked ChatGPT to improve Jason Haddix V4 methodology. Here’s the answer: | https://medium.com/@uniicorniumx/i-asked-chatgpt-to-improve-jason-haddix-v4-methodology-heres-the-answer-09de258da623?source=rss------bug_bounty-5 | • CrazyUnicorn | hacking, bug-bounty, pentesting, cybersecurity, bug-bounty-tips | 03-Apr-2024 |
| Smart Fuzzing — Finding bugs like no one else. By Gilson Oliveira | https://medium.com/@gilsgil/smart-fuzzing-finding-bugs-like-no-one-else-by-gilson-oliveira-d6aa0dbc285b?source=rss------bug_bounty-5 | Gilson Oliveira | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 03-Apr-2024 |
| Struggling RCE on Jenkins Instance | https://medium.com/@imusabkhan/struggling-rce-on-jenkins-instance-8851af98b7e6?source=rss------bug_bounty-5 | Mohammad Musab Khan | hacker, bugs, bug-bounty, bug-bounty-tips, remote-code-execution | 03-Apr-2024 |
| DNS | https://medium.com/@mirackucuk595/dns-4e18aa90b7cf?source=rss------bug_bounty-5 | Miraç Küçük | footprinting, hack-the-box-writeup, dns, bug-bounty | 03-Apr-2024 |
| Bir sorgu dizesinde sunucu tarafı parametre kirliliğinden yararlanma | https://medium.com/@hhuseyinuyar17/bir-sorgu-dizesinde-sunucu-taraf%C4%B1-parametre-kirlili%C4%9Finden-yararlanma-567489eefd65?source=rss------bug_bounty-5 | Hhuseyinuyar | api, hacking, burpsuite, bug-bounty, parameter | 03-Apr-2024 |
| 14.3 Lab: SameSite Lax bypass via cookie refresh | 2024 | https://cyberw1ng.medium.com/14-3-lab-samesite-lax-bypass-via-cookie-refresh-2024-4f10021e6ce8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, cybersecurity, hacking, careers | 03-Apr-2024 |
| Issues related to privacy (Cybersecurity) | https://medium.com/@paritoshblogs/issues-related-to-privacy-cybersecurity-99368bf0bc10?source=rss------bug_bounty-5 | Paritosh | information-security, bug-bounty, cybersecurity, information-technology, hacking | 02-Apr-2024 |
| Welcome pentesters to cooperate with our company! | https://medium.com/@alfabit_group/welcome-pentesters-to-cooperate-with-our-company-9cdf42f233bb?source=rss------bug_bounty-5 | AlfaBit Ecosystem | blockchain, alfabit, bug-bounty, ecosystem | 02-Apr-2024 |
| Unpacking CVE-2024–3094: A Critical Vulnerability in XZ Utils | https://infosecwriteups.com/unpacking-cve-2024-3094-a-critical-vulnerability-in-xz-utils-c6a8207d7b54?source=rss------bug_bounty-5 | ElNiak | cve, linux, backdoor, cybersecurity, bug-bounty | 02-Apr-2024 |
| 4 Mistakes To Avoid When Doing Bug Bounty — Bug Bounty Tuesday | https://medium.com/@kerstan/4-mistakes-to-avoid-when-doing-bug-bounty-bug-bounty-tuesday-fd0df75ca05d?source=rss------bug_bounty-5 | kerstan | hacking, cybersecurity, technology, bug-bounty, security | 02-Apr-2024 |
| 14.2 Lab: SameSite Strict bypass via client-side redirect | 2024 | https://cyberw1ng.medium.com/14-2-lab-samesite-strict-bypass-via-client-side-redirect-2024-2a5e9b68fc1e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, penetration-testing, careers, cybersecurity | 02-Apr-2024 |
| One-click Account Take Over | https://dynnyd20.medium.com/one-click-account-take-over-e500929656ea?source=rss------bug_bounty-5 | dynnyd20 | pentesting, bug-bounty, cybersecurity, information-security, security | 02-Apr-2024 |
| Bug Bounty Challenge: Day 8–02/04/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-8-02-04-2024-604382e079ac?source=rss------bug_bounty-5 | Wallotry | bug-bounty-writeup, bug-bounty-hunter, bug-bounty, bug-bounty-tips | 02-Apr-2024 |
| The Difference Between TCP and HTTP Reverse Connection: | https://medium.com/@Hackerinja/the-difference-between-tcp-and-http-reverse-connection-bf13ccd16941?source=rss------bug_bounty-5 | Hackerinja | bug-bounty, penetration-testing, cybersecurity, ethical-hacking | 02-Apr-2024 |
| How I was able to send emails from anyone to anyone | https://medium.com/@zeesek/how-i-was-able-to-send-emails-from-anyone-to-anyone-a44c57fd015b?source=rss------bug_bounty-5 | Muhammad Zeeshan | penetration-testing, bugs, bug-bounty-tips, bug-bounty, pentesting | 02-Apr-2024 |
| How I Found My First Bug | XSS | https://medium.com/@fariio/how-i-found-my-first-bug-xss-031df71aedbe?source=rss------bug_bounty-5 | Fariio | cybersecurity, bug-bounty-tips, penetration-testing, xss-vulnerability, bug-bounty | 01-Apr-2024 |
| Bug to fix: Mastering the Life Cycle of Software Defects | https://medium.com/@hannahanulur/bug-to-fix-mastering-the-life-cycle-of-software-defects-b227292bdb16?source=rss------bug_bounty-5 | Gulhanim Anulur | bug-fixes, defect-management, defect-detection, bug-bounty, bugs | 01-Apr-2024 |
| How to start Bug Bounty Hunting $$$$ in 2024?? | A short RoadMap | https://infosecwriteups.com/how-to-start-bug-bounty-hunting-in-2024-a-short-roadmap-9f9eeddd24ca?source=rss------bug_bounty-5 | 7h3h4ckv157 | money, hacking, bug-bounty, ethical-hacking, infosec | 01-Apr-2024 |
| IOS Pentesting Lab Setup | https://hackerassociate.medium.com/ios-pentesting-lab-setup-516ec567b424?source=rss------bug_bounty-5 | Harshad Shah | cybersecurity, penetration-testing, infosec, hacking, bug-bounty | 01-Apr-2024 |
| Certified Bug Bounty Hunter: Should you go for Broke, or take a Junior Level Certification First | https://medium.com/@codewidthme/certified-bug-bounty-hunter-should-you-go-for-broke-or-take-a-junior-level-certification-first-a905c105f9a2?source=rss------bug_bounty-5 | codewidthme | hacking, bug-bounty, penetration-testing, certification, hackthebox | 01-Apr-2024 |
| I will alter and update your website | https://medium.com/@fiverrtopfreelancer/i-will-alter-and-update-your-website-438eeb9bcde8?source=rss------bug_bounty-5 | Fiverr Top Freelancer | html, website-design, bug-fixes, bug-bounty, css | 01-Apr-2024 |
| Broken Application Logic Bug Doesn’t Validate Email, leading to DOS | https://medium.com/@saitle74/broken-application-logic-bug-doesnt-validate-email-leading-to-dos-d5ff73e752b4?source=rss------bug_bounty-5 | Saitleop | bug-bounty, infosec-write-ups, cybersecurity, python, infosec | 01-Apr-2024 |
| “Configuring Apache Web Server on CentOS 7” | https://medium.com/@shaikhalshifa210/configuring-apache-web-server-on-centos-7-ed10245f2a4d?source=rss------bug_bounty-5 | Alshifa Shaikh | server-configuration, bug-bounty, machine-learning, penetration-testing, cybersecurity | 01-Apr-2024 |
| How to set up Caido for Bug Bounty or Web Application Penetration? | https://medium.com/@bytescheck0/how-to-set-up-caido-for-bug-bounty-or-web-application-penetration-a74729d31dca?source=rss------bug_bounty-5 | Bytescheck | cybersecurity, penetration-testing, bug-bounty, technology | 01-Apr-2024 |
| XSS Vulnerability in a Technical Assessment Application: Lessons Learned and Security Measures | https://interc3pt3r.medium.com/xss-vulnerability-in-a-technical-assessment-application-lessons-learned-and-security-measures-9321ee4c7639?source=rss------bug_bounty-5 | Aneesha D | bug-bounty, cybersecurity, hacker, hacking, penetration-testing | 01-Apr-2024 |
| How I Was Able To Find My First VALID XSS | https://medium.com/@harshsolanki2810/how-i-was-able-to-find-my-first-valid-xss-b1b8bd727b6a?source=rss------bug_bounty-5 | Dart0xx | bug-bounty, cybersecurity, bug-bounty-writeup, bug-hunting | 01-Apr-2024 |
| Mastering CSRF: A Comprehensive Guide to Finding Cross-site Request Forgery Vulnerabilities | 2024 | https://cyberw1ng.medium.com/mastering-csrf-a-comprehensive-guide-to-finding-cross-site-request-forgery-vulnerabilities-2024-8d1d13d83547?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, penetration-testing, hacking, careers | 01-Apr-2024 |
| Subdomain Takeovers (Subdomain Devralma) | https://medium.com/@mirackucuk595/subdomain-takeovers-subdomain-devralma-2ffa999c123b?source=rss------bug_bounty-5 | Miraç Küçük | bug-bounty, domain-names, subdomain, hackerone | 01-Apr-2024 |
| Bug Bounty Challenge: Update | https://wallotry.medium.com/bug-bounty-challenge-update-ebd1fa31426c?source=rss------bug_bounty-5 | Wallotry | bug-bounty, bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup | 01-Apr-2024 |
| How I Was Able To Find My First VALID XSS | https://medium.com/@0xdartx/how-i-was-able-to-find-my-first-valid-xss-b1b8bd727b6a?source=rss------bug_bounty-5 | Dart0xx | bug-bounty, cybersecurity, bug-bounty-writeup, bug-hunting | 01-Apr-2024 |
| Can I learn bug bounty for free? | https://bevijaygupta.medium.com/can-i-learn-bug-bounty-for-free-59d71024ee15?source=rss------bug_bounty-5 | Vijay Gupta | bugs, bug-zero, bug-bounty-tips, bug-bounty, bug-fixes | 31-Mar-2024 |
| Fake Tinder Account Verified By Bypassing Face Authentication | https://medium.com/@Ajakcybersecurity/fake-tinder-account-verified-by-bypassing-face-authentication-4b7c14e35c29?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, ethical-hacking, bug-bounty, blog, tinder | 31-Mar-2024 |
| Swaggerdə qarşılaşdığım hücum vektorları ($$$) | https://memmedrehimzade.medium.com/swaggerd%C9%99-qar%C5%9F%C4%B1la%C5%9Fd%C4%B1%C4%9F%C4%B1m-h%C3%BCcum-vektorlar%C4%B1-f3659eeccac5?source=rss------bug_bounty-5 | memmed rehimzade | swagger, cybersecurity, kibertəhlükəsizlik, bug-bounty | 31-Mar-2024 |
| Understanding and Mitigating CVE-2024–3094 | https://medium.com/@mrblackstar26/understanding-and-mitigating-cve-2024-3094-2b8572d9e921?source=rss------bug_bounty-5 | Uday Patel | infosec, hacking, bug-bounty, penetration-testing, cybersecurity | 31-Mar-2024 |
| Installation DVWA In Windows 10 Using XAMPP | https://bevijaygupta.medium.com/installation-dvwa-in-windows-10-using-xampp-d6246279a10e?source=rss------bug_bounty-5 | Vijay Gupta | xampp, dvwa, hacking, install-dvwa, bug-bounty | 31-Mar-2024 |
| What is the future of bug bounty? | https://bevijaygupta.medium.com/what-is-the-future-of-bug-bounty-696f0a894130?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, bug-zero, bugs, future-technology, future | 31-Mar-2024 |
| 13.26 Lab: Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and… | https://cyberw1ng.medium.com/13-26-lab-stored-xss-into-onclick-event-with-angle-brackets-and-double-quotes-html-encoded-and-4bde1cc39671?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-test, hacking, cybersecurity, careers | 31-Mar-2024 |
| Shield your System — XZ Utils Backdoor (Linux Distribution) | https://infosecwriteups.com/shield-your-system-xz-utils-backdoor-linux-distribution-54583b071ccc?source=rss------bug_bounty-5 | Ethical Kaps | linux, cybersecurity, vulnerability, hacking, bug-bounty | 31-Mar-2024 |
| “Unveiling a Stored XSS Vulnerability: Example.com Under the Spotlight” | https://medium.com/@mdnafeed3/unveiling-a-stored-xss-vulnerability-example-com-under-the-spotlight-37d0895cebca?source=rss------bug_bounty-5 | H4cker-Nafeed | bug-bounty, cybersecurity | 31-Mar-2024 |
| #ERROR! | https://medium.com/@mdnafeed3/unveiling-a-stored-xss-vulnerability-example-com-under-the-spotlight-37d0895cebca?source=rss------bug_bounty-5 | H4cker-Nafeed | bug-bounty, cybersecurity | 31-Mar-2024 |
| Best bug hunting methodology for EZ money | https://medium.com/@tom.sh/best-bug-hunting-methodology-for-ez-money-58b7fe928e6f?source=rss------bug_bounty-5 | Tom | hacking, money, bpp, methodology, bug-bounty | 30-Mar-2024 |
| Advertisers able to identify individual consumers who visited their ads (Microsoft bug bounty) | https://medium.com/@avig2009/advertisers-able-to-identify-individual-consumers-who-visited-their-ads-microsoft-bug-bounty-a8bcb2d727f2?source=rss------bug_bounty-5 | hatich_hacker | microsoft, privacy, bug-bounty | 30-Mar-2024 |
| 13.25 Lab: Reflected XSS in canonical link tag | 2024 | https://cyberw1ng.medium.com/13-25-lab-reflected-xss-in-canonical-link-tag-2024-c4478a82b466?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, bug-bounty, hacking, careers | 30-Mar-2024 |
| A Journey into Unusual Header Injection | https://medium.com/@imusabkhan/a-journey-into-unusual-header-injection-693cc0ddecc6?source=rss------bug_bounty-5 | Mohammad Musab Khan | hackerone, bug-bounty-tips, bug-bounty-writeup, bug-bounty, bug-hunting | 30-Mar-2024 |
| Chain of Rate Limit Bypass and Weak Token Expiry Leads To Account Take Over | https://medium.com/@ozomarzu/chain-of-rate-limit-bypass-and-weak-token-expiry-leads-to-account-take-over-d9cddf598c9c?source=rss------bug_bounty-5 | CyberOz | bug-bounty, bug-bounty-tips, bug-bounty-writeup, cybersecurity, hackerone | 30-Mar-2024 |
| Email verification Bypass from P4 TO P2 | https://medium.com/@akrachliy/email-verification-bypass-from-p4-to-p2-50fa3dde8e5f?source=rss------bug_bounty-5 | Yassine Akrachli | hacking, cybersecurity, bug-bounty, ethical-hacking, bugcrowd | 30-Mar-2024 |
| Web Request | https://medium.com/@mirackucuk595/web-request-ea237118e259?source=rss------bug_bounty-5 | Miraç Küçük | http-request, curl, https, bug-bounty, webrequest | 30-Mar-2024 |
| Kioptrix Level 1 Walkthrough | https://erdemstar.medium.com/kioptrix-level-1-walkthrough-6e985fbd0dc7?source=rss------bug_bounty-5 | Erdemstar | oscp, application-security, bug-bounty-tips, bug-bounty, penetration-testing | 30-Mar-2024 |
| 1200 $ Email verification Bypass from P4 TO P2 | https://medium.com/@akrachliy/email-verification-bypass-from-p4-to-p2-50fa3dde8e5f?source=rss------bug_bounty-5 | Yassine Akrachli | hacking, cybersecurity, bug-bounty, ethical-hacking, bugcrowd | 30-Mar-2024 |
| How i found Multiple IDOR | https://medium.com/@hillrane24/how-i-found-multiple-idor-ab52815b375a?source=rss------bug_bounty-5 | NIKHIL RANE | idor-vulnerability, bug-bounty | 30-Mar-2024 |
| YouTube Growth Hacking | https://sanparatama.medium.com/youtube-growth-hacking-a94457f04789?source=rss------bug_bounty-5 | Sanjaya paratama | web-development, bug-bounty, hacking, hacking-tools, cybersecurity | 29-Mar-2024 |
| The Future of Internet Security and Artificial Intelligence and Cyber Security Jobs | https://python.plainenglish.io/the-future-of-internet-security-and-artificial-intelligence-and-cyber-security-jobs-528b4c340cf9?source=rss------bug_bounty-5 | Imran Niaz | xss-attack, hacking, programming, ai, bug-bounty | 29-Mar-2024 |
| [Walkthrough] Mobile Hacking Lab — Secure Note | https://medium.com/@karimul.sh/walkthrough-mobile-hacking-lab-secure-note-eeb4af20e01b?source=rss------bug_bounty-5 | Md.Karimul Islam Shezan | walkthrough, android-app-security, bug-bounty, reverse-engineering, ctf | 29-Mar-2024 |
| AutoLayer Bug Bounty Program: Full Information Release | https://autolayer.medium.com/autolayer-bug-bounty-program-full-information-release-d5de0bab972e?source=rss------bug_bounty-5 | AutoLayer | defi, bug-bounty | 29-Mar-2024 |
| Web Security Short Series — CSRF. | https://medium.com/@frankyyano/web-security-short-series-csrf-4cdf6f936773?source=rss------bug_bounty-5 | Yano. | csrf, appsec, owasp, bug-bounty, oscp | 29-Mar-2024 |
| How to learn Game Hacking? Recourse Compilation! | https://medium.com/@yannik603/how-to-learn-game-hacking-recourse-compilation-1c5d2807a7cb?source=rss------bug_bounty-5 | Yannik | reverse-engineering, bug-bounty, malware-analysis, gamehacking, coding | 29-Mar-2024 |
| Unhiding the hidden 401 Bypass | https://medium.com/@Xt3sY/unhiding-the-hidden-401-bypass-10f48c67b50d?source=rss------bug_bounty-5 | Pushkar Bhagat | bug-bounty, hacking, bug-bounty-tips | 29-Mar-2024 |
| 13.24 Lab: Reflected XSS with some SVG markup allowed | 2024 | https://cyberw1ng.medium.com/13-24-lab-reflected-xss-with-some-svg-markup-allowed-2024-78279b906ec2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, cybersecurity, penetration-testing, careers | 29-Mar-2024 |
| How to learn Game Hacking? Recourse Compilation! | https://medium.com/@yannik603/how-to-learn-game-hacking-recourse-compilation-1c5d2807a7cb?source=rss------bug_bounty-5 | Yannik Castro | reverse-engineering, bug-bounty, malware-analysis, gamehacking, coding | 29-Mar-2024 |
| Yara Rules ✌︎ For Something ☠︎ | https://medium.com/@haticezkmnl/yara-rules-%EF%B8%8E-for-something-%EF%B8%8E-0164b38e3ddd?source=rss------bug_bounty-5 | Hatice Zehra Kamanlı | cybersecurity, python, security, rules, bug-bounty | 29-Mar-2024 |
| How to install drozer with docker | https://medium.com/@nomad8061/hello-geeks-e8d0f62b22a1?source=rss------bug_bounty-5 | Ahmed Badry | bug-bounty | 29-Mar-2024 |
| ✌︎ Yara Rules ✌︎ For Something ☠︎ | https://medium.com/@haticezkmnl/yara-rules-%EF%B8%8E-for-something-%EF%B8%8E-0164b38e3ddd?source=rss------bug_bounty-5 | Hatice Zehra Kamanlı | cybersecurity, python, security, rules, bug-bounty | 29-Mar-2024 |
| 13.23 Lab: Reflected XSS into HTML context with most tags and attributes blocked | 2024 | https://cyberw1ng.medium.com/13-23-lab-reflected-xss-into-html-context-with-most-tags-and-attributes-blocked-2024-63d649c6cc2c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, hacking, penetration-testing, cybersecurity | 28-Mar-2024 |
| Bug Bounty Recon At Its Easiest with Netlas.io | https://medium.com/@omarora1603/bug-bounty-recon-at-its-easiest-with-netlas-io-d313ae0f1c09?source=rss------bug_bounty-5 | Om Arora | infosec, cybersecurity, bug-bounty, bug-bounty-tips, hacking | 28-Mar-2024 |
| Bypassing 403 Protection To Get Admin Access | https://rajput623929.medium.com/bypassing-403-protection-to-get-admin-access-d7c9d0560e5c?source=rss------bug_bounty-5 | Mr.Horbio | 403-forbidden, bug-bounty-tips, cybersecurity, ethical-hacking, bug-bounty | 28-Mar-2024 |
| How to become a bug bounty hunter | https://bevijaygupta.medium.com/how-to-become-a-bug-bounty-hunter-c607bb7de595?source=rss------bug_bounty-5 | Vijay Gupta | bug-zero, bug-bounty, bugs, bug-bounty-tips, bug-fixes | 28-Mar-2024 |
| OAuth Hijacking leads to account takeover | https://medium.com/@iknowhatodo/oauth-hijacking-leads-to-account-takeover-a051bdb5e9f0?source=rss------bug_bounty-5 | Hossam Ahmed | bug-bounty, oauth | 28-Mar-2024 |
| How I Hacked Your Private Repository in GitHub (And Got JackShit) | https://medium.com/@reuveinas/how-i-hacked-your-private-repository-in-github-and-got-jackshit-cb7c342570b2?source=rss------bug_bounty-5 | Reuvein Vinokurov (CTO:UNIXi) - https://unixi.io/ | microsoft, bug-bounty, github, security, cybersecurity | 28-Mar-2024 |
| How to write a Walkthrough | https://bevijaygupta.medium.com/how-to-write-a-walkthrough-23eee7f6777c?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-writeup, bug-bounty-tips, bug-bounty, walkthroughwednesday, walkthrough | 28-Mar-2024 |
| Unveiling all techniques to find IDOR’S in web applications | https://adipsharif.medium.com/unveiling-all-techniques-to-find-idors-in-web-applications-578d2b8aa28a?source=rss------bug_bounty-5 | ADIP | bug-bounty-tips, bug-bounty, pentesting, penetration-testing, bug-bounty-writeup | 28-Mar-2024 |
| IDOR’a Giriş | https://medium.com/@mirackucuk595/idora-giri%C5%9F-23c22a5ae24f?source=rss------bug_bounty-5 | Miraç Küçük | hack-the-box-writeup, burpsuite, idor-vulnerability, bug-bounty | 28-Mar-2024 |
| Risks of Software Dependencies AKA Toxic Dependencies | https://bytebusterx.medium.com/risks-of-software-dependencies-aka-toxic-dependencies-0a38150cf5ce?source=rss------bug_bounty-5 | ByteBusterX | bug-bounty, hacking, infosec, vulnerability, cybersecurity | 28-Mar-2024 |
| Penetration Testing Tools | https://bevijaygupta.medium.com/penetration-testing-tools-b4c8ad807114?source=rss------bug_bounty-5 | Vijay Gupta | penetration-testing-tools, pentesting, hacking, bug-bounty, penetration-testing | 28-Mar-2024 |
| Stargazing Risks: Exploring the Data Breach that Exposed NASA Employees’ PII | https://interc3pt3r.medium.com/stargazing-risks-exploring-the-data-breach-that-exposed-nasa-employees-pii-68692cf7a5e9?source=rss------bug_bounty-5 | Aneesha D | bug-bounty-writeup, cybersecurity, hacking, security, bug-bounty | 28-Mar-2024 |
| Finding Bug DMRC Reflected Xss and HTML Injection | https://medium.com/@abhishekaswal777/finding-bug-dmrc-reflected-xss-and-html-injection-fe4361a1db60?source=rss------bug_bounty-5 | Abhishekaswal | bugs, poc, bug-bounty, bug-bounty-tips, hackerone | 28-Mar-2024 |
| Annonforce — Tryhackme Walkthrough Easy Self-made | https://medium.com/@shaswata.ssaha/annonforce-tryhackme-walkthrough-easy-self-made-f45c3a6f3e96?source=rss------bug_bounty-5 | Shaswata Saha | tryhackme, security, anonforce, bug-bounty, ctf | 28-Mar-2024 |
| Polyglot Files: The Cybersecurity Chameleon Threat | https://infosecwriteups.com/polyglot-files-the-cybersecurity-chameleon-threat-29890e382b59?source=rss------bug_bounty-5 | ElNiak | polyglot, cybersecurity, obfuscation, bug-bounty, penetration-testing | 27-Mar-2024 |
| Hackerone提现人民币 | https://medium.com/@dem0ns/hackerone%E6%8F%90%E7%8E%B0%E4%BA%BA%E6%B0%91%E5%B8%81-a3e907fefce1?source=rss------bug_bounty-5 | 猫猫虫 | hackerone, bug-bounty, 外汇 | 27-Mar-2024 |
| Mistakes To Avoid in Your Bug Bounty Career- Part 2 | https://medium.com/@Ajakcybersecurity/mistakes-to-avoid-in-your-bug-bounty-career-part-2-9da1c77788ea?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, bug-bounty, penetration-testing, blog, cybersecurity | 27-Mar-2024 |
| 13.22 Lab: Stored DOM XSS | 2024 | https://cyberw1ng.medium.com/13-22-lab-stored-dom-xss-2024-344ec753599a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, penetration-testing, hacking, careers | 27-Mar-2024 |
| HACKING WORDPRESS | https://medium.com/@mirackucuk595/hacking-wordpress-ac9ee6447045?source=rss------bug_bounty-5 | Miraç Küçük | wpscan, wordpress-hacked, hack-the-box-writeup, hacking, bug-bounty | 27-Mar-2024 |
| SSLStripping | https://bytebusterx.medium.com/sslstripping-e81dc95d6fab?source=rss------bug_bounty-5 | ByteBusterX | infosec, cybersecurity, vulnerability, hacking, bug-bounty | 27-Mar-2024 |
| HTTP Verb Tampering 101 in Web Applications (Identify Exploit Prevention) | https://adipsharif.medium.com/http-verb-tampering-101-in-web-applications-identify-exploit-prevention-3389258b6b93?source=rss------bug_bounty-5 | ADIP | infosec, penetration-testing, bug-bounty, pentesting, information-security | 27-Mar-2024 |
| Hacking the Giant: Got XSS on Google’s Product | https://adipsharif.medium.com/got-xss-on-googles-product-a4c79be8adbb?source=rss------bug_bounty-5 | ADIP | infosec, information-security, pentesting, bug-bounty, penetration-testing | 27-Mar-2024 |
| Bug Bounty Isn’t A Scam Here’s Why | https://medium.com/@benbencsik/bug-bounty-isnt-a-scam-here-s-why-751547bd8531?source=rss------bug_bounty-5 | Ben Bencsik | bug-bounty, computers, infosec, cybersecurity, technology | 27-Mar-2024 |
| Hacking the Giant: XSS on Google | https://adipsharif.medium.com/got-xss-on-googles-product-a4c79be8adbb?source=rss------bug_bounty-5 | ADIP | infosec, information-security, pentesting, bug-bounty, penetration-testing | 27-Mar-2024 |
| Fristileaks 1.3 Walkthrough | https://erdemstar.medium.com/fristileaks-1-3-walkthrough-a6b962385752?source=rss------bug_bounty-5 | Erdemstar | oscp, vulnhub-walkthrough, penetration-testing, bug-bounty, oscp-preparation | 27-Mar-2024 |
| Web Application Hacking Required Reading | https://hogarth45.medium.com/web-application-hacking-required-reading-0d2f046db191?source=rss------bug_bounty-5 | Jess | bug-bounty, web-development, security | 27-Mar-2024 |
| Why am I starting to hate Bug Bounty? | https://systemweakness.com/why-am-i-starting-to-hate-bug-bounty-1f075fc96978?source=rss------bug_bounty-5 | Imad Husanovic | hacking, cybersecurity, programming, bug-bounty, bug-bounty-tips | 27-Mar-2024 |
| Bug Bounty Isn’t A Scam Here’s Why | https://medium.com/@detroiton421094/bug-bounty-isnt-a-scam-here-s-why-751547bd8531?source=rss------bug_bounty-5 | Ben Bencsik | bug-bounty, computers, infosec, cybersecurity, technology | 27-Mar-2024 |
| RXSS Vulnerability in Less Than 10 Minutes on India’s Premier Travel Site | https://medium.com/@nilkhant30/rxss-vulnerability-in-less-than-10-minutes-on-indias-premier-travel-site-5b15ebb91d17?source=rss------bug_bounty-5 | I AM Raja | bug-bounty, cybersecurity, cyber-security-awareness, hacking, xss-vulnerability | 26-Mar-2024 |
| This skill is called ‘Early…’ in Software Testing | https://medium.com/software-testing-and-automation/this-skill-is-called-early-in-software-testing-75cd641bfa93?source=rss------bug_bounty-5 | Temitope | software-testing, quality-assurance, communication, bug-bounty, software-development | 26-Mar-2024 |
| HackGATE: Bug Bounty Program on steroids | https://medium.com/@levente.b.molnar/hackgate-bug-bounty-program-on-steroids-cef50ae2f759?source=rss------bug_bounty-5 | Hackrate | hacking, ethical-hacking, cybersecurity, bug-bounty, penetration-testing | 26-Mar-2024 |
| Exploring Cybersecurity with ZoomEye: A Review of the Premium Lifetime Membership | https://medium.com/@kenilalexandra07/exploring-cybersecurity-with-zoomeye-a-review-of-the-premium-lifetime-membership-f301a474bf88?source=rss------bug_bounty-5 | Kenilalexandra | bug-bounty, shodan, bugbounting, zoomeye, security | 26-Mar-2024 |
| How To Use AI And Nuclei To Make Money While You Sleep — Bug Bounty Tuesday | https://medium.com/@kerstan/how-to-use-ai-and-nuclei-to-make-money-while-you-sleep-bug-bounty-tuesday-4d9e584e6553?source=rss------bug_bounty-5 | kerstan | hacking, security, cybersecurity, bug-bounty, technology | 26-Mar-2024 |
| 13.21 Lab: Reflected DOM XSS | 2024 | https://cyberw1ng.medium.com/13-21-lab-reflected-dom-xss-2024-78cacc8fa1e7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, hacking, bug-bounty, penetration-testing, careers | 26-Mar-2024 |
| Bug Bounty Programs for Beginners | https://bevijaygupta.medium.com/bug-bounty-programs-for-beginners-fccc755957d9?source=rss------bug_bounty-5 | Vijay Gupta | cybersecurity, bug-bounty-hunter, bug-bounty, bugbounty-writeup, bug-bounty-tips | 26-Mar-2024 |
| Account takeover through password reset functionality | https://rewscel.medium.com/account-takeover-through-password-reset-functionality-af07636db302?source=rss------bug_bounty-5 | rewscel | bug-bounty | 26-Mar-2024 |
| FFUF İLE WEB UYGULAMALARINA SALDIRMAK | https://medium.com/@mirackucuk595/ffuf-i%CC%87le-web-uygulamalarina-saldirmak-89805e47e145?source=rss------bug_bounty-5 | Miraç Küçük | subdomain, bug-bounty, ffuf, brute-force, hack-the-box-writeup | 26-Mar-2024 |
| What is Cross-Site Scripting (XSS)? | https://medium.com/@bbhuntersa/cross-site-scripting-xss-b5d374fa6e43?source=rss------bug_bounty-5 | BBHUNTER | xss-vulnerability, cross-site-scripting, bug-bounty, xss-attack | 26-Mar-2024 |
| Exploiting Post Reflected XSS via CSRF : Real world bug | https://medium.com/@Rahulkrishnan_R_Panicker/exploiting-post-reflected-xss-via-csrf-real-world-bug-f374afeb081e?source=rss------bug_bounty-5 | Rahulkrishnan R Panicker | xss-attack, hacking, bug-bounty, csrf, web-development | 25-Mar-2024 |
| Zero Interaction Mass Account Password Reset Vulnerability | https://medium.com/@manan_sanghvi/zero-interaction-mass-account-password-reset-vulnerability-86b87098e3ae?source=rss------bug_bounty-5 | Manan Sanghvi | penetration-testing, ethical-hacking, bug-bounty, vulnerability, cybersecurity | 25-Mar-2024 |
| XSS module HTB academy CBBH path | https://medium.com/@mohammed01550038865/xss-module-htb-academy-cbbh-path-dc3ac4810087?source=rss------bug_bounty-5 | Muhammed Mubarak | bug-bounty, htb-academy-writeup, xss-vulnerability | 25-Mar-2024 |
| Reverse Engineering Sitecore Vulnerabilities-2 | https://medium.com/@nilayp799/reverse-engineering-sitecore-vulnerabilities-2-dcf45a501894?source=rss------bug_bounty-5 | Nilay Patel | sitecore, vulnerability, bug-bounty, automation, hacking | 25-Mar-2024 |
| 13.20 Lab: DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded |… | https://cyberw1ng.medium.com/13-20-lab-dom-xss-in-angularjs-expression-with-angle-brackets-and-double-quotes-html-encoded-7966911c58f4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, hacking, bug-bounty, penetration-testing | 25-Mar-2024 |
| Burp Suite — ¿Confiar o no en Project Files? | https://medium.com/@ArtsSEC/burp-suite-confiar-o-no-en-project-files-de5fa145f4a5?source=rss------bug_bounty-5 | ArtsSEC | hacking, burpsuite, infosec, pentesting, bug-bounty | 25-Mar-2024 |
| COMMAND INJECTIONS | https://medium.com/@mirackucuk595/command-injections-9ef2aef0fa97?source=rss------bug_bounty-5 | Miraç Küçük | command-injection, bug-bounty, hackthebox, burpsuite, injection | 25-Mar-2024 |
| Unveiling Homoglyph: Silent Culprit of User-Level DOS Attacks | https://medium.com/@imusabkhan/unveiling-homoglyph-silent-culprit-of-user-level-dos-attacks-86a0576bca3a?source=rss------bug_bounty-5 | Mohammad Musab Khan | bug-hunting, hackerone, bug-bounty, bugcrowd, bug-bounty-tips | 25-Mar-2024 |
| [Account Take Over] through reset password token leaked in response, 2500 € Reward | https://infosecwriteups.com/account-take-over-through-reset-password-token-leaked-in-response-2500-reward-b643f97a7c67?source=rss------bug_bounty-5 | jedus0r | bug-bounty-hunter, security-research, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 25-Mar-2024 |
| How I found Account Takeover by changing email address | https://medium.com/@mohddanish9536/how-i-found-account-takeover-by-changing-email-address-b0dc213e2df3?source=rss------bug_bounty-5 | Mohd Danish | bug-bounty, cybersecurity, bugs | 24-Mar-2024 |
| 13.19 Lab: DOM XSS in document.write | https://cyberw1ng.medium.com/13-19-lab-dom-xss-in-document-write-dddced06def8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, penetration-testing, bug-bounty, careers, hacking | 24-Mar-2024 |
| HTTP Verb Tampering | https://medium.com/@mirackucuk595/http-verb-tampering-4505d6491c95?source=rss------bug_bounty-5 | Miraç Küçük | web-attack, http-request, command-injection, bug-bounty, burpsuite | 24-Mar-2024 |
| How to get started in Bug Bounty in 2024! | https://medium.com/@FoxxCB/how-to-get-started-in-bug-bounty-in-2024-708754094de9?source=rss------bug_bounty-5 | Foxx C-B | hacking, infosec, bug-bounty, cybersecurity, ethical-hacking | 24-Mar-2024 |
| Cloudflare WAF Hunting | https://medium.com/@Device1306/cloudflare-waf-hunting-e878588488c8?source=rss------bug_bounty-5 | Device1306 | research, bug-bounty-tips, hacking, burpsuite, bug-bounty | 24-Mar-2024 |
| Cookie Theft Deep Dive | https://cyberbull.medium.com/cookie-theft-deep-dive-3fe6d6be2d60?source=rss------bug_bounty-5 | Aditya Pandey | bug-bounty, information-technology, ethical-hacking, security, cybersecurity | 23-Mar-2024 |
| A list of Bug Bounty/Crowdsourced Security Platforms: | https://medium.com/@mashunter/a-list-of-bug-bounty-crowdsourced-security-platforms-15ecd2ab6d4a?source=rss------bug_bounty-5 | MAS Hunter | bug-bounty-program, bug-bounty, hacker, pentest | 23-Mar-2024 |
| Hacking the Giant: How I Discovered Google’s Vulnerability and Hall of Fame Recognition | https://medium.com/@hncaga/hacking-the-giant-how-i-discovered-googles-vulnerability-and-hall-of-fame-recognition-694a9c18684a?source=rss------bug_bounty-5 | Henry N. Caga (hncaga) | bug-bounty, vulnerability, google, xs, hacking | 23-Mar-2024 |
| hello | https://medium.com/@r.paulopereira123/hello-80ea07cbc757?source=rss------bug_bounty-5 | bretsadlea | hacking, ethical-hacking, bug-hunter, bug-bounty | 23-Mar-2024 |
| Edge-Side Includes (ESI) Injection In Web Applications | https://adipsharif.medium.com/edge-side-includes-esi-injection-in-web-applications-2630139b6c19?source=rss------bug_bounty-5 | ADIP | pentesting, bug-bounty-tips, infosec, information-security, bug-bounty | 23-Mar-2024 |
| SSI Injection In web applications with a (exploitation example) | https://adipsharif.medium.com/techniques-of-finding-ssi-injection-in-web-applications-with-a-exploitation-example-cad960f3d791?source=rss------bug_bounty-5 | ADIP | bug-bounty-tips, penetration-testing, information-security, bug-bounty, infosec | 23-Mar-2024 |
| Beyond RAM and ROM: IDOR Leads to Unauthenticated File Upload Vulnerability in Indian Government… | https://systemweakness.com/beyond-ram-and-rom-idor-leads-to-unauthenticated-file-upload-vulnerability-in-indian-government-51efb80bcf50?source=rss------bug_bounty-5 | Vedavyasan S (@ved4vyasan) | bug-bounty, bug-bounty-tips, hacking, cybersecurity, bugs | 23-Mar-2024 |
| 1500$: CR/LF Injection | https://medium.com/@a13h1/1500-cr-lf-injection-0d2a75f02ef3?source=rss------bug_bounty-5 | Abhi Sharma | programming, hacking, cybersecurity, bug-bounty, crlf-injection | 23-Mar-2024 |
| Web Security Short Series — XXE | https://medium.com/@frankyyano/web-security-short-series-xxe-64492ed1d893?source=rss------bug_bounty-5 | Yano. | xxe, bug-bounty, xml, oscp, appsec | 23-Mar-2024 |
| TEXAS BUG SWEEPS 65,000 BUGS DETECTED | https://medium.com/@siddiquiasad2299/texas-bug-sweeps-65-000-bugs-detected-a00ae73014b6?source=rss------bug_bounty-5 | Asad Siddiqui | texas-bug-sweeps, bug-sweep, bug-bounty, bug-detection | 23-Mar-2024 |
| How i get my bounty $$$ in YesWehack within 5mins? | https://medium.com/@hacdoc/how-i-get-my-bounty-in-yeswehack-within-5mins-16706bb827e0?source=rss------bug_bounty-5 | ஜெய் | hacking, cybersecurity, s3, bug-bounty, amazon | 23-Mar-2024 |
| How we can check the Security Provider in Android applications during Pentesting (The Offensive… | https://adipsharif.medium.com/how-we-can-check-the-security-provider-in-android-applications-during-pentesting-the-offensive-87c411c5d7ac?source=rss------bug_bounty-5 | ADIP | pentesting, android-app-development, androiddev, android, bug-bounty | 23-Mar-2024 |
| 13.18 Lab: DOM XSS in jQuery selector sink using a hashchange event | 2024 | https://cyberw1ng.medium.com/13-18-lab-dom-xss-in-jquery-selector-sink-using-a-hashchange-event-2024-e990fc2ae28f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, cybersecurity, penetration-testing, bug-bounty | 23-Mar-2024 |
| How To Test Data Encryption on the Network During Android Pentesting | https://adipsharif.medium.com/how-to-test-data-encryption-on-the-network-during-android-pentesting-0b9d3407068f?source=rss------bug_bounty-5 | ADIP | infosec-write-ups, info-sec-writeups, pentesting, information-security, bug-bounty | 23-Mar-2024 |
| Attacking XSLT in Web Applications | https://adipsharif.medium.com/attacking-xslt-in-web-applications-ea538a8fb9d0?source=rss------bug_bounty-5 | ADIP | pentesting, information-security, bug-bounty-writeup, bug-bounty, infosec | 23-Mar-2024 |
| SSTI Exploitation Part III In Web Applications (with exploitation example) | https://adipsharif.medium.com/ssti-exploitation-part-iii-in-web-applications-with-exploitation-example-6856b89b0efb?source=rss------bug_bounty-5 | ADIP | penetration-testing, infosec, bug-bounty-tips, information-security, bug-bounty | 23-Mar-2024 |
| FILE UPLOAD ATTACKS | https://medium.com/@mirackucuk595/file-upload-attacks-e5175a653d32?source=rss------bug_bounty-5 | Miraç Küçük | web-attack, file-upload, bug-bounty, https, burpsuite | 23-Mar-2024 |
| SSTI Exploitation Part II In Web Applications (with exploitation example) | https://adipsharif.medium.com/ssti-exploitation-part-ii-in-web-applications-with-exploitation-example-490192e7e966?source=rss------bug_bounty-5 | ADIP | information-security, pentesting, penetration-testing, bug-bounty, infosec | 23-Mar-2024 |
| Bruteforce Website Login Form Using Hydra And Crunch | https://medium.com/@OthmaneAitBouftass/bruteforce-attack-using-hydra-and-crunch-8b48ea9e36ce?source=rss------bug_bounty-5 | Othmane Ait Bouftass | cybersecurity, bug-bounty, penetration-testing, hacking, ethical-hacking | 23-Mar-2024 |
| Making money only using AI [Free Course] | https://medium.com/@deadoverflow/making-money-only-using-ai-free-course-e7c51d33fee1?source=rss------bug_bounty-5 | Imad Husanovic | web-development, hacking, ai, bug-bounty, programming | 22-Mar-2024 |
| Unveiling Admin Panels: A Bug Bounty Hunter’s Guide | https://medium.com/@dasmanish6176/unveiling-admin-panels-a-bug-bounty-hunters-guide-6e713ae18b2c?source=rss------bug_bounty-5 | Dasmanish | bug-bounty, infosec, ethical-hacking, cybersecurity | 22-Mar-2024 |
| 13.17 Lab: Stored XSS into anchor href attribute with double quotes HTML-encoded | 2024 | https://cyberw1ng.medium.com/13-17-lab-stored-xss-into-anchor-href-attribute-with-double-quotes-html-encoded-2024-ebbe53b33015?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, hacking, penetration-testing, cybersecurity | 22-Mar-2024 |
| AutoLayer is Starting a Bug Bounty Program | https://autolayer.medium.com/autolayer-is-starting-a-bug-bounty-program-dfb59584a0ee?source=rss------bug_bounty-5 | AutoLayer | crypto, defi, bug-bounty | 22-Mar-2024 |
| Unveiling The Techniques Of Finding Blind & Time based SSRF In Web Applications (with a… | https://adipsharif.medium.com/unveiling-the-techniques-of-finding-blind-ssrf-in-web-applications-with-a-exploitation-example-9e36a78ccca6?source=rss------bug_bounty-5 | ADIP | bug-bounty-tips, bug-bounty, information-security, pentesting, penetration-testing | 22-Mar-2024 |
| 5 Advanced Ways I Test For File Upload Vulnerabilities | https://medium.com/@red.whisperer/5-advanced-ways-i-test-for-file-upload-vulnerabilities-5b01358f87d1?source=rss------bug_bounty-5 | RedPanda | bug-bounty, infosec, red-team, hacking | 22-Mar-2024 |
| Understanding Subdomain Squatting | https://bytebusterx.medium.com/understanding-subdomain-squatting-9d61f8c432fc?source=rss------bug_bounty-5 | ByteBusterX | hacking, infosec, cybersecurity, bug-bounty, cyberattack | 22-Mar-2024 |
| How i found my first 318.39$ bugs! | https://cyberbh.medium.com/how-i-found-my-first-318-39-bugs-10ccd2379320?source=rss------bug_bounty-5 | Msecurity BH | bug-bounty, information-exposure, penetration-testing, security-misconfiguration, api | 22-Mar-2024 |
| Unveiling The Techniques Of Testing Endpoint Identify Verification In Android Applications | https://adipsharif.medium.com/unveiling-the-techniques-of-testing-endpoint-identify-verification-in-android-applications-2a8186091296?source=rss------bug_bounty-5 | ADIP | information-security, bug-bounty, android-app-development, penetration-testing, pentesting | 22-Mar-2024 |
| ABUSING HTTP MISCONFIGURATIONS (HTTP YANLIŞ YAPILANDIRMALARININ KÖTÜYE KULLANILMASI) | https://medium.com/@mirackucuk595/abusing-http-misconfigurations-http-yanli%C5%9F-yapilandirmalarinin-k%C3%B6t%C3%BCye-kullanilmasi-2ebbf38b2622?source=rss------bug_bounty-5 | Miraç Küçük | https, burpsuite, bug-bounty, web-attack, http-request | 22-Mar-2024 |
| Javascript deobfuscation the easy way | https://medium.com/@jad2121/javascript-deobfuscation-the-easy-way-637d7e9b2952?source=rss------bug_bounty-5 | JD | bug-bounty, bug-bounty-tips, javascript-obfuscate | 22-Mar-2024 |
| Unveiling the One-Click Account Takeover: It Started with an Innocent Open Redirect | https://medium.com/@hmuhamm3d/unveiling-the-one-click-account-takeover-it-started-with-an-innocent-open-redirect-9f4942ddf03f?source=rss------bug_bounty-5 | Hassaan Mohamed | bug-bounty, bug-bounty-hunter, account-takeover, bugbounty-writeup, bug-bounty-tips | 22-Mar-2024 |
| Critical Vulnerability in PostgreSQL JDBC Driver — Understanding CVE-2024–1597 | https://shubhamrooter.medium.com/critical-vulnerability-in-postgresql-jdbc-driver-understanding-cve-2024-1597-81ac202c295e?source=rss------bug_bounty-5 | Shubham Tiwari | bug-bounty, cybersecurity, jdbc-driver, postgresql, cve-2024-1597 | 21-Mar-2024 |
| Digital Goldmine: Innovative Ways to Make Money Online in 2024 | https://medium.com/@thewriterdude/digital-goldmine-innovative-ways-to-make-money-online-in-2024-c7d33d655535?source=rss------bug_bounty-5 | Thewriterdude | business, bug-bounty, artificial-intelligence, 100-followers, blockchain | 21-Mar-2024 |
| User information disclosure via message reactions | https://melguerdawi.medium.com/user-information-disclosure-via-message-reactions-1576a6b0f236?source=rss------bug_bounty-5 | Mostafa Elguerdawi | bug-bounty, bug-bounty-tips | 21-Mar-2024 |
| Major Update for Attack Surface Discovery tool | https://netlas.medium.com/major-update-for-attack-surface-discovery-tool-4ed4f1bc80fb?source=rss------bug_bounty-5 | Netlas.io | bug-bounty, penetration-testing, cybersecurity, reconnaissance, osint | 21-Mar-2024 |
| Vulnerability Disclosure vs Bug Bounty: What’s the difference and why it matters | https://medium.com/@levente.b.molnar/vulnerability-disclosure-vs-bug-bounty-whats-the-difference-and-why-it-matters-ce99be906b1c?source=rss------bug_bounty-5 | Hackrate | bug-bounty, security, vulnerability-disclosure, cybersecurity, penetration-testing | 21-Mar-2024 |
| Best Practices for Web3 Bug Bounty Programs | https://medium.com/@auditone.io/best-practices-for-web3-bug-bounty-programs-e333992aee9f?source=rss------bug_bounty-5 | AuditOne | auditing-services, web3, bug-bounty-tips, bug-bounty, audit | 21-Mar-2024 |
| Unveiling The Techniques Of Finding Server-Side Request Forgery (SSRF) In Web Applications (with a… | https://adipsharif.medium.com/unveiling-the-techniques-of-finding-server-side-request-forgery-ssrf-in-web-applications-with-a-2ac1dd20ef87?source=rss------bug_bounty-5 | ADIP | pentesting, bug-bounty, information-security, bug-bounty-tips, cybersecurity | 21-Mar-2024 |
| urit13.16 Lab: DOM XSS in jQuery anchor href attribute sink using location.search source | 2024 | https://cyberw1ng.medium.com/urit13-16-lab-dom-xss-in-jquery-anchor-href-attribute-sink-using-location-search-source-2024-8f8df8703aef?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, cybersecurity, hacking, penetration-testing | 21-Mar-2024 |
| Buy Any Movie Tickets for Just Rs 10 (IDOR Vulnerability) | https://medium.com/@sahilkushwaha275/buy-any-movie-tickets-for-just-rs-10-idor-vulnerability-670d03a45def?source=rss------bug_bounty-5 | S33NU | bugs, idor-vulnerability, bug-bounty, technology, cybersecurity | 21-Mar-2024 |
| How I found my first DOM based XSS | https://medium.com/@jsamia/how-i-found-my-first-dom-based-xss-a79f342d50d6?source=rss------bug_bounty-5 | Jaeden Samia | bug-bounty, ethical-hacking, security, vulnerability | 21-Mar-2024 |
| Automate XSS With These 3 Simple Tools | https://medium.com/@Ajakcybersecurity/automate-xss-with-these-3-simple-tools-e0dcc89c06d0?source=rss------bug_bounty-5 | AjakCybersecurity | penetration-testing, cybersecurity, hacking, bug-bounty, xss-attack | 21-Mar-2024 |
| Frida Use Cases and Examples | https://medium.com/@prinsharma1999/frida-use-cases-and-examples-984f9a2ddc69?source=rss------bug_bounty-5 | Prinsharma | bug-bounty, bug-bounty-tips, hacking, pentest, infosec | 21-Mar-2024 |
| 403 Forbidden Bypass Exposing API Key | https://medium.com/@georgeppmc/403-forbidden-bypass-exposing-api-key-b5c9df9daeb3?source=rss------bug_bounty-5 | George Torres | cybersecurity, bug-bounty | 21-Mar-2024 |
| A Tester's Journey Through Test Automation and Practical Scenarios. | https://medium.com/@tomiwaodufote/a-testers-journey-through-test-automation-and-practical-scenarios-dfb9f7074062?source=rss------bug_bounty-5 | Tomiwa | remote-work, test-automation, bug-bounty, testing, software-engineering | 20-Mar-2024 |
| Reflected XSS To Account Takeover Without Stealing Session Cookie | https://medium.com/@rifqihz/reflected-xss-to-account-takeover-without-stealing-session-cookie-89c6ed62a3e4?source=rss------bug_bounty-5 | Rifqi Hilmy Zhafrant | xs, hackerone, bug-bounty | 20-Mar-2024 |
| ABUSING HTTP MISCONFIGURATIONS (HTTP YANLIŞ YAPILANDIRMALARININ KÖTÜYE KULLANILMASI) | https://medium.com/@mirackucuk595/abusing-http-misconfigurations-http-yanli%C5%9F-yapilandirmalarinin-k%C3%B6t%C3%BCye-kullanilmasi-428333a3ddc6?source=rss------bug_bounty-5 | Miraç Küçük | burpsuite, web-attack, https, bug-bounty, web-cache | 20-Mar-2024 |
| The Art of Debugging: Tips and Tricks for Finding the Root Cause of Bugs | https://medium.com/@securelearn/the-art-of-debugging-tips-and-tricks-for-finding-the-root-cause-of-bugs-c1d9e4b9e04a?source=rss------bug_bounty-5 | Rohan Giri | debugging, bug-finding, bug-bounty-tips, bug-bounty | 20-Mar-2024 |
| H@ppy H@cking Psychomong | https://medium.com/@psychomong/h-ppy-h-cking-psychomong-335f9049aca9?source=rss------bug_bounty-5 | psychomong | cyber, cybersecurity, bug-bounty-tips, bug-bounty, bugs | 20-Mar-2024 |
| Recon With AI | https://medium.com/@patidarbhuwan44/recon-with-ai-c211623604e8?source=rss------bug_bounty-5 | Bhuwan Patidar | bug-bounty, recon, reconnaissance, bug-bounty-tips | 20-Mar-2024 |
| Reflected XSS with some SVG markup allowed | https://medium.com/@ebrahimelsayed4457/reflected-xss-with-some-svg-markup-allowed-74851ff591d5?source=rss------bug_bounty-5 | Ebrahim El-Sayed | cybersecurity, bug-bounty, portswigger, xss-attack, penetration-testing | 20-Mar-2024 |
| $200 Business Logic Blunder In Sole Source Project | https://medium.com/@_0jatin0_/200-business-logic-blunder-in-sole-source-project-99a7bbe0d2f0?source=rss------bug_bounty-5 | Jatin_Chudasama | bug-bounty-writeup, logic-flaw, bug-bounty | 20-Mar-2024 |
| The Art Of Probing Memory for Sensitive Data In Android Applications (The Offensive Security Way) | https://medium.com/@adipsharif/the-art-of-probing-memory-for-sensitive-data-in-android-applications-the-offensive-security-way-6aca19ce522f?source=rss------bug_bounty-5 | ADIP | bug-bounty, penetration-testing, information-security, cybersecurity, infosec | 20-Mar-2024 |
| Why Bug Bounty is Trending? | https://medium.com/@shivyanshi.shukla/why-bug-bounty-is-trending-c981e7c28423?source=rss------bug_bounty-5 | Shivyanshi shukla | bug-bounty, cybersecurity | 20-Mar-2024 |
| IDOR to make comment in user’s private posts | https://medium.com/@youssifm.raghib/idor-to-make-comment-in-users-private-posts-47d13b843c32?source=rss------bug_bounty-5 | Youssif M Raghib | bug-bounty-tips, bug-bounty, bug-hunter, bug-hunting | 20-Mar-2024 |
| No rate limit in comments with IDOR | https://medium.com/@youssifm.raghib/no-rate-limit-in-comments-with-idor-d8904f3db588?source=rss------bug_bounty-5 | Youssif M Raghib | bug-bounty, bugs, bug-hunting | 20-Mar-2024 |
| Electrum-Dime Beta Launch: A New Era for Dimecoin | https://dimecoinnetwork.medium.com/electrum-dime-beta-launch-a-new-era-for-dimecoin-72b5740598d4?source=rss------bug_bounty-5 | Dimecoin Network | development, dimecoin, blockchain, bug-bounty, cryptocurrency | 20-Mar-2024 |
| Behind the Bug Report: From Overlooked to Overhauled | https://interc3pt3r.medium.com/behind-the-bug-report-from-overlooked-to-overhauled-94a9e5595a8a?source=rss------bug_bounty-5 | Aneesha D | cybersecurity, security, web-applications, bug-bounty, hacking | 20-Mar-2024 |
| Mantente al tanto de las actualizaciones. ¿Qué representan el punto azul y rojo en Burp Suite? | https://medium.com/@ArtsSEC/mantente-al-tanto-de-las-actualizaciones-qu%C3%A9-representan-el-punto-azul-y-rojo-en-burp-suite-1da1a5c74f16?source=rss------bug_bounty-5 | ArtsSEC | burpsuite, bug-bounty, vulnerability, pentesting, hacking | 20-Mar-2024 |
| 13.15 Lab: Reflected XSS into HTML context with all tags blocked except custom ones | 2024 | https://cyberw1ng.medium.com/13-15-lab-reflected-xss-into-html-context-with-all-tags-blocked-except-custom-ones-2024-ca34eec89d88?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, hacking, penetration-testing, cybersecurity | 20-Mar-2024 |
| The Art Of Testing Symmetric Cryptography During Pentesting Android Applications | https://medium.com/@adipsharif/the-art-of-testing-symmetric-cryptography-during-pentesting-android-applications-154dbab795d7?source=rss------bug_bounty-5 | ADIP | bug-bounty, cybersecurity, android, bug-bounty-tips, penetration-testing | 20-Mar-2024 |
| Checking Backups For Sensitive Data in Android Applications (The Offensive Security Way) | https://medium.com/@adipsharif/checking-backups-for-sensitive-data-in-android-applications-the-offensive-security-way-95bd8820b84e?source=rss------bug_bounty-5 | ADIP | penetration-testing, bug-bounty, android, cybersecurity, android-app-development | 20-Mar-2024 |
| Why Regular Security Sweeps Are Crucial for Business Success | https://medium.com/@siddiquiasad2299/why-regular-security-sweeps-are-crucial-for-business-success-7de57c663ca7?source=rss------bug_bounty-5 | Asad Siddiqui | tscm-services-bug-sweeps, bug-bounty, bug-detection | 20-Mar-2024 |
| Passlord: Your Ultimate Weapon for Creating Tailored Wordlists | https://navnee1h.medium.com/passlord-your-ultimate-weapon-for-creating-tailored-wordlists-924a491e9a0f?source=rss------bug_bounty-5 | Navaneeth M S | hacking, bug-bounty, passwords, cybersecurity, wordlist | 20-Mar-2024 |
| Bypassing an IDOR A couple of times — $$$$ | https://medium.com/@bxrowski0x/bypassing-an-idor-a-couple-of-times-4d67555a1545?source=rss------bug_bounty-5 | Omar ElSayed | bug-bounty-tips, idor, cybersecurity, bug-bounty-writeup, bug-bounty | 20-Mar-2024 |
| Biometric Authentication Bypass In Android Applications (The Offensive Security Way) | https://medium.com/@adipsharif/biometric-authentication-bypass-in-android-applications-the-offensive-security-way-c37d89b06db2?source=rss------bug_bounty-5 | ADIP | android-app-development, bug-bounty, penetration-testing, android, androiddev | 20-Mar-2024 |
| How We Can Check Configuration of Cryptographic Standard Algorithms & Random Number Generation… | https://medium.com/@adipsharif/how-we-can-check-configuration-of-cryptographic-standard-algorithms-random-number-generation-000cf9bfdb64?source=rss------bug_bounty-5 | ADIP | hacking, cybersecurity, bug-bounty, pentesting, bug-bounty-tips | 20-Mar-2024 |
| Detecting Cyber Threats with Resemble.js: Safeguarding Digital Assets through Image Analysis | https://medium.com/@corymack34/detecting-cyber-threats-with-resemble-js-safeguarding-digital-assets-through-image-analysis-9e2f3427f8ed?source=rss------bug_bounty-5 | Cory Mack | steganalysis, threat-detection, bug-bounty, cybersecurity, image-analysis | 20-Mar-2024 |
| Biometric Authentication Bypass In Android Applications (The Offensive Security Way) | https://adipsharif.medium.com/biometric-authentication-bypass-in-android-applications-the-offensive-security-way-c37d89b06db2?source=rss------bug_bounty-5 | ADIP | android-app-development, bug-bounty, penetration-testing, android, androiddev | 20-Mar-2024 |
| Evaluate, apply, and sustain security governance principles ! | https://infosecwriteups.com/evaluate-apply-and-sustain-security-governance-principles-1e038a02423a?source=rss------bug_bounty-5 | Paritosh | security-governance, information-technology, cissp, bug-bounty, cybersecurity | 19-Mar-2024 |
| The Ultimate Guide to Red Teaming: Inside “A-poc/RedTeam-Tools” | https://infosecwriteups.com/the-ultimate-guide-to-red-teaming-inside-a-poc-redteam-tools-69645572cf0f?source=rss------bug_bounty-5 | ElNiak | red-team, bug-bounty, github, penetration-testing, cybersecurity | 19-Mar-2024 |
| 3 Step Find Critical Bug In Bug Bounty — Bug Bounty Tuesday | https://medium.com/@kerstan/3-step-find-critical-bug-in-bug-bounty-bug-bounty-tuesday-99011ec2cf27?source=rss------bug_bounty-5 | kerstan | security, technology, cybersecurity, hacking, bug-bounty | 19-Mar-2024 |
| Hunting JavaScript File for Bug Hunters | https://vivek-ghinaiya.medium.com/hunting-javascript-file-for-bug-hunters-e8b278a1306a?source=rss------bug_bounty-5 | Vivek Ghinaiya | bug-hunting, bug-bounty, bug-bounty-writeup, javascript, bug-bounty-tips | 19-Mar-2024 |
| Finding the hidden function led to a $300 IDOR | https://infosecwriteups.com/finding-the-hidden-function-led-to-a-300-idor-d37219c66d03?source=rss------bug_bounty-5 | M7arm4n | bug-bounty-tips, bug-bounty, hacking, hacker, security | 19-Mar-2024 |
| CVE-2024–28436 Cross-Site Scripting Vulnerability in D-Link DAP Products | https://djallalakira.medium.com/cve-2024-28436-cross-site-scripting-vulnerability-in-d-link-dap-products-3596976cc99f?source=rss------bug_bounty-5 | Djallalakira | bug-bounty, cybersecurity, bug-bounty-writeup | 19-Mar-2024 |
| IDOR to read all user’s private route comments | https://medium.com/@youssifm.raghib/idor-to-read-all-users-private-route-comments-e97120d43262?source=rss------bug_bounty-5 | Youssif M Raghib | cybersecurity, bug-bounty, bug-bounty-tips | 19-Mar-2024 |
| Get allmost all subdomains | https://medium.com/@petrukhin.s.a/get-allmost-all-subdomains-5694dcc3cb60?source=rss------bug_bounty-5 | Sergei Petrukhin | subdomain, bug-bounty, subdomains-enumeration, bug-bounty-tips | 19-Mar-2024 |
| 13.14 Lab: Reflected XSS into HTML context with most tags and attributes blocked | 2024 | https://cyberw1ng.medium.com/13-14-lab-reflected-xss-into-html-context-with-most-tags-and-attributes-blocked-2024-7e2106ef89b2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, penetration-testing, cybersecurity, hacking | 19-Mar-2024 |
| The Art Of Unveiling Logs for Sensitive Data In Android Applications (The Offensive Security Way) | https://medium.com/@adipsharif/the-art-of-unveiling-logs-for-sensitive-data-in-android-applications-the-offensive-security-way-9c823532d004?source=rss------bug_bounty-5 | ADIP | cybersecurity, bug-bounty, application-security, penetration-testing, bug-bounty-tips | 19-Mar-2024 |
| HackTheBox — Information Gathering: Active Enumeration | https://medium.com/@harry.hphu/hackthebox-information-gathering-active-enumeration-e43481ef85f9?source=rss------bug_bounty-5 | Huy Phu | subdomains-enumeration, hackthebox, enumeration, bug-bounty, information-gathering | 19-Mar-2024 |
| Unleashing Chaos: The Tale of the 0-Click Account Takeover | https://medium.com/@hmuhamm3d/unleashing-chaos-the-tale-of-the-0-click-account-takeover-21c2cedabc4b?source=rss------bug_bounty-5 | Hassaan Mohamed | penetration-testing, bug-bounty, account-takeover, bugswagger, infosec-write-ups | 19-Mar-2024 |
| The Art Of Determining Whether Sensitive Data Is Shared with Third Parties via Embedded Services … | https://medium.com/@adipsharif/the-art-of-determining-whether-sensitive-data-is-shared-with-third-parties-via-embedded-services-beba2856ef96?source=rss------bug_bounty-5 | ADIP | bug-bounty-tips, cybersecurity, penetration-testing, bug-bounty, hacking | 19-Mar-2024 |
| Medium Member Friend Links bug | https://karol-mazurek.medium.com/medium-member-friend-links-bug-b1d0020fbe39?source=rss------bug_bounty-5 | Karol Mazurek | medium, information-technology, penetration-testing, cybersecurity, bug-bounty | 18-Mar-2024 |
| [Bug Bounty]xlsx 上传导致 XXE 漏洞 | https://medium.com/@_thorns/bug-bounty-xlsx-%E4%B8%8A%E4%BC%A0%E5%AF%BC%E8%87%B4-xxe-%E6%BC%8F%E6%B4%9E-e0615bee6af6?source=rss------bug_bounty-5 | _thorns | bug-bounty | 18-Mar-2024 |
| Burpsuite Beginners Guide | https://medium.com/@OthmaneAitBouftass/burpsuite-beginners-guide-6bc7a08ca8f7?source=rss------bug_bounty-5 | Othmane Ait Bouftass | web-security, penetration-testing, bug-bounty, cybersecurity, ethical-hacking | 18-Mar-2024 |
| LAMPSecurity CTF5 Walkthrough | https://erdemstar.medium.com/lampsecurity-ctf5-walkthrough-d24f67a5fd63?source=rss------bug_bounty-5 | Erdemstar | oscp-preparation, penetration-testing, bug-bounty, vulnhub-walkthrough, vulnhub | 18-Mar-2024 |
| Subdomain Fuzzing worth 35k bounty! | https://medium.com/@HX007/subdomain-fuzzing-worth-35k-bounty-daebcb56d9bc?source=rss------bug_bounty-5 | HX007 | cybersecurity, bug-bounty | 18-Mar-2024 |
| Happy H@cking Psychomong | https://medium.com/@psychomong/trhappy-h-cking-psychomong-bfa566350a01?source=rss------bug_bounty-5 | Psychomong | hacking-tools, hacking, research, bug-bounty, bounty-program | 18-Mar-2024 |
| 13.13 Lab: Stored DOM XSS Cross Site Scripting | 2024 | https://cyberw1ng.medium.com/13-13-lab-stored-dom-xss-cross-site-scripting-2024-f4c9a21ea262?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, penetration-testing, hacking, cybersecurity | 18-Mar-2024 |
| Security.txt Nedir ? | https://medium.com/@ozanbozkurt1974/security-txt-nedir-d7d38a069cd8?source=rss------bug_bounty-5 | ozan bozkurt | security, bug-bounty, cybersecurity, red-team | 18-Mar-2024 |
| Orderly Network: Unleashing Creativity in the DeFi Ecosystem through the Scaling Web3 Hackathon | https://medium.com/@orderlynetwork/orderly-network-unleashing-creativity-in-the-defi-ecosystem-through-the-scaling-web3-hackathon-5cd75096ecba?source=rss------bug_bounty-5 | Orderly Network (,) | encode-club, orderly-network, bug-bounty, defi, blockchain-development | 18-Mar-2024 |
| Web Security Short Series — SQLi. | https://medium.com/@frankyyano/web-security-short-series-sqli-f222f04431a6?source=rss------bug_bounty-5 | Yano. | oscp, appsec, bug-bounty, sqli, sql | 18-Mar-2024 |
| XML External Entity (XXE) attack | https://bytebusterx.medium.com/xml-external-entity-xxe-attack-69f7b268be01?source=rss------bug_bounty-5 | ByteBusterX | vulnerability, bug-bounty, infosec, web-security | 18-Mar-2024 |
| Happy H@cking Psychomong | https://medium.com/@psychomong123/trhappy-h-cking-psychomong-bfa566350a01?source=rss------bug_bounty-5 | Psychomong123 | hacking-tools, hacking, research, bug-bounty, bounty-program | 18-Mar-2024 |
| Understanding Injection Attacks: A Deep Dive into OWASP’s Top Vulnerability | https://osintteam.blog/understanding-injection-attacks-a-deep-dive-into-owasps-top-vulnerability-7d59e3535187?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, hacking, owasp, injection-attacks | 17-Mar-2024 |
| Bug Zero at a Glance [01–15 March] | https://blog.bugzero.io/bug-zero-at-a-glance-01-15-march-ba1ba88870ee?source=rss------bug_bounty-5 | Januka Dharmapriya | sri-lanka, newsletter, cybersecurity, bug-zero, bug-bounty | 17-Mar-2024 |
| Bug Bounty Platforms are a Scam [Mostly] | https://medium.com/@hacktheplanet/bug-bounty-platforms-are-a-scam-mostly-ea53fe54c53d?source=rss------bug_bounty-5 | HackthePlanet - A Hacker's Blog. | cybersecurity, scams-to-avoid, bug-bounty, hacking, bug-hunting | 17-Mar-2024 |
| My Journey into Bug Bounty: Revealing My First Successful Discovery | https://medium.com/@kajol_singh/my-journey-into-bug-bounty-revealing-my-first-successful-discovery-81b5d2efcbde?source=rss------bug_bounty-5 | Kajol Kumari | bug-bounty-tips, bounty-program, bug-bounty, developer, cybersecurity | 17-Mar-2024 |
| Skipping the email verification is Good (or) Bad? | https://medium.com/@Alex_crypto/skipping-the-email-verification-is-good-or-bad-ef045dc8d3ed?source=rss------bug_bounty-5 | Alex_Crypto | bug-bounty, security-analytics, hacking | 17-Mar-2024 |
| Mastering XSS: A Comprehensive Guide to Finding Cross-Site Scripting Vulnerabilities | https://cyberw1ng.medium.com/mastering-xss-a-comprehensive-guide-to-finding-cross-site-scripting-vulnerabilities-3891ab930274?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, hacking, penetration-testing | 17-Mar-2024 |
| How I found my first ever bug. | https://osintteam.blog/how-i-found-my-first-ever-bug-89fedb5a9b3c?source=rss------bug_bounty-5 | an0nbil | cybersecurity, technology, programming, javascript, bug-bounty | 17-Mar-2024 |
| Application Level DoS - Smoking with ‘null’ Again | https://shahjerry33.medium.com/application-level-dos-smoking-with-null-again-364ce16dad74?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | pentesting, cybersecurity, bug-bounty, vulnerability, infosec | 17-Mar-2024 |
| Redirecting a webpage from HTTP to HTTPS is safe and how to identify whether the webpage is safe or… | https://medium.com/@Alex_crypto/if-the-forgot-password-link-is-copied-and-pasted-into-the-new-tab-it-opens-in-http-and-directs-to-8e8f80c4a9f6?source=rss------bug_bounty-5 | Alex_Crypto | bug-bounty, security | 17-Mar-2024 |
| Bug Bounty Learning Path | https://bevijaygupta.medium.com/bug-bounty-learning-path-0c0015d6a71d?source=rss------bug_bounty-5 | Vijay Gupta | bugs, bug-bounty, bug-bounty-tips, bug-bounty-writeup, bug-zero | 17-Mar-2024 |
| Bug Bounty Platforms | https://bevijaygupta.medium.com/bug-bounty-platforms-499275d1d9b4?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-platforms, bugs, bug-bounty, bug-bounty-tips | 17-Mar-2024 |
| Bug Bounty Tutorial : Login Bypass Technique | https://rajput623929.medium.com/bug-bounty-tutorial-login-bypass-technique-d7508856b2a1?source=rss------bug_bounty-5 | Mr.Horbio | poc, bug-bounty, cybersecurity, ethical-hacking, pentesting | 17-Mar-2024 |
| I earned $1000 with IDOR’s vulnerability to PII leaks outside the platform. | https://aryasec.medium.com/i-earned-1000-with-idors-vulnerability-to-pii-leaks-outside-the-platform-65b1cbcfa26e?source=rss------bug_bounty-5 | Tengku Arya Saputra | idor, bugbounty-writeup, bug-bounty, idor-vulnerability | 17-Mar-2024 |
| How to make a living as a Hacker! | https://medium.com/@rafael.code77/how-to-make-a-living-as-a-hacker-ff8fafa98b0b?source=rss------bug_bounty-5 | Rafael Henrique | science, money, programming, bug-bounty, hacking | 16-Mar-2024 |
| https://medium.com/@morganbinbash/-25027f11f71e?source=rss------bug_bounty-5 | Morgan Bin Bash | pentesting, cybersecurity, bug-bounty, cyber-threat-intelligence | 16-Mar-2024 |
| Types of Cyber Attacks on Each OSI Layer | https://medium.com/@kumarsachin1642001/types-of-cyber-attacks-on-each-osi-layer-56e746dfa3b8?source=rss------bug_bounty-5 | sachin kumar | cybersecurity, hackerone, hacker, cyberattack, bug-bounty | 16-Mar-2024 |
| Tips to get your first bug/bounty | https://medium.com/@mr_prey3r/tips-to-get-your-first-bug-bounty-c5a862ad8567?source=rss------bug_bounty-5 | Rubayet Hasan aka MR_Prey3r | first-bug, bug-bounty, bug-bounty-tips, first-bounty, find-your-first-bug | 16-Mar-2024 |
| Bug Bounty Challenge: Day 7–16/03/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-7-16-03-2024-5c48ff96f9d0?source=rss------bug_bounty-5 | Wallotry | bug-bounty-writeup, bug-bounty, bug-bounty-tips, bug-bounty-hunter | 16-Mar-2024 |
| IDOR + Content Injection Penetration Testing Lesson 5 | https://medium.com/@or0to/idor-content-injection-penetration-testing-lesson-5-fe3bdce12f8f?source=rss------bug_bounty-5 | Ali Essam | security, penetration-testing, bug-bounty, cybersecurity, ali | 16-Mar-2024 |
| 13.12 Lab: Reflected DOM XSS — Cross Site Scripting | 2024 | https://infosecwriteups.com/13-12-lab-reflected-dom-xss-cross-site-scripting-2024-0dc98e91ae42?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, bug-bounty, careers, penetration-testing | 16-Mar-2024 |
| How Secure is Java’s SecureProcessing? | https://medium.com/@dub-flow/how-secure-is-javas-secureprocessing-ec49544a59ad?source=rss------bug_bounty-5 | Florian Walter | cybersecurity, application-security, java, code-review, bug-bounty | 16-Mar-2024 |
| How I was able to disclose the Users’ chats with AI chat Bot? | https://medium.com/@who1am1i999/how-i-was-able-to-disclose-the-users-chats-with-ai-chat-bot-c7d8b13ca713?source=rss------bug_bounty-5 | WHO AM I ? | information-security, fuzzing, bug-bounty, cybersecurity, information-disclosure | 15-Mar-2024 |
| Understanding Path Traversal Vulnerabilities: Risks and Mitigation | https://medium.com/@paritoshblogs/understanding-path-traversal-vulnerabilities-risks-and-mitigation-6149a506a65b?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-technology, hacking, cybersecurity, path-traversal | 15-Mar-2024 |
| Account takeover via Password reset | https://medium.com/@Rahulkrishnan_R_Panicker/account-takeover-via-password-reset-c2658e1f58eb?source=rss------bug_bounty-5 | Rahulkrishnan R Panicker | bug-bounty, cybersecurity, bugbounty-writeup, programming, bug-bounty-writeup | 15-Mar-2024 |
| I discovered a new way to bypass CSRF protection to achieve Account Takeover | https://medium.com/@vflexo/i-discovered-a-new-way-to-bypass-csrf-protection-to-achieve-account-takeover-73d1dff3c67a?source=rss------bug_bounty-5 | vFlexo | information-technology, bug-bounty, penetration-testing, vapt, ethical-hacking | 15-Mar-2024 |
| BugRap Ecosystem Panorama: Empowering Web3 Security Development | https://medium.com/@BugRap_Team/bugrap-ecosystem-panorama-empowering-web3-security-development-6cbe2f7adb24?source=rss------bug_bounty-5 | BugRap Team | web-development, bug-bounty, security, btc | 15-Mar-2024 |
| Exploring Bug Bounty Hunting as a Promising Career Choice for Cybersecurity Professionals | https://medium.com/mynextdeveloper/exploring-bug-bounty-hunting-as-a-promising-career-choice-for-cybersecurity-professionals-2015563daac8?source=rss------bug_bounty-5 | MyNextDeveloper | hacking, bug-bounty, cybersecurity, client-security, cyber | 15-Mar-2024 |
| 13.11 Lab: DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded |… | https://cyberw1ng.medium.com/13-11-lab-dom-xss-in-angularjs-expression-with-angle-brackets-and-double-quotes-html-encoded-d7188a250ad8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, hacking, careers, penetration-testing | 15-Mar-2024 |
| Reconnaissance: How GitDorks can power up your recon! | https://medium.com/@kieran.w/reconnaissance-how-gitdorks-can-power-up-your-recon-da3c5e412925?source=rss------bug_bounty-5 | Kieran W | gitdorking, reconnaissance, penetration-testing, bug-bounty, security-testing | 15-Mar-2024 |
| Bug Bounty Challenge: Day 6–15/03/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-6-15-03-2024-a5c6c1a67647?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 15-Mar-2024 |
| BChecks en Burp Suite Professional | https://medium.com/@ArtsSEC/bchecks-en-burp-suite-professional-5d8c4754349e?source=rss------bug_bounty-5 | ArtsSEC | burpsuite, development, penetration-testing, web-development, bug-bounty | 15-Mar-2024 |
| 13.10 Lab: DOM XSS in document.write | https://cyberw1ng.medium.com/13-10-lab-dom-xss-in-document-write-c702cd0bd743?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, careers, penetration-testing, hacking | 14-Mar-2024 |
| MRS #2: Bypassing premium features by checking “premium validation” parameters (€€€) | https://infosecwriteups.com/mrs-2-bypassing-premium-features-by-checking-premium-validation-parameters-f2e211fad160?source=rss------bug_bounty-5 | can1337 | infosec, business-logic, bug-bounty-tips, bug-bounty, cybersecurity | 14-Mar-2024 |
| Unleash the Power of the Crypto Drainer: Your Ultimate Weapon in Crypto Wallet Draining! | https://medium.com/@colbe.judge/unleash-the-power-of-the-crypto-drainer-your-ultimate-weapon-in-crypto-wallet-draining-bd4ece99cc24?source=rss------bug_bounty-5 | CryptoDrainX | bug-bounty, hacking, bug-bounty-tips, hacking-tools, money | 14-Mar-2024 |
| Unleash the Ultimate Multichain Wallet Drainer — Crypto Drainer: Drain ’Em all with Just One Click! | https://medium.com/@colbe.judge/unleash-the-ultimate-multichain-wallet-drainer-crypto-drainer-drain-em-all-with-just-one-click-0afa35f9b736?source=rss------bug_bounty-5 | CryptoDrainX | bug-bounty, cryptocurrency, bug-bounty-tips, nft, bitcoin | 14-Mar-2024 |
| Insane Crypto-Drainer Exposed: The Ultimate Wallet Drainer You Can’t Ignore! | https://medium.com/@colbe.judge/insane-crypto-drainer-exposed-the-ultimate-wallet-drainer-you-cant-ignore-7545f4c9c86d?source=rss------bug_bounty-5 | CryptoDrainX | bug-bounty, crypto, nft, defi, money | 14-Mar-2024 |
| How To Get $100k in 2024 With Crypto [Unrevealed] | https://medium.com/@colbe.judge/how-to-get-100k-in-2024-with-crypto-unrevealed-b40081b8fb41?source=rss------bug_bounty-5 | CryptoDrainX | blockchain, cryptocurrency, hacking-tools, hacking, bug-bounty | 14-Mar-2024 |
| 5 Websites to Learn Bug Hunting: A Beginner’s Guide | https://medium.com/@aayushdhakal005/5-websites-to-learn-bug-hunting-a-beginners-guide-4399c2f94917?source=rss------bug_bounty-5 | Creepyshit | website, bug-bounty, cybersecurity, resources | 14-Mar-2024 |
| Bug Bounty Challenge: Day 5–14/03/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-5-14-03-2024-b8fe8dae8cb5?source=rss------bug_bounty-5 | Wallotry | bug-bounty, bug-bounty-tips, bug-bounty-writeup, bug-bounty-hunter | 14-Mar-2024 |
| GRWM for WebApp PenTest | Command Injection | https://redsock1337.medium.com/grwm-for-webapp-pentest-command-injection-e205906573e2?source=rss------bug_bounty-5 | Jbr | os, command-line, bug-bounty-tips, cybersecurity, bug-bounty | 14-Mar-2024 |
| Uncovering Host Header Injection Vulnerabilities in 5 Apex Domain Hosts Part Two how to chain | https://javroot.medium.com/uncovering-host-header-injection-vulnerabilities-in-5-apex-domain-hosts-part-two-how-to-chain-0abe308a4807?source=rss------bug_bounty-5 | Javroot | web, hacking, penetration-testing, bug-bounty-tips, bug-bounty | 14-Mar-2024 |
| API Security: Essential Tools for Endpoint Analysis | https://iaraoz.medium.com/api-security-essential-tools-for-endpoint-analysis-efb1c72675c0?source=rss------bug_bounty-5 | Israel Aráoz Severiche | bug-bounty, owasp, appsec, cybersecurity, api-security | 14-Mar-2024 |
| Exploiting Cross-Site Scripting XSS vulnerabilities for Bug Bounty — Portswigger | 2024 | https://cyberw1ng.medium.com/exploiting-cross-site-scripting-xss-vulnerabilities-for-bug-bounty-portswigger-2024-88d6e1df4658?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, penetration-testing, cybersecurity, bug-bounty | 13-Mar-2024 |
| How To Do Malware Analysis | https://medium.com/@paritoshblogs/how-to-do-malware-analysis-62bd1f8052bb?source=rss------bug_bounty-5 | Paritosh | cybersecurity, bug-bounty, information-technology, security, malware-analysis | 13-Mar-2024 |
| Easiest way to find hidden api from js files | https://medium.com/@jeetpal2007/easiest-way-to-find-hidden-api-from-js-files-ce115a4ad1af?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, bounties, api-key, easiest-way, bug-bounty | 13-Mar-2024 |
| Enhancing Your Bug Hunting Skills: 5 Must-Read Books | https://medium.com/@aayushdhakal005/enhancing-your-bug-hunting-skills-5-must-read-books-edb6029c19a6?source=rss------bug_bounty-5 | Creepyshit | bug-bounty, cybersecurity, books, web | 13-Mar-2024 |
| Lets Talk Pentest Strategy | https://medium.com/@hackstack/lets-talk-pentest-strategy-adea4d3b085e?source=rss------bug_bounty-5 | HackStack | pentest, pentesting, how-to, bug-bounty | 13-Mar-2024 |
| Email based IDOR makes me update Other User Profile | https://rohmadhidayah.medium.com/email-based-idor-makes-me-update-other-user-profile-8e6e289f4391?source=rss------bug_bounty-5 | Rohmad Hidayah | idor, info-sec-writeups, infosec-write-ups, bug-bounty, bug-bounty-tips | 13-Mar-2024 |
| Bug-Bounty/How I Found My FIRST Vulnerability and How could I Access the Admin Panel using it +… | https://medium.com/@rogxoorsafe/bug-bounty-how-i-found-my-first-vulnerability-and-how-could-i-access-the-admin-panel-using-it-899d75da2f37?source=rss------bug_bounty-5 | Alireza Rogxoor | cyberattack, bug-bounty, cybersecurity, hacking, security | 13-Mar-2024 |
| Fuzzing to Kubernetes to IDOR to PII leak | https://nityanandjha18.medium.com/fuzzing-to-kubernetes-to-idor-to-pii-leak-dae0dda70090?source=rss------bug_bounty-5 | NITYA NAND JHA | vapt, ethical-hacking, bug-bounty | 13-Mar-2024 |
| Researcher Q&A: Friends Who Work Together, Hack Better Together | https://blog.developer.adobe.com/researcher-q-a-friends-who-work-together-hack-better-together-c698ff0be732?source=rss------bug_bounty-5 | Renae Kang | security, bug-bounty-program, security-researchers, bug-bounty, ethical-hacker | 13-Mar-2024 |
| PROXY FUZZING | https://karol-mazurek.medium.com/proxy-fuzzing-4dc77968cfd8?source=rss------bug_bounty-5 | Karol Mazurek | programming, information-technology, bug-bounty, python, cybersecurity | 13-Mar-2024 |
| Reconnaissance? | https://mrrobotstxt.medium.com/reconnaissance-ca2fa7bf821d?source=rss------bug_bounty-5 | Mr. Robots.txt | hackathons, bug-bounty, hacking, penetration-testing, cybersecurity | 13-Mar-2024 |
| How much money did I make from doing Bug Bounty? | https://systemweakness.com/how-much-money-did-i-make-from-doing-bug-bounty-707438b71f47?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty, programming, hacking, cybersecurity, bug-bounty-tips | 13-Mar-2024 |
| Cross-site scripting contexts for Bug Bounty — Portswigger | 2024 | https://cyberw1ng.medium.com/cross-site-scripting-contexts-for-bug-bounty-portswigger-2024-b927cfa70de3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, penetration-testing, bug-bounty, cybersecurity | 12-Mar-2024 |
| Business Logic Errors allow me to buy Products at Low Prices on Farmaku.com | https://rohmadhidayah.medium.com/business-logic-errors-allow-me-to-buy-products-at-low-prices-on-farmaku-com-b8c9c0bcf5cc?source=rss------bug_bounty-5 | Rohmad Hidayah | info-sec-writeups, bug-bounty-tips, business-logic, bug-bounty, infosec-write-ups | 12-Mar-2024 |
| ShentuChain Unveils a Constellation of High-profile Investors | https://shentuchain.medium.com/shentuchain-unveils-a-constellation-of-high-profile-investors-54b612b8dc30?source=rss------bug_bounty-5 | Shentu Chain | binance, cybersecurity, investors, bug-bounty, announcements | 12-Mar-2024 |
| How I Discovered My First Critical Vulnerability in My Bug Bounty Career | https://snip3rgg.medium.com/how-i-discovered-my-first-critical-vulnerability-in-my-bug-bounty-career-cf0e048d14cb?source=rss------bug_bounty-5 | Sahil Bugade (snip3rgg) | infosec, bug-bounty, vulnerability, bug-bounty-tips, cybersecurity | 12-Mar-2024 |
| Account Takeover Through Rate-Limit Bypass — Bug Bounty Tuesday | https://medium.com/@kerstan/account-takeover-through-rate-limit-bypass-bug-bounty-tuesday-01229168dd89?source=rss------bug_bounty-5 | kerstan | bug-bounty, security, programming, cybersecurity, technology | 12-Mar-2024 |
| How I found my first ever valid bug on Hackerone | https://medium.com/@rubaethasanariyan/how-i-found-my-first-ever-valid-bug-on-hackerone-da30015aa08d?source=rss------bug_bounty-5 | Rubayet Hasan aka MR_Prey3r | bug-bounty-tips, bugbounty-poc, first-bug, hackerone, bug-bounty | 12-Mar-2024 |
| Guvenkaya Security Insights Series — Sweat Economy | https://medium.com/@guvenkaya-sec/guvenkaya-security-insights-series-sweat-economy-dbe681a79e7a?source=rss------bug_bounty-5 | Guvenkaya | near-protocol, bug-bounty, smart-contracts, rust, web3 | 12-Mar-2024 |
| BYPASSING PARENTAL CONTROL ON WHOLE APPLE ECO-SYSTEM | https://medium.com/@sam0-0/bypassing-parental-control-on-whole-apple-eco-system-1c6975c24105?source=rss------bug_bounty-5 | Sam | bug-bounty, apple, infosec, bugbounty-writeup | 12-Mar-2024 |
| Bug Bounty Challenge: Day 4/15–12/03/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-4-15-12-03-2024-412bf44f8b83?source=rss------bug_bounty-5 | Wallotry | bug-bounty-tips, bug-bounty-hunter, bug-bounty, bug-bounty-hunting | 12-Mar-2024 |
| Minha Experiência ao Obter a Certificação CBBH | https://tiredandsick.medium.com/cbbh-experience-prbt-bc2b376c4124?source=rss------bug_bounty-5 | SickAndTired | bug-bounty, hacking, pentesting, cbbh, hackthebox-academy | 12-Mar-2024 |
| Utilizing Log Poisoning: Elevating from LFI to RCE | https://medium.com/@YNS21/utilizing-log-poisoning-elevating-from-lfi-to-rce-5dca90d0a2ac?source=rss------bug_bounty-5 | Youness Abbida | bug-bounty, hackthebox, local-file-inclusion, hackthebox-writeup, cybersecurity | 12-Mar-2024 |
| Bug Bounty — Improper Authentication using Google Auth | https://medium.com/@nourrisson.julien3/bug-bounty-improper-authentication-using-google-auth-b45fbddab9be?source=rss------bug_bounty-5 | Nourrisson Julien | bug-bounty, cybersecurity | 11-Mar-2024 |
| HTML INJECTION (Payload List) | https://medium.com/@psychomong/html-injection-payload-list-735e69f522ca?source=rss------bug_bounty-5 | psychomong | bug-bounty, bugs, html, injection, htmlinput | 11-Mar-2024 |
| Race Conditions + IDOR Leads to Bypass Email Verification & Phone Verification | https://medium.com/@ozomarzu/race-conditions-idor-leads-to-bypass-email-verification-phone-verification-f62c7d7b97e5?source=rss------bug_bounty-5 | CyberOz | bugs, writeup, bug-bounty, hacking, bug-bounty-tips | 11-Mar-2024 |
| Exploring AI Penetration Testing | https://medium.com/@adityasawant00/exploring-ai-penetration-testing-38891e861acd?source=rss------bug_bounty-5 | Aditya Sawant | hacking, bug-bounty, penetration-testing, ai, large-language-models | 11-Mar-2024 |
| Bug Bounty Challenge: Day 3/15–11/03/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-3-15-11-03-2024-38993610e657?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 11-Mar-2024 |
| HTML Injection on NASA.gov | https://medium.com/@boogsta/html-injection-on-nasa-gov-91b1d3602ea0?source=rss------bug_bounty-5 | Boogsta | hacking, cybersecurity, hacker, cyber, bug-bounty | 11-Mar-2024 |
| 3 Information Disclosure in Bug Bounty Program | https://medium.com/@jm7.zx/3-information-disclosure-in-bug-bounty-program-e0c12f6e25d5?source=rss------bug_bounty-5 | Jm7.sz | bug-bounty, cybersecurity, programming, data-science | 11-Mar-2024 |
| GRWM for WebApp PenTest | XPATH Injection | https://whyjbr.medium.com/grwm-for-webapp-pentest-xpath-injection-0906154bbe91?source=rss------bug_bounty-5 | Jbr | xpath, bug-bounty, cybersecurity, hacking, ethical-hacking | 11-Mar-2024 |
| Exfiltrating Sensitive Information via Reflected XSS Bypassing Cloudflare | https://medium.com/@mayankchoubey507/exfiltrating-sensitive-information-via-reflected-xss-bypassing-cloudfare-d82d9ccc24d6?source=rss------bug_bounty-5 | Mayankchoubey | cybersecurity, xss-bypass, cloudflare, bug-bounty, xss-attack | 11-Mar-2024 |
| 24.4 Lab: Exploiting server-side parameter pollution in a query string | 2024 | https://infosecwriteups.com/24-4-lab-exploiting-server-side-parameter-pollution-in-a-query-string-2024-ac0e23db9c02?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, penetration-testing, cybersecurity, bug-bounty, careers | 11-Mar-2024 |
| Top 7 BurpSuite Extensions for BugBounty- Part-1 | https://medium.com/@Ajakcybersecurity/top-7-burpsuite-extensions-for-bugbounty-part-1-4e9639649601?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, ethical-hacking, penetration-testing, burpsuite, bug-bounty | 11-Mar-2024 |
| HackTheBox — Information Gathering | https://medium.com/@harry.hphu/hackthebox-information-gathering-a2d78c901dd0?source=rss------bug_bounty-5 | Huy Phu | hackthebox, enumeration, bug-bounty, information-gathering | 11-Mar-2024 |
| HackTheBox — Information Gathering: Passive Enumeration | https://medium.com/@harry.hphu/hackthebox-information-gathering-passive-enumeration-85e45503683d?source=rss------bug_bounty-5 | Huy Phu | passive-reconnaissance, hackthebox, information-gathering, bug-bounty | 11-Mar-2024 |
| Vulnerability Vault: Breaking Down SSRF — Server Side Request Forgery (Part 2) | https://psychovik.medium.com/vulnerability-vault-breaking-down-ssrf-server-side-request-forgery-part-2-a08d4a2b3d96?source=rss------bug_bounty-5 | Vikas Sharma | hacking, cybersecurity, ssrf, bug-bounty, vulnerability | 10-Mar-2024 |
| The Reset Password Attack Vector | https://balook.medium.com/the-reset-password-attack-vector-833e1291bb15?source=rss------bug_bounty-5 | baluz | bug-bounty | 10-Mar-2024 |
| How I get My First $$$$ Bounty? | https://medium.com/@hacdoc/how-i-get-my-first-bounty-ec4d83eb5fbf?source=rss------bug_bounty-5 | Jaikumar | bug-bounty-tips, hacking, bug-bounty | 10-Mar-2024 |
| GRWM for WebApp PenTest | Insecure Deserialization | https://whyjbr.medium.com/grwm-for-webapp-pentest-insecure-deserialization-adfa4f8cf53f?source=rss------bug_bounty-5 | Jbr | php, bug-bounty, inspiration, cybersecurity, hacking | 10-Mar-2024 |
| How I get My First $$$$ Bounty? | https://medium.com/@hacdoc/how-i-get-my-first-bounty-ec4d83eb5fbf?source=rss------bug_bounty-5 | ஜெய் | bug-bounty-tips, hacking, bug-bounty | 10-Mar-2024 |
| 24.3 Lab: Exploiting a mass assignment vulnerability | 2024 | https://infosecwriteups.com/24-3-lab-exploiting-a-mass-assignment-vulnerability-2024-cc97a296d5fc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, cybersecurity, bug-bounty, hacking | 10-Mar-2024 |
| Information Gathering #1 | https://medium.com/@mxfx1989/information-gathering-1-192f58c49f2e?source=rss------bug_bounty-5 | z4z4_h1 | red-team, cybersecurity, bug-bounty, hacking, infosec | 10-Mar-2024 |
| Easiest bugs to start | https://medium.com/@petrukhin.s.a/easiest-bugs-to-start-9f92d87f6e36?source=rss------bug_bounty-5 | Sergei Petrukhin | open-redirect, bug-bounty | 10-Mar-2024 |
| Subdomains Enumeration | https://d4t4s3c.medium.com/subdomains-enumeration-a23f44ba4687?source=rss------bug_bounty-5 | d4t4s3c | bug-bounty, vhost, red-team, pentesting, subdomains-enumeration | 10-Mar-2024 |
| Bug Bounty Challenge: Day 2/15–10/03/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-1-15-10-03-2024-b946472d71c8?source=rss------bug_bounty-5 | Wallotry | bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup, bug-bounty | 10-Mar-2024 |
| Cross-origin resource sharing (CORS) | Web application Vulnerability | https://abineshm.medium.com/cross-origin-resource-sharing-cors-web-application-vulnerability-afc0d3d35063?source=rss------bug_bounty-5 | Abinesh M | vulnerability, web-application-security, security, bug-bounty, bugs | 09-Mar-2024 |
| Untangling Dependency Confusion: Exploring Threats and Protections | https://jareddouville.medium.com/untangling-dependency-confusion-exploring-threats-and-protections-7dd7f58de127?source=rss------bug_bounty-5 | Jared Douville | npm, bug-bounty, hacking, hackerone | 09-Mar-2024 |
| 24.2 Lab: Finding and exploiting an unused API endpoint | 2024 | https://cyberw1ng.medium.com/24-2-lab-finding-and-exploiting-an-unused-api-endpoint-2024-81f3451df1a1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, hacking, careers, bug-bounty, penetration-testing | 09-Mar-2024 |
| Bug Bounty Challenge: Day 1/15–09/03/2024 | https://wallotry.medium.com/bug-bounty-challenge-day-1-15-09-03-2024-f7b1824f2262?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 09-Mar-2024 |
| 24.1 Lab: Exploiting an API endpoint using documentation | 2024 | https://cyberw1ng.medium.com/24-1-lab-exploiting-an-api-endpoint-using-documentation-2024-5e7de5aaf53e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, security, careers, hacking, bug-bounty | 08-Mar-2024 |
| Vulnerability Vault: Breaking Down SSRF — Server Side Request Forgery (Part 1) | https://psychovik.medium.com/vulnerability-vault-breaking-down-ssrf-server-side-request-forgery-part-1-b7e658589dd9?source=rss------bug_bounty-5 | Vikas Sharma | cybersecurity, hacking, vulnerability, bug-bounty, ssrf | 08-Mar-2024 |
| 1K Followers Giveaway- | https://medium.com/@Ajakcybersecurity/1k-followers-giveaway-892488a38a48?source=rss------bug_bounty-5 | AjakCybersecurity | cybersecurity, giveaway, free, bug-bounty, ethical-hacking | 08-Mar-2024 |
| Sensitive Data Exposed when placing an Order | https://rohmadhidayah.medium.com/sensitive-data-exposed-when-placing-an-order-5549baed9186?source=rss------bug_bounty-5 | Rohmad Hidayah | infosec-write-ups, bug-bounty-tips, info-sec-writeups, bug-bounty | 08-Mar-2024 |
| BSides Transylvania Is Not A Simple Conference, Is a Training Ground For Your Security Team | https://corneacristian.medium.com/bsides-transylvania-is-not-a-simple-conference-is-a-training-ground-for-your-security-team-c41cdf30778f?source=rss------bug_bounty-5 | Cristian Cornea | romania, ethical-hacking, tech, cybersecurity, bug-bounty | 08-Mar-2024 |
| Server-Side Template Injection (SSTI) ☠️ Deep Dive | https://cyberbull.medium.com/server-side-template-injection-ssti-%EF%B8%8F-deep-dive-512904b8a8ae?source=rss------bug_bounty-5 | Aditya Pandey | web-security, security, cybersecurity, bug-bounty, ethical-hacking | 08-Mar-2024 |
| Bug Bounty Challenge: Day 0/15 | https://wallotry.medium.com/bug-bounty-challenge-day-0-15-8e88c5b4cc6b?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 08-Mar-2024 |
| 0 Click Account Takeover Via reset password weird behavior | https://medium.com/@0xSnowmn/0-click-account-takeover-via-reset-password-weird-behavior-026846e5f850?source=rss------bug_bounty-5 | Snow Mars | bug-bounty, bug-bounty-tips, cybersecurity | 08-Mar-2024 |
| WinRAR 7.0 DLL Hijacking -> Local RCE [0-day] | https://medium.com/@boogsta/winrar-7-0-dll-hijacking-local-rce-0-day-6d90765c6601?source=rss------bug_bounty-5 | Boogsta | cybersecurity, bug-bounty, hacks, hacking, cyber | 08-Mar-2024 |
| Usb data recovery — Digital forensics intro | https://medium.com/@Rahulkrishnan_R_Panicker/usb-data-recovery-digital-forensics-intro-0c57337425b5?source=rss------bug_bounty-5 | Rahulkrishnan R Panicker | digital-forensics, tech, bug-bounty, pentesting, hacking | 07-Mar-2024 |
| Increasing IMPACT of No Rate Limit on Email Endpoints. | https://shubham-srt.medium.com/increasing-impact-of-no-rate-limit-on-email-endpoints-d66cf08dafaf?source=rss------bug_bounty-5 | Shubham SRT | web-app-security, hacking, cybersecurity, bug-bounty, vapt | 07-Mar-2024 |
| API Testing for Bug Bounty — Portswigger | 2024 | https://cyberw1ng.medium.com/api-testing-for-bug-bounty-portswigger-2024-bd8343cc2c10?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, careers, hacking, security | 07-Mar-2024 |
| Verileri Çıkarmak için NoSQL Enjeksiyonundan Yararlanma | https://medium.com/@hhuseyinuyar17/verileri-%C3%A7%C4%B1karmak-i%C3%A7in-nosql-enjeksiyonundan-yararlanma-ace89e11bc69?source=rss------bug_bounty-5 | Hhuseyinuyar | bug-bounty, nosql, injection, burpsuite, mongodb | 07-Mar-2024 |
| Exploring Bug Bounty Programs: An overview and Varieties | https://medium.com/@lovepatel3223/exploring-bug-bounty-programs-an-overview-and-varieties-6f8539279704?source=rss------bug_bounty-5 | Prem Patel | bug-bounty, bug-bounty-types | 07-Mar-2024 |
| API Testing for Bug Bounty — Portswigger | 2024 | https://infosecwriteups.com/api-testing-for-bug-bounty-portswigger-2024-bd8343cc2c10?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, careers, hacking, security | 07-Mar-2024 |
| How I found Reflected XSS which leads to Account Takeover on an E-commerce website | https://medium.com/@npthin1804/how-i-found-reflected-xss-which-leads-to-account-takeover-on-an-e-commerce-website-47200dd631b6?source=rss------bug_bounty-5 | Npthin | bug-bounty, infosec-write-ups, reflected-xss | 07-Mar-2024 |
| Click, Intercept, Hack: Checkmate on Access Control Vulnerability | https://anasbetis023.medium.com/click-intercept-hack-checkmate-on-access-control-vulnerability-20152a7149e2?source=rss------bug_bounty-5 | Anas H Hmaidy | cybersecurity, web-security, ethical-hacking, penetration-testing, bug-bounty | 07-Mar-2024 |
| XSLeak de-anonymize Facebook user visiting website | https://mustafa0x2021.medium.com/xsleak-de-anonymize-facebook-user-visiting-website-8f6c725235e8?source=rss------bug_bounty-5 | Mustafa | bug-bounty, meta | 07-Mar-2024 |
| echo “Hello, World” | https://projectpolarbear.com/echo-hello-world-4233c914b944?source=rss------bug_bounty-5 | Mr. Robots.txt | soc, blue-team, cybersecurity, red-team, bug-bounty | 07-Mar-2024 |
| Fixing Facebook: A Privacy Issue Ignored? | https://medium.com/@mynkpdr/fixing-facebook-a-privacy-issue-ignored-6c048dacc824?source=rss------bug_bounty-5 | mynkpdr | messenger, bug-bounty-writeup, facebook, bug-bounty, facebook-bug-bounty | 07-Mar-2024 |
| How to find server security misconfiguration leak data users | https://medium.com/@sam_0x0/how-to-find-server-security-misconfiguration-leak-data-users-f7a43c008e33?source=rss------bug_bounty-5 | Eslam Omar | bug-bounty, bug-bounty-tips, bugcrowd, bugs, web-pen-testing | 07-Mar-2024 |
| How to find server security misconfiguration leak data users | https://systemweakness.com/how-to-find-server-security-misconfiguration-leak-data-users-f7a43c008e33?source=rss------bug_bounty-5 | Eslam Omar | bug-bounty, bug-bounty-tips, bugcrowd, bugs, web-pen-testing | 07-Mar-2024 |
| How I found Reflected XSS which leads to Account Takeover on an E-commerce website | https://medium.com/@npthin1804/how-i-found-reflected-xss-which-leads-to-account-takeover-on-an-e-commerce-website-47200dd631b6?source=rss------bug_bounty-5 | p00dl3 | bug-bounty, infosec-write-ups, reflected-xss | 07-Mar-2024 |
| Bug Bounty - Insecure Deserialization to Reverse Shell | https://medium.com/@jobaa23/insecure-deserialization-to-reverse-shell-9f007b440d6f?source=rss------bug_bounty-5 | 0x4141 | bug-bounty, remote-code-execution, hacking, bug-hunting, insecure-deserialization | 07-Mar-2024 |
| Host Header Poison lead to account takeover | https://medium.com/@masterhackor22/host-header-poison-lead-to-account-takeover-8c432fb54b29?source=rss------bug_bounty-5 | master hackor | bounty-program, bugs, penetration-testing, cybersecurity, bug-bounty | 06-Mar-2024 |
| [letsdefend.io] SOC164 — Suspicious Mshta Behavior | https://medium.com/@yasminramadini/letsdefend-io-soc164-suspicious-mshta-behavior-36dfa3d74843?source=rss------bug_bounty-5 | Yasmin Ramadini | tryhackme, bug-bounty, indonesia, letsdefendio, ctf-writeup | 06-Mar-2024 |
| [letsdefend.io] SOC169 — Possible IDOR Attack Detected | https://medium.com/@yasminramadini/letsdefend-io-soc169-possible-idor-attack-detected-dda468ceab28?source=rss------bug_bounty-5 | Yasmin Ramadini | ctf-writeup, bug-bounty, tryhackme, letsdefendio, indonesia | 06-Mar-2024 |
| [letsdefend.io] SOC168 — Whoami Command Detected in Request Body | https://medium.com/@yasminramadini/letsdefend-io-soc168-whoami-command-detected-in-request-body-c4813fab47e4?source=rss------bug_bounty-5 | Yasmin Ramadini | bug-bounty, tryhackme, indonesia, letsdefendio, ctf-writeup | 06-Mar-2024 |
| [Letsdefend.io] SOC170 — Passwd Found in Requested URL — Possible LFI Attack | https://medium.com/@yasminramadini/letsdefend-io-soc170-passwd-found-in-requested-url-possible-lfi-attack-1828c436e703?source=rss------bug_bounty-5 | Yasmin Ramadini | letsdefendio, bug-bounty, tryhackme, ctf-writeup, indonesia | 06-Mar-2024 |
| Apa Itu Kriptografi? Enkripsi, Encoding, Dan Hashing | https://medium.com/@yasminramadini/apa-itu-kriptografi-enkripsi-encoding-dan-hashing-ddb39d69eb93?source=rss------bug_bounty-5 | Yasmin Ramadini | pentesting, tryhackme, indonesia, cybersecurity, bug-bounty | 06-Mar-2024 |
| How i bypassed input limitations to get Admin ATO | https://medium.com/@0x3adly/how-i-bypassed-input-limit-to-get-admin-ato-f2d56f40f505?source=rss------bug_bounty-5 | Anas Eladly ( 0x3adly ) | cybersecurity, web-penetration-testing, xss-attack, bug-bounty, bug-bounty-tips | 06-Mar-2024 |
| Microsoft Exchange Server Remote Code Execution Vulnerability | https://medium.com/@ryuzakiryuga31/microsoft-exchange-server-remote-code-execution-vulnerability-89354c6e6586?source=rss------bug_bounty-5 | R09sh | bug-bounty, blackhat, rce-vulnerability, cybersecurity, cyberattack | 06-Mar-2024 |
| At age of 18, How I got first “Future” Job Offer from Korean MNC through bug bounties | https://medium.com/@manan_sanghvi/at-age-of-18-how-i-got-first-future-job-offer-from-korean-mnc-through-bug-bounties-2cfb7d4a9e8c?source=rss------bug_bounty-5 | Manan Sanghvi | ethical-hacking, cybersecurity, bug-bounty, penetration-testing, job-offer | 06-Mar-2024 |
| Vulnerable WordPress February 2024 (Jushin Castle) | https://medium.com/@onhexgroup/vulnerable-wordpress-february-2024-jushin-castle-340990bdb9fb?source=rss------bug_bounty-5 | Onhexgroup | bug-bounty, cybersecurity, security, infosec, wordpress | 06-Mar-2024 |
| Data Lake introduces the second bug bounty campaign of its patients recruitment Application | https://datalaketoken.medium.com/data-lake-introduces-the-second-bug-bounty-campaign-of-its-patients-recruitment-application-88be6e0399a4?source=rss------bug_bounty-5 | Data Lake | bug-bounty, medical-data, research, data-lake, desci | 06-Mar-2024 |
| How I Passed eWPTX v2 Exam Without Courseware | https://medium.com/@adityasawant00/how-i-passed-ewptx-v2-exam-without-courseware-1711edd7fb32?source=rss------bug_bounty-5 | Aditya Sawant | hacking, penetration-testing, certification, bug-bounty, security | 06-Mar-2024 |
| 12.4 Lab: Exploiting NoSQL operator injection to extract unknown fields | 2024 | https://infosecwriteups.com/12-4-lab-exploiting-nosql-operator-injection-to-extract-unknown-fields-2024-866996b9fff2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, hacking, careers, penetration-testing | 06-Mar-2024 |
| Upload Backdoor in profile picture and OTP Bypass | https://medium.com/@sahilkushwaha275/upload-backdoor-in-profile-picture-and-otp-bypass-3c2e2e18fbbb?source=rss------bug_bounty-5 | S33NU | bug-bounty, technology, bug-hunting, bounty-program, programming | 06-Mar-2024 |
| Story of Lock up users’ account by DOS attack cost $1,100 | https://m7arm4n.medium.com/story-of-lock-up-users-account-by-dos-attack-cost-1-100-87b47d06a7c1?source=rss------bug_bounty-5 | M7arm4n | hacker, hacking, bug-bounty, security, bug-bounty-tips | 06-Mar-2024 |
| Uncovering Host Header Injection Vulnerabilities in 5 Apex Domain Hosts | https://javroot.medium.com/uncovering-host-header-injection-vulnerabilities-in-5-apex-domain-hosts-c45f79e82862?source=rss------bug_bounty-5 | Javroot | hosting, bug-hunting, hacking, white-hat-hacker, bug-bounty | 05-Mar-2024 |
| Bug-Bounty Beginning (Day-1) | https://medium.com/@bv1459/bug-bounty-beginning-day-1-bc5fa649ff45?source=rss------bug_bounty-5 | Bala Prasanna Gopal Volisetty | bug-bounty, kali-linux, hacking-tools, hacking | 05-Mar-2024 |
| XXEs are lurking in unexpected places and you'll find these vulnerabilities almost everywhere | https://medium.com/@securelearn/xxes-are-lurking-in-unexpected-places-and-youll-find-these-vulnerabilities-almost-everywhere-aefeef9d7cbb?source=rss------bug_bounty-5 | Rohan Giri | bug-bounty-tips, web-vulnerabilities, bug-bounty | 05-Mar-2024 |
| How I Found Multiple XSS Vulnerabilities Using Unknown Techniques | https://infosecwriteups.com/how-i-found-multiple-xss-vulnerabilities-using-unknown-techniques-74f8e705ea0d?source=rss------bug_bounty-5 | Khaledyassen | xss-attack, hacking, bug-bounty, bug-bounty-tips, cybersecurity | 05-Mar-2024 |
| Tips Melakukan Analisa Email Phishing | https://medium.com/@yasminramadini/tips-melakukan-analisa-email-phishing-e4d8f5b4bed6?source=rss------bug_bounty-5 | Yasmin Ramadini | cybersecurity, indonesia, soc-analyst, tryhackme, bug-bounty | 05-Mar-2024 |
| 12.3 Lab: Exploiting NoSQL injection to extract data | 2024 | https://infosecwriteups.com/12-3-lab-exploiting-nosql-injection-to-extract-data-2024-ca9896a3c964?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, careers, cybersecurity, security | 05-Mar-2024 |
| Apa Itu OSI Model? Protokol Dan Enkapsulasi Tiap Layernya | https://medium.com/@yasminramadini/apa-itu-osi-model-protokol-dan-enkapsulasi-tiap-layernya-6faa7a0e8bbb?source=rss------bug_bounty-5 | Yasmin Ramadini | soc-analyst, tryhackme, cybersecurity, indonesia, bug-bounty | 05-Mar-2024 |
| Apa Itu TCP, UDP, Dan Three-way Handsh | https://medium.com/@yasminramadini/apa-itu-tcp-udp-dan-three-way-handsh-03edaf55c42d?source=rss------bug_bounty-5 | Yasmin Ramadini | soc-analyst, bug-bounty, cybersecurity, indonesia, tryhackme | 05-Mar-2024 |
| Road Map to Bug Bounty: A Beginner’s Guide | https://bjamali.medium.com/road-map-to-bug-bounty-a-beginners-guide-bd14b44e174b?source=rss------bug_bounty-5 | Babar Ali Jamali | information-security, cyber, hacking, cybersecurity, bug-bounty | 05-Mar-2024 |
| 5 Tips GoogleDocks you should know — Bug Bounty Tuesday | https://medium.com/@kerstan/5-tips-googledocks-you-should-know-bug-bounty-tuesday-49007026903f?source=rss------bug_bounty-5 | kerstan | technology, cybersecurity, bug-bounty, programming, security | 5-Mar-2024 |
| #9.TryHackMe Series writeups-LazyAdmin | https://cyb3rmind.medium.com/9-tryhackme-series-writeups-lazyadmin-7712917a2333?source=rss------bug_bounty-5 | Cyb3r M!nd | walkthrough, lazy-admin, tryhackme-writeup, tryhackme, bug-bounty | 05-Mar-2024 |
| Unauthorized access to Facebook creator’s professional dashboard | https://gtm0x01.medium.com/unauthorized-access-to-facebook-creators-professional-dashboard-e35d98644258?source=rss------bug_bounty-5 | Gtm Mänôz | facebook, medium, graphql, bug-bounty, writeup | 05-Mar-2024 |
| My Recon Methodology (ep 1) | https://realm3ter.medium.com/my-recon-methodology-ep-1-bc9e6fd660ad?source=rss------bug_bounty-5 | Muhammad Mater | bug-bounty, recon, osint | 05-Mar-2024 |
| Knock, Knock. Who’s there? SSRF! SSRF who? Redirect SSRF! | https://atemporalzen.medium.com/knock-knock-whos-there-ssrf-ssrf-who-redirect-ssrf-449f5d18c5a7?source=rss------bug_bounty-5 | atemporalzen | bug-bounty, cybersecurity, hacking, ssrf | 05-Mar-2024 |
| Payload will after you | https://medium.com/@isuk4/payload-will-after-you-3e16eaa17517?source=rss------bug_bounty-5 | Isuka sanuj | sql-injection, second-order-attack, pentesting, web-app-exploits, bug-bounty | 05-Mar-2024 |
| HTTP Request Smuggling: WWWWWH? | https://medium.com/@rcxsecurity/http-request-smuggling-wwwwwh-85be9c46a38e?source=rss------bug_bounty-5 | RCXSecurity | cybersecurity, pentesting, bug-bounty-tips, bug-bounty, application-security | 05-Mar-2024 |
| The Danger of PHP Eval(): | https://medium.com/@pkhuyar/the-danger-of-php-eval-a23410187ca2?source=rss------bug_bounty-5 | Prashant Roy | bug-bounty, php, cybersecurity, penetration-testing, ctf | 05-Mar-2024 |
| Hacking the UK government ( FULL database access ) | https://ahmadmansourr.medium.com/hacking-the-uk-government-full-database-access-496a94e6cc9c?source=rss------bug_bounty-5 | Ahmad Mansour | computer-science, bug-bounty, hacking, pentesting, cybersecurity | 05-Mar-2024 |
| BAC Leads To Full Takeover Of Any Organisation | https://medium.com/@ismailsaid1603/bac-leads-to-full-takeover-of-any-organisation-0fc21cf4cb5e?source=rss------bug_bounty-5 | Esmail Saied | bug-bounty, broken-access-control, idor, bugcrowd, cybersecurity | 05-Mar-2024 |
| Information Disclosure — Instructor’s Email Address leaked in Response | https://rohmadhidayah.medium.com/information-disclosure-instructors-email-address-leaked-in-response-1737551d5a8b?source=rss------bug_bounty-5 | Rohmad Hidayah | info-sec-writeups, bug-bounty-tips, bug-bounty, information-disclosure, infosec-write-ups | 04-Mar-2024 |
| OTP Bypass Via Response Manipulation | https://medium.com/@maratherao93/otp-bypass-via-response-manipulation-e55352c5c419?source=rss------bug_bounty-5 | Marathe Rao | bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup | 04-Mar-2024 |
| the Intricacies of WiFi Hacking | https://medium.com/@paritoshblogs/the-intricacies-of-wifi-hacking-76c404240111?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, hacking, wifi, programming | 04-Mar-2024 |
| Apa Itu Cyber Kill Chain Dalam Cyber Security | https://medium.com/@yasminramadini/apa-itu-cyber-kill-chain-dalam-cyber-security-5e993233615c?source=rss------bug_bounty-5 | Yasmin Ramadini | tryhackme, soc-analyst, indonesia, bug-bounty, cybersecurity | 04-Mar-2024 |
| Apa Itu Pyramid Of Pain Dalam Cyber Security | https://medium.com/@yasminramadini/apa-itu-pyramid-of-pain-dalam-cyber-security-7e08932e8ed9?source=rss------bug_bounty-5 | Yasmin Ramadini | tryhackme, indonesia, bug-bounty, cybersecurity, soc-analyst | 04-Mar-2024 |
| It assignment helper https://www.fiverr.com/s/QAR93y | https://medium.com/@drugdirectory96/it-assignment-helper-https-www-fiverr-com-s-qar93y-30e688ba78e9?source=rss------bug_bounty-5 | Masud Rana | javascript, money, bug-bounty, software-development, bug-bounty-tips | 04-Mar-2024 |
| My Report Summaries #1: Project manager can see & download all users’ login history at redacted app… | https://infosecwriteups.com/my-report-summaries-1-project-manager-can-see-download-all-users-login-history-at-redacted-app-6a41597b5d11?source=rss------bug_bounty-5 | can1337 | infosec, bug-bounty, idor, cybersecurity | 04-Mar-2024 |
| Come diventare un hacker nel 2024 | https://medium.com/@d0lf1_/come-diventare-un-hacker-nel-2024-493c8c0ced9a?source=rss------bug_bounty-5 | d0lf1 | italiano, penetration-testing, google, bug-bounty, hacking | 04-Mar-2024 |
| 11.8 Lab: Exploiting XXE via image file upload | 2024 | https://cyberw1ng.medium.com/11-8-lab-exploiting-xxe-via-image-file-upload-2024-e2840c3b85f3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, hacking, penetration-testing | 04-Mar-2024 |
| Simple vulnerability in a Cyber Security conference | https://medium.com/@jsamia/simple-vulnerability-in-a-cyber-security-conference-c06a53c6e4b7?source=rss------bug_bounty-5 | Jaeden Samia | security, ethical-hacking, bugs, bug-bounty | 04-Mar-2024 |
| The Ethics of Bug Bounties: Balancing Incentives and Security | https://medium.com/@securelearn/the-ethics-of-bug-bounties-balancing-incentives-and-security-7501a4aaa246?source=rss------bug_bounty-5 | Rohan Giri | bug-fixes, bug-bounty-tips, ethical-hacking, cybersecurity, bug-bounty | 03-Mar-2024 |
| Recently Discovered Several Bugs in a Private Program | https://zapstiko.medium.com/recently-discovered-several-bugs-in-a-private-program-8dc900bf6fe9?source=rss------bug_bounty-5 | Raihan Biswas | bug-bounty, bugs, idor-vulnerability, information-disclosure, bug-bounty-tips | 03-Mar-2024 |
| Google Dorking aka “Google Hacking” | https://medium.com/@dasmanish6176/google-dorking-aka-google-hacking-49fb5a511345?source=rss------bug_bounty-5 | Dasmanish | google-dork, google-hacking, penetration-testing, bug-bounty | 03-Mar-2024 |
| PHP Session Poisoning using LFI. | https://medium.com/@YNS21/php-session-poisoning-using-lfi-36d7df012777?source=rss------bug_bounty-5 | Youness Abbida | hackerone, bug-bounty, bugcrowd, php, vulnerability | 03-Mar-2024 |
| Discovered potential SQL injection through parameter testing | https://medium.com/@pankajnandkar/discovered-potential-sql-injection-through-parameter-testing-0be4364d9b7a?source=rss------bug_bounty-5 | Pankaj Nandkar | bug-bounty-tips, ethical-hacking, sql-injection, bug-bounty, cybersecurity | 03-Mar-2024 |
| 11.7 Lab: Exploiting XInclude to retrieve files | 2024 | https://cyberw1ng.medium.com/11-7-lab-exploiting-xinclude-to-retrieve-files-2024-2f7751d777fa?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, careers, hacking, cybersecurity | 03-Mar-2024 |
| Sneak Peek: Mastering Blind SQL Injection with SQLMap and Manual Techniques (CVE-2023–6063) | https://medium.com/@josh.beck2006/sneak-peek-mastering-blind-sql-injection-with-sqlmap-and-manual-techniques-cve-2023-6063-af904f61f822?source=rss------bug_bounty-5 | Josh Beck | penetration-testing, cybersecurity, bug-bounty, oscp | 03-Mar-2024 |
| Magic Links as Gateways Account Takeovers | https://sl4x0.medium.com/magic-links-as-gateways-account-takeovers-e9c911ceb6f9?source=rss------bug_bounty-5 | Abdelrhman Allam (sl4x0) | magic-link, account-takeover, bug-bounty, web-security, pentesting | 03-Mar-2024 |
| HBO BUB in production. Can’t UNsubscribe | https://medium.com/@shanlogauthier/hbo-bub-in-production-cant-unsubscribe-b0b3982d2292?source=rss------bug_bounty-5 | Shanlogauthier | bug-bounty, max, hbo-max, hbo, bugs | 03-Mar-2024 |
| Exploiting Grafana To achieve Remote Command Execution | https://medium.com/@konqi/exploiting-grafana-to-achieve-remote-command-execution-5eb0f99cb107?source=rss------bug_bounty-5 | Vahagn Israelian | hacking, bug-bounty, vulnerability, penetration-testing, grafana | 02-Mar-2024 |
| the Power of Twitter OSINT | https://medium.com/@paritoshblogs/the-power-of-twitter-osint-059cfaa3b0e2?source=rss------bug_bounty-5 | Paritosh | twitter, cybersecurity, bug-bounty, threat-intelligence, hacking | 02-Mar-2024 |
| https://medium.com/@morganbinbash/-46d5d16114c8?source=rss------bug_bounty-5 | Morgan Bin Bash | frontend, cybersecurity, bug-bounty, pentesting | 02-Mar-2024 |
| the Power of Twitter OSINT | https://infosecwriteups.com/the-power-of-twitter-osint-059cfaa3b0e2?source=rss------bug_bounty-5 | Paritosh | twitter, cybersecurity, bug-bounty, threat-intelligence, hacking | 02-Mar-2024 |
| My first IDOR hunting story | https://medium.com/@loverslandgandhi/my-first-idor-hunting-story-42c71fbe06dc?source=rss------bug_bounty-5 | Loverslandgandhi | ethical-hacking, bug-bounty-hunter, bug-bounty-tips, cybersecurity, bug-bounty | 02-Mar-2024 |
| How I Got Highly Sensetive Api Keys On A Private Hackerone Program | https://medium.com/@mrraghavop12/how-i-got-highly-sensetive-api-keys-on-a-private-hackerone-program-b40c6de80708?source=rss------bug_bounty-5 | Ethical Raghav | cybersecurity, data-science, bug-bounty, technology, web-development | 02-Mar-2024 |
| Unveiling the Secrets: SSRF Adventures in Microsoft’s AI Playground | https://medium.com/@soufianehabti/unveiling-the-secrets-ssrf-adventures-in-microsofts-ai-playground-26c7872b32fc?source=rss------bug_bounty-5 | Soufiane Habti | bug-bounty, microsoft, security, ai, artificial-intelligence | 02-Mar-2024 |
| Bypassing the Bluecoat Unified Agent | https://medium.com/@0xSphinx/bypassing-the-bluecoat-unified-agent-36ada54fe789?source=rss------bug_bounty-5 | 0xSphinx | hacking, penetration-testing, security, bug-bounty, cybersecurity | 02-Mar-2024 |
| What is RedTeaming ? | https://aboutjbr.medium.com/what-is-redteaming-8699650f4265?source=rss------bug_bounty-5 | Jbr | ethical-hacking, bug-bounty, red-team, cybersecurity, hacking | 02-Mar-2024 |
| bersecurity11.6 Lab: Exploiting blind XXE to retrieve data via error messages | 2024 | https://cyberw1ng.medium.com/bersecurity11-6-lab-exploiting-blind-xxe-to-retrieve-data-via-error-messages-2024-4b7f1340195a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, cybersecurity, careers | 02-Mar-2024 |
| How to hack a LTE Router? Just text it! | https://medium.com/@mateusz-msl-lach/how-to-hack-a-lte-router-just-text-it-847f526c0a7f?source=rss------bug_bounty-5 | Mateusz Lach | xss-attack, cybersecurity, cve, bug-bounty, zte | 02-Mar-2024 |
| My first IDOR hunting story | https://hackergandhi.medium.com/my-first-idor-hunting-story-42c71fbe06dc?source=rss------bug_bounty-5 | hackergandhi | ethical-hacking, bug-bounty-hunter, bug-bounty-tips, cybersecurity, bug-bounty | 02-Mar-2024 |
| XML Injection: Deep Dive | https://cyberbull.medium.com/xml-injection-deep-dive-2e6e7132732d?source=rss------bug_bounty-5 | Aditya Pandey | xml, bug-fixes, injection, bug-bounty, cybersecurity | 01-Mar-2024 |
| $600 Simple MFA Bypass — Graphql | https://securitycipher.medium.com/600-simple-mfa-bypass-graphql-b46c6a4c5b82?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | security, cybersecurity, bug-bounty, technology, hacking | 01-Mar-2024 |
| XSS : A Fight With The WAF | https://medium.com/@itsmeliodas/xss-a-fight-with-the-waf-a08a4fc6012c?source=rss------bug_bounty-5 | Meliodas | cybersecurity, xss-attack, bug-bounty | 01-Mar-2024 |
| Understanding Cybersecurity: Safeguarding the Digital Realm | https://medium.com/@thirdeye1910/understanding-cybersecurity-safeguarding-the-digital-realm-8b36c55bec61?source=rss------bug_bounty-5 | Rajib Hassen | bug-bounty, ethereum, cyberattack, cybersecurity | 01-Mar-2024 |
| 11.5 Lab: Exploiting blind XXE to exfiltrate data using a malicious external DTD | 2024 | https://infosecwriteups.com/11-5-lab-exploiting-blind-xxe-to-exfiltrate-data-using-a-malicious-external-dtd-2024-a0cc2615cd5e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, cybersecurity, hacking, security | 01-Mar-2024 |
| Retrieving SUI Wallet Passphrase and Private Key without Password | https://medium.com/@mgthuramoemyint/retrieving-sui-wallet-passphrase-and-private-key-without-password-8c7ae9d30033?source=rss------bug_bounty-5 | Thura Moe Myint | bug-bounty, security | 01-Mar-2024 |
| Medium Bug Bounty on Hacker One — Broken Link | https://medium.com/bugs-that-bite/medium-bug-bounty-on-hacker-one-broken-link-b121c8896843?source=rss------bug_bounty-5 | Teri Radichel | security, bug-bounty, bugs, medium, hackerone | 29-Feb-2024 |
| Critical vulnerability in Flask AppBuilder — CVE-2024–25128 | https://systemweakness.com/critical-vulnerability-in-flask-appbuilder-cve-2024-25128-a8693fb31d86?source=rss------bug_bounty-5 | ElNiak | vulnerability, cybersecurity, flask, bug-bounty, python | 29-Feb-2024 |
| Version disclosure in headers and response : Security threat | https://medium.com/@zakeeandroid/version-disclosure-in-headers-and-response-security-threat-0b4e86272018?source=rss------bug_bounty-5 | Mohamed Zakee | application-security, bug-bounty, cybersecurity | 29-Feb-2024 |
| Stored XSS on Bug Bounty Program | https://medium.com/@bry4nzheng/stored-xss-on-bug-bounty-program-092d6c262c1b?source=rss------bug_bounty-5 | Bryan Zheng | penetration-testing, cybersecurity, bug-bounty | 29-Feb-2024 |
| Simple Tips for Bug Bounty Beginners: Finding API Key Leakage Vulnerabilities | https://medium.com/@anishnarayan/simple-tips-for-bug-bounty-beginners-finding-api-key-leakage-vulnerabilities-eddc416216ce?source=rss------bug_bounty-5 | Anish Narayan | bug-bounty-writeup, secure-api-key, bug-bounty-tips, bug-bounty-hunting, bug-bounty | 29-Feb-2024 |
| How to Excel at CTF Games with Linux Command Line Tools | https://dpericich.medium.com/how-to-excel-at-ctf-games-with-linux-command-line-tools-a68fba09cbfa?source=rss------bug_bounty-5 | Daniel Pericich | cybersecurity, linux, terminal, bug-bounty, software-engineering | 29-Feb-2024 |
| How do I found Blind SSRF on a Hackerone Program | https://codingninjablogs.tech/how-do-i-found-blind-ssrf-on-a-hackerone-program-3f7c315c20c9?source=rss------bug_bounty-5 | #!/Subhankar | cve, hacking, bug-bounty, ssrf, hackerone | 29-Feb-2024 |
| Horizontal Privilege Escalation Leads to Bounty | https://medium.com/@hellother18/horizontal-privilege-escalation-leads-to-bounty-f87aebbed8ab?source=rss------bug_bounty-5 | Manthan_ mahale | bugbounty-tips, hackerone, bounty-program, privilege-escalation, bug-bounty | 29-Feb-2024 |
| 11.4 Lab: Blind XXE with out-of-band interaction via XML parameter entities | 2024 | https://infosecwriteups.com/11-4-lab-blind-xxe-with-out-of-band-interaction-via-xml-parameter-entities-2024-14fbb40ba2f0?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, penetration-testing, cybersecurity, hacking | 29-Feb-2024 |
| SQL Injection: Beyond ‘OR 1=1’. An iCSI CTF | https://medium.com/@josh.beck2006/sql-injection-beyond-or-1-1-an-icsi-ctf-b468b1dfa851?source=rss------bug_bounty-5 | Josh Beck | cybersecurity, oscp, bug-bounty, ctf-writeup | 29-Feb-2024 |
| Authentication Bypass Using Response Manipulation | https://medium.com/@kundanp70559361/authentication-bypass-using-response-manipulation-c95969e787a8?source=rss------bug_bounty-5 | kundan prasad | science, cyber-security-awareness, hacking, bug-bounty, cybersecurity | 29-Feb-2024 |
| Maximizing Bug Bounty Earnings with Burp Suite: Essential Tools and Plugins. | https://medium.com/@montymahapatra79/maximizing-bug-bounty-earnings-with-burp-suite-essential-tools-and-plugins-84468c5d969d?source=rss------bug_bounty-5 | Montymahapatra | burpsuite-profissional, burpsuite, bug-bounty, burpsuite-extension, bug-bounty-tips | 29-Feb-2024 |
| First Bug Bounty | https://medium.com/@tom.sh/first-bug-bounty-ba6088fc2615?source=rss------bug_bounty-5 | Tom | cybersecurity, bugcrowd, hackerone, bug-bounty, hacking | 29-Feb-2024 |
| How to find your first XSS vulnerability!!! | https://medium.com/@basti_Sec/how-to-find-your-first-xss-vulnerability-a35cb69b2f56?source=rss------bug_bounty-5 | Basti_Sec | bug-bounty-hunter, xss-vulnerability, hacking, bug-bounty, xss-attack | 29-Feb-2024 |
| The Reality of Cloud Hacking | https://medium.com/@paritoshblogs/the-reality-of-cloud-hacking-8a061059dfcc?source=rss------bug_bounty-5 | Paritosh | cybersecurity, bug-bounty, cloud-computing, cloud-hacking, hacking | 28-Feb-2024 |
| Email verification bypass leads to create unlimited user accounts with what ever email id | https://medium.com/@Rahulkrishnan_R_Panicker/email-verification-bypass-leads-to-create-unlimited-user-accounts-with-what-ever-email-id-68a2069185e4?source=rss------bug_bounty-5 | Rahulkrishnan R Panicker | technology, cybersecurity, hacking, bug-bounty, programming | 28-Feb-2024 |
| symfony profiler kritik təhlükəsizlik açığı $$$ | https://memmedrehimzade.medium.com/symfony-profiler-kritik-t%C9%99hl%C3%BCk%C9%99sizlik-a%C3%A7%C4%B1%C4%9F%C4%B1-622ae6495fef?source=rss------bug_bounty-5 | memmed rehimzade | kibertəhlükəsizlik, bug-bounty, cybertime | 28-Feb-2024 |
| Microsoft Azure Cloud Service’s uAMQP Library Flaw and Its Potential for RCE — CVE-2024–27099… | https://medium.com/@elniak/microsoft-azure-cloud-services-uamqp-library-flaw-and-its-potential-for-rce-cve-2024-27099-3d717cdb45f3?source=rss------bug_bounty-5 | ElNiak | vulnerability, bug-bounty, cloud, azure, cybersecurity | 28-Feb-2024 |
| https://medium.com/@morganbinbash/-af057d8d6788?source=rss------bug_bounty-5 | Morgan Bin Bash | cybersecurity, pentesting, bug-bounty | 28-Feb-2024 |
| Revolutionize Your Bug Hunting: Jam.dev Turbocharges Bug Reporting | https://medium.com/@merisstupar11/revolutionize-your-bug-hunting-jam-dev-turbocharges-bug-reporting-2df14351766f?source=rss------bug_bounty-5 | Meris Stupar | bug-bounty, programming, testing, software-engineering, github | 28-Feb-2024 |
| How do I automate my recon — Part Two | https://medium.com/@aliraah/how-do-i-automate-my-recon-part-two-b39a66b4c23d?source=rss------bug_bounty-5 | Aliraah | python, bug-bounty, automation, infosec, reconnaissance | 28-Feb-2024 |
| Pre-Account Takeover Leading To Broken Access Control | https://medium.com/@bcarikci-dev/pre-account-takeover-leading-to-broken-access-control-13916ca02483?source=rss------bug_bounty-5 | Berkay Çarıkçıoğlu | broken-access-control, bug-bounty, cybersecurity, hacking, penetration-testing | 28-Feb-2024 |
| cybers11.3 Lab: Blind XXE with out-of-band interaction | 2024 | https://infosecwriteups.com/cybers11-3-lab-blind-xxe-with-out-of-band-interaction-2024-9f2f5caf98ad?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, cybersecurity, penetration-testing, hacking | 28-Feb-2024 |
| [TOOL GUIDE] Bypass-http a python tool to find 403 & 401 bypass | https://medium.com/@reinhardt.pwn/tool-guide-bypass-http-a-python-tool-to-find-403-401-bypass-b46ff0bd6978?source=rss------bug_bounty-5 | |Reinhardt| | cybersecurity-tools, cybersecurity, pentest, bug-bounty | 28-Feb-2024 |
| Yerel bir DTD’yi yeniden kullanarak kör XXE’den yararlanma | https://medium.com/@hhuseyinuyar17/yerel-bir-dtdyi-yeniden-kullanarak-k%C3%B6r-xxe-den-yararlanma-f999fbbfdd0a?source=rss------bug_bounty-5 | Hhuseyinuyar | xml, burpsuite, injection, bug-bounty, xxe | 28-Feb-2024 |
| how i make 6,000$ with jwt manipulation on web3 crypto application ? | https://medium.com/@zack0x01_/how-i-make-6-000-with-jwt-manipulation-on-web3-crypto-application-1e659c927647?source=rss------bug_bounty-5 | zack0x01 | bug-bounty-program, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 28-Feb-2024 |
| Hack Stories: Hacking Hackers EP:2 | https://infosecwriteups.com/hack-stories-hacking-hackers-ep-2-b4d2e628781e?source=rss------bug_bounty-5 | c0d3x27 | cybersecurity, threat-intelligence, hacking, software-development, bug-bounty | 28-Feb-2024 |
| First bug and bounty | https://medium.com/@Rahulkrishnan_R_Panicker/first-bug-and-bounty-5612ba5d455e?source=rss------bug_bounty-5 | Rahulkrishnan R Panicker | info-sec-writeups, bug-bounty, programming, technology, infosec | 27-Feb-2024 |
| Jenkins Arbitrary File Reading Vulnerability (CVE-2024–23897) — Bug Bounty Tuesday | https://medium.com/@kerstan/jenkins-arbitrary-file-reading-vulnerability-cve-2024-23897-bug-bounty-tuesday-8e3a69443d9b?source=rss------bug_bounty-5 | kerstan | technology, bug-bounty, security, cybersecurity, programming | 27-Feb-2024 |
| Bug Bounty should be a goto solution for your web3 security needs | https://securrtech.medium.com/bug-bounty-should-be-a-goto-solution-for-your-web3-security-needs-46b0f07b1a96?source=rss------bug_bounty-5 | Securr | web3-security, bug-bounty, web3 | 27-Feb-2024 |
| Leak JWT Private Key leads to Bypass Authentication | https://sonnguy3n.medium.com/leak-jwt-private-key-leads-to-bypass-authentication-e0bd984f55ad?source=rss------bug_bounty-5 | Son Nguyen | security, bypass, bug-bounty, jwt-token | 27-Feb-2024 |
| Finding and exploiting blind XXE vulnerabilities | https://cyberw1ng.medium.com/finding-and-exploiting-blind-xxe-vulnerabilities-446f1f41eab9?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, penetration-testing, careers, bug-bounty | 27-Feb-2024 |
| Reconnaissance: A Google-Dorking Affair | https://medium.com/@kieran.x.willey/reconnaissance-a-google-dorking-affair-21edfb4e3b0f?source=rss------bug_bounty-5 | Kieran W | penetration-testing, bug-bounty, reconnaissance, hacking, google-dorking | 27-Feb-2024 |
| How do you know if someone has opened your email or not? | https://medium.com/@deadoverflow/how-do-you-know-if-someone-has-opened-your-email-or-not-c5bcefda3a89?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty, chrome-extension, hacking, programming, cybersecurity | 27-Feb-2024 |
| Read This If You Still Watch Porn in Google Incognito Mode ⚫ | https://medium.com/@Ajakcybersecurity/read-this-if-you-still-watch-porn-in-google-incognito-mode-ab4a5faa1dcc?source=rss------bug_bounty-5 | AjakCybersecurity | google, history, ethical-hacking, bug-bounty, cybersecurity | 27-Feb-2024 |
| CVE-2023–40000: How Safe Is Your Internet Box? ️ | https://medium.com/coded-tech-talk/cve-2023-40000-how-safe-is-your-internet-box-%EF%B8%8F-06ff1f872f7b?source=rss------bug_bounty-5 | Coded Conversations | cyber-security-awareness, cve, vulnerability, cybersecurity, bug-bounty | 27-Feb-2024 |
| The Exploitation of Massive Slack Workspaces Registration Vulnerability | https://medium.com/@siratsami71/the-exploitation-of-massive-slack-workspaces-registration-vulnerability-0c0e76e5cd3e?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | bug-bounty, cybersecurity, hackerone | 27-Feb-2024 |
| Major Security Flaw in ConnectWise ScreenConnect — CVE-2024–1709 | https://medium.com/@elniak/major-security-flaw-in-connectwise-screenconnect-cve-2024-1709-633015ba2b9f?source=rss------bug_bounty-5 | ElNiak | cve, cybersecurity, ransomware, bug-bounty, penetration-testing | 26-Feb-2024 |
| Pwn College — Talking to Web Walkthrough by Karthikeyan Nagaraj | https://infosecwriteups.com/pwn-college-talking-to-web-walkthrough-by-karthikeyan-nagaraj-48d13b3a1216?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, hacking, security, careers | 26-Feb-2024 |
| This is How I Received My Acknowledgement from Microsoft | https://medium.com/@kamilrahman32/this-is-how-i-received-my-acknowledgement-from-microsoft-2366b58cbd98?source=rss------bug_bounty-5 | Kamil Rahuman | microsoft, cybersecurity, hall-of-fame, bug-bounty, bug-bounty-tips | 26-Feb-2024 |
| Hunting for Hidden Parameters in Burp Suite | https://medium.com/mii-cybersec/hunting-for-hidden-parameters-in-burp-suite-98b54616f863?source=rss------bug_bounty-5 | Bryan Matthew | hidden-parameters, bug-bounty, burpsuite, red-team, owasp | 26-Feb-2024 |
| Lakshya CTF 2k24 by pict cyber cell | https://medium.com/@suyogpatil1810/lakshya-ctf-2k24-by-pict-cyber-cell-6ec37ec0b954?source=rss------bug_bounty-5 | Suyog Patil | ctf-writeup, bug-bounty, ctf, engineering, hacking | 26-Feb-2024 |
| How I Found Xss In A Inactive Hackerone Program With My Mobile | https://medium.com/@mrraghavop12/how-i-found-xss-in-a-inactive-hackerone-program-34464552256e?source=rss------bug_bounty-5 | Ethical Raghav | bug-bounty-tips, technology, blockchain, bug-bounty, cybersecurity | 26-Feb-2024 |
| Glider: Revolutionizing Web3 Auditing and Security Analysis | https://medium.com/coinmonks/glider-revolutionizing-web3-auditing-and-security-analysis-3a3ad6add87d?source=rss------bug_bounty-5 | Officer's Notes | bug-bounty, solidity, smart-contracts, dapps, blockchain | 26-Feb-2024 |
| Hacking Android Apps With Frida | https://blog.prodefense.io/hacking-android-apps-with-frida-f4b9121228b6?source=rss------bug_bounty-5 | Matthew Keeley | security, pentesting, bug-bounty, android, hacking | 26-Feb-2024 |
| Html-Injection [ Bug Bounty ] | https://medium.com/@rhashibur75/html-injection-bug-bounty-a41f87217118?source=rss------bug_bounty-5 | Kazi Hashibur Rahman | bug-bounty | 25-Feb-2024 |
| Create Your Own File Extension | https://medium.com/@paritoshblogs/create-your-own-file-extension-fa484c677590?source=rss------bug_bounty-5 | Paritosh | coding, file-extension, bug-bounty, programming, information-technology | 25-Feb-2024 |
| Business Logic Error in the Comment Section of a Porn site | https://medium.com/@vflexo/business-logic-error-in-the-comment-section-of-a-porn-site-42643f66dfee?source=rss------bug_bounty-5 | vFlexo | vapt, cybersecurity, ethical-hacking, bug-bounty, penetration-testing | 25-Feb-2024 |
| CRLF injection | https://medium.com/@R00tendo/crlf-injection-ae26521c5e4c?source=rss------bug_bounty-5 | R00tendo | web-application-security, bug-bounty, web-security, crlf-injection | 25-Feb-2024 |
| The Story of How I Hacked a Website with a Simple Stored XSS Payload (And How Bugcrowd Turned Me… | https://medium.com/@iamrizwanvp/the-story-of-how-i-hacked-a-website-with-a-simple-stored-xss-payload-and-how-bugcrowd-turned-me-63773d5906ff?source=rss------bug_bounty-5 | RIZWAN | bug-bounty-tips, cybersecurity, bug-bounty, penetration-testing, vulnerability | 25-Feb-2024 |
| I took over 10 Million Accounts, Easy API Hacking | https://infosecwriteups.com/i-took-over-10-million-accounts-easy-api-hacking-89a7092abe40?source=rss------bug_bounty-5 | Ravaan | bug-bounty, bug-bounty-writeup, api, hacking, cybersecurity | 25-Feb-2024 |
| Beyond the Wall: Bypassing OTP, WAF, and 403 for exploiting a SQL Injection | https://medium.com/@remmy9/beyond-the-wall-bypassing-otp-waf-and-403-for-exploiting-a-sql-injection-97f06a3527c0?source=rss------bug_bounty-5 | Remmy | hacking, 403-bypass, bug-bounty, waf-bypass, sql-injection | 25-Feb-2024 |
| 10.5 Lab: Blind SSRF with out-of-band detection | 2024 | https://cyberw1ng.medium.com/10-5-lab-blind-ssrf-with-out-of-band-detection-2024-2497bcf7859c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, bug-bounty, security, careers | 25-Feb-2024 |
| The Aspida Bug Bounty Program | https://medium.com/@aspidabd/the-aspida-bug-bounty-program-84e4495955c1?source=rss------bug_bounty-5 | Aspida | lsd, lsdfi, blockchain, staking, bug-bounty | 24-Feb-2024 |
| Best Approach to active Directory: 2 | https://medium.com/@anekantsinghai/best-approach-to-active-directory-2-b32a8bb2be7e?source=rss------bug_bounty-5 | Anekant Singhai Jain | penetration-testing, windows, bug-bounty, cybersecurity, active-directory | 24-Feb-2024 |
| Explaining and exploiting open redirect vulnerabilities | https://medium.com/@R00tendo/explaining-and-exploiting-open-redirect-vulnerabilities-67dd825e2c49?source=rss------bug_bounty-5 | R00tendo | open-redirect, web-security, bug-bounty, web-application-security, web-hacking | 24-Feb-2024 |
| How I Got $5,000 for Out-of-Scope XSS | https://7odamoo.medium.com/how-i-got-5-000-for-out-of-scope-xss-f96938a8c561?source=rss------bug_bounty-5 | Mahmoud Hamed (7odamoo) | bug-bounty-tips, bug-bounty, pentesting | 24-Feb-2024 |
| Ethernaut Challenge Level 16: Solution (Preservation) | https://shubhamnagar1.medium.com/ethernaut-challenge-level-16-solution-preservation-4403230b469c?source=rss------bug_bounty-5 | Shubham Nagar | solidity, blockchain, cybersecurity, bug-bounty, ethernaut | 24-Feb-2024 |
| Bypass Rate Limits on authentication endpoints like a pro………! | https://medium.com/@a13h1/bypass-rate-limits-on-authentication-endpoints-like-a-pro-2054460a43c0?source=rss------bug_bounty-5 | Abhi Sharma | programming, rate-limiting, api, cybersecurity, bug-bounty | 24-Feb-2024 |
| 10.4 Lab: SSRF with filter bypass via open redirection vulnerability | 2024 | https://cyberw1ng.medium.com/10-4-lab-ssrf-with-filter-bypass-via-open-redirection-vulnerability-2024-fa36d8f10968?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, security, bug-bounty, hacking | 24-Feb-2024 |
| How i was able to hack over 10 million websites using BAC : broken access controle . | https://medium.com/@zack0x01_/how-i-was-able-to-hack-over-10-million-websites-using-bac-broken-access-controle-ce6b704e3dcb?source=rss------bug_bounty-5 | zack0x01 | hacking-training, bug-bounty-tips, bug-bounty, bug-bounty-writeup, hacking | 23-Feb-2024 |
| How Automation Detected Default Admin Credential Worth $500 | https://vijetareigns.medium.com/how-automation-detected-default-admin-credential-worth-500-d6c09719d307?source=rss------bug_bounty-5 | the_unlucky_guy | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugbounty-writeup, cybersecurity | 23-Feb-2024 |
| Shodan - “Unauthorized access to setup panel” | https://medium.com/@bug.hun3r/shodan-power-unauthorized-access-to-setup-panel-c64bd63f9b3e?source=rss------bug_bounty-5 | mo9kHu93r | hacking, web-application-security, bug-hunting, cybersecurity, bug-bounty | 23-Feb-2024 |
| 10.3 Lab: SSRF with blacklist-based input filter | 2024 | https://cyberw1ng.medium.com/10-3-lab-ssrf-with-blacklist-based-input-filter-2024-9a7972ab7e8f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, security, careers, hacking, bug-bounty | 23-Feb-2024 |
| From CRLF Injection to XSS: Elevating the Stakes in Apple iTunes Security | https://xelkomy.medium.com/from-crlf-injection-to-xss-elevating-the-stakes-in-apple-itunes-security-597dc435fd82?source=rss------bug_bounty-5 | Khaled Mohamed | crlf, infosec, bug-bounty, penetration-testing, xs | 23-Feb-2024 |
| Unveiling Bug Bounties: Balancing the Scale of Application Security | https://sushantkatare.medium.com/unveiling-bug-bounties-balancing-the-scale-of-application-security-be5645395101?source=rss------bug_bounty-5 | Sushant Katare, CISSP | bug-bounty, vulnerability, bugs | 23-Feb-2024 |
| Hacking Web Meeting/Webinar App | https://ronak-9889.medium.com/hacking-web-meeting-webinar-app-1cb31c648752?source=rss------bug_bounty-5 | Ronak Patel | information-security, ethical-hacking, cybersecurity, bug-bounty | 23-Feb-2024 |
| A Pen worth 80K (BBP#2) | https://infosecwriteups.com/a-pen-worth-80k-bbp-2-dceb0db18366?source=rss------bug_bounty-5 | Devender Rao | penetration-testing, cybersecurity, bug-bounty, application-security, linux | 23-Feb-2024 |
| How I Got 1-Click ATO through self-XSS | https://medium.com/@0x3adly/how-i-was-able-to-get-1-click-ato-through-self-xss-6a6f59b3a6da?source=rss------bug_bounty-5 | Anas Eladly ( 0x3adly ) | bug-bounty, csrf, penetration-testing, cross-site-scripting, bug-bounty-tips | 22-Feb-2024 |
| Disclose assigned apps of any facebook user | https://gtm0x01.medium.com/disclose-assigned-apps-of-any-facebook-user-e78bcff1de71?source=rss------bug_bounty-5 | Gtm Mänôz | bug-bounty, graphql, facebook-bug-bounty, bug-bounty-writeup, infosec | 22-Feb-2024 |
| IDOR: The Simple Switch | https://medium.com/@ganga_/idor-the-simple-switch-19d881358552?source=rss------bug_bounty-5 | Ganga | ethical-hacking, bug-bounty-writeup, bug-bounty, web-application-security, penetration-testing | 22-Feb-2024 |
| How To Report a Vulnerability which is not a part of the VDP Program? | https://medium.com/@Ajakcybersecurity/how-to-report-a-vulnerability-which-is-not-a-part-of-the-vdp-program-b7b951795c45?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, penetration-testing, bug-bounty, hacking, blog | 22-Feb-2024 |
| HTTP-Only Sessions: No Problem? ATO Still Lurks via XSS! | https://kokomagedd.medium.com/http-only-sessions-no-problem-ato-still-lurks-via-xss-d415dec701d0?source=rss------bug_bounty-5 | Kyrillos Maged | bug-bounty, bug-bounty-tips, xss-attack, cybersecurity, infosec | 22-Feb-2024 |
| Mastering BetterCap: A Beginner’s Guide to Network Attacks and Monitoring | https://infosecwriteups.com/mastering-bettercap-a-beginners-guide-to-network-attacks-and-monitoring-b313c1f85489?source=rss------bug_bounty-5 | ElNiak | bug-bounty, cybersecurity, reconnaissance, network-security, bettercap | 22-Feb-2024 |
| Exploiting XSS to Perform CSRF | https://medium.com/@marduk.i.am/exploiting-xss-to-perform-csrf-275288910459?source=rss------bug_bounty-5 | Marduk I Am | stored-xss, cybersecurity, bug-bounty, portswigger-lab, cross-site-scripting | 22-Feb-2024 |
| How I logged into user accounts with no information | https://medium.com/@jsamia/how-i-logged-into-user-accounts-with-no-information-629f50e8885d?source=rss------bug_bounty-5 | Jaeden Samia | security, ethical-hacking, bug-bounty | 22-Feb-2024 |
| Using Wayback And DNS rebinding For SSRF | https://medium.com/@amnotacat/using-wayback-and-dns-rebinding-for-ssrf-a5a16f611acc?source=rss------bug_bounty-5 | amnotacat | bug-bounty | 22-Feb-2024 |
| Exploit Development: Classic Buffer Overflows | https://medium.com/@boogsta/exploit-development-classic-buffer-overflows-0416a7ed1d9a?source=rss------bug_bounty-5 | Boogsta | cyber, hacking, bug-bounty, tryhackme, cybersecurity | 22-Feb-2024 |
| Hack The Box Certified Bug Bounty Hunter (CBBH) Review | https://medium.com/@josselin_poupeney/hack-the-box-certified-bug-bounty-hunter-cbbh-review-f25796cb22ee?source=rss------bug_bounty-5 | Josselin Poupeney | bug-bounty, pentesting, hackin, cbbh, hackthebox | 22-Feb-2024 |
| How Bug Bounties Are Incentivising Ethical Hacking | https://medium.com/@cybertec/how-bug-bounties-are-incentivising-ethical-hacking-1fa49410e0aa?source=rss------bug_bounty-5 | Jonathan Paulson | bug-bounty, hacking, cybercrime, cybersecurity, quantum-computing | 22-Feb-2024 |
| Absolute Beginners Guide For Finding P4 Bugs (With Real Example!)-Part 2 | https://medium.com/@avbhijitdutta99/absolute-beginners-guide-for-finding-p4-bugs-with-real-example-part-2-c4a9d9c7af43?source=rss------bug_bounty-5 | Cyberbeat | bugs, cybersecurity, cyberattack, bug-bounty, bug-bounty-tips | 21-Feb-2024 |
| 10 Kesalahan Coding Yang Membuat Aplikasi Kurang Aman | https://medium.com/@yasminramadini/10-kesalahan-coding-yang-membuat-aplikasi-kurang-aman-77da9d768594?source=rss------bug_bounty-5 | Yasmin Ramadini | programming, cybersecurity, cyber-security-awareness, coding, bug-bounty | 21-Feb-2024 |
| Understanding Wazuh | https://medium.com/@paritoshblogs/understanding-wazuh-b4748d21c6ba?source=rss------bug_bounty-5 | Paritosh | threat-detection, siem, cybersecurity, bug-bounty, wazuh | 21-Feb-2024 |
| Bug bounty writeup : 2F/OTP Bypass on Registeration via Response manipulation | https://noorhomaid.medium.com/bug-bounty-writeup-2f-otp-bypass-on-registeration-via-response-manipulation-2e53573ffa4c?source=rss------bug_bounty-5 | NoorHomaid | bug-bounty, ethical-hacking, bugbounty-writeup, cybersecurity | 21-Feb-2024 |
| 9.5 Lab: Exploiting time-sensitive vulnerabilities | 2024 | https://infosecwriteups.com/9-5-lab-exploiting-time-sensitive-vulnerabilities-2024-d5bf94cdcf59?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, security, hacking, cybersecurity | 21-Feb-2024 |
| Critical Vulnerabilities in VMware EAP Uncovered — Unraveling CVE-2024–22245 | https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5 | ElNiak | vulnerability, programming, bug-bounty, vmware, cybersecurity | 21-Feb-2024 |
| This is the easiest bug you can find right now. | https://medium.com/@an0nbil/this-is-the-easiest-bug-you-can-find-right-now-eb324861c238?source=rss------bug_bounty-5 | an0nbil | ethical-hacking, bug-bounty, programming, bug-bounty-tips, cybersecurity | 21-Feb-2024 |
| Critical Vulnerabilities in VMware EAP Uncovered — Unraveling CVE-2024–22245 | https://systemweakness.com/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5 | ElNiak | vulnerability, programming, bug-bounty, vmware, cybersecurity | 21-Feb-2024 |
| 9.4 Lab: Single-endpoint race conditions | 2024 | https://cyberw1ng.medium.com/9-4-lab-single-endpoint-race-conditions-2024-40b12d1ae4be?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, security, careers, cybersecurity, hacking | 20-Feb-2024 |
| Apa Itu Cross Site Scripting? Jenis, Dampak, Dan Pencegahannya | https://medium.com/@yasminramadini/apa-itu-cross-site-scripting-jenis-dampak-dan-pencegahannya-e507eedb43f8?source=rss------bug_bounty-5 | Yasmin Ramadini | cybersecurity, xss-attack, pentesting, cyber-security-awareness, bug-bounty | 20-Feb-2024 |
| My Unbelievable Hack into HR Admin — A Bug Bounty Tale!!! | https://medium.com/@ratnadip1998/my-unbelievable-hack-into-hr-admin-a-bug-bounty-tale-853338770d8c?source=rss------bug_bounty-5 | Ratnadip Gajbhiye | bugcrowd, ethical-hacking, bug-bounty, bug-bounty-tips, hackerone | 20-Feb-2024 |
| Hou I Discovering the Origin IP In Bug Bounty — Bug Bounty Tuesday | https://medium.com/@kerstan/hou-i-discovering-the-origin-ip-in-bug-bounty-bug-bounty-tuesday-47fa16c4ef34?source=rss------bug_bounty-5 | kerstan | security, technology, bug-bounty, cybersecurity, programming | 20-Feb-2024 |
| How I Discovering the Origin IP In Bug Bounty — Bug Bounty Tuesday | https://medium.com/@kerstan/hou-i-discovering-the-origin-ip-in-bug-bounty-bug-bounty-tuesday-47fa16c4ef34?source=rss------bug_bounty-5 | kerstan | security, technology, bug-bounty, cybersecurity, programming | 20-Feb-2024 |
| Breach the Build: Exploiting Jenkins (CVE-2024–23897) | https://medium.com/@josh.beck2006/breach-the-build-exploiting-jenkins-cve-2024-23897-f2ecc415f9bf?source=rss------bug_bounty-5 | Josh Beck | oscp, cybersecurity, ctf-writeup, bug-bounty | 20-Feb-2024 |
| How easy it is to find Private Info on Google | https://medium.com/@lochana8723/mastering-osint-gold-mines-a-guide-to-google-dorking-for-bug-bounty-success-e1f2acbbf4f2?source=rss------bug_bounty-5 | Lochana Dissanayake | cybersecurity, ethical-hacking, bug-bounty, osint | 20-Feb-2024 |
| Response Manipulation leads to Bypassing the OTP email verification | https://kiraadx.medium.com/response-manipulation-leads-to-bypassing-the-otp-email-verification-3107d558e8a5?source=rss------bug_bounty-5 | KiRaaDx | bug-bounty-tips, bug-bounty | 20-Feb-2024 |
| Day 14 Bug Bounty Challenge — Found $1000 Stored XSS | https://medium.com/@avbhijitdutta99/day-14-bug-bounty-challenge-found-1000-stored-xss-c0c9813bbe5a?source=rss------bug_bounty-5 | Abhijit Dutta | bug-bounty, bugbountychallenge, bug-bounty-tips, bug-bounty-writeup | 19-Feb-2024 |
| 9.3 Lab: Multi-endpoint race conditions | 2024 | https://cyberw1ng.medium.com/9-3-lab-multi-endpoint-race-conditions-2024-5617e806a0fc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, security, bug-bounty, careers, hacking | 19-Feb-2024 |
| HackTheBox — Monitored | https://medium.com/@mxzartxbyte/hackthebox-monitored-6cd7bc16f080?source=rss------bug_bounty-5 | mxz4rt | bug-bounty, penetration-testing, network-penetration, hackthebox-writeup, hack-the-box-writeup | 19-Feb-2024 |
| The Ultimate Guide to Top Bug Bounty Platforms in 2024 | https://medium.com/@crawsecurity/the-ultimate-guide-to-top-bug-bounty-platforms-in-2024-6934a3db42d2?source=rss------bug_bounty-5 | crawsecurity | bugs, bug-fixes, bug-bounty-tips, bug-zero, bug-bounty | 19-Feb-2024 |
| Unlocking Creativity: TCS HackQuest S8 Unveiled — Round 2 | https://medium.com/@Dark_D3v1l/unlocking-creativity-tcs-hackquest-s8-unveiled-round-2-a311e68becd4?source=rss------bug_bounty-5 | Raviteja | web-security, ctf-writeup, bug-bounty, reverse-engineering, tcs-hackquest | 19-Feb-2024 |
| How to Find First Bug (For Beginners) | https://hackerhq.medium.com/how-to-find-first-bug-for-beginners-22a9177e94a0?source=rss------bug_bounty-5 | HackerHQ | cyber-security-awareness, bug-bounty-tips, cybersecurity, hackerone, bug-bounty | 19-Feb-2024 |
| Android Architecture Components: Android Pentesting | https://bot2root.medium.com/android-architecture-components-android-pentesting-1279e35c2d32?source=rss------bug_bounty-5 | Raghuveer Singh Chouhan | pentesting, bug-bounty, hacking, cybersecurity, android | 19-Feb-2024 |
| Searching industrial infrastructure with Netlas.io | https://netlas.medium.com/searching-industrial-infrastructure-with-netlas-io-49c08ca519a2?source=rss------bug_bounty-5 | Netlas.io | bug-bounty, critical-infrastructure, penetration-testing, cybersecurity, information-security | 19-Feb-2024 |
| Absolute Beginners Guide For Finding P4 Bugs -Part 1 | https://medium.com/@avbhijitdutta99/absolute-beginners-guide-for-finding-p4-bugs-part-1-5585cc94ac8b?source=rss------bug_bounty-5 | Cyberbeat | bug-bounty-hunter, bug-bounty-tips, bug-bounty-program, bug-bounty | 19-Feb-2024 |
| Dorking-Pentesting: Create Your Own Automated Pentesting Tools | https://medium.com/@elniak/dorking-pentesting-create-your-own-automated-pentesting-tools-11134114c2b7?source=rss------bug_bounty-5 | ElNiak | tools, bug-bounty, python, penetration-testing, google | 19-Feb-2024 |
| Web Cache Poisoing leads to ATO (Account takeover) | https://medium.com/@hoosgamer/web-cache-poisoing-leads-to-ato-account-takeover-2522b4583a97?source=rss------bug_bounty-5 | HooS | hacking, bug-bounty-tips, bug-bounty, bug-bounty-writeup, web-security | 19-Feb-2024 |
| Apa Itu Security Operation Center (SOC) | https://medium.com/@yasminramadini/apa-itu-security-operation-center-soc-345f56cd85f3?source=rss------bug_bounty-5 | Yasmin Ramadini | pentesting, bug-bounty, cybersecurity, soc-analyst, ethical-hacking | 18-Feb-2024 |
| HackTheBox — SQLMap Essentials | https://medium.com/@harry.hphu/hackthebox-sqlmap-essentials-72eaa7a13596?source=rss------bug_bounty-5 | Huy Phu | web-application-security, bug-bounty, sql, hackthebox | 18-Feb-2024 |
| Introduction to API Testing — API Discovery and Interaction | https://medium.com/@harry.hphu/introduction-to-api-testing-api-discovery-and-interaction-705248fc089e?source=rss------bug_bounty-5 | Huy Phu | api, bug-bounty, web-application-security, api-testing | 18-Feb-2024 |
| Introduction to API Testing — Reconnaissance | https://medium.com/@harry.hphu/introduction-to-api-testing-reconnaissance-7b471f4f4e73?source=rss------bug_bounty-5 | Huy Phu | web-application-security, api-testing, api, bug-bounty | 18-Feb-2024 |
| Easy automation of bug bounty using Ethred | https://medium.com/@eyaalgabay/automate-bug-bounty-using-ethred-de042fb19926?source=rss------bug_bounty-5 | Eyaalgabay | penetration-testing, bug-bounty, web-security, bugbounty-tips, hacking | 18-Feb-2024 |
| My New Tool For Information Finding | https://medium.com/@mrraghavop12/my-new-tool-for-information-finding-92a205a6e305?source=rss------bug_bounty-5 | Ethical Raghav | data-science, bug-bounty-tips, programming, bug-bounty, technology | 18-Feb-2024 |
| Introduction to API Testing — Server-Side Parameter Pollution | https://medium.com/@harry.hphu/introduction-to-api-testing-server-side-parameter-pollution-52dc5c170d19?source=rss------bug_bounty-5 | Huy Phu | web-application-security, api, api-testing, bug-bounty | 18-Feb-2024 |
| Introduction to API Testing — Mass Assignment vulnerabilities | https://medium.com/@harry.hphu/introduction-to-api-testing-mass-assignment-vulnerabilities-1643f75d1d20?source=rss------bug_bounty-5 | Huy Phu | web-application-security, api-testing, api, bug-bounty | 18-Feb-2024 |
| Exploiting Cross-Site Scripting to Capture Passwords | https://medium.com/@marduk.i.am/exploiting-cross-site-scripting-to-capture-passwords-b2cda84698b0?source=rss------bug_bounty-5 | Marduk I Am | cybersecurity, cross-site-scripting, portswigger-lab, bug-bounty, stored-xss | 18-Feb-2024 |
| 9.2 Lab: Bypassing rate limits via race conditions | 2024 | https://cyberw1ng.medium.com/9-2-lab-bypassing-rate-limits-via-race-conditions-2024-533185d6d94e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, secuity, hacking | 18-Feb-2024 |
| PortSwigger — LAB-6 Remote code execution via polyglot web shell upload (Bug Bounty Prep)[by… | https://infosecwriteups.com/portswigger-lab-6-remote-code-execution-via-polyglot-web-shell-upload-bug-bounty-prep-by-b426b0d50d39?source=rss------bug_bounty-5 | dollarboysushil | cybersecurity, ethical-hacking, portswigger, web-app-security, bug-bounty | 18-Feb-2024 |
| Open a link, and your Wi-Fi password is changed. | https://medium.com/@deadoverflow/open-a-link-and-your-wi-fi-password-is-changed-7c47ccb4d095?source=rss------bug_bounty-5 | Imad Husanovic | hacking, cybersecurity, programming, bug-bounty, bug-bounty-tips | 18-Feb-2024 |
| Detecting and exploiting limit overrun race conditions with Turbo Intruder | https://cyberw1ng.medium.com/detecting-and-exploiting-limit-overrun-race-conditions-with-turbo-intruder-424bed12f2cf?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, hacking, security, bug-bounty | 17-Feb-2024 |
| 0Day SQLi Discovered during internal PenTesting | https://medium.com/@SentinelXTeam/0day-sqli-discovered-during-internal-pentesting-0d00db3147c5?source=rss------bug_bounty-5 | SentinelX Research | bug-bounty, exploitation, cybersecurity, bug-bounty-tips, 0day | 17-Feb-2024 |
| Mengintip database Website Bimbel di Indonesia | https://uzet.medium.com/mengintip-database-website-bimbel-di-indonesia-1d3620ce438d?source=rss------bug_bounty-5 | Timotius Benhur | pentesting, web-security, bug-bounty-tips, bug-bounty | 17-Feb-2024 |
| How much longer must we dwell, with W-S-D-L? | https://medium.com/illumination/how-much-longer-must-we-dwell-with-w-s-d-l-789eb659b77a?source=rss------bug_bounty-5 | Quintius Walker | bug-bounty, poetry, web-development, creative-writing, hacking | 17-Feb-2024 |
| PortSwigger — LAB -4 Web shell upload via extension blacklist bypass (Bug Bounty Prep)[by… | https://infosecwriteups.com/portswigger-lab-4-web-shell-upload-via-extension-blacklist-bypass-bug-bounty-prep-by-7c6233320f81?source=rss------bug_bounty-5 | dollarboysushil | web-app-security, portswigger, cybersecurity, bug-bounty, file-upload-vulnerability | 17-Feb-2024 |
| weird bug using fake id via photoshop worth $*** | https://hamzadzworm.medium.com/weird-bug-using-fake-id-via-photoshop-worth-1fe5dbd04497?source=rss------bug_bounty-5 | Hamzadzworm | bugbounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips, infosec | 17-Feb-2024 |
| PortSwigger — LAB-5 Web shell upload via obfuscated file extension (Bug Bounty Prep)[by… | https://dollarboysushil.medium.com/portswigger-lab-5-web-shell-upload-via-obfuscated-file-extension-bug-bounty-prep-by-5232dd3fb8fa?source=rss------bug_bounty-5 | dollarboysushil | portswigger, cybersecurity, bug-bounty, ethical-hacking, web-app-security | 17-Feb-2024 |
| Harnessing Microsoft Copilot as a Cybersecurity Advisor | https://infosecwriteups.com/harnessing-microsoft-copilot-as-a-cybersecurity-advisor-518c46f697b3?source=rss------bug_bounty-5 | Paritosh | microsoft, cybersecurity, bug-bounty, information-security, microsoft-copilot | 17-Feb-2024 |
| Demystifying HTTP Request Smuggling: Detection to Exploitation | https://roadtooscp.medium.com/demystifying-http-request-smuggling-detection-to-exploitation-d6bc7beed73e?source=rss------bug_bounty-5 | RoadToOSCP | bug-bounty, owasp, bug-bounty-tips, pentesting, ethical-hacking | 17-Feb-2024 |
| GitHub Recon- For Finding Sensitive Information | https://medium.com/@pawan_rawat/github-recon-for-finding-sensitive-information-aecdeb9c9dce?source=rss------bug_bounty-5 | Pawanrawat | github-recon, bug-bounty-writeup, sensitive-data-exposure, bug-bounty-tips, bug-bounty | 17-Feb-2024 |
| How do I automate my recon — Part One | https://medium.com/@aliraah/how-do-i-automate-my-recon-part-one-fd17dc8717c8?source=rss------bug_bounty-5 | Ali | python, reconnaissance, automation, bash, bug-bounty | 17-Feb-2024 |
| The Unseen 0-Click Threat Lurking in Your Inbox: CVE-2024–21413 Explained | https://systemweakness.com/the-unseen-0-click-threat-lurking-in-your-inbox-cve-2024-21413-explained-a8bd9ec0c46d?source=rss------bug_bounty-5 | ElNiak | vulnerability, cybersecurity, microsoft-outlook, bug-bounty, rce | 17-Feb-2024 |
| Hacking the Dutch Government | https://medium.com/@jackson_80133/hacking-the-dutch-government-153678a191c0?source=rss------bug_bounty-5 | Jackson | cybersecurity, hacking, bug-bounty | 17-Feb-2024 |
| MonikerLink Meltdown: Demystifying CVE-2024–21413 and Dodging Outlook’s Booby Trap | https://medium.com/@chinamayjoshi/monikerlink-meltdown-demystifying-cve-2024-21413-and-dodging-outlooks-booby-trap-43ba52c4b458?source=rss------bug_bounty-5 | The Cyber Tornado | information-security, microsoft, vapt, cybersecurity, bug-bounty | 17-Feb-2024 |
| The Importance of Sharing Cybersecurity Knowledge on Reading Platforms | https://medium.com/@paritoshblogs/the-importance-of-sharing-cybersecurity-knowledge-on-reading-platforms-34a474a51522?source=rss------bug_bounty-5 | Paritosh | information-security, infosec, hacking, cybersecurity, bug-bounty | 16-Feb-2024 |
| Researcher’s Experience — Bug Bounty Program | https://medium.com/@_crac/researchers-experience-bug-bounty-program-7d588c363fa6?source=rss------bug_bounty-5 | CRAC Learning | bug-bounty, security, research, cybersecurity | 16-Feb-2024 |
| GitHub Enterprise Server vulns | https://irsl.medium.com/github-enterprise-server-vulns-26889987919c?source=rss------bug_bounty-5 | Imre Rad | security, github, bug-bounty | 16-Feb-2024 |
| Windows Defender SmartScreen Vulnerability: CVE-2024–21412 Exposes Financial Traders to… | https://systemweakness.com/windows-defender-smartscreen-vulnerability-cve-2024-21412-exposes-financial-traders-to-a03ff476a293?source=rss------bug_bounty-5 | ElNiak | windows, bug-bounty, cybersecurity, vulnerability, malware | 16-Feb-2024 |
| Mastering Cross-Site Scripting (XSS): Risks, Detection, and Prevention | https://medium.com/@elniak/mastering-cross-site-scripting-xss-risks-detection-and-prevention-3cee199d2fff?source=rss------bug_bounty-5 | ElNiak | cybersecurity, xss-attack, bug-bounty, programming, xss-vulnerability | 16-Feb-2024 |
| Mastering SQLMap: A Comprehensive Guide for Cybersecurity Enthusiasts | https://medium.com/@elniak/mastering-sqlmap-a-comprehensive-guide-for-cybersecurity-enthusiasts-4e224b42396a?source=rss------bug_bounty-5 | ElNiak | sqlmap, programming, cybersecurity, sql-injection, bug-bounty | 16-Feb-2024 |
| Guide: ProjectDiscovery’s cvemap to nuclei template mapping. | https://medium.com/@matejsmycka/guide-projectdiscoverys-cvemap-to-nuclei-template-mapping-5535c2934811?source=rss------bug_bounty-5 | Matejsmycka | cybersecurity, bug-bounty, bash, penetration-testing | 16-Feb-2024 |
| My First Account Takeover Via Password Reset Poisoning | https://medium.com/@cyberpro151/my-first-account-takeover-via-password-reset-poisoning-7c35baadfbe3?source=rss------bug_bounty-5 | cyberpro151 | web-hacking, bug-bounty, pentesting, account-takeover, offensive-security | 16-Feb-2024 |
| Mastering Manual SQL Injection: A Comprehensive Guide for Cybersecurity Enthusiasts | https://systemweakness.com/mastering-manual-sql-injection-a-comprehensive-guide-for-cybersecurity-enthusiasts-4541d46b42a7?source=rss------bug_bounty-5 | ElNiak | sql-injection, cybersecurity, sql, programming, bug-bounty | 16-Feb-2024 |
| The Posemesh Avalanche C-Chain Bug Bounty Program | https://medium.com/posemesh/the-posemesh-avalanche-c-chain-bug-bounty-program-b34c01da1277?source=rss------bug_bounty-5 | Auki Labs | bug-bounty, auki-labs, avalanche, posemesh, blockchain | 16-Feb-2024 |
| Mastering CSRF: A Comprehensive Guide to Cross-Site Request Forgery | https://medium.com/@elniak/mastering-csrf-a-comprehensive-guide-to-cross-site-request-forgery-a380aca0eab0?source=rss------bug_bounty-5 | ElNiak | web-development, programming, csrf, cybersecurity, bug-bounty | 16-Feb-2024 |
| 8.6 Lab: Remote code execution via polyglot web shell upload | 2024 | https://cyberw1ng.medium.com/8-6-lab-remote-code-execution-via-polyglot-web-shell-upload-2024-5646ef951c0b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, security, careers, bug-bounty | 16-Feb-2024 |
| how i made easy information disclosure bugs in graphql | https://medium.com/@eyaalgabay/how-i-made-easy-information-disclosure-bugs-in-graphql-82284b05d7b4?source=rss------bug_bounty-5 | Eyaalgabay | penetration-testing, bug-bounty, bug-bounty-tips, web-security, hacking | 16-Feb-2024 |
| Bypassing Captcha | https://medium.com/@eyaalgabay/bypassing-captcha-29a77c768469?source=rss------bug_bounty-5 | Eyaalgabay | bug-bounty, web-security, penetration-testing, hacking, bug-bounty-tips | 15-Feb-2024 |
| The Rise of Large Language Models and the Evolution of Programming: A Thesis on Prompt… | https://analystlevy.medium.com/the-rise-of-large-language-models-and-the-evolution-of-programming-a-thesis-on-prompt-3ab81578408a?source=rss------bug_bounty-5 | Asuquo Levy Eyo Jr | cybercrime, cryptography, bug-bounty, cyber-security-awareness, black-hat-2021 | 15-Feb-2024 |
| The Game-Changing Magic of RCE [Cybersecurity] | https://medium.com/@paritoshblogs/the-game-changing-magic-of-rce-cybersecurity-6e1468425e06?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, cybersecurity, information-security, rce | 15-Feb-2024 |
| Account Takeover [It Looked Secure at First] | https://cristivlad.medium.com/account-takeover-it-looked-secure-at-first-f14a31cb7f5c?source=rss------bug_bounty-5 | Cristi Vlad | cybersecurity, bug-bounty, penetration-testing, infosec, pentesting | 15-Feb-2024 |
| Github Dorking: A Beginner’s Guide to Finding Secrets in Repositories | https://medium.com/@elniak/github-dorking-a-beginners-guide-to-finding-secrets-in-repositories-2d4d36287913?source=rss------bug_bounty-5 | ElNiak | threat-intelligence, github, cybersecurity, github-dorking, bug-bounty | 15-Feb-2024 |
| 8.5 Lab: Web shell upload via obfuscated file extension | 2024 | https://cyberw1ng.medium.com/8-5-lab-web-shell-upload-via-obfuscated-file-extension-2024-0cb8b3e1e537?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, security, bug-bounty, cybersecurity | 15-Feb-2024 |
| Portswigger — Command Injection All Labs Walkthrough(Bug Bounty Prep)[by dollarboysushil] | https://infosecwriteups.com/portswigger-command-injection-all-labs-walkthrough-bug-bounty-prep-by-dollarboysushil-e836421212cf?source=rss------bug_bounty-5 | dollarboysushil | cybersecurity, command-injection, bug-bounty, ethical-hacking, portswigger | 15-Feb-2024 |
| HTML Injection in Mail BOX | https://codingninjablogs.tech/html-injection-in-mail-box-c963a8c66d69?source=rss------bug_bounty-5 | #!/Subhankar | html-injection, hackerone, hacking, bug-bounty | 15-Feb-2024 |
| Edu-Hack: How a Simple Request Compromised Entire Classrooms Users | https://uchihamrx.medium.com/edu-hack-how-a-simple-request-compromised-entire-classrooms-users-7cefc1225654?source=rss------bug_bounty-5 | Abdelrhman Amin | bug-bounty-tips, cybersecurity, web-security, bug-bounty, penetration-testing | 15-Feb-2024 |
| Behind the Screen: The Forgotten Password Feature That Almost Failed Us | https://medium.com/@elcapitano7x/behind-the-screen-the-forgotten-password-feature-that-almost-failed-us-a3e67e103cc5?source=rss------bug_bounty-5 | Elcapitano | bugswagger, bugsbounty, penetration-testing, information-security, bug-bounty | 15-Feb-2024 |
| The effectiveness of employing BChecks to uncover significant secrets | https://xelkomy.medium.com/the-effectiveness-of-employing-bchecks-to-uncover-significant-secrets-788e15a8a952?source=rss------bug_bounty-5 | Khaled Mohamed | secrets, bug-bounty, bugswagger, cybersecurity, penetration-testing | 15-Feb-2024 |
| Magic No More: Exposing Flaws in Magic Link Authentication | https://medium.com/@elcapitano7x/magic-no-more-exposing-flaws-in-magic-link-authentication-7cede724382f?source=rss------bug_bounty-5 | Elcapitano | bug-bounty, penetration-testing, cybersecurity, bugswagger, information-security | 15-Feb-2024 |
| Stored XSS with HTTP only Session Cookies | https://medium.com/techiepedia/stored-xss-with-http-only-session-cookies-32e5eb121384?source=rss------bug_bounty-5 | Jess | programming, website, security, web-development, bug-bounty | 15-Feb-2024 |
| CVE-2024–24142 Exploitation & PoC | https://medium.com/@SentinelXTeam/cve-2024-24142-exploitation-poc-045021596804?source=rss------bug_bounty-5 | SentinelX Research | penetration-testing, cybersecurity, hacking, bug-bounty, bug-bounty-tips | 15-Feb-2024 |
| open redirect using homographs | https://medium.com/@eyaalgabay/open-redirect-using-homographs-ab2c21513b45?source=rss------bug_bounty-5 | Eyaalgabay | bug-bounty-tips, penetration-testing, bug-bounty, open-redirect, web-hacking | 14-Feb-2024 |
| Exploiting Cross-Site Scripting to Steal Cookies | https://medium.com/@marduk.i.am/exploiting-cross-site-scripting-to-steal-cookies-3d14c8b42fae?source=rss------bug_bounty-5 | Marduk I Am | cross-site-scripting, cybersecurity, portswigger-lab, xss-attack, bug-bounty | 14-Feb-2024 |
| THIS IS HOW I FOUND FOUR VULNERABLILITY IN 45 MINUTES | https://medium.com/@mrraghavop12/this-is-how-i-found-four-vulnerablility-in-45-minutes-050144a58161?source=rss------bug_bounty-5 | Ethical Raghav | bug-bounty, blockchain, technology, bug-bounty-tips, cybersecurity | 14-Feb-2024 |
| Portswigger — Path Traversal All Labs Walkthrough(Bug Bounty Prep)[by dollarboysushil] | https://infosecwriteups.com/portswigger-path-traversal-all-labs-walkthrough-bug-bounty-prep-by-dollarboysushil-85ab64d6106a?source=rss------bug_bounty-5 | dollarboysushil | bug-bounty, web-security, path-traversal, ethical-hacking, portswigger | 14-Feb-2024 |
| How I was able to hack my college’s website with number of IDORs and CORS Misconfigurations | https://medium.com/@cyberpro151/how-i-was-able-to-hack-my-colleges-website-with-number-of-idors-and-cors-misconfigurations-0f880d308b79?source=rss------bug_bounty-5 | cyberpro151 | hacking, web-hacking, bug-bounty, idor | 14-Feb-2024 |
| GMX V1 Bug Disclosure. | https://morphex.medium.com/gmx-v1-bug-disclosure-71e4ad9a918e?source=rss------bug_bounty-5 | Morphex | defi, bug-bounty, cryptocurrency | 14-Feb-2024 |
| 8.4 Lab: Web shell upload via extension blacklist bypass | 2024 | https://cyberw1ng.medium.com/8-4-lab-web-shell-upload-via-extension-blacklist-bypass-2024-2010bcaa283c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, security, hacking, bug-bounty, cybersecurity | 14-Feb-2024 |
| A Journey through Reconnaissance to MySQL Server Access in the Gaming Realm | https://medium.com/@daniel1895/a-journey-through-reconnaissance-to-mysql-server-access-in-the-gaming-realm-ce6a6f4eb21c?source=rss------bug_bounty-5 | Daniel1895 | fuzzing, bug-bounty, reconnaissance, bug-bounty-tips, hacking | 14-Feb-2024 |
| The Hidden Dangers Lurking in NTLM Authentication (Cybersecurity) | https://medium.com/@paritoshblogs/the-hidden-dangers-lurking-in-ntlm-authentication-cybersecurity-17fc4a02dbf9?source=rss------bug_bounty-5 | Paritosh | ntlm, hacking, cybersecurity, authentication, bug-bounty | 13-Feb-2024 |
| Introducing M:N Hybrid Threading in Go: Unveiling the Power of Goroutines | https://medium.com/@rezauditore/introducing-m-n-hybrid-threading-in-go-unveiling-the-power-of-goroutines-8f2bd31abc84?source=rss------bug_bounty-5 | rezauditore | programming, tutorial, multithreading, bug-bounty, golang | 13-Feb-2024 |
| Best tools you must have to look at for penetration testing. | https://medium.com/@coderjack0/best-tools-you-must-have-to-look-at-for-penetration-testing-5780ad9e7ddf?source=rss------bug_bounty-5 | Bugz_Bunne | pentesting, hacking, cybersecurity, cybe, bug-bounty | 13-Feb-2024 |
| Memory vulnerabilities: Buffer and integer overflows, memory leak, and pointer dereferencing | https://medium.com/@forensics.000/memory-vulnerabilities-buffer-and-integer-overflows-memory-leak-and-pointer-dereferencing-b0e7cbbc0cd3?source=rss------bug_bounty-5 | forensics | buffer-overflow, bug-bounty, null-pointer-dereference, memory-improvement | 13-Feb-2024 |
| Cross-site and server-side request forgeries (CSRF and SSRF) | https://medium.com/@forensics.000/cross-site-and-server-side-request-forgeries-csrf-and-ssrf-b91911e42e44?source=rss------bug_bounty-5 | forensics | penetration-testing, ssrf, csrf, bug-bounty, hackerone | 13-Feb-2024 |
| Cross-site scripting | https://medium.com/@forensics.000/cross-site-scripting-706293b1ad8d?source=rss------bug_bounty-5 | forensics | web-penetration-testing, ctf-writeup, hackerone, xss-attack, bug-bounty | 13-Feb-2024 |
| Program Misuse and Privilege Escalation — PWN COLLEGE | https://medium.com/illumination/program-misuse-and-privilege-escalation-pwn-college-9d5dbfd9cb3c?source=rss------bug_bounty-5 | B A T M A N | pwn, pentesting, challenge, hacking, bug-bounty | 13-Feb-2024 |
| Unauthenticated Jira CVEs Check List — Bug Tuesday | https://medium.com/@kerstan/unauthenticated-jira-cves-check-list-bug-tuesday-465b16266349?source=rss------bug_bounty-5 | kerstan | security, cybersecurity, technology, information-security, bug-bounty | 13-Feb-2024 |
| Email Triggering Leads to Rs1000 Amazon voucher | https://medium.com/@bug.hun3r/email-triggering-leads-to-rs1000-amazon-voucher-7b9447a0b820?source=rss------bug_bounty-5 | mo9kHu93r | bug-hunting, web-application-security, cybersecurity, bug-bounty, hacking | 13-Feb-2024 |
| curity8.3 Lab: Web shell upload via path traversal | 2024 | https://cyberw1ng.medium.com/curity8-3-lab-web-shell-upload-via-path-traversal-2024-0c38695963a7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, hacking, cybersecurity, careers, bug-bounty | 13-Feb-2024 |
| Program Misuse and Privilege Escalation — PWN COLLEGE | https://batm4n.medium.com/program-misuse-and-privilege-escalation-pwn-college-9d5dbfd9cb3c?source=rss------bug_bounty-5 | B A T M A N | pwn, pentesting, challenge, hacking, bug-bounty | 13-Feb-2024 |
| Comprehensive Guide to Pentesting Methodology: From Zero to Hero | https://medium.com/@elniak/comprehensive-guide-to-pentesting-methodology-from-zero-to-hero-78c94711d130?source=rss------bug_bounty-5 | ElNiak | bug-bounty, technology, cybersecurity, penetration-testing, pentesting | 13-Feb-2024 |
| Mastering Nmap: A Comprehensive Guide for Network Discovery and Security Auditing | https://medium.com/@elniak/mastering-nmap-a-comprehensive-guide-for-network-discovery-and-security-auditing-29fa0c669ef7?source=rss------bug_bounty-5 | ElNiak | cybersecurity, penetration-testing, bug-bounty, networking, nmap | 13-Feb-2024 |
| Program Misuse and Privilege Escalation — PWN COLLEGE | https://medium.com/illuminations-mirror/program-misuse-and-privilege-escalation-pwn-college-9d5dbfd9cb3c?source=rss------bug_bounty-5 | B A T M A N | pwn, pentesting, challenge, hacking, bug-bounty | 13-Feb-2024 |
| How I Found a Reflected XSS at NASA | https://medium.com/@Jh0n_0x/how-i-found-a-reflected-xss-at-nasa-cc8b7584dee7?source=rss------bug_bounty-5 | Jh0n_0x | penetration-testing, securit, bugbounty-tips, bug-bounty, security-services | 12-Feb-2024 |
| Most easiest bug in login page : Session Fixation | https://medium.com/@mrraghavop12/most-easiest-bug-in-login-page-session-fixation-3b07eb396aab?source=rss------bug_bounty-5 | Ethical Raghav | cybersecurity, blockchain, ethical-hacking, bug-bounty, technology | 12-Feb-2024 |
| IDOR (Insecure direct object reference) pada Website Jual Beli Indonesia | https://uzet.medium.com/idor-insecure-direct-object-reference-pada-website-jual-beli-indonesia-350e2f58755c?source=rss------bug_bounty-5 | Timotius Benhur | writeup, bug-bounty, idor | 12-Feb-2024 |
| Webpages Have these Bugs, and can be EXPLOITED!! | https://batm4n.medium.com/webpages-have-these-bugs-and-can-be-exploited-59e10dd94931?source=rss------bug_bounty-5 | B A T M A N | xss-vulnerability, hacking, penetration-testing, xss-attack, bug-bounty | 12-Feb-2024 |
| Unraveling Three Critical Vulnerabilities in Atlassian Confluence: CVE-2023–22515, CVE-2023–22518… | https://systemweakness.com/unraveling-three-critical-vulnerabilities-in-atlassian-confluence-cve-2023-22515-cve-2023-22518-071f58539142?source=rss------bug_bounty-5 | ElNiak | vulnerability, exploitation, cybersecurity, atlassian, bug-bounty | 12-Feb-2024 |
| Super Bowl and Cybersecurity | https://medium.com/@paritoshblogs/super-bowl-and-cybersecurity-5a8c0097f1f7?source=rss------bug_bounty-5 | Paritosh | bug-bounty, super-bowl, hacking, information-security, cybersecurity | 12-Feb-2024 |
| Tow Senario To Pre Account TakeOver | https://medium.com/@Hackoura001/tow-senario-to-pre-account-takeover-e437b772b0e2?source=rss------bug_bounty-5 | Ahmed Elheny | bug-bounty-hunter, bug-bounty, hacking, bug-bounty-writeup, bugbounty-tips | 12-Feb-2024 |
| 7 Tingkatan IOC Dalam Investigasi Serangan Siber | https://medium.com/@yasminramadini/7-tingkatan-ioc-dalam-investigasi-serangan-siber-107826a59a37?source=rss------bug_bounty-5 | Yasmin Ramadini | bug-bounty, pyramid-of-pain, cybersecurity, cyber-security-awareness | 12-Feb-2024 |
| Hack Stories: Hacking Hackers EP:1 | https://infosecwriteups.com/hack-stories-hacking-hackers-ep-1-ff4c3cfc09cc?source=rss------bug_bounty-5 | c0d3x27 | bug-bounty, hacking, cybersecurity, penetration-testing, software-development | 12-Feb-2024 |
| Practical Guide to End-to-End Bug Reporting in Software Development | https://medium.com/@niarsdet/practical-guide-to-end-to-end-bug-reporting-in-software-development-9d3e3e4ae8f2?source=rss------bug_bounty-5 | Niar | bugs, issues, qa, bug-fixes, bug-bounty | 12-Feb-2024 |
| How I Hacked the Dutch Government: Exploiting an Innocent Image for Remote Code Execution | https://medium.com/@mukundbhuva/how-i-hacked-the-dutch-government-exploiting-an-innocent-image-for-remote-code-execution-df1fa936e46a?source=rss------bug_bounty-5 | Mukund Bhuva | hacking, security, bug-bounty, information-security, cybersecurity | 12-Feb-2024 |
| Understanding web applications | https://medium.com/@pentajbr/understanding-web-applications-ec5952eb1903?source=rss------bug_bounty-5 | Jbr AL-Otaibi | hacking, cybersecurity, bug-bounty, website, web-development | 12-Feb-2024 |
| How I found a bug in Microsoft | https://nityanandjha18.medium.com/how-i-found-a-bug-in-microsoft-3b8524877a3c?source=rss------bug_bounty-5 | NITYA NAND JHA | bug-bounty, cybersecurity, vulnerability | 12-Feb-2024 |
| : Unveiling the Art of Breaching SSH Servers in Bug Bounties: A Dive into Cybersecurity Exploits | https://medium.com/@bugspiderlee/unveiling-the-art-of-breaching-ssh-servers-in-bug-bounties-a-dive-into-cybersecurity-exploits-1b60c95c9075?source=rss------bug_bounty-5 | Pardon Mukoyi | bugbounty-tips, bug-bounty, bugbounty-writeup, cybersecurity | 12-Feb-2024 |
| Extract & Scan SSL Certs for HeartBleed via CertGuard tool | https://medium.com/@SentinelXTeam/extract-scan-ssl-certs-for-heartbleed-via-certguard-tool-06dfd891788a?source=rss------bug_bounty-5 | SentinelX Research | web-development, bug-bounty-tips, ssl-certificate, cybersecurity, bug-bounty | 12-Feb-2024 |
| Mastering Samba Exploitation: A Comprehensive Pentesting Guide | https://medium.com/@elniak/mastering-samba-exploitation-a-comprehensive-pentesting-guide-016ae61c1031?source=rss------bug_bounty-5 | ElNiak | cybersecurity, threat-intelligence, penetration-testing, samba, bug-bounty | 12-Feb-2024 |
| Unveiling the World of Ethical Hacking: How Ethical Hackers Earn Money | https://medium.com/@crawsecurity/unveiling-the-world-of-ethical-hacking-how-ethical-hackers-earn-money-939b7816debb?source=rss------bug_bounty-5 | crawsecurity | ethical-hacking, ways-to-earn-money-online, freelancing, bug-bounty, ethical-hacker | 11-Feb-2024 |
| Online Password Cracking with THC-Hydra and Burp Suite | https://medium.com/@0xalpraz/online-password-cracking-with-thc-hydra-and-burp-suite-31ec3019cead?source=rss------bug_bounty-5 | 0xClonaz | hacks, hacking, bug-bounty, cybersecurity | 11-Feb-2024 |
| Getting Facebook Credentails Without Hacking | https://medium.com/@0xalpraz/getting-facebook-credentails-without-hacking-e9c778e9e4ca?source=rss------bug_bounty-5 | 0xClonaz | bug-bounty, hacks, cybersecurity, hacking | 11-Feb-2024 |
| Open Source Intelligence(OSINT), Part 4: Google Hacking to Find Unsecured Web Cams | https://medium.com/@0xalpraz/open-source-intelligence-osint-part-4-google-hacking-to-find-unsecured-web-cams-4493b08dd08f?source=rss------bug_bounty-5 | 0xClonaz | cybersecurity, hacks, hacker, hacking, bug-bounty | 11-Feb-2024 |
| Open Source Intelligence (OSINT), Part 1: Mining Intelligence from Twitter (@mattgaetz) | https://medium.com/@0xalpraz/open-source-intelligence-osint-part-1-mining-intelligence-from-twitter-mattgaetz-6bb71c3dae9b?source=rss------bug_bounty-5 | 0xClonaz | bug-bounty, cybersecurity, hacking, hacker, hacks | 11-Feb-2024 |
| OSINT: Finding Email Passwords in Dumps with h8mail | https://medium.com/@0xalpraz/osint-finding-email-passwords-in-dumps-with-h8mail-4fb8b80298d8?source=rss------bug_bounty-5 | 0xClonaz | bug-bounty, hacker, hacking, hacks, cybersecurity | 11-Feb-2024 |
| Password Cracking: Creating Custom Password List with cupp | https://medium.com/master-hackers/password-cracking-creating-custom-password-list-with-cupp-167b7448b6c9?source=rss------bug_bounty-5 | 0xClonaz | cybersecurity, hacking, bug-bounty, hacker, hacks | 11-Feb-2024 |
| Android Hacking: The libwebp Vulnerability (zero-day/zero-click) | https://medium.com/master-hackers/android-hacking-the-libwebp-vulnerability-zero-day-zero-click-843279e0bb85?source=rss------bug_bounty-5 | 0xClonaz | hacks, hacking, hacker, cybersecurity, bug-bounty | 11-Feb-2024 |
| Bug Bounty Hunting, Part 1: Getting Started | https://medium.com/master-hackers/bug-bounty-hunting-part-1-getting-started-f8c60e759738?source=rss------bug_bounty-5 | 0xClonaz | hacker, bug-bounty, hacking, cybersecurity | 11-Feb-2024 |
| Preventing file execution in user-accessible directories by Portswigger | 2024 | https://cyberw1ng.medium.com/preventing-file-execution-in-user-accessible-directories-by-portswigger-2024-c30f1ef726b9?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, cybersecurity, bug-bounty, security | 11-Feb-2024 |
| IDOR(Insecure Direct Object Referece) Price Manipulation Through Encoded Url Parameter | https://medium.com/@bry4nzheng/idor-insecure-direct-object-referece-price-manipulation-through-encoded-url-parameter-4232fa4758b0?source=rss------bug_bounty-5 | Bryan Zheng | bug-bounty-writeup, bug-bounty, cybersecurity, penetration-testing | 11-Feb-2024 |
| Signing up with Government and Military emails | https://medium.com/@boogsta/signing-up-with-government-and-military-emails-4ebed8da5135?source=rss------bug_bounty-5 | Boogsta | bug-bounty-tips, cyber, cybersecurity, bug-bounty, hacking | 11-Feb-2024 |
| IDOR(Insecure Direct Object Reference) Price Manipulation on Private Bug Bounty Program | https://medium.com/@bry4nzheng/idor-insecure-direct-object-reference-price-manipulation-on-private-bug-bounty-program-2527431ffcfd?source=rss------bug_bounty-5 | Bryan Zheng | bug-bounty-writeup, penetration-testing, bug-bounty, cybersecurity | 11-Feb-2024 |
| Bug Bounty Programs: Unleashing the Force of Ethical Hackers to Strengthen Your Security Defenses | https://medium.com/@pascal.o.anene/bug-bounty-programs-unleashing-the-force-of-ethical-hackers-to-strengthen-your-security-defenses-08506824e975?source=rss------bug_bounty-5 | Pascal Onyekachukwu Anene | cybersecurity, security-engineering, bug-bounty | 11-Feb-2024 |
| Almost 50% of web pages have this bug. Learn How it is exploited in the wild | https://medium.com/@sreedeep200/almost-50-of-web-pages-have-this-bug-learn-how-it-is-exploited-in-the-wild-bfc591abdf8f?source=rss------bug_bounty-5 | Sreedeep cv | js, bug-bounty, xss-attack, hacking, dom | 11-Feb-2024 |
| XSS in CMS / Blog sites bypassing HTML encoding and escaping. | https://medium.com/@kannnannmk/xss-in-cms-blog-sites-bypassing-html-encoding-and-escaping-f61a720e6a02?source=rss------bug_bounty-5 | Neelamegha Kannan S | penetration-testing, cybersecurity, information-security, cyberattack, bug-bounty | 11-Feb-2024 |
| From a customer to a ‘system owner’ | https://medium.com/@mmaulanaabdullah/from-a-customer-to-a-system-owner-ce4da3f6d56c?source=rss------bug_bounty-5 | M Maulana Abdullah | api-development, writeup, privilege-escalation, api, bug-bounty | 10-Feb-2024 |
| Unlocking Creativity: TCS HackQuest S8 Unveiled - Round 1 | https://medium.com/@Dark_D3v1l/unlocking-creativity-tcs-hackquest-s8-unveiled-round-1-ffc02c753aaf?source=rss------bug_bounty-5 | Raviteja | reverse-engineering, ctf, bug-bounty, hacking-tools, web-security | 10-Feb-2024 |
| 7.8 Lab: Referer-based access control | 2024 | https://cyberw1ng.medium.com/7-8-lab-referer-based-access-control-2024-ef0fa2eefbe0?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, security, bug-bounty, cybersecurity | 10-Feb-2024 |
| Google Dorking: A Beginner’s Guide to Finding Vulnerabilities | https://medium.com/@elniak/google-dorking-a-beginners-guide-to-finding-vulnerabilities-815afedcaaec?source=rss------bug_bounty-5 | ElNiak | threat-intelligence, bug-bounty, google-dorking, cybersecurity, google | 10-Feb-2024 |
| Web Security 101 : Cross-Site Scripting (XSS) Attacks | https://iaraoz.medium.com/web-security-101-cross-site-scripting-xss-attacks-5b6c6e8020c7?source=rss------bug_bounty-5 | Israel Aráoz Severiche | xss-attack, bug-bounty, cybersecurity, appsec | 09-Feb-2024 |
| Securing Biggest Electronic Brand Worth Me My 2nd 4 fig. $2259 Bounty! | https://medium.com/@manan_sanghvi/securing-biggest-electronic-brand-worth-me-my-2nd-4-fig-2259-bounty-a053d2053655?source=rss------bug_bounty-5 | Manan Sanghvi | bug-bounty, penetration-testing, web-application-security, ethical-hacking, idor-vulnerability | 09-Feb-2024 |
| JSON CSRF in Microsoft Bing Maps Collections | https://infosecwriteups.com/json-csrf-in-microsoft-bing-maps-collections-74afc2b197d5?source=rss------bug_bounty-5 | Jayateertha Guruprasad | bug-bounty-tips, microsoft, bug-bounty, infosec, cybersecurity | 09-Feb-2024 |
| CVE-2024–24830: A Critical OpenObserve Vulnerability Exposed | https://systemweakness.com/cve-2024-24830-a-critical-openobserve-vulnerability-exposed-7110ff223e49?source=rss------bug_bounty-5 | ElNiak | bug-bounty, logs, vulnerability, cybersecurity, technology | 09-Feb-2024 |
| Cyber Espionage Unveiled: The Dutch Defense Under Siege by Chinese Hackers | https://medium.com/@elniak/cyber-espionage-unveiled-the-dutch-defense-under-siege-by-chinese-hackers-2a7a5ffe99b6?source=rss------bug_bounty-5 | ElNiak | malware, chinese, bug-bounty, cyberattack, cybersecurity | 09-Feb-2024 |
| CVE-2024–1207: A Deep Dive into WordPress Plugin Vulnerability | https://systemweakness.com/cve-2024-1207-a-deep-dive-into-wordpress-plugin-vulnerability-3b12891813e6?source=rss------bug_bounty-5 | ElNiak | bug-bounty, vulnerability, cybersecurity, wordpress, sql-injection | 09-Feb-2024 |
| Cyber Espionage Unveiled: The Dutch Defense Under Siege by Chinese Hackers | https://systemweakness.com/cyber-espionage-unveiled-the-dutch-defense-under-siege-by-chinese-hackers-2a7a5ffe99b6?source=rss------bug_bounty-5 | ElNiak | malware, chinese, bug-bounty, cyberattack, cybersecurity | 09-Feb-2024 |
| Creating a recon database with Flask, MongoDB, REST Api and ChatGPT — Part Three | https://medium.com/@aliraah/creating-a-recon-database-with-flask-mongodb-rest-api-and-chatgpt-part-three-cee1633de873?source=rss------bug_bounty-5 | Ali | python, flask, bug-bounty, mongodb, reconnaissance | 09-Feb-2024 |
| E: Package ‘libgtkglext1’ has no installation candidate | anydesk : Depends: libgtkglext1 but it is… | https://medium.com/@sherlock297/e-package-libgtkglext1-has-no-installation-candidate-anydesk-depends-libgtkglext1-but-it-is-7eef2877f78d?source=rss------bug_bounty-5 | Ravindra Dagale | information-technology, bug-bounty, kali-linux, information-security, programming | 09-Feb-2024 |
| 7.7 Lab: Multi-step process with no access control on one step | 2024 | https://cyberw1ng.medium.com/7-7-lab-multi-step-process-with-no-access-control-on-one-step-2024-2b338dfd36ea?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, cybersecurity, bug-bounty, security | 09-Feb-2024 |
| Beyond the Firewall: Finding a Stored XSS in Hacker101 CTF | https://medium.com/@crashwire1/beyond-the-firewall-finding-a-stored-xss-in-hacker101-ctf-9b90df12e42e?source=rss------bug_bounty-5 | Crashwire | xss-attack, cybersecurity, capture-the-flag, bug-bounty, hacking | 09-Feb-2024 |
| Unlocking Your Potential: Elevating Your Bug Bounty Game** | https://medium.com/@mrraghavop12/unlocking-your-potential-elevating-your-bug-bounty-game-5cbf22c4de00?source=rss------bug_bounty-5 | Ethical Raghav | blockchain, bug-bounty, bug-bounty-tips, javascript, cybersecurity | 08-Feb-2024 |
| Lenfi V2 to Begin Community-Driven Bug Bounty Program Now | https://medium.com/@lenfi/lenfi-v2-to-begin-community-driven-bug-bounty-program-now-c2d312203df2?source=rss------bug_bounty-5 | Lenfi | lending, cardano, defi, audit, bug-bounty | 08-Feb-2024 |
| Chaining Subprober + Subfinder To Your Bug Bounty Recon. | https://medium.com/@Ajakcybersecurity/chaining-subprober-subfinder-to-your-bug-bounty-recon-017151d1ffce?source=rss------bug_bounty-5 | AjakCybersecurity | bug-bounty, ethical-hacking, penetration-testing, hacking, cybersecurity | 08-Feb-2024 |
| 7.6 Lab: Method-based access control can be circumvented | 2024 | https://cyberw1ng.medium.com/7-6-lab-method-based-access-control-can-be-circumvented-2024-edb5df550a66?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hacking, portswigger, cybersecurity, careers | 08-Feb-2024 |
| Easy way to get privilege escalation | https://medium.com/@Rzizah/easy-way-to-get-privilege-escalation-2c0a96862301?source=rss------bug_bounty-5 | Rzizah | bug-bounty-tips, bug-bounty, bug-bounty-writeup, privilege-escalation | 08-Feb-2024 |
| How I Find Open Redirect Bug — Bug Bounty Tuesday | https://medium.com/@kerstan/how-i-find-open-redirect-bug-bug-bounty-tuesday-40cc560c9cec?source=rss------bug_bounty-5 | kerstan | cybersecurity, bug-bounty, technology, security, information-security | 07-Feb-2024 |
| Web3 Security: In-Depth | https://medium.com/coinmonks/web3-security-in-depth-e102fb262a3a?source=rss------bug_bounty-5 | Officer's Notes | bug-bounty, blockchain, smart-contracts, solidity, web3 | 07-Feb-2024 |
| My first bug | Html injection| | https://medium.com/@pandeyrishu621/my-first-bug-html-injection-82bbad239934?source=rss------bug_bounty-5 | Pandeyrishu | cybersecurity, bug-bounty, penetration-testing, technology, bug-bounty-tips | 07-Feb-2024 |
| Revealing a Security Snag: Uncovering Sensitive Data Exposure in an Apple Application | https://medium.com/@jazdprince/revealing-a-security-snag-uncovering-sensitive-data-exposure-in-an-apple-application-c93da97cae0d?source=rss------bug_bounty-5 | JzeeRx | bug-bounty, bug-hunting, cybersecurity, apple-security, apple | 07-Feb-2024 |
| 7.5 Lab: URL-based access control can be circumvented | 2024 | https://cyberw1ng.medium.com/7-5-lab-url-based-access-control-can-be-circumvented-2024-f101542e9402?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, hacking, cybersecurity, careers, bug-bounty | 07-Feb-2024 |
| I have hacked around 300 website in 1 Month | https://systemweakness.com/i-have-hacked-around-300-website-in-1-month-30417030560b?source=rss------bug_bounty-5 | Imran Niaz | bug-bounty, hacking, web-development, python-programming, cybersecurity | 07-Feb-2024 |
| Rate Limiting: What It Is And Why It Matters in Bug Bounty | https://infosecwriteups.com/rate-limiting-what-it-is-and-why-it-matters-in-bug-bounty-b0d2ce574049?source=rss------bug_bounty-5 | Alp | bug-bounty-tips, bug-bounty, hackerone | 07-Feb-2024 |
| How To Get Started With LLM Hacking? — A Beginner’s Guide | https://medium.com/@hetisdemerckx/how-to-get-started-with-llm-hacking-a-beginners-guide-273af158b4b0?source=rss------bug_bounty-5 | Yannick Merckx | bug-bounty, ai, hacking, llm-hacking, llm | 07-Feb-2024 |
| My first bug | Html injection| | https://systemweakness.com/my-first-bug-html-injection-82bbad239934?source=rss------bug_bounty-5 | Pandeyrishu | cybersecurity, bug-bounty, penetration-testing, technology, bug-bounty-tips | 07-Feb-2024 |
| Enhancing Network Security: Best Practices and Strategies | https://medium.com/@paritoshblogs/enhancing-network-security-best-practices-and-strategies-6fec2ef3f397?source=rss------bug_bounty-5 | Paritosh | hacking, programming, bug-bounty, information-security, cybersecurity | 06-Feb-2024 |
| Tumblr Subdomain Takeover | https://infosecwriteups.com/tumblr-subdomain-takeover-55f9cb494d65?source=rss------bug_bounty-5 | Scott Lindh | white-hat-hacker, bug-bounty, hacker, subdomain-takeover, subdomains-enumeration | 06-Feb-2024 |
| Harnessing Concurrency in Go: Exploring Asynchronous Execution | https://medium.com/@rezauditore/harnessing-concurrency-in-go-exploring-asynchronous-execution-4134897d66a6?source=rss------bug_bounty-5 | rezauditore | golang, programming, bug-bounty, tutorial, hunting | 06-Feb-2024 |
| A Deep Dive into FastAPI’s Security Vulnerability: CVE-2024–24762 | https://systemweakness.com/a-deep-dive-into-fastapis-security-vulnerability-cve-2024-24762-4ab6bb64644c?source=rss------bug_bounty-5 | ElNiak | cybersecurity, programming, bug-bounty, fastapi, vulnerability | 06-Feb-2024 |
| ALWAYS test 404 Not Found in Bug Bounties! | https://medium.com/@mares.viktor/always-test-404-not-found-in-bug-bounties-2be47801b4c0?source=rss------bug_bounty-5 | Viktor Mares | cybersecurity, web-development, bug-bounty, penetration-testing, hacking | 06-Feb-2024 |
| CVE-2024-23222: Apple WebKit’s Zero-Day Vulnerability | https://medium.com/@elniak/cve-2024-23222-apple-webkits-zero-day-vulnerability-83109de9ddee?source=rss------bug_bounty-5 | ElNiak | cybersecurity, vulnerability, apple, technology, bug-bounty | 06-Feb-2024 |
| Symlink Sabotage: ZIPping Through Web Security. (LFI Lab) | https://medium.com/@josh.beck2006/symlink-sabotage-zipping-through-web-security-lfi-lab-ca20e2d30c8d?source=rss------bug_bounty-5 | Josh Beck | penetration-testing, cybersecurity, ctf-writeup, bug-bounty | 06-Feb-2024 |
| Unveiling CVE-2024–0953: Firefox iOS Open Redirect Vulnerability | https://lohigowda.medium.com/unveiling-cve-2024-0953-firefox-ios-open-redirect-vulnerability-57533efb4cf4?source=rss------bug_bounty-5 | Lohith Gowda M | application-security, bug-bounty, firefox, ios, infosec | 06-Feb-2024 |
| Understanding Ransomware | https://medium.com/@paritoshblogs/understanding-ransomware-aa45e2c43bbb?source=rss------bug_bounty-5 | Paritosh | ransomware, bug-bounty, cybersecurity, hacking, information-security | 05-Feb-2024 |
| Urgent Security Alert: Microsoft Edge Vulnerabilities Exposed — Protect Your Data Now! | https://medium.com/@elniak/urgent-security-alert-microsoft-edge-vulnerabilities-exposed-protect-your-data-now-bd7cd8b616dd?source=rss------bug_bounty-5 | ElNiak | privilege-escalation, cybersecurity, microsoft, bug-bounty, vulnerability | 05-Feb-2024 |
| SSRF on a Headless Browser Becomes Critical! | https://medium.com/@Nightbloodz/ssrf-on-a-headless-browser-becomes-critical-c08daaa1017e?source=rss------bug_bounty-5 | Alvaro Balada | cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty, cyber-security-awareness | 05-Feb-2024 |
| IoT Devices Vulnerabilities Disclosed: BugStrike’s IoT Security Suite | https://blog.bugstrike.io/iot-devices-vulnerabilities-disclosed-bugstrikes-iot-security-suite-4f3b7d907829?source=rss------bug_bounty-5 | BugStrike Team | bugstrike, iot-security, bug-bounty, cybersecurity, iot | 05-Feb-2024 |
| Unveiling the XSS Threats: Understanding and Defending Against Cross-Site Scripting | https://blog.bugstrike.io/unveiling-the-xss-threats-understanding-and-defending-against-cross-site-scripting-508e914367f4?source=rss------bug_bounty-5 | BugStrike Team | bugsbounty, cybersecurity, bugstrike, xss-attack, bug-bounty | 05-Feb-2024 |
| Broken access control resulting from platform misconfiguration | 2024 | https://cyberw1ng.medium.com/broken-access-control-resulting-from-platform-misconfiguration-2024-bc330363278c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, bug-bounty, hacking, security | 05-Feb-2024 |
| Euler Is So Back: Prizewinners and Educate Series Summary | https://www.blog.encode.club/euler-is-so-back-bounty-winners-and-educate-series-summary-6ea3de46b569?source=rss------bug_bounty-5 | Vanessa Losic | euler, euler-finance, bug-bounty, euler-educate, encode-club | 05-Feb-2024 |
| How I got RCE in one of Bugcrowd's Public Programs | https://medium.com/@yousefmoh15/how-i-got-rce-in-one-of-bugcrowds-public-programs-5725c8dc46ce?source=rss------bug_bounty-5 | Yousef Mohamed Elsaid | cybersecurity, bugcrowd, bug-bounty, rce, remote-code-execution | 05-Feb-2024 |
| Every Cybersecurity Beginner’s Nightmare — You need to Read this | https://medium.com/@majameeljameey/every-cybersecurity-beginners-nightmare-you-need-to-read-this-fc1b69e5dded?source=rss------bug_bounty-5 | MOHD ABDUL JAMEEL | penetration-testing, bug-bounty, roadmaps, ethical-hacking, cybersecurity | 05-Feb-2024 |
| Reflected XSS into a Template Literal with Angle Brackets, Single, Double Quotes, Backslash, and… | https://medium.com/@marduk.i.am/reflected-xss-into-a-template-literal-with-angle-brackets-single-double-quotes-backslash-and-d5cf41f25b02?source=rss------bug_bounty-5 | Marduk I Am | bug-bounty, portswigger-lab, reflected-xss, cross-site-scripting, cybersecurity | 05-Feb-2024 |
| Skyfall — HackTheBox Seasonal Machine Simple Writeup by Karthikeyan Nagaraj | 2024 | https://infosecwriteups.com/skyfall-hackthebox-seasonal-machine-simple-writeup-by-karthikeyan-nagaraj-2024-d76fdaaba116?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, hackthebox-writeup, hackthebox, bug-bounty | 05-Feb-2024 |
| This will change the way you hunt for bugs forever. | https://medium.com/@deadoverflow/this-will-change-the-way-you-hunt-for-bugs-forever-6111f59b4e8b?source=rss------bug_bounty-5 | Imad Husanovic | hacking, cybersecurity, bug-bounty, programming, bug-bounty-tips | 04-Feb-2024 |
| the Dark Art of NTLM Relay Attacks | https://medium.com/@paritoshblogs/the-dark-art-of-ntlm-relay-attacks-5a55cfb95b37?source=rss------bug_bounty-5 | Paritosh | cybersecurity, hacking, ntlm-relay, active-directory, bug-bounty | 04-Feb-2024 |
| The UI Slip I Hit 750$: UI Manipulation Leading to Unauthorized Permission Changes | https://medium.com/@a13h1/the-ui-slip-i-hit-750-ui-manipulation-leading-to-unauthorized-permission-changes-d65621d8dd96?source=rss------bug_bounty-5 | Abhi Sharma | user-interface, hacking, programming, bug-bounty, cybersecurity | 04-Feb-2024 |
| How I Hacked My College’s Site | https://infosecwriteups.com/how-i-hacked-my-colleges-site-26ae1ab872e4?source=rss------bug_bounty-5 | Rajneesh Kumar Arya | bug-bounty, web-application-security, ethical-hacking, hacked, cybersecurity | 04-Feb-2024 |
| Running a MITM on a Google Play App | Fintech Bug Bounty — Part 3 | https://0x4kd.medium.com/running-a-mitm-on-a-google-play-app-fintech-bug-bounty-part-3-82ebdd852d07?source=rss------bug_bounty-5 | 0x4KD | bug-bounty, infosec, bounty-hunter, bug-bounty-tips, security | 04-Feb-2024 |
| Certifications for bug bounty hunters | https://medium.com/@notahades/certifications-for-bug-bounty-hunters-4200c6a58c3c?source=rss------bug_bounty-5 | Desha | hacking, certification, penetration-testing, bug-bounty | 04-Feb-2024 |
| Hacking tools to use in 2024 | https://medium.com/@notahades/hacking-tools-to-use-in-2024-9dd47c126ef4?source=rss------bug_bounty-5 | Desha | it-security, bug-bounty, hacking, penetration-testing, security | 04-Feb-2024 |
| Tutorial: Shellcode Injection when the buffer is small | https://medium.com/@elniak/tutorial-shellcode-injection-when-the-buffer-is-small-ee3a29dcb955?source=rss------bug_bounty-5 | ElNiak | bug-bounty, tutorial, hacking, shellcode, cybersecurity | 04-Feb-2024 |
| TryHackMe | Bounty Hacker Walkthrough | https://medium.com/@utsavadhikari99/tryhackme-bounty-hacker-walkthrough-eb7d9de074e3?source=rss------bug_bounty-5 | Utsavadhikari | bug-bounty, bugs, linux, cybersecurity, computer-science | 04-Feb-2024 |
| Stored XSS into ‘onclick’ Event with Angle Brackets and Double Quotes HTML-Encoded and Single… | https://medium.com/@marduk.i.am/stored-xss-into-onclick-event-with-angle-brackets-and-double-quotes-html-encoded-and-single-002848f8deb1?source=rss------bug_bounty-5 | Marduk I Am | portswigger-lab, cybersecurity, stored-xss, bug-bounty, cross-site-scripting | 04-Feb-2024 |
| Creating a recon database with Flask, MongoDB, REST Api and ChatGPT — Part Two | https://medium.com/@aliraah/creating-a-recon-database-with-flask-mongodb-rest-api-and-chatgpt-part-two-468405eb3520?source=rss------bug_bounty-5 | Ali | databse, reconnaissance, bug-bounty, python, chatgpt | 04-Feb-2024 |
| 6.5 Lab: Information disclosure in version control history | 2024 | https://cyberw1ng.medium.com/6-5-lab-information-disclosure-in-version-control-history-2024-f886c7337cb7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, careers, cybersecurity, bug-bounty, hacking | 04-Feb-2024 |
| How to send WhatsApp Message automatically using python for impress someone | https://rajput623929.medium.com/how-to-send-whatsapp-message-automatically-using-python-for-impress-someone-9c577664faaa?source=rss------bug_bounty-5 | Mr.Horbio | hacking, automation, bug-bounty, cybersecurity, python | 03-Feb-2024 |
| IDOR Pada Website Jual Beli Indonesia | https://uzet.medium.com/idor-pada-website-jual-beli-indonesia-e4842bad515a?source=rss------bug_bounty-5 | Timotius Benhur | bug-bounty, writeup, cyber-security-awareness, bugs | 03-Feb-2024 |
| Zero-Day: Navigating the Storm of CVE-2024–21893 in Ivanti Products | https://systemweakness.com/zero-day-navigating-the-storm-of-cve-2024-21893-in-ivanti-products-3b27078377e2?source=rss------bug_bounty-5 | ElNiak | bug-bounty, penetration-testing, ivanti, cybersecurity, ssrf | 03-Feb-2024 |
| Vulnerable WordPress January 2024 (Imadaddin Nasimi) | https://medium.com/@onhexgroup/vulnerable-wordpress-january-2024-imadaddin-nasimi-09f163d473db?source=rss------bug_bounty-5 | Onhexgroup | infosec, bug-bounty, exploit, cybersecurity, wordpress | 03-Feb-2024 |
| Title: Unveiling the Trio: Idor,Account,Takeover And Account Enumeration | https://medium.com/@mrraghavop12/title-unveiling-the-trio-idor-account-takeover-and-account-enumeration-cad7f7ca671f?source=rss------bug_bounty-5 | Ethical Raghav | bug-bounty, blockchain, technology, cybersecurity, data-science | 03-Feb-2024 |
| Building a Robust Security Architecture | https://medium.com/@paritoshblogs/building-a-robust-security-architecture-10d01b22380d?source=rss------bug_bounty-5 | Paritosh | architecture, bug-bounty, information-security, cybersecurity, security-architecture | 03-Feb-2024 |
| A Story of an IDOR bug I found on a SaaS application | https://medium.com/@duncanochieng682/a-story-of-an-idor-bug-i-found-on-a-saas-application-28fa65907bfd?source=rss------bug_bounty-5 | JateloCybersec | access-control, web-application-security, bug-bounty-tips, idor-vulnerability, bug-bounty | 03-Feb-2024 |
| Version Control History and Information Disclosure Vulnerabilities | 2024 | https://cyberw1ng.medium.com/version-control-history-and-information-disclosure-vulnerabilities-2024-3649060333bb?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, cybersecurity, careers, bug-bounty, hacking | 03-Feb-2024 |
| Offensive Mobile Penetration Testing | https://hackerassociate.medium.com/offensive-mobile-penetration-testing-ce87cc06fb46?source=rss------bug_bounty-5 | Harshad Shah | bug-bounty, infosec, penetration-testing, cybersecurity, hacking | 02-Feb-2024 |
| 5.11 Lab: Authentication bypass via flawed state machine | 2024 | https://cyberw1ng.medium.com/5-11-lab-authentication-bypass-via-flawed-state-machine-2024-2226d33fba6d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, cybersecurity, bug-bounty, security | 2-Feb-2024 |
| CVE-2021–4434: A Critical WordPress Vulnerability Exposed | https://medium.com/@elniak/cve-2021-4434-a-critical-wordpress-vulnerability-exposed-202b7d75dda5?source=rss------bug_bounty-5 | ElNiak | vulnerability, bug-bounty, threat-intelligence, wordpress, cybersecurity | 2-Feb-2024 |
| Join the Pay Protocol Bug Bounty Program and Earn Rewards | https://cryptoanalyz.medium.com/join-the-pay-protocol-bug-bounty-program-and-earn-rewards-159d24608282?source=rss------bug_bounty-5 | Crypto Analyst | payments, defi, bug-bounty-program, cryptocurrency, bug-bounty | 2-Feb-2024 |
| Unveiling the Elite: Cyber Matrix Tech’s USD 7 Million Bug Bounty Course | https://medium.com/@African-Technology-Research/unveiling-the-elite-cyber-matrix-techs-usd-7-million-bug-bounty-course-4e648fb003d1?source=rss------bug_bounty-5 | African Technology Research | penetration-testing, cybersecurity, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 2-Feb-2024 |
| Mastering Fuzzing: A Comprehensive Tutorial | https://medium.com/@elniak/mastering-fuzzing-a-comprehensive-tutorial-ba9431c8ff0f?source=rss------bug_bounty-5 | ElNiak | fuzzing, bug-bounty, tutorial, cybersecurity, bugs | 02-Feb-2024 |
| Unlocking Privacy: A Dive into Octopii, the Open-Source PII Scanner | https://medium.com/@elniak/unlocking-privacy-a-dive-into-octopii-the-open-source-pii-scanner-8a8bdcc0b8be?source=rss------bug_bounty-5 | ElNiak | privacy, osint, cybersecurity, bug-bounty, pii | 02-Feb-2024 |
| How to start in Bug Bounty Hunting: my personal experience | https://seeu-inspace.medium.com/how-to-start-in-bug-bounty-hunting-my-personal-experience-61fb2bc6bcee?source=rss------bug_bounty-5 | Riccardo Malatesta | bug-bounty-tips, bug-bounty | 02-Feb-2024 |
| How to Pass eWPTv1 exam | https://medium.com/@pentajbr/how-to-pass-ewptv1-exam-3aab3d7d9fa5?source=rss------bug_bounty-5 | Jbr AL-Otaibi | preparation, bug-bounty, bug-bounty-tips, cybersecurity, hacking | 02-Feb-2024 |
| CVE-2021–4434: A Critical WordPress Vulnerability Exposed | https://systemweakness.com/cve-2021-4434-a-critical-wordpress-vulnerability-exposed-202b7d75dda5?source=rss------bug_bounty-5 | ElNiak | vulnerability, bug-bounty, threat-intelligence, wordpress, cybersecurity | 02-Feb-2024 |
| How I was able to find PII of more than 15,000 People using the Directory Enumeration Tool… | https://medium.com/@neelmunot2003/how-i-was-able-to-find-pii-of-more-than-15-000-people-using-the-directory-enumeration-tool-7ac3e9a37983?source=rss------bug_bounty-5 | Neel Munot | information-disclosure, dirsearch, bug-bounty, cybersecurity, ethical-hacking | 02-Feb-2024 |
| How I secured the United Nations Hall of Fame | https://medium.com/@kamilrahman32/how-i-secured-the-united-nations-hall-of-fame-67b036ff2620?source=rss------bug_bounty-5 | Kamil Rahuman | bug-bounty, bug-bounty-tips, vulnerability, hall-of-fame, united-nations | 02-Feb-2024 |
| Full Account Takeover via Password Reset Link Manipulation | https://ikhaleelkhan.medium.com/full-account-takeover-via-password-reset-link-manipulation-840fb9402967?source=rss------bug_bounty-5 | Khaleel Khan | infosec, bug-bounty, cybersecurity, hacking, ethical-hacking | 01-Feb-2024 |
| Docker and runC Vulnerabilities: A Deep Dive into CVE-2024–21626 and Its Counterparts | https://medium.com/@elniak/docker-and-runc-vulnerabilities-a-deep-dive-into-cve-2024-21626-and-its-counterparts-4ca24e7d7aa1?source=rss------bug_bounty-5 | ElNiak | cybersecurity, vulnerability, docker, penetration-testing, bug-bounty | 01-Feb-2024 |
| 5.10 Lab: Authentication bypass via encryption Oracle | 2024 | https://cyberw1ng.medium.com/5-10-lab-authentication-bypass-via-encryption-oracle-2024-b15f1879a30b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, bug-bounty, careers, hacking, cybersecurity | 01-Feb-2024 |
| 1.4M PII data leakage (IDOR) | https://medium.com/@tusharaj98355/1-4m-pii-data-leakage-idor-aee596aef4d9?source=rss------bug_bounty-5 | tushar_recon | bug-bounty, bug-bounty-tips | 01-Feb-2024 |
| How i was able to hack a Company via watching a YouTube video | https://ahmadmansourr.medium.com/how-i-was-able-to-hack-a-company-via-watching-a-youtube-video-without-any-technical-pentesting-4941753a150a?source=rss------bug_bounty-5 | Ahmad Mansour | cyber-security-awareness, bug-bounty, penetration-testing | 01-Feb-2024 |
| Reflected XSS into a JavaScript String with Angle Brackets and Double Quotes HTML-Encoded and… | https://medium.com/@marduk.i.am/reflected-xss-into-a-javascript-string-with-angle-brackets-and-double-quotes-html-encoded-and-3e43059d901b?source=rss------bug_bounty-5 | Marduk I Am | cybersecurity, portswigger-lab, reflected-xss, cross-site-scripting, bug-bounty | 01-Feb-2024 |
| Bypass Arbitary File Upload With .phar | https://medium.com/@mzrismuarf/bypass-arbitary-file-upload-with-phar-6a07627f5e2e?source=rss------bug_bounty-5 | Mizar Ismu Arief | exploitation, bug-bounty, pentesting, bypass | 01-Feb-2024 |
| From No to Go — Uninvited Access To Invited Projects | https://medium.com/@_0jatin0_/from-no-to-go-uninvited-access-to-invited-projects-c8a94feb7cf3?source=rss------bug_bounty-5 | Jatin_Chudasama | broken-access-control, writeup, bug-bounty, graphql, unauthorized-access | 01-Feb-2024 |
| This is arguably the dumbest bug I’ve ever found. | https://medium.com/@deadoverflow/this-is-arguably-the-dumbest-bug-ive-ever-found-3e451951d727?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty-tips, bug-bounty, hacking, programming, cybersecurity | 01-Feb-2024 |
| Misconfiguration lead to company identity theft via bypass email verification. | https://hamzadzworm.medium.com/misconfiguration-lead-to-company-identity-theft-via-bypass-email-verification-0dd60b61d943?source=rss------bug_bounty-5 | Hamzadzworm | bugbounty-writeup, bug-bounty-writeup, bugbounty-tips, bug-bounty, infosec | 01-Feb-2024 |
| Best Recon methodology (Shubham Rooter) | https://shubhamrooter.medium.com/best-recon-methodology-shubham-rooter-dcdca8d4caa4?source=rss------bug_bounty-5 | Shubham Tiwari | hackerone, recon, bug-bounty, bug-bounty-tips, bug-hunting | 01-Feb-2024 |
| How to send WhatsApp Message automatically using python for impress someone | https://rajput623929.medium.com/how-to-send-whatsapp-message-automatically-using-python-for-impress-someone-0a9f488a4b54?source=rss------bug_bounty-5 | Mr.Horbio | hacking, cybersecurity, technology, python, bug-bounty | 01-Feb-2024 |
| Understanding and Mitigating Active Directory Attacks | https://medium.com/@paritoshblogs/understanding-and-mitigating-active-directory-attacks-51b7b5737ecc?source=rss------bug_bounty-5 | Paritosh | bug-bounty, azure, hacking, active-directory, cybersecurity | 31-Jan-2024 |
| Uncovering a Parameter Tampering Vulnerability in Event Expo Ticketing System | https://medium.com/@sulmanfarooq531/uncovering-a-parameter-tampering-vulnerability-in-event-expo-ticketing-system-89fc52e26414?source=rss------bug_bounty-5 | Sulman Farooq S | burpsuite, tampering, http-parameter-pollution, parameter-tampering, bug-bounty | 31-Jan-2024 |
| Hunt, Hack, Reward — Hacking For Good with Bounties | https://thethreatcops.medium.com/hunt-hack-reward-hacking-for-good-with-bounties-6a57d12c82a0?source=rss------bug_bounty-5 | the threat cops | thethreatcops, cybersecurity, bug-bounty, hacking, infosec | 31-Jan-2024 |
| Navigating the Storm: Understanding CVE-2023–34048’s Impact on VMware vCenter Server | https://medium.com/@elniak/navigating-the-storm-understanding-cve-2023-34048s-impact-on-vmware-vcenter-server-6004e6531e5b?source=rss------bug_bounty-5 | ElNiak | threat-intelligence, cybersecurity, bug-bounty, penetration-testing, vmware | 31-Jan-2024 |
| Json Tokens (JWT) Token Checks | https://akash-venky091.medium.com/json-tokens-jwt-token-checks-f23d5107e370?source=rss------bug_bounty-5 | Akash Venky | cybersecurity, ethical-hacking, bug-bounty, security, jwt | 31-Jan-2024 |
| What to expect from BSides Transylvania 2024 | https://corneacristian.medium.com/what-to-expect-from-bsides-transylvania-2024-38f62ffb1ebd?source=rss------bug_bounty-5 | Cristian Cornea | cybersecurity, technology, bug-bounty, software-development, tech | 31-Jan-2024 |
| Tackling IDOR on UUID based objects | https://medium.com/pentesternepal/tackling-idor-on-uuid-based-objects-71e8cb2dc265?source=rss------bug_bounty-5 | Veshraj Ghimire | idor-vulnerability, bug-bounty | 31-Jan-2024 |
| 5.9 Lab: Infinite money logic flaw | 2024 | https://cyberw1ng.medium.com/5-9-lab-infinite-money-logic-flaw-2024-9aec41bc9ca0?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, cybersecurity, security, bug-bounty | 31-Jan-2024 |
| Creating a recon database with Flask, MongoDB, REST Api and ChatGPT — Part One | https://medium.com/@aliraah/creating-a-recon-database-with-flask-mongodb-rest-api-and-chatgpt-part-one-77ec3fd3b914?source=rss------bug_bounty-5 | Ali | bug-bounty, database, reconnaissance, python | 31-Jan-2024 |
| How to use Virtual Box | https://medium.com/@joshdesharnais1/how-to-use-virtual-box-f3b66be0d9d7?source=rss------bug_bounty-5 | Joshua Desharnais | bug-bounty, virtual, operating-systems, oracle | 31-Jan-2024 |
| Bug Bounty Hunting, Part 1: Stealthy Parameter Detection with ParamSpider | https://medium.com/master-hackers/bug-bounty-hunting-part-1-stealthy-parameter-detection-with-paramspider-28e8ae3af5d4?source=rss------bug_bounty-5 | 0xClonaz | bug-bounty, hacker, bug-bounty-tips, cybersecurity, hacking | 31-Jan-2024 |
| Ransomware: Build Your Own Ransomware | https://medium.com/master-hackers/ransomware-build-your-own-ransomware-b8002b355300?source=rss------bug_bounty-5 | 0xClonaz | hacking, cybersecurity, hacker, programming, bug-bounty | 31-Jan-2024 |
| Recon Methodology | https://medium.com/@alanvv03/recon-methodology-6626fea2e6ed?source=rss------bug_bounty-5 | Alanvv | cybersecurity, bug-bounty, reconnaissance | 31-Jan-2024 |
| Une erreur fatale | https://mr0me.medium.com/salut-a2c0cf7cfb4c?source=rss------bug_bounty-5 | Jephte Mangenda | mistakes, wordpress-development, wordpress, bug-bounty, bugs | 31-Jan-2024 |
| Web Cache Poisoning | https://k4gur4.medium.com/web-cache-poisoning-04fea694708e?source=rss------bug_bounty-5 | Kagura | cybersecurity, web-security, bug-bounty | 31-Jan-2024 |
| Decoding the OWASP Top 10 | https://medium.com/@paritoshblogs/decoding-the-owasp-top-10-e193b715cb37?source=rss------bug_bounty-5 | Paritosh | bug-bounty, owasp, cybersecurity, pentesting, hacking | 30-Jan-2024 |
| Critical Jenkins RCE Vulnerability (CVE-2024–23897) | https://medium.com/@elniak/critical-jenkins-rce-vulnerability-cve-2024-23897-402061a2b187?source=rss------bug_bounty-5 | ElNiak | jenkins, bug-bounty, penetration-testing, vulnerability, cybersecurity | 30-Jan-2024 |
| Simplifying Issue Traceability with Links Explorer in the monday Platform | https://medium.com/optimizory-apps/simplifying-issue-traceability-with-links-explorer-in-the-monday-platform-c8cfbee37668?source=rss------bug_bounty-5 | Divyansh Vats | project-management, marketplaces, issues, bug-bounty, traceability | 30-Jan-2024 |
| Title: Exploiting Path Traversal Vulnerability in User Profile URLs | https://medium.com/@kataeriidubstep/title-exploiting-path-traversal-vulnerability-in-user-profile-urls-82c0e8ba1a3e?source=rss------bug_bounty-5 | Pavan kumar.G | bug-bounty, cybersecurity, appsec | 30-Jan-2024 |
| Reflected XSS into a JavaScript String with Single Quote and Backslash Escaped | https://medium.com/@marduk.i.am/reflected-xss-into-a-javascript-string-with-single-quote-and-backslash-escaped-ba435167b43f?source=rss------bug_bounty-5 | Marduk I Am | reflected-xss, cross-site-scripting, portswigger-lab, bug-bounty, cybersecurity | 30-Jan-2024 |
| My SSRF Tricks — Bug Bounty Tuesday | https://medium.com/@kerstan/my-ssrf-tricks-bug-bounty-tuesday-f0d7e53c8d88?source=rss------bug_bounty-5 | kerstan | bug-bounty, security, hacking, cybersecurity, technology | 30-Jan-2024 |
| Rekomendasi Platform Bug Bounty Nasional Maupun Internasional | https://medium.com/@artiacode/rekomendasi-platform-bug-bounty-nasional-maupun-internasional-7406d388de08?source=rss------bug_bounty-5 | ArtiaCode | cybersecurity, cyber-security-awareness, bug-bounty, bug-bounty-hunter, bug-bounty-program | 30-Jan-2024 |
| Navigating the World of Bug Bounties in 2024: Opportunities and Platforms for Ethical Hackers | https://hacksheets.medium.com/navigating-the-world-of-bug-bounties-in-2024-opportunities-and-platforms-for-ethical-hackers-99ff20231e3e?source=rss------bug_bounty-5 | Hacksheets | Learn Cybersecurity | bug-bounty, artificial-intelligence, chatgpt, cybersecurity, penetration-testing | 30-Jan-2024 |
| Pov — HackTheBox Seasonal Machine Simple Writeup by Karthikeyan Nagaraj | 2024 | https://infosecwriteups.com/pov-hackthebox-seasonal-machine-simple-writeup-by-karthikeyan-nagaraj-2024-7516c938c688?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, hackthebox, hackthebox-writeup, careers, cybersecurity | 30-Jan-2024 |
| Attacking Session Management | Part 06 | What To Do After Choosing a Target | https://medium.com/@omarora1603/attacking-session-management-part-06-what-to-do-after-choosing-a-target-b551ab0455c5?source=rss------bug_bounty-5 | Om Arora | infosec, information-security, hacking, bug-bounty, cybersecurity | 30-Jan-2024 |
| Best Approach to RCE | https://medium.com/@anekantsinghai/best-approach-to-rce-630187d4ad03?source=rss------bug_bounty-5 | Anekant Singhai Jain | red-team, ethical-hacking, rce, penetration-testing, bug-bounty | 30-Jan-2024 |
| An introductory guide to HTTP request smuggling | https://medium.com/@mayank_prajapati/an-introductory-guide-to-http-request-smuggling-0defb95e87ce?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | website, web, bug-bounty, hacking, vulnerability | 30-Jan-2024 |
| How to replicate Jenkins CVE-2024–23897: Arbitrary File Read Vulnerability | https://medium.com/@red_darkin/how-to-replicate-jenkins-cve-2024-23897-arbitrary-file-read-vulnerability-260c8174dd94?source=rss------bug_bounty-5 | Red Darkin | bug-bounty, cybersecurity, cve-2024-23897, jenkins, offsec | 30-Jan-2024 |
| Behind the Scenes of DLLs : How Attackers Exploit Legitimate Programs for Mischief! | https://osintteam.blog/behind-the-scenes-of-dlls-how-attackers-exploit-legitimate-programs-for-mischief-395a7540af1f?source=rss------bug_bounty-5 | Paritosh | dll-hijacking, information-security, cybersecurity, hacking, bug-bounty | 29-Jan-2024 |
| Fundamentals of .NET Decompilation With dnSpy | https://infosecwriteups.com/fundamentals-of-net-decompilation-with-dnspy-e7456707b1d2?source=rss------bug_bounty-5 | Joward | pentesting, hacking, bug-bounty, dotnet | 29-Jan-2024 |
| How to Earn Bug Bounty as a Professional Bug hunter | https://rajput623929.medium.com/how-to-earn-bug-bounty-as-a-professional-bug-hunter-ef7de858f94b?source=rss------bug_bounty-5 | Mr.Horbio | bug-bounty, bugs, earn-money-online, ethical-hacking, cybersecurity | 29-Jan-2024 |
| Port Scanning: Pengertian, Teknik, Dan Pencegahannya | https://medium.com/@talaskosec/port-scanning-pengertian-teknik-dan-pencegahannya-38dece0adf2e?source=rss------bug_bounty-5 | TalaskoSec | bug-bounty-indonesia, coding, cyber-security-indonesia, cybersecurity, bug-bounty | 29-Jan-2024 |
| XML External Entity injection with error-based data exfiltration | https://infosecwriteups.com/xml-external-entity-injection-with-error-based-data-exfiltration-985b063ec820?source=rss------bug_bounty-5 | Serj Novoselov | penetration-testing, hacking, bug-bounty, xml, writeup | 29-Jan-2024 |
| OWASP Top 10 API Security Risks — 2023 | https://medium.com/@aayushdhakal005/owasp-top-10-api-security-risks-2023-0e1cd92214cf?source=rss------bug_bounty-5 | Creepydoomer | bug-bounty, cybersecurity, owasp, api | 29-Jan-2024 |
| Kenalan Sama Bug Bounty | https://medium.com/@artiacode/kenalan-sama-bug-bounty-a9d72927a349?source=rss------bug_bounty-5 | ArtiaCode | bug-bounty, cybersecurity, bug-bounty-tips, cyber-security-awareness, ethical-hacking | 29-Jan-2024 |
| CheckList for Bug Bounty Hunting | https://medium.com/@kalidaskamaraj/checklist-for-bug-bounty-hunting-ffcaf4841242?source=rss------bug_bounty-5 | Kalidaskamaraj | bug-bounty, cybersecurity, ethical-hacking, penetration-testing, web-application-testing | 29-Jan-2024 |
| Meteor Subdomain Takeover | https://medium.com/@youngvanda/meteor-subdomain-takeover-b33034a44aa7?source=rss------bug_bounty-5 | YoungVanda | cybersecurity, technology, bug-bounty, javascript, programming | 29-Jan-2024 |
| CVE-2024–0519: Chrome’s Gateway to Memory Access | https://medium.com/@elniak/cve-2024-0519-chromes-gateway-to-memory-access-8cfd6cbbd168?source=rss------bug_bounty-5 | ElNiak | google, cybersecurity, penetration-testing, bug-bounty, threat-intelligence | 29-Jan-2024 |
| OWASP Top 10 API Security Risks — 2023 | https://medium.com/@aayushdhakal005/owasp-top-10-api-security-risks-2023-0e1cd92214cf?source=rss------bug_bounty-5 | Creepyshit | bug-bounty, cybersecurity, owasp, api | 29-Jan-2024 |
| Discord’s preview bot redirection vulnerability | https://medium.com/@lenoctambule/discords-preview-bot-redirection-vulnerability-c8b08fe3721b?source=rss------bug_bounty-5 | Le Noctambule | bug-bounty, bugs, software-development, cybersecurity | 29-Jan-2024 |
| Simple Tips for Bug Bounty Beginners: Finding OTP Bypass Bug | https://medium.com/@anishnarayan/simple-tips-for-bug-bounty-beginners-finding-otp-bypass-bug-22323a8ff49b?source=rss------bug_bounty-5 | Anish Narayan | bug-bounty, cybersecurity, bug-bounty-tips, technology, programming | 29-Jan-2024 |
| Huge Bug Bounty Resource | https://medium.com/@joshdesharnais1/huge-bug-bounty-resource-d25ee48d81cc?source=rss------bug_bounty-5 | Joshua Desharnais | hacking, bug-bounty, bugs, bug-bounty-tips | 29-Jan-2024 |
| Techniques in Exploiting Business Logic Vulnerabilities for Bug Bounty | 2024 | https://cyberw1ng.medium.com/techniques-in-exploiting-business-logic-vulnerabilities-for-bug-bounty-2024-93293353e99f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, careers, cybersecurity, security | 29-Jan-2024 |
| Automation Hacks: Unearthing a Critical RCE the Easy Way | https://asbawy.medium.com/automation-hacks-unearthing-a-critical-rce-the-easy-way-ad64f01a06a3?source=rss------bug_bounty-5 | Asbawy | bug-bounty-tips, hacking, bug-bounty, cybersecurity, automation-testing | 29-Jan-2024 |
| Reflected XSS in canonical link tag | https://medium.com/@marduk.i.am/reflected-xss-in-canonical-link-tag-64c9719fc6ad?source=rss------bug_bounty-5 | Marduk I Am | reflected-xss, cybersecurity, portswigger-lab, bug-bounty, cross-site-scripting | 29-Jan-2024 |
| Bug Zero at a Glance [01–15 January] | https://blog.bugzero.io/bug-zero-at-a-glance-01-15-january-70f2e0b58c59?source=rss------bug_bounty-5 | Januka Dharmapriya | sri-lanka, newsletter, bug-zero, bug-bounty, cybersecurity | 28-Jan-2024 |
| How I Learned To Exploit Buffer Overflows: An Introduction to Stack-Based Buffer Overflows | https://medium.com/@shcyber/how-i-learned-to-exploit-buffer-overflows-an-introduction-to-stack-based-buffer-overflows-5b27e339a1a6?source=rss------bug_bounty-5 | SHCyber | cybersecurity, buffer-overflow-attack, bug-bounty, binary-exploitation, buffer-overflow | 28-Jan-2024 |
| Explorasi Platform Bug Bounty untuk Cyber Security Enthusiasts | https://medium.com/@faisalhanafi112/explorasi-platform-bug-bounty-untuk-cyber-security-enthusiasts-5d3bde391f69?source=rss------bug_bounty-5 | Faisal Hanafi | red-team, linuxhacking, pentesting, bug-bounty, cybersecurity | 28-Jan-2024 |
| Useful HTTP method every bug hunter must know | https://medium.com/@aayushdhakal005/useful-http-method-every-bug-hunter-must-know-02f57f59812a?source=rss------bug_bounty-5 | Creepydoomer | cybersecurity, web, https, bug-bounty | 28-Jan-2024 |
| Thorough Review Bug Bounty Hunter Certification [CBBH] | https://medium.com/@ozomarzu/thorough-review-bug-bounty-hunter-certification-cbbh-f39765da27bc?source=rss------bug_bounty-5 | CyberOz | pentesting, hackthebox, bug-bounty-hunter, bug-bounty, web-vulnerabilities | 28-Jan-2024 |
| I will be giving away my book for free! | https://medium.com/@deadoverflow/i-will-be-giving-away-my-book-for-free-924191fdea84?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty-tips, hacking, cybersecurity, bug-hunting, bug-bounty | 28-Jan-2024 |
| Get IDOR In No Permission To Access Page — Bug Bounty Tuesday | https://medium.com/@kerstan/get-idor-in-no-permission-to-access-page-bug-bounty-tuesday-a04fbb7e7821?source=rss------bug_bounty-5 | kerstan | cybersecurity, technology, hacking, security, bug-bounty | 28-Jan-2024 |
| Reflected XSS with some SVG markup allowed | https://medium.com/@marduk.i.am/reflected-xss-with-some-svg-markup-allowed-10d198692208?source=rss------bug_bounty-5 | Marduk I Am | reflected-xss, cross-site-scripting, portswigger-lab, cybersecurity, bug-bounty | 28-Jan-2024 |
| Roadmap Belajar SOC Analyst Dan Toolsnya | https://medium.com/@yasminramadini/roadmap-belajar-soc-analyst-dan-toolsnya-5ce314f0b0ff?source=rss------bug_bounty-5 | Yeaszec | bug-bounty, ethical-hacking, programmer, blue-team, cybersecurity | 28-Jan-2024 |
| CVE-2023–45866: 0-Click Bluetooth vulnerability | https://medium.com/@elniak/understanding-and-mitigating-cve-2023-45866-0-click-vulnerability-2576ec17c38f?source=rss------bug_bounty-5 | ElNiak | bluetooth, cybersecurity, bug-bounty, penetration-testing, threat-intelligence | 28-Jan-2024 |
| MIME Sniffing Explained: How Browsers Can Misinterpret Content Types | https://medium.com/@ab3lsec/mime-sniffing-explained-how-browsers-can-misinterpret-content-types-68c22d300345?source=rss------bug_bounty-5 | Abel V | sniffing, web-browser, cybersecurity, web-application-security, bug-bounty | 28-Jan-2024 |
| Hunting for Vulnerabilities that are ignored by most of the Bug Bounty Hunters — Part 1 | https://medium.com/@vflexo/hunting-for-vulnerabilities-that-are-ignored-by-most-of-the-bug-bounty-hunters-part-1-187b35508e56?source=rss------bug_bounty-5 | vFlexo | ethical-hacking, bug-bounty, penetration-testing, vapt, information-security | 28-Jan-2024 |
| How do you actually find bugs? (Part 2) | https://medium.com/@deadoverflow/how-do-you-actually-find-bugs-part-2-5d6930edeee7?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty-tips, bug-hunting, bug-bounty, hacking, cybersecurity | 28-Jan-2024 |
| Clicker — HackTheBox Machine Simple Writeup by Karthikeyan Nagaraj | 2024 | https://infosecwriteups.com/clicker-hackthebox-machine-simple-writeup-by-karthikeyan-nagaraj-2024-313b383236bd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, bug-bounty, hackthebox-writeup, hackthebox | 28-Jan-2024 |
| How do you actually find bugs? (My 2 years experience) | Part 2 | https://medium.com/@deadoverflow/how-do-you-actually-find-bugs-part-2-5d6930edeee7?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty-tips, bug-hunting, bug-bounty, hacking, cybersecurity | 28-Jan-2024 |
| This is the easiest bug you can find. | https://medium.com/@deadoverflow/this-is-the-easiest-bug-you-can-find-90573d0053e1?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty-tips, cybersecurity, programming, bug-bounty, hacking | 28-Jan-2024 |
| How to Get CVEs Online (Fast) | https://fh4ntke.medium.com/how-to-get-cves-online-fast-c0d6d897c04d?source=rss------bug_bounty-5 | FHantke | bug-bounty, information-technology, web-development, cybersecurity, hacking | 28-Jan-2024 |
| XSS is hard to find… or is it? (How to you find bugs) | https://medium.com/@deadoverflow/how-do-you-actually-find-bugs-part-2-5d6930edeee7?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty-tips, bug-hunting, bug-bounty, hacking, cybersecurity | 28-Jan-2024 |
| ARPA Monthly Report | December Progress Review | https://arpa.medium.com/arpa-monthly-report-december-progress-review-d49a5a44b79c?source=rss------bug_bounty-5 | ARPA Official | staking, cryptography, arpa, bug-bounty, rng | 27-Jan-2024 |
| 5.8 Lab: Insufficient workflow validation | 2024 | https://cyberw1ng.medium.com/5-8-lab-insufficient-workflow-validation-2024-ce57b036d908?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, cybersecurity, bug-bounty, hacking, careers | 27-Jan-2024 |
| Essential Encoding Schemes for Bug Bounty Hunters | https://medium.com/@aayushdhakal005/essential-encoding-schemes-for-bug-bounty-hunters-2cccd3dcb124?source=rss------bug_bounty-5 | Creepydoomer | bug-bounty, cybersecurity, ethical-hacking, security, encoding | 27-Jan-2024 |
| Your Life in the Crosshairs of Cybersecurity Threats! | https://medium.com/@paritoshblogs/your-life-in-the-crosshairs-of-cybersecurity-threats-526f4a122e14?source=rss------bug_bounty-5 | Paritosh | security, cybersecurity, programming, bug-bounty, information-security | 27-Jan-2024 |
| 500$: MFA bypass By Race Condition | https://medium.com/@a13h1/500-mfa-bypass-by-race-condition-176421462902?source=rss------bug_bounty-5 | Abhi Sharma | race-condition, bug-bounty, programming, 2fa, cybersecurity | 27-Jan-2024 |
| Як працює програма винагороди за виправлення помилок від Aleo? | https://medium.com/@prekrasnazasmin/%D1%8F%D0%BA-%D0%BF%D1%80%D0%B0%D1%86%D1%8E%D1%94-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%B0-%D0%B2%D0%B8%D0%BD%D0%B0%D0%B3%D0%BE%D1%80%D0%BE%D0%B4%D0%B8-%D0%B7%D0%B0-%D0%B2%D0%B8%D0%BF%D1%80%D0%B0%D0%B2%D0%BB%D0%B5%D0%BD%D0%BD%D1%8F-%D0%BF%D0%BE%D0%BC%D0%B8%D0%BB%D0%BE%D0%BA-%D0%B2%D1%96%D0%B4-aleo-edafe6e7dce0?source=rss------bug_bounty-5 | Marlin_2_2_0 | aleo, bug-bounty | 27-Jan-2024 |
| Schneier’s Law In Bug Bounty | https://wallotry.medium.com/schneiers-law-in-bug-bounty-df04bebfdf2f?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunting, bug-bounty-tips, bug-bounty | 27-Jan-2024 |
| SIEM Home Lab: Detecting Web Attack | https://medium.com/@yasminramadini/siem-home-lab-detecting-web-attack-b08c0d575498?source=rss------bug_bounty-5 | Yeaszec | soc-analyst, pentester, cybersecurity, bug-bounty, ethical-hacking | 26-Jan-2024 |
| Detecting Server-Side Technologies for Bug Hunting: | https://medium.com/@aayushdhakal005/detecting-server-side-technologies-for-bug-hunting-9f894bd87da2?source=rss------bug_bounty-5 | Creepydoomer | php, python, servers, bug-bounty, microsoft | 26-Jan-2024 |
| Evolution of Critical Log Sources in SIEM: A 5-Year Retrospective | https://infosecwriteups.com/evolution-of-critical-log-sources-in-siem-a-5-year-retrospective-841bae2b6a6c?source=rss------bug_bounty-5 | Paritosh | security, cybersecurity, siem, hacking, bug-bounty | 26-Jan-2024 |
| Zero Click Account Takeover | https://medium.com/@bhavin87859/zero-click-account-takeover-404bb73121c9?source=rss------bug_bounty-5 | Sunny Sharma | bug-bounty-writeup, bug-bounty | 26-Jan-2024 |
| Bug Bounty For Beginners 2024 Part (3). | https://medium.com/@lukwagoasuman236/bug-bounty-for-beginners-2024-part-3-3f8a70f8652e?source=rss------bug_bounty-5 | Asuman Lukwago | bug-bounty-tips, vulnerability-assessment, bug-bounty, cybersecurity, beginners-guide | 26-Jan-2024 |
| Unveiling the Odyssey: A Riveting Tale of PII Disclosure Vulnerability Discovery | https://medium.com/@mrraghavop12/unveiling-the-odyssey-a-riveting-tale-of-pii-disclosure-vulnerability-discovery-615f04432654?source=rss------bug_bounty-5 | Ethical Raghav | blockchain, data-science, cybersecurity, technology, bug-bounty | 26-Jan-2024 |
| Reflected XSS into HTML context with all tags blocked except custom ones | https://medium.com/@marduk.i.am/reflected-xss-into-html-context-with-all-tags-blocked-except-custom-ones-7eec0b6b146f?source=rss------bug_bounty-5 | Marduk I Am | bug-bounty, cross-site-scripting, cybersecurity, portswigger-lab, dom-xss | 26-Jan-2024 |
| Strategies for Success in Audit Contests and Bug Bounty Hunting | https://medium.com/@JohnnyTime/strategies-for-success-in-audit-contests-and-bug-bounty-hunting-082cef9b4021?source=rss------bug_bounty-5 | Johnny Time | smart-contract-auditing, audit-contest, bug-bounty, code4rena, bug-bounty-tips | 26-Jan-2024 |
| Ensuro Partners with Immunefi to Launch Bug Bounty Program | https://medium.com/@zorely/ensuro-partners-with-immunefi-to-launch-bug-bounty-program-e63368cdc0b0?source=rss------bug_bounty-5 | Ensuro ZE | bug-bounty | 26-Jan-2024 |
| How I Discovered a Sneaky Account Takeover Vulnerability | https://sumedhgharpande.medium.com/how-i-discovered-a-sneaky-account-takeover-vulnerability-530c3a080a20?source=rss------bug_bounty-5 | Sumedh Gharpande | bug-bounty, ethical-hacking, cyber-security-awareness, hacking, broken-access-control | 26-Jan-2024 |
| General Questions Asked in Telephonic Interview (Q&A)for Cybersecurity Role-My Personal Experience… | https://medium.com/@Ajakcybersecurity/general-questions-asked-in-telephonic-interview-q-a-for-cybersecurity-role-my-personal-experience-ae6298e5b8f0?source=rss------bug_bounty-5 | AjakCybersecurity | bug-bounty, ethical-hacking, interview, cybersecurity, jobs | 26-Jan-2024 |
| 5.7 Lab: Weak isolation on dual-use endpoint | 2024 | https://cyberw1ng.medium.com/5-7-lab-weak-isolation-on-dual-use-endpoint-2024-cd80519184b4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, security, bug-bounty, careers | 26-Jan-2024 |
| Bug Bounty 101: Unveiling the Crucial Role in Cybersecurity for Beginners | https://systemweakness.com/bug-bounty-101-unveiling-the-crucial-role-in-cybersecurity-for-beginners-0d8611e6f315?source=rss------bug_bounty-5 | Fahri Yeşil | cyber-threat-intelligence, bug-bounty, ethical-hacking, cybersecurity, vulnerability-research | 26-Jan-2024 |
| Web Cache Poisoning: WWWWWH? | https://medium.com/@rcxsecurity/web-cache-poisoning-wwwwwh-ee2b47d6bacc?source=rss------bug_bounty-5 | RCXSecurity | cybersecurity, pentesting, bug-bounty-tips, penetration-testing, bug-bounty | 26-Jan-2024 |
| How to get your email from different bug bounty platform to start hacking : | https://medium.com/@aayushdhakal005/how-to-get-your-email-from-different-bug-bounty-platform-to-start-hacking-ce01dd45f7ca?source=rss------bug_bounty-5 | Creepydoomer | cybersecurity, bug-bounty, ethical-hacking, hackerone, hacker | 25-Jan-2024 |
| Tool: SCRIPTKIDDI3: A Comprehensive Guide to Efficient Bug Bounty Reconnaissance | https://nixiebytes.medium.com/tool-scriptkiddi3-a-comprehensive-guide-to-efficient-bug-bounty-reconnaissance-dc91c3517a5e?source=rss------bug_bounty-5 | Nixie_Bytes Security Team | bug-bounty, hacking-tools, tools, cybersecurity, hacking | 25-Jan-2024 |
| A Comprehensive Guide to Bug Bounty Hunting Mastery | https://medium.com/@mrraghavop12/a-comprehensive-guide-to-bug-bounty-hunting-mastery-706934490626?source=rss------bug_bounty-5 | Ethical Raghav | bug-bounty, cybersecurity, artificial-intelligence, blockchain, data-science | 25-Jan-2024 |
| eJPT all you need to know | https://medium.com/@boogsta/ejpt-all-you-need-to-know-7c62fef04cf3?source=rss------bug_bounty-5 | Boogsta | cyber, bug-bounty, bug-bounty-tips, hacking, cybersecurity | 25-Jan-2024 |
| 5.6 Lab: Inconsistent handling of exceptional input | 2024 | https://cyberw1ng.medium.com/5-6-lab-inconsistent-handling-of-exceptional-input-2024-d02e2bb522f4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, security, bug-bounty, cybersecurity | 25-Jan-2024 |
| OWASP TOP 10 2021: | https://medium.com/@aayushdhakal005/owasp-top-10-2021-cfb610db7dd4?source=rss------bug_bounty-5 | Creepydoomer | cybersecurity, ethical-hacking, bug-bounty, sql-injection, owasp | 24-Jan-2024 |
| Git Directory Exposed Leads to Credentials Disclosure | https://medium.com/@blackarazi/git-directory-exposed-leads-to-credentials-disclosure-1d1737638279?source=rss------bug_bounty-5 | Azhari Harahap | bug-bounty-writeup, supply-chain-security, bug-bounty, application-security, git-exposed | 24-Jan-2024 |
| Avedia Player r9300 Vulnerabilities | https://medium.com/@x41x41x41/avedia-player-r9300-vulnerabilities-1c71b4d8efa0?source=rss------bug_bounty-5 | John M | web-development, cve, bug-bounty, hacking, exploit | 24-Jan-2024 |
| 5.5 Low-level logic flaw in Business logic vulnerabilities | 2024 | https://cyberw1ng.medium.com/5-5-low-level-logic-flaw-in-business-logic-vulnerabilities-2024-cf9a90e2e762?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, hacking, security | 24-Jan-2024 |
| The Immunefi bug bounty campaign is live | https://dexenetwork.medium.com/the-immunefi-bug-bounty-campaign-is-live-5782b93f823e?source=rss------bug_bounty-5 | DeXe Protocol | dao, dexe, defi, bug-bounty | 24-Jan-2024 |
| The art of learning bug bounty. | https://medium.com/@siratsami71/the-art-of-learning-bug-bounty-9c2a48aee53b?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | bugbounty-writeup, bug-bounty | 24-Jan-2024 |
| IDOR Allowing to Place Other Students in Exam Sessions | https://medium.com/@mr_payload_injector/idor-allowing-to-place-other-students-in-exam-sessions-1bbefd14ac8d?source=rss------bug_bounty-5 | Mr_Payload_Injector | bug-bounty, cybersecurity, idor, bug-bounty-writeup, ethical-hacking | 24-Jan-2024 |
| Response Manipulation Lead To Premium Feature By Normal User Reward of $500 | https://medium.com/@zikola1/response-manipulation-lead-to-premium-feature-by-normal-user-reward-of-500-43381f769ab1?source=rss------bug_bounty-5 | Abdulrahman badawi | web-application-security, bug-bounty-tips, penetration-testing, bug-bounty, bug-bounty-writeup | 24-Jan-2024 |
| OWASP TOP 10 2017: | https://medium.com/@aayushdhakal005/owasp-top-10-2017-9daabe8c44bf?source=rss------bug_bounty-5 | Aayushdhakal | bug-bounty, ethical-hacking, sql, owasp, cybersecurity | 23-Jan-2024 |
| Get IDOR In No Permission To Access Page— Bug Bounty Tuesday | https://medium.com/@kerstan/get-idor-in-no-permission-to-access-page-bug-bounty-tuesday-68aa82402171?source=rss------bug_bounty-5 | kerstan | hacking, cybersecurity, technology, bug-bounty, security | 23-Jan-2024 |
| Dosya yükleme ile XSS | https://enesozlekk.medium.com/dosya-y%C3%BCkleme-ile-xss-8f2dd8d093c4?source=rss------bug_bounty-5 | Enes Özlek | bug-bounty | 23-Jan-2024 |
| How to Exploit Business Logic Vulnerabilities for Bug Bounty | 2024 | https://cyberw1ng.medium.com/how-to-exploit-business-logic-vulnerabilities-for-bug-bounty-2024-5c9f14420d50?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, security, cybersecurity, bug-bounty | 23-Jan-2024 |
| SQL Injection on PostgreSQL | https://medium.com/@yagizkocer/sql-injection-on-postgresql-8c8f823e44aa?source=rss------bug_bounty-5 | Yağız Koçer | sql-injection, penetration-testing, bug-bounty, hacking, cybersecurity | 23-Jan-2024 |
| Leaked SQL error leading to XSS, and another BSQLi... | https://medium.com/@zatikyan.sevada/leaked-sql-error-leading-to-xss-and-another-bsqli-cdadde032687?source=rss------bug_bounty-5 | Zatikyan Sevada | bug-bounty, sql-injection, sql, xss-attack, cybersecurity | 22-Jan-2024 |
| Hacking behind the WAF | https://noorhomaid.medium.com/hacking-behind-the-waf-60c6c1a48411?source=rss------bug_bounty-5 | NoorHomaid | infosec, bug-bounty-tips, penetration-testing, bug-bounty, cybersecurity | 22-Jan-2024 |
| Better understanding of User-Directed Spidering vs Automated Spidering | https://medium.com/@aayushdhakal005/better-understanding-of-user-directed-spidering-vs-automated-spidering-a18342c42a25?source=rss------bug_bounty-5 | Aayushdhakal | hacking, penetration-testing, spidering, web, bug-bounty | 22-Jan-2024 |
| How to find unprotected databases with Netlas.io: Chapter 2 | https://netlas.medium.com/how-to-find-unprotected-databases-with-netlas-io-chapter-2-ba71b07c9630?source=rss------bug_bounty-5 | Netlas.io | cybersecurity, information-security, bug-bounty, penetration-testing, osint | 22-Jan-2024 |
| This Tool Helps Me To Find The Origin IP Address | https://medium.com/@Ajakcybersecurity/this-tool-helps-me-to-find-the-origin-ip-address-75b1444da57e?source=rss------bug_bounty-5 | AjakCybersecurity | penetration-testing, bug-bounty, hacking, cybersecurity, ethical-hacking | 22-Jan-2024 |
| Is It Worth Quitting 9–5 Job For a Full-Time Bug Bounty In 2024? | https://medium.com/@Ajakcybersecurity/is-it-worth-quitting-9-5-job-for-a-full-time-bug-bounty-in-2024-a408389d914e?source=rss------bug_bounty-5 | AjakCybersecurity | cybersecurity, medium, bug-bounty, jobs, penetration-testing | 22-Jan-2024 |
| 4.5 Lab: Blind OS command injection with out-of-band data exfiltration | 2024 | https://cyberw1ng.medium.com/4-5-lab-blind-os-command-injection-with-out-of-band-data-exfiltration-2024-7bb26c2473e7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, security, hacking, cybersecurity | 22-Jan-2024 |
| Bug Bounty For Beginners 2024. | https://medium.com/@lukwagoasuman236/bug-bounty-for-beginners-2024-df4a38ed3ad2?source=rss------bug_bounty-5 | Asuman Lukwago | planning, finance, cybersecurity, bug-bounty, info | 22-Jan-2024 |
| Reflected XSS into HTML context with most tags and attributes blocked | https://medium.com/@marduk.i.am/reflected-xss-into-html-context-with-most-tags-and-attributes-blocked-4266c6c473ad?source=rss------bug_bounty-5 | Marduk I Am | bug-bounty, portswigger-lab, cybersecurity, cross-site-scripting, dom-xss | 22-Jan-2024 |
| How do you actually find bugs? (My 2 year experience) | https://medium.com/@deadoverflow/how-do-you-actually-find-bugs-my-2-year-experience-2d77d78994a0?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty, hacking, programming, cybersecurity, bug-bounty-tips | 22-Jan-2024 |
| HackTheBox Saturn: Explaining SSRF | https://medium.com/@leomsec/hackthebox-saturn-explaining-ssrf-072234ab5ce3?source=rss------bug_bounty-5 | Leonardo | bug-bounty, hacker, pentesting, ctf, hackthebox | 22-Jan-2024 |
| How I Discovered a Critical Vulnerability in a Leading UK Retail Giant’s System | https://medium.com/@cathreat/how-i-discovered-a-critical-vulnerability-in-a-leading-uk-retail-giants-system-bc4211c159a7?source=rss------bug_bounty-5 | cathreat | united-kingdom, pentesting, bug-bounty, hacking, ssrf | 22-Jan-2024 |
| Unveiling the Digital Tapestry: A Penetration Tester's Odyssey into the Heart of Cyber… | https://medium.com/@mrraghavop12/title-unveiling-the-digital-tapestry-a-penetration-testers-odyssey-into-the-heart-of-cyber-2ac009e54e2f?source=rss------bug_bounty-5 | Ethical Raghav | bug-bounty, cybersecurity, web-development, technology, artificial-intelligence | 21-Jan-2024 |
| Gelios Testnet Bug Bounty Program: Earn Up to $5,000 | https://geliosofficial.medium.com/gelios-testnet-bug-bounty-program-earn-up-to-5-000-10e2d78124f8?source=rss------bug_bounty-5 | Gelios | bitcoin-l2, gelios, blockchain, crypto, bug-bounty | 21-Jan-2024 |
| Bug bounty platforms for 2024 | https://medium.com/@notahades/bug-bounty-platforms-for-2024-ab289e5c74a9?source=rss------bug_bounty-5 | Not_A_Hades | bug-bounty, cybersecurity, hacking, security | 21-Jan-2024 |
| 4.4 Lab: Blind OS command injection with out-of-band interaction | 2024 | https://cyberw1ng.medium.com/4-4-lab-blind-os-command-injection-with-out-of-band-interaction-2024-f9d0e7a1c7ac?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, hacking, cybersecurity, careers, bug-bounty | 21-Jan-2024 |
| Making My First 10K by Hacking Open Source Targets | https://infosecwriteups.com/making-my-first-10k-by-hacking-open-source-targets-14ee1e9eeb70?source=rss------bug_bounty-5 | SynapticSpace | bug-bounty, foss, cybersecurity, hacking | 21-Jan-2024 |
| Path traversal | https://medium.com/@codersqs/path-traversal-78cce0994e2d?source=rss------bug_bounty-5 | Codersqs | ethical-hacking, server-side-rendering, bug-bounty, ssrf-bug, directory-traversal | 21-Jan-2024 |
| Exploiting SSRF in PDF HTML Injection: Basic and Blind | https://medium.com/@jbince/exploiting-ssrf-in-pdf-html-injection-basic-and-blind-047fec5317ae?source=rss------bug_bounty-5 | Joward | bug-bounty, ssrf, hacking, web-app-security, pentesting | 21-Jan-2024 |
| Exploiting SSRF in PDF HTML Injection: Basic and Blind | https://infosecwriteups.com/exploiting-ssrf-in-pdf-html-injection-basic-and-blind-047fec5317ae?source=rss------bug_bounty-5 | Joward | bug-bounty, ssrf, hacking, web-app-security, pentesting | 21-Jan-2024 |
| China Implements Stringent Cybersecurity Regulations: Makers Urged to Swiftly Report… | https://jareddouville.medium.com/china-implements-stringent-cybersecurity-regulations-makers-urged-to-swiftly-report-673f99696750?source=rss------bug_bounty-5 | Jared Douville | china-hackers, cyber-security-awareness, bug-bounty, zero-day, china | 20-Jan-2024 |
| How I Bypassed CSRF Token — 2 Ways | https://medium.com/mii-cybersec/how-i-bypassed-csrf-token-2-ways-b87ac04969a8?source=rss------bug_bounty-5 | Bryan Matthew | csrf-bypass, red-team, bug-bounty, penetration-testing, csrf | 20-Jan-2024 |
| Stored DOM XSS | https://medium.com/@marduk.i.am/stored-dom-xss-c7c9c972d086?source=rss------bug_bounty-5 | Marduk I Am | portswigger-lab, dom-xss, bug-bounty, cybersecurity, cross-site-scripting | 20-Jan-2024 |
| The art of account takeover | https://medium.com/@iknowhatodo/the-art-of-account-takeover-ec5f9a29c436?source=rss------bug_bounty-5 | Hossam Ahmed | account-takeover, information-security, bug-bounty | 20-Jan-2024 |
| Securing AWS: Understanding EC2 IMDS Vulnerabilities and Learning from the Capital One Breach | https://kishoreramk.medium.com/securing-aws-understanding-ec2-imds-vulnerabilities-and-learning-from-the-capital-one-breach-6f753e06cd66?source=rss------bug_bounty-5 | KISHORERAM | aws-ec2, aws-s3, cybersecurity, aws, bug-bounty | 20-Jan-2024 |
| Login DoS — That requires simply sending a lot of specially crafted requests | https://infosecwriteups.com/login-dos-that-requires-simply-sending-a-lot-of-specially-crafted-requests-2ca927c628dd?source=rss------bug_bounty-5 | Shriyans Sudhi | bug-bounty, hackerone, penetration-testing, cybersecurity, web-hacking | 20-Jan-2024 |
| 921$ Privilege Escalation: Unauthorized User Addition to Shared APP Connections | https://infosecwriteups.com/921-privilege-escalation-unauthorized-user-addition-to-shared-app-connections-0780134d6cf1?source=rss------bug_bounty-5 | Abhi Sharma | privilege-escalation, hacking, cybersecurity, programming, bug-bounty | 20-Jan-2024 |
| 4.3 Lab: Blind OS command injection with output redirection | 2024 | https://cyberw1ng.medium.com/4-3-lab-blind-os-command-injection-with-output-redirection-2024-d92f52f139b4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, bug-bounty, cybersecurity, security | 20-Jan-2024 |
| Boosting Your Income: My Journey with Side Hustles in Cybersecurity | https://medium.com/@himanshu_mahajan/boosting-your-income-my-journey-with-side-hustles-in-cybersecurity-8cc088c92469?source=rss------bug_bounty-5 | Himanshu Mahajan | side-hustle, security, technology, bug-bounty, cybersecurity | 20-Jan-2024 |
| How To Hide Any Payload: Day 3/100 Of Gaining Hacking Knowledge | https://medium.com/@ssg30devil/how-to-hide-any-payload-day-3-100-of-gaining-hacking-knowledge-002c4adb328b?source=rss------bug_bounty-5 | rootzs | bug-bounty-tool, bug-bounty, bug-bounty-tips, hacking | 19-Jan-2024 |
| Dangling CNAME/Orphaned CNAME leads P2 on Google VRP | https://medium.com/@jerryhackgather/dangling-cname-orphaned-cname-leads-p2-on-google-vrp-fca8964d983c?source=rss------bug_bounty-5 | Jerry1319 | bug-bounty, bug-bounty-tips, bug-bounty-writeup, cybersecurity | 19-Jan-2024 |
| Penetration Testing Techniques | https://anticitizenone.medium.com/penetration-testing-techniques-5eaf254fc5e6?source=rss------bug_bounty-5 | Rodolfo Santos Flaborea | blue-team, purple-team, red-team, pentesting, bug-bounty | 19-Jan-2024 |
| Best Recon Website For BugBounty in 2024, I came across! Completely Free 🙂 | https://medium.com/@Ajakcybersecurity/best-recon-website-for-bugbounty-in-2024-i-came-across-completely-free-303d67187400?source=rss------bug_bounty-5 | AjakCybersecurity | blogging, cybersecurity, penetration-testing, ethical-hacking, bug-bounty | 19-Jan-2024 |
| Authentication Bypass | Part 05 | What To Do After Choosing a Target | https://medium.com/@omarora1603/authentication-bypass-part-05-what-to-do-after-choosing-a-target-31eddc38029c?source=rss------bug_bounty-5 | Om Arora | hacking, cybersecurity, bug-bounty, technology, infosec | 19-Jan-2024 |
| 4.2 Lab: Lab: Blind OS command injection with time delays | 2024 | https://cyberw1ng.medium.com/4-2-lab-lab-blind-os-command-injection-with-time-delays-2024-042ad98c27e6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, careers, bug-bounty, security | 19-Jan-2024 |
| IDOR To Massive Government Data Leak | https://bishal0x01.medium.com/idor-to-massive-government-data-leak-e8ad510d7e5?source=rss------bug_bounty-5 | Bishal Shrestha | bug-bounty, information-security, writeup, data-leak | 19-Jan-2024 |
| Authentication Bypass | Part 05 | What To Do After Choosing a Target | https://infosecwriteups.com/authentication-bypass-part-05-what-to-do-after-choosing-a-target-31eddc38029c?source=rss------bug_bounty-5 | Om Arora | hacking, cybersecurity, bug-bounty, technology, infosec | 19-Jan-2024 |
| IDOR Vulnerability Allowing Unauthorized Access to Colleagues’ Bachelor Theses | https://medium.com/@mr_payload_injector/idor-vulnerability-allowing-unauthorized-access-to-colleagues-bachelor-theses-8c76c4ec4480?source=rss------bug_bounty-5 | Mr_Payload_Injector | cybersecurity, ethical-hacking, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 19-Jan-2024 |
| #ERROR! | https://medium.com/@Xt3sY/500-internal-server-bypass-everything-will-be-200-okay-bcd149397736?source=rss------bug_bounty-5 | Pushkar Bhagat | hackerone, hacking, bugcrowd, exploitation, bug-bounty | 19-Jan-2024 |
| How I Bypassed CSRF Token — 2Ways | https://medium.com/@bmatth21/how-i-bypassed-csrf-token-2ways-5662b4191188?source=rss------bug_bounty-5 | Bryan Matthew | penetration-testing, csrf-protection, csrf, bug-bounty, csrf-token | 19-Jan-2024 |
| Roadmap to Cybersecurity Mastery: A Guide for Aspiring IT Professionals | https://ikhaleelkhan.medium.com/roadmap-to-cybersecurity-mastery-a-guide-for-aspiring-it-professionals-b2f2e6cc9641?source=rss------bug_bounty-5 | Khaleel Khan | hacking, infosec, cybersecurity, ethical-hacking, bug-bounty | 18-Jan-2024 |
| AWS/S3 Subdomain Takeover | https://medium.com/@scottlindh/aws-s3-subdomain-takeover-79d705cc3553?source=rss------bug_bounty-5 | Scott Lindh | pentesting, hacking, hacking-tools, bug-bounty, bug-bounty-tips | 18-Jan-2024 |
| Exploiting vulnerabilities in LLM APIs [OS injection] | https://medium.com/@s_novoselov/exploiting-vulnerabilities-in-llm-apis-os-injection-b7d31c803d1d?source=rss------bug_bounty-5 | Serj Novoselov | llm, penetration-testing, bug-bounty, ai, hacking | 18-Jan-2024 |
| Brutal Bug Bounty methodology | https://medium.com/@pentajbr/brutal-bug-bounty-methodology-f872d0c1b8da?source=rss------bug_bounty-5 | Major Jbr | bug-bounty-tips, bug-bounty | 18-Jan-2024 |
| Secret Input Header leads to Password Reset Poisoning | https://medium.com/@mares.viktor/secret-input-header-leads-to-password-reset-poisoning-ad3081fd8488?source=rss------bug_bounty-5 | Viktor Mares | bug-bounty, penetration-testing, hacking, web-development, cybersecurity | 18-Jan-2024 |
| Business Logic: Bypass 2FA to ATO | https://giongfnef.medium.com/business-logic-bypass-2fa-to-ato-e0dc7131b10e?source=rss------bug_bounty-5 | Giongnef | security, bug-bounty, cybersecurity, information-security, pentesting | 18-Jan-2024 |
| Finding Secret Key Inside React Native Apps | https://aminudin.medium.com/finding-secret-key-inside-react-native-apps-9eb6beac02f8?source=rss------bug_bounty-5 | Aminudin | bug-bounty, bugs, bug-bounty-tips | 18-Jan-2024 |
| Blind OS command injection vulnerabilities in Portswigger | 2024 | https://cyberw1ng.medium.com/blind-os-command-injection-vulnerabilities-in-portswigger-2024-cdc10f62d0be?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, security, careers, hacking, bug-bounty | 18-Jan-2024 |
| Master Bug Bounty Hunting Course | https://medium.com/@teamhydrashop/master-bug-bounty-hunting-course-ea3615f1160b?source=rss------bug_bounty-5 | Team Hydra Shop | tool-hack-xổ-số, bug-fixes, bug-bounty, penetration-testing, hacking-tools | 18-Jan-2024 |
| What is Cyberkill Chain (My first Interview Question of my carrier) | https://akash-venky091.medium.com/what-is-cyberkill-chain-my-first-interview-question-of-my-carrier-e1cc6351a24b?source=rss------bug_bounty-5 | Akash Venky | security, bug-bounty, cybersecurity, information-technology, pentesting | 18-Jan-2024 |
| How I Automatically Generate XSS Payload & Automate Reflected XSS | https://medium.com/@Ajakcybersecurity/how-i-automatically-generate-xss-payload-automate-reflected-xss-91f4a232cd78?source=rss------bug_bounty-5 | AjakCybersecurity | cybersecurity, ethical-hacking, xss-attack, bug-bounty, penetration-testing | 18-Jan-2024 |
| Is PNPT Certification Worth It for a Cybersecurity Job? Exploring PNPT! | https://medium.com/@Ajakcybersecurity/is-pnpt-certification-worth-it-for-a-cybersecurity-job-exploring-pnpt-8fa13a194fe4?source=rss------bug_bounty-5 | AjakCybersecurity | bug-bounty, ethical-hacking, hacking, certification, cybersecurity | 18-Jan-2024 |
| A Best $5 Spent in My Entire Cybersecurity Journey | https://medium.com/@Ajakcybersecurity/a-best-5-spent-in-my-entire-cybersecurity-journey-baf09ae710d0?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, tryhackme, bug-bounty, cybersecurity, ethical-hacking | 18-Jan-2024 |
| CSRF vulnerability | https://medium.com/@os1764934/csrf-vulnerability-ebfbbe6dd81c?source=rss------bug_bounty-5 | Omar Samy | bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-tips | 18-Jan-2024 |
| Hydra Tryhackme: Walkthrough/Writeup | https://proviesec.medium.com/hydra-tryhackme-walkthrough-writeup-784db55ab9a9?source=rss------bug_bounty-5 | Proviesec | hydra, tryhackme-walkthrough, cybersecurity, bug-bounty, tryhackme | 18-Jan-2024 |
| Things should do after sublister(sublist3r) | https://medium.com/@canonminibeast/things-should-do-after-sublister-sublist3r-90176a020409?source=rss------bug_bounty-5 | Canonminibeast | bug-bounty, cybersecurity, sublist3r, web-development, web-pen-testing | 18-Jan-2024 |
| Exploiting LLM APIs with excessive agency | https://jareddouville.medium.com/exploiting-llm-apis-with-excessive-agency-979d87a9937e?source=rss------bug_bounty-5 | Jared Douville | portswigger-lab, bug-bounty, cyber-security-awareness, hackerone, llm | 18-Jan-2024 |
| easy bug = big bounty | easy and small bug can give you a big bounty and Reputation | https://medium.com/@no_oneee/easy-bug-big-bounty-easy-and-small-bug-can-give-you-a-big-bounty-and-reputation-08534a90d2e6?source=rss------bug_bounty-5 | no|one | bug-bounty, hacking, bug-bounty-tips, information-security, bugs | 18-Jan-2024 |
| Accessing deleted comment for $$: A Bug Bounty Writeup | https://vijetareigns.medium.com/accessing-deleted-comment-for-a-bug-bounty-writeup-95d56662d209?source=rss------bug_bounty-5 | the_unlucky_guy | bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips, writeup | 17-Jan-2024 |
| Understanding and Mitigating Authentication Bypass Techniques in Web Applications | https://ikhaleelkhan.medium.com/understanding-and-mitigating-authentication-bypass-techniques-in-web-applications-d72795f469be?source=rss------bug_bounty-5 | Khaleel Khan | hacking, bug-bounty, infosec, infosecurity, ethical-hacking | 17-Jan-2024 |
| Best Hacking OSINT Site list in 2024 | https://medium.com/@logicTech/best-hacking-osint-site-list-in-2024-768db84c55e3?source=rss------bug_bounty-5 | LogicTech | hacking-tools, bug-bounty, hacking, osint-investigation, journalism | 17-Jan-2024 |
| Why Web2 Vulnerabilities Need Addressing Before Embracing Web3 — Part 1 | https://medium.com/@resonance.security/why-web2-vulnerabilities-need-addressing-before-embracing-web3-part-1-e881424e216c?source=rss------bug_bounty-5 | Resonance | bug-bounty, web3, blockchain | 17-Jan-2024 |
| Phishing using Google Sheets for Red Team Engagements | https://infosecwriteups.com/phishing-using-google-sheets-for-red-team-engagements-ac79298ddb90?source=rss------bug_bounty-5 | Supun Halangoda (Suppa) | cybersecurity, phishing-attacks, phishing, information-security, bug-bounty | 17-Jan-2024 |
| Privilege escalation via response manipulation | https://seek-er.medium.com/privilege-escalation-via-response-manipulation-e2ed5076b023?source=rss------bug_bounty-5 | Viky | bug-bounty-writeup, hacking, web-application-security, bug-bounty, security | 17-Jan-2024 |
| 1 Program, 4 Business Logic Bugs and Cashing in 2300$. | https://infosecwriteups.com/1-program-4-business-logic-bugs-and-cashing-in-2300-299b42236993?source=rss------bug_bounty-5 | Manav Bankatwala | bounty-hunter, information-security, bug-bounty, appreciation, cybersecurity | 17-Jan-2024 |
| 3.6 Lab: File path traversal, validation of file extension with null byte bypass | 2024 | https://cyberw1ng.medium.com/3-6-lab-file-path-traversal-validation-of-file-extension-with-null-byte-bypass-2024-ccf8005b5379?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, careers, bug-bounty, hacking, cybersecurity | 17-Jan-2024 |
| Shall I Start Bug Bounty Without Cybersecurity Basics in 2024? | https://medium.com/@Ajakcybersecurity/shall-i-start-bug-bounty-without-cybersecurity-basics-in-2024-f62fa3ab1991?source=rss------bug_bounty-5 | AjakCybersecurity | penetration-testing, ethical-hacking, cybersecurity, hacking, bug-bounty | 17-Jan-2024 |
| API_Security RoadMap | https://akash-venky091.medium.com/api-security-roadmap-edb59a420b04?source=rss------bug_bounty-5 | Akash Venky | cybersecurity, bug-bounty, vulnerability, information-technology, ethical-hacking | 16-Jan-2024 |
| Extracting iOS IPA files Without Jailbreaking…! | https://medium.com/@dhanush1895/extracting-ios-ipa-files-without-jailbreaking-6e7ee8e57ad7?source=rss------bug_bounty-5 | Daniel1895 | methodology, ios, bug-bounty-tips, bug-bounty, pentesting | 16-Jan-2024 |
| Unleashing the Power of AutoRepeater: Automating Blind SQL Injection Detection | https://medium.com/@atikqur007/unleashing-the-power-of-autorepeater-automating-blind-sql-injection-detection-1b159ee81158?source=rss------bug_bounty-5 | Atik Rahman | sql-injection, bug-bounty, blind-sql-injection, burpsuite-extension, cybersecurity | 16-Jan-2024 |
| 3.5 Lab: File path traversal, validation of start of path | 2024 | https://cyberw1ng.medium.com/3-5-lab-file-path-traversal-validation-of-start-of-path-2024-9b2b9b4f15d7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, bug-bounty, cybersecurity, hacking, careers | 16-Jan-2024 |
| How to Discovered IDOR from a Blank Page — Bug Bounty Tuesday | https://medium.com/@kerstan/how-to-discovered-idor-from-a-blank-page-bug-bounty-tuesday-5af784533d1a?source=rss------bug_bounty-5 | kerstan | technology, programming, bug-bounty, cybersecurity | 16-Jan-2024 |
| GUI Bug Bounty Tool To Find Easy P1s in 2024 | https://medium.com/@Ajakcybersecurity/gui-bug-bounty-tool-to-find-easy-p1s-in-2024-24d05dceba72?source=rss------bug_bounty-5 | AjakCybersecurity | cybersecurity, ethical-hacking, github, penetration-testing, bug-bounty | 16-Jan-2024 |
| Secret Bug bounty Extension all Hackers Forget To Add. Part-2 (Not Common!) | https://medium.com/@Ajakcybersecurity/secret-bug-bounty-extension-all-hackers-forget-to-add-part-2-not-common-e29d857f90e0?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, extension, cybersecurity, hacking, bug-bounty | 16-Jan-2024 |
| Extensions I Use For My Bug Bounty Hunting in 2024, Part-1. | https://medium.com/@Ajakcybersecurity/extensions-i-use-for-my-bug-bounty-hunting-in-2024-part-1-5b8ba7501408?source=rss------bug_bounty-5 | AjakCybersecurity | cybersecurity, blog, hacking, bug-bounty, ethical-hacking | 16-Jan-2024 |
| A Digital Date with a Hacker: A Café WiFi Adventure! | https://medium.com/@Ajakcybersecurity/a-digital-date-with-a-hacker-a-caf%C3%A9-wifi-adventure-db7ae98bbd90?source=rss------bug_bounty-5 | AjakCybersecurity | digital-forensics, cybersecurity, bug-bounty, hacking, blog | 16-Jan-2024 |
| What can a Hacker do with your IP Address? Track Your Location? | https://medium.com/@Ajakcybersecurity/what-can-a-hacker-do-with-your-ip-address-track-your-location-f7854cd5c32f?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, cybersecurity, blog, digital-forensics, bug-bounty | 16-Jan-2024 |
| Top 5 Sites to Improve Your Hacking Skill IN 2024 | https://medium.com/@Ajakcybersecurity/top-5-sites-to-improve-your-hacking-skill-in-2024-b9e786eb7adb?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, blog, cybersecurity, bug-bounty, hacking | 16-Jan-2024 |
| Day 2/100 Of Gaining Hacking Knowledge — Easily change IP, Mac, DNS, Log killer, and more……. | https://medium.com/@ssg30devil/day-2-100-of-gaining-hacking-knowledge-easily-change-ip-mac-dns-log-killer-and-more-7d286c7b7647?source=rss------bug_bounty-5 | rootzs | bug-bounty, ethical-hacking, 100daychallenge, cybersecurity, git-tool | 16-Jan-2024 |
| Web Security Academy — Business Logic Vulnerabilities Walkthrough | https://iaraoz.medium.com/web-security-academy-business-logic-vulnerabilities-walkthrough-536f756cda9b?source=rss------bug_bounty-5 | Israel Aráoz Severiche | cybersecurity, owasp, vulnerability, appsec, bug-bounty | 16-Jan-2024 |
| Demystifying Reflected XSS: Understanding and Mitigating This Common Web Security Vulnerability | https://medium.com/@j0hnw1ck/demystifying-reflected-xss-understanding-and-mitigating-this-common-web-security-vulnerability-beaa3bb058c5?source=rss------bug_bounty-5 | J0hn W1ck | bug-bounty, cybersecurity, web-development, pentesting, hacking | 16-Jan-2024 |
| Bug Zero at a Glance [16–31 December] | https://blog.bugzero.io/bug-zero-at-a-glance-16-31-december-d722a2b76ed4?source=rss------bug_bounty-5 | Januka Dharmapriya | newsletter, bug-bounty, bug-zero, sri-lanka, cybersecurity | 15-Jan-2024 |
| How Apple Scammed Me Out Of $50,000 in their Bug Bounty Program (Silent Patching & Ignoring Me) | https://medium.com/@just4g3nt/how-apple-scammed-me-out-of-50-000-in-their-bug-bounty-program-silent-patching-ignoring-me-18455a47a1f6?source=rss------bug_bounty-5 | Random User | bug-bounty, infosec, apple, scam, cybersecurity | 15-Jan-2024 |
| Unrestricted File Upload Lead to Stored XSS at Microsoft main domain | https://medium.com/@cavdarbashas/unrestricted-file-upload-lead-to-stored-xss-at-microsoft-main-domain-baa9cadac6bd?source=rss------bug_bounty-5 | Sokol Çavdarbasha | bug-bounty, penetration-testing, technology, web-security, ethical-hacking | 15-Jan-2024 |
| HackenProof bug bounty campaign is now live | https://dexenetwork.medium.com/hackenproof-bug-bounty-campaign-is-now-live-bf9bc5ddd6d1?source=rss------bug_bounty-5 | DeXe Protocol | security, dao, bug-bounty, defi | 15-Jan-2024 |
| 100-day Challenge Day 1/100 Ethical Hacking Knowledge | https://medium.com/@ssg30devil/100-day-challenge-day-1-100-ethical-hacking-knowledge-9b0625a8e835?source=rss------bug_bounty-5 | rootzs | 100daychallenge, ethical-hacking, useful-websites, bug-bounty, most-useful-websites | 15-Jan-2024 |
| Reflected DOM XSS | https://medium.com/@marduk.i.am/reflected-dom-xss-fdf60de841cb?source=rss------bug_bounty-5 | Marduk I Am | portswigger-lab, bug-bounty, cybersecurity, cross-site-scripting, dom-xss | 15-Jan-2024 |
| SMTP Server (JAMES SMTP Server 2.3.2) | https://medium.com/@akshadjoshi/smtp-server-james-smtp-server-2-3-2-ad934435f021?source=rss------bug_bounty-5 | Akshad Joshi | smtp, bug-bounty, pentesting, hackthebox | 15-Jan-2024 |
| Streamlining Vulnerability Hunting for Bug Bounty and pentesters | https://medium.com/@k-binsaeed/streamlining-vulnerability-hunting-for-bug-bounty-and-pentesters-81e77b3ab7d9?source=rss------bug_bounty-5 | NumLocK15 | bug-bounty, vulnerability, cybersecurity, pentesting | 15-Jan-2024 |
| How I Used A Simple Python Script to Exploit a Vulnerable Google API Key. | https://medium.com/@gradillagustavo87/how-i-used-a-simple-python-script-to-exploit-a-vulnerable-google-api-key-475b4fcaf895?source=rss------bug_bounty-5 | Gustavo Gradilla | hacking-tools, bug-bounty-writeup, bug-bounty, google | 15-Jan-2024 |
| How I Automate Finding Amazon S3 Buckets Using A Simple Python Script | https://medium.com/@gradillagustavo87/how-i-automate-finding-amazon-s3-buckets-using-a-simple-python-script-c1a7c11a8b52?source=rss------bug_bounty-5 | Gustavo Gradilla | cybersecurity, hacking-tools, ethical-hacking, bug-bounty, hacking | 15-Jan-2024 |
| S3 Bucket takeover with simple technique lead to $$$ | https://medium.com/@adhaamsayed3/s3-bucket-takeover-with-simple-technique-lead-to-0fc0b89eeecb?source=rss------bug_bounty-5 | Adham sayed (doosec101) | web-app-pentesting, bug-bounty, hacker, hackerone, mobile-app-testing | 15-Jan-2024 |
| 3.3 Lab: File path traversal, traversal sequences stripped non-recursively | 2024 | https://cyberw1ng.medium.com/3-3-lab-file-path-traversal-traversal-sequences-stripped-non-recursively-2024-5dd6b7d227e6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, security, hacking, careers | 14-Jan-2024 |
| Logical Error leads to DOS for victim | https://medium.com/@tanyago/logical-error-leads-to-dos-for-victim-8e4f6d18ae90?source=rss------bug_bounty-5 | Tanya Goyal | bug-bounty-tips, bug-bounty-writeup, bug-hunting, bug-bounty | 14-Jan-2024 |
| How to Nail a Perfect Bug Report | https://medium.com/@nambiarjishnu1210/how-to-nail-a-perfect-bug-report-b619690779a7?source=rss------bug_bounty-5 | Jishnu Nambiar | software-testing, automation, bug-bounty, testing, quality-assurance | 14-Jan-2024 |
| Bug Bounty: The Ultimate Guide For Beginners | https://medium.com/@securelearn/bug-bounty-the-ultimate-guide-for-beginners-92bd470b5c02?source=rss------bug_bounty-5 | RG | secure-learn, bug-bounty-tips, cybersecurity, hacking, bug-bounty | 14-Jan-2024 |
| Elevate your Expertise: Key Cybersec Certifications 2k24 | https://thethreatcops.medium.com/elevate-your-expertise-key-cybersec-certifications-2k24-7a025f5566f4?source=rss------bug_bounty-5 | the threat cops | information-security, hacking, career-development, bug-bounty, cybersecurity | 14-Jan-2024 |
| Exploring the Web’s Hidden Corners with DorkDive: A Google Dorking Tool for Tech Enthusiasts | https://infosecwriteups.com/exploring-the-webs-hidden-corners-with-dorkdive-a-google-dorking-tool-for-tech-enthusiasts-c66816493c76?source=rss------bug_bounty-5 | Incoggeek | python, cybersecurity, bug-bounty, tools, hacking | 14-Jan-2024 |
| Mastering Cybersecurity: A Deep Dive into Optimal Attack Surface Management for Public Bug Bounty… | https://cyberarafat.medium.com/mastering-cybersecurity-a-deep-dive-into-optimal-attack-surface-management-for-public-bug-bounty-0eb182577c4c?source=rss------bug_bounty-5 | Arafat Ashrafi Talha | ethical-hacking, bug-bounty-tips, bug-bounty, penetration-testing, cybersecurity | 14-Jan-2024 |
| Layer 5: Bug Bounties | https://medium.com/@triweisec/layer-5-bug-bounties-f67b2cbdf413?source=rss------bug_bounty-5 | TriWei.io | bug-bounty, web3, blockchain-security, ethical-hacking, vulnerability-assessment | 14-Jan-2024 |
| ExamSys — Multiple SQL Injections | https://fh4ntke.medium.com/examsys-multiple-sql-injections-ef94d84e440c?source=rss------bug_bounty-5 | FHantke | web-development, technology, hacking, open-source, bug-bounty | 14-Jan-2024 |
| How to set up a new Kali Linux virtual machine for Studying | Practicing | Bug Bounty ? | https://medium.com/@recepbalibey/how-to-set-up-a-new-kali-linux-virtual-machine-for-studying-practicing-bug-bounty-6ec16222c294?source=rss------bug_bounty-5 | Recep Balıbey | virtual-machine, kali-linux, ctf, bug-bounty, cybersecurity | 14-Jan-2024 |
| Vulnerable Web Applications For Training and Testing Your New Tools | https://medium.com/@eclectic-security/vulnerable-web-applications-for-training-and-testing-your-new-tools-e2411942edb2?source=rss------bug_bounty-5 | Eclectic Security | bug-bounty, software-development, cybersecurity, training, penetration-testing | 14-Jan-2024 |
| Mass Hunting Blind XSS — Practical Techniques | https://infosecwriteups.com/mass-hunting-blind-xss-practical-techniques-182c422d773e?source=rss------bug_bounty-5 | Ott3rly | bug-bounty-writeup, xss-vulnerability, cross-site-scripting, bug-bounty, cybersecurity | 14-Jan-2024 |
| What is Bug Bounty Hunting | https://medium.com/@chaudharyrohit644/what-is-bug-bounty-hunting-d2571271d612?source=rss------bug_bounty-5 | Rohit Chaudhary | bug-bounty | 14-Jan-2024 |
| PII Data Leakage via Directory Listing | https://medium.com/@fixthis1000time/pii-data-leakage-via-directory-listing-2a5ff7554cdc?source=rss------bug_bounty-5 | fixthi$ | infosec, cybersecurity, ethical-hacking, bug-bounty, hacking | 14-Jan-2024 |
| User Enumeration in the login process | https://medium.com/@majix_de/user-enumeration-in-the-login-process-a43a248ac70d?source=rss------bug_bounty-5 | Majix | ctf, bug-bounty, pentesting, hacking, penetration-testing | 14-Jan-2024 |
| HackTheBox — Server-side Request Forgery (SSRF) Overview | https://medium.com/@harry.hphu/hackthebox-server-side-request-forgery-ssrf-overview-e55ef94ac435?source=rss------bug_bounty-5 | Huy Phu | bug-bounty, web-security, hackthebox, owasp-top-10, ssrf | 13-Jan-2024 |
| What is SQL Injection and how SQL queries work in database | https://mrunknown124154.medium.com/what-is-sql-injection-and-how-sql-queries-work-in-database-6971f1729aed?source=rss------bug_bounty-5 | Mr Abdullah | hacking, cyber-security-awareness, bug-bounty, sql-injection, web-hacking | 13-Jan-2024 |
| Easy way to find RCE via SSTI(server side template injection) | https://medium.com/@jeetpal2007/easy-way-to-find-rce-via-ssti-server-side-template-injection-b5f664ddf427?source=rss------bug_bounty-5 | JEETPAL | rce, bug-bounty, easy, bugs, ssti | 13-Jan-2024 |
| DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded | https://medium.com/@marduk.i.am/dom-xss-in-angularjs-expression-with-angle-brackets-and-double-quotes-html-encoded-62bc9a167c8e?source=rss------bug_bounty-5 | Marduk I Am | cross-site-scripting, angularjs, dom-xss, bug-bounty, portswigger-lab | 13-Jan-2024 |
| mistakes bug bounty hunters fall on it | the key of bug bounty |best advice for 2024 | https://medium.com/@no_oneee/hello-48e0488f6fa4?source=rss------bug_bounty-5 | no|one | information-security, bugs, bug-bounty-tips, cybersecurity, bug-bounty | 13-Jan-2024 |
| 3.2 Lab: File path traversal, traversal sequences blocked with absolute path bypass | 2024 | https://cyberw1ng.medium.com/3-2-lab-file-path-traversal-traversal-sequences-blocked-with-absolute-path-bypass-2024-b1eb44cf3151?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, security, hacking, cybersecurity | 13-Jan-2024 |
| Regeneration of API key by low level user: 500$ Access Control bug | https://medium.com/@a13h1/regeneration-of-api-key-by-low-level-user-500-access-control-bug-87c76b9b5842?source=rss------bug_bounty-5 | Abhi Sharma | bug-bounty, cybersecurity, hacking, api, programming | 13-Jan-2024 |
| 3.2 Lab: File path traversal, traversal sequences blocked with absolute path bypass | 2024 | https://systemweakness.com/3-2-lab-file-path-traversal-traversal-sequences-blocked-with-absolute-path-bypass-2024-b1eb44cf3151?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, security, hacking, cybersecurity | 13-Jan-2024 |
| Burp Suite — Download, Set up and Get Going! | https://medium.com/@eclectic-security/burp-suite-download-set-up-and-get-going-a58ba7daf678?source=rss------bug_bounty-5 | Eclectic Security | bug-bounty, tools, cyber-security-training, penetration-testing, burpsuite | 13-Jan-2024 |
| DOM-Based XSS: Understanding and Mitigating a Stealthy Attack Vector | https://medium.com/@ravensec93/dom-based-xss-understanding-and-mitigating-a-stealthy-attack-vector-71ebc56806aa?source=rss------bug_bounty-5 | Raven Security | bug-bounty, web-security, cybersecurity, xss-attack, hacking | 13-Jan-2024 |
| Weird bug to steal users credentials | https://medium.com/@fuadahmad062/weird-bug-to-steal-users-credentials-5e80c5d4565f?source=rss------bug_bounty-5 | von001 | bug-bounty-tips, bug-bounty, content-spoofing | 12-Jan-2024 |
| Forget Blockers, Own Your Freedom: SquareX | https://tanishqshahsays.medium.com/forget-blockers-own-your-freedom-squarex-4e4d6a845fe8?source=rss------bug_bounty-5 | Tanishq Sachin Shah | bug-bounty, squarex, security, cybersecurity, privacy | 12-Jan-2024 |
| Mass Hunting Blind XSS — Initial Setup | https://ott3rly.medium.com/mass-hunting-blind-xss-initial-setup-7fc5c1898999?source=rss------bug_bounty-5 | Ott3rly | xs, info-sec-writeups, blind-xss, bug-bounty, cross-site-scripting | 12-Jan-2024 |
| The DeXe Protocol’s Bug Bounty Campaign | https://dexenetwork.medium.com/the-dexe-protocols-bug-bounty-campaign-a68e960c36cd?source=rss------bug_bounty-5 | DeXe Protocol | defi, bug-bounty, smart-contracts, dao, security | 12-Jan-2024 |
| tRPC Security Research: Hunting for Vulnerabilities in Modern APIs | https://medium.com/@LogicalHunter/trpc-security-research-hunting-for-vulnerabilities-in-modern-apis-b0d38e06fa71?source=rss------bug_bounty-5 | Borna Nematzadeh | bug-bounty-writeup, bug-bounty, web-security, security-research, api-security | 12-Jan-2024 |
| Mass Hunting Blind XSS — Initial Setup | https://infosecwriteups.com/mass-hunting-blind-xss-initial-setup-7fc5c1898999?source=rss------bug_bounty-5 | Ott3rly | xs, info-sec-writeups, blind-xss, bug-bounty, cross-site-scripting | 12-Jan-2024 |
| The DeXe Protocol’s Bug Bounty Campaign announcement | https://dexenetwork.medium.com/the-dexe-protocols-bug-bounty-campaign-a68e960c36cd?source=rss------bug_bounty-5 | DeXe Protocol | defi, bug-bounty, smart-contracts, dao, security | 12-Jan-2024 |
| Unraveling the Mysteries of Zoo Services: Feign magic uncovered | https://medium.com/@boltaevt/unraveling-the-mysteries-of-zoo-services-feign-magic-uncovered-3d45d211fdec?source=rss------bug_bounty-5 | @boltaevt | bug-bounty, spring-boot, java, microservices, feign | 12-Jan-2024 |
| Unveiling Vulnerabilities: Loose Permissions in Salesforce Lightning Pose Data Security Threats | https://samshadow.medium.com/unveiling-vulnerabilities-loose-permissions-in-salesforce-lightning-pose-data-security-threats-41eaba372937?source=rss------bug_bounty-5 | Sam Shadow | bug-bounty-writeup, infosec, salesforce-lightning, bug-bounty, bug-bounty-tips | 12-Jan-2024 |
| Common obstacles to exploiting path traversal vulnerabilities | 2024 | https://cyberw1ng.medium.com/common-obstacles-to-exploiting-path-traversal-vulnerabilities-2024-204fd57566f5?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, security, hacking, cybersecurity, careers | 12-Jan-2024 |
| Holy Ffuf Unleashing Rapid Wealth with a 15-Minute $$$ Twist | https://medium.com/@Xt3sY/holy-ffuf-unleashing-rapid-wealth-with-a-15-minute-twist-8fada0cc72ba?source=rss------bug_bounty-5 | Pushkar Bhagat | hacker101, bug-bounty, hackerone, hacker | 12-Jan-2024 |
| SQL INJECTION FUNDAMENTALS_HACK THE BOX | https://medium.com/@romimkhan5588/sql-injection-fundamentals-hack-the-box-d22cde7a7198?source=rss------bug_bounty-5 | root 28 | hacking, bug-bounty, cybersecurity, hackthebox, sql-injection | 12-Jan-2024 |
| Account Takeover via password reset without user interactions (CVE-2023–7028) | https://0xweb01.medium.com/account-takeover-via-password-reset-without-user-interactions-cve-2023-7028-cbd2e675992e?source=rss------bug_bounty-5 | 0xweb01 | cve, zero-day, bug-bounty, security | 12-Jan-2024 |
| Holy Ffuf easy Bounty in 15 mins | https://medium.com/@Xt3sY/holy-ffuf-unleashing-rapid-wealth-with-a-15-minute-twist-8fada0cc72ba?source=rss------bug_bounty-5 | Pushkar Bhagat | hacker101, bug-bounty, hackerone, hacker | 12-Jan-2024 |
| Bug Bounty | https://medium.com/@pdinukanth/bug-bounty-b1843c8676b3?source=rss------bug_bounty-5 | Pdinukanth | bug-bounty | 11-Jan-2024 |
| IDN Homograph Attack - Reborn of the Rare Case | https://shahjerry33.medium.com/idn-homograph-attack-reborn-of-the-rare-case-99fa1e342352?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | pentesting, bug-bounty, infosec, cybersecurity, vulnerability | 11-Jan-2024 |
| Art of External Network Penetration Testing – Phase First: Preparation | https://medium.com/@pentesterman/introduction-with-the-rapidly-developing-technologies-in-the-digital-world-the-security-measures-c21d0f62c48f?source=rss------bug_bounty-5 | Sevban Dönmez | cybersecurity, external-pentest, bug-bounty, web-application-security, pentest-preparation | 11-Jan-2024 |
| 2.12 Lab: Password brute-force via password change | 2024 | https://cyberw1ng.medium.com/2-12-lab-password-brute-force-via-password-change-2024-94a39239f98e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, bug-bounty, cybersecurity, hacking, careers | 11-Jan-2024 |
| How I discovered a Critical Vulnerability during a Pentest : IDOR to Privilege Escalation | https://medium.com/@ravindu.lakmina1/how-i-discovered-a-critical-vulnerability-during-a-pentest-idor-to-privilege-escalation-937230b06e62?source=rss------bug_bounty-5 | Ravindu Lakmina | ethical-hacking, hacking, bug-bounty, penetration-testing, cybersecurity | 11-Jan-2024 |
| Windows Exploitation Learning Path in TryHackMe | https://mrshan.medium.com/windows-exploitation-learning-path-in-tryhackme-8fa680daa775?source=rss------bug_bounty-5 | MR SHAN | tryhackme-writeup, cybersecurity, tryhackme-walkthrough, bug-bounty, tryhackme | 11-Jan-2024 |
| How I got my first bug bounty | https://medium.com/@b1ayn/how-i-got-my-first-bug-bounty-8772d41bccba?source=rss------bug_bounty-5 | B1ayn | bugcrowd, pentesting, hackerone, bug-bounty | 11-Jan-2024 |
| How I Earned My First Bug Bounty Reward of $600 | https://medium.com/@zikola1/how-i-earned-my-first-bug-bounty-reward-of-600-14c268f94bbd?source=rss------bug_bounty-5 | Abdulrahman badawi | penetration-testing, bug-bounty-writeup, bug-bounty, bug-bounty-tips, web-application-security | 11-Jan-2024 |
| Skills Needed For Bug Bounty Part 2 | https://medium.com/@joshdesharnais1/skills-needed-for-bug-bounty-part-2-2f6897aa3390?source=rss------bug_bounty-5 | Joshua Desharnais | exploitation, bug-bounty-tips, bug-bounty | 11-Jan-2024 |
| Hacking my college intranet (Bug Bounty) | https://medium.com/@boogsta/hacking-my-college-intranet-8f77f5d8fe60?source=rss------bug_bounty-5 | Boogsta | cybersecurity, bug-bounty, hacking, cyber, bug-bounty-tips | 10-Jan-2024 |
| How I Helped Indonesian Startup Company to Prevent Millions of PII Data Leaks | https://medium.com/@blackarazi/how-i-helped-indonesian-startup-company-to-prevent-millions-of-pii-data-leaks-55ef3edbd35d?source=rss------bug_bounty-5 | Azhari Harahap | bug-bounty-writeup, pii, application-security, api-security, bug-bounty | 10-Jan-2024 |
| Everything About Launching and Managing Your Bug Bounty Program (From a Former Triager) | https://utkusen.medium.com/everything-about-launching-and-managing-your-bug-bounty-program-from-a-former-triager-e244105a31c6?source=rss------bug_bounty-5 | Utku Şen | cybersecurity, bug-bounty-tips, hackerone, bug-bounty | 10-Jan-2024 |
| Businesses That Still Are Accepting Brute Force Vulnerabilities as Low Impact Need to Reconsider | https://malwarexhunt.medium.com/businesses-that-still-are-accepting-brute-force-vulnerabilities-as-low-impact-need-to-reconsider-c877f8b17ad3?source=rss------bug_bounty-5 | MalwareHunter | technology, cybersecurity, bug-bounty, programming, penetration-testing | 10-Jan-2024 |
| Bugs & JS :A Closer Look at JavaScript for Successful Bug Hunting | https://anasbetis023.medium.com/bugs-js-a-closer-look-at-javascript-for-successful-bug-hunting-fddb0d796498?source=rss------bug_bounty-5 | Anas H Hmaidy | cybersecurity, bug-bounty, javascript, penetration-testing | 10-Jan-2024 |
| A Beginner’s Guide to Bug Hunting: Your Passport to the World of Cybersecurity | https://medium.com/@matsecurity/a-beginners-guide-to-bug-hunting-your-passport-to-the-world-of-cybersecurity-798cc4a1e76d?source=rss------bug_bounty-5 | MatSec | bug-bounty, bug-bounty-tips, hackerone, cybersecurity, ethical-hacking | 10-Jan-2024 |
| Daily Bug Bounty Writeups | https://securitycipher.medium.com/daily-bug-bounty-writeups-2d754b87a546?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | hacking, technology, ai, security, bug-bounty | 09-Jan-2024 |
| BYPASSING PAYMENTS IN APPLE FOR FREE TRAILS FOR LIFETIME | https://medium.com/@sam0-0/bypassing-payments-in-apple-for-free-trails-for-lifetime-8e3019dfe57b?source=rss------bug_bounty-5 | Sam | bug-bounty-writeup, bug-bounty, apple, apple-security | 09-Jan-2024 |
| Bug Bounty prompt that can help you to find IDOR vulnerabilities | https://blog.gopenai.com/bug-bounty-prompt-that-can-help-you-to-find-idor-vulnerabilities-5a47fa5de44f?source=rss------bug_bounty-5 | aimaster | idor, bug-bounty, bugbountyprompts, cybersecurity, chatgpt | 09-Jan-2024 |
| Understanding Sherlock’s Smart Contract Coverage | https://medium.com/@JohnnyTime/understanding-sherlocks-smart-contract-coverage-3eca7d9033bc?source=rss------bug_bounty-5 | Johnny Time | sherlock, web3-security, audit-contest, bug-bounty, smart-contracts | 09-Jan-2024 |
| How To Get A XSSI Bug In Bug Bounty— Bug Bounty Tuesday | https://medium.com/@kerstan/how-to-get-a-xssi-bug-in-bug-bounty-bug-bounty-tuesday-7440b0caf32c?source=rss------bug_bounty-5 | kerstan | bug-bounty, security, technology, programming, cybersecurity | 09-Jan-2024 |
| Developed a Bug Bounty Calculator | https://medium.com/@chander.romesh/developed-a-bug-bounty-calculator-b8370e04b15a?source=rss------bug_bounty-5 | Romesh chander | information-security, infosec, pentesting, hacking, bug-bounty | 09-Jan-2024 |
| Recon Nedir ve Kullanılan Araçlar | https://medium.com/@eren.klai2/recon-nedir-ve-kullan%C4%B1lan-ara%C3%A7lar-bac6b28479e4?source=rss------bug_bounty-5 | ErenCatak | subdomain, pentesting, subdomains-enumeration, bug-bounty, recon | 09-Jan-2024 |
| Subdomain Bruteforce Tool | https://0xshaheen.medium.com/subdomain-bruteforce-tool-9dd3cd673df6?source=rss------bug_bounty-5 | Shaheen Sikder | subdomains-enumeration, subdomain, bug-bounty, subdomain-bruteforce | 09-Jan-2024 |
| Get All your Clickjacking Vulnerability Triaged with this Exploitation! | https://medium.com/@Ajakcybersecurity/get-all-your-clickjacking-vulnerability-triaged-with-this-exploitation-95de8291e285?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, bug-bounty, cybersecurity, blog, clickjacking | 09-Jan-2024 |
| A Straight 5-hour Escalation! Exploiting Boolean-Based SQL Injection. | https://medium.com/@Ajakcybersecurity/a-straight-5-hour-escalation-exploiting-boolean-based-sql-injection-5d828fd3dacf?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, bug-bounty, cybersecurity, red-team, sql | 09-Jan-2024 |
| How to Write A Bug Bounty Report Like a Pro! | https://medium.com/@Ajakcybersecurity/how-to-write-a-bug-bounty-report-like-a-pro-a703034d095f?source=rss------bug_bounty-5 | AjakCybersecurity | bug-bounty, ethical-hacking, ethcial-hacking, hacking, cybersecurity | 09-Jan-2024 |
| How To Report Bug In Indian Government Site? | https://medium.com/@Ajakcybersecurity/how-to-report-bug-in-indian-government-site-3f104eb5c40b?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, bug-bounty, blog, india, cybersecurity | 09-Jan-2024 |
| How To Check Whether Your Photo is Leaked In Online or Not? | https://medium.com/@Ajakcybersecurity/how-to-check-whether-your-photo-is-leaked-in-online-or-not-286a9feeadbd?source=rss------bug_bounty-5 | AjakCybersecurity | investigation, digital-forensics, blog, cybersecurity, bug-bounty | 09-Jan-2024 |
| 2.11 Lab: Password reset poisoning via middleware | 2024 | https://cyberw1ng.medium.com/2-11-lab-password-reset-poisoning-via-middleware-2024-862897c7fc77?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, hacking, careers, security, bug-bounty | 09-Jan-2024 |
| Tricks I Do To Get Easy HOF and Bounty! | https://medium.com/@Ajakcybersecurity/tricks-i-do-to-get-easy-hof-and-bounty-99d6158eb53e?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, penetration-testing, blog, cybersecurity, bug-bounty | 09-Jan-2024 |
| How Much Was My First Bounty? | https://medium.com/@Ajakcybersecurity/how-much-was-my-first-bounty-9c02df4b1958?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, ethical-hacking, cybersecurity, penetration-testing, bug-bounty | 09-Jan-2024 |
| The Art and Science Behind Password Managers | https://medium.com/@paritoshblogs/the-art-and-science-behind-password-managers-fbf5fb9c7f99?source=rss------bug_bounty-5 | Paritosh | information-security, cybersecurity, password-manager, hacking, bug-bounty | 08-Jan-2024 |
| Top 13 Vulnerable Web Applications and Websites for Ethical Hacking Practice | https://bytebusterx.medium.com/top-13-vulnerable-web-applications-and-websites-for-ethical-hacking-practice-1850c6163e89?source=rss------bug_bounty-5 | ByteBusterX | bug-bounty, hacking, cybersecurity | 08-Jan-2024 |
| Rapid Scan (Web Vulnerability Scanner) | https://medium.com/@psychomong/rapid-scan-web-vulnerability-scanner-d164cefc3c9a?source=rss------bug_bounty-5 | psychomong | hacking, bug-bounty, scanner, hackerone, python | 08-Jan-2024 |
| 2.10 Lab: Offline password cracking | 2024 | https://cyberw1ng.medium.com/2-10-lab-offline-password-cracking-2024-e730fb915f73?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, security, cybersecurity, hacking | 08-Jan-2024 |
| Blind boolean-based SQLi, by manipulating url | https://medium.com/@zatikyan.sevada/blind-boolean-based-sqli-by-manipulating-url-96e1e086378c?source=rss------bug_bounty-5 | Zatikyan Sevada | cybersecurity, sqlmap, bug-bounty, owasp, sql-injection | 08-Jan-2024 |
| HTTP PARAMTER POLLUTION [TR] | https://medium.com/@eren.klai2/http-paramter-pollution-tr-700e254be60e?source=rss------bug_bounty-5 | ErenCatak | pentesting, bug-bounty, turkey, http-parameter-pollution, parameter-tampering | 08-Jan-2024 |
| 2.9 Lab: Brute-forcing a stay-logged-in cookie | 2024 | https://cyberw1ng.medium.com/2-9-lab-brute-forcing-a-stay-logged-in-cookie-2024-065110f81d48?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, security, cybersecurity, hacking, careers | 07-Jan-2024 |
| Digital Forensics Investigation Report PDF- A Court Manner. | https://medium.com/@Ajakcybersecurity/digital-forensics-investigation-report-pdf-a-court-manner-daaa24c60458?source=rss------bug_bounty-5 | AjakCybersecurity | wireshark, bug-bounty, networking, digital-forensics, blog | 07-Jan-2024 |
| Top Programming Languages You Need to Know In 2024 | https://medium.com/@Ajakcybersecurity/top-programming-languages-you-need-to-know-in-2024-372db341015f?source=rss------bug_bounty-5 | AjakCybersecurity | bug-bounty, cybersecurity, python, medium, programming | 07-Jan-2024 |
| XSS (Cross-Site Scripting) Reports on codechef.com | https://medium.com/@mr_sopyan/xss-cross-site-scripting-reports-on-codechef-com-1a674f9ba9d8?source=rss------bug_bounty-5 | Mr_Sopyan | cybersecurity, xss-attack, bug-bounty, it-security | 07-Jan-2024 |
| How to match IOCs against SIEM logs ? | https://medium.com/@paritoshblogs/how-to-match-iocs-against-siem-logs-9d61079d16c6?source=rss------bug_bounty-5 | Paritosh | siem, hacking, bug-bounty, cybersecurity, ioc | 07-Jan-2024 |
| Paid Subscriptions Resources which will be useful for Ethical Hacking/Bug Bounty (No Promotion)… | https://medium.com/@Ajakcybersecurity/paid-subscriptions-resources-which-will-be-useful-for-ethical-hacking-bug-bounty-no-promotion-94b2aad97b18?source=rss------bug_bounty-5 | AjakCybersecurity | medium, udemy, ethical-hacking, bug-bounty, cybersecurity | 07-Jan-2024 |
| Learn Cybersecurity By Doing Simple Projects at Home | https://medium.com/@Ajakcybersecurity/learn-cybersecurity-by-doing-simple-projects-at-home-81fe4a512a65?source=rss------bug_bounty-5 | AjakCybersecurity | cybersecurity, bug-bounty, projects, ethical-hacking, hacking | 07-Jan-2024 |
| Top 5 Best Laptops for Bug Bounty and Ethical Hacking | https://medium.com/@Ajakcybersecurity/top-5-best-laptops-for-bug-bounty-and-ethical-hacking-c0ce6fe4917c?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, blog, laptop, programming, bug-bounty | 07-Jan-2024 |
| Os Command Injection | https://medium.com/@eren.klai2/os-command-injection-536087488e87?source=rss------bug_bounty-5 | ErenCatak | bug-bounty, pentesting, os-command-injection, operating-systems, bash-script | 07-Jan-2024 |
| Top 5 Best Books for Bug Bounty Hunting- My Personal Favourites | https://medium.com/@Ajakcybersecurity/top-5-best-books-for-bug-bounty-hunting-my-personal-favourites-ec416ab4ea25?source=rss------bug_bounty-5 | AjakCybersecurity | ethical-hacking, hacking, money, bug-bounty, blog | 06-Jan-2024 |
| HackerOne or BugCrowd or VDP? How To Choose your Bug Bounty Program? | https://medium.com/@Ajakcybersecurity/hackerone-or-bugcrowd-or-vdp-how-to-choose-your-bug-bounty-program-c4a4d202397c?source=rss------bug_bounty-5 | AjakCybersecurity | bug-bounty, hackerone, blog, penetration-testing, ethical-hacking | 06-Jan-2024 |
| How I Cracked CEH Within 6 Months Only With Free Resources. | https://medium.com/@Ajakcybersecurity/how-i-cracked-ceh-within-6-months-only-with-free-resources-c362d122ee01?source=rss------bug_bounty-5 | AjakCybersecurity | hacking, bug-bounty, blog, ethical-hacking, certification | 06-Jan-2024 |
| Bug Bounty Mistakes I Made in 2023, So that You Can Avoid in 2024 | https://medium.com/@Ajakcybersecurity/bug-bounty-mistakes-i-made-in-2023-so-that-you-can-avoid-in-2024-3737663807fc?source=rss------bug_bounty-5 | AjakCybersecurity | penetration-testing, hacking, ethical-hacking, cybersecurity, bug-bounty | 06-Jan-2024 |
| Unveiling the Dangers of CWE-319: Clear Text Transmission of Sensitive Information | https://medium.com/@georgeppmc/unveiling-the-dangers-of-cwe-319-clear-text-transmission-of-sensitive-information-1ada2d1f4ca5?source=rss------bug_bounty-5 | George Torres | bug-bounty | 06-Jan-2024 |
| Gi7w0rm’s personal year review — 2023 | https://gi7w0rm.medium.com/gi7w0rms-personal-year-review-2023-f4726b46b604?source=rss------bug_bounty-5 | Gi7w0rm | ioc, bug-bounty, cybersecurity, infosec, 2023 | 06-Jan-2024 |
| 500$ Access Control Bug: Performed Restricted Actions in Developer Settings by low level user. | https://medium.com/@a13h1/500-access-control-bug-performed-restricted-actions-in-developer-settings-by-low-level-user-b4ecaa6d1aa1?source=rss------bug_bounty-5 | Abhi Sharma | programming, bug-bounty, pentesting, access-control, cybersecurity | 06-Jan-2024 |
| Best AI Tools For Cybersecurity in 2024 | https://medium.com/@paritoshblogs/best-ai-tools-for-cybersecurity-in-2024-9f9972919f1d?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, networking, information-security, cybersecurity | 06-Jan-2024 |
| The Art of Shodan | https://astro0x00.medium.com/the-art-of-shodan-ee83bfa96105?source=rss------bug_bounty-5 | Mo2men Elmady | bug-bounty, shodan, penetration-testing, cve, hacking | 06-Jan-2024 |
| 2.8 Lab: 2FA broken logic | 2024 | https://cyberw1ng.medium.com/2-8-lab-2fa-broken-logic-2024-30a843da98ca?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, hacking, careers, bug-bounty, security | 06-Jan-2024 |
| The History Behind My First Bug | https://dropn0w.medium.com/the-history-behind-my-first-bug-539b913b9667?source=rss------bug_bounty-5 | drop | bug-bounty-tips, hacking, bug-bounty, cybersecurity | 06-Jan-2024 |
| The Story Behind My First Bug | https://dropn0w.medium.com/the-history-behind-my-first-bug-539b913b9667?source=rss------bug_bounty-5 | drop | bug-bounty-tips, hacking, bug-bounty, cybersecurity | 06-Jan-2024 |
| Ethical Hacking RoadMap 2024. A Complete Guide. | https://medium.com/@testproxy027/ethical-hacking-roadmap-2024-a-complete-guide-74a7a09668af?source=rss------bug_bounty-5 | Ankit Hacker | cybersecurity, bug-bounty, hacking, ethical-hacking, medium | 05-Jan-2024 |
| I received a Bank offer in my mailbox and discovered an IDOR vulnerability - $5,000 bounty - @bxmbn | https://bxmbn.medium.com/i-received-a-bank-offer-in-my-mailbox-and-discovered-an-idor-vulnerability-5-000-bounty-bxmbn-5209cab1fba8?source=rss------bug_bounty-5 | bombon | cybersecurity, idor, bug-bounty | 05-Jan-2024 |
| How I Prevented a Mass Data Breach - $15,000 bounty - @bxmbn | https://bxmbn.medium.com/how-i-prevented-a-mass-data-breach-15-000-bounty-bxmbn-1096e6400e3d?source=rss------bug_bounty-5 | bombon | bug-bounty, data-breach, idor, cybersecurity | 05-Jan-2024 |
| Cybersecurity Roadmap: 2024 | https://hackerassociate.medium.com/cybersecurity-roadmap-2024-ea3586fea603?source=rss------bug_bounty-5 | Harshad Shah | infosec, cybersecurity, penetration-testing, bug-bounty, hacking | 05-Jan-2024 |
| How to Earn Money as a Digital Forensics Investigator | https://medium.com/@moneyiseasybro/how-to-earn-money-as-a-digital-forensics-investigator-dae9723ebb10?source=rss------bug_bounty-5 | How to Earn | ethical-hacking, cybersecurity, finance, money, bug-bounty | 05-Jan-2024 |
| How Celebrities Social media accounts get hacked in real time? | https://medium.com/@Ajakcybersecurity/how-celebrities-social-media-accounts-get-hacked-in-real-time-4ccb37ac0763?source=rss------bug_bounty-5 | AjakCybersecurity | phishing, ethical-hacking, cybersecurity, digital-forensics, bug-bounty | 05-Jan-2024 |
| How to Become a Successful Bug Bounty Hunter in 2024? | https://medium.com/@Ajakcybersecurity/how-to-become-a-successful-bug-bounty-hunter-in-2024-3171b782b585?source=rss------bug_bounty-5 | AjakCybersecurity | bug-bounty, ethical-hacking, blog, cybersecurity, hacking | 05-Jan-2024 |
| Listed in Top 15 Researchers in NCIIPC India | https://devanshchauhan4565.medium.com/listed-in-top-15-researchers-in-nciipc-india-4143da2d75e9?source=rss------bug_bounty-5 | Devansh chauhan | top-10, bug-bounty, internet, vulnerability, india | 05-Jan-2024 |
| Privilege Escalation Using SCIM Provisioning | https://ronak-9889.medium.com/privilege-escalation-using-scim-provisioning-ca61ed9606bd?source=rss------bug_bounty-5 | Ronak Patel | bug-bounty, information-security, privilege-escalation, access-control, cybersecurity | 05-Jan-2024 |
| Website Hacking, Penetration Testing & Bug Bounty Hunting Resources full course | https://thehackertools9.medium.com/website-hacking-penetration-testing-bug-bounty-hunting-resources-full-course-0010c0603bd9?source=rss------bug_bounty-5 | TheHackerLife | bug-bounty-tips, bug-bounty, website-hacking, hacking-tools, ethical-hacking-tools | 05-Jan-2024 |
| 2.7 Lab: Username enumeration via account lock | 2024 | https://cyberw1ng.medium.com/2-7-lab-username-enumeration-via-account-lock-2024-9ae1d7eef4a6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, hacking, bug-bounty, cybersecurity, careers | 05-Jan-2024 |
| My first bugs in 2024 | https://medium.com/@el-cezeri/my-first-bugs-in-2024-82ea4e9de718?source=rss------bug_bounty-5 | Samet Yiğit | ödülavcılığı, bug-bounty, bug-bounty-tips | 05-Jan-2024 |
| Vulnerable WordPress December 2023 (Shahriar) | https://medium.com/@onhexgroup/vulnerable-wordpress-december-2023-shahriar-16277c1cd3b8?source=rss------bug_bounty-5 | Onhexgroup | wordpress-security, wordpress-plugins, infosec, bug-bounty, wordpress | 05-Jan-2024 |
| Exploring “Jok3r”: A Powerful Network/Host Reconnaissance and Enumeration Tool. | https://sh1vv1.medium.com/exploring-jok3r-a-powerful-network-host-reconnaissance-and-enumeration-tool-43b524c580f0?source=rss------bug_bounty-5 | Hesham Ahmed | tips-and-tricks, tools, penetration-testing, bug-bounty, bug-hunting | 05-Jan-2024 |
| Web Security Academy — API Security Testing Walkthrough | https://iaraoz.medium.com/web-security-academy-api-security-testing-walkthrough-11019ed93eae?source=rss------bug_bounty-5 | Israel Aráoz Severiche | api, bug-bounty, web, hacking, portswigger-lab | 05-Jan-2024 |
| 9 Subtle Tricks To Make Your Cybersecurity Skills Much Better | https://medium.com/@paritoshblogs/9-subtle-tricks-to-make-your-cybersecurity-skills-much-better-4f7e48b3fd57?source=rss------bug_bounty-5 | Paritosh | bug-bounty, ai, cybersecurity, programming, hacking | 04-Jan-2024 |
| Exploring Application Security with SAST, DAST, SCA, and IAST | https://securitycipher.medium.com/exploring-application-security-with-sast-dast-sca-and-iast-95b27043d9fd?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | security, bug-bounty, hacking, technology, cybersecurity | 04-Jan-2024 |
| How do i bypass waf for xss in input tag? | https://medium.com/@lyltvip/how-do-i-bypass-waf-for-xss-in-input-tag-2adcdc1b7e25?source=rss------bug_bounty-5 | lanyi | bug-bounty-tips, hacking, xss-vulnerability, xss-attack, bug-bounty | 04-Jan-2024 |
| CORS Crossfire: An iCSI CTF | https://medium.com/@josh.beck2006/cors-crossfire-an-icsi-ctf-35a73f700207?source=rss------bug_bounty-5 | Josh Beck | cybersecurity, penetration-testing, ctf-writeup, bug-bounty | 04-Jan-2024 |
| 2.6 Lab: Broken brute-force protection, IP block | 2024 | https://cyberw1ng.medium.com/2-6-lab-broken-brute-force-protection-ip-block-2024-8057a53b999a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, bug-bounty, careers, cybersecurity, hacking | 04-Jan-2024 |
| Account Takeover? $4 and a click, please. | https://swehtpantz.medium.com/account-takeover-4-and-a-click-please-454c035aa3b6?source=rss------bug_bounty-5 | Swehtpantz | hacking, pentesting, ethical-hacking, bug-bounty, bug-bounty-tips | 04-Jan-2024 |
| Bug Bounty | https://medium.com/@montymahapatra79/bug-bounty-02310f6d39f9?source=rss------bug_bounty-5 | Montymahapatra | bug-bounty-tips, bug-bounty-hunter, bug-bounty | 04-Jan-2024 |
| Ethical Hacking RoadMap 2024. A Complete Guide. | https://ajaksecurities.medium.com/ethical-hacking-roadmap-2024-a-complete-guide-23b23262b1b8?source=rss------bug_bounty-5 | Ajak Cyber Security | ethical-hacking, hacking, bug-bounty, medium, cybersecurity | 04-Jan-2024 |
| How to Become a Successful Bug Bounty Hunter in 2024? | https://ajaksecurities.medium.com/how-to-become-a-successful-bug-bounty-hunter-in-2024-106f576b03e2?source=rss------bug_bounty-5 | Ajak Cyber Security | ethical-hacking, hacking, bug-bounty, cybersecurity, medium | 04-Jan-2024 |
| Essential Gadgets for Bug Bounty Hunters: Enhancing Your Cybersecurity Arsenal | https://securitylit.medium.com/essential-gadgets-for-bug-bounty-hunters-enhancing-your-cybersecurity-arsenal-40173ec2945f?source=rss------bug_bounty-5 | Security Lit Limited | gadgets, cybersecurity, bug-bounty, vulnerability | 04-Jan-2024 |
| OpenBounty, phương pháp tiếp cận mới của Shentu trong Hệ sinh thái bảo mật | https://shentuchain.medium.com/openbounty-ph%C6%B0%C6%A1ng-ph%C3%A1p-ti%E1%BA%BFp-c%E1%BA%ADn-m%E1%BB%9Bi-c%E1%BB%A7a-shentu-trong-h%E1%BB%87-sinh-th%C3%A1i-b%E1%BA%A3o-m%E1%BA%ADt-bc52f8fd13ff?source=rss------bug_bounty-5 | Shentu Chain | bug-bounty, bounty-program, web3, bounty-hunter, cybersecurity | 03-Jan-2024 |
| GooFuzz: A Fuzzing Tool with an OSINT Approach | https://medium.com/@cuncis/goofuzz-a-fuzzing-tool-with-an-osint-approach-306fe481824f?source=rss------bug_bounty-5 | Cuncis | bug-bounty, penetration-test, google-dork, penetration-testing, osint | 03-Jan-2024 |
| How to Correctly setup Android Penetration Testing on a MacBook | https://infosecwriteups.com/how-to-correctly-setup-android-penetration-testing-on-a-macbook-659f244f84c8?source=rss------bug_bounty-5 | Supun Halangoda (Suppa) | bug-bounty, penetration-testing, mobile-penetration-test, macbook-pro, android-pentesting | 03-Jan-2024 |
| LoveTok | HackTheBox web challenge Writeup | https://gxbnt.medium.com/lovetok-hackthebox-web-challenge-writeup-e3b99967c3b7?source=rss------bug_bounty-5 | Bishal - #GxbNt | hackthebox-writeup, oscp, web, offensive-security, bug-bounty | 03-Jan-2024 |
| A Guide on Crafting Robust Invariants with Echidna | https://medium.com/coinmonks/a-guide-on-crafting-robust-invariants-with-echidna-fc980d8e2c0c?source=rss------bug_bounty-5 | Chirag Agrawal | bug-bounty, smart-contracts, cybersecurity, cryptocurrency, security | 03-Jan-2024 |
| Found reflected xss on a real target | https://medium.com/@jeetpal2007/found-reflected-xss-on-a-real-target-30b80b2f53e4?source=rss------bug_bounty-5 | JEETPAL | rxss, xs, bugs, bug-bounty | 03-Jan-2024 |
| My Bug Bounty Write Ups (Part-1) | https://karthikeyamade.medium.com/my-bug-bounty-write-ups-part-1-63ed3e788873?source=rss------bug_bounty-5 | Karthikeya Sai | bug-bounty-tips, bug-bounty | 03-Jan-2024 |
| My First Bug Bounty: Lessons Learned and Money Earned | https://medium.com/@georgeppmc/my-first-bug-bounty-lessons-learned-and-money-earned-d6fc31744621?source=rss------bug_bounty-5 | George Torres | bug-bounty-tips, bug-hunting, bug-bounty-writeup, bug-bounty, hackerone | 03-Jan-2024 |
| Comparing CVE & CWE : Understanding Security Vulnerabilities | https://medium.com/@zouhairelgarouni/comparing-cve-cwe-understanding-security-vulnerabilities-84442ab1e0e7?source=rss------bug_bounty-5 | ZOUHAIR EL GAROUNI | vulnerability, vulnerability-management, cyber-security-awareness, cybersecurity, bug-bounty | 03-Jan-2024 |
| you need to learn linux RIGHT NOW!! | https://medium.com/@paritoshblogs/you-need-to-learn-linux-right-now-7239f4dcc1c6?source=rss------bug_bounty-5 | Paritosh | hacking, cybersecurity, linux, programming, bug-bounty | 02-Jan-2024 |
| Bug Bounty Hunting | Reconnaissance | Subdomain Enumeration | https://me-ankeet.medium.com/bug-bounty-hunting-reconnaissance-subdomain-enumeration-854d880c3406?source=rss------bug_bounty-5 | Ankeet | bug-bounty, hacking, information-security, cybersecurity, bug-bounty-tips | 02-Jan-2024 |
| How .git folder can be exploited to access sensitive data | https://satyasai1460.medium.com/how-git-folder-can-be-exploited-to-access-sensitive-data-eb805c38fd6c?source=rss------bug_bounty-5 | Bala Naga Satya sai Devarapalli | information-technology, cybersecurity, bug-bounty, bugs, bug-bounty-tips | 02-Jan-2024 |
| From P5 to Payday $$$: Escalating Reflected XSS to Account Takeover | https://hasanka-amarasinghe.medium.com/from-p5-to-payday-escalating-reflected-xss-to-account-takeover-bc25a171a3d5?source=rss------bug_bounty-5 | Hasanka Amarasinghe | xss-attack, bug-bounty, cross-site-scripting, account-takeover, cybersecurity | 02-Jan-2024 |
| Account Takeover on International Exchange — Bug Bounty Tuesday | https://medium.com/@kerstan/account-takeover-on-international-exchange-bug-bounty-tuesday-cf41a54bc4b7?source=rss------bug_bounty-5 | kerstan | cybersecurity, bug-bounty, technology, programming | 02-Jan-2024 |
| The Lexer Markets security review story | https://medium.com/@mweiss.eth/the-lexer-markets-security-review-story-a812539d62db?source=rss------bug_bounty-5 | 0xWeiss | security, audit, bug-bounty, smart-contracts | 02-Jan-2024 |
| DOM XSS in document.write sink using source location.search inside a select element | https://medium.com/@marduk.i.am/dom-xss-in-document-write-sink-using-source-location-search-inside-a-select-element-0c47fc033bcf?source=rss------bug_bounty-5 | Marduk I Am | portswigger-lab, dom-xss, cross-site-scripting, cybersecurity, bug-bounty | 02-Jan-2024 |
| 2.4 Lab: Username enumeration via subtly different responses | 2024 | https://cyberw1ng.medium.com/2-4-lab-username-enumeration-via-subtly-different-responses-2024-eb37130d41a8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, hacking, cybersecurity, security | 02-Jan-2024 |
| Stealing private messages using XSS on subdomain | https://medium.com/@shcyber/stealing-private-messages-using-xss-on-subdomain-97f0304b132f?source=rss------bug_bounty-5 | SHCyber | websocket, csrf, bug-bounty, xss-attack, hacking | 02-Jan-2024 |
| From Disclosure to High Severity: Leveraging Dyte API Key for Maximum Impact | https://padsalatushal.medium.com/from-disclosure-to-high-severity-leveraging-dyte-api-key-for-maximum-impact-468c444963c6?source=rss------bug_bounty-5 | Padsala Tushal | api-security, cybersecurity, bug-bounty-tips, infosec, bug-bounty | 02-Jan-2024 |
| SQL Injection (SQLi): WWWWWH? | https://medium.com/@rcxsecurity/sql-injection-sqli-wwwwwh-d847972b3e45?source=rss------bug_bounty-5 | RCXSecurity | sql-injection, bug-bounty, information-security, penetration-testing, cybersecurity | 01-Jan-2024 |
| How Do I Get Root Access on a Linux Server | https://systemweakness.com/how-do-i-get-root-access-on-a-linux-server-874d29015305?source=rss------bug_bounty-5 | RyuuKhagetsu | bug-bounty, infosec, web-application-security, pentesting, bug-bounty-writeup | 01-Jan-2024 |
| Understanding the MITRE ATT&CK Framework: A Comprehensive Overview | https://medium.com/@paritoshblogs/understanding-the-mitre-att-ck-framework-a-comprehensive-overview-c1499d195da0?source=rss------bug_bounty-5 | Paritosh | mitre-attack, ai, hacking, bug-bounty, cybersecurity | 01-Jan-2024 |
| Reflected XSS into a JavaScript string with angle brackets HTML encoded | https://medium.com/@marduk.i.am/reflected-xss-into-a-javascript-string-with-angle-brackets-html-encoded-c9e2ed86f489?source=rss------bug_bounty-5 | Marduk I Am | bug-bounty, reflected-xss, portswigger-lab, cross-site-scripting, cybersecurity | 01-Jan-2024 |
| Automating GitHub Recon for Sensitive Information Discovery | https://medium.com/@paxnull/automating-github-recon-for-sensitive-information-discovery-c96b677857cf?source=rss------bug_bounty-5 | paxnull | bug-bounty, bug-bounty-writeup, automation-tools, reconnaissance, bug-bounty-tips | 01-Jan-2024 |
| The power of Client-Side Path Traversal: How I found and escalated 2 bugs through “../” | https://medium.com/@Nightbloodz/the-power-of-client-side-path-traversal-how-i-found-and-escalated-2-bugs-through-670338afc90f?source=rss------bug_bounty-5 | Alvaro Balada | bug-bounty-tips, info-sec-writeups, bug-bounty-writeup, cybersecurity, bug-bounty | 01-Jan-2024 |
| 1.18 Lab: SQL injection attack, listing the database contents on Oracle | 2024 | https://cyberw1ng.medium.com/1-18-lab-sql-injection-attack-listing-the-database-contents-on-oracle-2024-cec2a796740f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, security, bug-bounty, careers, hacking | 01-Jan-2024 |
| Another 4 Digit Bounty Story on Hackerone | https://medium.com/@jai.lani9001/another-4-digit-bounty-story-on-hackerone-58dba8c19818?source=rss------bug_bounty-5 | Jai Lani | bug-bounty | 01-Jan-2024 |
| CVE-2023–34635: UNIBOX 3.0/3.1 SQL Injection login bypass | https://medium.com/@davidkarpinski1/cve-2023-34635-unibox-3-0-3-1-sql-injection-login-bypass-fc33004e70c0?source=rss------bug_bounty-5 | David Eduardo Karpinski | bug-bounty, sql-login, unibox, sqli, login-bypass | 01-Jan-2024 |
| Exploring the Depths: DNS Wildcard and Subdomain Tak | https://alvinbijo.medium.com/exploring-the-depths-dns-wildcard-and-subdomain-tak-6deed7aebcb1?source=rss------bug_bounty-5 | Alvin bijo | bug-bounty, bugbounty-writeup | 01-Jan-2024 |
| Bug Zero at a Glance [01–15 December] | https://blog.bugzero.io/bug-zero-at-a-glance-01-15-december-cdb358653f8e?source=rss------bug_bounty-5 | Januka Dharmapriya | cybersecurity, sri-lanka, bug-bounty, bug-zero, newsletter | 31-Dec-2023 |
| Uncovering LFI Attack | https://medium.com/@cyberkarthi/uncovering-ssrf-attack-12064069205f?source=rss------bug_bounty-5 | Karthikeyan C | ethical-hacking, pentesting, bug-bounty, bugbounty-writeup | 31-Dec-2023 |
| I hate Hackerone / X Website Vulnerability — Bug Bounty Hunter | https://medium.com/@batuhanaydinn/i-hate-hackerone-x-website-vulnerability-bug-bounty-hunter-3e43a7e0bc80?source=rss------bug_bounty-5 | Batuhan Aydın | hacking, hackerone, bug-bounty, penetration-testing, hacker | 31-Dec-2023 |
| 1.17 Lab: SQL injection attack, listing the database contents on non-Oracle databases | 2023 | https://systemweakness.com/1-17-lab-sql-injection-attack-listing-the-database-contents-on-non-oracle-databases-2023-2026162bf6ef?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, hacking, security, careers | 31-Dec-2023 |
| DNS-Related Attacks and Examples | https://medium.com/@paritoshblogs/dns-related-attacks-and-examples-fee4da0cc2d6?source=rss------bug_bounty-5 | Paritosh | dns, cybersecurity, bug-bounty, hacking, programming | 31-Dec-2023 |
| How I hacked India’s top company database. | https://medium.com/@sritharcyber/how-i-hacked-indias-top-company-database-d66b9fc49cb0?source=rss------bug_bounty-5 | Srithar Cyber | sqli, pentest, recent, hacked, bug-bounty | 31-Dec-2023 |
| Simple Subdomain Takeover | https://infosecwriteups.com/simple-subdomain-takeover-15129e19bbb4?source=rss------bug_bounty-5 | hackerdevil | vulnerability-assessment, bug-bounty, bug-bounty-writeup, bug-bounty-tips, web-app-security | 31-Dec-2023 |
| Master Subdomain HUNTING | Art of finding Hidden Assets | https://yashh2.medium.com/master-subdomain-hunting-art-of-finding-hidden-assets-3351b3c8467a?source=rss------bug_bounty-5 | ʏᴀꜱʜʜ | cybersecurity, infosec, bug-bounty, bug-bounty-tips, hacking | 30-Dec-2023 |
| Woowow Bug Bounty Campaign | https://medium.com/@woowow/woowow-bug-bounty-campaign-569e7b7868f3?source=rss------bug_bounty-5 | Woowow | qitmeerecosystem, bounty-campaign, marketplaces, woowow, bug-bounty | 30-Dec-2023 |
| How i Hacked My First Target using GooGle Dorking | https://mrunknown124154.medium.com/how-i-hacked-my-first-target-using-google-dorking-43cb999ad8db?source=rss------bug_bounty-5 | Mr Abdullah | sql-injection, google-dorking, bug-bounty, hacking, sql-injection-attack | 30-Dec-2023 |
| 417$ Simple IDOR: Unauthorized Contact Details Modification | https://medium.com/@a13h1/417-simple-idor-unauthorized-contact-details-modification-92e8211439e4?source=rss------bug_bounty-5 | Abhi Sharma | programming, cybersecurity, hacking, bug-bounty, idor | 30-Dec-2023 |
| Sudomain Takeover via Shopify(Easy Bounty $$$$) | https://medium.com/@paxnull/sudomain-takeover-via-shopify-easy-bounty-300f839aa15d?source=rss------bug_bounty-5 | paxnull | bug-bounty, tips, bug-bounty-tips, subdomain-takeover, bug-bounty-writeup | 30-Dec-2023 |
| XSS deep dive P1 (theory)(publish early,please waiting for 2 days to read) | https://medium.com/@nguhuynh.148/xss-deep-dive-p1-theory-637af86f335d?source=rss------bug_bounty-5 | Nguhuynh | xss-vulnerability, xss-attack, xss-bypass, bug-bounty | 30-Dec-2023 |
| Stored XSS into anchor href attribute with double quotes HTML-encoded | https://medium.com/@marduk.i.am/stored-xss-into-anchor-href-attribute-with-double-quotes-html-encoded-1f88ba0b990f?source=rss------bug_bounty-5 | Marduk I Am | stored-xss, bug-bounty, cybersecurity, cross-site-scripting, portswigger-lab | 30-Dec-2023 |
| 1.16 Lab: SQL injection attack, querying the database type and version on MySQL and Microsoft |… | https://cyberw1ng.medium.com/1-16-lab-sql-injection-attack-querying-the-database-type-and-version-on-mysql-and-microsoft-5f2785ebb06f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, cybersecurity, bug-bounty, hacking, careers | 30-Dec-2023 |
| HTTPX Troubleshooting Issue | https://infosecwriteups.com/httpx-troubleshooting-issue-38b61549126b?source=rss------bug_bounty-5 | Jarred Longoria | bug-bounty, linux, troubleshooting, help, httpx | 30-Dec-2023 |
| From Google Dorking to Unauthorized AWS Account Access and Account Takeover | https://medium.com/@ar_hawk/from-google-dorking-to-unauthorized-aws-account-access-and-account-takeover-89eb2b9d284f?source=rss------bug_bounty-5 | Aayush Vishnoi | ssrf, bug-bounty-tips, bug-bounty | 30-Dec-2023 |
| Reflected XSS into attribute with angle brackets HTML-encoded | https://medium.com/@marduk.i.am/reflected-xss-into-attribute-with-angle-brackets-html-encoded-986d943b3fd2?source=rss------bug_bounty-5 | Marduk I Am | portswigger-lab, cybersecurity, bug-bounty, cross-site-scripting, xss-vulnerability | 29-Dec-2023 |
| Beyond Search Queries: Bug Bounty Hunting with Dorkz | https://medium.com/@paxnull/beyond-search-queries-bug-bounty-hunting-with-dorkz-850cfa8c3ddc?source=rss------bug_bounty-5 | paxnull | tips, dorking, recon, bug-bounty-tips, bug-bounty | 29-Dec-2023 |
| Behind the Firewall: My First Valid Bug — Exposing Security Flaw in a multi-dollar Financial and… | https://medium.com/@MohaseenK/behind-the-firewall-my-first-valid-bug-exposing-security-flaw-in-a-multi-dollar-financial-and-ff56e7bc4589?source=rss------bug_bounty-5 | Mohaseen | pentesting, bug-bounty, rate-limiting, hackerone, bugcrowd | 29-Dec-2023 |
| How to find unprotected databases with Netlas.io? | https://netlas.medium.com/how-to-find-unprotected-databases-with-netlas-io-2bf186e9fc2d?source=rss------bug_bounty-5 | Netlas.io | osint, penetration-testing, bug-bounty, osint-investigation, cybersecurity | 29-Dec-2023 |
| 1.15 Lab: SQL injection attack, querying the database type and version on Oracle | 2023 | https://cyberw1ng.medium.com/1-15-lab-sql-injection-attack-querying-the-database-type-and-version-on-oracle-2023-cd4118eb604d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | security, bug-bounty, careers, hacking, cybersecurity | 29-Dec-2023 |
| KisMAC is a free, open source wireless stumbling and security tool for Mac OS X | https://medium.com/@dineshpathro593/kismac-is-a-free-open-source-wireless-stumbling-and-security-tool-for-mac-os-x-03746fdea831?source=rss------bug_bounty-5 | Dineshpathro | bugs, bug-bounty, bug-bounty-tips, hacking, hackin | 29-Dec-2023 |
| OTP-Bot Tool CLICK HERE | https://medium.com/@dineshpathro593/otp-bot-tool-click-here-7f3ee559ca21?source=rss------bug_bounty-5 | Dineshpathro | bug-bounty-tips, hacking-tools, bug-bounty, hacking, bugs | 29-Dec-2023 |
| Recon Tools For Web Application | https://medium.com/@dineshpathro593/recon-tools-for-web-application-714af64e7d07?source=rss------bug_bounty-5 | Dineshpathro | hacking, hacker, bug-bounty, bug-bounty-tips, hackathons | 29-Dec-2023 |
| 200 Materials of CyberSecurity in PDFs | https://medium.com/@dineshpathro593/200-materials-of-cybersecurity-in-pdfs-e7a942123be5?source=rss------bug_bounty-5 | Dineshpathro | cybersecurity, hackathons, bug-bounty, hacking, bug-bounty-tips | 29-Dec-2023 |
| Bug Bounty: The road to my first $1000 through hacking public websites | https://swehtpantz.medium.com/bug-bounty-the-road-to-my-first-1000-through-hacking-public-websites-a0e2aa1b7271?source=rss------bug_bounty-5 | Swehtpantz | ethical-hacking, bug-bounty, bug-bounty-tips, hacking, bugbounty-writeup | 28-Dec-2023 |
| HackTheBox(HTB) Writeup — Node | https://medium.com/@harman.preet.singh3738/hackthebox-htb-writeup-node-5600a442e393?source=rss------bug_bounty-5 | Harmanpreet Singh | penetration-testing, bug-bounty, tryhackme, ethical-hacking, hackthebox | 28-Dec-2023 |
| ️ Protect Yourself: The Power of OPSEC | https://medium.com/@teckgamer07/%EF%B8%8F-protect-yourself-the-power-of-opsec-17a7ec256427?source=rss------bug_bounty-5 | Macmelter | bugsbounty, hacking, bug-bounty, cybersecurity | 28-Dec-2023 |
| Multiple RXSS | https://medium.com/@0xchoudhary/multiple-rxss-f3f796287f34?source=rss------bug_bounty-5 | Sushil Choudhary | bounty-hunter, xss-attack, bug-bounty-tips, bug-bounty, hackerone | 28-Dec-2023 |
| Stored XSS via File upload(using svg file) | https://medium.com/@paxnull/stored-xss-via-file-upload-using-svg-file-c1e2a33ed8a8?source=rss------bug_bounty-5 | paxnull | bug-bounty, tips, bugbounty-tips, xss-vulnerability, hacking | 28-Dec-2023 |
| Authorization problem | https://medium.com/@nguhuynh.148/authorization-problem-2bb053c215cd?source=rss------bug_bounty-5 | Nguhuynh | broken-access-control, hacking, bug-bounty, hacks, bug-bounty-tips | 28-Dec-2023 |
| CVE-2023–51356: ARMember <= 4.0.10 — Authenticated Privilege Escalation | https://revan-ar.medium.com/cve-2023-51356-armember-4-0-10-authenticated-privilege-escalation-7e0c7fbe5a79?source=rss------bug_bounty-5 | Revan A | bug-bounty, privilege-escalation, wordpress-plugins, penetration-testing | 28-Dec-2023 |
| 1.14 Lab: SQL injection with filter bypass via XML encoding | 2023 | https://cyberw1ng.medium.com/1-14-lab-sql-injection-with-filter-bypass-via-xml-encoding-2023-9794dc7bf9f4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, bug-bounty, penetration-testing, hacking | 28-Dec-2023 |
| How I made 7K on Epic Games Bug Bounty | https://medium.com/@synapticspace/how-i-made-7k-on-epic-games-bug-bounty-8529728b9fcf?source=rss------bug_bounty-5 | SynapticSpace | bug-bounty-writeup, hacking, bug-bounty, bug-bounty-tips | 28-Dec-2023 |
| How I made 7K on Epic Games Bug Bounty | https://infosecwriteups.com/how-i-made-7k-on-epic-games-bug-bounty-8529728b9fcf?source=rss------bug_bounty-5 | SynapticSpace | bug-bounty-writeup, hacking, bug-bounty, bug-bounty-tips | 28-Dec-2023 |
| DOM XSS in jQuery selector sink using a hashchange event | https://medium.com/@marduk.i.am/dom-xss-in-jquery-selector-sink-using-a-hashchange-event-bb3c355b3633?source=rss------bug_bounty-5 | Marduk I Am | portswigger-lab, bug-bounty, dom-xss, cybersecurity, cross-site-scripting | 27-Dec-2023 |
| Amass: New Config File Update | https://hackerassociate.medium.com/amass-new-config-file-update-e95d09b6eb70?source=rss------bug_bounty-5 | Harshad Shah | penetration-testing, cybersecurity, infosec, hacking, bug-bounty | 27-Dec-2023 |
| DOM XSS on Hackerone Programs — Bug Bounty Tuesday | https://medium.com/@kerstan/dom-xss-on-hackerone-programs-bug-bounty-tuesday-8973ecf6af95?source=rss------bug_bounty-5 | kerstan | xss-attack, security, cybersecurity, technology, bug-bounty | 27-Dec-2023 |
| 1.13 Lab: Blind SQL injection with out-of-band data exfiltration | 2023 | https://cyberw1ng.medium.com/1-13-lab-blind-sql-injection-with-out-of-band-data-exfiltration-2023-f83a1448b685?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, cybersecurity, hacking, careers | 27-Dec-2023 |
| “Crucial Bug Bounty Hacks: Habits with Enduring Benefits” | https://medium.com/@paxnull/secrets-of-the-hunter-pro-tips-for-effective-bug-bounty-hunting-1a261df4444d?source=rss------bug_bounty-5 | paxnull | tips, learning, programming, bugbounty-tips, bug-bounty | 27-Dec-2023 |
| Inside the Digital Vault: How I Unearthed PII Goldmine — Exposing 15K GST Users’ Information in a… | https://medium.com/@MohaseenK/inside-the-digital-vault-how-i-unearthed-pii-goldmine-exposing-15k-gst-users-information-in-a-38c3105889ea?source=rss------bug_bounty-5 | Mohaseen | bug-bounty, hackerone, bugcrowd, information-disclosure, indian-government | 27-Dec-2023 |
| How Does DNS Work and What is DNS Poisoning? | https://medium.com/@bcanote/how-does-dns-work-and-what-is-dns-poisoning-4c187fb3f2b0?source=rss------bug_bounty-5 | bcanote | cybersecurity, hacking, dns, dns-poisoning, bug-bounty | 27-Dec-2023 |
| URL Redirection To DOM XSS on Hackerone Programs -Bug Bounty Tuesday | https://medium.com/@kerstan/dom-xss-on-hackerone-programs-bug-bounty-tuesday-8973ecf6af95?source=rss------bug_bounty-5 | kerstan | xss-attack, security, cybersecurity, technology, bug-bounty | 27-Dec-2023 |
| Mastering Bug Bounty: Your Ultimate Guide to Cybersecurity Success | https://medium.com/@umidcyber.s/mastering-bug-bounty-your-ultimate-guide-to-cybersecurity-success-82dc9b30fc02?source=rss------bug_bounty-5 | Umid Mammadov | bug-bounty-tips, tools, bug-bounty, information-technology, bugs | 26-Dec-2023 |
| Deep Dive Into XSS | https://medium.com/@kavish2002ev3/deep-dive-into-xss-8420ddccc73b?source=rss------bug_bounty-5 | kavish shah | xss-vulnerability, web-application-security, bug-bounty | 26-Dec-2023 |
| The Tale Of Insecure Deserialization: A Journey From Serialization To Exploitation | https://medium.com/@kavish2002ev3/the-tale-of-insecure-deserialization-a-journey-from-serialization-to-exploitation-47400a4c9093?source=rss------bug_bounty-5 | kavish shah | ctf-writeup, web-application-security, insecure-deserialization, bug-bounty | 26-Dec-2023 |
| Portswigger Labs — CSRF | https://medium.com/@rynnnn617/portswigger-labs-csrf-10b496d6580c?source=rss------bug_bounty-5 | Ry4nnnn | bug-bounty, portswigger-lab, csrf, burpsuite | 26-Dec-2023 |
| 1.12 Lab: Blind SQL injection with out-of-band interaction | 2023 | https://infosecwriteups.com/1-12-lab-blind-sql-injection-with-out-of-band-interaction-2023-db12e3b10118?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, careers, cybersecurity, hacking | 26-Dec-2023 |
| Navigating Tree-Sitter Queries with jsluice for JavaScript File Analysis | https://lopseg.medium.com/navigating-tree-sitter-queries-with-jsluice-for-javascript-file-analysis-061b7cb4ea9d?source=rss------bug_bounty-5 | Lopseg | bug-bounty-tips, bug-bounty, cybersecurity, bug-bounty-writeup, javascript | 26-Dec-2023 |
| Portswigger Labs — CSRF | https://medium.com/@ry4nnnn/portswigger-labs-csrf-10b496d6580c?source=rss------bug_bounty-5 | Ry4nnnn | bug-bounty, portswigger-lab, csrf, burpsuite | 26-Dec-2023 |
| Account takeover vulnerability that resulted in $2500 bounty! | https://medium.com/@deadoverflow/account-takeover-vulnerability-that-resulted-in-2500-bounty-e1618363878d?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty, hacking, bug-bounty-tips, cybersecurity, bug-hunting | 25-Dec-2023 |
| Content Spoofing & Parameter Injection | https://codingninjablogs.tech/content-spoofing-parameter-injection-0861bfd146d4?source=rss------bug_bounty-5 | #!/Subhankar | injection-attacks, web-pen-testing, bug-bounty, spoofing | 25-Dec-2023 |
| Top 3 Password Cracking Tools | https://medium.com/@UsmanAtif/top-3-password-cracking-tools-18801fbdcdae?source=rss------bug_bounty-5 | Muhammad Usman Atif | hacking, cybersecurity, passwords, bug-bounty, penetration-testing | 25-Dec-2023 |
| Hackers Target Bug Bounty Hunters with Blackmail Emails | https://rishikadesai.medium.com/hackers-target-bug-bounty-hunters-with-blackmail-emails-421cf57fe4a7?source=rss------bug_bounty-5 | Rishika Desai | threat-intelligence, threat-research, bug-bounty, cyber-security-awareness, cybersecurity | 25-Dec-2023 |
| What is LFI (Local File Inclusion) Vulnerability ? | https://medium.com/@errorfiathck/what-is-lfi-local-file-inclusion-vulnerability-c9372e25e389?source=rss------bug_bounty-5 | Errorfiathck | pentesting, lfi, vulnerability, bug-bounty, pentest | 25-Dec-2023 |
| Legacy of EternalBlue | https://medium.com/@akshadjoshi/legacy-of-eternalblue-de4d643e8f36?source=rss------bug_bounty-5 | Akshad Joshi | eternalblue, hackthebox, pentesting, bug-bounty, hacking | 24-Dec-2023 |
| Hackeando GraphQL: Introducción | https://medium.com/@soyelmago/hackeando-graphql-introducci%C3%B3n-1537af763d0c?source=rss------bug_bounty-5 | Alan Brian @soyelmago | graphql, bug-bounty, information-security, pentesting, hacking | 24-Dec-2023 |
| Ceklis Web Pentesting Untuk Pemula — Registration Feature Testing | https://riodrwn.medium.com/ceklis-web-pentesting-untuk-pemula-registration-feature-testing-aceb545b587c?source=rss------bug_bounty-5 | Rio Darmawan | bug-bounty-writeup, bug-bounty, pentesting, bugbounty-writeup, web-penetration-testing | 23-Dec-2023 |
| The Crucial Role of Threat Intelligence Sharing in Cybersecurity | https://medium.com/@paritoshblogs/the-crucial-role-of-threat-intelligence-sharing-in-cybersecurity-cd4be0b53a86?source=rss------bug_bounty-5 | Paritosh | programming, hacking, threat-intelligence, cybersecurity, bug-bounty | 23-Dec-2023 |
| The Evolving Role of a SOC Analyst | https://medium.com/@paritoshblogs/the-evolving-role-of-a-soc-analyst-c82e3e515558?source=rss------bug_bounty-5 | Paritosh | information-security, cybersecurity, hacking, bug-bounty, soc-analyst | 23-Dec-2023 |
| Out-of-Scope, Not Out-of-Impact: Unveiling Significant Sensitive Information Disclosure | https://padsalatushal.medium.com/out-of-scope-not-out-of-impact-unveiling-significant-sensitive-information-disclosure-c8e76c1806e8?source=rss------bug_bounty-5 | Padsala Tushal | cybersecurity, bug-bounty, bug-bounty-tips, infosec, information-disclosure | 23-Dec-2023 |
| Hack Story: Unveiling Security Flaws in a Government Portal | https://medium.com/@sahadmk/hack-story-unveiling-security-flaws-in-a-government-portal-995217f877c3?source=rss------bug_bounty-5 | Sahad Mk | bug-bounty, javascript, pentesting, vulnerability, hacking | 23-Dec-2023 |
| The ART of Chaining Vulnerabilities | https://ahmdhalabi.medium.com/the-art-of-chaining-vulnerabilities-e65382b7c627?source=rss------bug_bounty-5 | Ahmad Halabi | ethical-hacking, hacking, intelligence, hacker, bug-bounty | 23-Dec-2023 |
| Hacking Community | https://medium.com/@mrunknown124154/hacking-community-ab774827006d?source=rss------bug_bounty-5 | Mrunknown | bug-bounty, ethical-hacking, hacking | 23-Dec-2023 |
| DoS’ing Zsecurity | https://medium.com/@24bkdoor/dosing-zsecurity-a4cb99396935?source=rss------bug_bounty-5 | 24BkDoor | bug-bounty, ethical-hacking, hacking, web-development, cybersecurity | 22-Dec-2023 |
| Securing the Future: Enhancing the Safety of Compound Protocol | https://medium.com/@topcrypto00/securing-the-future-enhancing-the-safety-of-compound-protocol-940498c78d68?source=rss------bug_bounty-5 | Top Crypto | bug-bounty, bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, compound-protocol | 22-Dec-2023 |
| He stored your password in Cookie | https://medium.com/@fixthis1000time/he-stored-your-password-in-cookie-5a6d0478e570?source=rss------bug_bounty-5 | fixthi$ | hacking, bug-bounty, ethical-hacking | 22-Dec-2023 |
| How I was able to buy 2500 Rs product for 18rs in E-Commerce Website? | https://medium.com/@shubhamsonani/how-i-was-able-to-buy-2500-rs-product-for-18rs-in-e-commerce-website-ada4e91b5b91?source=rss------bug_bounty-5 | Shubham Sonani | bug-bounty, hacking, bug-bounty-tips, vulnerability, cybersecurity | 22-Dec-2023 |
| PJWT Certification | https://medium.com/@OmarAlkhowaiter/pjwt-certification-f4f7995d35f6?source=rss------bug_bounty-5 | Omar Alkhowaiter | certification, bug-bounty, penetration-testing, cybersecurity, web-exploitation | 22-Dec-2023 |
| Consentify hits Beta Test phase boosted by a Bug Bounty program! | https://datalaketoken.medium.com/consentify-hits-beta-test-phase-boosted-by-a-bug-bounty-program-6b621eadd02b?source=rss------bug_bounty-5 | Data Lake | healthcare, desci, bug-bounty, data-lake, research | 22-Dec-2023 |
| Ideas for Testing Checkout | https://lopseg.medium.com/ideas-for-testing-checkout-eebe6148729d?source=rss------bug_bounty-5 | Lopseg | bug-bounty-tips, infosec, hacking, bug-bounty | 22-Dec-2023 |
| Beyond Simple Alerts: Techniques for Evading WAF and Achieving XSS Success | https://lopseg.medium.com/beyond-simple-alerts-techniques-for-evading-waf-and-achieving-xss-success-4409a5bd2ee0?source=rss------bug_bounty-5 | Lopseg | bug-bounty-tips, hacking, xss-attack, bug-bounty | 22-Dec-2023 |
| He stored your password in Cookie | https://medium.com/@fixthis1000time/he-stored-your-password-in-cookie-5a6d0478e570?source=rss------bug_bounty-5 | fixthi$ | hacking, bug-bounty, cybersecurity, infosec, ethical-hacking | 22-Dec-2023 |
| 5 Tips Web Fuzz You Should Know | https://medium.com/@kerstan/5-tips-web-fuzz-you-should-know-00ef6c59407d?source=rss------bug_bounty-5 | kerstan | bug-bounty, hacking, bug-bounty-tips, security, cybersecurity | 21-Dec-2023 |
| TryHackMe AoC 2023 Side Quest final thoughts | https://medium.com/@boogsta/tryhackme-aoc-2023-side-quest-final-thoughts-afcb5880be33?source=rss------bug_bounty-5 | Boogsta | hacking, cyber, tryhackme, cybersecurity, bug-bounty | 21-Dec-2023 |
| 88MPH Vulnerability Exploit and Get Free Crypt0S $$$$$$ | https://medium.com/@vinaysati/88mph-vulnerability-exploit-and-get-free-crypt0s-a4d4a8328dc7?source=rss------bug_bounty-5 | Vinaysati | bug-bounty, hacking, web3bug, bug-bounty-tips, web3 | 21-Dec-2023 |
| The art of subdomain monitoring | https://medium.com/@muhannadahmed042/the-art-of-subdomain-monitoring-da610a0f8031?source=rss------bug_bounty-5 | muhannad hazaa | cybersecurity, penetration-testing, bug-bounty, recon | 21-Dec-2023 |
| A Business logic error in Google Dialogflow enables a developer to delete the agent directly from… | https://medium.com/@krityamkarma858041/a-business-logic-error-in-google-dialogflow-enables-a-developer-to-delete-the-agent-directly-from-3a5bf2a07706?source=rss------bug_bounty-5 | Krityamkarma | google-vrp, bug-bounty, ethical-hacking, google, hacking | 21-Dec-2023 |
| Privacy at Risk: EXIF Metadata Exposure in User-Uploaded Images | https://samshadow.medium.com/privacy-at-risk-exif-metadata-exposure-in-user-uploaded-images-c2481f876d03?source=rss------bug_bounty-5 | Sam Shadow | bug-bounty, bug-bounty-tips, bug-bounty-writeup, infosec, vulnerability | 21-Dec-2023 |
| Aspiring Bug Bounty Hunters’ New Year Goals Toolkit | https://sl4x0.medium.com/aspiring-bug-bounty-hunters-new-year-goals-toolkit-a156c96e9de7?source=rss------bug_bounty-5 | Abdelrhman Allam (sl4x0) | bug-bounty, new-year, goals, mindset, success | 21-Dec-2023 |
| How Can Artificial Intelligence Revolutionize Bug Bounty? | https://medium.com/@zouhairelgarouni/how-can-artificial-intelligence-revolutionize-bug-bounty-664e7f5ed3dd?source=rss------bug_bounty-5 | ZOUHAIR EL GAROUNI | technology, cybersecurity, bug-bounty, artificial-intelligence, cyberattack | 21-Dec-2023 |
| I made online store to pay for my orders and get me free refunds. | https://medium.com/@shubhamsonani/i-made-online-store-to-pay-for-my-orders-and-get-me-free-refunds-6f4db5893c13?source=rss------bug_bounty-5 | Shubham Sonani | bug-bounty-tips, cybersecurity, vulnerability, hacking, bug-bounty | 21-Dec-2023 |
| 5 Tips Web Fuzz You Should Know | https://medium.com/@kerstan/5-tips-web-fuzz-you-should-know-00ef6c59407d?source=rss------bug_bounty-5 | kerstan | technology, bug-bounty, hacking, security, cybersecurity | 21-Dec-2023 |
| A list of 50 tools every hacker should know | https://thexssrat.medium.com/a-list-of-50-tools-every-hacker-should-know-df8d87cf4b58?source=rss------bug_bounty-5 | Thexssrat | hacking-tools, hacking, bug-bounty, ethical-hacking | 21-Dec-2023 |
| Open Redirect Validation Bypass Leads To Account Take Over (ATO) | https://medium.com/@ozomarzu/open-redirect-validation-bypass-leads-to-account-take-over-ato-5166b3416e3f?source=rss------bug_bounty-5 | CyberOz | bug-hunting, bug-bounty, bug-bounty-tips, hacker, web-security | 21-Dec-2023 |
| Code4rena Blue vs. Traditional Bug Bounties | https://medium.com/code4rena/code4rena-blue-vs-traditional-bug-bounties-478f469057c9?source=rss------bug_bounty-5 | aramas | bug-bounty, smart-contract-security, code4rena, code4rena-blue | 21-Dec-2023 |
| A Very Basic Beginner Bug Bounty Methodology | https://thexssrat.medium.com/a-very-basic-beginner-bug-bounty-methodology-15eca16ca787?source=rss------bug_bounty-5 | Thexssrat | hacking, bug-bounty, ethical-hacking | 21-Dec-2023 |
| Bug Bounty: Tips for Finding Your First Bug as a Beginner | https://graph33.medium.com/bug-bounty-tips-for-finding-your-first-bug-as-a-beginner-120f71c709cd?source=rss------bug_bounty-5 | GHS08 | bug-bounty, hacking, cracking, coding | 21-Dec-2023 |
| How My 9-Month-Old Daughter Earned Over $1,000 in a Bug Bounty Program | https://maxilect-company.medium.com/how-my-9-month-old-daughter-earned-over-1-000-in-a-bug-bounty-program-be9ba1d77cad?source=rss------bug_bounty-5 | Maxilect | samsun, bug-bounty-program, bug-bounty | 20-Dec-2023 |
| This is how much I made in my first year as a Bug Bounty Hunter in 2023 — Graduation Bonus! | https://medium.com/@avbhijitdutta99/this-is-how-much-i-made-in-my-first-year-as-a-bug-bounty-hunter-in-2023-graduation-bonus-b45875225c88?source=rss------bug_bounty-5 | Abhijit Dutta | bug-bounty-tips, bug-bounty-program, bug-bounty, bugbountychallenge, bug-bounty-writeup | 20-Dec-2023 |
| DOM XSS in jQuery anchor href attribute sink using location.search source | https://medium.com/@marduk.i.am/dom-xss-in-jquery-anchor-href-attribute-sink-using-location-search-source-b1000b4b16b3?source=rss------bug_bounty-5 | Marduk I Am | cross-site-scripting, portswigger-lab, cybersecurity, bug-bounty, dom-xss | 20-Dec-2023 |
| How I doubled the store wallet amount for free? | https://medium.com/@shubhamsonani/how-i-doubled-the-store-wallet-amount-for-free-d7396c05a304?source=rss------bug_bounty-5 | Shubham Sonani | bug-bounty-tips, hacking, bug-bounty, cybersecurity, web-application-testing | 20-Dec-2023 |
| Top Burp Suite Extensions Used by Penetration Testers | https://medium.com/@bharatvarshney567/top-burp-suite-extensions-used-by-penetration-testers-fa90fe26816c?source=rss------bug_bounty-5 | Bharat Varshney | owasp, bug-bounty, security-testing, security-services, penetration-testing | 20-Dec-2023 |
| How to earn with earn bug boutny part-2? | https://medium.com/@ashutoshgiri133/how-to-earn-with-earn-bug-boutny-part-2-1dcfe1922a33?source=rss------bug_bounty-5 | Tech Blaze ごじょ | coding, money, bug-bounty, business | 20-Dec-2023 |
| “CVE-2023–43837: Two-Factor Authentication (x2FA) Bypass Vulnerability in Roundcube Webmail Plugin” | https://medium.com/@ChandSingh/cve-2023-43837-two-factor-authentication-x2fa-bypass-vulnerability-in-roundcube-webmail-plugin-f2fef177187e?source=rss------bug_bounty-5 | Chand Singh | cve, vulnerability, cybersecurity, bug-bounty, security | 20-Dec-2023 |
| Web Security Diary | https://medium.com/@muratkabakk1/web-security-diary-4b2148326abe?source=rss------bug_bounty-5 | Murat K | bug-bounty, web-security | 20-Dec-2023 |
| Introducing Code4rena Blue: More than just bug bounties | https://medium.com/code4rena/introducing-code4rena-blue-more-than-just-bug-bounties-f2a9949c6b9c?source=rss------bug_bounty-5 | aramas | smart-contract-security, code4rena, bug-bounty | 20-Dec-2023 |
| Learn Command Injection Vulnerabilities | https://bicodev.medium.com/learn-command-injection-vulnerabilities-2a8ed26eb47a?source=rss------bug_bounty-5 | BICODEV | linux, python-programming, cybersecurity, bug-bounty, penetration-testing | 19-Dec-2023 |
| Hack the Web like a Pirate: Identifying Vulnerabilities with Style | https://bicodev.medium.com/hack-the-web-like-a-pirate-identifying-vulnerabilities-with-style-171246a302a5?source=rss------bug_bounty-5 | BICODEV | python, bug-bounty, cybersecurity, hacker, penetration-testing | 19-Dec-2023 |
| 3 Steps Discovered XXE You should Know | https://medium.com/@kerstan/3-steps-discovered-xxe-you-should-know-d779ab5eb056?source=rss------bug_bounty-5 | kerstan | security, pentesting, hacking, cybersecurity, bug-bounty | 19-Dec-2023 |
| DOM XSS in innerHTML sink using source location.search | https://medium.com/@marduk.i.am/dom-xss-in-innerhtml-sink-using-source-location-search-a3ac4546ca5c?source=rss------bug_bounty-5 | Marduk I Am | bug-bounty, cybersecurity, dom-xss, cross-site-scripting, portswigger-lab | 19-Dec-2023 |
| Zero Trust Architecture | https://medium.com/@khan.ghufran.0000/zero-trust-architecture-f47e9da3eaec?source=rss------bug_bounty-5 | Khan Ghufran | architecture, bug-bounty, cybersecurity, cyber-security-solutions, infosec | 19-Dec-2023 |
| Rekomendasi Buku Bug Bounty Untuk Pemula | https://medium.com/@arenaldyp/rekomendasi-buku-bug-bounty-untuk-pemula-5aadd03f434f?source=rss------bug_bounty-5 | K1ngP1ng | bug-bounty, indonesia, web-security, recommendations, hacking | 19-Dec-2023 |
| Is It Worth Quitting 9–5 Job For a Full-Time Bug Bounty? | https://ajaksecurity.medium.com/is-it-worth-quitting-9-5-job-for-a-full-time-bug-bounty-8274f6808aab?source=rss------bug_bounty-5 | Ajak Cyber security | ethical-hacking, cybersecurity, blog, jobs, bug-bounty | 19-Dec-2023 |
| Directory Listing Vulnerability | https://medium.com/@digant_15/directory-listing-vulnerability-b2e1583d8a7e?source=rss------bug_bounty-5 | Digant Prajapati | cybersecurity, directory-listing, bug-bounty | 19-Dec-2023 |
| How One Bug Scored Me Double Rewards! | https://anasbetis023.medium.com/how-one-bug-scored-me-double-rewards-355b8d02cdbf?source=rss------bug_bounty-5 | Anas H Hmaidy | cybersecurity, bug-bounty, penetration-testing, ethical-hacking, web-security | 19-Dec-2023 |
| Join Any Facebook Group As Deactivated Additional Profile | https://zerocode-ph.medium.com/join-any-facebook-group-as-deactivated-additional-profile-f63a31db7797?source=rss------bug_bounty-5 | Syd Ricafort | facebook, bug-bounty, facebook-bug-bounty | 19-Dec-2023 |
| How I Found SQL Injection worth of $4,000 bounty | https://roberto99.medium.com/how-i-found-sql-injection-worth-of-4-000-bounty-16ca09cbf8ec?source=rss------bug_bounty-5 | Roberto Nunes | bug-bounty, sql-injection, bug-bounty-writeup, bug-bounty-tips, reconnaissance | 19-Dec-2023 |
| #6.TryHackMe Series writeups: Brooklyn Nine Nine | https://cyb3rmind.medium.com/6-tryhackme-series-writeups-brooklyn-nine-nine-a0f7f074cbab?source=rss------bug_bounty-5 | Cyb3r M!nd | thm-writeup, tryhackme, ctf-writeup, brooklyn-nine-nine, bug-bounty | 19-Dec-2023 |
| The Ultimate Guide to Uncovering XSS Vulnerabilities at Scale | https://medium.com/@cyndybruce1967/the-ultimate-guide-to-uncovering-xss-vulnerabilities-at-scale-1f35ecb765b7?source=rss------bug_bounty-5 | Cyndybruce | cybersecurity, penetration-testing, automation, bug-bounty, xs | 19-Dec-2023 |
| The Ultimate Guide to Hunting for XSS Vulnerabilities at Scale | https://medium.com/@elitumbleson1978/the-ultimate-guide-to-hunting-for-xss-vulnerabilities-at-scale-bfde4a9beae6?source=rss------bug_bounty-5 | Elitumbleson | cybersecurity, penetration-testing, bug-bounty, xs, automation | 19-Dec-2023 |
| Understanding Cross-Site Scripting (XSS) Attacks: Risks, Prevention, and Impact | https://securitylit.medium.com/understanding-cross-site-scripting-xss-attacks-risks-prevention-and-impact-ce002e5fbb1a?source=rss------bug_bounty-5 | Security Lit Limited | xss-attack, technology, bug-bounty, cybersecurity, vulnerability | 18-Dec-2023 |
| why you need to filter the input and the output — stored xss | https://medium.com/@Mr3Moe/why-you-need-to-filter-the-input-and-the-output-stored-xss-66f67c663703?source=rss------bug_bounty-5 | Mr3Moe | web-penetration-testing, appsec, bug-bounty | 18-Dec-2023 |
| Lets Dive into the Intense World of Malware Analysis! | https://medium.com/@paritoshblogs/lets-dive-into-the-intense-world-of-malware-analysis-3c9e242d8c16?source=rss------bug_bounty-5 | Paritosh | information-security, malware-analysis, cybersecurity, programming, bug-bounty | 18-Dec-2023 |
| Burp Suite Bambda | https://medium.com/offensive-black-hat-hacking-security/burp-suite-bambda-b9b8f57d6b46?source=rss------bug_bounty-5 | Harshad Shah | bug-bounty, hacking, cybersecurity, infosec, penetration-testing | 18-Dec-2023 |
| Top Burp Suite Extensions Used by Penetration Testers | https://securitycipher.medium.com/top-burp-suite-extensions-used-by-penetration-testers-ee971a73256a?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | bug-bounty-tips, security, cybersecurity, bug-bounty, technology | 18-Dec-2023 |
| How to write a perfect pentest report | https://arex-godofwar.medium.com/how-to-write-a-perfect-pentest-report-edb63cc68b36?source=rss------bug_bounty-5 | Ahmadreza Parsizadeh | pentesting, bug-bounty, reporting, offensive-security | 18-Dec-2023 |
| Mastering Web Application Security: Defending Against Injections and Broken Access Control | https://medium.com/@moldovanzsombor/mastering-web-application-security-defending-against-injections-and-broken-access-control-34161cbefc8f?source=rss------bug_bounty-5 | Moldovan Zsombor | hacking, cybersecurity, web-applications, bug-bounty | 18-Dec-2023 |
| CyberSecurity Day 01 to 100: DAY 08 |A Comprehensive Guide for Novices and Experts | https://medium.com/@acs_society/cybersecurity-day-01-to-100-day-08-a-comprehensive-guide-for-novices-and-experts-55d3ef86abbf?source=rss------bug_bounty-5 | Association For Cyber Security | acsociety, ethical-hacking, cybersecurity, bug-bounty, security-engineer | 18-Dec-2023 |
| This Tool Helps Me To Find The Origin IP Address | https://ajaksecurity.medium.com/this-tool-helps-me-to-find-the-origin-ip-address-d9c2abceafb2?source=rss------bug_bounty-5 | Ajak Cyber security | hacking, ethical-hacking, blog, bug-bounty, penetration-testing | 18-Dec-2023 |
| ParagonsDAO’s Bug Bounty Program | https://medium.com/paragonsdao/paragonsdaos-bug-bounty-program-8cfb82f786c0?source=rss------bug_bounty-5 | ParagonsDAO | web3, immunefi, bug-bounty, paragonsdao | 18-Dec-2023 |
| Go Witness Install Guide… | https://medium.com/@psychomong/go-witness-install-guide-a62d96be30b0?source=rss------bug_bounty-5 | psychomong | hacking-tools, bug-bounty, golang, hacking, osint | 18-Dec-2023 |
| CyberSecurity Day 01 to 100: DAY 08 | A Comprehensive Guide for Novices and Experts | https://medium.com/@acs_society/cybersecurity-day-01-to-100-day-08-a-comprehensive-guide-for-novices-and-experts-55d3ef86abbf?source=rss------bug_bounty-5 | Association For Cyber Security | acsociety, ethical-hacking, cybersecurity, bug-bounty, security-engineer | 18-Dec-2023 |
| How I Could Leak Phone Numbers and Emails of Indian Voters and Applicants | https://medium.com/@Mr.Equinox/how-i-could-leak-phone-numbers-and-emails-of-indian-voters-and-applicants-dd1fc699d81e?source=rss------bug_bounty-5 | Sahil Mhatre | bug-bounty, mybugs, bug-hunting, api-security, vapt | 18-Dec-2023 |
| Horizon Protocol V2 — Hacken Bug Bounty Program Now Live On Testnet | https://horizonprotocol.medium.com/horizon-protocol-v2-hacken-bug-bounty-program-now-live-on-testnet-4617205c7184?source=rss------bug_bounty-5 | Horizon Protocol | bug-bounty, defi, hacken, derivatives, synthetic-asset | 18-Dec-2023 |
| Getting Started with Recon Automation using ReNgine on Windows (WSL): Installation Guide | https://mxmd.medium.com/getting-started-with-recon-automation-using-rengine-on-windows-wsl-installation-guide-50ad95b8a7a9?source=rss------bug_bounty-5 | Max Klose | reconnaissance, bug-bounty-hunting, automation, bug-bounty, guides-and-tutorials | 18-Dec-2023 |
| Bug Zero at a Glance [19–30 November] | https://blog.bugzero.io/bug-zero-at-a-glance-19-30-november-8470a11d3015?source=rss------bug_bounty-5 | Januka Dharmapriya | bug-zero, newsletter, cybersecurity, sri-lanka, bug-bounty | 17-Dec-2023 |
| Mitel MiCollab AWV Directory Traversal Vulnerability (CVE-2020–11798) | https://samshadow.medium.com/mitel-micollab-awv-directory-traversal-vulnerability-cve-2020-11798-ec1408cd35b9?source=rss------bug_bounty-5 | Sam Shadow | bug-bounty, bug-bounty-writeup, bug-bounty-tips, vulnerability, directory-traversal | 17-Dec-2023 |
| Unveiling a Security Flaw: The Divergence of OTP and Link Password Authentication in redacted.com | https://medium.com/@MohaseenK/unveiling-a-security-flaw-the-divergence-of-otp-and-link-password-authentication-in-redacted-com-27e0cc2dc73c?source=rss------bug_bounty-5 | Mohaseen | bug-hunting, password-reset, bug-bounty, hackerone | 17-Dec-2023 |
| XSSRF : The Unholy Matrimony of XSS and SSRF | https://naumankh4n.medium.com/xssrf-the-unholy-matrimony-of-xss-and-ssrf-89f7abfca5b3?source=rss------bug_bounty-5 | Nauman Khan | cybersecurity, hacking, bug-bounty, penetration-testing, money | 17-Dec-2023 |
| Bug Bounty programmes give people the fear (they shouldn’t) | https://medium.com/@ethanrom/bug-bounty-programmes-give-people-the-fear-they-shouldnt-755466351140?source=rss------bug_bounty-5 | Leo C | hacking, cybersecurity, ciso, culture, bug-bounty | 17-Dec-2023 |
| V3 Testnet Bug Bounty | https://tribeone.medium.com/v3-testnet-bug-bounty-8281b8775843?source=rss------bug_bounty-5 | TribeOne | nft, smart-contract-security, bug-bounty | 17-Dec-2023 |
| DOM XSS in document.write sink using source location.search | https://medium.com/@marduk.i.am/dom-xss-in-document-write-sink-using-source-location-search-ae458bc5c85f?source=rss------bug_bounty-5 | Marduk I Am | dom-xss, cross-site-scripting, cybersecurity, bug-bounty, portswigger-lab | 17-Dec-2023 |
| Reflected XSS in BGMI | https://medium.com/@patil97/reflected-xss-in-bgmi-38ed48773981?source=rss------bug_bounty-5 | Patil97 | bug-bounty, xs, bugs, security | 17-Dec-2023 |
| Main Methodology 1 | Part 04 | What To Do After Choosing a Target | https://infosecwriteups.com/main-methodology-1-part-04-what-to-do-after-choosing-a-target-f9cea586d6af?source=rss------bug_bounty-5 | Om Arora | bug-bounty, bug-bounty-tips, hacking, infosec, methodology | 17-Dec-2023 |
| When not to rely on Automated Tools | https://medium.com/@rodriguezjorgex/when-not-to-rely-on-automated-tools-429b331e0613?source=rss------bug_bounty-5 | Rodriguezjorgex | cybersecurity, bug-bounty, xss-attack, prototype-pollution, bug-bounty-tips | 16-Dec-2023 |
| Escalating DOM XSS to Stored XSS | https://medium.com/@rodriguezjorgex/escalating-dom-xss-to-stored-xss-eb6f3a669af3?source=rss------bug_bounty-5 | Rodriguezjorgex | cross-site-scripting, bug-bounty, hacking, cybersecurity, xss-attack | 16-Dec-2023 |
| Mitigating Risks: Securing Symfony Profiler from Unwanted Exposure | https://samshadow.medium.com/mitigating-risks-securing-symfony-profiler-from-unwanted-exposure-14e90a53dd65?source=rss------bug_bounty-5 | Sam Shadow | bug-bounty-writeup, bug-bounty, bug-bounty-tips, vulnerability | 16-Dec-2023 |
| Unveiling Vulnerabilities: PHP Debug Bar Exposes Sensitive Information | https://samshadow.medium.com/unveiling-vulnerabilities-php-debug-bar-exposes-sensitive-information-ca341267fe33?source=rss------bug_bounty-5 | Sam Shadow | vulnerability, bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter | 16-Dec-2023 |
| Self-XSS to Stored XSS | https://medium.com/@rodriguezjorgex/self-xss-to-stored-xss-b4b999610c5b?source=rss------bug_bounty-5 | Rodriguezjorgex | hacking, cybersecurity, bug-bounty, xss-attack, bug-bounty-tips | 16-Dec-2023 |
| Unveiling CVE-2019-11248: A Vulnerability in Kubernetes | https://samshadow.medium.com/unveiling-cve-2019-11248-a-vulnerability-in-kubernetes-83a831afaccd?source=rss------bug_bounty-5 | Sam Shadow | bug-bounty, bug-bounty-hunter, bug-bounty-tips, vulnerability, bug-bounty-writeup | 16-Dec-2023 |
| DOM-based vulnerabilities | https://ayonthakur101.medium.com/dom-based-vulnerabilities-db02d7437b26?source=rss------bug_bounty-5 | Ayon Thakur | penetration-testing, bug-bounty, hacker, portswigger, burp-suit | 16-Dec-2023 |
| SSTI gave me T-Shirt + € 50 | https://medium.com/@bug.hun3r/ssti-got-me-t-shirt-50-a8672ca766c9?source=rss------bug_bounty-5 | mo9kHu93r | information-security, bug-bounty, bug-hunting, info-sec-writeups, cybersecurity | 16-Dec-2023 |
| Kakar Security | https://medium.com/@walikhankakar313/kakar-security-cf15f39baede?source=rss------bug_bounty-5 | Wali Khan Kakar | website-scanning, penetration, security, hacking-world, bug-bounty | 16-Dec-2023 |
| Headline: Indian Government Issues High-Risk Warning for Samsung Galaxy S23 and Other Models | https://riglabscollective.medium.com/headline-indian-government-issues-high-risk-warning-for-samsung-galaxy-s23-and-other-models-2c153d5bcc62?source=rss------bug_bounty-5 | Riglabs Collective | samsung-galaxy, india, s23ultra, mobile, bug-bounty | 15-Dec-2023 |
| 6 Quick Discover Bug Search Syntax In Code-base | https://medium.com/@kerstan/6-quick-discover-bug-search-syntax-in-code-base-eb3d6fb6e929?source=rss------bug_bounty-5 | kerstan | hacker, cybersecurity, bug-bounty, security, bug-bounty-tips | 15-Dec-2023 |
| Easy Money from the Most Trivially Easy Broken Access Control | https://abd11atarek.medium.com/easy-money-from-the-most-trivially-easy-broken-access-control-4d810af327f7?source=rss------bug_bounty-5 | abda11atarek | bugcrowd, bug-bounty-tips, bug-hunter, bug-bounty, broken-access-control | 15-Dec-2023 |
| HTTP/2 Request Smuggling | https://medium.com/@kerstan/http-2-request-smuggling-b6ef5ae351fb?source=rss------bug_bounty-5 | kerstan | hacking, https, bug-bounty-tips, bug-bounty, cybersecurity | 15-Dec-2023 |
| 3 Cases of DOM XSS in Bug Bounty | https://medium.com/@kerstan/3-cases-of-dom-xss-in-bug-bounty-0744003f0b2b?source=rss------bug_bounty-5 | kerstan | bug-bounty, xss-attack, hacking, cybersecurity, bug-bounty-tips | 15-Dec-2023 |
| How I Automatically Discovered SSRF in Hackerone Program | https://medium.com/@kerstan/how-i-automatically-discovered-ssrf-in-hackerone-program-2ae0b7a6ef1b?source=rss------bug_bounty-5 | kerstan | bug-bounty-tips, cybersecurity, hacking, ssrf, bug-bounty | 15-Dec-2023 |
| How I Discovered SSRF on Hackerone Program | https://medium.com/@kerstan/how-i-discovered-ssrf-on-hackerone-program-7bbe72334f74?source=rss------bug_bounty-5 | kerstan | bug-bounty-tips, bug-bounty, ssrf, hacker, graphql | 15-Dec-2023 |
| From CloudSec to Application Security, Bug Bounties to Cybersecurity tooling, and More | https://infosecwriteups.com/from-cloudsec-to-application-security-bug-bounties-to-cybersecurity-tooling-and-more-9f4a1819620c?source=rss------bug_bounty-5 | InfoSec Write-ups | hacking, conference, bug-bounty, security, information-security | 15-Dec-2023 |
| One port can be a costly mistake | Attack The Rsync Service in a Private Program | https://medium.com/@sword0x00/one-port-can-be-a-costly-mistake-attack-the-rsync-service-in-a-private-program-cdbf9ecc650d?source=rss------bug_bounty-5 | Mohanad Hesham | rsync, bug-bounty, fingerprinting, port-scan, hacking | 15-Dec-2023 |
| How To Explore and Exploit GraphQL [Indonesia] | https://revan-ar.medium.com/how-to-explore-and-exploit-graphql-indonesia-562c560f46c6?source=rss------bug_bounty-5 | Revan A | bug-bounty, web-security, api, penetration-testing, graphql | 15-Dec-2023 |
| Subdomain Takeover in Azure Trafficmanager for Fun & Profit | https://padsalatushal.medium.com/subdomain-takeover-in-azure-trafficmanager-for-fun-profit-09c858ca3d0e?source=rss------bug_bounty-5 | Padsala Tushal | bug-bounty, cybersecurity, infosec, subdomain-takeover, bug-bounty-tips | 15-Dec-2023 |
| Cookie Quest: XSS Admin Assault | https://medium.com/@josh.beck2006/cookie-quest-xss-admin-assault-694769f84796?source=rss------bug_bounty-5 | Josh Beck | cybersecurity, programming, penetration-testing, bug-bounty, ctf-writeup | 14-Dec-2023 |
| How did I find open redirect on LinkedIn | https://medium.com/@neverl0gbughunt/how-did-i-find-open-redirect-on-linkedin-e35918b3b129?source=rss------bug_bounty-5 | neverl0g | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 14-Dec-2023 |
| All about Ethical Hacking | https://securitycipher.medium.com/all-about-ethical-hacking-277b9c3e4b36?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | technology, security, cybersecurity, bug-bounty, hacking | 14-Dec-2023 |
| Uncovering an Account Takeover Vulnerability: Auth Bypass via Response Manipulation. | https://medium.com/@kataeriidubstep/uncovering-an-account-takeover-vulnerability-auth-bypass-via-response-manipulation-ba8257f917d2?source=rss------bug_bounty-5 | Pavan kumar.G | cybersecurity, appsec, bug-bounty | 14-Dec-2023 |
| Remote Code execution at ws1.aholdusa.com — Compromising logins of Ahold Delhaize USA employees | https://medium.com/@jonathanbouman/remote-code-execution-at-ws1-aholdusa-com-compromising-logins-of-ahold-delhaize-usa-employees-c7c9aca7e05d?source=rss------bug_bounty-5 | Jonathan Bouman | cybersecurity, bug-bounty, rce, hacking, security | 14-Dec-2023 |
| How I Quickly Discover Bug In Codebase | https://medium.com/@kerstan/how-i-quickly-discover-bug-in-code-6a3bfa7e6e82?source=rss------bug_bounty-5 | kerstan | bug-bounty, programming, technology, code-review, cybersecurity | 14-Dec-2023 |
| How i found a Permanent Denial of Service via Account Lockout: | https://medium.com/@kataeriidubstep/how-i-found-a-permanent-denial-of-service-via-account-lockout-ac1bc33c3c0a?source=rss------bug_bounty-5 | Pavan kumar.G | appsec, cybersecurity, bug-bounty | 14-Dec-2023 |
| How i found a Misconfigured CORS Vulnerability — Unauthorized Cross-Origin Resource Sharing : | https://medium.com/@kataeriidubstep/how-i-found-a-misconfigured-cors-vulnerability-unauthorized-cross-origin-resource-sharing-16effea37e78?source=rss------bug_bounty-5 | Pavan kumar.G | appsec, cybersecurity, bug-bounty | 14-Dec-2023 |
| How i found a Password Reset Token Leak via Referer Header: | https://medium.com/@kataeriidubstep/how-i-found-a-password-reset-token-leak-via-referer-header-7d71d35b0ea8?source=rss------bug_bounty-5 | Pavan kumar.G | appsec, cybersecurity, bug-bounty | 14-Dec-2023 |
| Adobe Recap: 2023 Ambassador World Cup Final Four | https://blog.developer.adobe.com/adobe-recap-2023-ambassador-world-cup-final-four-df701e1a1b12?source=rss------bug_bounty-5 | Chris Parkerson | hacking, security, bug-bounty, hackathons, security-research | 14-Dec-2023 |
| Starlink Router Gen 2 is vulnerable to XSS. | https://medium.com/@hackintoanetwork/starlink-router-gen-2-is-vulnerable-to-xss-48cfcadd0b13?source=rss------bug_bounty-5 | hackintoanetwork | bug-bounty, starlink, exploit, dishy, router | 14-Dec-2023 |
| VulnLab — SQL Injection series — Bypass Login part 2(Database Collect) | https://medium.com/@kurobe09/vulnlab-sql-injection-series-bypass-login-part-2-database-collect-1e6aa36a1308?source=rss------bug_bounty-5 | kurobe09 | cybersecurity, cyberattack, pentest-learnings, sql-injection, bug-bounty | 13-Dec-2023 |
| Cross-Site Scripting (XSS) | https://medium.com/@savanghori1203/cross-site-scripting-xss-c288793349a9?source=rss------bug_bounty-5 | SavanGhori | bug-bounty, xss-attack, xss-vulnerability, bug-bounty-tips, vulnerability | 13-Dec-2023 |
| phpinfo() — My First Resolved Bug in HackerOne | https://medium.com/@ft.eagle.eye.1/phpinfo-my-first-resolved-bug-in-hackerone-a22fea1adb9b?source=rss------bug_bounty-5 | Muhammad Farhad Ansary | bug-bounty, bug-bounty-tips | 13-Dec-2023 |
| AppSec Tales XXIV | Deserialization | https://karol-mazurek95.medium.com/appsec-tales-xxiv-deserialization-841d6bfaa710?source=rss------bug_bounty-5 | Karol Mazurek | penetration-testing, bug-bounty, information-technology, information-security, cybersecurity | 13-Dec-2023 |
| Only 3 Days Left For IWCON 2023 | https://infosecwriteups.com/only-3-days-left-for-iwcon-2023-bab915df5ae8?source=rss------bug_bounty-5 | InfoSec Write-ups | hacking, bug-bounty, conference, information-security, programming | 13-Dec-2023 |
| A misconfiguration in the password reset process can lead to an account takeover. | https://medium.com/@Mr3Moe/a-misconfiguration-in-the-password-reset-process-can-lead-to-an-account-takeover-30c43e17d744?source=rss------bug_bounty-5 | Mr3Moe | web-application-security, web-app-pentesting, bug-bounty, web-app-security | 13-Dec-2023 |
| I found out what my neighbour was looking at on the internet, This is how ? | https://navnee1h.medium.com/i-found-out-what-my-neighbour-was-looking-at-on-the-internet-this-is-how-050c4dfef8b4?source=rss------bug_bounty-5 | Navaneeth M S | bug-bounty, monitoring, dns, hacking, wifi | 13-Dec-2023 |
| Day 13 Bug Bounty — 60 days 60 bugs challenge (Found P1!!! Hope it gets accepted) | https://medium.com/@avbhijitdutta99/day-13-bug-bounty-60-days-60-bugs-challenge-found-p1-hope-it-gets-accepted-670f0dcc25f3?source=rss------bug_bounty-5 | Abhijit Dutta | bug-bounty-writeup, bug-bounty, bug-bounty-program, bug-bounty-tips, bugbountychallenge | 13-Dec-2023 |
| OpenBounty, Shentu’s New Approach in Security Ecosystem | https://shentuchain.medium.com/openbounty-shentus-new-approach-in-security-ecosystem-fbae6506d956?source=rss------bug_bounty-5 | Shentu Chain | bounty-program, bounty-hunter, bug-bounty, web3, cybersecurity | 12-Dec-2023 |
| Mobile Application Security Testing: Navigating the Digital Landscape Safely | https://medium.com/geekculture/mobile-application-security-testing-navigating-the-digital-landscape-safely-3aead90a5455?source=rss------bug_bounty-5 | Security Lit Limited | mobile-security, cybersecurity, programming, vapt, bug-bounty | 12-Dec-2023 |
| I will do Vulnerability Assessment and penetration testing on your website | https://securitycipher.medium.com/i-will-do-vulnerability-assessment-and-penetration-testing-on-your-website-5cd4fb147a33?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | services, bug-bounty, security, cybersecurity, technology | 12-Dec-2023 |
| Skills Needed For Bug Bounty | https://medium.com/@joshdesharnais1/skills-needed-for-bug-bounty-23e289ef0853?source=rss------bug_bounty-5 | Joshua Desharnais | xss-attack, idor, bug-bounty, account-takeover | 12-Dec-2023 |
| Duplicate CSRF… Leads to $$$$ | https://shellbreaker.medium.com/duplicate-csrf-leads-to-26c1ddc71dc5?source=rss------bug_bounty-5 | Bhavesh aka Shellbreaker | hacking, info-sec-writeups, bug-bounty, cybersecurity, bug-bounty-tips | 12-Dec-2023 |
| Server-Side Request Forgery (SSRF) | https://medium.com/@savanghori1203/server-side-request-forgery-ssrf-ca04465ac41a?source=rss------bug_bounty-5 | SavanGhori | bug-bounty, vulnerability, bug-bounty-tips, ssrf, bugs | 12-Dec-2023 |
| Remote Code Execution (RCE) | https://medium.com/@savanghori1203/remote-code-execution-rce-e8628b1432de?source=rss------bug_bounty-5 | SavanGhori | bug-bounty-tips, bugs, vulnerability, rce, bug-bounty | 12-Dec-2023 |
| Join ARPA’s Bug Bounty Program with Immunefi — Up to $50,000 in Rewards! | https://arpa.medium.com/join-arpas-bug-bounty-program-with-immunefi-up-to-50-000-in-rewards-18d9fbd7b193?source=rss------bug_bounty-5 | ARPA Official | blockchain, developer, bug-bounty, debugging | 12-Dec-2023 |
| Easy Admin Access — RVDP (2) | https://infosecwriteups.com/easy-admin-access-rvdp-2-bf2ec8349ebf?source=rss------bug_bounty-5 | hackerdevil | penetration-testing, hacking, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 12-Dec-2023 |
| One Scheme to Rule Them All: OAuth Account Takeover | https://medium.com/@ostorlab/one-scheme-to-rule-them-all-oauth-account-takeover-26ac4cb5e898?source=rss------bug_bounty-5 | Ostorlab | mobile-security, bug-bounty, oauth, bug-bounty-tips, account-takeover | 12-Dec-2023 |
| The launch of incentivized testnet for TribeOne V3 | https://tribeone.medium.com/the-launch-of-incentivized-testnet-for-tribeone-v3-6e12a1eb6d0f?source=rss------bug_bounty-5 | TribeOne | bug-bounty, perpetual-contracts, testnet, nft, trading-competition | 12-Dec-2023 |
| Hacking NASA and Got Hall of Fame | https://medium.com/@bug.hun3r/hacking-nasa-and-got-hall-of-fame-71f9a344d1d0?source=rss------bug_bounty-5 | mo9kHu93r | penetration-testing, cybersecurity, nasa, ethical-hacking, bug-bounty | 12-Dec-2023 |
| Build3rs Bug Bounty Program | https://medium.com/@Lay3rsXR/build3rs-bug-bounty-program-8b874bdfee0e?source=rss------bug_bounty-5 | Lay3rs | build3rs, bug-bounty, blockchain, refis | 12-Dec-2023 |
| Bug Bounty and Hacking Books You Should Read (Must Read) | https://rajkaran359.medium.com/bug-bounty-and-hacking-books-you-should-read-must-read-57ca722ad51d?source=rss------bug_bounty-5 | Rajkaran | bug-bounty, hacking-books, hacking, cybersecurity, bug-bounty-tips | 12-Dec-2023 |
| How I got $300 for Default Credential Login at Bugcrowd | https://medium.com/@avbhijitdutta99/how-i-got-300-for-default-credential-login-at-bugcrowd-30368eb698f7?source=rss------bug_bounty-5 | Abhijit Dutta | bug-bounty-tips, bug-bounty-program, bug-bounty, bug-bounty-writeup | 12-Dec-2023 |
| missing session scopes lead to authentication bypass | https://medium.com/@Mr3Moe/missing-session-scopes-lead-to-authentication-bypass-2e1cdaebda7b?source=rss------bug_bounty-5 | Mr3Moe | web, bug-bounty, appsec, web-penetration-testing | 12-Dec-2023 |
| Exploiting Django Debug Mode for Unrestricted Access to the Internal Dashboard? | https://rokkamvamsi18.medium.com/exploiting-django-debug-mode-for-unrestricted-access-to-the-internal-dashboard-b725783714ae?source=rss------bug_bounty-5 | Rokkam_Vamshi1_8 | bug-bounty-tips, django, bug-bounty, hackerone, infosec | 12-Dec-2023 |
| Portswigger Labs — Api-testing | https://medium.com/@rynnnn617/portswigger-labs-api-testing-86a8827ddfdc?source=rss------bug_bounty-5 | Ry4nnnn | portswigger, appsec, bug-bounty, burp | 11-Dec-2023 |
| How to learn Hacking From 0 to Hero | https://rajput623929.medium.com/how-to-learn-hacking-from-0-to-hero-4a5f288c003d?source=rss------bug_bounty-5 | Mr.Horbio | bug-bounty, cryptography, ethical-hacking, cybersecurity, hacking | 11-Dec-2023 |
| How i found a Host Header Injection in Password Reset Function: | https://medium.com/@kataeriidubstep/how-i-found-a-host-header-injection-in-password-reset-function-5c2ba8d209e6?source=rss------bug_bounty-5 | Pavan kumar.G | cybersecurity, appsec, bug-bounty | 11-Dec-2023 |
| How I Automatically Discovered SSRF in Hackerone Programs | https://medium.com/@kerstan/how-i-automatically-discovered-ssrf-in-hackerone-programs-39e27a1554b5?source=rss------bug_bounty-5 | kerstan | security, ssrf, bug-bounty-tips, bug-bounty, hacker | 11-Dec-2023 |
| Next js and Antd Desing css demora milesimos de segundos para carregar na página. | https://medium.com/@yurioliveiragochi/next-js-and-antd-desing-css-demora-milesimos-de-segundos-para-carregar-na-p%C3%A1gina-77f3b203dac8?source=rss------bug_bounty-5 | Yuri Oliveira Gochi | bug-bounty, antd, next, react | 11-Dec-2023 |
| Unveiling the World of Bug Bounty Programs: Enhancing Cybersecurity Through Collaboration | https://medium.com/@bahadur4630105/unveiling-the-world-of-bug-bounty-programs-enhancing-cybersecurity-through-collaboration-bde9831b6882?source=rss------bug_bounty-5 | Syed Dawood | cyber-security-awareness, bug-bounty, bugbounty-writeup, bug-bounty-tips, bug-bounty-hunter | 11-Dec-2023 |
| Dollars and Detectives: An Unique way to XSS Mysteries ( Not a Simp one ) for a $150 Reward | https://naumankh4n.medium.com/dollars-and-detectives-an-unique-way-to-xss-mysteries-not-a-simp-one-for-a-150-reward-f5d2d80d5022?source=rss------bug_bounty-5 | Nauman Khan | money, ai, cybersecurity, hacking, bug-bounty | 11-Dec-2023 |
| Say Goodbye to Password Hassles with These Cutting-Edge Security Trends! | https://medium.com/@paritoshblogs/say-goodbye-to-password-hassles-with-these-cutting-edge-security-trends-8b8f6ad8f6d4?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-security, cybersecurity, passwordless, passwords | 11-Dec-2023 |
| HackTheBox — Session Security: Obtain Session Identifier via XSS | https://medium.com/@harry.hphu/hackthebox-session-security-obtain-session-identifier-via-xss-c151160c03b0?source=rss------bug_bounty-5 | Huy Phu | hackthebox, web-security, session-security, bug-bounty, xss-attack | 11-Dec-2023 |
| So you found Auth0 secrets, now what? | https://blog.prodefense.io/so-you-found-auth0-secrets-now-what-0945642ac09b?source=rss------bug_bounty-5 | Nightbane | pentesting, security, red-team, bug-bounty, auth0 | 11-Dec-2023 |
| Kubernetes CR injection technique | https://medium.com/@esonhugh/kubernetes-cr-injection-technique-b4506500b8e9?source=rss------bug_bounty-5 | Esonhugh | hacking, custom-resource, bug-bounty, kubernetes-security | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson10): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson10-57551e079751?source=rss------bug_bounty-5 | Pavan kumar.G | computer-science, appsec, bug-bounty, networking | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson9): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson9-4802a25a2570?source=rss------bug_bounty-5 | Pavan kumar.G | computer-science, bug-bounty, appsec, networking | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson8): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson8-e8a2b87c3ac2?source=rss------bug_bounty-5 | Pavan kumar.G | bug-bounty, networking, appsec, computer-science | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson7): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson7-152c167dbc0f?source=rss------bug_bounty-5 | Pavan kumar.G | bug-bounty, appsec, computer-science, networking | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson6): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson6-43abf1f342ec?source=rss------bug_bounty-5 | Pavan kumar.G | networking, computer-science, appsec, bug-bounty | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson5): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson5-f0042df50fca?source=rss------bug_bounty-5 | Pavan kumar.G | bug-bounty, networking, computer-science, appsec | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson4): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson4-29d491577d8c?source=rss------bug_bounty-5 | Pavan kumar.G | bug-bounty, networking, computer-science, appsec | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson3): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson3-80794013cf99?source=rss------bug_bounty-5 | Pavan kumar.G | networking, bug-bounty, computer-science, appsec | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson2): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson2-177e4a21e8d3?source=rss------bug_bounty-5 | Pavan kumar.G | computer-science, appsec, networking, bug-bounty | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson1) : | https://medium.com/@kataeriidubstep/understanding-ip-addressing-a-comprehensive-overview-95bf12e05cae?source=rss------bug_bounty-5 | Pavan kumar.G | network-engineering, computer-science, appsec, bug-bounty | 10-Dec-2023 |
| Bug bounty training from scratch(part2->lesson | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part2-lesson-7a58ad73a31d?source=rss------bug_bounty-5 | Pavan kumar.G | bug-bounty, appsec, networking, computer-science | 10-Dec-2023 |
| How to not implement payment features - Insights from Bugbounty | https://medium.com/@sivakrishnasamireddi/how-to-not-implement-payment-features-insights-from-bugbounty-e3d375566ad0?source=rss------bug_bounty-5 | Siva Krishna Samireddi | hacking, payments, bug-bounty, security, bugbounty-writeup | 10-Dec-2023 |
| 5 Tips for the Beginners Who Want to Start Bug Bounty | https://medium.com/@bhuiyanaman71/5-tips-for-the-beginners-who-want-to-start-bug-bounty-c1a1a952e605?source=rss------bug_bounty-5 | Aman Bhuiyan | web-hacking, bug-bounty, bug-bounty-tips, hacking, ethical-hacking | 10-Dec-2023 |
| In under age (<18), How I Hacked Multi- Billion-Dollar-Corp and got first 4 fig. $2600 Bounty! | https://medium.com/@manan_sanghvi/in-under-age-18-how-i-hacked-multi-billion-dollar-corp-and-got-first-4-fig-2600-bounty-d9ce97b3652e?source=rss------bug_bounty-5 | Manan Sanghvi | idor, bug-bounty, first-bounty, web-application-security, hacking | 10-Dec-2023 |
| Bug Bounty Testing: Test Ideas | https://medium.com/@lopseg/bug-bounty-testing-test-ideas-cf6e8ec5aed1?source=rss------bug_bounty-5 | Lopseg | bug-bounty-writeup, bug-bounty, hacking-training, bug-bounty-tips, info-sec-writeups | 10-Dec-2023 |
| CORS Misconfiguration -> PII Leak | https://medium.com/@boogsta/cors-misconfiguration-pii-leak-2765ff5b7115?source=rss------bug_bounty-5 | Boogsta | cybersecurity, cyber, hacking, bug-bounty-tips, bug-bounty | 10-Dec-2023 |
| Awesome Bug Bounty Tools Exploring Subdomain Enumeration and Reconnaissance Tools | https://cyberconqueror.medium.com/awesome-bug-bounty-tools-exploring-subdomain-enumeration-and-reconnaissance-tools-7bffb25210e6?source=rss------bug_bounty-5 | NEW | enumeration, mentoring, bug-bounty, cybersecurity, medium | 09-Dec-2023 |
| Is it safe to expose your Firebase API key? | https://infosecwriteups.com/is-it-safe-to-expose-your-firebase-api-key-bf2a318c0f29?source=rss------bug_bounty-5 | Suprajabaskaran | cybersecurity, keys, firebase, bug-bounty, ethical-hacking | 09-Dec-2023 |
| 2FA & MFA Bypass, Bug Bounty Easy Wins ! ! Ultimate Guide | https://medium.com/@Kalki2121/2fa-mfa-bypass-bug-bounty-easy-wins-ultimate-guide-3722de0ad26c?source=rss------bug_bounty-5 | ʏᴀꜱʜʜ | information-security, bug-bounty-tips, bug-bounty, infosec, cybersecurity | 09-Dec-2023 |
| 3 Symfony (RCE): A Peek Behind the Curtain | https://medium.com/@bxrowski0x/3-symfony-rce-a-peek-behind-the-curtain-83da5433e149?source=rss------bug_bounty-5 | Omar ElSayed | bug-bounty-tips, cybersecurity, bug-bounty, symfony, remote-code-execution | 09-Dec-2023 |
| How I passed my CRTP Exam | https://medium.com/@damaidec/how-i-passed-my-crtp-exam-c1dadd4d9ec1?source=rss------bug_bounty-5 | Damaidec | exam, active-directory, cybersecurity, hacking, bug-bounty | 09-Dec-2023 |
| Introduction to Burpsuite Bambda Feature | https://medium.com/@gguzelkokar.mdbf15/introduction-to-burpsuite-bambda-feature-4c6b5fbc168d?source=rss------bug_bounty-5 | Gökhan Güzelkokar | hacking, burpsuite, bug-bounty | 09-Dec-2023 |
| TryHackMe | Advent of Cyber 2023 | Day 5 | https://axoloth.medium.com/tryhackme-advent-of-cyber-2023-day-5-60a464ac8d07?source=rss------bug_bounty-5 | Axoloth | bug-bounty, tryhackme, hacking, cybersecurity, penetration-testing | 09-Dec-2023 |
| TryHackMe | Advent of Cyber 2023 | Day 4 | https://axoloth.medium.com/tryhackme-advent-of-cyber-2023-day-4-efa5f90ccfc1?source=rss------bug_bounty-5 | Axoloth | tryhackme, hacking, cybersecurity, bug-bounty, penetration-testing | 09-Dec-2023 |
| My first Bugs: Persistence and mentality (Not a Writeup). | https://medium.com/@Nightbloodz/my-first-bugs-persistence-and-mentality-not-a-writeup-1017714abc8c?source=rss------bug_bounty-5 | Alvaro Balada | bug-bounty-hunter, bug-bounty, bug-bounty-tips, cybersecurity | 09-Dec-2023 |
| Introduction to Burpsuite Bambdas Feature | https://medium.com/@gguzelkokar.mdbf15/introduction-to-burpsuite-bambda-feature-4c6b5fbc168d?source=rss------bug_bounty-5 | Gökhan Güzelkokar | hacking, burpsuite, bug-bounty | 09-Dec-2023 |
| My first dork on GHBD | https://noorhomaid.medium.com/my-first-dork-on-ghbd-988c21b45869?source=rss------bug_bounty-5 | NoorHomaid | cybersecurity, bug-bounty, google-dork, ethical-hacking, penetration-testing | 09-Dec-2023 |
| HTTP Noir: The Dark Art of Smuggling Bytes | https://chayandatta.medium.com/http-noir-the-dark-art-of-smuggling-bytes-a471a0f990f5?source=rss------bug_bounty-5 | CHAYAN DATTA | security, http-request-smuggling, hacking, bug-bounty, network | 09-Dec-2023 |
| Broken Link Hijacking | https://0xtomcat.medium.com/broken-link-hijacking-e0afc5986ea6?source=rss------bug_bounty-5 | Tomcat | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bugbounty-writeup | 08-Dec-2023 |
| Testing vulnerabilities beyond traditional cases — around login/signup features | https://infosecwriteups.com/testing-vulnerabilities-beyond-traditional-cases-around-login-signup-features-9d496bd283d4?source=rss------bug_bounty-5 | Suprajabaskaran | ethical-hacking, bug-bounty-tips, penetration-testing, pentesting, bug-bounty | 08-Dec-2023 |
| #4 Install Burp’s CA Certificate in Firefox — Guide for Burp Suite | https://securitycipher.medium.com/4-install-burps-ca-certificate-in-firefox-guide-for-burp-suite-75a555ed7225?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | technology, security, bug-bounty-tips, bug-bounty, cybersecurity | 08-Dec-2023 |
| Enum is the key — Automatizado + Manual = Full shell. | https://aleeeeex264.medium.com/enum-is-the-key-automatizado-manual-full-shell-4eead6c37dc4?source=rss------bug_bounty-5 | Alejandro Olivares 0x4lex | kali-linux, bug-bounty, bug-bounty-tips, hacking, pentesting | 08-Dec-2023 |
| PEARfection: From LFI to RCI: An iCSI CTF Challenge. | https://medium.com/@josh.beck2006/pearfection-from-lfi-to-rci-an-icsi-ctf-challenge-4ecfb77a60c4?source=rss------bug_bounty-5 | Josh Beck | bug-bounty, penetration-testing, ctf-writeup, cybersecurity | 08-Dec-2023 |
| Unraveling The Story of Multiple Admin Panel Compromises | https://vedanttekale20.medium.com/unraveling-the-story-of-multiple-admin-panel-compromises-baac4444285f?source=rss------bug_bounty-5 | Vedant Tekale | information-security, recon, bug-bounty, hacking, cybersecurity | 08-Dec-2023 |
| Blind XSS on Registration System | https://medium.com/@aurelioyudistira/blind-xss-on-registration-system-410eb0b98109?source=rss------bug_bounty-5 | MxShinzu | pentesting, bug-bounty, cybersecurity | 08-Dec-2023 |
| Bug bounty training from scratch: | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-f62cc13fbe64?source=rss------bug_bounty-5 | Pavan kumar.G | appsec, computer-science, bug-bounty | 07-Dec-2023 |
| Bug bounty training from scratch for beginners: | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-for-beginners-1f17e609fbf0?source=rss------bug_bounty-5 | Pavan kumar.G | cybersecurity, appsec, computer-science, bug-bounty, linux | 07-Dec-2023 |
| Bug bounty training from scratch(part1->lesson12): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part1-lesson12-206baedf6747?source=rss------bug_bounty-5 | Pavan kumar.G | bug-bounty, appsec, computer-science | 07-Dec-2023 |
| Bug bounty training from scratch(part1->lesson11): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part1-lesson11-6f2c71aa8135?source=rss------bug_bounty-5 | Pavan kumar.G | computer-science, appsec, bug-bounty | 07-Dec-2023 |
| Bug bounty training from scratch(part1->lesson10): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part1-lesson10-b2af2898a6b1?source=rss------bug_bounty-5 | Pavan kumar.G | appsec, computer-science, bug-bounty | 07-Dec-2023 |
| Bug bounty training from scratch(part1->lesson9): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part1-lesson9-44b004fe5550?source=rss------bug_bounty-5 | Pavan kumar.G | appsec, computer-science, bug-bounty | 07-Dec-2023 |
| Bug bounty training from scratch(part1-> lesson8): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part1-lesson8-98680d93e4bf?source=rss------bug_bounty-5 | Pavan kumar.G | bug-bounty, appsec, computer-science | 07-Dec-2023 |
| Bug bounty training from scratch(part1->lesson7): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part1-lesson7-d04def4b4ef3?source=rss------bug_bounty-5 | Pavan kumar.G | appsec, computer-science, bug-bounty | 07-Dec-2023 |
| Bug bounty training from scratch (part1->lesson6): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part1-lesson6-1b4b8742a1ec?source=rss------bug_bounty-5 | Pavan kumar.G | computer-science, bug-bounty, appsec | 07-Dec-2023 |
| Bug bounty training from scratch(part1->lesson5): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part1-lesson5-15d8c1f2cc5e?source=rss------bug_bounty-5 | Pavan kumar.G | appsec, computer-science, bug-bounty | 07-Dec-2023 |
| Bug bounty training from scratch (part1->lesson4): | https://medium.com/@kataeriidubstep/bug-bounty-training-from-scratch-part1-lesson4-653699a21284?source=rss------bug_bounty-5 | Pavan kumar.G | appsec, computer-science, bug-bounty | 07-Dec-2023 |
| Using reNgine with Netlas.io module | https://netlas.medium.com/using-rengine-with-netlas-io-module-436e764a5495?source=rss------bug_bounty-5 | Netlas.io | penetration-testing, reconnaissance, information-security, cybersecurity, bug-bounty | 07-Dec-2023 |
| Automation for Target Surface Information Gathering — XCOODE + AI Prompting for Bug Bounty Giants | https://medium.com/@xcoode/automation-for-target-surface-information-gathering-xcoode-ai-prompting-for-bug-bounty-giants-a545dadc87dc?source=rss------bug_bounty-5 | XCOODE | ai, hacking, hackerone, bug-bounty, openai | 07-Dec-2023 |
| Markdown XSS tips | https://medium.com/@lopseg/markdown-xss-tips-e166905b1f5e?source=rss------bug_bounty-5 | Rafael Silva | bug-bounty-tips, info-sec-writeups, xss-attack, bug-bounty, bug-bounty-writeup | 07-Dec-2023 |
| Hacking Indian Government, Finding XSS & SQL Injection | https://medium.com/@Kalki2121/hacking-indian-government-finding-xss-sql-injection-9f83e5e60c6f?source=rss------bug_bounty-5 | Yashh | bugs, bug-bounty-tips, bug-bounty, hacking, sql-injection | 07-Dec-2023 |
| Unveiling Critical Vulnerability: Account Hijacking — Art of play on tokens | https://medium.com/@xcoode/unveiling-critical-vulnerability-account-hijacking-art-of-play-on-tokens-dd270140cd25?source=rss------bug_bounty-5 | XCOODE | fintech, bug-bounty, security, hacking, cloud | 07-Dec-2023 |
| Advent of Cyber 2023 -Day 6 Walkthrough.. By Manoj Mudabagil. | https://medium.com/@manojmudabagil/advent-of-cyber-2023-day-6-walkthrough-by-manoj-mudabagil-cd7062261d33?source=rss------bug_bounty-5 | Manoj Mudabagil | tryhackme, hacking, advent-of-cyber-2023, cybersecurity, bug-bounty | 07-Dec-2023 |
| Exploring New Vulnerability Vectors: A Systematic Approach to Manual Google Dorking | https://medium.com/@mxmd/exploring-new-vulnerability-vectors-a-systematic-approach-to-manual-google-dorking-fdfc79e9825d?source=rss------bug_bounty-5 | Max Klose | cybersecurity, bug-bounty-tips, bug-bounty, google-dorking, osint | 07-Dec-2023 |
| Markdown XSS tips | https://medium.com/@lopseg/markdown-xss-tips-e166905b1f5e?source=rss------bug_bounty-5 | Lopseg | bug-bounty-tips, info-sec-writeups, xss-attack, bug-bounty, bug-bounty-writeup | 07-Dec-2023 |
| Hunt for GitHub leaks with LOPSEG DORK HELPER | https://medium.com/@lopseg/hunt-for-github-leaks-with-lopseg-dork-helper-c3ce96cb4177?source=rss------bug_bounty-5 | Lopseg | bug-bounty-writeup, hacking-tools, bug-bounty, bug-bounty-tips, bug-bounty-hunter | 07-Dec-2023 |
| Enhancing Bug Bounty Hunting with Lopseg OSINT | https://medium.com/@lopseg/enhancing-bug-bounty-hunting-with-lopseg-osint-4f2fd075621a?source=rss------bug_bounty-5 | Lopseg | bug-bounty, ctf, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 07-Dec-2023 |
| Enhancing Bug Bounty Hunting with Lopseg OSINT | https://medium.com/@lopseg/enhancing-bug-bounty-hunting-with-lopseg-osint-4f2fd075621a?source=rss------bug_bounty-5 | Lopseg | bug-bounty, ctf, bug-bounty-writeup, bug-bounty-tips, hacking-tools | 07-Dec-2023 |
| Markdown XSS polyglot | https://medium.com/@lopseg/markdown-xss-tips-e166905b1f5e?source=rss------bug_bounty-5 | Lopseg | bug-bounty-tips, info-sec-writeups, xss-attack, bug-bounty, bug-bounty-writeup | 07-Dec-2023 |
| 20 Days Of Hacking: Bug Bounty Challenge —Conclusion | https://wallotry.medium.com/20-days-of-hacking-bug-bounty-challenge-conclusion-0ac57a737883?source=rss------bug_bounty-5 | Wallotry | bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bug-bounty, bug-bounty-hunting | 06-Dec-2023 |
| The Secret World of Malicious Strings and Hidden Threats – Are You at Risk? | https://medium.com/@paritoshblogs/the-secret-world-of-malicious-strings-and-hidden-threats-are-you-at-risk-cb25535d4718?source=rss------bug_bounty-5 | Paritosh | information-security, hacking, http-headers, bug-bounty, cybersecurity | 06-Dec-2023 |
| Python Program to find GCD (Greatest Common Divisor) for Cryptography | https://rajput623929.medium.com/python-program-to-find-gcd-greatest-common-divisor-for-cryptography-816075bba2fa?source=rss------bug_bounty-5 | Mr.Horbio | cybersecurity, hacking, crytocurrency, cryptography, bug-bounty | 06-Dec-2023 |
| API Security — Web Security Academy | https://mrshan.medium.com/api-security-web-security-academy-3578589fc3fa?source=rss------bug_bounty-5 | MR SHAN | web-security-academy, bug-bounty | 06-Dec-2023 |
| Spool Unveils Comprehensive Bug Bounty Programme to Fortify DeFi Security | https://medium.com/spoolfi/spool-unveils-comprehensive-bug-bounty-programme-to-fortify-defi-security-673559c463dd?source=rss------bug_bounty-5 | Spool | bug-bounty, security, blockchain, defi, smart-contracts | 06-Dec-2023 |
| Cheat code for file upload vulnerability by kidnapshadow | https://medium.com/@kidnapshadow/cheat-code-for-file-upload-vulnerability-by-kidnapshadow-ebb0794581f2?source=rss------bug_bounty-5 | Kidnapshadow | kidnapshadow, owasp, vulnerability, file-upload-vulnerability, bug-bounty | 06-Dec-2023 |
| API Documentation Tips | https://medium.com/@lopseg/api-documentation-tips-e36e63f47589?source=rss------bug_bounty-5 | Rafael Silva | bug-bounty-tips, bug-hunting, bug-bounty | 06-Dec-2023 |
| From Bug Bounty Prodigy to Leadership Luminary: Aditya Shende Ascends at XCOODE | https://medium.com/@xcoode/from-bug-bounty-prodigy-to-leadership-luminary-aditya-shende-ascends-at-xcoode-18a6aaab1471?source=rss------bug_bounty-5 | XCOODE | cybersecurity, bug-bounty, leadership, cyber | 05-Dec-2023 |
| Empowering the Next Generation: XCOODE Unveils Hacckers Bug Bounty Platform for Cyber Enthusiasts | https://medium.com/@xcoode/empowering-the-next-generation-xcoode-unveils-hacckers-bug-bounty-platform-for-cyber-enthusiasts-bc6dc31c27b9?source=rss------bug_bounty-5 | XCOODE | cybersecurity, hacker, cyber, bug-bounty | 05-Dec-2023 |
| PDF Upload Leading to Stored XSS | https://medium.com/@katmaca2014/pdf-upload-leading-to-stored-xss-f712326705ee?source=rss------bug_bounty-5 | Kaan Atmaca | cybersecurity, penetration-testing, bug-bounty, hacking, pentesting | 05-Dec-2023 |
| LFI via SMTP log poisoning | https://medium.com/@akshadjoshi/lfi-via-smtp-log-poisoning-65e02dd21068?source=rss------bug_bounty-5 | Akshad Joshi | log-poisoning, local-file-inclusion, smtp, bug-bounty, rce | 05-Dec-2023 |
| Bypassing 2FA Authentication in TeamPass System | https://medium.com/@developer_1991/bypassing-2fa-authentication-in-teampass-system-f3184fe8589d?source=rss------bug_bounty-5 | HamidReza Faghani | bug-bounty, account-takeover, security, 0day, exploitation | 05-Dec-2023 |
| Admin Panel Access | https://medium.com/@omdubey170/admin-panel-access-5dd2fd4938a0?source=rss------bug_bounty-5 | Omdubey | bug-bounty, bugs, bug-bounty-tips, ethical-hacking, pentesting | 05-Dec-2023 |
| LFI on Microsoft | https://medium.com/@sushilgill08/lfi-on-microsoft-2d30c9283534?source=rss------bug_bounty-5 | Sushil Choudhary | hackerone, bug-hunting, microsoft, bug-bounty, bugbounty-writeup | 04-Dec-2023 |
| How I Found A Website Vulnerability In Under 10 Minutes | https://medium.com/@abidmafahim7/how-i-found-a-website-vulnerability-in-under-10-minutes-2b2ff934545d?source=rss------bug_bounty-5 | Abidmafahim | git-exposed, web-vulnerabilities, bug-bounty | 04-Dec-2023 |
| Elevating Security: Whatfix Transition to a Custom Vulnerability Disclosure Program (VDP) | https://medium.com/whatfix-techblog/elevating-security-whatfix-transition-to-a-custom-vulnerability-disclosure-program-vdp-e6d5a7e11c9d?source=rss------bug_bounty-5 | Kamlesh Tukaral | vulnerability-disclosure, whatfix, vdp, bug-bounty, infosec | 04-Dec-2023 |
| The Hidden Dangers Lurking in Your Active Directory Certificate Services – What You Need to Know… | https://medium.com/@paritoshblogs/the-hidden-dangers-lurking-in-your-active-directory-certificate-services-what-you-need-to-know-7c735c09e0fd?source=rss------bug_bounty-5 | Paritosh | cybersecurity, active-directory, bug-bounty, information-security, adc | 04-Dec-2023 |
| Bug Hunter journal day #3 and #4 | https://medium.com/@joaomaia171820/bug-hunter-journal-day-3-and-4-37b4c653abd9?source=rss------bug_bounty-5 | Jhonny_The_Kid | bug-bounty-writeup, bug-bounty-program, bug-bounty, cybersecurity | 04-Dec-2023 |
| Javascript Analysis to SQL injection | https://melguerdawi.medium.com/javascript-analysis-to-sql-injection-ca763f9c4c4e?source=rss------bug_bounty-5 | Mostafa Elguerdawi | bug-bounty, bug-bounty-tips, hackerone, sql-injection | 04-Dec-2023 |
| Web Enumeration With Gobuster | https://medium.com/@ronak.d.sharma111/web-enumeration-with-gobuster-ca4ac46da90b?source=rss------bug_bounty-5 | Ronak Sharma | cybersecurity, hacking, bug-bounty | 04-Dec-2023 |
| 20 Days Of Hacking: Bug Bounty Challenge — Day 2 | https://wallotry.medium.com/20-days-of-hacking-bug-bounty-challenge-day-2-51b02ca865ea?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 03-Dec-2023 |
| How I Found My First Website Vulnerability as a Web Pentester | https://medium.com/@abidmafahim7/how-i-found-my-first-website-vulnerability-as-a-web-pentester-2dee809e0eea?source=rss------bug_bounty-5 | Abidmafahim | sql-injection-attack, bug-bounty, web-vulnerabilities, xss-vulnerability | 03-Dec-2023 |
| My first and simple ATO in a private program | https://medium.com/@pabs2141/my-first-and-simple-ato-in-a-private-program-212c6b17b245?source=rss------bug_bounty-5 | PanSa | bug-bounty, bug-bounty-writeup, hacking, account-takeover | 03-Dec-2023 |
| My Confusion Over Local File Inclusion | https://medium.com/illuminations-mirror/my-confusion-over-local-file-inclusion-11f3d7c43b23?source=rss------bug_bounty-5 | Quintius Walker | poetry, bug-bounty, writeup, cybersecurity, poetry-on-medium | 03-Dec-2023 |
| The Shocking Secrets Behind Foolproof Vulnerability Response! | https://medium.com/@paritoshblogs/the-shocking-secrets-behind-foolproof-vulnerability-response-fc6fe8b91d47?source=rss------bug_bounty-5 | Paritosh | vulnerability, cybersecurity, bug-bounty, hacking, information-security | 03-Dec-2023 |
| The ONE Vulnerability Every Website Owner Fears — Learn How YOU Can Expose It! | https://medium.com/@paritoshblogs/the-one-vulnerability-every-website-owner-fears-learn-how-you-can-expose-it-71fef31b0ece?source=rss------bug_bounty-5 | Paritosh | programming, bug-bounty, hacking, information-security, cybersecurity | 03-Dec-2023 |
| My First Valid Bug!!! | https://medium.com/@sushilgill08/my-first-valid-bug-444f26e1f8be?source=rss------bug_bounty-5 | Sushil Choudhary | cybersecurity, bug-bounty-writeup, bugbounty-tips, bug-hunting, bug-bounty | 03-Dec-2023 |
| Everything I know on Recon | https://medium.com/@joshdesharnais1/everything-i-know-on-recon-689f6a535757?source=rss------bug_bounty-5 | Joshua Desharnais | recon, tools-and-resources, tools, bug-bounty, bug-bounty-tips | 03-Dec-2023 |
| Streamable Finance Bug Bounty Campaign is live! | https://streamablefinance.medium.com/streamable-finance-bug-bounty-campaign-is-live-2ced6e4c68d5?source=rss------bug_bounty-5 | Streamable Finance | bug-bounty, product-launch | 03-Dec-2023 |
| Business Logic Vulnerability: Payment bypass | https://vrushabhd.medium.com/business-logic-vulnerability-payment-bypass-9335bdbdbdf6?source=rss------bug_bounty-5 | Mr. Vrushabh | pentesting, bug-bounty, vulnerability, bug-bounty-tips, hackerone | 03-Dec-2023 |
| How I Created an Advanced Web Code Analyzer Using ChatGPT | https://infosecwriteups.com/how-i-created-an-advanced-web-code-analyzer-using-chatgpt-6b32a7d42f88?source=rss------bug_bounty-5 | Jarred Longoria | cybersecurity, chatgpt, infosec, bug-bounty | 03-Dec-2023 |
| Azure Log Analysis: Real-Life Incidents and Practical Tips to Safeguard | https://medium.com/@paritoshblogs/azure-log-analysis-real-life-incidents-and-practical-tips-to-safeguard-077faf28919b?source=rss------bug_bounty-5 | Paritosh | cybersecurity, incident-response, azure, bug-bounty, information-security | 03-Dec-2023 |
| How to debug android native libraries using JEB decompiler? | https://medium.com/@shubhamsonani/how-to-debug-android-native-libraries-using-jeb-decompiler-eec681a22cf3?source=rss------bug_bounty-5 | Shubham Sonani | bug-bounty, hacking, android, cybersecurity, penetration-testing | 03-Dec-2023 |
| How to bypass debugger detection in Android/iOS native libraries using IDA Pro? | https://medium.com/@shubhamsonani/how-to-bypass-debugger-detection-in-android-ios-native-libraries-using-ida-pro-3e289c2127d6?source=rss------bug_bounty-5 | Shubham Sonani | bug-bounty, cybersecurity, android, hacking, penetration-testing | 03-Dec-2023 |
| How to debug Android/iOS native library using GDB debugger? | https://medium.com/@shubhamsonani/how-to-debug-android-ios-native-library-using-gdb-debugger-d02c0e0341eb?source=rss------bug_bounty-5 | Shubham Sonani | hacking, penetration-testing, cybersecurity, technology, bug-bounty | 03-Dec-2023 |
| 20 Days Of Hacking: Bug Bounty Challenge — Day 1 | https://wallotry.medium.com/20-days-of-hacking-bug-bounty-challenge-day-1-38a1735644ab?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 02-Dec-2023 |
| Vulnerability Discovery in SRC — Concurrency | https://medium.com/@rynnnn617/vulnerability-discovery-in-src-concurrency-baa9ffdfa9d9?source=rss------bug_bounty-5 | Ry4nnnn | concurrency, bug-bounty-tips, bug-bounty | 02-Dec-2023 |
| Lateral Movement Techniques Through File Share Exploitation | https://medium.com/@paritoshblogs/lateral-movement-techniques-through-file-share-exploitation-a50d1ffdb8e7?source=rss------bug_bounty-5 | Paritosh | lateral-movement, hacking, information-security, cybersecurity, bug-bounty | 02-Dec-2023 |
| The Rising Threat of Cookie Theft and RMM Takeover | https://medium.com/@paritoshblogs/the-rising-threat-of-cookie-theft-and-rmm-takeover-bafe0013ffc0?source=rss------bug_bounty-5 | Paritosh | realtime-monitoring, cookies, cybersecurity, hacking, bug-bounty | 02-Dec-2023 |
| Bug Hunter journal day(week) #1 | https://medium.com/@joaomaia171820/bug-hunter-journal-day-week-1-699926bf1a70?source=rss------bug_bounty-5 | Jhonny_The_Kid | bug-bounty-writeup, bug-bounty-program, bug-bounty, pentest | 02-Dec-2023 |
| Mastering Bug Bounty: A Comprehensive Guide to Earning Money Ethically and Safely in Cybersecurity. | https://medium.com/@thecyberxcompany/mastering-bug-bounty-a-comprehensive-guide-to-earning-money-ethically-and-safely-in-cybersecurity-46c1b44f52fd?source=rss------bug_bounty-5 | The CyberX Company | ethical-hacking, hacking, cybersecurity, bug-bounty, earn-money-online | 02-Dec-2023 |
| Mastering Bug Bounty Hunting: A Comprehensive Guide to Launch Your Cybersecurity Career. | https://medium.com/@thecyberxcompany/mastering-bug-bounty-hunting-a-comprehensive-guide-to-launch-your-cybersecurity-career-5553ddcced30?source=rss------bug_bounty-5 | The CyberX Company | bug-bounty-tips, bugs, ethical-hacking, cybersecurity, bug-bounty | 02-Dec-2023 |
| How MAC Spoofing works and How attackers do that!! | https://medium.com/@hackerdom_devil/how-mac-spoofing-works-and-how-attackers-do-that-57797179430f?source=rss------bug_bounty-5 | Gokuleswaran B | ethical-hacking, mac-spoofing, penetration-testing, bug-bounty, bug-bounty-tips | 02-Dec-2023 |
| Top 25 Advanced Google Dorks for OSINT and Bug Bounty Hunting | https://osintteam.blog/top-25-advanced-google-dorks-for-osint-and-bug-bounty-hunting-f2d9dceed068?source=rss------bug_bounty-5 | as-squirrel | bug-bounty, osint, cybersecurity, google-dorks-list, hacking | 02-Dec-2023 |
| Day 12 Bug Bounty — 60 days 60 bugs challenge (Didn’t found anything, but could be something… | https://medium.com/@avbhijitdutta99/day-12-bug-bounty-60-days-60-bugs-challenge-didnt-found-anything-but-could-be-something-ba0324d96ce7?source=rss------bug_bounty-5 | Abhijit Dutta | bug-bounty, bug-bounty-hunter, bugbountychallenge, bug-bounty-writeup | 01-Dec-2023 |
| Writing High-Quality Bug Reports: Best Practices for Effective Bug Bounty Hunting | https://medium.com/@prathameshbagul/writing-high-quality-bug-reports-best-practices-for-effective-bug-bounty-hunting-74542dff9793?source=rss------bug_bounty-5 | Prath | cybersecurity, pentesting, report, bug-bounty-tips, bug-bounty | 01-Dec-2023 |
| What is this httpx thing? Using it in your adventure with Bugbounty? | https://systemweakness.com/what-is-this-httpx-thing-using-it-in-your-adventure-with-bugbounty-f91f1ef31d49?source=rss------bug_bounty-5 | Vicky Aryan | recon, bug-bounty, cybersecurity, hacking, httpx | 01-Dec-2023 |
| Verification Bypass via “Mass Assignment” | https://larebsec.medium.com/verification-bypass-via-mass-assignment-25707e210a42?source=rss------bug_bounty-5 | Lareb | bug-bounty, cybersecurity, bugbounty-writeup, hacking, vulnerability | 01-Dec-2023 |
| How attackers use ARP Spoofing / Poisoning to takeover a complete Network!! | https://medium.com/@hackerdom_devil/how-attackers-use-arp-spoofing-poisoning-to-takeover-a-complete-network-8477cea362c4?source=rss------bug_bounty-5 | Gokuleswaran B | penetration-testing, bug-bounty, ethical-hacking, network-security, arp-spoofing | 01-Dec-2023 |
| Building Kubernetes Detections: Strengthening Security with Real-world Examples | https://medium.com/@paritoshblogs/building-kubernetes-detections-strengthening-security-with-real-world-examples-8268cddd852f?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, programming, information-security, hacking | 01-Dec-2023 |
| Part 03 | What To Do After Choosing a Target? | Post Recon |Bug Bounty | https://infosecwriteups.com/part-03-what-to-do-after-choosing-a-target-post-recon-bug-bounty-1a7f431b4d79?source=rss------bug_bounty-5 | Om Arora | bug-bounty, hacking, bug-bounty-tips, methodology, infosec | 01-Dec-2023 |
| Navigating the Bug Bounty Arena: Earn $605,000 Reward, Learn More | https://medium.com/coded-tech-talk/navigating-the-bug-bounty-arena-earn-605-000-reward-learn-more-e754e077a81c?source=rss------bug_bounty-5 | Coded Conversations | bug-bounty-tips, cybersecurity, security, hacking, bug-bounty | 01-Dec-2023 |
| Project 2510: Bug Bounty Challenge — The End? | https://wallotry.medium.com/project-2510-bug-bounty-challenge-the-end-afb67ea2abd1?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, bug-bounty-hunting, bug-bounty | 30-Nov-2023 |
| Exploring the Logic of XSS Attacks and Bypassing Techniques through Browser Decoding | https://medium.com/@test_90648/considering-xss-attacks-and-bypass-logic-from-the-perspective-of-browser-decoding-logic-can-provide-b4579d3c458b?source=rss------bug_bounty-5 | JessicaSecurity | xs, bug-bounty, web, security, browsers | 30-Nov-2023 |
| What is SQL injection | https://medium.com/@savanghori1203/what-is-sql-injection-a3907c6967a5?source=rss------bug_bounty-5 | Savanghori | vulnerability, bug-bounty-tips, bug-bounty, sql-injection, sql | 30-Nov-2023 |
| Cross-Site Scripting (XSS) | https://medium.com/@savanghori1203/cross-site-scripting-xss-b6139b38fa2b?source=rss------bug_bounty-5 | Savanghori | bug-bounty, xss-vulnerability, bug-bounty-tips, bugs, xss-attack | 30-Nov-2023 |
| The Shocking Truth Behind Indicators of Compromise (IOCs) — You Won’t Believe What We Found! | https://medium.com/@paritoshblogs/the-shocking-truth-behind-indicators-of-compromise-iocs-you-wont-believe-what-we-found-5255d54b98d9?source=rss------bug_bounty-5 | Paritosh | bug-bounty, malware-analysis, cybersecurity, ioc, information-security | 30-Nov-2023 |
| Subdomain Enumeration Techniques | https://medium.com/@savanghori1203/subdomain-enumeration-00f487d6b829?source=rss------bug_bounty-5 | Savanghori | bug-bounty-tips, bug-bounty, recon, subdomains-enumeration, subdomain | 30-Nov-2023 |
| Day 11 Bug Bounty — 60 days 60 bugs challenge | https://medium.com/@avbhijitdutta99/day-11-bug-bounty-60-days-60-bugs-challenge-530119a74c90?source=rss------bug_bounty-5 | Abhijit Dutta | bugbountychallenge, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 30-Nov-2023 |
| Network Managed Detection and Response (NMDR): Strengthening Cybersecurity Defenses | https://medium.com/@paritoshblogs/network-managed-detection-and-response-nmdr-strengthening-cybersecurity-defenses-a8a5e989b310?source=rss------bug_bounty-5 | Paritosh | information-security, managed-detection, bug-bounty, nmdr, cybersecurity | 30-Nov-2023 |
| Server-Side Request Forgery (SSRF) | https://medium.com/@savanghori1203/server-side-request-forgery-ssrf-1e9755b38c59?source=rss------bug_bounty-5 | SavanGhori | ssrf, vulnerability, bug-bounty, ssrf-bug, bug-bounty-tips | 30-Nov-2023 |
| Ödeme sayfasında Business Logic | https://medium.com/@el-cezeri/%C3%B6deme-sayfas%C4%B1nda-business-logic-cba493d9f6b8?source=rss------bug_bounty-5 | Samet Yiğit | bugbounty-writeup, ödülavcılığı, bug-bounty | 30-Nov-2023 |
| Remote Code Execution (RCE) | https://medium.com/@savanghori1203/remote-code-execution-rce-9f078b98316a?source=rss------bug_bounty-5 | SavanGhori | bugs, bug-bounty-tips, bug-bounty, rce, vulnerability | 30-Nov-2023 |
| Insecure Direct Object Reference(IDOR) | https://medium.com/@savanghori1203/idor-insecure-direct-object-reference-88576225e265?source=rss------bug_bounty-5 | SavanGhori | vulnerability, idor, bugs, bug-bounty, bug-bounty-tips | 30-Nov-2023 |
| Simple Recon Di Android Menggunakan Tools TheTimeMachine dan Dirsearch | https://alpinnnnnn13.medium.com/simple-recon-di-android-menggunakan-tools-thetimemachine-dan-dirsearch-3384aad17c15?source=rss------bug_bounty-5 | Mohammad Alfin Hidayatullah | bug-bounty, bug-bounty-tips, recon, scanning | 30-Nov-2023 |
| Race Condition - A cURL Chaos | https://shahjerry33.medium.com/race-condition-a-curl-chaos-820cb289cbf1?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | cybersecurity, infosec, bug-bounty, vulnerability, pentesting | 30-Nov-2023 |
| Easy Bug Hunting: HTML Injection Explained Step by Step” | https://medium.com/@faizankhaliq26/easy-bug-hunting-html-injection-explained-step-by-step-011901f183d9?source=rss------bug_bounty-5 | MUHAMMAD FAIZAN KHAN | bwapp, bug-bounty, web-application-security, penetration-testing, html-injection | 30-Nov-2023 |
| Top Free Resources for Ethical Hacking and Bug Bounty Beginners & Experts | https://infosecwriteups.com/top-free-resources-for-ethical-hacking-and-bug-bounty-beginners-experts-9556ef045db4?source=rss------bug_bounty-5 | Jarred Longoria | cybersecurity, ethical-hacking, bug-bounty, free-resources | 30-Nov-2023 |
| 1.11 Lab: Blind SQL injection with time delays and information retrieval | 2023 | https://cyberw1ng.medium.com/1-11-lab-blind-sql-injection-with-time-delays-and-information-retrieval-2023-e8123405e87d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, penetration-testing, hacking, bug-bounty | 30-Nov-2023 |
| Easy Bug Hunting: HTML Injection Explained Step by Step | https://medium.com/@faizankhaliq26/easy-bug-hunting-html-injection-explained-step-by-step-011901f183d9?source=rss------bug_bounty-5 | MUHAMMAD FAIZAN KHAN | bwapp, bug-bounty, web-application-security, penetration-testing, html-injection | 30-Nov-2023 |
| Rise of Broken Access Control | https://medium.com/@rafinrahmanchy/rise-of-broken-access-control-51356916235f?source=rss------bug_bounty-5 | Rafin Rahman Chy | bug-bounty, appsec, application-security, infosec, web-security | 30-Nov-2023 |
| Easy Bug Hunting: HTML Injection Explained Step by Step | https://medium.com/@faizankhaliq26/easy-bug-hunting-html-injection-explained-step-by-step-011901f183d9?source=rss------bug_bounty-5 | | bwapp, bug-bounty, web-application-security, penetration-testing, html-injection | 30-Nov-2023 |
| Day 10 Bug Bounty — 60 days 60bugs challenge — New Start! | https://medium.com/@avbhijitdutta99/day-10-bug-bounty-60-days-60bugs-challenge-new-start-832988aeb569?source=rss------bug_bounty-5 | Abhijit Dutta | bug-bounty, bug-bounty-tips, bugbountychallenge, bug-bounty-writeup | 29-Nov-2023 |
| Windows Login Bypass | https://infosecwriteups.com/windows-login-bypass-eab148bc9dd5?source=rss------bug_bounty-5 | c0d3x27 | software-development, bug-bounty, cybersecurity, windows, hacking | 29-Nov-2023 |
| Cybersecurity Risk of Opening Up to the Internet | https://medium.com/@paritoshblogs/cybersecurity-risk-of-opening-up-to-the-internet-c624c9a018ba?source=rss------bug_bounty-5 | Paritosh | cybersecurity, bug-bounty, programming, hacking, internet-of-things | 29-Nov-2023 |
| OSINT: How to find information on anyone | https://medium.com/@sakthi172000/osint-how-to-find-information-on-anyone-14514216cec1?source=rss------bug_bounty-5 | SAKTHIVEL P | bug-bounty, infosec, cybersecurity, osint, osint-tool | 29-Nov-2023 |
| Mastering API Penetration Testing: A Comprehensive Guide for Security Pentesters | https://infosecwriteups.com/mastering-api-penetration-testing-a-comprehensive-guide-for-security-pentesters-bf62f65b5b21?source=rss------bug_bounty-5 | Suprajabaskaran | ethical-hacking, bug-bounty, pentesting, cybersecurity, api | 29-Nov-2023 |
| Useful tools for bug hunter | https://medium.com/@cyberhansu/useful-tools-for-bug-hunter-f493866fa1bc?source=rss------bug_bounty-5 | cyberhansu | hunter-s-thompson, bug-hunting, bug-bounty, hacker, bug-hunter | 29-Nov-2023 |
| How to make money legally as a Hacker | https://medium.com/@cyberhansu/how-to-make-money-legally-as-a-hacker-c27037b143a9?source=rss------bug_bounty-5 | cyberhansu | bug-bounty, make-money, web-application-security, mobileapplicationsecurity | 29-Nov-2023 |
| PII Disclosure Worth $750 | https://vijetareigns.medium.com/pii-disclosure-worth-750-758b72e7e8ca?source=rss------bug_bounty-5 | the_unlucky_guy | bug-bounty-tips, bugbounty-writeup, bug-bounty, bug-bounty-writeup, cybersecurity | 29-Nov-2023 |
| R.xyz: Web3 Bug Bounty Platform | https://medium.com/coinmonks/r-xyz-web3-bug-bounty-platform-95d48c911989?source=rss------bug_bounty-5 | Officer's Notes | smart-contract-security, bug-bounty-tips, bug-bounty, hacking, web3 | 29-Nov-2023 |
| CRLF to XSS | https://medium.com/@a7med.ctf/crlf-to-xss-8059ceefd349?source=rss------bug_bounty-5 | Ahmed Mahmoued | snapchat, bug-bounty-tips, hacker, bug-bounty | 29-Nov-2023 |
| Aztec Multiple-Spend Error Bugfix Review | https://medium.com/immunefi/aztec-multiple-spend-error-bugfix-review-20074581d224?source=rss------bug_bounty-5 | Immunefi Editor | cryptocurrency, security, bug-bounty, web3, multiple-spend-error | 29-Nov-2023 |
| 1.10 Lab: Blind SQL injection with time delays | 2023 | https://cyberw1ng.medium.com/1-10-lab-blind-sql-injection-with-time-delays-2023-a95a3b8557ec?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, hacking, cybersecurity, careers | 29-Nov-2023 |
| IWCON 2023 CTF Registrations Now Open | https://infosecwriteups.com/iwcon-2023-ctf-registrations-now-open-46c2611714f0?source=rss------bug_bounty-5 | InfoSec Write-ups | ctf, conference, infosec, hacking, bug-bounty | 29-Nov-2023 |
| Top 25 Advanced Google Dorks for Uncovering Sensitive Documents | https://osintteam.blog/top-25-advanced-google-dorks-for-uncovering-sensitive-documents-a9705e05353d?source=rss------bug_bounty-5 | as-squirrel | osint, cybersecurity, hacking, google-dork, bug-bounty | 29-Nov-2023 |
| Fat GET Authorization Bypass | https://medium.com/techiepedia/fat-get-authorization-bypass-521a1ca37b6e?source=rss------bug_bounty-5 | Jess | programming, hackerone, security, bug-bounty, bug-bounty-tips | 29-Nov-2023 |
| HackTheBox — Web Attacks: Error Based XXE to exfiltrate data | https://medium.com/@harry.hphu/hackthebox-web-attacks-error-based-xxe-to-exfiltrate-data-3f577eef18c7?source=rss------bug_bounty-5 | Huy Phu | owasp-top-10, web-security, hackthebox, xxe-attack, bug-bounty | 28-Nov-2023 |
| HackTheBox — Web Attacks: XXE with Blind Exfiltration Data | https://medium.com/@harry.hphu/hackthebox-web-attacks-xxe-with-blind-exfiltration-data-123d4be1245e?source=rss------bug_bounty-5 | Huy Phu | bug-bounty, owasp-top-10, web-security, xxe-attack, hackthebox | 28-Nov-2023 |
| Catching C2s with Regex Signatures, TLS Certificates, and OSINT | https://medium.com/@paritoshblogs/catching-c2s-with-regex-signatures-tls-certificates-and-osint-8871d9a46602?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-security, cybersecurity, command-and-control, hacking | 28-Nov-2023 |
| Apple security research. | https://medium.com/@abhay2432455/apple-security-research-8780372757be?source=rss------bug_bounty-5 | Abhay Kailasia | google, apple, cybersecurity, bug-bounty, bug-bounty-writeup | 28-Nov-2023 |
| XSS - Weaponization ATO | https://p4n7h3rx.medium.com/xss-weaponization-ato-1de0ee30526b?source=rss------bug_bounty-5 | p4n7h3rx | penetration-testing, cybersecurity, infosec, bug-bounty-tips, bug-bounty | 28-Nov-2023 |
| 1.9 Lab: Visible error-based SQL injection | 2023 | https://cyberw1ng.medium.com/1-9-lab-visible-error-based-sql-injection-2023-771157e90ad8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, bug-bounty, careers, penetration-testing | 28-Nov-2023 |
| VulnLab — SQLi Injection series — Bypass Login | https://medium.com/@deandradarra05/vulnlab-sqli-injection-series-bypass-login-0d6af43a395d?source=rss------bug_bounty-5 | Deandradarra | penetration-testing, cybersecurity, bug-bounty, sqli | 28-Nov-2023 |
| The Bug Hunter’s Methodology Live Course Review | https://medium.com/@cybersekler/the-bug-hunters-methodology-live-course-review-4261a7a9121e?source=rss------bug_bounty-5 | Cyber Sekler | hacking, red-team, reconnaissance, bug-bounty, application-security | 28-Nov-2023 |
| Hall of Fame at NASA | https://medium.com/@bijoy.redteamacademy/hall-of-fame-at-nasa-91539af7826c?source=rss------bug_bounty-5 | BIJOY B | google-ads, hacker-news, google, nasa, bug-bounty | 28-Nov-2023 |
| Understanding and Mitigating Insecure Direct Object References (IDOR) Vulnerabilities | https://medium.com/@harry.hphu/understanding-and-mitigating-insecure-direct-object-references-idor-vulnerabilities-b27047015e15?source=rss------bug_bounty-5 | Huy Phu | idor-vulnerability, bug-bounty, web-security, owasp-top-10, hackthebox | 27-Nov-2023 |
| Burpsuite Custom Scan Profiles | https://mrrootsec.medium.com/burpsuite-custom-scan-profiles-12a9df9e36bd?source=rss------bug_bounty-5 | mrrootsec | owasp-top-10, bug-bounty, application-security-test | 27-Nov-2023 |
| Understanding XML External Entity (XXE) Vulnerabilities | https://medium.com/@harry.hphu/understanding-xml-external-entity-xxe-vulnerabilities-e8b64c2c2b3c?source=rss------bug_bounty-5 | Huy Phu | bug-bounty, owasp-top-10, xml-injection, hackthebox, web-security | 27-Nov-2023 |
| Confounding Adversaries Through the Art of Illusion | https://medium.com/@paritoshblogs/confounding-adversaries-through-the-art-of-illusion-5cc56090d93a?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-technology, information-security, cybersecurity, hacking | 27-Nov-2023 |
| Unveiling Critical Bug Using Directory Search — Bug Bounty Tip! | https://medium.com/@learningstuff110/unveiling-critical-bug-using-directory-search-bug-bounty-tip-330d4d9900ee?source=rss------bug_bounty-5 | Fahad Hasan | web-app-development, vulnerability, bug-bounty, cybersecurity, penetration-testing | 27-Nov-2023 |
| Confounding Adversaries Through the Art of Illusion | https://osintteam.blog/confounding-adversaries-through-the-art-of-illusion-5cc56090d93a?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-technology, information-security, cybersecurity, hacking | 27-Nov-2023 |
| Ruby One — Bug Bounty Program & Claim Your $RUBY | https://rubyprotocol.medium.com/ruby-one-bug-bounty-program-claim-your-ruby-848c81c4b164?source=rss------bug_bounty-5 | Ruby Protocol | blockchain, cryptocurrency, bug-bounty, crypto, ethereum | 27-Nov-2023 |
| HTTP/2 Request Smuggling | https://medium.com/@kerstanhgnhzhw/http-2-request-smuggling-eb56cfd84a37?source=rss------bug_bounty-5 | kerstan | web-security, bug-bounty, security, request-smuggling, pentesting | 27-Nov-2023 |
| Kaynak kodu ile XSS’i nasıl buldum ? | https://medium.com/@el-cezeri/kaynak-kodu-ile-xssi-nas%C4%B1l-buldum-9cf2632f4717?source=rss------bug_bounty-5 | Samet Yiğit | xss-attack, bug-bounty-tips, ödülavcılığı, bug-bounty | 27-Nov-2023 |
| Website Scanner… | https://medium.com/@psychomong/website-scanner-4856d77bc600?source=rss------bug_bounty-5 | psychomong | hacking, gui, scanner, bug-bounty, web | 27-Nov-2023 |
| @pdiscoveryio’s Katana for Bug Bounty. | https://medium.com/@BrownBearSec/pdiscoveryios-katana-for-bug-bounty-1aee11cfae14?source=rss------bug_bounty-5 | BrownBearSec | bug-bounty, cybersecurity, bug-bounty-tips, red-team, infosec | 27-Nov-2023 |
| 1.8 Lab: Blind SQL injection with conditional errors | 2023 | https://cyberw1ng.medium.com/1-8-lab-blind-sql-injection-with-conditional-errors-2023-da84a7836bcd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, hacking, careers, cybersecurity, bug-bounty | 27-Nov-2023 |
| My bug bounty journey: #1 Linux | https://medium.com/@VDMoscar/my-bug-bounty-journey-1-linux-176d3b4f4065?source=rss------bug_bounty-5 | Oscar Vandermeulen | bug-bounty, hacking | 27-Nov-2023 |
| Code4rena Audit | https://medium.com/@panoptic_xyz/code4rena-audit-96902468eece?source=rss------bug_bounty-5 | Panoptic | panoptic, audit, bug-bounty, perpetual-options | 27-Nov-2023 |
| “Navigating Risks: Vulnerability Stemming from a Third-Party Integration” | https://shubhdeepp.medium.com/navigating-risks-vulnerability-stemming-from-a-third-party-integration-c877d15977d8?source=rss------bug_bounty-5 | shubhdeep | vulnerability-assessment, vulnerability, cybersecurity, bug-bounty, supply-chain-management | 27-Nov-2023 |
| HackTheBox — Web Attacks: From XXE Injection to Advanced Local File Disclosure | https://medium.com/@harry.hphu/hackthebox-web-attacks-from-xxe-injection-to-advanced-local-file-disclosure-64d1bf5acdca?source=rss------bug_bounty-5 | Huy Phu | web-security, owasp-top-10, bug-bounty, xxe-attack, hackthebox | 27-Nov-2023 |
| HackTheBox — Web Attacks: Mass IDOR enumeration | https://medium.com/@harry.hphu/hackthebox-web-attacks-mass-idor-enumeration-dc12da1f6333?source=rss------bug_bounty-5 | Huy Phu | hackthebox, owasp-top-10, bug-bounty, web-attack, mass-idor-enumeration | 26-Nov-2023 |
| Bug Zero at a Glance [01–18 November] | https://blog.bugzero.io/bug-zero-at-a-glance-01-18-november-1cfce20b881c?source=rss------bug_bounty-5 | Januka Dharmapriya | bug-zero, cybersecurity, bug-bounty, sri-lanka, newsletter | 26-Nov-2023 |
| HackTheBox — Web Attacks — IDOR: Bypassing Encoded References | https://medium.com/@harry.hphu/hackthebox-web-attacks-idor-bypassing-encoded-references-4e28008120fc?source=rss------bug_bounty-5 | Huy Phu | idor-vulnerability, web-security, bug-bounty, hackthebox-writeup, owasp-top-10 | 26-Nov-2023 |
| Waybackurls leads to pwned Admin Panel | https://medium.com/@cybersolution2172/waybackurls-leads-to-pwned-admin-panel-ac3f728b87ac?source=rss------bug_bounty-5 | Satyam Singh | infosec, bug-bounty, bug-bounty-tips, hacking, vulnerability | 26-Nov-2023 |
| A Thrilling Expedition into AWS Security | https://medium.com/@paritoshblogs/a-thrilling-expedition-into-aws-security-bbce85cd1eed?source=rss------bug_bounty-5 | Paritosh | aws-security, aws, bug-bounty, information-security, cybersecurity | 26-Nov-2023 |
| Story of Http password reset link for $$$ | https://devanshchauhan4565.medium.com/story-of-http-password-reset-link-for-15b583519e03?source=rss------bug_bounty-5 | Devansh chauhan | writing-tips, bug-bounty, bug-bounty-tips | 26-Nov-2023 |
| HackTheBox — Web Attacks: IDOR in Insecure APIs Write up | https://medium.com/@harry.hphu/hackthebox-web-attacks-idor-in-insecure-apis-write-up-7adcf4e68968?source=rss------bug_bounty-5 | Huy Phu | hackthebox, owasp-top-10, idor-vulnerability, bug-bounty, api-security | 26-Nov-2023 |
| CSRF Bug Hunting Methodology: Intermediate | https://medium.com/@drthkol478/csrf-bug-hunting-methodology-intermediate-4d0df3b63b59?source=rss------bug_bounty-5 | Mikołaj Prus ( nullorx ) | network, web-app-security, bug-bounty, csrf, application-security | 26-Nov-2023 |
| Explorando redes com ESP32 WIFI. | https://higordiego.medium.com/explorando-redes-com-esp32-wifi-5b15d48d0880?source=rss------bug_bounty-5 | Higor Diego | bug-bounty, pentesting, wifi, tutorial, iot | 26-Nov-2023 |
| 1.7 Lab: Blind SQL injection with conditional responses | 2023 | https://cyberw1ng.medium.com/1-7-lab-blind-sql-injection-with-conditional-responses-2023-db2102f1ce44?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, careers, bug-bounty, hacking, cybersecurity | 26-Nov-2023 |
| Exploring Networks with ESP32 WIFI. | https://higordiego.medium.com/exploring-networks-with-esp32-wifi-778a8d42b7f1?source=rss------bug_bounty-5 | Higor Diego | network-security, pentesting, iot-security, osint, bug-bounty | 26-Nov-2023 |
| Mastering the Art of Bug Bounty Reconnaissance | https://medium.com/@faizankhaliq26/mastering-the-art-of-bug-bounty-reconnaissance-5e1ec42fc405?source=rss------bug_bounty-5 | MUHAMMAD FAIZAN KHAN | web-application-testing, recon, information-gathering, web-application-security, bug-bounty | 26-Nov-2023 |
| Writeup Bugcrowd — Private program — QR codes | https://medium.com/@embossdotar/writeup-bugcrowd-private-program-qr-codes-fa338161175a?source=rss------bug_bounty-5 | embossdotar | bugcrowd, writeup, bug-bounty, it-security, cybersecurity | 26-Nov-2023 |
| How I Made $$$ Using Open-Redirect | https://medium.com/@rahulnakum/how-i-made-using-open-redirect-799f9ab14bda?source=rss------bug_bounty-5 | Rahul Nakum | bug-bounty | 25-Nov-2023 |
| What Happens When Hackers Gain Local Account Access !! | https://medium.com/@paritoshblogs/what-happens-when-hackers-gain-local-account-access-64fc39ed25f5?source=rss------bug_bounty-5 | Paritosh | pentesting, bug-bounty, programming, cybersecurity, hacking | 25-Nov-2023 |
| First massive bug: Noise’s AWS Bucket Misconfiguration | https://anshjain-napster.medium.com/first-massive-bug-noises-aws-bucket-misconfiguration-802821ed98b6?source=rss------bug_bounty-5 | Napster_Ansh | vulnerability, bug-bounty, aws-s3, cybersecurity, security | 25-Nov-2023 |
| how to install waybackurls on parrot OS in 3 simple steps | https://medium.com/@diy_tech_genuis/how-to-install-waybackurls-on-parrot-os-in-3-simple-steps-fb4746302647?source=rss------bug_bounty-5 | diy_tech_genuis | hacking, diytechgenius, waybackurls, bug-bounty, parrotos | 25-Nov-2023 |
| 1.6 Lab: SQL injection UNION attack, retrieving multiple values in a single column | 2023 | https://cyberw1ng.medium.com/1-6-lab-sql-injection-union-attack-retrieving-multiple-values-in-a-single-column-2023-6fb957198939?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, cybersecurity, bug-bounty, hacking | 25-Nov-2023 |
| Detecting and Confirming Exfiltration Activity Through Endpoint Detection and Response (EDR) | https://medium.com/@paritoshblogs/detecting-and-confirming-exfiltration-activity-through-endpoint-detection-and-response-edr-6ff4c89e9847?source=rss------bug_bounty-5 | Paritosh | hacking, cybersecurity, bug-bounty, information-security, edr | 25-Nov-2023 |
| 5 thing most new bug bounty hunters do wrong | https://medium.com/@diy_tech_genuis/5-thing-most-new-bug-bounty-hunters-do-wrong-321cb152363c?source=rss------bug_bounty-5 | diy_tech_genuis | diytechgenius, hacking, help, tips, bug-bounty | 25-Nov-2023 |
| $20,000 Paid For A Bug That No One Has Ever Expected | https://siddardajagabathina.medium.com/20-000-paid-for-a-bug-that-no-one-has-ever-expected-5a4778620999?source=rss------bug_bounty-5 | SIDDARDA GOWTHAM JAGABATHINA | hackerone, bug-bounty, bugs, cybersecurity, cybersecurity-awareness | 25-Nov-2023 |
| Critical misconfiguration in Firebase-Bug bounty | https://medium.com/@facu.tha/critical-misconfiguration-in-firebase-e682ec4239d6?source=rss------bug_bounty-5 | Facundo Fernandez | hacking, bug-bounty, penetration-testing, cybersecurity, bug-bounty-tips | 25-Nov-2023 |
| Introduction to Cybersecurity for Beginners: Understanding the Digital Security World | https://medium.com/@fiqrifirdaus/introduction-to-cybersecurity-for-beginners-understanding-the-digital-security-world-f136896cda85?source=rss------bug_bounty-5 | Aditya Fiqri Firdaus | bug-bounty, cyber, cybersecurity, malware | 25-Nov-2023 |
| How i get my first Logic Bug and how to find them | https://medium.com/@zomasec/how-i-get-my-first-logic-bug-and-how-to-find-them-dd5fdf6478ee?source=rss------bug_bounty-5 | Hazem El-Sayed | cybersecurity, web-security, bug-bounty-tips, bug-bounty, bugs | 25-Nov-2023 |
| How to Find First Bug (For Beginners) | https://medium.com/@rajput623929/how-to-find-first-bug-for-beginners-f594230f9e36?source=rss------bug_bounty-5 | Mr.Horbio | cybersecurity, penetration-testing, bug-bounty, hacking, tricks | 24-Nov-2023 |
| Bash Scripting Logic Section Part 01 | https://medium.com/@Rat_Attack72/bash-scripting-logic-section-part-01-a7424f4dd6c2?source=rss------bug_bounty-5 | Rat_Attack72 | cybersecurity, bash, shell-script, bug-bounty, automation | 24-Nov-2023 |
| 1.5 Lab: SQL injection UNION attack, retrieving data from other tables | 2023 | https://cyberw1ng.medium.com/1-5-lab-sql-injection-union-attack-retrieving-data-from-other-tables-2023-3e13076915fa?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, careers, cybersecurity | 24-Nov-2023 |
| Breaking the HTTPS Barrier: A Hacker’s Guide to Sneaky Link Exploits! | https://medium.com/@mohammedthoufeeq_25137/breaking-the-https-barrier-a-hackers-guide-to-sneaky-link-exploits-622b07710a1c?source=rss------bug_bounty-5 | Mohamed Thoufeeq | cybersecurity, hackthebox, bug-bounty, hacking, programming | 24-Nov-2023 |
| Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 5 | https://medium.com/@hackersdump0/diving-deep-a-comprehensive-guide-to-android-penetration-testing-part-5-c1343b0f0ef9?source=rss------bug_bounty-5 | Hacker's Dump | hacking, bug-bounty, android, pentesting, penetration-testing | 24-Nov-2023 |
| Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 4 | https://medium.com/@hackersdump0/diving-deep-a-comprehensive-guide-to-android-penetration-testing-part-4-9bba2880b8cb?source=rss------bug_bounty-5 | Hacker's Dump | bug-bounty, android, hacking, penetration-testing, hacker | 24-Nov-2023 |
| Bug Hunter GPT: A Game-Changer in Cybersecurity | https://medium.com/@multiplatform.ai/bug-hunter-gpt-a-game-changer-in-cybersecurity-b25ccbab2f93?source=rss------bug_bounty-5 | Multiplatform.AI | bug-bounty, ai, bughuntergpt, ai-assistant, artificial-intelligence | 24-Nov-2023 |
| Cybersecurity Challenges with TryHackMe: A Hands-On Approach | https://medium.com/@paritoshblogs/cybersecurity-challenges-with-tryhackme-a-hands-on-approach-e62f76a50446?source=rss------bug_bounty-5 | Paritosh | tryhackme, programming, hacking, bug-bounty, cybersecurity | 23-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 17/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-17-25-f1337a6f4e66?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty, bug-bounty-tips, bug-bounty-hunting | 23-Nov-2023 |
| Yet Another Rate Limit. | https://allenlopes23.medium.com/yet-another-rate-limit-71257e7b33a2?source=rss------bug_bounty-5 | Allen Lopes | vulnerability, rate-limiting, bug-bounty | 23-Nov-2023 |
| 1.4 Lab: SQL injection UNION attack, finding a column containing text | 2023 | https://cyberw1ng.medium.com/1-4-lab-sql-injection-union-attack-finding-a-column-containing-text-2023-94f3ee243db8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, hacking, cybersecurity, careers | 23-Nov-2023 |
| bWAPP iFrame Injection | https://medium.com/@yusufbaris/bwapp-iframe-injection-22bee548c30a?source=rss------bug_bounty-5 | Yusuf Barış | cybersecurity, penetration-testing, bug-bounty, web-security, hacking | 23-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 18/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-18-25-924740430094?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunting, bug-bounty-hunter, bug-bounty-tips, bug-bounty | 23-Nov-2023 |
| Powershell/JS Payloads: A Closer Look at Malicious Code Delivery | https://medium.com/@paritoshblogs/powershell-js-payloads-a-closer-look-at-malicious-code-delivery-818b0ee743a3?source=rss------bug_bounty-5 | Paritosh | programming, hacking, bug-bounty, information-security, cybersecurity | 22-Nov-2023 |
| 7 Sneaky Hacks Cybercriminals Use to Outsmart Your Antivirus! | https://medium.com/@paritoshblogs/7-sneaky-hacks-cybercriminals-use-to-outsmart-your-antivirus-66953a606a53?source=rss------bug_bounty-5 | Paritosh | antivirus, cybersecurity, hacking, bug-bounty, darkweb | 22-Nov-2023 |
| Apple webserver vulnerable for HTTP request Sumggling attack | https://medium.com/@abdulriyaz1200/apple-webserver-vulnerable-for-http-request-sumggling-attack-cabe1d53dab1?source=rss------bug_bounty-5 | Abdulriyaz | bug-bounty-tips, bug-bounty, bug-bounty-writeup, apple, hall-of-fame | 22-Nov-2023 |
| 200$ bounty for CRLF injection Attack | https://medium.com/@abdulriyaz1200/200-bounty-for-crlf-injection-attack-39c482bad796?source=rss------bug_bounty-5 | Abdulriyaz | bug-bounty, bug-bounty-tips, hall-of-fame, bugbounty-writeup | 22-Nov-2023 |
| Mass Hunting XSS vulnerabilities | https://ott3rly.medium.com/mass-hunting-xss-vulnerabilities-5b53363dd3db?source=rss------bug_bounty-5 | Ott3rly | bug-bounty-tips, bug-bounty, cross-site-scripting, bug-bounty-hunter, xss-vulnerability | 22-Nov-2023 |
| Google dorking is one of the best method | Hall of fame from XXX.gov | https://medium.com/@abdulriyaz1200/google-dorking-is-one-of-the-best-method-hall-of-fame-from-xxx-gov-8db6aa3c69f3?source=rss------bug_bounty-5 | Abdulriyaz | bug-bounty, government, bug-bounty-tips | 22-Nov-2023 |
| 1.3 Lab: SQL injection UNION attack, determining the number of columns returned by the query | 2023 | https://cyberw1ng.medium.com/1-3-lab-sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query-2023-441930bf38b7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, penetration-testing, hacking, careers, cybersecurity | 22-Nov-2023 |
| Exploiting Exposed .git File to Access Webmail Credentials | https://medium.com/@tanyago/exploiting-exposed-git-file-to-access-webmail-credentials-4b47a3afff38?source=rss------bug_bounty-5 | Tanya Goyal | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-hunting | 22-Nov-2023 |
| Mass Hunting XSS vulnerabilities | https://infosecwriteups.com/mass-hunting-xss-vulnerabilities-5b53363dd3db?source=rss------bug_bounty-5 | Ott3rly | bug-bounty-tips, bug-bounty, cross-site-scripting, bug-bounty-hunter, xss-vulnerability | 22-Nov-2023 |
| Hoping for a Bug Bounty This Year at AWS re:Invent :^) | https://medium.com/cloud-security/hoping-for-a-bug-bounty-this-year-at-aws-re-invent-5c8a76d09514?source=rss------bug_bounty-5 | Teri Radichel | awswishlist, cloud, aws, bug-bounty, security | 22-Nov-2023 |
| Bug Hunter jornal Day #0 | https://medium.com/@joaomaia171820/bug-hunter-jornal-day-0-7a451f0292aa?source=rss------bug_bounty-5 | Jhonny_The_Kid | cybersecurity, bug-bounty-writeup, bug-bounty-program, bug-bounty, hacking | 22-Nov-2023 |
| SAML authentication bypass leads to account takeover | https://medium.com/@Xt3sY/saml-authentication-bypass-leads-to-account-takeover-f9aaa37a34fe?source=rss------bug_bounty-5 | Pushkar Bhagat | bugs, bug-bounty, hacking, hackerone | 22-Nov-2023 |
| How to earn $DCT on DecentraCredit Testnet V1 on Arbitrum | https://decentracredit.medium.com/how-to-earn-dct-on-decentracredit-testnet-v1-on-arbitrum-915d9995c2e4?source=rss------bug_bounty-5 | Decentra Credit | arbitrum, testnet-airdrop, bug-bounty, ethereum, airdrop | 22-Nov-2023 |
| Semi-Automating IDORs: A Practical Approach to Working Smarter, Not Harder | https://mux0xx.medium.com/semi-automating-idors-a-practical-approach-to-working-smarter-not-harder-5b7f1f47b55a?source=rss------bug_bounty-5 | Muhammed K. Sayed | bug-bounty, cybersecurity, hacker, idor, hacking | 22-Nov-2023 |
| Embracing the Future: Bug Bounty Hunting as a Lucrative Full-Time Career | https://infosecwriteups.com/embracing-the-future-bug-bounty-hunting-as-a-lucrative-full-time-career-3e4b147923f7?source=rss------bug_bounty-5 | Security Lit Limited | penetration-testing, vulnerability, bug-bounty-tips, bug-bounty, cybersecurity | 22-Nov-2023 |
| How i hacked a router (embedded system) | https://medium.com/@Threat_Intelligence/how-i-hacked-a-router-embedded-system-9a5b8139e83e?source=rss------bug_bounty-5 | 127.0.0.1 is safe.⚠️ | cybersecurity, tecnologia, hacking, bug-bounty, red-team | 22-Nov-2023 |
| My First IDOR - Hiding in the Header Request | https://medium.com/@hbenja47/my-first-idor-hiding-in-the-header-request-8a03dddc23b5?source=rss------bug_bounty-5 | Benja (bronxi) | hacker, bug-bounty, idor, hacking | 21-Nov-2023 |
| Chaining CORS by Reflected XSS to Steal Sensitive Data | https://infosecwriteups.com/chaining-cors-by-reflected-xss-to-steal-sensitive-data-c456e133c10d?source=rss------bug_bounty-5 | Mohammad reza Omrani | cybersecurity, infosec, steal-sensitive-data, cors-misconfiguration, bug-bounty | 21-Nov-2023 |
| What is Next-Generation Antivirus (NGAV) ? | https://medium.com/@paritoshblogs/what-is-next-generation-antivirus-ngav-f05267dd2613?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-security, cybersecurity, hacking, antivirus | 21-Nov-2023 |
| Top Recon Tools for Bug Bounty Hunters | https://securitycipher.medium.com/top-recon-tools-for-bug-bounty-hunters-fa655b8caf2e?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | bug-bounty, bug-bounty-tips, programming, cybersecurity, technology | 21-Nov-2023 |
| Epic Bug Hunting Failures-2 | https://infosecwriteups.com/epic-bug-hunting-failures-2-fafb2af9b844?source=rss------bug_bounty-5 | Varshini Ramesh | development, hackerone, bug-bounty, cybersecurity, info-sec-writeups | 21-Nov-2023 |
| The Crossroads of Code Crafting: A Personal Journey Between Rewriting and Quick Fixes | https://blursdaywtf.medium.com/the-crossroads-of-code-crafting-a-personal-journey-between-rewriting-and-quick-fixes-8ab18e5a9a60?source=rss------bug_bounty-5 | Blursday | coding, tech, bug-bounty, founders, apps | 21-Nov-2023 |
| How I Gain $2,000-$3,000 a Month From Bug Bounties With No Code Experience | https://medium.com/@13032765d/how-i-gain-2-000-3-000-a-month-from-bug-bounties-with-no-code-experience-df2e89348fbb?source=rss------bug_bounty-5 | DataPsyLife | money, hacking, side-hustle, bug-bounty, freelancing | 21-Nov-2023 |
| Cybersecurity Tools | https://bineshmadharapu.medium.com/cybersecurity-tools-02e85cb3c4ed?source=rss------bug_bounty-5 | Binesh Madharapu | cybersecurity, bug-bounty, network-security, nmap, ethical-hacking | 21-Nov-2023 |
| CVE-2023–47837: ARMember ≤= 4.0.10 — Bypass Membership Plan | https://revan-ar.medium.com/cve-2023-47837-armember-4-0-10-bypass-membership-plan-4bc1e63f044c?source=rss------bug_bounty-5 | Revan A | bug-bounty, wordpress, cve, bypass, privilege-escalation | 21-Nov-2023 |
| SQL Injection UNION Attacks in Web App Pentesting | 2023 | https://cyberw1ng.medium.com/sql-injection-union-attacks-in-web-app-pentesting-2023-fbd072299b77?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, hacking, careers, bug-bounty, cybersecurity | 21-Nov-2023 |
| How to find sensitive information in an organization | (Como encontrar información sensible en una… | https://medium.com/@l0calh0st/how-to-find-sensitive-information-in-an-organization-como-encontrar-informaci%C3%B3n-sensible-en-una-cb08c5128ab5?source=rss------bug_bounty-5 | 127.0.0.1 is safe.⚠️ | tech, hacking, red-team, bug-bounty, cybersecurity | 21-Nov-2023 |
| How I hacked Google’s bug tracking system itself for $15,600 in bounties | https://jamilahmad-dev.medium.com/how-i-hacked-googles-bug-tracking-system-itself-for-15-600-in-bounties-0e9e36b772b9?source=rss------bug_bounty-5 | Jamil Ur Rehman | startup, bug-bounty, security, google, technology | 21-Nov-2023 |
| CRITICAL BUG Alert: How I HACKED into a company’s DATABASE | https://jamilahmad-dev.medium.com/critical-bug-alert-how-i-hacked-into-a-companys-database-fc61179f5d5d?source=rss------bug_bounty-5 | Jamil Ur Rehman | hacking, bug-bounty-writeup, bug-bounty-tips, bug-bounty, ethical-hacking | 21-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 16/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-16-25-f881c177b749?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunting, bug-bounty-tips, bug-bounty, bug-bounty-hunter | 21-Nov-2023 |
| Detecting and Understanding Cookies in Web Development | https://medium.com/@nirvana.elahi/detecting-and-understanding-cookies-in-web-development-a520b279988b?source=rss------bug_bounty-5 | Nirvana El | owasp-top-10, cybersecurity, bug-bounty, penetration-testing | 21-Nov-2023 |
| How to find sensitive information in an organization . | https://medium.com/@Threat_Intelligence/how-to-find-sensitive-information-in-an-organization-como-encontrar-informaci%C3%B3n-sensible-en-una-cb08c5128ab5?source=rss------bug_bounty-5 | 127.0.0.1 is safe.⚠️ | tech, hacking, red-team, bug-bounty, cybersecurity | 21-Nov-2023 |
| Step-by-Step guide to writing a Metasploit Script | https://higordiego.medium.com/step-by-step-guide-to-writing-a-metasploit-script-6bacb96363e5?source=rss------bug_bounty-5 | Higor Diego | vulnerability, exploit, bug-bounty, security, osint | 21-Nov-2023 |
| Legal and Ethical Dimensions in Malware Analysis (Cybersecurity) | https://medium.com/@paritoshblogs/legal-and-ethical-dimensions-in-malware-analysis-cybersecurity-86accca12049?source=rss------bug_bounty-5 | Paritosh | cybersecurity, bug-bounty, legal, programming, hacking | 20-Nov-2023 |
| Improper Input Sanitization Error in Web3 | https://medium.com/@vinaysati/improper-input-sanitization-error-in-web3-f4bd0f6d88cc?source=rss------bug_bounty-5 | Vinaysati | hacking, cryptocurrency, bug-bounty, web3, web3bug | 20-Nov-2023 |
| #3 Set-up FoxyProxy in Firefox — Guide for Burp Suite | https://securitycipher.medium.com/3-set-up-foxyproxy-in-firefox-guide-for-burp-suite-ee9627b6f513?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | security, bug-bounty-tips, bug-bounty, penetration-testing, technology | 20-Nov-2023 |
| Event Driven Bug Bounty on AWS | https://medium.com/@husein.ayoub/event-driven-bug-bounty-on-aws-d39f75d962a3?source=rss------bug_bounty-5 | Hussein Ayoub | aws, bug-bounty, security | 20-Nov-2023 |
| The Story of How I Hacked one of the online payment system website twice | https://christmex.medium.com/the-story-of-how-i-hacked-one-of-the-online-payment-system-website-twice-b0ba48ed13db?source=rss------bug_bounty-5 | Jonathan Christian | bug-bounty-writeup, programming, technology, cybersecurity, bug-bounty | 20-Nov-2023 |
| ESSENTIAL HTML FOR HACKERS | https://medium.com/@agapehearts/essential-html-for-hackers-12d329927c9b?source=rss------bug_bounty-5 | Agape HearTs | xss-attack, bug-bounty, html, hacker, pentesting | 20-Nov-2023 |
| Writeups of All Apprentice Labs in Portswigger — All Lab’s Solution| Karthikeyan Nagaraj | https://cyberw1ng.medium.com/writeups-of-all-apprentice-labs-in-portswigger-all-labs-solution-karthikeyan-nagaraj-a5f23fd0c87b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, penetration-testing, hacking | 20-Nov-2023 |
| Go Beyond with Gretire | https://systemweakness.com/go-beyond-with-gretire-313b7fbe3f47?source=rss------bug_bounty-5 | Whalebone | cybersecurity, bug-bounty, open-source, information-security, hacking | 20-Nov-2023 |
| Email address: The Online ID | https://medium.com/@duncanochieng682/email-address-the-online-id-dd0061bf7828?source=rss------bug_bounty-5 | JateloCybersec | infosec, hacking, bug-bounty, ethical-hacking, blackhat | 20-Nov-2023 |
| Understanding CVE-2023–46604: A Threat to Apache ActiveMQ | https://infosecwriteups.com/understanding-cve-2023-46604-a-threat-to-apache-activemq-d771eb408eba?source=rss------bug_bounty-5 | Security Lit Limited | bug-bounty, vulnerability, cybersecurity, programming, penetration-testing | 20-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 15/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-15-25-27d085f4bf95?source=rss------bug_bounty-5 | Wallotry | bug-bounty-tips, bug-bounty-hunting, bug-bounty-hunter, bug-bounty | 20-Nov-2023 |
| Understanding CVE-2023–46604: A Threat to Apache ActiveMQ | https://securitylit.medium.com/understanding-cve-2023-46604-a-threat-to-apache-activemq-d771eb408eba?source=rss------bug_bounty-5 | Security Lit Limited | bug-bounty, vulnerability, cybersecurity, programming, penetration-testing | 20-Nov-2023 |
| The Story of How I Hacked one of the online payment system website | https://christmex.medium.com/the-story-of-how-i-hacked-one-of-the-online-payment-system-website-twice-b0ba48ed13db?source=rss------bug_bounty-5 | Jonathan Christian | bug-bounty-writeup, programming, technology, cybersecurity, bug-bounty | 20-Nov-2023 |
| GraphQL Misconfiguration Leads to Unlimited Money Transfer (Intigriti CTF — Bug Bank) | https://medium.com/@thewolfsec/graphql-misconfiguration-leads-to-unlimited-money-transfer-intigriti-ctf-bug-bank-48cdeb9c9aec?source=rss------bug_bounty-5 | TheWolf Sec | graphql, intigriti, bug-bounty, ctf | 19-Nov-2023 |
| #2 Different Burp Suite Tools — Guide for Burp Suite | https://securitycipher.medium.com/2-different-burp-suite-tools-guide-for-burp-suite-7c5aa2ad05ed?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | penetration-testing, bug-bounty, security, cybersecurity, news | 19-Nov-2023 |
| Find Vulnerabilities before other Hackers Exploiting | https://medium.com/@salmanul060/find-vulnerabilities-before-other-hackers-exploiting-a86fe4c3d5eb?source=rss------bug_bounty-5 | Salmanul Faris | web-applications, cybersecurity, bug-bounty, penetrationtestingcompany, penetration-testing | 19-Nov-2023 |
| SSTI bypass using CRLF (1337 UP CTF — Smarty Pants) | https://medium.com/@thewolfsec/ssti-bypass-using-crlf-1337-up-ctf-smarty-pants-4ee8e1a72f98?source=rss------bug_bounty-5 | TheWolf Sec | intigriti, ssti, bug-bounty, ctf, php-developers | 19-Nov-2023 |
| Privilege Escalation: Unauthorized Low-Privilege Users Creating Feature Bundles | https://medium.com/@a13h1/privilege-escalation-unauthorized-low-privilege-users-creating-feature-bundles-75f6125eec78?source=rss------bug_bounty-5 | Abhi Sharma | bug-bounty, programming, cybersecurity, hacking, api | 19-Nov-2023 |
| #2 Different Burp Suite Tools — Guide for Burp Suite | https://infosecwriteups.com/2-different-burp-suite-tools-guide-for-burp-suite-7c5aa2ad05ed?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | penetration-testing, bug-bounty, security, cybersecurity, news | 19-Nov-2023 |
| Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 3 | https://medium.com/@hackersdump0/diving-deep-a-comprehensive-guide-to-android-penetration-testing-part-3-99e86d021190?source=rss------bug_bounty-5 | Hacker's Dump | android, android-pentesting, penetration-testing, hacking, bug-bounty | 19-Nov-2023 |
| Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 4 | https://medium.com/@hackersdump0/diving-deep-a-comprehensive-guide-to-android-penetration-testing-part-4-c942fbd9cae5?source=rss------bug_bounty-5 | Hacker's Dump | bug-bounty, hacking, android, penetration-test, penetration-testing | 19-Nov-2023 |
| 23.6 Lab: Insecure direct object references | 2023 | https://cyberw1ng.medium.com/23-6-lab-insecure-direct-object-references-2023-dfd4a9f3eeb3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, penetration-testing, hacking | 19-Nov-2023 |
| A Guide to Indicators of Compromise (IoC) Analysis | https://medium.com/@paritoshblogs/a-guide-to-indicators-of-compromise-ioc-analysis-925708cbf8aa?source=rss------bug_bounty-5 | Paritosh | programming, bug-bounty, ioc, hacking, cybersecurity | 19-Nov-2023 |
| ByteGuard: Mastering the Art of Data Security | https://medium.com/@paritoshblogs/byteguard-mastering-the-art-of-data-security-5719be0d1c7c?source=rss------bug_bounty-5 | Paritosh | information-security, data-security, cybersecurity, data, bug-bounty | 18-Nov-2023 |
| Securing the Backbone: Supply Chain Security | https://medium.com/@paritoshblogs/securing-the-backbone-supply-chain-security-34282b6b505f?source=rss------bug_bounty-5 | Paritosh | supply-chain, information-security, cybersecurity, supply-chain-attack, bug-bounty | 18-Nov-2023 |
| eWPTX Prepare Resources | https://medium.com/@0UN390/ewptx-prepare-resources-a741220cf145?source=rss------bug_bounty-5 | 0UN390 | bug-bounty, cybersecurity, web-security, penetration-testing | 18-Nov-2023 |
| AppSec Tales XXIII | XPathI | https://karol-mazurek95.medium.com/appsec-tales-xxiii-xpathi-ca6171826d2a?source=rss------bug_bounty-5 | Karol Mazurek | information-technology, cybersecurity, application-security, bug-bounty, penetration-testing | 18-Nov-2023 |
| #Day6 Bug Bounty Recon Part 2: ( Subdomains and S3 buckets ) | https://medium.com/codingninjablogs/day6-bug-bounty-recon-part-2-subdomains-and-s3-buckets-1a01780e6908?source=rss------bug_bounty-5 | OBSIDIAN | programming, technology, bug-bounty, ethical-hacking, cybersecurity | 18-Nov-2023 |
| 23.5 Lab: User ID controlled by request parameter with password disclosure | 2023 | https://cyberw1ng.medium.com/23-5-lab-user-id-controlled-by-request-parameter-with-password-disclosure-2023-ad748d1daa9e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, hacking, penetration-testing | 18-Nov-2023 |
| Hacking Microsoft IIS : Enumerating IIS for V | https://medium.com/@mudasserhussain1111/hacking-microsoft-iis-enumerating-iis-for-v-39de5a27f101?source=rss------bug_bounty-5 | Mudasser Hussain | infosec-write-ups, cybersecurity, hacking, microsoft, bug-bounty | 18-Nov-2023 |
| OAuth Misconfiguration Leads To Pre-Account Takeover(snapchat) | https://medium.com/@a7med.ctf/oauth-misconfiguration-leads-to-pre-account-takeover-snapchat-129b118661f6?source=rss------bug_bounty-5 | Ahmed Mahmoued | hacking, bug-bounty-tips, bug-bounty | 18-Nov-2023 |
| CVE-2023–36025: An In-Depth Analysis of Circumventing Windows SmartScreen Security | https://infosecwriteups.com/cve-2023-36025-an-in-depth-analysis-of-circumventing-windows-smartscreen-security-6ff05c8b69d0?source=rss------bug_bounty-5 | Security Lit Limited | penetration-testing, threat-intelligence, cybersecurity, microsoft, bug-bounty | 18-Nov-2023 |
| Default Credentials, P1 with $$$$ Reward in a Bug Bounty Program | https://medium.com/@jedus0r/default-credentials-p1-with-reward-in-a-bug-bounty-program-1aad9c008619?source=rss------bug_bounty-5 | jedus0r | security-research, bug-bounty, bug-bounty-tips, bug-bounty-writeup, bug-bounty-hunter | 18-Nov-2023 |
| CVE-2023–35078 Unveiled: Ethical Vulnerability Discovery and Reporting By Me and My Hunting Buddy… | https://medium.com/@jaini.rutvik/cve-2023-35078-unveiled-ethical-vulnerability-discovery-and-reporting-by-me-and-my-hunting-buddy-507582baf5c3?source=rss------bug_bounty-5 | Rj07 | responsible-disclosure, information-technology, zero-day, bug-bounty, information-security | 18-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 13/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-13-25-f6e21379749b?source=rss------bug_bounty-5 | Wallotry | bug-bounty, bug-bounty-hunter, bug-bounty-hunting, bug-bounty-tips | 18-Nov-2023 |
| Default Credentials, P1 with $$$$ Reward in a Bug Bounty Program | https://systemweakness.com/default-credentials-p1-with-reward-in-a-bug-bounty-program-1aad9c008619?source=rss------bug_bounty-5 | jedus0r | security-research, bug-bounty, bug-bounty-tips, bug-bounty-writeup, bug-bounty-hunter | 18-Nov-2023 |
| The Future of Cybersecurity: The Power of AI-Powered SIEM | https://medium.com/@paritoshblogs/the-future-of-cybersecurity-the-power-of-ai-powered-siem-ae43921e9bce?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-security, siem, hacking, cybersecurity | 17-Nov-2023 |
| 3 Command Line Games Which You Must Try | https://medium.com/@rushi.padhiyar098/3-command-line-games-which-you-must-try-fa77c2ff7127?source=rss------bug_bounty-5 | Cyph3r Ryx | games, cybersecurity, hacking, command-line, bug-bounty | 17-Nov-2023 |
| Dastardly — Web Application Security Scanner — CI/CD | https://securitycipher.medium.com/dastardly-web-application-security-scanner-ci-cd-3a4eea08719a?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | technology, security, bug-bounty, cybersecurity, penetration-testing | 17-Nov-2023 |
| How I Automatically Generate XSS Payload & Automate Reflected XSS | https://ajaksecurity.medium.com/how-i-automatically-generate-xss-payload-automate-reflected-xss-be7c993f90d4?source=rss------bug_bounty-5 | Ajak Cyber security | hacking, cybersecurity, bug-bounty, ethical-hacking, penetration-testing | 17-Nov-2023 |
| 23.4 Lab: User ID controlled by request parameter with data leakage in redirect | 2023 | https://cyberw1ng.medium.com/23-4-lab-user-id-controlled-by-request-parameter-with-data-leakage-in-redirect-2023-5fa1b18bced1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, careers, bug-bounty, cybersecurity, security | 17-Nov-2023 |
| Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 2 | https://medium.com/@hackersdump0/diving-deep-a-comprehensive-guide-to-android-penetration-testing-part-2-9c33c319a696?source=rss------bug_bounty-5 | Hacker's Dump | android-pentesting, android, penetration-testing, hacking, bug-bounty | 17-Nov-2023 |
| How to find vulnerabilities in a web page in 10 minutes | https://medium.com/@l0calh0st/how-to-find-vulnerabilities-in-a-web-page-in-10-minutes-66cd052b4fbc?source=rss------bug_bounty-5 | 127.0.0.1 is safe.⚠️ | red-team, bug-bounty, error-message, cybersecurity, hacking | 17-Nov-2023 |
| Access control vulnerabilities | https://medium.com/@abdullahwarsama28/access-control-vulnerabilities-02fe3ea2e17f?source=rss------bug_bounty-5 | Abdullah Warsama | bug-bounty, web-security | 17-Nov-2023 |
| JWT Intrigue: Hidden Keys within Web Applications | https://medium.com/@josh.beck2006/jwt-intrigue-hidden-keys-within-web-applications-4b042c80f427?source=rss------bug_bounty-5 | Josh Beck | penetration-testing, bug-bounty, cybersecurity, ctf-writeup, ctf | 16-Nov-2023 |
| AuditOne Roundtable with Alexey from Aurora and Guido Vranken | https://medium.com/@auditone.io/auditone-roundtable-with-alexey-from-aurora-and-guido-vranken-3d7c709289c0?source=rss------bug_bounty-5 | AuditOne | bug-bounty, defi, web3, aurora, fuzzing | 16-Nov-2023 |
| #1 Introduction to Burp Suite — Guide for Burp Suite | https://securitycipher.medium.com/1-introduction-to-burp-suite-guide-for-burp-suite-4054b64f10a0?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | penetration-testing, bug-bounty, cybersecurity, technology, security | 16-Nov-2023 |
| Easy Admin Access — RVDP | https://infosecwriteups.com/easy-admin-access-rvdp-d1eb2c97cb3e?source=rss------bug_bounty-5 | hackerdevil | bug-bounty-tips, web-app-security, bug-bounty, bug-bounty-writeup, vulnerability-assessment | 16-Nov-2023 |
| Bug Bounty Programs: Unleashing the Power of Ethical Hacking | https://medium.com/@crawsecurity/bug-bounty-programs-unleashing-the-power-of-ethical-hacking-5da98f820ebb?source=rss------bug_bounty-5 | crawsecurity | bug-bounty-program, bug-bounty, bug-bounty-tips, bugs, bug-bounty-writeup | 16-Nov-2023 |
| Exploiting Blind XXE: Going Out of Band | https://medium.com/@mohamedtaha_42562/exploiting-blind-xxe-going-out-of-band-f04e3c1ea7ef?source=rss------bug_bounty-5 | Mohamed Taha | security, penetration-testing, bug-bounty | 16-Nov-2023 |
| Introducing Bug Bounty Boosts: Supercharging Security With Timebound Events | https://medium.com/immunefi/introducing-bug-bounty-boosts-supercharging-security-with-timebound-events-51e3a1f208c3?source=rss------bug_bounty-5 | Immunefi Editor | bug-bounty, web3, immunefi, cybersecurity, degate | 16-Nov-2023 |
| Diving Deep: A Comprehensive Guide to Android Penetration Testing — Part 1 | https://medium.com/@hackersdump0/diving-deep-a-comprehensive-guide-to-android-penetration-testing-part-1-392cf9abf93f?source=rss------bug_bounty-5 | Hacker's Dump | android-pentesting, hacking, android, penetration-testing, bug-bounty | 16-Nov-2023 |
| Malware Analysis: Understanding and Combatting Cyber Threats | https://medium.com/@paritoshblogs/malware-analysis-understanding-and-combatting-cyber-threats-d0db1d56760c?source=rss------bug_bounty-5 | Paritosh | malware-analysis, hacking, bug-bounty, cybersecurity, information-security | 16-Nov-2023 |
| How I got a $500 reward for finding an unacclaimed bucket on GitHub | https://medium.com/@andre.pontes7/how-i-got-a-500-reward-for-finding-an-unacclaimed-bucket-on-github-57623c386515?source=rss------bug_bounty-5 | André Pontes | aws-s3, hackerone, bug-bounty, aws | 16-Nov-2023 |
| 23.3 Lab: User ID controlled by request parameter, with unpredictable user IDs | 2023 | https://cyberw1ng.medium.com/23-3-lab-user-id-controlled-by-request-parameter-with-unpredictable-user-ids-2023-5827f93eca1d?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, careers, cybersecurity, hacking | 16-Nov-2023 |
| $1000 Bounty: How I scaled a Self-Redirect to an XSS in a web 3.0 system at Hackenproof | https://erickfernandox.medium.com/1000-bounty-how-i-scaled-a-self-redirect-to-an-xss-in-a-web-3-0-system-at-hackenproof-37380f701892?source=rss------bug_bounty-5 | Erick Fernando | bug-bounty, hackenproof, open-redirect, xss-bypass | 16-Nov-2023 |
| DNS C2 — When Malware Goes Incognito! | https://medium.com/@paritoshblogs/dns-c2-when-malware-goes-incognito-03fdc2e82057?source=rss------bug_bounty-5 | Paritosh | cybersecurity, bug-bounty, information-security, dns, hacking | 15-Nov-2023 |
| HackerOne Surpasses $300 Million in Rewards for Ethical Hackers | https://medium.com/@zerosecurity/hackerone-surpasses-300-million-in-rewards-for-ethical-hackers-eba7be4f106c?source=rss------bug_bounty-5 | ZeroSecurity | bug-bounty | 15-Nov-2023 |
| LandRocker Bug Bounty Program | https://landrocker.medium.com/landrocker-bug-bounty-program-aa2f55f47297?source=rss------bug_bounty-5 | LandRocker | bug-bounty, bitcoin, cryptocurrency-investment, token-sale, web3 | 15-Nov-2023 |
| 23.2 Lab: User ID controlled by request parameter | 2023 | https://cyberw1ng.medium.com/23-2-lab-user-id-controlled-by-request-parameter-2023-74764905c72c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, careers, hacking, cybersecurity | 15-Nov-2023 |
| Understanding Post-Exploitation: Cybersecurity | https://medium.com/@paritoshblogs/understanding-post-exploitation-cybersecurity-5c8d11b75812?source=rss------bug_bounty-5 | Paritosh | cybersecurity, programming, information-security, bug-bounty, post-exploitation | 15-Nov-2023 |
| Idor That allowed me to get access to sensitive users files and share them -.- | https://hamzadzworm.medium.com/idor-that-allowed-me-to-get-access-to-sensitive-users-files-and-share-them-f7da741e9f63?source=rss------bug_bounty-5 | Hamzadzworm | bugbounty-writeup, bug-bounty-tips, hackerone, bug-bounty, cybersecurity | 15-Nov-2023 |
| Unveiling Sensitive Information Exposure: IIS Tilde Enumeration Vulnerability | https://medium.com/@mohammed0anas/unveiling-sensitive-information-exposure-iis-tilde-enumeration-vulnerability-ffe034073288?source=rss------bug_bounty-5 | Nas | bug-bounty, hacking, cybersecurity, bug-bounty-writeup | 15-Nov-2023 |
| How I hacked Google’s bug tracking system itself for $15,600 in bounties | https://homosapienimo.medium.com/how-i-hacked-googles-bug-tracking-system-itself-for-15-600-in-bounties-65c5aacaacdf?source=rss------bug_bounty-5 | Homo Sapiens | bug-bounty, startup, google, technology, security | 15-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 10/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-10-25-7b9651fb1b26?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty-hunting, bug-bounty, bug-bounty-tips | 15-Nov-2023 |
| Exploiting Parallels Plesk Panels With Shodan | https://blog.meese.enterprises/exploiting-parallels-plesk-panels-with-shodan-282248855af2?source=rss------bug_bounty-5 | Aaron Meese | cybersecurity, shodan, osint-investigation, osint, bug-bounty | 15-Nov-2023 |
| Detection Engineering: Strengthening Cybersecurity Defense | https://medium.com/@paritoshblogs/detection-engineering-strengthening-cybersecurity-defense-8d31ab7a2d46?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-security, detection-engineering, hacking, cybersecurity | 14-Nov-2023 |
| Hackathon : KPU.GO.ID | https://medium.com/@angryovalegg/hackathon-kpu-go-id-8fb6f3ce0d61?source=rss------bug_bounty-5 | Angry Oval Egg | hackathons, indo-hacker, bug-bounty, kpu, pemilu | 14-Nov-2023 |
| How to find probably vulnerable objects in your own surface with Netlas.io? | https://systemweakness.com/how-to-find-probably-vulnerable-objects-in-your-own-surface-with-netlas-io-7f3448363892?source=rss------bug_bounty-5 | Netlas.io | script, automation, bug-bounty, attack-surface, reconnaissance | 14-Nov-2023 |
| #4 Session Fixation — Secure Code Explain | https://securitycipher.medium.com/4-session-fixation-secure-code-explain-7d9567f25f38?source=rss------bug_bounty-5 | Piyush Kumawat (securitycipher) | cybersecurity, technology, bug-bounty, vulnerability, coding | 14-Nov-2023 |
| Escalating Blind SSRF to a Remote Code Execution | https://mukibas37.medium.com/escalating-blind-ssrf-to-a-remote-code-execution-be65ed9a7d0f?source=rss------bug_bounty-5 | Mukilan Baskaran | infosec, ssrf, cybersecurity, bug-bounty, hacking | 14-Nov-2023 |
| 23.1 Lab: CORS vulnerability with trusted null origin | 2023 | https://cyberw1ng.medium.com/23-1-lab-cors-vulnerability-with-trusted-null-origin-2023-53d2de3b8e28?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, careers, cybersecurity, penetration-testing | 14-Nov-2023 |
| Har Har Hijack: The Okta Plunder | https://medium.com/@josh.beck2006/har-har-hijack-the-okta-plunder-8fb36f5c9d45?source=rss------bug_bounty-5 | Josh Beck | penetration-testing, cybersecurity, bug-bounty | 14-Nov-2023 |
| bWAPP PHP Code Injection | https://medium.com/@yusufbaris/bwapp-php-code-injection-2b326b831924?source=rss------bug_bounty-5 | Yusuf Barış | cybersecurity, web-security, hacking, bug-bounty, penetration-testing | 14-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 9/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-9-25-14cbedbecee2?source=rss------bug_bounty-5 | Wallotry | bug-bounty-tips, bug-bounty-hunter, bug-bounty, bug-bounty-hunting | 14-Nov-2023 |
| Introduction to AI in Cybersecurity | https://imran-niaz.medium.com/introduction-to-ai-in-cybersecurity-6d80460d9e37?source=rss------bug_bounty-5 | Imran Niaz | programming, cybersecurity, learning, penetration-testing, bug-bounty | 13-Nov-2023 |
| Let's together dive deep into information disclosure | https://medium.com/@parthnarulatech/lets-together-dive-deep-into-information-disclosure-8bdb0b5db728?source=rss------bug_bounty-5 | scriptjacker | bug-bounty-tips, penetration-testing, bug-bounty, cybersecurity, owasp | 13-Nov-2023 |
| SSL Search — A tool to identify infrastructure and discover attack surfaces. | https://medium.com/@harsh8v/ssl-search-a-tool-to-identify-infrastructure-and-discover-attack-surfaces-449c83269574?source=rss------bug_bounty-5 | Harsh Varagiya | bug-bounty, gcp, ssl-certificate, aws, internet | 13-Nov-2023 |
| Google VRP -[IDOR] Deleted Victim Data & Leaked | https://medium.com/@ggilang1135/google-vrp-idor-deleted-victim-data-leaked-0b3cba8e3f7a?source=rss------bug_bounty-5 | Gilang Romadon | bug-bounty, idor-vulnerability, bug-bounty-tips, ggilangromadon, google-vrp | 13-Nov-2023 |
| Announcing IWCON 2023 Speakers Second Batch | https://infosecwriteups.com/announcing-iwcon-2023-speakers-second-batch-26762dc93491?source=rss------bug_bounty-5 | InfoSec Write-ups | infosec, security, bug-bounty, conference, hacking | 13-Nov-2023 |
| Cracking the Code, Cobalt Strike — More Than Just a Fancy Pen Test Tool (And Why Cyber Baddies… | https://medium.com/@paritoshblogs/cracking-the-code-cobalt-strike-more-than-just-a-fancy-pen-test-tool-and-why-cyber-baddies-8b5c56ece92c?source=rss------bug_bounty-5 | Paritosh | bug-bounty, pentesting, cybersecurity, hacking, cobalt-strike | 13-Nov-2023 |
| 22.2 Lab: JWT authentication bypass via flawed signature verification | 2023 | https://cyberw1ng.medium.com/22-2-lab-jwt-authentication-bypass-via-flawed-signature-verification-2023-2a1d63d18ab2?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, careers, bug-bounty, cybersecurity, penetration-testing | 13-Nov-2023 |
| Weirdest API that has been ever found | https://medium.com/@mmaulanaabdullah/weirdest-api-that-has-been-ever-found-9270720d6f02?source=rss------bug_bounty-5 | M Maulana Abdullah | writeup, api, bug-bounty, api-development | 13-Nov-2023 |
| Authentication Vulnerabilities- Lab #9 Brute-forcing a stay-logged-in cookie | https://dollarboysushil.medium.com/authentication-vulnerabilities-lab-9-brute-forcing-a-stay-logged-in-cookie-dda91125f5f2?source=rss------bug_bounty-5 | dollarboysushil | cookie-hacking, web-security, cybersecurity, portswigger, bug-bounty | 13-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 8/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-8-25-ea9bc1addd63?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunting, bug-bounty, bug-bounty-hunter, bug-bounty-tips | 13-Nov-2023 |
| I created posts on the newsletter page dedicated to the program administrator | https://medium.com/@hossam_hamada/i-created-posts-on-the-newsletter-page-dedicated-to-the-program-administrator-aa271980aa53?source=rss------bug_bounty-5 | Hossam Hamada | bug-bounty, penetration-testing, idor, idor-vulnerability, bug-hunting | 12-Nov-2023 |
| 1200$ IDOR Flaw: Allow Attacker To Approve Project Time Tracking | https://medium.com/@a13h1/1200-idor-flaw-allow-attacker-to-approve-project-time-tracking-a9f64c06732a?source=rss------bug_bounty-5 | Abhi Sharma | bug-bounty, programming, hacking, information-security, cybersecurity | 12-Nov-2023 |
| Crafting XSS (Cross-Site Scripting) payloads | https://infosecwriteups.com/crafting-xss-cross-site-scripting-payloads-919f62171bd0?source=rss------bug_bounty-5 | Security Lit Limited | xss-vulnerability, bug-bounty, xss-attack, technology, cybersecurity | 12-Nov-2023 |
| Authentication Vulnerabilities- Lab #8 2FA (Two Factor Authentication) broken logic | https://dollarboysushil.medium.com/authentication-vulnerabilities-lab-8-2fa-two-factor-authentication-broken-logic-b3c6cd8923b9?source=rss------bug_bounty-5 | dollarboysushil | portswigger, cybersecurity, 2fa-hacking, web-security, bug-bounty | 12-Nov-2023 |
| 22.1 Lab: JWT authentication bypass via unverified signature | 2023 | https://cyberw1ng.medium.com/22-1-lab-jwt-authentication-bypass-via-unverified-signature-2023-4401628467d9?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, cybersecurity, bug-bounty, penetration-testing, careers | 12-Nov-2023 |
| Finding Sneaky Hackers, The Ultimate Way of Stalking Cyber Intruders (Without a Trench Coat) | https://medium.com/@paritoshblogs/finding-sneaky-hackers-the-ultimate-way-of-stalking-cyber-intruders-without-a-trench-coat-8db574697fe7?source=rss------bug_bounty-5 | Paritosh | programming, cybersecurity, lateral-movement, bug-bounty, hacking | 12-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 7/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-7-25-a9367edc5864?source=rss------bug_bounty-5 | Wallotry | bug-bounty-hunter, bug-bounty, bug-bounty-tips, bug-bounty-hunting | 12-Nov-2023 |
| Introduction to API Hacking: A Free Course to Level Up Your Skills | https://medium.com/@maisamnoyan/introduction-to-api-hacking-a-free-course-to-level-up-your-skills-537bfc70180d?source=rss------bug_bounty-5 | Maisam Noyan | hacking, bug-bounty, free-course, api, course | 11-Nov-2023 |
| Authentication Vulnerabilities- Lab #4 Username enumeration via subtly different responses | https://dollarboysushil.medium.com/authentication-vulnerabilities-lab-4-username-enumeration-via-subtly-different-responses-5eb512d899fa?source=rss------bug_bounty-5 | dollarboysushil | web-security, portswigger, bug-bounty, cybersecurity | 11-Nov-2023 |
| Attention Cyber Enthusiasts! Exciting News Ahead! ️ | https://cyberconqueror.medium.com/attention-cyber-enthusiasts-exciting-news-ahead-%EF%B8%8F-26399c20b71a?source=rss------bug_bounty-5 | Cyber Conqueror | free-course, information-security, cybersecurity, bug-bounty, free | 11-Nov-2023 |
| Authentication Vulnerabilities- Lab #5 Username enumeration via response timing | https://dollarboysushil.medium.com/authentication-vulnerabilities-lab-5-username-enumeration-via-response-timing-16b07552275a?source=rss------bug_bounty-5 | dollarboysushil | portswigger, bug-bounty, cybersecurity, hacking-passwords | 11-Nov-2023 |
| AppSec Tales XXII | LDAPI | https://karol-mazurek95.medium.com/appsec-tales-xxii-ldapi-fcef1f40e9b2?source=rss------bug_bounty-5 | Karol Mazurek | information-technology, bug-bounty, cybersecurity, information-security, penetration-testing | 11-Nov-2023 |
| JWT attack vulnerabilities in Web App Penetration Testing | 2023 | https://cyberw1ng.medium.com/jwt-attack-vulnerabilities-in-web-app-penetration-testing-2023-4eb8916133dc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, hacking, penetration-testing, bug-bounty, cybersecurity | 11-Nov-2023 |
| Downloading files using POST request (unorthodox method) | https://medium.com/@paritoshblogs/downloading-files-using-post-request-unorthodox-method-d042bb06c1ce?source=rss------bug_bounty-5 | Paritosh | cybersecurity, programming, bug-bounty, hacking, html | 11-Nov-2023 |
| Authentication Vulnerabilities- Lab #6 Broken brute-force protection, IP block | https://dollarboysushil.medium.com/authentication-vulnerabilities-lab-6-broken-brute-force-protection-ip-block-b3afca0a2ea7?source=rss------bug_bounty-5 | dollarboysushil | brute-force, web-security, cybersecurity, bug-bounty, portswigger | 11-Nov-2023 |
| Reconnaissance Is The Key — Bug Bounty Tip! | https://medium.com/@learningstuff110/reconnaissance-is-the-key-bug-bounty-tip-527f24e56cc5?source=rss------bug_bounty-5 | Fahad Hasan | directory-enumeration, penetration-testing, bug-bounty, waybackurls, reconnaissance | 11-Nov-2023 |
| Pentesting: I wanna be a hackerrr… | https://areen-agrawal.medium.com/pentesting-i-wanna-be-a-hackerrr-4dcf9379a6fc?source=rss------bug_bounty-5 | Me, Just a Techie. | bug-bounty, computer-security, red-teaming, technology, pentesting | 11-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 6/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-6-25-fe340a54386c?source=rss------bug_bounty-5 | Wallotry | bug-bounty, bug-bounty-hunter, bug-bounty-tips, bug-bounty-hunting | 11-Nov-2023 |
| Project 2510: Bug Bounty Challenge — Day 5/25 | https://wallotry.medium.com/project-2510-bug-bounty-challenge-day-5-25-205300a2a65c?source=rss------bug_bounty-5 | Wallotry | bug-bounty, bug-bounty-hunting, bug-bounty-hunter, bug-bounty-tips | 10-Nov-2023 |
| Unlocking Cash: Easy P1 Bug in Grafana Dashboard with Default Credentials = €€€€ | https://infosecwriteups.com/unlocking-cash-easy-p1-bug-in-grafana-dashboard-with-default-credentials-fa36ddf271da?source=rss------bug_bounty-5 | Pratik Dabhi | hackerone, bug-bounty, bugcrowd | 10-Nov-2023 |
| Authentication Vulnerabilities- Lab #3 Password reset broken logic | https://dollarboysushil.medium.com/authentication-vulnerabilities-lab-3-password-reset-broken-logic-95bc62a7b92a?source=rss------bug_bounty-5 | dollarboysushil | bug-bounty, cybersecurity, portswigger, web-security, password-reset | 10-Nov-2023 |
| 21.1 Lab: Authentication bypass via OAuth implicit flow | 2023 | https://cyberw1ng.medium.com/21-1-lab-authentication-bypass-via-oauth-implicit-flow-2023-15f819305f73?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | penetration-testing, bug-bounty, careers, cybersecurity, hacking | 10-Nov-2023 |
| Authentication Vulnerabilities- Lab #2 2FA simple bypass | https://dollarboysushil.medium.com/authentication-vulnerabilities-lab-2-2fa-simple-bypass-6bd390cf92bc?source=rss------bug_bounty-5 | dollarboysushil | web-security, cybersecurity, bug-bounty, portswigger, two-factor-authentication | 10-Nov-2023 |
| Revealing True Industry Potential Through the Ultimate Web3 Security Ecosystem: R.xyz | https://medium.com/coinmonks/revealing-true-industry-potential-through-the-ultimate-web3-security-ecosystem-r-xyz-007acfd25b62?source=rss------bug_bounty-5 | Officer's Notes | blockchain-security, bug-bounty, web3, smart-contract-security, hacking | 10-Nov-2023 |
| How I stopped a Wallet Hack and Got Almost Nothing. | https://medium.com/@mahitman1/how-i-stopped-a-wallet-hack-and-got-almost-nothing-68babd824854?source=rss------bug_bounty-5 | Muhammad Abdullah | web3, blockchain, bug-bounty, security | 10-Nov-2023 |
