| Guía de Exploit-DB para Bug Bounty: Uso de SearchSploit y Validación de Vulnerabilidades | https://medium.com/@jpablo13/gu%C3%ADa-de-exploit-db-para-bug-bounty-uso-de-searchsploit-y-validaci%C3%B3n-de-vulnerabilidades-34a9bb58ccf1?source=rss------bug_bounty-5 | JPablo13 | hacking, technology, cybersecurity, bug-bounty, pentesting | 23-Jan-2026 |
| The Growing Threat Landscape of Browser Extensions — How Trusted Tools Turned Into Attack Vectors | https://medium.com/@paritoshblogs/the-growing-threat-landscape-of-browser-extensions-how-trusted-tools-turned-into-attack-vectors-3f8c2bacf1ba?source=rss------bug_bounty-5 | Paritosh | information-technology, hacking, browser-extension, cybersecurity, bug-bounty | 23-Jan-2026 |
| Race Condition — HTTP Smuggling — HTTP/3 Protokol Versiyon | https://medium.com/@0bat.exe1/race-condition-http-smuggling-http-3-protokol-versiyon-74165353a191?source=rss------bug_bounty-5 | 0bat.exe1 | race-condition, smuggling, http-request, bug-bounty, cybersecurity | 23-Jan-2026 |
| I Solved 92 Labs and Made $0: Why I Quit Web Hacking for Binary Exploitation | https://medium.com/@sivaaditya456/i-solved-92-labs-and-made-0-why-i-quit-web-hacking-for-binary-exploitation-59a2285db910?source=rss------bug_bounty-5 | sivaaditya | linux, cybersecurity, binary-exploitation, bug-bounty, career-advice | 23-Jan-2026 |
| Wild Bug Bounty Bugs You’ve Probably Never Seen | https://infosecwriteups.com/wild-bug-bounty-bugs-youve-probably-never-seen-38c13a18a7fa?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, medium, cybersecurity, infosec, bug-bounty | 23-Jan-2026 |
| Post Board Writeup — MobileHackingLab | https://mohammadibnibrahim.medium.com/post-board-writeup-mobilehackinglab-ce045b6db36c?source=rss------bug_bounty-5 | محمد بن إبراهيم | penetration-testing, mobile, bug-bounty, ctf, hacking | 23-Jan-2026 |
| Simple Endpoint, Critical Impact: How I Sabotaged Refunds | https://medium.com/@xelcezeri/simple-endpoint-critical-impact-how-i-sabotaged-refunds-1cd0ac7a4cb2?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, bug-bounty-tips, bug-bounty | 23-Jan-2026 |
| Beyond the Alerts: Lessons Cybersecurity Didn’t Teach Me in Any Playbook | https://medium.com/@paritoshblogs/beyond-the-alerts-lessons-cybersecurity-didnt-teach-me-in-any-playbook-3d294293b109?source=rss------bug_bounty-5 | Paritosh | hacking, cybersecurity, information-technology, bug-bounty, ai | 22-Jan-2026 |
| Four CVEs in a Row: A Deep Dive into Recent Vulnerability Discoveries | https://ravi73079.medium.com/four-cves-in-a-row-a-deep-dive-into-recent-vulnerability-discoveries-57007740e5cf?source=rss------bug_bounty-5 | Ravi sharma | technology, cybersecurity, artificial-intelligence, bug-bounty-tips, bug-bounty | 22-Jan-2026 |
| HTML Injection to Data Exfiltration: Weaponizing CSS | https://infosecwriteups.com/html-injection-to-data-exfiltration-weaponizing-css-88ec1639a0cd?source=rss------bug_bounty-5 | Jayateertha Guruprasad | cybersecurity, blog, bug-bounty, hacking, infosec | 22-Jan-2026 |
| How I Earned a $500 Bug Bounty for a P5 Informational Vulnerability | https://medium.com/@swarooppatil3125/how-i-earned-a-500-bug-bounty-for-a-p5-informational-vulnerability-a20e2c68e3d4?source=rss------bug_bounty-5 | Swarooppatil | bugcrowd, bug-bounty-hunter, hackerone, bug-bounty, bugs | 22-Jan-2026 |
| From Static Reports to a Living Scope: Solving Data Chaos in Long-Term Engagements | https://medium.com/@2s1one/from-static-reports-to-a-living-scope-solving-data-chaos-in-long-term-engagements-5b4423098f7a?source=rss------bug_bounty-5 | 2s1one | penetration-testing, cybersecurity, bug-bounty, information-security | 22-Jan-2026 |
| The New HackTheBox Certified Web Exploitation Specialist Review | https://motasemhamdan.medium.com/the-new-hackthebox-certified-web-exploitation-specialist-review-66b2b0edf3c0?source=rss------bug_bounty-5 | Motasem Hamdan | infosec, bug-bounty, hackthebox, information-security, hacking | 22-Jan-2026 |
| Indirect Prompt Injection in Preplexity Comet AI | https://medium.com/@melodicbook/indirect-prompt-injection-in-preplexity-comet-ai-03a383d971c6?source=rss------bug_bounty-5 | Sam Mirov | prompt-injection-attack, ai-security, bug-bounty, indirect-prompt-injection, ai | 22-Jan-2026 |
| [PortSwigger][Practitioner]- Lab: CSRF where token validation depends on request method | https://medium.com/@Javiki/portswigger-practitioner-lab-csrf-where-token-validation-depends-on-request-method-6661116fa0be?source=rss------bug_bounty-5 | Javiki | portswigger-lab, hacking, csrf-attack, bug-bounty, owasp-top-10 | 22-Jan-2026 |
| JWT | Algorithm Confusion Attacks | https://medium.com/@amrsmooke321/jwt-algorithm-confusion-attacks-e0a27f42b42c?source=rss------bug_bounty-5 | Amrsmooke | cybersecurity, bug-bounty, jwt, hacking, penetration-testing | 22-Jan-2026 |
| Thirdweb bug bounty program: Dishonourable Dealings | https://medium.com/@alexanderwpryor/thirdweb-bug-bounty-program-dishonourable-dealings-b8e03b570c21?source=rss------bug_bounty-5 | Alexander Pryor | thirdweb, bug-bounty-tips, bug-bounty | 22-Jan-2026 |
| Clock Skew - Time Can Change Anything | https://shahjerry33.medium.com/clock-skew-time-can-change-anything-0bb84e9635de?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | bug-bounty, infosec, vulnerability, cybersecurity, penetration-testing | 22-Jan-2026 |
| Web3 pentesting | https://medium.com/@redaouzidan/web3-pentesting-29192e326f9e?source=rss------bug_bounty-5 | Redaouzidan | bug-bounty | 22-Jan-2026 |
| Some Weird Zero Click Account Takeover Techniques | https://medium.com/@mohameddiv77/some-weird-zero-click-account-takeover-techniques-4c00b32f0a1b?source=rss------bug_bounty-5 | Mohamed Ibrahim | account-takeover, infosec, cybersecurity, bug-bounty, hacking | 22-Jan-2026 |
| Rethinking SQL Injection | https://systemweakness.com/rethinking-sql-injection-7c9fd3f8f30d?source=rss------bug_bounty-5 | Nitin yadav | bug-bounty-writeup, cybersecurity, technology, bug-bounty, bug-bounty-tips | 22-Jan-2026 |
| Breaking Into Web Application Security: My WEB-RTA Certification Experience | https://medium.com/@atikfaras2433/breaking-into-web-application-security-my-web-rta-certification-experience-da071a4c229e?source=rss------bug_bounty-5 | Atikfaras | hacking, cybersecurity, ctf, bug-bounty, websecurity-testing | 22-Jan-2026 |
| Passing the CWL Web Red Team Analyst (WEB-RTA) Exam — My Experience 2026 | https://medium.com/@talhakhatib4/passing-the-cwl-web-red-team-analyst-web-rta-exam-my-experience-2026-dbebec453675?source=rss------bug_bounty-5 | Talha Khatib | cybersecurity, bug-bounty, hacking, red-team, web-security | 22-Jan-2026 |
| How I Found My First CVE (CVE-2026–21641) | https://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5 | 0xJad | cve, ethical-hacking, writeup, bug-bounty, cybersecurity | 22-Jan-2026 |
| Bug Bounty Isn’t About Speed — It’s About Seeing What Others Ignore | https://infosecwriteups.com/bug-bounty-isnt-about-speed-it-s-about-seeing-what-others-ignore-1b99396cdd6c?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, hacking, infosec, bug-bounty, cybersecurity | 22-Jan-2026 |
| FULL ACCOUNT WILL DIE | https://medium.com/@omaroymdm/full-account-will-die-ce9958bccb8b?source=rss------bug_bounty-5 | Omar Mahmoud | web-security, infosec, cybersecurity, bug-bounty, bugcrowd | 22-Jan-2026 |
| BROKEN ACCESS CONTROL | https://zekikayaalp.medium.com/broken-acces-control-02fc6dcbb1b0?source=rss------bug_bounty-5 | Zekikayaalp | offensive-security, bug-bounty, owasp-top-10, cybersecurity, pentesting | 22-Jan-2026 |
| How I Found My First CVE (CVE-2026–21641) | https://medium.com/@0xJad/how-i-found-my-first-cve-cve-2026-21641-7f29af74fc84?source=rss------bug_bounty-5 | 0xJad | cve, ethical-hacking, critical-bug, bug-bounty, cybersecurity | 22-Jan-2026 |
| Master Guide to HTTP Headers for Bug Bounty: Exploitation and Bypass Techniques | https://medium.com/@jpablo13/master-guide-to-http-headers-for-bug-bounty-exploitation-and-bypass-techniques-02460b0dde39?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, technology, web-security, hacking, cybersecurity | 21-Jan-2026 |
| How I Found and reported 50+ Exposed Celery Flower Dashboards on Shodan | https://vijetareigns.medium.com/how-i-found-and-reported-50-exposed-celery-flower-dashboards-on-shodan-f4de4289630c?source=rss------bug_bounty-5 | the_unlucky_guy | bug-bounty-tips, cybersecurity, information-security, bug-bounty, security | 21-Jan-2026 |
| IDOR in 5 mins, That Paid me 500$ | https://medium.com/@rajanbala39/idor-in-5-mins-that-paid-me-500-0d72a2243d1e?source=rss------bug_bounty-5 | BALAJI | idor-vulnerability, bug-bounty, bug-bounty-tips, bug-bounty-writeup, idor-bugbounty | 21-Jan-2026 |
| SOC ROADMAP (END-TO-END) | https://medium.com/@hrofficial62/soc-roadmap-end-to-end-e3974d7f65ad?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, hacking, ethical-hacking, cybersecurity, soc-analyst | 21-Jan-2026 |
| Simple Broken Access Control | https://medium.com/@windasunny/simple-broken-access-control-850cb9beb7c4?source=rss------bug_bounty-5 | Windasunny | bug-bounty, cybersecurity | 21-Jan-2026 |
| Unauthenticated IDOR Leading to Unauthorized Read and Delete Sensitive Data | https://medium.com/@bashirabdulmajeed878/unauthenticated-idor-leading-to-unauthorized-read-and-delete-sensitive-data-abdb1037139b?source=rss------bug_bounty-5 | Bashir Abdulmajeed | bug-bounty, web-penetration-testing | 21-Jan-2026 |
| LLMs & AI Systems Are Already Under Attack (And Most Companies Don’t Realize It) | https://medium.com/@paritoshblogs/llms-ai-systems-are-already-under-attack-and-most-companies-dont-realize-it-ccd467cc6ba8?source=rss------bug_bounty-5 | Paritosh | bug-bounty, ai, cybersecurity, llm, hacking | 21-Jan-2026 |
| WordPress XML-RPC Attack Surface Method Enumeration via system.listMethods Leading to SSRF | https://ajay-vardhan01.medium.com/wordpress-xml-rpc-attack-surface-method-enumeration-via-system-listmethods-leading-to-ssrf-0971d977372a?source=rss------bug_bounty-5 | Ajay Vardhan | medium, infosec, bug-bounty | 21-Jan-2026 |
| How Generative AI Is Breaking Food Delivery Apps | https://codewithvamp.medium.com/how-generative-ai-is-breaking-food-delivery-apps-792f597c52ab?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | generative-ai-tools, bug-bounty, hacking, software-testing, security | 21-Jan-2026 |
| How simple Logic Flaw turned into a €300 in Minute’ | https://medium.com/@vansh_51476/how-simple-logic-flaw-turned-into-a-300-in-minute-034026e9cbba?source=rss------bug_bounty-5 | Jimmy | web-development, life, cybersecurity, bug-bounty, money | 21-Jan-2026 |
| Why I Switched From Burp Suite to Caido — And How It Made Bug Hunting Fun Again | https://medium.com/@mejbankadir/why-i-switched-from-burp-suite-to-caido-and-how-it-made-bug-hunting-fun-again-78e139977c6c?source=rss------bug_bounty-5 | Mejbankadir | technology, bug-bounty, idor-vulnerability, minecraft, programming | 21-Jan-2026 |
| Cache Deception: When “Harmless Caching” Becomes a Real Risk | https://infosecwriteups.com/cache-deception-when-harmless-caching-becomes-a-real-risk-2920b0a2f3db?source=rss------bug_bounty-5 | Nitin yadav | bug-bounty, cybersecurity, hacking, bug-bounty-writeup, bug-bounty-tips | 21-Jan-2026 |
| How I Convinced an AI to Hack Itself: Prompt Injection to XSS ️ | https://infosecwriteups.com/how-i-convinced-an-ai-to-hack-itself-prompt-injection-to-xss-%EF%B8%8F-dab60010e40d?source=rss------bug_bounty-5 | Mahendra Purbia (Mah3Sec) | security, ai, pentesting, bug-bounty | 21-Jan-2026 |
| Identity Shield 2026: Day 2 — When Inspiration Meets Innovation (And I’m Blown Away!) | https://medium.com/@eugeniacyber/identity-shield-2026-day-2-when-inspiration-meets-innovation-and-im-blown-away-726743aa6fd9?source=rss------bug_bounty-5 | Eugenia | Cybersecurity Awareness | bug-bounty, womenincyber, tech-conference, infosecurity, cyber-awareness | 21-Jan-2026 |
| The Company Fixed the Bug — but Forgot the Cache | https://medium.com/@iski/the-company-fixed-the-bug-but-forgot-the-cache-359878dc94e7?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, hacking, bug-bounty-tips, cybersecurity | 21-Jan-2026 |
| Unified Kill Chain — TryHackMe Walkthrough | https://cyberleelawat.medium.com/unified-kill-chain-tryhackme-walkthrough-59574e35229d?source=rss------bug_bounty-5 | Virendra Kumar | tryhackme-walkthrough, cybersecurity, tryhackme, bug-bounty, cyberleelawat | 21-Jan-2026 |
| How to start a cybersecurity career in 2026: A practical roadmap | https://medium.com/infosec-writes-up/how-to-start-a-cybersecurity-career-in-2026-a-practical-roadmap-829dfbf7eb72?source=rss------bug_bounty-5 | Hackers Things | cybersecurity, oscp, cloud-security, infosec, bug-bounty | 21-Jan-2026 |
| “Bug Bounty Bootcamp #19: Advanced CSP Bypass — Turning Trusted Third Parties and File Uploads… | https://osintteam.blog/bug-bounty-bootcamp-19-advanced-csp-bypass-turning-trusted-third-parties-and-file-uploads-266760ab9ff5?source=rss------bug_bounty-5 | Aman Sharma | penetration-testing, cybersecurity, bug-bounty, technology, hacking | 21-Jan-2026 |
| From ‘False Positive’ to High Impact: A Deep Dive into Validating CVE-2025–14847 (MongoBleed) | https://medium.com/@ahmednasser211022/from-false-positive-to-high-impact-a-deep-dive-into-validating-cve-2025-14847-mongobleed-9ad2b54267bf?source=rss------bug_bounty-5 | Ahmed Nasser | web-security, hacking, infosec, cybersecurity, bug-bounty | 21-Jan-2026 |
| The Company Fixed the Bug — but Forgot the Cache | https://infosecwriteups.com/the-company-fixed-the-bug-but-forgot-the-cache-359878dc94e7?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, hacking, bug-bounty-tips, cybersecurity | 21-Jan-2026 |
| Day-18 of Bug Bounty Journey : XSS Concept | https://medium.com/@anshkamra00/day-18-of-bug-bounty-journey-xss-concept-19e79cf45fcd?source=rss------bug_bounty-5 | Anshkamra | concept, bug-bounty, bugbounty-writeup, xss-attack | 21-Jan-2026 |
| From a Single ID to Confidential Report Disclosure — Breaking Patterns in a Real Bug Bounty | https://medium.com/@shazilrao620/from-a-single-id-to-confidential-report-disclosure-breaking-patterns-in-a-real-bug-bounty-298459c5fcd1?source=rss------bug_bounty-5 | Shazilrao | cybersecurity, penetration-testing, ethical-hacking, bug-bounty, bug-bounty-tips | 21-Jan-2026 |
| Unauthorized File Deletion via Broken Access Control | https://medium.com/@omerasraan/unauthorized-file-deletion-via-broken-access-control-63c287abcd29?source=rss------bug_bounty-5 | Omer Mohsen | bug-bounty, privilege-escalation, bug-bounty-tips, broken-access-control, cybersecurity | 21-Jan-2026 |
| Unauthenticated Client-Side Prize Manipulation Vulnerability in Spin Wheel plugin | https://medium.com/@jsonc/unauthenticated-client-side-prize-manipulation-vulnerability-in-spin-wheel-plugin-a4423c12280a?source=rss------bug_bounty-5 | jsonc | cve, wordpress, infosec, bug-bounty, wordpress-plugins | 20-Jan-2026 |
| Building a Recon Toolkit with Docker | https://medium.com/@samhilliard/building-a-recon-toolkit-with-docker-ec14e556f858?source=rss------bug_bounty-5 | Sam Hilliard | bug-bounty, scripting, reconnaissance, docker, tools | 20-Jan-2026 |
| Guía Maestra de Headers HTTP para Bug Bounty: Técnicas de Explotación y Bypass | https://medium.com/@jpablo13/gu%C3%ADa-maestra-de-headers-http-para-bug-bounty-t%C3%A9cnicas-de-explotaci%C3%B3n-y-bypass-c95c265b11fb?source=rss------bug_bounty-5 | JPablo13 | hacking, technology, web-security, cybersecurity, bug-bounty | 20-Jan-2026 |
| A Practical Way to Learn Reverse Engineering (Without Getting Overwhelmed) | https://medium.com/@paritoshblogs/a-practical-way-to-learn-reverse-engineering-without-getting-overwhelmed-85f290581580?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, cybersecurity, ai, reverse-engineering | 20-Jan-2026 |
| I bypassed Guardrails to Perform Prompt Injection | https://osintteam.blog/i-bypassed-guardrails-to-perform-prompt-injection-8081195b8018?source=rss------bug_bounty-5 | Rahul Singh Chauhan | prompt-injection, llm, bug-bounty, guardrail-bypass, penetration-testing | 20-Jan-2026 |
| $500 Bug Bounty: Bulk Endpoint Leaks Report Disclosure State | https://osintteam.blog/500-bug-bounty-bulk-endpoint-leaks-report-disclosure-state-e7305af1e853?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, tech, penetration-testing, bug-bounty, technology | 20-Jan-2026 |
| JWT Authentication Bypass via Algorithm Confusion | https://medium.com/@prasangampathak9/jwt-authentication-bypass-via-algorithm-confusion-0a563c2a47c4?source=rss------bug_bounty-5 | CyberSec Xploit | Prasangam | hacking, authetication, bug-bounty, jwt, bypass | 20-Jan-2026 |
| How I “Hacked” 10+ Companies in 30 Minutes (By Clicking ‘Sign Up’) | https://lun3x.medium.com/how-i-hacked-10-companies-in-30-minutes-by-clicking-sign-up-a55141584d35?source=rss------bug_bounty-5 | Majid Mohammed | infosec, bug-bounty, artificial-intelligence, cybersecurity, hacking | 20-Jan-2026 |
| DOM-Based Open Redirection | https://meetcyber.net/dom-based-open-redirection-27f87d761ff9?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, dom-xss, bug-bounty, open-redirect, xss-vulnerability | 20-Jan-2026 |
| DOM-Based XSS: From Browser Logic to Bounty | https://medium.com/@jayeshkunwal/dom-based-xss-from-browser-logic-to-bounty-70cf4d94f694?source=rss------bug_bounty-5 | Jayesh kunwal | dom-based-xss, bug-bounty | 20-Jan-2026 |
| API Hacking for Bug Bounty: A Complete Beginner-to-Advanced Guide | https://medium.com/@bughuntersjournal/api-hacking-for-bug-bounty-a-complete-beginner-to-advanced-guide-a8b34704d816?source=rss------bug_bounty-5 | BugHunter’s Journal | cybersecurity, hacking, software-development, programming, bug-bounty | 20-Jan-2026 |
| 5 LeakRadar Searches That Lead to P1 Bug Bounty Reports | https://medium.com/@alexandrevandammepro/5-leakradar-searches-that-lead-to-p1-bug-bounty-reports-7d3f0646cda4?source=rss------bug_bounty-5 | Alexandre Vandamme | bug-bounty-tips, infosec, hacking, bug-bounty, cybersecurity | 20-Jan-2026 |
| From Job Hunting to Bug Hunting: Discovering an SQL Injection Vulnerability | https://medium.com/@4m3n_d/from-job-hunting-to-bug-hunting-discovering-an-sql-injection-vulnerability-922c3cbc95a8?source=rss------bug_bounty-5 | Wonde D | bugbounty-writeup, bug-hunting, sql-injection, bug-bounty, vulnerability | 20-Jan-2026 |
| SQLi | https://medium.com/@keupi1963/sqli-d16e92a2fad4?source=rss------bug_bounty-5 | Paukhankhual Hangsing | cybersecurity, bug-bounty, learning, sql-injection, web-exploitation | 20-Jan-2026 |
| CVE-2025–66202: URL Double Encoding Bypass Lab | https://medium.com/@josh.beck2006/cve-2025-66202-url-double-encoding-bypass-lab-40ecd6d6820a?source=rss------bug_bounty-5 | Josh Beck | bug-bounty, cybersecurity, ctf | 20-Jan-2026 |
| Accidentally making $1000 for finding Security Bugs as a Backend Developer | https://not-afraid.medium.com/accidentally-making-1000-for-finding-security-bugs-as-a-backend-developer-3e562c77eefc?source=rss------bug_bounty-5 | not_afraid | bug-bounty, jwt, backend | 20-Jan-2026 |
| Beginner’s Guide Part 1: Building an AI Non- GUI Pentest Lab with Ollama & HexStrike AI | https://medium.com/@omarataallah98/beginners-guide-part-1-building-an-ai-non-gui-pentest-lab-with-ollama-hexstrike-ai-b7f461cce2a9?source=rss------bug_bounty-5 | Omarataallah | kali-linux, ai, ollama, penetration-testing, bug-bounty | 20-Jan-2026 |
| I Hacked an Organization Starting with One Subdomain | https://infosecwriteups.com/i-hacked-an-organization-starting-with-one-subdomain-58ce6c43fec1?source=rss------bug_bounty-5 | Yash Katiyara | osint, cybersecurity, ethical-hacking, bug-bounty, pentesting | 20-Jan-2026 |
| Day 16–17 of Bug Bounty Journey : Understanding Nmap Like a Hacker | https://medium.com/@anshkamra00/day-16-17-of-bug-bounty-journey-understanding-nmap-like-a-hacker-0489f655b4be?source=rss------bug_bounty-5 | Anshkamra | nmap, bug-bounty, cybersecurity | 20-Jan-2026 |
| $70,000 from a Simple 2FA Bypass: A Lesson in Observation Over Exploits | https://icecream23.medium.com/70-000-from-a-simple-2fa-bypass-a-lesson-in-observation-over-exploits-10902b4253a7?source=rss------bug_bounty-5 | Aman Bhuiyan | 2fa, ethical-hacking, bug-bounty, authentication | 20-Jan-2026 |
| I Hacked an Organization Starting with One Subdomain | https://osintteam.blog/i-hacked-an-organization-starting-with-one-subdomain-58ce6c43fec1?source=rss------bug_bounty-5 | Yash Katiyara | osint, cybersecurity, ethical-hacking, bug-bounty, pentesting | 20-Jan-2026 |
| How a simple password reset led to a complete account takeover | https://medium.com/@vansh_51476/how-a-simple-password-reset-led-to-a-complete-account-takeover-2cd56639d150?source=rss------bug_bounty-5 | Jimmy | bug-bounty, web-development, life, money | 19-Jan-2026 |
| Insecure Direct Object Reference Allows Cross-Organization Resource Disclosure | https://mmnahian.medium.com/insecure-direct-object-reference-allows-cross-organization-resource-disclosure-dd737604d714?source=rss------bug_bounty-5 | mmnahian | bug-bounty-tips, bug-bounty, penetration-testing, idor, access-control | 19-Jan-2026 |
| Race Conditions in Web Apps: The Bug Class Nobody Tests For | https://medium.com/@nabilmouzouna/race-conditions-in-web-apps-the-bug-class-nobody-tests-for-1253b47c2d3b?source=rss------bug_bounty-5 | Nabil Mouzouna نبيل مزونة | web-penetration-testing, appsec, web-development, bug-bounty, security | 19-Jan-2026 |
| “Bug Bounty Bootcamp #18: Demystifying Content Security Policy (CSP) — The Ultimate Bypass… | https://osintteam.blog/bug-bounty-bootcamp-18-demystifying-content-security-policy-csp-the-ultimate-bypass-cb79b1d89e19?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, technology, hacking, penetration-testing, cybersecurity | 19-Jan-2026 |
| AWS Cloud Pentesting Roadmap: A Practical Path Built on Understanding and Practice | https://elgllad.medium.com/cloud-pentesting-roadmap-a-practical-path-built-on-understanding-and-practice-06a89611797c?source=rss------bug_bounty-5 | Muhammad Elgllad | cloud-computing, penetration-testing, bug-bounty, the-secops-group, cybersecurity | 19-Jan-2026 |
| Email Splitting Attack | https://medium.com/@Reket99/email-splitting-attack-087ad8a596f3?source=rss------bug_bounty-5 | Marc I | bug-bounty | 19-Jan-2026 |
| The World of Cybersecurity | https://medium.com/@keupi1963/the-world-of-cybersecurity-d507d944037c?source=rss------bug_bounty-5 | Paukhankhual Hangsing | cybersecurity, learning, growth, penetration-testing, bug-bounty | 19-Jan-2026 |
| From JS File to Jailbreak: How Frontend Code Gave Me Backend Access | https://infosecwriteups.com/from-js-file-to-jailbreak-how-frontend-code-gave-me-backend-access-5b4974d06b63?source=rss------bug_bounty-5 | Iski | hacking, infosec, cybersecurity, bug-bounty-tips, bug-bounty | 19-Jan-2026 |
| Explorando uma “Chain”: Cache Poisoning + OpenID Misconfiguration = ATO | https://medium.com/@dk4trin/explorando-uma-chain-cache-poisoning-openid-misconfiguration-ato-65a5f4210887?source=rss------bug_bounty-5 | Wesley "dk4trin" Santos | cybersecurity, bug-bounty | 19-Jan-2026 |
| ️ The Ultimate Burp Suite User Guide | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/%EF%B8%8F-the-ultimate-burp-suite-user-guide-f88cab47aac4?source=rss------bug_bounty-5 | ghostyjoe | bug-bounty, hacking, burpsuite, ethical-hacking, cybersecurity | 19-Jan-2026 |
| Bug Bounty Learning Journey — From Day 8–15 | https://medium.com/@anshkamra00/bug-bounty-learning-journey-from-day-8-15-e96c2669141c?source=rss------bug_bounty-5 | Anshkamra | cybersecurity, bug-bounty | 19-Jan-2026 |
| My Bug Bounty Learning Journey (Day 1–7) | https://medium.com/@anshkamra00/my-bug-bounty-learning-journey-day-1-15-8b3b6697cf73?source=rss------bug_bounty-5 | Anshkamra | cybersecurity, bug-bounty | 19-Jan-2026 |
| The Ghost Password : How a Design Flaw Led to Full Account Takeover (ATO) | https://medium.com/@xlr99/the-ghost-password-how-a-design-flaw-led-to-full-account-takeover-ato-52b7c1ca94fa?source=rss------bug_bounty-5 | xlr9 | authentication, account-takeover, bug-bounty, web-security, cybersecurity | 19-Jan-2026 |
| How I’d Start Bug Bounty Hunting in 2026 — a Practical 90-Day Plan | https://medium.com/infosec-writes-up/how-id-start-bug-bounty-hunting-in-2026-a-practical-90-day-plan-d49042c59597?source=rss------bug_bounty-5 | Hackers Things | offensive-security, pentesting, bug-bounty, web-security, infosec | 18-Jan-2026 |
| Critical Blind Time-Based Injection Hiding Behind Normal Responses | https://ritikver22000.medium.com/critical-blind-time-based-injection-hiding-behind-normal-responses-c229b5956bd3?source=rss------bug_bounty-5 | Xynos | hacking, bug-bounty-writeup, bug-bounty, cybersecurity, pentesting | 18-Jan-2026 |
| Broken Math: Exploiting Business Logic for Price Manipulation | https://medium.com/@xelcezeri/broken-math-exploiting-business-logic-for-price-manipulation-ad52f1c47f3a?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty, bug-bounty-tips, bug-bounty-writeup | 18-Jan-2026 |
| When Rate Limits Lie: A Quiet Path to Account Takeover | https://medium.com/@pevinkumar/when-rate-limits-lie-a-quiet-path-to-account-takeover-8004000afe01?source=rss------bug_bounty-5 | PevinKumar A | bug-bounty, penetration-testing, ethical-hacking, cybersecurity | 18-Jan-2026 |
| Root Me — XSS Stored 1 | https://medium.com/@amritanshughimire1/root-me-xss-stored-1-d308be1ad04f?source=rss------bug_bounty-5 | LiGhTZod | bug-bounty, web-hacking, cybersecurity | 18-Jan-2026 |
| JWT Header Parameters Injections | jwk | jku| Kid | https://medium.com/@amrsmooke321/jwt-header-parameters-injections-jwk-jku-kid-0ab5c80a711e?source=rss------bug_bounty-5 | Amrsmooke | bug-bounty, cybersecurity, jwt, penetration-testing, hacking | 18-Jan-2026 |
| The Ultimate OSI Model Troubleshooting Cheat Sheet | https://medium.com/@verylazytech/the-ultimate-osi-model-troubleshooting-cheat-sheet-3a0222f39d0b?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, osi-model, cheatsheet, penetration-testing, bug-bounty | 18-Jan-2026 |
| Unrestricted File Upload Leads to Stored XSS, SSRF, and Phishing | https://cybercraftsman.medium.com/unrestricted-file-upload-leads-to-stored-xss-ssrf-and-phishing-08e14c6e6907?source=rss------bug_bounty-5 | Indrajeet | file-upload-vulnerability, phishing, bug-bounty, ssrf, xss-attack | 18-Jan-2026 |
| What If Anyone Could Sign Legal Documents Using Your Email Address? | https://medium.com/@solutionexit5/what-if-anyone-could-sign-legal-documents-using-your-email-address-5377628abc0f?source=rss------bug_bounty-5 | 0xMoussa | bug-bounty, broken-access-control, bug-bounty-tips, bugs, cybersecurity | 18-Jan-2026 |
| Password Reset Token Misconfiguration Leading to Pre-Account Takeover and Account Deletion | https://medium.com/@0xMo7areb/password-reset-token-misconfiguration-leading-to-pre-account-takeover-and-account-deletion-8f344cb0e9d6?source=rss------bug_bounty-5 | 0xMo7areb | bug-bounty-writeup, penetration-testing, bugs, bug-bounty-tips, bug-bounty | 18-Jan-2026 |
| Struggles of Bug Bounty | https://medium.com/@cosmicbyt3/struggles-of-bug-bounty-2ea53f5854b5?source=rss------bug_bounty-5 | CosmicByte | bug-bounty, struggle, bug-bounty-tips, idor-vulnerability, cybersecurityforbeginners | 18-Jan-2026 |
| JWT Header Parameters Injections | jwk | jku | Kid | https://medium.com/@amrsmooke321/jwt-header-parameters-injections-jwk-jku-kid-0ab5c80a711e?source=rss------bug_bounty-5 | Amrsmooke | bug-bounty, cybersecurity, jwt, penetration-testing, hacking | 18-Jan-2026 |
| HackerOne HTML Injection Fix Bypass | https://medium.com/@ahmedbelahcen2018/hackerone-html-injection-fix-bypass-9aef7806cebc?source=rss------bug_bounty-5 | ab.infosec | cybersecurity, bug-bounty, hacking, hackerone, html-injection | 18-Jan-2026 |
| Design-Level Stored XSS in Matomo i18n Rendering | https://medium.com/@diwagithub687/design-level-stored-xss-in-matomo-i18n-rendering-aa305d7f88bc?source=rss------bug_bounty-5 | D7 | i18n, web-design, bug-bounty, code, xss-attack | 18-Jan-2026 |
| ️♂️ How I Run Burp Suite in the Background Without Breaking My Browser (Firefox Setup) | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/%EF%B8%8F-%EF%B8%8F-how-i-run-burp-suite-in-the-background-without-breaking-my-browser-firefox-setup-c5f71703a0bd?source=rss------bug_bounty-5 | ghostyjoe | burpsuite, bug-bounty, penetration-testing, firefox, ethical-hacking | 18-Jan-2026 |
| Starting Your Bug Bounty Journey: Tips for Beginners | https://medium.com/@nayan12cr7/starting-your-bug-bounty-journey-tips-for-beginners-88a41eab150c?source=rss------bug_bounty-5 | Nayan Ghimire | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 18-Jan-2026 |
| Lab: Reflected XSS into HTML context with nothing encoded | https://medium.com/@mylescorey87/lab-reflected-xss-into-html-context-with-nothing-encoded-ec6b3cac0fa5?source=rss------bug_bounty-5 | Mylescorey | burpsuite, bug-bounty, xss-attack | 18-Jan-2026 |
| Simple Logic Breaks Big Systems: The Contract That Ended Before It Started | https://medium.com/@default_Ox/simple-logic-breaks-big-systems-the-contract-that-ended-before-it-started-28dd3230ba34?source=rss------bug_bounty-5 | default_0x | business-logic, bug-bounty-tips, business-logic-flaw, bug-bounty | 18-Jan-2026 |
| Web Security: Guide to Exploiting HTTP Methods and Bypassing WAFs | https://medium.com/@jpablo13/web-security-guide-to-exploiting-http-methods-and-bypassing-wafs-08edb18cc6b9?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, web-security, hacking, cybersecurity, technology | 17-Jan-2026 |
| Mass Assignment leads to Account Takeover and DoS | https://osintteam.blog/mass-assignment-leads-to-account-takeover-and-dos-32132ee92486?source=rss------bug_bounty-5 | Rahul Singh Chauhan | bug-bounty, account-takeover, mass-assignment, cybersecurity, application-security | 17-Jan-2026 |
| $3,500 Shopify Partners Bug: Become “Owner” Without Verifying the Email | https://osintteam.blog/3-500-shopify-partners-bug-become-owner-without-verifying-the-email-936999f2dccd?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, bug-bounty, cybersecurity, tech | 17-Jan-2026 |
| Breaking Rate Limiting: Where It Breaks and How Attackers Bypass It | https://osintteam.blog/breaking-rate-limiting-where-it-breaks-and-how-attackers-bypass-it-a1fdd8099caf?source=rss------bug_bounty-5 | Fuzzyy Duck | bug-bounty, bugbounty-writeup, security, bug-bounty-tips, web-development | 17-Jan-2026 |
| How I Found My First Valid Bug Without Any Paid Tools | https://medium.com/@ramanidhaval11/how-i-found-my-first-valid-bug-without-any-paid-tools-84d5db2738fd?source=rss------bug_bounty-5 | Er Dhaval Ramani | cybercrime, cybersecurity, bug-bounty-tips, cyber-security-awareness, bug-bounty | 17-Jan-2026 |
| Google Dorks to Find SQL Injection Vulnerable Websites | https://osintteam.blog/google-dorks-to-find-sql-injection-vulnerable-websites-6eaf49f9d0c9?source=rss------bug_bounty-5 | Mr Abdullah | ethical-hacking, google-dork, hacking, bug-bounty, google | 17-Jan-2026 |
| Setup Android pentest environment on ubuntu 22.04 | https://medium.com/@risalahqolbu859/setup-android-pentest-environment-on-ubuntu-22-04-e3695c56a172?source=rss------bug_bounty-5 | Risalahqolbu | setup, android-bug-bounty, bug-bounty, ubuntu, android | 17-Jan-2026 |
| How Choosing the Right Wordlist Can Make or Break a Bug Bounty. | https://lopseg.medium.com/how-choosing-the-right-wordlist-can-make-or-break-a-bug-bounty-f2684b8fdabd?source=rss------bug_bounty-5 | Lopseg | bug-bounty-tips, bug-bounty-writeup, bug-bounty, cybersecurity, hacking | 17-Jan-2026 |
| Join Our Cybersecurity WhatsApp Group! | https://medium.com/@mirmahmood780/join-our-cybersecurity-whatsapp-group-3e6f7c1d0191?source=rss------bug_bounty-5 | Mirmahmood | cybersecurity, hacking, bug-bounty | 17-Jan-2026 |
| A Simple IDOR That Ignored Platform Logic | https://scriptjacker.medium.com/a-simple-idor-that-ignored-platform-logic-09bf86a8bf1d?source=rss------bug_bounty-5 | Parth Narula | bug-bounty-writeup, idor, bugs, bug-bounty-tips, bug-bounty | 17-Jan-2026 |
| The lazy method I use to learn bug bounty hunting | https://medium.com/@richard_wachara/the-lazy-method-i-use-to-learn-bug-bounty-hunting-0221184842e8?source=rss------bug_bounty-5 | RicOnTech | bug-bounty, learning, ethical-hacking, penetration-testing, hacking | 17-Jan-2026 |
| Cybersecurity Is Over-Engineered (And That’s a Problem) | https://medium.com/@paritoshblogs/cybersecurity-is-over-engineered-and-thats-a-problem-4454073d300c?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, information-technology, hacking, cyberattack | 17-Jan-2026 |
| How a Base64 Image API Turned a Trusted Cloud Bucket into an Attacker’s CDN | https://infosecwriteups.com/how-a-base64-image-api-turned-a-trusted-cloud-bucket-into-an-attackers-cdn-aa1470de09c0?source=rss------bug_bounty-5 | Supun Halangoda (Suppa) | cloud-computing, bug-bounty, api, cybersecurity, developer | 17-Jan-2026 |
| Master API Security: I Built a Vulnerable Lab for Beginners (VulnShop) | https://medium.com/@sreejihkn43073/master-api-security-i-built-a-vulnerable-lab-for-beginners-vulnshop-3c4ec0bc0da0?source=rss------bug_bounty-5 | Sreejihkn | bug-bounty, api-penetration-testing, api, web-penetration-testing, cybersecurity | 17-Jan-2026 |
| Hidden in the Source: Discovering Reflected XSS via Manual Code Review | https://medium.com/@xelcezeri/hidden-in-the-source-discovering-reflected-xss-via-manual-code-review-c2a697d9d8c1?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, bug-bounty-tips, bug-bounty | 17-Jan-2026 |
| How my valid critical bug got rejected | https://medium.com/@TheCyberAryan/how-my-valid-critical-bug-got-rejected-cf8213c5ed4e?source=rss------bug_bounty-5 | TheCyberAryan | ethical-hacking, bug-bounty, cybersecurity | 17-Jan-2026 |
| How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE | https://medium.com/@bakkar0x/how-i-discovered-a-dependency-confusion-vulnerability-in-a-ruby-application-leading-to-rce-9dd4c6b28127?source=rss------bug_bounty-5 | Ahmed Tarek | pentesting, bug-bounty, dependency-confusion, bug-bounty-tips, ruby | 17-Jan-2026 |
| Nested Comment Bypass file upload | https://medium.com/@b0x_in/nested-comment-bypass-file-upload-a0878f7a9aaf?source=rss------bug_bounty-5 | Muhammad Syahrul Haniawan | hacking, bug-bounty, cybersecurity | 17-Jan-2026 |
| Seguridad Web: Guía de Explotación de Métodos HTTP y Bypass de WAF | https://medium.com/@jpablo13/seguridad-web-gu%C3%ADa-de-explotaci%C3%B3n-de-m%C3%A9todos-http-y-bypass-de-waf-a6e02f537826?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, web-security, hacking, bug-bounty, technology | 16-Jan-2026 |
| If You Had to Secure a Company With Only 5 Tools, What Would They Be? | https://medium.com/@paritoshblogs/if-you-had-to-secure-a-company-with-only-5-tools-what-would-they-be-83ef3e6220b3?source=rss------bug_bounty-5 | Paritosh | ai, cybersecurity, bug-bounty, hacking, information-technology | 16-Jan-2026 |
| Speedtest.net Privacy Issue: Why Sharing Your Results Can Expose Your IP | https://medium.com/@alanbiju255/speedtest-net-privacy-issue-why-sharing-your-results-can-expose-your-ip-aedf54ce5f39?source=rss------bug_bounty-5 | Alanbiju | internet-speed-test, bug-bounty | 16-Jan-2026 |
| Novel Technique to Bypass Firewall (403 Bypass) | https://meetcyber.net/novel-technique-to-bypass-firewall-403-bypass-4c1b1d31edb2?source=rss------bug_bounty-5 | Rahul Singh Chauhan | bug-bounty, cloudflare, bypass-technique, web-application-firewall, penetration-testing | 16-Jan-2026 |
| Exploiting Time-Sensitive Vulnerabilities: A Practical Walkthrough (PortSwigger Lab) | https://medium.com/@jopelumi141/exploiting-time-sensitive-vulnerabilities-a-practical-walkthrough-portswigger-lab-4be6ddd1789e?source=rss------bug_bounty-5 | RootHawk | bug-bounty, owasp-top-10, web-security, race-condition, portswigger | 16-Jan-2026 |
| The Case of the Curious Code: A Reverse Engineering Detective Story | https://medium.com/@dimpchubb/the-case-of-the-curious-code-a-reverse-engineering-detective-story-56e666d27d9f?source=rss------bug_bounty-5 | VulnerabilityIntel | bug-bounty, ethical-hacking, technology, reverse-engineering, cyberse | 16-Jan-2026 |
| How I bypass Rate limit via IP rotation allow restriction bypass | https://jeetpal2007.medium.com/how-i-bypass-rate-limit-via-ip-rotation-allow-restriction-bypass-7af709f2d0fc?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, bug-bounty, vulnerability, bug-bounty-writeup, bug-bounty-tips | 16-Jan-2026 |
| AI Is Finding Bugs Faster Than Humans — Is This the End of Manual Testing? | https://medium.com/@mrunalimane2728/ai-is-finding-bugs-faster-than-humans-is-this-the-end-of-manual-testing-4787fc549489?source=rss------bug_bounty-5 | Code AI ML | bug-bounty, ai, humanity, artificial-intelligence, ai-tools | 16-Jan-2026 |
| “Bug Bounty Bootcamp #17: Mastering Blind XSS — Unleash the Hidden Predator That Devours Admin… | https://osintteam.blog/bug-bounty-bootcamp-17-mastering-blind-xss-unleash-the-hidden-predator-that-devours-admin-4d2753520212?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, technology, hacking, penetration-testing, cybersecurity | 16-Jan-2026 |
| BAC = $$$ | https://medium.com/@rajveer_0101/bac-71b9f4cfdf8b?source=rss------bug_bounty-5 | Rajveer | bug-bounty-writeup, broken-access-control, information-disclosure, authentication, bug-bounty | 16-Jan-2026 |
| From “Looks Legit” to “Definitely Malicious”: Header Analysis Explained | https://medium.com/@paritoshblogs/from-looks-legit-to-definitely-malicious-header-analysis-explained-4d1255f6473e?source=rss------bug_bounty-5 | Paritosh | malicious, bug-bounty, phishing, hacking, cybersecurity | 15-Jan-2026 |
| How I Bought a $1400 Jacket for Free Using a Business Logic Flaw | https://medium.com/@Cyb3rX7u/how-i-bought-a-1400-jacket-for-free-using-a-business-logic-flaw-3b60b31252d0?source=rss------bug_bounty-5 | Aashif | cybersecurity, business-logic-flaw, bug-bounty, web-security, coding | 15-Jan-2026 |
| Mastering SQLMap and Ghauri: A Practical Guide to WAF Bypass Techniques | https://infosecwriteups.com/mastering-sqlmap-and-ghauri-a-practical-guide-to-waf-bypass-techniques-1aaa9eee9d32?source=rss------bug_bounty-5 | N/A | bug-bounty, technology, penetration-testing, programming, cybersecurity | 15-Jan-2026 |
| I Didn’t Bypass Security — I Followed the Workflow Too Literally | https://medium.com/@iski/i-didnt-bypass-security-i-followed-the-workflow-too-literally-db6097198a4d?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, hacking, infosec, bug-bounty, cybersecurity | 15-Jan-2026 |
| How to Exploit JWT Tokens with Weak Signing Keys (Step-by-Step Guide) | https://medium.com/@prasangampathak9/how-to-exploit-jwt-tokens-with-weak-signing-keys-step-by-step-guide-c4876c51db43?source=rss------bug_bounty-5 | CyberSec Xploit | Prasangam | jwt-token, hacker, jwt-authentication, bug-bounty, jwt | 15-Jan-2026 |
| The Visual Ghost: How a Single Unicode Character Led to a Critical Account Takeover | https://medium.com/@InsbatArshad/the-visual-ghost-how-a-single-unicode-character-led-to-a-critical-account-takeover-84e620ff908f?source=rss------bug_bounty-5 | Be nice insabat | money, hacking, cybersecurity, programming, bug-bounty | 15-Jan-2026 |
| How I Found a P2 Broken Access Control Bug via a Tokenized URL | https://medium.com/@sivasankardas/how-i-found-a-p2-broken-access-control-bug-via-a-tokenized-ur-f4d48e26a022?source=rss------bug_bounty-5 | Sivasankar Das | ethical-hacking, bug-bounty, web-security, cybersecurity, broken-access-control | 15-Jan-2026 |
| XSS Attacks: A Practical Methodology for Security Testing | https://iaraoz.medium.com/xss-attacks-a-practical-methodology-for-security-testing-6bff4d0fae1e?source=rss------bug_bounty-5 | Israel Aráoz Severiche | web-security, hacking, bug-bounty, pentesting, cybersecurity | 15-Jan-2026 |
| VHost Discovery for Bug Bounty Hunters | https://msnrasel1.medium.com/vhost-discovery-for-bug-bounty-hunters-8ad2f1caa83d?source=rss------bug_bounty-5 | 3eyedraven | vhost, bug-bounty, cybersecurity, bug-bounty-tips, reconnaissance | 15-Jan-2026 |
| “Bug Bounty Bootcamp #16: Stored & Blind XSS — The ‘Time Bomb’ and ‘Message in a Bottle’ of Web… | https://amannsharmaa.medium.com/bug-bounty-bootcamp-16-stored-blind-xss-the-time-bomb-and-message-in-a-bottle-of-web-fc4366929393?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, penetration-testing, cybersecurity, learning, hacking | 15-Jan-2026 |
| Chain Exploitation in Web Pentesting ️ | https://medium.com/@esrakyhn.u/chain-exploitation-in-web-pentesting-%EF%B8%8F-ef776dc44a87?source=rss------bug_bounty-5 | Esra Kayhan | offensive-security, cybersecurity, security, bug-bounty, pentesting | 15-Jan-2026 |
| Why I Wiped the Crack and Went Back to “Community” by Choice (The Full Story) | https://hwedy00.medium.com/why-i-wiped-the-crack-and-went-back-to-community-by-choice-the-full-story-35c992397313?source=rss------bug_bounty-5 | Mohamed Hwedy | cybersecurity, bug-bounty, infosec, web-security, ethical-hacking | 15-Jan-2026 |
| How a Simple Misconfiguration in the Invitation Link Led Me to Full Account Takeover | https://medium.com/@sudo_a7med/how-a-simple-misconfiguration-in-the-invitation-link-led-me-to-full-account-takeover-e56d84e9e9f1?source=rss------bug_bounty-5 | sudo | response-manipulation, account-takeover, broken-access-control, auth-bypass, bug-bounty | 15-Jan-2026 |
| How do I feel about finding bugs as my meal? | https://imran-niaz.medium.com/how-do-i-feel-about-finding-bugs-as-my-meal-0e88a6a32bec?source=rss------bug_bounty-5 | Imran Niaz | api, bug-bounty, pentesting, facebook, hacking | 15-Jan-2026 |
| The Visual Ghost: How a Single Unicode Character Led to a Critical Account Takeover on self hosted… | https://medium.com/@InsbatArshad/the-visual-ghost-how-a-single-unicode-character-led-to-a-critical-account-takeover-84e620ff908f?source=rss------bug_bounty-5 | Be nice insabat | money, hacking, cybersecurity, programming, bug-bounty | 15-Jan-2026 |
| “Bug Bounty Bootcamp #16: Stored & Blind XSS — The ‘Time Bomb’ and ‘Message in a Bottle’ of Web… | https://osintteam.blog/bug-bounty-bootcamp-16-stored-blind-xss-the-time-bomb-and-message-in-a-bottle-of-web-fc4366929393?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, penetration-testing, cybersecurity, learning, hacking | 15-Jan-2026 |
| Masscan vs. Nmap: Port Scanning Guide for Bug Bounty | https://medium.com/@jpablo13/masscan-vs-nmap-port-scanning-guide-for-bug-bounty-7b4c93f0acc3?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, reconnaissance, hacking, technology | 14-Jan-2026 |
| Zero Trust Is Not a Product: How Most Companies Get It Wrong | https://medium.com/@paritoshblogs/zero-trust-is-not-a-product-how-most-companies-get-it-wrong-70d09e2b3107?source=rss------bug_bounty-5 | Paritosh | information-technology, bug-bounty, hacking, cybersecurity, zero-trust | 14-Jan-2026 |
| How I Found a Critical SSRF (Very Easily) Through Redirect Bypass | https://medium.com/@InsbatArshad/how-i-found-a-critical-ssrf-very-easily-through-redirect-bypass-1bddcc068984?source=rss------bug_bounty-5 | Be nice insabat | programming, penetration-testing, bug-bounty, money, cybersecurity | 14-Jan-2026 |
| Easy 3 Digit Bounty: A Silent Takeover Flaw $$$ | https://medium.com/@vansh_51476/when-oauth-isnt-really-oauth-a-silent-account-takeover-flaw-0ec4f69a36fe?source=rss------bug_bounty-5 | VANSH | cybersecurity, bug-bounty | 14-Jan-2026 |
| Turn Your Android Phone Into a Pentesting Suite (No Root Required) | https://medium.com/@gecr07/turn-your-android-phone-into-a-pentesting-suite-no-root-required-62b3f098356c?source=rss------bug_bounty-5 | gecr07 | android-pentesting, red-team, bug-bounty, cybersecurity, termux | 14-Jan-2026 |
| Broken Gates: Why OWASP #1 (Access Control) Is the Hottest Ticket in Bug Bounty | https://osintteam.blog/broken-gates-why-owasp-1-access-control-is-the-hottest-ticket-in-bug-bounty-86df2210d3c0?source=rss------bug_bounty-5 | Nicholas Mullenski | broken-access-control, bug-bounty, cybersecurity, ethical-hacking, penetration-testing | 14-Jan-2026 |
| 21 Misconfigurations That Led to Domain Takeovers | https://medium.com/@verylazytech/21-misconfigurations-that-led-to-domain-takeovers-6281bf8791b8?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, account-takeover, penetration-testing, misconfiguration, bug-bounty | 14-Jan-2026 |
| PNPT Exam Review 2026 — Passed on My First Attempt in Under 24 Hours | https://medium.com/@talhakhatib4/pnpt-exam-review-2026-passed-on-my-first-attempt-in-under-24-hours-7f3d4625c013?source=rss------bug_bounty-5 | Talha Khatib | cybersecurity, bug-bounty, hacking, ethical-hacking, exam-preparation | 14-Jan-2026 |
| Building the Ultimate Android Bug Bounty Lab: Target Recon, Native Crashes, and Static Analysis… | https://medium.com/@sbl.itd.reza/building-the-ultimate-android-bug-bounty-lab-target-recon-native-crashes-and-static-analysis-ddddea479dfb?source=rss------bug_bounty-5 | Rezaul Hasan | android, apk, bug-bounty, kali-linux, android-static-analysis | 14-Jan-2026 |
| How Pro Hackers Test Internal Subdomains (admin, stage, dev) Without “Hacking.” | https://medium.com/@n0llsec/how-pro-hackers-test-internal-subdomains-admin-stage-dev-without-hacking-311059a35fe2?source=rss------bug_bounty-5 | NullSec | web-app-pentesting, bugbounty-writeup, bug-bounty-tips, cybersecurity, bug-bounty | 14-Jan-2026 |
| Cybersecurity — Firewall Configuration Review: A Hands-On Example | https://cybersecuritywriteups.com/cybersecurity-firewall-configuration-review-a-hands-on-example-5213f7f00f4f?source=rss------bug_bounty-5 | Rahul Singh Chauhan | firewall, penetration-testing, configuration-review, bug-bounty, cybersecurity | 14-Jan-2026 |
| Open Redirect to XSS | https://medium.com/@xelcezeri/open-redirect-to-xss-3a579bf64ed2?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty, bug-bounty-writeup, bug-bounty-tips | 14-Jan-2026 |
| My First XSS: How Simple Automation Helped Me Find It | https://medium.com/@dexter0_0/my-first-xss-how-simple-automation-helped-me-find-it-2d6d3f6143f4?source=rss------bug_bounty-5 | AhmedAbdelaziz | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 14-Jan-2026 |
| A 5-Day Bug Bounty Hunt on a Telecom Target: From Recon to RXSS and Open Redirect | https://medium.com/@ayanacharya193/a-5-day-bug-bounty-hunt-on-a-telecom-target-from-recon-to-rxss-and-open-redirect-119a27f8e37b?source=rss------bug_bounty-5 | SpiX-7 | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty, web-penetration-testing | 14-Jan-2026 |
| Host Header Injection: A Practical Methodology for Security Testing | https://iaraoz.medium.com/host-header-injection-a-practical-methodology-for-security-testing-c5dab8abf2cf?source=rss------bug_bounty-5 | Israel Aráoz Severiche | pentesting, bug-bounty, web-security, hacking, ethical-hacking | 14-Jan-2026 |
| Jailbreak Detection Bypass Using LLDB: No Escape—iOS Jailbreak Detection Challenge | https://medium.com/@0xk3r0/jailbreak-detection-bypass-using-lldb-no-escape-ios-jailbreak-detection-challenge-881fd8e89ed0?source=rss------bug_bounty-5 | Kyrillos nady | mobile-security, bug-bounty, ios, mobile-pentesting, ios-security | 14-Jan-2026 |
| An SSRF Sink You’re Probably Skipping (It Earned Me $700 in Bounties) | https://medium.com/@thomscoder/an-ssrf-sink-youre-probably-skipping-it-earned-me-700-in-bounties-438231ab5205?source=rss------bug_bounty-5 | Thomas A. | bug-bounty, cybersecurity, penetration-testing, bug-bounty-writeup, technology | 14-Jan-2026 |
| Bypassing Two-Factor Authentication via Password Reset Functionality | https://19whoami19.medium.com/bypassing-two-factor-authentication-via-password-reset-functionality-8ab02e8acdb4?source=rss------bug_bounty-5 | WHO AM I ? | 2fa, penetration-testing, bug-bounty, cybersecurity, broken-access-control | 13-Jan-2026 |
| Masscan vs. Nmap: Guía de Escaneo de Puertos para Bug Bounty | https://medium.com/@jpablo13/masscan-vs-nmap-gu%C3%ADa-de-escaneo-de-puertos-para-bug-bounty-41701604d001?source=rss------bug_bounty-5 | JPablo13 | technology, reconnaissance, bug-bounty, cybersecurity, hacking | 13-Jan-2026 |
| $2,000 Bug Bounty: Turning a Peer Discovery Protocol Into a DDoS Weapon | https://osintteam.blog/2-000-bug-bounty-turning-a-peer-discovery-protocol-into-a-ddos-weapon-8da81beea96d?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, hacking, penetration-testing, technology, bug-bounty | 13-Jan-2026 |
| When a Checkout Page Leaks Your Session | https://infosecwriteups.com/when-a-checkout-page-leaks-your-session-f08885668ae7?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, cybersecurity, hacking, penetration-testing | 13-Jan-2026 |
| 10 Psychology-Based Detection Tactics Blue Teams Use: Master How Defenders Outsmart Attackers | https://medium.com/@verylazytech/10-psychology-based-detection-tactics-blue-teams-use-master-how-defenders-outsmart-attackers-f5b0ee45a301?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, psychology, hacking, cybersecurity, cyberattack | 13-Jan-2026 |
| Bug Bounty Report Template: How I Document Credential Leaks for P1 Submissions | https://medium.com/@alexandrevandammepro/bug-bounty-report-template-how-i-document-credential-leaks-for-p1-submissions-60a9226649cd?source=rss------bug_bounty-5 | Alexandre Vandamme | bug-bounty, infosec, bug-bounty-tips, cybersecurity, hacking | 13-Jan-2026 |
| The “Inspector Gadget” Hack: How I Bypassed Federal Authentication by Deleting a Popup | https://zer0figure.medium.com/the-inspector-gadget-hack-how-i-bypassed-federal-authentication-by-deleting-a-popup-03dd897177fe?source=rss------bug_bounty-5 | Zer0Figure | bug-bounty-writeup, bug-bounty, cybersecurity, security, penetration-testing | 13-Jan-2026 |
| Hacking the Hackers | https://medium.com/@Br0k3n_1337/hacking-the-hackers-bd34031b8b53?source=rss------bug_bounty-5 | Br0k3n_1337 Aka Sourav Khan | information-security, cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 13-Jan-2026 |
| How One Test Led Me to a Critical P1 Account Takeover (ATO) Bug on Bugcrowd | https://infosecwriteups.com/how-one-test-led-me-to-a-critical-p1-account-takeover-ato-bug-on-bugcrowd-831370edc8e9?source=rss------bug_bounty-5 | Rajankumarbarik | bug-bounty, python, technology, programming, cybersecurity | 13-Jan-2026 |
| The “Inspector Gadget” Hack: How I Bypassed Federal Authentication by Deleting a Popup | https://systemweakness.com/the-inspector-gadget-hack-how-i-bypassed-federal-authentication-by-deleting-a-popup-03dd897177fe?source=rss------bug_bounty-5 | Zer0Figure | bug-bounty-writeup, bug-bounty, cybersecurity, security, penetration-testing | 13-Jan-2026 |
| How a “Temporary Fix” Became a Permanent Security Disaster | https://medium.com/@iski/how-a-temporary-fix-became-a-permanent-security-disaster-be5e9b8b2694?source=rss------bug_bounty-5 | Iski | bug-bounty, bug-bounty-tips, cybersecurity, infosec, hacking | 13-Jan-2026 |
| Bypassing XSS Protection: Thinking Beyond —Mastering Diverse XSS Execution Vectors” | https://osintteam.blog/bug-bounty-bootcamp-15-beyond-script-alert-1-script-mastering-diverse-xss-execution-vectors-d4d133972725?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, programming, technology, cybersecurity, penetration-testing | 13-Jan-2026 |
| How I Supercharged Wazuh SIEM with AI Using Claude Desktop (MCP Integration) | https://medium.com/@momenrezkk90/how-i-supercharged-wazuh-siem-with-ai-using-claude-desktop-mcp-integration-70a973488477?source=rss------bug_bounty-5 | MOAMEN REZK | penetration-testing, bug-bounty, security, hacking, cybersecurity | 13-Jan-2026 |
| How I Found a Critical Biometric 2FA Bypass… and Lost the Bounty | https://letchupkt.medium.com/how-i-found-a-critical-biometric-2fa-bypass-and-lost-the-bounty-9c38441640c4?source=rss------bug_bounty-5 | LETCHU PKT | bug-bounty-writeup, cyber-security-awareness, hacking, bug-bounty-tips, bug-bounty | 13-Jan-2026 |
| Day 3 of Learning AWS: Elastic IP and Elastic Block Storage | https://muhammadkashifsecurityengineer.medium.com/day-3-of-learning-aws-elastic-ip-and-elastic-block-storage-df72bcb50e3c?source=rss------bug_bounty-5 | Muhammad Kashif | learning, cloud-security, cloud-computing, bug-bounty, aws | 13-Jan-2026 |
| The Day I Realized Cyber Security Isn’t About Technology | https://medium.com/@ramanidhaval11/the-day-i-realized-cyber-security-isnt-about-technology-2af7b0c47f15?source=rss------bug_bounty-5 | Er Dhaval Ramani | cybersecurity, cyber-security-awareness, bug-bounty, self-awareness | 13-Jan-2026 |
| No spidey sense, just my guts: How i accidentally bought a VPS for €0.01 | https://medium.com/@pevinkumar/no-spidey-sense-just-my-guts-how-i-accidentally-bought-a-vps-for-0-01-d22b433e79ed?source=rss------bug_bounty-5 | PevinKumar A | penetration-testing, bug-bounty, cybersecurity, security, hacking | 13-Jan-2026 |
| Top 5 AI Tools Every Bug Bounty Hunter Should Know | https://medium.com/data-and-beyond/top-5-ai-tools-every-bug-bounty-hunter-should-know-1d7638598f74?source=rss------bug_bounty-5 | Shahzaib | ai-hacking, bug-bounty, cybersecurity, top-5, ethical-hacking | 13-Jan-2026 |
| From 403 Forbidden to $$$$ How a Simple Extension Bypass Led to Unauthenticated Access to Private… | https://kiraadx.medium.com/from-403-forbidden-to-how-a-simple-extension-bypass-led-to-unauthenticated-access-to-private-f1f4633b82dc?source=rss------bug_bounty-5 | KiRaaDx | cybersecurity, bug-bounty-tips, bug-bounty | 13-Jan-2026 |
| When ‘Dead’ Pets Come Back to Life: A Bug I Found on a Pet Platform | https://skeptiker.medium.com/when-dead-pets-come-back-to-life-a-bug-i-found-on-a-pet-platform-97b1aac7de73?source=rss------bug_bounty-5 | SK3PT1K3R | cybersecurity, bug-bounty, api, bugbounty-writeup, business-logic | 13-Jan-2026 |
| VulnBank — FahemSec Web Challenge | https://mohammadibnibrahim.medium.com/vulnbank-fahemsec-web-challenge-052d97561cbf?source=rss------bug_bounty-5 | محمد بن إبراهيم | penetration-testing, cybersecurity, bug-bounty, ctf, hacking | 12-Jan-2026 |
| AI-Assisted Reverse Engineering & Analysis | https://medium.com/@paritoshblogs/ai-assisted-reverse-engineering-analysis-5352014bb350?source=rss------bug_bounty-5 | Paritosh | ai, bug-bounty, cybersecurity, reverse-engineering, digital-forensics | 12-Jan-2026 |
| Guide to Authentication and Session Management Vulnerabilities Part-2 | https://medium.com/@rr-1k/guide-to-authentication-and-session-management-vulnerabilities-part-2-b5be690e4585?source=rss------bug_bounty-5 | rr-1k | bugs, vulnerability, web-security, hacking, bug-bounty | 12-Jan-2026 |
| XFS: El tendón de Aquiles de los Cajeros Automáticos | https://medium.com/@c.r.p/xfs-el-tend%C3%B3n-de-aquiles-de-los-cajeros-autom%C3%A1ticos-0779d0e00985?source=rss------bug_bounty-5 | Carlos Pastrana | hacking, banks, cybersecurity, bug-bounty, infosec | 12-Jan-2026 |
| Closing 2025 making 4300$ USD and participating of the SABF (South american Business Forum) | https://medium.com/@vanpedrazas/closing-2025-making-4300-usd-and-participating-of-the-sabf-south-american-business-forum-8a4f94490a39?source=rss------bug_bounty-5 | Ivan Bernardo Pedrazas Rodriguez | bug-bounty, motivation, cybersecurity, psychology, business | 12-Jan-2026 |
| How I Got My First Bug Bounty (And What I’d Do Differently) | https://medium.com/@neonmaxima/how-i-got-my-first-bug-bounty-and-what-id-do-differently-ffab3dfbc5cb?source=rss------bug_bounty-5 | Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA] | cybersecurity, hacker, bug-bounty-tips, bug-bounty-hunter, bug-bounty | 12-Jan-2026 |
| My First Bug Bounty Report After CEH and What It Taught Me | https://medium.com/@iamdawoodayub/my-first-bug-bounty-report-after-ceh-and-what-it-taught-me-12587d23f169?source=rss------bug_bounty-5 | Iamdawoodayub | infosec, bug-bounty, cybersecurity, technology, ethical-hacking | 12-Jan-2026 |
| The “Denial of Wallet” Race Condition: How I Bypassed Transaction Limits (And Got Rejected) | https://systemweakness.com/the-denial-of-wallet-race-condition-how-i-bypassed-transaction-limits-and-got-rejected-546598a25a23?source=rss------bug_bounty-5 | Zer0Figure | bug-bounty-writeup, bug-bounty, bug-bounty-tips, security, cybersecurity | 12-Jan-2026 |
| The Tiny Auth Misstep That Hid a Login Bypass for Three Years | https://medium.com/@DollarMistake/the-tiny-auth-misstep-that-hid-a-login-bypass-for-three-years-fa8bb31e4034?source=rss------bug_bounty-5 | 1$ Mistake | login, bug-bounty, bypass, hacking, misconfiguration | 12-Jan-2026 |
| Belajar dari Logic Error: Saat Bug Berubah Menjadi Kerugian | https://medium.com/@hanifsholihin884/belajar-dari-logic-error-saat-bug-berubah-menjadi-kerugian-041c1a1ccf29?source=rss------bug_bounty-5 | Hanifsholihin | dumbwaysindonesia, logic-error, bug-bounty, programming | 12-Jan-2026 |
| Day 2 of the Bug Bounty Bootcamp: Learning Scope, Recon & Smart Targeting | https://medium.com/@faizan.nazir/day-2-of-the-bug-bounty-bootcamp-learning-scope-recon-smart-targeting-11fd85874b2a?source=rss------bug_bounty-5 | Faizan Nazir | bug-bounty, social-media, bug-hunting, cybersecurity, learning | 12-Jan-2026 |
| Garmin inReach security: Insecure Link Design and User Data Privacy (Part I) | https://medium.com/@lorurolu/garmin-inreach-security-insecure-link-design-and-user-data-privacy-part-i-f572a47c34e1?source=rss------bug_bounty-5 | Llorenç | security, research, bug-bounty | 12-Jan-2026 |
| How I Found 124,000 Leaked PII Records in AT&T | https://medium.com/@0xcogitomicho/how-i-found-124-000-leaked-pii-records-in-at-t-2929374de1f8?source=rss------bug_bounty-5 | 0xMicho | bug-bounty, cybersecurity | 12-Jan-2026 |
| Business Logic CTF Challenge BugForge: Cheesy Does It | https://medium.com/@bharanidharan.spark/business-logic-ctf-challenge-bugforge-cheesy-does-it-25ef6ceb8172?source=rss------bug_bounty-5 | ShadeHawk | ctf-writeup, bug-bounty, cybersecurity, web-security | 12-Jan-2026 |
| Recon Hunting en Bug Bounty | https://medium.com/@profesor.luismcv/recon-hunting-en-bug-bounty-7b215e2572b1?source=rss------bug_bounty-5 | Mazinger | bug-bounty | 12-Jan-2026 |
| Do We Really Understand What a Vulnerability Is? | https://medium.com/@mouhibmh/do-we-really-understand-what-a-vulnerability-is-91f858d4aa91?source=rss------bug_bounty-5 | MouhibMahadbi | technology, software-design, bug-bounty, critical-thinking, cybersecurity | 12-Jan-2026 |
| From Failure to $32,000: My Bug Bounty Journey | https://infosecwriteups.com/from-failure-to-32-000-my-bug-bounty-journey-84eac429e2d0?source=rss------bug_bounty-5 | iamgk808 | bug-bounty-writeup, bug-bounty, bugbounty-writeup, bug-bounty-tips, bug-bounty-hunter | 12-Jan-2026 |
| When 200 OK Lies: Breaking Down WAF Soft-404 Deception in Real-World Bug Bounty | https://medium.com/@princetphilip/when-200-ok-lies-breaking-down-waf-soft-404-deception-in-real-world-bug-bounty-083178a27322?source=rss------bug_bounty-5 | Prince T Philip | education, infosec, web-development, bug-bounty, penetration-testing | 12-Jan-2026 |
| Hacker At Work:Recon Workflow Process | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/hacker-at-work-recon-workflow-process-ad056880a271?source=rss------bug_bounty-5 | ghostyjoe | kali-linux, ethical-hacking, cybersecurity, bug-bounty, hacking | 12-Jan-2026 |
| The Bug Bounty Toolkit (2026): Tools, Workflows, and Real-World Recon That Actually Finds Bugs | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/the-bug-bounty-toolkit-2026-tools-workflows-and-real-world-recon-that-actually-finds-bugs-bb880a407be6?source=rss------bug_bounty-5 | ghostyjoe | cybersecurity, ethical-hacking, bug-bounty, pentesting, reconnaissance | 12-Jan-2026 |
| Bypassing Email Verification via OAuth Misconfiguration | https://medium.com/@xelcezeri/bypassing-email-verification-via-oauth-misconfiguration-cad488c15f2f?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 12-Jan-2026 |
| “Bug Bounty Bootcamp #14: Your First XSS Find — A Step-by-Step Hunter’s Methodology” | https://osintteam.blog/bug-bounty-bootcamp-14-your-first-xss-find-a-step-by-step-hunters-methodology-097b4639bf46?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, programming, penetration-testing, technology, cybersecurity | 12-Jan-2026 |
| This Bug Bounty Recon is much PEAKKK!!!!!! | https://medium.com/@alhamr1zvi/this-bug-bounty-recon-is-much-peakkk-05581c02486e?source=rss------bug_bounty-5 | Alham Rizvi(ExoidSec) | ethical-hacking, hacking, bug-hunting, bug-bounty, cybersecurity | 12-Jan-2026 |
| Dig Dug TryHackMe Write UP | https://medium.com/@cat0x01/dig-dug-tryhackme-write-up-0d8ee652c775?source=rss------bug_bounty-5 | cat0x01 | bug-bounty, cybersecurity, pentesting, ctf, tryhackme | 12-Jan-2026 |
| Bypassing SSRF Protections: A $10,000 Lesson from Slack | https://medium.com/@Aacle/bypassing-ssrf-protections-a-10-000-lesson-from-slack-6cff022a44a6?source=rss------bug_bounty-5 | Abhishek meena | infosec, bug-bounty-tips, ssrf, hacking, bug-bounty | 11-Jan-2026 |
| Beginners Guide to Setup your “GF” !! | https://medium.com/@zisansakibhaque/beginners-guide-to-setup-your-gf-3a5fca7e6edf?source=rss------bug_bounty-5 | Sakib Haque Zisan | bug-bounty, gf-tool, cybersecurity | 11-Jan-2026 |
| First Learn, Then Earn: My Day 1 Journey into Bug Bounty Hunting | https://medium.com/@faizan.nazir/first-learn-then-earn-my-day-1-journey-into-bug-bounty-hunting-aa02808d28bb?source=rss------bug_bounty-5 | Faizan Nazir | ethical-hacking, cybersecurity, social-media, bug-bounty, learning | 11-Jan-2026 |
| Bypassing SSRF Protections: A $10,000 Lesson from Slack | https://infosecwriteups.com/bypassing-ssrf-protections-a-10-000-lesson-from-slack-6cff022a44a6?source=rss------bug_bounty-5 | Abhishek meena | infosec, bug-bounty-tips, ssrf, hacking, bug-bounty | 11-Jan-2026 |
| Bug Bounty Report Template: Turn Leaked Credentials Into P1s | https://medium.com/@alexandrevandammepro/bug-bounty-report-template-turn-leaked-credentials-into-p1s-5f114904ecda?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, hacking, cybersecurity, bug-bounty, bug-bounty-tips | 11-Jan-2026 |
| [PortSwigger] [Apprentice] Lab: CSRF vulnerability with no defenses | https://medium.com/@Javiki/portswigger-apprentice-lab-csrf-vulnerability-with-no-defenses-e0fb7a009e43?source=rss------bug_bounty-5 | Javiki | bug-bounty, portswigger, exploitation, hacking, web-penetration-testing | 11-Jan-2026 |
| The Algorithmic Art of Debugging: Beyond Breakpoints and Print Statements | https://medium.com/@mdsiaofficial/the-algorithmic-art-of-debugging-beyond-breakpoints-and-print-statements-e27b38e7cb34?source=rss------bug_bounty-5 | Md Shoriful Islam Ashiq | bugs, bug-bounty, software-testing, software-development, debugging | 11-Jan-2026 |
| Everything About Cloud Bucket Hacking ( S3 & GCS & Azure & Firebase ) | https://medium.com/legionhunters/everything-about-cloud-bucket-hacking-s3-gcs-azure-firebase-c027e9441ff9?source=rss------bug_bounty-5 | Anas NadY | penetration-testing, bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 11-Jan-2026 |
| Local File Inclusion(LFI) Vulnerability | https://medium.com/@raihan408548/local-file-inclusion-lfi-vulnerability-30da50aef6bf?source=rss------bug_bounty-5 | Md. Raihan | lfi-vulnerability, bug-bounty, lfi, ethical-hacking, pentesting | 11-Jan-2026 |
| Race condition leading to multiple refunds and cash re | https://medium.com/@habibhassan293/race-condition-leading-to-multiple-refunds-and-cash-re-bdcf890cafca?source=rss------bug_bounty-5 | Excessium | bug-bounty-writeup, bug-bounty-tips, bug-bounty, race-condition | 11-Jan-2026 |
| Business logic flaw leading to product depletion | https://medium.com/@habibhassan293/business-logic-flaw-leading-to-product-depletion-6cfbc7ecda66?source=rss------bug_bounty-5 | Excessium | bug-bounty-tips, business-logic-flaw, bug-bounty, bug-bounty-writeup | 11-Jan-2026 |
| Python for Pentesters: 15 Real Bug-Finding Scripts You Can Use Today | https://medium.com/@verylazytech/python-for-pentesters-15-real-bug-finding-scripts-you-can-use-today-4ac22fcb5e13?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, bug-bounty, red-team, python, script | 11-Jan-2026 |
| Zero Click ATO via Systemic Mass Assignment: The Phantom Hand | https://medium.com/@Pwnedl0l/zero-click-ato-via-systemic-mass-assignment-the-phantom-hand-af4f6ce11788?source=rss------bug_bounty-5 | Jawad Momani | penetration-testing, bug-bounty, cybersecurity, infosec, ethical-hacking | 11-Jan-2026 |
| Building the Ultimate Android Bug Bounty Lab: The Network Nightmare (Part 3) | https://medium.com/@sbl.itd.reza/building-the-ultimate-android-bug-bounty-lab-the-network-nightmare-part-3-6ee9c01ee189?source=rss------bug_bounty-5 | Rezaul Hasan | android-pentesting, mobsf, bug-bounty, pentesting, android | 11-Jan-2026 |
| Broken Access Control Is a Trust Problem | https://medium.com/@cleoz.sec/broken-access-control-is-a-trust-problem-e46d0dba0687?source=rss------bug_bounty-5 | Cleo | cybersecurity, idor, bug-bounty, technology, information-security | 11-Jan-2026 |
| A Tiny CORS Header That Quietly Undid Years of Security Work | https://medium.com/@DollarMistake/a-tiny-cors-header-that-quietly-undid-years-of-security-work-cdb7d04069eb?source=rss------bug_bounty-5 | 1$ Mistake | cors, programming, bug-bounty, bugs, hacking | 11-Jan-2026 |
| Everything About Cloud Bucket Hacking ( S3 & GCS & Azure & Firebase ) | https://medium.com/@anas-nady/everything-about-cloud-bucket-hacking-s3-gcs-azure-firebase-c027e9441ff9?source=rss------bug_bounty-5 | Anas NadY | penetration-testing, bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 11-Jan-2026 |
| BUSINESS LOGIC ISSUES | https://medium.com/@cybernight646/business-logic-issues-54f9962267e5?source=rss------bug_bounty-5 | Cybernight | penetration-testing, bug-bounty, hacking, cybersecurity | 11-Jan-2026 |
| This Endpoint Was “Read-Only” — Until I Read Everything | https://infosecwriteups.com/this-endpoint-was-read-only-until-i-read-everything-c157154bdb99?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty-tips, infosec, hacking, bug-bounty | 11-Jan-2026 |
| Finding Remote Code Execution in Google: A Bug Hunter’s Story | https://rootxabit.medium.com/finding-remote-code-execution-in-google-a-bug-hunters-story-7b22656ecf6b?source=rss------bug_bounty-5 | zabit majeed | cve, google, bug-bounty, dependency-injection, hacking | 11-Jan-2026 |
| “Bug Bounty Bootcamp #13: Open Redirects — The Hacker’s Ultimate ‘Force Multiplier’” | https://osintteam.blog/bug-bounty-bootcamp-13-open-redirects-the-hackers-ultimate-force-multiplier-bdab5f50c81d?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, cybersecurity, programming, technology, penetration-testing | 11-Jan-2026 |
| Everything About Cloud Bucket Hacking ( S3 & GCS & Azure & Firebase ) | https://cybersecuritywriteups.com/everything-about-cloud-bucket-hacking-s3-gcs-azure-firebase-c027e9441ff9?source=rss------bug_bounty-5 | Anas NadY | penetration-testing, bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 11-Jan-2026 |
| Beyond IDOR: Discovering a Stored XSS in a Vulnerable Web Platform | https://medium.com/@mv999exe/beyond-idor-discovering-a-stored-xss-in-a-vulnerable-web-platform-3644bdb67a2e?source=rss------bug_bounty-5 | mv999exe | penetration-testing, bug-bounty-writeup, bug-bounty, pentesting | 11-Jan-2026 |
| Back to Basics: How I took over an account with a simple ID change (IDOR) | https://medium.com/@mv999exe/back-to-basics-how-i-took-over-an-account-with-a-simple-id-change-idor-b82960cafd3c?source=rss------bug_bounty-5 | mv999exe | bug-bounty, penetration-testing, pentesting, bug-bounty-writeup | 11-Jan-2026 |
| Bug Bounty Hunters: Hunt this bug in 2026 | https://medium.com/@jeosantos2005/bug-bounty-hunters-hunt-this-bug-in-2026-368a740c8d8f?source=rss------bug_bounty-5 | Jeosantos | bug-bounty, programming, cybersecurity, bug-bounty-tips, bug-bounty-writeup | 10-Jan-2026 |
| Commix Guide: Automating OS Command Injection in Bug Bounty | https://medium.com/@jpablo13/commix-guide-automating-os-command-injection-in-bug-bounty-26735e722fe4?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, cybersecurity, bug-bounty, hacking, technology | 10-Jan-2026 |
| How I Started a Bug-Bounty Career in 2026 — A Practical Roadmap | https://medium.com/infosec-writes-up/how-i-started-a-bug-bounty-career-in-2026-a-practical-roadmap-8bfd844d6a44?source=rss------bug_bounty-5 | Hackers Things | pentesting, bug-bounty, careers, cybersecurity, infosec | 10-Jan-2026 |
| Which Bugs to Hunt for in 2026 | https://infosecwriteups.com/which-bugs-to-hunt-for-in-2026-9359d33b0f57?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty-writeup, bug-bounty-tips, ai, bug-bounty, cybersecurity | 10-Jan-2026 |
| How to Use LLMs For Hacking | Bug Bounty Tips | https://medium.com/@alhamr1zvi/how-to-use-llms-for-hacking-bug-bounty-tips-df39c94ac2e6?source=rss------bug_bounty-5 | Alham Rizvi(ExoidSec) | ethical-hacking, llm, bug-bounty, ai, artificial-intelligence | 10-Jan-2026 |
| File Path Traversal, Validation of File Extension with Null Byte Bypass | https://meetcyber.net/file-path-traversal-validation-of-file-extension-with-null-byte-bypass-7eeabc0ad3b1?source=rss------bug_bounty-5 | Bash Overflow | directory-traversal, file-path-traversal, bug-bounty, bypass-extension-file, null-byte-bypass | 10-Jan-2026 |
| Multitasking Is Quietly Killing Your Bug Bounty Results | https://infosecwriteups.com/multitasking-is-quietly-killing-your-bug-bounty-results-9c08d04f653d?source=rss------bug_bounty-5 | Gl1tch | mental-health, productivity, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 10-Jan-2026 |
| Bug Bounty Tools: A Practical List of Old & New Tools Real Hackers Use | https://infosecwriteups.com/bug-bounty-tools-a-practical-list-of-old-new-tools-real-hackers-use-bbf7eb7009f8?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, vulnerability, technology, penetration-testing, bug-bounty | 10-Jan-2026 |
| How a Simple Email List Got Me My First Bug Bounty | https://medium.com/@suvraj112/how-a-simple-email-list-got-me-my-first-bug-bounty-0fe69dfc66b2?source=rss------bug_bounty-5 | Suvraj | bug-bounty-writeup, bugs, cybersecurity, bug-bounty, bug-bounty-tips | 10-Jan-2026 |
| Released a book “A Practical Introduction to OSS Bug Hunting” | https://medium.com/@scgajge12/released-a-book-a-practical-introduction-to-oss-bug-hunting-dd59fd7e9213?source=rss------bug_bounty-5 | morioka12 | bug-hunt, web-security, bug-bounty, cve, bug-hunter | 10-Jan-2026 |
| The €400 Bug - VPN/Geo Location Bypass | https://infosecwriteups.com/the-400-bug-vpn-geo-location-bypass-0e9a6d26dd37?source=rss------bug_bounty-5 | Umanhonlen Gabriel | hacker, bug-bounty, bug-bounty-writeup, cybersecurity, vulnerability | 10-Jan-2026 |
| Released a book “A Practical Introduction to OSS Bug Hunting” | https://medium.com/@scgajge12/released-a-book-a-practical-introduction-to-oss-bug-hunting-dd59fd7e9213?source=rss------bug_bounty-5 | morioka12 | bug-hunt, web-security, cybersecurity, bug-bounty, cve | 10-Jan-2026 |
| Automating HackerOne Program Updates with Telegram Notifications | https://medium.com/@zbyte27/automating-hackerone-program-updates-with-telegram-notifications-7f1c8e0e29ef?source=rss------bug_bounty-5 | Zbyte | automation, bug-bounty, hackerone | 10-Jan-2026 |
| Introduction | https://medium.com/@zbyte27/introduction-edc1811f2079?source=rss------bug_bounty-5 | Zbyte | reconnaissance, bug-bounty, automation | 10-Jan-2026 |
| How a Simple Business Logic Flaw Caused an Account Lockout DoS | https://medium.com/@christosdimitropouloss/how-a-simple-business-logic-flaw-caused-an-account-lockout-dos-c6b66bd2e3d0?source=rss------bug_bounty-5 | christos dimitropoulos | bug-bounty-tips, bug-bounty, bug-bounty-writeup, infosec, infosec-write-ups | 10-Jan-2026 |
| How i was able to delete any user account i wanted from the application 🙂 | https://medium.com/@mustafamahmvd/how-i-was-able-to-delete-any-user-account-i-wanted-from-the-application-44426f78a70a?source=rss------bug_bounty-5 | aiden0x | account-takeover, bug-bounty | 10-Jan-2026 |
| $22,300 Bug Bounty: Cloning Private GitLab Repositories via Import Feature | https://osintteam.blog/22-300-bug-bounty-cloning-private-gitlab-repositories-via-import-feature-15bcabb62530?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, vulnerability, penetration-testing, web-security | 10-Jan-2026 |
| The Dark Web Dump Was Old — The Vulnerability Wasn’t ️ | https://infosecwriteups.com/the-dark-web-dump-was-old-the-vulnerability-wasnt-%EF%B8%8F-f0c4a2df8171?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, bug-bounty-tips, bug-bounty, infosec | 10-Jan-2026 |
| Guía de Commix: Automatización de OS Command Injection en Bug Bounty | https://medium.com/@jpablo13/gu%C3%ADa-de-commix-automatizaci%C3%B3n-de-os-command-injection-en-bug-bounty-809e73a7db4f?source=rss------bug_bounty-5 | JPablo13 | hacking, bug-bounty, penetration-testing, cybersecurity, technology | 09-Jan-2026 |
| From Vibe Coding to Threat Hunting: How I Built a Honeypot That Caught the Mirai Botnet | https://medium.com/@rootsploit/from-vibe-coding-to-threat-hunting-how-i-built-a-honeypot-that-caught-the-mirai-botnet-a38a4f04e112?source=rss------bug_bounty-5 | Rootsploit | cybersecurity, threat-intelligence, malware, bug-bounty, infosec | 09-Jan-2026 |
| Caches, Edge, and Exploits | https://medium.com/@MuhammedAsfan/caches-edge-and-exploits-67db17b5fa6b?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | bug-bounty-writeup, bug-bounty-tips, cybersecurity, web-cache-poisoning, bug-bounty | 09-Jan-2026 |
| IDOR in 2026: Same Bug, Bigger Damage — 10 GB of Chat History (Dating Application) | https://osintteam.blog/idor-in-2026-same-bug-bigger-damage-10-gb-of-chat-history-dating-application-60f72a71be85?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty, bug-bounty-tips, bug-bounty-writeup, idor-vulnerability, idor | 09-Jan-2026 |
| Starting Bug Bounty With Zero Knowledge? Here’s the Exact Roadmap to Your First Valid Report | https://osintteam.blog/starting-bug-bounty-with-zero-knowledge-heres-the-exact-roadmap-to-your-first-valid-report-774e4d923289?source=rss------bug_bounty-5 | Vivek PS | ethical-hacking, cybersecurity, hacking, programming, bug-bounty | 09-Jan-2026 |
| File Path Traversal, Validation of Start of Path | https://bashoverflow.medium.com/file-path-traversal-validation-of-start-of-path-71134f2e366b?source=rss------bug_bounty-5 | Bash Overflow | file-path-traversal, path-validation-bypass, arbitrary-file-read, directory-traversal, bug-bounty | 09-Jan-2026 |
| 10 Pentest Findings That Instantly Impress Clients: Step-by-Step Guide for Security Pros | https://medium.com/@verylazytech/10-pentest-findings-that-instantly-impress-clients-step-by-step-guide-for-security-pros-f3a68c1d355a?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, penetration-testing, ethical-hacking, cybersecurity, hacking | 09-Jan-2026 |
| Http Response Manipulation | https://medium.com/@neerajkath/http-response-manipulation-b5d56176b024?source=rss------bug_bounty-5 | Neeraj kath | penetration-testing, web-security, bug-bounty, response-manipulation, owasp | 09-Jan-2026 |
| Access Control | https://medium.com/@cybernight646/access-control-a30be9649fc1?source=rss------bug_bounty-5 | Cybernight | ai, cybersecurity, bug-bounty, owasp-top-10, penetration-testing | 09-Jan-2026 |
| Simple MFA Bypass in Login and Registration — $500 Reward | https://medium.com/@ayman_amer_1/simple-mfa-bypass-in-login-and-registration-500-reward-1b86edfc1104?source=rss------bug_bounty-5 | ayman Amer | bug-bounty | 09-Jan-2026 |
| Authorization Failures in Authenticated APIs A Practical Analysis | https://medium.com/@Pwnedl0l/authorization-failures-in-authenticated-apis-a-practical-analysis-c6b4395f6bf1?source=rss------bug_bounty-5 | Jawad Momani | cybersecurity, infosec, api, bug-bounty, web3 | 09-Jan-2026 |
| “Bug Bounty Bootcamp #12: Hacking Through Regex — How Bad Pattern Matching Creates Critical… | https://amannsharmaa.medium.com/bug-bounty-bootcamp-12-hacking-through-regex-how-bad-pattern-matching-creates-critical-b92b68eb77c0?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, penetration-testing, hacking, cybersecurity, money | 09-Jan-2026 |
| Zomato Ceo Deepinder Goyal and other Billionaires PAN NUMBER Sensitive PII Leak by Cyber Kalki | https://medium.com/@elelyonmusk/zomato-ceo-deepinder-goyal-and-other-billionaires-pan-number-sensitive-pii-leak-by-cyber-kalki-86bf8a327c1e?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup, infosec | 09-Jan-2026 |
| IDOR: Insecure Direct Object Reference Writeup TryHackme | https://seclak07.medium.com/idor-insecure-direct-object-reference-b5f8ec5f65d7?source=rss------bug_bounty-5 | Lakshay Nimwal | penetration-testing, web-security, vulnerability, bug-bounty, cybersecurity | 09-Jan-2026 |
| C0M-0lhO CTFs Write-Ups: Flags with Original Sources | https://strangerwhite.medium.com/c0m-0lho-ctfs-write-ups-flags-with-original-sources-e2d28dcccace?source=rss------bug_bounty-5 | StrangeRwhite | infosec, hacking, ctf, cybersecurity, bug-bounty | 09-Jan-2026 |
| Byaku: Automation of recon for bug hunting and vibe coding | https://medium.com/@albertovillasante/byaku-automation-of-recon-for-bug-hunting-and-vibe-coding-71fe424ef4d3?source=rss------bug_bounty-5 | Alberto Villasante | reconnaissance, bug-bounty, pentesting | 09-Jan-2026 |
| The Power of Cybersecurity: Beyond What You’ve Heard | https://zhenwarx.medium.com/the-power-of-cybersecurity-beyond-what-youve-heard-23dd15f63a79?source=rss------bug_bounty-5 | Zhenwarx | bug-bounty, cybersecurity | 09-Jan-2026 |
| My First Critical Bounty: How I Went From robots.txt to Full Admin Access. | https://medium.com/@A_Segun/my-first-critical-bounty-how-i-went-from-robots-txt-to-full-admin-access-322ae07f1247?source=rss------bug_bounty-5 | A…$egun (Root) | cybersecurity, bug-bounty, freelancing, web-security, hacking | 09-Jan-2026 |
| Breaking Password Reset Logic: A Comprehensive Exploitation Guide | https://osintteam.blog/breaking-password-reset-logic-a-comprehensive-exploitation-guide-3c626aedb0fa?source=rss------bug_bounty-5 | Fuzzyy Duck | bug-bounty-tips, bug-bounty-writeup, web-development, bug-bounty, web-security | 09-Jan-2026 |
| A Simple Shopify Open Redirect That Paid $500 | https://medium.com/@ahmedbelahcen2018/a-simple-shopify-open-redirect-that-paid-500-1b358ce0969a?source=rss------bug_bounty-5 | ab.infosec | open-redirect, bug-bounty, web-security, ethical-hacking, application-security | 09-Jan-2026 |
| Lo-Fi TryHackMe Write UP | https://medium.com/@cat0x01/lo-fi-tryhackme-write-up-a0a7e0e12f60?source=rss------bug_bounty-5 | cat0x01 | ctf, bug-bounty, pentesting, hacking, cybersecurity | 08-Jan-2026 |
| The “Blind Sniper” Attack: Spamming Thousands of Users Without Knowing Their Email Addresses | https://systemweakness.com/the-blind-sniper-attack-spamming-thousands-of-users-without-knowing-their-email-addresses-4d62ac327410?source=rss------bug_bounty-5 | Zer0Figure | hacking, bug-bounty, security, cybersecurity, bug-bounty-tips | 08-Jan-2026 |
| Recruiting Google Gemini’s Email Summarizer as a Phishing Aid | https://mike-sheward.medium.com/recruiting-google-geminis-email-summarizer-as-a-phishing-aid-417055295ba7?source=rss------bug_bounty-5 | Mike Sheward | llm, infosec, gemini, ai, bug-bounty | 08-Jan-2026 |
| When the Privacy Tool Has a Privacy Problem: Finding My First XSS Vulnerability | https://akashmadanu.medium.com/when-the-privacy-tool-has-a-privacy-problem-finding-my-first-xss-vulnerability-3d1a28678378?source=rss------bug_bounty-5 | Madanu Akash | reflected-xss, xss-vulnerability, vulnerability, cybersecurity, bug-bounty | 08-Jan-2026 |
| Zigbee Security Deep Dive: An IoT Pentester’s Perspective | https://medium.com/@forte.social/zigbee-security-deep-dive-an-iot-pentesters-perspective-e29f26ad7041?source=rss------bug_bounty-5 | eSecForte Technologies | hacking, cybersecurity, security, bug-bounty, zigbee | 08-Jan-2026 |
| TryHackMe Smol Room / WordPress Penetration Testing | https://medium.com/@raihan408548/tryhackme-smol-room-wordpress-penetration-testing-71475cb64506?source=rss------bug_bounty-5 | Md. Raihan | tryhackme-walkthrough, wordpress, ethical-hacking, penetration-testing, bug-bounty | 08-Jan-2026 |
| Logic Flaw to Race Condition to Four Digit Bounty | https://medium.com/@P4RAD0X/logic-flaw-to-race-condition-to-four-digit-bounty-34bef38493a3?source=rss------bug_bounty-5 | PARADOX | infosec, hacking, penetration-testing, bug-bounty, cybersecurity | 08-Jan-2026 |
| Image XSS ATTACK on Exif.tools | Hacking exif.tools via image injection by CYBER KALKI #Livepoc | https://medium.com/@elelyonmusk/image-xss-attack-on-exif-tools-hacking-exif-tools-via-image-injection-by-cyber-kalki-livepoc-250f19afa866?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | cybersecurity, bug-bounty-tips, bugbounty-writeup, bug-bounty, bug-bounty-writeup | 08-Jan-2026 |
| Akamai WAF Bypass: Escalating SSRF into Internal Port Scanning | https://medium.com/@theteatoast/akamai-waf-bypass-escalating-ssrf-into-internal-port-scanning-fc78402f94e7?source=rss------bug_bounty-5 | toast | bug-bounty-tips, bug-bounty, hackerone, bug-bounty-writeup, ethical-hacking | 08-Jan-2026 |
| Automating SQL Injection with sqlmap A Practical Guide | https://medium.com/@Purushothamr/automating-sql-injection-with-sqlmap-a-practical-guide-c22df8e5d593?source=rss------bug_bounty-5 | Purushotham.R | sql, sql-injection, bug-bounty, sql-server, cybersecurity | 08-Jan-2026 |
| Hardening CSP the OWASP Way: | https://dewangpanchal98.medium.com/hardening-csp-the-owasp-way-2c710856e029?source=rss------bug_bounty-5 | th3.d1p4k | cybersecurity, ethical-hacking, owasp, bug-bounty, infosec | 08-Jan-2026 |
| Alex Chriss Paypal Ceo Sensitive Data PII LEAK by Cyber Kalki | https://medium.com/@elelyonmusk/alex-chriss-paypal-ceo-sensitive-data-pii-leak-by-cyber-kalki-70b8610f9c7e?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | cybersecurity, bug-bounty, infosec, osint, info-leak | 08-Jan-2026 |
| Comprehensive Open Redirect Methodology: From Discovery to Advanced Exploitation | https://medium.com/@N0aziXss/comprehensive-open-redirect-methodology-from-discovery-to-advanced-exploitation-da0fc5a2bb67?source=rss------bug_bounty-5 | N0aziXss | ethical-hacking, open-redirect, bug-bounty, vulnerability, web-security | 08-Jan-2026 |
| I Found a P2 Bug on a Live Target Using a CTF Trick—You Won’t Believe This. | https://medium.com/@rajankumarbarik143/i-found-a-p2-bug-on-a-live-target-using-a-ctf-trick-you-wont-believe-this-105f8f807373?source=rss------bug_bounty-5 | Rajankumarbarik | ctf, cybersecurity, technology, bug-bounty, programming | 08-Jan-2026 |
| Logic Flaw to Race Condition to Four Digit Bounty | https://infosecwriteups.com/logic-flaw-to-race-condition-to-four-digit-bounty-34bef38493a3?source=rss------bug_bounty-5 | PARADOX | infosec, hacking, penetration-testing, bug-bounty, cybersecurity | 08-Jan-2026 |
| One Forgotten Subdomain, Thousands of User Records — A Recon Story | https://infosecwriteups.com/one-forgotten-subdomain-thousands-of-user-records-a-recon-story-6dcde55aaa7c?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, bug-bounty-tips, hacking, cybersecurity | 08-Jan-2026 |
| Password Policy Bypass: Missing Server-Side Validation | https://sushil1337.medium.com/password-policy-bypass-missing-server-side-validation-947e91c8390e?source=rss------bug_bounty-5 | Sushil Ram | web-security, owasp, password-security, bug-bounty, pentesting | 08-Jan-2026 |
| Why Your Cache Rules are Leaking User Data (Web Cache Deception) | https://medium.com/@NullifiedSec/why-your-cache-rules-are-leaking-user-data-web-cache-deception-af3b0ee28496?source=rss------bug_bounty-5 | Nullifiedsec | vulnerability, cybersecurity, web-cache-deception, bug-bounty, web-cache-poisoning | 07-Jan-2026 |
| Nmap Guide for Bug Bounty: Port Scanning and WAF Evasion | https://medium.com/@jpablo13/nmap-guide-for-bug-bounty-port-scanning-and-waf-evasion-9e0ea69f3377?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, technology, cybersecurity, penetration-testing, hacking | 07-Jan-2026 |
| Automating HackerOne Scope Parsing with qsv for Bug Bounty Recon | https://medium.com/@samhilliard/automating-hackerone-scope-parsing-with-qsv-for-bug-bounty-recon-84bc770ed73c?source=rss------bug_bounty-5 | Sam Hilliard | scripting, bug-bounty, recon, csv | 07-Jan-2026 |
| Subdomain Takeover in 2025 — New Methods + Tools | https://infosecwriteups.com/subdomain-takeover-in-2025-new-methods-tools-dba94ba02121?source=rss------bug_bounty-5 | Vipul Sonule | programming, hacking, tech, bug-bounty, cybersecurity | 07-Jan-2026 |
| [Relevant] — Windows Server 2016 Exploitation via IIS Enumeration, Credential Disclosure, and… | https://osintteam.blog/relevant-windows-server-2016-exploitation-via-iis-enumeration-credential-disclosure-and-518ca3f4a66e?source=rss------bug_bounty-5 | Bash Overflow | windows-server-2016, exploit-windows-server, windows-privilege-esc, microsoft-iis-10, bug-bounty | 07-Jan-2026 |
| Nmap Guide for Bug Bounty: Port Scanning and WAF Evasion | https://systemweakness.com/nmap-guide-for-bug-bounty-port-scanning-and-waf-evasion-9e0ea69f3377?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, technology, cybersecurity, penetration-testing, hacking | 07-Jan-2026 |
| OTP Bypass in Email Verification via Response Manipulation During 2FA Setup Leading to Pre-Account… | https://medium.com/@1yz02/otp-bypass-in-email-verification-via-response-manipulation-during-2fa-setup-leading-to-pre-account-d008aae2bcff?source=rss------bug_bounty-5 | 1yz02 | bug-bounty-hunter, bug-bounty-tips, account-takeover, bug-bounty-hunting, bug-bounty | 07-Jan-2026 |
| Vertical Privilege Escalation: How I Gain Full Admin Account Takeover | https://mahmoud-khalid.medium.com/vertical-privilege-escalation-how-i-gain-full-admin-account-takeover-51805827e831?source=rss------bug_bounty-5 | Mahmoud Khalid | bug-bounty, access-control, jwt, privilege-escalation | 07-Jan-2026 |
| Why Understanding Authentication & Authorization Architecture Is Essential Before Hunting Logic… | https://medium.com/@mouhibmh/why-understanding-authentication-authorization-architecture-is-essential-before-hunting-logic-2d5e0a0cfd1e?source=rss------bug_bounty-5 | MouhibMahadbi | authorization, cybersecurity, api-security, bug-bounty, web-security | 07-Jan-2026 |
| A Simple Host Header Bug That Leads to Admin Takeover | https://medium.com/@nidhikathayat03/a-simple-host-header-bug-that-leads-to-admin-takeover-b9b9c9f65429?source=rss------bug_bounty-5 | Nidhi kathayat | ctf-walkthrough, hacking, ctf, bug-bounty, ctf-writeup | 07-Jan-2026 |
| Build a Hacker Dashboard: 15 Essential Tools for Real-Time Target Monitoring | https://medium.com/@verylazytech/build-a-hacker-dashboard-15-essential-tools-for-real-time-target-monitoring-37650d5dc6d1?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, hacking, cybersecurity, penetration-testing, ethical-hacking | 07-Jan-2026 |
| API Exploitation For Bug Bounty| Hacktricks | https://medium.com/@zodiacHacker/api-exploitation-for-bug-bounty-hacktricks-0682ed17c8f0?source=rss------bug_bounty-5 | Zodiac Hacker | hacking, graphql, rest-api, bug-bounty, api | 07-Jan-2026 |
| Two Requests, One Bug: How Race Conditions Break Server Security | https://medium.com/@cybernight646/two-requests-one-bug-how-race-conditions-break-server-security-850f6963b3ad?source=rss------bug_bounty-5 | Cybernight | penetration-testing, hacking, owasp-top-10, cybersecurity, bug-bounty | 07-Jan-2026 |
| SteganoLogger: Ketika “Logger” Bukan Soal Kode, Tapi Soal Asumsi yang Kita Percayai | https://goodnightdev.medium.com/steganologger-ketika-logger-bukan-soal-kode-tapi-soal-asumsi-yang-kita-percayai-ba72f82f9066?source=rss------bug_bounty-5 | Achmad Isma'il | web-security, php, security-mindset, bug-bounty, ethical-hacking | 07-Jan-2026 |
| Everything You Need to Become a Professional Manual Bug Bounty Hunter | https://medium.com/@mahdisalhi0500/everything-you-need-to-become-a-professional-manual-bug-bounty-hunter-45e67a9effe6?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | hacking, information-security, cybersecurity, bug-bounty-tips, bug-bounty | 07-Jan-2026 |
| What PortSwigger’s LLM Lab 1 Taught Me About Excessive Agency in AI Systems | https://medium.com/@Infosec-Arsenal-Diaries/what-portswiggers-llm-lab-1-taught-me-about-excessive-agency-in-ai-systems-481628af171f?source=rss------bug_bounty-5 | Antariksha Akhilesh Sharma | cybersecurity, llm, bug-bounty, artificial-intelligence, ai-security | 07-Jan-2026 |
| Android Pentesting Lab — Part 0: Ultimate Setup Guide (2026) | https://medium.com/@mscmkn/android-pentesting-lab-part-0-ultimate-setup-guide-2026-b268ec231e5c?source=rss------bug_bounty-5 | Mscmkn | penetration-testing, cybersecurity, mobile-security, bug-bounty, android | 07-Jan-2026 |
| How I Found Broken Authentication and Authorization on a Website | https://medium.com/@nyany032/how-i-found-broken-authentication-and-authorization-on-a-website-378db3f2aaea?source=rss------bug_bounty-5 | Shir0E | bug-bounty-writeup, cybersecurity, broken-authentication, broken-access-control, bug-bounty | 07-Jan-2026 |
| How I Found A Windows RCE | https://medium.com/@deadoverflow/how-i-found-a-windows-rce-c8551c6a6042?source=rss------bug_bounty-5 | Imad Husanovic | microsoft, windows, bug-bounty, hacking, programming | 07-Jan-2026 |
| Bug Bounty: Unico IDtech’s Journey So Far | https://medium.com/@victor.theobaldo/bug-bounty-unico-idtechs-journey-so-far-d7926eb65d06?source=rss------bug_bounty-5 | Victor Theobaldo | liveness-detection, bug-bounty, information-security | 07-Jan-2026 |
| Exported Components - Kickin’ Down the Doors Devs Left Unlocked | https://medium.com/@Slayer_15/exported-components-kickin-down-the-doors-devs-left-unlocked-cfd5d34bbac0?source=rss------bug_bounty-5 | Slayer | android, hacking, ethical-hacking, cybersecurity, bug-bounty | 07-Jan-2026 |
| “Bug Bounty Bootcamp #11: Hands-On HTTP — Using Proxy Tools to See, Intercept, and Weaponize Every… | https://osintteam.blog/bug-bounty-bootcamp-11-hands-on-http-using-proxy-tools-to-see-intercept-and-weaponize-every-121c1afb4bf5?source=rss------bug_bounty-5 | Aman Sharma | cybersecurity, learning, hacking, bug-bounty, penetration-testing | 07-Jan-2026 |
| I Was Logged Out — But the API Still Trusted Me | https://infosecwriteups.com/i-was-logged-out-but-the-api-still-trusted-me-85ebbe020544?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, bug-bounty-tips, hacking, infosec | 07-Jan-2026 |
| Understanding CVE-2026–21877: Critical RCE Flaw in n8n and What It Means for Your Automation Stack | https://ikhaleelkhan.medium.com/understanding-cve-2026-21877-critical-rce-flaw-in-n8n-and-what-it-means-for-your-automation-stack-86df08a46e05?source=rss------bug_bounty-5 | Khaleel Khan | cybersecurity, hacking, vulnerability, n8n, bug-bounty | 07-Jan-2026 |
| Neighbour TryHackMe Write UP | https://medium.com/@cat0x01/neighbour-tryhackme-write-up-488b42bb3d90?source=rss------bug_bounty-5 | cat0x01 | cybersecurity, pentesting, bug-bounty, ctf, tryhackme | 06-Jan-2026 |
| Guía de Nmap para Bug Bounty: Escaneo de Puertos y Evasión de WAF | https://medium.com/@jpablo13/gu%C3%ADa-de-nmap-para-bug-bounty-escaneo-de-puertos-y-evasi%C3%B3n-de-waf-db84daed00b8?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, technology, hacking, penetration-testing | 06-Jan-2026 |
| Manual SQL Injection Using HackBar (Cyberfox) Complete Beginner Guide | https://medium.com/@Purushothamr/manual-sql-injection-using-hackbar-cyberfox-complete-beginner-guide-4fe12e331345?source=rss------bug_bounty-5 | Purushotham.R | web-security, bug-bounty, cybersecurity, ethical-hacking, sql-injection | 06-Jan-2026 |
| JavaScript Analysis & Burp Suite Techniques That Actually Work | https://osintteam.blog/javascript-analysis-burp-suite-techniques-that-actually-work-d9c26823c219?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, penetration-testing, technology, tech, bug-bounty | 06-Jan-2026 |
| My first bounty from Hackerone | $100 Code Injection on AI bot | https://infosecwriteups.com/my-first-bounty-from-hackerone-100-code-injection-on-ai-bot-620a7e3f2ba4?source=rss------bug_bounty-5 | StvRoot | cybersecurity, bug-bounty, programming, technology, artificial-intelligence | 06-Jan-2026 |
| Google Dorks 2025 Edition: 150+ Dorks & Tools for Ethical Hackers and Pentesters | https://medium.com/@verylazytech/google-dorks-2025-edition-150-dorks-tools-for-ethical-hackers-and-pentesters-20415d44859a?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, cybersecurity, ethical-hacking, penetration-testing, bug-bounty | 06-Jan-2026 |
| One Post Away From Being Exposed | https://medium.com/@d3do/one-post-away-from-being-exposed-586c0d415f98?source=rss------bug_bounty-5 | Abdallah Ahmed | infosec, bug-bounty-writeup, bug-bounty, cybersecurity | 06-Jan-2026 |
| From Recon Burnout to Automation: How I Built My First Bug Bounty Tool | https://medium.com/@captainrogers/from-recon-burnout-to-automation-how-i-built-my-first-bug-bounty-tool-e6b8aec6e32f?source=rss------bug_bounty-5 | Captain Rogers | bug-bounty, ethical-hacking, cybersecurity, automation | 06-Jan-2026 |
| Breaking the Web (Part 8): Sensitive Data Exposure — When Secrets Leak | https://medium.com/@cybercom0101/breaking-the-web-part-8-sensitive-data-exposure-when-secrets-leak-7f42cd64a063?source=rss------bug_bounty-5 | Mohammed Fahad | bug-bounty, penetration-testing, cybersecurity, vulnerability, web-application-security | 06-Jan-2026 |
| The Recon Mistake 90% of Hackers Make | https://infosecwriteups.com/the-recon-mistake-90-of-hackers-make-52723b69b154?source=rss------bug_bounty-5 | Vipul Sonule | tech, cybersecurity, hacking, programming, bug-bounty | 06-Jan-2026 |
| (CSP) Common Bypass Techniques fo | https://medium.com/@anandrishav2228/csp-common-bypass-techniques-fo-c890144e4432?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, xss-attack, money, hacker, cybersecurity | 06-Jan-2026 |
| Understanding Local File Inclusion (LFI) & Directory Traversal Attacks | https://medium.com/@shayaan0920/understanding-local-file-inclusion-lfi-directory-traversal-attacks-f8bbbbb04c17?source=rss------bug_bounty-5 | Shayaan Khan | bug-bounty, security, ethical-hacking, web-development, cybersecurity | 06-Jan-2026 |
| Bypassing DOCTYPE Filters: XInclude XXE Exploitation | https://blackhawkk.medium.com/bypassing-doctype-filters-xinclude-xxe-exploitation-251bccbd0463?source=rss------bug_bounty-5 | Tanmay Bhattacharjee | bug-bounty, ethical-hacking, penetration-testing, software-development, cybersecurity | 06-Jan-2026 |
| Tales of CWE-384 and Android Apps | https://medium.com/@yashprajapati791/tales-of-cwe-384-and-android-apps-e8a66e35f6df?source=rss------bug_bounty-5 | Yash Virendra Prajapati | cyber-security-awareness, information-security, bug-bounty, hacking, cybersecurity | 06-Jan-2026 |
| Bug Bounty Shortcut: Skip Recon and Start With Real Credentials | https://medium.com/@alexandrevandammepro/bug-bounty-shortcut-skip-recon-and-start-with-real-credentials-e1397f7c49f7?source=rss------bug_bounty-5 | Alexandre Vandamme | hacking, cybersecurity, recon, bug-bounty, infosec | 06-Jan-2026 |
| “Bug Bounty Bootcamp #10: The Hacker’s Guide to HTTP — Decoding Every Request and Response” | https://osintteam.blog/bug-bounty-bootcamp-10-the-hackers-guide-to-http-decoding-every-request-and-response-618e36047c54?source=rss------bug_bounty-5 | Aman Sharma | money, hacking, bug-bounty, penetration-testing, cybersecurity | 06-Jan-2026 |
| File Upload Vulnerabilities | https://medium.com/@cybernight646/file-upload-vulnerabilities-a63f742e9bbf?source=rss------bug_bounty-5 | Cybernight | cybersecurity, bug-bounty, web-security, owasp-top-10, application-security | 06-Jan-2026 |
| Lab Walkthrough: Brute-Forcing a Stay-Logged-In Cookie | https://medium.com/@prasangampathak9/lab-walkthrough-brute-forcing-a-stay-logged-in-cookie-b7d53f596102?source=rss------bug_bounty-5 | CyberSec Xploit | Prasangam | hacking, learning, bug-bounty, burpsuite, authentication | 06-Jan-2026 |
| Zero Day Hunting — Techniques | https://medium.com/@zisansakibhaque/zero-day-hunting-techniques-d1dcc0105af9?source=rss------bug_bounty-5 | Sakib Haque Zisan | zero-day-hunting, bug-bounty, cybersecurity | 06-Jan-2026 |
| How One “Safe” Optimization Feature Became a Critical Security Failure ⚙️ | https://infosecwriteups.com/how-one-safe-optimization-feature-became-a-critical-security-failure-%EF%B8%8F-55b00dc462ec?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, infosec, bug-bounty-tips, cybersecurity | 06-Jan-2026 |
| How I found a Race condition on Like Function | https://zodiac0x.medium.com/how-i-found-a-race-condition-on-like-function-7f236537b7fc?source=rss------bug_bounty-5 | Zodiac | bug-bounty, bug-bounty-hunter, hacking | 06-Jan-2026 |
| How a Late-Night Scroll Turned Into an Unexpected XSS Discovery | https://medium.com/@akashutosh659/how-a-late-night-scroll-turned-into-an-unexpected-xss-discovery-bcfcf4014958?source=rss------bug_bounty-5 | Ashutosh Anand | hacking, cybersecurity, bug-bounty | 06-Jan-2026 |
| How a Simple HPP Bug Earned $700 on Twitter | https://medium.com/@ahmedbelahcen2018/how-a-simple-hpp-bug-earned-700-on-twitter-e5bb3a356c05?source=rss------bug_bounty-5 | ab.infosec | cybersecurity, bug-bounty, websecurity-testing, http-parameter-pollution | 06-Jan-2026 |
| Have You Ever Opened Google Drive and Found Someone Else’s Files? | https://medium.com/@akashutosh659/have-you-ever-opened-google-drive-and-found-someone-elses-files-c50ca3f5fc59?source=rss------bug_bounty-5 | Ashutosh Anand | cybersecurity, bug-bounty, hacking | 06-Jan-2026 |
| Agent T TryHackMe Write UP | https://medium.com/@cat0x01/agent-t-tryhackme-write-up-251d767d5bd0?source=rss------bug_bounty-5 | cat0x01 | cybersecurity, penetration-testing, ctf, bug-bounty, tryhackme | 06-Jan-2026 |
| YARA Rule Cheatsheet: 20 Malware Sample Patterns Every Threat Hunter Should Know | https://medium.com/@verylazytech/yara-rule-cheatsheet-20-malware-sample-patterns-every-threat-hunter-should-know-3d9637f7319c?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, penetration-testing, cybersecurity, ethical-hacking | 05-Jan-2026 |
| Faster Ways to Find Open Redirect Vulnerabilities (With Automation) | https://medium.com/@alhamr1zvi/faster-ways-to-find-open-redirect-vulnerabilities-with-automation-34aa346891b3?source=rss------bug_bounty-5 | Alham Rizvi | hacking, cybersecurity, vulnerability, open-redirect, bug-bounty | 05-Jan-2026 |
| Account Takeover via IDOR in GraphQL Invitation Flow | https://scriptjacker.medium.com/account-takeover-via-idor-in-graphql-invitation-flow-546b9a120c53?source=rss------bug_bounty-5 | Parth Narula | bugs, bug-bounty-tips, bug-bounty, idor, bug-bounty-writeup | 05-Jan-2026 |
| How I Hacked Every Account in 15 Minutes… And Got -1 Points (The “Out of Scope” Tragedy) | https://medium.com/@an.anonymous.school/how-i-hacked-every-account-in-15-minutes-and-got-1-points-the-out-of-scope-tragedy-dab35abe24a2?source=rss------bug_bounty-5 | Zer0Figure | bug-bounty, bugbounty-writeup, cybersecurity, hacking, bug-bounty-tips | 05-Jan-2026 |
| Building the Ultimate Android Bug Bounty Lab: Static & Dynamic Analysis with Kali (2026) | https://medium.com/@sbl.itd.reza/building-the-ultimate-android-bug-bounty-lab-static-dynamic-analysis-with-kali-2026-2cf81deacbc7?source=rss------bug_bounty-5 | Rezaul Hasan | penetration-testing, kali-linux, bug-bounty, android-testing, android | 05-Jan-2026 |
| Privilege Escalation: How Broken Access Control Led to Full Account Takeover | https://medium.com/legionhunters/privilege-escalation-how-broken-access-control-led-to-full-account-takeover-c7b42bb9f47b?source=rss------bug_bounty-5 | Abhishek Gupta | bug-bounty, idor, technology, cybersecurity, programming | 05-Jan-2026 |
| From Email Verification to 0-Click Account Takeover | https://medium.com/@y.elsayed4315/from-email-verification-to-0-click-account-takeover-7a46a0e8bdc8?source=rss------bug_bounty-5 | Youss1f | bug-bounty-tips, cybersecurity, ethical-hacking, bug-bounty | 05-Jan-2026 |
| A Practical Exploitation of a CORS Misconfiguration | https://medium.com/@rajqureshi07/a-practical-exploitation-of-a-cors-misconfiguration-4169134ac907?source=rss------bug_bounty-5 | Raj Qureshi | bug-bounty-tips, penetration-testing, cors, web-security, bug-bounty | 05-Jan-2026 |
| WhatsApp Silent Fix of Device Fingerprinting Privacy Issue Assessment: The Good, The (Not So) Bad… | https://medium.com/@TalBeerySec/whatsapp-silent-fix-of-device-fingerprinting-privacy-issue-assessment-the-good-the-not-so-bad-9127b5215e28?source=rss------bug_bounty-5 | Tal Be'ery | bug-bounty, information-security, privacy, facebook, whatsapp | 05-Jan-2026 |
| 600$ For Stealing Podcasts/Show via RSS Feed Manipulation | https://medium.com/legionhunters/600-for-stealing-podcasts-show-via-rss-feed-manipulation-f3f2cef08adf?source=rss------bug_bounty-5 | Anas NadY | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugs, penetration-testing | 05-Jan-2026 |
| $1,000 Bug Bounty: Complete Email System Takeover | https://medium.com/@rajauzairabdullah/1-000-bug-bounty-complete-email-system-takeover-7ee800f2a2eb?source=rss------bug_bounty-5 | Raja Uzair Abdullah | bug-bounty-tips, web-security, ethical-hacking, cybersecurity, bug-bounty | 05-Jan-2026 |
| Open Source Hacking — Breaking AstroJs | https://monish-basaniwal.medium.com/open-source-hacking-breaking-astrojs-c33050386915?source=rss------bug_bounty-5 | Monish Basaniwal | bug-bounty, security, vulnerability, open-source, cybersecurity | 05-Jan-2026 |
| I Stopped Looking for Vulnerabilities and Started Looking for Trust | https://infosecwriteups.com/i-stopped-looking-for-vulnerabilities-and-started-looking-for-trust-1584f46c8380?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, money, hacking, infosec, bug-bounty | 05-Jan-2026 |
| Daily Bugle — Joomla 3.7.0 | https://meetcyber.net/daily-bugle-joomla-3-7-0-96b523d0fa0b?source=rss------bug_bounty-5 | Bash Overflow | joomla-exploit, joomscan, joomla-sqli, privilege-escalation, bug-bounty | 05-Jan-2026 |
| Abusing Client Controlled Authorization State to Achieve Privilege Escalation in Modern Web… | https://medium.com/@Pwnedl0l/abusing-client-controlled-authorization-state-to-achieve-privilege-escalation-in-modern-web-47e3a443e7d9?source=rss------bug_bounty-5 | Jawad Momani | web-security, cybersecurity, bug-bounty, infosec | 05-Jan-2026 |
| Lab: Insufficient workflow validation | https://songulkizilay.medium.com/lab-insufficient-workflow-validation-94b7f069fbec?source=rss------bug_bounty-5 | Songül Kızılay Özügürler | ctf-writeup, pentesting, hacking, portswigger, bug-bounty | 05-Jan-2026 |
| Breaking the Same-Origin Policy: A Dive into a CORS Misconfiguration | https://infosecwriteups.com/breaking-the-same-origin-policy-a-dive-into-a-cors-misconfiguration-b6174b0abee6?source=rss------bug_bounty-5 | Ehtesham Ul Haq | cors, owasp-top-10, bug-bounty, misconfiguration, api | 05-Jan-2026 |
| How a Simple GET Request Led to a $500 CSRF Bounty | https://medium.com/@ahmedbelahcen2018/how-a-simple-get-request-led-to-a-500-csrf-bounty-c927a6b216ef?source=rss------bug_bounty-5 | ab.infosec | hacking, bug-bounty, csrf, sybersecurity | 05-Jan-2026 |
| 600$ For Stealing Podcasts/Show via RSS Feed Manipulation | https://medium.com/@anas-nady/600-for-stealing-podcasts-show-via-rss-feed-manipulation-f3f2cef08adf?source=rss------bug_bounty-5 | Anas NadY | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugs, penetration-testing | 05-Jan-2026 |
| BugZzzz — FahemSec Web Challenge | https://mohammadibnibrahim.medium.com/bugzzzz-fahemsec-web-challenge-422c15c539b9?source=rss------bug_bounty-5 | محمد بن إبراهيم | penetration-testing, bug-bounty, hacking, ctf, cybersecurity | 04-Jan-2026 |
| Unauthorized Access to Sensitive PII via Broken Access Control | https://ajay-vardhan01.medium.com/unauthorized-access-to-sensitive-pii-via-broken-access-control-507adf46879a?source=rss------bug_bounty-5 | Ajay Vardhan | ethical-hacking, cybersecurity, bug-bounty, bug-bounty-writeup, information-security | 04-Jan-2026 |
| Intercom Deep Recon Techniques | https://medium.com/legionhunters/intercom-deep-recon-techniques-83eca3229704?source=rss------bug_bounty-5 | Abhirup Konwar | google-dorking, bug-bounty-tips, pentesting, ethical-hacking, bug-bounty | 04-Jan-2026 |
| $280 Bug Bounty: How a Case-Sensitive Email Bug Locked Users' Accounts | https://infosecwriteups.com/280-bug-bounty-how-a-case-sensitive-email-bug-locked-users-accounts-175fe00779d9?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, technology, vulnerability, penetration-testing, bug-bounty | 04-Jan-2026 |
| The One-Click Library Wipe: Exploiting CSRF in Saved Stories | https://infosecwriteups.com/the-one-click-library-wipe-exploiting-csrf-in-saved-stories-28523d4bc5e2?source=rss------bug_bounty-5 | Munna✨ | cybersecurity, bug-bounty, technology, hacking, programming | 04-Jan-2026 |
| How Recon Helped Me Land a $50,000 Bug Bounty — No Exploits Needed | https://medium.com/@cybervolt/how-recon-helped-me-land-a-50-000-bug-bounty-no-exploits-needed-42163ede7dfc?source=rss------bug_bounty-5 | Cybervolt | bug-bounty, ethical-hacking, penetration-testing, cybersecurity, web-application-security | 04-Jan-2026 |
| #ERROR! | https://medium.com/@Salao3/bug-ninja-chronicles-narutos-first-mission-as-a-bug-hunter-believe-it-3c554b451f16?source=rss------bug_bounty-5 | Salao | artificial-intelligence, bug-bounty, ethical-hacking, software-engineering, bug-hunting | 04-Jan-2026 |
| Business Logic Abuse in Coupon and Wallet Systems | https://meetcyber.net/business-logic-abuse-in-coupon-and-wallet-systems-02b8118f2467?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, cybersecurity, vulnerability, technology, penetration-testing | 04-Jan-2026 |
| SAR 2,629 For Stored XSS via svg Image Leading to ATO | https://medium.com/@anas-nady/sar-2-629-for-stored-xss-via-svg-image-leading-to-ato-1916c50251dc?source=rss------bug_bounty-5 | Anas NadY | bug-bounty, bug-bounty-tips, bugs, penetration-testing, bug-bounty-writeup | 04-Jan-2026 |
| The Art of WAF Evasion: From Superficial Techniques to Systematic Strategies | https://medium.com/@N0aziXss/the-art-of-waf-evasion-from-superficial-techniques-to-systematic-strategies-62202cd82962?source=rss------bug_bounty-5 | N0aziXss | bug-bounty, cyber-defense, penetration-testing, web-security, waf-bypass | 04-Jan-2026 |
| How I Got an Easy $100 Bounty in Just 2 Minutes | https://medium.com/@yugdawar813/how-i-got-an-easy-100-bounty-in-just-2-minutes-8f237ab327de?source=rss------bug_bounty-5 | ikaris | hackerone, hacking, cybersecurity, bug-bounty, bug-bounty-tips | 04-Jan-2026 |
| Bug Bounty Burnout Almost Killed My Motivation — Then This Logic Flaw Paid Me | https://infosecwriteups.com/bug-bounty-burnout-almost-killed-my-motivation-then-this-logic-flaw-paid-me-a1d335016445?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, infosec, money, bug-bounty-tips | 04-Jan-2026 |
| How I Found 7 XSS Using a Custom Nuclei Template | https://medium.com/@ell0guvn0r/how-i-found-7-xss-using-a-custom-nuclei-template-c84eed29c459?source=rss------bug_bounty-5 | ell0guvn0r | penetration-testing, bug-bounty, xss-attack, cybersecurity, hacking | 04-Jan-2026 |
| Road to HackwithIndiaa: Day 1 — Breaking the HTTP Barrier | https://medium.com/@swetlanajha2664/road-to-hackwithindiaa-day-1-breaking-the-http-barrier-ed8687349cc6?source=rss------bug_bounty-5 | Swetlana Jha | bug-bounty, hacking, burpsuite, vulnerability, hackathons | 04-Jan-2026 |
| Burp Suite said “Critical”, Chrome said “Nope”: My ~$1,000 Mistake | https://medium.com/@marlonpetry/burp-suite-said-critical-chrome-said-nope-my-1-000-mistake-9581777d7ce3?source=rss------bug_bounty-5 | Marlon Petry | web-development, infosec, cybersecurity, astrojs, bug-bounty | 04-Jan-2026 |
| Lab: CORS vulnerability with basic origin reflection(Portswigger Labs) | https://mukibas37.medium.com/lab-cors-vulnerability-with-basic-origin-reflection-portswigger-labs-1d7699266907?source=rss------bug_bounty-5 | Mukilan Baskaran | security, ethical-hacking, bug-bounty, hacking, cybersecurity | 04-Jan-2026 |
| The Bug Bounty Hunter Making $500K/Year Without a CS Degree | https://medium.com/@osmion/the-bug-bounty-hunter-making-500k-year-without-a-cs-degree-6653e21c1830?source=rss------bug_bounty-5 | Osmion | bug-bounty, software-development, programming, software-engineering, computer-science | 04-Jan-2026 |
| Insecure Direct Object Reference (IDOR) | https://medium.com/@cybernight646/insecure-direct-object-reference-idor-36b639b198cc?source=rss------bug_bounty-5 | Cybernight | penetration-test, ai, cybersecurity, bug-bounty, information-security | 04-Jan-2026 |
| The Right Methodology for Hacking Anything | https://medium.com/@cybernight646/the-right-methodology-for-hacking-anything-de0e04f583e1?source=rss------bug_bounty-5 | Cybernight | cybersecurity, bug-bounty, penetration-testing, hacking, ai | 04-Jan-2026 |
| Deep-Dive PII Hunting & Validation Techniques (Part 2/3) | https://medium.com/@cybersecplayground/deep-dive-pii-hunting-validation-techniques-part-2-3-c95d587115e2?source=rss------bug_bounty-5 | Cybersecplayground | bug-bounty-tips, cybersecplayground, bug-bounty-writeup, bug-bounty | 04-Jan-2026 |
| What You’ll Learn After Gaining Your 1'st Hacking Certifcate? | Certificated Hacker’s Roadmap #1 | https://medium.com/great-hackers-battalion/what-youll-learn-after-gaining-your-1st-hacking-certifcate-certificated-hacker-s-roadmap-1-6fa730d5bd39?source=rss------bug_bounty-5 | NnFace | hacking, bug-bounty, ethical-hacking, certification, ceh-certification | 04-Jan-2026 |
| How I found my first bug | https://medium.com/@fatimahasan022/how-i-found-my-first-bug-0fb469e549da?source=rss------bug_bounty-5 | Fatimahasan | bug-bounty, webapplicationpentest | 03-Jan-2026 |
| Secrets in the Wild (2025): What 18 Months of Monitoring Exposed | https://osintteam.blog/secrets-in-the-wild-2025-what-18-months-of-monitoring-exposed-8b91962fb316?source=rss------bug_bounty-5 | Dzianis Skliar | bug-bounty, threat-intelligence, osint, bug-bounty-tips | 03-Jan-2026 |
| Advanced WAF Bypass Reflected XSS in search bar | https://medium.com/@mustafamahmvd/advanced-waf-bypass-reflected-xss-in-search-bar-38bb918aa3de?source=rss------bug_bounty-5 | aiden0x | bug-bounty, reflected-xss, waf-bypass | 03-Jan-2026 |
| Hello guys, | https://medium.com/@Salao3/hello-guys-c7be5ada0a5b?source=rss------bug_bounty-5 | Salao | ethical-hacking, artificial-intelligence, bug-bounty, technology | 03-Jan-2026 |
| Fastest Way to Crawl JavaScript Files for Sensitive Data Exposure | The Best Bug Bounty Pipeline… | https://infosecwriteups.com/fastest-way-to-crawl-javascript-files-for-sensitive-data-exposure-the-best-bug-bounty-pipeline-1851e994b73f?source=rss------bug_bounty-5 | Alham Rizvi | ethical-hacking, bug-hunting, bug-bounty-tips, sensitive-data-exposure, bug-bounty | 03-Jan-2026 |
| Mastering Web Cache Deception Bugs: Advanced Bug Hunter’s Guide | https://medium.com/@reduan7707/mastering-web-cache-deception-bugs-advanced-bug-hunters-guide-eb6106147aab?source=rss------bug_bounty-5 | Reduan Islam Badhon | bug-bounty-writeup, web-cache-poisoning, web-cache-deception, bug-bounty, bug-bounty-tips | 03-Jan-2026 |
| HashiCorp Vault Exposed Endpoints: How Simple Recon Led to a Paid Bug Bounty of $50 dollar | https://medium.com/@sauravkrish59/hashicorp-vault-exposed-endpoints-how-simple-recon-led-to-a-paid-bug-bounty-of-50-dollar-8454609b523b?source=rss------bug_bounty-5 | @Sauravkrish | bug-hunter, programming, bug-bounty, cybersecurity, writing | 03-Jan-2026 |
| The 1.8MB Mistake: Leaking Thousands of Government Users via a Liferay API | https://letchupkt.medium.com/the-1-8mb-mistake-leaking-thousands-of-government-users-via-a-liferay-api-1b07f89f7362?source=rss------bug_bounty-5 | LETCHU PKT | hacking, bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup | 03-Jan-2026 |
| SSRF with Whitelist-Based Input Filter | https://osintteam.blog/ssrf-with-whitelist-based-input-filter-431ae4a77c61?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, ssrf-whitelist-bypass, ssrf-localhost, ssrf, ssrf-filter-bypass | 03-Jan-2026 |
| 20 Ways Blue Teams Actually Detect Real Attacks: Master Pro Techniques for Catching Hackers | https://medium.com/@verylazytech/20-ways-blue-teams-actually-detect-real-attacks-master-pro-techniques-for-catching-hackers-27ecedd71332?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, ethical-hacking, bug-bounty, penetration-testing, hacking | 03-Jan-2026 |
| Linux Privilege Escalation via cap_setuid: Gaining Root with Python | https://medium.com/@forgecode/linux-privilege-escalation-via-cap-setuid-gaining-root-with-python-ecca7cab716e?source=rss------bug_bounty-5 | virexil.null | penetration-testing, bug-bounty, infosec, cybersecurity, ethical-hacking | 03-Jan-2026 |
| Pentesting Report with OWASP Top 10 Integration (for Bug Bounty & Industry Use) | https://medium.com/@tandelpruthvi/pentesting-report-with-owasp-top-10-integration-for-bug-bounty-industry-use-c770a55d43c1?source=rss------bug_bounty-5 | Tandelpruthvi | owasp-top-10, bug-bounty, penetration, cybersecurity, infosec-writing | 03-Jan-2026 |
| 7 Bug-Bounty Designs White Hats Actually Trust | https://medium.com/@1nick1patel1/7-bug-bounty-designs-white-hats-actually-trust-cefdf8a6d0a4?source=rss------bug_bounty-5 | Velorum | bug-bounty, risk-management, appsec, web-security, cybersecurity | 03-Jan-2026 |
| How I Found Two-Factor Authentication Bypass Bug | 2FA | https://medium.com/@rajankumarbarik143/how-i-found-two-factor-authentication-bypass-bug-2fa-bde5699e43a9?source=rss------bug_bounty-5 | Rajankumarbarik | cybersecurity, hacking, bug-bounty, technology, programming | 03-Jan-2026 |
| Hacking NASA: How I Disclosed a Data Exposure Vulnerability to the U.S. Government️ | https://systemweakness.com/hacking-nasa-how-i-disclosed-a-data-exposure-vulnerability-to-the-u-s-government-%EF%B8%8F-a37217e7e937?source=rss------bug_bounty-5 | Nicholas Mullenski | cybersecurity, penetration-testing, bug-bounty, ethical-hacking, nasa | 03-Jan-2026 |
| Server-Side Request Forgery (SSRF) | https://medium.com/@cybernight646/server-side-request-forgery-ssrf-63f4accf706b?source=rss------bug_bounty-5 | Cybernight | application-security, penetration-testing, cybersecurity, owasp-top-10, bug-bounty | 03-Jan-2026 |
| OS Command Injection | https://medium.com/@cybernight646/os-command-injection-9872b2c8d3c7?source=rss------bug_bounty-5 | Cybernight | information-security, bug-bounty, penetration-testing, cybersecurity, web-application-security | 03-Jan-2026 |
| The two byte CPDoS | https://medium.com/@kennis.dev/the-two-byte-cpdos-1b4466511cf1?source=rss------bug_bounty-5 | Nigel Kennis | bug-bounty, bugs, hacking, cybersecurity, web-cache-poisoning | 03-Jan-2026 |
| The Endpoint Was Public for a Reason — The Data Wasn’t | https://infosecwriteups.com/the-endpoint-was-public-for-a-reason-the-data-wasnt-eaac71947415?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, hacking, infosec, bug-bounty-tips | 03-Jan-2026 |
| How hackers bypass Root Detection like a Pro | Android Pentesting | https://medium.com/@gowthami09027/how-hackers-bypass-root-detection-like-a-pro-android-pentesting-2da50dccc65b?source=rss------bug_bounty-5 | Blue_eye | android-app-development, bug-bounty, hacking, penetration-testing, software-development | 03-Jan-2026 |
| TakeOver TryHackMe Write Up | https://medium.com/@cat0x01/takeover-tryhackme-write-up-bed29d7fcd95?source=rss------bug_bounty-5 | cat0x01 | tryhackme, bug-bounty, cybersecurity, ctf, pentesting | 03-Jan-2026 |
| Common CSRF Protection Bypass Techniques (Explained) | https://medium.com/@ahmedbelahcen2018/common-csrf-protection-bypass-techniques-explained-e7f7568aa56a?source=rss------bug_bounty-5 | ab.infosec | bug-bounty, csrf | 03-Jan-2026 |
| Cybersecurity Fundamentals and Understanding Penetration Testing | https://medium.com/@januarv/cybersecurity-fundamentals-and-understanding-penetration-testing-c6af996a8eca?source=rss------bug_bounty-5 | Januar 博阳 | bug-bounty, cvss-calculator, penetration-testing, cia-triad | 02-Jan-2026 |
| How I Hacked One of the Largest Ministries in Indonesia | https://asyary.medium.com/how-i-hacked-one-of-the-largest-ministries-in-indonesia-1fba947893e1?source=rss------bug_bounty-5 | Asyary Raihan | bug-bounty, indonesia, bug-bounty-writeup, hacking, cybersecurity | 02-Jan-2026 |
| Daily Workflow of Elite Bug Hunters: 12 Tools That Power Real-World Bounty Success | https://medium.com/@verylazytech/daily-workflow-of-elite-bug-hunters-12-tools-that-power-real-world-bounty-success-6cf62c78bb64?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, cybersecurity, penetration-testing, hacking | 02-Jan-2026 |
| SantaCloud Challenge Solution: Credential Exposure via Backup File Leading to Admin Access and IDOR | https://medium.com/@masangamike07/santacloud-challenge-solution-credential-exposure-via-backup-file-leading-to-admin-access-and-idor-b3afa44a9cf4?source=rss------bug_bounty-5 | Masangamike | cybersecurity, bug-bounty, ctf-walkthrough, technology, programming | 02-Jan-2026 |
| How Weak Password Reset Flows Turn “Forgot Password?” Into Full Account Takeover | https://medium.com/@MuhammedAsfan/how-weak-password-reset-flows-turn-forgot-password-into-full-account-takeover-dc95508cdfe8?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | cybersecurity, bug-bounty-tips, bug-bounty-writeup, password-reset, bug-bounty | 02-Jan-2026 |
| Cybersecurity Fundamentals and Understanding Penetration Testing | https://medium.com/@januarv/cybersecurity-fundamentals-and-understanding-penetration-testing-c6af996a8eca?source=rss------bug_bounty-5 | 小博 | bug-bounty, cvss-calculator, penetration-testing, cia-triad | 02-Jan-2026 |
| #ERROR! | https://systemweakness.com/the-irony-attack-how-i-used-a-security-feature-to-bomb-inboxes-and-waited-3-months-for-250-98bd4b4ce11b?source=rss------bug_bounty-5 | Zer0Figure | security, bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 02-Jan-2026 |
| It’s 2026 — And You’re Still Making the Same Bug Bounty Mistake | https://medium.com/@shaikhminhaz1975/its-2026-and-you-re-still-making-the-same-bug-bounty-mistake-8f4370c727a4?source=rss------bug_bounty-5 | Shaikh Minhaz | cybersecurity, bug-bounty, vulnerability, 2026, new-year-resolution | 02-Jan-2026 |
| Cybersecurity Fundamentals and Understanding Penetration Testing | https://medium.com/@januarv/cybersecurity-fundamentals-and-understanding-penetration-testing-c6af996a8eca?source=rss------bug_bounty-5 | Jan | bug-bounty, cvss-calculator, penetration-testing, cia-triad | 02-Jan-2026 |
| Turning a WordPress API into a DDoS Cannon: The XML-RPC Amplification | https://letchupkt.medium.com/turning-a-wordpress-api-into-a-ddos-cannon-the-xml-rpc-amplification-0433c8175a12?source=rss------bug_bounty-5 | LETCHU PKT | bug-bounty, bug-bounty-writeup, cybersecurity, hacking, bug-bounty-tips | 02-Jan-2026 |
| Top Five Bug Bounty Platforms for Beginners in 2026 | https://medium.com/infosec-writes-up/top-five-bug-bounty-platforms-for-beginners-in-2026-df24286ea3e0?source=rss------bug_bounty-5 | Muhammad Haider Tallal | bug-bounty, ethical-hacking, cybersecurity, beginner-hacker, web-security | 02-Jan-2026 |
| Breaking the Walls: Techniques for 403 Forbidden Bypass | https://medium.com/@xelcezeri/breaking-the-walls-techniques-for-403-forbidden-bypass-c25034b822c6?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty, bug-bounty-writeup, bug-bounty-tips | 02-Jan-2026 |
| Exploiting Parameter Driven Authorization Logic in Authenticated APIs | https://medium.com/@Pwnedl0l/exploiting-parameter-driven-authorization-logic-in-authenticated-apis-02a63de0fea3?source=rss------bug_bounty-5 | Jawad Momani | infosec, ethical-hacking, bug-bounty, cybersecurity, api | 02-Jan-2026 |
| Blind SSRF with Shellshock Exploitation | https://meetcyber.net/blind-ssrf-with-shellshock-exploitation-be7406ec3e26?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, ssrf, shellshock, blind-ssrf-attack, bug-bounty | 02-Jan-2026 |
| The Power of Passive Reconnaissance | https://medium.com/@Cy_berJack/the-power-of-passive-reconnaissance-8a72f9095f1a?source=rss------bug_bounty-5 | Daemi Jack | cybersecurity, passive-reconnaissance, bug-bounty | 02-Jan-2026 |
| El comienzo de algo grande…. | https://n1sec.medium.com/el-comienzo-de-algo-grande-0550de248a56?source=rss------bug_bounty-5 | N1sec | ethical-hacking, cybersecurity, bug-bounty-hunter, roadmaps, bug-bounty | 02-Jan-2026 |
| My Life as a Buggy Program: A Developer’s Autobiography | https://taiwo-adetiloye.medium.com/my-life-as-a-buggy-program-a-developers-autobiography-82ac825195c7?source=rss------bug_bounty-5 | Taiwo O. Adetiloye | bug-bounty, memes, software-development, programming, software-engineering | 02-Jan-2026 |
| Building a Complete Cybersecurity Solution with Zero Budget: A Practical Implementation Guide | https://medium.com/@momenrezkk90/building-a-complete-cybersecurity-solution-with-zero-budget-a-practical-implementation-guide-e6fc27db2163?source=rss------bug_bounty-5 | MOAMEN REZK | penetration-testing, security, technology, bug-bounty, cybersecurity | 02-Jan-2026 |
| How I Finally Understood CSRF (Bug Bounty Notes #1 and2 | https://medium.com/@ahmedbelahcen2018/bug-bounty-notes-csrf-59f79f809575?source=rss------bug_bounty-5 | ab.infosec | bug-bounty, csrf | 02-Jan-2026 |
| BAC (Privilege Escalation): How a Simple Method Swap Exposed Sensitive Admin Data | https://0xmostafa.medium.com/bac-privilege-escalation-how-a-simple-method-swap-exposed-sensitive-admin-data-30b241057088?source=rss------bug_bounty-5 | Mostafa Muhammed | bug-bounty-writeup, penetration-testing, bug-bounty-tips, hacking, bug-bounty | 01-Jan-2026 |
| The Silent Weapon (Part 3): AI-Assisted Recon Chains That Actually Find Bugs | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/the-silent-weapon-part-3-ai-assisted-recon-chains-that-actually-find-bugs-38b847be67c9?source=rss------bug_bounty-5 | ghostyjoe | cybersecurity, infosec, web-security, bug-bounty, reconnaissance | 01-Jan-2026 |
| How I Cracked CloudSEK CTF Round 2: A Deep Dive into “Boot Sequence” | https://medium.com/@an.anonymous.school/how-i-cracked-cloudsek-ctf-round-2-a-deep-dive-into-boot-sequence-4b19ce36a5ae?source=rss------bug_bounty-5 | Zer0Figure | bug-bounty, capture-the-flag, security, cybersecurity, ctf | 01-Jan-2026 |
| MongoBleed (CVE-2025–14847): Bug Bounty Reality of This MongoDB Vulnerability | https://medium.com/@shaikhminhaz1975/mongobleed-cve-2025-14847-bug-bounty-reality-of-this-mongodb-vulnerability-cf00e98b03b4?source=rss------bug_bounty-5 | Shaikh Minhaz | cybersecurity, bug-bounty, ethical-hacking, mongodb, mongobleed | 01-Jan-2026 |
| SantaCloud Intigriti Web Challenge Write-Up | https://medium.com/@gr00t25/santacloud-intigriti-web-challenge-write-up-29175ea3b2ce?source=rss------bug_bounty-5 | Gr00t | web-security, cybersecurity, ctf, bug-bounty, api-security | 01-Jan-2026 |
| From “Just a Number” to a Privacy Leak: An IDOR Case Study | https://medium.com/@tilak2605rana/from-just-a-number-to-a-privacy-leak-an-idor-case-study-f0c3dd3e16e2?source=rss------bug_bounty-5 | Tilaksingh Rana | cybersecurity, web-security, bug-bounty, ethical-hacking, owasp-top-10 | 01-Jan-2026 |
| $150 Bug Bounty: SQL Injection in Nextcloud Android Content Provider | https://meetcyber.net/150-bug-bounty-sql-injection-in-nextcloud-android-content-provider-87bda01ea633?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, cybersecurity, bug-bounty, web-security, technology | 01-Jan-2026 |
| MongoDB Hacked: MongoBleed CVE-2025–14847 | https://meetcyber.net/mongodb-hacked-mongobleed-cve-2025-14847-312f0dedf3f4?source=rss------bug_bounty-5 | Muhammad Haider Tallal | mongodb, bug-bounty, data-breach, cybersecurity, cloud-security | 01-Jan-2026 |
| Earn $1000 by Using an AI Agent to Find XSS | https://meetcyber.net/earn-1000-by-using-an-ai-agent-to-find-xss-81396b4c17d5?source=rss------bug_bounty-5 | Muhammad Haider Tallal | artificial-intelligence, web-security, cross-site-scripting, bug-bounty, xss-attack | 01-Jan-2026 |
| How I Chained 3 Vulnerabilities for Complete Account Takeover | https://medium.com/@rajauzairabdullah/how-i-chained-3-vulnerabilities-for-complete-account-takeover-65ff5c77b53e?source=rss------bug_bounty-5 | Raja Uzair Abdullah | security-testing, bug-bounty, application-security, penetration-testing, admin-takeover | 01-Jan-2026 |
| Cybersecurity Roadmap (Beginner → Pro) | https://medium.com/@mr45atwork.247/cybersecurity-roadmap-beginner-pro-f50a1dcb5916?source=rss------bug_bounty-5 | Mr. Lucifer | bugbounty-tips, it-security, bug-bounty, cybersecurity | 01-Jan-2026 |
| CTF Walkthrough : SantaCloud by Intigriti. | https://medium.com/@roguenull/ctf-walkthrough-santacloud-by-intigriti-939da5a46efd?source=rss------bug_bounty-5 | roguenull | idor-vulnerability, information-exposure, bug-bounty, ctf-walkthrough, ctf-writeup | 01-Jan-2026 |
| When CDNs Lie: How Cached Responses Exposed Private Data at Scale | https://infosecwriteups.com/when-cdns-lie-how-cached-responses-exposed-private-data-at-scale-7208a53b164c?source=rss------bug_bounty-5 | Iski | bug-bounty, bug-bounty-tips, infosec, hacking, cybersecurity | 01-Jan-2026 |
| FTP Anonymous Login Vulnerability: Exploiting Port 21 Using Nmap and John the Ripper | https://medium.com/@forgecode/ftp-anonymous-login-vulnerability-exploiting-port-21-using-nmap-and-john-the-ripper-78696c8808ff?source=rss------bug_bounty-5 | virexil.null | bug-bounty, cybersecurity, penetration-testing, ethical-hacking, kali-linux | 01-Jan-2026 |
| Hacking NASA: How I Spent 6 Hours Hunting a ‘Critical’ Bug That Wasn’t | https://letchupkt.medium.com/hacking-nasa-how-i-spent-6-hours-hunting-a-critical-bug-that-wasn-t-9eff778a9880?source=rss------bug_bounty-5 | LETCHU PKT | cyber-security-awareness, bug-bounty, hacking, bug-bounty-tips, bug-bounty-writeup | 01-Jan-2026 |
| RIP Localhost: Reconal v1.0.0 is Now a Native Desktop App for Windows & Mac | https://medium.com/@mohmmedalariki2014/rip-localhost-reconal-v1-0-0-is-now-a-native-desktop-app-for-windows-mac-b041989b0260?source=rss------bug_bounty-5 | Alareqi | networking, reconnaissance, cybersecurity, ctf, bug-bounty | 01-Jan-2026 |
| Admin Dashboard Access Wasn’t Hacked — It Was Allowed | https://sankalppatil12112001.medium.com/admin-dashboard-access-wasnt-hacked-it-was-allowed-15c556b1c850?source=rss------bug_bounty-5 | XoX | hacking, bug-bounty, infosec, security, cybersecurity | 01-Jan-2026 |
| Ghost Posts via IDOR: How I Read Unpublished NASA Blog Content Using Simple Math | https://letchupkt.medium.com/ghost-posts-via-idor-how-i-read-unpublished-nasa-blog-content-using-simple-math-8f778adc254d?source=rss------bug_bounty-5 | LETCHU PKT | hacking, bug-bounty-writeup, bug-bounty, bug-bounty-tips, cyber-security-awareness | 01-Jan-2026 |
| Beyond the APK: Exploiting Misconfigured Firebase Databases | https://medium.com/@xelcezeri/beyond-the-apk-exploiting-misconfigured-firebase-databases-764c48e4fc80?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 01-Jan-2026 |
| Price Manipulation Vulnerability in E-Commerce Applications | https://medium.com/@nidhikathayat03/price-manipulation-vulnerability-in-e-commerce-applications-3852800b5e69?source=rss------bug_bounty-5 | Nidhi kathayat | web-vulnerabilities, bug-bounty-tips, ctf-writeup, bug-bounty, ctf | 01-Jan-2026 |
| Admin Dashboard Access Wasn’t Hacked — It Was Allowed | https://osintteam.blog/admin-dashboard-access-wasnt-hacked-it-was-allowed-15c556b1c850?source=rss------bug_bounty-5 | XoX | hacking, bug-bounty, infosec, security, cybersecurity | 01-Jan-2026 |
| “Bug Bounty Bootcamp #9: How Modern Web Infrastructure Creates New Attack Surfaces” | https://osintteam.blog/bug-bounty-bootcamp-9-how-modern-web-infrastructure-creates-new-attack-surfaces-6f28d26f6a61?source=rss------bug_bounty-5 | Aman Sharma | hacking, cybersecurity, bug-bounty, learning, penetration-testing | 01-Jan-2026 |
| The Multi-Tenancy Bug That Leaked 10,000 User Records | https://bytemedaily.medium.com/the-multi-tenancy-bug-that-leaked-10-000-user-records-d133d4c59447?source=rss------bug_bounty-5 | Byte Me Daily | software-development, database, software-engineering, technology, bug-bounty | 01-Jan-2026 |
| Chapter 3: Policies & Escalation | https://iamaangx028.medium.com/chapter-3-policies-escalation-3e927eb5abf1?source=rss------bug_bounty-5 | Aang | bug-bounty, red-team, ethical-hacking, active-directory, information-technology | 01-Jan-2026 |
| Recon to Vulnerability: A Practical Guide to Finding Real Bugs | https://osintteam.blog/recon-to-vulnerability-a-practical-guide-to-finding-real-bugs-7718ee8eca3f?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, technology, vulnerability, bug-bounty, penetration-testing | 01-Jan-2026 |
| Bypassing a Monthly Secure Message Limit Using a Race Condition | https://medium.com/@pophacker996/bypassing-a-monthly-secure-message-limit-using-a-race-condition-ecd700714720?source=rss------bug_bounty-5 | Bavly Zaher | web-security, vulnerability, race-condition, bug-bounty, bug-bounty-tips | 31-Dec-2025 |
| Top Bug Bounty Platforms | https://osintteam.blog/top-bug-bounty-platforms-b2c2dd135277?source=rss------bug_bounty-5 | Shahzaib | platform, bug-bounty, cybersecurity, post, ethical-hacking | 31-Dec-2025 |
| $500 Bounty: How a Magic Login Link Led to Full Account Takeover | https://osintteam.blog/500-bounty-how-a-magic-login-link-led-to-full-account-takeover-f726be2ee5b7?source=rss------bug_bounty-5 | Monika sharma | tech, cybersecurity, penetration-testing, bug-bounty, technology | 31-Dec-2025 |
| Hands-On SQL Injection Using Burp Suite: A Beginner’s Walkthrough | https://medium.com/@_crac/hands-on-sql-injection-using-burp-suite-a-beginners-walkthrough-c32e11b48ac3?source=rss------bug_bounty-5 | CRAC Learning | vulnerability, security, code, bug-bounty, cybersecurity | 31-Dec-2025 |
| Top 20 Shadow IT Discovery Tools for Attack Surface Mapping: Learn How Pros Uncover Hidden Risks | https://medium.com/@verylazytech/top-20-shadow-it-discovery-tools-for-attack-surface-mapping-learn-how-pros-uncover-hidden-risks-32176e1e59b1?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, hacking, penetration-testing, cybersecurity, ethical-hacking | 31-Dec-2025 |
| How I Discovered an SSRF Vulnerability in Ferrari’s System — and Earned a Place in Their Hall of… | https://medium.com/@ninadgowda777/how-i-discovered-an-ssrf-vulnerability-in-ferraris-system-and-earned-a-place-in-their-hall-of-3dca8f9f52db?source=rss------bug_bounty-5 | Ninadgowda | bug-bounty, hacking, bug-bounty-tips, business, cybersecurity | 31-Dec-2025 |
| JWT Authentication Bypass | https://medium.com/@d7meealz/jwt-authentication-bypass-eebed5346079?source=rss------bug_bounty-5 | d7meealz | bug-bounty | 31-Dec-2025 |
| From “Nothing Interesting” to Critical Impact: The Power of Re-Reading Responses ⚠️ | https://medium.com/@iski/from-nothing-interesting-to-critical-impact-the-power-of-re-reading-responses-%EF%B8%8F-94808bcbc26d?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, infosec, bug-bounty, cybersecurity, hacking | 31-Dec-2025 |
| How I Found a Broken Access Control Flaw: Bypassing Authentication with Extensionless Paths. | https://doordiefordream.medium.com/how-i-found-a-broken-access-control-flaw-bypassing-authentication-with-extensionless-paths-b9cff692788d?source=rss------bug_bounty-5 | DOD cyber solutions | hacking, bug-bounty, ethical-hacking, cybersecurity, technology | 31-Dec-2025 |
| Reality of Bug Bounty / Bug Hunting | https://stackharry1.medium.com/reality-of-bug-bounty-bug-hunting-b11afa350187?source=rss------bug_bounty-5 | harry ( aka @stackharry1 ) | cybersecurity, hacker, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 31-Dec-2025 |
| Race Condition in Team Creation Endpoint Allows Bypass of Daily Team Creation Limit | https://medium.com/@geme000/race-condition-in-team-creation-endpoint-allows-bypass-of-daily-team-creation-limit-b2224931ec07?source=rss------bug_bounty-5 | geme000 | bug-bounty-tips, race-condition, bug-bounty, hacker, penetration-testing | 31-Dec-2025 |
| Understanding Advanced SSRF Attacks and Their Escalation | https://medium.com/@afi0pchik/understanding-advanced-ssrf-attacks-and-their-escalation-59c4d24a811a?source=rss------bug_bounty-5 | Afi0pchik | infosec, meetcyber, bug-bounty, bug-bounty-tips, infosec-write-ups | 31-Dec-2025 |
| “Bug Bounty Bootcamp #8: Frontend vs. Backend — Mapping Where Vulnerabilities Live” | https://osintteam.blog/bug-bounty-bootcamp-8-frontend-vs-backend-mapping-where-vulnerabilities-live-ff07e963b386?source=rss------bug_bounty-5 | Aman Sharma | hacking, technology, penetration-testing, cybersecurity, bug-bounty | 31-Dec-2025 |
| GitHub Recon: Where the Real Bugs Quietly Begin | https://medium.com/@Purushothamr/github-recon-where-the-real-bugs-quietly-begin-72169baa58c8?source=rss------bug_bounty-5 | Purushotham.R | open-source-security, github, bug-bounty, reconnaissance, ethical-hacking | 31-Dec-2025 |
| Chapter 2: The AD Attack Surface | https://osintteam.blog/chapter-2-the-ad-attack-surface-5ba8a56da958?source=rss------bug_bounty-5 | Aang | ethical-hacking, red-team, active-directory, bug-bounty, information-security | 31-Dec-2025 |
| Commitment Issues - picoCTF (General Skills) | https://xrabbit.medium.com/commitment-issues-picoctf-general-skills-8da579a57004?source=rss------bug_bounty-5 | xrabbit | bug-bounty, ethical-hacking, picoctf, github, capture-the-flag | 31-Dec-2025 |
| After More Than 2 Years in Bug Bounty: Here’s My Methodology | https://medium.com/@karemelaud5/after-more-than-2-years-in-bug-bounty-heres-my-methodology-0157629e2d7d?source=rss------bug_bounty-5 | KaremElsayed | bug-bounty-tips, hackerone, bug-bounty-writeup, bugs, bug-bounty | 31-Dec-2025 |
| A New Year Thank You to Everyone Walking This Path Together | https://medium.com/@viratavi1223/a-new-year-thank-you-to-everyone-walking-this-path-together-8a9143fcb4cd?source=rss------bug_bounty-5 | Viratavi | bug-bounty, bug-bounty-tips, ethical-hacking, hackerone, hacking | 31-Dec-2025 |
| Self-XSS + CSRF = XSS Re | https://pad1ryoshi.medium.com/self-xss-csrf-xss-re-81bac80c969f?source=rss------bug_bounty-5 | pad1ryoshi | bug-bounty, xss-attack, csrf | 31-Dec-2025 |
| Stack Traces : Unveiling attack surface | https://medium.com/@TheCzar/stack-traces-unveiling-attack-surface-c2eb4e815a65?source=rss------bug_bounty-5 | TheCzar | penetration-testing, ethical-hacking, bug-bounty, information-security, hacking | 31-Dec-2025 |
| Every Bug Bounty Hunter Starts with the OWASP Top 10 | https://medium.com/@jugalpatel2110/every-bug-bounty-hunter-starts-with-the-owasp-top-10-d2bf16842f42?source=rss------bug_bounty-5 | Jugal Patel | owasp-top-10, bug-bounty, web-application-security, ethical-hacking, cybersecurity | 30-Dec-2025 |
| 15 Tools to Chain CORS, JSONP & XSS for Account Takeover: Master Your Pentesting Game | https://medium.com/@verylazytech/15-tools-to-chain-cors-jsonp-xss-for-account-takeover-master-your-pentesting-game-23a9ac9524ad?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, penetration-testing, ethical-hacking, hacking, bug-bounty | 30-Dec-2025 |
| Bug‑Bounty‑Ready Kali Linux Setup WSL | https://medium.com/@yamin21/bug-bounty-ready-kali-linux-setup-wsl-e476f38438cd?source=rss------bug_bounty-5 | Yamin Rasel | bug-bounty, kali-linux, linux, wsl | 30-Dec-2025 |
| The Illusion of Security: How I Bypassed CAPTCHA to Enumerate Users (and Why It Was a Duplicate) | https://medium.com/@an.anonymous.school/the-illusion-of-security-how-i-bypassed-captcha-to-enumerate-users-and-why-it-was-a-duplicate-010d8b96f5d4?source=rss------bug_bounty-5 | Zer0Figure | cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-writeup, security | 30-Dec-2025 |
| Insecure Deserialization → RCE | https://infosecwriteups.com/insecure-deserialization-rce-b457eed0e2f9?source=rss------bug_bounty-5 | Raj Prasad Kuiri | information-security, cybersecurity, ethical-hacking, security, bug-bounty | 30-Dec-2025 |
| How I Found an SSRF on a University Website as a Beginner | https://medium.com/@bhushan5/how-i-found-an-ssrf-on-a-university-website-as-a-beginner-b5334e9d60d1?source=rss------bug_bounty-5 | Bhushan Patil | cybersecurity, ethical-hacking, bug-bounty, web-security, ssrf | 30-Dec-2025 |
| How Bug Bounty Hunters Are Quietly Using AI to Work Smarter | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/how-bug-bounty-hunters-are-quietly-using-ai-to-work-smarter-5264db2a78dc?source=rss------bug_bounty-5 | ghostyjoe | artificial-intelligence, bug-bounty, cybersecurity, ethical-hacking, penetration-testing | 30-Dec-2025 |
| Broken Access Control Vulnerability: Beginner-Friendly P4 Bug That Paid ₹15,000 | https://medium.com/@rajankumarbarik143/broken-access-control-vulnerability-beginner-friendly-p4-bug-that-paid-15-000-1cca0e53f5ff?source=rss------bug_bounty-5 | Rajankumarbarik | web-development, programming, technology, cybersecurity, bug-bounty | 30-Dec-2025 |
| I Couldn’t Find the Tool I Needed for Web Security Testing — So I Built It | https://medium.com/@mohmmedalariki2014/i-couldnt-find-the-tool-i-needed-for-web-security-testing-so-i-built-it-52a0cef69687?source=rss------bug_bounty-5 | Alareqi | chrome-extension, web-security, penetration-testing, http-request, bug-bounty | 30-Dec-2025 |
| Thinking Like an Attacker A Technical Perspective on Web Security Research | https://medium.com/@Pwnedl0l/thinking-like-an-attacker-a-technical-perspective-on-web-security-research-e5091704b53a?source=rss------bug_bounty-5 | Jawad Momani | bug-bounty, ethical-hacking, offensive-security, cybersecurity, web-security | 30-Dec-2025 |
| The Silent Weapon (Part 2): Real AI Workflows Bug Bounty Hunters Actually Use | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/the-silent-weapon-part-2-real-ai-workflows-bug-bounty-hunters-actually-use-9b7b2d8fd26e?source=rss------bug_bounty-5 | ghostyjoe | automation, open-source, cybersecurity, bug-bounty, generative-ai-tools | 30-Dec-2025 |
| I Didn’t Break the App — I Let Its Logic Break Itself | https://infosecwriteups.com/i-didnt-break-the-app-i-let-its-logic-break-itself-9cd22096111c?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty-tips, cybersecurity, hacking, bug-bounty | 30-Dec-2025 |
| Sensitive Information Disclosure via Publicly Accessible .user.ini at indrive | https://medium.com/@huseinabdo1974/sensitive-information-disclosure-via-publicly-accessible-user-ini-at-indrive-51b83f9a90f4?source=rss------bug_bounty-5 | Kareem Husein Abdelhameed | vulnerability, cybersecurtiy, bug-bounty, bug-triage | 30-Dec-2025 |
| One Liners Cheat sheet For Bug bounty Hunter | https://mainekhacker.medium.com/one-liners-cheat-sheet-for-bug-bounty-hunter-46295c8be568?source=rss------bug_bounty-5 | Mainekhacker | bug-bounty, ethical-hacking, cheatsheet, cybersecurity, hacking | 29-Dec-2025 |
| Monitor Bug Bounty Targets in Real Time Using Certificate Transparency Logs | https://lostsec.medium.com/monitor-bug-bounty-targets-in-real-time-using-certificate-transparency-logs-247caa34d0f9?source=rss------bug_bounty-5 | N/A | bug-bounty, programming, penetration-testing, cybersecurity, technology | 29-Dec-2025 |
| How I Paid from$99 college fees to $0.5| Price Tampering vulnerability | https://medium.com/@bhushan5/how-i-paid-from-99-college-fees-to-0-5-price-tampering-vulnerability-344196b802b5?source=rss------bug_bounty-5 | Bhushan Patil | bug-bounty, bug-bounty-writeup, bug-bounty-tips | 29-Dec-2025 |
| ️ How I Earned $$$ by Exploiting an XML-RPC SSRF in a WordPress Site | https://medium.com/@bhushan5/%EF%B8%8F-how-i-earned-by-exploiting-an-xml-rpc-ssrf-in-a-wordpress-site-1d5822f0bd50?source=rss------bug_bounty-5 | Bhushan Patil | bug-bounty, bug-bounty-tips, cybersecurity, wordpress, bug-bounty-writeup | 29-Dec-2025 |
| Red Team Reporting Toolkit (10 Templates & Tools): Master Professional Pentest Reports Step-by-Step | https://medium.com/@verylazytech/red-team-reporting-toolkit-10-templates-tools-master-professional-pentest-reports-step-by-step-658a5db7941d?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, penetration-testing, cybersecurity, bug-bounty, hacking | 29-Dec-2025 |
| $2,400 Bounty: for Discovering Critical DoS Vulnerability in Rack (CVE-2022–30122) | https://infosecwriteups.com/2-400-bounty-for-discovering-critical-dos-vulnerability-in-rack-cve-2022-30122-26b8f0d9e484?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, penetration-testing, tech, technology, bug-bounty | 29-Dec-2025 |
| SQLi → RCE: Exploiting PostgreSQLi | https://infosecwriteups.com/sqli-rce-exploiting-postgresqli-f5bb81d24630?source=rss------bug_bounty-5 | Raj Prasad Kuiri | ethical-hacking, application-security, bug-bounty, cybersecurity, information-security | 29-Dec-2025 |
| The Internet Is Leaking Secrets in Public Repos | https://infosecwriteups.com/the-internet-is-leaking-secrets-in-public-repos-0b4f5bc32f87?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, programming, tech, bug-bounty, hacking | 29-Dec-2025 |
| Why Small Websites Are the New Bug Bounty Goldmine | https://infosecwriteups.com/why-small-websites-are-the-new-bug-bounty-goldmine-4d9c0bfced91?source=rss------bug_bounty-5 | Vipul Sonule | hacking, programming, cybersecurity, bug-bounty, ai | 29-Dec-2025 |
| Monitor Bug Bounty Targets in Real Time Using Certificate Transparency Logs | https://infosecwriteups.com/monitor-bug-bounty-targets-in-real-time-using-certificate-transparency-logs-247caa34d0f9?source=rss------bug_bounty-5 | N/A | bug-bounty, programming, penetration-testing, cybersecurity, technology | 29-Dec-2025 |
| I Thought SQL Injection Was a Myth — Until I Found One | https://medium.com/@akkadnus/i-thought-sql-injection-was-a-myth-until-i-found-one-1866b6f94de5?source=rss------bug_bounty-5 | Vignesh | infosec, sql-injection, cybersecurity, web-security, bug-bounty | 29-Dec-2025 |
| Why the Dark Web Is My Recon Tool — Not My Marketplace ️♂️ | https://medium.com/@iski/why-the-dark-web-is-my-recon-tool-not-my-marketplace-%EF%B8%8F-%EF%B8%8F-1e33479115ef?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty-tips, hacking, bug-bounty, infosec | 29-Dec-2025 |
| # Top 4 Most Common Web Vulnerabilities Every Beginner Should Master (P1–P4) | https://medium.com/@abdulbarhacker/top-4-most-common-web-vulnerabilities-every-beginner-should-master-p1-p4-d12ba935519e?source=rss------bug_bounty-5 | Abdulbar | cybersecurity, web-security, ethical-hacking, application-security, bug-bounty | 29-Dec-2025 |
| Automate SSRF Hunting Like a Pro: From Discovery to Escalation | https://medium.com/@ashiq.r.emon/automate-ssrf-hunting-like-a-pro-from-discovery-to-escalation-fbd0e7cdc246?source=rss------bug_bounty-5 | Ashiqur Rahman Emon | ssrf-attack, infosec, bug-bounty, vapt, cybersecurity | 29-Dec-2025 |
| From Subtle IDOR to Full Account Takeover (Including Admin Access) | https://medium.com/@amitdutta6026/from-subtle-idor-to-full-account-takeover-including-admin-access-43b468c5542b?source=rss------bug_bounty-5 | Amit Dutta | broken-access-control, idor-vulnerability, cybersecurity, hacking, bug-bounty | 29-Dec-2025 |
| Finding Broken Access Control in Multi-Tenant Systems | https://medium.com/@afi0pchik/finding-broken-access-control-in-multi-tenant-systems-2fa95ee0dfa6?source=rss------bug_bounty-5 | Afi0pchik | bug-bounty, infosec, meetcyber, bug-bounty-tips, infosec-write-ups | 29-Dec-2025 |
| Consistency Over Chaos: A 360-Day Bug Hunting Experiment | https://infosecwriteups.com/consistency-over-chaos-a-360-day-bug-hunting-experiment-50d43381ef4d?source=rss------bug_bounty-5 | Rizwan_siddiqui | bug-bounty-writeup, bug-bounty | 29-Dec-2025 |
| Understanding the insecure deserialization vulnerability | https://devilwrites.medium.com/understanding-the-insecure-deserialization-vulnerability-9e95f3d7723a?source=rss------bug_bounty-5 | hackerdevil | bug-bounty-tips, information-security, penetration-testing, web-development, bug-bounty | 29-Dec-2025 |
| How I Got My First Bounty | https://0xsponge.medium.com/how-i-got-my-first-bounty-70cd498b9fc5?source=rss------bug_bounty-5 | Adhamkhairy | writeup, bug-bounty, authentication, authorization, hackerone | 29-Dec-2025 |
| Reading Production Android Code for the First Time: A Security Researcher’s Perspective | https://meetcyber.net/reading-production-android-code-for-the-first-time-a-security-researchers-perspective-7cadaf893252?source=rss------bug_bounty-5 | Tyreek Haynes | bug-bounty, android, mobile-security, cybersecurity, reverse-engineering | 29-Dec-2025 |
| Consistency Over Chaos: A 360-Day Bug Hunting Experiment | https://infosecwriteups.com/consistency-over-chaos-a-360-day-bug-hunting-experiment-50d43381ef4d?source=rss------bug_bounty-5 | rizwansiddiqu1 | bug-bounty-writeup, bug-bounty | 29-Dec-2025 |
| Finding My First P3 Bug at NASA in My First Week of Bug Hunting | https://medium.com/@saijayanth25dec2003/finding-my-first-p3-bug-at-nasa-in-my-first-week-of-bug-hunting-00e60a2ed4fd?source=rss------bug_bounty-5 | Sai Jayanth | bug-bounty, nasa, bugbounty-writeup, bug-bounty-tips, cybersecurity | 28-Dec-2025 |
| Perfect Bug Report Toolkit: 10 Templates for Fast Triages Every Hacker Needs | https://medium.com/@verylazytech/perfect-bug-report-toolkit-10-templates-for-fast-triages-every-hacker-needs-30e0dc1b4e7f?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, bug-bounty, hacking, ethical-hacking, penetration-testing | 28-Dec-2025 |
| From “Website Not Accessible” to Critical Error-Based SQLi | https://medium.com/@chos3n/from-website-not-accessible-to-critical-error-based-sqli-483cda463a10?source=rss------bug_bounty-5 | Chos3n(haris) | bug-bounty, real-world-bug-hunting, bug-hunting, bug-bounty-tips, bug-bounty-writeup | 28-Dec-2025 |
| The Dark Side of Bug Bounty | Truth Behind the Screenshots | https://medium.com/@rajankumarbarik143/the-dark-side-of-bug-bounty-truth-behind-the-screenshots-f08cb71734ba?source=rss------bug_bounty-5 | Rajankumarbarik | technology, cybersecurity, cybersecurity-awareness, programming, bug-bounty | 28-Dec-2025 |
| How I Got a CyberSecurity Internship at Airtel | https://medium.com/@yugdawar813/how-i-got-a-cybersecurity-internship-at-airtel-e075a80ff74e?source=rss------bug_bounty-5 | ikaris | vapt, faang, internships, cybersecurity, bug-bounty | 28-Dec-2025 |
| The Illusion of Client-Side Security | https://0wnr.medium.com/the-illusion-of-client-side-security-ceaf7b4dc3e5?source=rss------bug_bounty-5 | Pwnr | hacking, bug-bounty-tips, bugbounty-writeup, bug-bounty-writeup, bug-bounty | 28-Dec-2025 |
| The QR Code Trap: How I Forced a Major Brand to Host My Phishing Links (And Why It Got Rejected) | https://medium.com/@an.anonymous.school/the-qr-code-trap-how-i-forced-a-major-brand-to-host-my-phishing-links-and-why-it-got-rejected-47aa2d0c2991?source=rss------bug_bounty-5 | Zer0Figure | security, bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 28-Dec-2025 |
| New Web Feature gone wrong | SQL-Injection | https://medium.com/@Charon19d/new-web-feature-gone-wrong-sql-injection-3fcd07ff65f2?source=rss------bug_bounty-5 | Charon19d | sql-injection, bug-bounty, cybersecurity, bug-hunting | 28-Dec-2025 |
| One Misplaced Header, Thousands of Leaked Sessions: A Bug Bounty Story | https://infosecwriteups.com/one-misplaced-header-thousands-of-leaked-sessions-a-bug-bounty-story-9cc0ee4b3e38?source=rss------bug_bounty-5 | Iski | cybersecurity, infosec, hacking, bug-bounty, bug-bounty-tips | 28-Dec-2025 |
| Your Website Might Be Leaking Its Source Code (.git Explained) | https://d3athcod3.medium.com/your-website-might-be-leaking-its-source-code-git-explained-3b32faf033d0?source=rss------bug_bounty-5 | D3athCod3 | hacking, github, cybersecurity, bug-bounty, developer | 28-Dec-2025 |
| Biggest Live Hacking Event of the Year(15000$+) | https://anontriager.medium.com/biggest-live-hacking-event-of-the-year-15000-5e63a1357e27?source=rss------bug_bounty-5 | Anonymous Traiger | programming, bug-bounty, cybersecurity, hacker, events | 28-Dec-2025 |
| Do Random 100 Websites Have Authentication Security? | https://medium.com/@karincayiyen/do-random-100-websites-have-authentication-security-0fe28c4190c1?source=rss------bug_bounty-5 | karincayiyen | data-protection, authentication, security, bug-bounty, cybersecurity | 28-Dec-2025 |
| ️ Twenty Days in the Void: How I Compromised NASA and Earned a Recognition Letter | https://root-vaibhav.medium.com/%EF%B8%8F-twenty-days-in-the-void-how-i-compromised-nasa-and-earned-a-recognition-letter-d44cd66a7cb5?source=rss------bug_bounty-5 | Vaibhav Kubade | bug-bounty, cybersecurity, nasa, hacking | 28-Dec-2025 |
| New Web Feature gone wrong | SQL-Injection | https://medium.com/@Charon19d/new-web-feature-gone-wrong-sql-injection-3fcd07ff65f2?source=rss------bug_bounty-5 | Charon Security | sql-injection, bug-bounty, cybersecurity, bug-hunting | 28-Dec-2025 |
| Your Website Isn’t Weak — Your Decisions Are | https://yurie-scanner-v2.medium.com/your-website-isnt-weak-your-decisions-are-d20dea69a241?source=rss------bug_bounty-5 | Ali.Yurie | programming, cybersecurity, bug-bounty, software-development, news | 28-Dec-2025 |
| I Was Done With Bug Bounty Until This Single Bug Changed Everything | https://medium.com/@MohaseenK/i-was-done-with-bug-bounty-until-this-single-bug-changed-everything-d5bfb65aa974?source=rss------bug_bounty-5 | Mohaseen | authorization, cloud-computing, software-development, hackerone, bug-bounty | 28-Dec-2025 |
| Understanding PII and Initial Discovery Techniques (Part 1/3) | https://medium.com/@cybersecplayground/understanding-pii-and-initial-discovery-techniques-part-1-3-417cfac5b050?source=rss------bug_bounty-5 | Cybersecplayground | leakage, bug-bounty-writeup, bug-bounty-tips, cybersecplayground, bug-bounty | 28-Dec-2025 |
| How to Access 404 files of any server | https://meetcyber.net/how-to-access-404-files-of-any-server-1fa1dfeec028?source=rss------bug_bounty-5 | Muhammad Haider Tallal | wayback-machine, recon-techniques, information-disclosure, web-security, bug-bounty | 28-Dec-2025 |
| Host Header Injection in Password Reset Function Leading to Account Takeover and Blind SSRF | https://medium.com/@mhmodgm54/host-header-injection-in-password-reset-function-leading-to-account-takeover-and-blind-ssrf-b63ed248b93a?source=rss------bug_bounty-5 | Mahmoud Gamal | ssrf, bug-bounty, writeup, account-takeover, cybersecurity | 28-Dec-2025 |
| From Reverse DNS to Super Admin: How I Earned $7,500 Finding an Exposed Admin Panel | https://medium.com/@DarkyOS/from-reverse-dns-to-super-admin-how-i-earned-7-500-finding-an-exposed-admin-panel-22500c65fe27?source=rss------bug_bounty-5 | Ahmed Ghadban | bug-bounty, bug-bounty-writeup, bug-bounty-tips, hacking, bugs | 28-Dec-2025 |
| How to Start Bug Bounty Hunting | https://medium.com/@codii/how-to-start-bug-bounty-hunting-9492949f3e4f?source=rss------bug_bounty-5 | Codi | bug-hunting, ethical-hacking, bug-bounty, infosec, cybersecurity | 28-Dec-2025 |
| $1,500 Bounty: Image Upload Led to Full SSRF & LFI at Rockstar Games | https://osintteam.blog/1-500-bounty-image-upload-led-to-full-ssrf-lfi-at-rockstar-games-6a757e704bd1?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, tech, penetration-testing, bug-bounty, technology | 27-Dec-2025 |
| $100 bounty — XSS & Input Validation | https://infosecwriteups.com/100-bounty-xss-input-validation-1ccfb35c5e1f?source=rss------bug_bounty-5 | StvRoot | technology, cybersecurity, privacy, bug-bounty, programming | 27-Dec-2025 |
| I Was Hunting Bugs — The Cache Was Hunting Users Instead | https://infosecwriteups.com/i-was-hunting-bugs-the-cache-was-hunting-users-instead-1350057031e5?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, bug-bounty-tips, hacking, infosec | 27-Dec-2025 |
| Subdomain to Internal Pivoting: 10 Techniques Every Ethical Hacker Should Master | https://medium.com/@verylazytech/subdomain-to-internal-pivoting-10-techniques-every-ethical-hacker-should-master-5900c278dab7?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, cybersecurity, bug-bounty, penetration-testing, ethical-hacking | 27-Dec-2025 |
| Advanced WAF Evasion via DOM Reconstruction | https://medium.com/@pateljaivik919/advanced-waf-evasion-via-dom-reconstruction-c24b7f93a152?source=rss------bug_bounty-5 | JD | hacking, bug-bounty, technology, programming, data-science | 27-Dec-2025 |
| Why Most Bug Bounty Advice Sounds Smart — but Quietly Fails in Real Life | https://medium.com/@ramanidhaval11/why-most-bug-bounty-advice-sounds-smart-but-quietly-fails-in-real-life-7aed1e55288a?source=rss------bug_bounty-5 | Er Dhaval Ramani | bug-bounty, ai, ethical-hacking, cybersecurity | 27-Dec-2025 |
| How I Solved All Challenges in the CloudSEK Hiring CTF (Round 1): A Complete Walkthrough | https://medium.com/@an.anonymous.school/how-i-solved-all-challenges-in-the-cloudsek-hiring-ctf-round-1-a-complete-walkthrough-7d75a9b84c28?source=rss------bug_bounty-5 | Zer0Figure | bug-bounty-tips, bug-bounty, cybersecurity, ctf, ctf-writeup | 27-Dec-2025 |
| I Tested a Website the Legal Way — and Learned Why Most Security Problems Go Unnoticed | https://yurie-scanner-v2.medium.com/i-tested-a-website-the-legal-way-and-learned-why-most-security-problems-go-unnoticed-ad1330e9808a?source=rss------bug_bounty-5 | Ali.Yurie | security, cybersecurity, personal-development, bug-bounty, web-development | 27-Dec-2025 |
| API Pentesting with Cloudflare . | https://medium.com/@anandrishav2228/api-pentesting-with-cloudflare-1f52368fb3e4?source=rss------bug_bounty-5 | Rishav anand | penetration-testing, money, bug-bounty, cybersecurity, api | 27-Dec-2025 |
| Account Takeover via IDOR | https://medium.com/@xelcezeri/account-takeover-via-idor-71b24946bdf7?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 27-Dec-2025 |
| “Bug Bounty Bootcamp #7: Deconstructing Websites — How the Client-Server Conversation Creates Your… | https://osintteam.blog/bug-bounty-bootcamp-7-deconstructing-websites-how-the-client-server-conversation-creates-your-6c7f45f1ae00?source=rss------bug_bounty-5 | Aman Sharma | penetration-testing, hacking, cybersecurity, bug-bounty, learning | 27-Dec-2025 |
| PortSwigger Web Security Academy — Lab Write‑Up 8 | https://0xm3d0din.medium.com/portswigger-web-security-academy-lab-write-up-8-41438213f732?source=rss------bug_bounty-5 | 0xM3d0din | ethical-hacking, cybersecurity, bug-bounty, portswigger, penetration-testing | 27-Dec-2025 |
| Why Firefox Extensions Are the Next Big Bug Bounty Target: Vulnerabilities, Exploits, and Rewards. | https://medium.com/@The_Notorious_F.Y.I.H/why-firefox-extensions-are-the-next-big-bug-bounty-target-vulnerabilities-exploits-and-rewards-7a3fded89128?source=rss------bug_bounty-5 | The Notorious F.Y.I.H | bug-bounty, firefox-extensions, hacking-tools | 27-Dec-2025 |
| When “Sign in with Google” Signed Me Into Someone Else’s Account | https://medium.com/@sabna1961/when-sign-in-with-google-signed-me-into-someone-elses-account-cb29134328f3?source=rss------bug_bounty-5 | SabNa | cybersecurity, bug-bounty, ethical-hacking, oauth, web-security | 27-Dec-2025 |
| What Hacking Does To A Human Being | https://medium.com/@calvaryhasarrived/what-hacking-does-to-a-human-being-5e0d4f28fd3b?source=rss------bug_bounty-5 | Calvaryhasarrived | ethical-hacking, information-security, penetration-testing, bug-bounty | 27-Dec-2025 |
| Biohacking for Bug Hunters: Improving Productivity | https://medium.com/@afi0pchik/biohacking-for-bug-hunters-improving-productivity-82eb841ee125?source=rss------bug_bounty-5 | Afi0pchik | bug-bounty, biohacking, meetcyber, bug-bounty-tips, cybersecurity | 27-Dec-2025 |
| FFUF | I got information disclosure using ffuf tool | https://medium.com/@rahultandale024/ffuf-i-got-information-disclosure-using-ffuf-tool-25aa2d647e12?source=rss------bug_bounty-5 | Rahul | bug-bounty, bug-bounty-tips, ffuf | 27-Dec-2025 |
| How I Found a Critical RCE Flaw in a Popular JS Sandbox | https://medium.com/@codii/how-i-found-a-critical-rce-flaw-in-a-popular-js-sandbox-8dd924325c6e?source=rss------bug_bounty-5 | Codi | javascript, ai, cybersecurity, rce, bug-bounty | 27-Dec-2025 |
| The Reconnaissance Masterclass: Advanced Information Gathering for Modern Cybersecurity | https://medium.com/@N0aziXss/the-reconnaissance-masterclass-advanced-information-gathering-for-modern-cybersecurity-a310eeda53bb?source=rss------bug_bounty-5 | N0aziXss | cyber-intelligence, reconnaissance, information-security, security-research, bug-bounty | 27-Dec-2025 |
| From Open Redirect to Credential Theft: A Login Flow Story | https://medium.com/@sabna1961/from-open-redirect-to-credential-theft-a-login-flow-story-79f7a8de2720?source=rss------bug_bounty-5 | SabNa | web-app-security, cybersecurity, web-app-security-testing, web-penetration-testing, bug-bounty | 27-Dec-2025 |
| Performing CSRF Exploits over GraphQL APIs | https://osintteam.blog/performing-csrf-exploits-over-graphql-apis-945764a0160b?source=rss------bug_bounty-5 | Bash Overflow | graphql, bug-bounty, csrf-exploit, csrf-attack, graphql-csrf | 27-Dec-2025 |
| MongoBleed (CVE‑2025‑14847): A Pre‑Auth MongoDB Memory Leak You Can Hunt at Scale | https://medium.com/@Black1hp/mongobleed-cve-2025-14847-a-pre-auth-mongodb-memory-leak-you-can-hunt-at-scale-c8faa00f2bdd?source=rss------bug_bounty-5 | Black1hp | penetration-testing, bug-bounty, mongodb, cybersecurity, vulnerability-research | 27-Dec-2025 |
| The Cost of a Bug When the Data Is Permanent | https://medium.com/legionhunters/the-cost-of-a-bug-when-the-data-is-permanent-7df0ea2ab55c?source=rss------bug_bounty-5 | Tyreek Haynes | responsible-disclosure, data-privacy, cybersecurity, application-security, bug-bounty | 27-Dec-2025 |
| YesWeHack Dojo 46: Ghost Whisper Challenge Solution | https://medium.com/@rawansa3ed2002/yeswehack-dojo-46-ghost-whisper-challenge-solution-cb5e592f378b?source=rss------bug_bounty-5 | Rawansaeed | yeswehack, penetration-testing, ctf, bug-bounty | 27-Dec-2025 |
| I Blocked Them, But They Could Still See Me: A Simple Privacy Logic Flaw | https://medium.com/@default_Ox/i-blocked-them-but-they-could-still-see-me-a-simple-privacy-logic-flaw-110486963182?source=rss------bug_bounty-5 | default_0x | bug-bounty, tips, pentesting, logic-flaw, infosecurity | 26-Dec-2025 |
| Exploiting WebSocket Information Disclosure to Achieve Account Deletion (IDOR) | https://waleedosamaeg.medium.com/exploiting-websocket-information-disclosure-to-achieve-account-deletion-idor-cc5e180632b3?source=rss------bug_bounty-5 | Waleed Osama | web-development, idor, hacking, bug-bounty, websocket | 26-Dec-2025 |
| WebSocket Misconfiguration Leading to DOM Manipulation and Denial of Service in a Web Chat… | https://waleedosamaeg.medium.com/websocket-misconfiguration-leading-to-dom-manipulation-and-denial-of-service-in-a-chat-application-c8a0c8c30a19?source=rss------bug_bounty-5 | Waleed Osama | websocket, bug-bounty, hacking, penetration-testing, web-development | 26-Dec-2025 |
| Top 10 Backup Abuse Techniques for Privilege Escalation: Learn How Real Attacks Happen | https://medium.com/@verylazytech/top-10-backup-abuse-techniques-for-privilege-escalation-learn-how-real-attacks-happen-d52af154fb78?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, ethical-hacking, cybersecurity, hacking, bug-bounty | 26-Dec-2025 |
| Server-Side Request Forgery (SSRF): Detection, Impact, and Defense Bypass Techniques | https://seclak07.medium.com/server-side-request-forgery-ssrf-detection-impact-and-defense-bypass-techniques-71787fe52db1?source=rss------bug_bounty-5 | Lakshay Nimwal | penetration-testing, cybersecurity, web-security, ssrf, bug-bounty | 26-Dec-2025 |
| Personal Browsing Gone Wild: XSS + IDOR in the Same Spot | https://medium.com/@josekuttykunnelthazhebinu/personal-browsing-gone-wild-xss-idor-in-the-same-spot-6ab3e0ea6190?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | coding, pentesting, bug-bounty, bug-bounty-tips, programming | 26-Dec-2025 |
| Breaking The Registration Flow : A Pre-account Takeover Vulnerability | https://meetcyber.net/breaking-the-registration-flow-a-pre-account-takeover-vulnerability-6cd95414148a?source=rss------bug_bounty-5 | Fuzzyy Duck | bug-bounty, bug-bounty-writeup, security, web-development, bug-bounty-tips | 26-Dec-2025 |
| ADB (Android Debug Bridge) — The Ultimate Cheat Sheet for Developers | https://medium.com/@povzayd/adb-android-debug-bridge-the-ultimate-cheat-sheet-for-developers-d3af4863fa81?source=rss------bug_bounty-5 | Zaid Bin Ahmad | reverse-engineering, android, ethical-hacking, android-pentesting, bug-bounty | 26-Dec-2025 |
| PortSwigger Web Security Academy — Lab Write‑Up 7 | https://0xm3d0din.medium.com/portswigger-web-security-academy-lab-write-up-7-c5d4ec755083?source=rss------bug_bounty-5 | 0xM3d0din | bug-bounty, portswigger, penetration-testing, ethical-hacking, cybersecurity | 26-Dec-2025 |
| “Bug Bounty Bootcamp #6: Ports & Services — Finding the Open Doors on Your Target’s Server” | https://ai.plainenglish.io/bug-bounty-bootcamp-6-ports-services-finding-the-open-doors-on-your-targets-server-df790b558643?source=rss------bug_bounty-5 | Aman Sharma | money, penetration-testing, cybersecurity, bug-bounty, hacking | 26-Dec-2025 |
| One Misplaced Header, Thousands of Leaked Sessions: A Bug Bounty Story | https://medium.com/@iski/one-misplaced-header-thousands-of-leaked-sessions-a-bug-bounty-story-140e6a0f881d?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty-tips, cybersecurity, bug-bounty, infosec | 26-Dec-2025 |
| “Bug Bounty Bootcamp #6: Ports & Services — Finding the Open Doors on Your Target’s Server” | https://osintteam.blog/bug-bounty-bootcamp-6-ports-services-finding-the-open-doors-on-your-targets-server-df790b558643?source=rss------bug_bounty-5 | Aman Sharma | money, penetration-testing, cybersecurity, bug-bounty, hacking | 26-Dec-2025 |
| How a Single Forgotten DNS Record Can Turn a Trusted Domain into a Gambling Site | https://medium.com/@akashutosh659/how-a-single-forgotten-dns-record-can-turn-a-trusted-domain-into-a-gambling-site-8ca2d094175b?source=rss------bug_bounty-5 | Ashutosh Anand | bug-bounty, cybersecurity, security | 26-Dec-2025 |
| Your Website Isn’t Vulnerable — Your Workflow Is ⚙️ | https://yurie-scanner-v2.medium.com/your-website-isnt-vulnerable-your-workflow-is-%EF%B8%8F-fbdb21e422dd?source=rss------bug_bounty-5 | Ali.Yurie | advice, cybersecurity, web-development, software-development, bug-bounty | 26-Dec-2025 |
| When OTP Forgets Who You Are | https://medium.com/@viratavi1223/when-otp-forgets-who-you-are-998e564597d2?source=rss------bug_bounty-5 | Viratavi | ethical-hacking, bug-bounty-tips, hacking, bug-bounty, hackerone | 26-Dec-2025 |
| How I Found a SQL Injection in a VDP Program | https://medium.com/@ell0guvn0r/how-i-found-a-sql-injection-in-a-vdp-program-8291816ed281?source=rss------bug_bounty-5 | ell0guvn0r | penetration-testing, hacking, bug-bounty, cybersecurity | 26-Dec-2025 |
| H | https://beta0x01.medium.com/h-af3a82185e43?source=rss------bug_bounty-5 | Beta | tryhackme, aoc2025, tryhackme-walkthrough, ctf, bug-bounty | 25-Dec-2025 |
| Subscription Bypass Leading to Full Access to Paid Features | https://medium.com/@hossam_hamada/subscription-bypass-leading-to-full-access-to-paid-features-7c3a1bf6487c?source=rss------bug_bounty-5 | Hossam Hamada | bug-bounty, bug-hunting, writing-tips, business-logic, bugbounty-writeup | 25-Dec-2025 |
| 40 Bash One-Liners Every Hacker Should Know: Master Essential Command-Line Skills for Pentesting | https://medium.com/@verylazytech/40-bash-one-liners-every-hacker-should-know-master-essential-command-line-skills-for-pentesting-01c32fb29eea?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, cybersecurity, penetration-testing, bug-bounty, ethical-hacking | 25-Dec-2025 |
| The Ultimate SQL Injection Guide: From Zero to PhD Level | https://medium.com/@bughuntersjournal/the-ultimate-sql-injection-guide-from-zero-to-phd-level-25622b2e168c?source=rss------bug_bounty-5 | BugHunter’s Journal | software-development, programming, cybersecurity, ethical-hacking, bug-bounty | 25-Dec-2025 |
| From Trading Forex to Finding My First Bounty | https://medium.com/@dagtech29/from-trading-forex-to-finding-my-first-bounty-c4837a2b95e0?source=rss------bug_bounty-5 | Dagmawi | cybersecurity, idor-vulnerability, forex-trading, bug-bounty, hacking | 25-Dec-2025 |
| Christmas Sale on Cybersecurity Resources — Up to 90% OFF | https://medium.com/@rocky_rowdy/christmas-sale-on-cybersecurity-resources-up-to-90-off-b519f33b4e0f?source=rss------bug_bounty-5 | Rocky | hacking, christmas, bug-bounty, cybersecurity | 25-Dec-2025 |
| Imposter Syndrome in IT: Why We All Feel Stupid in Front of the Terminal | https://systemweakness.com/imposter-syndrome-in-it-why-we-all-feel-stupid-in-front-of-the-terminal-6d847bcdcef5?source=rss------bug_bounty-5 | Axoloth | bug-bounty, tryhackme, cybersecurity, hacking, ethical-hacking | 25-Dec-2025 |
| From Missing Rate Limiting to Account Takeover (ATO) | https://owvr27.medium.com/from-missing-rate-limiting-to-account-takeover-ato-efdddb1de5df?source=rss------bug_bounty-5 | Omar Ahmed Abdelslam | cybersecurity, bugbounty-writeup, bug-bounty-tips, account-takeover, bug-bounty | 25-Dec-2025 |
| How a Simple LFI Turned Into Full Root RCE | https://medium.com/@Af4himi/how-a-simple-lfi-turned-into-full-root-rce-b8da5c71b4b3?source=rss------bug_bounty-5 | Af4himi | bug-bounty-writeup, bug-bounty-tips, bug-bounty | 25-Dec-2025 |
| Bug Bounty Isn’t About Tools — It’s About Thinking Like the App | https://infosecwriteups.com/bug-bounty-isnt-about-tools-it-s-about-thinking-like-the-app-43b553f1786b?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, bug-bounty-tips, infosec, bug-bounty | 25-Dec-2025 |
| How I Found a $5,500 Bug Using Just Reconnaissance | https://infosecwriteups.com/how-i-found-a-5-500-bug-using-just-reconnaissance-2768fdba5ff2?source=rss------bug_bounty-5 | Codi | ethical-hacking, bug-bounty, make-money-online, cybersecurity, reconnaissance | 25-Dec-2025 |
| How to Find P1 Bugs using Google in your Target — (Part-3) | https://infosecwriteups.com/how-to-find-p1-bugs-using-google-in-your-target-part-3-92080292f4ac?source=rss------bug_bounty-5 | RivuDon | bug-bounty-tips, infosec, cybersecurity, bug-bounty, bugbounty-writeup | 25-Dec-2025 |
| ☠️ Top Free Tools That Can Make You $1000/Month in Bug Bounty | https://infosecwriteups.com/%EF%B8%8F-top-free-tools-that-can-make-you-1000-month-in-bug-bounty-a6a8c21564c2?source=rss------bug_bounty-5 | Vipul Sonule | cybercrime, bug-bounty, money, hacking, cybersecurity | 25-Dec-2025 |
| How I found IDOR on IIT Kanpur & bypassed the payment system | https://infosecwriteups.com/how-i-found-idor-on-iit-kanpur-bypassed-the-payment-system-4917d07a3573?source=rss------bug_bounty-5 | StvRoot | programming, bug-bounty, cybersecurity, technology, privacy | 25-Dec-2025 |
| PortSwigger Web Security Academy — Lab Write‑Up 6 | https://0xm3d0din.medium.com/portswigger-web-security-academy-lab-write-up-6-728b277df26e?source=rss------bug_bounty-5 | 0xM3d0din | cybersecurity, ethical-hacking, portswigger, bug-bounty, penetration-testing | 25-Dec-2025 |
| Sensitive Data Exposure: The Silent Bug That Pays Big | https://medium.com/h7w/sensitive-data-exposure-the-silent-bug-that-pays-big-ce280b0ebea4?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tech, technology, bug-bounty, cybersecurity | 25-Dec-2025 |
| Avoid These 5 Bug Bounty Mistakes or Get Banned! | https://osintteam.blog/avoid-these-5-bug-bounty-mistakes-or-get-banned-b274fa78f7e9?source=rss------bug_bounty-5 | Shahzaib | mistakes-to-avoid, cybersecurity, bug-bounty, ethical-hacking, hacking | 25-Dec-2025 |
| How to Escalate an IDOR From Admin to Internal | https://medium.com/@codii/how-to-escalate-an-idor-from-admin-to-internal-9d080aa2f4f4?source=rss------bug_bounty-5 | Codi | bug-bounty, idor, ethical-hacking, web-security, cybersecurity | 25-Dec-2025 |
| Horizontal Privilege Escalation via IDOR: Viewing, Editing and Deleting | https://scriptjacker.medium.com/horizontal-privilege-escalation-via-idor-viewing-editing-and-deleting-b10936ad4eb1?source=rss------bug_bounty-5 | Parth Narula | bug-bounty-tips, idor, bugs, bug-bounty-writeup, bug-bounty | 25-Dec-2025 |
| Understanding SOP, CORS & Preflight Requests | https://infosecwriteups.com/understanding-sop-cors-preflight-requests-58411228ebe0?source=rss------bug_bounty-5 | hackerdevil | penetration-testing, web-application-security, information-security, bug-bounty, web-development | 25-Dec-2025 |
| Looking Beyond Bugs: Finding Design Flaws in Modern Applications | https://medium.com/@afi0pchik/looking-beyond-bugs-finding-design-flaws-in-modern-applications-d42dae47775f?source=rss------bug_bounty-5 | Afi0pchik | cybersecurity, infosec, infosec-write-ups, bug-bounty, meetcyber | 25-Dec-2025 |
| Stored SVG JavaScript Execution, Redirects & Phishing — Bug Bounty $$$ | https://medium.com/@abdelfattahelsabagh/from-blind-ssrf-to-stored-svg-javascript-execution-redirects-phishing-bug-bounty-efa249798048?source=rss------bug_bounty-5 | Abdelfattah Elsabagh | blind, phishing, ssrf-walkthrough, bug-bounty, open-redirect | 25-Dec-2025 |
| Night at the Museum — FahemSec Web Challenge | https://mohammadibnibrahim.medium.com/night-at-the-museum-fahemsec-web-challenge-f2d6f8536bea?source=rss------bug_bounty-5 | محمد بن إبراهيم | bug-bounty, hacking, ctf, penetration-testing, cybersecurity | 24-Dec-2025 |
| Stale Admin Invitations Lead to Unauthorized Admin Access | https://hwedy00.medium.com/stale-admin-invitations-lead-to-unauthorized-admin-access-9fa766e631d9?source=rss------bug_bounty-5 | Mohamed Hwedy | access-control, bug-bounty, security-research, web-security, cybersecurity | 24-Dec-2025 |
| Best Recon Method to Find JavaScript Vulnerabilities | https://osintteam.blog/best-recon-method-to-find-javascript-vulnerabilities-ad3b1313afe2?source=rss------bug_bounty-5 | Monika sharma | javascript, tech, bug-bounty, penetration-testing, cybersecurity | 24-Dec-2025 |
| ️♂️ ReconKit I Built This Recon Tool Because Manual Recon Was Killing My Time ⚙️ | https://medium.com/@Purushothamr/%EF%B8%8F-%EF%B8%8F-reconkit-i-built-this-recon-tool-because-manual-recon-was-killing-my-time-%EF%B8%8F-ff2d1a4e3606?source=rss------bug_bounty-5 | Purushotham.R | bug-bounty, cybersecurity, penetration-testing, cyber-security-tools, ethical-hacking | 24-Dec-2025 |
| Top 12 Zero Trust Tools That Are Replacing VPNs: Master Modern Access Security | https://medium.com/@verylazytech/top-12-zero-trust-tools-that-are-replacing-vpns-master-modern-access-security-fd1528584d48?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, penetration-testing, cybersecurity, hacking, bug-bounty | 24-Dec-2025 |
| CSRF Where Token is Tied to Non-Session Cookie — Complete Walkthrough with Visual Guide | https://medium.com/@CYGNOD/csrf-where-token-is-tied-to-non-session-cookie-complete-walkthrough-with-visual-guide-8bcca10c4146?source=rss------bug_bounty-5 | CYGNOD | csrf, bug-bounty, burpsuite, ctf, portswigger | 24-Dec-2025 |
| Most Websites Are Not Hacked — They Are Neglected: A Practical Guide to Real Website Security | https://yurie-scanner-v2.medium.com/most-websites-are-not-hacked-they-are-neglected-a-practical-guide-to-real-website-security-cd2d5dd9ace0?source=rss------bug_bounty-5 | Ali.Yurie | web-development, bug-bounty, money, cybersecurity, coding | 24-Dec-2025 |
| Out-of-Band (OOB) Server-Side Request Forgery (SSRF) Via File Upload | https://medium.com/@neerajkath/out-of-band-oob-server-side-request-forgery-ssrf-via-file-upload-7f1abc493024?source=rss------bug_bounty-5 | Neeraj kath | owasp, cybersecurity, penetration-testing, bug-bounty, ssrf | 24-Dec-2025 |
| 10 Things Every Programmer Must Do Before Launching a Website | https://yurie-scanner-v2.medium.com/10-things-every-programmer-must-do-before-launching-a-website-78d868ec5e9e?source=rss------bug_bounty-5 | Ali.Yurie | cybersecurity, web-development, programming, bug-bounty | 24-Dec-2025 |
| Understanding CVE-2025–68613: A Critical Remote Code Execution Vulnerability in n8n Workflow… | https://medium.com/@mahdi.eidi7/understanding-cve-2025-68613-a-critical-remote-code-execution-vulnerability-in-n8n-workflow-99cfdf1f89a8?source=rss------bug_bounty-5 | Mahdi Eidi | bug-bounty, exploit, cve, n8n, rce-vulnerability | 24-Dec-2025 |
| The Illusion of Client-Side Security | https://0wnr.medium.com/the-illusion-of-client-side-security-9eea04ea9774?source=rss------bug_bounty-5 | Pwnr | bugcrowd, bug-bounty, hackerone, hacking, penetration-testing | 24-Dec-2025 |
| PortSwigger Web Security Academy — Lab Write‑Up 5 | https://0xm3d0din.medium.com/portswigger-web-security-academy-lab-write-up-5-72b8389cd531?source=rss------bug_bounty-5 | 0xM3d0din | portswigger, bug-bounty, cybersecurity, penetration-testing, ethical-hacking | 24-Dec-2025 |
| My Bug Bounty Methodology After 100 + Valid Submissions | https://medium.com/@rajankumarbarik143/my-bug-bounty-methodology-after-100-valid-submissions-9c15c5415dab?source=rss------bug_bounty-5 | Rajankumarbarik | technology, cybersecurity, bug-bounty, hacking, programming | 24-Dec-2025 |
| DoS on 2 graphql subdomains | https://moamenmahmod.medium.com/dos-on-2-graphql-subdomains-f8e779af8fcf?source=rss------bug_bounty-5 | moamen mahmoud | bug-bounty-tips, bugbounty-writeup, bug-bounty, hackerone, hacking | 24-Dec-2025 |
| The Hidden Bug Behind Our Public 503 Page | https://medium.com/@codii/the-hidden-bug-behind-our-public-503-page-18a00f0d5657?source=rss------bug_bounty-5 | Codi | infosec, ethical-hacking, bug-bounty, error, cybersecurity | 24-Dec-2025 |
| Google Dorks for Bug Bounty | https://blog.gopenai.com/google-dorks-for-bug-bounty-d1596fafbe39?source=rss------bug_bounty-5 | aimaster | bug-bounty, programming, technology, cybersecurity, python | 24-Dec-2025 |
| Hunting the Unseen: My Journey with Blind XSS (Case Studies) | https://medium.com/@xelcezeri/hunting-the-unseen-my-journey-with-blind-xss-case-studies-abf1c8c8fac9?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, bug-bounty-tips, bug-bounty | 24-Dec-2025 |
| “Bug Bounty Bootcamp #4: How to Find and Target Anything on the Internet (IP Addresses Explained)” | https://amannsharmaa.medium.com/bug-bounty-bootcamp-4-how-to-find-and-target-anything-on-the-internet-ip-addresses-explained-7ff37422cc74?source=rss------bug_bounty-5 | Aman Sharma | penetration-testing, cybersecurity, learning, hacking, bug-bounty | 24-Dec-2025 |
| How to Become a Smart Contract Bug Hunter and Get Paid in 2026 | https://medium.com/@palmartin99/how-to-become-a-smart-contract-bug-hunter-and-get-paid-in-2026-e7c39a825d29?source=rss------bug_bounty-5 | PMartin | bug-bounty, blockchain-development, blockchain, blockchain-technology, bug-bounty-tips | 24-Dec-2025 |
| The Day I Found a Google Sheets API Key Hidden in Plain Sight — Inside a Public JavaScript File | https://medium.com/@anshubind89/the-day-i-found-a-google-sheets-api-key-hidden-in-plain-sight-inside-a-public-javascript-file-45795be4f51c?source=rss------bug_bounty-5 | Anshubind | bug-bounty, bug-bounty-tips, bug-hunting, hacking, bug-bounty-writeup | 24-Dec-2025 |
| The Night I Discovered a Production Server Hiding Behind an Exposed IP — And Why It Mattered… | https://medium.com/@anshubind89/the-night-i-discovered-a-production-server-hiding-behind-an-exposed-ip-and-why-it-mattered-e0f3009cdd51?source=rss------bug_bounty-5 | Anshubind | bug-bounty-writeup, hacking, bug-bounty-tips, comolho, bug-bounty | 24-Dec-2025 |
| One Request, Ten Times: How I Broke Admin Access with a Race Condition | https://medium.com/@solutionexit5/one-request-ten-times-how-i-broke-admin-access-with-a-race-condition-05c56b072118?source=rss------bug_bounty-5 | 0xMoussa | infosec, race-condition, cybersecurity, bug-bounty, ethical-hacking | 24-Dec-2025 |
| Breaking OAuth 2.0: Vulnerabilities & Exploitation Guide | https://osintteam.blog/breaking-oauth-2-0-vulnerabilities-exploitation-guide-d8b5ef009370?source=rss------bug_bounty-5 | Fuzzyy Duck | bug-bounty-writeup, bug-bounty-tips, bug-bounty, penetration-testing, web-security | 23-Dec-2025 |
| Time-Based SQL Injection: Complete Real-World Bug Bounty Guide | https://osintteam.blog/time-based-sql-injection-complete-real-world-bug-bounty-guide-0d38311a4adf?source=rss------bug_bounty-5 | Monika sharma | sql, penetration-testing, technology, bug-bounty, cybersecurity | 23-Dec-2025 |
| How I Found a Critical 2FA Misconfiguration and Earned a $2000 Bug Bounty | https://medium.com/@ravindrajatav0709/how-i-found-a-critical-2fa-misconfiguration-and-earned-a-2000-bug-bounty-d1ed934dffec?source=rss------bug_bounty-5 | Ravindra | bug-bounty-tips, cybersecurity, bug-zero, bugs, bug-bounty | 23-Dec-2025 |
| From recon to AWS and DB credentials leaked | https://medium.com/@pr1vacyS1ck/from-recon-to-aws-and-db-credentials-leaked-81376d7e1e99?source=rss------bug_bounty-5 | pr1vacy | credentials, bug-bounty, ssrf | 23-Dec-2025 |
| Top 20 Tools Hackers Use to Track You Across the Internet: Master What’s Following You | https://medium.com/@verylazytech/top-20-tools-hackers-use-to-track-you-across-the-internet-master-whats-following-you-b6a159b8bbeb?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, cybersecurity, hacking, bug-bounty, penetration-testing | 23-Dec-2025 |
| When “Login” Was Enough: How a Single Click Compromised an Application | https://medium.com/@dealonzius13/when-login-was-enough-how-a-single-click-compromised-an-application-2b4578798557?source=rss------bug_bounty-5 | Dealonzius | web-applications, bug-bounty, web-penetration-testing, penetration-testing | 23-Dec-2025 |
| How I Found a $10,800 Business Impact Bug: Race Condition & Broken Access Control | https://medium.com/@abhishek-ji/how-i-found-a-10-800-business-impact-bug-race-condition-broken-access-control-de40c9897e91?source=rss------bug_bounty-5 | Abhishek Gupta | programming, ethical-hacking, bug-bounty, penetration-testing, technology | 23-Dec-2025 |
| IDOR in ‘stuno’ parameter leading to unauthorized data exposure | https://medium.com/@akilitulloch/idor-in-stuno-parameter-leading-to-unauthorized-data-exposure-8a9d3068b196?source=rss------bug_bounty-5 | akili | cybersecurity, bug-bounty, idor, idor-vulnerability | 23-Dec-2025 |
| My First Critical Bug: 0-Click Full Account Takeover | https://medium.com/@0xJad/my-first-critical-bug-0-click-full-account-takeover-b3ee2c559122?source=rss------bug_bounty-5 | 0xJad | bug-bounty, cybersecurity, critical-bug, ethical-hacking, web-development | 23-Dec-2025 |
| I Tried Filling Out a Simple Contact Form and Discovered a Stored XSS in the Wild | https://meetcyber.net/i-tried-filling-out-a-simple-contact-form-and-discovered-a-stored-xss-in-the-wild-f777dec6369e?source=rss------bug_bounty-5 | Munna✨ | technology, bug-bounty, security, hacking, cybersecurity | 23-Dec-2025 |
| “Bug Bounty Bootcamp #3: How the Internet Really Works (A Hacker’s Map)” | https://amannsharmaa.medium.com/bug-bounty-bootcamp-3-how-the-internet-really-works-a-hackers-map-3c16b59a5e84?source=rss------bug_bounty-5 | Aman Sharma | learning, penetration-testing, bug-bounty, cybersecurity, hacking | 23-Dec-2025 |
| I Found an $125 Email HTML Injection Just After My Previous Bug — Here’s Exactly How It Happened | https://medium.com/@an.anonymous.school/i-found-an-125-email-html-injection-just-after-my-previous-bug-heres-exactly-how-it-happened-329ec73ef451?source=rss------bug_bounty-5 | Zer0Figure | bug-bounty, bug-bounty-tips, penetration-testing, cybersecurity, security | 23-Dec-2025 |
| How I Turned Stored XSS Into Account Takeover: Exploiting WebSocket-Driven Applications | https://medium.com/@mohameddiv77/how-i-turned-stored-xss-into-account-takeover-exploiting-websocket-driven-applications-dceecbf2276d?source=rss------bug_bounty-5 | Mohamed Ibrahim | bug-bounty-tips, pentesting, bug-bounty, security, penetration-testing | 23-Dec-2025 |
| Race Condition Bypass After a Fix: How I Exploited It Again | https://medium.com/@abhishek-ji/race-condition-bypass-after-a-fix-how-i-exploited-it-again-eeadcb4fce09?source=rss------bug_bounty-5 | Abhishek Gupta | technology, bug-bounty, programming, cybersecurity, penetration-testing | 23-Dec-2025 |
| React2Shell Exploit CVE-2025–55182 Bug Bounty Guide | https://hackerassociate.medium.com/react2shell-exploit-cve-2025-55182-bug-bounty-guide-44c6130b7a7f?source=rss------bug_bounty-5 | Harshad Shah | bug-bounty, pentesting, bugs, cybersecurity, infosec | 23-Dec-2025 |
| The Hidden Beginner’s Map to a $10,000 Bug Bounty | https://medium.com/@codii/the-hidden-beginners-map-to-a-10-000-bug-bounty-addcf6607714?source=rss------bug_bounty-5 | Codi | infosec, cybersecurity, bug-bounty, programming, ethical-hacking | 23-Dec-2025 |
| This Bug Was “Low Severity” — Until I Chained It Into Total Data Exposure | https://infosecwriteups.com/this-bug-was-low-severity-until-i-chained-it-into-total-data-exposure-8816e25e427b?source=rss------bug_bounty-5 | Iski | money, bug-bounty, hacking, bug-bounty-tips, cybersecurity | 23-Dec-2025 |
| Smuggling Orders Past Business Logic | https://medium.com/@default_Ox/smuggling-orders-past-business-logic-d3433a1e989e?source=rss------bug_bounty-5 | default_0x | business-logic-flaw, bug-bounty-hunter, bug-bounty, web-app-pentesting, bug-bounty-tips | 23-Dec-2025 |
| Race Condition Bypass After a Fix: How I Exploited It Again | https://medium.com/legionhunters/race-condition-bypass-after-a-fix-how-i-exploited-it-again-eeadcb4fce09?source=rss------bug_bounty-5 | Abhishek Gupta | technology, bug-bounty, programming, cybersecurity, penetration-testing | 23-Dec-2025 |
| The Day I Found a Prometheus Node Exporter Exposed to the Internet — And Why It Revealed More… | https://medium.com/@anshubind89/the-day-i-found-a-prometheus-node-exporter-exposed-to-the-internet-and-why-it-revealed-more-1841acd4496b?source=rss------bug_bounty-5 | Anshubind | ethical-hacking, bug-bounty-tips, hacking, bug-bounty-writeup, bug-bounty | 23-Dec-2025 |
| The Night I Found a Backup ZIP File Sitting in Plain Sight — And Why It Could Have Exposed Far… | https://medium.com/@anshubind89/the-night-i-found-a-backup-zip-file-sitting-in-plain-sight-and-why-it-could-have-exposed-far-5edfb2fdabde?source=rss------bug_bounty-5 | Anshubind | bounties, bug-bounty-hunter, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 23-Dec-2025 |
| Chaining an Authorized Signer Flow Into a Full Account Takeover | https://medium.com/@dhaneashleyd/chaining-an-authorized-signer-flow-into-a-full-account-takeover-9e803a7e476f?source=rss------bug_bounty-5 | Dhane Ashley Diabajo | cybersecurity, bug-bounty, hacking | 23-Dec-2025 |
| The Danger of Simplicity: How a Default Credential Led to Full Account Access | https://medium.com/@xelcezeri/the-danger-of-simplicity-how-a-default-credential-led-to-full-account-access-c47afe8c2724?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, ödülavcılığı, bug-bounty, bugbounty-tips | 23-Dec-2025 |
| The Complete Frida Automation Script for OWASP Mobile Security Testing (Part 2) | https://medium.com/@prasadraj954/the-complete-frida-automation-script-for-owasp-mobile-security-testing-part-2-d8021d564223?source=rss------bug_bounty-5 | Raj Prasad Kuiri | cybersecurity, information-technology, bug-bounty, mobile-app-development, security | 23-Dec-2025 |
| Exploiting Timing-Based Username Enumeration and Credential Brute-Force with IP Rotation | https://medium.com/@prasangampathak9/exploiting-timing-based-username-enumeration-and-credential-brute-force-with-ip-rotation-20d0beaee629?source=rss------bug_bounty-5 | CyberSec Xploit | Prasangam | learning, bug-bounty, labs, pentesting, exploitation | 23-Dec-2025 |
| From “Add User” to Root: A 4-Digit Bug Bounty Command Injection | https://yaseenzubair.medium.com/from-add-user-to-root-a-4-digit-bug-bounty-command-injection-e436acd547a3?source=rss------bug_bounty-5 | Yaseen Zubair | bug-bounty, cybersecurity, pentesting, bug-bounty-tips, penetration-testing | 23-Dec-2025 |
| PortSwigger Web Security Academy — Lab Write‑Up 4 | https://0xm3d0din.medium.com/portswigger-web-security-academy-lab-write-up-4-0699b9fb1243?source=rss------bug_bounty-5 | 0xM3d0din | penetration-testing, ethical-hacking, portswigger, bug-bounty, cybersecurity | 23-Dec-2025 |
| Welcome back! | https://strangerwhite.medium.com/welcome-back-9711f0f39419?source=rss------bug_bounty-5 | StrangeRwhite | penetration-testing, bug-bounty-tips, hacking, cybersecurity, bug-bounty | 22-Dec-2025 |
| Execution After Redirection (EAR): The Silent High-Impact Bug That Lets You Bypass Logins Like… | https://medium.com/@_crac/execution-after-redirection-ear-the-silent-high-impact-bug-that-lets-you-bypass-logins-like-1108ac6a9729?source=rss------bug_bounty-5 | CRAC Learning | web-security, vulnerability, privilege-escalation, bug-bounty, execution | 22-Dec-2025 |
| The Ultimate Kali Linux Bug Bounty Cheat Sheet: From Recon to Report | https://medium.com/@ms16janhveelaad/the-ultimate-kali-linux-bug-bounty-cheat-sheet-from-recon-to-report-ccc7e3295277?source=rss------bug_bounty-5 | Janhvee Laad | ethical-hacking, kali-linux, bug-bounty, cybersecurity, cheatsheet | 22-Dec-2025 |
| HTB University CTF 2025 All web challenges walkthrough | https://medium.com/@0xNayelx/htb-university-ctf-2025-all-web-challenges-walkthrough-c510d44ca944?source=rss------bug_bounty-5 | 0xNayel | bug-bounty-writeup, bug-bounty, ctf-writeup, ctf | 22-Dec-2025 |
| How I Found 7 Logical Bugs in the com-olho CTF Feature | https://strangerwhite.medium.com/how-i-found-7-logical-bugs-in-the-com-olho-ctf-feature-7adc4c88615d?source=rss------bug_bounty-5 | StrangeRwhite | cybersecurity, infosec, bug-bounty-tips, bug-bounty, penetration-testing | 22-Dec-2025 |
| 2FA Made My Night: How I Bypassed Two-Factor Authentication and Learned a Valuable Lesson | https://medium.com/@lokshsony/2fa-made-my-night-how-i-bypassed-two-factor-authentication-and-learned-a-valuable-lesson-af9867b4c3d6?source=rss------bug_bounty-5 | Lokesh Soni | 2fa-authentication, ratelimitedme, ethical-hacking, cybersecurity, bug-bounty | 22-Dec-2025 |
| AWS & Azure Bug Bounties: Essential Kali Tools for Cloud Security Testing | https://meetcyber.net/aws-azure-bug-bounties-essential-kali-tools-for-cloud-security-testing-8f14dc589f20?source=rss------bug_bounty-5 | Muhammad Haider Tallal | bug-bounty, cloud-security, azure, ethical-hacking, aws | 22-Dec-2025 |
| 15 Tools That Show You the Hidden Life of a Packet: Master Network Analysis Like a Pro | https://medium.com/@verylazytech/15-tools-that-show-you-the-hidden-life-of-a-packet-master-network-analysis-like-a-pro-7b37f3a6b57a?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, cybersecurity, penetration-testing, hacking, bug-bounty | 22-Dec-2025 |
| CloudSek CTF 2025 Write-Up | https://medium.com/@Funsuk_vangdu/cloudsek-ctf-2025-write-up-46403538dcee?source=rss------bug_bounty-5 | Sumit Chaturvedi | ethical-hacking, ctf-writeup, web-security, cybersecurity, bug-bounty | 22-Dec-2025 |
| Behind the Screen: Observing Set-Top Box Device Network Traffic | https://ravi73079.medium.com/behind-the-screen-observing-set-top-box-device-network-traffic-65debbbc92a4?source=rss------bug_bounty-5 | Ravi sharma | cybersecurity, bug-bounty, artificial-intelligence, technology, bug-bounty-tips | 22-Dec-2025 |
| Is This the End of Bugthrive? A Brutally Honest Reflection | https://medium.com/@ProwlSec/is-this-the-end-of-bugthrive-a-brutally-honest-reflection-e34f6a6ba8f0?source=rss------bug_bounty-5 | ProwlSec | startup-life, cybersecurity, founders, viral, bug-bounty | 22-Dec-2025 |
| The Magic of Curl — Advance Commands | https://medium.com/@cybersamuraix/the-magic-of-curl-advance-commands-b57b3c9c3e64?source=rss------bug_bounty-5 | Paulo Bazzo | networking, information-security, cybersecurity, web-development, bug-bounty | 22-Dec-2025 |
| Guide 001 | Getting Started in Bug Bounty Hunting.. | https://adce626.medium.com/guide-001-getting-started-in-bug-bounty-hunting-424d5480ec68?source=rss------bug_bounty-5 | adce626 | bug-bounty, hacking, github, bug-bounty-hunter | 22-Dec-2025 |
| Icinga 2: From Monitoring to RCE | https://medium.com/@Itachi0xf/icinga-2-from-monitoring-to-rce-2446b5c93506?source=rss------bug_bounty-5 | Itachix0f | icinga2, vulnerability, rce, bug-bounty | 22-Dec-2025 |
| How I Discovered a Critical OAuth Account Takeover Across Web and Mobile | https://zuksh.medium.com/how-i-discovered-a-critical-oauth-account-takeover-across-web-and-mobile-97118706365a?source=rss------bug_bounty-5 | Zuksh | ethical-hacking, bug-bounty, cybersecurity, oauth, application-security | 22-Dec-2025 |
| Sanity to Insanity: Chaining Public CMS Misconfigurations to Remote Admin Access on Production | https://sl4x0.medium.com/sanity-to-insanity-chaining-public-cms-misconfigurations-to-remote-admin-access-on-production-1912857037dc?source=rss------bug_bounty-5 | Abdelrhman Allam (sl4x0) | bug-bounty-tips, bug-bounty, web-security, api-security, hacking | 22-Dec-2025 |
| The Magic of Curl — Advance Commands | https://blog.stackademic.com/the-magic-of-curl-advance-commands-b57b3c9c3e64?source=rss------bug_bounty-5 | Paulo Bazzo | networking, information-security, cybersecurity, web-development, bug-bounty | 22-Dec-2025 |
| How I Used Dark Web Dump Analysis to Prioritize My Bug Bounty Targets | https://infosecwriteups.com/how-i-used-dark-web-dump-analysis-to-prioritize-my-bug-bounty-targets-3371ca72aaba?source=rss------bug_bounty-5 | Iski | bug-bounty, bug-bounty-tips, infosec, hacking, cybersecurity | 22-Dec-2025 |
| It Started With Blind XSS: How a Travel Website Fell to Account Takeover | https://medium.com/@khushal007/it-started-with-blind-xss-how-a-travel-website-fell-to-account-takeover-0c94c16c7732?source=rss------bug_bounty-5 | D3vCyph3r | red-teaming, cybersecurity, vapt, bug-bounty, penetration-testing | 22-Dec-2025 |
| Image Upload Bypass Leading to Stored XSS | https://cyxbugs.medium.com/image-upload-bypass-leading-to-stored-xss-546fd6db58b5?source=rss------bug_bounty-5 | Cyx | bug-bounty, bug-bounty-writeup, pentesting, cybersecurity | 22-Dec-2025 |
| Abusing iam:PassRole: Five Practical AWS Privilege Escalation Techniques | https://naysec.medium.com/abusing-iam-passrole-five-practical-aws-privilege-escalation-techniques-411502d01884?source=rss------bug_bounty-5 | Narsingh Yadav | bug-bounty, cloud-security, aws, cybersecurity, security | 22-Dec-2025 |
| AI in Bug‑Bounty Hunting — Hack More Productive | https://medium.com/@afi0pchik/ai-in-bug-bounty-hunting-hack-more-productive-a25cd5639794?source=rss------bug_bounty-5 | Afi0pchik | bug-bounty, cybersecurity, infosec, meetcyber, infosec-write-ups | 22-Dec-2025 |
| PortSwigger Web Security Academy — Lab Write-Up 3 | https://0xm3d0din.medium.com/portswigger-web-security-academy-lab-write-up-3-2fcd98a5b7c1?source=rss------bug_bounty-5 | 0xM3d0din | portswigger, web-security, bug-bounty, penetration-testing, cybersecurity | 22-Dec-2025 |
| Behavior of a Public Web Form Submission Endpoint | https://medium.com/@belghitishakantar/behavior-of-a-public-web-form-submission-endpoint-f7dad8216884?source=rss------bug_bounty-5 | Ishak Antar | authorization, bug-bounty, vulnerability, backend, authentication | 22-Dec-2025 |
| Essential Website Security Tips You Need in 2025 | https://yurie-scanner-v2.medium.com/essential-website-security-tips-you-need-in-2025-984b51de6f87?source=rss------bug_bounty-5 | Ali.Yurie | cybersecurity, seo, bug-bounty, web-development, startup | 22-Dec-2025 |
| How I Hacked Google’s Servers (Legally) With One URL | https://medium.com/@codii/how-i-hacked-googles-servers-legally-with-one-url-1105735a940c?source=rss------bug_bounty-5 | Codi | cybersecurity, ethical-hacking, bug-bounty, web-security, google | 22-Dec-2025 |
| How a Simple Token Mistake Led Me to a Full Admin Account Takeover | https://medium.com/@momenrezkk90/how-a-simple-token-mistake-led-me-to-a-full-admin-account-takeover-ea344c195b26?source=rss------bug_bounty-5 | MOAMEN REZK | cybersecurity, penetration-testing, pentesting, writeup, bug-bounty | 21-Dec-2025 |
| I Trusted the AI Too Early. Production Taught Me Otherwise. | https://medium.com/mind-x-machine/i-trusted-the-ai-too-early-production-taught-me-otherwise-5b2399b7d850?source=rss------bug_bounty-5 | CodeWithYog | software-development, bug-bounty, artificial-intelligence, programming, writing | 21-Dec-2025 |
| RCE via Insecure JS Sandbox Bypass | https://medium.com/@win3zz/rce-via-insecure-js-sandbox-bypass-a26ad6364112?source=rss------bug_bounty-5 | Bipin Jitiya | cybersecurity, infosec, bug-bounty, security, hacking | 21-Dec-2025 |
| SubDog : Subdomain Enumeration | https://meetcyber.net/subdog-subdomain-enumeration-c5eb419d9e7b?source=rss------bug_bounty-5 | Abhirup Konwar | subdomain, ethical-hacking, bug-bounty, bug-bounty-tips, pentesting | 21-Dec-2025 |
| From $0 to $125: How I Abused a GraphQL Endpoint to Bomb Inboxes (My First Bounty) | https://medium.com/@an.anonymous.school/from-0-to-125-how-i-abused-a-graphql-endpoint-to-bomb-inboxes-my-first-bounty-6553ac14e514?source=rss------bug_bounty-5 | Zer0Figure | vulnerability, cybersecurity, security, bug-bounty-tips, bug-bounty | 21-Dec-2025 |
| Adversary Simulation Toolkit: 20 Tools for Real Labs (Master Red Team Skills) | https://medium.com/@verylazytech/adversary-simulation-toolkit-20-tools-for-real-labs-master-red-team-skills-009ae592c915?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, penetration-testing, hacking, bug-bounty, cybersecurity | 21-Dec-2025 |
| The Infinite Loop: How I Bypasssed Protection on a Major E-Commerce Giant (And What It Taught Me) | https://medium.com/@an.anonymous.school/the-infinite-loop-how-i-bypasssed-protection-on-a-major-e-commerce-giant-and-what-it-taught-me-ea701036d734?source=rss------bug_bounty-5 | Zer0Figure | ethical-hacking, cybersecurity, bug-bounty-tips, bug-bounty, vulnerability | 21-Dec-2025 |
| From “Valid Bug” to “No Bounty”: VRP, VRT, P4, and P5 on Bugcrowd | https://medium.com/@MuhammedAsfan/from-valid-bug-to-no-bounty-vrp-vrt-p4-and-p5-on-bugcrowd-7897398ebdd2?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | bugcrowd, cybersecurity, vrt, bug-bounty, bug-bounty-tips | 21-Dec-2025 |
| ️♂️ Reading JavaScript Like a Hacker | https://medium.com/@Purushothamr/%EF%B8%8F-%EF%B8%8F-reading-javascript-like-a-hacker-0d77acae5a68?source=rss------bug_bounty-5 | Purushotham.R | bug-bounty, reconnaissance, hacking, cybersecurity, javascript | 21-Dec-2025 |
| The Day I Found a Spring Boot Actuator Endpoint Exposed in Production — And How It Nearly… | https://medium.com/@anshubind89/the-day-i-found-a-spring-boot-actuator-endpoint-exposed-in-production-and-how-it-nearly-7ce0e8fb7b0a?source=rss------bug_bounty-5 | Anshubind | bug-bounty-writeup, hackerone, bug-bounty, bug-bounty-tips, hacking | 21-Dec-2025 |
| The Night I Found a Public Log Directory Exposing Nearly a Gigabyte of Sensitive Data | https://medium.com/@anshubind89/the-night-i-found-a-public-log-directory-exposing-nearly-a-gigabyte-of-sensitive-data-9b05e2eda2ce?source=rss------bug_bounty-5 | Anshubind | bug-bounty-writeup, hackerone, bug-bounty-tips, hacking, bug-bounty | 21-Dec-2025 |
| Client-Side AES Encryption Is Not Secure | https://amanisher.medium.com/client-side-aes-encryption-is-not-secure-b06ac2ff59ef?source=rss------bug_bounty-5 | Aman Chauhan | web-security, cybersecurity, bug-bounty, encryption, application-security | 21-Dec-2025 |
| Everyone Tested the Login Page — I Tested the Logout Button Instead | https://infosecwriteups.com/everyone-tested-the-login-page-i-tested-the-logout-button-instead-3500c4168b67?source=rss------bug_bounty-5 | Iski | cybersecurity, infosec, bug-bounty, bug-bounty-tips, hacking | 21-Dec-2025 |
| PortSwigger Web Security Academy — Lab Write-Up 2 | https://0xm3d0din.medium.com/portswigger-web-security-academy-lab-write-up-2-61d2b2105c4f?source=rss------bug_bounty-5 | 0xM3d0din | ethical-hacking, bug-bounty, portswigger, cybersecurity, web-security | 21-Dec-2025 |
| I Made $11K on a TikTok Bug Bounty | https://medium.com/@codii/i-made-11k-on-a-tiktok-bug-bounty-30da9a14af84?source=rss------bug_bounty-5 | Codi | ethical-hacking, bug-bounty, cybersecurity, hackerone, ti̇ktok | 21-Dec-2025 |
| ☠️ Top Free Tools That Can Make You $1000/Month in Bug Bounty | https://osintteam.blog/%EF%B8%8F-top-free-tools-that-can-make-you-1000-month-in-bug-bounty-f3ad113d8d64?source=rss------bug_bounty-5 | Vipul Sonule | money, hacking, cybersecurity, bug-bounty, programming | 21-Dec-2025 |
| I Found My First Bugs in 48 Hours: A Beginner’s Real-World Guide | https://medium.com/@codii/i-found-my-first-bugs-in-48-hours-a-beginners-real-world-guide-3c9edbf4fe36?source=rss------bug_bounty-5 | Codi | bugcrowd, ethical-hacking, web-security, cybersecurity, bug-bounty | 21-Dec-2025 |
| Analysis of Sensitive Information Vulnerability in Public XML Files | https://medium.com/@albertstive1010/analysis-of-sensitive-information-vulnerability-in-public-xml-files-840ef304e88a?source=rss------bug_bounty-5 | Albertstive | cybersecurity, data-protection, web-security, information-security, bug-bounty | 20-Dec-2025 |
| From Curiosity to Cash: How I Bypassed 2FA and Earned $300! | https://medium.com/@an.anonymous.school/from-curiosity-to-cash-how-i-bypassed-2fa-and-earned-300-b81ef4c01000?source=rss------bug_bounty-5 | Zer0Figure | bug-bounty, authentication, bug-bounty-tips, cybersecurity, vulnerability | 20-Dec-2025 |
| I’m Zer0Figure — Exploring Security One Vulnerability at a Time | https://medium.com/@an.anonymous.school/im-zer0figure-exploring-security-one-vulnerability-at-a-time-b960a282c50a?source=rss------bug_bounty-5 | Zer0Figure | web-security, bug-bounty-tips, bug-bounty, cybersecurity, learning | 20-Dec-2025 |
| Improper SVG Handling in AI Generated Output | https://medium.com/@Mohamed_khattab/improper-svg-handling-in-ai-generated-output-b434b5d0da8c?source=rss------bug_bounty-5 | mohamed khattab | hacking, cybersecurity, bug-bounty, ai, tryhackme | 20-Dec-2025 |
| GraphQL Hacking Toolkit 2025: 20 Commands & Payloads Every Pentester Should Master | https://medium.com/@verylazytech/graphql-hacking-toolkit-2025-20-commands-payloads-every-pentester-should-master-336db9499b30?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, hacking, penetration-testing, ethical-hacking, bug-bounty | 20-Dec-2025 |
| How a single backslash got me £1000 bounty from a bug bounty program | https://medium.com/@sairajthorat077/how-a-single-backslash-got-me-1000-bounty-from-a-bug-bounty-program-39239e8fc017?source=rss------bug_bounty-5 | Sairaj Thorat | ethical-hacking, bugbounty-writeup, bug-bounty, cybersecurity, hacking | 20-Dec-2025 |
| REST API Endpoint Extractor | https://osintteam.blog/rest-api-endpoint-extractor-d36dfe63506b?source=rss------bug_bounty-5 | Abhirup Konwar | ethical-hacking, wordpress-plugins, bug-bounty, wordpress, bug-bounty-tips | 20-Dec-2025 |
| From Prompt to Payout: How a ChatGPT Prompt Led Me to a Bounty | https://errorsec.medium.com/from-prompt-to-payout-how-a-chatgpt-prompt-led-me-to-a-bug-bounty-7b2893d846d4?source=rss------bug_bounty-5 | errorsec_ | bugbounty-writeup, bug-bounty | 20-Dec-2025 |
| $1,000 Bounty: How a Logout Parameter Turned Into a Phishing Redirect Machine | https://meetcyber.net/1-000-bounty-how-a-logout-parameter-turned-into-a-phishing-redirect-machine-4b42fffa9900?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, penetration-testing, tech, bug-bounty, technology | 20-Dec-2025 |
| Earn $2k/month by Approaching a Target in Bug Bounty Programs | https://medium.com/infosec-writes-up/earn-2k-month-by-approaching-a-target-in-bug-bounty-programs-12bc32b25044?source=rss------bug_bounty-5 | Muhammad Haider Tallal | penetration-testing, ethical-hacking, cybersecurity, bug-bounty, web-security | 20-Dec-2025 |
| Beyond the Web - Thick Clients & Advanced Exploitation | https://medium.com/@ms16janhveelaad/beyond-the-web-thick-clients-advanced-exploitation-b19ab2540570?source=rss------bug_bounty-5 | Janhvee Laad | ethical-hacking, exploitation, cybersecurity, burpsuite, bug-bounty | 20-Dec-2025 |
| How I Hunt for Swagger UI on Real Targets (A Practical Guide for Bug Bounty Hunters) | https://medium.com/@MuhammedAsfan/how-i-hunt-for-swagger-ui-on-real-targets-a-practical-guide-for-bug-bounty-hunters-d44b284609aa?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | swagger-ui, bugbounty-tips, bugbounty-writeup, cybersecurity, bug-bounty | 20-Dec-2025 |
| # ️♂️ The Day I Uncovered a Hidden Account Enumeration Bug | https://medium.com/@abdulbarhacker/%EF%B8%8F-%EF%B8%8F-the-day-i-uncovered-a-hidden-account-enumeration-bug-0304615b4fe2?source=rss------bug_bounty-5 | Abdulbar | cybersecurity, enumeration, bug-bounty, infosec, web-security | 20-Dec-2025 |
| I Hacked Microsoft: Remote Code Execution (RCE) via Dependency Confusion | https://sudoaman.medium.com/i-hacked-microsoft-remote-code-execution-rce-via-dependency-confusion-0c15ebee52df?source=rss------bug_bounty-5 | Aman Kumar (ak) | bug-bounty, cybersecurity, infosec, supply-chain-security, remote-code-execution | 20-Dec-2025 |
| From Zero to Bronze: How I Earned My First Badge Hunting for Leaked Secrets | https://medium.com/@jugnupanchal2812/from-zero-to-bronze-how-i-earned-my-first-badge-hunting-for-leaked-secrets-d477e874592e?source=rss------bug_bounty-5 | Jugnu Panchal | cybersecurity, ethical-hacking, web-security, bug-bounty, infosec | 20-Dec-2025 |
| PortSwigger Web Security Academy_Complete Walkthrough Series | https://0xm3d0din.medium.com/portswigger-web-security-academy-complete-walkthrough-series-8af0649ca66c?source=rss------bug_bounty-5 | 0xM3d0din | web-security, ethical-hacking, cybersecurity, portswigger, bug-bounty | 20-Dec-2025 |
| N0aziXss SubSpectre: Advanced Subdomain Discovery with Intelligent HTTP Analysis | https://medium.com/@N0aziXss/n0azixss-subspectre-advanced-subdomain-discovery-with-intelligent-http-analysis-a52d1e7cd7aa?source=rss------bug_bounty-5 | N0aziXss | subdomain-enumeration, python, cybersecurity, pentesting, bug-bounty | 20-Dec-2025 |
| When Rate Limiting Fails Silently: Turning OTP Abuse into Account Takeover | https://infosecwriteups.com/when-rate-limiting-fails-silently-turning-otp-abuse-into-account-takeover-a46c30b8c80c?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, bug-bounty, infosec, bug-bounty-tips | 20-Dec-2025 |
| I Hacked Microsoft: Remote Code Execution (RCE) via Dependency Confusion | https://blog.leetsec.in/i-hacked-microsoft-remote-code-execution-rce-via-dependency-confusion-0c15ebee52df?source=rss------bug_bounty-5 | Aman Kumar (ak) | bug-bounty, cybersecurity, infosec, supply-chain-security, remote-code-execution | 20-Dec-2025 |
| Why Skill Alone Does not Win Bug Bounties | https://medium.com/illumination/why-skill-alone-does-not-win-bug-bounties-380c1c317d7c?source=rss------bug_bounty-5 | Hania Khan | tech-skills, cybersecurity, infosec, bug-bounty, hacking | 20-Dec-2025 |
| PortSwigger Web Security Academy — Lab Write-Up 1 | https://0xm3d0din.medium.com/portswigger-web-security-academy-lab-write-up-1-3baf9055a3ce?source=rss------bug_bounty-5 | 0xM3d0din | bug-bounty, web-security, cybersecurity, portswigger, ethical-hacking | 20-Dec-2025 |
| An IDOR that allows user information disclosure | https://shahdmk99.medium.com/an-idor-that-allows-user-information-disclosure-36fd7643f31b?source=rss------bug_bounty-5 | Shahd Mk | bug-bounty, bug-bounty-writeup, privilege-escalation, idor | 20-Dec-2025 |
| When One Request Becomes Two: A Deep Dive into HTTP Request Smuggling Vulnerabilities | https://osintteam.blog/when-one-request-becomes-two-a-deep-dive-into-http-request-smuggling-vulnerabilities-9a12f29a6418?source=rss------bug_bounty-5 | Monika sharma | tech, bug-bounty, technology, cybersecurity, penetration-testing | 20-Dec-2025 |
| Broken Access Control: low-privilege user dapat Menghapus Lampiran Slip Gaji Melalui Endpoint… | https://medium.com/@robisubagja158/broken-access-control-low-privilege-user-dapat-menghapus-lampiran-slip-gaji-melalui-endpoint-ba7e3b58c04b?source=rss------bug_bounty-5 | Robi Mohamad subagja | broken-access-control, bug-bounty, bug-bounty-tips, cybersecurity, idor | 19-Dec-2025 |
| The Password Alchemist: How a Simple Parameter Swap Led to Full Account Takeover | https://osintteam.blog/the-password-alchemist-how-a-simple-parameter-swap-led-to-full-account-takeover-d3436b226889?source=rss------bug_bounty-5 | Fuzzyy Duck | bug-bounty, web-security, bugbounty-writeup, web-development, security | 19-Dec-2025 |
| Hidden Admin Tools → Full Exploitation Chains | https://osintteam.blog/hidden-admin-tools-full-exploitation-chains-eb36d9132193?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, penetration-testing, tech, technology, cybersecurity | 19-Dec-2025 |
| Broken Access Control: low-privilege user dapat Menghapus file/attachment Lampiran Melalui… | https://medium.com/@robisubagja158/broken-access-control-low-privilege-user-dapat-menghapus-lampiran-slip-gaji-melalui-endpoint-ba7e3b58c04b?source=rss------bug_bounty-5 | Robi Mohamad subagja | broken-access-control, bug-bounty, bug-bounty-tips, cybersecurity, idor | 19-Dec-2025 |
| Top 10 Subdomain Discovery Tools That Beat Amass: Level Up Your Recon Game | https://medium.com/@verylazytech/top-10-subdomain-discovery-tools-that-beat-amass-level-up-your-recon-game-eea86f3b284d?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, cybersecurity, hacking, penetration-testing | 19-Dec-2025 |
| How 4 Months of Sleepless Nights Led Me to My First NASA Letter of Recognition | https://medium.com/@ninadgowda777/how-4-months-of-sleepless-nights-led-me-to-my-first-nasa-letter-of-recognition-c6a8174356c4?source=rss------bug_bounty-5 | Ninadgowda | trends, nasa, ethical-hacking, bug-bounty, cybersecurity | 19-Dec-2025 |
| Understanding React2Shell: A Critical Vulnerability in React Server Components (CVE-2025–55182) | https://osintteam.blog/understanding-react2shell-a-critical-vulnerability-in-react-server-components-cve-2025-55182-9a834711c0ee?source=rss------bug_bounty-5 | Frostynxth | zero-day, cve, bug-bounty, cyberattack, cybesecurity | 19-Dec-2025 |
| The Open Redirect That Could Turn a Trusted URL Into a Weapon — A Bug Hunting Story | https://medium.com/@anshubind89/the-open-redirect-that-could-turn-a-trusted-url-into-a-weapon-a-bug-hunting-story-c01e47e5ab3a?source=rss------bug_bounty-5 | Anshubind | bug-bounty-writeup, bug-bounty, hacker, hackerone, bug-bounty-tips | 19-Dec-2025 |
| The phpinfo() Page That Shouldn’t Have Been There — And How It Exposed NykaaMan’s Internal… | https://medium.com/@anshubind89/the-phpinfo-page-that-shouldnt-have-been-there-and-how-it-exposed-nykaaman-s-internal-ee5f6e568159?source=rss------bug_bounty-5 | Anshubind | money, hacking, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 19-Dec-2025 |
| CVE-2025–20393 (Cisco AsyncOS Zero-Day) | https://cyberleelawat.medium.com/cve-2025-20393-cisco-asyncos-zero-day-72b35798cdf9?source=rss------bug_bounty-5 | Virendra Kumar | cybersecurity, cve-2025-20393, cyberleelawat, bug-bounty, cve | 19-Dec-2025 |
| How I Found a $8,560 Password Reset Bug | https://medium.com/@codii/how-i-found-a-8-560-password-reset-bug-23a5845421c9?source=rss------bug_bounty-5 | Codi | bug-bounty, web-security, cybersecurity, ethical-hacking, infosec | 19-Dec-2025 |
| How i Found Easy ₹5,000 IDOR | Bug Bounty Writeup | P3 | https://medium.com/@rajankumarbarik143/how-i-found-easy-5-000-idor-bug-bounty-writeup-p3-27348656c4cd?source=rss------bug_bounty-5 | Rajankumarbarik | technology, bug-bounty, web-development, cybersecurity, programming | 19-Dec-2025 |
| Recon Fatigue Is Real — Until This One URL Paid My Rent | https://infosecwriteups.com/recon-fatigue-is-real-until-this-one-url-paid-my-rent-8768a51dc50e?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty-tips, hacking, bug-bounty, cybersecurity | 19-Dec-2025 |
| # The Quiet Bugs That Don’t Look Like Bugs | https://medium.com/@abdulbarhacker/the-quiet-bugs-that-dont-look-like-bugs-c38c7db08364?source=rss------bug_bounty-5 | Abdulbar | web-security, bug-bounty, cybersecurity, infosec, application-security | 19-Dec-2025 |
| Outlawed / Banned from the Fraudulent Bug Bounty World: The Story of Cyber Kalki | https://medium.com/@elelyonmusk/outlawed-banned-from-the-fraudulent-bug-bounty-world-the-story-of-cyber-kalki-a73028b0959d?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | infosec-write-ups, bug-bounty-writeup, bug-bounty, bug-bounty-hunter, cybersecurity | 19-Dec-2025 |
| Information disclosure, but not in the way you might expect | https://medium.com/@rajveer_0101/information-disclosure-but-not-in-the-way-you-might-expect-a914479e06cc?source=rss------bug_bounty-5 | Rajveer | information-security, information-disclosure, bug-bounty, hacking, bug-bounty-writeup | 19-Dec-2025 |
| CVE-2025–67418: When Default Credentials Become a Remote Root Button | https://medium.com/@arpit03sharma2003/cve-2025-67418-when-default-credentials-become-a-remote-root-button-03be5ee4b927?source=rss------bug_bounty-5 | Arpit Sharma | cloud-computing, bug-bounty, security-research, cve-hunting, cybersecurity | 19-Dec-2025 |
| How I Found an Unauthenticated XXE That Allowed Arbitrary File Read in NASA | https://medium.com/@thomscoder/how-i-found-an-unauthenticated-xxe-that-allowed-arbitrary-file-read-in-nasa-bfffe24dc24e?source=rss------bug_bounty-5 | Thomas A. | bug-bounty-writeup, hacking, vulnerability-disclosure, cybersecurity, bug-bounty | 19-Dec-2025 |
| Unauthorized access to any presentation at Dropbox | https://medium.com/@0xRaccoon/unauthorized-access-to-any-presentation-at-dropbox-604af454547d?source=rss------bug_bounty-5 | Raccoon | bugbounty-writeup, web-penetration-testing, bug-bounty-tips, bug-bounty, penetration-testing | 19-Dec-2025 |
| $5,000 Bounty: How I Hijacked Google Gemini’s UI via Python Code Execution | https://medium.com/@janetzech/5-000-bounty-how-i-hijacked-google-geminis-ui-via-python-code-execution-0c9c09e556ae?source=rss------bug_bounty-5 | janet zech | technology, ai, security, llm, bug-bounty | 18-Dec-2025 |
| They Called It Luck — So NASA Did It Again | https://medium.com/@ninadgowda777/they-called-it-luck-so-nasa-did-it-again-0146179622a5?source=rss------bug_bounty-5 | Ninadgowda | hacking, bug-bounty, nasa, cybersecurity, ethical-hacking | 18-Dec-2025 |
| How To Become a Hacker | https://adce626.medium.com/how-to-become-a-hacker-53996a944767?source=rss------bug_bounty-5 | adce626 | hacking, hacker, bug-bounty | 18-Dec-2025 |
| Password Reset Poisoning: Receiving the Same Reset Link in My Inbox | https://medium.com/@twilight/password-reset-poisoning-receiving-the-same-reset-link-in-my-inbox-1cb2b3ab0b80?source=rss------bug_bounty-5 | Twilight | vapt, web-security, owasp, cybersecurity, bug-bounty | 18-Dec-2025 |
| From a Simple Certificate to a Critical Cloud Flaw: A Bug Bounty Journey | https://medium.com/@codii/from-a-simple-certificate-to-a-critical-cloud-flaw-a-bug-bounty-journey-1e613efc42fc?source=rss------bug_bounty-5 | Codi | cybersecurity, ssrf, aws, web-security, bug-bounty | 18-Dec-2025 |
| Why Most Bug Bounty Findings Come From Thinking, Not Tools | https://medium.com/meetcyber/why-most-bug-bounty-findings-come-from-thinking-not-tools-b955aa542090?source=rss------bug_bounty-5 | Gl1tch | bug-bounty-tips, cybersecurity, bug-bounty-writeup, technology, bug-bounty | 18-Dec-2025 |
| How I Found a Zero-Click Flaw by Questioning a “Safe” Rendering Path | https://medium.com/@Rawi1X/how-i-found-a-zero-click-flaw-by-questioning-a-safe-rendering-path-b104c29a3e8e?source=rss------bug_bounty-5 | Rawi | reverse-engineering, zero-trust, cybersecurity, bug-bounty, flow | 18-Dec-2025 |
| Write-Up — Publicly Exposed MySQL on an “Inactive” Subdomain (KAIAWEB-216) | https://medium.com/@mohamedabdulhamid/write-up-publicly-exposed-mysql-on-an-inactive-subdomain-kaiaweb-216-61aa704429d1?source=rss------bug_bounty-5 | Mohamed Abdul Hamid | cryptocurrency, bug-bounty, programming, cybersecurity, technology | 18-Dec-2025 |
| Why Most Bug Bounty Findings Come From Thinking, Not Tools | https://medium.com/write-a-catalyst/why-most-bug-bounty-findings-come-from-thinking-not-tools-2899347e6890?source=rss------bug_bounty-5 | Gl1tch | write-a-catalyst, bug-bounty, tech, cybersecurity, technology | 18-Dec-2025 |
| Why AI-Driven Vibe Hacking Demands a New DevSecOps Mindset | https://medium.com/@Cyber-AppSec/why-ai-driven-vibe-hacking-demands-a-new-devsecops-mindset-790c0383ca38?source=rss------bug_bounty-5 | Cyber-AppSec | vibe-coding, bug-bounty, information-security, cybersecurity, ai | 18-Dec-2025 |
| API10–2023: Unsafe Consumption of APIs — Exploitation and Mitigation | https://medium.com/@jpablo13/api10-2023-unsafe-consumption-of-apis-exploitation-and-mitigation-b099a80cfe99?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, technology, api, hacking | 17-Dec-2025 |
| Cross-Site Scripting Via Unsanitized Input In a PHP Endpoint | https://ajay-vardhan01.medium.com/cross-site-scripting-via-unsanitized-input-in-a-php-endpoint-993266129f5d?source=rss------bug_bounty-5 | Ajay Vardhan | bug-bounty, cross-site-scripting, webappsec, reflected-xss, xss-vulnerability | 17-Dec-2025 |
| 10 MFA Fatigue Attack Techniques & How to Detect Them: Master the Art of Stopping Modern Account… | https://medium.com/@verylazytech/10-mfa-fatigue-attack-techniques-how-to-detect-them-master-the-art-of-stopping-modern-account-ba99bffac1db?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, cybersecurity, ethical-hacking, penetration-testing, bug-bounty | 17-Dec-2025 |
| How I Hacked an Entrepreneur | https://infosecwriteups.com/how-i-hacked-an-entrepreneur-19d270a62c5c?source=rss------bug_bounty-5 | StvRoot | bug-bounty, technology, cybersecurity, programming, privacy | 17-Dec-2025 |
| How I hacked a Jenkins endpoint and leaked critical information | https://mohammadibnibrahim.medium.com/how-i-hacked-a-jenkins-endpoint-and-leaked-critical-information-87097f21789c?source=rss------bug_bounty-5 | محمد بن إبراهيم | writeup, penetration-testing, hacking, bug-bounty, cybersecurity | 17-Dec-2025 |
| The Night I Stumbled Into an Unprotected Hangfire Dashboard — And Why It Was Far More Dangerous… | https://medium.com/@anshubind89/the-night-i-stumbled-into-an-unprotected-hangfire-dashboard-and-why-it-was-far-more-dangerous-c8212005cf51?source=rss------bug_bounty-5 | Anshubind | hacking, money, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 17-Dec-2025 |
| The Debug Log Left Behind — And How It Exposed the Inner Workings of a Major Automotive Platform | https://medium.com/@anshubind89/the-debug-log-left-behind-and-how-it-exposed-the-inner-workings-of-a-major-automotive-platform-97d1f09cadef?source=rss------bug_bounty-5 | Anshubind | bugs, hacking, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 17-Dec-2025 |
| How One WhatsApp Feature Got Me Two $500 Bounties in the Meta Bug Bounty Program | https://imshadab18.medium.com/how-one-whatsapp-feature-got-me-two-500-bounties-in-the-meta-bug-bounty-program-31ffb3ff12c9?source=rss------bug_bounty-5 | Mohammad Shadab Shaikh | bug-bounty-writeup, ethical-hacking, hacking, bug-bounty, bug-bounty-tips | 17-Dec-2025 |
| GraphQL Security Deep Dive: Finding High‑Impact Bugs | https://medium.com/@afi0pchik/graphql-security-deep-dive-finding-high-impact-bugs-a6adedc6133c?source=rss------bug_bounty-5 | Afi0pchik | bug-bounty, infosec-write-ups, graphql, bug-bounty-writeup, cybersecurity | 17-Dec-2025 |
| SENSITIVE PII DATA FOUND OF PAYPAL, CEO ALEX CHRISS DATA BREACH LEAK WEBSITE CLOSED AS… | https://medium.com/@elelyonmusk/sensitive-pii-data-found-of-paypal-ceo-alex-chriss-data-breach-leak-website-closed-as-594d9a26fbd0?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 17-Dec-2025 |
| The Mother Lode: Hacking with GitHub Dorking | https://medium.com/@ms16janhveelaad/the-mother-lode-hacking-with-github-dorking-40a8201218a3?source=rss------bug_bounty-5 | Janhvee Laad | github-dorking, osint, bug-bounty, cybersecurity, infosec | 17-Dec-2025 |
| Top OSINT Browser Extensions for BugHunters, Cybersecurity Professionals, Journalists… | https://infosecwriteups.com/top-osint-browser-extensions-for-bughunters-cybersecurity-professionals-journalists-4809431f9c79?source=rss------bug_bounty-5 | Elie Attieh | pentesting, journalism, osint-investigation, bug-bounty, cybersecurity | 17-Dec-2025 |
| Why Scanners Miss the Most Expensive Bugs (And Why Humans Still Get Paid) | https://krishna-cyber.medium.com/why-scanners-miss-the-most-expensive-bugs-and-why-humans-still-get-paid-7badb8b2ad5b?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, osint, cybersecurity, bug-bounty-tips, xss-attack | 17-Dec-2025 |
| IDOR-”Bir bakıp çıkacaz izne gerek yok!!” | https://medium.com/@yusufcancinar05/idor-bir-bak%C4%B1p-%C3%A7%C4%B1kacaz-izne-gerek-yok-2823479cf852?source=rss------bug_bounty-5 | Yusufcancinar | burpsuite, bug-bounty, idor, portswigger | 17-Dec-2025 |
| # The API Endpoint That Shouldn’t Have Exposed 50,000 User Records | https://medium.com/@abdulbarhacker/the-api-endpoint-that-shouldnt-have-exposed-50-000-user-records-4b29b9f20df2?source=rss------bug_bounty-5 | Abdulbar | api-security, ethical-hacking, bug-bounty, cybersecurity, data-privacy | 17-Dec-2025 |
| The Bug Bounty Automation Stack That Can Generate $10K+ (Open Source Tools Only) | https://systemweakness.com/the-bug-bounty-automation-stack-that-can-generate-10k-open-source-tools-only-93ed3e8b3ee7?source=rss------bug_bounty-5 | BugHunter’s Journal | cybersecurity, bug-bounty, technology, hacking, programming | 17-Dec-2025 |
| I Found a $10,000 Bug by Bypassing a 403 Forbidden Page | https://medium.com/@codii/i-found-a-10-000-bug-by-bypassing-a-403-forbidden-page-1e588fb9dd4b?source=rss------bug_bounty-5 | Codi | web-security, infosec, bug-bounty, cybersecurity, ethical-hacking | 17-Dec-2025 |
| One “Harmless” Parameter, Full Account Takeover — My Favorite Bug Bounty Find | https://infosecwriteups.com/one-harmless-parameter-full-account-takeover-my-favorite-bug-bounty-find-1e4c9cf7c17d?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, hacking, cybersecurity, money | 17-Dec-2025 |
| How a Public readme.txt Led to a Critical WordPress CVE | https://samael0x4.medium.com/how-a-public-readme-txt-led-to-a-critical-wordpress-cve-dc8776454011?source=rss------bug_bounty-5 | samael0x4 | wordpress, bugbounty-writeup, bug-bounty | 17-Dec-2025 |
| XML-RPC PHP File Abuse (xmlrpc.php) | Blind SSRF via WordPress XML-RPC pingback.ping | https://medium.com/@terp0x0/xml-rpc-php-file-abuse-xmlrpc-php-blind-ssrf-via-wordpress-xml-rpc-pingback-ping-561e3476107d?source=rss------bug_bounty-5 | terp0x0 | ethical-hacking, bug-bounty, programming, cybersecurity | 17-Dec-2025 |
| Forensics: Flag in Flame — When Logs Turn Into Images | https://medium.com/@VulnHunt3r/forensics-flag-in-flame-when-logs-turn-into-images-3fc526d0a5bf?source=rss------bug_bounty-5 | vulnhunter | ethical-hacking, cybersecurity, ctf, technology, bug-bounty | 17-Dec-2025 |
| Business Logic Bugs That Paid Big: How “Working as Intended” Broke Million-Dollar Systems | https://osintteam.blog/business-logic-bugs-that-paid-big-how-working-as-intended-broke-million-dollar-systems-6f4bd345659d?source=rss------bug_bounty-5 | Krish_cyber | cybersecurity, bug-bounty-writeup, bug-bounty, osint, cybersecurity-writeups | 17-Dec-2025 |
| $2,500 Bounty: How a Simple Race Condition Let Me Get Paid Multiple Times by HackerOne | https://osintteam.blog/2-500-bounty-how-a-simple-race-condition-let-me-get-paid-multiple-times-by-hackerone-cc7bbb0551f1?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, cybersecurity, tech, bug-bounty | 17-Dec-2025 |
| Reset Password Token Leakage to Third-Party Analytics Leading to Account Takeover | https://medium.com/@Mohamed_Farghly/reset-password-token-leakage-to-third-party-analytics-leading-to-account-takeover-e66723dcb8d0?source=rss------bug_bounty-5 | Mohamed_Farghly | bug-bounty, web-app-pentesting, red-team, penetration-testing, cybersecurity | 17-Dec-2025 |
| API10–2023: Unsafe Consumption of APIs — Explotación y Mitigación | https://medium.com/@jpablo13/api10-2023-unsafe-consumption-of-apis-explotaci%C3%B3n-y-mitigaci%C3%B3n-2ec626af806e?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, technology, hacking, api | 16-Dec-2025 |
| 10 OSINT Tools Every Cybersecurity Professional Should Know (Before Hackers Do) ️♂️ | https://osintteam.blog/10-osint-tools-every-cybersecurity-professional-should-know-before-hackers-do-%EF%B8%8F-%EF%B8%8F-2e927c8a17cd?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty-tips, hacking, cybersecurity, bug-bounty, osint | 16-Dec-2025 |
| $200 Bounty: XSS via X-Forwarded-Host Header That Also Triggered an Open Redirect | https://osintteam.blog/200-bounty-xss-via-x-forwarded-host-header-that-also-triggered-an-open-redirect-9582bc59f6a7?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, penetration-testing, cybersecurity, web-security | 16-Dec-2025 |
| Breaking the Web (Part 7): Security Misconfigurations — When Defaults Become Dangerous | https://medium.com/@cybercom0101/breaking-the-web-part-7-security-misconfigurations-when-defaults-become-dangerous-30b15459d196?source=rss------bug_bounty-5 | Mohammed Fahad | cybersecurity, bug-bounty, security, pentesting, web-application-security | 16-Dec-2025 |
| Race Condition Vulnerability | https://medium.com/@positiveid/race-condition-vulnerability-08dc12ccd5b1?source=rss------bug_bounty-5 | Doston Abdullaev | hacking, report, bug-bounty, cybersecurity, pentesting | 16-Dec-2025 |
| Top 5 Recon Tactics That Still Work in 2025: Mastering Modern Info Gathering for Pentesting | https://medium.com/@verylazytech/top-5-recon-tactics-that-still-work-in-2025-mastering-modern-info-gathering-for-pentesting-d1e33418ada1?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, penetration-testing, hacking, bug-bounty, cybersecurity | 16-Dec-2025 |
| Mastering IDORs: Practical Notes on Real‑World Access Control Failures | https://medium.com/@afi0pchik/mastering-idors-real-world-access-control-failures-a507375f3230?source=rss------bug_bounty-5 | Afi0pchik | cybersecurity, infosec-write-ups, infosec, bug-bounty, bug-bounty-tips | 16-Dec-2025 |
| Bug Bounty Upgrade: Turn Recon Into Impact With Ethical Credential Evidence | https://medium.com/@alexandrevandammepro/bug-bounty-upgrade-turn-recon-into-impact-with-ethical-credential-evidence-960640beb846?source=rss------bug_bounty-5 | Alexandre Vandamme | cybersecurity, hacking, bug-bounty, infosec, bug-bounty-tips | 16-Dec-2025 |
| IDOR Vulnerability | https://medium.com/@positiveid/idor-vulnerability-7272b1cf7830?source=rss------bug_bounty-5 | Doston Abdullaev | pentesting, web-applications, report, bug-bounty, cybersecurity | 16-Dec-2025 |
| Weaponizing the Browser: A Hacker’s Guide to BeEF | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/weaponizing-the-browser-a-hackers-guide-to-beef-56b5d08107e5?source=rss------bug_bounty-5 | ghostyjoe | offensive-security, ethical-hacking, bug-bounty, web-security, xss-attack | 16-Dec-2025 |
| How i hacked a website just by looking at the source code | https://osintteam.blog/how-i-hacked-a-website-just-by-looking-at-the-source-code-90645f085736?source=rss------bug_bounty-5 | Devansh Patel | bugs, bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 16-Dec-2025 |
| How to Find Hidden Bugs on Any Website in Just 6 Minutes | https://medium.com/@codii/how-to-find-hidden-bugs-on-any-website-in-just-6-minutes-56443c448921?source=rss------bug_bounty-5 | Codi | bug-hunting, reconnaissance, cybersecurity, bug-bounty, automation | 16-Dec-2025 |
| A Journey from Session Poisoning to CL.CL Request Smuggling | https://medium.com/@Zero-Ray/a-journey-from-session-poisoning-to-cl-cl-request-smuggling-9c7dbc122e08?source=rss------bug_bounty-5 | Mahmoud Fawzy | bug-bounty, cybersecurity, web-exploitation, ctf, ctf-writeup | 16-Dec-2025 |
| JavaScript Analysis: From Minified Mess to High-Impact Bugs for Bug Bounty Hunters | https://medium.com/@bugatsec/javascript-analysis-from-minified-mess-to-high-impact-bugs-for-bug-bounty-hunters-924ab3f12ccf?source=rss------bug_bounty-5 | Bugatsec | hacking, cybersecurity, javascript, bug-bounty, bugbounty-writeup | 16-Dec-2025 |
| I Found a 12,000 ₹ Blind SQL Injection, Beginner's friendly Breakdown | https://medium.com/@rajankumarbarik143/i-found-a-12-000-blind-sql-injection-beginners-friendly-breakdown-33db28a48dbc?source=rss------bug_bounty-5 | Rajankumarbarik | technology, sql-injection, programming, cybersecurity, bug-bounty | 16-Dec-2025 |
| You Are Awesome PDF! (SSRF VM Challenge) | https://medium.com/@josh.beck2006/you-are-awesome-pdf-ssrf-vm-challenge-fa8c534e5a72?source=rss------bug_bounty-5 | Josh Beck | ctf, cybersecurity, bug-bounty | 16-Dec-2025 |
| ️♂️ The Dark Web Knew Before the Company Did: Finding a Bug Using Leaked Chatter | https://medium.com/@iski/%EF%B8%8F-%EF%B8%8F-the-dark-web-knew-before-the-company-did-finding-a-bug-using-leaked-chatter-e2a5f85a5485?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, bug-bounty-tips, infosec, bug-bounty | 16-Dec-2025 |
| pgAdmin 4 Meta-Command Filter Bypass — RCE | https://medium.com/@cybersecplayground/pgadmin-4-meta-command-filter-bypass-rce-8c22e9f1983d?source=rss------bug_bounty-5 | Cybersecplayground | cve-2025-13780, pgadmin, bug-bounty, penetration-testing, exploit | 16-Dec-2025 |
| The Lazy Hunter’s Guide to Modat: Recon Smarter, Not Harder | https://medium.com/@hacker_might/the-lazy-hunters-guide-to-modat-recon-smarter-not-harder-4bc95bc2a577?source=rss------bug_bounty-5 | hacker_might | bug-bounty-tips, bug-bounty, osint, reconnaissance, bug-bounty-writeup | 16-Dec-2025 |
| LFI to RCE via Log Poisoning: A Hands-On Exploit Guide | https://medium.com/meetcyber/lfi-to-rce-via-log-poisoning-a-hands-on-exploit-guide-621255a547c4?source=rss------bug_bounty-5 | Raj Prasad Kuiri | bug-bounty, web-development, cybersecurity, information-security, security | 16-Dec-2025 |
| Top 10 One-Liner Commands for JavaScript Hunting | https://osintteam.blog/top-10-one-liner-commands-for-javascript-hunting-d6910b3f8d6d?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, cybersecurity, javascript, penetration-testing | 16-Dec-2025 |
| Logical 2FA Bypass by Reusing Trusted Device Authentication Flow | https://medium.com/@mhmodgm54/logical-2fa-bypass-by-reusing-trusted-device-authentication-flow-bd95b32b104c?source=rss------bug_bounty-5 | Mahmoud Gamal | writeup, bug-bounty, 2fa, penetration-testing, cybersecurity | 16-Dec-2025 |
| Performing CVE-2020–3596 in Four Steps: Crashing Cisco VCS via SIP | https://junoonbro.medium.com/performing-cve-2020-3596-in-four-steps-crashing-cisco-vcs-via-sip-42059155037e?source=rss------bug_bounty-5 | JunoonBro | bug-bounty, cybersecurity, cisco, pentesting, infosec | 15-Dec-2025 |
| [Broken Access Control] Removed members can access any post content in a Microsoft Teams community | https://medium.com/@tegakdiatassunnah/broken-access-control-removed-members-can-access-any-post-content-in-a-microsoft-teams-community-1e1dbb34cc1d?source=rss------bug_bounty-5 | Rohmad Hidayah | microsoft, microsoft-teams, information-disclosure, bug-bounty, broken-access-control | 15-Dec-2025 |
| How I Check for Subdomain Takeovers Part 1 | https://infosecwriteups.com/how-i-check-for-subdomain-takeovers-part-1-b4640f69b389?source=rss------bug_bounty-5 | Red | linux, security, website, cybersecurity, bug-bounty | 15-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-163) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-163-0b38587ff72f?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty, ethical-hacking, bug-bounty-tips, cybersecurity | 15-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-162) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-162-2f0a27daa600?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, bug-bounty-tips, ethical-hacking, hacking, cybersecurity | 15-Dec-2025 |
| “Who Sent That Email?” — How one tiny Hidden API turned into a spam machine | https://infosecwriteups.com/who-sent-that-email-how-one-tiny-hidden-api-turned-into-a-spam-machine-a56b69a72a4c?source=rss------bug_bounty-5 | Munna✨ | cybersecurity, technology, information-security, hacking, bug-bounty | 15-Dec-2025 |
| The Pivot: Hunting Hidden Doors with Fuzzing and Multi-Platform Mindset | https://medium.com/@ms16janhveelaad/the-pivot-hunting-hidden-doors-with-fuzzing-and-multi-platform-mindset-9a64baca3a7e?source=rss------bug_bounty-5 | Janhvee Laad | vulnerability-discovery, api-security, google-dorking, infosec, bug-bounty | 15-Dec-2025 |
| Beginner Bug Bounty Guide | https://medium.com/@abdulbarhacker/beginner-bug-bounty-guide-dfd886cfafd3?source=rss------bug_bounty-5 | Abdulbar | web-security, cybersecurity, bug-bounty, ethical-hacking, infosec | 15-Dec-2025 |
| Negative AddOn to Financial Flaw — Business Logic Vulnerability | https://vrushabhd.medium.com/negative-addon-to-financial-flaw-business-logic-vulnerability-ea40f269e173?source=rss------bug_bounty-5 | Mr. Vrushabh | cybersecurity, hacking, business-logic-bug, bug-bounty, bug-bounty-writeup | 15-Dec-2025 |
| Deep Dive: OAuth 2.0 Vulnerabilities & Exploitation Guide | https://medium.com/meetcyber/deep-dive-oauth-2-0-vulnerabilities-exploitation-guide-a468f84d57b7?source=rss------bug_bounty-5 | Fuzzyy Duck | bug-bounty, web-development, oauth, bug-bounty-tips, web-security | 15-Dec-2025 |
| CSRF vs JWT: The One Story That Finally Makes It Click | https://medium.com/@MuhammedAsfan/csrf-vs-jwt-the-one-story-that-finally-makes-it-click-16352ef67196?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty, csrf-vs-jwt | 15-Dec-2025 |
| Bug Bounty Burnout and the Boredom of Repetitive Tasks | https://mokhansec.medium.com/bug-bounty-burnout-and-the-boredom-of-repetitive-tasks-dacda4dac71a?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-writeup, cybersecurity, bug-bounty, bugs, bug-bounty-tips | 15-Dec-2025 |
| The Paradox of the 3.4 Million: Why You Can’t Find a Job in a “Desperate” Industry | https://infosecwriteups.com/the-paradox-of-the-3-4-million-why-you-cant-find-a-job-in-a-desperate-industry-90406e4854bb?source=rss------bug_bounty-5 | Nmullenski | ethical-hacking, penetration-testing, cybersecurity, offensive-security, bug-bounty | 15-Dec-2025 |
| How I Bypassed Voucher Limits Using a Race Condition Vulnerability | https://infosecwriteups.com/how-i-bypassed-voucher-limits-using-a-race-condition-vulnerability-8f68a19fbc76?source=rss------bug_bounty-5 | Danish Ahmed | cybersecurity, bug-bounty-tips, hacking, bug-bounty-writeup, bug-bounty | 15-Dec-2025 |
| Your Browser Is Spying On You — Here’s Proof | https://infosecwriteups.com/your-browser-is-spying-on-you-heres-proof-2e4ca07233fd?source=rss------bug_bounty-5 | Vipul Sonule | hacking, ai, bug-bounty, programming, cybersecurity | 15-Dec-2025 |
| dig Command Explained: A Simple Guide to DNS Lookups for Networking & Cybersecurity | https://medium.com/@natarajanck2/dig-command-explained-a-simple-guide-to-dns-lookups-for-networking-cybersecurity-16921aa14469?source=rss------bug_bounty-5 | Natarajan C K | dns, cybersecurity, bug-bounty, dig-command, security | 15-Dec-2025 |
| $25,000| Critical Vulnerability was Found on HackerOne | https://medium.com/@aminefarah802/25-000-critical-vulnerability-was-found-on-hackerone-ee1dd3b33ad5?source=rss------bug_bounty-5 | KILLUA_UCHIHA | bug-bounty, bug-bounty-tips, bug-zero, bugs, bug-bounty-writeup | 15-Dec-2025 |
| # Common Web Vulnerabilities Every Developer Should Know | https://medium.com/@abdulbarhacker/common-web-vulnerabilities-every-developer-should-know-91546c3aef60?source=rss------bug_bounty-5 | Abdulbar | web-security, bug-bounty, cybersecurity, ethical-hacking, infosec | 15-Dec-2025 |
| Buried in JavaScript: How One Comment Led Me to a Production API Key | https://infosecwriteups.com/buried-in-javascript-how-one-comment-led-me-to-a-production-api-key-65a33b1644bb?source=rss------bug_bounty-5 | Iski | money, bug-bounty, hacking, bug-bounty-tips, cybersecurity | 15-Dec-2025 |
| A Hacker’s Christmas: Bug Bounties by Candlelight | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/a-hackers-christmas-bug-bounties-by-candlelight-d28a847e9146?source=rss------bug_bounty-5 | ghostyjoe | ctf, bug-bounty, christmas, cybersecurity, ethical-hacking | 15-Dec-2025 |
| Recon Dorking: The Art of Advanced Information Gathering for Cybersecurity | https://medium.com/@N0aziXss/recon-dorking-the-art-of-advanced-information-gathering-for-cybersecurity-3bcf4a1625c8?source=rss------bug_bounty-5 | N0aziXss | cybersecurity, reconnaissance, security-research, ethical-hacking, bug-bounty | 15-Dec-2025 |
| The CGI Script That Should Have Stayed Hidden — How a Forgotten Diagnostic File Exposed an… | https://medium.com/@anshubind89/the-cgi-script-that-should-have-stayed-hidden-how-a-forgotten-diagnostic-file-exposed-an-46e9215743cd?source=rss------bug_bounty-5 | Anshubind | bugcrowd, bug-bounty-tips, hacker, bug-bounty-writeup, bug-bounty | 15-Dec-2025 |
| ⚡ The Reflected XSS Hidden Inside a Login Page — And How a Single Parameter Became a Security Weak… | https://medium.com/@anshubind89/the-reflected-xss-hidden-inside-a-login-page-and-how-a-single-parameter-became-a-security-weak-ad52a584292f?source=rss------bug_bounty-5 | Anshubind | bug-bounty, hunting, bug-bounty-tips, hackerone, bug-bounty-writeup | 15-Dec-2025 |
| How I Used an IDOR to Trigger XSS and Take Over All Accounts | https://medium.com/@codii/how-i-used-an-idor-to-trigger-xss-and-take-over-all-accounts-09ceca8e843a?source=rss------bug_bounty-5 | Codi | web-security, vulnerability, bug-bounty, idor, xss-attack | 15-Dec-2025 |
| HTML Injection in Search Functionality — A Real-World Case Study | https://medium.com/@Arul-Hacks/html-injection-in-search-functionality-a-real-world-case-study-7daef7482343?source=rss------bug_bounty-5 | Arul-Hacks | bug-bounty-tips, cybersecurity, volkswagen, bug-bounty | 14-Dec-2025 |
| Google Cloud Shell Container Escape | https://medium.com/@win3zz/google-cloud-shell-container-escape-b69ffb46b5df?source=rss------bug_bounty-5 | Bipin Jitiya | bug-bounty, vulnerability, docker, kubernetes, cloud-security | 14-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-161) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-161-0dcc932cb749?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty-tips, cybersecurity, bug-bounty, ethical-hacking | 14-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-160) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-160-4e6d1a2dc241?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty, cybersecurity, ethical-hacking, bug-bounty-tips | 14-Dec-2025 |
| Red Teaming AI Models: 12 Jailbreak Techniques Every Security Pro Should Master | https://medium.com/@verylazytech/red-teaming-ai-models-12-jailbreak-techniques-every-security-pro-should-master-9f380ce329c4?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, hacking, bug-bounty, penetration-testing, cybersecurity | 14-Dec-2025 |
| My Bug Bounty Diary | https://medium.com/@ms16janhveelaad/my-bug-bounty-diary-4b0a78bdf7c9?source=rss------bug_bounty-5 | Janhvee Laad | burpsuite, bug-bounty, reconnaissance, subdomain-enumeration, cybersecurity | 14-Dec-2025 |
| Guide to Authentication and Session Management Vulnerabilities | https://medium.com/@rr-1k/guide-to-authentication-and-session-management-vulnerabilities-139e423af513?source=rss------bug_bounty-5 | rr-1k | bugs, bug-bounty, web-security, hacking, burpsuite | 14-Dec-2025 |
| Is X-Bow the End of Security Analysts? How AI Is Reshaping Bug Hunting ⚔️ | https://krishna-cyber.medium.com/is-x-bow-the-end-of-security-analysts-how-ai-is-reshaping-bug-hunting-%EF%B8%8F-cbbc8fe6dc38?source=rss------bug_bounty-5 | Krish_cyber | hacking, xbow, bug-bounty, ai, bug-bounty-tips | 14-Dec-2025 |
| Flipper Zero in 2025–2026: Why Cybersecurity Professionals Are Paying Serious Attention ️ | https://cybersecuritywriteups.com/flipper-zero-in-2025-2026-why-cybersecurity-professionals-are-paying-serious-attention-%EF%B8%8F-fdead990d38c?source=rss------bug_bounty-5 | Krish_cyber | flipper-zero, cybercrime, hacking, bug-bounty, cybersecurity | 14-Dec-2025 |
| Why Hackers Love thefuck: The Terminal Weapon You Didn’t Know You Needed | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/why-hackers-love-thefuck-the-terminal-weapon-you-didnt-know-you-needed-f45fa6726749?source=rss------bug_bounty-5 | ghostyjoe | cybersecurity, bug-bounty, hacking, pentesting, linux | 14-Dec-2025 |
| From {{7+7}} to Root: Achieving RCE via SSTI | https://medium.com/meetcyber/from-7-7-to-root-achieving-rce-via-ssti-509e81cee120?source=rss------bug_bounty-5 | Raj Prasad Kuiri | security, application-security, bug-bounty, cybersecurity, information-security | 14-Dec-2025 |
| How a Simple CORS Misconfiguration Put a Finance Platform at Risk | https://medium.com/@abdulbarhacker/how-a-simple-cors-misconfiguration-put-a-finance-platform-at-risk-052d188dd2eb?source=rss------bug_bounty-5 | Abdulbar | cors, web-security, cybersecurity, ethical-hacking, bug-bounty | 14-Dec-2025 |
| I Didn’t Hack Anything — The App Gave Me Admin Access by Itself | https://infosecwriteups.com/i-didnt-hack-anything-the-app-gave-me-admin-access-by-itself-532e72e92f44?source=rss------bug_bounty-5 | Iski | money, bug-bounty-tips, bug-bounty, cybersecurity, hacking | 14-Dec-2025 |
| The Day I Found an Exposed Google Cloud Service Account Key in a Production JS File — And How… | https://medium.com/@anshubind89/the-day-i-found-an-exposed-google-cloud-service-account-key-in-a-production-js-file-and-how-6ee42010e638?source=rss------bug_bounty-5 | Anshubind | bug-bounty-writeup, hacking, bug-bounty-tips, bug-bounty, hacking-tools | 14-Dec-2025 |
| When I Found a Hardcoded Sentry Token in a JS Bundle — And Got the Classic “Already a Known… | https://medium.com/@anshubind89/when-i-found-a-hardcoded-sentry-token-in-a-js-bundle-and-got-the-classic-already-a-known-de0fbc34680a?source=rss------bug_bounty-5 | Anshubind | bug-bounty-writeup, hacking, hackerone, bug-bounty-tips, bug-bounty | 14-Dec-2025 |
| How I Exposed 1,337 User Records With One GraphQL Query | https://medium.com/@codii/how-i-exposed-1-337-user-records-with-one-graphql-query-bc4551b909c7?source=rss------bug_bounty-5 | Codi | infosec, cybersecurity, programming, bug-bounty, tech | 14-Dec-2025 |
| I Found One Bug and Made $9,750 | https://medium.com/@codii/i-found-one-bug-and-made-9-750-e0f0ac179b1a?source=rss------bug_bounty-5 | Codi | idor, bug-bounty, cybersecurity, hacking, technology | 14-Dec-2025 |
| Reflected XSS in blog search | https://medium.com/@mustafamahmvd/reflected-xss-in-blog-search-f0b5abffb8b2?source=rss------bug_bounty-5 | aiden0x | penetration-testing, bug-bounty, application-security, owasp-top-10, xs | 14-Dec-2025 |
| How I discovered leaked Snowflake credentials for a Fortune 500 Manufacturing Company using… | https://medium.com/@tillson.galloway/how-i-discovered-leaked-snowflake-credentials-for-a-fortune-500-manufacturing-company-using-6adfdfcc3657?source=rss------bug_bounty-5 | Tillson Galloway | bug-bounty-writeup, bug-bounty-tips, bug-bounty, hacking, cybersecurity | 14-Dec-2025 |
| ⚡️Advanced XSS Bypass for Akamai WAF | https://medium.com/@cybersecplayground/%EF%B8%8Fadvanced-xss-bypass-for-akamai-waf-a70c0663c3f7?source=rss------bug_bounty-5 | Cybersecplayground | xss-attack, reflected-xss, xss-vulnerability, bug-bounty, xss-bypass | 14-Dec-2025 |
| ️ File Upload Vulnerabilities: Complete Guide + Real Exploit | https://osintteam.blog/%EF%B8%8F-file-upload-vulnerabilities-complete-guide-real-exploit-27e0e56ea4ef?source=rss------bug_bounty-5 | Vipul Sonule | programming, cybersecurity, ai, hacking, bug-bounty | 14-Dec-2025 |
| Bug Bounty Hunting Isn’t Luck — It’s a System (With Tools That Actually Work) | https://osintteam.blog/bug-bounty-hunting-isnt-luck-it-s-a-system-with-tools-that-actually-work-a7d907a75a2a?source=rss------bug_bounty-5 | Mainekhacker | cyberattack, bug-bounty, ethical-hacking, tootkit, cybersecurity | 14-Dec-2025 |
| $12,500 Bounty: How Changing One GraphQL ID Let Me Delete Other Users’ Data | https://medium.com/h7w/12-500-bounty-how-changing-one-graphql-id-let-me-delete-other-users-data-4a6e1c70ae12?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, technology, penetration-testing, bug-bounty, tech | 14-Dec-2025 |
| OWASP API9: How to Exploit Shadow and Zombie APIs (Improper Inventory Management) | https://medium.com/@jpablo13/owasp-api9-how-to-exploit-shadow-and-zombie-apis-improper-inventory-management-a2ccd60fdaaf?source=rss------bug_bounty-5 | JPablo13 | api, bug-bounty, hacking, technology, cybersecurity | 13-Dec-2025 |
| Privilege Escalation Matters: 12 Chains Leading to Full Takeover (Step-by-Step Guide) | https://medium.com/@verylazytech/privilege-escalation-matters-12-chains-leading-to-full-takeover-step-by-step-guide-7ec70cb0b8ef?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, cybersecurity, hacking, penetration-testing, bug-bounty | 13-Dec-2025 |
| The Bombshell Exposures - Cyber Kalki Exposes GlobalProtect VPN Portals at NATO, NASA, and… | https://medium.com/@elelyonmusk/the-bombshell-exposures-cyber-kalki-exposes-globalprotect-vpn-portals-at-nato-nasa-and-tesla-9750a1da09ad?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | infosec, bug-bounty-tips, bug-bounty, infosec-write-ups, bug-bounty-writeup | 13-Dec-2025 |
| The Art of Clean Recon: Amass for Bug Bounty Hunters | https://medium.com/@Purushothamr/the-art-of-clean-recon-amass-for-bug-bounty-hunters-42992157adf6?source=rss------bug_bounty-5 | Purushotham.R | bug-bounty-writeup, bug-bounty, bug-bounty-tips, linux | 13-Dec-2025 |
| Beyond Authentication — Exploiting a Nasty IDOR in Profile Update Functionality | https://infosecwriteups.com/beyond-authentication-exploiting-a-nasty-idor-in-profile-update-functionality-25740fb56b05?source=rss------bug_bounty-5 | Munna✨ | programming, infosec, bug-bounty, cybersecurity, technology | 13-Dec-2025 |
| Frozen Fingers & Hot Bugs: How a Small Dork Turned Into Full Support Panel Access | https://medium.com/@NeM0x00/frozen-fingers-hot-bugs-how-a-small-dork-turned-into-full-support-panel-access-0a37bf69650f?source=rss------bug_bounty-5 | Yousef Elsheikh | bugbounty-writeup, web-penetration-testing, reconciliation, account-takeover, bug-bounty | 13-Dec-2025 |
| Bug Bounty from Zero: A Realistic Beginner’s Guide | https://medium.com/@shruthilaya.k11/bug-bounty-from-zero-a-realistic-beginners-guide-2ab061de86b8?source=rss------bug_bounty-5 | Shruthilaya | bug-bounty, cybersecurity, information-security, bug-bounty-tips, beginners-guide | 13-Dec-2025 |
| Don’t Just Patch; Predict: How I Used Dark Web Chatter to Find a Vulnerability Before It Was… | https://infosecwriteups.com/dont-just-patch-predict-how-i-used-dark-web-chatter-to-find-a-vulnerability-before-it-was-bc46d89f79f6?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, bug-bounty-tips, darkweb, cybersecurity | 13-Dec-2025 |
| Android Static Analysis 101 - The Blueprint Developers Hope You Never Read | https://medium.com/@Slayer_15/android-vapt-part-3-static-analysis-101-the-blueprint-developers-hope-you-never-read-6e7692145088?source=rss------bug_bounty-5 | Slayer | cybersecurity, hacking, bug-bounty, mobile-app-development, android | 13-Dec-2025 |
| ️ The Day I Found an Exposed Firebase Database on a Ferrari Subdomain — And Got the “Already… | https://medium.com/@anshubind89/%EF%B8%8F-the-day-i-found-an-exposed-firebase-database-on-a-ferrari-subdomain-and-got-the-already-05023b362520?source=rss------bug_bounty-5 | Anshubind | bug-bounty, bug-bounty-writeup, hackerone, hacking, bug-bounty-tips | 13-Dec-2025 |
| ✉️ The Day I Found a Hardcoded SendinBlue API Key in a Front-End Script — And Why Email Services… | https://medium.com/@anshubind89/%EF%B8%8F-the-day-i-found-a-hardcoded-sendinblue-api-key-in-a-front-end-script-and-why-email-services-220ac969f10e?source=rss------bug_bounty-5 | Anshubind | hacking, bug-bounty-writeup, bug-bounty, bug-bounty-tips, hackerone | 13-Dec-2025 |
| I Found 100 Bugs Using This One Recon Checklist | https://medium.com/@codii/i-found-100-bugs-using-this-one-recon-checklist-b23cabecff9a?source=rss------bug_bounty-5 | Codi | web-security, reconnaissance, cybersecurity, bug-bounty, ethical-hacking | 13-Dec-2025 |
| How I Found a High-Severity Prompt Injection Bug in an AI LLM Chatbot | https://medium.com/@rajankumarbarik143/how-i-found-a-high-severity-prompt-injection-bug-in-an-ai-llm-chatbot-6f930d3a3918?source=rss------bug_bounty-5 | Rajankumarbarik | web-development, technology, bug-bounty, llm, ai | 13-Dec-2025 |
| HTTP Yanıtları: Durum Kodları ve Güvenlik Zafiyetleri | https://medium.com/@HalilIbrahimEroglu/http-yan%C4%B1tlar%C4%B1-durum-kodlar%C4%B1-ve-g%C3%BCvenlik-zafiyetleri-49fdc0e29f17?source=rss------bug_bounty-5 | Halil Ibrahim Eroglu | web-security, cybersecurity, https, bug-bounty, pentesting | 13-Dec-2025 |
| How I Discovered a Massive Data Leak Exposing Millions of Users During Routine Recon | https://medium.com/@MohaseenK/how-i-discovered-a-massive-data-leak-exposing-millions-of-users-during-routine-recon-ca5f96e57f90?source=rss------bug_bounty-5 | Mohaseen | bug-bounty, pii, data-leak, hacker | 13-Dec-2025 |
| You’re Fuzzing All Wrong: FFUF & Virtual Host Fuzzing | https://infosecwriteups.com/youre-fuzzing-all-wrong-ffuf-virtual-host-fuzzing-99e82643935a?source=rss------bug_bounty-5 | Abhishek Gupta | ethical-hacking, penetration-testing, bug-bounty, cybersecurity, ffuf | 13-Dec-2025 |
| Interesting Bug Bounty Findings I found in Android Application | https://medium.com/@elkpir666/interesting-bug-bounty-findings-i-found-in-android-application-3fa75b69cb19?source=rss------bug_bounty-5 | m_kamal | android-pentesting, hacking, bug-bounty, android | 12-Dec-2025 |
| The Most Used Tool in Bug Hunting — And How to Master It Like a Pro | https://osintteam.blog/the-most-used-tool-in-bug-hunting-and-how-to-master-it-like-a-pro-cb64c1f93895?source=rss------bug_bounty-5 | Monika sharma | tech, cybersecurity, technology, bug-bounty, penetration-testing | 12-Dec-2025 |
| OWASP API9: Cómo Explotar Shadow y Zombie APIs (Improper Inventory Management) | https://medium.com/@jpablo13/owasp-api9-c%C3%B3mo-explotar-shadow-y-zombie-apis-improper-inventory-management-e98dbf1c8c1d?source=rss------bug_bounty-5 | JPablo13 | hacking, technology, bug-bounty, cybersecurity, api | 12-Dec-2025 |
| My Automated Recon Workflow: The “LeetEnum” Script | https://sudoaman.medium.com/my-automated-recon-workflow-the-leetenum-script-e1a3fb972023?source=rss------bug_bounty-5 | Aman Kumar (ak) | hacking, bug-bounty, infosec, automation, cybersecurity | 12-Dec-2025 |
| “Burp Suite for Dumb Humans: The Ultimate Click-By-Click Beginner Guide” | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/burp-suite-for-dumb-humans-the-ultimate-click-by-click-beginner-guide-15f1cffe7603?source=rss------bug_bounty-5 | ghostyjoe | internet, hacking, pentesting, bug-bounty, burpsuite | 12-Dec-2025 |
| Why I started bug bounty in 2025 | https://medium.com/@gilad4025/why-i-started-bug-bounty-in-2025-0d376f72a6bb?source=rss------bug_bounty-5 | Gilad | learning, money, best-practices, cybersecurity, bug-bounty | 12-Dec-2025 |
| OSINT Mapping Toolkit: 25 Essential Tools Every Large Organization Should Master | https://medium.com/@verylazytech/osint-mapping-toolkit-25-essential-tools-every-large-organization-should-master-34b275a8ac25?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, bug-bounty, hacking, cybersecurity, ethical-hacking | 12-Dec-2025 |
| How I Earned ₹22,000 Just by Reporting “P5” Bugs (OSINT trick) | https://medium.com/@rajankumarbarik143/how-i-earned-22-000-just-by-reporting-p5-bugs-osint-trick-7effa189bdb8?source=rss------bug_bounty-5 | Rajankumarbarik | cybersecurity, technology, programming, osint, bug-bounty | 12-Dec-2025 |
| Nasa HOF, How did i got this? | https://medium.com/@Charon19d/nasa-hof-how-did-i-got-this-6bec416a51da?source=rss------bug_bounty-5 | Charon19d | nasa, bug-nasa, cybersecurity, bug-bounty, hof | 12-Dec-2025 |
| From Detection to Disclosure: Analysis and Documentation of an XSS in Microsoft | https://medium.com/@rahulhoysala07/from-detection-to-disclosure-analysis-and-documentation-of-an-xss-in-microsoft-d0d7dc196460?source=rss------bug_bounty-5 | Rahul Hoysala | microsoft, vulnerability, bug-bounty, security, technology | 12-Dec-2025 |
| Hunting Bugs in the Shadows of a Global Energy Giant: The Reflected XSS Hidden in a VPN Portal | https://medium.com/@anshubind89/hunting-bugs-in-the-shadows-of-a-global-energy-giant-the-reflected-xss-hidden-in-a-vpn-portal-8f3b0cd9a441?source=rss------bug_bounty-5 | Anshubind | bug-bounty, bug-bounty-tips, hackerone, bug-bounty-writeup, hacking | 12-Dec-2025 |
| When env.js Breaks Bad: How a Single File Exposed Critical Secrets in a Global Enterprise | https://medium.com/@anshubind89/when-env-js-breaks-bad-how-a-single-file-exposed-critical-secrets-in-a-global-enterprise-f114b2f8613a?source=rss------bug_bounty-5 | Anshubind | bug-bounty, bug-bounty-writeup, hackerone, bug-bounty-tips, hacking | 12-Dec-2025 |
| PortSwigger Web Security Academy: All Path Traversal Labs Solved (Full Walkthrough) | https://medium.com/@blueorionn/portswigger-web-security-academy-all-path-traversal-labs-solved-full-walkthrough-8cccad53d44e?source=rss------bug_bounty-5 | Blueorionn | bug-bounty, portswigger-lab, hacking, writeup, portswigger-academy-labs | 12-Dec-2025 |
| Massive Slack Infrastructure Exposure leaked internal hostnames by CYBER KALKI after Hackerone… | https://medium.com/@elelyonmusk/massive-slack-infrastructure-exposure-leaked-internal-hostnames-by-cyber-kalki-after-hackerone-ef37e73dbc36?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | info-sec-writeups, cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 12-Dec-2025 |
| ️♂️ Stealth Scan Explained: How Hackers Probe Networks Without Being Seen | https://medium.com/@natarajanck2/%EF%B8%8F-%EF%B8%8F-stealth-scan-explained-how-hackers-probe-networks-without-being-seen-c2d38b553172?source=rss------bug_bounty-5 | Natarajan C K | stealth, bug-bounty, scanning, cybersecurity, security | 12-Dec-2025 |
| How a Single Mistyped Operator in GitHub Actions Triggered a $2,500 CI/CD Meltdown | https://blog.stackademic.com/how-a-single-mistyped-operator-in-github-actions-triggered-a-2-500-ci-cd-meltdown-f8c99312fb90?source=rss------bug_bounty-5 | FutureStack Academy | bug-bounty, software-development, github-actions, deployment, github | 12-Dec-2025 |
| “Contextual Hacking”: A Guide To Active Reconnaissance & Vulnerability Exploitation | https://medium.com/@entit_y/contextual-hacking-a-guide-to-active-reconnaissance-vulnerability-exploitation-41b266516a5a?source=rss------bug_bounty-5 | Entit_y | cybersecurity, bug-bounty, web-hacking, infosec, ethical-hacking | 12-Dec-2025 |
| IDOR Privilege Escalation: Deleting Protected Accounts | https://scriptjacker.medium.com/idor-privilege-escalation-deleting-protected-accounts-d5b26bfcf657?source=rss------bug_bounty-5 | Parth Narula | vulnerability, pentesting, bug-bounty-tips, idor, bug-bounty | 12-Dec-2025 |
| Beginners: Copy-Paste This ONE Trick = Free $100–$500 Bounties | https://osintteam.blog/beginners-copy-paste-this-one-trick-free-100-500-bounties-bf4978fdfaa9?source=rss------bug_bounty-5 | Monika sharma | technology, tech, penetration-testing, bug-bounty, cybersecurity | 12-Dec-2025 |
| “Contextual Hacking”: A Guide To Active Reconnaissance & Vulnerability Exploitation | https://infosecwriteups.com/contextual-hacking-a-guide-to-active-reconnaissance-vulnerability-exploitation-41b266516a5a?source=rss------bug_bounty-5 | Entit_y | cybersecurity, bug-bounty, web-hacking, infosec, ethical-hacking | 12-Dec-2025 |
| #ERROR! | https://medium.com/@elelyonmusk/paypals-sdk-urls-leak-merchant-emails-and-client-ids-a-pii-goldmine-dismissed-as-informative-1f5f8e4fd4a4?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | bug-bounty-tips, cybersecurity, infosec-write-ups, bug-bounty, bug-bounty-writeup | 11-Dec-2025 |
| Find Your First Bug: 20 Tools That Require Zero Luck (Master Your First Exploit Without Guesswork) | https://medium.com/@verylazytech/find-your-first-bug-20-tools-that-require-zero-luck-master-your-first-exploit-without-guesswork-d77df87f3662?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, penetration-testing, ethical-hacking, cybersecurity, hacking | 11-Dec-2025 |
| How I made ₹8000 in 10 minutes from bug bounty | https://osintteam.blog/how-i-made-8000-in-10-minutes-from-bug-bounty-9097119b4e5e?source=rss------bug_bounty-5 | StvRoot | bug-bounty, technology, privacy, cybersecurity, programming | 11-Dec-2025 |
| Bug Bounty Hunter Christmas Wishes | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/bug-bounty-hunter-christmas-wishes-f131e68a8bf3?source=rss------bug_bounty-5 | ghostyjoe | bug-bounty, vulnerability, infosec, cybersecurity, ethical-hacking | 11-Dec-2025 |
| How I passed eJPT v2 in 20 days (2025) | https://medium.com/@rahultandale024/how-i-passed-ejpt-v2-in-20-days-2025-f43b5db236b6?source=rss------bug_bounty-5 | Rahul | ejpt-exam-guide, ejpt, cybersecurity, bug-bounty, my-ejpt-experience | 11-Dec-2025 |
| Google XSS Game Solution | https://medium.com/@blueorionn/google-xss-game-solution-425ce2539a58?source=rss------bug_bounty-5 | Blueorionn | ctf, bug-bounty, penetration-testing, coding, cybersecurity | 11-Dec-2025 |
| Password Security Best Practices: Beyond ‘123456’ | https://medium.com/@haxman12399/password-security-best-practices-beyond-123456-19350f3c1b13?source=rss------bug_bounty-5 | Haxman | bug-bounty, bug-bounty-tips, cybersecurity, strong-password-security | 11-Dec-2025 |
| AI in Cybersecurity: The Double-Edged Sword of 2025 | https://medium.com/@haxman12399/ai-in-cybersecurity-the-double-edged-sword-of-2025-303d7b9d0552?source=rss------bug_bounty-5 | Haxman | cybersecurity, bug-bounty-tips, bug-bounty, free-tools | 11-Dec-2025 |
| Bug Bounty Journey: From Discovery to $800 Reward | https://medium.com/@gautammilan2024/bug-bounty-journey-from-discovery-to-800-reward-fa280a7d1205?source=rss------bug_bounty-5 | Milan Gautam | web-security, bug-bounty, cybersecurity, vulnerability, open-redirect | 11-Dec-2025 |
| Getting all info about my coworkers via unprotected GraphQL path | https://canitey.medium.com/getting-all-info-about-my-coworkers-via-unprotected-graphql-path-ee75ad67903a?source=rss------bug_bounty-5 | CANITEY | bug-bounty-writeup, graphql, graphql-hacking, bug-bounty-tips, bug-bounty | 11-Dec-2025 |
| From Recon to RCE: Hunting React2Shell (CVE-2025–55182) for Bug Bounties | https://coffinxp.medium.com/from-recon-to-rce-hunting-react2shell-cve-2025-55182-for-bug-bounties-4e3a3ed79876?source=rss------bug_bounty-5 | coffinxp | penetration-testing, cybersecurity, bug-bounty, technology, react | 11-Dec-2025 |
| Building An Agentic System for Bug Bounty Duplicate Detection | https://medium.com/@adrianhdezp10/building-an-agentic-system-for-bug-bounty-duplicate-detection-e476911c859b?source=rss------bug_bounty-5 | Adrihp06 | agentic-rag, ai-agent, ai, claude, bug-bounty | 11-Dec-2025 |
| When an Image Endpoint Opened the Entire Server: My Discovery of a Critical Path Traversal… | https://medium.com/@anshubind89/when-an-image-endpoint-opened-the-entire-server-my-discovery-of-a-critical-path-traversal-28a2e9184f32?source=rss------bug_bounty-5 | Anshubind | bug-bounty-writeup, bug-bounty-tips, hacking, hackerone, bug-bounty | 11-Dec-2025 |
| The Hidden Translation Key: How a Simple Blog Page Revealed a Serious Security Flaw | https://medium.com/@anshubind89/the-hidden-translation-key-how-a-simple-blog-page-revealed-a-serious-security-flaw-381df9311402?source=rss------bug_bounty-5 | Anshubind | bug-bounty-writeup, bug-bounty, bug-bounty-tips, hacking, hackerone | 11-Dec-2025 |
| Bug Bounty Full Course in Hindi: Complete Guide for Beginners | https://medium.com/@crawcybersecurity/bug-bounty-full-course-in-hindi-complete-guide-for-beginners-3ced3060d19e?source=rss------bug_bounty-5 | Crawsec | craw-security, bug-bounty, bug-bounty-tips, bug-bounty-courses | 11-Dec-2025 |
| From Recon to RCE: Hunting React2Shell (CVE-2025–55182) for Bug Bounties | https://infosecwriteups.com/from-recon-to-rce-hunting-react2shell-cve-2025-55182-for-bug-bounties-4e3a3ed79876?source=rss------bug_bounty-5 | coffinxp | penetration-testing, cybersecurity, bug-bounty, technology, react | 11-Dec-2025 |
| Permanent Denial of Service in Automattic Platforms | https://medium.com/meetcyber/permanent-denial-of-service-in-automattic-platforms-bdf92b1504d1?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, hacking, bug-bounty-writeup | 11-Dec-2025 |
| Everything You need to know about React2Shell(CVE 2025–55182) | https://medium.com/@abhishek-ji/everything-you-need-to-know-about-react2shell-cve-2025-55182-11899c267eb1?source=rss------bug_bounty-5 | Abhishek Gupta | programming, bug-bounty, cybersecurity, reactjs, hacking | 11-Dec-2025 |
| How I Turned a 403 Forbidden Into a 200 OK | https://medium.com/@aryampillai93/how-i-turned-a-403-forbidden-into-a-200-ok-0149ca3e0db6?source=rss------bug_bounty-5 | Arya m Pillai | web-security, penetration-testing, bug-bounty, ethical-hacking, cybersecurity | 11-Dec-2025 |
| A Quick Look at 403 Bypass Techniques | https://medium.com/@blueorionn/a-quick-look-at-403-bypass-techniques-93cabe51e54b?source=rss------bug_bounty-5 | Blueorionn | hacking, penetration-testing, ctf, bug-bounty, web-development | 11-Dec-2025 |
| Even 404 links reveals PII.. | https://medium.com/@11anirudhkaila/even-404-links-reveals-pii-4d68991babd7?source=rss------bug_bounty-5 | Anirudh kaila | pii-data, bug-bounty | 11-Dec-2025 |
| How I Found 3 Logic Bugs by Thinking Like a Developer | https://medium.com/@moatymohamed897/how-i-found-3-logic-bugs-by-thinking-like-a-developer-5a561f6cf76f?source=rss------bug_bounty-5 | Mohamed Abdelmoatie | bug-bounty, business-logic-bug, penetration-testing, bug-bounty-tips, bugs | 11-Dec-2025 |
| 5 Mins € 100 | https://medium.com/h7w/5-mins-100-0f86caa17334?source=rss------bug_bounty-5 | Snooptsz | tech, technology, bug-bounty, cybersecurity, internet | 11-Dec-2025 |
| Subdomain Roulette: How Forgotten Hosts Became My Golden Ticket to Admin Panels | https://infosecwriteups.com/subdomain-roulette-how-forgotten-hosts-became-my-golden-ticket-to-admin-panels-73c6aa17cac5?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, bug-bounty-tips, cybersecurity, hacking | 11-Dec-2025 |
| Everything You need to know about React2Shell(CVE 2025–55182) | https://infosecwriteups.com/everything-you-need-to-know-about-react2shell-cve-2025-55182-11899c267eb1?source=rss------bug_bounty-5 | Abhishek Gupta | programming, bug-bounty, cybersecurity, reactjs, hacking | 11-Dec-2025 |
| API8:2023 Security Misconfiguration: Detection, Impact, and Mitigation | https://medium.com/@jpablo13/api8-2023-security-misconfiguration-detection-impact-and-mitigation-b83176084f57?source=rss------bug_bounty-5 | JPablo13 | api, cybersecurity, technology, hacking, bug-bounty | 10-Dec-2025 |
| $2,500 Bounty: The Silent Cache Poisoning Attack Hidden in One Header | https://osintteam.blog/2-500-bounty-the-silent-cache-poisoning-attack-hidden-in-one-header-b42b2b6a33b3?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, cybersecurity, tech, penetration-testing | 10-Dec-2025 |
| $1,000 Bounty: How Bypass Admin Approval in an inDriver | https://medium.com/h7w/1-000-bounty-how-bypass-admin-approval-in-an-indriver-78f19fe84572?source=rss------bug_bounty-5 | Monika sharma | technology, programming, penetration-testing, cybersecurity, bug-bounty | 10-Dec-2025 |
| Denial of service on the “Post” tab in any Microsoft Teams community | https://medium.com/@th3_pr0t3ct0r/denial-of-service-on-the-post-tab-in-any-microsoft-teams-community-9f6220d95251?source=rss------bug_bounty-5 | Rohmad Hidayah | denial-of-service, denial-of-service-attack, bug-bounty, msrc, microsoft | 10-Dec-2025 |
| Leaked PayPal production Client id and API Secret → full merchant takeover Closed as “Informative”… | https://medium.com/@elelyonmusk/leaked-paypal-production-client-id-and-api-secret-full-merchant-takeover-closed-as-informative-c2781f9aaaa7?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | cybersecurity, infosec-write-ups, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 10-Dec-2025 |
| “ReconFTW — Unified Reconnaissance Engine for Bug‑Bounty Hunters” | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/reconftw-unified-reconnaissance-engine-for-bug-bounty-hunters-cbed5ddaff7d?source=rss------bug_bounty-5 | ghostyjoe | automation, osint, recon, cybersecurity, bug-bounty | 10-Dec-2025 |
| From Default IIS Page to Critical SQL Injection | https://mugh33ra.medium.com/from-default-iis-page-to-critical-sql-injection-d0e9950c66fc?source=rss------bug_bounty-5 | Ahmad Mugh33ra | hacking, sql-injection, hacking-iis-websites, bug-bounty, hackerone | 10-Dec-2025 |
| Denial of service on the “Post” tab in any Microsoft Teams community | https://medium.com/@rohmadhidayah/denial-of-service-on-the-post-tab-in-any-microsoft-teams-community-9f6220d95251?source=rss------bug_bounty-5 | Rohmad Hidayah | denial-of-service, denial-of-service-attack, bug-bounty, msrc, microsoft | 10-Dec-2025 |
| ️ When an Image Loader Turned Into a Backdoor: My Discovery of a Blind SSRF on a Blockchain… | https://medium.com/@anshubind89/%EF%B8%8F-when-an-image-loader-turned-into-a-backdoor-my-discovery-of-a-blind-ssrf-on-a-blockchain-94d33d6d5371?source=rss------bug_bounty-5 | Anshubind | bug-bounty-tips, bug-bounty-writeup, hackerone, hacking, bug-bounty | 10-Dec-2025 |
| When a Login Page Became a Trap: My Discovery of a Web Cache Deception Vulnerability | https://medium.com/@anshubind89/when-a-login-page-became-a-trap-my-discovery-of-a-web-cache-deception-vulnerability-d1cbbdc0203f?source=rss------bug_bounty-5 | Anshubind | hacking, bug-bounty-writeup, bug-bounty-tips, bug-bounty, hackerone | 10-Dec-2025 |
| My Bug Bounty Mindmap: From Target to Takeover (With Practical Steps) | https://medium.com/@MuhammedAsfan/my-bug-bounty-mindmap-from-target-to-takeover-with-practical-steps-3eb03ef0bf94?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | cybersecurity, bug-bounty-tips, infosec, ethical-hacking, bug-bounty | 10-Dec-2025 |
| From a Single Quote & a Space to a 1‑Year AI Subscription | https://medium.com/@shabutaher0/from-a-single-quote-a-space-to-a-1-year-ai-subscription-bc89a6671eff?source=rss------bug_bounty-5 | Taher | web-security, bug-bounty, bug-bounty-tips, ai, bug-bounty-writeup | 10-Dec-2025 |
| What Behind My First Critical Bug — ATO $X,XXX | https://brbr0s.medium.com/what-behind-my-first-critical-bug-ato-x-xxx-079cc10e1951?source=rss------bug_bounty-5 | brbr0s | account-takeover, bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 10-Dec-2025 |
| The Return of The Luhn Algorithm | https://infosecwriteups.com/the-return-of-the-luhn-algorithm-542d3d951576?source=rss------bug_bounty-5 | Alp | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 10-Dec-2025 |
| 0-Day Hunting Guide ️♂️: Recon Techniques Nobody Talks About | https://infosecwriteups.com/0-day-hunting-guide-%EF%B8%8F-%EF%B8%8F-recon-techniques-nobody-talks-about-046d373b6dab?source=rss------bug_bounty-5 | Vipul Sonule | tech, programming, cybersecurity, bug-bounty, hacking | 10-Dec-2025 |
| What Is SysReptor? A Complete Guide for Modern Pentesters | https://h3des.medium.com/what-is-sysreptor-a-complete-guide-for-modern-pentesters-9d3df209ecc5?source=rss------bug_bounty-5 | Hades | reporting-tool, bug-bounty, penetration-testing | 10-Dec-2025 |
| How I Found an Integer Overflow in ImageMagick Leading to Out-of-Bounds Read (CVE-2025–66628) | https://medium.com/@sumitshahorg/how-i-found-an-integer-overflow-in-imagemagick-leading-to-out-of-bounds-read-cve-2025-66628-c22e037b54d2?source=rss------bug_bounty-5 | Sumit Shah (HackSage) | cve-2025-66628, cve, bug-bounty, cybersecurity, c-programming | 10-Dec-2025 |
| CVE-2025–55182 (React2Shell) — Complete Bug Bounty Hunting Guide | https://medium.com/@Aacle/cve-2025-55182-react2shell-complete-bug-bounty-hunting-guide-9cbfd15b6e47?source=rss------bug_bounty-5 | Abhishek meena | cybersecurity, infosec, hacking, bug-bounty, react | 10-Dec-2025 |
| AI Browser Attacks — Chrome’s New Defenses Change Everything | https://medium.com/@Cyber-AppSec/ai-browser-attacks-chromes-new-defenses-change-everything-edfd28bf23ab?source=rss------bug_bounty-5 | Cyber-AppSec | bug-bounty, information-security, ai, cybersecurity, browsers | 10-Dec-2025 |
| Challange002 Frida ile çözümü | https://medium.com/@ocolhak4/hallange002-frida-ile-%C3%A7%C3%B6z%C3%BCm%C3%BC-6dc5c16255f5?source=rss------bug_bounty-5 | ozancolhak | pentesting, osint, web-security, bug-bounty, cybersecurity | 10-Dec-2025 |
| Challange001.apk Frida ile Çözümü | https://medium.com/@ocolhak4/challange001-apk-frida-ile-%C3%A7%C3%B6z%C3%BCm%C3%BC-abf03366fea7?source=rss------bug_bounty-5 | ozancolhak | cybersecurity, bug-bounty, cyber-security-awareness, osint, pentesting | 10-Dec-2025 |
| API8:2023 Security Misconfiguration: Detección, Impacto y Mitigación | https://medium.com/@jpablo13/api8-2023-security-misconfiguration-detecci%C3%B3n-impacto-y-mitigaci%C3%B3n-43b57d1a8bab?source=rss------bug_bounty-5 | JPablo13 | hacking, api, bug-bounty, cybersecurity, technology | 09-Dec-2025 |
| Bug Bounty Hunting: The Real Playbook for Beginners That Actually Works | https://osintteam.blog/bug-bounty-hunting-the-real-playbook-for-beginners-that-actually-works-97ff6ad81e2a?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, bug-bounty, programming, cybersecurity | 09-Dec-2025 |
| The Best Vulnerability Disclosure Programs (VDP): A 2026 Guide for Security Researchers | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/the-best-vulnerability-disclosure-programs-vdp-a-2026-guide-for-security-researchers-21fa5588b8e4?source=rss------bug_bounty-5 | ghostyjoe | cybersecurity, bug-bounty, ethical-hacking, vulnerability, penetration-testing | 09-Dec-2025 |
| Known-Plaintext Attack on PHP-Proxy: From Broken Encryption to FastCGI RCE | https://mf-akbar.medium.com/known-plaintext-attack-on-php-proxy-from-broken-encryption-to-fastcgi-rce-4942523c7955?source=rss------bug_bounty-5 | Muh. Fani Akbar | cryptography, cybersecurity, information-security, vulnerability, bug-bounty | 09-Dec-2025 |
| API Breach Forensics Toolkit: Step-by-Step Tools to Uncover Every Hidden Threat | https://medium.com/@verylazytech/api-breach-forensics-toolkit-step-by-step-tools-to-uncover-every-hidden-threat-a593991f05ff?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, ethical-hacking, penetration-testing, hacking, cybersecurity | 09-Dec-2025 |
| How I Made $5,000 (₹4.49 Lakh) in Just 1 Hour by Scanning JavaScript Files | https://mokhansec.medium.com/how-i-made-5-000-4-49-lakh-in-just-1-hour-by-scanning-javascript-files-18428e9184d9?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-tips, bug-bounty-writeup, bug-bounty, ethical-hacking, bugs | 09-Dec-2025 |
| DoS on a live streaming and chatting App (Ethically). | https://exploit5lovers.medium.com/dos-on-a-live-streaming-and-chatting-app-ethically-0b5aed816b80?source=rss------bug_bounty-5 | Exploit5lover | bug-bounty, cybersecurity, hacking, denial-of-service, ethical-hacking | 09-Dec-2025 |
| I got €€ for finding a bug that others missed | https://medium.com/@rajveer_0101/i-got-for-finding-a-bug-that-others-missed-3c176d4c3436?source=rss------bug_bounty-5 | Rajveer | information-disclosure, infosec, bug-bounty, bug-bounty-tips, broken-access-control | 09-Dec-2025 |
| ☠️Dark Side of Bug Bounty Programs (EXCLUSIVE REPORT) . | https://medium.com/@elelyonmusk/%EF%B8%8F-dark-side-of-bug-bounty-programs-exclusive-report-af317b7fb2b0?source=rss------bug_bounty-5 | ElonMuskTheAntichrist | bug-bounty-tips, infosec-write-ups, cybersecurity, bug-bounty, bugbounty-writeup | 09-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-159) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-159-159c17d767e2?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty-tips, hacking, cybersecurity, bug-bounty | 09-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-158) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-158-bd392c1a970f?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, bug-bounty-tips, cybersecurity, hacking, ethical-hacking | 09-Dec-2025 |
| Members Can Prevent Admins/Owners from Accessing Reviews via Manipulated UUID | https://medium.com/@muhammedelkesht404/members-can-prevent-admins-owners-from-accessing-reviews-via-manipulated-uuid-a2dbce4dda6a?source=rss------bug_bounty-5 | 0xAdam | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 09-Dec-2025 |
| Discovering Cloud Misconfigurations with Google Dorks | https://infosecwriteups.com/discovering-cloud-misconfigurations-with-google-dorks-c683274abc90?source=rss------bug_bounty-5 | Reju Kole | cybersecurity, seo, information-security, bug-bounty, information-technology | 09-Dec-2025 |
| Call/Message anyone on Facebook directly, bypassing the message request ($$$$+$$$$$) | https://infosecwriteups.com/call-message-anyone-on-facebook-directly-bypassing-the-message-request-c182055b1724?source=rss------bug_bounty-5 | Samip Aryal | bug-bounty, bug-bounty-writeup, meta-bug-bounty, facebook-bug-bounty, information-security | 09-Dec-2025 |
| [Broken Access Control] Members can pin/unpin any post in a Microsoft Teams community | https://medium.com/@th3_pr0t3ct0r/broken-access-control-members-can-pin-unpin-any-post-in-a-microsoft-teams-community-ba11e6d37945?source=rss------bug_bounty-5 | Rohmad Hidayah | broken-access-control, microsoft, bug-bounty, msrc, microsoft-teams | 09-Dec-2025 |
| This bug take to me 4 days to understand how is work | https://medium.com/@mahdisalhi0500/this-bug-take-to-me-4-days-to-understand-how-is-work-34892d63b113?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, information-security, hacking, bug-bounty, cybersecurity | 09-Dec-2025 |
| Members Can Prevent Admins/Owners from Accessing Reviews via Manipulated UUID | https://medium.com/@muhammedelkesht404/members-can-prevent-admins-owners-from-accessing-reviews-via-manipulated-uuid-a2dbce4dda6a?source=rss------bug_bounty-5 | Lupitor | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 09-Dec-2025 |
| ️♂️ From User to Super Admin: A Hacker’s Playbook for Elevation via Misconfigured APIs | https://medium.com/@driccosec/%EF%B8%8F-%EF%B8%8F-from-user-to-super-admin-a-hackers-playbook-for-elevation-via-misconfigured-apis-b76da4d20132?source=rss------bug_bounty-5 | 0xUnkn0wn | privilege-escalation, bug-bounty, api | 09-Dec-2025 |
| Bug Bounty Beginners: Try This to Find Your First Bug | https://medium.com/@rajankumarbarik143/bug-bounty-beginners-try-this-to-find-your-first-bug-d5402a78a518?source=rss------bug_bounty-5 | Rajankumarbarik | cybersecurity, bug-bounty, python, programming, technology | 09-Dec-2025 |
| CVE-2025–55182 — Remote Code Execution via Unsafe Server-Side Input Handling in Next.js | https://medium.com/@Arul-Hacks/cve-2025-55182-remote-code-execution-via-unsafe-server-side-input-handling-in-next-js-8891768a6f99?source=rss------bug_bounty-5 | Arul-Hacks | bug-bounty, cybersecurity, penetration-testing, bug-bounty-tips, pentesting | 09-Dec-2025 |
| CVE-2025–55182 — Critical RCE in React Server Components | https://cyberleelawat.medium.com/cve-2025-55182-critical-rce-in-react-server-components-069f7e123c40?source=rss------bug_bounty-5 | Virendra Kumar | cybersecurity, cve, cyberleelawat, cve-2025-55182, bug-bounty | 09-Dec-2025 |
| How I Built a CISO’s Dark Web Playbook That Uncovered a $ Vulnerability ️♂️ | https://medium.com/@iski/how-i-built-a-cisos-dark-web-playbook-that-uncovered-a-vulnerability-%EF%B8%8F-%EF%B8%8F-15a3bf2efb1c?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty-tips, bug-bounty, darkweb, money | 09-Dec-2025 |
| Origin ip discovery methods | https://medium.com/@TheCzar/origin-ip-discovery-methods-d462c28d895a?source=rss------bug_bounty-5 | TheCzar | hacking, pentesting, ethical-hacking, information-security, bug-bounty | 09-Dec-2025 |
| picoCTF — HTTP Headers Challenge (who are you ?) | https://medium.com/@VulnHunt3r/picoctf-http-headers-challenge-who-are-you-052d4a7434b5?source=rss------bug_bounty-5 | vulnhunter | technology, cybersecurity, bug-bounty, ctf, social-media | 09-Dec-2025 |
| Call/Message anyone on Facebook directly, bypassing the message requests ($$$$+$$$$$) | https://infosecwriteups.com/call-message-anyone-on-facebook-directly-bypassing-the-message-request-c182055b1724?source=rss------bug_bounty-5 | Samip Aryal | bug-bounty, bug-bounty-writeup, meta-bug-bounty, facebook-bug-bounty, information-security | 09-Dec-2025 |
| Ghost in the WAF: Building “WAF-Whisper” — An Adaptive Evasion Engine | https://systemweakness.com/ghost-in-the-waf-building-waf-whisper-an-adaptive-evasion-engine-54366af7e99a?source=rss------bug_bounty-5 | Nmullenski | bug-bounty, software-engineering, python, ethical-hacking, cybersecurity | 08-Dec-2025 |
| How I Discovered a Price Manipulation Bug While Buying a Simple Product | https://xamiron.medium.com/how-i-discovered-a-price-manipulation-bug-while-buying-a-simple-product-d2584addbc74?source=rss------bug_bounty-5 | Sabuj Kumar Modak | bug-bounty, vulnerability, web-vapt, cybersecurity, idor-vulnerability | 08-Dec-2025 |
| IDOR & Parameter Tampering Vulnerability — How a Simple URL Change Exposed Hidden Content | https://xamiron.medium.com/idor-parameter-tampering-vulnerability-how-a-simple-url-change-exposed-hidden-content-c8ce26e512ca?source=rss------bug_bounty-5 | Sabuj Kumar Modak | bugs, penetration-testing, vapt, idor-vulnerability, bug-bounty | 08-Dec-2025 |
| How I Earn 938$ Online In One Week Via Android | https://medium.com/@789sabirali/how-i-earn-938-online-in-one-week-via-android-1a4a47d93a50?source=rss------bug_bounty-5 | LALPRO.COM | writing-tips, millionaire, bug-bounty, make-money-online | 08-Dec-2025 |
| InSpectre | https://medium.com/@cyber_comics/inspectre-796902843430?source=rss------bug_bounty-5 | CYBER COMICS | cybersecurity, bug-bounty, js, ctf, javascript | 08-Dec-2025 |
| Internal vs External Pentest: 12 Tools Clients Don’t Know Exist (and How Pros Use Them) | https://medium.com/@verylazytech/internal-vs-external-pentest-12-tools-clients-dont-know-exist-and-how-pros-use-them-bab73f2b23a6?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, penetration-testing, hacking, ethical-hacking, cybersecurity | 08-Dec-2025 |
| Filtering Out Noise on Burp Suite with TLS Pass-Through (Quick Guide) | https://medium.com/@MaMad4Ever/filtering-out-noise-on-burp-suite-with-tls-pass-through-quick-guide-b8c58440f302?source=rss------bug_bounty-5 | MaMad | burpsuite, bug-bounty-tips, bug-bounty, burp | 08-Dec-2025 |
| Authentication Bypass Vulnerability Leading to Admin Panel Access | https://medium.com/@geme000/authentication-bypass-vulnerability-leading-to-admin-panel-access-42ff825765bc?source=rss------bug_bounty-5 | geme000 | penetration-testing, bug-bounty, ethical-hacking, hackerone, web-security | 08-Dec-2025 |
| ️ I Discovered a Parameter Pollution Vulnerability in a Payment QR System | https://medium.com/@nimitahir7631/%EF%B8%8F-i-discovered-a-parameter-pollution-vulnerability-in-a-payment-qr-system-0072038da4f6?source=rss------bug_bounty-5 | Nimit Ahir | cybersecurity, vapt, bug-bounty, parameter-tempering | 08-Dec-2025 |
| What a Honeypot Taught Me About Real-World Deception in Cybersecurity | https://osintteam.blog/what-a-honeypot-taught-me-about-real-world-deception-in-cybersecurity-0e8ea5241a34?source=rss------bug_bounty-5 | Tyreek Haynes | cybersecurity, deception, highlights, bug-bounty, honeypot | 08-Dec-2025 |
| ️♂️ My Complete Recon Workflow for Bug Bounty Hunting (2025 Edition) | https://medium.com/@Purushothamr/%EF%B8%8F-%EF%B8%8F-my-complete-recon-workflow-for-bug-bounty-hunting-2025-edition-587b903385c0?source=rss------bug_bounty-5 | Purushotham.R | cybersecurity, ethical-hacking, reconnaissance, osint, bug-bounty | 08-Dec-2025 |
| JWT Authentication Bypass via Algorithm Confusion With No Exposed Key | https://medium.com/meetcyber/jwt-authentication-bypass-via-algorithm-confusion-with-no-exposed-key-a9958117b6a2?source=rss------bug_bounty-5 | Bash Overflow | jwt-authentication-bypass, jwt-token, bug-bounty, bug-bounty-tips, jwt-algorithm-confusion | 08-Dec-2025 |
| Backdoor CTF-2025: Flask of Cookies writeup | by Dargham Ali | https://medium.com/@wireshark.pcap/backdoor-ctf-2025-flask-of-cookies-writeup-by-dargham-ali-fcd81b892608?source=rss------bug_bounty-5 | Dargham Ali | bug-bounty-writeup, bug-bounty, ctf-writeup, ctf, web-security | 08-Dec-2025 |
| The Unconventional OSINT: How Dark Web Tools Gave Me the Edge to Find a $ Bug ️♂️ | https://infosecwriteups.com/the-unconventional-osint-how-dark-web-tools-gave-me-the-edge-to-find-a-bug-%EF%B8%8F-%EF%B8%8F-29397e2d6a1a?source=rss------bug_bounty-5 | Iski | darkweb, cybersecurity, bug-bounty-tips, bug-bounty, infosec | 08-Dec-2025 |
| Linux Network Sniffing & Packet Capture for Hackers | https://medium.com/@cybersecplayground/linux-network-sniffing-packet-capture-for-hackers-7afcfb0444d0?source=rss------bug_bounty-5 | Cybersecplayground | linux-tutorial, cybersecplayground, penetration-testing, linux, bug-bounty | 08-Dec-2025 |
| The Day I Found a Public Laravel Log Viewer — And Why It Could Have Exposed an Entire Hospital… | https://medium.com/@anshubind89/the-day-i-found-a-public-laravel-log-viewer-and-why-it-could-have-exposed-an-entire-hospital-e9eeb2e3f6c3?source=rss------bug_bounty-5 | Anshubind | hacking, hacker-news, bug-bounty, bug-bounty-tips, hackerone | 08-Dec-2025 |
| When One Slash Broke the Rules — Finding an Open Redirect on a Major Marketplace | https://medium.com/@anshubind89/when-one-slash-broke-the-rules-finding-an-open-redirect-on-a-major-marketplace-9d9bc7a39fbd?source=rss------bug_bounty-5 | Anshubind | hacking, bug-bounty-tips, bug-bounty, bug-hunting, hackerone | 08-Dec-2025 |
| JWT Authentication Bypass via Algorithm Confusion | https://medium.com/meetcyber/jwt-authentication-bypass-via-algorithm-confusion-23101973c92f?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, jwt-algorithm-confusion, bug-bounty, jwt-token, jwt-authentication-bypass | 07-Dec-2025 |
| Why P4 Bugs Still Pay Big in 2025: The Beginner-Friendly Bug Bounty Blueprint | https://medium.com/@kakashi.kx/why-p4-bugs-still-pay-big-in-2025-the-beginner-friendly-bug-bounty-blueprint-90a35d7ab5a4?source=rss------bug_bounty-5 | Kakashi | cybersecurity, bug-bounty, infosec, xs, web-security | 07-Dec-2025 |
| “The Failure That Accidentally Made Me a Bug Bounty Hunter” | https://medium.com/@moganti.nehanth2007/the-failure-that-accidentally-made-me-a-bug-bounty-hunter-34854bb1970d?source=rss------bug_bounty-5 | Moganti Nehanth | cybersecurity, bug-bounty, freelancing, journey | 07-Dec-2025 |
| Advanced Search Techniques for Exposed Information — By Reju Kole | https://infosecwriteups.com/advanced-search-techniques-for-exposed-information-by-reju-kole-348264b00fb4?source=rss------bug_bounty-5 | Reju Kole | bug-bounty, ethical-hacking, google, google-dorking, cybersecurity | 07-Dec-2025 |
| Breaking the Perimeter: How My Custom Python Tool Bypassed a Federal Firewall | https://systemweakness.com/breaking-the-perimeter-how-my-custom-python-tool-bypassed-a-federal-firewall-86b2db874812?source=rss------bug_bounty-5 | Nmullenski | ethical-hacking, waf-whisper, bug-bounty, vdp, cybersecurity | 07-Dec-2025 |
| Conquering the Network: My Hackviser CAPT Nmap Final Exam Write-up | https://mukibas37.medium.com/conquering-the-network-my-hackviser-capt-nmap-final-exam-write-up-08bd7560a08f?source=rss------bug_bounty-5 | Mukilan Baskaran | ethical-hacking, hacker, bug-bounty, networking, hacking | 07-Dec-2025 |
| Beyond the Green Terminal: The Art of Modern Reconnaissance | https://santhosh-adiga-u.medium.com/beyond-the-green-terminal-the-art-of-modern-reconnaissance-5d6dab288ee2?source=rss------bug_bounty-5 | Santhosh Adiga U | bug-bounty, reconnaissance, penetration-testing, ethical-hacking | 07-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-157) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-157-7f9f713cd555?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, cybersecurity, bug-bounty-tips, bug-bounty, hacking | 07-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-156) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-156-7af5134ac845?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, bug-bounty-tips, hacking, ethical-hacking, cybersecurity | 07-Dec-2025 |
| Pentest Reporting Toolkit: Tools, Templates & Formats That Get Read (and Acted On) | https://medium.com/@verylazytech/pentest-reporting-toolkit-tools-templates-formats-that-get-read-and-acted-on-55019fcf5362?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, hacking, ethical-hacking, bug-bounty, penetration-testing | 07-Dec-2025 |
| Breaking Past 403: A Deep Dive into Out-of-Band SQL Injection Discovery | https://systemweakness.com/breaking-past-403-a-deep-dive-into-out-of-band-sql-injection-discovery-f4acbcbabe7c?source=rss------bug_bounty-5 | RyuuKhagetsu | bug-bounty-writeup, infosec, web-application-security, bug-bounty, pentesting | 07-Dec-2025 |
| Server-Side Request Forgery (SSRF): From Ping to RCE | https://medium.com/@Aacle/server-side-request-forgery-ssrf-from-ping-to-rce-6ac95bf4e489?source=rss------bug_bounty-5 | Abhishek meena | infosec, cybersecurity, bug-bounty, bugbounty-tips, hacking | 07-Dec-2025 |
| 9. Master the Basics, Break the Web: Server & Deployment Basics — Final | https://abineshm.medium.com/9-master-the-basics-break-the-web-server-deployment-basics-final-b4a0eb748edd?source=rss------bug_bounty-5 | Abinesh M | hacking, cybersecurity, ethical-hacking, pentesting, bug-bounty | 07-Dec-2025 |
| The Payload Masterclass: From “What Is It?” to “How to Hack It” (Ethically) | https://medium.com/@MuhammedAsfan/the-payload-masterclass-from-what-is-it-to-how-to-hack-it-ethically-2b709bfa0925?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | bug-bounty, payload, websec, cybersecurity, web-security | 07-Dec-2025 |
| “A bug bounty hunter reveals how cybersecurity mirrors the universe — from black holes to hidden… | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/a-bug-bounty-hunter-reveals-how-cybersecurity-mirrors-the-universe-from-black-holes-to-hidden-bf1dd0e6e819?source=rss------bug_bounty-5 | ghostyjoe | self-discovery, ethical-hacking, black-holes, astrophysics, bug-bounty | 07-Dec-2025 |
| SSRF DNS Rebinding Bypass Technique | https://medium.com/@fatimahasan022/ssrf-dns-rebinding-bypass-technique-9082a8bc18f9?source=rss------bug_bounty-5 | Fatimahasan | filter-bypass, ssrf, webapplicationpentest, pentesting, bug-bounty | 07-Dec-2025 |
| ₹16,000 Earned by Reporting 2 Simple API Vulnerability | High Severity P2 | https://medium.com/@rajankumarbarik143/16000-api-bug-bounty-poc-by-anondgr-c5a6ea9fd8c5?source=rss------bug_bounty-5 | Rajankumarbarik | bug-bounty-tips, bug-bounty, bug-report, bugbounty-poc, bug-bounty-writeup | 07-Dec-2025 |
| The Dark Web Data Goldmine: How I Found My Company’s Leaked Credentials Before the Bad Guys Did (… | https://medium.com/@iski/the-dark-web-data-goldmine-how-i-found-my-companys-leaked-credentials-before-the-bad-guys-did-4518890c8fa6?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, money, bug-bounty-tips, cybersecurity | 07-Dec-2025 |
| ️ The Day I Found a phpinfo() Page Exposed in Production — And Why It Was Worth More Than $200 | https://medium.com/@anshubind89/%EF%B8%8F-the-day-i-found-a-phpinfo-page-exposed-in-production-and-why-it-was-worth-more-than-200-1e6c902e1f4a?source=rss------bug_bounty-5 | Anshubind | bug-bounty, bug-bounty-writeup, hacking, bug-bounty-tips, bugs | 07-Dec-2025 |
| How I found the $5,730 business logic flaw | https://medium.com/@ibtissam1/how-i-found-the-5-730-business-logic-flaw-f8fe322f9930?source=rss------bug_bounty-5 | Ibtissam | web-development, technology, programming, cybersecurity, bug-bounty | 07-Dec-2025 |
| TLD Discovery For BugBounty | https://medium.com/@0x0mahmoud/tld-discovery-for-bugbounty-07340cf543ff?source=rss------bug_bounty-5 | 0X0mahmoud | reconnaissance, penetration-testing, pentesting, bug-bounty | 07-Dec-2025 |
| P0 — Key to The Kingdom: How I Found a Gift Card Creation API Key on GitHub & What Happened Next | https://medium.com/@0581raghav/p0-key-to-the-kingdom-how-i-found-a-gift-card-creation-api-key-on-github-what-happened-next-cb0b0ebf20b6?source=rss------bug_bounty-5 | Raghav Khandelwal | bugbounty-writeup, bug-bounty, infosec, hacking, information-security | 06-Dec-2025 |
| It’s Time to Shift Left: Why Security Can’t Be an Afterthought Anymore | https://medium.com/@ademiloyealhanifibraheem/its-time-to-shift-left-why-security-can-t-be-an-afterthought-anymore-aa7b47f51b0e?source=rss------bug_bounty-5 | Ademiloyealhanifibraheem | programming, hacking, cybersecurity, coding, bug-bounty | 06-Dec-2025 |
| (OWASP API7:2023) Server-Side Request Forgery: Attack, Cloud Exploitation, and Mitigation | https://systemweakness.com/owasp-api7-2023-server-side-request-forgery-attack-cloud-exploitation-and-mitigation-d359b76f1a6f?source=rss------bug_bounty-5 | JPablo13 | api, technology, cybersecurity, bug-bounty, hacking | 06-Dec-2025 |
| soned ethical hacker, a bug bounty hunter, or the go-to security pro in your team, this guide will… | https://medium.com/@verylazytech/soned-ethical-hacker-a-bug-bounty-hunter-or-the-go-to-security-pro-in-your-team-this-guide-will-8e423ec2eea6?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, ethical-hacking, cybersecurity, bug-bounty, penetration-testing | 06-Dec-2025 |
| React2Shell(CVE-2025–55182): A Technical Deep Dive | https://medium.com/@vashuvats/react2shell-cve-2025-55182-a-technical-deep-dive-da81ab27e99f?source=rss------bug_bounty-5 | Vashu Vats | cve, cybersecurity, hacking, bug-bounty, vulnerability | 06-Dec-2025 |
| The Midnight Pwn: How a News Alert Led to a Critical Bounty | https://santhosh-adiga-u.medium.com/the-midnight-pwn-how-a-news-alert-led-to-a-critical-bounty-a4abacbe2096?source=rss------bug_bounty-5 | Santhosh Adiga U | penetration-testing, bug-bounty, ethical-hacking, vulnerability-disclosure | 06-Dec-2025 |
| 8. Master the Basics, Break the Web: API Basics | https://abineshm.medium.com/8-master-the-basics-break-the-web-api-basics-a1f7b38f66b4?source=rss------bug_bounty-5 | Abinesh M | bug-bounty, cybersecurity, ethical-hacking, pentesting, hacking | 06-Dec-2025 |
| The Midnight Epiphany: How a News Notification Cracked My Stubborn Target | https://santhosh-adiga-u.medium.com/the-midnight-epiphany-how-a-news-notification-cracked-my-stubborn-target-58492fc1bcc2?source=rss------bug_bounty-5 | Santhosh Adiga U | ethical-hacking, vulnerability, bug-bounty, vulnerability-disclosure, penetration-testing | 06-Dec-2025 |
| Double-Door IDOR Exposing 85k+ Emails | https://scriptjacker.medium.com/double-door-idor-exposing-85k-emails-182309af98be?source=rss------bug_bounty-5 | Parth Narula | bugs, bug-bounty, penetration-testing, scriptjacker, idor | 06-Dec-2025 |
| A Simple Page Source View Uncovered a Critical Keycloak Vulnerability | https://codewithvamp.medium.com/a-simple-page-source-view-uncovered-a-critical-keycloak-vulnerability-7844b789307a?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | hacking, bug-bounty-tips, bug-bounty, keycloak, cybersecurity | 06-Dec-2025 |
| How I Found a Zero-Click Account Takeover Vulnerability in a U.S. Online Retailer | https://medium.com/@SilentExploit/how-i-found-a-zero-click-account-takeover-vulnerability-in-a-u-s-online-retailer-bbfe66b8918d?source=rss------bug_bounty-5 | SilentExploit | hacker, hacking, bug-hunting, bug-bounty | 06-Dec-2025 |
| Logic Issue Allowing Verification Before Meeting Required Conditions | https://medium.com/@Mohamed_khattab/logic-issue-allowing-verification-before-meeting-required-conditions-512fc4fa7dcc?source=rss------bug_bounty-5 | mohamed khattab | hacking, logic, cybersecurity, bug-bounty, issues | 06-Dec-2025 |
| Offensive Security Automation with AI: 20 Powerful Tools to Supercharge Your Pentesting | https://medium.com/@verylazytech/soned-ethical-hacker-a-bug-bounty-hunter-or-the-go-to-security-pro-in-your-team-this-guide-will-8e423ec2eea6?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, ethical-hacking, cybersecurity, bug-bounty, penetration-testing | 06-Dec-2025 |
| Start With Recon, Not Exploits — The Beginner’s Guide to Bug Bounty Success | https://medium.com/@sd0.ghost404/start-with-recon-not-exploits-the-beginners-guide-to-bug-bounty-success-4fb297f5a2b6?source=rss------bug_bounty-5 | HiveMind | owasp-top-10, cybersecurity, reconnaissance, bug-bounty | 06-Dec-2025 |
| How to Use My Python Exploit Search Tool (Full User Guide for 2026) | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/how-to-use-my-python-exploit-search-tool-full-user-guide-for-2026-b80015d0309e?source=rss------bug_bounty-5 | ghostyjoe | osint, penetration-testing, ethical-hacking, bug-bounty, cve-search | 06-Dec-2025 |
| When a Simple Request Replay Broke the Rules: How I Found a Hidden Email Logic Flaw in a Gaming… | https://medium.com/@anshubind89/when-a-simple-request-replay-broke-the-rules-how-i-found-a-hidden-email-logic-flaw-in-a-gaming-2c342d44a8b4?source=rss------bug_bounty-5 | Anshubind | bug-bounty, hacking, bypass, cybersecurity, hackerone | 06-Dec-2025 |
| How I Found a Critical Bug as a Beginner | https://medium.com/@ibtissam1/how-i-found-a-critical-bug-as-a-beginner-24d55cffff30?source=rss------bug_bounty-5 | Ibtissam | web-security, cybersecurity, ethical-hacking, bug-bounty, vulnerability | 06-Dec-2025 |
| How to Earn Money From Medium | https://medium.com/write-a-catalyst/how-to-earn-money-from-medium-6156f7ccd34b?source=rss------bug_bounty-5 | Monika sharma | medium, writing, technology, bug-bounty, penetration-testing | 06-Dec-2025 |
| I made a Bug Bounty tool directory | https://medium.com/@Kapeka0/i-made-a-bug-bounty-tool-directory-f106f56aaffc?source=rss------bug_bounty-5 | Kapeka | bug-bounty | 06-Dec-2025 |
| (OWASP API7:2023) Server-Side Request Forgery: Ataque, Explotación en la Nube y Mitigación | https://medium.com/@jpablo13/owasp-api7-2023-server-side-request-forgery-ataque-explotaci%C3%B3n-en-la-nube-y-mitigaci%C3%B3n-1a8506f2ad01?source=rss------bug_bounty-5 | JPablo13 | hacking, bug-bounty, cybersecurity, technology, api | 05-Dec-2025 |
| Why I Stopped Using Kali Linux (And Why You Should Too) | https://sudoaman.medium.com/why-i-stopped-using-kali-linux-and-why-you-should-too-ef6fdbeb2a8f?source=rss------bug_bounty-5 | Aman Kumar (ak) | linux, cybersecurity, kali-linux, ethical-hacking, bug-bounty | 05-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-155) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-155-f8aeb9f7e99b?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, ethical-hacking, bug-bounty-tips, bug-bounty, cybersecurity | 05-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-154) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-154-4c26a69b4672?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty-tips, bug-bounty, ethical-hacking, hacking | 05-Dec-2025 |
| Bug Hunting: A Practical Guide to Finding Vulnerabilities That Actually Pay | https://infosecwriteups.com/bug-hunting-a-practical-guide-to-finding-vulnerabilities-that-actually-pay-06ef46bfdccb?source=rss------bug_bounty-5 | Monika sharma | programming, technology, bug-bounty, cybersecurity, penetration-testing | 05-Dec-2025 |
| JWT Authentication Bypass via kid Header Path Traversal | https://osintteam.blog/jwt-authentication-bypass-via-kid-header-path-traversal-c59ac1e83430?source=rss------bug_bounty-5 | Bash Overflow | authentication-bypass, jwt-authentication-bypass, bug-bounty, jwt-kid-vulnerability, path-traversal-exploit | 05-Dec-2025 |
| Tracking Hackers Online ️♂️: A Dark Web OSINT Story | https://osintteam.blog/tracking-hackers-online-%EF%B8%8F-%EF%B8%8F-a-dark-web-osint-story-e834dbde9d54?source=rss------bug_bounty-5 | Vipul Sonule | programming, technology, cybersecurity, bug-bounty, ai | 05-Dec-2025 |
| Complete OSINT Profile Builder: 50 Free Tools to Level Up Your Recon Game Fast | https://medium.com/@verylazytech/complete-osint-profile-builder-50-free-tools-to-level-up-your-recon-game-fast-5e13c22fd660?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, ethical-hacking, hacking, penetration-testing, bug-bounty | 05-Dec-2025 |
| ️ How I Walked Into LaunchDarkly’s Internal Jira Portal Through a Public Signup Bug | https://medium.com/@anshubind89/%EF%B8%8F-how-i-walked-into-launchdarklys-internal-jira-portal-through-a-public-signup-bug-2015c5cee6e0?source=rss------bug_bounty-5 | Anshubind | bug-bounty, ethical-hacking, security-misconfiguration, hackerone, hacking | 05-Dec-2025 |
| ️♂️ How I Stumbled Into My First Uber Bug: The Unexpected Win That Earned Me $780 | https://medium.com/@anshubind89/%EF%B8%8F-%EF%B8%8F-how-i-stumbled-into-my-first-uber-bug-the-unexpected-win-that-earned-me-780-8ba880e60510?source=rss------bug_bounty-5 | Anshubind | bug-bounty, ethical-hacking, cybersecurity, storytelling, hackerone | 05-Dec-2025 |
| Breaking the Web (Part 6): Insecure Direct Object References (IDOR) — When Access Control Fails | https://medium.com/@cybercom0101/breaking-the-web-part-6-insecure-direct-object-references-idor-when-access-control-fails-39572e53c860?source=rss------bug_bounty-5 | Mohammed Fahad | pentesting, bug-bounty, cybersecurity, web-application-security, cyber-security-awareness | 05-Dec-2025 |
| Ehxb | Inside the Filesystem: The Truth Behind LFI & RFI III | https://ehxb.medium.com/ehxb-inside-the-filesystem-the-truth-behind-lfi-rfi-iii-e905aa80d9bf?source=rss------bug_bounty-5 | Ehxb | hackthebox, bug-bounty, vulnerability, pentesting, hacking | 05-Dec-2025 |
| cURL Explained Simply: Your Internet Superpower | https://medium.com/@MuhammedAsfan/curl-explained-simply-your-internet-superpower-a767746eb230?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | developer, curl, cybersecurity, pentesting, bug-bounty | 05-Dec-2025 |
| This $35K GitLab Hack Was So Simple You’ll Hate Yourself For Missing It | https://osintteam.blog/this-35k-gitlab-hack-was-so-simple-youll-hate-yourself-for-missing-it-e8b000c326c3?source=rss------bug_bounty-5 | Vivek PS | hacking, cybersecurity, ethical-hacking, bug-bounty, programming | 05-Dec-2025 |
| 7. Master the Basics, Break the Web: Backend Application Flow | https://abineshm.medium.com/7-master-the-basics-break-the-web-backend-application-flow-0f1355e034d2?source=rss------bug_bounty-5 | Abinesh M | hacking, cybersecurity, pentesting, ethical-hacking, bug-bounty | 05-Dec-2025 |
| CVE-2025-55182: A Pre-Authentication Remote Code Execution in Next.js - Complete Guide | https://infosecwriteups.com/cve-2025-55182-a-pre-authentication-remote-code-execution-in-next-js-complete-guide-e39a35fa3156?source=rss------bug_bounty-5 | PARADOX | hacking, bug-bounty, javascript, cybersecurity, penetration-testing | 05-Dec-2025 |
| Journey from FOFA Dorking to Critical Remote Access | https://medium.com/@kroush333/journey-from-fofa-dorking-to-critical-remote-access-b337f92f3d28?source=rss------bug_bounty-5 | MahmoudKroush | bug-bounty, reconnaissance, bugbounty-writeup | 05-Dec-2025 |
| Ehxb | Inside the Filesystem: The Truth Behind LFI & RFI III | https://infosecwriteups.com/ehxb-inside-the-filesystem-the-truth-behind-lfi-rfi-iii-e905aa80d9bf?source=rss------bug_bounty-5 | Ehxb | hackthebox, bug-bounty, vulnerability, pentesting, hacking | 05-Dec-2025 |
| Subject: Mastering CSRF Attacks — Complete Step-By-Step Explanation + Burp Suite Demonstration… | https://medium.com/@zoningxtr/subject-mastering-csrf-attacks-complete-step-by-step-explanation-burp-suite-demonstration-3aa3db44ce6b?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, web-development, cybersecurity, penetration-testing, programming | 05-Dec-2025 |
| CVE-2025-55182: A Pre-Authentication Remote Code Execution in Next.js - Complete Guide | https://osintteam.blog/cve-2025-55182-a-pre-authentication-remote-code-execution-in-next-js-complete-guide-e39a35fa3156?source=rss------bug_bounty-5 | PARADOX | hacking, bug-bounty, javascript, cybersecurity, penetration-testing | 05-Dec-2025 |
| The Story of How I Hacked an Event Management Platform | https://osintteam.blog/the-story-of-how-i-hacked-an-event-management-platform-5a719250042c?source=rss------bug_bounty-5 | JC | graphql, hacking, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 04-Dec-2025 |
| AI-Driven Cyber Attacks: The New Normal (2025 Edition) | https://medium.com/@paritoshblogs/ai-driven-cyber-attacks-the-new-normal-2025-edition-b3da62a1337f?source=rss------bug_bounty-5 | Paritosh | hacking, artificial-intelligence, cybersecurity, ai, bug-bounty | 04-Dec-2025 |
| AI-Powered Attacks: 15 Tools Changing Pentesting Forever (With Step-by-Step Guides) | https://medium.com/@verylazytech/ai-powered-attacks-15-tools-changing-pentesting-forever-with-step-by-step-guides-861d5e3aeb54?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, cybersecurity, hacking, ethical-hacking, penetration-testing | 04-Dec-2025 |
| Best Labs to Practice XSS (Cross-Site Scripting) | https://medium.com/@RaunakGupta1922/best-labs-to-practice-xss-cross-site-scripting-4b243fac4a40?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | hacking, information-security, bug-bounty, cybersecurity, software-development | 04-Dec-2025 |
| Meta Bug Bounty: “Only Me” Workplace Disclosure | https://medium.com/infosec-insights/meta-bug-bounty-only-me-workplace-disclosure-e80eda0c66bb?source=rss------bug_bounty-5 | Gl1tch | facebook-bug-bounty, cybersecurity, bug-bounty, bug-bounty-writeup, ethical-hacking | 04-Dec-2025 |
| Ehxb | Inside the Filesystem: The Truth Behind LFI & RFI II | https://infosecwriteups.com/ehxb-inside-the-filesystem-the-truth-behind-lfi-rfi-ii-46fd781aa4ec?source=rss------bug_bounty-5 | Ehxb | pentesting, vulnerability, hackthebox, bug-bounty, hacking | 04-Dec-2025 |
| Breaking Dailymotion: A Private Video Access Control Bypass (Part1) | https://medium.com/@0xBl4ckR4v3n/breaking-dailymotion-a-private-video-access-control-bypass-part1-455ae1a50f09?source=rss------bug_bounty-5 | Osama | bug-bounty, web-security, infosec, cybersecurity, bugbounty-writeup | 04-Dec-2025 |
| How I Found My First Bug in Just 12 Hours: A Beginner’s Journey | https://medium.com/@moganti.nehanth2007/how-i-found-my-first-bug-in-just-12-hours-a-beginners-journey-64d10810b6fc?source=rss------bug_bounty-5 | Moganti Nehanth | cybersecurity, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 04-Dec-2025 |
| Hardcoded Secrets Strike Again: How a Telegram Bot Token Exposed Customer Support and PII | https://medium.com/@cameronbardin/hardcoded-secrets-strike-again-how-a-telegram-bot-token-exposed-customer-support-and-pii-cb412551239b?source=rss------bug_bounty-5 | Cameron Bardin (MDVKG) | web-penetration-testing, owasp, bug-bounty, cybersecurity, penetration-testing | 04-Dec-2025 |
| 6. Master the Basics, Break the Web: Input & Output Basics | https://abineshm.medium.com/6-master-the-basics-break-the-web-input-output-basics-2ec7d1d38bb7?source=rss------bug_bounty-5 | Abinesh M | bug-bounty, cybersecurity, hacking, pentesting, ethical-hacking | 04-Dec-2025 |
| How I Discovered a $50,000 Web3 Vulnerability That Exposed Thousands | https://medium.com/@MohaseenK/how-i-discovered-a-50-000-web3-vulnerability-that-exposed-thousands-6e9e8125050f?source=rss------bug_bounty-5 | Mohaseen | web3bugbounty, bug-bounty, web3, hackerone, bugcrowd | 04-Dec-2025 |
| “Metadata Leaks: What They Are, Why They Matter, and How Hackers Use Them” | https://medium.com/@moganti.nehanth2007/metadata-leaks-what-they-are-why-they-matter-and-how-hackers-use-them-4cbe6ef7e08c?source=rss------bug_bounty-5 | Moganti Nehanth | cybersecurity, cyberattack, bug-bounty, bug-bounty-tips | 04-Dec-2025 |
| How I Hacked a Reading App and Gained Admin Privileges | https://medium.com/@m0rph3us/how-i-gained-administrative-access-to-a-reading-application-through-a-critical-vulnerability-3f90ed62e368?source=rss------bug_bounty-5 | Atakan | bug-bounty | 04-Dec-2025 |
| Breaking Dailymotion: A Private Video Access Control Bypass (Part2) | https://medium.com/@0xBl4ckR4v3n/breaking-dailymotion-a-private-video-access-control-bypass-part2-4a701fa49bb2?source=rss------bug_bounty-5 | Osama | cybersecurity, bug-bounty, bug-bounty-tips, infosec, web-security | 04-Dec-2025 |
| Leaked API Key to Full Calendar Control | https://medium.com/@yehiatawfeeek224/leaked-api-key-to-full-calendar-control-7561333ceacb?source=rss------bug_bounty-5 | Yehia Ahmed | bug-bounty, website, penetration-testing, cybersecurity | 04-Dec-2025 |
| Certificate Transparency: A Technical Overview and OSINT Toolkit ️ | https://medium.com/@MuhammedAsfan/certificate-transparency-a-technical-overview-and-osint-toolkit-%EF%B8%8F-30d4f556f7f8?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | bug-bounty, certificate-transparency, cybersecurity, osint, subdomains-enumeration | 04-Dec-2025 |
| CTF MetaRed 2025 (Web) | https://medium.com/@0RedX_/ctf-metared-2025-web-dc66d8178a60?source=rss------bug_bounty-5 | Red-X | bug-bounty, ctf, ctf-writeup, web-penetration-testing, ctf-walkthrough | 04-Dec-2025 |
| CRITICAL ALERT: React Server Components Unauthenticated RCE (CVE-2025–55182) | https://medium.com/@cybersecplayground/critical-alert-react-server-components-unauthenticated-rce-cve-2025-55182-956dbc3d5611?source=rss------bug_bounty-5 | Cybersecplayground | web-exploitation, cybersecplayground, exploitation, bug-bounty, cve-2025-55182 | 04-Dec-2025 |
| OWASP (API6:2023) Unrestricted Access to Sensitive Business Flows: Hunting and Reporting… | https://medium.com/@jpablo13/owasp-api6-2023-unrestricted-access-to-sensitive-business-flows-hunting-and-reporting-be1999f6ec5d?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, technology, hacking, api, cybersecurity | 03-Dec-2025 |
| Mapping Attack Surfaces Like A Cartographer Of Shadows | https://medium.com/@deadgirl2133/mapping-attack-surfaces-like-a-cartographer-of-shadows-6db151bb6dad?source=rss------bug_bounty-5 | Rendur M. Saunter | cybersecurity, hacking, attack-surface, bug-bounty, programming | 03-Dec-2025 |
| JWT Authentication Bypass via JWK Header Injection | https://osintteam.blog/jwt-authentication-bypass-via-jwk-header-injection-0dfaec4f6f94?source=rss------bug_bounty-5 | Bash Overflow | json-web-token, jwt-exploitation, jwt-authentication-bypass, jwk-header-injection, bug-bounty | 03-Dec-2025 |
| Bug Bounty Deep Dive: File Upload Exploits & Defense — Part 1 | https://medium.com/@cyhersilhouette/bug-bounty-deep-dive-file-upload-exploits-defense-part-1-54f9e5833a29?source=rss------bug_bounty-5 | Cyphersilhouette | owasp, cybersecurity, security-vulnerabilities, bug-bounty, technology | 03-Dec-2025 |
| When AI Gossips: How I Eavesdropped on a Federated Learning System | https://medium.com/@iski/when-ai-gossips-how-i-eavesdropped-on-a-federated-learning-system-e1b385f35aff?source=rss------bug_bounty-5 | Iski | bug-bounty, money, bug-bounty-tips, cybersecurity, hacking | 03-Dec-2025 |
| JWT Authentication Bypass via jku Header Injection | https://medium.com/meetcyber/jwt-authentication-bypass-via-jku-header-injection-81debf22bce4?source=rss------bug_bounty-5 | Bash Overflow | jwt-authentication-bypass, jku-header-injection, json-web-token, jwks-manipulation, bug-bounty | 03-Dec-2025 |
| Unauthenticated Endpoints Could Remove All Application Servers From the Load Balancer Pool… | https://medium.com/@ashiq.r.emon/unauthenticated-endpoints-could-remove-all-application-servers-from-the-load-balancer-pool-1dd333299603?source=rss------bug_bounty-5 | Ashiqur Rahman Emon | cybersecurity, ethical-hacking, infosec, bug-bounty-tips, bug-bounty | 03-Dec-2025 |
| . That means leveraging C2 simulation toolkits — the kind the pros use to mimic multi-stage… | https://medium.com/@verylazytech/that-means-leveraging-c2-simulation-toolkits-the-kind-the-pros-use-to-mimic-multi-stage-c87d16d84862?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, penetration-testing, hacking, cybersecurity, ethical-hacking | 03-Dec-2025 |
| How to find Race Conditions in Web Applications — From Beginner to Pro | https://systemweakness.com/how-to-find-race-conditions-in-web-applications-from-beginner-to-pro-4e59d51c6e47?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty-tips, bug-bounty-writeup, bug-bounty, cybersecurity, programming | 03-Dec-2025 |
| Ehxb | Inside the Filesystem: The Truth Behind LFI & RFI I | https://ehxb.medium.com/ehxb-inside-the-filesystem-the-truth-behind-lfi-rfi-i-5a9a0da32827?source=rss------bug_bounty-5 | Ehxb | pentesting, bug-bounty, hackthebox, hacking, vulnerability | 03-Dec-2025 |
| How I Found a Critical 1-Click Account Takeover (ATO) in XxXxx.com | https://medium.com/@inba25042006/how-i-found-a-critical-1-click-account-takeover-ato-in-xxxxx-com-a523158adb37?source=rss------bug_bounty-5 | Sangith | bug-bounty | 03-Dec-2025 |
| Reverse Engineering & Hacking a License Checker | https://spandan0x50.medium.com/reverse-engineering-hacking-a-license-checker-57d72971d0e0?source=rss------bug_bounty-5 | Spandan Pokhrel | cybersecurity, bug-bounty, security, reverse-engineering, x86-assembly | 03-Dec-2025 |
| How I Turned a 403 Error into a $200 API Key Leak Bounty | https://infosecwriteups.com/how-i-turned-a-403-error-into-a-200-api-key-leak-bounty-96faba78dfc4?source=rss------bug_bounty-5 | JEETPAL | bugbounty-writeup, cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 03-Dec-2025 |
| 5. Master the Basics, Break the Web: Authentication & Authorization Basics | https://abineshm.medium.com/5-master-the-basics-break-the-web-authentication-authorization-basics-1703446109a4?source=rss------bug_bounty-5 | Abinesh M | cybersecurity, pentesting, bug-bounty, ethical-hacking, hacking | 03-Dec-2025 |
| From “Info Disclosure” to Critical RCE: How I Turned Legacy Code into a CVSS 9.8 Win | https://medium.com/@Ujjwal75/from-info-disclosure-to-critical-rce-how-i-turned-legacy-code-into-a-cvss-9-8-win-e20437e29b17?source=rss------bug_bounty-5 | Sharmaujjwal | technology, hacking, bug-bounty, cybersecurity, information-technology | 03-Dec-2025 |
| Co-Hosts can prevent Hosts from accessing the “About” tab in Facebook Events | https://medium.com/@th3_pr0t3ct0r/co-hosts-can-prevent-hosts-from-accessing-the-about-tab-in-facebook-events-fdbc324c6bfb?source=rss------bug_bounty-5 | Rohmad Hidayah | business-logic-flaw, denial-of-service, bug-bounty, meta-bug-bounty | 03-Dec-2025 |
| Vulnerability Chain: Unexploitable Self-XSS + CSRF + Open Redirect Leads to Fully Exploitable XSS | https://0xoverlord.medium.com/vulnerability-chain-unexploitable-self-xss-csrf-open-redirect-leads-to-fully-exploitable-xss-a2174cfdc2ea?source=rss------bug_bounty-5 | Abdo Rabea (0xOverlord) | bug-bounty, bug-chaining, vulnerability, bugbounty-writeup, xss-attack | 03-Dec-2025 |
| Blind-XSS Escalated from HTMLi | https://medium.com/@most54244/blind-xss-escalated-from-htmli-4c7658660151?source=rss------bug_bounty-5 | Mustafa Abdullah | vulnerability, penetration-testing, bug-bounty, xss-attack, cybersecurity | 03-Dec-2025 |
| Here's how I found my first valid bug | https://medium.com/@junedsilavata/heres-how-i-found-my-first-valid-bug-3d1c95bf552a?source=rss------bug_bounty-5 | Juned Silavat | cybersecurity, find-your-first-bug, bug-bounty, hard-work-pays-off, cyber-security-awareness | 03-Dec-2025 |
| Beyond IDOR: The Guide to Advanced Broken Access Control | https://medium.com/@Aacle/beyond-idor-the-guide-to-advanced-broken-access-control-85b7a201baa7?source=rss------bug_bounty-5 | Abhishek meena | bug-bounty, idor, infosec-write-ups, hacking, infosec | 03-Dec-2025 |
| The Best Version of Wireshark for Ubuntu 24.04 (And the Fastest Way to Install It) | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/the-best-version-of-wireshark-for-ubuntu-24-04-and-the-fastest-way-to-install-it-77fd6b4634a8?source=rss------bug_bounty-5 | ghostyjoe | bug-bounty, networking, wireshark, penetration-testing, ubuntu | 03-Dec-2025 |
| How I Discovered a Flaw That Let Me Access Enterprise-Only Features | https://medium.com/@rajveer_0101/how-i-discovered-a-flaw-that-let-me-access-enterprise-only-features-276d538bc529?source=rss------bug_bounty-5 | Rajveer | bug-bounty-tips, infosec, bug-bounty, bounty-program, broken-access-control | 03-Dec-2025 |
| How a 2FA Bypass Bug Funded My EJPT Journey | https://medium.com/@dineshnarasimhan27/how-a-2fa-bypass-bug-funded-my-ejpt-journey-b8836989327f?source=rss------bug_bounty-5 | Dinesh Narasimhan | cybersecurity, bugbounty-poc, bug-bounty, bugbounty-writeup, bug-bounty-writeup | 03-Dec-2025 |
| Identity Theft Is Exploding: Here’s What It Really Means and How You Can Protect Yourself | https://medium.com/@paritoshblogs/identity-theft-is-exploding-heres-what-it-really-means-and-how-you-can-protect-yourself-e292b9ac0fcc?source=rss------bug_bounty-5 | Paritosh | bug-bounty, identity-protection, hacking, cybersecurity, identity | 03-Dec-2025 |
| Case Study: How I Found Four Critical Vulnerabilities in a Popular Lightning Network Python SDK | https://letchupkt.medium.com/case-study-how-i-found-four-critical-vulnerabilities-in-a-popular-lightning-network-python-sdk-08318d77613c?source=rss------bug_bounty-5 | LETCHU PKT | bug-bounty-writeup, cybersecurity, bug-bounty, pentesting, case-study | 03-Dec-2025 |
| Privilege Escalation Allows Low-Privilege Users to View Sensitive Role Data | https://medium.com/@HBlackGhost/access-control-bypass-allows-low-privilege-users-to-view-sensitive-role-data-c3dc2ffd62ef?source=rss------bug_bounty-5 | HBlack Ghost | web-app-pentesting, bug-bounty-tips, privilege-escalation, bug-bounty | 03-Dec-2025 |
| Reflected XSS in OAuth Callback Endpoint | https://infosecwriteups.com/reflected-xss-in-oauth-callback-endpoint-77ef41c0b011?source=rss------bug_bounty-5 | Ehtesham Ul Haq | infosec, xss-attack, reflected-xss, bug-bounty, javascript | 03-Dec-2025 |
| Blind-XSS Escalated from HTMLi | https://medium.com/@most54244/blind-xss-escalated-from-htmli-4c7658660151?source=rss------bug_bounty-5 | Mustafa Abdullah | information-security, bug-bounty, cybersecurity, infosec, technology | 03-Dec-2025 |
| Run a Free Domain Leak Check Before Your Next Security Review | https://medium.com/@alexandrevandammepro/run-a-free-domain-leak-check-before-your-next-security-review-62beca53b00f?source=rss------bug_bounty-5 | Alexandre Vandamme | saas, bug-bounty, technology, cybersecurity, infosec | 03-Dec-2025 |
| OWASP (API6:2023) Unrestricted Access to Sensitive Business Flows: Metodología de Caza y Reporte | https://medium.com/@jpablo13/owasp-api6-2023-unrestricted-access-to-sensitive-business-flows-metodolog%C3%ADa-de-caza-y-reporte-fdf41ae2ac23?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, bug-bounty, hacking, technology, api | 02-Dec-2025 |
| The Bug That Bled the Internet | https://medium.com/@iamakkii20/the-bug-that-bled-the-internet-0360d3a09988?source=rss------bug_bounty-5 | Ravi Patil | coding, hacking, bug-bounty, programming | 02-Dec-2025 |
| Whitebox Pentesting: The VS Code + Burp Workflow That Finds RCE Black-Box Tests Miss | https://medium.com/@nebty/whitebox-pentesting-secrets-the-vs-code-burp-workflow-that-finds-bugs-black-box-tests-miss-3f87903039f7?source=rss------bug_bounty-5 | Nebty | bug-bounty, nodejs, programming, ethical-hacking, cybersecurity | 02-Dec-2025 |
| Mastering Pipedream + Burp Collaborator: 12 Automation Recipes for Pentest Superpowers | https://medium.com/@verylazytech/mastering-pipedream-burp-collaborator-12-automation-recipes-for-pentest-superpowers-741b5f3e785c?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, ethical-hacking, penetration-testing, bug-bounty, hacking | 02-Dec-2025 |
| 4. Master the Basics, Break the Web: Browser Fundamentals | https://abineshm.medium.com/4-master-the-basics-break-the-web-browser-fundamentals-f6447ac9f5cf?source=rss------bug_bounty-5 | Abinesh M | pentesting, bug-bounty, cybersecurity, ethical-hacking, hacking | 02-Dec-2025 |
| Whitebox Pentesting: The VS Code + Burp Workflow That Finds RCE Black-Box Tests Miss | https://systemweakness.com/whitebox-pentesting-secrets-the-vs-code-burp-workflow-that-finds-bugs-black-box-tests-miss-3f87903039f7?source=rss------bug_bounty-5 | Nebty | bug-bounty, nodejs, programming, ethical-hacking, cybersecurity | 02-Dec-2025 |
| Supply Chain Attacks Explained Simply: How Hackers Abuse Trusted Software | https://medium.com/@natarajanck2/supply-chain-attacks-explained-simply-how-hackers-abuse-trusted-software-06c2f15896a8?source=rss------bug_bounty-5 | Natarajan C K | bug-bounty, security, cybersecurity, supply-chain, attack | 02-Dec-2025 |
| Punycode Account Takeover | https://cyberleelawat.medium.com/punycode-account-takeover-d29d0d25a58e?source=rss------bug_bounty-5 | Virendra Kumar | bug-bounty, bugs, ethical-hacking, cyber-leelawat, cybersecurity | 02-Dec-2025 |
| From Metadata to RCE: Chaining Five Vulnerabilities for Complete System Compromise | https://medium.com/@cameronbardin/from-metadata-to-rce-chaining-five-vulnerabilities-for-complete-system-compromise-dff5573bb15b?source=rss------bug_bounty-5 | Cameron Bardin (MDVKG) | cybersecurity, web-penetration-testing, bug-bounty, penetration-testing, ethical-hacking | 02-Dec-2025 |
| How I Discovered 1,400+ Users’ PII Through a GraphQL Query — and Uncovered 5 More Bugs Using the… | https://ayaa101.medium.com/how-i-discovered-1-400-users-pii-through-a-graphql-query-and-uncovered-5-more-bugs-using-the-389d8e7d8deb?source=rss------bug_bounty-5 | Ayaa Hamed | bug-bounty-writeup, penetration-testing, bug-bounty-tips, pentesting, bug-bounty | 02-Dec-2025 |
| How an IDOR Allowed Access to Any User’s KYC Data |Easy But Critical | https://medium.com/@terp0x0/how-an-idor-allowed-access-to-any-users-kyc-data-easy-but-critical-7d869143649f?source=rss------bug_bounty-5 | terp0x0 | cybersecurity, bug-bounty, ethical-hacking, technology, programming | 02-Dec-2025 |
| Similar Tools XAttacker called BurnWP Framework Advanced Exploit System in Real time | https://medium.com/@drcrypter.io/similar-tools-xattacker-called-burnwp-framework-advanced-exploit-system-in-real-time-76dd41fdde19?source=rss------bug_bounty-5 | drcrypter.ru | exploit, bug-bounty, wordpress, scanner | 02-Dec-2025 |
| “The $10,000 Ruby Crash: When a “Smart” Optimization Crashed Shopify’s Entire System” | https://ai.plainenglish.io/the-10-000-ruby-crash-when-a-smart-optimization-crashed-shopifys-entire-system-78b04fd74f4c?source=rss------bug_bounty-5 | Aman Sharma | penetration-testing, bug-bounty, hacking, cybersecurity, security | 02-Dec-2025 |
| How I Robbed the Bank: VulnBank CTF Walkthrough (FahemSec) | https://medium.com/@OXmekky/how-i-robbed-the-bank-vulnbank-ctf-walkthrough-fahemsec-fa277b9ff8b1?source=rss------bug_bounty-5 | Ahmed Hassan | security, ctf-writeup, bugbounty-writeup, bug-bounty | 02-Dec-2025 |
| Reflected XSS in div tag | https://medium.com/@mahmoud.amin.mohamed02/reflected-xss-in-div-tag-97159f77462b?source=rss------bug_bounty-5 | Mahmoud Amin Mohamed | xss-attack, reflected-xss, bug-bounty | 02-Dec-2025 |
| How I Took Down an Entire Application Using google.com and Earned a $2,000 Bounty | https://medium.com/@oksuzkayra16/how-i-took-down-an-entire-application-using-google-com-and-earned-a-2-000-bounty-4f23c626b06e?source=rss------bug_bounty-5 | Kayra Öksüz | bug-bounty-tips, cybersecurity, application-security, bug-bounty-writeup, bug-bounty | 02-Dec-2025 |
| Reflected XSS in div tag | https://medium.com/@mahmoud.amin.mohamed02/reflected-xss-in-div-tag-97159f77462b?source=rss------bug_bounty-5 | testerawy | xss-attack, reflected-xss, bug-bounty | 02-Dec-2025 |
| How i hacked LLM WITH PROMPT INJECTION Bro Said ‘Hi 25’… Next Thing I Knew I Owned the Entire… | https://mrknightnidu.medium.com/how-i-hacked-llm-with-prompt-injection-bro-said-hi-25-next-thing-i-knew-i-owned-the-entire-508b1791c5cf?source=rss------bug_bounty-5 | MRKNIGHT-NIDU | hacking, bug-bounty, cybersecurity, prompt-injection, llm | 02-Dec-2025 |
| Stop Fuzzing Blindly: The Ultimate Guide to FFUF | https://sudoaman.medium.com/stop-fuzzing-blindly-the-ultimate-guide-to-ffuf-bce8e0cdb4bd?source=rss------bug_bounty-5 | Aman Kumar (ak) | cybersecurity, penetration-testing, web-hacking, bug-bounty, infosec | 01-Dec-2025 |
| 3. Master the Basics, Break the Web: Cookies & Sessions | https://abineshm.medium.com/3-master-the-basics-break-the-web-cookies-sessions-3b284c456e98?source=rss------bug_bounty-5 | Abinesh M | ethical-hacking, hacking, cybersecurity, pentesting, bug-bounty | 01-Dec-2025 |
| Detecting Deepfake Phishing Calls: 10 Tools Every Cybersecurity Pro Should Master | https://medium.com/@verylazytech/detecting-deepfake-phishing-calls-10-tools-every-cybersecurity-pro-should-master-c36d8f760585?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, cybersecurity, hacking, ethical-hacking, bug-bounty | 01-Dec-2025 |
| A Practical Guide to Authentication and Session Management Vulnerabilities | https://infosecwriteups.com/a-practical-guide-to-authentication-and-session-management-vulnerabilities-517f5412a02a?source=rss------bug_bounty-5 | coffinxp | technology, programming, cybersecurity, bug-bounty, penetration-testing | 01-Dec-2025 |
| Exposed Crypto Addresses in Frontend Code: A Bug Bounty Story | https://medium.com/@mohamedabdulhamid/exposed-crypto-addresses-in-frontend-code-a-bug-bounty-story-7117e5010256?source=rss------bug_bounty-5 | Mohamed Abdul Hamid | cybersecurity, bug-bounty | 01-Dec-2025 |
| $1,000 |critical Critical Log4Shell Vulnerability | https://medium.com/@aminefarah802/2-000-critical-critical-log4shell-vulnerability-2d55129c9c1b?source=rss------bug_bounty-5 | KILLUA_UCHIHA | bug-bounty-tips, 0-day-exploits, bug-bounty-writeup, hacker, bug-bounty | 01-Dec-2025 |
| Join My Cybersec Community (WhatsApp Group) | https://infosecwriteups.com/join-my-cybersec-community-whatsapp-group-a44117e0b997?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, cybersecurity, hacking, whatsapp, ai | 01-Dec-2025 |
| Bug Bounty Hunters: Use Plain Text Leaks To Turn Recon Into High-Impact Reports | https://medium.com/@alexandrevandammepro/bug-bounty-hunters-use-plain-text-leaks-to-turn-recon-into-high-impact-reports-b59286cedf61?source=rss------bug_bounty-5 | Alexandre Vandamme | hacking, bug-bounty, infosec, bug-bounty-tips, cybersecurity | 01-Dec-2025 |
| How I Made $45,000 from a Single Bug Bounty Report | https://medium.com/@ibtissam1/how-i-made-45-000-from-a-single-bug-bounty-report-038a6c0074c3?source=rss------bug_bounty-5 | Ibtissam | passive-income, cybersecurity, technology, bug-bounty, make-money-online | 01-Dec-2025 |
| When the Program Wins and the Researcher Loses: The Subtle Scams Behind Bug Bounties | https://medium.com/infosec-insights/when-the-program-wins-and-the-researcher-loses-the-subtle-scams-behind-bug-bounties-578f97489845?source=rss------bug_bounty-5 | Gl1tch | ethical-hacking, bug-bounty, cybersecurity, information-security, bug-bounty-tips | 01-Dec-2025 |
| Tek Bir Güncel Olmayan Joomla Eklentisi, Nokia.com’un Veritabanına erişim (Derin Teknik Analiz) | https://medium.com/@agdepeozan/tek-bir-g%C3%BCncel-olmayan-joomla-eklentisi-nokia-comun-veritaban%C4%B1na-eri%C5%9Fim-derin-teknik-analiz-37f275109857?source=rss------bug_bounty-5 | Ozan Ağdepe | ethical-hacking, infosec, cybersecurity, bug-bounty, sql-injection | 01-Dec-2025 |
| Hi there I’m phisher a security resercher | https://medium.com/@fahd.99441/hi-there-im-phisher-a-security-resercher-95e0eb945f54?source=rss------bug_bounty-5 | phisher | cybersecurity, bug-bounty | 01-Dec-2025 |
| The Manual SQL Injection Tricks That Automated Scanners Miss | https://medium.com/@Aacle/the-manual-sql-injection-tricks-that-automated-scanners-miss-a5eac6d74f38?source=rss------bug_bounty-5 | Abhishek meena | hacking, bug-bounty-tips, sql-injection, bug-bounty, infosec | 01-Dec-2025 |
| Bug Bounty Hunting — Complete Guide (Part-153) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-153-ee62a3f886de?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, hacking, ethical-hacking, cybersecurity, bug-bounty | 01-Dec-2025 |
| Bug Bug Bounty Hunting — Complete Guide (Part-152) | https://medium.com/@rafid19/bug-bug-bounty-hunting-complete-guide-part-152-617604068b34?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, cybersecurity, bug-bounty, hacking, ethical-hacking | 01-Dec-2025 |
| Your Smart Speaker is Dumber Than You Think: How I Made Alexa’s Sister Spill the Tea | https://infosecwriteups.com/your-smart-speaker-is-dumber-than-you-think-how-i-made-alexas-sister-spill-the-tea-7582eb42195f?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, infosec, bug-bounty-tips, hacking | 01-Dec-2025 |
| How to Know If Your Phone Has Been Hacked (And What to Do) | https://medium.com/@gallagherliam/how-to-know-if-your-phone-has-been-hacked-and-what-to-do-56ef52cb3429?source=rss------bug_bounty-5 | Liam | bug-bounty, programming, hacking, cybersecurity, coding | 01-Dec-2025 |
| Portswigger Walkthrough Lab: Username enumeration via subtly different responses | https://mukibas37.medium.com/portswigger-walkthrough-lab-username-enumeration-via-subtly-different-responses-715467f0d2e8?source=rss------bug_bounty-5 | Mukilan Baskaran | portswigger, information-security, hacking, ethical-hacking, bug-bounty | 01-Dec-2025 |
| Bugcrowd for Ethical Hackers: A Complete Framework to Build Reputation, Earn Trust, and Master… | https://medium.com/@penoughcyber/bugcrowd-for-ethical-hackers-a-complete-framework-to-build-reputation-earn-trust-and-master-3cbe77180eac?source=rss------bug_bounty-5 | Penough | motivation, bugcrowd, ethical-hacking, money, bug-bounty | 01-Dec-2025 |
| Ehxb | Inside the Filesystem: The Truth Behind LFI & RFI | https://ehxb.medium.com/ehxb-inside-the-filesystem-the-truth-behind-lfi-rfi-2b3626ed3ad7?source=rss------bug_bounty-5 | Ehxb | pentesting, cybersecurity, hacking, bug-bounty, writeup | 01-Dec-2025 |
| SSRF, LFI, RCE, and Admin Panel Discoveries | https://osintteam.blog/ssrf-lfi-rce-and-admin-panel-discoveries-dbc9fce6b665?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, programming, technology, cybersecurity, bug-bounty | 01-Dec-2025 |
| How I Almost Found 5,000$ Bug But Reported Too Early - My Multi-Endpoint XSS Story | https://medium.com/@j4k3l0ng/how-i-almost-found-5-000-bug-but-reported-too-early-my-multi-endpoint-xss-story-5907b01ba170?source=rss------bug_bounty-5 | j4k3l0ng | xss-attack, bug-bounty, cybersecurity, vulnerability, ethical-hacking | 30-Nov-2025 |
| Why Self-Hosting Bug Bounties Might Be Your Biggest Security Mistake in 2025 | https://medium.com/@ProwlSec/why-self-hosting-bug-bounties-might-be-your-biggest-security-mistake-in-2025-1efb9408183f?source=rss------bug_bounty-5 | ProwlSec | viral, hacking, cybersecurity, community, bug-bounty | 30-Nov-2025 |
| 2. Master the Basics, Break the Web: HTTP Fundamentals | https://abineshm.medium.com/2-master-the-basics-break-the-web-http-fundamentals-05614a459870?source=rss------bug_bounty-5 | Abinesh M | bug-bounty, cybersecurity, pentesting, hacking, ethical-hacking | 30-Nov-2025 |
| , running a tabletop, or knee-deep in a live breach, these 12 tools will help you rebuild ground… | https://medium.com/@verylazytech/running-a-tabletop-or-knee-deep-in-a-live-breach-these-12-tools-will-help-you-rebuild-ground-bbb1de449a2b?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, ethical-hacking, cybersecurity, penetration-testing, hacking | 30-Nov-2025 |
| The Reality of Bug Bounty Mediation: A Hunter’s Perspective | https://medium.com/meetcyber/the-reality-of-bug-bounty-mediation-a-hunters-perspective-f0839a2dede2?source=rss------bug_bounty-5 | Gl1tch | bug-bounty, bug-bounty-writeup, ethical-hacking, information-security | 30-Nov-2025 |
| get a free Kali VPS with Segfault — a quick guide for bug hunters | https://medium.com/@fawzixo/get-a-free-kali-vps-with-segfault-a-quick-guide-for-bug-hunters-b242f275dfe9?source=rss------bug_bounty-5 | Ahmed Fawzy | vps, bug-bounty, cybersecurity, kali-linux | 30-Nov-2025 |
| Incident Response Timeline Toolkit: 12 Tools to Rebuild a Real Breach Step-by-Step | https://medium.com/@verylazytech/running-a-tabletop-or-knee-deep-in-a-live-breach-these-12-tools-will-help-you-rebuild-ground-bbb1de449a2b?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, ethical-hacking, cybersecurity, penetration-testing, hacking | 30-Nov-2025 |
| GoDaddy Alt Servisinde SQL Injection Güvenlik Açığının Teknik Analizi | https://medium.com/@agdepeozan/godaddy-alt-servisinde-sql-injection-g%C3%BCvenlik-a%C3%A7%C4%B1%C4%9F%C4%B1n%C4%B1n-teknik-analizi-48d42f7607fe?source=rss------bug_bounty-5 | Ozan Ağdepe | godaddy, ethical-hacking, cybersecurity, sql-injection, bug-bounty | 30-Nov-2025 |
| When Bug Hunting Becomes a Burden: Surviving the Dark Side of Bug Bounties | https://medium.com/infosec-insights/when-bug-hunting-becomes-a-burden-surviving-the-dark-side-of-bug-bounties-a61bd290f7e6?source=rss------bug_bounty-5 | Gl1tch | bug-bounty-tips, bug-bounty-writeup, bug-bounty, ethical-hacking, cybersecurity | 30-Nov-2025 |
| Insecure Account Deletion | https://cyberleelawat.medium.com/insecure-account-deletion-2d5cd0555129?source=rss------bug_bounty-5 | Virendra Kumar | bugs, bug-bounty, cybersecurity, vulnerability, ethical-hacking | 30-Nov-2025 |
| Temporary Hacking, Permanent Access: A Meta Bug Bounty Story | https://gtm0x01.medium.com/temporary-hacking-permanent-access-a-meta-bug-bounty-story-1f72da3e63cf?source=rss------bug_bounty-5 | Gtm Mänôz | bug-bounty, bug-bounty-tips, facebook-bug-bounty, bug-bounty-writeup, meta | 30-Nov-2025 |
| Exploiting Race Conditions in GraphQL: A Case Study of Follower Count Manipulation | https://medium.com/@dpaysm/exploiting-race-conditions-in-graphql-a-case-study-of-follower-count-manipulation-e7a02294e4f7?source=rss------bug_bounty-5 | Soltan Maharramov | bug-bounty, web-security, race-condition, graphql, cybersecurity | 30-Nov-2025 |
| The Art Of Bypassing Authentication Limits | All Known Techniques | https://medium.com/@terp0x0/the-art-of-bypassing-authentication-limits-all-known-techniques-835a8506a411?source=rss------bug_bounty-5 | terp0x0 | ethical-hacking, programming, bug-bounty, cybersecurity | 30-Nov-2025 |
| What Is a WiFi Deauthentication Attack? How Fake Disconnect Messages Work | https://medium.com/root-recon/what-is-a-wifi-deauthentication-attack-how-fake-disconnect-messages-work-6b3a74b4abab?source=rss------bug_bounty-5 | Natarajan C K | wifi, security, deauthentication-attack, wifi-authentication, bug-bounty | 30-Nov-2025 |
| How I Tricked an AI Into Spilling Its Secrets (And Made a Pretty Penny) | https://infosecwriteups.com/how-i-tricked-an-ai-into-spilling-its-secrets-and-made-a-pretty-penny-b35cb2374f63?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, cybersecurity, hacking, bug-bounty, money | 30-Nov-2025 |
| I Hacked Vulnyx for 7 Days — Here’s What I Learned | https://thecybercraft.medium.com/i-hacked-vulnyx-for-7-days-heres-what-i-learned-f56f32d59fea?source=rss------bug_bounty-5 | CyberCraft | cybersecurity, pentesting, bug-bounty, ctf, technology | 30-Nov-2025 |
| How Our “Chill” CTF Turned Into an Uptime Arms Race | https://ithelance.medium.com/how-our-chill-ctf-turned-into-an-uptime-arms-race-f3af76f6e82e?source=rss------bug_bounty-5 | AbdulAzeez AbdulHakeem | bug-bounty, cybersecurity, web-security, ctf-writeup, burpsuite | 30-Nov-2025 |
| 0-Click Account Takeover via Password Reset IDOR | https://medium.com/@ibtissam1/0-click-account-takeover-via-password-reset-idor-182f6fee2a86?source=rss------bug_bounty-5 | Ibtissam | password-reset, web-security, account-takeover, idor, bug-bounty | 30-Nov-2025 |
| BFLA (API5–2023): Complete Guide to Detecting, Exploiting, and Reporting Broken Function Level… | https://medium.com/meetcyber/bfla-api5-2023-complete-guide-to-detecting-exploiting-and-reporting-broken-function-level-af2ecfd3e2a4?source=rss------bug_bounty-5 | JPablo13 | hacking, technology, bug-bounty, cybersecurity, api | 29-Nov-2025 |
| tested pro tips. | https://medium.com/@verylazytech/tested-pro-tips-499077e10097?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, ethical-hacking, hacking, cybersecurity, bug-bounty | 29-Nov-2025 |
| 1. Master the Basics, Break the Web: Web & Internet | https://abineshm.medium.com/1-master-the-basics-break-the-web-web-internet-dfccc9fbae8b?source=rss------bug_bounty-5 | Abinesh M | ethical-hacking, hacking, cybersecurity, bug-bounty, pentesting | 29-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-151) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-151-eda2a100d0ea?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty, bug-bounty-tips, cybersecurity, ethical-hacking | 29-Nov-2025 |
| ty TBug Bounty Hunting — Complete Guide (Part-150) | https://medium.com/@rafid19/ty-tbug-bounty-hunting-complete-guide-part-150-66db6a4a5c9b?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, hacking, cybersecurity, bug-bounty, ethical-hacking | 29-Nov-2025 |
| Build a Recon Framework in Python: 20 Essential Modules Every Cybersecurity Pro Should Master | https://medium.com/@verylazytech/tested-pro-tips-499077e10097?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, ethical-hacking, hacking, cybersecurity, bug-bounty | 29-Nov-2025 |
| Understanding Access Control Models: DAC vs RBAC vs MAC | https://shaifsec.medium.com/understanding-access-control-models-dac-vs-rbac-vs-mac-185059506ac3?source=rss------bug_bounty-5 | Shaif Ali | ethical-hacking, cybersecurity, offensive-security, access-control, bug-bounty | 29-Nov-2025 |
| How I Found an Auth Bypass in a Newsletter Subscription System | https://infosecwriteups.com/how-i-found-an-auth-bypass-in-a-newsletter-subscription-system-6c2e3a032f37?source=rss------bug_bounty-5 | JEETPAL | bug-bounty-tips, bug-bounty, cybersecurity, authentication, bugbounty-writeup | 29-Nov-2025 |
| From Owner to Orphaned: Exploiting a Race Condition in Organization Management | https://medium.com/@mr.vultra/from-owner-to-orphaned-exploiting-a-race-condition-in-organization-management-c6380d4e57ba?source=rss------bug_bounty-5 | Amed Sherif | bug-bounty-hunter, bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 29-Nov-2025 |
| The Pine Labs 100M+ Transaction Leak: Breaking Down a High-Impact IDOR (CVSS 8.6) | https://infosecwriteups.com/the-pine-labs-100m-transaction-leak-breaking-down-a-high-impact-idor-cvss-8-6-11bf7a811516?source=rss------bug_bounty-5 | Aditya Sunny | vulnerability-research, data-breach, cybersecurity, bug-bounty, api-security | 29-Nov-2025 |
| A Bug That Took Me 10 Hours to Fix and 10 Seconds to Understand | https://medium.com/data-and-beyond/a-bug-that-took-me-10-hours-to-fix-and-10-seconds-to-understand-2e500c1e32b6?source=rss------bug_bounty-5 | Mubashir | debugging, simplicity, bug-bounty, bug-bounty-tips, software-development | 29-Nov-2025 |
| 404ping v2 — The API Testing CLI That Went From Side-Project to Beast Mode | https://medium.com/@toklas495/404ping-v2-the-api-testing-cli-that-went-from-side-project-to-beast-mode-54ffeb548e86?source=rss------bug_bounty-5 | toklas495 | web-development, developer-tools, open-source, programming, bug-bounty | 29-Nov-2025 |
| My A Little Tip Log -23- (Postman) | https://hcibo.medium.com/my-a-little-tip-log-23-postman-a728e7941761?source=rss------bug_bounty-5 | Hamit CİBO | bug-bounty, security, burpsuite, postman | 29-Nov-2025 |
| Deepfake Deception: How I Hacked Biometric Authentication with $ and a YouTube Video | https://infosecwriteups.com/deepfake-deception-how-i-hacked-biometric-authentication-with-and-a-youtube-video-6c1ee367b28f?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, infosec, hacking, cybersecurity, bug-bounty | 29-Nov-2025 |
| 7 IDOR Types Every Bug Hunter Must Master (Unlock $1K–$20K Bounties!) | https://medium.com/@MuhammedAsfan/7-idor-types-every-bug-hunter-must-master-unlock-1k-20k-bounties-bce411aa8d02?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | bug-bounty, cybersecurity, idor, bug-bounty-tips, infosec | 29-Nov-2025 |
| I Find security vulnerabilities behind access denied errors | https://medium.com/@ibtissam1/i-find-security-vulnerabilities-behind-access-denied-errors-91181015e3f8?source=rss------bug_bounty-5 | Ibtissam | 403-forbidden, cybersecurity, bug-bounty, microsoft, hacking | 29-Nov-2025 |
| stored XSS in blog title field | https://medium.com/@ahmed_talaat-a1/stored-xss-in-blog-title-field-0dc862ceb44c?source=rss------bug_bounty-5 | Ahmed Talaat | xss-vulnerability, hacking, bug-hunting, xss-attack, bug-bounty | 29-Nov-2025 |
| Automating the Hunt: When Manual Reconnaissance Hits a Wall | https://medium.com/@afaqpk1/automating-the-hunt-when-manual-reconnaissance-hits-a-wall-093a5a80aa97?source=rss------bug_bounty-5 | IFFI0x | reconnaissance, penetration-testing, automation, bug-bounty, cybersecurity | 29-Nov-2025 |
| BFLA (API5–2023): Guía Completa de Detección, Explotación y Reporte de Broken Function Level… | https://medium.com/@jpablo13/bfla-api5-2023-gu%C3%ADa-completa-de-detecci%C3%B3n-explotaci%C3%B3n-y-reporte-de-broken-function-level-f23b03147fa7?source=rss------bug_bounty-5 | JPablo13 | hacking, technology, bug-bounty, api, cybersecurity | 28-Nov-2025 |
| IDN Homograph attack | https://l0da.medium.com/idn-homograph-attack-f27b3e0d9d6e?source=rss------bug_bounty-5 | L0da | bug-bounty, cybersecurity | 28-Nov-2025 |
| Master Automatic CVE Tracking Toolkit for Bug Bounty Hunters: Step-by-Step Guide to Real-World… | https://medium.com/@verylazytech/master-automatic-cve-tracking-toolkit-for-bug-bounty-hunters-step-by-step-guide-to-real-world-c143b3c77e5d?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, hacking, cybersecurity, ethical-hacking, penetration-testing | 28-Nov-2025 |
| CHAMBRE D’AROMES PERFUME BOUTIQUE | https://medium.com/@odugbenrolateef/chambre-daromes-perfume-boutique-0bc6effdcf61?source=rss------bug_bounty-5 | Odugbenro lateef | bug-bounty, fragrance, outdoors, perfume, artist | 28-Nov-2025 |
| The Key Master’s Flaw: Why Authentication Vulnerabilities are Your Biggest Security Headache ️ | https://medium.com/@MuhammedAsfan/the-key-masters-flaw-why-authentication-vulnerabilities-are-your-biggest-security-headache-%EF%B8%8F-9d5ebc58622c?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | vulnerability, cybersecurity, beginner, bug-bounty, authentication | 28-Nov-2025 |
| ExploitPad v2: A Practical Upgrade for Web App Testing | https://medium.com/@Sle3pyHead/exploitpad-v2-a-practical-upgrade-for-web-app-testing-39b75f13c269?source=rss------bug_bounty-5 | Sle3pyHead | exploitpad, security-assessments, cybersecurity, developer-tools, bug-bounty | 28-Nov-2025 |
| Bug Bounty Tips: How OTP Bypass Techniques Helped Me Find Multiple Bugs in Bug Bounty Programs | https://medium.com/@harshtalavaniya05/bug-bounty-tips-how-otp-bypass-techniques-helped-me-find-multiple-bugs-in-bug-bounty-programs-c29de4bb7a84?source=rss------bug_bounty-5 | Harshtalavaniya | bug-bounty-tips, bug-bounty, account-takeover, bugbounty-writeup, bug-bounty-writeup | 28-Nov-2025 |
| Why 95% of Bug Bounty Hunters Quit (And How the 5% Actually Make Money) | https://medium.com/@bughuntersjournal/why-95-of-bug-bounty-hunters-quit-and-how-the-5-actually-make-money-730863b854d5?source=rss------bug_bounty-5 | BugHunter’s Journal | programming, ethical-hacking, software-development, bug-bounty, cybersecurity | 28-Nov-2025 |
| Your Complete Guide to OWASP’s Essential Security Resources: Why Every Developer Needs These 9… | https://medium.com/@cyberbali/your-complete-guide-to-owasps-essential-security-resources-why-every-developer-needs-these-9-84f535116dbc?source=rss------bug_bounty-5 | Cyberbali | technology, bug-bounty, cybersecurity, penetration-testing, owasp | 28-Nov-2025 |
| How to Test User Registration for Bugs | https://medium.com/@ibtissam1/how-to-test-user-registration-for-bugs-444a0ce0d054?source=rss------bug_bounty-5 | Ibtissam | web-security, bug-bounty, bug-hunting, cybersecurity, api-security | 28-Nov-2025 |
| How a messing Header Led to Account Takeover | https://infosecwriteups.com/how-a-messing-header-led-to-account-takeover-912046526037?source=rss------bug_bounty-5 | Aftab Raja | infosec, bug-bounty, ethical-hacking, penetration-testing, information-security | 28-Nov-2025 |
| How I Pwned Telemetry on Amsterdam.nl | https://mrknightnidu.medium.com/how-i-pwned-telemetry-on-amsterdam-nl-9d2baf2b3d7f?source=rss------bug_bounty-5 | MRKNIGHT-NIDU | hacking, bounty-program, cybersecurity, bugs, bug-bounty | 28-Nov-2025 |
| JWT KID Vulnerability | https://yashpawar1199.medium.com/jwt-kid-vulnerability-7d65e6af704a?source=rss------bug_bounty-5 | Yash Pawar @HackersParadise | bug-bounty, jwt-bugs, jwt-bypass, penetration-testing, jwt-token | 28-Nov-2025 |
| Five Findings I Often See During Web Pentesting | https://medium.com/meetcyber/five-findings-i-often-see-during-web-pentesting-ce19ca038d4b?source=rss------bug_bounty-5 | 0xc4t | bug-bounty, red-team, web-security, pentest, hacking | 28-Nov-2025 |
| How a Forged JWT Token Exposed eGift Cards of all users worth Millions | https://codewithvamp.medium.com/how-a-forged-jwt-token-exposed-egift-cards-of-all-users-worth-millions-685f6cd20824?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | bug-bounty, information-technology, cybersecurity, security, hacking | 28-Nov-2025 |
| How I Found a Logic Flaw That Lets Users Self‑Delete From Organizations | https://medium.com/@mr.vultra/how-i-found-a-logic-flaw-that-lets-users-self-delete-from-organizations-c463520baeb0?source=rss------bug_bounty-5 | Amed Sherif | cybersecurity, bug-bounty, hackerone, bugcrowd, bug-bounty-writeup | 28-Nov-2025 |
| MY FIRST BOUNTY | https://medium.com/@bugbounty734/my-first-bounty-6854cc733b16?source=rss------bug_bounty-5 | 8192051 | hacking, hunting-for-bugs, first-bounty, bug-bounty, first-bug | 28-Nov-2025 |
| Starting With Android VAPT in 2025 | https://medium.com/@Slayer_15/starting-with-android-vapt-in-2025-b6f1633fea4c?source=rss------bug_bounty-5 | Omkar D. | bug-bounty, android, ethical-hacking, cybersecurity, hacking | 28-Nov-2025 |
| How I Hacked an AI Chatbot to Expose Thousands of Customer Records (IDOR + Prompt Injection) | https://medium.com/@sumitshahorg/how-i-hacked-an-ai-chatbot-to-expose-thousands-of-customer-records-idor-prompt-injection-760092ed99a4?source=rss------bug_bounty-5 | Sumit Shah (HackSage) | llm-prompt-injection, llm, bug-bounty, idor, cybersecurity | 28-Nov-2025 |
| From Criminal Chatter to Your Checklist: How I Turned Hacker TTPs Into a $ Pentest Payday ️♂️ | https://infosecwriteups.com/from-criminal-chatter-to-your-checklist-how-i-turned-hacker-ttps-into-a-pentest-payday-%EF%B8%8F-%EF%B8%8F-ffc1dc9b3434?source=rss------bug_bounty-5 | Iski | bug-bounty, bug-bounty-tips, cybersecurity, hacking, infosec | 28-Nov-2025 |
| How I Discovered a Rare Vulnerability in MCP Server — Bug Bounty | https://1-day.medium.com/how-i-discovered-a-rare-vulnerability-in-mcp-server-bug-bounty-28a0ef643902?source=rss------bug_bounty-5 | 1day | bug-bounty, writeup, ai-security, cybersecurity, mcp-server | 28-Nov-2025 |
| BLACK FRIDAY STUFF | https://sijojohnson.medium.com/black-friday-stuff-38c18d6296d6?source=rss------bug_bounty-5 | Sijo Johnson | account-takeover, privilege-escalation, bug-bounty, broken-access-control, idor | 28-Nov-2025 |
| Turning a “Useless” Self-XSS into a Full PII Leak Through Bug Chaining | https://medium.com/@pany.parsariyahi/turning-a-useless-self-xss-into-a-full-pii-leak-through-bug-chaining-57ae89dc9f76?source=rss------bug_bounty-5 | Parsa Riyahi | xss-attack, bug-chaining, bug-bounty, mindset | 28-Nov-2025 |
| How I Use JavaScript Files to Discover Hidden Vulnerabilities | https://medium.com/meetcyber/how-i-use-javascript-files-to-discover-hidden-vulnerabilities-a434eda7f7af?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, bug-bounty, penetration-testing, vulnerability, technology | 28-Nov-2025 |
| How I Found a Critical SQL Injection in Mercedes-Benz My First Write-up | https://medium.com/@youssefbughunter/how-i-found-a-critical-sql-injection-in-mercedes-benz-my-first-write-up-cb9c4c1fb7f3?source=rss------bug_bounty-5 | Youssef Ezzat | bug-bounty, cybersecurity, bugcrowd, sql-injection, mercedes-benz | 28-Nov-2025 |
| How I do Recon on my target.com which gave me walkthrough to the bugbounty | https://medium.com/@shakthisv90/how-i-do-recon-on-my-target-com-which-gave-me-walkthrough-to-the-bugbounty-880c07c3f07d?source=rss------bug_bounty-5 | Shakthi | bug-bounty, cybersecurity, programming | 27-Nov-2025 |
| JWT Privilege Escalation to Container RCE via Jinja2 SSTI “ Intigriti challenge” | https://medium.com/@banertheinrich/jwt-privilege-escalation-to-container-rce-via-jinja2-ssti-intigriti-challenge-16186324241c?source=rss------bug_bounty-5 | Adham Heinrich | ctf-writeup, bugbounty-writeup, bug-bounty-tips, bug-bounty, cybersecurity | 27-Nov-2025 |
| Apple Developer Stored XSS — $5,000 Bounty | Writeup 2025 | https://medium.com/@ZombieHack/apple-developer-stored-xss-5-000-bounty-writeup-2025-cc34a030a5bf?source=rss------bug_bounty-5 | Youssef Desouki ( Zombie Hack ) | xss-attack, apple, cybersecurity, hackerone, bug-bounty | 27-Nov-2025 |
| How I Bypassed Enterprise File Restrictions with Just One Character | https://medium.com/@default_Ox/how-i-bypassed-enterprise-file-restrictions-with-just-one-character-f514080bed2f?source=rss------bug_bounty-5 | default_0x | file-upolad, pentesting, file-upload-vulnerability, bug-bounty, bypass | 27-Nov-2025 |
| Understanding Bug Bounty Programs & How Students Can Start | https://medium.com/@ashikur.rahman498/understanding-bug-bounty-programs-how-students-can-start-b23415f95d89?source=rss------bug_bounty-5 | Md. Ashikur Rahman | bubt-cse413-sdg4, hacking, bug-bounty, cybersecurity, earn-money-online | 27-Nov-2025 |
| ️ Critical Flaw: The “Secret Instruction” Hack in Django ORM (CVE-2025–64459) | https://medium.com/@MuhammedAsfan/%EF%B8%8F-critical-flaw-the-secret-instruction-hack-in-django-orm-cve-2025-64459-2dfc899a165d?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | python, cybersecurity, critical-flaw, cve, bug-bounty | 27-Nov-2025 |
| Pentest → Incident Response: 10 Tools That Saved the Day (and How to Use Them) | https://medium.com/@verylazytech/pentest-incident-response-10-tools-that-saved-the-day-and-how-to-use-them-ebcef94dbb7e?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, cybersecurity, bug-bounty, hacking, penetration-testing | 27-Nov-2025 |
| Bug Bounty Reality Check (What They Don’t Tell You) | https://medium.com/meetcyber/bug-bounty-reality-check-what-they-dont-tell-you-5730d0557ce0?source=rss------bug_bounty-5 | Shahzaib | ethical-hacking, cybersecurity, bug-bounty, careers, penetration-testing | 27-Nov-2025 |
| Open Redirect Explained Simply: How Attackers Misuse Trusted Links | https://medium.com/@natarajanck2/open-redirect-explained-simply-how-attackers-misuse-trusted-links-15e37c93b360?source=rss------bug_bounty-5 | Natarajan C K | cybersecurity, bug-bounty, security, open-redirect, website | 27-Nov-2025 |
| My First Valid Bug: IDOR in E-commerce Website | https://medium.com/@atharvchawna/my-first-valid-bug-idor-in-e-commerce-website-5789e974af62?source=rss------bug_bounty-5 | 0xShyron | security, vulnerability, cybersecurity, security-research, bug-bounty | 27-Nov-2025 |
| JWT Authentication Bypass via Weak Signing Key | https://medium.com/meetcyber/jwt-authentication-bypass-via-weak-signing-key-894b85bc879e?source=rss------bug_bounty-5 | Bash Overflow | json-web-token, bug-bounty, jwt-brute-force-attack, weak-jwt-secret, jwt-authentication-bypass | 27-Nov-2025 |
| I Found an Admin Account Anyone Could Create | https://medium.com/@ibtissam1/i-found-an-admin-account-anyone-could-create-b9d19b2d40b0?source=rss------bug_bounty-5 | Ibtissam | cybersecurity, bug-bounty, web-security, ethical-hacking, json | 27-Nov-2025 |
| How a Simple ZIP Upload Revealed a Critical Remote Code Execution Flaw | https://medium.com/@harshtalavaniya05/how-a-simple-zip-upload-revealed-a-critical-remote-code-execution-flaw-042c375cdee7?source=rss------bug_bounty-5 | Harshtalavaniya | bug-bounty, bugbounty-writeup, rce, bug-bounty-tips, bug-bounty-writeup | 27-Nov-2025 |
| Cracking the Code: How I Found a Zero-Day in Criminal Chatter and Cashed In | https://infosecwriteups.com/cracking-the-code-how-i-found-a-zero-day-in-criminal-chatter-and-cashed-in-96eed2b96678?source=rss------bug_bounty-5 | Iski | bug-bounty, bug-bounty-tips, hacking, cybersecurity, darkweb | 27-Nov-2025 |
| OAuth Account Linking Bypass Leading to Full Account Takeover and Deletion | https://medium.com/@0xMo7areb/oauth-account-linking-bypass-leading-to-full-account-takeover-and-deletion-86f0b0e0d524?source=rss------bug_bounty-5 | 0xMo7areb | bugs, bug-bounty, bugbounty-writeup, bug-bounty-tips | 27-Nov-2025 |
| How I Accidentally Got My First CVE (While Looking for Something Else Entirely) | https://medium.com/@rkvb/how-i-accidentally-got-my-first-cve-while-looking-for-something-else-entirely-c8baddbc90b9?source=rss------bug_bounty-5 | RkVb | security, infosec, bug-bounty, cybersecurity, cve | 27-Nov-2025 |
| The Simple Bug That Led Me to My First Bounty (Account Takeover via Insecure Reusable Activation… | https://medium.com/@sudo_a7med/the-simple-bug-that-led-me-to-my-first-bounty-account-takeover-via-insecure-reusable-activation-918c1ea1a362?source=rss------bug_bounty-5 | sudo_a7med | bug-bounty, broken-access-control, account-takeover | 27-Nov-2025 |
| Find Real Bugs by Simply Reading JavaScript Files | https://medium.com/meetcyber/find-real-bugs-by-simply-reading-javascript-files-bdd4f825081b?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, javascript, cybersecurity, programming, technology | 27-Nov-2025 |
| Zero-Click Account Takeover via OAuth | https://medium.com/@amrqansow/zero-click-account-takeover-via-oauth-8c229a3f45d1?source=rss------bug_bounty-5 | Amr khaled Zakaria | penetration-testing, cybersecurity, android-pentesting, bug-bounty, hacking | 27-Nov-2025 |
| The Simple Bug That Led Me to My First Bounty (Account Takeover via Insecure Reusable Activation… | https://medium.com/@sudo_a7med/the-simple-bug-that-led-me-to-my-first-bounty-account-takeover-via-insecure-reusable-activation-918c1ea1a362?source=rss------bug_bounty-5 | sudo | bug-bounty, broken-access-control, account-takeover | 27-Nov-2025 |
| API4:2023 — Unrestricted Resource Consumption: Denial-of-Service Attacks Using APIs | https://medium.com/@jpablo13/api4-2023-unrestricted-resource-consumption-denial-of-service-attacks-using-apis-82e12fa6dd1e?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, technology, hacking, api | 26-Nov-2025 |
| Identity Is the New Perimeter: Why Credentials Are the #1 Attack Vector | https://medium.com/@paritoshblogs/identity-is-the-new-perimeter-why-credentials-are-the-1-attack-vector-7c889cdfea6f?source=rss------bug_bounty-5 | Paritosh | hacking, cybersecurity, identity, bug-bounty, ransomware | 26-Nov-2025 |
| JWT Hacking Toolkit: 20 Real Hacker Techniques to Master Authentication Attacks | https://medium.com/@verylazytech/jwt-hacking-toolkit-20-real-hacker-techniques-to-master-authentication-attacks-acc75a736e6e?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, cybersecurity, vulnerability, ethical-hacking, jwt | 26-Nov-2025 |
| A Complete Guide to SSRF: Vulnerability Types, Discovery Methods, Exploitation Techniques, and… | https://medium.com/meetcyber/a-complete-guide-to-ssrf-vulnerability-types-discovery-methods-exploitation-techniques-and-be995a5efdd1?source=rss------bug_bounty-5 | Diman | web-development, money, technology, bug-bounty, cybersecurity | 26-Nov-2025 |
| Write-up: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data | https://medium.com/@hydra88948/write-up-sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data-a76afba68d95?source=rss------bug_bounty-5 | Hydra | bug-bounty, portswigger-lab, sql-injection, cybersecurity | 26-Nov-2025 |
| Directory Listing: How a simple misconfiguration exposed an Application’s Wechat access tokens and… | https://medium.com/@duncanochieng682/directory-listing-how-a-simple-misconfiguration-exposed-an-applications-wechat-access-tokens-and-4b3e45328d44?source=rss------bug_bounty-5 | Mr. Robot.txt | web-application-security, application-security, bug-bounty, infosec, hacking | 26-Nov-2025 |
| From Zero Reports to My First Hall of Fame | https://voidsec24.medium.com/from-zero-reports-to-my-first-hall-of-fame-177eb70afd58?source=rss------bug_bounty-5 | VoidSec24 | ethical-hacking, hall-of-fame, bug-bounty | 26-Nov-2025 |
| The 150-Day Blueprint: From Zero to $7,650 in Bug Bounties | https://medium.com/@Aacle/the-150-day-blueprint-from-zero-to-7-650-in-bug-bounties-51c6f24c3b9f?source=rss------bug_bounty-5 | Abhishek meena | cybersecurity, infosec, bug-bounty, hacking, bug-bounty-tips | 26-Nov-2025 |
| Write-up: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data | https://systemweakness.com/write-up-sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data-a76afba68d95?source=rss------bug_bounty-5 | Hydra | bug-bounty, portswigger-lab, sql-injection, cybersecurity | 26-Nov-2025 |
| How i earned $100 in one minute | https://medium.com/@pawanparmar/how-i-earned-100-in-one-minute-b1b52d5bbf41?source=rss------bug_bounty-5 | Pawan parmar | bounty-program, bug-bounty, bugbounty-writeup, cybersecurity | 26-Nov-2025 |
| I Automated My Bug Hunting With Google | https://medium.com/@ibtissam1/i-automated-my-bug-hunting-with-google-1dd5e5938b39?source=rss------bug_bounty-5 | Ibtissam | bug-bounty, google, automation, cybersecurity, bug-bounty-hunting | 26-Nov-2025 |
| API4:2023 — Unrestricted Resource Consumption: Denial-of-Service Attacks Using APIs | https://medium.com/meetcyber/api4-2023-unrestricted-resource-consumption-denial-of-service-attacks-using-apis-82e12fa6dd1e?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, technology, hacking, api | 26-Nov-2025 |
| HackerOne for Aspiring Ethical Hackers: An Advanced, Practical Roadmap to Start, Hunt, and Grow | https://medium.com/@penoughcyber/hackerone-for-aspiring-ethical-hackers-an-advanced-practical-roadmap-to-start-hunt-and-grow-c11200da41dc?source=rss------bug_bounty-5 | Penough | vapt, cybersecurity, bug-bounty, bug-hunting, hackerone | 26-Nov-2025 |
| Business Logic Vulnerabilities — Hands-On Lab Series (PortSwigger Academy) | https://medium.com/@fatimahasan022/business-logic-vulnerabilities-hands-on-lab-series-portswigger-academy-e92b54210aeb?source=rss------bug_bounty-5 | Fatimahasan | bug-bounty, portswigger-lab, web-app-pentesting, hacking, oscp | 26-Nov-2025 |
| How a Security Team Discovered a $3,000 XSS Bug — And Why It Matters for Every Company | https://medium.com/@cybervolt/how-a-security-team-discovered-a-3-000-xss-bug-and-why-it-matters-for-every-company-42801ffbb27f?source=rss------bug_bounty-5 | Cybervolt | bug-bounty, cybersecurity, web-application-security, penetration-testing, ethical-hacking | 26-Nov-2025 |
| Comprehensive Cross Site Scripting Assessment From Reflective Payloads to Persistent Exploits and… | https://kizerh.medium.com/comprehensive-cross-site-scripting-assessment-from-reflective-payloads-to-persistent-exploits-and-db48c8d88b8a?source=rss------bug_bounty-5 | Kiza | ethical-hacking, dvwa, xss-attack, bug-bounty, web-application-security | 26-Nov-2025 |
| Deploy Self-Hosted WAF for your Homelab and Web Applications using SafeLine. | https://pwndecoco.medium.com/deploy-self-hosted-waf-for-your-homelab-and-web-applications-using-safeline-42979d364cb4?source=rss------bug_bounty-5 | Pwndec0c0 | bug-bounty, web-development, firewall, software-development, web-application-firewall | 26-Nov-2025 |
| How I Discovered an IDOR Vulnerability in a Parent/Child Management API | https://infosecwriteups.com/how-i-discovered-an-idor-vulnerability-in-a-parent-child-management-api-445c9471d23b?source=rss------bug_bounty-5 | Umanhonlen Gabriel | bug-bounty-writeup, bug-bounty-tips, bug-bounty, security, information-security | 26-Nov-2025 |
| How to Fix Wireshark Errors on Linux (The Complete Guide) | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/how-to-fix-wireshark-errors-on-linux-the-complete-guide-7ea25af0305d?source=rss------bug_bounty-5 | ghostyjoe | pentesting, troubleshooting, wireshark, networking, bug-bounty | 26-Nov-2025 |
| How to Pick the Right Bug Bounty Target | https://medium.com/@Appsec_pt/how-to-pick-the-right-bug-bounty-target-98f900033bfa?source=rss------bug_bounty-5 | Appsec.pt | programming, cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 26-Nov-2025 |
| How I Found a Critical IDOR in a University System (and Why Ethical Hacking Matters) | https://medium.com/@j4k3l0ng/how-i-found-a-critical-idor-in-a-university-system-and-why-ethical-hacking-matters-5eb7f2ffffba?source=rss------bug_bounty-5 | j4k3l0ng | ethical-hacking, idor, api, cybersecurity, bug-bounty | 25-Nov-2025 |
| Low-level logic flaw — PortSwigger Academy | https://medium.com/@fatimahasan022/low-level-logic-flaw-portswigger-academy-c54efbffa4fd?source=rss------bug_bounty-5 | Fatimahasan | web-applications, security, oscp, pentesting, bug-bounty | 25-Nov-2025 |
| Your Blue Team is Incomplete Without Dark Web Monitoring — How I Found a Bug in Criminal Chatter… | https://infosecwriteups.com/your-blue-team-is-incomplete-without-dark-web-monitoring-how-i-found-a-bug-in-criminal-chatter-7ce363b69733?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, bug-bounty, cybersecurity, hacking, darkweb | 25-Nov-2025 |
| From Dorks to Defense: How I Secured Two CERT-In Hall of Fames | https://hettt.medium.com/from-dorks-to-defense-how-i-secured-two-cert-in-hall-of-fames-37f87f181bd0?source=rss------bug_bounty-5 | Het Patel | bug-bounty-writeup, bug-bounty, bugs, sql-injection, hall-of-fame | 25-Nov-2025 |
| The New King of Vulnerabilities: Why Broken Access Control is the #1 Threat to Your App | https://medium.com/@MuhammedAsfan/the-new-king-of-vulnerabilities-why-broken-access-control-is-the-1-threat-to-your-app-5ef85f06b515?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | vulnerability, abc, bug-bounty, broken-access-control, cybersecurity | 25-Nov-2025 |
| Vulnerability Assessment and Exploitation: Leveraging GVM, Nmap, and RSH for Complete Host… | https://kizerh.medium.com/vulnerability-assessment-and-exploitation-leveraging-gvm-nmap-and-rsh-for-complete-host-6d09a12ea5df?source=rss------bug_bounty-5 | Kiza | vulnerability-scanning, nmap, bug-bounty, ethical-hacking, web-application-security | 25-Nov-2025 |
| Exploiting an IDOR to Claim Unavailable Free Gifts | https://scriptjacker.medium.com/exploiting-an-idor-to-claim-unavailable-free-gifts-9a1ff645913d?source=rss------bug_bounty-5 | Parth Narula | idor-vulnerability, vulnerability, broken-access-control, bug-bounty, idor | 25-Nov-2025 |
| My First Two Bounties | https://medium.com/@khaledelnabet/my-first-two-bounties-9e3f1f9c75bb?source=rss------bug_bounty-5 | Khaledelnabet | bug-bounty, bugs, cybersecurity, hacking, security | 25-Nov-2025 |
| I Automated My Entire Recon Process | https://medium.com/@ibtissam1/i-automated-my-entire-recon-process-db5e488adf83?source=rss------bug_bounty-5 | Ibtissam | cybersecurity, reconnaissance, bug-bounty, automation, infosec | 25-Nov-2025 |
| HOW I Got My First Bug Bounty In Few Steps– $50 AUD for an HTML Injection | https://medium.com/@sohambughunt3636/how-i-got-my-first-bug-bounty-in-few-steps-50-aud-for-an-html-injection-a6b40472fc76?source=rss------bug_bounty-5 | Sohambughunt | hacker, bug-bounty-writeup, bug-hunter, bug-bounty, html-hyperlink | 25-Nov-2025 |
| From Dorks to Defense: How I Secured Two CERT-In Hall of Fames | https://infosecwriteups.com/from-dorks-to-defense-how-i-secured-two-cert-in-hall-of-fames-37f87f181bd0?source=rss------bug_bounty-5 | Het Patel | bug-bounty-writeup, bug-bounty, bugs, sql-injection, hall-of-fame | 25-Nov-2025 |
| How Did I Hack a Website By Editing JSON | https://medium.com/@ibtissam1/how-did-i-hack-a-website-by-editing-json-2e7814920be2?source=rss------bug_bounty-5 | Ibtissam | hacking, cybersecurity, json, bug-bounty, technology | 20-Nov-2025 |
| Bug Bounty Shortcut: Turn LeakRadar Results Into High-Impact Reports in Minutes | https://medium.com/@alexandrevandammepro/bug-bounty-shortcut-turn-leakradar-results-into-high-impact-reports-in-minutes-ceba3bd9ad96?source=rss------bug_bounty-5 | Alexandre Vandamme | cybersecurity, infosec, bug-bounty-tips, bug-bounty, hacking | 20-Nov-2025 |
| BloodHound Mastery: 20 Queries for Step-by-Step Active Directory Domination | https://medium.com/@verylazytech/bloodhound-mastery-20-queries-for-step-by-step-active-directory-domination-98d813c9cdf8?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, hacking, penetration-testing, bug-bounty, cybersecurity | 20-Nov-2025 |
| P4 Bugs every beginner can find in 2025 | https://medium.com/@ProwlSec/p4-bugs-every-beginner-can-find-in-2025-1c1094719e60?source=rss------bug_bounty-5 | ProwlSec | penetration-testing, bug-bounty, cybersecurity, tips, viral | 20-Nov-2025 |
| GraphQLScoper | https://medium.com/@bineeg/graphqlscoper-45f51f29a194?source=rss------bug_bounty-5 | bineeg | bug-bounty, infosec | 20-Nov-2025 |
| 0-Day Hunting Guide ️♂️: Recon Techniques Nobody Talks About | https://osintteam.blog/0-day-hunting-guide-%EF%B8%8F-%EF%B8%8F-recon-techniques-nobody-talks-about-d37fcaebf560?source=rss------bug_bounty-5 | Vipul Sonule | programming, bug-bounty, hacking, tech, cybersecurity | 20-Nov-2025 |
| Critical Full Organization Takeover via Email Verification Bypass | https://medium.com/@0xEsso/critical-full-organization-takeover-via-email-verification-bypass-3f5a55287824?source=rss------bug_bounty-5 | Eslam Gamal | web-penetration-testing, ethical-hacking, account-takeover, bug-bounty, business-logic-bug | 20-Nov-2025 |
| Global Flag Hunter 2.0 Competition: How I Hacked My Way Through the Web Challenges | https://medium.com/@es0557533/global-flag-hunter-2-0-competition-how-i-hacked-my-way-through-the-web-challenges-e1498249db17?source=rss------bug_bounty-5 | Isv0x1 | ctf-writeup, ctf-walkthrough, bug-bounty | 20-Nov-2025 |
| API2:2023 Broken Authentication: Critical API Identity Flaws and JWT Attacks | https://medium.com/@jpablo13/api2-2023-broken-authentication-critical-api-identity-flaws-and-jwt-attacks-c8a31e86b604?source=rss------bug_bounty-5 | JPablo13 | technology, hacking, cybersecurity, api, bug-bounty | 19-Nov-2025 |
| From Play Store to Hall of Fame: My Journey Hunting Bugs in Government Mobile Apps | https://infosecwriteups.com/from-play-store-to-hall-of-fame-my-journey-hunting-bugs-in-government-mobile-apps-81f242ad8916?source=rss------bug_bounty-5 | Bytewreaker | bug-bounty, bug-bounty-tips, bug-bounty-writeup, bugs | 19-Nov-2025 |
| API2:2023 Broken Authentication: Critical API Identity Flaws and JWT Attacks | https://medium.com/meetcyber/api2-2023-broken-authentication-critical-api-identity-flaws-and-jwt-attacks-c8a31e86b604?source=rss------bug_bounty-5 | JPablo13 | technology, hacking, cybersecurity, api, bug-bounty | 19-Nov-2025 |
| SQL injection — Portswigger LAB 1 -SQL injection vulnerability in WHERE clause allowing retrieval… | https://medium.com/@emir78.gkta/sql-injection-portswigger-lab-1-sql-injection-vulnerability-in-where-clause-allowing-retrieval-f734c234215d?source=rss------bug_bounty-5 | Emir Gkta | bug-bounty, portswigger, web-security, sql-injection, cybersecurity | 19-Nov-2025 |
| [NASA] GlobalProtect VPN Pre-Auth Leak → | https://medium.com/@christoscoming/nasa-globalprotect-vpn-pre-auth-leak-d868aa005341?source=rss------bug_bounty-5 | Christoscoming | cybersecurity, bug-bounty-writeup, infosec-write-ups, bug-bounty | 19-Nov-2025 |
| Top 10 Network Visibility Tools Every Pentester Needs in 2025: Level Up Your Recon | https://medium.com/@verylazytech/top-10-network-visibility-tools-every-pentester-needs-in-2025-level-up-your-recon-a2b6749c5d60?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, penetration-testing, cybersecurity, ethical-hacking, hacking | 19-Nov-2025 |
| Security Disclosure: Exposed Prometheus Node Exporter - Jio Infrastructure Internal System… | https://medium.com/@christoscoming/security-disclosure-exposed-prometheus-node-exporter-jio-infrastructure-internal-system-calmav-16ab4ad64b58?source=rss------bug_bounty-5 | Christoscoming | bug-bounty, cybersecurity, bug-bounty-writeup | 19-Nov-2025 |
| How To Uncover A Major Security Risk With One Line | https://medium.com/@ibtissam1/how-to-uncover-a-major-security-risk-with-one-line-136708cfd70c?source=rss------bug_bounty-5 | Ibtissam | bug-bounty, web-security, xss-attack, ethical-hacking, cybersecurity | 19-Nov-2025 |
| Bug Bounty Commands Generator — A Practical Tool for Faster Pen-testing Workflows | https://medium.com/@HackByteX/bug-bounty-commands-generator-a-practical-tool-for-faster-pen-testing-workflows-f7d3d7a6addc?source=rss------bug_bounty-5 | HackByteX | bug-bounty, bug-bounty-writeup, bugs, bug-bounty-tips | 19-Nov-2025 |
| How I Turned a Dark Web Sketch into a $ Bug Bounty Payday ️♂️ | https://medium.com/@iski/how-i-turned-a-dark-web-sketch-into-a-bug-bounty-payday-%EF%B8%8F-%EF%B8%8F-fafc5a1176ef?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, darkweb, money, hacking | 19-Nov-2025 |
| Trust Issues: How I Hijacked Financial Data with a Single Header | https://medium.com/@sinxx198/trust-issues-how-i-hijacked-financial-data-with-a-single-header-29e3b94d6ca0?source=rss------bug_bounty-5 | Sinxx | bug-bounty, pentesting, cybersecurity | 19-Nov-2025 |
| OWASP Top 10: 2025 — Web Application Vulnerabilities (PART 1) | https://medium.com/@0xBinaryOrbit/owasp-top-10-2025-web-application-vulnerabilities-part-1-c3fdc2911c45?source=rss------bug_bounty-5 | 0xBinaryOrbit aka Faisal Khan | hacking, owasp, cybersecurity, owasp-top-10, bug-bounty | 19-Nov-2025 |
| Kimlik Doğrulama Zafiyetlerine Giriş: Modern Web Uygulamalarında Görülen Yaygın Hatalar | https://cybersecuritywriteups.com/kimlik-do%C4%9Frulama-zafiyetlerine-giri%C5%9F-modern-web-uygulamalar%C4%B1nda-g%C3%B6r%C3%BClen-yayg%C4%B1n-hatalar-9fdced04ae58?source=rss------bug_bounty-5 | Songül Kızılay | portswigger, owasp, cybersecurity, web-security, bug-bounty | 19-Nov-2025 |
| The Header No One Was Watching: Leaking sensitive data (quitely) | https://medium.com/@warisjeet31/the-header-no-one-was-watching-a-quiet-idor-in-a-financial-system-0fcba65e2ace?source=rss------bug_bounty-5 | sin99xx | hacking, bug-bounty, cybersecurity | 19-Nov-2025 |
| API2:2023 Broken Authentication: Fallos Críticos de Identidad en APIs y Ataques JWT | https://medium.com/@jpablo13/api2-2023-broken-authentication-fallos-cr%C3%ADticos-de-identidad-en-apis-y-ataques-jwt-9c91d58fd739?source=rss------bug_bounty-5 | JPablo13 | technology, cybersecurity, hacking, api, bug-bounty | 18-Nov-2025 |
| 20+ Vulnerabilities in a Static Website | https://saurabh-jain.medium.com/20-vulnerabilities-in-a-static-website-2f32a4902377?source=rss------bug_bounty-5 | Saurabh Jain | bug-bounty-tips, hacking, security, vulnerability, bug-bounty | 18-Nov-2025 |
| One Subscription Away from Criticals | https://0wnr.medium.com/one-subscription-away-from-criticals-e7a7bacde4b7?source=rss------bug_bounty-5 | Pwnr | penetration-testing, bug-bounty, web-security, hacker, cybersecurity | 18-Nov-2025 |
| Authentication Bypass via a Flawed State Machine | https://osintteam.blog/authentication-bypass-via-a-flawed-state-machine-28bbe211f248?source=rss------bug_bounty-5 | Bash Overflow | authentication-bypass, authentication-logic-flaw, broken-access-control, bug-bounty, privilege-escalation | 18-Nov-2025 |
| Modern SSRF — Part 1: From Blind Requests to Cloud Risk (Beginner-Friendly) | https://medium.com/great-hackers-battalion/modern-ssrf-part-1-from-blind-requests-to-cloud-risk-beginner-friendly-4e3805641c5c?source=rss------bug_bounty-5 | ◦•●◉✿ ¥ຮ₰ ʜc ✿◉●•◦ | cyber-security-awareness, ssrf, bug-hunting, bug-bounty, cybersecurity | 18-Nov-2025 |
| 2.4 TB Data Leak Caused By Microsoft’s Misconfiguration | https://medium.com/@kanhukhanda764/2-4-tb-data-leak-caused-by-microsofts-misconfiguration-18bb6cf42523?source=rss------bug_bounty-5 | Threatsys Technologies Pvt Ltd | cybersecurity, new-vulnerabilities, cyber-solution, bug-bounty, cyber-threat | 18-Nov-2025 |
| Broken Link Hijacking: Explained Simply | https://medium.com/@MuhammedAsfan/broken-link-hijacking-explained-simply-cacdbf2f3df7?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | bug-bounty, broken-link-hijacking, cybersecurity | 18-Nov-2025 |
| How I Earned My First Bug Bounty: A Beginner’s Journey | https://medium.com/@geek.divyanshu/how-i-earned-my-first-bug-bounty-a-beginners-journey-5adfdbd2ccdd?source=rss------bug_bounty-5 | Geek Divyanshu | cybersecurity, bug-bounty-tips, bug-bounty | 18-Nov-2025 |
| IDOR — Authentication Token & Video Metadata Manipulation | https://medium.com/@defidev59/idor-authentication-token-video-metadata-manipulation-c058111945a0?source=rss------bug_bounty-5 | Defidev | bugs, cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 18-Nov-2025 |
| Recon Automation Toolkit: Master Screenshots, Crawling & Fuzzing for High-Impact Pentesting | https://medium.com/@verylazytech/recon-automation-toolkit-master-screenshots-crawling-fuzzing-for-high-impact-pentesting-9c4d869ca0e4?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 18-Nov-2025 |
| How I Found My First Bug Bounty In 24 Hours | https://medium.com/@ibtissam1/how-i-found-my-first-bug-bounty-in-24-hours-cd7ca5e18f50?source=rss------bug_bounty-5 | Ibtissam | hacking, cybersecurity, bug-bounty, web-security, infosec | 18-Nov-2025 |
| How I Built a Robot That Finds Broken Authorization While I Sleep | https://infosecwriteups.com/how-i-built-a-robot-that-finds-broken-authorization-while-i-sleep-458e94f4d879?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, bug-bounty, bug-bounty-tips, infosec | 18-Nov-2025 |
| # How I Fingerprinted the OpenAI 2025 ChatGPT Containers (Using Only the Free Tier) | https://medium.com/@antiibugss/how-i-fingerprinted-the-openai-2025-chatgpt-containers-using-only-the-free-tier-4be9c2740fd2?source=rss------bug_bounty-5 | ANTIBUGS | openai, ai-security, chatgpt, cybersecurity, bug-bounty | 18-Nov-2025 |
| GitHub Dorking: The Hunter’s Guide to Finding Secrets in Public Code | https://medium.com/@N0aziXss/github-dorking-the-hunters-guide-to-finding-secrets-in-public-code-f1b8582309e8?source=rss------bug_bounty-5 | N0aziXss | ethical-hacking, github-dorking, security-research, cybersecurity, bug-bounty | 18-Nov-2025 |
| CAPenX Exam Review: Is It Really That Difficult? | https://infosecwriteups.com/capenx-exam-review-is-it-really-that-difficult-530d65f61bcf?source=rss------bug_bounty-5 | Abhishek Gupta | cybersecurity, hacking, capenx, bug-bounty, web-application-security | 18-Nov-2025 |
| Breaking Authentication: How I Bypassed Email Verification by Changing One Word in the Response | https://akashmadanu.medium.com/breaking-authentication-how-i-bypassed-email-verification-by-changing-one-word-in-the-response-3bf37dd779c8?source=rss------bug_bounty-5 | Madanu Akash | otp-bypass, bug-bounty, cybersecurity | 18-Nov-2025 |
| How I Received an Appreciation Letter from NASA for Identifying a CVE | https://medium.com/@cybertechajju/how-i-received-an-appreciation-letter-from-nasa-for-identifying-a-cve-cc36b955f86e?source=rss------bug_bounty-5 | CyberTechAjju | hacked, nasa, bug-bounty, bounties, down | 18-Nov-2025 |
| We should make the Beta public (famous last words) | https://medium.com/@l_s_/we-should-make-the-beta-public-famous-last-words-69b6f3bab550?source=rss------bug_bounty-5 | Louis Shyers | hacking, api, cybersecurity, bug-bounty-writeup, bug-bounty | 17-Nov-2025 |
| Advanced Template Injection Lifecycle From Input Vector Discovery to Command Execution and Post… | https://kizerh.medium.com/advanced-template-injection-lifecycle-from-input-vector-discovery-to-command-execution-and-post-c1e8998de131?source=rss------bug_bounty-5 | Kiza | ethical-hacking, bug-bounty, tryhackme, template-injection | 17-Nov-2025 |
| FFUF Interactive Mode ( fuzzing made easy ) | https://medium.com/@ugs20b126_cic.rajesh/ffuf-interactive-mode-fuzzing-made-easy-8d29fd9b5ab3?source=rss------bug_bounty-5 | Rajesh Sagar | bug-bounty, bug-bounty-tips, ffuf | 17-Nov-2025 |
| Holistic Injection Exploit Report Mapping Vulnerable Input Points to Account Takeover and… | https://kizerh.medium.com/holistic-injection-exploit-report-mapping-vulnerable-input-points-to-account-takeover-and-b8a093f4e17d?source=rss------bug_bounty-5 | Kiza | ethical-hacking, bug-bounty, sql-injection, web-application-security, owasp-juice-shop | 17-Nov-2025 |
| ️Cracking a UTF-7 Path Traversal: My Walkthrough of Web 100–1 (Pointer Overflow CTF) | https://medium.com/@vabro1st/%EF%B8%8Fcracking-a-utf-7-path-traversal-my-walkthrough-of-web-100-1-pointer-overflow-ctf-a51f6fc048c6?source=rss------bug_bounty-5 | v4br0 | ctf-writeup, bug-bounty, path-traversal, ctf, security | 17-Nov-2025 |
| How I Taught AI to Predict Zero-Days Before They Happened (And Got Paid for Bugs That Didn’t Exist… | https://medium.com/@iski/how-i-taught-ai-to-predict-zero-days-before-they-happened-and-got-paid-for-bugs-that-didnt-exist-3e0fe162d92f?source=rss------bug_bounty-5 | Iski | hacking, infosec, bug-bounty-tips, cybersecurity, bug-bounty | 17-Nov-2025 |
| How I Find Real Bug Bounty Targets | Live Recon and Workflow | https://0dayscyber.medium.com/how-i-find-real-bug-bounty-targets-live-recon-and-workflow-4971bbd8230b?source=rss------bug_bounty-5 | Jackson Mittag | amazon-s3, live-bug-bounty, bug-bounty | 17-Nov-2025 |
| 200 reports, 11 valid bugs, 0 critical issues. Here’s everything we wish we’d known about VDP. | https://medium.com/meetcyber/200-reports-11-valid-bugs-0-critical-issues-heres-everything-we-wish-we-d-known-about-vdp-9e54108c737f?source=rss------bug_bounty-5 | is*hosting | vdp, bug-bounty-writeup, vulnerability-disclosure, bug-bounty, hackerone | 17-Nov-2025 |
| Weak Isolation on Dual-Use Endpoint: Understanding the Logic Flaw Behind Account Takeovers | https://osintteam.blog/weak-isolation-on-dual-use-endpoint-understanding-the-logic-flaw-behind-account-takeovers-7f8529a68d23?source=rss------bug_bounty-5 | Bash Overflow | dual-use-endpoint-flaw, broken-access-control, logic-flaw-exploitation, privilege-escalation, bug-bounty | 17-Nov-2025 |
| I Found a Business Logic Bug That Exposed User Identities | https://medium.com/@ibtissam1/i-found-a-business-logic-bug-that-exposed-user-identities-b402d2adb2e4?source=rss------bug_bounty-5 | Ibtissam | business-logic, web-security, cybersecurity, bug-bounty, ethical-hacking | 17-Nov-2025 |
| Your Domain Is Probably in Stealer Logs: See What LeakRadar Finds in 60 Seconds | https://medium.com/@alexandrevandammepro/your-domain-is-probably-in-stealer-logs-see-what-leakradar-finds-in-60-seconds-31bd1a1d8086?source=rss------bug_bounty-5 | Alexandre Vandamme | bug-bounty, hacking, cybersecurity, infosec, data-breach | 17-Nov-2025 |
| How I Taught AI to Predict Zero-Days Before They Happened (And Got Paid for Bugs That Didn’t Exist… | https://infosecwriteups.com/how-i-taught-ai-to-predict-zero-days-before-they-happened-and-got-paid-for-bugs-that-didnt-exist-3e0fe162d92f?source=rss------bug_bounty-5 | Iski | hacking, infosec, bug-bounty-tips, cybersecurity, bug-bounty | 17-Nov-2025 |
| CVE-2025–64446 — A Red Team Offensive Playbook for FortiWeb RCE via Path Traversal +… | https://medium.com/@verylazytech/cve-2025-64446-a-red-team-offensive-playbook-for-fortiweb-rce-via-path-traversal-c79880f8b902?source=rss------bug_bounty-5 | Very Lazy Tech | exploitation, bug-bounty, penetration-testing, cybersecurity, hacking | 17-Nov-2025 |
| Step-by-Step Guide: How to Build a Lightweight Internal Pentest Toolkit That Just Works | https://medium.com/@verylazytech/step-by-step-guide-how-to-build-a-lightweight-internal-pentest-toolkit-that-just-works-ebcc188b2ca6?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, cybersecurity, bug-bounty, hacking, penetration-testing | 16-Nov-2025 |
| Windows Security: Abusing Access Tokens | A Practical CTF Walkthrough | https://medium.com/@cocopelly255/windows-security-abusing-access-tokens-a-practical-ctf-walkthrough-800b8e633ffe?source=rss------bug_bounty-5 | ToxSec | cybersecurity, tech, bug-bounty, technology | 16-Nov-2025 |
| OSCP Proving Grounds — Levram Walkthrough | https://medium.com/@cocopelly255/oscp-proving-grounds-levram-walkthrough-de90f5ccb12b?source=rss------bug_bounty-5 | ToxSec | cybersecurity, bug-bounty, technology, ctf | 16-Nov-2025 |
| File Upload Vulnerabilities for Bug Bounty | https://medium.com/@cocopelly255/file-upload-vulnerabilities-for-bug-bounty-3718567050c0?source=rss------bug_bounty-5 | ToxSec | technology, tech, bug-bounty, toxsec, cybersecurity | 16-Nov-2025 |
| Linux Privilege Escalation: Practical Guide to Kernel Exploits, Sudo, SUID, Capabilities, Cron… | https://infosecwriteups.com/linux-privilege-escalation-practical-guide-to-kernel-exploits-sudo-suid-capabilities-cron-472cff83bd9b?source=rss------bug_bounty-5 | Bash Overflow | privilege-escalation, kernel-exploit, bug-bounty, linpeas, linux-priv-esc | 16-Nov-2025 |
| API 2 Web Challenge Writeup | https://medium.com/@Shatha511/api-2-web-challenge-writeup-ef1a195068b8?source=rss------bug_bounty-5 | Shatha511 | ctf, cybersecurity, bug-bounty | 16-Nov-2025 |
| How I Hacked an Account Using Reset Password Poisoning | https://gembie.medium.com/hi-everyone-its-nicole-franz-dizon-i-have-a-report-which-is-reset-password-poisoning-via-host-934f7e9b1bdc?source=rss------bug_bounty-5 | Nicole Franz Dizon | cybersecurity, bug-bounty | 16-Nov-2025 |
| My Beginner Journey into Cybersecurity and Bug Bounty | https://4o4npc00.medium.com/my-beginner-journey-into-cybersecurity-and-bug-bounty-01555bffe5ed?source=rss------bug_bounty-5 | NPC | beginner, cybersecurity, learning, bug-bounty, journey | 16-Nov-2025 |
| Burp Suite for Beginners: Quick & Simple Guide | https://medium.com/@MuhammedAsfan/burp-suite-for-beginners-quick-simple-guide-7c6908a82ba5?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | beginner, burpsuite, bug-bounty, cybersecurity | 16-Nov-2025 |
| Bug Turned into a Double Payout: The Azure Pipeline Variable Leak | https://vibhurushi-chotaliya.medium.com/bug-turned-into-a-double-payout-the-azure-pipeline-variable-leak-e4ff16719260?source=rss------bug_bounty-5 | Vibhurushi Chotaliya | ethical-hacking, security, software-development, bug-bounty | 16-Nov-2025 |
| API 1 Web Challenge Writeup | https://medium.com/@Shatha511/api-1-web-challenge-writeup-fec91d10fc67?source=rss------bug_bounty-5 | Shatha511 | api, ctf, cybersecurity, bug-bounty, writeup | 16-Nov-2025 |
| Five Bounties, One Bug: Exploiting the Same SSRF via Five Unique Techniques | https://medium.com/@oksuzkayra16/five-bounties-one-bug-exploiting-the-same-ssrf-via-five-unique-techniques-3f0adb7965d6?source=rss------bug_bounty-5 | Kayra Öksüz | bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup, bounty-program | 16-Nov-2025 |
| How My Custom IDOR Hunter Made Me $50k (And Saved My Clicking Finger) ️ | https://infosecwriteups.com/how-my-custom-idor-hunter-made-me-50k-and-saved-my-clicking-finger-%EF%B8%8F-c4fc5dc3b3d1?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, bug-bounty, cybersecurity, infosec, hacking | 16-Nov-2025 |
| How We Hacked inside e-commerce company: From Hidden Endpoints to Server Files: Our Full… | https://d0loreh4z3.medium.com/how-we-hacked-inside-e-commerce-company-from-hidden-endpoints-to-server-files-our-full-f274d10f5997?source=rss------bug_bounty-5 | D0loresH4ze | red-team, pentesting, bug-bounty-writeup, bug-bounty, penetration-testing | 16-Nov-2025 |
| ReconX — The Fastest All-in-One Reconnaissance Framework for Pentesters | https://medium.com/@divyanshusainialok/reconx-the-fastest-all-in-one-reconnaissance-framework-for-pentesters-f4145a4d92b1?source=rss------bug_bounty-5 | Divyanshu Saini | ethical-hacking, cybersecurity, penetration-testing, bug-bounty, open-source | 16-Nov-2025 |
| How a Single CSRF Vulnerability Can Lead to a Huge Bug Bounty — Full Breakdown + Complete… | https://medium.com/@zoningxtr/how-a-single-csrf-vulnerability-can-lead-to-a-huge-bug-bounty-full-breakdown-complete-5eee0d69a6ad?source=rss------bug_bounty-5 | Zoningxtr | python-programming, web-development, bug-bounty, cybersecurity, programming | 16-Nov-2025 |
| The Recon Playbook Every Hacker Uses (But No One Talks About)b | https://infosecwriteups.com/the-recon-playbook-every-hacker-uses-but-no-one-talks-about-b-4c4e0477fa5d?source=rss------bug_bounty-5 | iam_with_you11 | hacking, bug-bounty, ethical-hacking, reconnaissance, penetration-testing | 16-Nov-2025 |
| IDOR Part 3 — Automation & Bug Bounty Mastery | https://medium.com/@cybersecplayground/idor-part-3-automation-bug-bounty-mastery-e3524b9a8a34?source=rss------bug_bounty-5 | Cybersecplayground | bugbounty-writeup, idor-vulnerability, bug-bounty, idor, bug-bounty-tips | 16-Nov-2025 |
| How I Found a Critical IDOR Flaw in Minutes | https://medium.com/@ibtissam1/how-i-found-a-critical-idor-flaw-in-minutes-85ddf0648d99?source=rss------bug_bounty-5 | Ibtissam | bug-bounty, ethical-hacking, idor, web-security, infosec | 16-Nov-2025 |
| How I Bypassed Authentication on a Public Program Just by Changing One Word | https://d0loreh4z3.medium.com/how-i-bypassed-authentication-on-a-public-program-just-by-changing-one-word-53b6173b5feb?source=rss------bug_bounty-5 | D0loresH4ze | penetration-testing, bugbounty-tips, web-application-security, pentesting, bug-bounty | 16-Nov-2025 |
| Multi-Stage Web Exploitation Leading to Full System Compromise and Privilege Dominance | https://kizerh.medium.com/multi-stage-web-exploitation-leading-to-full-system-compromise-and-privilege-dominance-c0382c706111?source=rss------bug_bounty-5 | Kiza | ethical-hacking, bug-bounty, tryhackme, wordpress, web-application-security | 16-Nov-2025 |
| Python — Blind SSTI Filters Bypass | https://devnull-0.medium.com/python-blind-ssti-filters-bypass-9585f421db67?source=rss------bug_bounty-5 | Aderogbarufai | hacking, ctf, ctf-writeup, bug-bounty | 16-Nov-2025 |
| BOLA (IDOR): Critical API Authorization Flaw & Bug Bounty Detection | https://medium.com/@jpablo13/bola-idor-critical-api-authorization-flaw-bug-bounty-detection-3203133a5040?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, bug-bounty, hacking, technology, api | 15-Nov-2025 |
| API1:2023 BOLA (IDOR): Critical API Authorization Flaw & Bug Bounty Detection | https://systemweakness.com/bola-idor-critical-api-authorization-flaw-bug-bounty-detection-3203133a5040?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, bug-bounty, hacking, technology, api | 15-Nov-2025 |
| How I Got a Letter of Recognition from NASA (And How You Can Too) | https://medium.com/@philipgarabandic/how-i-got-a-letter-of-recognition-from-nasa-and-how-you-can-too-006f1b4c2649?source=rss------bug_bounty-5 | Philip Garabandic | nasa, web-security, security-research, bug-bounty, cybersecurity | 15-Nov-2025 |
| Master the Art of Writing Better Cybersecurity Reports with AI: Step-by-Step Guide for Pros | https://medium.com/@verylazytech/master-the-art-of-writing-better-cybersecurity-reports-with-ai-step-by-step-guide-for-pros-e273b75389ae?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, cybersecurity, bug-bounty, hacking, penetration-testing | 15-Nov-2025 |
| When Reading the Source Code Is the Real Hack: A Web Challenge Story | v1t CTF | https://infosecwriteups.com/when-reading-the-source-code-is-the-real-hack-a-web-challenge-story-v1t-ctf-b6adfcaa0fee?source=rss------bug_bounty-5 | Chetan Chinchulkar | ctf, ctf-writeup, web-exploitation, infosec, bug-bounty | 15-Nov-2025 |
| How Hackers Abuse Error Pages for Recon: Step-by-Step Guide for Pentesters & Bug Bounty Pros | https://medium.com/@verylazytech/how-hackers-abuse-error-pages-for-recon-step-by-step-guide-for-pentesters-bug-bounty-pros-cbe013b89f70?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, ethical-hacking, penetration-testing, cybersecurity, hacking | 15-Nov-2025 |
| Don’t Trust the Server: How Response Manipulation Exposed a Business Logic Flaw | https://medium.com/@yassentaalab51/dont-trust-the-server-how-response-manipulation-exposed-a-business-logic-flaw-8b554e36c6fe?source=rss------bug_bounty-5 | Killua199 | penetration-testing, bug-bounty, owasp, response-manipulation, cybersecurity | 15-Nov-2025 |
| Understanding Business Logic Vulnerabilities: A Real-World Guide for Security Researchers | https://medium.com/@MuhammedAsfan/understanding-business-logic-vulnerabilities-a-real-world-guide-for-security-researchers-d00f76957686?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | bug-bounty, cybersecurity, web-security | 15-Nov-2025 |
| How a Single SSRF Changed My Life: My Journey From Logistics Into Cybersecurity | https://medium.com/@jsll/how-a-single-ssrf-changed-my-life-my-journey-from-logistics-into-cybersecurity-e1eba7ff7ce1?source=rss------bug_bounty-5 | jsll | cybersecurity, research, web-security, bug-bounty, pentesting | 15-Nov-2025 |
| New Bug Hunters: This Is How You Land a Critical Find | https://medium.com/activated-thinker/new-bug-hunters-this-is-how-you-land-a-critical-find-eaaf71fae5f4?source=rss------bug_bounty-5 | Rehan Sohail | bug-bounty-writeup, bugbounty-writeup, bug-bounty-tips, activated-thinker, bug-bounty | 15-Nov-2025 |
| Unrestricted File Upload on /frontend-filemanager | https://medium.com/@hisyamraya9999/unrestricted-file-upload-on-frontend-filemanager-840868f693d9?source=rss------bug_bounty-5 | Hisyamraya | cve, poc, exploitation, bug-bounty, cybersecurity | 15-Nov-2025 |
| How to Test for IDOR: The Practical Methodology | https://z0h3.medium.com/how-to-test-for-idor-the-practical-methodology-fec3688febfb?source=rss------bug_bounty-5 | z0h3 | idor-vulnerability, bug-bounty-writeup, bug-bounty-tips, idor, bug-bounty | 15-Nov-2025 |
| Don’t Trust the Response : How Response Manipulation Exposed a Business Logic Flaw | https://medium.com/@yassentaalab51/dont-trust-the-server-how-response-manipulation-exposed-a-business-logic-flaw-8b554e36c6fe?source=rss------bug_bounty-5 | Killua199 | penetration-testing, bug-bounty, owasp, response-manipulation, cybersecurity | 15-Nov-2025 |
| DorkBounty: Supercharging Recon for Bug Bounty Hunters | https://infosecwriteups.com/dorkbounty-supercharging-recon-for-bug-bounty-hunters-68d985f9df9b?source=rss------bug_bounty-5 | Bytewreaker | bugs, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 15-Nov-2025 |
| Footprinting in Ethical Hacking: Your Complete OSINT Guide (Simple, Practical & Powerful) | https://medium.com/@Purushothamr/footprinting-in-ethical-hacking-your-complete-osint-guide-simple-practical-powerful-99b2de8f1974?source=rss------bug_bounty-5 | Purushotham.R | osint, red-team, blue-team, bug-bounty, footprinting | 15-Nov-2025 |
| Hijacking Reviews: IDOR is Everywhere | https://scriptjacker.medium.com/hijacking-reviews-idor-is-everywhere-32256f649cd5?source=rss------bug_bounty-5 | Parth Narula | bug-bounty-writeup, bug-bounty, scriptjacker, idor-vulnerability, idor | 15-Nov-2025 |
| 3 Recon Tricks + Advanced Pivots for Hidden Asset Discovery | https://metiryx.medium.com/3-recon-tricks-advanced-pivots-for-hidden-asset-discovery-daccdaa9e074?source=rss------bug_bounty-5 | Metiryx | web-development, infosec, hacking, bug-bounty, cybersecurity | 15-Nov-2025 |
| A Revolutionary Bug: How Accidentally Invented the “Informative” E-Commerce Experience | https://medium.com/meetcyber/a-revolutionary-bug-how-accidentally-invented-the-informative-e-commerce-experience-1882f3dfd1b5?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-tips, bug-zero, sarcasm, bug-bounty-writeup, bug-bounty | 15-Nov-2025 |
| I Built a Simple Script That Found Hidden Race Conditions | https://medium.com/@ibtissam1/i-built-a-simple-script-that-found-hidden-race-conditions-2a4c6366671c?source=rss------bug_bounty-5 | Ibtissam | hacking, infosec, bug-bounty, web-security, cybersecurity | 15-Nov-2025 |
| Unrestricted File Upload on /frontend-filemanager | https://medium.com/@hisyamraya/unrestricted-file-upload-on-frontend-filemanager-840868f693d9?source=rss------bug_bounty-5 | Hisyam Raya | cve, poc, exploitation, bug-bounty, cybersecurity | 15-Nov-2025 |
| BOLA (IDOR): La Falla Crítica de Autorización en APIs y Detección en Bug Bounty | https://medium.com/@jpablo13/bola-idor-la-falla-cr%C3%ADtica-de-autorizaci%C3%B3n-en-apis-y-detecci%C3%B3n-en-bug-bounty-3f50b58c3da9?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, api, hacking, technology, cybersecurity | 14-Nov-2025 |
| How I Became the #1 Security Researcher on the DHS Vulnerability Disclosure Program | https://medium.com/@philipgarabandic/how-i-became-the-1-security-researcher-on-the-dhs-vulnerability-disclosure-program-cf75da2b83be?source=rss------bug_bounty-5 | Philip Garabandic | cybersecurity, security-research, web-security, bug-bounty, software-development | 14-Nov-2025 |
| Introducing Ph.Sh_URL: Your New Go-To OSINT Tool for URL Discovery | https://medium.com/@PhilopaterSh/introducing-ph-sh-url-your-new-go-to-osint-tool-for-url-discovery-709f1036e56f?source=rss------bug_bounty-5 | Philopater Shenouda | infosec, penetration-testing, osint, cybersecurity, bug-bounty | 14-Nov-2025 |
| $6000 Bounty: Breakdown XSS Vulnerability | https://osintteam.blog/6000-bounty-breakdown-xss-vulnerability-e03f3f537c6d?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty, osint, technology, bug-bounty-tips | 14-Nov-2025 |
| $650 Bounty for a Beginner Friendly Bug: Blind XSS in Rockstar Games’ Admin Panel | https://osintteam.blog/650-bounty-for-a-beginner-friendly-bug-blind-xss-in-rockstar-games-admin-panel-3bfdf6a352b0?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, bug-bounty, technology, vulnerability, bug-bounty-writeup | 14-Nov-2025 |
| Information Disclosure in APIs | https://medium.com/@jungoskillet/information-disclosure-in-apis-e52825527ac8?source=rss------bug_bounty-5 | Jei Ess | hacking, api, cybersecurity, bug-bounty, web-development | 14-Nov-2025 |
| Cache Poisoning: How We Analyzed $44K in Bug Bounties | https://medium.com/@Aacle/cache-poisoning-how-we-analyzed-44k-in-bug-bounties-eda1107c779a?source=rss------bug_bounty-5 | Abhishek meena | pentest-tips, bug-bounty, penetration-testing, infosec, bug-bounty-tips | 14-Nov-2025 |
| How I found a critical 0-Click Account Takeover vulnerability | https://medium.com/@ibtissam1/how-i-found-a-critical-0-click-account-takeover-vulnerability-c2ac0f61f097?source=rss------bug_bounty-5 | Ibtissam | bug-bounty-tips, web-security, cybersecurity, infosec, bug-bounty | 14-Nov-2025 |
| How i Found My first IDOR On Heavily Tested Target | https://medium.com/@pawanparmarofficial45/how-i-found-my-first-idor-on-heavily-tested-target-ace3322824cc?source=rss------bug_bounty-5 | Pawan parmar | bug-bounty-writeup, bug-bounty, bug-hunter, infosec, bug-hunting | 14-Nov-2025 |
| When the Bug Bounty Platform Turns Against Its Own Hunters | https://cybersecuritywriteups.com/when-the-bug-bounty-platform-turns-against-its-own-hunters-3f5da87851ff?source=rss------bug_bounty-5 | Gl1tch | bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips, ethical-hacking | 14-Nov-2025 |
| Hidden Role, Full Takeover: How an Invite API Let Me Become an Organization Owner | https://medium.com/@0xm394tr0n/hidden-role-full-takeover-how-an-invite-api-let-me-become-an-organization-owner-86c9e55298e4?source=rss------bug_bounty-5 | MegaTron | hackerone, cybersecurity, bug-bounty, megatron | 14-Nov-2025 |
| The Silent ATO | https://medium.com/@omaroymdm/the-silent-ato-238edcda6dd0?source=rss------bug_bounty-5 | Omar Mahmoud | bug-bounty, cybersecurity, bugcrowd, hunting, account-takeover | 14-Nov-2025 |
| Business logic lead to Permanently Locked Any Email Out of Their Account | https://medium.com/@0xvar/business-logic-lead-to-permanently-locked-any-email-out-of-their-account-c6077f2cee59?source=rss------bug_bounty-5 | 0xbug | business-logic, account-takeover, logic-flaw, bug-bounty | 14-Nov-2025 |
| Master the Art of Writing Better Cybersecurity Reports with AI: Step-by-Step Guide for Pros | https://medium.com/@verylazytech/master-the-art-of-writing-better-cybersecurity-reports-with-ai-step-by-step-guide-for-pros-45393249dcf4?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, hacking, ethical-hacking, penetration-testing, bug-bounty | 14-Nov-2025 |
| Critical Broken Access Control: Public Tokens Enable Sensitive Actions | https://medium.com/@thomasyoussef/critical-broken-access-control-public-tokens-enable-sensitive-actions-ada4a5dad40a?source=rss------bug_bounty-5 | Thomas Youssef | bug-bounty, cybersecurity, broken-access-control | 14-Nov-2025 |
| How to Get Your First CVE as a Beginner | https://cyberhrsh.medium.com/how-to-get-your-first-cve-as-a-beginner-2d4122121ed4?source=rss------bug_bounty-5 | Harsh kothari | cve, technology, hacking, bug-bounty | 13-Nov-2025 |
| Improper Assets Management(Improper Inventory Management-2023) | https://medium.com/@jungoskillet/improper-assets-management-improper-inventory-management-2023-cf7f2790fa57?source=rss------bug_bounty-5 | Jei Ess | hacking, api, software-development, web-development, bug-bounty | 13-Nov-2025 |
| $4500 Local File Inclusion: The Tiny Parameter That Exposed an Entire Infrastructure | https://medium.com/@cyberknight/4500-local-file-inclusion-the-tiny-parameter-that-exposed-an-entire-infrastructure-74f7d3cc669c?source=rss------bug_bounty-5 | Swapnil Ade | cybersecurity, lfi-vulnerability, application-security, bug-bounty | 13-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-142) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-142-c4d72c123c57?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty, hacking, cybersecurity, bug-bounty-tips | 13-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-141) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-141-d4dec569e264?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty, cybersecurity, ethical-hacking, bug-bounty-tips | 13-Nov-2025 |
| My First Bug Bounty Experience | https://medium.com/data-and-beyond/my-first-bug-bounty-experience-9897db5c3076?source=rss------bug_bounty-5 | Abdullah Javeed | bug-bounty, technology, cybersecurity, hacking, programming | 13-Nov-2025 |
| Privilege Escalation via GraphQL: Editors Can Become Owners Through the “Share” Flow | https://medium.com/@B14ck/privilege-escalation-via-graphql-editors-can-become-owners-through-the-share-flow-b67782b98804?source=rss------bug_bounty-5 | black | web-security, hacking, bug-bounty, bug-bounty-writeup, graphql | 13-Nov-2025 |
| Craft Your Own CSP: A Head of Security’s Guide to Locking Down Your Website | https://ladecruze.medium.com/craft-your-own-csp-a-head-of-securitys-guide-to-locking-down-your-website-cf207d1d50d9?source=rss------bug_bounty-5 | Ladecruze | security, csp, cybersecurity, bug-bounty, software-development | 13-Nov-2025 |
| Bypassing Authentication in a Major API Gateway: A Path Normalization Story | https://medium.com/@dipanshuchhanikar/bypassing-authentication-in-a-major-api-gateway-a-path-normalization-story-5f1bea6d3f08?source=rss------bug_bounty-5 | Dipanshu Chhanikar | api-security, path-normalization, cybersecurity, bug-bounty, authentication-bypass | 13-Nov-2025 |
| Reverse-Engineering Upload Names to Win an IDOR Bug | https://medium.com/@kazixabbir/reverse-engineering-upload-names-to-win-an-idor-bug-296f7e068c1a?source=rss------bug_bounty-5 | Kazi Sabbir | bug-bounty-writeup, idor, cybersecurity, ethical-hacking, bug-bounty | 13-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-143) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-143-89516bc6830d?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty, bug-bounty-tips, hacking, ethical-hacking | 13-Nov-2025 |
| Master the Psychology Behind Phishing Success: Learn How Attackers Really Hack Humans | https://medium.com/@verylazytech/master-the-psychology-behind-phishing-success-learn-how-attackers-really-hack-humans-154727c0518e?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, cybersecurity, hacking, penetration-testing | 13-Nov-2025 |
| How I Turned a Boring Image Downloader into an IDOR Goldmine | https://medium.com/@iamshafayat/how-i-turned-a-boring-image-downloader-into-an-idor-goldmine-77a77d8c6c05?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | idor, bug-bounty, ethical-hacking, cybersecurity, bug-bounty-writeup | 13-Nov-2025 |
| CYBER KALKI Medium account suspended | https://medium.com/@hackercyberkalki/cyber-kalki-medium-account-suspended-c49fe61c8dc7?source=rss------bug_bounty-5 | Cyber Kalki | bug-bounty, bug-bounty-writeup, info-sec-writeups, cybersecurity, red-team | 13-Nov-2025 |
| Reflected XSS in PUBG | https://infosecwriteups.com/reflected-xss-in-pubg-7cee89243268?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-writeup, bug-bounty, infosec, vulnerability, bug-bounty-tips | 13-Nov-2025 |
| How to Choose the Right Bug Bounty Program: A Complete Guide for Ethical Hackers | https://medium.com/@MuhammedAsfan/how-to-choose-the-right-bug-bounty-program-a-complete-guide-for-ethical-hackers-72f52e16e360?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | bug-bounty, beginners-guide, ethical-hacking, scopes, cybersecurity | 13-Nov-2025 |
| Dc:7 Vulnhub Walkthrough | https://medium.com/@xploitmaster88/dc-7-vulnhub-walkthrough-39aa91a66a41?source=rss------bug_bounty-5 | Ankit Dhaka | ethical-hacking, infosec, dc7-vulnhub, bug-bounty, infosec-write-ups | 13-Nov-2025 |
| How I Found a Reflected XSS Using ParamSpider & Kxss | https://medium.com/@metwallysec/how-i-found-a-reflected-xss-using-paramspider-kxss-37a6b3e09ec8?source=rss------bug_bounty-5 | mohamed metwally | cybersecurity, bug-bounty-tips, hacking, xss-attack, bug-bounty | 13-Nov-2025 |
| When Among Us Meets Academia: An OSINT Challenge That’s Not Sus At All | v1t CTF OSINT Challenge | https://infosecwriteups.com/when-among-us-meets-academia-an-osint-challenge-thats-not-sus-at-all-v1t-ctf-osint-challenge-00bba5775179?source=rss------bug_bounty-5 | Chetan Chinchulkar | infosec, ctf, osint, ctf-writeup, bug-bounty | 13-Nov-2025 |
| How I Found a 0-Click Flaw That Compromised Any Account | https://medium.com/@ibtissam1/how-i-found-a-0-click-flaw-that-compromised-any-account-81863568d340?source=rss------bug_bounty-5 | Ibtissam | ethical-hacking, vulnerability, bug-bounty, web-security, cybersecurity | 13-Nov-2025 |
| How to Find P1 Bugs using Google in your Target — (Part-2) | https://infosecwriteups.com/how-to-find-p1-bugs-using-google-in-your-target-part-2-d37a9bb0b2e7?source=rss------bug_bounty-5 | RivuDon | bug-bounty, bug-hunting, bug-bounty-writeup, bug-bounty-tips, infosec | 13-Nov-2025 |
| I Could Change Anyone’s Email Preferences — Without Logging In | https://infosecwriteups.com/i-could-change-anyones-email-preferences-without-logging-in-dc228b541ef9?source=rss------bug_bounty-5 | Munna✨ | application-security, bug-bounty, cybersecurity, hacking, inspiration | 13-Nov-2025 |
| How I Found a Backdoor in Their AI’s Brain (And It Was Someone Else’s Fault) | https://cybersecuritywriteups.com/how-i-found-a-backdoor-in-their-ais-brain-and-it-was-someone-else-s-fault-7f455ab5cd16?source=rss------bug_bounty-5 | Iski | hacking, infosec, cybersecurity, bug-bounty-tips, bug-bounty | 13-Nov-2025 |
| From Private Islands to Private Servers: The Infamous Data Trafficker Jobert Epstein & “The List” | https://medium.com/@justas_b1/from-private-islands-to-private-servers-the-infamous-data-trafficker-jobert-epstein-the-list-eba817f8f105?source=rss------bug_bounty-5 | Justas_b | bug-bounty, cybersecurity, donald-trump, true-crime, infosec | 13-Nov-2025 |
| The Best AI for Ethical Hacking | https://systemweakness.com/the-best-ai-for-ethical-hacking-911c92de3b37?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty-tips, bug-bounty, ai, cybersecurity, bug-bounty-writeup | 13-Nov-2025 |
| Please Stop waste your time for reporting a false security vulnerabilities used AI! | https://pwn0sec.medium.com/please-stop-waste-your-time-for-reporting-a-false-security-vulnerabilities-used-ai-09243aba8af1?source=rss------bug_bounty-5 | Kocheengtom | bug-bounty, script-kiddie, indonesian, bug-bounty-tips | 13-Nov-2025 |
| The Bug I Found Twice On Microsoft | https://sudoaman.medium.com/the-bug-i-found-twice-on-microsoft-bfd23a58d5c1?source=rss------bug_bounty-5 | ak | bug-bounty, ethical-hacking, root-cause-analysis, microsoft, web-security | 13-Nov-2025 |
| The Bug I Found Twice On Microsoft | https://blog.leetsec.in/the-bug-i-found-twice-on-microsoft-bfd23a58d5c1?source=rss------bug_bounty-5 | ak | bug-bounty, ethical-hacking, root-cause-analysis, microsoft, web-security | 13-Nov-2025 |
| Vulnerabilities in GraphQL API: Exploitation, Discovery, and Mitigation Guide | https://medium.com/meetcyber/vulnerabilities-in-graphql-api-exploitation-discovery-and-mitigation-guide-fd36cbbe0309?source=rss------bug_bounty-5 | JPablo13 | graphql, technology, bug-bounty, hacking, cybersecurity | 12-Nov-2025 |
| Email = Token = Broken Auth in Booking System | https://medium.com/@mohamedahmeds1029/email-token-broken-auth-in-booking-system-b54a7f5d7a52?source=rss------bug_bounty-5 | AZIMA | bug-bounty, bug-bounty-writeup, authentication, api-security, web-security | 12-Nov-2025 |
| The Rust Bug That Lived in My Code for 3 Days — and the One Trick That Finally Killed It | https://medium.com/@kedarbpatil07/the-rust-bug-that-lived-in-my-code-for-3-days-and-the-one-trick-that-finally-killed-it-e98668df30c2?source=rss------bug_bounty-5 | Kedar's CS Insight | coding, rust, bug-bounty, software-development, programming | 12-Nov-2025 |
| How a Blue Team Saved a Company in 3 Hours: A Step-by-Step Real Incident Guide | https://medium.com/@verylazytech/how-a-blue-team-saved-a-company-in-3-hours-a-step-by-step-real-incident-guide-b65915e34594?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, bug-bounty, cybersecurity, hacking, ethical-hacking | 12-Nov-2025 |
| Be careful — I could steal your identity | Business logic bug | https://medium.com/@kroush333/be-careful-i-could-steal-your-identity-business-logic-bug-76c1d83868dc?source=rss------bug_bounty-5 | MahmoudKroush | cybersecurity, hackerone, business-logic, bug-bounty, bugbounty-writeup | 12-Nov-2025 |
| The Hidden Cost of API Security Misconfigurations (and How to Avoid Them) | https://medium.com/@jungoskillet/security-misconfigurations-f132701315fd?source=rss------bug_bounty-5 | Jei Ess | bug-bounty, web-development, hacking, cybersecurity, api | 12-Nov-2025 |
| Business Logic Flaw: How an Empty Team Name Can Trap Users Forever | https://medium.com/@aminouji23/business-logic-flaw-how-an-empty-team-name-can-trap-users-forever-fb9152acb990?source=rss------bug_bounty-5 | Aminouji | infosec, business-logic-bug, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 12-Nov-2025 |
| How I Mastered Logic Bugs With One Simple Checklist | https://medium.com/@ibtissam1/how-i-mastered-logic-bugs-with-one-simple-checklist-fa94721601f0?source=rss------bug_bounty-5 | Ibtissam | bug-bounty, reconnaissance, cybersecurity, infosec, ethical-hacking | 12-Nov-2025 |
| Vulnerabilities in GraphQL API: Exploitation, Discovery, and Mitigation Guide | https://systemweakness.com/vulnerabilities-in-graphql-api-exploitation-discovery-and-mitigation-guide-fd36cbbe0309?source=rss------bug_bounty-5 | JPablo13 | graphql, technology, bug-bounty, hacking, cybersecurity | 12-Nov-2025 |
| How I Found a $$$ Bounty: Exposed SDK License Key | https://medium.com/@AbdelRhman_Sabry/how-i-found-a-bounty-exposed-sdk-license-key-81f8c3f6c5bf?source=rss------bug_bounty-5 | AbdelRhman_Sabry | bug-bounty-tips, bug-bounty, information-disclosure | 12-Nov-2025 |
| Ransomware vs Malware Explained — How They Work and How to Stay Safe | https://medium.com/@natarajanck2/ransomware-vs-malware-explained-how-they-work-and-how-to-stay-safe-c931a7ee41da?source=rss------bug_bounty-5 | Natarajan C K | malware, bug-bounty, ransomeware, cybersecurity, security | 12-Nov-2025 |
| How a Simple 401 Error Revealed the Keys to the Kingdom | https://medium.com/@Mayowaomolabi/how-a-simple-401-error-revealed-the-keys-to-the-kingdom-880ad7b35353?source=rss------bug_bounty-5 | Mayowa omolabi | bug-bounty, offensive-security, penetration-testing, ethical-hacking, red-team | 12-Nov-2025 |
| The Cache Poisoning Bible: Part 2 — Exotic Header Exploitation | https://medium.com/@Aacle/the-cache-poisoning-bible-part-2-exotic-header-exploitation-d074746690cb?source=rss------bug_bounty-5 | Abhishek meena | penetration-testing, infosec, owasp, bug-bounty-tips, bug-bounty | 12-Nov-2025 |
| Mistakes That I Made Before I Got My First Bounty | https://medium.com/@silentcipher420/mistakes-that-i-made-before-i-got-my-first-bounty-5d460eae31b6?source=rss------bug_bounty-5 | Silent Cipher | cybersecurity, roadmaps, ethical-hacking, bug-bounty, hacking | 12-Nov-2025 |
| How We Made $67,000+ Using The New “E/B” Attack Vector — And Other Bug Bounty Tips | https://medium.com/@justas_b1/how-we-made-67-000-using-the-new-e-b-attack-vector-and-other-bug-bounty-tips-753ebf8ab54b?source=rss------bug_bounty-5 | Justas_b | bug-bounty, case-study, cybersecurity, infosec, cyber-security-awareness | 12-Nov-2025 |
| This Google Dorking Trick can get you $5000 Bounty [No Cap] | https://medium.com/@prayerskhristi/this-google-dorking-trick-can-get-you-5000-bounty-no-cap-da03a3c36355?source=rss------bug_bounty-5 | Prayers Khristi | cybersecurity, bug-bounty, security, google, bug-bounty-tips | 12-Nov-2025 |
| Vulnerabilidades en GraphQL API: Guía de Explotación, Descubrimiento y Mitigación | https://medium.com/@jpablo13/vulnerabilidades-en-graphql-api-gu%C3%ADa-de-explotaci%C3%B3n-descubrimiento-y-mitigaci%C3%B3n-1ea376ba4455?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, web-development, bug-bounty, technology, hacking | 11-Nov-2025 |
| How I Turned a Failed “Race Condition” into a $ Bug Bounty Win | https://medium.com/@UrsaBear/how-i-turned-a-failed-race-condition-into-a-bug-bounty-win-647143a83cdd?source=rss------bug_bounty-5 | UrsaBear | bug-bounty, hacking, vulnerability, bug-bounty-writeup, race-condition | 11-Nov-2025 |
| CORS Vulnerability with Trusted Insecure Protocols | https://infosecwriteups.com/cors-vulnerability-with-trusted-insecure-protocols-82ba36766c07?source=rss------bug_bounty-5 | Bash Overflow | cors-misconfiguration, cors-vulnerability, cors-bypass, bug-bounty, cors-exploit | 11-Nov-2025 |
| Behind the Scenes of a CTF Exploit Walkthrough: Master the Art of Real-World Pentesting | https://medium.com/@verylazytech/behind-the-scenes-of-a-ctf-exploit-walkthrough-master-the-art-of-real-world-pentesting-e0283d9f185e?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, penetration-testing, ethical-hacking, bug-bounty, cybersecurity | 11-Nov-2025 |
| API Mass Assignment Explained | https://medium.com/@jungoskillet/api-mass-assignment-explained-e16c27088d6f?source=rss------bug_bounty-5 | Jei Ess | web-development, bug-bounty, software-development, api, hacking | 11-Nov-2025 |
| SSH Isn’t Just a Service: How Outdated Daemons Create Unseen Backdoors | https://medium.com/@bishopx_09/ssh-isnt-just-a-service-how-outdated-daemons-create-unseen-backdoors-58ac0f47eaa9?source=rss------bug_bounty-5 | bishopx_09 | cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips, bugs | 11-Nov-2025 |
| 0-Click Account Takeover Using Special Characters ✔ | https://medium.com/@mahdisalhi0500/0-click-account-takeover-using-special-characters-0030a1e3c6d6?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, bug-bounty, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 11-Nov-2025 |
| Stealer Logs Today: Is Your Domain in the Latest Dumps? | https://medium.com/@alexandrevandammepro/stealer-logs-today-is-your-domain-in-the-latest-dumps-b153505d5910?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, data-breach, threat-intelligence, bug-bounty, cybersecurity | 11-Nov-2025 |
| An interesting duplicate: open redirect I found while bug hunting | https://medium.com/@offsec12/an-interesting-duplicate-open-redirect-i-found-while-bug-hunting-456ee30723b8?source=rss------bug_bounty-5 | Diman | bug-bounty, money, cybersecurity, technology, web-development | 11-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-140) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-140-0944b1616a29?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, cybersecurity, hacking, ethical-hacking, bug-bounty | 11-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-139) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-139-6a8a0ec5b080?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, hacking, ethical-hacking, cybersecurity, bug-bounty-tips | 11-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-138) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-138-002300cac8c8?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty, hacking, bug-bounty-tips, ethical-hacking | 11-Nov-2025 |
| 5 Practical Kali Linux Projects Every Cybersecurity Student Should Try (2025 Edition) | https://medium.com/@AbuBakarHasan/5-practical-kali-linux-projects-every-cybersecurity-student-should-try-2025-edition-64135184b172?source=rss------bug_bounty-5 | Abu bakar | security, cybersecurity, bug-bounty, linux, ethical-hacking | 11-Nov-2025 |
| When a Bug Turned Into My Best Learning Experience as a Developer | https://medium.com/activated-thinker/when-a-bug-turned-into-my-best-learning-experience-as-a-developer-f278b65976e9?source=rss------bug_bounty-5 | Abdullah Javeed | programming, bug-bounty, learning-to-code, javascript, technology | 11-Nov-2025 |
| A Story of a Slowloris DoS — the coolest DoS Attack | https://medium.com/@Appsec_pt/a-story-of-a-slowloris-dos-the-coolest-dos-attack-9279442ed89a?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty-tips, programming, cybersecurity, bug-bounty, bug-bounty-writeup | 11-Nov-2025 |
| postMessage` XSS: It’s Like Passing Secret Notes in Class… But the Whole School Can Read Them**… | https://medium.com/@shadyfarouk1986/postmessage-xss-its-like-passing-secret-notes-in-class-but-the-whole-school-can-read-them-842c113b61dc?source=rss------bug_bounty-5 | Shady Farouk | xss-attack, bug-bounty, pentesting, vulnerability | 11-Nov-2025 |
| CyCTF25 Qualifications — Vault Raider, Mobile Challenge Writeup | https://mohammadibnibrahim.medium.com/cyctf25-qualifications-vault-raider-mobile-challenge-writeup-998f38aa3e75?source=rss------bug_bounty-5 | محمد بن إبراهيم | penetration-testing, ctf, bug-bounty, hacking, cybersecurity | 11-Nov-2025 |
| When Six Zeros Broke a Food Delivery Empire | https://0dayscyber.medium.com/when-six-zeros-broke-a-food-delivery-empire-1b4a5cf5405b?source=rss------bug_bounty-5 | Jackson Mittag | bug-bounty-tips, 2fa-bypass, bug-bounty-writeup, bug-bounty | 11-Nov-2025 |
| How I turned a “Not Applicable” RXSS into an “Accepted” finding on a European HR Giant. | https://medium.com/@l0rdv0ld3m0r7/how-i-turned-a-not-applicable-rxss-into-an-accepted-finding-on-a-european-hr-giant-6f9bff1f07c4?source=rss------bug_bounty-5 | Jorge Taylor | web-application-security, bug-bounty, pentesting, cybersecurity, security-research | 11-Nov-2025 |
| How I found Vulnerability on Google Forms (Duplicate Internal — Fixed) | https://medium.com/@ecdnts/how-i-found-vulnerability-on-google-forms-duplicate-internal-fixed-d02aa2e6357c?source=rss------bug_bounty-5 | 171.32 | cybersecurity, google-vrp, bug-bounty, google, cloud | 10-Nov-2025 |
| BugBounty Fraud by cm.com | https://medium.com/@krivadna/bugbounty-fraud-by-cm-com-f9a942f37c9d?source=rss------bug_bounty-5 | Krivadna | penetration-testing, infosec, bugbounty-writeup, cybersecurity, bug-bounty | 10-Nov-2025 |
| NASA.com Full Origin Takeover Chain: WEBVPN RSA+SAML + SSO+VNC + MARS+DSN+CMD + 25 Hidden Portals… | https://medium.com/@krivadna/nasa-com-full-origin-takeover-chain-webvpn-rsa-saml-sso-vnc-mars-dsn-cmd-25-hidden-portals-d412e0fa5ce1?source=rss------bug_bounty-5 | Krivadna | penetration-testing, bug-bounty, cybersecurity, infosec, bugbounty-writeup | 10-Nov-2025 |
| Mastering EDR Evasion: Learn Bypassing EDR with Simple Bash Tricks That Actually Work | https://medium.com/@verylazytech/mastering-edr-evasion-learn-bypassing-edr-with-simple-bash-tricks-that-actually-work-68f761ba2d20?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, cybersecurity, bug-bounty, penetration-testing, ethical-hacking | 10-Nov-2025 |
| Bug Bounties 101: 5 Platforms That Deliver | https://medium.com/@Modexa/bug-bounties-101-5-platforms-that-deliver-cb10ede3f6d0?source=rss------bug_bounty-5 | Modexa | appsec, cybersecurity, vulnerability-management, ethical-hacking, bug-bounty | 10-Nov-2025 |
| Bug Hunting : Walking the Path of IDORs | https://medium.com/@hello.chris001/bug-hunting-walking-the-path-of-idors-a6b86ffdfa1f?source=rss------bug_bounty-5 | Hello Chris | bug-bounty, idor, ethical-hacking, cybersecurity | 10-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-137) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-137-7974b05e547e?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty, hacking, bug-bounty-tips, cybersecurity | 10-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-136) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-136-1e7aa4f660e3?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty-tips, ethical-hacking, cybersecurity, bug-bounty | 10-Nov-2025 |
| BOuBug Bounty Hunting — Complete Guide (Part-135) | https://medium.com/@rafid19/boubug-bounty-hunting-complete-guide-part-135-3f615fedc2eb?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, cybersecurity, hacking, ethical-hacking, bug-bounty | 10-Nov-2025 |
| When GPTs Call Home: Exploiting SSRF in ChatGPT’s Custom Actions | https://sirleeroyjenkins.medium.com/when-gpts-call-home-exploiting-ssrf-in-chatgpts-custom-actions-5df9df27dbe9?source=rss------bug_bounty-5 | SirLeeroyJenkins | openai, gpt, bug-bounty, ssrf, chatgpt | 10-Nov-2025 |
| How I Found NASA’s Hidden VPN Origin IP Without a Firewall — And They Patched It in Silence | https://medium.com/@krivadna/how-i-found-nasas-hidden-vpn-origin-ip-without-a-firewall-and-they-patched-it-in-silence-3d517e0b6426?source=rss------bug_bounty-5 | Krivadna | cybersecurity, bugbounty-writeup, penetration-testing, bug-bounty, infosec | 10-Nov-2025 |
| The Cache Poisoning Bible: Part 1 — Advanced Fundamentals | https://medium.com/@Aacle/the-cache-poisoning-bible-part-1-advanced-fundamentals-2c8e9d7be2e9?source=rss------bug_bounty-5 | Abhishek meena | infosec, bugbounty-writeup, bug-bounty, bug-bounty-tips, penetration-testing | 10-Nov-2025 |
| How I Built an AI Test Agent That Runs Playwright Tests Based on Jira Bug Reports | https://skakarh.medium.com/how-i-built-an-ai-test-agent-that-runs-playwright-tests-based-on-jira-bug-reports-02b8b259c8d3?source=rss------bug_bounty-5 | Shahnawaz Khan | jira, bug-bounty, test-automation, software-testing, playwright-test | 10-Nov-2025 |
| Bug Hunting : Walking the Path of IDORs | https://medium.com/linux-diary/bug-hunting-walking-the-path-of-idors-a6b86ffdfa1f?source=rss------bug_bounty-5 | Hello Chris | bug-bounty, idor, ethical-hacking, cybersecurity | 10-Nov-2025 |
| The macOS Microkernel | IPC Message Basics for Injections | https://medium.com/@RandomFlawsFinder/the-macos-microkernel-ipc-message-basics-for-injections-f358dde99926?source=rss------bug_bounty-5 | RandomFlawsFinder | programming, hacking, cybersecurity, macos, bug-bounty | 10-Nov-2025 |
| SSH Isn’t Just a Service — It’s a Backdoor | https://medium.com/@samuelayomip2009/ssh-isnt-just-a-service-it-s-a-backdoor-88d579f4b798?source=rss------bug_bounty-5 | bishopx_09 | bug-bounty, bugs, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 10-Nov-2025 |
| How I Unlocked Enterprise Features with One Parameter — and Earned $947 | https://medium.com/@ferdusalam0/how-i-unlocked-enterprise-features-with-one-parameter-and-earned-947-7a0fef6b2ad0?source=rss------bug_bounty-5 | Ferdus Alam | bug-bounty, bug-bounty-tips, bugs, bug-zero, bugbounty-writeup | 10-Nov-2025 |
| The macOS Microkernel | IPC Message for Injections | https://medium.com/@RandomFlawsFinder/the-macos-microkernel-ipc-message-basics-for-injections-f358dde99926?source=rss------bug_bounty-5 | RandomFlawsFinder | programming, hacking, cybersecurity, macos, bug-bounty | 10-Nov-2025 |
| When GPTs Call Home: Exploiting SSRF in ChatGPT’s Custom Actions | https://sirleeroyjenkins.medium.com/when-gpts-call-home-exploiting-ssrf-in-chatgpts-custom-actions-5df9df27dbe9?source=rss------bug_bounty-5 | SirLeeroyJenkins | bug-bounty-tips, bug-bounty, ai, cybersecurity, chatgpt | 10-Nov-2025 |
| The Hunt for a WAF Bypass: A Bug Bounty Story | https://0dayscyber.medium.com/the-hunt-for-a-waf-bypass-a-bug-bounty-story-0aebb17685da?source=rss------bug_bounty-5 | Jackson Mittag | bug-bounty-tips, xss-bypass, bug-bounty-writeup, bug-bounty, xss-vulnerability | 10-Nov-2025 |
| One Cookie to Steal Them All: A Story of IDOR | https://scriptjacker.medium.com/one-cookie-to-steal-them-all-a-story-of-idor-f99870c3a683?source=rss------bug_bounty-5 | Parth Narula | idor, idor-vulnerability, bug-bounty, sessions, vulnerability | 10-Nov-2025 |
| Information Disclosure: Hardcoded Encryption Keys | https://medium.com/@sudosu01/information-disclosure-hardcoded-encryption-keys-fc375abf68a3?source=rss------bug_bounty-5 | Umanhonlen Gabriel | bugs, bugbounty-writeup, bug-bounty | 10-Nov-2025 |
| XSSniper Masterclass Bypass WAFs and Find XSS (for bug bounty) | https://0dayscyber.medium.com/xssniper-masterclass-bypass-wafs-and-find-xss-for-bug-bounty-e2f045b50752?source=rss------bug_bounty-5 | Jackson Mittag | ethical-hacking, bug-bounty, waf-bypass, xss-attack | 09-Nov-2025 |
| SSRF via filename -> PDF Extractor (via SMTP), detailed shi- write-up | https://medium.com/@zatikyan.sevada/ssrf-via-filename-pdf-extractor-via-smtp-detailed-shi-write-up-f494d320fa75?source=rss------bug_bounty-5 | Sevada797 | hacking, ssrf, owasp, cybersecurity, bug-bounty | 09-Nov-2025 |
| New Idea: Use AI to Become a Smarter, Faster Bug-Bounty Hunter — A Practical Guide | https://medium.com/@xmxa-tech/new-idea-use-ai-to-become-a-smarter-faster-bug-bounty-hunter-a-practical-guide-785e26e0c6a7?source=rss------bug_bounty-5 | Monu Jangra | technology, ai, cybersecurity, life, bug-bounty | 09-Nov-2025 |
| The Most Overlooked Bug Bounty Misconfiguration (Add This To Your Checklist) | https://medium.com/activated-thinker/the-most-overlooked-bug-bounty-misconfiguration-add-this-to-your-checklist-448cce763beb?source=rss------bug_bounty-5 | Rehan Sohail | bug-bounty-hunter, bug-bounty-tips, bug-bounty, activated-thinker, bug-bounty-writeup | 09-Nov-2025 |
| Get Paid: Your First Bug Bounty | https://medium.com/@cocopelly255/get-paid-your-first-bug-bounty-6a0c52837408?source=rss------bug_bounty-5 | ToxSec | bug-bounty, cybersecurity, tech | 09-Nov-2025 |
| LFI to RCE: Mastering the Step-by-Step Path from File Inclusion to Full Shell Access | https://medium.com/@verylazytech/lfi-to-rce-mastering-the-step-by-step-path-from-file-inclusion-to-full-shell-access-634c577056e2?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, penetration-testing, bug-bounty, cybersecurity, ethical-hacking | 09-Nov-2025 |
| My Cybersecurity Journey — day 1–11/8/25 | https://medium.com/@cliffetond/my-cybersecurity-journey-day-1-11-8-25-814e41143162?source=rss------bug_bounty-5 | Cliffetond | cybersecurity, bug-bounty | 09-Nov-2025 |
| How a Simple SVG File Turned Into a Data Exfiltration Vector in an Invoice System | https://medium.com/@bytewreaker/how-a-simple-svg-file-turned-into-a-data-exfiltration-vector-in-an-invoice-system-8cc78bedd1a8?source=rss------bug_bounty-5 | Bytewreaker | bugs, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 09-Nov-2025 |
| Top Advanced XSS Payloads That Still Work in 2025 | https://medium.com/@xmxa-tech/top-advanced-xss-payloads-that-still-work-in-2025-58f11191df8f?source=rss------bug_bounty-5 | Monu Jangra | xss-attack, bug-bounty, writing, cybersecurity, technology | 09-Nov-2025 |
| From 404 to $4,000: Real Bugs Found in Forgotten Endpoints | https://infosecwriteups.com/from-404-to-4-000-real-bugs-found-in-forgotten-endpoints-5886c06f7473?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty-tips, bug-bounty-writeup, technology, bug-bounty | 09-Nov-2025 |
| How I found SSTI into an AI model due to unsafe argument | https://infosecwriteups.com/how-i-found-ssti-into-an-ai-model-due-to-unsafe-argument-4a44cadcd985?source=rss------bug_bounty-5 | JEETPAL | ai-model, bug-bounty, ssti, bug-bounty-writeup, cybersecurity | 09-Nov-2025 |
| JAuth picoCTF | https://devnull-0.medium.com/jauth-picoctf-3325e62c4321?source=rss------bug_bounty-5 | Aderogbarufai | picoctf, bug-bounty, ctf-writeup, jwt-authentication | 09-Nov-2025 |
| From Wooden Ducks to Digital Flags: My First v1t CTF OSINT Challenge | https://infosecwriteups.com/from-wooden-ducks-to-digital-flags-my-first-v1t-ctf-osint-challenge-84c38c9fbcb8?source=rss------bug_bounty-5 | Chetan Chinchulkar | ctf, bug-bounty, osint, infosec, cybersecurity | 09-Nov-2025 |
| Time-of-check Time-of-use (TOCTOU) Race Condition Leads to Broken Authentication | Critical Finding | https://infosecwriteups.com/time-of-check-time-of-use-toctou-race-condition-leads-to-broken-authentication-critical-finding-b55993c92abc?source=rss------bug_bounty-5 | Irsyad Muhammad Fawwaz | infosec, security, cybersecurity, bug-bounty, information-security | 09-Nov-2025 |
| IDOR is simple right?…. Right? | https://medium.com/@silentcipher420/idor-is-simple-right-right-2a2b08773b9c?source=rss------bug_bounty-5 | Silent Cipher | idor, ethical-hacking, bug-bounty, cybersecurity, hacking | 09-Nov-2025 |
| Unlocking the Hacker’s Arsenal: A Deep Dive into the IHA089 Cybersecurity Toolkit (2025) | https://medium.com/@nktechinfo31/unlocking-the-hackers-arsenal-a-deep-dive-into-the-iha089-cybersecurity-toolkit-2025-578463e76a63?source=rss------bug_bounty-5 | Nktechinfo | ethical-hacking, information-security, technology, cybersecurity, bug-bounty | 09-Nov-2025 |
| OWASP Top 10 2025 in a Nutshell | https://medium.com/@P4RAD0X/owasp-top-10-2025-in-a-nutshell-bbfceed91eb2?source=rss------bug_bounty-5 | PARADOX | hacking, penetration-testing, cybersecurity, software-development, bug-bounty | 09-Nov-2025 |
| Full Attack Chain: How Chained IDORs on Thrive Global Exposed Confidential Employee Wellness data | https://pandyamayurrr.medium.com/full-attack-chain-how-chained-idors-on-thrive-global-exposed-confidential-employee-wellness-data-30a657ba550d?source=rss------bug_bounty-5 | Mayur Pandya | idor, api-security, bug-bounty-tips, bug-bounty, graphql | 09-Nov-2025 |
| Is BurpAI Going to Replace Pentesters? | https://medium.com/@Aacle/is-burpai-going-to-replace-pentesters-1ac8856ee693?source=rss------bug_bounty-5 | Abhishek meena | bug-bounty, penetration-testing, infosec, vulncure, hacking | 09-Nov-2025 |
| Should Beginners Hack on Vdps? | https://medium.com/activated-thinker/should-beginners-hack-on-vdps-5f62a4d6dd20?source=rss------bug_bounty-5 | Rehan Sohail | bug-bounty-writeup, bug-bounty-hunter, bug-bounty, activated-thinker, bounty-program | 09-Nov-2025 |
| OWASP Top 10 in Ten Minutes! | https://infosecwriteups.com/owasp-top-10-in-ten-minutes-a6ef1efd1efa?source=rss------bug_bounty-5 | hackerdevil | owasp, hacking, bug-bounty, security, owasp-top-10 | 09-Nov-2025 |
| Persistent Session Validity After Password Change | https://medium.com/@0xMo7areb/persistent-session-validity-after-password-change-59f7f70ef92f?source=rss------bug_bounty-5 | 0xMo7areb | bug-bounty, vulnerability, penetration-testing, bugs, cybersecurity | 09-Nov-2025 |
| TryHackMe | Red Team Engagements Write-up | https://cyberleelawat.medium.com/tryhackme-red-team-engagements-write-up-16062aed3af3?source=rss------bug_bounty-5 | Virendra Kumar | tryhackme-walkthrough, tryhackme-writeup, ethical-hacking, tryhackme, bug-bounty | 09-Nov-2025 |
| S3 Bucket Takeover, The Hidden Trap in the Cloud | https://icecream23.medium.com/s3-bucket-takeover-the-hidden-trap-in-the-cloud-afc013675504?source=rss------bug_bounty-5 | Aman Bhuiyan | ethical-hacking, cloud-security, cybersecurity, aws, bug-bounty | 09-Nov-2025 |
| The Vibe Coder’s Blind Spot is Your Next Bug Bounty | https://sajjadsiam.medium.com/the-vibe-coders-blind-spot-is-your-next-bug-bounty-26387500acbb?source=rss------bug_bounty-5 | Sajjad Siam | bug-bounty, ai, ai-agent, bug-bounty-writeup, vibe-coding | 09-Nov-2025 |
| Privilege Escalation From Guest To Admin | https://infosecwriteups.com/privilege-escalation-from-guest-to-admin-c3d2eb357dd1?source=rss------bug_bounty-5 | Mado | bug-bounty, privilege-escalation, hacking, bug-bounty-tips, infosec | 09-Nov-2025 |
| Advanced Guide to Penetration Testing in APIs (Part 2) Practical Exploitation, Mitigation, and PoC… | https://medium.com/@jpablo13/advanced-guide-to-penetration-testing-in-apis-part-2-practical-exploitation-mitigation-and-poc-140216b8eef3?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, bug-bounty, hacking, api, technology | 08-Nov-2025 |
| CORS Vulnerability with Trusted Null Origin | https://bashoverflow.medium.com/cors-vulnerability-with-trusted-null-origin-0f9593bd7674?source=rss------bug_bounty-5 | Bash Overflow | cors-attack, bug-bounty, cors-exploit, null-origin-attack, cors-misconfiguration | 08-Nov-2025 |
| Hydra: The Ultimate Password Cracking Tool for Penetration Testing | https://medium.com/h7w/hydra-the-ultimate-password-cracking-tool-for-penetration-testing-dff38f826f94?source=rss------bug_bounty-5 | Mr Abdullah | hacking-training, penetration-testing, hacking, bug-bounty-tips, bug-bounty | 08-Nov-2025 |
| Advanced Guide to Penetration Testing in APIs (Part 2) Practical Exploitation, Mitigation, and PoC… | https://infosecwriteups.com/advanced-guide-to-penetration-testing-in-apis-part-2-practical-exploitation-mitigation-and-poc-140216b8eef3?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, bug-bounty, hacking, api, technology | 08-Nov-2025 |
| From Network Engineer to Bug Hunter — Day 1 | https://medium.com/@MD5MICHAEL/from-network-engineer-to-bug-hunter-day-1-3cf1cdbd4900?source=rss------bug_bounty-5 | Md5Michael | php, motivation, application-development, bug-bounty, self-improvement | 08-Nov-2025 |
| Master Real-World Web App Enumeration With Curl, Wget, and Bash: Step-By-Step Guide | https://medium.com/@verylazytech/master-real-world-web-app-enumeration-with-curl-wget-and-bash-step-by-step-guide-9f3b45103154?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, ethical-hacking, hacking, cybersecurity, penetration-testing | 08-Nov-2025 |
| Web3 & Ai | Is it possible to get a $1M bounty? | https://0x21safe.medium.com/web3-ai-is-it-possible-to-get-a-1m-bounty-5b4daf07de79?source=rss------bug_bounty-5 | SAFE | security, ai, bug-bounty, web3, penetration-testing | 08-Nov-2025 |
| Bug BouBug Bounty Hunting — Complete Guide (Part-134) | https://medium.com/@rafid19/bug-boubug-bounty-hunting-complete-guide-part-134-8f46c465f77c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, bug-bounty-tips, ethical-hacking | 08-Nov-2025 |
| ntBug Bounty Hunting — Complete Guide (Part-133) | https://medium.com/@rafid19/ntbug-bounty-hunting-complete-guide-part-133-b1afc9d20714?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, bug-bounty, hacking, cybersecurity, ethical-hacking | 08-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-132) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-132-a69ed59bf331?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, cybersecruity, bug-bounty-tips, bug-bounty, ethical-hacking | 08-Nov-2025 |
| OWASP Top 10 (2025 Release Candidate): What Every Security Professional Needs to Know | https://bughunteryash2511.medium.com/owasp-top-10-2025-release-candidate-what-every-security-professional-needs-to-know-7d050a15f087?source=rss------bug_bounty-5 | ◦•●◉✿ ¥ຮ₰ ʜc ✿◉●•◦ | bug-bounty-writeup, bug-bounty-tips, bug-bounty, owasp-top-10, cybersecurity | 08-Nov-2025 |
| The Ultimate Guide to Smart Contract Pentesting | https://medium.com/@shadyfarouk1986/the-ultimate-guide-to-smart-contract-pentesting-34ce86ee0412?source=rss------bug_bounty-5 | Shady Farouk | pentesting, bug-bounty, vulnerability, blockchain, bug-bounty-tips | 08-Nov-2025 |
| Capture: A TryHackMe CTF writeup | https://infosecwriteups.com/capture-a-tryhackme-ctf-writeup-4a5404600120?source=rss------bug_bounty-5 | Huzaifa Malik | tryhackme, ctf, hacking, bug-bounty, web-security | 08-Nov-2025 |
| How I Mastered Web Proxies on Hack The Box Academy | https://medium.com/@netsec_bandit/how-i-mastered-web-proxies-on-hack-the-box-academy-312e4b07ea73?source=rss------bug_bounty-5 | Netsec | cybersecurity, bug-bounty, proxy, information-security, hackthebox | 08-Nov-2025 |
| Public Exposure of NASA FTP Credentials in CORAL Document (Resuelto)-Sanrock | https://medium.com/@adriansanrock/%EF%B8%8F-public-exposure-of-nasa-ftp-credentials-in-coral-document-resuelto-860a339a0224?source=rss------bug_bounty-5 | Sanrock | hall-of-fame, bug-bounty, technology, google-dork, nasa | 08-Nov-2025 |
| How I Got Access To All My Friend’s Data | https://medium.com/@matrix-7337/how-i-got-access-to-all-my-friends-data-a81d50a861fd?source=rss------bug_bounty-5 | Raunak Raj | hacking, bug-bounty, cyberattack, phishing, cybersecurity | 08-Nov-2025 |
| When the Program Wins and the Researcher Loses: The Subtle Scams Behind Bug Bounties | https://cybersecuritywriteups.com/when-the-program-wins-and-the-researcher-loses-the-subtle-scams-behind-bug-bounties-e2e0f38d80e7?source=rss------bug_bounty-5 | Gl1tch | cybersecurity, bug-bounty-tips, information-security, bug-bounty, ethical-hacking | 08-Nov-2025 |
| BugBounty-IOS | https://medium.com/@v3locidad/bugbounty-ios-2ce599c29a65?source=rss------bug_bounty-5 | V3locidad | iphone, bugbounty-tips, bug-bounty, ios | 08-Nov-2025 |
| Broken Access Control: Why the OWASP #1 Threat Persists in 2025 | https://shaifsec.medium.com/broken-access-control-why-the-owasp-1-threat-persists-in-2025-704d92459e4c?source=rss------bug_bounty-5 | Shaif Ali | ethical-hacking, cybersecurity, owasp-top-10, offensive-security, bug-bounty | 08-Nov-2025 |
| The Quiet Importance of Mosquitoes in the Environment | https://medium.com/the-environment/the-quiet-importance-of-mosquitoes-in-the-environment-36802eed232d?source=rss------bug_bounty-5 | Leona Gray | bug-bounty, nature, water, environment, wildlife | 08-Nov-2025 |
| Injected #3: Lethal SSRF — Advanced Exploitation Series | https://medium.com/@red.whisperer/injected-3-lethal-ssrf-advanced-exploitation-series-f6b17f346c5a?source=rss------bug_bounty-5 | Chux | information-security, pentesting, cybersecurity, hacking, bug-bounty | 08-Nov-2025 |
| IDOR Part 2 — Advanced Bypass Techniques | https://medium.com/@cybersecplayground/idor-part-2-advanced-bypass-techniques-ce7f8a7c1df5?source=rss------bug_bounty-5 | Cybersecplayground | bug-bounty-tips, bug-bounty, idor-vulnerability, idor | 08-Nov-2025 |
| How I Used AI to Become Someone Else (And Why Your Face Is No Longer Your Password) | https://infosecwriteups.com/how-i-used-ai-to-become-someone-else-and-why-your-face-is-no-longer-your-password-dfd88c254733?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, infosec, hacking, cybersecurity, bug-bounty | 08-Nov-2025 |
| When One Error Message Unlocked the Entire Kingdom: A Critical SQL Injection Tale | https://0dayscyber.medium.com/when-one-error-message-unlocked-the-entire-kingdom-a-critical-sql-injection-tale-1655c93dd2f8?source=rss------bug_bounty-5 | Jackson Mittag | sqli, sql-injection, bug-bounty | 08-Nov-2025 |
| TLS Versions & Vulnerabilities (SSLv2/3, TLS 1.0/1.1/1.2/1.3) | https://medium.com/@arfatkhan3708/tls-versions-vulnerabilities-sslv2-3-tls-1-0-1-1-1-2-1-3-63c82df3925f?source=rss------bug_bounty-5 | Arfat Khan | cybersecurity, infosec, bug-bounty, ethical-hacking, information-technology | 08-Nov-2025 |
| Stored XSS via uploaded SVG in group chat | https://medium.com/@HBlackGhost/stored-xss-via-uploaded-svg-in-group-chat-b45f182b2e33?source=rss------bug_bounty-5 | HBlack Ghost | bug-bounty-writeup, bug-bounty-tips, bugs, bug-bounty | 08-Nov-2025 |
| CORS Vulnerability with Basic Origin Reflection | https://osintteam.blog/cors-vulnerability-with-basic-origin-reflection-8316a2cadc3c?source=rss------bug_bounty-5 | Bash Overflow | cors-exploit, cors-vulnerability, cors-misconfiguration, bug-bounty, cors-attack | 07-Nov-2025 |
| Guía Avanzada de Penetration Testing en APIs (Parte 2) Explotación Práctica, Mitigación y Reporte… | https://medium.com/@jpablo13/gu%C3%ADa-avanzada-de-penetration-testing-en-apis-parte-2-explotaci%C3%B3n-pr%C3%A1ctica-mitigaci%C3%B3n-y-reporte-0a3faf4ea9b9?source=rss------bug_bounty-5 | JPablo13 | api, technology, cybersecurity, hacking, bug-bounty | 07-Nov-2025 |
| Business Logic Error — Deleting the Project Owner by Manipulating a GraphQL Request | https://medium.com/@B14ck/business-logic-error-deleting-the-project-owner-by-manipulating-a-graphql-request-7e3bb5883d04?source=rss------bug_bounty-5 | black | bug-bounty, bug-bounty-tips, hacking, bug-bounty-writeup, bugs | 07-Nov-2025 |
| Unrestricted Resource Consumption and Lack of Rate Limiting | https://medium.com/@jungoskillet/unrestricted-resource-consumption-and-lack-of-rate-limiting-fc1ab69e73b9?source=rss------bug_bounty-5 | Jei Ess | hacking, cybersecurity, bug-bounty, web, api | 07-Nov-2025 |
| How Hacking for Free Made Me Employable | https://medium.com/@atomiczsec/how-hacking-for-free-made-me-employable-cfe6a9cf984d?source=rss------bug_bounty-5 | Gavin K | red-team, bug-bounty, cybersecurity | 07-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-131) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-131-41f4d9bfe4c3?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, hacking, cybersecurity, ethical-hacking, bug-bounty-tips | 07-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-130) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-130-9715a26aaa38?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, bug-bounty-tips, ethical-hacking, cybersecurity, hacking | 07-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-129) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-129-f37b98847ff6?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, hacking, bug-bounty, bug-bounty-tips, cybersecurity | 07-Nov-2025 |
| The Only Roadmap You Need For Bug Bounty | https://medium.com/@matrix-7337/the-only-roadmap-you-need-for-bug-bounty-c03c8175e42b?source=rss------bug_bounty-5 | Raunak Raj | bug-bounty, bug-bounty-tips, bug-bounty-writeup, roadmaps, cybersecurity | 07-Nov-2025 |
| Advanced Linux Privilege Escalation: Learn SUID to Capabilities (Step-by-Step Guide) | https://medium.com/@verylazytech/advanced-linux-privilege-escalation-learn-suid-to-capabilities-step-by-step-guide-b5c8ac6fe14b?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, ethical-hacking, penetration-testing, cybersecurity | 07-Nov-2025 |
| The Only Bug Bounty Roadmap You Need | https://medium.com/@matrix-7337/the-only-roadmap-you-need-for-bug-bounty-c03c8175e42b?source=rss------bug_bounty-5 | Raunak Raj | bug-bounty, bug-bounty-tips, bug-bounty-writeup, roadmaps, cybersecurity | 07-Nov-2025 |
| 400 bad request that earns me $$$ bounty | https://medium.com/@mohaned0101/400-bad-request-that-earns-me-bounty-533f449d5dab?source=rss------bug_bounty-5 | mohaned haron | bug-bounty, idor, bug-bounty-writeup, idor-vulnerability, bug-bounty-tips | 07-Nov-2025 |
| How I Built a Private Nuclei Template Collection for Bounties | https://medium.com/@ibtissam1/how-i-built-a-private-nuclei-template-collection-for-bounties-174f7476cb31?source=rss------bug_bounty-5 | Ibtissam | bug-bounty, cybersecurity, web-security, infosec, automation | 07-Nov-2025 |
| 3- | https://medium.com/@hossam_mostafa/3-d1e6e7e106a6?source=rss------bug_bounty-5 | Hossam_Mostafa | business-logic-flaw, cybersecurity, bug-bounty, penetration-testing, web-security | 07-Nov-2025 |
| How I Found the race condition vulnerability? | https://doordiefordream.medium.com/how-i-found-the-race-condition-vulnerability-0c6eb290b236?source=rss------bug_bounty-5 | DOD cyber solutions | bug-bounty, cybersecurity, ethical-hacking, technology, vulnerability | 07-Nov-2025 |
| HTTP Headers You Must Know | https://medium.com/write-a-catalyst/http-headers-you-must-know-9a6ddbb35646?source=rss------bug_bounty-5 | Arfat Khan | cybersecurity, ethical-hacking, infosec, web-security, bug-bounty | 07-Nov-2025 |
| The Authorization Circus: Where Security Was the Main Clown | https://infosecwriteups.com/the-authorization-circus-where-security-was-the-main-clown-f4b84ca9356f?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, cybersecurity, bug-bounty-tips, hacking | 07-Nov-2025 |
| Vibe Hacking: The Ground Zero Art of Reconnaissance | https://medium.com/@pwntheplanet/vibe-hacking-the-art-of-reconnaissance-in-modern-bug-bounty-work-2b3aa63e0253?source=rss------bug_bounty-5 | Butrint Komoni | red-teaming, cybersecurity, bug-bounty, pentesting, recon | 07-Nov-2025 |
| Bugbounty ó demanda por intrusión la línea delgada en LATAM y el error de muchos sysadmins cuando… | https://medium.com/@hackingenmexico/bugbounty-%C3%B3-demanda-por-intrusi%C3%B3n-la-l%C3%ADnea-delgada-en-latam-y-el-error-de-muchos-sysadmins-cuando-f5519ad40b3e?source=rss------bug_bounty-5 | Hacking en México | gobierno, ciberseguridad, bug-bounty, hacking, guanajuato | 07-Nov-2025 |
| Privacy as a Bounty Vector: GDPR for Higher-Severity Reports | https://medium.com/@cocopelly255/privacy-as-a-bounty-vector-gdpr-for-higher-severity-reports-595bb616add8?source=rss------bug_bounty-5 | ToxSec | cybersecurity, tech, bug-bounty | 07-Nov-2025 |
| KODOK: Advanced JavaScript Security Scanner for Bug Bounty Hunters | https://medium.com/@0xdfffffff/kodok-advanced-javascript-security-scanner-for-bug-bounty-hunters-bfac3d8f3927?source=rss------bug_bounty-5 | rhyru9 | bug-bounty-tips, bug-bounty, vulnerability-scanner, hackerone | 07-Nov-2025 |
| Mark Yourself As a Certified Hacker! | https://medium.com/great-hackers-battalion/mark-yourself-as-a-certified-hacker-c13600813af9?source=rss------bug_bounty-5 | NnFace | hacking, ethical-hacking, certification, bug-bounty, cybersecurity | 07-Nov-2025 |
| How Bug Bounty Programs are Improving Software Security | https://osintteam.blog/how-bug-bounty-programs-are-improving-software-security-f1b8efa64d3f?source=rss------bug_bounty-5 | Samina Perveen | osint-team, cybersecurity, python-in-plain-english, ethical-hacking, bug-bounty | 06-Nov-2025 |
| Modern Recon: How Hackers Use AI to Hunt Vulnerabilities Smarter | https://osintteam.blog/modern-recon-how-hackers-use-ai-to-hunt-vulnerabilities-smarter-5a3cd87c3671?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, hacking, programming, bug-bounty, ai | 06-Nov-2025 |
| Reverse Engineering Common CMS Configs for Easy Wins: Step-by-Step Guide for Hackers | https://medium.com/@verylazytech/reverse-engineering-common-cms-configs-for-easy-wins-step-by-step-guide-for-hackers-c4a136c90919?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, cybersecurity, penetration-testing, ethical-hacking, bug-bounty | 06-Nov-2025 |
| “The Day I Found an Unsecured FTP — A Responsible Disclosure Story” | https://medium.com/@H4RUK7/the-day-i-found-an-unsecured-ftp-a-responsible-disclosure-story-00caf67ec647?source=rss------bug_bounty-5 | H4RUK7 K1R4 | bug-bounty, hacking, bug-bounty-tips, bug-bounty-writeup, cybersecurity | 06-Nov-2025 |
| ⚔️ Understanding the “No Rate Limit” Vulnerability — The Silent API Killer | https://bughunteryash2511.medium.com/%EF%B8%8F-understanding-the-no-rate-limit-vulnerability-the-silent-api-killer-7b95340268e5?source=rss------bug_bounty-5 | ◦•●◉✿ ¥ຮ₰ ʜc ✿◉●•◦ | bug-bounty, ethical-hacking, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 06-Nov-2025 |
| How Data Flows Inside Linux — From Keypress to Kernel to Network | https://medium.com/@zoningxtr/how-data-flows-inside-linux-from-keypress-to-kernel-to-network-76e71d8b7c74?source=rss------bug_bounty-5 | Zoningxtr | linux, cybersecurity, bug-bounty, embedded-systems, ubuntu | 06-Nov-2025 |
| GET all Company Support Users Details including email and phones + Mass Account Take Over | https://medium.com/@devsecures/get-all-company-support-users-details-including-email-and-phones-mass-account-take-over-87d7d48cbe3d?source=rss------bug_bounty-5 | Merroun Lahcen | pentesting, writup, bug-bounty, cybersecurity | 06-Nov-2025 |
| Letters, Duplicates, False Positives and Hall of Fame: A Researcher’ Journey Through 2024–2025 | https://medium.com/@pavanshanmukhmadhav/letters-duplicates-false-positives-and-hall-of-fame-a-researcher-journey-through-2024-2025-6d87068461fc?source=rss------bug_bounty-5 | Pavanshanmukhmadhav | poc, penetration-testing, bugbounty-writeup, bug-bounty, testing | 06-Nov-2025 |
| Full Disclosure: How Google Stole My Security Research and Gave It to an AI | https://medium.com/@reconsumeralization/full-disclosure-how-google-stole-my-security-research-and-gave-it-to-an-ai-bd8101073e5c?source=rss------bug_bounty-5 | David and Amber Weatherspoon-Wolf | bug-bounty, google, civil-rights, disability | 06-Nov-2025 |
| How I Found 6 Reflected XSS — and Turned Them into Account Takeover | https://potatohuman.medium.com/how-i-found-6-reflected-xss-and-turned-them-into-account-takeover-3c0ace797b0a?source=rss------bug_bounty-5 | PotatoHuman | bug-bounty, pentesting, xss-attack, account-takeover, cross-site-scripting | 06-Nov-2025 |
| Bypassing CSRF Token Protection | https://medium.com/@fatimahasan022/bypassing-csrf-token-protection-1283b64083ea?source=rss------bug_bounty-5 | Fatimahasan | oscars, csrf-token, bug-bounty, csrf-bypass, csrf-attack | 06-Nov-2025 |
| When Links Lie: Discovering a Subtle Hyperlink Injection Flaw in Email Invites | https://medium.com/@saijayanth25dec2003/when-links-lie-discovering-a-subtle-hyperlink-injection-flaw-in-email-invites-dd1923d6996e?source=rss------bug_bounty-5 | Sai Jayanth | cybersecurity, red-team, vulnerability, bug-bounty | 06-Nov-2025 |
| Account Takeover Via Reflected XSS | https://medium.com/@eng.mahmoudbughunter/account-takeover-via-reflected-xss-6cd982ebff8d?source=rss------bug_bounty-5 | Mahmoud Farag | bug-bounty, pentesting, bug-bounty-writeup, bugs, bug-bounty-tips | 06-Nov-2025 |
| Hackviser — Cryptanalysis walkthrough | https://mukibas37.medium.com/hackviser-cryptanalysis-walkthrough-19b291173d00?source=rss------bug_bounty-5 | Mukilan Baskaran | infosec, bug-bounty, security, ethical-hacking | 05-Nov-2025 |
| Advanced Guide to Penetration Testing in APIs (Part 1) OWASP Top 10 Mapping and Recognition Phases | https://medium.com/@jpablo13/advanced-guide-to-penetration-testing-in-apis-part-1-owasp-top-10-mapping-and-recognition-phases-83f96ccc222e?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, technology, hacking, api | 05-Nov-2025 |
| Advanced Guide to Penetration Testing in APIs (Part 1) OWASP Top 10 Mapping and Recognition Phases | https://medium.com/meetcyber/advanced-guide-to-penetration-testing-in-apis-part-1-owasp-top-10-mapping-and-recognition-phases-83f96ccc222e?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, technology, hacking, api | 05-Nov-2025 |
| From Intent to Native Code: Exploiting a WebView’s JavascriptInterface via XSS | https://medium.com/@mohammadalmeastro/from-intent-to-native-code-exploiting-a-webviews-javascriptinterface-via-xss-8a1c1edff2e6?source=rss------bug_bounty-5 | Mohamed hamdy | mobile-pentesting, mobile-app-development, android, offensive-security, bug-bounty | 05-Nov-2025 |
| How I Stole an AI’s Diary and Found All Its Secrets | https://medium.com/@iski/how-i-stole-an-ais-diary-and-found-all-its-secrets-5d8786af54db?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, money, cybersecurity, bug-bounty, infosec | 05-Nov-2025 |
| How I Found My First Web Bug as a Beginner | https://medium.com/@shaikhminhaz1975/how-i-found-my-first-web-bug-as-a-beginner-960712e8002f?source=rss------bug_bounty-5 | Shaikh Minhaz | beginner, bug-bounty, vulnerability, cybersecurity, how-to | 05-Nov-2025 |
| Internal Cache Poisoning: How Multi-Layer Caches Can Be Exploited for Stored XSS | https://osintteam.blog/internal-cache-poisoning-how-multi-layer-caches-can-be-exploited-for-stored-xss-9e15b0367780?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, x-forwarded-host, stored-xss, web-cache-poisoning, internal-cache-poisoning | 05-Nov-2025 |
| Meta bug bounty — One Last Spark AR RCE | https://fadyothman.medium.com/meta-bug-bounty-one-last-spark-ar-rce-343174b628cd?source=rss------bug_bounty-5 | Fady Othman | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 05-Nov-2025 |
| Signal Desktop Path Traversal vulnerability in Attachment Saving | https://medium.com/@h4x0r_dz/signal-desktop-path-traversal-vulnerability-in-attachment-saving-e9de7806767e?source=rss------bug_bounty-5 | h4x0r_dz | bug-bounty, vulnerability, cybersecurity, signal | 05-Nov-2025 |
| Kali Linux Command Reference Sheet | https://medium.com/@0b1d1/kali-linux-command-reference-sheet-839362b0e928?source=rss------bug_bounty-5 | 0b1d1 | kali-linux, bug-bounty, ethical-hacking, exploit, john-the-ripper | 05-Nov-2025 |
| How I found tricky $$$$ Server-Side Request Forgery (SSRF) | https://darkt.medium.com/how-i-found-tricky-server-side-request-forgery-ssrf-96c5fb630acd?source=rss------bug_bounty-5 | Abdelnour Osman (DarkT) | cybersecurity, web-security, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 05-Nov-2025 |
| Stealthy Recon: Master Passive Information Gathering for Pentesters Step-by-Step | https://medium.com/@verylazytech/stealthy-recon-master-passive-information-gathering-for-pentesters-step-by-step-166c6ee8d580?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, ethical-hacking, bug-bounty, hacking, penetration-testing | 05-Nov-2025 |
| ♂️ Session Zombies: The Forgotten Refresh Tokens That Never Die | https://javascript.plainenglish.io/%EF%B8%8F-session-zombies-the-forgotten-refresh-tokens-that-never-die-a92b5def0a78?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, infosec, cybersecurity, information-security | 05-Nov-2025 |
| Understanding HTTP: The Backbone of the Web | https://medium.com/@arfitutorials/understanding-http-the-backbone-of-the-web-a948e8c7d6ba?source=rss------bug_bounty-5 | Arfi Tutorials | bug-bounty, ethical-hacking, http-request, cybersecurity, https | 05-Nov-2025 |
| How you can integrate our Leaked Credentials API | https://medium.com/@breachcollectiondotcom/how-you-can-integrate-our-leaked-credentials-api-f15cec126d76?source=rss------bug_bounty-5 | BreachCollection | data-breach, cybersecurity, api, programming, bug-bounty | 05-Nov-2025 |
| From Curiosity to Validation — My First Successful Bug Bounty Submission | https://medium.com/meetcyber/from-curiosity-to-validation-my-first-successful-bug-bounty-submission-007a60c8e55c?source=rss------bug_bounty-5 | Tech Journal | money, bug-bounty, freelancing, make-money-online, hacking | 05-Nov-2025 |
| Have You Ever Been Defrauded by Hackerone? You May Be Entitled To A Large Cash Settlement! | https://medium.com/@justas_b1/have-you-ever-been-defrauded-by-hackerone-you-may-be-entitled-to-a-large-cash-settlement-c3a1876ac2fa?source=rss------bug_bounty-5 | Justas_b | cybersecurity, infosec, programming, bug-bounty, true-crime | 05-Nov-2025 |
| BUG BOUNTY — ÖDÜL AVCILIĞI | https://turkiyeyayini.com/bug-bounty-%C3%B6d%C3%BCl-avcili%C4%9Fi-7ef15c8aa948?source=rss------bug_bounty-5 | Ahmet ŞAHİN | türkçe-yayın, medium-türkiye, bug-bounty, türkçe, türkiye-yayını | 05-Nov-2025 |
| GraphQL Security: Complete Guide to Finding Hidden Vulnerabilities | https://medium.com/data-science-collective/graphql-security-complete-guide-to-finding-hidden-vulnerabilities-cfe590b468b4?source=rss------bug_bounty-5 | Muhammad Haider Tallal | web-application-security, cybersecurity, graphql-security, api-security, bug-bounty | 05-Nov-2025 |
| Bug Bounty for Beginners: A Direct, 2-Week Sprint to Start Hunting | https://medium.com/@MuhammedAsfan/bug-bounty-for-beginners-a-direct-2-week-sprint-to-start-hunting-f55262f6132f?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | cybersecurity, bug-bounty, portswigger, tryhackme | 05-Nov-2025 |
| How I got access to an IDOR that exposed PII for 6.4 million users | https://medium.com/@Dedrknex/how-i-got-access-to-an-idor-that-exposed-pii-for-6-4-million-users-cabb15961bfa?source=rss------bug_bounty-5 | Dedrknex | bug-bounty, vulnerability, web-security, cybersecurity, idor-vulnerability | 05-Nov-2025 |
| Race condition allows bypassing stored family members limit in online store website— able to add… | https://medium.com/@ahmed_talaat-a1/race-condition-allows-bypassing-stored-family-members-limit-in-online-store-website-able-to-add-b3c40cfd4d0a?source=rss------bug_bounty-5 | Ahmed Talaat | bug-bounty, hacking | 05-Nov-2025 |
| Understanding Security Logging and Monitoring Failures: The Silent Weakness in Modern Cyber Defense | https://medium.com/meetcyber/understanding-security-logging-and-monitoring-failures-the-silent-weakness-in-modern-cyber-defense-02d707dbb785?source=rss------bug_bounty-5 | CyberSenpai | owasp, bug-bounty, cybersecurity, interview, information-security | 05-Nov-2025 |
| Subdomain Enumeration | https://medium.com/@Ryasmin/subdomain-enumeration-02e0d5a54620?source=rss------bug_bounty-5 | Yasmin Abdelraouf | security-researchers, pentesting, bug-bounty, web-penetration-testing, subdomains-enumeration | 05-Nov-2025 |
| Authentication Token Stored in localStorage | https://medium.com/@Abhiii_Sharma/authentication-token-stored-in-localstorage-15edd8d7a104?source=rss------bug_bounty-5 | Abhishek sharma | bug-bounty, bugs, bug-bounty-writeup, authentication | 05-Nov-2025 |
| Midnight Bounty: How I Found a QA Portal Exposed to the Internet and Got $2,500 Overnight | https://codewithvamp.medium.com/midnight-bounty-how-i-found-a-qa-portal-exposed-to-the-internet-and-got-2-500-overnight-6413393b6cb7?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | bug-bounty, cybersecurity, hacking, data, security | 05-Nov-2025 |
| Guía Avanzada de Penetration Testing en APIs (Parte 1) Mapeo OWASP Top 10 y Fases de Reconocimiento | https://medium.com/@jpablo13/gu%C3%ADa-avanzada-de-penetration-testing-en-apis-parte-1-mapeo-owasp-top-10-y-fases-de-reconocimiento-a859ed5aecc5?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, api, bug-bounty, technology, hacking | 04-Nov-2025 |
| The Ghost in the Machine: How I Found IDORs That Were Hiding in Plain Sight | https://medium.com/@iski/the-ghost-in-the-machine-how-i-found-idors-that-were-hiding-in-plain-sight-0c26bca85c2f?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, bug-bounty-tips, cybersecurity, money | 04-Nov-2025 |
| Hit Your Mark with “Bulleye” — The CTF Challenge You Can’t Skip | https://medium.com/@pentesterclubpvtltd/hit-your-mark-with-bulleye-the-ctf-challenge-you-cant-skip-60373c891c9c?source=rss------bug_bounty-5 | Pentester Club | hacking, bug-bounty, cybersecurity, ctf, blockchain | 04-Nov-2025 |
| SSRF in GitLab Self-Hosted — Import From URL | https://ikramiwalid.medium.com/ssrf-in-gitlab-self-hosted-import-from-url-81e94d7888f7?source=rss------bug_bounty-5 | Ikrami walid | bug-bounty, cybersecurity, gitlab, penetration-testing, ssrf | 04-Nov-2025 |
| Master Post-Exploitation Data Exfiltration Methods (and Defenses) Step-by-Step | https://medium.com/@verylazytech/master-post-exploitation-data-exfiltration-methods-and-defenses-step-by-step-590f24f2f824?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, ethical-hacking, penetration-testing, hacking, cybersecurity | 04-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-128) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-128-f9abe6ebdbb4?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty-tips, hacking, cybersecurity, bug-bounty | 04-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-127) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-127-4d7d5996c574?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking, bug-bounty-tips, hacking, cybersecurity | 04-Nov-2025 |
| Bug Bounty Hunting — Complete Guide (Part-126) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-126-0c8583cfede4?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty-tips, hacking, cybersecurity, bug-bounty | 04-Nov-2025 |
| LFI vs RFI — When Your Website Starts Reading the Wrong Files | https://medium.com/@natarajanck2/lfi-vs-rfi-when-your-website-starts-reading-the-wrong-files-eb23ad6ddce5?source=rss------bug_bounty-5 | Natarajan C K | cybersecurity, lfi, security, rfi, bug-bounty | 04-Nov-2025 |
| The Unsung Hero of Quality: Why Incident Management Matters More Than You Think | https://medium.com/@NirajsubediQA/the-unsung-hero-of-quality-why-incident-management-matters-more-than-you-think-a68f22365d42?source=rss------bug_bounty-5 | Niraj Subedi | software-engineering, incident-response, testing, software-development, bug-bounty | 04-Nov-2025 |
| Khalani.Network Hackd | https://medium.com/@ebx5d/khalani-network-hackd-91075ce7821f?source=rss------bug_bounty-5 | Ebxd | cybersecurity, blockchain, bug-bounty | 04-Nov-2025 |
| SSRF in GitLab Self-Hosted — Import From URL | https://samurai812.medium.com/ssrf-in-gitlab-self-hosted-import-from-url-81e94d7888f7?source=rss------bug_bounty-5 | samurai | bug-bounty, cybersecurity, gitlab, penetration-testing, ssrf | 04-Nov-2025 |
| Cloudflare-Bypass: Origin server deserves some love too | https://medium.com/@smitgharat0001/cloudflare-bypass-origin-server-deserves-some-love-too-e8bd2182cfea?source=rss------bug_bounty-5 | Smit Gharat | bug-bounty-tips, bug-bounty, bugbounty-writeup, infosec, cybersecurity | 04-Nov-2025 |
| Authentication Bypass in Indian Government Mobile App | https://medium.com/@bytewreaker/authentication-bypass-in-indian-government-mobile-app-b0cd66662d69?source=rss------bug_bounty-5 | Bytewreaker | bugs, bug-bounty, bug-bounty-writeup | 04-Nov-2025 |
| IDOR: The Bug That Opens Doors Without Knocking | https://medium.com/@somnadh0000/idor-the-bug-that-opens-doors-without-knocking-6abbb9f9600f?source=rss------bug_bounty-5 | NadSec | bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 04-Nov-2025 |
| Mastering XSS: Unmasking Cross-Site Scripting Vulnerabilities Across a Bug Bounty Platform | https://bughunteryash2511.medium.com/mastering-xss-unmasking-cross-site-scripting-vulnerabilities-across-a-bug-bounty-platform-feb8a082a1d7?source=rss------bug_bounty-5 | ◦•●◉✿ YSL ʜc ✿◉●•◦ | penetration-testing, security, bug-bounty, hacking, bug-bounty-tips | 04-Nov-2025 |
| BugPilot AI: Revolutionizing Penetration Testing with Intelligent Automation | https://letchupkt.medium.com/bugpilot-ai-revolutionizing-penetration-testing-with-intelligent-automation-b2e5bacda1dd?source=rss------bug_bounty-5 | LETCHU PKT | ai-agent, hacking, bug-bounty, ai-tools, bug-hunting | 04-Nov-2025 |
| Beyond the Bounties: How Modern Platforms Are Shaping the Future of Ethical Hacking | https://medium.com/@penoughcyber/beyond-the-bounties-how-modern-platforms-are-shaping-the-future-of-ethical-hacking-5bdee62d494d?source=rss------bug_bounty-5 | Penough | cybersecurity, ethical-hacking, penough, bug-bounty-platforms, bug-bounty | 04-Nov-2025 |
| The Most Common Medium Severity Bug Found In Almost Every Website | https://medium.com/activated-thinker/the-most-common-medium-severity-bug-found-in-almost-every-website-b0d0649dd739?source=rss------bug_bounty-5 | Rehan Sohail | bug-bounty, bug-bounty-hunter, bug-bounty-writeup, bug-bounty-tips, activated-thinker | 04-Nov-2025 |
| STON.fi Launches Bug Bounty Program Offering Up to $100,000 for Critical Vulnerabilities | https://medium.com/@johnnysylvanus456/ston-fi-launches-bug-bounty-program-offering-up-to-100-000-for-critical-vulnerabilities-b614e6e3774b?source=rss------bug_bounty-5 | Johnny Sylvanus | hackenproof, bug-bounty, bugs, rewards, stonfi | 04-Nov-2025 |
| Simple IDORs Lead To PII Leaks Got $1476 Bounty | https://medium.com/@ferdusalam_65023/simple-idors-lead-to-pii-leaks-got-1476-bounty-aa3e06a5976b?source=rss------bug_bounty-5 | Ferdus Alam | bug-bounty, idor-vulnerability, idor, bug-bounty-tips, bug-bounty-writeup | 04-Nov-2025 |
| Cracking the Chipotle Login: A Security Researcher’s Deep Dive into Account Brute Force and Bot… | https://medium.com/@ethan_hunt/cracking-the-chipotle-login-a-security-researchers-deep-dive-into-account-brute-force-and-bot-96749b6b5393?source=rss------bug_bounty-5 | Mandar Satam | bug-bounty, pentesting, cybersecurity | 04-Nov-2025 |
| How I Found a Stored XSS Vulnerability Through a PDF Upload | https://medium.com/@Abhiii_Sharma/how-i-found-a-stored-xss-vulnerability-through-a-pdf-upload-75b4bbfbf9a3?source=rss------bug_bounty-5 | Abhishek sharma | xss-attack, bug-bounty, bug-bounty-tips, stored-xss, bug-bounty-writeup | 03-Nov-2025 |
| Server-Side Discount Validation Bypass Enables Arbitrary Price Reduction | https://medium.com/@ali3bdelhady/server-side-discount-validation-bypass-enables-arbitrary-price-reduction-6336dfcea79e?source=rss------bug_bounty-5 | Ali Abdelhady | bug-bounty, bug-bounty-writeup | 03-Nov-2025 |
| Dive into “Ghost Stack” — The CTF You Can’t Afford to Miss | https://medium.com/@pentesterclubpvtltd/dive-into-ghost-stack-the-ctf-you-cant-afford-to-miss-0bb628116b8d?source=rss------bug_bounty-5 | Pentester Club | bug-bounty, cybersecurity, hacking, ethical-hacking, ctf | 03-Nov-2025 |
| Unlock Your Hacker Potential: The CTF Platform Every Bug Bounty Hunter Needs | https://medium.com/@pentesterclubpvtltd/unlock-your-hacker-potential-the-ctf-platform-every-bug-bounty-hunter-needs-3d09ac1a9316?source=rss------bug_bounty-5 | Pentester Club | hackathons, cybersecurity, hacking, ctf, bug-bounty | 03-Nov-2025 |
| Week 16 — JS Enum Framework: From Blueprint to Reality | https://osintteam.blog/week-16-js-enum-framework-from-blueprint-to-reality-092aea4eaf4f?source=rss------bug_bounty-5 | Aang | information-security, osint, ethical-hacking, bug-bounty-tips, bug-bounty | 03-Nov-2025 |
| Advanced Web Cache Poisoning: Beyond the Basics | https://medium.com/@Aacle/advanced-web-cache-poisoning-beyond-the-basics-3df645bcbf95?source=rss------bug_bounty-5 | Abhishek meena | hacking, owasp, bug-bounty-tips, infosec, bug-bounty | 03-Nov-2025 |
| How a Null Byte Unlocked a $XXXX Bounty: My Reflected XSS Story | https://santhosh-adiga-u.medium.com/how-a-null-byte-unlocked-a-xxxx-bounty-my-reflected-xss-story-cb1b94f8ea12?source=rss------bug_bounty-5 | Santhosh Adiga U | penetration-testing, bug-bounty, hacking, cybersecurity, bug-bounty-tips | 03-Nov-2025 |
| Master Forensic-Evasion Techniques for Red Teamers: Actionable Tactics for Staying Undetected | https://medium.com/@verylazytech/master-forensic-evasion-techniques-for-red-teamers-actionable-tactics-for-staying-undetected-3123667b8f49?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, ethical-hacking, bug-bounty, hacking, cybersecurity | 03-Nov-2025 |
| How I Found an Unauthenticated Jira API Endpoint Leaking Internal Build Data | https://medium.com/@dipanshuchhanikar/how-i-found-an-unauthenticated-jira-api-endpoint-leaking-internal-build-data-2d1dcf10f181?source=rss------bug_bounty-5 | Dipanshu Chhanikar | bug-bounty, information-security, cybersecurity, security, jira | 03-Nov-2025 |
| The Ultimate Web Reconnaissance Playbook — A Practical Step-by-Step Guide for Security Researchers | https://kirll0s.medium.com/the-ultimate-web-reconnaissance-playbook-a-practical-step-by-step-guide-for-security-researchers-aeaf13fad6d1?source=rss------bug_bounty-5 | Kyrillos Kamal | cybersecurity, reconnaissance, web-security, bug-bounty, web-penetration-testing | 03-Nov-2025 |
| A Glitch in the Pit Lane: How a Security Flaw Exposed Max Verstappen’s Passport Data | https://medium.com/@devanshpatel930/a-glitch-in-the-pit-lane-how-a-security-flaw-exposed-max-verstappens-passport-data-6c0bf92c4ec4?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-tips, bugs, bug-bounty-writeup, bug-bounty, cybersecurity | 03-Nov-2025 |
| Cybereto CTF 2025 Qualification Web Writeup | https://medium.com/@zdbies4/cybereto-ctf-2025-qualification-web-writeup-5afb2284773f?source=rss------bug_bounty-5 | Zaid Dbies | web-penetration-testing, bug-bounty, cybereto, cybersecurity, ctf | 03-Nov-2025 |
| My First Write-Up: Wallet Top-Up Refund Vulnerability (Found on a Real Target) | https://medium.com/@mahdi.eidi7/my-first-write-up-wallet-top-up-refund-vulnerability-found-on-a-real-target-5f7554389a7a?source=rss------bug_bounty-5 | Mahdi Eidi | penetration-testing, payments, cybersecurity, bug-bounty, hacking | 03-Nov-2025 |
| Leaking Mobile Numbers via Base64 on Government Portal | https://medium.com/@bytewreaker/leaking-mobile-numbers-via-base64-on-government-portal-c354277cbbc2?source=rss------bug_bounty-5 | Bytewreaker | bug-bounty, bug-bounty-writeup, bugs | 03-Nov-2025 |
| A Glitch in the Pit Lane: How a Security Flaw Exposed Max Verstappen’s Passport Data | https://osintteam.blog/a-glitch-in-the-pit-lane-how-a-security-flaw-exposed-max-verstappens-passport-data-6c0bf92c4ec4?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-tips, bugs, bug-bounty-writeup, bug-bounty, cybersecurity | 03-Nov-2025 |
| What Is a CMS? Simple Explanation with Real-Life Examples (No Tech Jargon!) | https://medium.com/@natarajanck2/what-is-a-cms-simple-explanation-with-real-life-examples-no-tech-jargon-1327bfe21509?source=rss------bug_bounty-5 | Natarajan C K | cms, networking, content-management-system, security, bug-bounty | 03-Nov-2025 |
| The 3 AM Breakthrough: How a CTF Side Quest Unlocked a Critical Bug Bounty | https://santhosh-adiga-u.medium.com/the-3-am-breakthrough-how-a-ctf-side-quest-unlocked-a-critical-bug-bounty-f548f98245fc?source=rss------bug_bounty-5 | Santhosh Adiga U | bug-bounty-tips, bug-bounty, bug-bounty-writeup, ethical-hacking, penetration-testing | 03-Nov-2025 |
| 20 Cache Poisoning Case Study | Depth Analysis of Real-world Bug Reports | https://medium.com/@Aacle/20-cache-poisoning-case-study-depth-analysis-of-real-world-bug-reports-d6aa02a6a44f?source=rss------bug_bounty-5 | Abhishek meena | infosec, bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 03-Nov-2025 |
| How I Found a Flaw That Permanently Locked Users Out of Their Accounts | https://medium.com/@rajveer_0101/how-i-found-a-flaw-that-permanently-locked-users-out-of-their-accounts-034f67951008?source=rss------bug_bounty-5 | Rajveer | bug-bounty, two-factor-authentication, business-logic-flaw, writeup, bug-bounty-tips | 03-Nov-2025 |
| What is IDOR? | https://medium.com/@cybersecplayground/what-is-idor-b8ec70302b87?source=rss------bug_bounty-5 | Cybersecplayground | bug-bounty, idor, bug-bounty-tips, bug-bounty-writeup, idor-vulnerability | 03-Nov-2025 |
| The Bug Hunter’s Automator: Why Bash Scripting is Your Greatest Force Multiplier | https://santhosh-adiga-u.medium.com/the-bug-hunters-automator-why-bash-scripting-is-your-greatest-force-multiplier-1200d26db7ab?source=rss------bug_bounty-5 | Santhosh Adiga U | bug-bounty-writeup, penetration-testing, automation, bug-bounty, bug-bounty-tips | 03-Nov-2025 |
| Why Packet Fuzzing is Still Valuable for Bug Bounties | https://medium.com/@audreyrowen/why-packet-fuzzing-is-still-valuable-for-bug-bounties-5e538f4777e5?source=rss------bug_bounty-5 | Audrey Rowen | packet-analysis, cybersecurity, bug-bounty, beginners-guide, bug-bounty-writeup | 03-Nov-2025 |
| Race condition chained with logic bug leads to full bypass of free-plan site limit | https://medium.com/@mhmodgm54/race-condition-chained-with-logic-bug-leads-to-full-bypass-of-free-plan-site-limit-5825f5e2cb1c?source=rss------bug_bounty-5 | Mahmoud Gamal | cybersecurity, business-logic-bug, writeup, bug-bounty, race-condition | 03-Nov-2025 |
| When an Endpoint Enumerator Turned Into a P1 information disclosure bug Here’s What I Found | https://medium.com/@Mayowaomolabi/when-an-endpoint-enumerator-turned-into-a-p1-information-disclosure-bug-heres-what-i-found-9cb6bd3b6752?source=rss------bug_bounty-5 | Mayowa omolabi | cybersecurity, ethical-hacking, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 02-Nov-2025 |
| From SQLi to OS Shell: Master Advanced SQL Injection Payloads for Real-World Pentesting | https://medium.com/@verylazytech/from-sqli-to-os-shell-master-advanced-sql-injection-payloads-for-real-world-pentesting-19bdcc8b00bd?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, penetration-testing, cybersecurity, hacking | 02-Nov-2025 |
| How I Created a Private Project Without Paying — Subscription Bypass in Project Creation | https://medium.com/@alongali334/how-i-created-a-private-project-without-paying-subscription-bypass-in-project-creation-14e482788422?source=rss------bug_bounty-5 | black | bug-bounty-writeup, bug-bounty, xss-attack, hacking, business-logic | 02-Nov-2025 |
| ️ “DNS TXT Records: The Internet’s Name Tags That Tell the Truth” | https://medium.com/@natarajanck2/%EF%B8%8F-dns-txt-records-the-internets-name-tags-that-tell-the-truth-9b5aded87aad?source=rss------bug_bounty-5 | Natarajan C K | dns, txt, internet, bug-bounty, security | 02-Nov-2025 |
| CVE-2025–63418: Weaponizing the Browser Console — A DOM-based XSS Deep Dive | https://rohitchaudhary045.medium.com/cve-2025-63418-weaponizing-the-browser-console-a-dom-based-xss-deep-dive-25ed3ac9cb53?source=rss------bug_bounty-5 | Rohit Chaudhary | bug-bounty, dom-based-xss, xss-vulnerability | 02-Nov-2025 |
| Password Reset Token Invalidation Failure — A Subtle Bug with Serious Security Implications | https://medium.com/@0xMo7areb/password-reset-token-invalidation-failure-a-subtle-bug-with-serious-security-implications-a3edfed57a6a?source=rss------bug_bounty-5 | 0xMo7areb | infosec, bug-bounty, penetration-testing, red-team, bugs | 02-Nov-2025 |
| Hunting JavaScript: Finding Vulnerable JS Links | https://medium.com/meetcyber/hunting-javascript-finding-vulnerable-js-links-3a99d01d6313?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty-tips, bug-bounty-writeup, javascript, bug-bounty | 02-Nov-2025 |
| JavaScript Recon for Bug Hunters — Pull, Parse, Profit ️♂️ | https://icecream23.medium.com/javascript-recon-for-bug-hunters-pull-parse-profit-%EF%B8%8F-%EF%B8%8F-6a0a3a3cd1df?source=rss------bug_bounty-5 | Aman Bhuiyan | bug-bounty, bug-bounty-tips, bug-bounty-writeup, javascript, hacking | 02-Nov-2025 |
| Top 10 Websites That Pay Developers to Contribute Code | https://medium.com/readers-club/top-10-websites-that-pay-developers-to-contribute-code-72a9774b960c?source=rss------bug_bounty-5 | Software Developer | bug-bounty, freelance, open-source, coding | 02-Nov-2025 |
| Open Source Botnet Hook — Latest Update | https://medium.com/@nexusphere/open-source-botnet-hook-latest-update-393ed5ba8e6a?source=rss------bug_bounty-5 | Balki Maharaj | penetration-testing, bug-bounty, 500errorhunting, webvulndiscovery, parameterfuzzing | 02-Nov-2025 |
| Attacking GraphQL — Information Disclosure via Introspection Query | https://medium.com/@hikmat.gasimov95/attacking-graphql-information-disclosure-via-introspection-query-ed3d5e9791ec?source=rss------bug_bounty-5 | Hikmat Gasimov | graphql, bug-bounty, web-security, security-testing, information-disclosure | 02-Nov-2025 |
| CVE-2025–63416: The Admin Panel Heist — Stored XSS to Privilege Escalation | https://rohitchaudhary045.medium.com/cve-2025-63416-the-admin-panel-heist-stored-xss-to-privilege-escalation-b4c69d8487f1?source=rss------bug_bounty-5 | Rohit Chaudhary | backdoor, xss-vulnerability, admin, bug-bounty | 02-Nov-2025 |
| CVE-2025–63417: The Chatroom Compromise — Stored XSS in SelfBest Platform | https://rohitchaudhary045.medium.com/cve-2025-63417-the-chatroom-compromise-stored-xss-in-selfbest-platform-f34ddcd984ea?source=rss------bug_bounty-5 | Rohit Chaudhary | bug-bounty, xss-vulnerability | 02-Nov-2025 |
| 2FA Enforcement Bypass via Request Manipulation | https://medium.com/@bytewreaker/2fa-enforcement-bypass-via-request-manipulation-36b2296788ec?source=rss------bug_bounty-5 | Bytewreaker | bug-bounty, bug-bounty-writeup, bugs | 02-Nov-2025 |
| Internal API Credentials and Host Disclosure | https://medium.com/@bytewreaker/internal-api-credentials-and-host-disclosure-a5ca1b26cc05?source=rss------bug_bounty-5 | Bytewreaker | bugs, bug-bounty, bug-bounty-writeup | 02-Nov-2025 |
| Mastering Nuclei: A Practical Guide to Fast, Template-Driven Vulnerability Scanning | https://fikrimuzadi.medium.com/mastering-nuclei-a-practical-guide-to-fast-template-driven-vulnerability-scanning-8423d6ec8ac6?source=rss------bug_bounty-5 | Fikri Muzadi | discovery-projects, nucleus, ethical-hacking, bug-bounty, security | 02-Nov-2025 |
| Stripe Subscription Escalation by Default | https://peeefour.medium.com/stripe-subscription-escalation-by-default-9cacbb0c4ea9?source=rss------bug_bounty-5 | p4 | web-hacking, bug-bounty, stripe | 02-Nov-2025 |
| IPs, ASN & CIDR — When the Game Is the Network, We Play the Map — How target.com | https://medium.com/@0xmekky/ips-asn-cidr-when-the-game-is-the-network-we-play-the-map-how-target-com-fbaafdb66f0b?source=rss------bug_bounty-5 | القنصل | cybersecurity, web-application-security, networking, bug-bounty, network-security | 02-Nov-2025 |
| Vamp Byte #3 — SPF, DKIM & DMARC: The Trio That Guards Your Inbox | https://codewithvamp.medium.com/vamp-byte-3-spf-dkim-dmarc-the-trio-that-guards-your-inbox-061de63c0627?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | hacker, hacking, testing, cybersecurity, bug-bounty | 02-Nov-2025 |
| Nmap — The First Step Every Ethical Hacker Takes | https://medium.com/@viratavi1223/nmap-the-first-step-every-ethical-hacker-takes-2da1d356363e?source=rss------bug_bounty-5 | Viratavi | hackerone, hacking, ethical-hacking, bug-bounty, bug-bounty-tips | 02-Nov-2025 |
| Bridging the Gap: Stored Procedures-Advantage and Limitations in Context of SQL Injection | https://codewithvamp.medium.com/bridging-the-gap-stored-procedures-advantage-and-limitations-in-context-of-sql-injection-8a11924b27f3?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | sql, bug-bounty, cybersecurity, hacking, secure-coding | 02-Nov-2025 |
| Exposed API Key and RSA Private Key in POS Frontend | https://medium.com/@bytewreaker/exposed-api-key-and-rsa-private-key-in-pos-frontend-2132f55b0acc?source=rss------bug_bounty-5 | Bytewreaker | bug-bounty, bug-bounty-writeup, bugs | 02-Nov-2025 |
| When Bug Hunting Becomes a Burden: Surviving the Dark Side of Bug Bounties | https://cybersecuritywriteups.com/when-bug-hunting-becomes-a-burden-surviving-the-dark-side-of-bug-bounties-21e7c0df4ed8?source=rss------bug_bounty-5 | Gl1tch | mental-health, information-security, bug-bounty, mental-health-awareness, bug-bounty-tips | 02-Nov-2025 |
| Testing XSS in chatbot instances | https://medium.com/@4osp3l/testing-xss-in-chatbot-instances-aa988c09a6d7?source=rss------bug_bounty-5 | 4osp3l | bug-bounty, xss-attack | 02-Nov-2025 |
| RustScan Guide for Ultra-Fast Port Scanning | https://medium.com/@jpablo13/rustscan-guide-for-ultra-fast-port-scanning-77a7aa3cac21?source=rss------bug_bounty-5 | JPablo13 | reconnaissance, bug-bounty, cybersecurity, hacking, technology | 01-Nov-2025 |
| ️♂️ All About Scanning in Bug Bounty (2025 Edition)- Earning 2$$$ | https://medium.com/@xmxa-tech/%EF%B8%8F-%EF%B8%8F-all-about-scanning-in-bug-bounty-2025-edition-earning-2-b758c69746bb?source=rss------bug_bounty-5 | Monu Jangra | technology, hacking, learning, bug-bounty, scanning | 01-Nov-2025 |
| Privilege Escalation in snapshat ADS$$ | https://medium.com/@abderrahmaneaksoum/privilege-escalation-in-snapshat-ads-cb83569536e5?source=rss------bug_bounty-5 | Aksoum Abderrahmane | bug-bounty, hacking | 01-Nov-2025 |
| Mastering Hidden Backups & Old Versions: Step-by-Step Guide for Pentesters and Bug Hunters | https://medium.com/@verylazytech/mastering-hidden-backups-old-versions-step-by-step-guide-for-pentesters-and-bug-hunters-e1b0b077999f?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, penetration-testing, hacking, cybersecurity, bug-bounty | 01-Nov-2025 |
| How I Stay Active in Bug Bounty While Working 9–5 | https://shaifsec.medium.com/how-i-stay-active-in-bug-bounty-while-working-9-5-7ab95e853c7a?source=rss------bug_bounty-5 | Shaif Ali | red-team, bug-bounty, offensive-security, ethical-hacking, vulnerability | 01-Nov-2025 |
| How I earned ₹₹₹₹₹ by reporting API key to massive payment company | https://medium.com/@deepk007/how-i-earned-by-reporting-api-key-to-massive-payment-company-f02e85fdbdab?source=rss------bug_bounty-5 | DEep | bug-bounty, cybersecurity, bug-bounty-writeup, information-security, hacking | 01-Nov-2025 |
| GitHub Dorking for Bug Bounty — A Beginner’s Guide (Guaranteed Bounty) | https://kd-200.medium.com/github-dorking-for-bug-bounty-a-beginners-guide-guaranteed-bounty-ea699b648561?source=rss------bug_bounty-5 | Nitin yadav | github, cybersecurity, bug-bounty, infosec, technology | 01-Nov-2025 |
| DOM XSS in nasa system 90.0000$$$ | https://medium.com/@abderrahmaneaksoum/dom-xss-in-nasa-system-90-0000-addc0a383e3f?source=rss------bug_bounty-5 | Aksoum Abderrahmane | bug-bounty, hacking | 01-Nov-2025 |
| Unauthorized Access to Internal Nginx Status Page via X-Forwarded-For Header | https://medium.com/@bytewreaker/unauthorized-access-to-internal-nginx-status-page-via-x-forwarded-for-header-31de9e8b4e28?source=rss------bug_bounty-5 | Bytewreaker | bugs, bug-bounty, bugbounty-writeup | 01-Nov-2025 |
| Authentication Bypass via Client-Side Response Tampering | https://medium.com/@bytewreaker/authentication-bypass-via-client-side-response-tampering-f79ad16dcef9?source=rss------bug_bounty-5 | Bytewreaker | bug-bounty, bug-bounty-writeup | 01-Nov-2025 |
| How a Single Response Manipulation Led to Admin Takeover — Tamil Nadu Government — Police… | https://systemweakness.com/how-a-single-response-manipulation-led-to-admin-takeover-tamil-nadu-government-police-0d66879b81a7?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty, response-manipulation, bug-bounty-tips, pentesting, appsec | 01-Nov-2025 |
| The Great Tenant Mix-Up: How I Accidentally Became Every Company’s Employee | https://infosecwriteups.com/the-great-tenant-mix-up-how-i-accidentally-became-every-companys-employee-24418d7a6d38?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, infosec, cybersecurity, hacking, bug-bounty | 01-Nov-2025 |
| OTP Disclosure in Android App | https://medium.com/@bytewreaker/otp-disclosure-in-android-app-2de7d9660a81?source=rss------bug_bounty-5 | Bytewreaker | bug-bounty, bugbounty-writeup | 01-Nov-2025 |
| Automation VS Manual Hacking. How To Do Bug Hunting The Right Way? | https://medium.com/activated-thinker/automation-vs-manual-hacking-how-to-do-bug-hunting-the-right-way-c6e58232609f?source=rss------bug_bounty-5 | Rehan Sohail | bug-bounty, bug-bounty-writeup, bugbounty-writeup, activated-thinker, bug-bounty-tips | 01-Nov-2025 |
| Custom Tooling Using Zaproxy … | https://medium.com/@lukewago/custom-tooling-using-zaproxy-498605a2447b?source=rss------bug_bounty-5 | lukewago | web-application-security, bug-bounty, cybersecurity, vulnerability, data-analysis | 01-Nov-2025 |
| Bug Hunting | https://osintteam.blog/bug-hunting-4c782cbe6b69?source=rss------bug_bounty-5 | Nazrul Islam Rana | earnings, tips, bug-bounty, articles, platform | 01-Nov-2025 |
| I Followed This Method To Find XSS In 5 Minutes | https://medium.com/@ibtissam1/i-followed-this-method-to-find-xss-in-5-minutes-74a4390ae1ec?source=rss------bug_bounty-5 | Ibtissam | automation, cybersecurity, bug-bounty, web-security, xss-attack | 01-Nov-2025 |
| Guía Completa de RustScan: Escaneo de Puertos Ultrarrápido | https://medium.com/@jpablo13/gu%C3%ADa-completa-de-rustscan-escaneo-de-puertos-ultrarr%C3%A1pido-da6ab7b7fed7?source=rss------bug_bounty-5 | JPablo13 | hacking, reconnaissance, technology, cybersecurity, bug-bounty | 31-Oct-2025 |
| Master Stealth Logging Bypass on Linux Systems: Step-by-Step Tactics for Ethical Hackers | https://medium.com/@verylazytech/master-stealth-logging-bypass-on-linux-systems-step-by-step-tactics-for-ethical-hackers-cd2112ef944a?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, ethical-hacking, cybersecurity, penetration-testing, hacking | 31-Oct-2025 |
| ⚙️ Remote Code Execution in GitLab — The Tale of a Rogue “GitHub Import” | https://medium.com/@Aacle/%EF%B8%8F-remote-code-execution-in-gitlab-the-tale-of-a-rogue-github-import-660ec866f07c?source=rss------bug_bounty-5 | Abhishek meena | infosec, cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 31-Oct-2025 |
| At Rock Bottom, I Found My Way Back To Cybersecurity | https://medium.com/@cosmicbyt3/at-rock-bottom-i-found-my-way-back-to-cybersecurity-4068aed6bb34?source=rss------bug_bounty-5 | CosmicByte | bug-bounty, career-break, women-in-tech, my-story, cybercareer | 31-Oct-2025 |
| All About Recon — Bug Bounty | https://generativeai.pub/all-about-recon-bug-bounty-2ec869fcbe45?source=rss------bug_bounty-5 | Monu Jangra | technology, bug-bounty, tech, hacking, learning | 31-Oct-2025 |
| Web Cache Poisoning — Part 2: Weaponizing Headers & URL Discrepancies | https://medium.com/@Aacle/web-cache-poisoning-part-2-weaponizing-headers-url-discrepancies-bbb7b2c0159a?source=rss------bug_bounty-5 | Abhishek meena | bug-bounty, bug-bounty-tips, infosec, bug-bounty-writeup, cybersecurity | 31-Oct-2025 |
| When Error Messages Leak More Than Logs: ORMs, Frameworks, and the Quiet Reconnaissance Problem | https://medium.com/@cameronbardin/when-error-messages-leak-more-than-logs-orms-frameworks-and-the-quiet-reconnaissance-problem-cfb336ce1117?source=rss------bug_bounty-5 | Cameron Bardin (MDVKG) | web-development, api-security, bug-bounty, software-development, cybersecurity | 31-Oct-2025 |
| HTML injection in snapshat email form$$$ | https://medium.com/@abderrahmaneaksoum/html-injection-in-snapshat-email-form-318fc1ac0a9c?source=rss------bug_bounty-5 | Aksoum Abderrahmane | bug-bounty, hacking | 31-Oct-2025 |
| Zen7 Vanguard Program — Unite the pioneers building the next era of agentic payments | https://medium.com/@zen7agent/zen7-vanguard-program-unite-the-pioneers-building-the-next-era-of-agentic-payments-998a01082669?source=rss------bug_bounty-5 | Zen7Labs | agentic-ai, ai-infrastructure, open-source, bug-bounty, ai-agent | 31-Oct-2025 |
| When a “Legal API” Handed Me a Data Dump UNAUTH | https://medium.com/@evyeveline1/when-a-legal-api-handed-me-a-data-dump-unauth-e4c9ea3fd297?source=rss------bug_bounty-5 | Evyeveline | api, bug-bounty, ethical-hacking, web-development, infosec | 31-Oct-2025 |
| Unauthenticated access to “Confidential — licensed users” PDF (found with Google dork) | https://ousski.medium.com/unauthenticated-access-to-confidential-licensed-users-pdf-found-with-google-dork-867dd2f5e462?source=rss------bug_bounty-5 | Ousski | cybersecurity, bug-bounty, bounty-program, tips | 31-Oct-2025 |
| How I Uncover Hidden Vulnerabilities With Simple Recon | https://medium.com/@ibtissam1/how-i-uncover-hidden-vulnerabilities-with-simple-recon-f3cd5a2a91f2?source=rss------bug_bounty-5 | Ibtissam | reconnaissance, bug-bounty, technology, cybersecurity, ethical-hacking | 31-Oct-2025 |
| HTML Injection - Return of the P2 Elevator | https://shahjerry33.medium.com/html-injection-return-of-the-p2-elevator-0cccf93d8c98?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | cybersecurity, vulnerability, bug-bounty, pentesting, infosec | 31-Oct-2025 |
| All About Recon — Bug Bounty | https://generativeai.pub/all-about-recon-bug-bounty-2ec869fcbe45?source=rss------bug_bounty-5 | Monu Jangra | technology, bug-bounty, tech, life, learning | 31-Oct-2025 |
| HTTP Methods: The Core of Web Communication | https://infyra.medium.com/http-methods-the-core-of-web-communication-33c28c826850?source=rss------bug_bounty-5 | EMTIAZ AHMED | http-methods, vulnerability, bug-bounty, web-security, web-development | 31-Oct-2025 |
| The Ultimate Bug Hunter’s Recon workflow: From Subdomains to Critical Vulnerabilities | https://medium.com/@manojxshrestha/the-ultimate-bug-hunters-recon-workflow-from-subdomains-to-critical-vulnerabilities-befcef19307f?source=rss------bug_bounty-5 | Manoj | cybersecurity, bug-bounty-tips, bug-bounty, web-pentesting | 31-Oct-2025 |
| Google Dorking for Test Environments | https://medium.com/@cybersecplayground/google-dorking-for-test-environments-ae70958fa112?source=rss------bug_bounty-5 | Cybersecplayground | api, pentesting, google-dorking, bug-bounty-tips, bug-bounty | 31-Oct-2025 |
| How I Found a Hidden Data Leak and Won a Bounty — The Practical Guide to Detecting Data… | https://medium.com/@zoningxtr/how-i-found-a-hidden-data-leak-and-won-a-bounty-the-practical-guide-to-detecting-data-fafba9fc6266?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, software-development, web-development, cybersecurity, penetration-testing | 31-Oct-2025 |
| How I Got a Four-Digit Bug Bounty From Grammarly | https://hexaphp.medium.com/how-i-got-a-four-digit-bug-bounty-from-grammarly-187038396843?source=rss------bug_bounty-5 | Aland Dlshad | cybersecurity, ethical-hacking, bug-bounty, web-security, infosec | 31-Oct-2025 |
| LLM Invisible Prompt Smuggling & How YOU Can Earn A Quick $10k (This Isn’t Clickbait, I Swear) | https://medium.com/@justas_b1/llm-invisible-prompt-smuggling-how-you-can-earn-a-quick-10k-this-isnt-clickbait-i-swear-2df2de834f81?source=rss------bug_bounty-5 | Justas_b | bug-bounty, infosec, cybersecurity, llm, mrbeast | 31-Oct-2025 |
| Race condition vulnerability occurs when websites process requests concurrently. | https://medium.com/@ebrahimmagdy735/race-condition-vulnerability-occurs-when-websites-process-requests-concurrently-43f3e3cd2350?source=rss------bug_bounty-5 | Ebrahimmagdy | bug-bounty, vulnerability, race-condition, unlimited, bugs | 31-Oct-2025 |
| ☕ When a REST Route Spills the Beans: Finding an Author-enumeration Bug (CVE-2023–5561) | https://aiwolfie.medium.com/when-a-rest-route-spills-the-beans-finding-an-author-enumeration-bug-cve-2023-5561-ce0acde23653?source=rss------bug_bounty-5 | AIwolfie | wordpress, cve-2023-5561, ethical-hacking, cve, bug-bounty | 30-Oct-2025 |
| My Journey Into Cybersecurity: The Story of Haruki Kira | https://medium.com/@hrukkr/my-journey-into-cybersecurity-the-story-of-haruki-kira-6406c1c70e47?source=rss------bug_bounty-5 | H4ruk7 | cyberattack, hacking, cybersecurity, bug-bounty-tips, bug-bounty | 30-Oct-2025 |
| SQL Injection — The Most Practical Guide for Beginners | https://kd-200.medium.com/sql-injection-the-most-practical-guide-for-beginners-e9d2ce946a49?source=rss------bug_bounty-5 | Nitin yadav | sql-injection, bug-bounty, technology, information-security, cybersecurity | 30-Oct-2025 |
| Race condition — Limits? What limits? — Webhook quota cracked (10 → 81) | https://0xmostafa.medium.com/race-condition-limits-what-limits-webhook-quota-cracked-10-81-3336afdd8ab4?source=rss------bug_bounty-5 | Mostafa Muhammed | bug-bounty, hacking, bug-bounty-writeup, cybersecurity, business-logic-bug | 30-Oct-2025 |
| How I Reported a Pre-Account Hijack Affecting Any Gmail User (Even Google Employees)- My Bug… | https://infosecwriteups.com/how-i-reported-a-pre-account-hijack-affecting-any-gmail-user-even-google-employees-my-bug-258180c8dd70?source=rss------bug_bounty-5 | Harsh kothari | security, bug-bounty, cybersecurity, google | 30-Oct-2025 |
| The Tool Addiction — Why Hackers Obsess Over Tools & AI (and how to start using your brain) | https://medium.com/@viratavi1223/the-tool-addiction-why-hackers-obsess-over-tools-ai-and-how-to-start-using-your-brain-4cb5f345f2c5?source=rss------bug_bounty-5 | Viratavi | hackerone, bug-bounty, bug-bounty-tips, ethical-hacking, hacking | 30-Oct-2025 |
| When a feature Becomes a Backdoor | https://medium.com/@rajveer_0101/when-a-feature-becomes-a-backdoor-6fa83e6497fd?source=rss------bug_bounty-5 | Rajveer | bugbounty-writeup, bug-bounty, broken-access-control, authentication, hacking | 30-Oct-2025 |
| HTTP requests & responses in web security | https://infyra.medium.com/http-requests-responses-in-web-security-5ce0c8012c03?source=rss------bug_bounty-5 | Md. EMTIAZ AHMED | web-security, vulnerability, bug-bounty, bug-bounty-tips, https | 30-Oct-2025 |
| ⚡ Race Conditions in Web 3.0: Double-Spend Beyond Blockchain | https://medium.com/@narendarlb123/race-conditions-in-web-3-0-double-spend-beyond-blockchain-5be1b0df6dd4?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, ai, cybersecurity, infosec | 30-Oct-2025 |
| Passive Recon 2.0: Mining Telemetry and Third-Party Metadata for Entry Points | https://javascript.plainenglish.io/passive-recon-2-0-mining-telemetry-and-third-party-metadata-for-entry-points-5e92cc76b7fe?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, bug-bounty, infosec, information-security, ai | 30-Oct-2025 |
| Business Logic Flaw in Snapchat $ | https://medium.com/@abderrahmaneaksoum/business-logic-flaw-in-snapchat-6f692d166177?source=rss------bug_bounty-5 | Bx1 | bug-bounty | 30-Oct-2025 |
| Mastering Subdomain Takeover: Step-by-Step Guide with Real Tools and Techniques | https://medium.com/@verylazytech/mastering-subdomain-takeover-step-by-step-guide-with-real-tools-and-techniques-8f1c8a4583ca?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, hacking, cybersecurity, ethical-hacking, penetration-testing | 30-Oct-2025 |
| How I Hacked IIT Delhi | https://infosecwriteups.com/how-i-hacked-iit-delhi-885a7f810292?source=rss------bug_bounty-5 | StvRoot | programming, cybersecurity, bug-bounty, technology, artificial-intelligence | 30-Oct-2025 |
| $1000 Bounty: GitLab Security Flaw Exposed | https://infosecwriteups.com/1000-bounty-gitlab-security-flaw-exposed-dd309788abb4?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty, bug-bounty-tips, gitlab, bug-bounty-writeup | 30-Oct-2025 |
| unauthorized authentication to enterprise infrastructure that used by Oppo alibaba$$.. | https://medium.com/@abderrahmaneaksoum/unauthorized-authentication-to-enterprise-infrastructure-that-used-by-oppo-alibaba-236dd9e53652?source=rss------bug_bounty-5 | Bx1 | hacking, bug-bounty | 30-Oct-2025 |
| Lab: SameSite Strict bypass via client-side redirect | https://medium.com/@prasangampathak9/lab-samesite-strict-bypass-via-client-side-redirect-81fed4306b3e?source=rss------bug_bounty-5 | CyberSec Xploit | Prasangam | hacking, bug-bounty, web-security, open-redirect, cybersecurity | 30-Oct-2025 |
| IDOR : Very simple IDOR resulted in $500 | https://medium.com/@defidev59/idor-very-simple-idor-resulted-in-500-1d0c3b725631?source=rss------bug_bounty-5 | Defidev | bugbounty-poc, bug-bounty-tips, bug-bounty, bugbounty-writeup, cybersecurity | 30-Oct-2025 |
| broken access control IDOR in Reddit $$ | https://medium.com/@abderrahmaneaksoum/broken-access-control-idor-in-reddit-5fcd05b9a767?source=rss------bug_bounty-5 | Bx1 | bug-bounty | 30-Oct-2025 |
| 8 Realistic Interview Questions on Attacks Against Active Directory | https://medium.com/meetcyber/8-realistic-interview-questions-on-attacks-against-active-directory-4a28f5e96113?source=rss------bug_bounty-5 | CyberSenpai | active-directory, information-security, interview, cybersecurity, bug-bounty | 30-Oct-2025 |
| How Leaked Credentials can benefit Bug Bounty Hunters | https://medium.com/@breachcollectiondotcom/how-leaked-credentials-can-benefit-bug-bounty-hunters-71252b8781da?source=rss------bug_bounty-5 | BreachCollection | bug-bounty-writeup, cybersecurity, bug-bounty, programming, bug-bounty-tips | 30-Oct-2025 |
| Web Cache Deception Attack – A Hidden Threat in Today’s Web Applications | https://medium.com/@aashifm/web-cache-deception-attack-a-hidden-threat-in-todays-web-applications-9b7b4b37a3a0?source=rss------bug_bounty-5 | 127.0.0.1 | cybersecurity, web-security, bug-bounty, web-cache-deception, cache | 30-Oct-2025 |
| How Swagger UI Can Accidentally Expose Your API | https://medium.com/@ibtissamhammadi1/how-swagger-ui-can-accidentally-expose-your-api-2bf02c2cb2ba?source=rss------bug_bounty-5 | Ibtissam hammadi | swagger, api-security, cybersecurity, web-security, bug-bounty | 30-Oct-2025 |
| How i found account takeover in private bug bounty program of bugcrowd | https://medium.com/@InsbatArshad/how-i-found-account-takeover-in-private-bug-bounty-program-of-bugcrowd-21df5ed3ed3c?source=rss------bug_bounty-5 | Be nice insabat | cybersecurity, money, penetration-testing, bug-bounty, programming | 30-Oct-2025 |
| Email Verification Bypass — A Simple Yet Overlooked Business Logic Flaw | https://ch1ta.medium.com/email-verification-bypass-a-simple-yet-overlooked-business-logic-flaw-5a9c5980f2aa?source=rss------bug_bounty-5 | Lakshya | authentication, bugs, cybersecurity, bug-bounty, cyber-security-awareness | 30-Oct-2025 |
| How I Made ChatGPT My Personal Hacking Assistant (And Broke Their “AI-Powered” Security) | https://infosecwriteups.com/how-i-made-chatgpt-my-personal-hacking-assistant-and-broke-their-ai-powered-security-ee37d4a725c2?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, bug-bounty, cybersecurity, ai, money | 30-Oct-2025 |
| Deep Shadow Wings: Powerful Web Recon — Simple, Fast, Effective | https://adce626.medium.com/deep-shadow-wings-powerful-web-recon-simple-fast-effective-305648621512?source=rss------bug_bounty-5 | adce626 | bug-bounty-tips, recon, bug-bounty | 30-Oct-2025 |
| Web Cache Deception Attack – A Hidden Threat in Today’s Web Applications | https://infosecwriteups.com/web-cache-deception-attack-a-hidden-threat-in-todays-web-applications-9b7b4b37a3a0?source=rss------bug_bounty-5 | 127.0.0.1 | cybersecurity, web-security, bug-bounty, web-cache-deception, cache | 30-Oct-2025 |
| Hacking APIs: HTTP Parameter Pollution | https://iaraoz.medium.com/hacking-apis-http-parameter-pollution-fba389e55ada?source=rss------bug_bounty-5 | Israel Aráoz Severiche | owasp, bug-bounty, web-development, hacking, security | 30-Oct-2025 |
| How Swagger UI Can Accidentally Expose Your API | https://medium.com/@ibtissamhammadi1/how-swagger-ui-can-accidentally-expose-your-api-2bf02c2cb2ba?source=rss------bug_bounty-5 | Ibtissam | swagger, api-security, cybersecurity, web-security, bug-bounty | 30-Oct-2025 |
| ParamSpider Essential Guide to URL Extraction | https://medium.com/@jpablo13/paramspider-essential-guide-to-url-extraction-161ba6c56e9f?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, penetration-testing, technology, bug-bounty, hacking | 29-Oct-2025 |
| CORS Vulnerability | https://medium.com/@fatimahasan022/cors-vulnerability-fdf22666776c?source=rss------bug_bounty-5 | Fatimahasan | cybersecurity, portswigger, pentesting, bug-bounty | 29-Oct-2025 |
| Finding my first vulnerability on NASA: The Power of Google Dorking | https://ozgun32.medium.com/finding-my-first-vulnerability-on-nasa-the-power-of-google-dorking-6a5a65c7f413?source=rss------bug_bounty-5 | ozgun32 | bug-bounty-writeup, bug-bounty, cybersecurity | 29-Oct-2025 |
| Find Sensitive Information using: Google Dorking, Shodan, and FOFA | https://medium.com/@commanak46/find-sensitive-information-using-google-dorking-shodan-and-fofa-cce4b19b3940?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-writeup, technology, bug-bounty, bug-bounty-tips, vulnerability | 29-Oct-2025 |
| ParamSpider Essential Guide to URL Extraction | https://medium.com/meetcyber/paramspider-essential-guide-to-url-extraction-161ba6c56e9f?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, penetration-testing, technology, bug-bounty, hacking | 29-Oct-2025 |
| Breaking and Defending API Keys: A Hacker’s Playbook for Real-World Pentesting | https://medium.com/@verylazytech/breaking-and-defending-api-keys-a-hackers-playbook-for-real-world-pentesting-b67e50badc94?source=rss------bug_bounty-5 | Very Lazy Tech | api, ethical-hacking, penetration-testing, bug-bounty, cybersecurity | 29-Oct-2025 |
| 30 Days to Your First Bug Bounty Payout $$$$ — A Practical Playbook | https://medium.com/@monujangra070/30-days-to-your-first-bug-bounty-payout-a-practical-playbook-dfa488e3d9b2?source=rss------bug_bounty-5 | Monujangra | make-money-online, learning, bug-bounty, technology, hacking | 29-Oct-2025 |
| DOM-based XSS on Microsoft.com | https://medium.com/@niraj1mahajan/dom-based-xss-on-microsoft-com-f704227230a7?source=rss------bug_bounty-5 | Niraj Mahajan | xs, bug-bounty, microsoft | 29-Oct-2025 |
| 30 Days to Your First Bug Bounty Payout $$$$ — A Practical Playbook | https://medium.com/@xmxa-tech/30-days-to-your-first-bug-bounty-payout-a-practical-playbook-dfa488e3d9b2?source=rss------bug_bounty-5 | Monujangra | make-money-online, learning, bug-bounty, technology, hacking | 29-Oct-2025 |
| So… I Could Control the OTP ♂️ | https://medium.com/@rajveer_0101/so-i-could-control-the-otp-%EF%B8%8F-503ba61997ff?source=rss------bug_bounty-5 | Rajveer | authentication, hackerone, information-security, two-factor-authentication, bug-bounty | 29-Oct-2025 |
| Dorks For Sensitive Information Disclosure Part-4 | https://medium.com/@devanshpatel930/dorks-for-sensitive-information-disclosure-part-4-5bc360ce551e?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips, bugs | 29-Oct-2025 |
| From a Simple IDOR to a Major Security Finding | https://medium.com/@ibtissamhammadi1/from-a-simple-idor-to-a-major-security-finding-6386077e4b8d?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, cybersecurity, bug-bounty, security, idor | 29-Oct-2025 |
| Web Cache Poisoning — Part 1: Understanding the Beast | https://medium.com/@Aacle/web-cache-poisoning-part-1-understanding-the-beast-d303f1741e48?source=rss------bug_bounty-5 | Abhishek meena | cybersecurity, bug-bounty, bug-bounty-tips, infosec | 29-Oct-2025 |
| Dorks For Sensitive Information Disclosure Part-4 | https://infosecwriteups.com/dorks-for-sensitive-information-disclosure-part-4-5bc360ce551e?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips, bugs | 29-Oct-2025 |
| Automation Will Fail You: The Harsh Truth Every Bug Bounty Hunter Learns the Hard Way | https://medium.com/@prayerskhristi/automation-will-fail-you-the-harsh-truth-every-bug-bounty-hunter-learns-the-hard-way-ad02cbfc7bda?source=rss------bug_bounty-5 | Prayers Khristi | automation, penetration-testing, cybersecurity, bug-bounty, security | 29-Oct-2025 |
| The Cat-and-Mouse Game of a Cloud Metadata SSRF Vulnerability | https://medium.com/@ramshath1999/the-cat-and-mouse-game-of-a-cloud-metadata-ssrf-vulnerability-6efbb26e216a?source=rss------bug_bounty-5 | Ramshath | ssrf, hacking, cybersecurity, security, bug-bounty | 29-Oct-2025 |
| How I Became the Digital Spider-Man: Swinging Through Every Security Layer ️️ | https://medium.com/@iski/how-i-became-the-digital-spider-man-swinging-through-every-security-layer-%EF%B8%8F-%EF%B8%8F-7882e394832b?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, bug-bounty, infosec, cybersecurity, money | 29-Oct-2025 |
| Ghost HTTP Methods: How HTTP Verb Mutation Bypasses Modern WAFs across Middleware Layers | https://medium.com/@pratikdahal777/ghost-http-methods-how-http-verb-mutation-bypasses-modern-wafs-across-middleware-layers-32b66cd392ca?source=rss------bug_bounty-5 | Pratik Dahal | http-request, web-application-security, security-research, bug-bounty, middleware | 29-Oct-2025 |
| Hacking APIs: Cache Poisoning and Deception Attacks | https://iaraoz.medium.com/hacking-apis-cache-poisoning-and-deception-attacks-19527e2d7e6e?source=rss------bug_bounty-5 | Israel Aráoz Severiche | bug-bounty, rest-api, pentesting, cybersecurity, hacking | 29-Oct-2025 |
| The Cat-and-Mouse Game of a Cloud Metadata SSRF Vulnerability | https://systemweakness.com/the-cat-and-mouse-game-of-a-cloud-metadata-ssrf-vulnerability-6efbb26e216a?source=rss------bug_bounty-5 | Ramshath | ssrf, hacking, cybersecurity, security, bug-bounty | 29-Oct-2025 |
| When Your Bug Bounty Gets Stolen: A Guide to Reclaiming What’s Rightfully Yours | https://medium.com/@Godskaren/when-your-bug-bounty-gets-stolen-a-guide-to-reclaiming-whats-rightfully-yours-6ee3bf21ffc3?source=rss------bug_bounty-5 | Krystal | intellectual-property, bug-bounty, cybersecurity, this-happened-to-me, hacked | 28-Oct-2025 |
| Guía Esencial de ParamSpider para la Extracción de URLs | https://medium.com/@jpablo13/gu%C3%ADa-esencial-de-paramspider-para-la-extracci%C3%B3n-de-urls-b0af9177ac1d?source=rss------bug_bounty-5 | JPablo13 | technology, penetration-testing, bug-bounty, cybersecurity, hacking | 28-Oct-2025 |
| How Hackers Use ChatGPT — The Dark and Bright Sides of AI | https://medium.com/@monujangra070/how-hackers-use-chatgpt-the-dark-and-bright-sides-of-ai-f8ab73b682f5?source=rss------bug_bounty-5 | Monujangra | technology, bug-bounty, hacking, medium, writing | 28-Oct-2025 |
| CSRF Lab Walkthrough: Exploiting Non-Session Cookie Token Binding | https://medium.com/@prasangampathak9/csrf-lab-walkthrough-exploiting-non-session-cookie-token-binding-e3531b6497b6?source=rss------bug_bounty-5 | CyberSec Xploit | Prasangam | websecurity-testing, bug-bounty, web-security, csrf | 28-Oct-2025 |
| Understanding Software and Data Integrity Failures in the Real World | https://medium.com/meetcyber/understanding-software-and-data-integrity-failures-in-the-real-world-cca3b5096469?source=rss------bug_bounty-5 | CyberSenpai | owasp, bug-bounty, information-security, cybersecurity, penetration-testing | 28-Oct-2025 |
| The Hidden Risk in AI: Context Switching Attacks | https://fdzdev.medium.com/the-hidden-risk-in-ai-context-switching-attacks-beb77c3526f2?source=rss------bug_bounty-5 | Facundo Fernandez | hacking, cybersecurity, machine-learning, bug-bounty, artificial-intelligence | 28-Oct-2025 |
| From One to Many — The Forbidden Playbook for Scaling a Single Bug into a Family of Findings | https://medium.com/@viratavi1223/from-one-to-many-the-forbidden-playbook-for-scaling-a-single-bug-into-a-family-of-findings-c85478aeb6ab?source=rss------bug_bounty-5 | Viratavi | bug-bounty, ethical-hacking, hackerone, bug-bounty-tips, hacking | 28-Oct-2025 |
| The Day I Became Everyone: How User Swapping Turned Me into a Digital Shapeshifter | https://infosecwriteups.com/the-day-i-became-everyone-how-user-swapping-turned-me-into-a-digital-shapeshifter-91358848a593?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, ai, cybersecurity, bug-bounty-tips | 28-Oct-2025 |
| How a Small Chain Turned Duplicates into a Valid Bug with Post-Removal Access | https://medium.com/@OXmekky/how-a-small-chain-turned-duplicates-into-a-valid-bug-with-post-removal-access-f2829526595f?source=rss------bug_bounty-5 | Ahmed Hassan | bug-bounty-writeup, broken-access-control, privilege-escalation, bug-bounty-tips, bug-bounty | 28-Oct-2025 |
| How a Single Message Could Take Down Discourse Instances (Bagging a $1K Bounty) | https://medium.com/@theteatoast/how-a-single-message-could-take-down-discourse-instances-bagging-a-1k-bounty-fc0d4adfde84?source=rss------bug_bounty-5 | toast | cve, bug-bounty, hacking, bug-bounty-writeup, bug-bounty-tips | 28-Oct-2025 |
| Getting Started with Bug Bounties: A Complete Beginner’s Guide | https://medium.com/@Tech-Journal/getting-started-with-bug-bounties-a-complete-beginners-guide-81e90945c581?source=rss------bug_bounty-5 | Tech Journal | cybersecurity, hacking, bug-bounty, make-money-online, tips | 28-Oct-2025 |
| How a Simple Logic Flaw Can Unlock Private User Data | https://medium.com/@ibtissamhammadi1/how-a-simple-logic-flaw-can-unlock-private-user-data-19788156c270?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, data-privacy, bug-bounty, infosec, cybersecurity | 28-Oct-2025 |
| Hardening Against Path Traversal: Breaking the Cyber Chain from DevOps to SecOps -TR | https://medium.com/@capitansec/hardening-against-path-traversal-breaking-the-cyber-chain-from-devops-to-secops-tr-d91bbe0abd3b?source=rss------bug_bounty-5 | Burak Bozacı | cybersecurity, career-paths, devops, bug-bounty, technology | 28-Oct-2025 |
| C{api}tal walkthrough. | https://medium.com/@jungoskillet/c-api-tal-walkthrough-999f4ce8597e?source=rss------bug_bounty-5 | Jei Ess | infosec, bug-bounty, cybersecurity, hacking, walkthrough | 28-Oct-2025 |
| How I Turned Glitches Into Rent Money: A Year in Bug Bounties | https://medium.com/@neonmaxima/how-i-turned-glitches-into-rent-money-a-year-in-bug-bounties-6b10a5d98f90?source=rss------bug_bounty-5 | Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA] | penetration-testing, bug-bounty, programming, hacking, making-money-online | 28-Oct-2025 |
| Infrastructure Collapse: How a Forgotten Folder in Coca-Cola’s Network Exposed Critical… | https://medium.com/@d0rking/infrastructure-collapse-how-a-forgotten-folder-in-coca-colas-network-exposed-critical-a4d9dc1ab8a6?source=rss------bug_bounty-5 | d0rking | bug-bounty, penetration-testing, intigriti, coca-cola, recon | 28-Oct-2025 |
| Reverse Engineering API Security: How I Broke and bypass “Request-Hash” or “Signature” Protection | https://medium.com/@ABAlawsi/reverse-engineering-api-security-how-i-broke-and-bypass-request-hash-or-signature-protection-7c4f64276661?source=rss------bug_bounty-5 | Ali Bahaa Alawsi | cybersecurity, mobile-security, ethical-hacking, bug-bounty, api-security | 28-Oct-2025 |
| Hacking APIs: Exploiting Batch and Mass Assignment | https://iaraoz.medium.com/hacking-apis-exploiting-batch-and-mass-assignment-3b67a56dbd01?source=rss------bug_bounty-5 | Israel Aráoz Severiche | security, information-security, owasp, bug-bounty, cybersecurity | 28-Oct-2025 |
| CSRF Bypass Techniques (Deep Dive) | https://medium.com/@ikajakam/csrf-bypass-techniques-deep-dive-12ec2f985362?source=rss------bug_bounty-5 | Ikajakam | pentesting, csrf-bypass, bug-bounty, cors, csrf | 28-Oct-2025 |
| How I Discovered an HTML Injection via a Signup Form | https://medium.com/@gehadr73/how-i-discovered-an-html-injection-via-a-signup-form-4aa29b7da2a0?source=rss------bug_bounty-5 | Gehad Reda | web-security, ethical-hacking, bug-bounty, cybersecurity, web-development | 27-Oct-2025 |
| Why 90% of Websites Fail at Basic Security Headers | https://medium.com/@vipulsonule71/why-90-of-websites-fail-at-basic-security-headers-905b76a9c52c?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, cybersecurity, tech, hacking, programming | 27-Oct-2025 |
| Every Beginner Misses Bugs — Until They Learn This Mindset | https://medium.com/@vivekps143/every-beginner-misses-bugs-until-they-learn-this-mindset-a995db2c4707?source=rss------bug_bounty-5 | Vivek PS | cybersecurity, ethical-hacking, mindset, programming, bug-bounty | 27-Oct-2025 |
| #4 RFI: From an External URL Into your Application | https://infosecwriteups.com/4-rfi-from-an-external-url-into-your-application-a5aeb1c5958c?source=rss------bug_bounty-5 | Imvkale | owasp-top-10, vulnerability, bug-bounty, owasp, remote-file-inclusion | 27-Oct-2025 |
| Week 15 — Automated JS Enum: Methodology & Architecture | https://infosecwriteups.com/week-15-automated-js-enum-methodology-architecture-31becf8693ec?source=rss------bug_bounty-5 | Aang | ethical-hacking, information-technology, bug-bounty, bug-bounty-writeup, infosec | 27-Oct-2025 |
| Ransomware Explained: What It Is and How It Affects You | https://medium.com/@TheCyberKnight/ransomware-explained-what-it-is-and-how-it-affects-you-2e1cf3993b96?source=rss------bug_bounty-5 | TheCyberKnight | bug-bounty, information-technology, cybersecurity, ransomware, cyberattack | 27-Oct-2025 |
| Ketika Finance Bisa Jadi Admin: Privilege Escalation di Sistem Payroll | https://medium.com/@robisubagja158/ketika-finance-bisa-jadi-admin-privilege-escalation-di-sistem-payroll-3344042258a0?source=rss------bug_bounty-5 | Robi Mohamad subagja | privilege-escalation, bug-bounty, broken-access-control, cybersecurity | 27-Oct-2025 |
| Tools That Every Bug Bounty Hunter Should Master | https://medium.com/write-earn/tools-that-every-bug-bounty-hunter-should-master-6ade8458b5d9?source=rss------bug_bounty-5 | TheCyberKnight | hacking, bug-bounty, freelancing, cybersecurity, technology | 27-Oct-2025 |
| Most hunters chase scanners and payload lists. | https://medium.com/@viratavi1223/most-hunters-chase-scanners-and-payload-lists-f946c25db6f3?source=rss------bug_bounty-5 | Viratavi | hackerone, hacking, ethical-hacking, bug-bounty, bug-bounty-tips | 27-Oct-2025 |
| Regular Expressions (RegEx) | https://medium.com/@mahmoudayman201571/regular-expressions-regex-418b81378334?source=rss------bug_bounty-5 | Notme | python-regex, bug-bounty, regex, hacking, regex-in-python | 27-Oct-2025 |
| 5 Slack Templates for Efficient Bug Reporting (Copy, Paste, Save Everyone’s Time) | https://medium.com/@lolashaffy/5-slack-templates-for-efficient-bug-reporting-copy-paste-save-everyones-time-650129d13165?source=rss------bug_bounty-5 | Lola Ogungbuaro | bug-report, software-engineering, qa-testing, qa, bug-bounty | 27-Oct-2025 |
| Pwn2Own Ireland 2025 : 73 failles zero-day révélées pour 1 million $ de primes | https://marcbarbezat.medium.com/pwn2own-ireland-2025-73-failles-zero-day-r%C3%A9v%C3%A9l%C3%A9es-pour-1-million-de-primes-25a2592dde57?source=rss------bug_bounty-5 | Marc Barbezat | pwn2own, zero-day, irlande, bug-bounty | 27-Oct-2025 |
| SSRF — Part 3: Advanced Tricks, Timing Channels & Out-of-the-Box Detection | https://medium.com/@Aacle/ssrf-part-3-advanced-tricks-timing-channels-out-of-the-box-detection-693c07c97015?source=rss------bug_bounty-5 | Abhishek meena | bug-bounty, ssrf, bug-bounty-tips, cybersecurity, infosec | 27-Oct-2025 |
| Announcing Creek Testnet’s Bug Bounty Program | https://medium.com/@creekprotocol/announcing-creek-testnets-bug-bounty-program-4580edca378c?source=rss------bug_bounty-5 | Creek Finance | incentivized-testnet, bug-bounty, sui-network, gold, testnet-airdrop | 27-Oct-2025 |
| I Built an AI Smart Contract Auditor That Actually Works (Here’s the Proof) | https://medium.com/@dhillon.andrew/i-built-an-ai-smart-contract-auditor-that-actually-works-heres-the-proof-61918d2f70f1?source=rss------bug_bounty-5 | Dhillon Andrew Kannabhiran | artificial-intelligence, ai-agent, bug-bounty, web3, solidity | 27-Oct-2025 |
| DEADFACE CTF 2025 part3- Hack the Night | https://devnull-0.medium.com/deadface-ctf-2025-part3-hack-the-night-10d29525be79?source=rss------bug_bounty-5 | Aderogbarufai | hacking, bug-bounty, deadface-ctf, ctf-writeup | 27-Oct-2025 |
| What No One Tells You Before You Start Bug Bounty Hunting | https://medium.com/write-your-world/what-no-one-tells-you-before-you-start-bug-bounty-hunting-5449926f6f24?source=rss------bug_bounty-5 | TheCyberKnight | bug-bounty, beginners-guide, information-security, hacking, cybersecurity | 27-Oct-2025 |
| Network Sniffing with tcpdump and Wireshark: Step-by-Step Hacker Edition for Real-World Pentesting | https://medium.com/@verylazytech/network-sniffing-with-tcpdump-and-wireshark-step-by-step-hacker-edition-for-real-world-pentesting-7e34f455ec37?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, bug-bounty, hacking, penetration-testing, ethical-hacking | 27-Oct-2025 |
| The Hidden Goldmine: Why API Bugs Pay So Much | https://osintteam.blog/the-hidden-goldmine-why-api-bugs-pay-so-much-e570cc4ca988?source=rss------bug_bounty-5 | Vipul Sonule | programming, ai, bug-bounty, cybersecurity, tech | 27-Oct-2025 |
| Information Disclosure: The Bug Bounty Hunter’s Gold Mine - A Practical Guide | https://santhosh-adiga-u.medium.com/information-disclosure-the-bug-bounty-hunters-gold-mine-a-practical-guide-1a31428f882a?source=rss------bug_bounty-5 | Santhosh Adiga U | bug-bounty, information-disclosure, penetration-testing, ethical-hacking | 27-Oct-2025 |
| Do you think bypassing SSL pinning can get you a bounty? | https://medium.com/@0xk3r0/do-you-think-bypassing-ssl-pinning-can-get-you-a-bounty-6cf894148953?source=rss------bug_bounty-5 | Kyrillos nady | penetration-testing, mobile-security, cybersecurity, android, bug-bounty | 27-Oct-2025 |
| How IDOR and Business Logic Flaw Exposed PII | https://scriptjacker.medium.com/how-idor-and-business-logic-flaw-exposed-pii-24545a078e04?source=rss------bug_bounty-5 | Parth Narula | penetration-testing, idor, vapt, bug-bounty, ethical-hacking | 27-Oct-2025 |
| Insecure Direct Object Reference (IDOR) in engcastleportal.com | https://medium.com/@mohammedmogeab/insecure-direct-object-reference-idor-in-engcastleportal-com-a2ac44d62f00?source=rss------bug_bounty-5 | Mohammed Mogeab Ahmed Al-hajj | owasp, security, infosec, bug-bounty, web-security | 27-Oct-2025 |
| Part 1 of Abusing Envoy+Kubernetes Staging Servers & Verb Tampering to achieve XSS, IDORs, and… | https://medium.com/@alimuhammadsecured/part-1-of-abusing-envoy-kubernetes-staging-servers-verb-tampering-to-achieve-xss-idors-and-8f4620c035b2?source=rss------bug_bounty-5 | Alimuhammadsecured | bug-bounty, ctf, technical-writing, web-hacking | 26-Oct-2025 |
| Privilege Escalation Turned a Regular User Into an Admin [part-1] | https://senoritaahunter.medium.com/privilege-escalation-turned-a-regular-user-into-an-admin-part-1-fbe3d82440ca?source=rss------bug_bounty-5 | Senorita_01 | bug-bounty-tips, cybersecurity, bug-bounty, privilege-escalation, bugbounty-writeup | 26-Oct-2025 |
| Tesla.com patched Exposed Damage Disclosure Files leaking VIN number after bugcrowd rejected my… | https://medium.com/@krivadna/tesla-com-patched-exposed-damage-disclosure-files-leaking-vin-number-after-bugcrowd-rejected-my-d6cafcaec98e?source=rss------bug_bounty-5 | Krivadna | cybersecurity, infosec, penetration-testing, bug-bounty, bugbounty-writeup | 26-Oct-2025 |
| CSRF Lab Solution: Token Not Tied to User Session | https://medium.com/@prasangampathak9/csrf-lab-solution-token-not-tied-to-user-session-4c84b58e20a0?source=rss------bug_bounty-5 | CyberSec Xploit | Prasangam | csrf-token, ethical-hacking, bug-bounty, web-hacking | 26-Oct-2025 |
| JSON ResponseDisclosure: From Recon to Advanced Detection | https://osintteam.blog/json-responsedisclosure-from-recon-to-advanced-detection-3413df37461c?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty-tips, bug-bounty, vulnerability, bug-bounty-writeup | 26-Oct-2025 |
| CTF Writeup — MarkdownSmartPreview (EJS SSTI) — Steps & PoC | https://medium.com/@8wv/ctf-writeup-markdownsmartpreview-ejs-ssti-steps-poc-4eb2670c8db7?source=rss------bug_bounty-5 | SaLeH | bug-bounty-writeup, bug-hunting, bug-bounty, cybersecurity, bugbounty-writeup | 26-Oct-2025 |
| Three of my favourite XSS bugs in bugbounties with my real life findings! | https://medium.com/@offsec12/three-of-my-favourite-xss-bugs-in-bugbounties-with-my-real-life-findings-04960c2cecf5?source=rss------bug_bounty-5 | Diman | web-development, web-security, bugbounty-tips, cybersecurity, bug-bounty | 26-Oct-2025 |
| Android Flaw + Cloud Misconfigs + Account Takeover = Disaster⚡ | https://vettrivel007.medium.com/android-flaw-cloud-misconfigs-account-takeover-disaster-c17e2d291ef3?source=rss------bug_bounty-5 | VETTRIVEL | bug-bounty, cloud, android, cybersecurity, infosec | 26-Oct-2025 |
| How I Hacked NASA | https://medium.com/@pawanparmarofficial45/how-i-hacked-nasa-09c33a813c48?source=rss------bug_bounty-5 | Pawan parmar | bugbounty-writeup, nasa, bug-bounty-tips, hacking, bug-bounty | 26-Oct-2025 |
| How I Became the Unofficial Company Archivist (And Saw Things I Can’t Unsee) | https://infosecwriteups.com/how-i-became-the-unofficial-company-archivist-and-saw-things-i-cant-unsee-626c711831e4?source=rss------bug_bounty-5 | Iski | cybersecurity, money, hacking, bug-bounty-tips, bug-bounty | 26-Oct-2025 |
| how i founded my first reflected XSS in public vdp on h1 | https://medium.com/@sh3rif0x/how-i-founded-my-first-reflected-xss-in-public-vdp-on-h1-d566ddcb63d3?source=rss------bug_bounty-5 | ali badr | ctf-writeup, bug-bounty, information-security, hackerone-report, infosec | 26-Oct-2025 |
| How To Not Get in Trouble Finding Beg Bounties | https://medium.com/activated-thinker/how-to-not-get-in-trouble-finding-beg-bounties-bee02cbef619?source=rss------bug_bounty-5 | Rehan Sohail | activated-thinker, bug-bounty-writeup, bug-bounty-tips, bug-bounty, bug-bounty-hunter | 26-Oct-2025 |
| Pentesting Firebase | https://ramizsmnov.medium.com/pentesting-firebase-f723fd510dce?source=rss------bug_bounty-5 | Ramiz Osmanov | bug-bounty, android-pentesting, firebase, pentesting, firebasesecurityrules | 26-Oct-2025 |
| Post-Exploitation Toolkit: 25 Commands Every Hacker Uses (Step-by-Step Guide) | https://medium.com/@verylazytech/post-exploitation-toolkit-25-commands-every-hacker-uses-step-by-step-guide-9075ebc6f7f1?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 26-Oct-2025 |
| How I Turned My Bug Bounty Workflow Into an AI-Powered Money Machine | https://infosecwriteups.com/how-i-turned-my-bug-bounty-workflow-into-an-ai-powered-money-machine-e6eeffea9cd8?source=rss------bug_bounty-5 | Abdellaoui Ahmed | artificial-intelligence, money, cybersecurity, automation, bug-bounty | 26-Oct-2025 |
| The $2,000 Bug That Changed My Life: How a Tiny URL Parameter Broke Web-Store Pricing !! | https://infosecwriteups.com/the-2-000-bug-that-changed-my-life-how-a-tiny-url-parameter-broke-web-store-pricing-7275c3d1204b?source=rss------bug_bounty-5 | Helmiriahi | bug-bounty, ecommerce, infosec, security, web-security | 26-Oct-2025 |
| Advanced Bug Bounty Recon: A Methodology That Uncovers Hidden Vulnerabilities | https://santhosh-adiga-u.medium.com/advanced-bug-bounty-recon-a-methodology-that-uncovers-hidden-vulnerabilities-7450bcf5200f?source=rss------bug_bounty-5 | Santhosh Adiga U | hacking, bug-bounty, ethical-hacking, penetration-testing, reconnaissance | 26-Oct-2025 |
| The Ultimate Payload Checklist for XSS, SQLi, LFI, and SSTI | https://santhosh-adiga-u.medium.com/the-ultimate-payload-checklist-for-xss-sqli-lfi-and-ssti-b3bd9f1be2a5?source=rss------bug_bounty-5 | Santhosh Adiga U | cybersecurity, ethical-hacking, bug-bounty, payload, penetration-testing | 26-Oct-2025 |
| Arjun’s Guide to Discovering Hidden HTTP Parameters and Bug Bounty | https://medium.com/@jpablo13/arjuns-guide-to-discovering-hidden-http-parameters-and-bug-bounty-678dc66763d7?source=rss------bug_bounty-5 | JPablo13 | technology, reconnaissance, bug-bounty, hacking, cybersecurity | 25-Oct-2025 |
| Web Cache Deception: A Complete Beginner to Advanced Guide | https://osintteam.blog/web-cache-deception-a-complete-beginner-to-advanced-guide-94cf851cd89f?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty-writeup, bug-bounty, bug-bounty-tips, technology | 25-Oct-2025 |
| Arjun’s Guide to Discovering Hidden HTTP Parameters and Bug Bounty | https://medium.com/meetcyber/arjuns-guide-to-discovering-hidden-http-parameters-and-bug-bounty-678dc66763d7?source=rss------bug_bounty-5 | JPablo13 | technology, reconnaissance, bug-bounty, hacking, cybersecurity | 25-Oct-2025 |
| Recon Wins Again: Uncovering a Billing Portal Leak Through Wayback Machine | https://senoritaahunter.medium.com/recon-wins-again-uncovering-a-billing-portal-leak-through-wayback-machine-c7301e815fc5?source=rss------bug_bounty-5 | Senorita_01 | bug-hunting, bug-bounty-writeup, bug-bounty, bug-bounty-tips, cybersecurity | 25-Oct-2025 |
| Free Domain Leak Check: Run It in 60 Seconds | https://medium.com/@alexandrevandammepro/free-domain-leak-check-run-it-in-60-seconds-fcc4bccee73d?source=rss------bug_bounty-5 | Alexandre Vandamme | data-breach, infosec, cybersecurity, osint, bug-bounty | 25-Oct-2025 |
| https://medium.com/@hossammostafa2003.1.1/-aebc36ed3465?source=rss------bug_bounty-5 | Hossam_Mostafa | security-research, web-security, bug-bounty, ethical-hacking, cybersecurity | 25-Oct-2025 |
| How I Made ChatGPT My Bug Hunting Intern (And It Found Stuff I’d Never Considered) | https://infosecwriteups.com/how-i-made-chatgpt-my-bug-hunting-intern-and-it-found-stuff-id-never-considered-e86a44c1f2ba?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty-tips, infosec, bug-bounty, cybersecurity | 25-Oct-2025 |
| How a Single “What If” Can Find You a Bug | https://medium.com/@viratavi1223/how-a-single-what-if-can-find-you-a-bug-665b96c1e909?source=rss------bug_bounty-5 | Viratavi | bug-bounty, hackerone, hacker, bug-bounty-tips, ethical-hacking | 25-Oct-2025 |
| Historia de una recompensa por $.$$$, Metodología aplicada y bypass de solución WAF. | https://medium.com/@dannyramirez_58605/historia-de-una-recompensa-por-metodolog%C3%ADa-aplicada-y-bypass-de-soluci%C3%B3n-waf-746a6f7a0dbf?source=rss------bug_bounty-5 | Danny Ramirez | bug-bounty-writeup, infosec, pentesting, bug-bounty | 25-Oct-2025 |
| Ignoring a Firebase Public Configuration? | https://medium.com/@m0n3m/ignoring-a-firebase-public-configuration-9ccb9159abb5?source=rss------bug_bounty-5 | M0n3m | bug-bounty-tips, data-lake, bug-bounty-writeup, hacking, bug-bounty | 25-Oct-2025 |
| $500 Bounty: Unauthorized Folder Creation with Null Name | https://medium.com/@a13h1/500-bounty-unauthorized-folder-creation-with-null-name-67064bb18e4a?source=rss------bug_bounty-5 | Abhi Sharma | hacking, infosec, null-safety, bug-bounty, cybersecurity | 25-Oct-2025 |
| AI is Taking Over Cybersecurity But That Might Be a Good Thing | https://xormium.medium.com/ai-is-taking-over-cybersecurity-but-that-might-be-a-good-thing-dcbca4a4ec94?source=rss------bug_bounty-5 | Xormium | technology, hacking, ai, bug-bounty, cybersecurity | 25-Oct-2025 |
| How Bug Bounties Can Boost Your Cybersecurity Career | https://xormium.medium.com/how-bug-bounties-can-boost-your-cybersecurity-career-ecbc45f15b00?source=rss------bug_bounty-5 | Xormium | cybersecurity, ethical-hacking, programming, bug-bounty, technology | 25-Oct-2025 |
| Web Cache Poisoning : Ancaman di Balik Kecepatan | https://medium.com/@ilman.dani11/web-cache-poisoning-ancaman-di-balik-kecepatan-67da01a9a8f4?source=rss------bug_bounty-5 | Dani Ilman | web-cache-poisoning, cache, xss-attack, bug-bounty-writeup, bug-bounty | 25-Oct-2025 |
| Why Headline Bounty Stories Mislead (and what actually builds a real security career) | https://medium.com/@ethan_hunt/why-headline-bounty-stories-mislead-and-what-actually-builds-a-real-security-career-1b5b7dcdb4ae?source=rss------bug_bounty-5 | Mandar Satam | bug-bounty, fake-news, cybersecurity | 25-Oct-2025 |
| Mastering Fileless Persistence on Linux: Techniques, Real-World Examples, and Proactive Defenses | https://medium.com/@verylazytech/mastering-fileless-persistence-on-linux-techniques-real-world-examples-and-proactive-defenses-c249012f7533?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, cybersecurity, penetration-testing, bug-bounty, ethical-hacking | 25-Oct-2025 |
| Mastering Kali Linux for Ethical Hacking: From Beginner to Advanced | https://jayshreeram-bughunter.medium.com/mastering-kali-linux-for-ethical-hacking-from-beginner-to-advanced-b96cda724b42?source=rss------bug_bounty-5 | ◦•●◉✿ ʜc ✿◉●•◦ | bug-bounty, bug-bounty-writeup, infosec, cybersecurity, bug-bounty-tips | 25-Oct-2025 |
| How I Found and Claimed a Subdomain Takeover (My First Article) | https://medium.com/@algodemo369/how-i-found-and-claimed-a-subdomain-takeover-my-first-article-560bad69d635?source=rss------bug_bounty-5 | cyber_wizard | bug-bounty, subdomain-takeover | 25-Oct-2025 |
| Modifying Locked Fields via UI Manipulation Due to Missing Server Validation | https://medium.com/@ma6641/ui-trickery-bypassing-locked-fields-with-one-browser-hack-a81300f24ba9?source=rss------bug_bounty-5 | Mohamad Abdelrahman Mohamed | cybersecurity, bug-bounty-tips, ethical-hacking, bug-bounty, web-application-security | 25-Oct-2025 |
| How I Automated My GitHub Recon for Critical Bug Bounties | https://medium.com/@ibtissamhammadi1/how-i-automated-my-github-recon-for-critical-bug-bounties-34ed27660d3a?source=rss------bug_bounty-5 | Ibtissam hammadi | automation, github, bug-bounty, reconnaissance, cybersecurity | 25-Oct-2025 |
| How I Turned Stored XSS To Account Takeover: Exploiting WebSocket-Driven Applications | https://medium.com/@mohameddiv77/how-i-turned-stored-xss-to-account-takeover-exploiting-websocket-driven-applications-d61ee2c38cba?source=rss------bug_bounty-5 | Mohamed Ibrahim | bug-bounty-tips, cybersecurity, ethical-hacking, web-pentesting, bug-bounty | 25-Oct-2025 |
| Recon Like a Hunter: Practical Tips from Real Findings Part 1 | https://medium.com/@GERRR4Y/recon-like-a-hunter-practical-tips-from-real-findings-part-1-d425d74c7c62?source=rss------bug_bounty-5 | Aya Ayman(GERR4Y) | recon, information-disclosure, bug-bounty | 25-Oct-2025 |
| Reflected XSS with Base64 — Breaching Obscurity in Seconds | https://systemweakness.com/reflected-xss-with-base64-breaching-obscurity-in-seconds-38e3ca07b085?source=rss------bug_bounty-5 | embossdotar | ethical-hacking, hacking, xss-attack, cybersecurity, bug-bounty | 25-Oct-2025 |
| How i win 1100 USD in bug bounty and this change my life in Bolivia | https://medium.com/@vanpedrazas/how-i-win-1100-usd-in-bug-bounty-and-this-change-my-life-in-bolivia-8cc58bbeb681?source=rss------bug_bounty-5 | Ivan Bernardo Pedrazas Rodriguez | inspiration, bug-bounty, mental-health, cybersecurity, self-improvement | 25-Oct-2025 |
| The $0 Bounty That Taught Me the Most Valuable Lesson in Cybersecurity | https://medium.com/@contact_26633/the-0-bounty-that-taught-me-the-most-valuable-lesson-in-cybersecurity-47d2293f3a69?source=rss------bug_bounty-5 | SmaRTy | tryhackme, infosec, hacker, bug-bounty, writer | 25-Oct-2025 |
| Guía de Arjun para Descubrimiento de Parámetros HTTP Ocultos y Bug Bounty | https://medium.com/@jpablo13/gu%C3%ADa-de-arjun-para-descubrimiento-de-par%C3%A1metros-http-ocultos-y-bug-bounty-eb6384bbcea5?source=rss------bug_bounty-5 | JPablo13 | hacking, technology, cybersecurity, reconnaissance, bug-bounty | 24-Oct-2025 |
| How I Earned $50 for a Session Bug That Never Got Properly Killed | https://medium.com/@sangpalisha/how-i-earned-50-for-a-session-bug-that-never-got-properly-killed-899d04b30aa5?source=rss------bug_bounty-5 | Isha Sangpal | vapt, cybersecurity, ethical-hacking, bug-bounty | 24-Oct-2025 |
| Top 10 Tools for Bug Bounty Hunters in 2025 — Practical, fast, and battle-tested | https://medium.com/@monujangra070/top-10-tools-for-bug-bounty-hunters-in-2025-practical-fast-and-battle-tested-e090866a9b64?source=rss------bug_bounty-5 | Monujangra | penetration-testing, bug-bounty, ethical-hacking, hacking, red-teaming | 24-Oct-2025 |
| How I Cleared CPENT & LPT Master — The Real Journey of Becoming an Advanced Penetration Tester | https://medium.com/@monujangra070/how-i-cleared-cpent-lpt-master-the-real-journey-of-becoming-an-advanced-penetration-tester-05e7d4106e67?source=rss------bug_bounty-5 | Monujangra | bug-bounty, life-hacking, penetration-testing, hacking, growth-hacking | 24-Oct-2025 |
| How I Accidentally Became the Company’s Unofficial File Clerk (And Saw Everyone’s Secrets) | https://medium.com/@iski/how-i-accidentally-became-the-companys-unofficial-file-clerk-and-saw-everyone-s-secrets-816e09bca109?source=rss------bug_bounty-5 | Iski | money, cybersecurity, bug-bounty, bug-bounty-tips, infosec | 24-Oct-2025 |
| The day Wayback pointed me to an admin panel — and why scope still wins ☕️ | https://aiwolfie.medium.com/the-day-wayback-pointed-me-to-an-admin-panel-and-why-scope-still-wins-%EF%B8%8F-40d61ce8e5d3?source=rss------bug_bounty-5 | AIwolfie | ethical-hacking, privilege-escalation, penetration-testing, admin-panel, bug-bounty | 24-Oct-2025 |
| Know Your Bug — How to Report Like a Pro (From 50 Reports) | https://medium.com/@viratavi1223/know-your-bug-how-to-report-like-a-pro-from-50-reports-9a96d66e346f?source=rss------bug_bounty-5 | Viratavi | hacking, bug-bounty-tips, hackerone, ethical-hacking, bug-bounty | 24-Oct-2025 |
| Bug Bounty Edge: Find Exposed Credentials Before Recon | https://medium.com/@alexandrevandammepro/bug-bounty-edge-find-exposed-credentials-before-recon-b2852a0db53c?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, bug-bounty-tips, osint, cybersecurity, bug-bounty | 24-Oct-2025 |
| How Did I Hack a Website Just by Reading JS Files | https://medium.com/@devanshpatel930/how-did-i-hack-a-website-just-by-reading-js-files-6d6a6a90aac1?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-tips, bug-bounty, bug-bounty-writeup, cybersecurity, bugs | 24-Oct-2025 |
| XML-RPC Server-Side Request Forgery: How I Discovered a Critical WordPress Vulnerability | https://akashmadanu.medium.com/xml-rpc-server-side-request-forgery-how-i-discovered-a-critical-wordpress-vulnerability-e624339a97cb?source=rss------bug_bounty-5 | Madanu Akash | xmlrpc, bug-bounty, ssrf, cybersecurity, wordpress | 24-Oct-2025 |
| My OpenAI Bug Bounty Experience: A Call for Improved Transparency in Vulnerability Disclosure | https://medium.com/@bugatsec/my-openai-bug-bounty-experience-a-call-for-improved-transparency-in-vulnerability-disclosure-5f71d7cce19c?source=rss------bug_bounty-5 | Bugatsec | bug-bounty, bugcrowd, cybersecurity, openai, transparency | 24-Oct-2025 |
| New Bug Bounty Blog Is Live | https://medium.com/@Kapeka0/new-bug-bounty-blog-is-live-58bab17d8530?source=rss------bug_bounty-5 | Kapeka | ciberseguridad, blog, hacking, bug-bounty | 24-Oct-2025 |
| The Art of Bug Report Writing: From Finding to Cashing | https://medium.com/@N0aziXss/the-art-of-bug-report-writing-from-finding-to-cashing-df7e2452ff08?source=rss------bug_bounty-5 | N0aziXss | bug-bounty, cybersecurity, ethical-hacking, report-writing, security-research | 24-Oct-2025 |
| Real Bugs from Timing Flaws in Web Services | https://medium.com/write-a-catalyst/real-bugs-from-timing-flaws-in-web-services-89c885c4ac02?source=rss------bug_bounty-5 | Monika sharma | cryptocurrency, vulnerability, bug-bounty-writeup, crypto, bug-bounty | 24-Oct-2025 |
| My First Bug Bounty: Critical Account Deletion Vulnerability | https://medium.com/@turkymazen13/my-first-bug-bounty-critical-account-deletion-vulnerability-cdfcedaea344?source=rss------bug_bounty-5 | MazenTurky | web-security, bug-bounty, bug-bounty-tips, cybersecurity, csrf | 24-Oct-2025 |
| Mastering XSS on a Bug Bounty Platform: Finding, Understanding & Bypassing Defense. | https://medium.com/@manlukhi825/mastering-xss-on-a-bug-bounty-platform-finding-understanding-bypassing-defense-7a6693284091?source=rss------bug_bounty-5 | ◦•●◉✿ ʜc ✿◉●•◦ | bug-bounty-writeup, bug-bounty, bug-bounty-tips, cybersecurity, xss-attack | 24-Oct-2025 |
| EASY TIPS TO FIND VULNERABILITIES IN GOOGLE ASSETS/VRP | https://medium.com/@azzabughunter/easy-tips-to-find-vulnerabilities-in-google-assets-vrp-2179d559f1e6?source=rss------bug_bounty-5 | Azza0X1A | google-vrp, bug-bounty | 24-Oct-2025 |
| Unmasking the Deceptive Threat: Server-Side Request Forgery (SSRF)|A10| OWASP top 10 | 10 day’s… | https://infyra.medium.com/unmasking-the-deceptive-threat-server-side-request-forgery-ssrf-a10-owasp-top-10-10-days-c2ab1385e8de?source=rss------bug_bounty-5 | Md. EMTIAZ AHMED | bug-bounty, vulnerability, ssrf-attack, owasp, offensive-security | 24-Oct-2025 |
| How I Bypassed a Security Lockout to Protect User Accounts | https://medium.com/@ibtissamhammadi1/how-i-bypassed-a-security-lockout-to-protect-user-accounts-0d2bfde94ffa?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, cybersecurity, bug-bounty, ethical-hacking, technology | 24-Oct-2025 |
| My OpenAI Bug Bounty Experience: Getting Ghosted By OpenAI | https://medium.com/@bugatsec/my-openai-bug-bounty-experience-a-call-for-improved-transparency-in-vulnerability-disclosure-5f71d7cce19c?source=rss------bug_bounty-5 | Bugatsec | bug-bounty, bugcrowd, cybersecurity, openai, transparency | 24-Oct-2025 |
| Injected #2: Lessons from Hacking a Financial Company | https://medium.com/@red.whisperer/injected-2-lessons-from-hacking-a-financial-company-a95c974a3604?source=rss------bug_bounty-5 | Chux | cybersecurity, bug-bounty, pentesting, security, hacking | 24-Oct-2025 |
| Pentesting A Web Browser | https://medium.com/@mikeanthonyc/pentesting-a-web-browser-ce20b35ae321?source=rss------bug_bounty-5 | Mike Anthony | pentesting, the-matrix, bug-bounty, hacker, how-to | 24-Oct-2025 |
| Step-by-Step Guide: Automating Recon with Bash — Build Your Own Mini Nuclei Scanner | https://medium.com/@verylazytech/step-by-step-guide-automating-recon-with-bash-build-your-own-mini-nuclei-scanner-3692c145cc77?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, hacking, cybersecurity, bug-bounty, penetration-testing | 24-Oct-2025 |
| How I Found Two Role-Based Access Control (RBAC) Vulnerabilities | https://medium.com/@Muhammad_Wageh/how-i-found-two-role-based-access-control-rbac-vulnerabilities-f6ac62e42b65?source=rss------bug_bounty-5 | Muhammad Wageh | bug-bounty, cybersecurity, hacking | 23-Oct-2025 |
| How I can discover the winner before the official reveal | https://medium.com/@viperblitzz/how-i-can-discover-the-winner-before-the-official-reveal-2a03ebcd3199?source=rss------bug_bounty-5 | Viperblitzz | technology, bug-bounty, cybersecurity, bug-hunting, bug-bounty-tips | 23-Oct-2025 |
| From Recon to RCE: How I Scored My First Critical BugIntroduction | https://medium.com/@0xEsso/from-recon-to-rce-how-i-scored-my-first-critical-bugintroduction-a740ff8b2d6b?source=rss------bug_bounty-5 | Eslam Gamal | rce, os-command-injection, ethical-hacking, bug-bounty, web-penetration-testing | 23-Oct-2025 |
| How the Dark Web Actually Works: The Tech Behind the Curtain(part2) | https://medium.com/@mohamednfe78/how-the-dark-web-actually-works-the-tech-behind-the-curtain-part2-a80185ccd2ab?source=rss------bug_bounty-5 | Mohamed.cybersec | bug-bounty, open-source, hacking, programming, cybersecurity | 23-Oct-2025 |
| Practical Pivoting: Master SSH Tunnels, SOCKS Proxies, and Advanced Network Access Techniques | https://medium.com/@verylazytech/practical-pivoting-master-ssh-tunnels-socks-proxies-and-advanced-network-access-techniques-893e891e1036?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, penetration-testing, hacking, cybersecurity, bug-bounty | 23-Oct-2025 |
| Special Race Condition Exploit in Email Verification Bypass | https://medium.com/@mhmodgm54/special-race-condition-exploit-in-email-verification-bypass-9d344b5bbb75?source=rss------bug_bounty-5 | Mahmoud Gamal | cybersecurity, penetration-testing, email-verification, writeup, bug-bounty | 23-Oct-2025 |
| The Blind Spot: Security Logging and Monitoring Failures | A09 |10 Days with Me | OWASP Top 10 | https://infyra.medium.com/the-blind-spot-security-logging-and-monitoring-failures-a09-10-days-with-me-owasp-top-10-ff631400fe1c?source=rss------bug_bounty-5 | Md. EMTIAZ AHMED | owasp-top-10, cybersecurity, owasp, vulnerability, bug-bounty | 23-Oct-2025 |
| Have you ever hacked library system | https://medium.com/@Charon19d/have-you-ever-hacked-library-system-610b34cd3797?source=rss------bug_bounty-5 | Charon19d | bug-bounty, hack-to-university, hacker, bug-bounty-writeup, cybersecurity | 23-Oct-2025 |
| Prioritise: Explore some less common SQL Injection techniques | https://infosecwriteups.com/prioritise-explore-some-less-common-sql-injection-techniques-229b751e9460?source=rss------bug_bounty-5 | Huzaifa Malik | hacking, ctf, sql-injection, bug-bounty, infosec | 23-Oct-2025 |
| The Rise of Bug Bounty Hunters: How Ethical Hacking Became a Global Profession | https://medium.com/@hassantalal606/the-rise-of-bug-bounty-hunters-how-ethical-hacking-became-a-global-profession-193db48a9b5e?source=rss------bug_bounty-5 | Hassan Talal | cybersecurity, ethical-hacking, cyber-security-awareness, ethical-hacker, bug-bounty | 23-Oct-2025 |
| TOMGHOST THM | https://medium.com/@aderogbarufai088/tomghost-thm-3450ccef5b12?source=rss------bug_bounty-5 | Aderogbarufai | bug-bounty, hacking, ctf-writeup | 23-Oct-2025 |
| Cómo un Bug Bounty Hunter descubrió una vulnerabilidad en un banco | https://gorkaaa.medium.com/c%C3%B3mo-un-bug-bounty-hunter-descubri%C3%B3-una-vulnerabilidad-en-un-banco-9f730fdbba48?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, cybersecurity, bug-bounty, hacking, bug-bounty-writeup | 23-Oct-2025 |
| How a Simple Search Earned Me a Bug Bounty | https://medium.com/@ibtissamhammadi1/how-a-simple-search-earned-me-a-bug-bounty-d3f9fd0a70c9?source=rss------bug_bounty-5 | Ibtissam hammadi | grafana, fofa, bug-bounty, vulnerability, cybersecurity | 23-Oct-2025 |
| Mastering Burp Intruder: Sniper, Battering Ram, Pitchfork & Cluster Bomb | https://medium.com/@nidhinchandranr/mastering-burp-intruder-sniper-battering-ram-pitchfork-cluster-bomb-58c6db3950b0?source=rss------bug_bounty-5 | Nidhin Chandran R | burpsuite, penetration-testing, cybersecurity, web-security, bug-bounty | 23-Oct-2025 |
| When an Email Field Outsmarted Its Own Validator | https://medium.com/@contact_26633/when-an-email-field-outsmarted-its-own-validator-9f39acd38afa?source=rss------bug_bounty-5 | SmaRTy | bug-bounty, application-security, web-development, secure-coding, email | 23-Oct-2025 |
| How to write a Nuclei Template | https://medium.com/@kankojoseph/how-to-write-a-nuclei-template-8208645c8fc3?source=rss------bug_bounty-5 | Joseph "n3m0” KANKO | cybersecurity, web-development, bug-bounty, web-penetration-testing, bug-bounty-tips | 23-Oct-2025 |
| The Art of Google Dorking: From Vulnerability Discovery to Security Enhancement | https://medium.com/@N0aziXss/the-art-of-google-dorking-from-vulnerability-discovery-to-security-enhancement-beeba448159d?source=rss------bug_bounty-5 | N0aziXss | infosec, cybersecurity, bug-bounty, ethical-hacking, google-dorking | 23-Oct-2025 |
| TOMGHOST THM | https://devnull-0.medium.com/tomghost-thm-3450ccef5b12?source=rss------bug_bounty-5 | Aderogbarufai | bug-bounty, hacking, ctf-writeup | 23-Oct-2025 |
| How to Remove All IP Addresses from a File Using Sublime Text (Step-by-Step Guide) | https://jareddouville.medium.com/how-to-remove-all-ip-addresses-from-a-file-using-sublime-text-step-by-step-guide-f4523cd2683b?source=rss------bug_bounty-5 | Jared Douville | sublimetext, bug-bounty, cybersecurity | 23-Oct-2025 |
| Learn how to use dnsrecon for Exhaustive DNS Enumeration and Bug Bounty | https://medium.com/@jpablo13/learn-how-to-use-dnsrecon-for-exhaustive-dns-enumeration-and-bug-bounty-0924e19400f6?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, cybersecurity, bug-bounty, hacking, technology | 22-Oct-2025 |
| Simple (but time consuming) guide to hunt for DOM XSS without a scanner | https://popalltheshells.medium.com/simple-but-time-consuming-guide-to-hunt-for-dom-xss-without-a-scanner-f5b65a262073?source=rss------bug_bounty-5 | popalltheshells | penetration-testing, red-team, web-application-security, xss-attack, bug-bounty | 22-Oct-2025 |
| The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳ | https://lordofheaven1234.medium.com/the-sleeper-agent-bug-how-one-html-payload-lay-hidden-for-months-to-attack-my-inbox-9d3f1e9df60e?source=rss------bug_bounty-5 | LordofHeaven | html-injection, web-security, infosec, coffinxp, bug-bounty | 22-Oct-2025 |
| How Bug Bounty Changed My Life | https://medium.com/@ferdusalam_65023/tips-that-worked-for-me-039da09584c5?source=rss------bug_bounty-5 | Ferdus Alam | bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 22-Oct-2025 |
| How I Used AI to Hack AI Security (And Why Skynet Would Be Proud) | https://medium.com/@iski/how-i-used-ai-to-hack-ai-security-and-why-skynet-would-be-proud-e698a30634a0?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, bug-bounty-tips, hacking, cybersecurity | 22-Oct-2025 |
| How I Broke the Access Control of an Entire Application | https://medium.com/@0xP0L73R63157/how-i-broke-the-access-control-of-an-entire-application-e26921b28a55?source=rss------bug_bounty-5 | 0xP0L73R63157 | ethical-hacking, bug-bounty-writeup, bug-bounty-tips, information-security, bug-bounty | 22-Oct-2025 |
| Beginner’s Recon Guide for Bug Bounty Hunters (Kali Linux) | https://xormium.medium.com/beginners-recon-guide-for-bug-bounty-hunters-kali-linux-430de132304b?source=rss------bug_bounty-5 | Xormium | reconnaissance, web-security, cybersecurity, bug-bounty, ethical-hacking | 22-Oct-2025 |
| Why Every Rejected Report Brings You Closer to Your First Bounty | https://xormium.medium.com/why-every-rejected-report-brings-you-closer-to-your-first-bounty-190167ba77a5?source=rss------bug_bounty-5 | Xormium | bug-bounty, ethical-hacking, cybersecurity, web-security, motivation | 22-Oct-2025 |
| Broken Access Control: How I Found (and Exploited) an EdTech Platform’s Video Authentication Bypass | https://akashmadanu.medium.com/broken-access-control-how-i-found-and-exploited-an-edtech-platforms-video-authentication-bypass-a594be7ae6c5?source=rss------bug_bounty-5 | Madanu Akash | authentication-bypass, bug-bounty, broken-access-control, bug-bounty-writeup, web-vulnerabilities | 22-Oct-2025 |
| When Images Talk Too Much: How EXIF Metadata Can Leak Sensitive Information | https://divyesh-chauhan.medium.com/when-images-talk-too-much-how-exif-metadata-can-leak-sensitive-information-318ad598777c?source=rss------bug_bounty-5 | Divyesh Chauhan | cybersecurity, ethical-hacking, privacy, web-security, bug-bounty | 22-Oct-2025 |
| Master the Art of Finding and Exploiting Hidden Backups and Old Versions: Step-by-Step Guide for… | https://medium.com/@verylazytech/master-the-art-of-finding-and-exploiting-hidden-backups-and-old-versions-step-by-step-guide-for-d2433339173a?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, cybersecurity, ethical-hacking, penetration-testing | 22-Oct-2025 |
| Understanding JSON Web Token (JWT) Security | https://infosecwriteups.com/understanding-json-web-token-jwt-security-48c3a9cc96f2?source=rss------bug_bounty-5 | hackerdevil | owasp, infosec, jwt, bug-bounty, penetration-testing | 22-Oct-2025 |
| Mastering Subdomain Enumeration: A Beginner’s Guide to Expanding Your Reconnaissance | https://medium.com/@er.sumitsah/mastering-subdomain-enumeration-a-beginners-guide-to-expanding-your-reconnaissance-c1719a97fbff?source=rss------bug_bounty-5 | Sumit Sah | cybersecurity, osint, subdomain-enumeration, reconnaissance, bug-bounty | 22-Oct-2025 |
| https://medium.com/@hossammostafa2003.1.1/-96fdf99c8bcc?source=rss------bug_bounty-5 | Hossam_Mostafa | bug-bounty, cors-misconfiguration, penetration-testing, cybersecurity, web-security | 22-Oct-2025 |
| A Comprehensive Security Assessment Guide to Identifying and Exploiting Spring Boot Actuator… | https://blackhawkk.medium.com/a-comprehensive-security-assessment-guide-to-identifying-and-exploiting-spring-boot-actuator-83be33c8cee6?source=rss------bug_bounty-5 | Tanmay Bhattacharjee | appsec, ethical-hacking, bug-bounty, cybersecurity, penetration-testing | 22-Oct-2025 |
| Faceless Hacker in Africa: My VAPT-to-Bug Bounty Workflow (Step-by-Step) | https://medium.com/@calebcudjoemensah46/faceless-hacker-in-africa-my-vapt-to-bug-bounty-workflow-step-by-step-038b43afc3be?source=rss------bug_bounty-5 | cleab_linux | technology, bug-bunty, cybersecurity, bug-bounty, bounty-program | 22-Oct-2025 |
| $2000 Bounty: From Browser to Burp | https://osintteam.blog/2000-bounty-from-browser-to-burp-290dcb10f386?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, bug-bounty, vulnerability, bug-bounty-writeup, technology | 22-Oct-2025 |
| Cracking the Login (HTB): Hands-on Broken Authentication Techniques Part 1 | https://medium.com/@es0557533/cracking-the-login-htb-hands-on-broken-authentication-techniques-part-1-a1f5f04d6085?source=rss------bug_bounty-5 | Isv0x1 | bug-bounty, hackthebox, broken-authentication, info-sec-writeups, hacking | 22-Oct-2025 |
| Finding My Niche in Cybersecurity: A Student’s Reflection | https://medium.com/@likithgajula/finding-my-niche-in-cybersecurity-a-students-reflection-15af636606fe?source=rss------bug_bounty-5 | LIKITH GAJULA | practical-learning, ethical-hacking, beginner, bug-bounty, cybersecurity | 22-Oct-2025 |
| Aprende a usar dnsrecon para Enumeración Exhaustiva de DNS y Bug Bounty | https://medium.com/@jpablo13/aprende-a-usar-dnsrecon-para-enumeraci%C3%B3n-exhaustiva-de-dns-y-bug-bounty-412f4477568d?source=rss------bug_bounty-5 | JPablo13 | technology, hacking, penetration-testing, cybersecurity, bug-bounty | 21-Oct-2025 |
| Week 14 — Understanding Redux & Fingerprinting Bundlers | https://infosecwriteups.com/week-14-understanding-redux-fingerprinting-bundlers-cdba4a83fc7e?source=rss------bug_bounty-5 | Aang | bug-bounty-writeup, information-security, ethical-hacking, bug-bounty, bug-bounty-tips | 21-Oct-2025 |
| Web Services SOAP Based Attack Vectors | https://medium.com/@melodicbook/web-services-soap-based-attack-vectors-a3a2672425ed?source=rss------bug_bounty-5 | Sam Mirov | bug-bounty-writeup, web-services, bug-bounty, penetration-testing, bug-bounty-tips | 21-Oct-2025 |
| What Are Smart Contracts? | https://medium.com/@shadyfarouk1986/what-are-smart-contracts-c0e449a783b9?source=rss------bug_bounty-5 | Shady Farouk | bounty-program, ethereum-blockchain, bug-bounty, blockchain | 21-Oct-2025 |
| Smart Contracts: Complete Beginner’s Guide | https://medium.com/@shadyfarouk1986/smart-contracts-complete-beginners-guide-5ded0dd61574?source=rss------bug_bounty-5 | Shady Farouk | vulnerability, bug-bounty, ethereum-blockchain | 21-Oct-2025 |
| Price Manipulation Vulnerability: How a small logic flaw turned orders into ₹1 checkouts | https://xormium.medium.com/price-manipulation-vulnerability-how-a-small-logic-flaw-turned-orders-into-1-checkouts-241da7c75596?source=rss------bug_bounty-5 | Xormium | price-manipulation, bug-bounty, cybersecurity, ethical-hacking, web-security | 21-Oct-2025 |
| how to get stored xss via file upload or via uploading the profile pic | https://medium.com/@0x00AL_sabbah/how-to-get-xss-via-file-upload-or-via-uploading-the-profile-pic-29e8d12cff85?source=rss------bug_bounty-5 | 0x00Al-sabbah | cybersecurity, security, bug-bounty, red-team, hacking | 21-Oct-2025 |
| Toolbox Bug Bounty: 12 Alat Yang Sering Dipakai Pemburu Bug, dan Kapan Memakainya | https://handevcode.medium.com/toolbox-bug-bounty-12-alat-yang-sering-dipakai-pemburu-bug-dan-kapan-memakainya-fc651f70f418?source=rss------bug_bounty-5 | Handev Code | ethical-hacking, cybersecurity, bug-bounty, pentesting | 21-Oct-2025 |
| How to Do Reconnaissance Using Only Free Tools | https://medium.com/@TheCyberKnight/how-to-do-reconnaissance-using-only-free-tools-bb0909d4dfae?source=rss------bug_bounty-5 | TheCyberKnight | cybersecurity, bug-bounty, ethical-hacking, penetration-testing, reconnaissance | 21-Oct-2025 |
| How I Used a Custom Regex Rule to Find Valid API Keys | https://medium.com/@zaid.zrf/how-i-used-a-custom-regex-rule-to-find-valid-api-keys-ea89c78405bb?source=rss------bug_bounty-5 | Zaid Arif | regex, bug-bounty, writeup | 21-Oct-2025 |
| Amass 5.0.0 Usage for Recon | https://medium.com/@marduk.i.am/amass-5-0-0-usage-for-recon-8041bc727480?source=rss------bug_bounty-5 | Marduk I Am | osint, cybersecurity, ethical-hacking, bug-bounty, information-security | 21-Oct-2025 |
| Master Privilege Escalation via Cron Jobs and Systemd Timers: Step-by-Step Guide for Pentesters | https://medium.com/@verylazytech/master-privilege-escalation-via-cron-jobs-and-systemd-timers-step-by-step-guide-for-pentesters-567c9231fcdd?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, cybersecurity, ethical-hacking, hacking, penetration-testing | 21-Oct-2025 |
| The One Tool That Transformed My Bug Bounty Results | https://medium.com/@ibtissamhammadi1/the-one-tool-that-transformed-my-bug-bounty-results-935014a9f082?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, cybersecurity, osint, hacking, ethical-hacking | 21-Oct-2025 |
| Pickle Rick | https://medium.com/@aderogbarufai088/pickle-rick-e8e8a5c6df21?source=rss------bug_bounty-5 | Aderogbarufai | ctf-writeup, ctf, bug-bounty, hacking, tryhackme | 21-Oct-2025 |
| How I Used Sequential IDs to Download an Entire Company’s User Database (And The Joker Helped) | https://infosecwriteups.com/how-i-used-sequential-ids-to-download-an-entire-companys-user-database-and-the-joker-helped-2a8dd23127e6?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, money, bug-bounty, cybersecurity, infosec | 21-Oct-2025 |
| This Is How I Find Reflected XSS In Bug Bounty | https://medium.com/activated-thinker/this-is-how-i-find-reflected-xss-in-bug-bounty-7b42059a5d04?source=rss------bug_bounty-5 | Rehan Sohail | bug-bounty-hunter, activated-thinker, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 21-Oct-2025 |
| Develpy TRYHACK WRITEUP | https://medium.com/@aderogbarufai088/develpy-tryhack-writeup-2ec70ff6d3ba?source=rss------bug_bounty-5 | Aderogbarufai | bug-bounty, ctf-walkthrough, cybersecurity | 21-Oct-2025 |
| How I Managed to Check Anyone’s SBI Bank Balance Using Just Phone Numbers | https://infosecwriteups.com/how-i-managed-to-check-anyones-sbi-bank-balance-using-just-phone-numbers-6e6943521606?source=rss------bug_bounty-5 | Aziz Al Aman | hacking, bug-bounty, banking, bug-bounty-tips, cybersecurity | 21-Oct-2025 |
| Race Condition in Login Allows Lockout Bypass and Account Takeover | https://medium.com/@abdelrahman8545/race-condition-in-login-allows-lockout-bypass-and-account-takeover-e602407cbb0b?source=rss------bug_bounty-5 | Abdelrahman Fathy | bug-bounty, penetration-testing, race-condition, bug-bounty-tips, web-security | 21-Oct-2025 |
| How a Simple SSTI Turned Into $1,000 and RCE | https://cybersecuritywriteups.com/how-a-simple-ssti-turned-into-1-000-and-rce-4d6ce66f2ba9?source=rss------bug_bounty-5 | Danish Ahmed | hacking, bugs, hacker, bug-hunting, bug-bounty | 21-Oct-2025 |
| How a Simple SSTI Turned Into $1,000 and RCE | https://medium.com/@danishahmed2004505/how-a-simple-ssti-turned-into-1-000-and-rce-2ee5b1d20474?source=rss------bug_bounty-5 | Danish Ahmed | bug-bounty, bugs, infosec, hacker, hacking | 21-Oct-2025 |
| Business Logic Vulnerability lead to PII theft & account take over | https://medium.com/@zack0x01_/business-logic-vulnerability-lead-to-pii-theft-account-take-over-b5b68a679c19?source=rss------bug_bounty-5 | zack0x01 | ethical-hacking, hacking, bug-bounty-tips, cybersecurity, bug-bounty | 21-Oct-2025 |
| Double Threat: DOM XSS & Open Redirect Vulnerabilities Exposed Across 30+ Websites | https://medium.com/@N0aziXss/double-threat-dom-xss-open-redirect-vulnerabilities-exposed-across-30-websites-64286558e3a3?source=rss------bug_bounty-5 | N0aziXss | bug-bounty, dom-xss, open-redirect, ethical-hacking, web-security | 21-Oct-2025 |
| How a Simple SSTI Turned Into $1,000 and RCE | https://medium.com/meetcyber/how-a-simple-ssti-turned-into-1-000-and-rce-2ee5b1d20474?source=rss------bug_bounty-5 | Danish Ahmed | bug-bounty, bugs, infosec, hacker, hacking | 21-Oct-2025 |
| Bug Bounty, Corporate Fraud & GitLab — Why You Should Stop Using HackerOne | https://medium.com/@justas_b1/bug-bounty-corporate-fraud-gitlab-why-you-should-stop-using-hackerone-d1237716e24a?source=rss------bug_bounty-5 | Justas_b | information-security, cybersecurity, infosec, bug-bounty, legal | 20-Oct-2025 |
| The Blueprint for Automated Reconnaissance | https://eternalwill.medium.com/the-blueprint-for-automated-reconnaissance-537d7efcfcef?source=rss------bug_bounty-5 | Elian Stella Winbowder | osint, cybersecurity, bug-bounty, reconnaissance, infosec | 20-Oct-2025 |
| Hacking for Good: How I Used ffuf to Secure a Government Website | https://devprogramming.medium.com/hacking-for-good-how-i-used-ffuf-to-secure-a-government-website-4386221a01e4?source=rss------bug_bounty-5 | DevProgramming | government, vulnerability, pentesting, bug-bounty, tools | 20-Oct-2025 |
| Unfair Experience in a Bug Bounty Program | https://medium.com/@junedsilavata/unfair-experience-in-a-bug-bounty-program-d00803899e3e?source=rss------bug_bounty-5 | Juned Silavat | responsible-disclosure, bug-bounty, cybersecurity, cybercommunities | 20-Oct-2025 |
| How to find Stored XSS in input fields | https://xormium.medium.com/how-to-find-stored-xss-in-input-fields-89ff0ceba667?source=rss------bug_bounty-5 | Xormium | stored-xss, cybersecurity, ethical-hacking, xss-attack, bug-bounty | 20-Oct-2025 |
| How I got Access to an Employee Only Portal — Bug Bounty | https://medium.com/@jeosantos2005/how-i-got-access-to-an-employee-only-portal-bug-bounty-3e1cbc940b4f?source=rss------bug_bounty-5 | Jeosantos | programming, cybersecurity, pentesting, bug-bounty-writeup, bug-bounty | 20-Oct-2025 |
| Coding: The Ignored Backbone of Hacking | https://medium.com/@viratavi1223/coding-the-ignored-backbone-of-hacking-01fa181b68f6?source=rss------bug_bounty-5 | Viratavi | bug-bounty-tips, bug-bounty, hackerone, hacking, ethical-hacking | 20-Oct-2025 |
| LSB Steganography Explained — Hiding Secrets Inside Images (Simple Analogy) | https://medium.com/@natarajanck2/lsb-steganography-explained-hiding-secrets-inside-images-simple-analogy-7f532a0eeb6d?source=rss------bug_bounty-5 | Natarajan C K | security, lsb, least-significant-bit, steganography, bug-bounty | 20-Oct-2025 |
| When Encryption Went Public: The Case of the Hardcoded Key | https://medium.com/@devanshpatel930/when-encryption-went-public-the-case-of-the-hardcoded-key-d711cdd836fb?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-tips, bug-bounty-writeup, cyber-security-awareness, bug-bounty, cybersecurity | 20-Oct-2025 |
| Bug Bounty 101: Top 10 Reconnaissance Tools | https://netlas.medium.com/bug-bounty-101-top-10-reconnaissance-tools-70ecba86c5f3?source=rss------bug_bounty-5 | Netlas.io | cybersecurity, information-security, penetration-testing, bug-bounty, tools | 20-Oct-2025 |
| Recon Playbook — Practical Guide for Bug Bounty Hunters (2025) | https://medium.com/@monujangra070/recon-playbook-practical-guide-for-bug-bounty-hunters-2025-d13f6f014221?source=rss------bug_bounty-5 | Monujangra | bug-bounty, ai-hacking, hacking, generative-ai-tools, ethical-hacking | 20-Oct-2025 |
| How to Start Bug Bounty in 2025 — A Realistic Guide from a Security Researcher | https://medium.com/@monujangra070/how-to-start-bug-bounty-in-2025-a-realistic-guide-from-a-security-researcher-c34a920a1554?source=rss------bug_bounty-5 | Monujangra | hacking, bug-bounty, penetration-testing, ai, ethical-hacking | 20-Oct-2025 |
| How I Tricked an AI Into Giving Me Everyone’s Credit Cards (And Batman’s Help) | https://medium.com/@iski/how-i-tricked-an-ai-into-giving-me-everyones-credit-cards-and-batman-s-help-c8b714ca294f?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, infosec, bug-bounty-tips, hacking | 20-Oct-2025 |
| OTPs For Everyone: The Simplest $OTP Leak$ You’ll Ever Find | https://medium.com/@tinopreter/otps-for-everyone-the-simplest-otp-leak-youll-ever-find-5ff2d7d9c812?source=rss------bug_bounty-5 | tinopreter | bug-bounty, otp-bypass, parameter-pollution, bug-bounty-writeup, hackerone | 20-Oct-2025 |
| Find Security Bugs Before Hackers Do — Static Code Analysis | https://iaraoz.medium.com/find-security-bugs-before-hackers-do-static-code-analysis-b26dcf0c515c?source=rss------bug_bounty-5 | Israel Aráoz Severiche | owasp, appsec, cybersecurity, bug-bounty, web-development | 20-Oct-2025 |
| Mastering Practical Command Injection Exploitation and Detection: Step-by-Step Guide | https://medium.com/@verylazytech/mastering-practical-command-injection-exploitation-and-detection-step-by-step-guide-0d0576d25139?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, cybersecurity, penetration-testing, ethical-hacking | 20-Oct-2025 |
| I Find XSS Vulnerabilities With One Simple Line | https://medium.com/@ibtissamhammadi1/i-find-xss-vulnerabilities-with-one-simple-line-d3c3d1df3409?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, web-security, cybersecurity, hacking, xss-attack | 20-Oct-2025 |
| XSS Explained: A Simple, Powerful Guide | https://medium.com/@0xMuhammedAsfan/xss-explained-a-simple-powerful-guide-d87dadb92736?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | ethical-hacking, xss-attack, web-security, bug-bounty, cybersecurity | 19-Oct-2025 |
| How I Got My first Private Invite in Bug Bounty | https://medium.com/activated-thinker/how-i-got-my-first-private-invite-in-bug-bounty-f51ea01e03a7?source=rss------bug_bounty-5 | Rehan Sohail | bug-bounty, bug-bounty-writeup, bug-bounty-hunter, activated-thinker, bug-bounty-tips | 19-Oct-2025 |
| Basic SQL injection Methodology | https://medium.com/@raihan408548/basic-sql-injection-methodology-9c606115eddb?source=rss------bug_bounty-5 | Md. Raihan | sqli, bug-bounty, web-hacking, sql-injection, web-penetration-testing | 19-Oct-2025 |
| When Client-Side Validation Isn’t Enough — Porsche Contact Form Logic Bypass | https://medium.com/@ethan_hunt/when-client-side-validation-isnt-enough-porsche-contact-form-logic-bypass-91f2451015e3?source=rss------bug_bounty-5 | Mandar Satam | bug-bounty, information-security, entrepreneurship, software-engineering, cybersecurity | 19-Oct-2025 |
| How I Hacked JWT Tokens and Became Everyone on the Internet (Temporarily) | https://infosecwriteups.com/how-i-hacked-jwt-tokens-and-became-everyone-on-the-internet-temporarily-1e05f961048d?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty-tips, cybersecurity, bug-bounty, hacking | 19-Oct-2025 |
| The QR Bug That Shouldn’t Exist — A Small Flaw with Big Consequences | https://xormium.medium.com/the-qr-bug-that-shouldnt-exist-a-small-flaw-with-big-consequences-a7fb11fe1d41?source=rss------bug_bounty-5 | Xormium | bug-bounty, idor, information-disclosure, cybersecurity, web-security | 19-Oct-2025 |
| Exploiting an Insecure Android Activity for Arbitrary File Theft and Account Takeover | https://medium.com/@NeM0x00/exploiting-an-insecure-android-activity-for-arbitrary-file-theft-and-account-takeover-07b360520a0e?source=rss------bug_bounty-5 | Yousef Elsheikh | bug-bounty, hacking, bug-bounty-tips, bugbounty-writeup, malware | 19-Oct-2025 |
| DANGLING CNAME that Missee by a lot of Hackers | https://medium.com/@NA_satrk/%D8%A7%D9%84%D9%84%D9%87%D9%85-%D8%A7%D9%86%D9%81%D8%B9%D9%86%D8%A7-%D8%A8%D9%85%D8%A7-%D8%B9%D9%84%D9%85%D8%AA%D9%86%D8%A7-%D9%88%D8%B9%D9%84%D9%85%D9%86%D8%A7-%D9%85%D8%A7-%D9%8A%D9%86%D9%81%D8%B9%D9%86%D8%A7-%D9%88%D8%B2%D8%AF%D9%86%D9%8A-%D8%B9%D9%84%D9%85%D8%A7-f625a400a7aa?source=rss------bug_bounty-5 | Na_stark | hacker, bugs, bug-bounty | 19-Oct-2025 |
| How I Made Over $10,000 Just by Chaining Multiple IDORs in a Single Web App (All from the Share… | https://medium.com/@ferdusalam_65023/how-i-made-over-10-000-just-by-chaining-multiple-idors-in-a-single-web-app-all-from-the-share-4d425a15aa37?source=rss------bug_bounty-5 | Ferdus Alam | bug-bounty-writeup, bug-bounty-tips, bug-bounty, idor-vulnerability, bugs | 19-Oct-2025 |
| How I Leaked the Environment Variables of a Django Web App on Azure Front Door | https://medium.com/@0xZainRaza/how-i-leaked-the-environment-variables-of-a-django-web-app-on-azure-front-door-dfcbbaf58e4f?source=rss------bug_bounty-5 | Zain | web-security, appsec, django, azure, bug-bounty | 19-Oct-2025 |
| SAML Configuration Exposure to Low-Privilege Team Members Due to Missing Server-Side RBAC | https://medium.com/@ibra1905ylmz/saml-configuration-exposure-to-low-privilege-team-members-due-to-missing-server-side-rbac-04d907860433?source=rss------bug_bounty-5 | Ibrahim Yılmaz | cybersecurity, bug-bounty, web-app-security, rbac-access-control | 19-Oct-2025 |
| Privilege Escalation and RCE explained, plus 8 realistic interview questions | https://medium.com/meetcyber/privilege-escalation-and-rce-explained-plus-8-realistic-interview-questions-cb7b94a17b3f?source=rss------bug_bounty-5 | CyberSenpai | bug-bounty, cybersecurity, owasp, information-security, interview | 19-Oct-2025 |
| OS Command Injection | https://medium.com/@raihan408548/os-command-injection-b9eb1d10b859?source=rss------bug_bounty-5 | Md. Raihan | ethical-hacking, bug-bounty, os-command-injection, penetration-testing, command-injection | 19-Oct-2025 |
| The Poisoned Stream — A08: Software and Data Integrity Failures | 10 Days with Me | OWASP Top 10 | https://infyra.medium.com/the-poisoned-stream-a08-software-and-data-integrity-failures-10-days-with-me-owasp-top-10-cc47370cbe88?source=rss------bug_bounty-5 | Md. EMTIAZ AHMED | offsec, web-security, ethical-hacking, owasp-top-10, bug-bounty | 19-Oct-2025 |
| From $1,000 to $100,000 in Bug Bounties: Advanced Techniques and Program Selection Strategy | https://medium.com/@maxwellcross/from-1-000-to-100-000-in-bug-bounties-advanced-techniques-and-program-selection-strategy-d858cacf34d4?source=rss------bug_bounty-5 | Maxwell Cross | python, cybersecurity, coding, bug-bounty, hacking | 19-Oct-2025 |
| How a Missing Email Check Can Break Everything | https://medium.com/@viratavi1223/how-a-missing-email-check-can-break-everything-c9e97194a551?source=rss------bug_bounty-5 | Viratavi | ethical-hacking, hacking, bug-bounty-tips, hackerone, bug-bounty | 19-Oct-2025 |
| The QR Vulnerability that exposed millions of data — A Small Flaw with Big Consequences | https://xormium.medium.com/the-qr-bug-that-shouldnt-exist-a-small-flaw-with-big-consequences-a7fb11fe1d41?source=rss------bug_bounty-5 | Xormium | bug-bounty, idor, information-disclosure, cybersecurity, web-security | 19-Oct-2025 |
| SSRF Deep-dive — PoCs, Labs & Reporting Kit (Part 2) | https://medium.com/@Aacle/ssrf-deep-dive-pocs-labs-reporting-kit-part-2-8fd8a485713e?source=rss------bug_bounty-5 | Abhishek meena | bug-bounty, programming, owasp, infosec, pentesting | 19-Oct-2025 |
| MASTERCLASS BUG BOUNTY | https://gorkaaa.medium.com/masterclass-bug-bounty-6476ae69f1e4?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, bug-bounty-tips, bug-bounty, hacking, cybersecurity | 19-Oct-2025 |
| Broken Access Control (BAC & IDOR): Understanding the Quiet Killer of Web App Security | https://medium.com/@pirlo0x/broken-access-control-bac-idor-understanding-the-quiet-killer-of-web-app-security-5dc44dcf224b?source=rss------bug_bounty-5 | Pirlo | bug-bounty, web-security, idor-vulnerability, penetration-testing, broken-access-control | 19-Oct-2025 |
| Hands-On Guide to Exploiting Redis, MongoDB, and Misconfigured Databases: Master Real-World Attacks | https://medium.com/@verylazytech/hands-on-guide-to-exploiting-redis-mongodb-and-misconfigured-databases-master-real-world-attacks-c990a0cfdbd6?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, bug-bounty, ethical-hacking, hacking, penetration-testing | 19-Oct-2025 |
| Practical Android Pentesting: A Case Study on TikTok RCE | https://dphoeniixx.medium.com/practical-android-pentesting-a-case-study-on-tiktok-rce-4a82e79cc7c6?source=rss------bug_bounty-5 | Sayed Abdelhafiz | mobile-app-security, bug-bounty, android-security | 19-Oct-2025 |
| $3000 Bounty for Leaking Private Chat Conversations: A Simple IDOR in a Chat AI | https://medium.com/@winteri3coming/3000-bounty-for-leaking-private-chat-conversations-a-simple-idor-in-a-chat-ai-d5e46c8f5fc5?source=rss------bug_bounty-5 | winteri3coming | cybersecurity, idor, bug-bounty, hackerone | 19-Oct-2025 |
| Bypassing WAF Rules in Cache Deception Attacks | https://medium.com/@ibtissamhammadi1/bypassing-waf-rules-in-cache-deception-attacks-e17a02a402a9?source=rss------bug_bounty-5 | Ibtissam hammadi | infosec, cybersecurity, penetration-testing, bug-bounty, vulnerability | 19-Oct-2025 |
| Advanced API Vulnerability Discovery | https://medium.com/@cybersecplayground/advanced-api-vulnerability-discovery-16d6fffacad4?source=rss------bug_bounty-5 | Cybersecplayground | api, penetration-testing, bug-bounty-tips, bug-bounty, vulnerability | 19-Oct-2025 |
| The Unicode Trick That Let Me Takeover an Entire Organization | https://xs0x.medium.com/the-unicode-trick-that-let-me-takeover-an-entire-organization-44e02fc189ee?source=rss------bug_bounty-5 | Hosam S3dawi | bug-bounty, hacking, web-security, cybersecurity, security-research | 19-Oct-2025 |
| Complete Guide to Dnsx for Mass DNS Resolution and Bug Bounty | https://medium.com/@jpablo13/complete-guide-to-dnsx-for-mass-dns-resolution-and-bug-bounty-f8bed1598770?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, technology, penetration-testing, bug-bounty, hacking | 18-Oct-2025 |
| Burp Suite: 15 Pro Tips You’ll Wish You Knew Sooner | https://medium.com/@Iampreth/burp-suite-15-pro-tips-youll-wish-you-knew-sooner-f4dd4b9a701c?source=rss------bug_bounty-5 | IamPreth | cybersecurity, pentesting, ethical-hacking, burpsuite, bug-bounty | 18-Oct-2025 |
| Phishing via Error Message — When UI Messages Become Attack Surfaces | https://medium.com/@ethan_hunt/phishing-via-error-message-when-ui-messages-become-attack-surfaces-1eca838fea3f?source=rss------bug_bounty-5 | Mandar Satam | cybersecurity, pentesting, bug-bounty | 18-Oct-2025 |
| Unauthorized Access to Enterprise Policies Management: $500 BAC Bug | https://medium.com/@a13h1/unauthorized-access-to-enterprise-policies-management-500-bac-bug-60f04419fed4?source=rss------bug_bounty-5 | Abhi Sharma | information-security, cybersecurity, bug-bounty, infosec, hacking | 18-Oct-2025 |
| Unescaped HTML in Email Templates — How I Turned a Simulator into a Phishing Vector | https://xormium.medium.com/unescaped-html-in-email-templates-how-i-turned-a-simulator-into-a-phishing-vector-82e8fb19a70d?source=rss------bug_bounty-5 | Xormium | html-injection, cybersecurity, websecurity-testing, ethical-hacking, bug-bounty | 18-Oct-2025 |
| The Broken Gate — A07: Identification and Authentication Failures | OWASP Top 10 |10 Days with Me|… | https://infyra.medium.com/the-broken-gate-a07-identification-and-authentication-failures-owasp-top-10-10-days-with-me-ef670f9f743f?source=rss------bug_bounty-5 | Md. EMTIAZ AHMED | hacking, cybersecurity, owasp-top-10, bug-bounty, infosec | 18-Oct-2025 |
| OWASP Mobile Top 10 — M9: Insecure Data Storage (“Writing your love letters on sticky notes and… | https://medium.com/@bithowl/owasp-mobile-top-10-m9-insecure-data-storage-writing-your-love-letters-on-sticky-notes-and-6783217f1273?source=rss------bug_bounty-5 | bithowl | bug-bounty, bithowl, owasp-top-10 | 18-Oct-2025 |
| Master Passive Recon in Web Pentesting | https://medium.com/@whx4zyjbefvr25ekfr8f/master-passive-recon-in-web-pentesting-aabff9645121?source=rss------bug_bounty-5 | D1d0F | bug-bounty, web-pen-testing, cybersecurity, passive-recon | 18-Oct-2025 |
| Step-by-Step Guide: Practical Docker Enumeration and Container Escape Techniques | https://medium.com/@verylazytech/step-by-step-guide-practical-docker-enumeration-and-container-escape-techniques-986e1d6a6919?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, hacking, penetration-testing, cybersecurity, bug-bounty | 18-Oct-2025 |
| The Delete Button Anyone Could Press: How I Wiped a Store’s Catalog and Brought Products Back from… | https://medium.com/@redaabdelrhman169/the-delete-button-anyone-could-press-how-i-wiped-a-stores-catalog-and-brought-products-back-from-3eb8df9390a2?source=rss------bug_bounty-5 | Abdelrhman Reda | bug-bounty-tips, access-control, web-development, bug-bounty | 18-Oct-2025 |
| Chrome Extension for Temp Emails (For Bug Bounty Hunters & Cybersecurity Researchers ) | https://medium.com/@shubhammpawar7438/chrome-extension-for-temp-emails-for-bug-bounty-hunters-cybersecurity-researchers-af25360ad2e1?source=rss------bug_bounty-5 | Shubham pawar | cybersecurity, bug-bounty | 18-Oct-2025 |
| Master Passive Recon in Web Pentesting | https://medium.com/@d1d0f/master-passive-recon-in-web-pentesting-aabff9645121?source=rss------bug_bounty-5 | D1d0F | bug-bounty, web-pen-testing, cybersecurity, passive-recon | 18-Oct-2025 |
| Foundations & Hunting SSRF Checklist — A SSRF Playbook (Part 1) | https://medium.com/@Aacle/foundations-hunting-ssrf-checklist-a-ssrf-playbook-part-1-795ef13e9d28?source=rss------bug_bounty-5 | Abhishek meena | bug-bounty, penetration-testing, infosec, owasp, python | 18-Oct-2025 |
| IDOR lead to unauthorized Access Organizations function | https://medium.com/@HBlackGhost/idor-lead-to-unauthorized-access-organizations-function-0dc707011dd1?source=rss------bug_bounty-5 | HBlack Ghost | bug-bounty, bug-bounty-writeup, bug-bounty-tips, hacking | 18-Oct-2025 |
| How to Find Your First Database Vulnerability in 48 Hours | https://medium.com/@ibtissamhammadi1/how-to-find-your-first-database-vulnerability-in-48-hours-2738e70cd979?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, bug-bounty, cybersecurity, sql-injection, sql | 18-Oct-2025 |
| Silence After Security.txt: When a Promise to Report Is Ignored | https://medium.com/@d.johnston_19172/silence-after-security-txt-when-a-promise-to-report-is-ignored-9efc2741f7a4?source=rss------bug_bounty-5 | D Johnston | bug-hunting, vulnerability-management, bug-bounty, cybersecurity | 18-Oct-2025 |
| Master Passive Recon in Web Pentesting | https://medium.com/@d1d0d/master-passive-recon-in-web-pentesting-aabff9645121?source=rss------bug_bounty-5 | D1d0D | bug-bounty, web-pen-testing, cybersecurity, passive-recon | 18-Oct-2025 |
| Guía Completa de Dnsx para la Resolución Masiva de DNS y Bug Bounty | https://medium.com/@jpablo13/gu%C3%ADa-completa-de-dnsx-para-la-resoluci%C3%B3n-masiva-de-dns-y-bug-bounty-20714c2dbc01?source=rss------bug_bounty-5 | JPablo13 | hacking, penetration-testing, cybersecurity, bug-bounty, technology | 17-Oct-2025 |
| Menyelami Dunia Bug Hunting: Perjalanan Awal Seorang Mahasiswa IT | https://medium.com/@mzhilmi1612/menyelami-dunia-bug-hunting-perjalanan-awal-seorang-mahasiswa-it-bc83fcdabe3d?source=rss------bug_bounty-5 | Mzhilmi | bug-bounty, cybersecurity | 17-Oct-2025 |
| Recon For Bug Bounty Hunting | https://medium.com/@raihan408548/recon-for-bug-bounty-hunting-f466fce74709?source=rss------bug_bounty-5 | Md. Raihan | bug-bounty, web-penetration-testing, web-hacking, recon, reconnaissance | 17-Oct-2025 |
| From €1500 to €0.50: A Bug Bounty Story of Payment Flow Manipulation | https://medium.com/meetcyber/from-1500-to-0-50-a-bug-bounty-story-of-payment-flow-manipulation-d845cc2c903d?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-writeup, payment-gateway, bug-bounty, bug-bounty-tips | 17-Oct-2025 |
| Email Verification OTP Bypass €€ — How I verified any email | https://medium.com/@ankitrathva/email-verification-bypass-how-i-verified-any-email-470cec0dbca5?source=rss------bug_bounty-5 | Ankit Rathva aka Gujarati Hacker | bug-bounty-tips, bugbounty-writeup, hackerone, bug-bounty, bugcrowd | 17-Oct-2025 |
| One Link, One Report, One Four-Digit Bounty | https://medium.com/@NarayananM/one-link-one-report-one-four-digit-bounty-a4a682a9b612?source=rss------bug_bounty-5 | Narayanan M | bug-bounty-tips, reconnaissance, cyber-secutity, bug-bounty, github | 17-Oct-2025 |
| Menyelami Dunia Bug Hunting: Perjalanan Awal Seorang Mahasiswa IT | https://medium.com/@mzhilmi1612/menyelami-dunia-bug-hunting-perjalanan-awal-seorang-mahasiswa-it-bc83fcdabe3d?source=rss------bug_bounty-5 | Zainun Hilmi | bug-bounty, cybersecurity | 17-Oct-2025 |
| Recon Methodology For Bug Bounty Hunting | https://medium.com/@raihan408548/recon-for-bug-bounty-hunting-f466fce74709?source=rss------bug_bounty-5 | Md. Raihan | bug-bounty, web-penetration-testing, web-hacking, recon, reconnaissance | 17-Oct-2025 |
| Account Takeover via IDOR: From UserID to Full Access | https://medium.com/@0xP0L73R63157/account-takeover-via-idor-from-userid-to-full-access-ade4f980cfb4?source=rss------bug_bounty-5 | 0xP0L73R63157 | bug-bounty-writeup, ethical-hacking, bug-bounty, bug-bounty-tips, information-security | 17-Oct-2025 |
| Küçük bir hatanın doğurduğu sonuçlar | Bugbounty Bounty Write Up | https://mehmetserifpasa.medium.com/k%C3%BC%C3%A7%C3%BCk-bir-hatan%C4%B1n-do%C4%9Furdu%C4%9Fu-sonu%C3%A7lar-bugbounty-bounty-write-up-6dc82dc38b41?source=rss------bug_bounty-5 | mehmet şerif paşa | bugbounty-writeup, bugbounty-tips, web-application-security, bug-bounty | 17-Oct-2025 |
| The Night I Broke the OTP Limit — A Simple Bug, A Cool Trick | https://xormium.medium.com/the-night-i-broke-the-otp-limit-a-simple-bug-a-cool-trick-0b00c4712b1d?source=rss------bug_bounty-5 | Xormium | bug-bounty, web-security, rate-limiting, cybersecurity, otp-bypass | 17-Oct-2025 |
| How One Tiny IDOR Created a Digital Domino Effect That Toppled Their Entire Security | https://medium.com/@iski/how-one-tiny-idor-created-a-digital-domino-effect-that-toppled-their-entire-security-5959ffeeae34?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, bug-bounty-tips, hacking, bug-bounty | 17-Oct-2025 |
| Top 15 Misconfigurations That Lead to Instant Server Pwn: Master Server Security Now | https://medium.com/@verylazytech/top-15-misconfigurations-that-lead-to-instant-server-pwn-master-server-security-now-96ebdc38ed1b?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, penetration-testing, hacking, cybersecurity | 17-Oct-2025 |
| What Apple’s $2M (and up to $5M) Bug-Bounty Push Teaches Us About Fighting Spyware | https://vencoding.medium.com/what-apples-2m-and-up-to-5m-bug-bounty-push-teaches-us-about-fighting-spyware-bf7e5fd66d15?source=rss------bug_bounty-5 | ven coding | bounty-program, apple, hacker, bug-bounty, vulnerability | 17-Oct-2025 |
| How I Escalated a Dorm Payment Portal into a Full DMZ Compromise Part 2 | https://kkonann.medium.com/how-i-escalated-a-dorm-payment-portal-into-a-full-dmz-compromise-part-2-0348a14a3ac5?source=rss------bug_bounty-5 | KonaN | technology, cybersecurity, hacking, pentesting, bug-bounty | 17-Oct-2025 |
| How I Found a High Severity Vulnerability in a Private Program of a Well-Known SIEM on Intigriti… | https://medium.com/@muhammadidris9404/bagaimana-saya-menemukan-kerentanan-high-di-program-pribadi-salah-satu-siem-terkenal-di-intigriti-bd480536114f?source=rss------bug_bounty-5 | Muhammadidris | hackerone, bug-bounty-tips, intigriti, bug-bounty, bug-bounty-writeup | 17-Oct-2025 |
| Presentación de mi Masterclass de Bug Bounty — este fin de semana en Discord | https://gorkaaa.medium.com/presentaci%C3%B3n-de-mi-masterclass-de-bug-bounty-este-fin-de-semana-en-discord-4327b9953240?source=rss------bug_bounty-5 | Gorka | bug-bounty, hacking, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 17-Oct-2025 |
| How I Found 2 Medium Bugs That Broke Business Logic♦️ | https://infosecwriteups.com/how-i-found-2-medium-bugs-that-broke-business-logic-%EF%B8%8F-8a6fbdcef287?source=rss------bug_bounty-5 | Mado | business-logic, infosec, hacking, bug-bounty, bug-bounty-tips | 17-Oct-2025 |
| CSRF and SSRF explained, plus 8 real interview questions | https://medium.com/meetcyber/csrf-and-ssrf-explained-plus-8-real-interview-questions-f130ac4cf7a6?source=rss------bug_bounty-5 | CyberSenpai | owasp, bug-bounty, cybersecurity, information-security, interview | 16-Oct-2025 |
| $ How I Discovered a Business-Logic Bug That Bypasses VAT and Slashes Shipping Costs | https://medium.com/@zyad_ibrahim333/how-i-discovered-a-business-logic-bug-that-bypasses-vat-and-slashes-shipping-costs-48a63d43fdbb?source=rss------bug_bounty-5 | Zyad Ibrahim | bug-bounty, bugs, cybersecurity, business-logic, bug-bounty-tips | 16-Oct-2025 |
| How to Find Auth Bypasses in Under 30 Minutes | https://medium.com/@Aacle/how-to-find-auth-bypasses-in-under-30-minutes-11bf6a4f33df?source=rss------bug_bounty-5 | Abhishek meena | infosec, api, penetration-testing, owasp, bug-bounty | 16-Oct-2025 |
| Session Persistence Vulnerability: When Logging Out Doesn’t Really Log You Out | https://medium.com/@manlukhi825/session-persistence-vulnerability-when-logging-out-doesnt-really-log-you-out-8c0e588b625b?source=rss------bug_bounty-5 | ◦•●◉✿ ʜc ✿◉●•◦ | cybersecurity, learning, bug-bounty, bug-bounty-tips, vulnerability | 16-Oct-2025 |
| The DIRB Command That Found Me 47 Hidden Admin Panels | https://medium.com/@bughuntersjournal/the-dirb-command-that-found-me-47-hidden-admin-panels-8ff7f523aa24?source=rss------bug_bounty-5 | BugHunter’s Journal | programming, hacking, bug-bounty, cybersecurity, software-development | 16-Oct-2025 |
| 25. Monetizing Your Skills Beyond Bug Bounty | https://infosecwriteups.com/25-monetizing-your-skills-beyond-bug-bounty-a6b503d6b6dc?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, infosec, cybersecurity, hacking, medium | 16-Oct-2025 |
| ️ Charla + laboratorio: cómo se encontró un IDOR real (HackerOne) y cómo mitigarlo | https://gorkaaa.medium.com/%EF%B8%8F-charla-laboratorio-c%C3%B3mo-se-encontr%C3%B3-un-idor-real-hackerone-y-c%C3%B3mo-mitigarlo-5ebbe8868a37?source=rss------bug_bounty-5 | Gorka | bug-bounty, hacking, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 16-Oct-2025 |
| I used to think hacking was 90% typing and 10% staring at error messages. | https://medium.com/@viratavi1223/i-used-to-think-hacking-was-90-typing-and-10-staring-at-error-messages-ccd74afe5a14?source=rss------bug_bounty-5 | Viratavi | pentestin, hackerone, ethical-hacking-tips, hacking, bug-bounty | 16-Oct-2025 |
| How I Became an Accidental Admin and Almost Got Fired (From Someone Else’s Company) | https://infosecwriteups.com/how-i-became-an-accidental-admin-and-almost-got-fired-from-someone-elses-company-82e7b0acdb8b?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty-tips, bug-bounty, hacking, infosec | 16-Oct-2025 |
| Linux Forensics & Incident Response Basics | https://medium.com/@cybersecplayground/linux-forensics-incident-response-basics-55f31bff3b88?source=rss------bug_bounty-5 | Cybersecplayground | pentesting, linux-tutorial, bug-bounty, hacking, forensics | 16-Oct-2025 |
| Exposed API Keys and Secrets | https://ghostman01.medium.com/exposed-api-keys-and-secrets-d9c08f34ab73?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, hacking, programming, cybersecurity, technology | 16-Oct-2025 |
| Injected #1: From API Bugs To File Impersonation Attack | https://medium.com/@red.whisperer/injected-1-from-api-bugs-to-file-impersonation-attack-477f2e5a91bf?source=rss------bug_bounty-5 | Chux | security, cybersecurity, bug-bounty, hacking | 16-Oct-2025 |
| Critical LFI in a Microsoft AI Server (CVE-2025–30208) | https://medium.com/leetsec/critical-lfi-in-a-microsoft-ai-server-cve-2025-30208-f1a0f2e7faf9?source=rss------bug_bounty-5 | ak | cybersecurity, bug-bounty, ethical-hacking, microsoft, web-security | 16-Oct-2025 |
| ️ jsrip — Automated JavaScript Ripper & Analyzer for Bug Hunters | https://medium.com/@moute/%EF%B8%8F-jsrip-automated-javascript-ripper-analyzer-for-bug-hunters-7e57d72a858b?source=rss------bug_bounty-5 | Moute | hacking, cybersecurity, automation, bug-bounty, penetration-testing | 16-Oct-2025 |
| Broken Access Control: The Silent Web Vulnerability Hackers Exploit to Bypass Security | https://medium.com/@0xMuhammedAsfan/broken-access-control-the-silent-web-vulnerability-hackers-exploit-to-bypass-security-6b9608935dbb?source=rss------bug_bounty-5 | Muhammed Asfan | Cybersecurity Analyst | web-application-security, bug-bounty, ethical-hacking, owasp-top-10, cybersecurity | 16-Oct-2025 |
| Mastering Secret Hunting: Step-by-Step Guide to Grep & Git in Codebase Security | https://medium.com/@verylazytech/mastering-secret-hunting-step-by-step-guide-to-grep-git-in-codebase-security-f3e3a3390337?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, hacking, cybersecurity, bug-bounty, penetration-testing | 16-Oct-2025 |
| Freelancer Scienario | Hackviser CWSExpert | https://medium.com/@yossefmohamedsalah2001/freelancer-scienario-hackviser-cwsexpert-6bd72c96a9ad?source=rss------bug_bounty-5 | Y0s_0x_IBM | bug-bounty, ctf-writeup, hackviser, penetration-testing, ctf | 16-Oct-2025 |
| When dev‑server whispers: a bug hunter’s journey discovering CVE‑2025‑30208 on a government portal. | https://medium.com/@will.star/when-dev-server-whispers-a-bug-hunters-journey-discovering-cve-2025-30208-on-a-government-portal-6e7509854acc?source=rss------bug_bounty-5 | Will.Star | bug-bounty, hacks, will-star, cve, cve-2025-30208 | 16-Oct-2025 |
| From SSRF to RCE: intigriti/Challenge 1025 | https://medium.com/@alejandro._./from-ssrf-to-rce-intigriti-challenge-1025-5a12d866db11?source=rss------bug_bounty-5 | alejandro | ssrf, infosec, bug-bounty, intigriti, cybersecurity | 15-Oct-2025 |
| Mastering Naabu: A fast port scanner for bug hunting | https://infosecwriteups.com/mastering-naabu-a-fast-port-scanner-for-bug-hunting-9a0020abfdf1?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, hacking, bug-bounty, technology, cybersecurity | 15-Oct-2025 |
| Intigriti Challenge 1025 — Unintended Solution Writeup | https://savi0r.medium.com/intigriti-challenge-1025-unintended-solution-writeup-b0e611890c16?source=rss------bug_bounty-5 | savi0r | pentesting, ctf-writeup, bug-bounty | 15-Oct-2025 |
| How I Cracked the “Uncrackable” UUIDs and Found Every User’s Secret Data | https://medium.com/@iski/how-i-cracked-the-uncrackable-uuids-and-found-every-users-secret-data-f0cd2224e09d?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, bug-bounty-tips, bug-bounty, money | 15-Oct-2025 |
| Port 5601 Exposed: How Kibana Grants Attackers Data, Keys, and Long-Lived Access | https://medium.com/@verylazytech/port-5601-exposed-how-kibana-grants-attackers-data-keys-and-long-lived-access-f9ba5cd058a8?source=rss------bug_bounty-5 | Very Lazy Tech | exploitation, penetration-testing, hacking, database, bug-bounty | 15-Oct-2025 |
| Solution for Intigriti Challenge 1025 | https://medium.com/@ambushneupane4/solution-for-intigriti-challenge-1025-3ecc9c7e11db?source=rss------bug_bounty-5 | Ambush Neupane | intigriti, bug-bounty, ctf-writeup | 15-Oct-2025 |
| Intigriti Challenge 1025 — Unintended Solution Writeup | https://savi0r.medium.com/intigriti-challenge-1025-unintended-solution-writeup-92ac5c9d425e?source=rss------bug_bounty-5 | savi0r | ctf, pentesting, bug-bounty | 15-Oct-2025 |
| How to Find Your First High-Impact Vulnerability (Without Relying on XSS) | https://medium.com/@sync-with-ivan/how-to-find-your-first-high-impact-vulnerability-without-relying-on-xss-de3fdb73f182?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, cybersecurity, penetration-testing, ethical-hacking, infosec | 15-Oct-2025 |
| Hands-Off Reconnaissance: Mapping Targets in Minutes | https://njerumtwaiti.medium.com/hands-off-reconnaissance-mapping-targets-in-minutes-7821f385e45b?source=rss------bug_bounty-5 | Njeru Mtwaiti | bug-bounty, reconnaissance, hacking, subdomains-enumeration | 15-Oct-2025 |
| SSRF (Server Side Request Forgery) | https://medium.com/@raihan408548/ssrf-server-side-request-forgery-b46e94191a93?source=rss------bug_bounty-5 | Md. Raihan | web-pen-testing, penetration-testing, exploit, ssrf, bug-bounty | 15-Oct-2025 |
| How Hackers Find Secrets Hidden In Public Websites | https://hasamba.medium.com/how-hackers-find-secrets-hidden-in-public-websites-39a82086a874?source=rss------bug_bounty-5 | Yaniv | infosec, secrets, bug-bounty, osint | 15-Oct-2025 |
| Nmap Explained Simply: How Hackers and Network Admins See the Internet’s Hidden Doors | https://medium.com/@natarajanck2/nmap-explained-simply-how-hackers-and-network-admins-see-the-internets-hidden-doors-e86e2eb3ada0?source=rss------bug_bounty-5 | Natarajan C K | internet, nmap, security, bug-bounty, ip-address | 15-Oct-2025 |
| Basic Server-side template injection (SSTI) Pentesting | https://medium.com/@raihan408548/basic-server-side-template-injection-ssti-pentesting-4b7286f26d02?source=rss------bug_bounty-5 | Md. Raihan | web-penetration-testing, bug-bounty, ssti-vulnerability, web-hacking, ssti | 15-Oct-2025 |
| My Next Chapter: Becoming a Cybersecurity Researcher & Bug Bounty Hunter | https://medium.com/@ethivolt/my-next-chapter-becoming-a-cybersecurity-researcher-bug-bounty-hunter-027fe8796687?source=rss------bug_bounty-5 | Ethivolt | bug-bounty, cybersecurity-research | 15-Oct-2025 |
| Organizations are not trying to understand the incoming threats; they know when it’s too late. | https://imran-niaz.medium.com/organizations-are-not-trying-to-understand-the-incoming-threats-they-know-when-its-too-late-4e225a6a5188?source=rss------bug_bounty-5 | Imran Niaz | cybersecurity, penetration-testing, hacking, data, bug-bounty | 15-Oct-2025 |
| How a Simple WordPress Endpoint Led to a Blind Server-Side Request Forgery | https://medium.com/@bansalabhay0402/how-a-simple-wordpress-endpoint-led-to-a-blind-server-side-request-forgery-9588b0bc9eb4?source=rss------bug_bounty-5 | Ark | bug-bounty, reconnaissance, cybersecurity | 15-Oct-2025 |
| 24. Common Reasons Bugs Get Rejected (And How to Avoid That) | https://infosecwriteups.com/24-common-reasons-bugs-get-rejected-and-how-to-avoid-that-6dda954d96a0?source=rss------bug_bounty-5 | Abhijeet kumawat | medium, cybersecurity, infosec, hacking, bug-bounty | 15-Oct-2025 |
| What I Wish I Knew Before Starting My First Bug Bounty Program | https://medium.com/@sync-with-ivan/what-i-wish-i-knew-before-starting-my-first-bug-bounty-program-986a4e25c3b6?source=rss------bug_bounty-5 | Andrei Ivan | ethical-hacking, cybersecurity, infosec, bug-bounty, penetration-testing | 15-Oct-2025 |
| Basic Server Side Request Forgery (SSRF) | https://medium.com/@raihan408548/ssrf-server-side-request-forgery-b46e94191a93?source=rss------bug_bounty-5 | Md. Raihan | web-pen-testing, penetration-testing, exploit, ssrf, bug-bounty | 15-Oct-2025 |
| “The $10,800 Typo: How a Single Dot Broke Twitter’s Authentication” | https://amannsharmaa.medium.com/the-10-800-typo-how-a-single-dot-broke-twitters-authentication-f485e6dc0f04?source=rss------bug_bounty-5 | Aman Sharma | hacking, cybersecurity, technology, coding, bug-bounty | 15-Oct-2025 |
| Top 15 Misconfigurations That Lead to Instant Server Pwn: Master Critical Cybersecurity Mistakes | https://medium.com/@verylazytech/top-15-misconfigurations-that-lead-to-instant-server-pwn-master-critical-cybersecurity-mistakes-fbd5cb09df6a?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, cybersecurity, penetration-testing, ethical-hacking | 15-Oct-2025 |
| Getting RCE — Challenge #1025 by Intigriti | https://hamzaavvan.medium.com/getting-rce-challenge-1025-by-intigriti-b3d0033a286d?source=rss------bug_bounty-5 | Hamza Avvan | remote-code-execution, ctf-writeup, bug-bounty | 15-Oct-2025 |
| How I Turned a Simple Python Script Into Profit | https://medium.com/@ibtissamhammadi1/how-i-turned-a-simple-python-script-into-profit-8bf7f0db4652?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, cybersecurity, automation, python, programming | 15-Oct-2025 |
| Your Guide to a Free Google VPS | https://medium.com/@AbdelRhman_Sabry/your-guide-to-a-free-google-vps-13ea91788543?source=rss------bug_bounty-5 | AbdelRhman_Sabry | free-vps, bug-bounty, linux, reconnaissance, vps | 15-Oct-2025 |
| $35,000 por un fallo en GitLab — Análisis completo de un reporte real | https://gorkaaa.medium.com/35-000-por-un-fallo-en-gitlab-an%C3%A1lisis-completo-de-un-reporte-real-3fe1bd5bbb00?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, cybersecurity, hacking, bug-bounty, bug-bounty-tips | 15-Oct-2025 |
| How I Found a $250 XSS Bug After Losing Hope in Bug Bounty | https://medium.com/meetcyber/how-i-found-a-250-xss-bug-after-losing-hope-in-bug-bounty-16ce5677b599?source=rss------bug_bounty-5 | Danish Ahmed | life-hacking, bug-bounty, cybersecurity, hacking, hacker | 15-Oct-2025 |
| How I Found a $250 XSS Bug After Losing Hope in Bug Bounty | https://infosecwriteups.com/how-i-found-a-250-xss-bug-after-losing-hope-in-bug-bounty-8ab557df4d1d?source=rss------bug_bounty-5 | Danish Ahmed | hacking, hacker, cybersecurity, bug-bounty-writeup, bug-bounty | 15-Oct-2025 |
| “The $10,800 Typo: How a Single Dot Broke Twitter’s Authentication” | https://infosecwriteups.com/the-10-800-typo-how-a-single-dot-broke-twitters-authentication-f485e6dc0f04?source=rss------bug_bounty-5 | Aman Sharma | hacking, cybersecurity, technology, coding, bug-bounty | 15-Oct-2025 |
| The Batcave Breach: A First-Timer’s Journey into Network Penetration Testing | https://medium.com/@momenrezkk90/the-batcave-breach-a-first-timers-journey-into-network-penetration-testing-d4b8ce514a77?source=rss------bug_bounty-5 | MOAMEN REZK | ctf, ctf-walkthrough, cybersecurity, ctf-writeup, bug-bounty | 15-Oct-2025 |
| Intigriti - Challenge - 1025 | https://40rbidd3n.medium.com/intigriti-challenge-1025-badc6a24caf9?source=rss------bug_bounty-5 | Achraf (@40rbidd3n) | web-application-security, bug-bounty, pentesting, intigriti, ctf | 14-Oct-2025 |
| Domina Naabu: Un escáner de puertos rápido para bug bounty | https://medium.com/@jpablo13/domina-naabu-un-esc%C3%A1ner-de-puertos-r%C3%A1pido-para-bug-bounty-11511a1805ee?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, technology, cybersecurity, hacking, bug-bounty | 14-Oct-2025 |
| “Actively Exploited” CVE-2024–38856 Apache OFBiz | https://medium.com/@hariharanhex00/actively-exploited-cve-2024-38856-apache-ofbiz-44f87aa8b944?source=rss------bug_bounty-5 | HariHaranK | cve, hacking, bug-bounty, blackhat, exploit | 14-Oct-2025 |
| Beyond the Test Case: Why Context Matters More Than Coverage | https://medium.com/@lakindudesilva007/beyond-the-test-case-why-context-matters-more-than-coverage-c1661d329cde?source=rss------bug_bounty-5 | Lakindu De Silva | software-development, qa, software-engineering, bug-bounty, software-testing | 14-Oct-2025 |
| Secret Bug Bounty Platform to make $$$$ | https://anontriager.medium.com/secret-bug-bounty-platform-to-make-8f6c268bc501?source=rss------bug_bounty-5 | Anonymous Traiger | bugbounty-tips, bugbounty-writeup, programing, jobs, bug-bounty | 14-Oct-2025 |
| 5 Wordlists Every Bug Bounty Hunter Should Save (and how to use them) | https://medium.com/coding-nexus/5-wordlists-every-bug-bounty-hunter-should-save-and-how-to-use-them-a03d875222b4?source=rss------bug_bounty-5 | Code Pulse | bug-bounty, bug-bounty-tips, wordlist, coding, bugs | 14-Oct-2025 |
| What is NoSQL — and why did it appear? | https://systemweakness.com/what-is-nosql-and-why-did-it-appear-2b40ae3ec1fa?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, cybersecurity, information-security, ai, bug-bounty | 14-Oct-2025 |
| How I Accidentally Found the Company’s “Master Key” by Changing a Single Number | https://medium.com/@iski/how-i-accidentally-found-the-companys-master-key-by-changing-a-single-number-d9cf275b5097?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, bug-bounty-tips, money, cybersecurity | 14-Oct-2025 |
| My Pre-Engagement Penetration Testing Checklist: 15 Steps to Success | https://medium.com/@sync-with-ivan/my-pre-engagement-penetration-testing-checklist-15-steps-to-success-c0784368e870?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, penetration-testing, ethical-hacking, cybersecurity, bug-bounty-tips | 14-Oct-2025 |
| Advanced Hunting: Practical Tricks I Still Used After 10+ Years of Bug Bounty Hunting | https://medium.com/@Aacle/advanced-hunting-practical-tricks-i-still-used-after-10-years-of-bug-bounty-hunting-1475c39fa83a?source=rss------bug_bounty-5 | Abhishek meena | infosec, bug-bounty, owasp, cybersecurity, hacking | 14-Oct-2025 |
| XSS: Bypassing Cloudflare WAF with a Simple Trick | https://medium.com/@pranavrp77/xss-bypassing-cloudflare-waf-with-a-simple-trick-12aff8ce87c7?source=rss------bug_bounty-5 | Pranav Patil | bug-bounty-writeup, bug-bounty-tips, bug-bounty, xss-bypass, xss-attack | 14-Oct-2025 |
| Intigriti 1025 Challenge: SSRF to RCE via File Upload Bypass | https://sanderwind.medium.com/intigriti-1025-challenge-ssrf-to-rce-via-file-upload-bypass-8aaa0164ee55?source=rss------bug_bounty-5 | Sander Wind | bug-bounty, remote-code-execution, capture-the-flag, intigriti, ssrf | 14-Oct-2025 |
| JavaScript Paywall at a Major Swiss Media Group — Responsible Disclosure | https://medium.com/@cybercitizen.tech/javascript-paywall-at-a-major-swiss-media-group-responsible-disclosure-362733596cb2?source=rss------bug_bounty-5 | CyberCitizen | newspapers, bug-bounty, subscription, penetration-testing, cybersecurity | 14-Oct-2025 |
| How I Solved Intigriti’s October 2025 Challenge with an “Unintended Solution” | https://medium.com/@ou_/how-i-solved-intigritis-october-2025-challenge-with-an-unintended-solution-4c44122cacdd?source=rss------bug_bounty-5 | swiv | intigriti, bug-bounty-writeup, ctf-writeup, bug-bounty | 14-Oct-2025 |
| — … | https://medium.com/@hossammostafa2003.1.1/-3dfe9a92cfb9?source=rss------bug_bounty-5 | Hossam_Mostafa | cybersecurity, web-penetration-testing, ethical-hacking, web-security, bug-bounty | 14-Oct-2025 |
| My Pre-Engagement Penetration Testing Checklist: 15 Steps to Success | https://medium.com/meetcyber/my-pre-engagement-penetration-testing-checklist-15-steps-to-success-c0784368e870?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, penetration-testing, ethical-hacking, cybersecurity, bug-bounty-tips | 14-Oct-2025 |
| Pivoting from Web to Internal Network: The Step-by-Step Playbook Every Pentester Needs | https://medium.com/@verylazytech/pivoting-from-web-to-internal-network-the-step-by-step-playbook-every-pentester-needs-a7edeb402bb9?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 14-Oct-2025 |
| 23. Tools vs. Mindset: What Matters More in 2025 | https://infosecwriteups.com/23-tools-vs-mindset-what-matters-more-in-2025-1be217350787?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, hacking, tools, cybersecurity, bug-bounty | 14-Oct-2025 |
| SQL Injection di WHERE Clause — Cara Selesaikan Lab PortSwigger (Langkah-demi-langkah, Untuk… | https://medium.com/@avwan2.avwan/sql-injection-di-where-clause-cara-selesaikan-lab-portswigger-langkah-demi-langkah-untuk-e331c33c9ab2?source=rss------bug_bounty-5 | Muhamad Avwan | bug-bounty, portswigger-lab, sql-injection, information-security, cybersecurity | 14-Oct-2025 |
| Intigriti Challenge 1025 : Dual Path SSRF to (server-status → web-shell) | https://medium.com/@jsll/intigriti-challenge-1025-dual-path-ssrf-to-server-status-web-shell-7eba198f6fe3?source=rss------bug_bounty-5 | jsll | ctf-writeup, ssrf, bug-bounty, infosec, web-security | 14-Oct-2025 |
| From Low to Medium - How a simple email injection earned me some $$$ | https://infosecwriteups.com/from-low-to-medium-how-a-simple-email-injection-earned-me-some-3e7630ae4e9c?source=rss------bug_bounty-5 | Umanhonlen Gabriel | bugs, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 14-Oct-2025 |
| “Are Web LLM Attacks Just Social Engineering 2.0?” | https://javascript.plainenglish.io/are-web-llm-attacks-just-social-engineering-2-0-8e37f19d874b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, bug-bounty, cybersecurity, infosec | 14-Oct-2025 |
| How Hackers Find Secrets Hidden in Public Websites | https://infosecwriteups.com/how-hackers-find-secrets-hidden-in-public-websites-513756e90d0f?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, hacking, programming, javascript, coding | 14-Oct-2025 |
| XSS and XXE explained, plus 8 real interview questions | https://medium.com/meetcyber/xss-and-xxe-explained-plus-8-real-interview-questions-4ef6ba311a19?source=rss------bug_bounty-5 | CyberSenpai | cybersecurity, bug-bounty, owasp, interview, information-security | 14-Oct-2025 |
| Google Dorking for Beginners: The Ethical Hacker’s Guide to Smarter Searching | https://medium.com/@rraj073389/google-dorking-for-beginners-the-ethical-hackers-guide-to-smarter-searching-c61cdbf152cf?source=rss------bug_bounty-5 | Raj Rawat | cybersecurity, google-dorking, penetration-testing, bug-bounty, ethical-hacking | 14-Oct-2025 |
| The Brutal Truth About Cybersecurity No One Tells You (Yes, That Includes You) | https://medium.com/@shaikhminhaz1975/the-brutal-truth-about-cybersecurity-no-one-tells-you-yes-that-includes-you-fa6eba775f9b?source=rss------bug_bounty-5 | Shaikh Minhaz | cyber-security-awareness, bug-bounty, motivation, penetration-testing, cybersecurity | 14-Oct-2025 |
| 4 vulnerabilidades reales en Google OAuth — análisis técnico paso a paso | https://gorkaaa.medium.com/4-vulnerabilidades-reales-en-google-oauth-an%C3%A1lisis-t%C3%A9cnico-paso-a-paso-26e6d8ac1b90?source=rss------bug_bounty-5 | Gorka | cybersecurity, bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty | 14-Oct-2025 |
| Find Critical Vulnerabilities: My 7-Minute Bug Bounty Workflow | https://medium.com/@ibtissamhammadi1/find-critical-vulnerabilities-my-7-minute-bug-bounty-workflow-2dd75f8707cd?source=rss------bug_bounty-5 | Ibtissam hammadi | reconnaissance, cybersecurity, bug-bounty, automation, penetration-testing | 14-Oct-2025 |
| How I Found “CVE-2025–4123” in Grafana Using FOFA (and Got a Bounty | https://medium.com/@a0xtrojan/how-i-found-cve-2025-4123-in-grafana-using-fofa-and-got-a-bounty-a21a00d477a8?source=rss------bug_bounty-5 | A0X_Trojan | bug-bounty, fofa, intigriti, grafana, cve-2025-4123 | 14-Oct-2025 |
| Account Takeover And Staying Logged In Forever After Password Reset | https://medium.com/@eng.mahmoudbughunter/account-takeover-and-staying-logged-in-forever-after-password-reset-b0ed4b65ac22?source=rss------bug_bounty-5 | Mahmoud Farag | penetration-testing, bugs, bug-bounty-writeup, bug-zero, bug-bounty | 14-Oct-2025 |
| $6000 Bounty: How a Simple Bug Lets Hackers Take Over Your Computer | https://osintteam.blog/6000-bounty-how-a-simple-bug-lets-hackers-take-over-your-computer-d1d261bd35af?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, bug-bounty-tips, technology, bug-bounty-writeup, vulnerability | 14-Oct-2025 |
| How I Hacked Proton VPN and Got Paid | https://medium.com/@josekuttykunnelthazhebinu/how-i-hacked-proton-vpn-and-got-paid-501a9eee39c9?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | hacking, cybersecurity, bug-bounty, vulnerability, infosec | 14-Oct-2025 |
| ️ Hacking Laravel for $7,000 | https://anontriager.medium.com/%EF%B8%8F-hacking-laravel-for-7-000-bd14818b3563?source=rss------bug_bounty-5 | Anonymous Traiger | larvel, ethical-hacking, bug-bounty, jobs, programming | 13-Oct-2025 |
| Think Before You Click: One Wrong Click Can Crash Your Entire System | https://medium.com/@jyothismohan17/think-before-you-click-one-wrong-click-can-crash-your-entire-system-6627d6355b70?source=rss------bug_bounty-5 | Jyothis Mohan | penetration-testing, bug-bounty, cybersecurity, ethical-hacking, phishing | 13-Oct-2025 |
| How I Won $10K by Finding an AWS Misconfiguration in an App (And What You Can Learn) | https://medium.com/@ethan_hunt/how-i-won-10k-by-finding-an-aws-misconfiguration-in-an-app-and-what-you-can-learn-990ee90b4f05?source=rss------bug_bounty-5 | Mandar Satam | penetration-testing, aws, cybersecurity, bug-bounty, mobile | 13-Oct-2025 |
| 22. How to Get Invites to Private Programs | https://infosecwriteups.com/22-how-to-get-invites-to-private-programs-9bbb51664e21?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, hacking, cybersecurity, bug-bounty-tips, bug-bounty | 13-Oct-2025 |
| How I Stole an AI’s Brain (Legally) and Cashed Out | https://medium.com/@iski/how-i-stole-an-ais-brain-legally-and-cashed-out-95b3848bcf6b?source=rss------bug_bounty-5 | Iski | bug-bounty, money, bug-bounty-tips, hacking, cybersecurity | 13-Oct-2025 |
| A Bug Hunter’s Guide to CSP Bypasses (Part 1) | https://infosecwriteups.com/a-bug-hunters-guide-to-csp-bypasses-part-1-69b606fd2699?source=rss------bug_bounty-5 | Abhishek meena | owasp, infosec, bug-bounty, cybersecurity, hacker | 13-Oct-2025 |
| From Nmap to Root: What Open ADB (5555) Lets an Attacker Do (technical journey) | https://medium.com/@verylazytech/from-nmap-to-root-what-open-adb-5555-lets-an-attacker-do-technical-journey-aec9403c431a?source=rss------bug_bounty-5 | Very Lazy Tech | exploitation, hacker, bug-bounty, ethical-hacking, cybersecurity | 13-Oct-2025 |
| Reflected in the DOM, Escalated to Account Takeover | https://infosecwriteups.com/reflected-in-the-dom-escalated-to-account-takeover-a378659779c0?source=rss------bug_bounty-5 | 0xP0L73R63157 | ethical-hacking, information-security, bug-bounty, bug-bounty-writeup, security | 13-Oct-2025 |
| How to Use AI to Learn Bug Hunting & Cybersecurity Like a Pro (in 2025) | https://infosecwriteups.com/how-to-use-ai-to-learn-bug-hunting-cybersecurity-like-a-pro-in-2025-4c0a53a209b1?source=rss------bug_bounty-5 | Vipul Sonule | ai, hacking, cybersecurity, programming, bug-bounty | 13-Oct-2025 |
| SQL Injection and IDOR explained, plus 8 real interview questions | https://medium.com/@cybersenpai/sql-injection-and-idor-explained-plus-8-real-interview-questions-2b5493f30fa0?source=rss------bug_bounty-5 | CyberSenpai | cybersecurity, information-security, interview, bug-bounty, sql | 13-Oct-2025 |
| I Cracked 12 Passwords in 3 Hours Using This Free Tool Nobody Talks About (CeWL Tutorial) | https://systemweakness.com/i-cracked-12-passwords-in-3-hours-using-this-free-tool-nobody-talks-about-cewl-tutorial-3f9299010b6d?source=rss------bug_bounty-5 | BugHunter’s Journal | hacking, bug-bounty, programming, software-development, cybersecurity | 13-Oct-2025 |
| Beyond Bugs: How Modern QA is Powering Business Growth and Digital Trust in 2025 | https://qacetech.medium.com/beyond-bugs-how-modern-qa-is-powering-business-growth-and-digital-trust-in-2025-2e6a98f35991?source=rss------bug_bounty-5 | QaceTech Ltd | healthtech, bugs, saas, fintech, bug-bounty | 13-Oct-2025 |
| When ‘Just a Config Issue’ Becomes a Full Data Breach | https://medium.com/@saurabh5392/when-just-a-config-issue-becomes-a-full-data-breach-e7c769f6872b?source=rss------bug_bounty-5 | Sushant Soni | devsecops, owasp, bug-bounty, infosec, cybersecurity | 13-Oct-2025 |
| How I Got Into the Admin Panel (Using Credentials That Didn’t Even Exist) | https://medium.com/@ansarirehan1230786/how-i-got-into-the-admin-panel-using-credentials-that-didnt-even-exist-3aa14a6bd836?source=rss------bug_bounty-5 | Rehan Ansari | account-takeover-attacks, ethical-hacking, bug-bounty, privilege-escalation, web-penetration-testing | 13-Oct-2025 |
| Pentesting File Upload Vulnerabilities | https://medium.com/@raihan408548/pentesting-file-upload-vulnerabilities-ce54e7f419de?source=rss------bug_bounty-5 | Md. Raihan | file-upload-vulnerability, bug-bounty, file-upload, web-hacking, penetration-testing | 13-Oct-2025 |
| The First Bounty: More Than Just a Payday | https://blog.securitybreak.io/the-first-bounty-more-than-just-a-payday-bd3e8abeac01?source=rss------bug_bounty-5 | Sunny Jha | penetration-testing, hacking, technology, web-development, bug-bounty | 13-Oct-2025 |
| How I Found a Hidden Security Risk in Our Spring Boot Application | https://medium.com/@ibtissamhammadi1/how-i-found-a-hidden-security-risk-in-our-spring-boot-application-332ba7df530d?source=rss------bug_bounty-5 | Ibtissam hammadi | programming, technology, cybersecurity, java, bug-bounty | 13-Oct-2025 |
| 0-Click Account Takeover — Invite Friend + OTP Lifecycle Vulnerability | https://medium.com/@0xmekky/0-click-account-takeover-invite-friend-otp-lifecycle-vulnerability-2c30e8aaa896?source=rss------bug_bounty-5 | القنصل | web-security, ethical-hacking, account-takeover, web-security-testing, bug-bounty | 13-Oct-2025 |
| IDOR — La vulnerabilidad invisible que sigue pagando recompensas | https://gorkaaa.medium.com/idor-la-vulnerabilidad-invisible-que-sigue-pagando-recompensas-792323f2c27f?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, idor, bug-bounty, cybersecurity, hacking | 13-Oct-2025 |
| How mass-assignment led to stored-XSS and a CSP bypass in a major chatbot platform | https://medium.com/@melodicbook/how-mass-assignment-led-to-stored-xss-and-a-csp-bypass-in-a-major-chatbot-platform-3c6569d7c9e9?source=rss------bug_bounty-5 | Sam Mirov | cybersecurity, web-applications, bug-bounty, research | 13-Oct-2025 |
| Saga of Exploiting Hardcoded APIs to Swag Hoodies. | https://medium.com/@Cybervenom/saga-of-exploiting-hardcoded-apis-to-swag-hoodies-4a5d0792e0ac?source=rss------bug_bounty-5 | Harsh Tandel | bug-bounty, exploitation, hacking, api, security | 13-Oct-2025 |
| Microsoft Events Leak, Part II: Leaking Event Registration Database Again | https://medium.com/@faav/microsoft-events-leak-part-ii-leaking-event-registration-database-again-069050664475?source=rss------bug_bounty-5 | Faav | bug-bounty-tips, microsoft, bug-bounty, bug-bounty-writeup | 13-Oct-2025 |
| Mastering C2 Infrastructure with SSH: Step-by-Step Guide to Building Your Own Hacker Control Center | https://medium.com/@verylazytech/mastering-c2-infrastructure-with-ssh-step-by-step-guide-to-building-your-own-hacker-control-center-42e3f9eff829?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, hacking, cybersecurity, ethical-hacking, penetration-testing | 13-Oct-2025 |
| How the cookie crumbls | https://medium.com/@collinpotter/how-the-cookie-crumbls-085614ecd0dd?source=rss------bug_bounty-5 | Collin potter | ethical-hacking, bug-bounty-writeup, bug-bounty | 13-Oct-2025 |
| Week 10: 16 Days Remaining — How I’m Rescuing My Challenge from the Motivation Slump (An Honest… | https://medium.com/@sl0th0x87/week-10-16-days-remaining-how-im-rescuing-my-challenge-from-the-motivation-slump-an-honest-57f16c5ff13a?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, cybersecurity, challenge, about-me, weekly-report | 13-Oct-2025 |
| Blockchain Bug Hunting & Patch Workflow: A Complete Checklist for Ethical Hackers | https://medium.com/write-a-catalyst/blockchain-bug-hunting-patch-workflow-a-complete-checklist-for-ethical-hackers-057415161a0f?source=rss------bug_bounty-5 | Monika sharma | blockchain, blockchain-technology, bug-bounty, vulnerability, bug-bounty-writeup | 13-Oct-2025 |
| Token Expired Error and IDOR: Unauthorized Access in an ASP.NET Application | https://hcibo.medium.com/token-expired-error-and-idor-unauthorized-access-in-an-asp-net-application-70a3f69b10cc?source=rss------bug_bounty-5 | Hamit CİBO | bug-bounty, aspnetcore, security, aspnet, penetration-testing | 13-Oct-2025 |
| How I got full admin control on a government website | https://medium.com/@jsamia/how-i-got-full-admin-control-on-a-government-website-042f703aeaa7?source=rss------bug_bounty-5 | Jaeden Samia | bug-bounty, hacking, vulnerability, cybersecurity | 13-Oct-2025 |
| Attacking iOS: Elite Recon and Exploitation Guide For Bug Bounty Hunters | https://anontriager.medium.com/attacking-ios-elite-recon-and-exploitation-guide-for-bug-bounty-hunters-0c67e2160484?source=rss------bug_bounty-5 | Anonymous Traiger | job-hunting, bug-bounty, ios, bugbounty-writeup, programming | 12-Oct-2025 |
| Cross-Site Request Forgery (CSRF) | https://medium.com/@raihan408548/cross-site-request-forgery-csrf-958e968dc693?source=rss------bug_bounty-5 | Md. Raihan | csrf, bug-bounty, penetration-testing, csrf-attack, web-hacking | 12-Oct-2025 |
| Active Recon for Bug Bounties: Port Scanning, Service Fingerprinting & Prioritization ⚡️ | https://su6osec.medium.com/active-recon-for-bug-bounties-port-scanning-service-fingerprinting-prioritization-%EF%B8%8F-33f2194de489?source=rss------bug_bounty-5 | Đeepanshu | infosec, bug-bounty, hacking, cybersecurity | 12-Oct-2025 |
| I turned a URL tweak into $800: How I found an IDOR and got paid — step-by-step (for beginners!) | https://medium.com/@zoningxtr/i-turned-a-url-tweak-into-800-how-i-found-an-idor-and-got-paid-step-by-step-for-beginners-86aa5443711e?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, web-development, javascript, cybersecurity, penetration-testing | 12-Oct-2025 |
| XSS & CSRF for Beginners: Finding Easy Bug Bounties | https://medium.com/@luismiguel.poncedeleon/xss-csrf-for-beginners-finding-easy-bug-bounties-ba61674ed8a0?source=rss------bug_bounty-5 | LuisM PoncedDeLeon | xss-attack, web-security, bug-bounty, csrf-attack | 12-Oct-2025 |
| you won’t find any vulnerabilities without this technique | https://medium.com/@shaikhminhaz1975/you-wont-find-any-vulnerabilities-without-this-technique-65da99920b64?source=rss------bug_bounty-5 | Shaikh Minhaz | step-by-step-guide, cybersecurity, web-penetration-testing, hackerone, bug-bounty | 12-Oct-2025 |
| Bad handler to Database takeover | https://allawi42o.medium.com/bad-handler-to-database-takeover-48fb1976dd7e?source=rss------bug_bounty-5 | Allawi | cybersecurity, bug-bounty | 12-Oct-2025 |
| Cara Memulai Bug Bounty: Dari Pendaftaran sampai Laporan yang DiterimaRingkasan | https://handevcode.medium.com/cara-memulai-bug-bounty-dari-pendaftaran-sampai-laporan-yang-diterimaringkasan-5e8aad8bd493?source=rss------bug_bounty-5 | Handev Code | programming, cybersecurity, ethical-hacking, bug-bounty, hackerone | 12-Oct-2025 |
| Free 9-hour Bug Bounty Boot Camp | https://hasamba.medium.com/free-9-hour-bug-bounty-boot-camp-c9ad973fa25d?source=rss------bug_bounty-5 | Yaniv | infosec, training, bug-bounty | 12-Oct-2025 |
| How I Earned My First Three Bounties | https://medium.com/@pawanparmarofficial45/how-i-earned-my-first-three-bounties-d4ce1f71cee2?source=rss------bug_bounty-5 | Pawan parmar | cybersecurity, information-technology, learning, ethical-hacking, bug-bounty | 12-Oct-2025 |
| No Experience, No Fee: Earn the ISC2 CC Certification for $0 | https://msnrasel1.medium.com/no-experience-no-fee-earn-the-isc2-cc-certification-for-0-e01c9288f04b?source=rss------bug_bounty-5 | 3eyedraven | cybersecurity, bug-bounty, certification, bug-bounty-tips, penetration-testing | 12-Oct-2025 |
| Authentication vulnerabilities | https://medium.com/@raihan408548/authentication-vulnerabilities-f5526a5142a1?source=rss------bug_bounty-5 | Md. Raihan | authentication, bug-bounty, web-pen-testing, web-hacking, authentication-bypass | 12-Oct-2025 |
| My Personal Browser Extensions For Pentesting | https://medium.com/@speedios/my-personal-browser-extensions-for-pentesting-fd8b72f4aec5?source=rss------bug_bounty-5 | Ahmed Yasser | cybersecurity, hacking, pentesting, penetration-testing, bug-bounty | 12-Oct-2025 |
| The weirdest bug:When Reflected XSS Won’t Let a Page Breathe | https://infosecwriteups.com/the-weirdest-bug-when-reflected-xss-wont-let-a-page-breathe-58be5cdfb569?source=rss------bug_bounty-5 | Helmiriahi | bug-bounty, web-development, cybersecurity, bugs, pentesting | 12-Oct-2025 |
| Instagram “View-Once” Images — A Privacy Concern Worth Knowing About | https://samael0x4.medium.com/instagram-view-once-images-a-privacy-concern-worth-knowing-about-0614e508005e?source=rss------bug_bounty-5 | samael0x4 | bypass, instagram, data-privacy, bug-bounty, bugs | 12-Oct-2025 |
| Week 13 — React Optimization: Code Splitting, Bundling & Source Map Risks | https://infosecwriteups.com/week-13-react-optimization-code-splitting-bundling-source-map-risks-962c08435a83?source=rss------bug_bounty-5 | Aang | bug-bounty, information-technology, ethical-hacking, reactjs, react | 12-Oct-2025 |
| WebShell Management 101: Master Secure Control Over Compromised Hosts Step-by-Step | https://medium.com/@verylazytech/webshell-management-101-master-secure-control-over-compromised-hosts-step-by-step-8f057e2ad47f?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, ethical-hacking, bug-bounty, hacking, cybersecurity | 12-Oct-2025 |
| The Ghost in the Admin’s Wallet: A Tale of Unauthorized Access | https://medium.com/@alimramadan92/the-ghost-in-the-admins-wallet-a-tale-of-unauthorized-access-06d8b6b7984b?source=rss------bug_bounty-5 | CYX | cybersecurity, red-team, bug-bounty, penetration-testing, information-disclosure | 12-Oct-2025 |
| ¿Usas Burp Suite correctamente? Probablemente no — mi flujo real para ser más rápido y efectivo | https://gorkaaa.medium.com/usas-burp-suite-correctamente-probablemente-no-mi-flujo-real-para-ser-m%C3%A1s-r%C3%A1pido-y-efectivo-f10c3f0056fb?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, hacking, cybersecurity, burpsuite, bug-bounty | 12-Oct-2025 |
| CTF to Bug Bounty: Part 1 of the Beginner’s Series for Aspiring Hunters | https://infosecwriteups.com/ctf-to-bug-bounty-part-1-of-the-beginners-series-for-aspiring-hunters-5ac37af302c4?source=rss------bug_bounty-5 | Prajwal | bug-bounty-tips, bug-bounty, cybersecurity, vulnerability, ctf | 12-Oct-2025 |
| Why you cannot obfuscate your payload with double-unicode encoding in JavaScript | https://medium.com/@ali26mirzaei/why-you-cannot-obfuscate-your-payload-with-double-unicode-encoding-in-javascript-05ccb29d4b49?source=rss------bug_bounty-5 | Alimirzaei | bugbounty-tips, bug-bounty-tips, cybersecurity, bug-bounty | 12-Oct-2025 |
| CSRF Where to Look | https://medium.com/@ikajakam/csrf-where-to-look-918d16ac4862?source=rss------bug_bounty-5 | Ikajakam | csrf, pentesting, bug-bounty | 11-Oct-2025 |
| GetAllUrls (gau): The Detector of Old and Forgotten Endpoints in Bug Bounty | https://medium.com/@jpablo13/getallurls-gau-the-detector-of-old-and-forgotten-endpoints-in-bug-bounty-8f8a40a92606?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, technology, cybersecurity, hacking, bug-bounty | 11-Oct-2025 |
| PoC: IDOR Leads to XSS on Profile Dashboard | https://medium.com/@jensonsantoso19/poc-idor-leads-to-xss-on-profile-dashboard-f4356a17aea7?source=rss------bug_bounty-5 | Jenson | cybersecurity, bug-bounty, data-security, information-security, technology | 11-Oct-2025 |
| Advanced Nuclei Templates: How to Write Target‑Specific Scans | https://su6osec.medium.com/advanced-nuclei-templates-how-to-write-target-specific-scans-acedaaf0742e?source=rss------bug_bounty-5 | Đeepanshu | bug-bounty, offensive-security, hacking, infosec, cybersecurity | 11-Oct-2025 |
| GetAllUrls (gau): The Detector of Old and Forgotten Endpoints in Bug Bounty | https://medium.com/meetcyber/getallurls-gau-the-detector-of-old-and-forgotten-endpoints-in-bug-bounty-8f8a40a92606?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, technology, cybersecurity, hacking, bug-bounty | 11-Oct-2025 |
| Interesting : Profile Pictures CP DoS | https://exploit5lovers.medium.com/interesting-profile-pictures-cp-dos-5e233f3b13aa?source=rss------bug_bounty-5 | Exploit5lover | bug-bounty, bug-bounty-tips, web-cache-poisoning, denial-of-service, hacking | 11-Oct-2025 |
| CTBB Podcast Notes: The Full-Time Bug Hunter’s Blueprint | https://sl4x0.medium.com/ctbb-podcast-notes-the-full-time-bug-hunters-blueprint-8ec2b126add5?source=rss------bug_bounty-5 | Abdelrhman Allam (sl4x0) | bug-bounty, web-security, infosec, full-time-jobs | 11-Oct-2025 |
| HackerOne verse 81 millions de dollars en primes de bug bounty | https://marcbarbezat.medium.com/hackerone-verse-81-millions-de-dollars-en-primes-de-bug-bounty-c96dbf674159?source=rss------bug_bounty-5 | Marc Barbezat | hackerone, hackers-éthiques, cybersécurité, bug-bounty | 11-Oct-2025 |
| Master Advanced Netcat Usage for Hackers: Techniques Beyond Reverse Shells | https://medium.com/@verylazytech/master-advanced-netcat-usage-for-hackers-techniques-beyond-reverse-shells-89f5e29776cb?source=rss------bug_bounty-5 | Very Lazy Tech | oscp, netcat, bug-bounty, hacking, penetration-testing | 11-Oct-2025 |
| $500 BAC Bug: Unauthorized Removal of Private Pension Schemes | https://medium.com/@a13h1/500-bac-bug-unauthorized-removal-of-private-pension-schemes-7710dc6bbc58?source=rss------bug_bounty-5 | Abhi Sharma | access-control, cybersecurity, infosec, bug-bounty, hacking | 11-Oct-2025 |
| Emoji Reaction to Vertical Privileges Escalation | https://medium.com/@ankitrathva/emoji-reaction-to-vertical-privileges-escalation-f6824436910a?source=rss------bug_bounty-5 | Ankit Rathva aka Gujarati Hacker | ethical-hacking, bug-bounty, hackerone, bugcrowd | 11-Oct-2025 |
| Mañana anuncio mi nueva Masterclass de Bug Bounty | https://gorkaaa.medium.com/ma%C3%B1ana-anuncio-mi-nueva-masterclass-de-bug-bounty-78abd91012e0?source=rss------bug_bounty-5 | Gorka | hacking, cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 11-Oct-2025 |
| The Access Control Apocalypse: How Broken Permissions Gave Me Keys to Every Digital Door | https://infosecwriteups.com/the-access-control-apocalypse-how-broken-permissions-gave-me-keys-to-every-digital-door-9948d05edf2b?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty-writeup, money, bug-bounty, bug-bounty-tips | 11-Oct-2025 |
| Hunting Dependency Confusion: Supply Chain Vulnerabilities for Bug Bounties | https://icecream23.medium.com/hunting-dependency-confusion-supply-chain-vulnerabilities-for-bug-bounties-ccb0c4496c01?source=rss------bug_bounty-5 | Aman Bhuiyan | bug-hunting, dependency-injection, hacking, bug-bounty | 11-Oct-2025 |
| XSS & CSRF for Beginners: Finding Easy Bug Bounties | https://medium.com/@ibtissamhammadi1/xss-csrf-for-beginners-finding-easy-bug-bounties-e9668c24ea53?source=rss------bug_bounty-5 | Ibtissam hammadi | csrf, bug-bounty, cybersecurity, xss-attack, web-security | 11-Oct-2025 |
| When GraphQL becomes a backdoor: SSRF to RCE in a real-world GraphQL endpoint. | https://medium.com/@arun.webskite/when-graphql-becomes-a-backdoor-ssrf-to-rce-in-a-real-world-graphql-endpoint-b4ab3b14573f?source=rss------bug_bounty-5 | MrLionOfficial | graphql, cybersecurity, bug-bounty, webapplicationpentest, ethical-hacking | 11-Oct-2025 |
| Coffee Corner CTF: A Security Journey | https://medium.com/@momenrezkk90/coffee-corner-ctf-a-security-journey-2a92816e1f9b?source=rss------bug_bounty-5 | MOAMEN REZK | cybersecurity, hacking, bug-bounty, penetration-testing, pentesting | 11-Oct-2025 |
| I Found the Admin Panel. Then I Owned Everything. | https://medium.com/@youssefawad1357/i-found-the-admin-panel-then-i-owned-everything-95f6d367060a?source=rss------bug_bounty-5 | youssef awad | cybersecurity, bug-bounty-tips, bug-bounty | 10-Oct-2025 |
| How Hackers Turn DNS Into a Backdoor (2025 Playbook) | https://medium.com/@verylazytech/how-hackers-turn-dns-into-a-backdoor-2025-playbook-6d3a61532bbd?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, penetration-testing, dns, cybersecurity | 10-Oct-2025 |
| GetAllUrls (gau): El Detector de Endpoints Antiguos y Olvidados en Bug Bounty | https://medium.com/@jpablo13/getallurls-gau-el-detector-de-endpoints-antiguos-y-olvidados-en-bug-bounty-cec72c694bac?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, penetration-testing, hacking, technology, cybersecurity | 10-Oct-2025 |
| From Recon to Exploit: A Technical Playbook for Bug Bounty Hunters | https://su6osec.medium.com/from-recon-to-exploit-a-technical-playbook-for-bug-bounty-hunters-4e0ca2834b36?source=rss------bug_bounty-5 | Đeepanshu | cybersecurity, hacking, red-team, bug-bounty, infosec | 10-Oct-2025 |
| ️ Shadow APIs in Multi-Tenant SaaS: The Hidden Attack Surface Nobody Monitors | https://medium.com/meetcyber/%EF%B8%8F-shadow-apis-in-multi-tenant-saas-the-hidden-attack-surface-nobody-monitors-169c916238da?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, cybersecurity, infosec, ai, information-security | 10-Oct-2025 |
| Bypassing Rate Limits: How I Registered 100+ Users in Seconds | https://medium.com/meetcyber/bypassing-rate-limits-how-i-registered-100-users-in-seconds-9141bd71ad85?source=rss------bug_bounty-5 | Erkan Kavas | business-logic-bug, ethical-hacking, hacking-tools, bug-bounty, cybersecurity | 10-Oct-2025 |
| How Itch.io | https://medium.com/@krivadna/how-itch-io-92db01c21848?source=rss------bug_bounty-5 | Krivadna | bugbounty-writeup, programming, penetration-testing, bug-bounty, cybersecurity | 10-Oct-2025 |
| Watching the Brand: How SOC Teams Use Brand Monitoring to Catch Threats Early | https://medium.com/@forte.social/watching-the-brand-how-soc-teams-use-brand-monitoring-to-catch-threats-early-e8f1b01e1dd5?source=rss------bug_bounty-5 | eSecForte Technologies | bug-bounty, hacking, social-media, cybersecurity, esecforte | 10-Oct-2025 |
| How I found an unauthenticated goldmine of PII | https://infosecwriteups.com/how-i-found-an-unauthenticated-goldmine-of-pii-8f1fc93d8a0d?source=rss------bug_bounty-5 | 0xP0L73R63157 | bug-bounty, bug-bounty-writeup, ethical-hacking, idor, exploitation | 10-Oct-2025 |
| How The Web Works [Part 4] | https://medium.com/@robin_root/how-the-web-works-part-4-2ad77d16f03a?source=rss------bug_bounty-5 | Mohamed Hamdi (Robin_Root) | cybersecurity, webdev, bug-bounty, pentesting | 10-Oct-2025 |
| Unbelievable Security Hole: JWT Secret in a Series-B Funded Company | https://infosecwriteups.com/unbelievable-security-hole-jwt-secret-in-a-series-b-funded-company-540434b54e59?source=rss------bug_bounty-5 | Erkan Kavas | idor, business-logic-bug, bug-bounty-tips, cybersecurity, bug-bounty | 10-Oct-2025 |
| The $500 Stored XSS Bug in SideFX’s Messaging System | https://infosecwriteups.com/the-500-stored-xss-bug-in-sidefxs-messaging-system-e55e1121d391?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-writeup, bug-bounty, technology, vulnerability, bug-bounty-tips | 10-Oct-2025 |
| A Beginner’s Guide to Finding Hidden API Endpoints in JavaScript Files | https://infosecwriteups.com/a-beginners-guide-to-finding-hidden-api-endpoints-in-javascript-files-925853b61bd1?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, web-security, api, cybersecurity, javascript | 10-Oct-2025 |
| Finding XSS on a Real-World Bug Bounty Program | https://medium.com/@ibtissamhammadi1/finding-xss-on-a-real-world-bug-bounty-program-d718335bcb30?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty-program, bug-bounty-hunter, infosec, bug-bounty | 10-Oct-2025 |
| 1-Click Account Takeover via Host Header Injection | https://3bdulr7man.medium.com/1-click-account-takeover-via-host-header-injection-a5774993f24a?source=rss------bug_bounty-5 | Abdulrhman | bug-bounty-tips, bug-bounty, web-exploitation, web-application-security, hacking | 10-Oct-2025 |
| the Vulnerability Allows Forced Removal of Page Owner Without Consent — on Facebook.(part 3) | https://medium.com/@hisham72/the-vulnerability-allows-forced-removal-of-page-owner-without-consent-on-facebook-part-3-612662f3b715?source=rss------bug_bounty-5 | Hisham | bugcrowd, meta-bug-bounty, hackerone, bug-bounty | 10-Oct-2025 |
| the Vulnerability Allows Forced Removal of Page Owner Without Consent — on Facebook.(part 2) | https://medium.com/@hisham72/the-vulnerability-allows-forced-removal-of-page-owner-without-consent-on-facebook-part-2-59081543cab2?source=rss------bug_bounty-5 | Hisham | hackerone, bug-bounty, bugcrowd, meta-bug-bounty | 10-Oct-2025 |
| the Vulnerability Allows Forced Removal of Page Owner Without Consent — on Facebook.(Part 1) | https://medium.com/@hisham72/the-vulnerability-allows-forced-removal-of-page-owner-without-consent-on-facebook-part-1-e6adf6aaf4fb?source=rss------bug_bounty-5 | Hisham | bug-bounty, meta-bug-bounty, hackerone, bugs, security-research | 10-Oct-2025 |
| The Danger of Using Old Code: Vulnerable and Outdated Components in the OWASP Top 10 | https://medium.com/@cybersenpai/the-danger-of-using-old-code-vulnerable-and-outdated-components-in-the-owasp-top-10-5d08d9eaf253?source=rss------bug_bounty-5 | CyberSenpai | penetration-testing, owasp, cybersecurity, bug-bounty, information-security | 10-Oct-2025 |
| The Ultimate Beginner’s Guide to Bug Bounty Hunting | https://medium.com/data-and-beyond/the-ultimate-beginners-guide-to-bug-bounty-hunting-7951c7b6e037?source=rss------bug_bounty-5 | Aj | penetration-testing, web-security, cybersecurity, bug-bounty, ethical-hacking | 10-Oct-2025 |
| Neural Network Nightmare: How Image Recognition APIs Were Secretly Spying on Everyone | https://medium.com/@iski/neural-network-nightmare-how-image-recognition-apis-were-secretly-spying-on-everyone-f42e379999c5?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, bug-bounty, cybersecurity, hacking, money | 10-Oct-2025 |
| SQL Injection UNION Attack — MySQL/Microsoft Version | https://medium.com/@cipher0x00/sql-injection-union-attack-mysql-microsoft-version-b725dd640d18?source=rss------bug_bounty-5 | Cipher0x00 | web-security, bug-bounty, pentesting, sql-injection, burpsuite | 10-Oct-2025 |
| Hidden in Plain Sight: Chaining CSS Override to XSS & Email Bombing | https://medium.com/@pauldipesh29/hidden-in-plain-sight-chaining-css-override-to-xss-email-bombing-9e43be1826a7?source=rss------bug_bounty-5 | Dipesh Paul | vulnerability, cybersecurity, xss-attack, bug-bounty, hacking | 10-Oct-2025 |
| $35,000 por este fallo en GitLab — Análisis completo y lecciones reales | https://gorkaaa.medium.com/35-000-por-este-fallo-en-gitlab-an%C3%A1lisis-completo-y-lecciones-reales-601d5cc6a593?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, hacking, bug-bounty-writeup, cybersecurity, bug-bounty | 10-Oct-2025 |
| I Opened a Random URL in Incognito and Found a $750 Vulnerability | https://vijetareigns.medium.com/i-opened-a-random-url-in-incognito-and-found-a-750-vulnerability-d8b04b0457c9?source=rss------bug_bounty-5 | the_unlucky_guy | cybersecurity, bug-bounty-tips, bug-bounty, security | 09-Oct-2025 |
| 21. Tips for Staying Consistent and Avoiding Burnout | https://infosecwriteups.com/21-tips-for-staying-consistent-and-avoiding-burnout-a6ebeef29c4f?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, writing-tips, hacking, cybersecurity, infosec | 09-Oct-2025 |
| Epsilon | https://goodnightdev.medium.com/epsilon-fd4d616fe9cd?source=rss------bug_bounty-5 | Achmad Isma'il | developer, attacker, bug-bounty, hacking, web-hacking | 09-Oct-2025 |
| How I Automate Recon and Save 10+ Hours of Manual Work Weekly | https://levelup.gitconnected.com/how-i-automate-recon-and-save-10-hours-of-manual-work-weekly-a7f5833b7417?source=rss------bug_bounty-5 | Aj | penetration-testing, cybersecurity, hacking, automation, bug-bounty | 09-Oct-2025 |
| TO BECOME A SOC EXPERT(DAY-9) | https://medium.com/@VulnHunt3r/to-become-a-soc-expert-day-9-a601e9e69681?source=rss------bug_bounty-5 | vulnhunter | bug-bounty, security, cybersecurity, ctf, hacking | 09-Oct-2025 |
| How to Start Bug Bounty Hunting in 2026 | https://su6osec.medium.com/how-to-start-bug-bounty-hunting-in-2026-31c97f44925a?source=rss------bug_bounty-5 | Đeepanshu | cybersecurity, bug-bounty, infosec | 09-Oct-2025 |
| IDOR Epidemic: How I Found 57 Insecure Direct Object References in One Codebase | https://medium.com/@iski/idor-epidemic-how-i-found-57-insecure-direct-object-references-in-one-codebase-0bfab17d156a?source=rss------bug_bounty-5 | Iski | bug-bounty, bug-bounty-tips, cybersecurity, money, hacking | 09-Oct-2025 |
| ⏱️ Race Condition Vulnerability: When Speed Becomes the Enemy | https://medium.com/@somnadh0000/%EF%B8%8F-race-condition-vulnerability-when-speed-becomes-the-enemy-69315f95b13c?source=rss------bug_bounty-5 | NadSec | bug-bounty, race-condition, cybersecurity, penetration-testing | 09-Oct-2025 |
| So… You Thought Your VPN Was Keeping You Safe and Secure? Think Again (Hacker’s Edition) | https://medium.com/@verylazytech/so-you-thought-your-vpn-was-keeping-you-safe-and-secure-think-again-hackers-edition-375e88188221?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, bug-bounty, penetration-testing, vpn, hacking | 09-Oct-2025 |
| How I found Multiple Bugs on CHESS.COM & they refused | https://infosecwriteups.com/how-i-found-multiple-bugs-on-chess-com-they-refused-1fa6e308ed1f?source=rss------bug_bounty-5 | Ayush | chess, cybersecurity, bug-bounty, programming, technology | 09-Oct-2025 |
| Blind SSRF → Cloud Takeover: Exploiting Callback Mechanisms for Privilege Escalation | https://medium.com/@narendarlb123/blind-ssrf-cloud-takeover-exploiting-callback-mechanisms-for-privilege-escalation-a18e4f9ce6a0?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, ai, bug-bounty, infosec | 09-Oct-2025 |
| OAuth Misconfiguration Lead To 1-Click Account Takeover (ATO) | https://medium.com/@mhmodgm54/oauth-misconfiguration-lead-to-1-click-account-takeover-ato-7b6e44bf7d75?source=rss------bug_bounty-5 | Mahmoud Gamal | penetration-testing, bug-bounty, account-takeover, cybersecurity, writeup | 09-Oct-2025 |
| The Supply Chain Threat — A06: Vulnerable and Outdated Components | 10 Days with Me | OWASP Top 10… | https://infyra.medium.com/the-supply-chain-threat-a06-vulnerable-and-outdated-components-10-days-with-me-owasp-top-10-b18f16994ded?source=rss------bug_bounty-5 | Md. EMTIAZ AHMED | bug-bounty, owasp-top-10, infosec, vulnerability, cybersecurity | 09-Oct-2025 |
| The Scalable XSS Hunter’s Guide: Techniques for Maximum Findings | https://medium.com/@ibtissamhammadi1/the-scalable-xss-hunters-guide-techniques-for-maximum-findings-beace1830f72?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, ethical-hacking, bug-bounty, infosec, automation | 09-Oct-2025 |
| Server-Side Request Forgery | https://medium.com/@fatimahasan022/server-side-request-forgery-e047f649afab?source=rss------bug_bounty-5 | Fatimahasan | oscp, web-exploitation, bug-bounty, portswigger-lab | 09-Oct-2025 |
| 0-click Account Takeover via Punycode | https://medium.com/@0x_s3fo/0-click-account-takeover-via-punycode-39b9a5cfbfb1?source=rss------bug_bounty-5 | Saif Eldin | bug-bounty-program, bug-bounty-hunter, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 09-Oct-2025 |
| Business Logic Error - Bypassing Payment with Test Cards | https://infosecwriteups.com/business-logic-error-bypassing-payment-with-test-cards-77c6e3c36f16?source=rss------bug_bounty-5 | Umanhonlen Gabriel | ai, bug-bounty, hacker, information-security, testing | 09-Oct-2025 |
| Unlimited File Upload Vulnerability: From Images to Web Threats | https://medium.com/@muhadnan2828/unlimited-file-upload-vulnerability-from-images-to-web-threats-fd621156a1db?source=rss------bug_bounty-5 | Muhammad Adnan Apriliyansyah | bug-bounty, cybersecurity, technology, infosec, bug-hunting | 09-Oct-2025 |
| 7 Realistic Mobile Security Interview Questions with Answers (Part 2) | https://medium.com/@cybersenpai/7-realistic-mobile-security-interview-questions-with-answers-part-2-caf1643387de?source=rss------bug_bounty-5 | CyberSenpai | interview, information-security, bug-bounty, cybersecurity, penetration-testing | 09-Oct-2025 |
| Ehxb | Path Traversal Vulnerabilities | https://ehxb.medium.com/ehxb-path-traversal-vulnerabilities-from-discovery-to-automation-569b64ce46ac?source=rss------bug_bounty-5 | Ehxb | hackthebox, bug-bounty, hacking, tryhackme, ctf | 09-Oct-2025 |
| How I Hacked an Admin Panel with Millions of Dollars | https://zhenwarx.medium.com/how-i-hacked-an-admin-panel-with-millions-of-dollars-749f92c106ab?source=rss------bug_bounty-5 | Zhenwarx | bug-bounty, hacking, cybersecurity | 09-Oct-2025 |
| Server-Side Template Injection (SSTI) Hackvisor Lab | https://medium.com/@yossefmohamedsalah2001/server-side-template-injection-ssti-hackvisor-lab-50d42ec27639?source=rss------bug_bounty-5 | Y0s_0x_IBM | bug-bounty, ctf, hackviser | 09-Oct-2025 |
| Wafw00f: Unveiling the Hidden Shield of Web Applications | https://medium.com/@jpablo13/wafw00f-unveiling-the-hidden-shield-of-web-applications-3e97c8147ab9?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, hacking, technology, bug-bounty, waf-bypass | 08-Oct-2025 |
| Wafw00f: Unveiling the Hidden Shield of Web Applications | https://medium.com/meetcyber/wafw00f-unveiling-the-hidden-shield-of-web-applications-3e97c8147ab9?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, hacking, technology, bug-bounty, waf-bypass | 08-Oct-2025 |
| Prompt Injection Pandemonium: How I Hacked AI Assistants by Talking Them Into Betraying Their… | https://medium.com/@iski/prompt-injection-pandemonium-how-i-hacked-ai-assistants-by-talking-them-into-betraying-their-018276477ea9?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, hacking, cybersecurity, bug-bounty-tips | 08-Oct-2025 |
| Robots.txt in the Age of APIs: Why Your Microservices Need Recon Protection Too | https://medium.com/meetcyber/robots-txt-in-the-age-of-apis-why-your-microservices-need-recon-protection-too-9813a390effa?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, infosec, cybersecurity, bug-bounty | 08-Oct-2025 |
| How to Find Security Bugs in 10 Minutes — A Beginner’s Guide | https://medium.com/@abuzersajidahamadumri/how-to-find-security-bugs-in-10-minutes-a-beginners-guide-2b285bedf9f8?source=rss------bug_bounty-5 | Abuzersajid | bug-bounty | 08-Oct-2025 |
| How I Found a $1,000 IDOR Bug Using Burp Suite ? | https://devprogramming.medium.com/how-i-found-a-1-000-idor-bug-using-burp-suite-dfb2b11d933e?source=rss------bug_bounty-5 | DevProgramming | burpsuite, penetration-testing, web-security, bug-bounty, bug-bounty-writeup | 08-Oct-2025 |
| The Chain Reaction: How Smart Hackers Turn Tiny Bugs Into Big Paydays | https://su6osec.medium.com/the-chain-reaction-how-smart-hackers-turn-tiny-bugs-into-big-paydays-97cdaeab8afa?source=rss------bug_bounty-5 | Đeepanshu | infosec, cybersecurity, bug-bounty, security | 08-Oct-2025 |
| Accidental High-Sev ASP.NET Bug: How a Coffee Break Exposed Someone Else’s PII (and a $600 Bounty) | https://medium.com/@theteatoast/accidental-high-sev-asp-net-0ca17ed328c9?source=rss------bug_bounty-5 | toast | bug-bounty, bugbounty-writeup, bug-bounty-tips, bug-bounty-writeup | 08-Oct-2025 |
| DNS Rebinding + SSRF: The Silent Combo That Turns Browsers Into Internal Attack Proxies | https://javascript.plainenglish.io/dns-rebinding-ssrf-the-silent-combo-that-turns-browsers-into-internal-attack-proxies-bf5b367c93eb?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, infosec, ai, cybersecurity | 08-Oct-2025 |
| One-Click Account Takeover via Open Redirect & XSS | https://medium.com/@ibtissamhammadi1/one-click-account-takeover-via-open-redirect-xss-8263bd6db064?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty, xss-attack, automation, ethical-hacking | 08-Oct-2025 |
| Automate the API Hunt — API Reverse Engineering ️ | https://senukdias.medium.com/automate-the-api-hunt-api-reverse-engineering-%EF%B8%8F-6a8d724f6f7e?source=rss------bug_bounty-5 | Senuk Dias | hacking-apis, hacking, bug-bounty, api, api-penetration-testing | 08-Oct-2025 |
| Security Misconfiguration: The Hidden Risk in Web Applications | https://medium.com/@cybersenpai/security-misconfiguration-the-hidden-risk-in-web-applications-d5d235812dc4?source=rss------bug_bounty-5 | CyberSenpai | cybersecurity, information-security, owasp, bug-bounty, penetration-testing | 08-Oct-2025 |
| Turning Dependency Confusion Research into a Profitable Stack | https://sl4x0.medium.com/turning-dependency-confusion-research-into-a-profitable-stack-d2f39fe216bf?source=rss------bug_bounty-5 | Abdelrhman Allam (sl4x0) | infosec, dependency-confusion, cybersecurity, bug-bounty, supply-chain | 08-Oct-2025 |
| Microsoft Events Leak, Part I: Leaking Event Registration and Waitlist Databases | https://medium.com/@faav/microsoft-events-leak-part-i-leaking-event-registration-and-waitlist-databases-74a301364e76?source=rss------bug_bounty-5 | Faav | bug-bounty-tips, bug-bounty-writeup, microsoft, bug-bounty | 08-Oct-2025 |
| CRITICAL ALERT: Unauthenticated RCE in Bricks Builder | https://medium.com/@cybersecplayground/critical-alert-unauthenticated-rce-in-bricks-builder-9f3075f81ece?source=rss------bug_bounty-5 | Cybersecplayground | exploitation, bug-bounty, cybersecurity, pentesting, cve | 08-Oct-2025 |
| One Click to All Baisc Recon for Bug Bounty | https://ghostman01.medium.com/one-click-to-all-baisc-recon-for-bug-bounty-295ac745d602?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | programming, cybersecurity, infosec, technology, bug-bounty | 08-Oct-2025 |
| Episode 3— Order Validation Vulnerabilities: How I Bypassed Broken Business Logic to Manipulate… | https://osintteam.blog/episode-3-order-validation-vulnerabilities-how-i-bypassed-broken-business-logic-to-manipulate-b444eabc2c37?source=rss------bug_bounty-5 | Yamini Yadav_369 | bug-bounty, application-security, business-logic, cybersecurity, penetration-testing | 08-Oct-2025 |
| Subdomain Discovery: Bug Bounty Guide | https://osintteam.blog/subdomain-discovery-bug-bounty-guide-b496990820f9?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, vulnerability, bug-bounty, technology, bug-bounty-writeup | 08-Oct-2025 |
| How I Find Sensitive Information Leaks on GitHub (and a Real Example) | https://osintteam.blog/how-i-find-sensitive-information-leaks-on-github-and-a-real-example-d247be13c809?source=rss------bug_bounty-5 | Chidubem Chukwu | bug-bounty-writeup, cybersecurity, bug-bounty-tips, ethical-hacking, bug-bounty | 08-Oct-2025 |
| This OAuth Bug Earned Me $$$$: Account Takeover via Identity Injection | https://medium.com/@hacker_might/this-oauth-bug-earned-me-account-takeover-via-identity-injection-27774f65288c?source=rss------bug_bounty-5 | hacker_might | authentication-bypass, bug-bounty-writeup, oauth, bug-bounty, information-disclosure | 08-Oct-2025 |
| How I Became Silico: From Gaming Dreams to Red Team Reality | https://medium.com/@silicoindustries/silico-story-db4c5292a356?source=rss------bug_bounty-5 | Silico | cybersecurity, artificial-intelligence, bug-bounty, gaming, programming | 08-Oct-2025 |
| Wafw00f: Desvelando el Escudo Oculto de las Aplicaciones Web | https://medium.com/@jpablo13/wafw00f-desvelando-el-escudo-oculto-de-las-aplicaciones-web-8ca26fdaa6ca?source=rss------bug_bounty-5 | JPablo13 | hacking, waf-bypass, technology, bug-bounty, cybersecurity | 07-Oct-2025 |
| 20. Common Payloads and Wordlists That Save Me Hours | https://infosecwriteups.com/20-common-payloads-and-wordlists-that-save-me-hours-1535800eb8f2?source=rss------bug_bounty-5 | Abhijeet kumawat | medium, cybersecurity, infosec, bug-bounty, hacking | 07-Oct-2025 |
| Google Launches Revolutionary AI Security Arsenal: CodeMender Leads the Charge Against Cyber… | https://medium.com/@Techsankar381/google-launches-revolutionary-ai-security-arsenal-codemender-leads-the-charge-against-cyber-1e24c0f4bf3d?source=rss------bug_bounty-5 | Techsankar | google, cybersecurity, bug-bounty, technology, tech | 07-Oct-2025 |
| Fastly Subdomain Takeover leading to $$$$ Bounty Reward | https://medium.com/@sohailahmed0x0/fastly-subdomain-takeover-leading-to-bounty-reward-5fff711d0518?source=rss------bug_bounty-5 | Sohail Ahmed | bug-bounty, subdomain-takeover, fastly, bug-bounty-tips | 07-Oct-2025 |
| Hidden API Endpoints: The Hacker’s Secret Weapon | https://infosecwriteups.com/hidden-api-endpoints-the-hackers-secret-weapon-a9ee297a29c2?source=rss------bug_bounty-5 | Vipul Sonule | hacking, tech, bug-bounty, cybersecurity, programming | 07-Oct-2025 |
| How a Single Signup Flaw Exposed 162,481 User Records | https://infosecwriteups.com/how-a-single-signup-flaw-exposed-162-481-user-records-070238ff9f4a?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, cybersecurity, technology, infosec, ethical-hacking | 07-Oct-2025 |
| Cache Key Injection: Chaining Cache-Poisoning and CRLF Using an Unkeyed Parameter | https://infosecwriteups.com/cache-key-injection-chaining-cache-poisoning-and-crlf-using-an-unkeyed-parameter-b9e8b7be00a1?source=rss------bug_bounty-5 | Bash Overflow | crlf-injection, web-cache-poisoning, cache-key-injection, http-parameter-pollution, bug-bounty | 07-Oct-2025 |
| When a Callback Form Became an Open Door — a short story about a hospital workflow gone wrong | https://infosecwriteups.com/when-a-callback-form-became-an-open-door-a-short-story-about-a-hospital-workflow-gone-wrong-50052deeb0c3?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-tips, bug-bounty-writeup, cybersecurity, bug-bounty, cyber-security-awareness | 07-Oct-2025 |
| The AI Eavesdropper: How Voice Assistants Were Secretly Recording Everything for My Server | https://medium.com/@iski/the-ai-eavesdropper-how-voice-assistants-were-secretly-recording-everything-for-my-server-a2fba0235680?source=rss------bug_bounty-5 | Iski | cybersecurity, money, bug-bounty, hacking, bug-bounty-tips | 07-Oct-2025 |
| How I hacked British Airlines (Live Bug Bounty Hunting) | https://medium.com/@theemperorspath/how-i-hacked-british-airlines-live-bug-bounty-hunting-956720db6d87?source=rss------bug_bounty-5 | Jackson Mittag | bug-bounty-tips, kali-linux, bug-bounty, hacking, reconnaissance | 07-Oct-2025 |
| How I Built a Daily Cybersecurity Habit From Student to Pentest Creator. | https://medium.com/@zasha095/how-i-built-a-daily-cybersecurity-habit-from-student-to-pentest-creator-51c90a75b8fb?source=rss------bug_bounty-5 | VULN-VAULT | bug-bounty, cybersecurity, technology | 07-Oct-2025 |
| Is a Bug Bounty Program the Best Way to Find Security Threats? | https://medium.com/@sparklewebhelp/is-a-bug-bounty-program-the-best-way-to-find-security-threats-e91761bb8530?source=rss------bug_bounty-5 | Sparkle web | bugs, technology, bug-bounty, qa, testing | 07-Oct-2025 |
| 7 Under-the-Radar GitHub Repos Every Hacker Should Star (2025 Final Version) | https://medium.com/meetcyber/7-under-the-radar-github-repos-every-hacker-should-star-2025-final-version-dbcecbd2602e?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty-tips, information-security, bug-bounty, cybersecurity, ethical-hacking | 07-Oct-2025 |
| A Methodical Playbook for Bug Bounty Hunting: Strategy > Noise | https://su6osec.medium.com/a-methodical-playbook-for-bug-bounty-hunting-strategy-noise-7de776461063?source=rss------bug_bounty-5 | Đeepanshu | infosec, cybersecurity, bug-bounty | 07-Oct-2025 |
| Comprehensive Bug Bounty Methodology Guide: Recon & Vulnerability Testing | https://medium.com/@sl0th0x87/comprehensive-bug-bounty-methodology-guide-recon-vulnerability-testing-13602a12f1cb?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, information-security, vulnerability, penetration-testing, cybersecurity | 07-Oct-2025 |
| How I Locked Out Every Owner and Admin in the Organization with a Single Request | https://0xsom3a.medium.com/how-i-locked-out-every-owner-and-admin-in-the-organization-with-a-single-request-0de425cddb5b?source=rss------bug_bounty-5 | 0xSOM3A | cybersecurity, broken-access-control, bug-bounty, bug-bounty-tips, idor | 07-Oct-2025 |
| How to Bypass File Upload Restrictions | https://medium.com/@ibtissamhammadi1/how-to-bypass-file-upload-restrictions-d4b1e4c1b5d2?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, bug-bounty, infosec, web-security, cybersecurity | 07-Oct-2025 |
| $35,000 por este fallo en GitLab — Reporte CRITICAL explicado paso a paso | https://gorkaaa.medium.com/35-000-por-este-fallo-en-gitlab-reporte-critical-explicado-paso-a-paso-66944c30f086?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty, bug-bounty-writeup, hacking, cybersecurity | 07-Oct-2025 |
| Hidden Secrets: Advanced Google Dorking on GitHub’s raw.githubusercontent.com | https://medium.com/@netclouts/hidden-secrets-advanced-google-dorking-on-githubs-raw-githubusercontent-com-675374870756?source=rss------bug_bounty-5 | Abba Abdullahi Wakili | bug-bounty, google-dorking, osint, cybersecurity, ethical-hacking | 07-Oct-2025 |
| Visible Error-Based SQL Injection | https://medium.com/@marduk.i.am/visible-error-based-sql-injection-2deb4b77ac64?source=rss------bug_bounty-5 | Marduk I Am | information-security, sql-injection, infosec, bug-bounty, portswigger | 07-Oct-2025 |
| Hunting For Vulnerable SSRF Mitigations | https://medium.com/@red.whisperer/hunting-for-vulnerable-ssrf-mitigations-d72f15983663?source=rss------bug_bounty-5 | Chux | bug-bounty, hacking, cybersecurity | 07-Oct-2025 |
| Securing Defense Systems: GitLab and HackerOne in Coordinated Action With Lockheed Martin | https://medium.com/@justas_b1/securing-defense-systems-gitlab-and-hackerone-in-coordinated-action-with-lockheed-martin-7ed6ea51054f?source=rss------bug_bounty-5 | Justas_b | legal, devops, cybersecurity, information-security, bug-bounty | 07-Oct-2025 |
| Split-Brain JSON: Exploiting Parser Disagreement Across Validation Boundaries for Privilege… | https://medium.com/@pratikdahal777/split-brain-json-exploiting-parser-disagreement-across-validation-boundaries-for-privilege-be3a038d8722?source=rss------bug_bounty-5 | Pratik Dahal | web-attack, bug-bounty, bug-bounty-tips, cybersecurity, web-penetration-testing | 07-Oct-2025 |
| How to Report a Vulnerability When the Company Has No Responsible Disclosure Policy | https://1-day.medium.com/how-to-report-a-vulnerability-when-the-company-has-no-responsible-disclosure-policy-9c729e56d328?source=rss------bug_bounty-5 | 1day | cybersecurity, bug-bounty-writeup, bug-bounty-tips, ethical-hacking, bug-bounty | 07-Oct-2025 |
| How I Passed the EWPTX (and What Actually Matters) | https://medium.com/@juanfelipeoz.rar/how-i-passed-the-ewptx-and-what-actually-matters-c4d6ad439c90?source=rss------bug_bounty-5 | Juan Felipe Osorio Z | hacking, bug-bounty, ewptx, web-hacking, cibersecurity | 06-Oct-2025 |
| The ML Blindspot: How I Found Machine Learning APIs Leaking Training Data Like My Ex Leaks… | https://medium.com/@iski/the-ml-blindspot-how-i-found-machine-learning-apis-leaking-training-data-like-my-ex-leaks-e0d577481f2b?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, bug-bounty, hacking, money, cybersecurity | 06-Oct-2025 |
| How operating System (OS) handle Security ? | https://medium.com/@Vansh_Makkar/how-operating-system-os-handle-security-89fbaab95b21?source=rss------bug_bounty-5 | Vansh_Makkar | network-security, bug-bounty, operating-system-security, cybersecurity | 06-Oct-2025 |
| Location Owned — WAF Bypass via Misconfiguration | https://medium.com/@himorinho/location-owned-waf-bypass-via-misconfiguration-b24df80a6038?source=rss------bug_bounty-5 | himorinholucas666 | web-application-firewall, security-research, hacking, bug-bounty, cybersecurity | 06-Oct-2025 |
| Authentication Bypass: Mis-scoped SAML Sessions Enable User Impersonation | https://0xoverlord.medium.com/authentication-bypass-mis-scoped-saml-sessions-enable-user-impersonation-fd73ce7fbea0?source=rss------bug_bounty-5 | Abdo Rabea (0xOverlord) | authentication, saml, bug-bounty-writeup, bug-bounty, authentication-bypass | 06-Oct-2025 |
| Actuator Unleashed: A Guide to Finding and Exploiting Spring Boot Actuator Endpoints | https://infosecwriteups.com/actuator-unleashed-a-guide-to-finding-and-exploiting-spring-boot-actuator-endpoints-29252dcd9d79?source=rss------bug_bounty-5 | coffinxp | bug-bounty, programming, technology, cybersecurity, pentesting | 06-Oct-2025 |
| Prototype Pollution Masterclass: Practical Exploits, Detection & Node.js RCE | https://pyus3r.medium.com/prototype-pollution-masterclass-practical-exploits-detection-node-js-rce-a78a42988704?source=rss------bug_bounty-5 | PyUs3r | cybersecurity, bug-bounty, prototype-pollution, web-security, nodejs | 06-Oct-2025 |
| Platform LMS Belajar Cyber Security pertama di Indonesia LINUXENI Corp | https://medium.com/@hihiprocybertech/platform-lms-belajar-cyber-security-pertama-di-indonesia-linuxeni-corp-0f34a750378a?source=rss------bug_bounty-5 | hihipro | ctf, cybersecurity, linux, bug-bounty | 06-Oct-2025 |
| Writing Effective Bug Bounty Reports | https://medium.com/@cocopelly255/writing-effective-bug-bounty-reports-9e71f6b8706c?source=rss------bug_bounty-5 | ToxSec | bug-bounty-writeup, bug-bounty, bug-bounty-hunter, bug-bounty-tips | 06-Oct-2025 |
| CAPTCHA Bypass Allows Signup Progression Without Proper Validation | https://medium.com/@Mo7arebSec/captcha-bypass-allows-signup-progression-without-proper-validation-ac95e7500168?source=rss------bug_bounty-5 | Mo7arebSec | web-pen-testing, infosec, captcha, penetration-testing, bug-bounty | 06-Oct-2025 |
| How I Stopped a CSRF Attack From Taking Over My Site | https://medium.com/@ibtissamhammadi1/how-i-stopped-a-csrf-attack-from-taking-over-my-site-29dc25c9cc6c?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty, infosec, csrf, attack | 06-Oct-2025 |
| The $500 “Trivial” Bugs Everyone Ignores (And How I Cash In) | https://infosecwriteups.com/the-500-trivial-bugs-everyone-ignores-and-how-i-cash-in-2f5f44f0d32e?source=rss------bug_bounty-5 | Aman Sharma | programming, cybersecurity, money, bug-bounty, hacking | 06-Oct-2025 |
| CYBER KALKI EXPOSES CRITICAL FLAW by hacking testphp.vulnweb.com and turning into a Data Honeypot | https://medium.com/@krivadna/cyber-kalki-exposes-critical-flaw-by-hacking-testphp-vulnweb-com-and-turning-into-a-data-honeypot-7a89b74ba72d?source=rss------bug_bounty-5 | Krivadna | cybersecurity, bugbounty-writeup, bug-bounty, technology | 06-Oct-2025 |
| Small Bugs, Easy Money: CSRF & Race Conditions | https://medium.com/@nnouh4967/small-bugs-easy-money-csrf-race-conditions-b5fc69694f1f?source=rss------bug_bounty-5 | nooh zidan | pentesting, penetration-testing, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 06-Oct-2025 |
| Series: Business Logic Flaws Uncovered | https://osintteam.blog/series-business-logic-flaws-uncovered-14b3bd5ee60c?source=rss------bug_bounty-5 | Yamini Yadav_369 | bug-bounty, application-security, cybersecurity, penetration-testing, race-condition | 06-Oct-2025 |
| TO BECOME A SOC EXPERT(DAY-8) | https://medium.com/@VulnHunt3r/to-become-a-soc-expert-day-8-f7bd3b16287f?source=rss------bug_bounty-5 | vulnhunter | cybersecurity, ctf, security, bug-bounty, social-media | 06-Oct-2025 |
| GraphQL Security Checklist: Find Hidden Endpoints, Prevent Brute-Force and CSRF | https://pyus3r.medium.com/graphql-security-checklist-find-hidden-endpoints-prevent-brute-force-and-csrf-7716e619d803?source=rss------bug_bounty-5 | PyUs3r | web-security, bug-bounty, ethical-hacking, graphql, api-security | 06-Oct-2025 |
| ️ Shadow Endpoints: How I Found the Internet’s Best Kept API Secrets | https://medium.com/@iski/%EF%B8%8F-shadow-endpoints-how-i-found-the-internets-best-kept-api-secrets-78d68808abc6?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, hacking, bug-bounty-tips, money | 05-Oct-2025 |
| How I Found My First $100 Bug — by Accident, with Two Accounts and a Race Condition | https://medium.com/@Abhiii_Sharma/how-i-found-my-first-100-bug-by-accident-with-two-accounts-and-a-race-condition-793171607fe9?source=rss------bug_bounty-5 | Abhishek sharma | race-condition, bug-bounty-tips, bugs, vulnerability, bug-bounty | 05-Oct-2025 |
| API Key Pivoting Playbook: Turning One Key Into Full Infrastructure Access | https://systemweakness.com/api-key-pivoting-playbook-turning-one-key-into-full-infrastructure-access-03831c0e95a3?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, cybersecurity, bug-bounty, information-security, ai | 05-Oct-2025 |
| Network Traffic Recon: Capturing API Keys from Misconfigured Apps | https://javascript.plainenglish.io/network-traffic-recon-capturing-api-keys-from-misconfigured-apps-25faf1a333e9?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, information-security, infosec, cybersecurity, ai | 05-Oct-2025 |
| Frida on iOS: 7 Real-World Hooks to Expose Hidden Endpoints | https://medium.com/meetcyber/frida-on-ios-7-real-world-hooks-to-expose-hidden-endpoints-c52bd8594b6e?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, infosec, bug-bounty, information-security | 05-Oct-2025 |
| Reverse-Engineering iOS Apps: Hidden API Mining Beyond Android | https://javascript.plainenglish.io/reverse-engineering-ios-apps-hidden-api-mining-beyond-android-5f929e018cf2?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, ai, bug-bounty, infosec | 05-Oct-2025 |
| Dynamic Hooking with Frida: Revealing Hidden Parameters in Real Time | https://medium.com/codetodeploy/-b39d538993a6?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, ai, cybersecurity, information-security | 05-Oct-2025 |
| Planning to do CRTA? | https://medium.com/@0xK4rth1/planning-to-do-crta-1606be96528b?source=rss------bug_bounty-5 | Karthikeyan C | red-team, crta, bug-bounty, information-technology, pentesting | 05-Oct-2025 |
| Blind SQL Injection with Conditional Errors | https://medium.com/@marduk.i.am/blind-sql-injection-with-conditional-errors-7850fe9bc73b?source=rss------bug_bounty-5 | Marduk I Am | sql-injection, bug-bounty, portswigger, blind-sql-injection, web-security | 05-Oct-2025 |
| Mastering Google Dorking: Discovering Website Vulnerabilities | https://infosecwriteups.com/mastering-google-dorking-discovering-website-vulnerabilities-0f5720ce45ae?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, bug-bounty, bug-bounty-writeup, penetration-testing, technology | 05-Oct-2025 |
| Secrets Hackers Don’t Tell: Recon Techniques That Actually Pay | https://infosecwriteups.com/secrets-hackers-dont-tell-recon-techniques-that-actually-pay-dc1940363187?source=rss------bug_bounty-5 | Vipul Sonule | programming, bug-bounty, cybersecurity, tech, hacking | 05-Oct-2025 |
| My Recon Automation Found an Email Confirmation Bypass | https://infosecwriteups.com/my-recon-automation-found-an-email-confirmation-bypass-c3c7c337f8a9?source=rss------bug_bounty-5 | Ibtissam hammadi | infosec, bug-bounty-hunter, cybersecurity, ethical-hacking, bug-bounty | 05-Oct-2025 |
| Supply Chain Escalation Playbook: Turning Third‑Party API Keys Into Your Biggest Breach Vector | https://medium.com/meetcyber/supply-chain-escalation-playbook-turning-third-party-api-keys-into-your-biggest-breach-vector-9cc6d2e106aa?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, information-security, ai, bug-bounty, infosec | 5-Oct-2025 |
| The Art of API Key Chaining — How Attackers Link Multiple Keys Across SaaS, Cloud, and… | https://javascript.plainenglish.io/the-art-of-api-key-chaining-how-attackers-link-multiple-keys-across-saas-cloud-and-572e9b469f4c?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, information-security, cybersecurity, ai | 5-Oct-2025 |
| Information Gathering | https://khanfirdous.medium.com/information-gathering-540c4e2099b4?source=rss------bug_bounty-5 | Red_Ghost | information-gathering, bug-bounty, penetration-testing, reconnaissance, ethical-hacking | 05-Oct-2025 |
| The $250,000 Bug — My Journey Unpacking CVE-2025-4609 | https://medium.com/@hackerperspective/the-250-000-bug-my-journey-unpacking-cve-2025-4609-221960a0df21?source=rss------bug_bounty-5 | Hacker's Perspective | web-security, security, chromium, bug-bounty, browser-security | 05-Oct-2025 |
| How a Misplaced 2FA Lockout Can Prevent Legitimate Users from Logging In | https://medium.com/@ibra1905ylmz/how-a-misplaced-2fa-lockout-can-prevent-legitimate-users-from-logging-in-c91b23f6b49e?source=rss------bug_bounty-5 | Ibrahim Yılmaz | account-locked, bug-bounty, 2fa-authentication, web-application-security | 05-Oct-2025 |
| Your First Paid Bounty: A Real Case Study | https://blog.stackademic.com/your-first-paid-bounty-a-real-case-study-1312aeddfa0a?source=rss------bug_bounty-5 | Fateyaly | bug-bounty, coding, information-security, cybersecurity, technology | 05-Oct-2025 |
| ️ Bug Bounty Methodology: From Recon to Exploitation in 12 Tactical Steps | https://medium.com/@nareshsinghrajput09876/%EF%B8%8F-bug-bounty-methodology-from-recon-to-exploitation-in-12-tactical-steps-430c5cfbcf1c?source=rss------bug_bounty-5 | Naresh Singh | pentesting, bug-bounty-tips, hacking, cybersecurity, bug-bounty | 05-Oct-2025 |
| Truths About Bug Bounty for Beginners | https://medium.com/@Madhu_Kanwat/truths-about-bug-bounty-for-beginners-b3f88bdeceaa?source=rss------bug_bounty-5 | Madhu Kanwat | cybersecurity, ethical-hacking, bug-bounty, vapt | 05-Oct-2025 |
| Week 12— Async API Calls: fetch, Axios, and Promises | https://infosecwriteups.com/week-12-async-api-calls-fetch-axios-and-promises-f8da63c5d91c?source=rss------bug_bounty-5 | Aang | react-native, reactjs, bug-bounty, ethical-hacking, information-technology | 05-Oct-2025 |
| Beyond the Open Door: How Hackers and Bug Bounty Hunters Mine Directory Listings for Gold | https://medium.com/@gowthami09027/beyond-the-open-door-how-hackers-and-bug-bounty-hunters-mine-directory-listings-for-gold-5d0430353342?source=rss------bug_bounty-5 | Blue_eye | penetration-testing, information-security, hacking, web-development, bug-bounty | 05-Oct-2025 |
| SQHell: Manually hunting SQL injection with detailed explanation | https://infosecwriteups.com/sqhell-manually-hunting-sql-injection-with-detailed-explanation-8fd24360c65e?source=rss------bug_bounty-5 | Huzaifa Malik | sqhell, sql-injection, ctf, bug-bounty, web-hacking | 05-Oct-2025 |
| Week 9 of My 90-Day Challenge: Last-Minute Prep and New Burp Features | https://medium.com/@sl0th0x87/week-9-of-my-90-day-challenge-last-minute-prep-and-new-burp-features-129f46c77e45?source=rss------bug_bounty-5 | Mike (sl0th0x87) | challenge, bug-bounty, weekly-report, about-me, cybersecurity | 05-Oct-2025 |
| 6 Platforms Every Bug Bounty Hunter Should Know. | https://infosecwriteups.com/6-platforms-every-bug-bounty-hunter-should-know-d401b8485009?source=rss------bug_bounty-5 | Willow Tech | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bugs | 05-Oct-2025 |
| Access Control Vulnerabilities(Through Burp Suite Labs) Pt. 1: Vertical Privilege Escalation | https://medium.com/@heckthwrld/access-control-vulnerabilities-through-burp-suite-labs-pt-1-vertical-privilege-escalation-63acbce0afce?source=rss------bug_bounty-5 | heckor | penetration-testing, web-exploitation, bug-bounty, burpsuite, vulnerability-assessment | 05-Oct-2025 |
| DNS Tunnelling — covert channels over DNS | https://medium.com/@paritoshblogs/dns-tunnelling-covert-channels-over-dns-4a1fdae35ce7?source=rss------bug_bounty-5 | Paritosh | information-technology, bug-bounty, hacking, cybersecurity, dns | 05-Oct-2025 |
| 6 Platforms Every Bug Bounty Hunter Should Know. | https://osintteam.blog/6-platforms-every-bug-bounty-hunter-should-know-d401b8485009?source=rss------bug_bounty-5 | Willow Tech | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bugs | 05-Oct-2025 |
| The OTP That Told on Itself — How I Bypassed Email Verification with One Wrong Code | https://msnrasel1.medium.com/the-otp-that-told-on-itself-how-i-bypassed-email-verification-with-one-wrong-code-67236eb803a1?source=rss------bug_bounty-5 | 3eyedraven | bug-bounty, authentication, 2fa, cybersecurity, bug-bounty-tips | 05-Oct-2025 |
| The Dark Side of Bug Bounties: How HackerOne’s Ruthless Triage Team Took Down Real Cybercriminal(s) | https://medium.com/@justas_b1/the-dark-side-of-bug-bounties-how-hackerones-ruthless-triage-team-took-down-real-cybercriminal-s-0f4464632afe?source=rss------bug_bounty-5 | Justas_b | fiction-writing, infosec, legal, bug-bounty, cybersecurity | 05-Oct-2025 |
| I Found a Critical Bug in 7 Minutes with This Subdomain Enumeration Method | https://medium.com/@ibtissamhammadi1/i-found-a-critical-bug-in-7-minutes-with-this-subdomain-enumeration-method-c1d3e7514397?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, technology, cybersecurity, web-development, infosec | 05-Oct-2025 |
| Bug Bounty 101: The 6 Platforms You Must Know | https://osintteam.blog/6-platforms-every-bug-bounty-hunter-should-know-d401b8485009?source=rss------bug_bounty-5 | Willow Tech | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bugs | 05-Oct-2025 |
| Findomain: Essential Tool for Passive Subdomain Enumeration | https://medium.com/meetcyber/findomain-essential-tool-for-passive-subdomain-enumeration-2c1e78e71214?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, technology, cybersecurity, hacking, penetration-testing | 04-Oct-2025 |
| AI vs AI: How ChatGPT and I Became Bug Hunting Buddies to Find What Scanners Missed | https://medium.com/@iski/ai-vs-ai-how-chatgpt-and-i-became-bug-hunting-buddies-to-find-what-scanners-missed-806b61707131?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, hacking, money, bug-bounty, cybersecurity | 04-Oct-2025 |
| The Mirage of Automation: When Your Tools Start Thinking For You | https://su6osec.medium.com/the-mirage-of-automation-when-your-tools-start-thinking-for-you-c02465b8f4d2?source=rss------bug_bounty-5 | Đeepanshu | cybersecurity, hacking, bug-bounty | 04-Oct-2025 |
| How Blind XSS Payloads Earned Me $10,000+ in Bug Bounties | https://infosecwriteups.com/how-blind-xss-payloads-earned-me-10-000-in-bug-bounties-70789f3940f9?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, web-security, cybersecurity, infosec, ethical-hacking | 04-Oct-2025 |
| The Psychology of a Triager: Inside the Mind of Bug Reviewers | https://blog.stackademic.com/the-psychology-of-a-triager-inside-the-mind-of-bug-reviewers-5abce597452f?source=rss------bug_bounty-5 | Fateyaly | report, cybersecurity, bug-bounty, technology, information-security | 04-Oct-2025 |
| Practical API Exploitation: Parameter Pollution, Mass Assignment, and Path Traversal | https://pyus3r.medium.com/practical-api-exploitation-parameter-pollution-mass-assignment-and-path-traversal-20084576d4aa?source=rss------bug_bounty-5 | PyUs3r | cybersecurity, bug-bounty, pentesting, web-security, api-security | 04-Oct-2025 |
| Mastering Blind XSS: A Comprehensive Guide to Finding and Exploiting This Hidden Vulnerability | https://osintteam.blog/mastering-blind-xss-a-comprehensive-guide-to-finding-and-exploiting-this-hidden-vulnerability-c4538397e782?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-writeup, vulnerability, penetration-testing, bug-bounty, bug-bounty-tips | 04-Oct-2025 |
| Story of $$$$ Bounty: 80k+ Users Data Exposed via Signup Flaw | https://v3d.medium.com/story-of-bounty-80k-users-data-exposed-via-signup-flaw-0f41e1d57481?source=rss------bug_bounty-5 | V3D | infosec, information-technology, cybersecurity, bug-bounty, hacking | 04-Oct-2025 |
| My last Writeup (0day in Zsh (RCE)) | https://livepwn.medium.com/my-last-writeup-0day-in-zsh-rce-ce3dcbca0105?source=rss------bug_bounty-5 | livepwn | hacking, 0day, exploitation, bug-bounty, binary-exploitation | 04-Oct-2025 |
| Bug Why does big tech not run Accessibility bug bounties? | https://chrisyoong.medium.com/bug-why-does-big-tech-not-run-accessibility-bug-bounties-6fdbaf80d6d0?source=rss------bug_bounty-5 | Chris Yoong | qa, bug-bounty, accessibility, software-bugs, big-tech | 04-Oct-2025 |
| HOW I FOUND THE CVE-2025–0133? | https://doordiefordream.medium.com/how-i-found-the-cve-2025-0133-759d3e0f8a92?source=rss------bug_bounty-5 | DOD cyber solutions | ethical-hacking, technology, penetration-testing, cybersecurity, bug-bounty | 04-Oct-2025 |
| Reflected XSS in Parser Endpoint — $366 Bounty Earned | https://medium.com/@a13h1/reflected-xss-in-parser-endpoint-366-bounty-earned-28ca95251ab2?source=rss------bug_bounty-5 | Abhi Sharma | cybersecurity, xss-attack, cross-site-scripting, bug-bounty, information-security | 04-Oct-2025 |
| Forgot password link doesn’t expire after used. | https://medium.com/@edahmed008/forgot-password-link-doesnt-expire-after-used-e55f0c5fe96f?source=rss------bug_bounty-5 | Ahmed Mahmoud | bug-bounty-writeup, business-logic-flaw, penetration-testing, bug-bounty, cybersecurity | 04-Oct-2025 |
| Secrets of the Digital Underground: Ethical Hacking in the Age of AI & Quantum Computing | https://muhamadaliofficial.medium.com/secrets-of-the-digital-underground-ethical-hacking-in-the-age-of-ai-quantum-computing-e80e3872f212?source=rss------bug_bounty-5 | Muhammad Ali | cybersecurity, red-teaming, cyberattack, red-team, bug-bounty | 04-Oct-2025 |
| How a Password Change Feature Led to Full Account Takeover (CVSS 8.3) | https://onurcangencbilkent.medium.com/how-a-password-change-feature-led-to-full-account-takeover-cvss-8-3-f1a74c3fc210?source=rss------bug_bounty-5 | Onurcan Genç | web-application-security, penetration-testing, cvss, bug-bounty, cybersecurity | 04-Oct-2025 |
| HTML Injection & Content Spoofing: How Attackers Trick Users (and how to find & fix it) | https://medium.com/@omniaelagroudy/html-injection-content-spoofing-how-attackers-trick-users-and-how-to-find-fix-it-cea458c951dd?source=rss------bug_bounty-5 | Omniaelagroudy | infosec, bug-bounty, html-injection, xss-vulnerability, web-security | 04-Oct-2025 |
| Imagery HTB WriteUp: Season 9 Machine 2 | https://medium.com/@abhishek-ji/imagery-htb-writeup-season-9-machine-2-6e09f640a993?source=rss------bug_bounty-5 | Abhishek Gupta | tryhackme, penetration-testing, cybersecurity, bug-bounty, hackthebox | 04-Oct-2025 |
| Bug Bounty: De HTMLI a RCE — Guía práctica y paso a paso | https://gorkaaa.medium.com/bug-bounty-de-htmli-a-rce-gu%C3%ADa-pr%C3%A1ctica-y-paso-a-paso-d6d499c8ef68?source=rss------bug_bounty-5 | Gorka | hacker, bug-bounty-tips, growth-hacking, bug-bounty, hacking | 04-Oct-2025 |
| How a Password Change Feature Led to Full Account Takeover (CVSS 8.3) | https://osintteam.blog/how-a-password-change-feature-led-to-full-account-takeover-cvss-8-3-f1a74c3fc210?source=rss------bug_bounty-5 | Onurcan Genç | web-application-security, penetration-testing, cvss, bug-bounty, cybersecurity | 04-Oct-2025 |
| Why a 500 Error is a Bug Hunter’s Signal | https://medium.com/@cybersecplayground/why-a-500-error-is-a-bug-hunters-signal-8e35ab2bc703?source=rss------bug_bounty-5 | Cybersecplayground | tips, fuzzing, bypass, bug-bounty, bug-bounty-tips | 04-Oct-2025 |
| Simple Guide to AI Powered Threats | https://medium.com/@ibtissamhammadi1/simple-guide-to-ai-powered-threats-849f64e52757?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, owasp, cybersecurity, ethical-hacking, bug-hunting | 04-Oct-2025 |
| Findomain: Herramienta Fundamental para la Enumeración Pasiva de Subdominios | https://medium.com/@jpablo13/findomain-herramienta-fundamental-para-la-enumeraci%C3%B3n-pasiva-de-subdominios-fdb15a37f667?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, cybersecurity, technology, hacking, bug-bounty | 03-Oct-2025 |
| Broken Access Control — The Ultimate Practical Guide | https://kd-200.medium.com/broken-access-control-the-ultimate-practical-guide-6d58add0c991?source=rss------bug_bounty-5 | Nitin yadav | tech, hacking, cybersecurity, bug-bounty, technology | 03-Oct-2025 |
| A New Home for Free Learning: Introducing Live.dinesh049.shop | https://teamdh49.medium.com/a-new-home-for-free-learning-introducing-live-dinesh049-shop-78a3c4c43837?source=rss------bug_bounty-5 | TEAM DH49 | bug-zero, bugs, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 03-Oct-2025 |
| Starting Over at 22: My 100 Days Back Into Cybersecurity | https://medium.com/@glavnikandrej1/starting-over-at-22-my-100-days-back-into-cybersecurity-236272f09da4?source=rss------bug_bounty-5 | Andrej Glavnik | bug-bounty, cybersecurity, blog, freelancing, hacking | 03-Oct-2025 |
| Rate Limits? Never Heard of Them: How I Brute-Forced My Way Through Every Account | https://medium.com/@iski/rate-limits-never-heard-of-them-how-i-brute-forced-my-way-through-every-account-b6865f86dd42?source=rss------bug_bounty-5 | Iski | money, cybersecurity, hacking, infosec, bug-bounty | 03-Oct-2025 |
| Khalani.Network Compromised | https://medium.com/@tivoji2843/khalani-network-compromised-2b869705a5eb?source=rss------bug_bounty-5 | Tivoji | bug-bounty, information-security | 03-Oct-2025 |
| HTML Injection via EXIF MetaData | https://medium.com/@drizzlehx/html-injection-via-exif-metadata-512b5be750b8?source=rss------bug_bounty-5 | Utkarsh Srivastava | writeup, web-security, bug-bounty | 03-Oct-2025 |
| Business Logic Error: Membeli Kredit di Bawah Minimum Checkout | https://medium.com/@robisubagja158/business-logic-error-membeli-kredit-di-bawah-minimum-checkout-54f5a7a8709e?source=rss------bug_bounty-5 | Robi Mohamad subagja | bug-bounty-writeup, bug-bounty, hackerone, cybersecurity | 03-Oct-2025 |
| Setup SSH in Kali Linux Machine | https://medium.com/@hrofficial62/setup-ssh-in-kali-linux-machine-c38472508147?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, ethical-hacking, cybersecurity, hacking, ssh | 03-Oct-2025 |
| Stealing JWT Tokens via OAuth redirect_uri Manipulation: A Critical Vulnerability | https://infosecwriteups.com/stealing-jwt-tokens-via-oauth-redirect-uri-manipulation-a-critical-vulnerability-abbd579b5443?source=rss------bug_bounty-5 | Shah kaif | bug-bounty-tips, information-technology, bugs, bug-bounty, bug-bounty-writeup | 03-Oct-2025 |
| ️♂️ How I Built Bug-hunter MVP — Minimal Docker Starter for Bug Bounty Hunters | https://medium.com/@ghostyjoe/%EF%B8%8F-%EF%B8%8F-how-i-built-bug-hunter-mvp-minimal-docker-starter-for-bug-bounty-hunters-f3228baf2238?source=rss------bug_bounty-5 | ghostyjoe | docker, fastapi, bug-bounty, open-source, cybersecurity | 03-Oct-2025 |
| How The Web Works [Part 3] | https://medium.com/@robin_root/how-the-web-works-part-3-309c98d85ea0?source=rss------bug_bounty-5 | Mohamed Hamdi (Robin_Root) | cyber-security-awareness, bug-bounty, web-development | 03-Oct-2025 |
| How to Understand RaaS in Simple Steps | https://medium.com/@ibtissamhammadi1/how-to-understand-raas-in-simple-steps-50ae0eb411a2?source=rss------bug_bounty-5 | Ibtissam hammadi | jargon, cybersecurity, bug-bounty, ransomware, infosec | 03-Oct-2025 |
| Hidden Parameters in Mobile Apps: Mining APIs Through APK Reverse Engineering | https://medium.com/meetcyber/hidden-parameters-in-mobile-apps-mining-apis-through-apk-reverse-engineering-3e23e3c30f96?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, information-security, infosec, ai, bug-bounty | 03-Oct-2025 |
| Improper HTML in Chat Leads to Phishing Attacks | https://medium.com/@firdansp/improper-html-in-chat-leads-to-phishing-attacks-b931ac3e8a4c?source=rss------bug_bounty-5 | 0verRida | bug-bounty-tips, penetration-testing, bug-bounty-writeup, cybersecurity, bug-bounty | 03-Oct-2025 |
| Critical- Information Disclosure Bug Closed as Duplicated | https://swee2ooth.medium.com/critical-information-disclosure-bug-closed-as-duplicated-4daed2542d70?source=rss------bug_bounty-5 | Swee2ooth | pentesting, bug-bounty | 03-Oct-2025 |
| HackerOne Paid $81 in Bug Bounty With Emergence of Bionic Hackers | https://medium.com/@jasmitharouthu_56956/hackerone-paid-81-in-bug-bounty-with-emergence-of-bionic-hackers-ca26df497400?source=rss------bug_bounty-5 | Jasmitharouthu | bug-bounty, cybersecurity, automation-in-security, ethical-hacking, coe-security | 03-Oct-2025 |
| ️♂️ How I Built Bug-hunter MVP — Minimal Docker Starter for Bug Bounty Hunters | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/%EF%B8%8F-%EF%B8%8F-how-i-built-bug-hunter-mvp-minimal-docker-starter-for-bug-bounty-hunters-f3228baf2238?source=rss------bug_bounty-5 | ghostyjoe | docker, fastapi, bug-bounty, open-source, cybersecurity | 03-Oct-2025 |
| ffuf Tool Explained: Finding Hidden Doors on the Web | https://medium.com/@natarajanck2/ffuf-tool-explained-finding-hidden-doors-on-the-web-37e7dc76e97c?source=rss------bug_bounty-5 | Natarajan C K | bug-bounty, fuzzing, web-app-development, web-applications, security | 03-Oct-2025 |
| Image XSS on Exif.tools | Hacking exif.tools by image injection by CYBER KALKI | https://medium.com/@krivadna/image-xss-on-exif-tools-hacking-exif-tools-by-image-injection-by-cyber-kalki-63b7d1261a19?source=rss------bug_bounty-5 | Krivadna | penetration-testing, cybersecurity, bug-bounty, bugbounty-writeup | 03-Oct-2025 |
| CVE-2022–26134: The Confluence RCE That Shook Enterprise Security | https://medium.com/@VampireXRay/cve-2022-26134-the-confluence-rce-that-shook-enterprise-security-2b58c5385011?source=rss------bug_bounty-5 | VampireXRay | red-team, hacking, bug-bounty, vulnerability, cybersecurity | 03-Oct-2025 |
| How I Discovered an Information Disclosure Vulnerability in Jira Instance (CVE-2020–14179) | https://medium.com/@akashutosh659/how-i-discovered-an-information-disclosure-vulnerability-in-jira-instance-cve-2020-14179-644b14386e38?source=rss------bug_bounty-5 | Ashutosh Anand | vulnerability-disclosure, bug-bounty, cybersecurity | 03-Oct-2025 |
| The Validation Trap: Why Hackers Chase Hall of Fame Instead of Real Bugs | https://su6osec.medium.com/the-validation-trap-why-hackers-chase-hall-of-fame-instead-of-real-bugs-010fb3a4bd76?source=rss------bug_bounty-5 | Đeepanshu | cybersecurity, infosec, bug-bounty, mindset | 02-Oct-2025 |
| Cybersecurity Awareness Month: Building a Culture of Cyber Resilience | https://medium.com/@paritoshblogs/cybersecurity-awareness-month-building-a-culture-of-cyber-resilience-8eabd9d4f4fe?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cyber-security-awareness, information-technology, cybersecurity, hacking | 02-Oct-2025 |
| Errors to API Exposure | https://infosecwriteups.com/errors-to-api-exposure-cbcf2b73946e?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | programming, infosec, technology, bug-bounty, cybersecurity | 02-Oct-2025 |
| Endless Cashback Glitch:How I Unlocked Unlimited Free Orders with One Simple Trick | https://strangerwhite.medium.com/endless-cashback-glitch-how-i-unlocked-unlimited-free-orders-with-one-simple-trick-d150c5db0a92?source=rss------bug_bounty-5 | StrangeRwhite | bug-bounty-tips, cybersecurity, bug-bounty-program, bug-bounty, bug-bounty-writeup | 02-Oct-2025 |
| ️ Debug Disaster: How Leftover Dev Tools Turned Me Into a Production Data Superhero | https://medium.com/@iski/%EF%B8%8F-debug-disaster-how-leftover-dev-tools-turned-me-into-a-production-data-superhero-716b5f4155f4?source=rss------bug_bounty-5 | Iski | money, hacking, cybersecurity, bug-bounty-tips, bug-bounty | 02-Oct-2025 |
| How I found SQL Injection on State Government | https://medium.com/meetcyber/how-i-found-sql-injection-on-state-government-a389f1ca356c?source=rss------bug_bounty-5 | Ayush | cybersecurity, technology, programming, bug-bounty, hacking | 02-Oct-2025 |
| SSRF Payloads & IPFuscation Guide | https://medium.com/@cybersecplayground/ssrf-payloads-ipfuscation-guide-46e7ee9b2272?source=rss------bug_bounty-5 | Cybersecplayground | hacking, bug-bounty, bug-bounty-tips, ssrf, bypass | 02-Oct-2025 |
| How to Discover and Dump Data from Exposed Elasticsearch Instances (For Authorized Security Testing… | https://medium.com/@omarataallah98/how-to-discover-and-dump-data-from-exposed-elasticsearch-instances-for-authorized-security-testing-079fe3cf364a?source=rss------bug_bounty-5 | Omarataallah | bug-bounty, red-team, cybersecurity, penetration-testing | 02-Oct-2025 |
| Software Supply Chain Attack — NPM Dependency Confusion | https://medium.com/@shehzadinfosec1337/software-supply-chain-attack-npm-dependency-confusion-b8c35daf0bad?source=rss------bug_bounty-5 | TheRoyHunter313 | pentesting, ethical-hacking, bug-bounty, supply-chain-security | 02-Oct-2025 |
| Broken Access Control | https://blog.gopenai.com/broken-access-control-c100c2f3b0e8?source=rss------bug_bounty-5 | aimaster | hacking, technology, programming, cybersecurity, bug-bounty | 02-Oct-2025 |
| Don’t Get Hacked: The Critical Defense Against Telegram Phishing Scams | https://medium.com/@princep49036142/dont-get-hacked-the-critical-defense-against-telegram-phishing-scams-58ec076b784a?source=rss------bug_bounty-5 | Prince Philip | telegram, phishing, mitre-attack, education, bug-bounty | 02-Oct-2025 |
| How I Bypassed an Account ID Check to Steal an API Key | https://medium.com/@cyberindaboski/how-i-bypassed-an-account-id-check-to-steal-an-api-key-5c446cce78e9?source=rss------bug_bounty-5 | Cyber Indaboski ( Blessing John) | bug-bounty, cybersecurity | 02-Oct-2025 |
| Truth About Bug Bounties: Beyond The Overnight Success | https://infosecwriteups.com/truth-about-bug-bounties-beyond-the-overnight-success-b3c8c89be4d4?source=rss------bug_bounty-5 | Willow Tech | bug-bounty, bug-bounty-writeup, bugs, bug-zero, bug-bounty-tips | 02-Oct-2025 |
| What is Cybersecurity Awareness Month and Why It Matters | https://medium.com/@envorasec/what-is-cybersecurity-awareness-month-and-why-it-matters-d6158d273853?source=rss------bug_bounty-5 | ENVORASEC | bug-bounty, technology, security, cybersecurity, ai | 02-Oct-2025 |
| How I Uncovered an IDOR and XSS Chain for a Critical Account Takeover | https://medium.com/@ibtissamhammadi1/how-i-uncovered-an-idor-and-xss-chain-for-a-critical-account-takeover-b6e827424579?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, ethical-hacking, xss-attack, idor, web-security | 02-Oct-2025 |
| ⚡️ Burp Suite como un pro: workflow real y sin perder el tiempo | https://gorkaaa.medium.com/%EF%B8%8F-burp-suite-como-un-pro-workflow-real-y-sin-perder-el-tiempo-952bfb65446a?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, burpsuite, hacking, bug-bounty, bug-bounty-tips | 02-Oct-2025 |
| My first 5-Minute Bug Bounty | https://systemweakness.com/my-first-5-minute-bug-bounty-1465e2cb517c?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty-writeup, bug-bounty, bug-bounty-tips, programming, cybersecurity | 02-Oct-2025 |
| Introduction to Symbolic Execution: How It Works, Tools & a Practical Angr Walkthrough | https://ari5ti.medium.com/introduction-to-symbolic-execution-how-it-works-tools-a-practical-angr-walkthrough-0acd3e30ab62?source=rss------bug_bounty-5 | Sanatsu | bug-bounty, reverse-engineering, security, android, automation | 02-Oct-2025 |
| Master Web Fuzzing: A Cheat‑Sheet to Finding Hidden Paths | https://medium.com/@P4RAD0X/master-web-fuzzing-a-cheat-sheet-to-finding-hidden-paths-6c2bcf521c44?source=rss------bug_bounty-5 | PARADOX | hacking, pentesting, cybersecurity, bug-bounty, penetration-testing | 02-Oct-2025 |
| ️♂️ Bughunter MVP | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/%EF%B8%8F-%EF%B8%8F-bughunter-mvp-3dda1831eda6?source=rss------bug_bounty-5 | ghostyjoe | docker, bug-bounty, open-source, cybersecurity, fastapi | 02-Oct-2025 |
| When the Artist Becomes the Exploit: Jailbreaking LLM Guardrails Through Roleplay and World… | https://medium.com/@chris.huffstetler/when-the-artist-becomes-the-exploit-jailbreaking-llm-guardrails-through-roleplay-and-world-d54f53a79756?source=rss------bug_bounty-5 | Chris Huffstetler | ai-jailbreak, bug-bounty, llm-security, red-team, prompt-injection | 02-Oct-2025 |
| Master Web Fuzzing: A Cheat‑Sheet to Finding Hidden Paths | https://osintteam.blog/master-web-fuzzing-a-cheat-sheet-to-finding-hidden-paths-6c2bcf521c44?source=rss------bug_bounty-5 | PARADOX | hacking, pentesting, cybersecurity, bug-bounty, penetration-testing | 02-Oct-2025 |
| Feroxbuster: An Ultra-Fast Web Content Fuzzer | https://medium.com/@jpablo13/feroxbuster-an-ultra-fast-web-content-fuzzer-7a50d98dcf60?source=rss------bug_bounty-5 | JPablo13 | technology, bug-bounty, cybersecurity, hacking, penetration-testing | 01-Oct-2025 |
| How to Learn Bug Bounty In Easy Way: A Simple Guide for Beginners | https://medium.com/@kakashi.kx/how-to-learn-bug-bounty-in-easy-way-a-simple-guide-for-beginners-a15d3e87a4fe?source=rss------bug_bounty-5 | Kakashi | cybersecurity, bug-bounty-tips, learning, bug-hunting, bug-bounty | 01-Oct-2025 |
| CORS Misadventures: How Misconfigured Origins Turned Me Into an Accidental Admin | https://infosecwriteups.com/cors-misadventures-how-misconfigured-origins-turned-me-into-an-accidental-admin-2107aa1768d6?source=rss------bug_bounty-5 | Iski | bug-bounty, money, cybersecurity, hacking, bug-bounty-tips | 01-Oct-2025 |
| The Dopamine Trap: Why Most Hackers Quit Before They Find the Big Bugs | https://su6osec.medium.com/the-dopamine-trap-why-most-hackers-quit-before-they-find-the-big-bugs-873ca6185799?source=rss------bug_bounty-5 | Đeepanshu | hacking, technology, cybersecurity, infosec, bug-bounty | 01-Oct-2025 |
| Want to Find Bugs? Learn HTTP First! | https://medium.com/@theceosmind/want-to-find-bugs-learn-http-first-295bd7dbe645?source=rss------bug_bounty-5 | mohandika | https, set, bug-bounty, bug-bounty-tips, cybersecurity | 01-Oct-2025 |
| Escaping the Tutorial Trap: How to Apply Bug Bounty Knowledge in the Real World | https://medium.com/@sync-with-ivan/escaping-the-tutorial-trap-how-to-apply-bug-bounty-knowledge-in-the-real-world-d24633f36274?source=rss------bug_bounty-5 | Andrei Ivan | ethical-hacking-training, bug-bounty, bug-bounty-tips, ethical-hacking, cybersecurity | 01-Oct-2025 |
| Logic Flaw in 2FA | https://medium.com/@faizulurrosyad433/logic-flaw-in-2fa-c8906bdc9b14?source=rss------bug_bounty-5 | Onepunchf | web-hacking, cybersecurity, bug-bounty | 01-Oct-2025 |
| The Easiest Way to Find a Critical Vulnerability: A Case Study with Jenkins | https://medium.com/@amrgomaa009/the-easiest-way-to-find-a-critical-vulnerability-a-case-study-with-jenkins-77bb8f7748af?source=rss------bug_bounty-5 | Amrgomaa | cybersecurity, vulnerability, penetration-testing, bug-bounty, reconnaissance | 01-Oct-2025 |
| Sublist3r: The New Update (V3.0) | https://medium.com/@shaheeryasirofficial/sublist3r-the-new-update-v3-0-bc2abebc7a2c?source=rss------bug_bounty-5 | Shaheer Yasir | offensive-security, hacking, bug-bounty, technology, subdomains-enumeration | 01-Oct-2025 |
| Unverified Email Change Vulnerability Leading to Account Takeover | https://medium.com/@abhisheksharma27082006/unverified-email-change-vulnerability-leading-to-account-takeover-1bcd5b09f0e5?source=rss------bug_bounty-5 | Abhishek sharma | bugs, bug-bounty-writeup, bug-bounty, authentication-bypass, writeup | 01-Oct-2025 |
| Feroxbuster: An Ultra-Fast Web Content Fuzzer | https://medium.com/meetcyber/feroxbuster-an-ultra-fast-web-content-fuzzer-7a50d98dcf60?source=rss------bug_bounty-5 | JPablo13 | technology, bug-bounty, cybersecurity, hacking, penetration-testing | 01-Oct-2025 |
| Escaping the Tutorial Trap: How to Apply Bug Bounty Knowledge in the Real World | https://medium.com/meetcyber/escaping-the-tutorial-trap-how-to-apply-bug-bounty-knowledge-in-the-real-world-d24633f36274?source=rss------bug_bounty-5 | Andrei Ivan | ethical-hacking-training, bug-bounty, bug-bounty-tips, ethical-hacking, cybersecurity | 01-Oct-2025 |
| Blind SQL Injection Walkthrough — DVWA (Low, Medium, High) | https://medium.com/@vaishnavkp1998/blind-sql-injection-walkthrough-dvwa-low-medium-high-4044a1c85df1?source=rss------bug_bounty-5 | Vaishnavkp | dvwa, blind-sql-injection, web-pentesting, bug-bounty, cybersecurity | 01-Oct-2025 |
| My Journey: From a Rural Village to Cybersecurity & Beyond | https://inayathussain.medium.com/my-journey-from-a-rural-village-to-cybersecurity-beyond-790057b3ab07?source=rss------bug_bounty-5 | Inayat Hussain | artificial-intelligence, cybersecurity, penetration-testing, bug-bounty | 01-Oct-2025 |
| ⚡ Burp Suite como un pro: workflow real, sin perder el tiempo (estreno mañana) | https://gorkaaa.medium.com/burp-suite-como-un-pro-workflow-real-sin-perder-el-tiempo-estreno-ma%C3%B1ana-db2429b15954?source=rss------bug_bounty-5 | Gorka | bug-bounty, bug-bounty-writeup, bug-bounty-hunter, bugbounty-writeup, bug-bounty-tips | 01-Oct-2025 |
| GraphQL API Testing | https://medium.com/@0cifer_l/graphql-api-testing-cad073477417?source=rss------bug_bounty-5 | 0cifer_l | bug-bounty, information-technology, cybersecurity, web-development, security | 01-Oct-2025 |
| From Google Dork to Rickroll: PDF.js misconfiguration for quick Bug Bounties | https://medium.com/@BobaF3tt/from-google-dork-to-rickroll-pdf-js-misconfiguration-for-quick-bug-bounties-f6473a2bdda4?source=rss------bug_bounty-5 | Boba F3tt | bug-bounty, vulnerability, cybersecurity, hacking, pentesting | 01-Oct-2025 |
| Reflected XSS — Part 2 | https://medium.com/@file_d0t_bug/reflected-xss-part-2-0a0b2cb0a314?source=rss------bug_bounty-5 | file.bug | cybersecurity, bug-bounty, bug-bounty-writeup, penetration-testing, ethical-hacking | 01-Oct-2025 |
| Bypassing Kamino KFarms invariant | https://medium.com/@dr497_/bypassing-kamino-kfarms-invariant-5beec4e67e4c?source=rss------bug_bounty-5 | dr497 | cybersecurity, kamino-lend, defi, solana-network, bug-bounty | 30-Sep-2025 |
| Feroxbuster: Un Fuzzer de Contenido Web Ultra Rápido | https://medium.com/@jpablo13/feroxbuster-un-fuzzer-de-contenido-web-ultra-r%C3%A1pido-9c047de4b4f1?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, technology, bug-bounty, hacking, penetration-testing | 30-Sep-2025 |
| Bypass Password Confirmation on Change Email | https://medium.com/@karim.hikal1/bypass-password-confirmation-on-change-email-d0e69bf0e99c?source=rss------bug_bounty-5 | Karim Hikal | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 30-Sep-2025 |
| Hacking APIs: Insufficient JSON Payload Validation | https://iaraoz.medium.com/hacking-apis-insufficient-json-payload-validation-525d20cd8591?source=rss------bug_bounty-5 | Israel Aráoz Severiche | api, hacking, pentesting, bug-bounty, cybersecurity | 30-Sep-2025 |
| Beyond Nuclei — Building Custom Templates That Actually Find Bugs | https://su6osec.medium.com/beyond-nuclei-building-custom-templates-that-actually-find-bugs-855ea2695f4d?source=rss------bug_bounty-5 | Đeepanshu | cybersecurity, infosec, penetration-testing, bug-bounty | 30-Sep-2025 |
| Cache Crash: How I Poisoned CDN Responses and Became Every User Simultaneously | https://medium.com/@iski/cache-crash-how-i-poisoned-cdn-responses-and-became-every-user-simultaneously-6261a2e966b4?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, cybersecurity, infosec, money | 30-Sep-2025 |
| Cowsay as a Service (CaaS) — PicoCTF Walkthrough | https://medium.com/@aashifm/cowsay-as-a-service-caas-picoctf-walkthrough-0c102345eac0?source=rss------bug_bounty-5 | 127.0.0.1 | bug-bounty, cybersecurity, ctf, gamefi, picoctf | 30-Sep-2025 |
| Broken Access Control in Action: Exploiting Role Modification (PortSwigger Lab) | https://medium.com/@cyberindaboski/broken-access-control-in-action-exploiting-role-modification-portswigger-lab-23233a0ba285?source=rss------bug_bounty-5 | Cyber Indaboski ( Blessing John) | cybersecurity, bug-bounty | 30-Sep-2025 |
| How to Configure FoxyProxy with Burp Suite on Kali Linux | https://medium.com/@apexiumtechnologieslimited/how-to-configure-foxyproxy-with-burp-suite-on-kali-linux-1c43bb20e458?source=rss------bug_bounty-5 | Apexium Technologies Ltd | foxyproxy, bug-bounty | 30-Sep-2025 |
| Turning Blind Error Based SQL Injection into Exploitable Boolean One Part 2: MySQL | https://ozguralp.medium.com/turning-blind-error-based-sql-injection-into-exploitable-boolean-one-part-2-mysql-ecf1dbe5352f?source=rss------bug_bounty-5 | Ozgur Alp | sql-injection, information-security, vulnerability, cybersecurity, bug-bounty | 30-Sep-2025 |
| Introduction to Bug Bounty: Techniques & Tools for Beginners | https://medium.com/@theceosmind/introduction-to-bug-bounty-techniques-tools-for-beginners-579e396cbb58?source=rss------bug_bounty-5 | mohandika | hacking, introduction, ti̇ktok, bug-bounty, beginners-guide | 30-Sep-2025 |
| How I accessed the/etc/folder from .git Folder misconfiguration | https://medium.com/@yossefmohamedsalah2001/how-i-accessed-the-etc-folder-from-git-folder-misconfiguration-06fd44fc22d8?source=rss------bug_bounty-5 | Y0s_0x_IBM | penetration-testing, bug-bounty, ctf-writeup | 30-Sep-2025 |
| I Used This Recon Protocol And Identified 18 Bugs In 48 Hours | https://medium.com/@ibtissamhammadi1/i-used-this-recon-protocol-and-identified-18-bugs-in-48-hours-7ee5bd1979dc?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, infosec, technology, reconnaissance, bug-bounty | 30-Sep-2025 |
| HTMLI → XSS → SSTI → RCE — Laboratorio práctico paso a paso | https://gorkaaa.medium.com/htmli-xss-ssti-rce-laboratorio-pr%C3%A1ctico-paso-a-paso-edd26e47ffdd?source=rss------bug_bounty-5 | Gorka | bug-bounty, bug-bounty-hunter, bug-bounty-writeup, bug-bounty-tips, bugbounty-writeup | 30-Sep-2025 |
| Full Red Teaming Senaryo “Web’den AD’ye” | https://medium.com/@NadirSensoy/full-red-teaming-senaryo-webten-ad-ye-7ba580d7e978?source=rss------bug_bounty-5 | Nadir Sensoy | cybersecurity, active-directory, pentesting, red-team, bug-bounty | 30-Sep-2025 |
| Token Trouble: How Leaked JWTs Let Me Become Everyone on the Internet | https://medium.com/@iski/token-trouble-how-leaked-jwts-let-me-become-everyone-on-the-internet-cb02acde43f2?source=rss------bug_bounty-5 | Iski | money, infosec, bug-bounty, cybersecurity, hacking | 29-Sep-2025 |
| Authentication bypass via sequential user IDs in Microsoft SSO integration | Critical Vulnerability | https://irsyadsec.medium.com/authentication-bypass-via-sequential-user-ids-in-microsoft-sso-integration-critical-vulnerability-d5f498ccdae7?source=rss------bug_bounty-5 | Irsyad Muhammad Fawwaz | hacking, vulnerability, bug-bounty, infosec, microsoft | 29-Sep-2025 |
| Hacking the Department of Homeland Security (Legally). This is my story | https://medium.com/legionhunters/hacking-the-department-of-homeland-security-legally-this-is-my-story-3c16ef02347f?source=rss------bug_bounty-5 | D3N14LD15K | penetration-testing, dept-of-homeland-security, infosec, hacking, bug-bounty | 29-Sep-2025 |
| 5 Pro Bug Bounty Automation Tips to Maximize Your Findings | https://brutsecurity.medium.com/5-pro-bug-bounty-automation-tips-to-maximize-your-findings-8f515b5003e5?source=rss------bug_bounty-5 | Saumadip Mandal | bugbounty-writeup, cybersecurity, bug-bounty | 29-Sep-2025 |
| Understanding CSRF Step by Step: From Exploitation to Prevention | https://medium.com/@mazene432/understanding-csrf-step-by-step-from-exploitation-to-prevention-28e73e3f74e4?source=rss------bug_bounty-5 | Mazen Elsayed | csrf, penetration-testing, bug-bounty, ethical-hacking, web-security | 29-Sep-2025 |
| Week 8 of My 90-Day Challenge: A Hot Lead and the BSCP Exam is Set | https://medium.com/@sl0th0x87/week-8-of-my-90-day-challenge-a-hot-lead-and-the-bscp-exam-is-set-05975728bf2a?source=rss------bug_bounty-5 | Mike (sl0th0x87) | about-me, cybersecurity, bug-bounty, challenge, weekly-report | 29-Sep-2025 |
| Cracking the Code: How I Decrypted a Mobile App’s ‘Secure’ Login Secrets | https://medium.com/@gowthami09027/cracking-the-code-how-i-decrypted-a-mobile-apps-secure-login-secrets-2757653eb240?source=rss------bug_bounty-5 | Blue_eye | cryptography, android, penetration-testing, owasp-top-10, bug-bounty | 29-Sep-2025 |
| P.O.O — Part 5: p00ned | https://medium.com/@Proclus/p-o-o-part-5-p00ned-76baba2226e9?source=rss------bug_bounty-5 | XOR-Hacks | red-team, hackthebox, active-directory, hacking, bug-bounty | 29-Sep-2025 |
| How i Got $$$ For Token Based Rate limit Bypass | https://medium.com/@test123cybertest/how-i-got-for-token-based-rate-limit-bypass-4841bbb3051c?source=rss------bug_bounty-5 | praveenarsh0xx0 | web-penetration-testing, penetration-testing, bug-bounty, hacking, information-security | 29-Sep-2025 |
| My First Cybersecurity Win: Finding a Bug in the Very First Program I Tested | https://medium.com/@elmoulaa.nidhal/my-first-cybersecurity-win-finding-a-bug-in-the-very-first-program-i-tested-9c437caf2181?source=rss------bug_bounty-5 | El moulaa Mohamed Nidhal | life-lessons, bug-bounty, winning, experience, cybersecurity | 29-Sep-2025 |
| ⌚All Xiaomi watches hacked (Cross Tenant IDOR) | https://infosecwriteups.com/all-xiaomi-watches-hacked-cross-tenant-idor-98b46c3f8705?source=rss------bug_bounty-5 | Hohky | bug-bounty, hacking, bug-bounty-writeup, bug-bounty-tips | 29-Sep-2025 |
| From 403 to Fortune: How I Became an Accidental Admin Through Access Control Bypasses | https://medium.com/@iski/from-403-to-fortune-how-i-became-an-accidental-admin-through-access-control-bypasses-d76f0c707098?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, infosec, hacking, money | 28-Sep-2025 |
| How to Find P1 Bugs using Google in your Target — (Part-1) | https://infosecwriteups.com/how-to-find-p1-bugs-using-google-in-your-target-part-1-e37455324dc1?source=rss------bug_bounty-5 | RivuDon | infosec, bug-bounty-tips, bug-bounty-writeup, bug-bounty, ethical-hacking | 28-Sep-2025 |
| Level Up Your Bug Hunting: The Right Way to Harness GPT in Cybersecurity | https://medium.com/@chris.perkins240224/level-up-your-bug-hunting-the-right-way-to-harness-gpt-in-cybersecurity-6103396f864c?source=rss------bug_bounty-5 | Chirs Perkin | bug-bounty, cybersecurity, chatgpt, cyber-security-awareness, ai | 28-Sep-2025 |
| How a Resend-Link Flow Exposed Critical User PIIs ( CWE-284 ) | https://medium.com/@4osp3l/how-a-resend-link-flow-exposed-critical-user-piis-cwe-284-382501bd1913?source=rss------bug_bounty-5 | 4osp3l | bug-bounty | 28-Sep-2025 |
| Critical Privilege Escalation: Viewer Can Gain Admin Access | https://medium.com/@xploiterr/critical-privilege-escalation-viewer-can-gain-admin-access-56069a4ccf95?source=rss------bug_bounty-5 | xploiterr | bug-bounty, privilege-escalation | 28-Sep-2025 |
| — | https://medium.com/@hossammostafa2003.1.1/-ef8525ff4cb8?source=rss------bug_bounty-5 | Hossam_Mostafa | web-security, race-condition, two-factor-authentication, bug-bounty, penetration-testing | 28-Sep-2025 |
| The Bug That Let Me Crash Another Tenant’s Department | https://medium.com/@Sid_x95/the-bug-that-let-me-crash-another-tenants-department-87176a3ea6d5?source=rss------bug_bounty-5 | Sid_x95 | bug-bounty, web-application-security, broken-access-control, idor, information-security | 28-Sep-2025 |
| Week 11 — Learning Basic Concepts of Cybersecurity | https://infosecwriteups.com/week-11-learning-basic-concepts-of-cybersecurity-0316beed3df7?source=rss------bug_bounty-5 | Aang | bug-bounty, information-security, ethical-hacking, bug-bounty-tips, information-technology | 28-Sep-2025 |
| Hacking APIs: Exploiting GraphQL | https://iaraoz.medium.com/hacking-apis-exploiting-graphql-1b69e6b3f0fe?source=rss------bug_bounty-5 | Israel Aráoz Severiche | ethical-hacking, owasp, bug-bounty, cybersecurity, pentesting | 28-Sep-2025 |
| Easy Browser Bug: Fullscreen That Hides the Truth | https://medium.com/legionhunters/easy-browser-bug-fullscreen-that-hides-the-truth-f30fe908d872?source=rss------bug_bounty-5 | MostReal | bug-bounty-tips, bugbounty-writeup, cybersecurity, bug-bounty, hacker | 28-Sep-2025 |
| Privilege Escalation via IDOR Allows Unauthorized User Injection | https://medium.com/@omerasraan/privilege-escalation-via-idor-allows-unauthorized-user-injection-f822aa64b528?source=rss------bug_bounty-5 | Omer Mohsen | access-control, privilege-escalation, ethical-hacking, bug-bounty, cybersecurity | 28-Sep-2025 |
| Mastering Nmap in 2025: Advanced Nmap Tactics for Bug Bounty Hunters & Security Pros — Final Part | https://medium.com/@appsecvenue/mastering-nmap-in-2025-advanced-nmap-tactics-for-bug-bounty-hunters-security-pros-final-part-ca5f53378c0d?source=rss------bug_bounty-5 | appsecvenue | cybersecurity, ethical-hacking, network-security, nmap, bug-bounty | 28-Sep-2025 |
| Simple IDOR — Ketika Pengguna Tidak Sah Bisa Melihat Tugas Orang Lain | https://medium.com/@robisubagja158/simple-idor-ketika-pengguna-tidak-sah-bisa-melihat-tugas-orang-lain-6ef274c79934?source=rss------bug_bounty-5 | Robi Mohamad subagja | cybersecurity, idor, broken-access-control, bug-bounty | 28-Sep-2025 |
| The Recon Loop and Beyond: Insights from My Early Bug Hunting Days | https://medium.com/@likithgajula/the-recon-loop-and-beyond-insights-from-my-early-bug-hunting-days-deddabc61322?source=rss------bug_bounty-5 | LIKITH GAJULA | cybersecurity, reconnaissance, bug-bounty | 28-Sep-2025 |
| بسم الله الرحمن الرحيم | https://medium.com/@mohamedelzyny410/%D8%A8%D8%B3%D9%85-%D8%A7%D9%84%D9%84%D9%87-%D8%A7%D9%84%D8%B1%D8%AD%D9%85%D9%86-%D8%A7%D9%84%D8%B1%D8%AD%D9%8A%D9%85-c01b8537d85c?source=rss------bug_bounty-5 | Mohamedelsayed | bug-bounty, bug-bounty-tips, cybersecurity | 28-Sep-2025 |
| How I Find Bugs Easily With a Clear Methodology | https://medium.com/@ibtissamhammadi1/how-i-find-bugs-easily-with-a-clear-methodology-74c59d68fe93?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, cybersecurity, information-security, bug-bounty, infosec | 28-Sep-2025 |
| Dalfox: Smart XSS Scanner for Bug Bounty and Pentesting | https://medium.com/@jpablo13/dalfox-smart-xss-scanner-for-bug-bounty-and-pentesting-c9a4a8708179?source=rss------bug_bounty-5 | JPablo13 | hacking, xss-attack, technology, bug-bounty, cybersecurity | 27-Sep-2025 |
| SSRF on Steroids: How I Turned a PDF Generator Into a Cloud Data Firehose | https://medium.com/@iski/ssrf-on-steroids-how-i-turned-a-pdf-generator-into-a-cloud-data-firehose-ea49e0f7a627?source=rss------bug_bounty-5 | Iski | bug-bounty-writeup, money, hacking, cybersecurity, bug-bounty | 27-Sep-2025 |
| CVE-2025–56676 | Critical Vulnerability in Zender Gateway Allows Account Takeover | https://darklotus.medium.com/cve-2025-56676-critical-vulnerability-in-zender-gateway-allows-account-takeover-2b5bcb50c762?source=rss------bug_bounty-5 | DarkLotus | bug-bounty, cve, cwe-639, ato, cve-2025 | 27-Sep-2025 |
| Escalating an HTML Injection into 1-Click Account Takeover | https://marxchryz.medium.com/escalating-an-html-injection-into-1-click-account-takeover-3ba9dbf0ce5f?source=rss------bug_bounty-5 | Marx Chryz Del Mundo | ssrf, html, bug-bounty, jwt, bug-bounty-writeup | 27-Sep-2025 |
| API Pentesting Part 4: Broken Object Level Authorization -The Silent Identity Swap | https://medium.com/@gowthami09027/api-pentesting-part-4-broken-object-level-authorization-the-silent-identity-swap-b6f38a4f8d10?source=rss------bug_bounty-5 | Blue_eye | hacking, penetration-testing, bug-bounty, information-security, api | 27-Sep-2025 |
| From Informative to Rewarded: The Surprising Journey of a Hyperlink Injection Vulnerability | https://medium.com/@InsbatArshad/from-informative-to-rewarded-the-surprising-journey-of-a-hyperlink-injection-vulnerability-3d5755d93a55?source=rss------bug_bounty-5 | Be nice insabat | hacking, programming, penetration-testing, cyber, bug-bounty | 27-Sep-2025 |
| How XBOW Became the World’s #1 AI Bug Hunter — and Its Biggest Nuisance | https://medium.com/@ujjwal-sinha/how-xbow-became-the-worlds-1-ai-bug-hunter-and-its-biggest-nuisance-014b96350ffe?source=rss------bug_bounty-5 | Ujjwal Sinha | penetration-testing, ai, bug-bounty, application-security, hacking | 27-Sep-2025 |
| DCSync attack — how it works, why it’s dangerous, and how to stop it | https://medium.com/@paritoshblogs/dcsync-attack-how-it-works-why-its-dangerous-and-how-to-stop-it-adc4e73cd281?source=rss------bug_bounty-5 | Paritosh | cybersecurity, dcsync, bug-bounty, hacking, information-technology | 27-Sep-2025 |
| My first bug bounty report | https://medium.com/@froze3en/my-first-bug-bounty-report-e90e2df3c0b5?source=rss------bug_bounty-5 | froze3en | web-development, programming, bug-bounty | 27-Sep-2025 |
| CSV Injection on Public Bug Bounty Program | https://medium.com/meetcyber/csv-injection-on-public-bug-bounty-program-0efaac6206cb?source=rss------bug_bounty-5 | Ayush | penetration-testing, technology, bug-bounty, cybersecurity, hacking | 27-Sep-2025 |
| A Simple Explanation of a Complex 2FA Bypass Technique | https://infosecwriteups.com/a-simple-explanation-of-a-complex-2fa-bypass-technique-de8b1db064a0?source=rss------bug_bounty-5 | Ibtissam hammadi | infosec, hacking, cybersecurity, bug-bounty, technology | 27-Sep-2025 |
| My 5-Minute Workflow to Find Bugs on Any Website | https://infosecwriteups.com/my-5-minute-workflow-to-find-bugs-on-any-website-c20075320c96?source=rss------bug_bounty-5 | coffinxp | penetration-testing, bug-bounty, programming, technology, hacking | 27-Sep-2025 |
| My first bug bounty report | https://medium.com/@pixelated-frozen/my-first-bug-bounty-report-e90e2df3c0b5?source=rss------bug_bounty-5 | PixelatedFrozen | web-development, programming, bug-bounty | 27-Sep-2025 |
| How a Newline Injection in Folder Names Broke Access Revocation: 750$ Bug | https://medium.com/@a13h1/how-a-newline-injection-in-folder-names-broke-access-revocation-750-bug-f9a73a8cd978?source=rss------bug_bounty-5 | Abhi Sharma | bug-bounty, hacking, injection, infosec, cybersecurity | 27-Sep-2025 |
| Stored XSS via PDF lead to One-Click Account Takeover | https://medium.com/@mrdesoky0/stored-xss-via-pdf-lead-to-one-click-account-takeover-b73dbe183cfa?source=rss------bug_bounty-5 | mrdesoky0 | bug-bounty-tips, account-takeover, bug-bounty, xss-attack, stored-xss | 27-Sep-2025 |
| From a 503 Page to a Critical Bug: Exposing Sensitive Data | https://medium.com/@ibtissamhammadi1/from-a-503-page-to-a-critical-bug-exposing-sensitive-data-3eade22d7f27?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty-tips, cybersecurity, fuzzing, bug-bounty, data | 27-Sep-2025 |
| Tor IP Changer Setup Guide | https://medium.com/@cybersecplayground/tor-ip-changer-setup-guide-588acd3590d6?source=rss------bug_bounty-5 | Cybersecplayground | bug-bounty-tips, pentest, bug-bounty, darkweb, hacking | 27-Sep-2025 |
| My Top 7 Browser Extensions for API Penetration Testing | https://medium.com/@sync-with-ivan/my-top-7-browser-extensions-for-api-penetration-testing-02298d529b30?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, api-security, web-security, cybersecurity, penetration-testing | 27-Sep-2025 |
| Why You Have to Wait for Your CVE: Behind the Scenes of MITRE’s Process | https://medium.com/meetcyber/why-you-have-to-wait-for-your-cve-behind-the-scenes-of-mitres-process-394369fbd3b5?source=rss------bug_bounty-5 | embossdotar | hacking, ethical-hacking, osint, bug-bounty, cybersecurity | 27-Sep-2025 |
| New Technique Bypass File Upload | https://infosecwriteups.com/new-technique-bypass-file-upload-4c18cef9f9ed?source=rss------bug_bounty-5 | Abbas.heybati | security-research, bypass, bug-bounty, security | 27-Sep-2025 |
| Introduction to ReconFTW — automated reconnaissance for security researchers | https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/introduction-to-reconftw-automated-reconnaissance-for-security-researchers-6237494a48bf?source=rss------bug_bounty-5 | ghostyjoe | penetration-testing, bug-bounty, hacking | 27-Sep-2025 |
| Beyond Burp Suite: Top 8 Underused Tools for Web App Security Testing (2025) | https://medium.com/@sync-with-ivan/beyond-burp-suite-top-8-underused-tools-for-web-app-security-testing-2025-453d6f3df331?source=rss------bug_bounty-5 | Andrei Ivan | pentesting, web-security, penetration-testing, bug-bounty, cybersecurity-tools | 26-Sep-2025 |
| Stored XSS via PDF Upload in Live chat⚠️ | https://medium.com/@firdansp/stored-xss-via-pdf-upload-in-live-chat-%EF%B8%8F-ce792a6eff1d?source=rss------bug_bounty-5 | 0verRida | cybersecurity, pentesting, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 26-Sep-2025 |
| Dalfox: Escáner de XSS Inteligente para Bug Bounty y Pentesting | https://medium.com/@jpablo13/dalfox-esc%C3%A1ner-de-xss-inteligente-para-bug-bounty-y-pentesting-0541638c4711?source=rss------bug_bounty-5 | JPablo13 | xss-attack, cybersecurity, technology, bug-bounty, hacking | 26-Sep-2025 |
| Key to the Kingdom: How I Found API Secrets Hiding in Plain Sight in JavaScript Files | https://medium.com/@iski/key-to-the-kingdom-how-i-found-api-secrets-hiding-in-plain-sight-in-javascript-files-2f92ab1dfe63?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, cybersecurity, infosec, money | 26-Sep-2025 |
| ⚙️ Parameter Mining 2025: How Attackers Discover Undocumented Features and Hidden Attack Surfaces | https://javascript.plainenglish.io/%EF%B8%8F-parameter-mining-2025-how-attackers-discover-undocumented-features-and-hidden-attack-surfaces-b40664d9c251?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, cybersecurity, information-security, infosec, ai | 26-Sep-2025 |
| Authorization Bypass: The Simple SSO Mistake | https://infosecwriteups.com/authorization-bypass-the-simple-sso-mistake-c8bd261b961c?source=rss------bug_bounty-5 | Ibtissam hammadi | auth0, appsec, cybersecurity, bug-bounty, sso | 26-Sep-2025 |
| Tooling via Browser Automation | https://infosecwriteups.com/tooling-via-browser-automation-5336b17c5497?source=rss------bug_bounty-5 | Chetan Chinchulkar | automation, tryhackme, bug-bounty | 26-Sep-2025 |
| Who’s Applying for You? A Look at Broken Access Control | https://medium.com/@0xBl4ckR4v3n/whos-applying-for-you-a-look-at-broken-access-control-2f8f37a9dc0d?source=rss------bug_bounty-5 | Osama | cybersecurity, infosec, bug-bounty, penetration-testing, pentesting | 26-Sep-2025 |
| # The New Frontier of Security: A Hacker’s Guide to Attacking and Defending AI — Part 1 | https://ankitthku.medium.com/the-new-frontier-of-security-a-hackers-guide-to-attacking-and-defending-ai-part-1-4ce8dd2523c8?source=rss------bug_bounty-5 | Rudra16 | bug-bounty, ai, cybersecurity, hacking | 26-Sep-2025 |
| ExploitPad: A Practical Checklist for Web App Testing | https://medium.com/@Sle3pyHead/exploitpad-a-practical-checklist-for-web-app-testing-fb9754a45d22?source=rss------bug_bounty-5 | Sle3pyHead | exploitpad, bug-bounty, penetration-testing, web-application-security | 26-Sep-2025 |
| 19. Finding Open Redirects with Ease | https://infosecwriteups.com/19-finding-open-redirects-with-ease-0cc59a41702c?source=rss------bug_bounty-5 | Abhijeet kumawat | cybersecurity, infosec, bug-bounty, openai, hacking | 26-Sep-2025 |
| Using Warp Terminal For Pentesting | https://medium.com/@maajix/using-warp-terminal-for-pentesting-5dacbbc4fdd5?source=rss------bug_bounty-5 | Majix | hacking, pentesting, bug-bounty, bug-bounty-tips, penetration-testing | 26-Sep-2025 |
| How I Found a High-Severity OTP Verification Bypass in a Public Bugcrowd Program | https://zuksh.medium.com/how-i-found-a-high-severity-otp-verification-bypass-in-a-public-bugcrowd-program-7f5f11a9c031?source=rss------bug_bounty-5 | Zuksh | penetration-testing, otp-bypass, infosec, bug-bounty, authentication | 26-Sep-2025 |
| Optimizing the Auditing Process in Your Auditing Company | https://medium.com/coinmonks/optimizing-the-auditing-process-in-your-auditing-company-a1c4bb65815e?source=rss------bug_bounty-5 | Officer's Notes | cryptocurrency, bug-bounty, blockchain, crypto, blockchain-development | 26-Sep-2025 |
| Web3 security communities for security researchers. Immunefi, Remedy, OpenSense… | https://medium.com/@stupid_contract/web3-security-communities-for-security-researchers-immunefi-remedy-opensense-3d3c21125308?source=rss------bug_bounty-5 | Stupid Contract | immunefi, community, bug-bounty, security-researchers, web3-security | 26-Sep-2025 |
| High-Severity OTP Verification Bypass i found in a Public Bugcrowd Program | https://zuksh.medium.com/how-i-found-a-high-severity-otp-verification-bypass-in-a-public-bugcrowd-program-7f5f11a9c031?source=rss------bug_bounty-5 | Zuksh | penetration-testing, otp-bypass, infosec, bug-bounty, authentication | 26-Sep-2025 |
| Groovy Sandbox Escape: Reading Files via ClassLoader — $650 Bounty Story | https://0x1git.medium.com/groovy-sandbox-escape-reading-files-via-classloader-650-bounty-story-8183ef9a332c?source=rss------bug_bounty-5 | 0x1git | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty, bugs | 26-Sep-2025 |
| How I found a simple MFA bypass | https://medium.com/@yusufabdulkadir74/how-i-found-a-simple-mfa-bypass-7944687bd86c?source=rss------bug_bounty-5 | Yusuf | bug-bounty, cybersecurity, penetration-testing, information-security, application-security | 26-Sep-2025 |
| Extending Free Trials with Just a Clock Change: A Subscription Bypass Story | https://medium.com/@abhisheksharma27082006/extending-free-trials-with-just-a-clock-change-a-subscription-bypass-story-515d8565cba9?source=rss------bug_bounty-5 | Abhishek sharma | bugs, bug-bounty-writeup, business-logic, bug-bounty, business-logic-flaw | 26-Sep-2025 |
| “The Subtle Art of Deception: Hunting Content Spoofing and Session Flaws” | https://amannsharmaa.medium.com/the-subtle-art-of-deception-hunting-content-spoofing-and-session-flaws-4d73b8b1ec16?source=rss------bug_bounty-5 | Aman Sharma | technology, hacking, money, programming, bug-bounty | 26-Sep-2025 |
| Default Credentials: The Hidden Door to Admin Panels | https://medium.com/@yassergersy/default-credentials-the-hidden-door-to-admin-panels-22a0461c8772?source=rss------bug_bounty-5 | Yasser Gersy | information-security, bug-bounty | 26-Sep-2025 |
| Bug Bounty Diaries: How a Leaked appsettings.json Became a High-Impact Find | https://0xbasak.medium.com/bug-bounty-diaries-how-a-leaked-appsettings-json-became-a-high-impact-find-57c3e19e0a36?source=rss------bug_bounty-5 | Dipu Basak | cybersecurity, information-security, bug-bounty, ethical-hacking, bug-bounty-writeup | 26-Sep-2025 |
| From Registration Number Enumeration to Dos: Chaining IDOR with OTP Bypass in Slot Booking System | https://medium.com/@pallavipandey107/from-registration-number-enumeration-to-dos-chaining-idor-with-otp-bypass-in-slot-booking-system-1444414a0fb4?source=rss------bug_bounty-5 | Pa11av1 | otp-bypass, idor, bug-bounty, bugbounty-writeup | 26-Sep-2025 |
| When “1+1” Became $650 — Escaping a Sandbox in Groovy | https://0x1git.medium.com/groovy-sandbox-escape-reading-files-via-classloader-650-bounty-story-8183ef9a332c?source=rss------bug_bounty-5 | 0x1git | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty, bugs | 26-Sep-2025 |
| How Hackers Use AI to Find Vulnerabilities Faster | https://infosecwriteups.com/how-hackers-use-ai-to-find-vulnerabilities-faster-248bc162c07e?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, tech, hacking, programming, cybersecurity | 25-Sep-2025 |
| SQL Injection UNION Attack: Retrieving Multiple Values in a Single Column (PostgreSQL 12.22) | https://infosecwriteups.com/sql-injection-union-attack-retrieving-multiple-values-in-a-single-column-postgresql-12-22-d5cfb569a38b?source=rss------bug_bounty-5 | Bash Overflow | sql-injection, bug-bounty, sql-injection-attack, sqli-union-attack, bug-bounty-tips | 25-Sep-2025 |
| ☁️ Living-off-the-Cloud (LotC) Attacks: The New Frontier of Cyber Stealth | https://medium.com/@paritoshblogs/%EF%B8%8F-living-off-the-cloud-lotc-attacks-the-new-frontier-of-cyber-stealth-2a94c7c92fe9?source=rss------bug_bounty-5 | Paritosh | hacking, cloud-computing, cybersecurity, cloud-security, bug-bounty | 25-Sep-2025 |
| Why I Think Specialization is the Only Way to Succeed in Bug Bounties in 2025 | https://cybersecuritywriteups.com/why-i-think-specialization-is-the-only-way-to-succeed-in-bug-bounties-in-2025-7154b5a5a5af?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, bug-bounty-tips, information-security, cybersecurity, ethical-hacking | 25-Sep-2025 |
| Broken Access Control Lab: User Role Control via Request Parameter | https://medium.com/@cyberindaboski/broken-access-control-lab-user-role-control-via-request-parameter-45fbbe650edb?source=rss------bug_bounty-5 | Cyber Indaboski ( Blessing John) | programming, python, bug-bounty, cybersecurity | 25-Sep-2025 |
| Fixing Burp Suite BApp Store and Update Errors Behind Zscaler (Windows Only) | https://medium.com/@shivams0099/fixing-burp-suite-bapp-store-and-update-errors-behind-zscaler-windows-only-0830395d5a70?source=rss------bug_bounty-5 | Shivams | burpsuite, windows, zscaler, bug-bounty, pentesting | 25-Sep-2025 |
| Top 3 Books Every Bug Bounty Hunter MUST Read! | Bug Bounty 2025 Guide | https://baos.pub/top-3-books-every-bug-bounty-hunter-must-read-bug-bounty-2025-guide-75de82552e65?source=rss------bug_bounty-5 | Shahzaib | hack-to-learn, bug-bounty, ethical-hacking, cybersecurity, penetration-testing | 25-Sep-2025 |
| Unmasking Blind XSS: A Hacker’s Guide to High-Paying Bounties | https://infosecwriteups.com/unmasking-blind-xss-a-hackers-guide-to-high-paying-bounties-fc9e6ced5b0b?source=rss------bug_bounty-5 | coffinxp | cybersecurity, bug-bounty, penetration-testing, technology, hacking | 25-Sep-2025 |
| Found: an IDOR in a Game Full of Hunters | https://medium.com/@file_d0t_bug/found-an-idor-in-a-game-full-of-hunters-0ee8abd08589?source=rss------bug_bounty-5 | file.bug | red-team, ethical-hacking, cybersecurity, bug-bounty, penetration-testing | 25-Sep-2025 |
| Bug Bounty: Automated Directory Search [Advanced Recon] | https://medium.com/@web.head/bug-bounty-automated-directory-search-advanced-recon-a8ece7a5ccad?source=rss------bug_bounty-5 | Siddharth Rose | bug-bounty, reconnaissance, hacking, directory-enumeration, hacking-tools | 25-Sep-2025 |
| “The Registration Flaw That Almost Got Missed: Hunting Weak Authentication Links” | https://infosecwriteups.com/the-registration-flaw-that-almost-got-missed-hunting-weak-authentication-links-75337daa6bf9?source=rss------bug_bounty-5 | Aman Sharma | money, technology, cybersecurity, bug-bounty, hacking | 25-Sep-2025 |
| How I Found a $3,500 Security Bug in Just 1 Hour | https://medium.com/@ibtissamhammadi1/how-i-found-a-3-500-security-bug-in-just-1-hour-7cbd930b7157?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, cybersecurity, infosec, technology, ethical-hacking | 25-Sep-2025 |
| Exposing Sensitive Data on NASA Endpoint. S3 Bucket, API Key, and Config Leak | https://medium.com/@d3n14ld15k/exposing-sensitive-data-on-nasa-endpoint-s3-bucket-api-key-and-config-leak-b441f7f95893?source=rss------bug_bounty-5 | D3N14LD15K | pentesting, cybersecurity, bug-bounty, hacking, nasa | 25-Sep-2025 |
| Terrier Cyber Quest 2025 — Brief Write-up | https://infosecwriteups.com/terrier-cyber-quest-2025-brief-write-up-b001310d025c?source=rss------bug_bounty-5 | Somnath Das | ctf-writeup, bug-bounty, cybersecurity, ctf, hacking | 25-Sep-2025 |
| Learning : Mastering Nmap for Network Recon | https://medium.com/@vikram38503/learning-mastering-nmap-for-network-recon-78b8dbeb4568?source=rss------bug_bounty-5 | Vikram Budania | learning, bug-bounty, scanning, cybersecurity, nmap | 25-Sep-2025 |
| De SQLi a RCE — Explotación real paso a paso en laboratorio | https://gorkaaa.medium.com/de-sqli-a-rce-explotaci%C3%B3n-real-paso-a-paso-en-laboratorio-76cc3d73116a?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bug-bounty-writeup, bug-bounty-tips, bugbounty-writeup, bug-bounty | 25-Sep-2025 |
| Why I Think Specialization is the Only Way to Succeed in Bug Bounties in 2025 | https://medium.com/meetcyber/why-i-think-specialization-is-the-only-way-to-succeed-in-bug-bounties-in-2025-7154b5a5a5af?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, bug-bounty-tips, information-security, cybersecurity, ethical-hacking | 25-Sep-2025 |
| WHO IS WHITEDEATHKL | https://medium.com/@stevethomas221/who-is-whitedeathkl-a2c6d71456e1?source=rss------bug_bounty-5 | Steve Thomas | cybersecurity, bug-bounty, ethical-hacker, vapt, penetration-testing | 25-Sep-2025 |
| Exposing Sensitive Data on NASA Endpoint. S3 Bucket, API Key, and Config Leak | https://medium.com/legionhunters/exposing-sensitive-data-on-nasa-endpoint-s3-bucket-api-key-and-config-leak-b441f7f95893?source=rss------bug_bounty-5 | D3N14LD15K | pentesting, cybersecurity, bug-bounty, hacking, nasa | 25-Sep-2025 |
| Mastering XSStrike: Detecting and Exploiting XSS Vulnerabilities | https://medium.com/@jpablo13/mastering-xsstrike-detecting-and-exploiting-xss-vulnerabilities-74dd1ec3e5a9?source=rss------bug_bounty-5 | JPablo13 | xss-attack, hacking, bug-bounty, cybersecurity, technology | 24-Sep-2025 |
| Cache Clash: How CDN Misconfigurations Let Me Hijack Thousands of User Sessions | https://medium.com/@iski/cache-clash-how-cdn-misconfigurations-let-me-hijack-thousands-of-user-sessions-52e09bc0b0a2?source=rss------bug_bounty-5 | Iski | bug-bounty-tips, hacking, sql, cybersecurity, bug-bounty | 24-Sep-2025 |
| 18. Secrets of Rate Limiting and Bruteforce | https://infosecwriteups.com/18-secrets-of-rate-limiting-and-bruteforce-6dbb17e1a951?source=rss------bug_bounty-5 | Abhijeet kumawat | secrets, hacking, bug-bounty, cybersecurity, brute-force | 24-Sep-2025 |
| SQL Injection UNION Attack: Retrieving Data from Other Tables | https://infosecwriteups.com/sql-injection-union-attack-retrieving-data-from-other-tables-aa79bd7862b6?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, sql-injection-attack, bug-bounty, sqli-union-attack, sql-injection | 24-Sep-2025 |
| Mastering XSStrike: Detecting and Exploiting XSS Vulnerabilities | https://medium.com/meetcyber/mastering-xsstrike-detecting-and-exploiting-xss-vulnerabilities-74dd1ec3e5a9?source=rss------bug_bounty-5 | JPablo13 | xss-attack, hacking, bug-bounty, cybersecurity, technology | 24-Sep-2025 |
| Chaining Leaks to Unauthenticated Database Access: A Collaborative Bug Hunt | https://cybersecuritywriteups.com/chaining-leaks-to-unauthenticated-database-access-a-collaborative-bug-hunt-725f9849fd04?source=rss------bug_bounty-5 | Danish Ahmed | writuep, bug-bounty, bugs, bug-bounty-tips, bug-bounty-writeup | 24-Sep-2025 |
| API Pentesting Part-2: Replay Attack- No Expiry on Authentication Headers (HMAC SHA-256) | https://medium.com/@gowthami09027/api-pentesting-part-2-replay-attack-no-expiry-on-authentication-headers-hmac-sha-256-dd619b52cdc7?source=rss------bug_bounty-5 | Blue_eye | pentesting, penetration-testing, information-security, bug-bounty, android-pentesting | 24-Sep-2025 |
| Linux Commands | Bug Bounty Edition | https://al1k0k.medium.com/linux-commands-bug-bounty-edition-3f89f9452793?source=rss------bug_bounty-5 | al1k0k | linux-commands, linux, bug-bounty-writeup, bug-bounty | 24-Sep-2025 |
| Cross-Site Request Forgery (CSRF): The Silent Account Takeover | https://medium.com/@yossefmohamedsalah2001/cross-site-request-forgery-csrf-the-silent-account-takeover-930d6a69e9bc?source=rss------bug_bounty-5 | Y0s_0x_IBM | csrf-attack, bug-bounty, csrf, penetration-testing, vulnerability | 24-Sep-2025 |
| Server-Side Request Forgery (SSRF): The Hidden Gateway to Internal Networks | https://medium.com/@yossefmohamedsalah2001/server-side-request-forgery-ssrf-the-hidden-gateway-to-internal-networks-5404782e5e7a?source=rss------bug_bounty-5 | Y0s_0x_IBM | bug-bounty, ssrf, hacking, ssrf-attack, vulnerability | 24-Sep-2025 |
| Chaining Leaks to Unauthenticated Database Access: A Collaborative Bug Hunt | https://medium.com/meetcyber/chaining-leaks-to-unauthenticated-database-access-a-collaborative-bug-hunt-3f188f6ce4d1?source=rss------bug_bounty-5 | Danish Ahmed | bugbounty-writeup, bug-bounty, writuep, critical, bug-bounty-tips | 24-Sep-2025 |
| My bug bounty methodology | https://medium.com/@hi.david60/my-bug-bounty-methodology-84570a9f4a16?source=rss------bug_bounty-5 | 0xBruno | bugbounty-writeup, bug-bounty, bug-bounty-tips | 24-Sep-2025 |
| Mastering Nmap: From Host Discovery to Finding Exploits | https://medium.com/@vikram38503/mastering-nmap-from-host-discovery-to-finding-exploits-d44e5d0067da?source=rss------bug_bounty-5 | Vikram Budania | bug-bounty, hacking, wireshark, nmap, cybersecurity | 24-Sep-2025 |
| How I Found a Secret Admin Panel in the JavaScript Source Code | https://medium.com/@cyberindaboski/how-i-found-a-secret-admin-panel-in-the-javascript-source-code-2f92f3a5cd84?source=rss------bug_bounty-5 | Cyber Indaboski ( Blessing John) | programming, bug-bounty | 24-Sep-2025 |
| “The Hijacker’s Goldmine: Finding Broken Links That Lead to Bounties” | https://infosecwriteups.com/the-hijackers-goldmine-finding-broken-links-that-lead-to-bounties-695740698218?source=rss------bug_bounty-5 | Aman Sharma | programming, technology, cybersecurity, bug-bounty, hacking | 24-Sep-2025 |
| Why Burnout is the Hidden Cost of Bug Bounty Life | https://medium.com/activated-thinker/why-burnout-is-the-hidden-cost-of-bug-bounty-life-93d158c4a9c7?source=rss------bug_bounty-5 | Aj | bug-bounty, burnout, mental-health, ethical-hacking, cybersecurity | 24-Sep-2025 |
| Reporting Sensitive Data Exposure in US Website using Google Dorking! | https://medium.com/@abhii_jeeth/reporting-sensitive-data-exposure-in-us-website-using-google-dorking-86450d994c53?source=rss------bug_bounty-5 | Abhijith M | penetration-testing, ethical-hacking, bug-bounty, cybersecurity, pentest | 24-Sep-2025 |
| Hacking APIs: Tokens and Token Rotation | https://iaraoz.medium.com/hacking-apis-tokens-and-token-rotation-397b45a9c724?source=rss------bug_bounty-5 | Israel Aráoz Severiche | hacking, web-development, bug-bounty, cloud-security, cybersecurity | 24-Sep-2025 |
| 503 Page to Critical Bug | https://infosecwriteups.com/503-page-to-critical-bug-00e284eaeebe?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | technology, infosec, programming, bug-bounty-tips, bug-bounty | 24-Sep-2025 |
| How a Missing HTTPOnly Header Can Lead to Session Hijacking | https://mukibas37.medium.com/how-a-missing-httponly-header-can-lead-to-session-hijacking-b161a0db6607?source=rss------bug_bounty-5 | Mukilan Baskaran | bug-bounty, bug-bounty-writeup, cybersecurity, information-security, ethical-hacking | 24-Sep-2025 |
| Comunidad Discord Pentesting y Bug Bounty | https://gorkaaa.medium.com/comunidad-discord-pentesting-y-bug-bounty-b51c9cd322b4?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty, bugbounty-writeup, bug-bounty-hunter, bug-bounty-writeup | 24-Sep-2025 |
| Privilege Escalation: Member Role Can Change Organization Name and Photo | https://medium.com/@HBlackGhost/privilege-escalation-member-role-can-change-organization-name-and-photo-702e00786a42?source=rss------bug_bounty-5 | HBlack Ghost | bug-bounty, bug-bounty-tips, bug-bounty-writeup, cybersecurity | 24-Sep-2025 |
| XSStrike: Guía completa para la detección y explotación de XSS | https://medium.com/@jpablo13/xsstrike-gu%C3%ADa-completa-para-la-detecci%C3%B3n-y-explotaci%C3%B3n-de-xss-ff1447a69eac?source=rss------bug_bounty-5 | JPablo13 | technology, xss-attack, bug-bounty, cybersecurity, hacking | 23-Sep-2025 |
| SQL Injection UNION Attack: Finding a Column Containing Text | https://osintteam.blog/sql-injection-union-attack-finding-a-column-containing-text-662cea789110?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, bug-bounty, sql-injection-attack, sql-injection, union-operator-in-sqli | 23-Sep-2025 |
| HAIDAKHAN COMPLETE DATABASE HACKED !! | https://medium.com/@krivadna/haidakhan-complete-database-hacked-db5d2731b236?source=rss------bug_bounty-5 | Krivadna | bug-bounty, freelancing, bugbounty-writeup, penetration-testing, cybersecurity | 23-Sep-2025 |
| Mask Off: How I Exploited Broken OAuth to Login as Anyone | https://medium.com/@iski/mask-off-how-i-exploited-broken-oauth-to-login-as-anyone-f1ce3c88d9b2?source=rss------bug_bounty-5 | Iski | bug-bounty, money, cybersecurity, infosec, hacking | 23-Sep-2025 |
| Bug Bounty 101: The Best Courses to Get Started in 2025 | https://netlas.medium.com/bug-bounty-101-the-best-courses-to-get-started-in-2025-b0b1111a22ca?source=rss------bug_bounty-5 | Netlas.io | cybersecurity, bug-bounty, information-security, penetration-testing, online-courses | 23-Sep-2025 |
| UrlScan Dorks for endpoints hiding behind ASN and Subnet | https://medium.com/legionhunters/urlscan-dorks-for-endpoints-hiding-behind-asn-and-subnet-5cd5c610f5ae?source=rss------bug_bounty-5 | AbhirupKonwar | attack-surface-management, bug-bounty, ethical-hacking, pentesting, bug-bounty-tips | 23-Sep-2025 |
| Introducing BountyBuddy — A Complete Bug Bounty Checklist & Pentesting Checklist | https://infosecwriteups.com/introducing-bountybuddy-a-complete-bug-bounty-checklist-pentesting-checklist-a60bd1d899eb?source=rss------bug_bounty-5 | Shah kaif | reconnaissance, bug-bounty, bug-bounty-writeup, bug-bounty-checklist, bug-bounty-tips | 23-Sep-2025 |
| Gitlab Just Became a Botnet — How Gitlab’s Shared Runners Fueled a Massive DoS Attack | https://medium.com/@justas_b1/gitlab-just-became-a-botnet-how-gitlabs-shared-runners-fueled-a-massive-dos-attack-a3a786a03ac4?source=rss------bug_bounty-5 | Justas_b | hackerone, bug-bounty, cybersecurity, infosec, devops | 23-Sep-2025 |
| A Critical Bug Let Me Become an Admin on an External Bug Bounty Program | https://ln0rag.medium.com/a-critical-bug-let-me-become-an-admin-on-an-external-bug-bounty-program-e76733ca07eb?source=rss------bug_bounty-5 | Ln0rag | privilege-escalation, bug-bounty-tips, bug-bounty, bug-bounty-writeup, file-upload-vulnerability | 23-Sep-2025 |
| :{) Welcome Message … | https://mdshakibkhan0x1.medium.com/welcome-message-7a2271fb3c0a?source=rss------bug_bounty-5 | MD SHAKIB KHAN | mdshakibkhan0x1, md-shakib-khan, news-update, bug-bounty | 23-Sep-2025 |
| How I Learned Cybersecurity in 30 Days Using Only ChatGPT | https://medium.com/@ibtissamhammadi1/how-i-learned-cybersecurity-in-30-days-using-only-chatgpt-3e94d03f0423?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, programming, cybersecurity, chatgpt, hacking | 23-Sep-2025 |
| Auth Bypasses: Logic Flaws, Race Conditions, and Deserialization. What you need to know | https://medium.com/@Tenebris_Venator/auth-bypasses-logic-flaws-race-conditions-and-deserialization-what-you-need-to-know-d1efddc16eb5?source=rss------bug_bounty-5 | Tenebris Venator | tips, hacking, bug-bounty, technology, information-technology | 23-Sep-2025 |
| CSRF Vulnerability Leads to Course DoS | https://exploit5lovers.medium.com/csrf-vulnerability-leads-to-course-dos-70809362a7ec?source=rss------bug_bounty-5 | Exploit5lover | bug-bounty, bug-hunting, infosec, denial-of-service-attack, csrf | 23-Sep-2025 |
| LFI + RCE en Node.js, Python y PHP — Laboratorio real paso a paso | https://gorkaaa.medium.com/lfi-rce-en-node-js-python-y-php-laboratorio-real-paso-a-paso-4a3b4f1089c3?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, bugbounty-writeup, bug-bounty-hunter, bug-bounty-tips, bug-bounty | 23-Sep-2025 |
| Portswigger OAuth Authentication Labs — Expert | https://medium.com/@sl0th0x87/portswigger-oauth-authentication-labs-expert-e766a7402222?source=rss------bug_bounty-5 | Mike (sl0th0x87) | walkthrough, bug-bounty, portswigger, oauth, burpsuite | 23-Sep-2025 |
| “The Low-Hanging Fruit That Pays Off: Hunting P4 Bugs” | https://infosecwriteups.com/the-low-hanging-fruit-that-pays-off-hunting-p4-bugs-2423fb3dcaee?source=rss------bug_bounty-5 | Aman Sharma | learning, cybersecurity, bug-bounty, hacking, technology | 23-Sep-2025 |
| ️ How to Hunt Living-off-the-Land Attacks Like a Pro (Before They Hunt You) | https://medium.com/@paritoshblogs/%EF%B8%8F-how-to-hunt-living-off-the-land-attacks-like-a-pro-before-they-hunt-you-545ed594f579?source=rss------bug_bounty-5 | Paritosh | living-off-the-land, threat-hunting, cybersecurity, bug-bounty, information-technology | 22-Sep-2025 |
| 20+ cURL Hacks That Will Make You a Bug Bounty Pro | https://medium.com/@qaafqasim/20-curl-hacks-that-will-make-you-a-bug-bounty-pro-186ecc51bff5?source=rss------bug_bounty-5 | Qasim Mahmood Khalid | bug-bounty, cybersecurity, bugbounty-writeup, hacking, programming | 22-Sep-2025 |
| Analytics Gone Wild: How I Turned a Tracking Pixel Into a User Data Firehose | https://medium.com/@iski/analytics-gone-wild-how-i-turned-a-tracking-pixel-into-a-user-data-firehose-f178d83a1f75?source=rss------bug_bounty-5 | Iski | money, infosec, hacking, cybersecurity, bug-bounty | 22-Sep-2025 |
| SQL Injection UNION Attack — Determining the Number of Columns Returned By Query | https://osintteam.blog/sql-injection-union-attack-determining-the-number-of-columns-returned-by-query-d12ad1117cb9?source=rss------bug_bounty-5 | Bash Overflow | database-enumeration, bug-bounty, sql-union-attack, sql-injection, sql-injection-attack | 22-Sep-2025 |
| The Weird Signup Bug That Let Me Delete Anyone’s Account | https://medium.com/@cyberhead/the-weird-signup-bug-that-let-me-delete-anyones-account-ce3945ed91af?source=rss------bug_bounty-5 | CyberHead | bug-bounty-reports, bug-bounty, cybersecurity | 22-Sep-2025 |
| Cross-Site Scripting (XSS): Still Alive in 2025 | https://medium.com/@hinan.mohamed/cross-site-scripting-xss-still-alive-in-2025-37d68eb91da3?source=rss------bug_bounty-5 | Hinan Mohamed | bug-bounty, cybersecurity, xss-attack, web-security | 22-Sep-2025 |
| Ethical Hacking 2025: From Bounties to AI Pentests | https://medium.com/@Modexa/ethical-hacking-2025-from-bounties-to-ai-pentests-03a1edf078c1?source=rss------bug_bounty-5 | Modexa | ai-security, bug-bounty, devsecops, ethical-hacking, penetration-testing | 22-Sep-2025 |
| Palitra AI: Turning AI Confidentiality Into a Living Game | https://medium.com/@palitra.ai/palitra-ai-turning-ai-confidentiality-into-a-living-game-035ac05e9efc?source=rss------bug_bounty-5 | Palitra.ai | privacy, genai, bug-bounty, machine-learning, ai | 22-Sep-2025 |
| “The Directory Bruteforcer That Found a Fortune: Mastering Gobuster” | https://infosecwriteups.com/the-directory-bruteforcer-that-found-a-fortune-mastering-gobuster-2f8dae97bfc7?source=rss------bug_bounty-5 | Aman Sharma | hacking, bug-bounty, technology, programming, cybersecurity | 22-Sep-2025 |
| I Discovered An Admin Panel Security Flaw | https://medium.com/@ibtissamhammadi1/i-discovered-an-admin-panel-security-flaw-22274482e2cd?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty, ethical-hacking, infosec, security | 22-Sep-2025 |
| Built a Python Tool to Automate Email Security Audits | https://saurabh-jain.medium.com/built-a-python-tool-to-automate-email-security-audits-c639d2affe88?source=rss------bug_bounty-5 | Saurabh Jain | python, tools, security, automation, bug-bounty | 22-Sep-2025 |
| ️The dark art of homoglyph attacks. ️♂️ | https://medium.com/@zoningxtr/the-dark-art-of-homoglyph-attacks-%EF%B8%8F-%EF%B8%8F-48cbb6e19409?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, python, cybersecurity, bug-bounty, web-development | 22-Sep-2025 |
| How Changing a Single ID Turned Into $$$ | https://medium.com/meetcyber/how-changing-a-single-id-turned-into-e0550f168cc5?source=rss------bug_bounty-5 | Antonio Rivera Poblete | vulnerability, cybersecurity, bug-bounty, infosec, idor | 22-Sep-2025 |
| How I Earned $3,300 in Bug Bounties Using ASN Reconnaissance | https://medium.com/@ahmadzuriqi4/how-i-earned-3-300-in-bug-bounties-using-asn-reconnaissance-3464bb23bafa?source=rss------bug_bounty-5 | Ahmadzuriqi | bug-bounty-tips, cybersecurity, ethical-hacking, bug-bounty, reconnaissance | 22-Sep-2025 |
| How a Hidden Note Fooled an AI Summarizer — Discovering Prompt Injection in Summarization | Bug… | https://ph-hitachi.medium.com/how-a-hidden-note-fooled-an-ai-summarizer-discovering-prompt-injection-in-summarization-bug-8bc189b37704?source=rss------bug_bounty-5 | Ph.Hitachi | prompt-injection-attack, hackerone, ai, bug-bounty, bug-bounty-writeup | 22-Sep-2025 |
| Bypassing heavy SSRF protection — AppSecMaster challenge writeup | https://medium.com/@0xmyth/bypassing-heavy-ssrf-protection-appsecmaster-challenge-writeup-8624e0ceed61?source=rss------bug_bounty-5 | 0xMyth | ssrf, ctf, bug-bounty, application-security, cybersecurity | 22-Sep-2025 |
| How a Hidden Note Fooled an AI Summarizer — Discovering Prompt Injection in Summarization | Bug… | https://infosecwriteups.com/how-a-hidden-note-fooled-an-ai-summarizer-discovering-prompt-injection-in-summarization-bug-8bc189b37704?source=rss------bug_bounty-5 | Ph.Hitachi | prompt-injection-attack, hackerone, ai, bug-bounty, bug-bounty-writeup | 22-Sep-2025 |
| LFI + RCE en Node.js, Python y PHP — Nuevo vídeo este martes 23 | https://gorkaaa.medium.com/lfi-rce-en-node-js-python-y-php-nuevo-v%C3%ADdeo-este-martes-23-370c1a0e84d9?source=rss------bug_bounty-5 | Gorka | bugbounty-writeup, bug-bounty-hunter, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 22-Sep-2025 |
| Stronger Infrastructure, Stronger Hackers: Build Resilience to Build Skill | https://medium.com/@iserjaoui/stronger-infrastructure-stronger-hackers-build-resilience-to-build-skill-b1584db39c44?source=rss------bug_bounty-5 | Iserjaoui | ethical-hacking, cybersecurity, infosec, bug-bounty, hacking | 22-Sep-2025 |
| The $0 Bug That Turned Into a Career-Changing Opportunity | https://osintteam.blog/the-0-bug-that-turned-into-a-career-changing-opportunity-be976f0b7d3f?source=rss------bug_bounty-5 | Aj | cybersecurity, personal-development, careers, hacking, bug-bounty | 22-Sep-2025 |
| Nmap Essentials | https://medium.com/@learningit15/nmap-essentials-43e8f0b6c0f1?source=rss------bug_bounty-5 | Shawn | linux, hacker, nmap, cybersecurity, bug-bounty | 22-Sep-2025 |
| Bug Bounty Hunting for GenAI | https://medium.com/@cocopelly255/bug-bounty-hunting-for-genai-78b66f0b3323?source=rss------bug_bounty-5 | ToxSec | genai, llm-security, bug-bounty, prompt-injection, ai-security | 22-Sep-2025 |
| Bug Bounty Hunting for GenAI | https://medium.com/@cocopelly255/bug-bounty-hunting-for-genai-a985fa0d1a09?source=rss------bug_bounty-5 | ToxSec | bug-bounty, genai, ctf, infosec, cybersecurity | 22-Sep-2025 |
| My $$$$$ Blind Xss Tips. | https://systemweakness.com/my-blind-xss-tips-481aa48d9651?source=rss------bug_bounty-5 | Vedavyasan S (@ved4vyasan) | bug-bounty, cybersecurity, xss-attack, bug-bounty-writeup, bug-bounty-tips | 21-Sep-2025 |
| Unauthorized Unsubscription and Message of Employee | https://ghostman01.medium.com/unauthorized-unsubscription-employee-bf36d81e3e8d?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, infosec, programming, technology, bug-bounty-tips | 21-Sep-2025 |
| Is it easy to discover a critical vulnerability [P1] ? | https://medium.com/@pandurangisuprit/is-it-easy-to-discover-a-critical-vulnerability-p1-e68c76974124?source=rss------bug_bounty-5 | Suprit Pandurangi | vulnerability, directory-listing, bug-bounty | 21-Sep-2025 |
| Unauthorized Unsubscription and Message of Employee | https://infosecwriteups.com/unauthorized-unsubscription-employee-bf36d81e3e8d?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, infosec, programming, technology, bug-bounty-tips | 21-Sep-2025 |
| Advent of Cyber ’24 Side Quest | TryHackMe | https://medium.com/@dhruva0/advent-of-cyber-24-side-quest-tryhackme-74960d917fd0?source=rss------bug_bounty-5 | Dhruv | advent-of-cyber-2024, tryhackme, ctf-writeup, bug-bounty, tryhackme-walkthrough | 21-Sep-2025 |
| CWES Review — Certified Web Exploitation Specialist 2025 | https://medium.com/@eldeim/cwes-review-certified-web-exploitation-specialist-2025-a78ce1ef8ef5?source=rss------bug_bounty-5 | eldeim | bug-bounty, web-hacking, cwe, cbbh, htb | 21-Sep-2025 |
| “The Hacker’s Rosetta Stone: Decoding HTTP to Unlock Critical Vulnerabilities” | https://infosecwriteups.com/the-hackers-rosetta-stone-decoding-http-to-unlock-critical-vulnerabilities-e8c4301404cf?source=rss------bug_bounty-5 | Aman Sharma | hacking, programming, bug-bounty, cybersecurity, technology | 21-Sep-2025 |
| Parameter Pollution Party: How Duplicate Keys Crashed the API & Spilled All the Secrets | https://infosecwriteups.com/parameter-pollution-party-how-duplicate-keys-crashed-the-api-spilled-all-the-secrets-f2352d6620ab?source=rss------bug_bounty-5 | Iski | infosec, money, bug-bounty, hacking, cybersecurity | 21-Sep-2025 |
| What I Wish I Knew When I Started Bug Bounty | https://medium.com/@hi.david60/what-i-wish-i-knew-when-i-started-bug-bounty-b5ed4e50b912?source=rss------bug_bounty-5 | 0xBruno | bug-bounty-tips, bug-bounty | 21-Sep-2025 |
| ALL About CORS (Cross-Origin Resource Sharing) | https://medium.com/@hrofficial62/all-about-cors-cross-origin-resource-sharing-44eda3a5c54d?source=rss------bug_bounty-5 | Mr Horbio | pentesting, cybersecurity, bug-bounty, penetration-testing, hacking | 21-Sep-2025 |
| Deep Web vs Dark Web — What’s Real and What’s Myth? | https://medium.com/@mohamednfe78/deep-web-vs-dark-web-whats-real-and-what-s-myth-228608aced86?source=rss------bug_bounty-5 | Mohamed.cybersec | hacking, cybersecurity, bug-bounty, darkweb, programming | 21-Sep-2025 |
| Bug Bounty as a Beginner: My 14-Day Struggle, Progress, and First Steps | https://medium.com/@likithgajula/bug-bounty-as-a-beginner-my-14-day-struggle-progress-and-first-steps-cca8b34973cb?source=rss------bug_bounty-5 | LIKITH GAJULA | student-life, bug-bounty, learning, ethical-hacking, cybersecurity | 21-Sep-2025 |
| Week 7 of My 90-Day Challenge: The Calm Before the Storm? | https://medium.com/@sl0th0x87/week-7-of-my-90-day-challenge-the-calm-before-the-storm-74bc4dea3231?source=rss------bug_bounty-5 | Mike (sl0th0x87) | about-me, cybersecurity, weekly-report, challenge, bug-bounty | 21-Sep-2025 |
| Uncovering Local File Inclusion Vulnerabilities: A Practical Approach to Path Traversal Hunting | https://pwn0sec.medium.com/uncovering-local-file-inclusion-vulnerabilities-a-practical-approach-to-path-traversal-hunting-f59fb9538f2e?source=rss------bug_bounty-5 | Kocheengtom | local-file-inclusion, vulnerability-analysis, bug-bounty, bug-bounty-tips, path-traversal | 21-Sep-2025 |
| It Felt Safe, Until the Last Click️ | https://medium.com/@zoningxtr/it-felt-safe-until-the-last-click-%EF%B8%8F-d1d75d0f1fcd?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, bug-bounty, programming, cybersecurity, horror | 21-Sep-2025 |
| Nueva comunidad en Discord para Bug Bounty y Pentesting | https://gorkaaa.medium.com/nueva-comunidad-en-discord-para-bug-bounty-y-pentesting-49f8f0a14a56?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bug-bounty, bug-bounty-writeup, bugbounty-writeup, bug-bounty-tips | 21-Sep-2025 |
| Lab: Exploiting origin server normalization for web cache deception | https://medium.com/@viodex02/lab-exploiting-origin-server-normalization-for-web-cache-deception-f9b38b46c9f0?source=rss------bug_bounty-5 | Viodex | bug-bounty | 21-Sep-2025 |
| Week 10—Learning Basic Concepts of Cybersecurity | https://infosecwriteups.com/week-10-learning-basic-concepts-of-cybersecurity-1638b6b19c84?source=rss------bug_bounty-5 | Aang | information-security, ethical-hacking, information-technology, bug-bounty, bug-bounty-tips | 21-Sep-2025 |
| Mastering Nmap (Part 5) in 2025: Timing & Performance Optimization | https://medium.com/@appsecvenue/mastering-nmap-part-5-in-2025-timing-performance-optimization-a2b98f187e0c?source=rss------bug_bounty-5 | appsecvenue | ethical-hacking, bug-bounty, network-security, nmap, cybersecurity | 21-Sep-2025 |
| Bug Bounty as a Beginner: My First 14-Days Struggle, Progress, and First Steps | https://medium.com/@likithgajula/bug-bounty-as-a-beginner-my-14-day-struggle-progress-and-first-steps-cca8b34973cb?source=rss------bug_bounty-5 | LIKITH GAJULA | student-life, bug-bounty, learning, ethical-hacking, cybersecurity | 21-Sep-2025 |
| Weird Endpoint Behavior — What it tells you | https://medium.com/@cybersecplayground/weird-endpoint-behavior-what-it-tells-you-b1be8200480e?source=rss------bug_bounty-5 | Cybersecplayground | endpoints, bug-bounty-tips, api, hacking, bug-bounty | 21-Sep-2025 |
| My First Bug: Email Enumeration via Password Reset | https://medium.com/@zouhairake/my-first-bug-email-enumeration-via-password-reset-9a6341a9fff3?source=rss------bug_bounty-5 | Zouhair Ake | cybersecurity, bug-bounty, my-first-bug, hackerone | 21-Sep-2025 |
| My Bug In Deleted Files Made Me $47,500 | https://medium.com/@ibtissamhammadi1/my-bug-in-deleted-files-made-me-47-500-e1f144981757?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, github, cybersecurity, programming, infosec | 21-Sep-2025 |
| Master WPScan in Bug Bounty: Essential Guide to Vulnerability Scanning | https://medium.com/meetcyber/master-wpscan-in-bug-bounty-essential-guide-to-vulnerability-scanning-6c68a4a19b3a?source=rss------bug_bounty-5 | JPablo13 | hacking, cybersecurity, technology, bug-bounty, wordpress | 20-Sep-2025 |
| Cheapest VPS for Bug Bounty & Pentesting | https://brutsecurity.medium.com/cheapest-vps-for-bug-bounty-pentesting-fc6686572ee3?source=rss------bug_bounty-5 | Saumadip Mandal | cybersecurity, vps-hosting, bug-bounty | 20-Sep-2025 |
| How i Bypass Subscription Limits by race condition vulnerability | https://medium.com/@abhisheksharma27082006/how-i-bypass-subscription-limits-by-race-condition-vulnerability-cecfaacd07e7?source=rss------bug_bounty-5 | Abhishek sharma | bug-bounty-writeup, bug-bounty, vulnerability, race-condition, bug-bounty-tips | 20-Sep-2025 |
| CVE-2023–29489 in Much Marcle Parish Council GOV.UK Website: A Cross-Site Scripting Vulnerability | https://0xhassan.medium.com/cve-2023-29489-in-much-marcle-parish-council-gov-uk-website-a-cross-site-scripting-vulnerability-45830b223c13?source=rss------bug_bounty-5 | Hassan Ali Arshad | xss-vulnerability, web-security, bug-bounty, cybersecurity, ethical-hacking | 20-Sep-2025 |
| Kerentanan Information Sensitive/disclosure (git exposure) pada Website Mabes TNI | https://medium.com/@alfarisyx/kerentanan-information-sensitive-disclsure-git-exposure-pada-website-mabes-tni-479ca4d067e3?source=rss------bug_bounty-5 | alfarisyx | bug-bounty-tips, information-security, bug-bounty | 20-Sep-2025 |
| 4 Ways AI is Quietly Revolutionizing Cybersecurity (And It’s Not What You Think) | https://medium.com/@ujjwal-sinha/4-ways-ai-is-quietly-revolutionizing-cybersecurity-and-its-not-what-you-think-bc76e0401e19?source=rss------bug_bounty-5 | Ujjwal Sinha | bug-bounty, reconnaissance, osint, application-security, ai | 20-Sep-2025 |
| Bug Bounty Programs and Responsible Disclosure | https://medium.com/@botumeren1/bug-bounty-programs-and-responsible-disclosure-0bc18bf6c64f?source=rss------bug_bounty-5 | Cyber Security Research | hacking, security, bug-bounty, vuln, disclosure | 20-Sep-2025 |
| CVE-2025–29927: Explotando un middleware vulnerable paso a paso | https://gorkaaa.medium.com/cve-2025-29927-explotando-un-middleware-vulnerable-paso-a-paso-e65a2a58f735?source=rss------bug_bounty-5 | Gorka | bugbounty-writeup, bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 20-Sep-2025 |
| How I Passed the eWPT in 1.5 Months: Study Strategy + Exam Tips | https://medium.com/@thirupathi5605/how-i-passed-the-ewpt-in-1-5-months-study-strategy-exam-tips-bc3ef417f28d?source=rss------bug_bounty-5 | T. Thirupathi | ewptv2, ewpt, bug-bounty | 20-Sep-2025 |
| Combining Web Cache Poisoning with X-Forwarded-Host and X-Original-URL Headers | https://infosecwriteups.com/combining-web-cache-poisoning-with-x-forwarded-host-and-x-original-url-headers-6d71d8d1f1f7?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, persistent-xss-via-cache, web-cache-poisoning, http-header-injection, cache-poisoning-attack | 20-Sep-2025 |
| The Silent Killer of App Security: Broken Access Controls:An Advanced Bug Hunter’s Guide | https://medium.com/@sa6648094/the-silent-killer-of-app-security-broken-access-controls-an-advanced-bug-hunters-guide-faabdb8ba36b?source=rss------bug_bounty-5 | Sh0X01 | bug-bounty, broken-access-control, bug-bounty-writeup, bugs, bug-bounty-tips | 20-Sep-2025 |
| Logical 2FA / Email Verification Bypass via Pre-2FA JWT Acceptance | https://medium.com/@mhmodgm54/logical-2fa-email-verification-bypass-via-pre-2fa-jwt-acceptanceintroduction-49f6b129fd32?source=rss------bug_bounty-5 | Mahmoud Gamal | penetration-testing, writeup, cybersecurity, bug-bounty, 2fa | 20-Sep-2025 |
| I Found A Security Flaw Just By Reading JavaScript Files | https://medium.com/@ibtissamhammadi1/i-found-a-security-flaw-just-by-reading-javascript-files-71c0be5b28d5?source=rss------bug_bounty-5 | Ibtissam hammadi | javascript, bug-bounty, web-security, cybersecurity, infosec | 20-Sep-2025 |
| The Hidden Password Cracking Tool That Every Cybersecurity Expert Uses (But Never Talks About)… | https://medium.com/@qaafqasim/the-hidden-password-cracking-tool-that-every-cybersecurity-expert-uses-but-never-talks-about-896af2d8fa2b?source=rss------bug_bounty-5 | Qasim Mahmood Khalid | cybersecurity, hacking, bug-bounty, programming, john-the-ripper | 19-Sep-2025 |
| Domina WPScan en Bug Bounty: Guía esencial para el escaneo de vulnerabilidades | https://medium.com/@jpablo13/domina-wpscan-en-bug-bounty-gu%C3%ADa-esencial-para-el-escaneo-de-vulnerabilidades-2d78e5003351?source=rss------bug_bounty-5 | JPablo13 | wordpress, hacking, cybersecurity, bug-bounty, technology | 19-Sep-2025 |
| From Query Param to Cookie Poisoning: How WAFs Fail at Security | https://medium.com/@blogwithsarthak/from-query-param-to-cookie-poisoning-how-wafs-fail-at-security-69f784822635?source=rss------bug_bounty-5 | Sarthak Saxena | security, bug-bounty, information-security, infosec, bugs | 19-Sep-2025 |
| CVE-2025–57644 — Remote Code Execution & SSRF in Accela | https://medium.com/@anvarkh/cve-2025-57644-remote-code-execution-ssrf-in-accela-eedc6bc4adfb?source=rss------bug_bounty-5 | Anvar | infosec, cve, bug-bounty, pentesting, cybersecurity | 19-Sep-2025 |
| The Secret Life of Subdomains : From Takeover to $$$ Bounties | https://infosecwriteups.com/the-secret-life-of-subdomains-from-takeover-to-bounties-24498e87f6c4?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, ai, tech, programming, cybersecurity | 19-Sep-2025 |
| From Recon to Root ⚡: A Beginner’s Journey Into CTF Hacking | https://infosecwriteups.com/from-recon-to-root-a-beginners-journey-into-ctf-hacking-575374698b02?source=rss------bug_bounty-5 | Vipul Sonule | tech, cybersecurity, hacking, bug-bounty, programming | 19-Sep-2025 |
| TO BECOME A SOC EXPERT(DAY-6) | https://medium.com/@VulnHunt3r/to-become-a-soc-expert-day-6-e8f880df0e48?source=rss------bug_bounty-5 | vulnhunter | bug-bounty, social-media, cybersecurity, ethical-hacking, self-awareness | 19-Sep-2025 |
| The Power of Open Source: This Week’s Critical Intelligence Wins with OSINT Techniques — VIEH… | https://vieh.medium.com/the-power-of-open-source-this-weeks-critical-intelligence-wins-with-osint-techniques-vieh-f1302bb9e01e?source=rss------bug_bounty-5 | VIEH Security Research Team | osint, hacking, cybersecurity, bug-bounty, ethical-hacking | 19-Sep-2025 |
| From Chaos to Command Center: The Birth Story of PentoraSec | https://medium.com/@security_61739/from-chaos-to-command-center-the-birth-story-of-pentorasec-e102f7f59794?source=rss------bug_bounty-5 | Pentora Security | bug-bounty, cybersecurity | 19-Sep-2025 |
| 17. My Favorite Bug Classes (and Why They Work) | https://infosecwriteups.com/17-my-favorite-bug-classes-and-why-they-work-b67a03ab8c43?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, idor, bug-bounty, cybersecurity, hacking | 19-Sep-2025 |
| Hidden Power of Race Conditions in Web Apps | https://medium.com/meetcyber/hidden-power-of-race-conditions-in-web-apps-f5633ba3463c?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, vulnerability, bug-bounty-writeup, bug-bounty, technology | 19-Sep-2025 |
| How I Uncovered an IDOR That Exposed Other Employee’s Personal Data | https://medium.com/@harikishorevp/idor-that-exposed-other-employees-personal-data-4ab9a85b9579?source=rss------bug_bounty-5 | Hari Kishore | bug-bounty, bug-bounty-tips, cybersecurity, web-application-security, bug-bounty-writeup | 19-Sep-2025 |
| Subdomain Enumeration Techniques | https://medium.com/@subhadeeptubu/subdomain-enumeration-techniques-94e3ae5348ef?source=rss------bug_bounty-5 | Subhadeep Pramanik | cybersecurity, bug-bounty, bugbounty-writeup, bug-bounty-tips, bugcrowd | 19-Sep-2025 |
| The Pivot Method: Technical Moves for Bug Hunters in Progress | https://vicricsec.medium.com/the-pivot-method-technical-moves-for-bug-hunters-in-progress-b767bcee8911?source=rss------bug_bounty-5 | Vicricsec | bug-bounty-tips, bug-bounty-writeup, cybersecurity, bugs, bug-bounty | 19-Sep-2025 |
| 7 AI + LLM Project Ideas Every Security Professional Should Try in 2025 | https://medium.com/@paritoshblogs/7-ai-llm-project-ideas-every-security-professional-should-try-in-2025-abc154cebeb4?source=rss------bug_bounty-5 | Paritosh | hacking, llm, security, bug-bounty, cybersecurity | 19-Sep-2025 |
| Account Takeover via Unicode-Encoded Email | https://medium.com/@sahilkatrodiyalwt2/account-takeover-via-unicode-encoded-email-d22c8febc274?source=rss------bug_bounty-5 | BAPPAYNE | penetration-testing, ethical-hacking, account-takeover-attacks, bug-bounty | 19-Sep-2025 |
| How to Specialize in API Bug Hunting: A Beginner’s Roadmap | https://medium.com/@sync-with-ivan/how-to-specialize-in-api-bug-hunting-a-beginners-roadmap-e26e87204c8b?source=rss------bug_bounty-5 | Andrei Ivan | api-security, cybersecurity, bug-bounty-tips, bug-bounty, ethical-hacking | 19-Sep-2025 |
| “Beyond the Obvious: Unearthing Hidden Subdomains for Better Bounties” | https://amannsharmaa.medium.com/beyond-the-obvious-unearthing-hidden-subdomains-for-better-bounties-1692e32e0aab?source=rss------bug_bounty-5 | Aman Sharma | money, cybersecurity, bug-bounty, technology, hacking | 19-Sep-2025 |
| HOW TO START BUG BOUNTY? A ROADMAP FOR ETHICAL HACKERS | https://medium.com/@loeyberryp/how-to-start-bug-bounty-a-roadmap-for-ethical-hackers-f26363317205?source=rss------bug_bounty-5 | Lumae | web-security, ethical-hacking, tech, cybersecurity, bug-bounty | 19-Sep-2025 |
| Advanced Bug Hunting: Tips, Tricks and Methodology | https://osintteam.blog/advanced-bug-hunting-tips-tricks-and-methodology-9962b05ee740?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty, technology, bug-bounty-writeup, bug-bounty-tips | 19-Sep-2025 |
| Day 7: How a 13-Year-Old Kid Found a Bug in Google | https://medium.com/@viratavi1223/how-a-13-year-old-kid-found-a-bug-in-google-086fcd84227a?source=rss------bug_bounty-5 | Viratavi | web-security, cybersecurity, ethical-hacking, bug-bounty, google | 19-Sep-2025 |
| Stored XSS in Email Notifications on Insightly CRM | https://medium.com/@regan_temudo/stored-xss-in-email-notifications-on-insightly-crm-8088ab4eaa2c?source=rss------bug_bounty-5 | Regan Temudo | bug-bounty, web-security, xss-attack, hacking, cybersecurity | 19-Sep-2025 |
| 5 Easy Cybersecurity Tasks That Can Pay Your Rent | https://medium.com/meetcyber/5-easy-cybersecurity-tasks-that-can-pay-your-rent-159432b2d71a?source=rss------bug_bounty-5 | vydhi | side-hustle, bug-bounty, cybersecurity, freelancing, make-money-online | 19-Sep-2025 |
| Bug Bounty Bootcamp — Chapter 4 | https://clawshea.medium.com/bug-bounty-bootcamp-chapter-4-653b232a34d6?source=rss------bug_bounty-5 | C. Oscar Lawshea | kali-linux, pentesting, ethical-hacking, bug-bounty, cybersecurity | 19-Sep-2025 |
| Weaponizing Burp Intruder: Credential Stuffing done Right | https://medium.com/@dr_1n-ctrl/weaponizing-burp-intruder-credential-stuffing-done-right-f91fa3121bb9?source=rss------bug_bounty-5 | Dr1nCtrl | bug-bounty-writeup, bug-bounty-tips, web-development, bug-bounty, cybersecurity | 19-Sep-2025 |
| How I Turned Forgotten Internet Archives into a Critical Account Takeover Vulnerability | https://medium.com/@ahmednasser211022/how-i-turned-forgotten-internet-archives-into-a-critical-account-takeover-vulnerability-9cfc846f0685?source=rss------bug_bounty-5 | Ahmed Nasser | web-security, ethical-hacking, cybersecurity, bug-bounty, information-security | 19-Sep-2025 |
| I HACKED testphp.vulnweb.com #CyberKalki #infosec | https://medium.com/@krivadna/i-hacked-testphp-vulnweb-com-cyberkalki-infosec-212ae043e8e8?source=rss------bug_bounty-5 | Krivadna | penetration-testing, bugbounty-writeup, bug-bounty, cybersecurity | 18-Sep-2025 |
| How to Capture Evidence in Penetration Testing: A Practical Guide for Pentesters | https://medium.com/@vivekbhatt2002/how-to-capture-evidence-in-penetration-testing-a-practical-guide-for-pentesters-0ea84e030c7f?source=rss------bug_bounty-5 | Vivek Bhatt | cybersecurity, bug-bounty, information-technology, penetration-testing, ethical-hacking | 18-Sep-2025 |
| CVE-2025–55912 — ClipBucket ≤ 5.5.0 — Unauthenticated Arbitrary File Upload → RCE | https://medium.com/@mukund.s1337/cve-2025-55912-clipbucket-5-5-0-unauthenticated-arbitrary-file-upload-rce-720c0c0fbc58?source=rss------bug_bounty-5 | Mukundsinh Solanki | penetration-testing, exploit, cybersecurity, web-security, bug-bounty | 18-Sep-2025 |
| CVE-2025–55911 — ClipBucket 5.5.2 Build #90 — SSRF via upload/actions/file_downloader.php | https://medium.com/@mukund.s1337/cve-2025-55911-clipbucket-5-5-2-build-90-ssrf-via-upload-actions-file-downloader-php-eb49dc02bd6f?source=rss------bug_bounty-5 | Mukundsinh Solanki | exploit, bug-bounty, web-penetration-testing, cybersecurity, hacking | 18-Sep-2025 |
| Identification and Authentication Failures: Why Weak Logins Still Break Security | https://medium.com/@cybersenpai/identification-and-authentication-failures-why-weak-logins-still-break-security-343fa9135639?source=rss------bug_bounty-5 | CyberSenpai | information-security, owasp, cybersecurity, penetration-testing, bug-bounty | 18-Sep-2025 |
| You’re using GPT-5 wrong for hacking. Here’s how to be ahead of 99% of bug hunters | https://infosecwriteups.com/youre-using-gpt-5-wrong-for-hacking-here-s-how-to-be-ahead-of-99-of-bug-hunters-db96ee3587e7?source=rss------bug_bounty-5 | Satyam Pathania | hacking, bug-bounty, cybersecurity, ai, gpt-5 | 18-Sep-2025 |
| Broken JWTs, Open Doors: How I Turned ‘None’ Algorithm into Full Admin Access | https://medium.com/@iski/broken-jwts-open-doors-how-i-turned-none-algorithm-into-full-admin-access-d78113df7ef5?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, money, infosec, bug-bounty | 18-Sep-2025 |
| QR Code IDOR Vulnerability in Razorpay | https://infosecwriteups.com/qr-code-idor-vulnerability-in-razorpay-af1396dbf2af?source=rss------bug_bounty-5 | Narayanan M | hackerone, payment-gateway-security, idor, osint, bug-bounty | 18-Sep-2025 |
| My approach of subdomain takeover that pointing to Fastly (DNS Hijacking) | https://l1ackernishan.medium.com/my-approach-of-subdomain-takeover-that-pointing-to-fastly-dns-hijacking-6e6bdda84d7c?source=rss------bug_bounty-5 | Nishan Faiyaz | dns, cybersecurity, bug-bounty | 18-Sep-2025 |
| A golden Code for Automated Recon — Bug Bounty | https://infosecwriteups.com/a-golden-code-for-automated-recon-bug-bounty-c97e28ae4e59?source=rss------bug_bounty-5 | Swetha | hacking, bug-bounty, bug-bounty-tips, automation, coding | 18-Sep-2025 |
| How I get 1000$ bounty for Discovering Account Takeover in Android Application | https://teamdh49.medium.com/how-i-get-1000-bounty-for-discovering-account-takeover-in-android-application-34562fadc469?source=rss------bug_bounty-5 | TEAM DH49 | bug-bounty-tips, bugs, bug-zero, bug-bounty, ethical-hacking | 18-Sep-2025 |
| Hidden, Persistent Editor: a business-logic flaw I love. | https://medium.com/@ayman_amer_1/hidden-persistent-editor-a-business-logic-flaw-i-love-25a742f4d6c3?source=rss------bug_bounty-5 | ayman Amer | bug-bounty | 18-Sep-2025 |
| From Casual Scrolling to Bug Bounty: My Unexpected Instagram Bug | https://errorsec.medium.com/from-casual-scrolling-to-bug-bounty-my-unexpected-instagram-bug-960f76383f72?source=rss------bug_bounty-5 | errorsec_ | bug-bounty, cybersecurity, meta-bug-bounty, information-security | 18-Sep-2025 |
| Privilege Escalation (Viewer → Owner) — Bypass of Their Fix | https://medium.com/@ayman_amer_1/privilege-escalation-viewer-owner-bypass-of-their-fix-ad59a1a12fd6?source=rss------bug_bounty-5 | ayman Amer | bug-bounty | 18-Sep-2025 |
| Bounty Lab 2 | Writeup by InferiorAK | RCSC | https://osintteam.blog/bounty-lab-2-writeup-by-inferiorak-rcsc-6d31cb644411?source=rss------bug_bounty-5 | InferiorAK | javascript, bug-bounty, xss-attack, bug-bounty-writeup, xss-vulnerability | 18-Sep-2025 |
| Mastering Reconnaissance Techniques: A Step-by-Step Guide to Uncovering Digital Assets | https://medium.com/@bhuwamdixit/mastering-reconnaissance-techniques-a-step-by-step-guide-to-uncovering-digital-assets-04d6a1535676?source=rss------bug_bounty-5 | BHUWAM DIXIT | bug-bounty-writeup, reconnaissance, vapt, bug-bounty, bug-bounty-tips | 18-Sep-2025 |
| Discover How to Access Emails Without Any Password | https://medium.com/@ibtissamhammadi1/discover-how-to-access-emails-without-any-password-5004e7be1fbd?source=rss------bug_bounty-5 | Ibtissam hammadi | infosec, reconnaissance, ethical-hacking, cybersecurity, bug-bounty | 18-Sep-2025 |
| From Hacking Systems for Fun to Securing Millions: My Journey Through Both Sides of the Firewall | https://anuragmewar.medium.com/from-hacking-systems-for-fun-to-securing-millions-my-journey-through-both-sides-of-the-firewall-60c842120797?source=rss------bug_bounty-5 | Anurag Mewar | hacking, bug-bounty, software-development, security, api | 18-Sep-2025 |
| $5,000 por este RCE en Netflix: subida de PHP camuflado como GIF | https://gorkaaa.medium.com/5-000-por-este-rce-en-netflix-subida-de-php-camuflado-como-gif-cfaec6c75683?source=rss------bug_bounty-5 | Gorka | bug-bounty, bugbounty-writeup, bug-bounty-tips, bug-bounty-hunter, best-bug-bounty-tips | 18-Sep-2025 |
| Learn “Cryptographic Failure Attack” — OWASP Top 10 (Position #2) | https://medium.com/@rashad.desk/learn-cryptographic-failure-attack-owasp-top-10-position-2-ad3c7d5bee4e?source=rss------bug_bounty-5 | Rashadul Islam | hacking, cybersecurity, bug-bounty, technology, owasp-top-10 | 18-Sep-2025 |
| Who Needs Admin Rights When You’ve Got Bugs? | https://medium.com/legionhunters/who-needs-admin-rights-when-youve-got-bugs-ee71611b8bae?source=rss------bug_bounty-5 | #$ubh@nk@r | bug-bounty, security, web-security, hacking, owasp | 18-Sep-2025 |
| String Me Along: How a Single Quote Unraveled a Site’s Security | https://medium.com/@buffer2091/string-me-along-how-a-single-quote-unraveled-a-sites-security-2e71ec4534e6?source=rss------bug_bounty-5 | Buffer | bug-bounty, hacking, xss-vulnerability, bug-bounty-writeup, xss-attack | 18-Sep-2025 |
| “Unearthing Digital Gold: A Practical Guide to Finding Bugs in JavaScript Files” | https://infosecwriteups.com/unearthing-digital-gold-a-practical-guide-to-finding-bugs-in-javascript-files-1e6338c73899?source=rss------bug_bounty-5 | Aman Sharma | cybersecurity, bug-bounty, hacking, programming, technology | 18-Sep-2025 |
| Advanced OAuth Secrets Leads To Account Takeover(ATO) | https://medium.com/legionhunters/advanced-oauth-secrets-leads-to-account-takeover-ato-42ff288a7763?source=rss------bug_bounty-5 | Mado | penetration-testing, bug-bounty-tips, information-security, technical-writing, bug-bounty | 18-Sep-2025 |
| Build Your Ultimate Bug Bounty Recon Server for FREE with Oracle Cloud | https://medium.com/@curiouskhanna/build-your-ultimate-bug-bounty-recon-server-for-free-with-oracle-cloud-7b51d0cc2440?source=rss------bug_bounty-5 | Shubham Khanna | bug-bounty, cybersecurity, oracle-cloud | 18-Sep-2025 |
| Stored HTML Injection in Emails | https://sarv3shxploit.medium.com/stored-html-injection-in-emails-fdfa0a8524fe?source=rss------bug_bounty-5 | Sarv3shxploit | web-security, bug-bounty, cybersecurity, ethical-hacking, vulnerability-disclosure | 18-Sep-2025 |
| Top Free Cybersecurity Courses for Beginners | https://medium.com/@rashad.desk/top-free-cybersecurity-courses-for-beginners-3a749039d25b?source=rss------bug_bounty-5 | Rashadul Islam | free-course, bug-bounty, technology, cybersecurity, careers | 18-Sep-2025 |
| 10 Istilah IT yang Sering Kamu Dengar (dan Artinya) | https://medium.com/@jadihacker/10-istilah-it-yang-sering-kamu-dengar-dan-artinya-4a8cd5d1b22d?source=rss------bug_bounty-5 | Jadi Hacker | malware, cybersecurity, servers, cloud, bug-bounty | 18-Sep-2025 |
| Advanced OAuth Secrets Leads To Account Takeover(ATO) | https://medium.com/@0xMado-1Tap/advanced-oauth-secrets-leads-to-account-takeover-ato-42ff288a7763?source=rss------bug_bounty-5 | Mado | penetration-testing, bug-bounty-tips, information-security, technical-writing, bug-bounty | 18-Sep-2025 |
| Easiest Account Lockout Bypass | https://medium.com/@manav_24/easiest-account-lockout-bypass-ea2c82fb66c6?source=rss------bug_bounty-5 | Manav | bug-bounty-tips, red-team, pentesting, offensive-security, bug-bounty | 17-Sep-2025 |
| Complete Guide to Masscan: High-Speed Port Scanning for Cybersecurity Professionals | https://medium.com/meetcyber/complete-guide-to-masscan-high-speed-port-scanning-for-cybersecurity-professionals-9bb4f61c6173?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, penetration-testing, hacking, cybersecurity, technology | 17-Sep-2025 |
| ️ The Broken Link Jackpot: How a 404 Can Become a Security Goldmine! | https://medium.com/@somnadh0000/%EF%B8%8F-the-broken-link-jackpot-how-a-404-can-become-a-security-goldmine-16ac517fccda?source=rss------bug_bounty-5 | NadSec | penetration-testing, bug-bounty, vapt, cybersecurity, web-application-security | 17-Sep-2025 |
| 16. Real Bug Bounty Stories (from My Reports) | https://infosecwriteups.com/16-real-bug-bounty-stories-from-my-reports-52e1f7535ef7?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, secrets, medium, hacking, bug-bounty | 17-Sep-2025 |
| Web Cache Poisoning to Exploit a DOM Vulnerability via a Cache With Strict Cacheability Criteria | https://infosecwriteups.com/web-cache-poisoning-to-exploit-a-dom-vulnerability-via-a-cache-with-strict-cacheability-criteria-a357c62bba7d?source=rss------bug_bounty-5 | Bash Overflow | web-cache-poisoning, bug-bounty, bypass-strict-cache, dom-based-xss-via-cache, cache-poisoning-attack | 17-Sep-2025 |
| TO BECOME A SOC EXPERT(DAY-5) | https://medium.com/@VulnHunt3r/to-become-a-soc-expert-day-5-7aa65ed6da5d?source=rss------bug_bounty-5 | vulnhunter | generative-ai-tools, bug-bounty, cybersecurity, social-media, ctf | 17-Sep-2025 |
| Cross-Tenant Payment Method Manipulation via IDOR | https://medium.com/@hi.david60/cross-tenant-payment-method-manipulation-via-idor-88c909f60632?source=rss------bug_bounty-5 | 0xBruno | bug-bounty-writeup, bug-bounty | 17-Sep-2025 |
| Unauthorized Configuration Deletion via CORS Misconfiguration on an Industrial Platform | https://medium.com/@hi.david60/unauthorized-configuration-deletion-via-cors-misconfiguration-on-an-industrial-platform-40ff6528d099?source=rss------bug_bounty-5 | 0xBruno | bug-bounty-writeup, ethical-hacking, bug-bounty | 17-Sep-2025 |
| Avoiding Burnout: How I Stay Motivated After Endless N/A and Duplicates | https://medium.com/@hxxfrd73/avoiding-burnout-how-i-stay-motivated-after-endless-n-a-and-duplicates-6647756b71ff?source=rss------bug_bounty-5 | hxxfrd | bug-bounty-tips, ethical-hacking, bug-bounty-writeup, bug-bounty, cybersecurity | 17-Sep-2025 |
| How to Choose Your Next Target: A Data-Driven Approach for Bug Hunters | https://medium.com/@hxxfrd73/how-to-choose-your-next-target-a-data-driven-approach-for-bug-hunters-98a0bff6c4dc?source=rss------bug_bounty-5 | hxxfrd | cybersecurity, bug-bounty, bug-bounty-tips, ethical-hacking, bug-bounty-writeup | 17-Sep-2025 |
| Insecure Design Explained: How Poor Planning Creates Massive Security Risks | https://medium.com/@cybersenpai/insecure-design-explained-how-poor-planning-creates-massive-security-risks-5a029209f1aa?source=rss------bug_bounty-5 | CyberSenpai | owasp, bug-bounty, cybersecurity, penetration-testing, information-security | 17-Sep-2025 |
| Privacy Alert for ChatGPT Users: Delete Old Share Links & Clear Cached Chats | https://infosecwriteups.com/privacy-alert-for-chatgpt-users-delete-old-share-links-clear-cached-chats-271219d78535?source=rss------bug_bounty-5 | Shah kaif | information-security, bug-bounty, cybersecurity, security, chatgpt | 17-Sep-2025 |
| “How I Bank $1k+ a Month Finding Bugs Everyone Ignores” | https://amannsharmaa.medium.com/how-i-bank-1k-a-month-finding-bugs-everyone-ignores-499a6d2cd1cb?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, technology, money, programming, cybersecurity | 17-Sep-2025 |
| How I Discovered a Website’s Hidden Origin IP | https://medium.com/@ibtissamhammadi1/how-i-discovered-a-websites-hidden-origin-ip-6f29301abc93?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, web-security, technology, cybersecurity, reconnaissance | 17-Sep-2025 |
| UUIDv1 And Sandwich Attacks | https://medium.com/@offsec12/uuidv1-and-sandwich-attacks-2ab3d69cffdd?source=rss------bug_bounty-5 | Diman | cybersecurity, bug-bounty, technology, uuid | 17-Sep-2025 |
| The Best Free Learning Resources for New Bug Hunters | https://medium.com/meetcyber/the-best-free-learning-resources-for-new-bug-hunters-a0498ed19e72?source=rss------bug_bounty-5 | Andrei Ivan | cybersecurity, bug-bounty, penetration-testing, web-security, ethical-hacking | 17-Sep-2025 |
| How to Start Bug Bounty Learning Journey with Hack The Box | https://medium.com/@rashad.desk/how-to-start-bug-bounty-learning-journey-with-hack-the-box-277f92d8150e?source=rss------bug_bounty-5 | Rashadul Islam | hacking, hackathons, cybersecurity, bug-bounty, hackthebox | 17-Sep-2025 |
| Guía completa de Masscan: Escaneo de puertos a alta velocidad para profesionales de ciberseguridad | https://medium.com/@jpablo13/gu%C3%ADa-completa-de-masscan-escaneo-de-puertos-a-alta-velocidad-para-profesionales-de-ciberseguridad-6b0fa492433b?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, hacking, technology, penetration-testing, cybersecurity | 16-Sep-2025 |
| Web shell upload via path traversal (Portswigger Lab Walkthrough) | https://medium.com/@cybernerddd/web-shell-upload-via-path-traversal-portswigger-lab-walkthrough-dc009a66c350?source=rss------bug_bounty-5 | Cybernerddd | cybersecurity, portswigger, bug-bounty, web-app-security, hacking | 16-Sep-2025 |
| TO BECOME A SOC EXPERT(DAY-4) | https://medium.com/@VulnHunt3r/to-become-a-soc-expert-day-4-54d9ba95acee?source=rss------bug_bounty-5 | vulnhunter | technology, social-media, bug-bounty, ethical-hacking, cybersecurity | 16-Sep-2025 |
| When a Chatbot Becomes an Impostor | https://medium.com/@devanshpatel930/when-a-chatbot-becomes-an-impostor-736eedb29373?source=rss------bug_bounty-5 | Devansh Patel | cybersecurity, bug-bounty-writeup, bug-bounty, cyber-security-awareness, bug-bounty-tips | 16-Sep-2025 |
| ️ Ghost Subdomain: How I Became an Accidental Cloud Landlord Through Abandoned DNS Records | https://medium.com/@iski/%EF%B8%8F-ghost-subdomain-how-i-became-an-accidental-cloud-landlord-through-abandoned-dns-records-23e18afaa087?source=rss------bug_bounty-5 | Iski | money, bug-bounty, cybersecurity, hacking, infosec | 16-Sep-2025 |
| Gemini Pro’s Student Verification Loophole: A Bug, or a Feature? | https://jasim0021.medium.com/gemini-pros-student-verification-loophole-a-bug-or-a-feature-f2d425d33925?source=rss------bug_bounty-5 | Skjasimuddin | google-gemini-pro, bug-bounty, vulnerability-disclosure, cybersecurity, google | 16-Sep-2025 |
| Bug Bounty: Bypass — Forgot Password Verification | https://medium.com/@defidev59/bug-bounty-bypass-forgot-password-verification-69bb8935fb98?source=rss------bug_bounty-5 | Defidev | bug-bounty, cybersecurity, bug-bounty-writeup, bugs, bug-bounty-tips | 16-Sep-2025 |
| The Most Popular Cyberspace Search Engine — ZoomEye | https://medium.com/@liuliuliusq/the-most-popular-cyberspace-search-engine-zoomeye-c682b292ea72?source=rss------bug_bounty-5 | Liuliuliusq | cve, osint, bug-bounty, cybersecurity | 16-Sep-2025 |
| The CTF That Broke Me | https://medium.com/@Daniels_journey/the-ctf-that-broke-me-e47769b954dc?source=rss------bug_bounty-5 | Daniel's journey | bug-bounty, ctf, overthinking, cybersecurity, motivation | 16-Sep-2025 |
| Blind XSS with AI | https://medium.com/offensive-black-hat-hacking-security/blind-xss-with-ai-6daff41b807f?source=rss------bug_bounty-5 | Harshad Shah | bug-bounty, penetration-testing, hacking, infosec, cybersecurity | 16-Sep-2025 |
| Why companies are paying hackers ? Everything about Bug Bounties— for enthusiasts students! | https://bianca-cybersecurity-insights.medium.com/why-companies-are-paying-hackers-everything-about-bug-bounties-for-enthusiasts-students-63170920ffb9?source=rss------bug_bounty-5 | Bianca's CyberSecurity Insights | information-technology, bug-bounty, technology, students, cybersecurity | 16-Sep-2025 |
| One Number, One Change: How I Took Over an Account Using Local Storage | https://medium.com/@forte.social/one-number-one-change-how-i-took-over-an-account-using-local-storage-afe59c5d2f7e?source=rss------bug_bounty-5 | eSecForte Technologies | security, hacking, bug-bounty, testing, cybersecurity | 16-Sep-2025 |
| The Unfiltered 2025 Guide to Web Pentesting & Bug Bounties: From Zero to Hired | https://brutsecurity.medium.com/the-unfiltered-2025-guide-to-web-pentesting-bug-bounties-from-zero-to-hired-24b3ffb10bc9?source=rss------bug_bounty-5 | Saumadip Mandal | web-penetration-testing, bug-bounty, cybersecurity | 16-Sep-2025 |
| From Subdomain Scan to Hall of Fame | https://anupamsimonmasih.medium.com/from-subdomain-scan-to-hall-of-fame-1542f20c78e4?source=rss------bug_bounty-5 | Anupam Masih | computer-security, bug-bounty, cybersecurity, bug-bounty-tips, hacking | 16-Sep-2025 |
| Escalating LFI/SSRF via Linux Local Processes Enumeration | https://medium.com/@RandomFlawsFinder/escalating-lfi-ssrf-via-linux-local-processes-enumeration-e522d0ffd6df?source=rss------bug_bounty-5 | RandomFlawsFinder | hacking, computer-science, penetration-testing, bug-bounty, linux | 16-Sep-2025 |
| How a Single Server Mistake Broke Our CORS Policy | https://medium.com/@yr9364536/how-a-single-server-mistake-broke-our-cors-policy-27e24b7c4eb7?source=rss------bug_bounty-5 | Yahia Ibrahim khamis | cors, bug-bounty, hacking, web-penetration-testing, cybersecurity | 16-Sep-2025 |
| CTF → Pentest: Translating CTF Patterns into Real-World Exploits | https://infosecwriteups.com/ctf-pentest-translating-ctf-patterns-into-real-world-exploits-c74ba79dcf4e?source=rss------bug_bounty-5 | Aditya Bhatt | bug-bounty, bug-bounty-tips, capture-the-flag, cybersecurity, ctf | 16-Sep-2025 |
| Bug Bounty Explotando el CVE-2025–29927: middleware vulnerable paso a paso | https://gorkaaa.medium.com/bug-bounty-explotando-el-cve-2025-29927-middleware-vulnerable-paso-a-paso-1a36f9478fe6?source=rss------bug_bounty-5 | Gorka | bug-bounty, bugbounty-writeup, bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup | 16-Sep-2025 |
| How AI Chat Bot Help Me To Hack The Website | https://medium.com/@yr9364536/how-ai-chat-bot-help-me-to-hack-the-website-632e6afd1b35?source=rss------bug_bounty-5 | Yahia Ibrahim khamis | cybersecurity, open-redirect, stored-xss, bug-bounty, web-cache-poisoning | 16-Sep-2025 |
| How Bug Hunters Can Find Off-Platform Apps — Privately, Ethically, and Legally — and Get to the… | https://medium.com/@dexblood.reza/how-bug-hunters-can-find-off-platform-apps-privately-ethically-and-legally-and-get-to-the-6e0feabf25e9?source=rss------bug_bounty-5 | rezasafarzade | cybersecurity, students, bug-bounty, bugbounty-tips | 16-Sep-2025 |
| When “Delete for Everyone” Doesn’t Delete: My Experience Reporting a Vulnerability in WhatsApp Web | https://medium.com/@bruzistico_/when-delete-for-everyone-doesnt-delete-my-experience-reporting-a-vulnerability-in-whatsapp-web-7e9d86e74134?source=rss------bug_bounty-5 | Bruzistico | vulnerability, meta, bug-bounty, whatapp, information-security | 16-Sep-2025 |
| 7 Cyber Attacks That Could Happen to You Right Now (And How to Stay Safe) | https://medium.com/@paritoshblogs/7-cyber-attacks-that-could-happen-to-you-right-now-and-how-to-stay-safe-1119cba7b4f1?source=rss------bug_bounty-5 | Paritosh | ransomware, bug-bounty, cybersecurity, phishing, information-security | 15-Sep-2025 |
| TO BECOME A SOC EXPERT(DAY-3) | https://medium.com/@VulnHunt3r/to-become-a-soc-expert-day3-9b19398926e0?source=rss------bug_bounty-5 | vulnhunter | cybersecurity, ethical-hacking, bug-bounty, social-media, google | 15-Sep-2025 |
| Reflections of Doom: How a Tiny DOM XSS Turned Into Complete Account Takeover | https://medium.com/@iski/reflections-of-doom-how-a-tiny-dom-xss-turned-into-complete-account-takeover-2318f116f257?source=rss------bug_bounty-5 | Iski | money, cybersecurity, infosec, hacking, bug-bounty | 15-Sep-2025 |
| Beginner’s Guide: API Pentesting with Postman + Burp | https://medium.com/@gowthami09027/beginners-guide-api-pentesting-with-postman-burp-fc2417b0c50a?source=rss------bug_bounty-5 | Blue_eye | pentesting, api, penetration-testing, bug-bounty, hacking | 15-Sep-2025 |
| ⌛ Pending Invite Hijack — Takeover via Improper Identity Linking | https://medium.com/@bassemwanies2002/pending-invite-hijack-takeover-via-improper-identity-linking-905619fff772?source=rss------bug_bounty-5 | Bassemwanies | red-team, bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty | 15-Sep-2025 |
| Bug Bounty for Nuclei Template Contribution | https://medium.com/meetcyber/bug-bounty-for-nuclei-template-contribution-f7cdb38c2436?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, cybersecurity, bug-bounty, ethical-hacking, nuclei-template | 15-Sep-2025 |
| Healthcheck in the Wild — How an Unauthenticated Endpoint Leaked Internal Server Details | https://medium.com/@bassemwanies2002/healthcheck-in-the-wild-how-an-unauthenticated-endpoint-leaked-internal-server-details-0d4d4a3374ea?source=rss------bug_bounty-5 | Bassemwanies | bug-bounty-tips, bug-bounty, cybersecurity, bugbounty-writeup, bug-bounty-writeup | 15-Sep-2025 |
| The Linux Starter Pack: Everything You Need to Begin | https://medium.com/@21bec131/the-linux-starter-pack-everything-you-need-to-begin-6d2a10b5c7c6?source=rss------bug_bounty-5 | Tanvi Chauhan | cybersecurity, introduction, linux, security, bug-bounty | 15-Sep-2025 |
| Secrets in Plain Sight: How I Found a Hardcoded API Key in a Public JS File | https://medium.com/@bassemwanies2002/secrets-in-plain-sight-how-i-found-a-hardcoded-api-key-in-a-public-js-file-51656593bbb9?source=rss------bug_bounty-5 | Bassemwanies | bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup | 15-Sep-2025 |
| Bug Bounty: Finding the testing focus by filtering for the amount of URL paths | https://medium.com/@smilemil/bug-bounty-finding-the-testing-focus-by-filtering-for-the-amount-of-url-paths-46eb7d65f8f0?source=rss------bug_bounty-5 | smilemil | bug-bounty-tool, bug-bounty | 15-Sep-2025 |
| 15. Bug Bounty Mindset: How to Think Like a Hacker | https://infosecwriteups.com/15-bug-bounty-mindset-how-to-think-like-a-hacker-9d3e413be5ab?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, bug-bounty, mindset, cybersecurity, infosec | 15-Sep-2025 |
| The Journey Begins: 14 Days of Bug Bounty Learning | https://medium.com/@likithgajula/the-journey-begins-14-days-of-bug-bounty-learning-e30c23a51d3d?source=rss------bug_bounty-5 | LIKITH GAJULA | bug-bounty, learning-in-public, cybersecurity, student-learning, infosec | 15-Sep-2025 |
| Secret ChatGPT Prompts That 10x My Bug Bounty Success Rate ⚡ | https://systemweakness.com/secret-chatgpt-prompts-that-10x-my-bug-bounty-success-rate-44b10dd0e662?source=rss------bug_bounty-5 | Qasim Mahmood Khalid | cybersecurity, hacking, bug-bounty, programming, chatgpt | 15-Sep-2025 |
| Day 3 — My Browser Engine Just Spoke to Google | https://medium.com/@viratavi1223/day-3-my-browser-engine-just-spoke-to-google-4b652864f67c?source=rss------bug_bounty-5 | Viratavi | rust, hacking, tech-innovation, cybersecurity, bug-bounty | 15-Sep-2025 |
| Gmail OAuth Enforcement Bypass 100$ deal. | https://ch1ta.medium.com/gmail-oauth-enforcement-bypass-100-deal-4644a9a3ebe6?source=rss------bug_bounty-5 | Lakshya | cybersecurity, security, bug-bounty-writeup, oauth, bug-bounty | 15-Sep-2025 |
| From Zero To Burp Suite Certified Practitioner aka BSCP : My journey and my tips ⚡ | https://medium.com/@alexandrollemana/from-zero-to-burp-suite-certified-practitioner-aka-bscp-my-journey-and-my-tips-acbfc9dab8ab?source=rss------bug_bounty-5 | JAIME | certification, portswigger, burpsuite, bug-bounty, hacking | 15-Sep-2025 |
| Don’t Waste Your Time on Social Media or Fake Online Course!: | https://medium.com/@number01/dont-waste-your-time-on-social-media-or-fake-online-course-febfc9cb21e4?source=rss------bug_bounty-5 | The Secret Researcher | bug-bounty, bug-bounty-tips, stopscampeople | 15-Sep-2025 |
| How I Found My First Critical Security Flaw in 48 Hours | https://medium.com/@ibtissamhammadi1/how-i-found-my-first-critical-security-flaw-in-48-hours-cf597b1e42fb?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, reconnaissance, cybersecurity, apache, bug-bounty | 15-Sep-2025 |
| The Hacker’s Mindset — No Butter, Just Strategy | https://medium.com/@gabbytech01/the-hackers-mindset-no-butter-just-strategy-dadd5e0b831c?source=rss------bug_bounty-5 | GABBYTECH | penetration-testing, bug-bounty, cybersecurity, ethical-hacking | 15-Sep-2025 |
| BurpSuite vs Caido: Rethinking Proxy Tools for Bug Hunters | https://infosecwriteups.com/burpsuite-vs-caido-rethinking-proxy-tools-for-bug-hunters-52d1a7ac832c?source=rss------bug_bounty-5 | Ehtesham Ul Haq | penetration-testing, ethical-hacking, bug-bounty, caido, burpsuite | 15-Sep-2025 |
| Learning Bug Bounty — Day 4: Exploring Burp Suite | https://medium.com/@vikram005500/learning-bug-bounty-day-4-exploring-burp-suite-aafb27c9b63b?source=rss------bug_bounty-5 | Vikram Budania | learning, cybersecurity, bug-bounty, ethical-hacking, web-security | 15-Sep-2025 |
| Account Takeover vía endpoint de reset password: cuando el sistema te regala el acceso | https://gorkaaa.medium.com/account-takeover-v%C3%ADa-endpoint-de-reset-password-cuando-el-sistema-te-regala-el-acceso-2f5b619edfb8?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, bug-bounty-hunter, bug-bounty-tips, bug-bounty, bugbounty-writeup | 15-Sep-2025 |
| Building An Offensive Security AI Agent - Part 2 | https://infosecwriteups.com/building-an-offensive-security-ai-agent-part-2-d3fa197c4d20?source=rss------bug_bounty-5 | OTR | penetration-testing, bug-bounty, red-team, ai, hacking | 15-Sep-2025 |
| How a Shared Upload URL Let Me Take Over qaAccounts | https://medium.com/@abhisheksharma27082006/how-a-shared-upload-url-let-me-take-over-qaaccounts-9298be10e342?source=rss------bug_bounty-5 | Abhishek sharma | bug-bounty, bugs, bug-bounty-tips, bug-bounty-writeup | 15-Sep-2025 |
| “The Lazy Hacker’s Guide to $500 Information Disclosure Bugs” | https://infosecwriteups.com/the-lazy-hackers-guide-to-500-information-disclosure-bugs-b45f9472725e?source=rss------bug_bounty-5 | Aman Sharma | cybersecurity, bug-bounty, money, technology, hacking | 15-Sep-2025 |
| How I Got My First Valid Bug (and Yes, It Was Just a ') | https://medium.com/@harshilsecops/how-i-got-my-first-valid-bug-and-yes-it-was-just-a-7347f5d2a120?source=rss------bug_bounty-5 | Harshilsecops | bug-bounty, cybersecurity, bug-bounty-writeup, first-bug | 15-Sep-2025 |
| WAF Bypass + XSS + Business Logic Flaw = Account Takeover | https://medium.com/@ghostxploiter/waf-bypass-xss-business-logic-flaw-account-takeover-04577cb53b18?source=rss------bug_bounty-5 | Ali Hussain | business-logic-flaw, waf-bypass, bug-bounty, xss-attack, account-takeover | 15-Sep-2025 |
| I Started Bug Hunting on an External Program… And Accidentally Collected 5 Bounties (5 Bugs… | https://medium.com/@k4r33m/i-started-bug-hunting-on-an-external-program-and-accidentally-collected-5-bounties-5-bugs-cfc87f105144?source=rss------bug_bounty-5 | K4r33m | bugs, bug-bounty, ethical-hacking, bug-bounty-writeup, bug-bounty-tips | 15-Sep-2025 |
| First Blood in Cyshield CTF (Helwan University ) — OS Command Injection → flag (only solve ) | https://medium.com/@zeyad.karim02013/first-blood-in-cyshield-ctf-helwan-university-os-command-injection-flag-only-solve-73ba55b83df1?source=rss------bug_bounty-5 | Zeyad Karim | ctf, bug-bounty, web-security, ctf-writeup, cybersecurity | 15-Sep-2025 |
| A Bug in The System: The One line of code That Gave me Free Pro Account | https://medium.com/@lucifer58h/a-bug-in-the-system-the-one-line-of-code-that-gave-me-free-pro-account-6237a838b333?source=rss------bug_bounty-5 | Error404 | business-logic, cybersecurity, bug-bounty | 14-Sep-2025 |
| Prompt Engineering for SOC Analysts: A Practical Guide to Boost Your Cybersecurity Game | https://medium.com/@paritoshblogs/prompt-engineering-for-soc-analysts-a-practical-guide-to-boost-your-cybersecurity-game-5cb0fcc81145?source=rss------bug_bounty-5 | Paritosh | information-technology, bug-bounty, soc-analyst, hacking, cybersecurity | 14-Sep-2025 |
| How Capture the Flag (CTF) Prepares You for Bug Bounty Hunting | https://medium.com/@aashifm/how-capture-the-flag-ctf-prepares-you-for-bug-bounty-hunting-f62e9c2b7595?source=rss------bug_bounty-5 | 127.0.0.1 | cybersecurity, ctf, bug-bounty, bounty-program, web-security | 14-Sep-2025 |
| Memahami “Scope” dalam CVSS v3.1 Menurut NIST | https://raflesiait.medium.com/memahami-scope-dalam-cvss-v3-1-menurut-nist-2956350a172e?source=rss------bug_bounty-5 | raflesia it | menentukan-scope-cvss, cvss-score-nist, bug-bounty, cybersecurity, pentest | 14-Sep-2025 |
| “Stop Being a Script Kiddie: Rethink Your Recon” | https://doordiefordream.medium.com/stop-being-a-script-kiddie-rethink-your-recon-a3a63c4dc62a?source=rss------bug_bounty-5 | DOD cyber solutions | ethical-hacking, cybersecurity, bug-bounty, cve, technology | 14-Sep-2025 |
| Passive Recon — How I Map Targets Without Touching Them | https://sinhaamrit.medium.com/passive-recon-osint-google-dorks-ghdb-e163c310b05f?source=rss------bug_bounty-5 | Amrit Sinha | cybersecurity, security, bug-bounty, hacking, ai | 14-Sep-2025 |
| How a Simple IDOR Earned Me $500 | https://medium.com/@0xkarthi/how-a-simple-idor-earned-me-500-79802371a565?source=rss------bug_bounty-5 | Karthikeyan | life, bug-bounty, bug-bounty-writeup, bug-bounty-tips, hacking | 14-Sep-2025 |
| SSRF Symphony: How I Turned a PDF Generator Into an Internal Network Spy | https://infosecwriteups.com/ssrf-symphony-how-i-turned-a-pdf-generator-into-an-internal-network-spy-0d085a9c1c9e?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, money, infosec, bug-bounty | 14-Sep-2025 |
| OWASP API Security Top 10–1 | https://medium.com/@xploitmaster88/owasp-api-security-top-10-1-bc8f14f13008?source=rss------bug_bounty-5 | Ankit Dhaka | ethical-hacking, cybersecurity, owasp-api-security-top-10, bug-bounty | 14-Sep-2025 |
| How Capture the Flag (CTF) Prepares You for Bug Bounty Hunting | https://medium.com/meetcyber/how-capture-the-flag-ctf-prepares-you-for-bug-bounty-hunting-f62e9c2b7595?source=rss------bug_bounty-5 | 127.0.0.1 | cybersecurity, ctf, bug-bounty, bounty-program, web-security | 14-Sep-2025 |
| The Bug Behind the Delete Button: How I Found a Critical IDOR | https://infosecwriteups.com/the-bug-behind-the-delete-button-how-i-found-a-critical-idor-2ea938226f7b?source=rss------bug_bounty-5 | Antonio Rivera Poblete | idor-vulnerability, bug-bounty, cybersecurity, infosec, idor | 14-Sep-2025 |
| Break the Limits: How to Bypass API Rate Limits for Big Bounty Wins | https://osintteam.blog/break-the-limits-how-to-bypass-api-rate-limits-for-big-bounty-wins-11d07a7afaf2?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty, bug-bounty-tips, technology, bug-bounty-writeup | 14-Sep-2025 |
| Day 2 — The Token Bugs Nobody Talks About | https://medium.com/@viratavi1223/day-2-the-token-bugs-nobody-talks-about-8c411e30c452?source=rss------bug_bounty-5 | Viratavi | hacking, bounties, token, cybersecurity, bug-bounty | 14-Sep-2025 |
| OWASP Top Ten 2025: A Complete Guide for Web Application Security | https://medium.com/@jyotijoshi242003/owasp-top-ten-2025-a-complete-guide-for-web-application-security-90c937c41a29?source=rss------bug_bounty-5 | Jyoti Joshi | cybersecurity, penetration-testing, bug-bounty, vulnerability, owasp | 14-Sep-2025 |
| How to Refine Your Web Application Testing Methodology for Effective Attacks | https://medium.com/@samhilliard/how-to-refine-your-web-application-testing-methodology-for-effective-attacks-06c4c5afdc1c?source=rss------bug_bounty-5 | Sam Hilliard | web-application-security, web-app-pentesting, bug-bounty-tips, bug-bounty | 14-Sep-2025 |
| Connectors CTF All web challenges | https://medium.com/@karim.engmohamed/connectors-ctf-all-web-challenges-921beb9dc16e?source=rss------bug_bounty-5 | Karim Mohamed | bug-bounty, web-pentesting, hacking, ctf | 14-Sep-2025 |
| Bug Bounty: Open Redirect: el fallo que nadie respeta… pero todos deberíamos temer | https://gorkaaa.medium.com/bug-bounty-open-redirect-el-fallo-que-nadie-respeta-pero-todos-deber%C3%ADamos-temer-a414059a53ad?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bug-bounty-tips, bugbounty-writeup, bug-bounty, bug-bounty-writeup | 14-Sep-2025 |
| Default Page to Admin Paths Exposure | https://ghostman01.medium.com/default-page-to-admin-paths-exposure-1d5709b3725b?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, bug-bounty-tips, technology, programming, infosec | 14-Sep-2025 |
| The Secret Playbook: How Bug Hunters Spot Vulnerabilities Before Anyone Else | https://sukhveersingh97997.medium.com/the-secret-playbook-how-bug-hunters-spot-vulnerabilities-before-anyone-else-a74f2e65709b?source=rss------bug_bounty-5 | Sukhveer Singh | web-hacking, vapt, bug-bounty, bug-hunting, cybersecurity | 14-Sep-2025 |
| Week 9— Learning Basic Concepts of Cybersecurity | https://infosecwriteups.com/week-9-learning-basic-concepts-of-cybersecurity-dea9932c4a0f?source=rss------bug_bounty-5 | aang | bug-bounty, information-technology, bug-bounty-tips, ethical-hacking, information-security | 14-Sep-2025 |
| Mastering Nmap (Part 4) in 2025:: Output Formats & Reporting | https://medium.com/@appsecvenue/mastering-nmap-part-4-in-2025-output-formats-reporting-a75d0501eada?source=rss------bug_bounty-5 | appsecvenue | network-security, ethical-hacking, nmap, bug-bounty, cybersecurity | 14-Sep-2025 |
| How I found Critical Bugs Easily on GitHub | https://medium.com/@metwallysec/how-i-found-critical-bugs-easily-on-github-48ee78c9ab3d?source=rss------bug_bounty-5 | mohamed metwally | vulnerability-research, cybersecurity, information-disclosure, github-security, bug-bounty | 14-Sep-2025 |
| Week 6 of My 90-Day Challenge: Halfway and a Readjustment | https://medium.com/@sl0th0x87/week-6-of-my-90-day-challenge-halfway-and-a-readjustment-bd0f948d7dcb?source=rss------bug_bounty-5 | Mike (sl0th0x87) | about-me, bug-bounty, challenge, cybersecurity, weekly-report | 14-Sep-2025 |
| Bug Bounty Goldmine: Hidden Inputs in AJAX, JSON & GraphQL — Where Hunters Strike Gold | https://medium.com/@zoningxtr/bug-bounty-goldmine-hidden-inputs-in-ajax-json-graphql-where-hunters-strike-gold-cb2936addf57?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, penetration-testing, javascript, web-development, bug-bounty | 14-Sep-2025 |
| Automating Vulnerability Discovery | https://medium.com/@cybersecplayground/automating-vulnerability-discovery-15544c7fc069?source=rss------bug_bounty-5 | Cybersecplayground | bug-bounty-tips, bugbounty-tips, bug-hunting, automation, bug-bounty | 14-Sep-2025 |
| I Built a Simple POC That Earned a $10,000 Bug Bounty | https://medium.com/@ibtissamhammadi1/i-built-a-simple-poc-that-earned-a-10-000-bug-bounty-0eed90c9ccce?source=rss------bug_bounty-5 | Ibtissam hammadi | poc, gitlab, bug-bounty, ethical-hacking, cybersecurity | 14-Sep-2025 |
| Wfuzz: Fuzzing Web for Pentesting and Bug Bounty | https://medium.com/@jpablo13/wfuzz-fuzzing-web-for-pentesting-and-bug-bounty-06eb43124603?source=rss------bug_bounty-5 | JPablo13 | hacking, bug-bounty, penetration-testing, technology, cybersecurity | 13-Sep-2025 |
| Race Condition in OTP Request — Unlimited SMS Bombing | https://medium.com/@Cyberx08/race-condition-in-otp-request-unlimited-sms-bombing-685b554d9bd3?source=rss------bug_bounty-5 | Cybermotive | bug-bounty-tips, bug-bounty, bug-bounty-writeup, cybersecurity | 13-Sep-2025 |
| Bug Bounty: Focus And Blind Spots | https://medium.com/@smilemil/bug-bounty-focus-and-blind-spots-e1498838379e?source=rss------bug_bounty-5 | smilemil | bug-bounty | 13-Sep-2025 |
| Automating IDOR Fuzzing with Caido | https://medium.com/@trixiahorner/automating-idor-fuzzing-with-caido-b6d894228bb0?source=rss------bug_bounty-5 | Trixia Horner | ctf, cybersecurity, hacking, bug-bounty, tryhackme | 13-Sep-2025 |
| Keys to the Kingdom: How I Hacked a Fortune 500 Company Through Their Mobile App | https://infosecwriteups.com/keys-to-the-kingdom-how-i-hacked-a-fortune-500-company-through-their-mobile-app-e26debedd3f3?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, cybersecurity, money, hacking | 13-Sep-2025 |
| OTP BYPASS TECHNIQUE | https://medium.com/@hrofficial62/otp-bypass-technique-508e20a599e8?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, penetration-testing, hacking, otp-bypass, bug-bounty | 13-Sep-2025 |
| Step-By-Step Roadmap to Become a SOC Analyst | https://medium.com/@rashad.desk/step-by-step-roadmap-to-become-a-soc-analyst-77e0dd0264b2?source=rss------bug_bounty-5 | Rashadul Islam | cybersecurity, ethical-hacking, technology, bug-bounty, security-operation-center | 13-Sep-2025 |
| Extract — Load — Upload | A $20000 File Read Bug POC Methodology | https://infosecwriteups.com/extract-load-upload-a-20000-file-read-bug-poc-methodology-931383c987b2?source=rss------bug_bounty-5 | It4chis3c | hacking, gitlab, bug-bounty, bug-bounty-tips, file-reading | 13-Sep-2025 |
| I Wasn’t Trying to Hack Them, But I Did: A Beginner’s Story of Finding Major Security Flaws | https://medium.com/@0x62616B61/i-wasnt-trying-to-hack-them-but-i-did-a-beginner-s-story-of-finding-major-security-flaws-9a3710dcb441?source=rss------bug_bounty-5 | 0x62616B61 | web-security, cybersecurity, ethical-hacking, vulnerability, bug-bounty | 13-Sep-2025 |
| Hunting API Keys in JavaScript Files: A Bug Hunter’s Guide | https://medusa0xf.medium.com/hunting-api-keys-in-javascript-files-a-bug-hunters-guide-01940b7dd6ef?source=rss------bug_bounty-5 | Medusa | hacking, ethical-hacking, infosec, bug-bounty, bug-bounty-tips | 13-Sep-2025 |
| How I Discovered a Reflected XSS on the MOD UK Police Website (WAF Bypass) | https://0xhassan.medium.com/how-i-discovered-a-reflected-xss-on-the-mod-uk-police-website-waf-bypass-5a29627333c3?source=rss------bug_bounty-5 | Hassan Ali Arshad | ethical-hacking, cybersecurity, web-security, bug-bounty, xss-attack | 13-Sep-2025 |
| Introducing MOLE (Mass Open Links Extension) | https://medium.com/@emmaoawaterman/introducing-mole-mass-open-links-extension-eab7af3fb597?source=rss------bug_bounty-5 | Emma Waterman | hacking, tools, hacking-tools, bug-bounty, web-penetration-testing | 13-Sep-2025 |
| Bug Bounty: Lo que se automatiza sin entender, no se encuentra de verdad | https://gorkaaa.medium.com/bug-bounty-lo-que-se-automatiza-sin-entender-no-se-encuentra-de-verdad-a713ea45f1c7?source=rss------bug_bounty-5 | Gorka | bugbounty-writeup, bug-bounty-hunter, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 13-Sep-2025 |
| How I ‘Hacked’ NASA Without Going to Jail | https://medium.com/@anripo2006/how-did-i-hacked-nasa-without-go-to-the-jail-4bf0eebc934b?source=rss------bug_bounty-5 | Antonio Rivera Poblete | nasa, hacking, bug-bounty | 13-Sep-2025 |
| How I Found 4 Bugs in a NASA Scope | https://medium.com/@0xuserm9/how-i-found-4-bugs-in-a-nasa-4446fd45a074?source=rss------bug_bounty-5 | @0xuserm9 | nasa, bug-bounty, xs, cybersecurity, hacking | 13-Sep-2025 |
| TO BECOME A SOC EXPERT | https://medium.com/@VulnHunt3r/to-become-a-soc-expert-7a628a1e65fb?source=rss------bug_bounty-5 | vulnhunter | ethical-hacking, hacking, bug-bounty, social-media, cybersecurity | 13-Sep-2025 |
| Supercharge Your Bug Bounty Toolkit: API Testing, DTO Validation, and Tree-sitter Analysis | https://medium.com/@bughunteroX/supercharge-your-bug-bounty-toolkit-api-testing-dto-validation-and-tree-sitter-analysis-a51cf74e6f1b?source=rss------bug_bounty-5 | BugHunteroX | bug-bounty-hunter, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 13-Sep-2025 |
| From Bug to Browser: How I Turned Breaking Things Into Building Something Better | https://medium.com/@viratavi1223/from-bug-to-browser-how-i-turned-breaking-things-into-building-something-better-5400275383e4?source=rss------bug_bounty-5 | Viratavi | rust, bug-bounty, cybersecurity, tech-innovation, hacking | 13-Sep-2025 |
| How I Found 5 Cache Flaws in 24 Hours | https://medium.com/@ibtissamhammadi1/how-i-found-5-cache-flaws-in-24-hours-b47dee54d267?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, cybersecurity, technology, penetration-testing, web-security | 13-Sep-2025 |
| Wfuzz: Fuzzing Web para Pentesting y Bug Bounty | https://medium.com/@jpablo13/wfuzz-fuzzing-web-para-pentesting-y-bug-bounty-81723a6b0d16?source=rss------bug_bounty-5 | JPablo13 | hacking, penetration-testing, technology, cybersecurity, bug-bounty | 12-Sep-2025 |
| Smuggle Your Way to Bounties: Mastering HTTP Request Smuggling in 2025 | https://infosecwriteups.com/smuggle-your-way-to-bounties-mastering-http-request-smuggling-in-2025-6218e1adc444?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, bug-bounty-writeup, bug-bounty-tips, vulnerability, technology | 12-Sep-2025 |
| ZIP Slip Surprise: How I Turned a File Upload into Remote Code Execution | https://medium.com/@iski/zip-slip-surprise-how-i-turned-a-file-upload-into-remote-code-execution-1cdad896c54c?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, hacking, infosec, money | 12-Sep-2025 |
| I Bypassed a Login Page With a Single Request | https://infosecwriteups.com/i-bypassed-a-login-page-with-a-single-request-cf7b415b2423?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, cybersecurity, technology, programming, hacking | 12-Sep-2025 |
| Meet Ghauri GUI v1 — Streamlined SQLi Scans on Windows | https://raflesiait.medium.com/meet-ghauri-gui-v1-streamlined-sqli-scans-on-windows-5bb383b9f7ff?source=rss------bug_bounty-5 | raflesia it | bug-bounty, cybersecurity, ethical-hacker, pentester, ghauri-gui | 12-Sep-2025 |
| 14. How to Write a Perfect Vulnerability Report | https://infosecwriteups.com/14-how-to-write-a-perfect-vulnerability-report-f07c8a02fc45?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, secrets, bug-bounty, hidden-gems, hacking | 12-Sep-2025 |
| This Burp Intruder Automation will get you Bounties | https://medium.com/@jeosantos2005/this-burp-intruder-automation-will-get-you-bounties-6897a53bafc6?source=rss------bug_bounty-5 | Jeosantos | bug-bounty-writeup, cybersecurity, bug-bounty, pentesting, bug-bounty-tips | 12-Sep-2025 |
| How Pentesting with Kali Linux Helped Me Win My First $1300 Bug Bounty | https://medium.com/@ekenejosepha1/how-pentesting-with-kali-linux-helped-me-win-my-first-1300-bug-bounty-90bcf6564073?source=rss------bug_bounty-5 | Joseph jr | red-team, ethical-hacking, penetration-testing, bug-bounty, cybersecurity | 12-Sep-2025 |
| Unauthenticated Deletion of Critical SSO Configuration Attributes | https://medium.com/@ehsameer/unauthenticated-deletion-of-critical-sso-configuration-attributes-e3bc56c258a8?source=rss------bug_bounty-5 | ehsameer | cyber-security-awareness, information-security, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 12-Sep-2025 |
| how I made 6 figures in my first year in bug bounty: my experiences | https://medium.com/@furkan0x01/how-i-made-6-figures-in-my-first-year-in-bug-bounty-my-experiences-b6c2ec914a2a?source=rss------bug_bounty-5 | furkan | security, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 12-Sep-2025 |
| Hacking Jira | https://medium.com/@MohammedMHassan/hacking-jira-f4d2081c7513?source=rss------bug_bounty-5 | Mohammed Hassan | cybersecurity, bug-bounty, hackerone, penetration-testing, jira | 12-Sep-2025 |
| Scaling security testing: lessons from launching a public bug bounty at Bolt | https://medium.com/bolt-labs/scaling-security-testing-lessons-from-launching-a-public-bug-bounty-at-bolt-1061326fa6a5?source=rss------bug_bounty-5 | Allar Lauk | security-testing, bug-bounty | 12-Sep-2025 |
| I Found 100+ API Keys in My JS Files in 24 Hours | https://medium.com/@ibtissamhammadi1/i-found-100-api-keys-in-my-js-files-in-24-hours-b78a1cad1dda?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, reconnaissance, cybersecurity, bug-bounty, javascript | 12-Sep-2025 |
| Portswigger DOM-based vulnerabilities Labs — Expert | https://medium.com/@sl0th0x87/portswigger-dom-based-vulnerabilities-labs-expert-e7cbf1cec680?source=rss------bug_bounty-5 | Mike (sl0th0x87) | portswigger, bug-bounty, dom-based-xss, walkthrough, burpsuite | 12-Sep-2025 |
| Bug Bounty : How an OTP Bypass Got Me in the Hall of Fame | https://medium.com/@arrheniuspaelongan09/bug-bounty-how-an-otp-bypass-got-me-in-the-hall-of-fame-5db11bb34e2c?source=rss------bug_bounty-5 | Arrhenius Paelongan | penetration-testing, information-technology, information-security, bug-bounty, hacking | 12-Sep-2025 |
| Master Real-World Web App Enumeration with Curl, Wget, and Bash: A Step-by-Step Guide | https://medium.com/@verylazytech/master-real-world-web-app-enumeration-with-curl-wget-and-bash-a-step-by-step-guide-5f74ab34e795?source=rss------bug_bounty-5 | Very Lazy Tech | self-improvement, ethical-hacking, cybersecurity, programming, bug-bounty | 12-Sep-2025 |
| What is CIA Triad? | https://medium.com/@dhruva0/what-is-cia-triad-850ac55315c1?source=rss------bug_bounty-5 | Dhruv | networking, cia-triad, bug-bounty-tips, cybersecurity, bug-bounty | 12-Sep-2025 |
| RCE realista basado en un caso real pagado con $30,000 | https://gorkaaa.medium.com/rce-realista-basado-en-un-caso-real-pagado-con-30-000-a9a5412ee14d?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bug-bounty-writeup, bug-bounty, bugbounty-writeup, bug-bounty-tips | 12-Sep-2025 |
| Portswigger Web Cache Poisoning Labs — Expert | https://medium.com/@sl0th0x87/portswigger-web-cache-poisoning-labs-expert-99981f73622c?source=rss------bug_bounty-5 | Mike (sl0th0x87) | walkthrough, web-cache-poisoning, burpsuite, portswigger, bug-bounty | 12-Sep-2025 |
| I found two security issues on my college blog website | https://medium.com/@alanbiju255/i-found-two-security-issues-on-my-college-blog-website-ad372666f30d?source=rss------bug_bounty-5 | Alanbiju | bug-bounty | 12-Sep-2025 |
| The $1000 Critical Bug: Unauthorised Access Leading to Support Admin Panel Takeover | https://v3d.medium.com/the-1000-critical-bug-unauthorised-access-leading-to-support-admin-panel-takeover-572d687566cd?source=rss------bug_bounty-5 | V3D | cybersecurity, bug-bounty, infosec, hacker, hacking | 12-Sep-2025 |
| The $1000 Critical Bug: Unauthorised Access Leading to Support Admin Panel Takeover | https://infosecwriteups.com/the-1000-critical-bug-unauthorised-access-leading-to-support-admin-panel-takeover-572d687566cd?source=rss------bug_bounty-5 | V3D | cybersecurity, bug-bounty, infosec, hacker, hacking | 12-Sep-2025 |
| Race Condition in Team Invitations Vulnerability | https://ch1ta.medium.com/race-condition-in-team-invitations-vulnerability-cc088303d5f8?source=rss------bug_bounty-5 | Lakshya | bug-bounty, cybersecurity, bug-bounty-tips, race-condition, bugs | 11-Sep-2025 |
| ️♂️ Forgotten But Dangerous: How an Old Staging Domain Handed Me Production Secrets | https://medium.com/@iski/%EF%B8%8F-%EF%B8%8F-forgotten-but-dangerous-how-an-old-staging-domain-handed-me-production-secrets-ced7be8dcd2f?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, bug-bounty-tips, cybersecurity, money | 11-Sep-2025 |
| Nano-Bots | https://medium.com/@nexusphere/nano-bots-ab9a270ce8f5?source=rss------bug_bounty-5 | Balki Maharaj | tools, git, malware, bug-bounty, browsers | 11-Sep-2025 |
| TO BECOME A SOC EXPERT | https://medium.com/@VulnHunt3r/to-become-a-soc-expert-23df20bd7cfe?source=rss------bug_bounty-5 | vulnhunter | cybersecurity, hacking, ethical-hacking, security, bug-bounty | 11-Sep-2025 |
| Advanced Free Resources for Bug Bounty Hunters | https://infosecwriteups.com/advanced-free-resources-for-bug-bounty-hunters-b830c4a99e2f?source=rss------bug_bounty-5 | Rashadul Islam | artificial-intelligence, bug-bounty, technology, hacking, cybersecurity | 11-Sep-2025 |
| Millions of Travel Records Leaked: Navan’s Website Dangerous Vulnerability” | https://medium.com/@halalalimii/millions-of-travel-records-leaked-navans-website-dangerous-vulnerability-538464bd366c?source=rss------bug_bounty-5 | Halalalimii | travel, pentesting, cybersecurity, traveling, bug-bounty | 11-Sep-2025 |
| Ping Pong — A Kioptrix Level 2 Post-Mortem | https://medium.com/@turkymazen13/ping-pong-a-kioptrix-level-2-post-mortem-7146af69448f?source=rss------bug_bounty-5 | MazenTurky | cybersecurity, kioptrix, penetration-testing, ctf, bug-bounty | 11-Sep-2025 |
| How to Start Bug Hunting: Your Path to Earning Cash for Code Flaws | https://cybersecuritywriteups.com/how-to-start-bug-hunting-your-path-to-earning-cash-for-code-flaws-39df2d33407b?source=rss------bug_bounty-5 | Aj | bug-bounty, cybersecurity, web-security, ethical-hacking, beginner-guide | 11-Sep-2025 |
| I Wrote One Affirmation for 3 Days and Forgot About It.15 Days Later, $500 Showed Up | https://mansigolecha.medium.com/i-wrote-one-affirmation-for-3-days-and-forgot-about-it-15-days-later-500-showed-up-6501bdb18292?source=rss------bug_bounty-5 | Mansi golecha | law-of-attraction, affirmations, visualization, bug-bounty, manifestation | 11-Sep-2025 |
| “Beyond the Obvious: How a Dead-End XXE Led to a Critical SQLi Goldmine” | https://infosecwriteups.com/beyond-the-obvious-how-a-dead-end-xxe-led-to-a-critical-sqli-goldmine-d368f5ddaadc?source=rss------bug_bounty-5 | Aman Sharma | technology, cybersecurity, hacking, bug-bounty, money | 11-Sep-2025 |
| Find 10x More Bugs With These 3 Free Extensions | https://medium.com/@ibtissamhammadi1/find-10x-more-bugs-with-these-3-free-extensions-d052fdc18ded?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, cybersecurity, programming, bug-bounty, ethical-hacking | 11-Sep-2025 |
| Vibe Coding: Part 2 — The Debugging Disco | https://medium.com/@talhakhan050203/vibe-coding-part-2-the-debugging-disco-7f3891f31099?source=rss------bug_bounty-5 | Muhammad Talha Khan | vibe-coding, pakistan, coding, bug-bounty, vscode | 11-Sep-2025 |
| Inside the Hacker’s Playbook (Part 2): The Advanced Stuff Nobody Talks About | https://medium.com/@mohamednfe78/inside-the-hackers-playbook-part-2-the-advanced-stuff-nobody-talks-about-3b262941accc?source=rss------bug_bounty-5 | Mohamed.cybersec | security, cryptography, bug-bounty, cybersecurity, information-security | 11-Sep-2025 |
| Exploiting IDOR: The Hidden Door to Sensitive Data | https://elcazad0r.medium.com/exploiting-idor-the-hidden-door-to-sensitive-data-c45555fdf22c?source=rss------bug_bounty-5 | EL_Cazad0r | ethical-hacking, hacking, bug-bounty, cybersecurity | 11-Sep-2025 |
| How Pattern Recognition Led to a Critical IDOR in a Public Portal | https://medium.com/@pnaeem/how-pattern-recognition-led-to-a-critical-idor-in-a-public-portal-248ad26f7914?source=rss------bug_bounty-5 | Naeemj | api-security, bug-bounty, web-application-security, idor | 11-Sep-2025 |
| The 5 Linux Commands Every Bug Bounty Hunter Should Master (and How I Chain Them for Faster Recon) | https://medium.com/@itsmohitnarayan/the-5-linux-commands-every-bug-bounty-hunter-should-master-and-how-i-chain-them-for-faster-recon-cef0b5cbc8f8?source=rss------bug_bounty-5 | Kumar Mohit | security, penetration-testing, web-penetration-testing, bug-bounty | 11-Sep-2025 |
| How I Landed My First Bug Bounty From a Basic XSS (Yes, Really) | https://medium.com/meetcyber/how-i-landed-my-first-bug-bounty-from-a-basic-xss-yes-really-b48fce3379d6?source=rss------bug_bounty-5 | Dhruvdeep Singh | web-security, hacking, cybersecurity, ethical-hacking, bug-bounty | 11-Sep-2025 |
| How I Hacked a Server Protected by a Goat: A Kioptrix Level 3 Walkthrough | https://medium.com/@turkymazen13/how-i-hacked-a-server-protected-by-a-goat-a-kioptrix-level-3-walkthrough-9de58c0936ce?source=rss------bug_bounty-5 | MazenTurky | kioptrix, penetration-testing, vulnerability, bug-bounty, cybersecurity | 11-Sep-2025 |
| Penetration Testing, Beginners To Expert! | https://infosecwriteups.com/penetration-testing-beginners-to-expert-8378f9169160?source=rss------bug_bounty-5 | Krishna Kumar | infosec, bug-bounty-writeup, bug-bounty, ethical-hacking, cybersecurity | 11-Sep-2025 |
| Case-Sensitivity Display name is worth 150$ bounty | https://medium.com/@mohaned0101/case-sensitivity-display-name-is-worth-150-bounty-6871aab8a39c?source=rss------bug_bounty-5 | mohaned haron | bug-bounty, bug-bounty-tips | 11-Sep-2025 |
| One Click Account Takeover: how an insecure password-reset flow + mass assignment leads to full… | https://medium.com/@0xmekky/one-click-account-takeover-how-an-insecure-password-reset-flow-mass-assignment-leads-to-full-62f1bf17821d?source=rss------bug_bounty-5 | القنصل | penetration-testing, bug-bounty, cybersecurity, vulnerability-disclosure, web-security | 11-Sep-2025 |
| El mejor camino para entrar es entender por qué otros no lo ven | https://gorkaaa.medium.com/el-mejor-camino-para-entrar-es-entender-por-qu%C3%A9-otros-no-lo-ven-87c051c7011c?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty-hunter, bugbounty-writeup, bug-bounty-writeup, bug-bounty | 11-Sep-2025 |
| The Dark Side of Bug Bounties: Burnout & Ethical Dilemmas | https://osintteam.blog/the-dark-side-of-bug-bounties-burnout-ethical-dilemmas-55e7d99ee9d3?source=rss------bug_bounty-5 | Aj | cybersecurity, infosec, mental-health, ethical-hacking, bug-bounty | 11-Sep-2025 |
| Server-Side Request Forgery (SSRF) Explained: From Basics to Advanced Attacks | https://medium.com/@mazene432/server-side-request-forgery-ssrf-explained-from-basics-to-advanced-attacks-771aef68b415?source=rss------bug_bounty-5 | Mazen Elsayed | penetration-testing, bug-bounty, web-security, ethical-hacking, ssrf | 11-Sep-2025 |
| Mastering Bug Bounty: The Secrets of hunting bugs by Devansh Chauhan — The BSides Weekly [S1E7] | https://blog.bsidesnoida.in/mastering-bug-bounty-the-secrets-of-hunting-bugs-by-devansh-chauhan-the-bsides-weekly-s1e7-8d8932a5089a?source=rss------bug_bounty-5 | Riddhikacheruku | cybersecurity, bug-bounty-tips, bug-bounty, bsides | 10-Sep-2025 |
| URL Normalization Turns a Harmless Request into a Cache-Poisoned XSS Attack | https://infosecwriteups.com/url-normalization-turns-a-harmless-request-into-a-cache-poisoned-xss-attack-57d1a68f08d2?source=rss------bug_bounty-5 | Bash Overflow | cache-poisoning-attack, xss-via-cache-poisoning, web-cache-poisoning, bug-bounty, bug-bounty-tips | 10-Sep-2025 |
| How an OAuth Misconfiguration Led to Account Takeover | https://aiwolfie.medium.com/how-an-oauth-misconfiguration-led-to-account-takeover-b6f3e3837974?source=rss------bug_bounty-5 | AIwolfie | ethical-hacking, pentesting, bug-bounty, website, security | 10-Sep-2025 |
| Discover how attackers abuse clipboard paste handling to trigger Blind XSS from setup to… | https://medium.com/@jpablo13/discover-how-attackers-abuse-clipboard-paste-handling-to-trigger-blind-xss-from-setup-to-65251336bb2e?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, technology, hacking, penetration-testing | 10-Sep-2025 |
| Interesting OTP Validation Logic Flaw: Registering Any Victim’s Email Without Inbox Access … | https://medium.com/@divyanksitapara088/interesting-otp-validation-logic-flaw-registering-any-victims-email-without-inbox-access-90f7ec989b1e?source=rss------bug_bounty-5 | Ch4rlii | bug-bounty, medium, cybersecurity, hacking, ethical-hacking | 10-Sep-2025 |
| 5 Beginner Mistakes Killing Your Bug Bounty Success (Fix Them Now!) | https://cybersecuritywriteups.com/5-beginner-mistakes-killing-your-bug-bounty-success-fix-them-now-4ad55128d1a9?source=rss------bug_bounty-5 | Aj | hack-to-learn, cybersecurity, ethical-hacking, bug-bounty, beginnertips | 10-Sep-2025 |
| Discover how attackers abuse clipboard paste handling to trigger Blind XSS from setup to… | https://medium.com/meetcyber/discover-how-attackers-abuse-clipboard-paste-handling-to-trigger-blind-xss-from-setup-to-65251336bb2e?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, technology, hacking, penetration-testing | 10-Sep-2025 |
| Side-Channel Recon: How Attackers Use Timing, Headers, and Metadata for Infiltration | https://javascript.plainenglish.io/side-channel-recon-how-attackers-use-timing-headers-and-metadata-for-infiltration-58c4428dc9fa?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, infosec, ai, bug-bounty | 10-Sep-2025 |
| ✅ Securing OAuth & SSO: A Step-by-Step Guide and Checklist | https://medium.com/meetcyber/securing-oauth-sso-a-step-by-step-guide-and-checklist-4e9390933957?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, information-security, cybersecurity, ai, infosec | 10-Sep-2025 |
| Regular User Can Invite Admin — Resulting in Full Organization Compromise | https://medium.com/@0xammarsaber/regular-user-can-invite-admin-resulting-in-full-organization-compromise-050dd57f9e01?source=rss------bug_bounty-5 | 0xAmmar | cybersecurity, bug-bounty, bug-hunting, vulnerability, bug-bounty-tips | 10-Sep-2025 |
| Identity Attacks in a Passwordless World: How OAuth & SSO Flaws Are Exploited | https://javascript.plainenglish.io/identity-attacks-in-a-passwordless-world-how-oauth-sso-flaws-are-exploited-97eabe15b64e?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, cybersecurity, information-security, bug-bounty, infosec | 10-Sep-2025 |
| IDOR: How I Could Delete Any Product Image on an E-Commerce Platform | https://infosecwriteups.com/idor-how-i-could-delete-any-product-image-on-an-e-commerce-platform-8998453a50ea?source=rss------bug_bounty-5 | Mahmoud El Manzalawy | infosec, vulnerability, bug-bounty, penetration-testing, cybersecurity | 10-Sep-2025 |
| When Bots Turn Malicious: The Rise of AI-Powered Credential Stuffing Attacks | https://systemweakness.com/when-bots-turn-malicious-the-rise-of-ai-powered-credential-stuffing-attacks-2e24e658e31f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, cybersecurity, ai, information-security, infosec | 10-Sep-2025 |
| Recon Beyond Robots.txt: Discovering Hidden Paths Using AI Crawlers | https://medium.com/meetcyber/recon-beyond-robots-txt-discovering-hidden-paths-using-ai-crawlers-d988fb84c37f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, infosec, information-security, bug-bounty | 10-Sep-2025 |
| I Found An Unintended Solution For The XSS Lab In PortSwigger. | https://medium.com/@RaunakGupta1922/i-found-an-unintended-solution-for-the-xss-lab-in-portswigger-77b1f4d8512c?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | hacking, software-development, programming, bug-bounty, cybersecurity | 10-Sep-2025 |
| How I Got My First $250 Bug Bounty | https://medium.com/@cyberhead/how-i-got-my-first-250-bug-bounty-63f500fb4bf8?source=rss------bug_bounty-5 | CyberHead | cybersecurity, technology, bug-bounty | 10-Sep-2025 |
| Advanced Paid Resources for Experienced Bug Bounty Hunters | https://medium.com/@RaunakGupta1922/advanced-paid-resources-for-experienced-bug-bounty-hunters-3c900060bf8e?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | penetration-testing, hacking, cybersecurity, programming, bug-bounty | 10-Sep-2025 |
| Hacking Into India’s Largest Payment Network Through a Single API Call | https://monish-basaniwal.medium.com/hacking-into-indias-largest-payment-network-through-a-single-api-call-d42d115afa25?source=rss------bug_bounty-5 | Monish Basaniwal | technology, cybersecurity, security, bug-bounty, ethical-hacking | 10-Sep-2025 |
| Silent Sniper: How I Turned a Blind SSRF into a Critical AWS Infrastructure Breach | https://medium.com/@iski/silent-sniper-how-i-turned-a-blind-ssrf-into-a-critical-aws-infrastructure-breach-ae40614de53b?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, hacking, cybersecurity, money | 10-Sep-2025 |
| What is SQL Injection (SQLi)? | https://medium.com/@dhruva0/what-is-sql-injection-sqli-3833e80f3bb9?source=rss------bug_bounty-5 | Dhruv | sql-injection, bug-bounty, cybersecurity, owasp-top-10, sql | 10-Sep-2025 |
| How I Got an Unexpected Bounty from REDETECT.com | https://mrknightnidu.medium.com/how-i-got-an-unexpected-bounty-from-redetect-com-5951793b1519?source=rss------bug_bounty-5 | MRKNIGHT-NIDU | short-story, bug-bounty, bugbounting, hacker, bugbounty-writeup | 10-Sep-2025 |
| Small type of Classic idor i find | https://imran-niaz.medium.com/small-type-of-classic-idor-i-find-416a11b1fe59?source=rss------bug_bounty-5 | Imran Niaz | hacker, ethics, pentesting, bug-bounty, postgresql | 10-Sep-2025 |
| Writing Effective Bug Reports: Tips from a Pro Bug Bounty Hunter | https://rafalw3bcraft.medium.com/writing-effective-bug-reports-tips-from-a-pro-bug-bounty-hunter-b2d2842129ed?source=rss------bug_bounty-5 | RafalW3bCraft | information-security, bug-bounty, hacker, tech-skills, bug-report | 10-Sep-2025 |
| Exploiting Business Logic Flaws: How I Bought Products for $1 (Ethically) in a private bug bounty… | https://medium.com/@InsbatArshad/exploiting-business-logic-flaws-how-i-bought-products-for-1-ethically-in-a-private-bug-bounty-6f21f883cd7a?source=rss------bug_bounty-5 | Be nice insabat | programming, cybersecurity, penetration-testing, bug-bounty, hacking | 10-Sep-2025 |
| I Found My First Critical Bug Using SQL Injection Recon | https://medium.com/@ibtissamhammadi1/i-found-my-first-critical-bug-using-sql-injection-recon-6a3e2f9d89f5?source=rss------bug_bounty-5 | Ibtissam hammadi | sql, reconnaissance, cybersecurity, bug-bounty, infosec | 10-Sep-2025 |
| How I Discovered Hidden JSON & GraphQL Requests and Won a Bug Bounty ✨ | https://medium.com/@zoningxtr/how-i-discovered-hidden-json-graphql-requests-and-won-a-10-000-bug-bounty-dc0d72b4aba4?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, javascript, penetration-testing, graphql, bug-bounty | 10-Sep-2025 |
| The Ultimate Hacker’s Bash Cheat Sheet (20+ Advanced One-Liners Inside) | https://medium.com/@verylazytech/the-ultimate-hackers-bash-cheat-sheet-20-advanced-one-liners-inside-418385ed1e35?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, linux, bug-bounty, bash, ethical-hacking | 10-Sep-2025 |
| Bughuntig is going somewhere else direction | https://imran-niaz.medium.com/bughuntig-is-going-somewhere-else-direction-9852b3b72e4d?source=rss------bug_bounty-5 | Imran Niaz | bug-bounty, hacking | 10-Sep-2025 |
| They Said XSS Was Dead… Then I Got Paid (My First Bounty in 2025) | https://medium.com/@file_d0t_bug/they-said-xss-was-dead-then-i-got-paid-my-first-bounty-in-2025-6eb8d27c6c1a?source=rss------bug_bounty-5 | file.bug | bug-bounty-tips, cybersecurity, penetration-testing, bug-bounty, bug-bounty-writeup | 10-Sep-2025 |
| Subdomain Discovery and Enumeration: From Noise to Valuable Targets | https://infosecwriteups.com/subdomain-discovery-and-enumeration-from-noise-to-valuable-targets-bbc42b644b74?source=rss------bug_bounty-5 | Swetha | hacking, bug-bounty, reconciliation, automation, learning | 10-Sep-2025 |
| Impactful Google Dorking on your Target | https://infosecwriteups.com/impactful-google-dorking-ce2f68862ae8?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | infosec, security, bug-bounty, technology, programming | 10-Sep-2025 |
| Race Conditions Are Not Just for Bypassing Plan Limits!! | https://medium.com/@mahdisalhi0500/race-conditions-are-not-just-for-bypassing-plan-limits-1cd63aa0d6f7?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | cybersecurity, bug-bounty, penetration-testing, hacking, information-security | 10-Sep-2025 |
| Cross-Site Scripting (XSS) remains one of the most common and dangerous web application… | https://medium.com/@cyberindaboski/cross-site-scripting-xss-remains-one-of-the-most-common-and-dangerous-web-application-9b325b9b2c39?source=rss------bug_bounty-5 | Cyber Indaboski ( Blessing John) | cybersecurity, bug-bounty | 10-Sep-2025 |
| Next.js Middleware SSRF via Header Injection | https://medium.com/@cybersecplayground/next-js-middleware-ssrf-via-header-injection-6cf03b58a90d?source=rss------bug_bounty-5 | Cybersecplayground | bug-bounty, ssrf, nextjs, injection, bug-bounty-tips | 10-Sep-2025 |
| GraphQL Explained Simply: Why It’s a Game-Changer for API Endpoints and Why (Bug Hunters Love… | https://medium.com/@zoningxtr/graphql-explained-simply-why-its-a-game-changer-for-api-endpoints-and-why-bug-hunters-love-9d0d8a529804?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, web-development, penetration-testing, javascript, cybersecurity | 10-Sep-2025 |
| SQL for Bug Bounty Hunters 2.0 | https://infosecwriteups.com/sql-for-bug-bounty-hunters-2-0-f7e136c0e5c9?source=rss------bug_bounty-5 | Swetha | learning, hacking, programming, sql, bug-bounty | 09-Sep-2025 |
| Web Cache Poisoning via Fat GET Requests: Exploiting Cache Key Flaws | https://infosecwriteups.com/web-cache-poisoning-via-fat-get-requests-exploiting-cache-key-flaws-37e8d5030a2d?source=rss------bug_bounty-5 | Bash Overflow | web-cache-poisoning, cache-key-manipulation, cache-poisoning-attack, bug-bounty, xss-via-cache-poisoning | 09-Sep-2025 |
| How to Stop Wasting Hours on Silent Bugs: Debugging Strategies That Actually Work | https://javascript.plainenglish.io/how-to-stop-wasting-hours-on-silent-bugs-debugging-strategies-that-actually-work-9aa3ece04e9b?source=rss------bug_bounty-5 | Sumit Shaw | programming, bug-bounty, trending, coding, web-development | 09-Sep-2025 |
| Dirsearch: Descubre Directorios y Archivos Ocultos como un Profesional del Bug Bounty | https://medium.com/@jpablo13/dirsearch-descubre-directorios-y-archivos-ocultos-como-un-profesional-del-bug-bounty-75a0c556519a?source=rss------bug_bounty-5 | JPablo13 | hacking, technology, cybersecurity, bug-bounty, penetration-testing | 09-Sep-2025 |
| Console Chronicles: How Browser DevTools Unlocked a $XXXX Bounty | https://medium.com/@iski/console-chronicles-how-browser-devtools-unlocked-a-xxxx-bounty-2536fe09615d?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, hacking, money, bug-bounty | 09-Sep-2025 |
| How a Failed Payment on a Train Platform Earned Me $400 | https://infosecwriteups.com/how-a-failed-payment-on-a-train-platform-earned-me-400-23241d204550?source=rss------bug_bounty-5 | Hackergod00001 | hacking, bug-bounty, bug-bounty-tips, infosec, cybersecurity | 09-Sep-2025 |
| Scan Less, Find More: DNS Deduplication for Large Scopes | https://medium.com/@2s1one/scan-less-find-more-dns-deduplication-for-large-scopes-efbe1cdf57e9?source=rss------bug_bounty-5 | 2s1one | cybersecurity, penetration-testing, bug-bounty, hacking | 09-Sep-2025 |
| Reflected XSS Vulnerability Bypassing Amazon CloudFront via Safari Browser | https://infosecwriteups.com/reflected-xss-vulnerability-bypassing-amazon-cloudfront-via-safari-browser-5416b5b64be2?source=rss------bug_bounty-5 | Krishna Kumar | bug-bounty, cybersecurity, hacking, bug-bounty-tips, xss-attack | 09-Sep-2025 |
| 13. My First Private Program Experience (and Mistakes I Made) | https://infosecwriteups.com/13-my-first-private-program-experience-and-mistakes-i-made-a5d8d6b325a7?source=rss------bug_bounty-5 | Abhijeet kumawat | medium, secrets, infosec, hacking, bug-bounty | 09-Sep-2025 |
| Window Object Subdomain Recon Tip | https://medium.com/ai-apocalypse/window-object-subdomain-recon-tip-cf74d746ca59?source=rss------bug_bounty-5 | AbhirupKonwar | cybersecurity, ethical-hacking, bug-bounty, pentesting, bug-bounty-tips | 09-Sep-2025 |
| How I Discovered a Public API Data Exposure on India’s Government Website (And Got It Fixed) | https://medium.com/@uday637/how-i-discovered-a-public-api-data-exposure-on-indias-government-website-and-got-it-fixed-d6d4989d486f?source=rss------bug_bounty-5 | Uday | reconnaissance, hacking, bug-hunter, bug-bounty, computer-security | 09-Sep-2025 |
| Digital Forensics : Recover Deleted Files Using Autopsy | https://medium.com/@arrheniuspaelongan09/digital-forensics-recover-deleted-files-using-autopsy-270e1d0232d5?source=rss------bug_bounty-5 | Arrhenius Paelongan | security, cybersecurity, penetration-testing, bug-bounty, digital-forensics | 09-Sep-2025 |
| How I Accidentally Stumbled Upon a Critical Vulnerability (Exposed backup on google storage) | https://siratsami71.medium.com/how-i-accidentally-stumbled-upon-a-critical-vulnerability-exposed-backup-on-google-storage-420f17004062?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-tips, hacking | 09-Sep-2025 |
| Business Logic Flaw Lets Free Plan Add Extra Team Members | https://medium.com/@ayman_amer_1/business-logic-flaw-lets-free-plan-add-extra-team-members-600581cd3205?source=rss------bug_bounty-5 | ayman Amer | bug-bounty | 09-Sep-2025 |
| From Limited Shell to Interactive TTY Shell: A Must-Have Skill for Bug Bounty Hunters | https://medium.com/@ag.gholami.2006/from-limited-shell-to-interactive-tty-shell-a-must-have-skill-for-bug-bounty-hunters-b0f407897dac?source=rss------bug_bounty-5 | Ali Ziro | aliziro, shell, cybersecurity, penetration-testing, bug-bounty | 09-Sep-2025 |
| BugDB v2 | https://medium.com/@dasmanish6176/bugdb-v2-7f2b9d89869d?source=rss------bug_bounty-5 | Dasmanish | ctf-writeup, bug-bounty, hacker101, graphql | 09-Sep-2025 |
| Bug Bounty: No hay payload que sustituya a una buena intuición | https://gorkaaa.medium.com/bug-bounty-no-hay-payload-que-sustituya-a-una-buena-intuici%C3%B3n-e7f12dce0253?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bug-bounty-writeup, bug-bounty, bugbounty-writeup, bug-bounty-tips | 09-Sep-2025 |
| How I Earned $3,500 with a Simple Injection Bug (And You Can Too) | https://medium.com/@rashad.desk/how-i-earned-3-500-with-a-simple-injection-bug-and-you-can-too-deeab8941c04?source=rss------bug_bounty-5 | Rashadul Islam | cybersecurity, technology, bug-bounty, hacking, money | 09-Sep-2025 |
| How I Build Universal CORS Exploitation Payloads (with Fetch) | https://medium.com/@cybernerddd/how-i-build-universal-cors-exploitation-payloads-with-fetch-b04d1c6705df?source=rss------bug_bounty-5 | Cybernerddd | cybersecurity, hacking, web-application-security, bug-bounty, security-misconfiguration | 09-Sep-2025 |
| ASC War Games 2025 finals — Legacy Edition Challenge | https://medium.com/@xmosb7/asc-war-games-2025-finals-legacy-edition-challenge-440a11837322?source=rss------bug_bounty-5 | Mahmoud Mosbah | infosec, cybersecurity, cyberattack, ctf, bug-bounty | 09-Sep-2025 |
| Nuevo Video Bug Bounty: Hackeando Reddit Sin Filtros | https://gorkaaa.medium.com/nuevo-video-bug-bounty-hackeando-reddit-sin-filtros-df82b7338145?source=rss------bug_bounty-5 | Gorka | bug-bounty, bug-bounty-hunter, bug-bounty-writeup, bugbounty-writeup, bug-bounty-tips | 09-Sep-2025 |
| The Bug Bounty Hunter Begins | https://medium.com/0x33h/the-bug-bounty-hunter-begins-916ea2eb3f4a?source=rss------bug_bounty-5 | Agentic Monarch | bug-bounty, 33h, bug-bounty-hunter | 09-Sep-2025 |
| “That One Time I Found a Golden Ticket in a Desktop App” | https://infosecwriteups.com/that-one-time-i-found-a-golden-ticket-in-a-desktop-app-8db725c10338?source=rss------bug_bounty-5 | Aman Sharma | programming, bug-bounty, money, cybersecurity, hacking | 09-Sep-2025 |
| How Hackers Exploit AI Tools Like ChatGPT: What You Need to Know | https://medium.com/@verylazytech/how-hackers-exploit-ai-tools-like-chatgpt-what-you-need-to-know-eb728f9cf907?source=rss------bug_bounty-5 | Very Lazy Tech | chatgpt, ai-tools, penetration-testing, bug-bounty, cybersecurity | 09-Sep-2025 |
| Subdomain Takeover | https://medium.com/@yee-yore/subdomain-takeover-f64fdf323852?source=rss------bug_bounty-5 | yee-yore | cybersecurity, osint, red-team, bug-bounty, pentesting | 09-Sep-2025 |
| How to Find Hidden Web Vulnerabilities Using FFUF | https://medium.com/@ibtissamhammadi1/how-to-find-hidden-web-vulnerabilities-using-ffuf-6d59d013c467?source=rss------bug_bounty-5 | Ibtissam hammadi | technology, ffuf, bug-bounty, cybersecurity, hacking | 09-Sep-2025 |
| Beyond the Grind: The Cybersecurity Learning Hack That’s Not What You Think | https://medium.com/@albertbenbarry/beyond-the-grind-the-cybersecurity-learning-hack-thats-not-what-you-think-3a0254b0023f?source=rss------bug_bounty-5 | Mister_dump | information-technology, neuroscience, information-security, cybersecurity, bug-bounty | 09-Sep-2025 |
| MOI-CTF: dash rush writeup | by Dargham Ali | https://medium.com/@wireshark.pcap/moi-ctf-dash-rush-writeup-by-dargham-ali-13cafb958bc1?source=rss------bug_bounty-5 | Dargham Ali | bug-bounty, ctf-walkthrough, ctf, ctf-writeup, bug-bounty-writeup | 09-Sep-2025 |
| I Found 100 Exposed S3 Buckets This Way | https://aws.plainenglish.io/i-found-100-exposed-s3-buckets-this-way-b74941efe8e2?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, devops, data-science, aws-security, bug-bounty | 08-Sep-2025 |
| How I Traced a Phishing Campaign to Its C2 Server | https://medium.com/@paritoshblogs/how-i-traced-a-phishing-campaign-to-its-c2-server-df271d4f176a?source=rss------bug_bounty-5 | Paritosh | hacking, cybersecurity, phishing, phishing-awareness, bug-bounty | 08-Sep-2025 |
| When Support Portals Bite Back: DOM-XSS in a Helpcenter | https://medium.com/@devanshpatel930/when-support-portals-bite-back-dom-xss-in-a-helpcenter-4ac7e154ce4e?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty, cybersecurity, cybercrime, bug-bounty-writeup, bug-bounty-tips | 08-Sep-2025 |
| ️ SSRF Odyssey: How I Pillaged Internal Systems & Bagged a Heavy Bounty | https://medium.com/@iski/%EF%B8%8F-ssrf-odyssey-how-i-pillaged-internal-systems-bagged-a-heavy-bounty-5f88510be2cb?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, infosec, bug-bounty, money | 08-Sep-2025 |
| The Never-Ending Party: Invite Links That Never Die | https://ch1ta.medium.com/the-never-ending-party-invite-links-that-never-die-a6b000901477?source=rss------bug_bounty-5 | Lakshya | bug-bounty, bug-bounty-tips, appsec, report, security | 08-Sep-2025 |
| Parameter Cloaking in Web Cache Poisoning Using Rails Parameter Cloaking Scanner | https://bashoverflow.medium.com/parameter-cloaking-in-web-cache-poisoning-using-rails-parameter-cloaking-scanner-489b571587c4?source=rss------bug_bounty-5 | Bash Overflow | web-cache-poisoning, parameter-cloaking, bug-bounty, cache-poisoning-attack, response-poisoning | 08-Sep-2025 |
| Petshop Pro | https://medium.com/@dasmanish6176/petshop-pro-98dee28b54ef?source=rss------bug_bounty-5 | Dasmanish | hacker101, web-penetration-testing, ctf-writeup, bug-bounty | 08-Sep-2025 |
| Inside the Mind of a Bug Hunter: OSINT Techniques That Work in 2025 | https://medium.com/@narendarlb123/inside-the-mind-of-a-bug-hunter-osint-techniques-that-work-in-2025-27e18f55e4d1?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, information-security, ai, bug-bounty, cybersecurity | 08-Sep-2025 |
| Certificate Transparency Hunting: The Goldmine No One Talks About | https://javascript.plainenglish.io/certificate-transparency-hunting-the-goldmine-no-one-talks-about-b7f5914a962c?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, bug-bounty, cybersecurity, infosec, information-security | 08-Sep-2025 |
| DNS as an Attack Vector: How a Single Record Can Compromise an Entire Infrastructure | https://medium.com/meetcyber/dns-as-an-attack-vector-how-a-single-record-can-compromise-an-entire-infrastructure-44c82df4fc77?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, bug-bounty, cybersecurity, ai | 08-Sep-2025 |
| The Beginner’s Handbook to Cybersecurity | https://medium.com/@21bec131/the-beginners-handbook-to-cybersecurity-b3966286b125?source=rss------bug_bounty-5 | Tanvi Chauhan | cybersecurity, security, cybercrime, bug-bounty, cyber-security-awareness | 08-Sep-2025 |
| SQL Injection: Practical Step by Step Guide for Ethical Hackers | https://medium.com/@rashad.desk/sql-injection-practical-step-by-step-guide-for-ethical-hackers-10c5750a4677?source=rss------bug_bounty-5 | Rashadul Islam | hacking, cybersecurity, technology, bug-bounty, sql-injection | 08-Sep-2025 |
| How I Hack Websites With Just HTML Injection | https://infosecwriteups.com/how-i-hack-websites-with-just-html-injection-9ccbc87faf47?source=rss------bug_bounty-5 | Ibtissam hammadi | html, recon, ethical-hacking, cybersecurity, bug-bounty | 08-Sep-2025 |
| WinRAR Flaw: How It Was Exploited to Spread Malware. | https://infosecwriteups.com/winrar-flaw-how-it-was-exploited-to-spread-malware-61088e6e9ef8?source=rss------bug_bounty-5 | S.Ali | technology, money, cyber-security-awareness, bug-bounty, cybersecurity | 08-Sep-2025 |
| ⏱️ SLA Demystified: The Promise Behind Every Service | https://medium.com/@natarajanck2/%EF%B8%8F-sla-demystified-the-promise-behind-every-service-87cd9f639859?source=rss------bug_bounty-5 | Natarajan C K | bug-bounty, information-security, cybersecurity, vulnerability, security | 08-Sep-2025 |
| A Collection of Airbnb IDORs — Worth $28,500 — Leaking Private Photos, Addresses & More | https://medium.com/@justas_b1/a-collection-of-airbnb-idors-worth-28-500-leaking-private-photos-addresses-more-b4ef85d45c8f?source=rss------bug_bounty-5 | Justas_b | travel, airbnb, cybersecurity, infosec, bug-bounty | 08-Sep-2025 |
| Ultimate Google Dorking: A Comprehensive Guide | https://medium.com/@hxxfrd73/ultimate-google-dorking-a-comprehensive-guide-098ac0a3038d?source=rss------bug_bounty-5 | hxxfrd | ethical-hacking, google-dork, cybersecurity, information-security, bug-bounty | 08-Sep-2025 |
| ️ Top 5 Cybersecurity Projects You Can Build with n8n — Free & Beginner-Friendly | https://sukhveersingh97997.medium.com/%EF%B8%8F-top-5-cybersecurity-projects-you-can-build-with-n8n-free-beginner-friendly-270c06081558?source=rss------bug_bounty-5 | Sukhveer Singh | cybersecurity, n8n, projects, automation, bug-bounty | 08-Sep-2025 |
| Why I Made a 30 Minute poc video for Mercedes Benz | https://mrknightnidu.medium.com/why-i-made-a-30-minute-poc-video-for-mercedes-benz-fc27195a1717?source=rss------bug_bounty-5 | MRKNIGHT-NIDU | cybersecurity, mercedes-benz, bug-bounty, hacker, bugs | 08-Sep-2025 |
| Beyond SPF & DKIM: How Incomplete Email Security Opens the Door to Spoofing, Phishing, and… | https://systemweakness.com/beyond-spf-dkim-how-incomplete-email-security-opens-the-door-to-spoofing-phishing-and-6fa9aa218eb2?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, cybersecurity, ai, infosec, information-security | 08-Sep-2025 |
| When Rules Break: The Hidden Dangers of Business Logic Flaws That Can Destroy Your App | https://javascript.plainenglish.io/when-rules-break-the-hidden-dangers-of-business-logic-flaws-that-can-destroy-your-app-d43732a9b234?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, cybersecurity, ai, information-security | 08-Sep-2025 |
| When Your Bug Gets Marked “Duplicate”: A Netflix Atlas Security Research Journey | https://letchupkt.medium.com/when-your-bug-gets-marked-duplicate-a-netflix-atlas-security-research-journey-eae25a5f4f35?source=rss------bug_bounty-5 | LETCHU PKT | bug-bounty, bug-bounty-tips, bug-bounty-writeup, real-world-bug-hunting, bug-hunter | 8-Sep-2025 |
| AspGoat: The First Intentionally Vulnerable modern ASP.NET Core App for OWASP Top 10 | https://infosecwriteups.com/aspgoat-the-first-intentionally-vulnerable-modern-asp-net-core-app-for-owasp-top-10-d6037f7ac3f1?source=rss------bug_bounty-5 | Soham | cybersecurity, bug-bounty, ethical-hacking, dotnet, application-security | 8-Sep-2025 |
| How I Achieved 100 Points in OSCP in Just 3–4 Months — My 2025 Journey | https://diasadin9.medium.com/how-i-achieved-100-points-in-oscp-in-just-3-4-months-my-2025-journey-795a7f6f05e5?source=rss------bug_bounty-5 | Diasadin | cybersecurity, oscp, ethical-hacking, penetration-testing, bug-bounty | 8-Sep-2025 |
| How to get a free VPS for bug hunting beginners | https://medium.com/@ibtissamhammadi1/how-to-get-a-free-vps-for-bug-hunting-beginners-d55080816470?source=rss------bug_bounty-5 | Ibtissam hammadi | free-tools, vps, cybersecurity, infosec, bug-bounty | 8-Sep-2025 |
| Hunting OS Command Injection | https://infosecwriteups.com/hunting-os-command-injection-039dbb284c7d?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-writeup, bug-bounty-tips, bug-bounty, burpsuite, vulnerability | 8-Sep-2025 |
| How I Found My First SQL Injection Bug Bounty | https://infosecwriteups.com/how-i-found-my-first-sql-injection-bug-bounty-a6ac6e1add39?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty, ethical-hacking, sql-injection, web-security | 8-Sep-2025 |
| Weaponizing Automation: Crafting a custom recon pipeline for pentesters | https://osintteam.blog/weaponizing-automation-crafting-a-custom-recon-pipeline-for-pentesters-7ca9c795a3b3?source=rss------bug_bounty-5 | Aenosh Rajora | cybersecurity, bug-bounty, penetration-testing, reconnaissance, automation | 08-Sep-2025 |
| From Open Redirect to Potential Account Takeover | https://medium.com/@LucianoGriffa/from-open-redirect-to-potential-account-takeover-f6856c2aafe2?source=rss------bug_bounty-5 | Luciano Griffa | web-vulnerabilities, cybersecurity, bug-bounty | 08-Sep-2025 |
| Linux Services & Daemon Exploitation | https://medium.com/@cybersecplayground/linux-services-daemon-exploitation-e2b0ad1f05f8?source=rss------bug_bounty-5 | Cybersecplayground | bug-bounty, exploitation, pentesting, hunting, linux | 08-Sep-2025 |
| The Recent NPM Supply Chain Attack: A Wake-Up Call for Developers | https://medium.com/@umeryousuf26/the-recent-npm-supply-chain-attack-a-wake-up-call-for-developers-aa8df8952d08?source=rss------bug_bounty-5 | Umer Yousuf | cybersecurity, bug-bounty, cyberattack, npm, phishing | 08-Sep-2025 |
| Hacking != Reconnaissance (real talk) | https://medium.com/@iserjaoui/hacking-reconnaissance-real-talk-1ec1443e9aaf?source=rss------bug_bounty-5 | Iserjaoui | web-security, penetration-testing, ethical-hacking, bug-bounty, reconnaissance | 08-Sep-2025 |
| Broken like Hijacking earned me $150 | https://infosecwriteups.com/broken-like-hijacking-earned-me-150-d67fc0571582?source=rss------bug_bounty-5 | Canonminibeast | bug-bounty-tips, cybersecurity, bug-bounty, hacking, bug-bounty-writeup | 08-Sep-2025 |
| From Open Redirect to Account Takeover | https://medium.com/@LucianoGriffa/from-open-redirect-to-potential-account-takeover-f6856c2aafe2?source=rss------bug_bounty-5 | Luciano Griffa | web-vulnerabilities, cybersecurity, bug-bounty | 08-Sep-2025 |
| HTTP Smuggler: Demystifying HTTP Request Smuggling | https://medium.com/@ekoms1/http-smuggler-demystifying-http-request-smuggling-7daf32e89047?source=rss------bug_bounty-5 | ekomsSavior | pentesting, cybersecurity, bug-bounty, ethical-hacking, hacking | 08-Sep-2025 |
| Impact of AI on the Pentesting Industry | https://medium.com/@nexarus.sec/impact-of-ai-on-the-pentesting-industry-0ae58c53d43d?source=rss------bug_bounty-5 | Nexarus Security | pentest, cybersecurity, ai, bug-bounty, pentesting | 07-Sep-2025 |
| Shodan Recon Tips | https://cybersecuritywriteups.com/shodan-recon-tips-352f0d7e8fdd?source=rss------bug_bounty-5 | AbhirupKonwar | shodan, bug-bounty, pentesting, ethical-hacking, bug-bounty-tips | 07-Sep-2025 |
| How I Discovered Account Takeover (ATO) via IDOR lead to 500$ bounty | https://infosecwriteups.com/how-i-discovered-account-takeover-ato-via-idor-lead-to-500-bounty-537bc7ff10b8?source=rss------bug_bounty-5 | JEETPAL | bug-bounty, account-takeover, bug-bounty-writeup, infosec, bug-bounty-tips | 07-Sep-2025 |
| From Locked to Looted: My Journey of IDOR Chains to Almost-Admin Access | https://infosecwriteups.com/from-locked-to-looted-my-journey-of-idor-chains-to-almost-admin-access-d15abf0046f9?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, cybersecurity, money, hacking | 07-Sep-2025 |
| Get Free Annual Subscriptions on Try Hack Me , Hurry Up! | https://medium.com/@hrofficial62/get-free-annual-subscriptions-on-try-hack-me-hurry-up-4927da5b7bc6?source=rss------bug_bounty-5 | Mr Horbio | subscription, bug-bounty, penetration-testing, tryhackme, hacking | 07-Sep-2025 |
| How to exploit? Pentesting Postgresql — PORT 5432,5433 | https://medium.com/@verylazytech/how-to-exploit-pentesting-postgresql-port-5432-5433-645c8eea8a3c?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, postgresql, bug-bounty, cybersecurity, penetration-testing | 07-Sep-2025 |
| MX Marks the Spot: Finding Hidden Weaknesses in Your Email Infrastructure | https://medium.com/meetcyber/mx-marks-the-spot-finding-hidden-weaknesses-in-your-email-infrastructure-1cd724a529c4?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, bug-bounty, ai, cybersecurity | 07-Sep-2025 |
| Gaining Admin Access by Modifying a Hidden Parameter in User Profile | https://medium.com/@ag.gholami.2006/gaining-admin-access-by-modifying-a-hidden-parameter-in-user-profile-c491bee0cabd?source=rss------bug_bounty-5 | Ali Ziro | aliziro, cybersecurity, bug-bounty, penetration-testing, idor-vulnerability | 07-Sep-2025 |
| How I Hacked An AI Based Company | https://medium.com/@lewrohan1/how-i-hacked-an-ai-based-company-9e190e0f5126?source=rss------bug_bounty-5 | Rohan_lew | bug-bounty-writeup, bug-bounty | 07-Sep-2025 |
| How Hackers Earn Passive Income With Recon | https://infosecwriteups.com/how-hackers-earn-passive-income-with-recon-5ee3fd25513d?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, coding, hacking, cybersecurity, programming | 07-Sep-2025 |
| Stories of Sensitive Data Exposure: What I Found as a Pentester and How You Can Prevent It: Episode… | https://infosecwriteups.com/stories-of-sensitive-data-exposure-what-i-found-as-a-pentester-and-how-you-can-prevent-it-episode-1362bdf27049?source=rss------bug_bounty-5 | Yamini Yadav | bug-bounty, cybersecurity, web-applications, penetration-testing, ethical-hacking | 07-Sep-2025 |
| Crack the 403 Code: Turn Forbidden Errors into Bug Bounty Wins | https://infosecwriteups.com/crack-the-403-code-turn-forbidden-errors-into-bug-bounty-wins-1f5efe98b987?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, penetration-testing, bug-bounty-writeup, vulnerability, bug-bounty-tips | 07-Sep-2025 |
| MOI-CTF: hireplus writeup | by Dargham Ali | https://medium.com/@wireshark.pcap/moi-ctf-hireplus-writeup-by-dargham-ali-38e74eac104d?source=rss------bug_bounty-5 | Dargham Ali | bug-bounty, ctf-writeup, ctf, ctf-walkthrough, sql | 07-Sep-2025 |
| Directory Traversal Vulnerabilities and Server File Access | https://medium.com/@esrakyhn/directory-traversal-vulnerabilities-and-server-file-access-25bc2d724974?source=rss------bug_bounty-5 | Esra Kayhan | owasp, ethical-hacking, penetration-testing, bug-bounty, cybersecurity | 07-Sep-2025 |
| Making Internal to Outbound File Transfers and Reverse Shells Effortless with Ligolo-MP Redirectors | https://cmpspiti.medium.com/why-complicate-it-344636e610f6?source=rss------bug_bounty-5 | Spiros Pitikaris @cmpspiti | hackthebox, htb, hacking, bug-bounty, oscp | 07-Sep-2025 |
| My Journey of Finding Two P1 Vulnerabilities | https://medium.com/@vigneshkj131/my-journey-of-finding-two-p1-vulnerabilities-ca9b3b4d36a4?source=rss------bug_bounty-5 | Chip | cybersecurity, information-security, ethical-hacking, bug-bounty | 07-Sep-2025 |
| Unlocking Secrets: Understanding and Preventing IDOR Vulnerability | https://medium.com/@neelrsharma1/unlocking-secrets-understanding-and-preventing-idor-vulnerability-3f73e142be3f?source=rss------bug_bounty-5 | Neel Sharma | cybersecurity, bug-bounty, idor-vulnerability | 07-Sep-2025 |
| Coupon Code Leakage & Response Manipulation got me 40% discount in a self hosted bug bounty company… | https://medium.com/@InsbatArshad/coupon-code-leakage-response-manipulation-got-me-40-discount-in-a-self-hosted-bug-bounty-company-e9d5c94aafa2?source=rss------bug_bounty-5 | Be nice insabat | programming, hacking, cybersecurity, penetration-testing, bug-bounty | 07-Sep-2025 |
| Week 5 of My 90-Day Challenge: Automation and New Tools | https://medium.com/@sl0th0x87/week-5-of-my-90-day-challenge-automation-and-new-tools-c53f81598753?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, challenge, cybersecurity, weekly-report, about-me | 07-Sep-2025 |
| Bug Bounty: Information Disclosure: el fallo invisible que rompe sistemas | https://gorkaaa.medium.com/bug-bounty-information-disclosure-el-fallo-invisible-que-rompe-sistemas-7ac62023ac1c?source=rss------bug_bounty-5 | Gorka | bug-bounty, bug-bounty-tips, bugbounty-writeup, bug-bounty-writeup | 07-Sep-2025 |
| How to Find a Website’s Real IP Behind Cloudflare | https://medium.com/@ibtissamhammadi1/how-to-find-a-websites-real-ip-behind-cloudflare-695dd179c977?source=rss------bug_bounty-5 | Ibtissam hammadi | security, cybersecurity, reconnaissance, cloudflare, bug-bounty | 07-Sep-2025 |
| How I Found a High-Severity IDOR Without Using Any Proxy Tools | https://medium.com/@yusufabdulkadir74/how-i-found-a-high-severity-idor-without-using-any-proxy-tools-8a6d2d09efc7?source=rss------bug_bounty-5 | Yusuf | application-security, cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 07-Sep-2025 |
| Week 8 — Learning Basic Concepts of Cybersecurity | https://iamaangx028.medium.com/week-8-learning-basic-concepts-of-cybersecurity-77c6e4d588c5?source=rss------bug_bounty-5 | Aang | information-security, ethical-hacking, bug-bounty-tips, bug-bounty, information-technology | 07-Sep-2025 |
| MOI-CTF: predictable writeup | by Dargham Ali | https://medium.com/@wireshark.pcap/moi-ctf-predictable-writeup-by-dargham-ali-bce2fcebbc2f?source=rss------bug_bounty-5 | Dargham Ali | ctf-walkthrough, ctf, ctf-writeup, web, bug-bounty | 07-Sep-2025 |
| Hunting Bugs, Learning Fast | https://medium.com/@mehdi.benfredj15/hunting-bugs-learning-fast-484feb15d4d3?source=rss------bug_bounty-5 | Mehdi Ben Fredj | cybersecurity, bugbounty-writeup, bug-bounty, bug-bounty-tips, bugs | 07-Sep-2025 |
| When Logic Meets Authentication — Orphaned Accounts to Full Control | https://medium.com/@ahmedramadan.ar16148/when-logic-meets-authentication-orphaned-accounts-to-full-control-6140143e1d20?source=rss------bug_bounty-5 | Dr Rmdn | vulnerability, cybersecurity, bug-bounty, penetration-testing, oauth | 07-Sep-2025 |
| Hunting Bugs, Learning Fast | https://medium.com/meetcyber/hunting-bugs-learning-fast-484feb15d4d3?source=rss------bug_bounty-5 | Mehdi Ben Fredj | cybersecurity, bugbounty-writeup, bug-bounty, bug-bounty-tips, bugs | 07-Sep-2025 |
| The Ultimate SQLMap Guide: Detecting and Exploiting SQL Injection | https://medium.com/@jpablo13/the-ultimate-sqlmap-guide-detecting-and-exploiting-sql-injection-0499a6091022?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, sql-injection, technology, hacking, bug-bounty | 06-Sep-2025 |
| iOS Penetration Testing — Part 2 (Advanced Guide) | https://p4n7h3rx.medium.com/ios-penetration-testing-part-2-advanced-guide-e769cbafcf04?source=rss------bug_bounty-5 | p4n7h3rx | hacking, bug-bounty, ios-penetration-testing, penetration-testing, bug-bounty-tips | 06-Sep-2025 |
| Cybersecurity Essentials 101- Conquering the CIA Triad | https://medium.com/@stotraa/cybersecurity-essentials-101-conquering-the-cia-triad-0c3e97331bd7?source=rss------bug_bounty-5 | St0tRaa | cybersecurity, writing, bug-bounty, infosec, computer-science | 06-Sep-2025 |
| When Supabase Api Key Misuse Turns Vibecoding Into Vibeleaking | https://medium.com/@parthh_rana/when-supabase-api-key-misuse-turns-vibecoding-into-vibeleaking-8cb049046135?source=rss------bug_bounty-5 | Parth Rana | vibe-coding, supabase, ai, software-development, bug-bounty | 06-Sep-2025 |
| 5 Reasons Why Smart Companies Will Choose Bugthrive for Their Bug Bounty Program Management | https://medium.com/@ProwlSec/5-reasons-why-smart-companies-will-choose-bugthrive-for-their-bug-bounty-program-management-0554c0ec38fc?source=rss------bug_bounty-5 | ProwlSec | ethical-hacking, infosec, cybersecurity, bug-bounty, appsec | 06-Sep-2025 |
| The Ultimate SQLMap Guide: Detecting and Exploiting SQL Injection | https://medium.com/meetcyber/the-ultimate-sqlmap-guide-detecting-and-exploiting-sql-injection-0499a6091022?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, sql-injection, technology, hacking, bug-bounty | 06-Sep-2025 |
| Is Your API Key Alive or Dead? — Validate in Minutes with SecurityToolkits API Key Testing Tool | https://medium.com/@thirdeye1910/is-your-api-key-alive-or-dead-validate-in-minutes-with-securitytoolkits-api-key-testing-tool-0f887686fe3c?source=rss------bug_bounty-5 | Haxshadow | security, bugbounty-tips, temp-mail-api-key, bug-bounty, api-key | 06-Sep-2025 |
| “Day 30: The Finale — The Bug That Almost Broke the Internet (Or Just My Testing Account)” | https://infosecwriteups.com/day-30-the-finale-the-bug-that-almost-broke-the-internet-or-just-my-testing-account-d63112e13427?source=rss------bug_bounty-5 | Aman Sharma | hacking, bug-bounty, technology, programming, cybersecurity | 06-Sep-2025 |
| How to Discover a Website’s Hidden Origin Server | https://infosecwriteups.com/how-to-discover-a-websites-hidden-origin-server-3e3f25d5be39?source=rss------bug_bounty-5 | Ibtissam hammadi | waf-bypass, cybersecurity, bug-bounty, reconnaissance, cloudflare | 06-Sep-2025 |
| Phish and Fetch: Turning Weak Email Validations Into Full System Access | https://infosecwriteups.com/phish-and-fetch-turning-weak-email-validations-into-full-system-access-eb2fcd2743f2?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, infosec, bug-bounty, money | 06-Sep-2025 |
| OSINT — A Beginner’s Guide to Open Source Intelligence. | https://infosecwriteups.com/osint-a-beginners-guide-to-open-source-intelligence-a510063b9474?source=rss------bug_bounty-5 | S.Ali | operational-security, technology, hacking, bug-bounty, cybersecurity | 06-Sep-2025 |
| Host Header Injection in Password Reset Function: From Header Manipulation to Account Takeover | https://medium.com/@dgexploit/host-header-injection-in-password-reset-function-from-header-manipulation-to-account-takeover-9572f39c6cd6?source=rss------bug_bounty-5 | Dgexploit | bug-bounty, web-security, cyber-security-awareness, ethical-hacking, cybersecurity | 06-Sep-2025 |
| Postbook | https://medium.com/@dasmanish6176/postbook-be5d10b805ed?source=rss------bug_bounty-5 | Dasmanish | ctf-writeup, web-penetration-testing, hacker101, bug-bounty | 06-Sep-2025 |
| So You Want to Be a Hacker? Forget the RGB. | https://medium.com/@viratavi1223/so-you-want-to-be-a-hacker-forget-the-rgb-e861ea4a29d4?source=rss------bug_bounty-5 | Viratavi | ethical-hacking, hackerone, web-security, cybersecurity, bug-bounty | 06-Sep-2025 |
| ⏱️ When Time Betrays You: Exploiting Race Conditions in a Global SaaS Platform | https://javascript.plainenglish.io/%EF%B8%8F-when-time-betrays-you-exploiting-race-conditions-in-a-global-saas-platform-bb524eab9fd3?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, infosec, ai, cybersecurity | 06-Sep-2025 |
| How to exploit? Multicast DNS (mDNS) and DNS-SD — PORT 5353/UDP | https://medium.com/@verylazytech/how-to-exploit-multicast-dns-mdns-and-dns-sd-port-5353-udp-2ff73a84e16d?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, dns, bug-bounty, ethical-hacking, penetration-testing | 06-Sep-2025 |
| Bypassing CAPTCHA with No Rate Limiting potentially leads to ATO. | https://medium.com/@youssefawad1357/bypassing-captcha-with-no-rate-limiting-potentially-leading-to-ato-0a7714c9042d?source=rss------bug_bounty-5 | youssef awad | penetration-testing, cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 06-Sep-2025 |
| How I Hacked All Universities in My City | https://medium.com/@Charon19d/how-i-hacked-all-universities-in-my-city-d6b8e320455c?source=rss------bug_bounty-5 | Charon19d | hacking, charon19d, bug-bounty, college, cybersecurity | 06-Sep-2025 |
| SQL Injection Vulnerability Scanner Tools | https://medium.com/@nexusphere/sql-injection-vulnerability-scanner-tools-3fe93a6c9eda?source=rss------bug_bounty-5 | Balki Maharaj | tools, bug-bounty, bounties, sqli, bugs | 06-Sep-2025 |
| How Fresh Mint Can Keep Gnats Out of Your Home | https://medium.com/@deeishere/how-fresh-mint-can-keep-gnats-out-of-your-home-e4f21c8a5274?source=rss------bug_bounty-5 | Tiann Jackson | repellent, gnats, summer-bags, summer, bug-bounty | 06-Sep-2025 |
| When Paywall is Just a Wallpaper | https://aryanstha.medium.com/when-paywall-is-just-a-wallpaper-81b0ed3eb9f1?source=rss------bug_bounty-5 | Aryan Shrestha | cybersecurity, appsec, ethical-hacking, bug-bounty | 06-Sep-2025 |
| How I Bypassed CAPTCHA and No Rate Limiting Leading to Account Takeover | https://medium.com/@youssefawad1357/bypassing-captcha-with-no-rate-limiting-potentially-leading-to-ato-0a7714c9042d?source=rss------bug_bounty-5 | youssef awad | penetration-testing, cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 06-Sep-2025 |
| Bug Bounty: The Secret Endpoint That Made Premium Free | https://medium.com/@0xammarsaber/bug-bounty-the-secret-endpoint-that-made-premium-free-71295be2dc66?source=rss------bug_bounty-5 | 0xAmmar | hacking, bug-bounty-tips, pentesting, bug-bounty, cybersecurity | 06-Sep-2025 |
| Merchant Transaction Data Exposure | https://infosecwriteups.com/merchants-transaction-data-5a95f4afc59a?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | programming, hacking, bug-bounty, technology, cybersecurity | 06-Sep-2025 |
| Bug Bounty: No hay payload que sustituya a una buena intuición | https://gorkaaa.medium.com/bug-bounty-no-hay-payload-que-sustituya-a-una-buena-intuici%C3%B3n-49c7f079f32c?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty-writeup, bug-bounty-hunter, bugbounty-writeup, bug-bounty | 06-Sep-2025 |
| “ JSON POST Bodies: The Hidden Goldmine of XSS & Bug Bounties” | https://medium.com/@zoningxtr/json-post-bodies-the-hidden-goldmine-of-xss-bug-bounties-b19fb7e09e69?source=rss------bug_bounty-5 | Zoningxtr | json, bug-bounty, penetration-testing, cybersecurity, web-development | 06-Sep-2025 |
| Vulnerable Js Hunting | https://medium.com/@deezacker/vulnerable-js-hunting-4723a3001f13?source=rss------bug_bounty-5 | Deezacker | penetration-testing, bug-bounty, hacking, cybersecurity, bug-bounty-tips | 06-Sep-2025 |
| [Guide] Crafting a neat and valuable bug bounty report | https://medium.com/@pm_/guide-crafting-a-neat-and-valuable-bug-bounty-report-0bf1bc933bdc?source=rss------bug_bounty-5 | pm | bug-bounty-writeup, bug-bounty-tips, bug-bounty, application-security, bounty-program | 06-Sep-2025 |
| I Found a Critical Security Flaw Using Only My Browser | https://medium.com/@ibtissamhammadi1/i-found-a-critical-security-flaw-using-only-my-browser-a49af831a499?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, security, hacking, infosec, cybersecurity | 06-Sep-2025 |
| Stored XSS with Cloudflare WAF Bypass | https://hexaphp.medium.com/stored-xss-with-cloudflare-waf-bypass-420c99aba97b?source=rss------bug_bounty-5 | hexaphp | bug-hunting, bugs, bugbounty-writeup, bug-bounty, cybersecurity | 06-Sep-2025 |
| Guía Definitiva de SQLMap: Detección y Explotación de SQL Injection | https://medium.com/@jpablo13/gu%C3%ADa-definitiva-de-sqlmap-detecci%C3%B3n-y-explotaci%C3%B3n-de-sql-injection-f3b8cb20d950?source=rss------bug_bounty-5 | JPablo13 | technology, cybersecurity, bug-bounty, sql-injection, hacking | 05-Sep-2025 |
| ☕ My First Critical Bug: Account Takeover with Just One Tiny Letter | https://aiwolfie.medium.com/my-first-critical-bug-account-takeover-with-just-one-tiny-letter-2f8e263400a5?source=rss------bug_bounty-5 | AIwolfie | bugs, penetration-testing, account-takeover, ethical-hacking, bug-bounty | 05-Sep-2025 |
| A little something to get you started | https://medium.com/@dasmanish6176/a-little-something-to-get-you-started-d1c91463ca83?source=rss------bug_bounty-5 | Dasmanish | web-penetration-testing, ctf-writeup, bug-bounty, hacker101 | 05-Sep-2025 |
| When the Back Button Becomes Dangerous: My Safari Bug Bounty Journey | https://medium.com/@syarifsajjad07/when-the-back-button-becomes-dangerous-my-safari-bug-bounty-journey-8b7dee70debb?source=rss------bug_bounty-5 | Syarifsajjad | cybersecurity, bug-bounty, cve | 05-Sep-2025 |
| ☁️ Cloud Chaos: How Misconfigured Buckets Spilled Sensitive Data Everywhere | https://medium.com/@iski/%EF%B8%8F-cloud-chaos-how-misconfigured-buckets-spilled-sensitive-data-everywhere-39f0099e1012?source=rss------bug_bounty-5 | Iski | infosec, money, hacking, bug-bounty, cybersecurity | 05-Sep-2025 |
| Hunting GraphQL Gold: Uncovering Hidden Vulnerabilities in Modern APIs | https://infosecwriteups.com/hunting-graphql-gold-uncovering-hidden-vulnerabilities-in-modern-apis-ae3c3dbf462d?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, vulnerability, penetration-testing, bug-bounty-writeup, bug-bounty-tips | 05-Sep-2025 |
| Intercepting Thick Client TCP and TLS Traffic | https://infosecwriteups.com/intercepting-thick-client-tcp-and-tls-traffic-72fab07fffe7?source=rss------bug_bounty-5 | Sourav Kalal | pentesting, cybersecurity, bug-bounty, application-security, infosec | 05-Sep-2025 |
| How a Simple Race Condition Vulnerability Down a SaaS Global Platform | https://infosecwriteups.com/how-a-simple-race-condition-vulnerability-down-a-saas-global-platform-8093528b403f?source=rss------bug_bounty-5 | Abhi Sharma | saas, bug-bounty, pentesting, cybersecurity, do | 05-Sep-2025 |
| Bypassing Physical Security in Red Team Engagements — 2025 | https://infosecwriteups.com/bypassing-physical-security-in-red-team-engagements-2025-d284c2fc4fa8?source=rss------bug_bounty-5 | Akash Rajendra Patil | ethical-hacking, cybersecurity, bug-bounty, physical-security, red-teaming | 05-Sep-2025 |
| Micro-CMS v1 | https://medium.com/@dasmanish6176/micro-cms-v1-46466e09d4e3?source=rss------bug_bounty-5 | Dasmanish | hacker101, ctf-writeup, bug-bounty, web-penetration-testing | 05-Sep-2025 |
| 11. Secrets in JS Files — And How to Find Them | https://infosecwriteups.com/11-secrets-in-js-files-and-how-to-find-them-f4088cf71610?source=rss------bug_bounty-5 | Abhijeet kumawat | hidden, bug-bounty, secrets, json, hacking | 05-Sep-2025 |
| iOS Penetration Testing — Part 1 (Beginner’s Guide) | https://p4n7h3rx.medium.com/ios-penetration-testing-part-1-beginners-guide-8d6e6b189f5d?source=rss------bug_bounty-5 | p4n7h3rx | hacking, ios-penetration-testing, penetration-testing, bug-bounty, bug-bounty-tips | 05-Sep-2025 |
| Day 8 of MCP Security: Secrets in Context — Managing Secrets and Tokens in MCP Systems | https://codewithvamp.medium.com/day-8-of-mcp-security-secrets-in-context-managing-secrets-and-tokens-in-mcp-systems-41b4ad3d61fe?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | bug-bounty, chatgpt, hacking, cybersecurity, mcp-server | 05-Sep-2025 |
| How to Escape the ChatGPT Echo Chamber ? | https://medium.com/@forte.social/how-to-escape-the-chatgpt-echo-chamber-2c83488baf7a?source=rss------bug_bounty-5 | eSecForte Technologies | bug-bounty, firewall, esecforte, chatgpt, hacking | 05-Sep-2025 |
| Start Testing for This Bug and watch Your Bug Bounty Resu | https://medium.com/@jeosantos2005/start-testing-for-this-bug-and-watch-your-bug-bounty-resu-091602b301b5?source=rss------bug_bounty-5 | Jeosantos | bug-bounty-tips, bug-bounty-writeup, bug-bounty, red-team, cybersecurity | 05-Sep-2025 |
| Micro-CMS v2 | https://medium.com/@dasmanish6176/micro-cms-v2-2458f5e5a470?source=rss------bug_bounty-5 | Dasmanish | web-penetration-testing, ctf-writeup, hacker101, bug-bounty | 05-Sep-2025 |
| How to exploit? Docker Registry — PORT 5000 | https://medium.com/@verylazytech/how-to-exploit-docker-registry-port-5000-7c8421168234?source=rss------bug_bounty-5 | Very Lazy Tech | docker, bug-bounty, exploitation, ethical-hacking, penetration-testing | 05-Sep-2025 |
| Burp Suite for Beginners — Your First Step into Web Hacking | https://medium.com/@rashad.desk/burp-suite-for-beginners-your-first-step-into-web-hacking-9a255feaa6e7?source=rss------bug_bounty-5 | Rashadul Islam | cybersecurity, bug-bounty, hacking, ethical-hacking, technology | 05-Sep-2025 |
| Account Takeover via Insecure Email Change — Critical Vulnerability | https://medium.com/@3bddagg3/account-takeover-via-insecure-email-change-critical-vulnerability-b67d44d7f600?source=rss------bug_bounty-5 | alr | bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bug-bounty | 05-Sep-2025 |
| How I Automated My Bug Bounty Recon with n8n (No Coding Required) | https://sukhveersingh97997.medium.com/how-i-automated-my-bug-bounty-recon-with-n8n-no-coding-required-39f5a59209c7?source=rss------bug_bounty-5 | Sukhveer Singh | bug-hunting, automation, n8n, bug-bounty, workflow | 05-Sep-2025 |
| “Day 29: The Web Cache Deception Heist — How I Stole Private Data Without Breaking a Single… | https://infosecwriteups.com/day-29-the-web-cache-deception-heist-how-i-stole-private-data-without-breaking-a-single-276b8667a4cf?source=rss------bug_bounty-5 | Aman Sharma | technology, money, programming, cybersecurity, bug-bounty | 05-Sep-2025 |
| Hacking WordPress | https://medium.com/@MohammedMHassan/hacking-wordpress-6f25147fd3a9?source=rss------bug_bounty-5 | Mohammed Hassan | hackerone, penetration-testing, wordpress, bug-bounty, cybersecurity | 05-Sep-2025 |
| I Automated My Recon and Found More Critical Bugs | https://medium.com/@ibtissamhammadi1/i-automated-my-recon-and-found-more-critical-bugs-2346c951fdf6?source=rss------bug_bounty-5 | Ibtissam hammadi | infosec, cybersecurity, reconnaissance, bug-bounty, ethical-hacking | 05-Sep-2025 |
| OTP bypass via logic flaw | https://medium.com/@moatymohamed897/otp-bypass-via-logic-flaw-8a5c96f84fab?source=rss------bug_bounty-5 | Mohamed Abdelmoatie | otp-bypass, bug-bounty-tips, bug-bounty-writeup, bug-bounty, information-security | 05-Sep-2025 |
| How I Found an IDOR Vulnerability in public bug bounty program of bugcrowd and What You Can Learn… | https://medium.com/@InsbatArshad/how-i-found-an-idor-vulnerability-in-public-bug-bounty-program-of-bugcrowd-and-what-you-can-learn-a1cd3ae2d326?source=rss------bug_bounty-5 | Be nice insabat | bug-bounty, programming, hacking, cybersecurity, penetration-testing | 05-Sep-2025 |
| How I Found an Authentication Bypass at CoinMarketCap! | https://0xbartita.medium.com/how-i-found-an-authentication-bypass-at-coinmarketcap-191a13fec176?source=rss------bug_bounty-5 | 0xBartita | bug-bounty-tips, cybersecurity, hackerone, cryptocurrency, bug-bounty | 05-Sep-2025 |
| How to Use Nuclei as an AppSec DAST Tool in DevSecOps | https://iaraoz.medium.com/how-to-use-nuclei-as-an-appsec-dast-tool-in-devsecops-90d0ab5963bb?source=rss------bug_bounty-5 | Israel Aráoz Severiche | owasp, appsec, hacking, bug-bounty, security | 05-Sep-2025 |
| Bug Bounty: NoSQL Injection: la vulnerabilidad silenciosa que muchos pasan por alto | https://gorkaaa.medium.com/bug-bounty-nosql-injection-la-vulnerabilidad-silenciosa-que-muchos-pasan-por-alto-0a1b45f53bd7?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugbounty-writeup | 05-Sep-2025 |
| The Hidden Path to an HP Printer: A Real-World Discovery | https://infosecwriteups.com/the-hidden-path-to-an-hp-printer-a-real-world-discovery-4b05187a8271?source=rss------bug_bounty-5 | Manav | offensive-security, bug-bounty, web-applications | 05-Sep-2025 |
| I Was Just Messing Around on a WordPress Site and Found This… | https://medium.com/@0x62616B61/i-was-just-messing-around-on-a-wordpress-site-and-found-this-4b44aebac6e7?source=rss------bug_bounty-5 | 0x62616B61 | wordpress-security, cyber-security-learning, penetration-testing, bug-bounty, ethical-hacking | 05-Sep-2025 |
| Security Logging and Monitoring Failures (OWASP Top 10 #9) — Simplified | https://medium.com/@chai.exe/security-logging-and-monitoring-failures-owasp-top-10-9-simplified-bef9cad1d063?source=rss------bug_bounty-5 | Chai | owasp-top-10, bug-bounty, tryhackme, cybersecurity, web-application-security | 05-Sep-2025 |
| How I Found Broken Access Control -Then I Stopped Hunting | https://infosecwriteups.com/how-i-found-broken-access-control-then-i-stopped-hunting-a48187e8702a?source=rss------bug_bounty-5 | Umanhonlen Gabriel | hacker, security, bug-bounty, cryptocurrency, bug-bounty-tips | 05-Sep-2025 |
| Server-Side Request Forgery (SSRF) (OWASP Top 10 #10) — Simplified | https://medium.com/@chai.exe/server-side-request-forgery-ssrf-owasp-top-10-10-simplified-0a7ccd4448ab?source=rss------bug_bounty-5 | Chai | owasp-top-10, web-application-security, cybersecurity, bug-bounty, tryhackme | 05-Sep-2025 |
| How i Got $500 From Information Disclosure By Sending a Jpeg | https://medium.com/@0xMado-1Tap/how-i-got-500-from-information-disclosure-by-sending-a-jpeg-e273d1b94da1?source=rss------bug_bounty-5 | Mado | information-disclosure, bug-bounty, bug-bounty-tips, infosec, hacking | 05-Sep-2025 |
| Exploiting Insecure Android WebView with setAllowUniversalAccessFromFileURLs | https://medium.com/@youssefhussein212103168/exploiting-insecure-android-webview-with-setallowuniversalaccessfromfileurls-c7f4f7a8db9c?source=rss------bug_bounty-5 | Youssefhussein | pentesting, cybersecurity, mobile-pentesting, bug-bounty | 05-Sep-2025 |
| How i Got $500 From Information Disclosure By Sending a Jpeg | https://medium.com/legionhunters/how-i-got-500-from-information-disclosure-by-sending-a-jpeg-e273d1b94da1?source=rss------bug_bounty-5 | Mado | information-disclosure, bug-bounty, bug-bounty-tips, infosec, hacking | 05-Sep-2025 |
| How i Got $500 From Information Disclosure By Sending a Jpeg | https://infosecwriteups.com/how-i-got-500-from-information-disclosure-by-sending-a-jpeg-e273d1b94da1?source=rss------bug_bounty-5 | Mado | information-disclosure, bug-bounty, bug-bounty-tips, infosec, hacking | 05-Sep-2025 |
| Gemini’s Security Regression: When Old Bugs Come Back to Haut | https://medium.com/@ultrazartrex/geminis-security-regression-when-old-bugs-come-back-to-haut-df6e51291308?source=rss------bug_bounty-5 | UltraZartrex | red-teaming, google, ai-security, bug-bounty, cybersecurity | 04-Sep-2025 |
| How i Access Potential Misconfiguration Leading to Information Disclosure Unauthenticated Access to… | https://medium.com/@Muhammad_Wageh/how-i-access-potential-misconfiguration-leading-to-information-disclosure-unauthenticated-access-to-13bcc727cfa6?source=rss------bug_bounty-5 | Muhammad Wageh | ethical-hacking, tips-and-tricks, cybersecurity, bug-bounty, hacking | 04-Sep-2025 |
| Setting The Sails: My Journey In Cybersecurity Sea | https://medium.com/@stotraa/setting-the-sails-my-journey-in-cybersecurity-sea-d154093cb79f?source=rss------bug_bounty-5 | St0tRaa | infosec, bug-bounty, cybersecurity, computer-science, writing | 04-Sep-2025 |
| Top 8 GCP Security KPIs You Must Track in Your SIEM | https://medium.com/@paritoshblogs/top-8-gcp-security-kpis-you-must-track-in-your-siem-84893629f66c?source=rss------bug_bounty-5 | Paritosh | cloud-computing, siem, cybersecurity, bug-bounty, gcp | 04-Sep-2025 |
| Logs Don’t Lie: How I Read Their Logs and Wrote My Own Access Rules | https://medium.com/@iski/logs-dont-lie-how-i-read-their-logs-and-wrote-my-own-access-rules-a29bb7cb9684?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, hacking, cybersecurity, money | 04-Sep-2025 |
| Chaining Path Traversal Vulnerability to RCE — Meta’s 111,750$ Bug | https://medium.com/@Aacle/chaining-path-traversal-vulnerability-to-rce-metas-111-750-bug-a98a473c6a05?source=rss------bug_bounty-5 | Abhishek meena | infosec, bug-bounty, bug-bounty-tips, owasp, cybersecurity | 04-Sep-2025 |
| Web Security Essentials — Tryhackme Talkthrough | https://medium.com/@TRedEye/web-security-essentials-tryhackme-talkthrough-d11b294eb4cc?source=rss------bug_bounty-5 | TRedEye | bug-bounty, website, cybersecurity, tryhackme, hacking | 04-Sep-2025 |
| My First RCE: Critical Bug on a Redacted Subdomain | https://mrknightnidu.medium.com/my-first-rce-critical-bug-on-a-redacted-subdomain-6d4017324d62?source=rss------bug_bounty-5 | MRKNIGHT-NIDU | bug-bounty-tips, cybersecurity, rce-vulnerability, bug-bounty, poc | 04-Sep-2025 |
| SSL Treasure Maps: How I Found Hidden Subdomains in crt.sh (And How Hackers Exploit Them) | https://medium.com/meetcyber/ssl-treasure-maps-how-i-found-hidden-subdomains-in-crt-sh-and-how-hackers-exploit-them-475e1414d416?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, cybersecurity, information-security, ai | 04-Sep-2025 |
| SSL Treasure Maps 2.0: How I Pulled Hidden Subdomains from crt.sh — and Why It Matters | https://javascript.plainenglish.io/ssl-treasure-maps-2-0-how-i-pulled-hidden-subdomains-from-crt-sh-and-why-it-matters-202874fd2cee?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, information-security, ai, bug-bounty, cybersecurity | 04-Sep-2025 |
| Broken Access Control: The #1 OWASP Risk explained in depth | https://medium.com/@cybersenpai/broken-access-control-the-1-owasp-risk-explained-in-depth-ee561bde4dd8?source=rss------bug_bounty-5 | CyberSenpai | bug-bounty, information-security, broken-access-control, cybersecurity, infosec | 04-Sep-2025 |
| No CSP, No Problem? Think Again — Clickjacking Explained | https://medium.com/@mohsensamir24/no-csp-no-problem-think-again-clickjacking-explained-f937b32795c4?source=rss------bug_bounty-5 | 0xsamraa | bug-bounty | 04-Sep-2025 |
| How to exploit? OPC UA — Open Platform Communications Unified Access — PORT 4840 | https://medium.com/@verylazytech/how-to-exploit-opc-ua-open-platform-communications-unified-access-port-4840-c1b9c7ea22fa?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, ics-security, exploitation, cybersecurity, vulnerability | 04-Sep-2025 |
| How Do Smart Contract Auditors Actually Make Money? | https://medium.com/@stupid_contract/how-do-smart-contract-auditors-actually-make-money-9ea5e87e4158?source=rss------bug_bounty-5 | Stupid Contract | web3-security, cybersecurity, cybersecurity-careers, bug-bounty, smart-contract-security | 04-Sep-2025 |
| ⚡ XSS (Cross-Site Scripting) Vulnerabilities and Exploit Techniques | https://medium.com/@esrakyhn/xss-cross-site-scripting-vulnerabilities-and-exploit-techniques-76bb111925ca?source=rss------bug_bounty-5 | Esra Kayhan | bug-bounty, cybersecurity, web-security, cross-sitescripting, xss-attack | 04-Sep-2025 |
| XSS Tricks to Bypass Web Application Firewall in a URL | https://medium.com/@rashad.desk/xss-tricks-to-bypass-web-application-firewall-in-a-url-b0e476abea49?source=rss------bug_bounty-5 | Rashadul Islam | hacking, cybersecurity, bug-bounty, technology, penetration-testing | 04-Sep-2025 |
| 2FA Bypass via Request Handling Flaw | https://infosecwriteups.com/2fa-bypass-via-request-handling-flaw-e4cf21bb4c55?source=rss------bug_bounty-5 | TSxNINJA | bug-bounty, hacking, infosec, 2fa, red-team | 04-Sep-2025 |
| How to write a good Bug Bounty Report | https://systemweakness.com/how-to-write-a-good-bug-bounty-report-76d935a8c5b1?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty, cybersecurity, web-security, bug-bounty-writeup, bug-bounty-tips | 04-Sep-2025 |
| Building An Offensive Security AI Agent — Part 1 | https://medium.com/@its_otr/building-my-first-offensive-security-agent-part-1-7b2dbb93c842?source=rss------bug_bounty-5 | OTR | offsec, pentesting, ai, llm, bug-bounty | 04-Sep-2025 |
| I Found a Critical RCE on RedBull Using Just Recon | https://medium.com/@ibtissamhammadi1/i-found-a-critical-rce-on-redbull-using-just-recon-1e9143ce5f48?source=rss------bug_bounty-5 | Ibtissam hammadi | reconnaissance, ethical-hacking, bug-bounty, cybersecurity, cve | 04-Sep-2025 |
| “Day 28: The DOM Clobbering Coup — How I Turned a Simple Comment Box into a CSP Bypass” | https://infosecwriteups.com/day-28-the-dom-clobbering-coup-how-i-turned-a-simple-comment-box-into-a-csp-bypass-109af0e954a6?source=rss------bug_bounty-5 | Aman Sharma | programming, cybersecurity, bug-bounty, money, technology | 04-Sep-2025 |
| Software and Data Integrity Failures (OWASP Top 10 #8) — Simplified | https://medium.com/@chai.exe/software-and-data-integrity-failures-owasp-top-10-8-simplified-36951f1bd196?source=rss------bug_bounty-5 | Chai | owasp-top-10, bug-bounty, cybersecurity, tryhackme, web-application-security | 04-Sep-2025 |
| First Bug Bounty Reward — Broken Access Control | https://medium.com/@defidev59/first-bug-bounty-reward-broken-access-control-e63ba29789f7?source=rss------bug_bounty-5 | Defidev | bug-bounty, bug-bounty-writeup, bug-bounty-tips | 04-Sep-2025 |
| Vulnerabilidades en WebSockets: el canal olvidado (pero explotable) | https://gorkaaa.medium.com/vulnerabilidades-en-websockets-el-canal-olvidado-pero-explotable-8512ab4bddf3?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty-hunter, bugbounty-writeup, bug-bounty, bug-bounty-writeup | 04-Sep-2025 |
| How I Discovered a PII Leak in a Developer Platform | https://medusa0xf.medium.com/how-i-discovered-a-pii-leak-in-a-developer-platform-d2f3e89653ce?source=rss------bug_bounty-5 | Medusa | infosec, ethical-hacking, bug-bounty-tips, bug-bounty, cybersecurity | 04-Sep-2025 |
| How a Simple PDF Generator Led Me to a Bug in Government Systems | https://medium.com/@motoko_ayanami/how-a-simple-pdf-generator-led-me-to-a-bug-in-government-systems-07ac397d45e3?source=rss------bug_bounty-5 | Motoko Ayanami | hacking, bug-bounty | 04-Sep-2025 |
| Android Penetration Testing Part 2 | https://p4n7h3rx.medium.com/android-penetration-testing-part-2-39312a771568?source=rss------bug_bounty-5 | p4n7h3rx | bug-bounty, bug-bounty-tips, hacking | 04-Sep-2025 |
| Android Penetration Testing — Part 1: A Beginner’s Step-by-Step Guide | https://p4n7h3rx.medium.com/android-penetration-testing-part-1-a-beginners-step-by-step-guide-1381b3d02204?source=rss------bug_bounty-5 | p4n7h3rx | penetration-testing, bug-bounty, bug-bounty-tips, hacking, ethical-hacking | 04-Sep-2025 |
| A Smarter Way to Find Bugs in Subdomains | https://osintteam.blog/a-smarter-way-to-find-bugs-in-subdomains-8df5bc504aa2?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, bug-bounty-writeup, vulnerability, penetration-testing, bug-bounty-tips | 04-Sep-2025 |
| ✈️ I Tried Hacking a Flight Booking API — Here’s What I Found (or Didn’t ) | https://infosecwriteups.com/%EF%B8%8F-i-tried-hacking-a-flight-booking-api-heres-what-i-found-or-didn-t-bc4391b57d41?source=rss------bug_bounty-5 | Varnith | cybersecurity, hacking, software-development, bug-bounty | 03-Sep-2025 |
| A Complete Guide to Sublist3r: How to Enumerate Subdomains for Bug Bounty & OSINT | https://medium.com/meetcyber/a-complete-guide-to-sublist3r-how-to-enumerate-subdomains-for-bug-bounty-osint-2127ffe0ffac?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, penetration-testing, ethical-hacking, cybersecurity, osint | 03-Sep-2025 |
| 10. Hunting for IDORs: The Most Underrated Vulnerability | https://infosecwriteups.com/10-hunting-for-idors-the-most-underrated-vulnerability-9567ebf97585?source=rss------bug_bounty-5 | Abhijeet kumawat | idor, hacking, idor-vulnerability, bug-bounty, cybersecurity | 03-Sep-2025 |
| Phish and Fetch: Turning Weak Email Validations Into Full System Access | https://medium.com/@iski/phish-and-fetch-turning-weak-email-validations-into-full-system-access-9a6561edfd57?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, money, bug-bounty, hacking | 03-Sep-2025 |
| Advanced XSS Bug Bounty-Full Guide: Multi-Vector Payloads That Earned Me $1500 | https://medium.com/@zoningxtr/advanced-xss-bug-bounty-full-guide-multi-vector-payloads-that-earned-me-1500-2f639086d3cb?source=rss------bug_bounty-5 | Zoningxtr | python, html, penetration-testing, bug-bounty, cybersecurity | 03-Sep-2025 |
| Hackers Assemble 2: The Saga Completes | https://medium.com/@abhishek-ji/hackers-assemble-2-the-saga-completes-590f4813812a?source=rss------bug_bounty-5 | Abhishek Gupta | tryhackme, hacking, ctf, bug-bounty, cybersecurity | 03-Sep-2025 |
| Cada feature es una decisión. Cada decisión, una posible grieta. | https://gorkaaa.medium.com/cada-feature-es-una-decisi%C3%B3n-cada-decisi%C3%B3n-una-posible-grieta-3ba14ee1bac8?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, bugbounty-writeup, bug-bounty | 03-Sep-2025 |
| This AI bug cost me a top 5 Spot at DEFCON 33 Bug Bounty Village CTF | https://dropn0w.medium.com/this-ai-bug-cost-me-a-top-5-spot-at-defcon-33-bug-bounty-village-ctf-9e1438aa4b5a?source=rss------bug_bounty-5 | drop | hacking, ai, cybersecurity, defcon, bug-bounty | 03-Sep-2025 |
| JWT Security for Bug Bounty Hunters — Part 2 (Step-by-Step Practical Guide) Live | https://medium.com/@shaikhminhaz1975/jwt-security-for-bug-bounty-hunters-part-2-step-by-step-practical-guide-live-0e4ad7c4cb11?source=rss------bug_bounty-5 | Shaikh Minhaz | web-penetration-testing, jwt, jwt-authentication, bug-bounty, cybersecurity | 03-Sep-2025 |
| The Overlooked Side of Bug Bounties: Hidden Vulnerabilities Beginners Ignore | https://kd-200.medium.com/the-overlooked-side-of-bug-bounties-hidden-vulnerabilities-beginners-ignore-71b0aacbc6c8?source=rss------bug_bounty-5 | Nitin yadav | bug-bounty, cybersecurity, bugcrowd, hackerone, bug-hunting | 03-Sep-2025 |
| How a Simple CSRF Flaw Earned a $5,000 Bounty | https://medium.com/@ibtissamhammadi1/how-a-simple-csrf-flaw-earned-a-5-000-bounty-389ec2c6d45a?source=rss------bug_bounty-5 | Ibtissam hammadi | csrf, hacking, web-development, cybersecurity, bug-bounty | 03-Sep-2025 |
| 15 Security KPIs Every Cybersecurity Professional Should Know | https://medium.com/@paritoshblogs/15-security-kpis-every-cybersecurity-professional-should-know-a85b9654a8fc?source=rss------bug_bounty-5 | Paritosh | kpi, bug-bounty, how-to, hacking, cybersecurity | 03-Sep-2025 |
| Surviving the 48-Hour TryHackMe PT1 Exam: Take It or Leave It | https://medium.com/meetcyber/surviving-the-48-hour-tryhackme-pt1-exam-take-it-or-leave-it-868415f61b5c?source=rss------bug_bounty-5 | CYB3RXD0N | hacking, pentesting, cybersecurity, tryhackme, bug-bounty | 03-Sep-2025 |
| IDOR to Full Account Takeover | https://medium.com/@amrqansow/idor-to-full-account-takeover-f6dd651f5de4?source=rss------bug_bounty-5 | Amr khaled Zakaria | penetration-testing, bug-bounty, web-security, cybersecurity, android-security | 03-Sep-2025 |
| Cisco Smart Install — PORT 4786 — how to exploit? | https://medium.com/@verylazytech/cisco-smart-install-port-4786-how-to-exploit-a5d91b43f35f?source=rss------bug_bounty-5 | Very Lazy Tech | exploitation, hacking, penetration-testing, cybersecurity, bug-bounty | 03-Sep-2025 |
| Why Most Beginners Struggle with Bug Bounty Hunting (and How to Fix It) | https://medium.com/@itsmohitnarayan/why-most-beginners-struggle-with-bug-bounty-hunting-and-how-to-fix-it-19d416267d7a?source=rss------bug_bounty-5 | Kumar Mohit | web-penetration-testing, penetration-testing, bug-bounty, cybersecurity, information-security | 03-Sep-2025 |
| SQL for Bug Bounty Hunters | https://infosecwriteups.com/sql-for-bug-bounty-hunters-106a4c324049?source=rss------bug_bounty-5 | Swetha | coding, sql, bug-bounty, sql-injection, hacking | 03-Sep-2025 |
| PortSwigger Academy Business Logic Lab Solutions | https://medium.com/@emre225650/portswigger-academy-business-logic-lab-solutions-e3035d7e6ceb?source=rss------bug_bounty-5 | Emre A. | bug-bounty, business-logic, portswigger-lab, cybersecurity, web-application-security | 03-Sep-2025 |
| Why Every Business Needs a Bug Bounty Program: | https://medium.com/@ayshee782/why-every-business-needs-a-bug-bounty-program-fa887581ce60?source=rss------bug_bounty-5 | Ayshee | infosec, bug-bounty, cybersecurity, data-protection | 03-Sep-2025 |
| Vulnerable and Outdated Components (OWASP Top 10 #6) — Simplified | https://medium.com/@chai.exe/vulnerable-and-outdated-components-owasp-top-10-6-simplified-4a170b83f052?source=rss------bug_bounty-5 | Chai | bug-bounty, tryhackme, web-application-security, owasp-top-10, cybersecurity | 03-Sep-2025 |
| ️ Multi-Brand / Multi-Tenant Pentest Checklist | https://medium.com/@bughunter021/%EF%B8%8F-multi-brand-multi-tenant-pentest-checklist-d9178868c40f?source=rss------bug_bounty-5 | BugHunter021 | bugbounty-tips, bug-bounty | 03-Sep-2025 |
| Identification and Authentication Failures (OWASP Top 10 #7) — Simplified | https://medium.com/@chai.exe/identification-and-authentication-failures-owasp-top-10-7-simplified-255da755a056?source=rss------bug_bounty-5 | Chai | owasp-top-10, cybersecurity, tryhackme, bug-bounty, web-application-security | 03-Sep-2025 |
| NucAIScan: AI-Assisted Web Application Security Scanner | https://onurcangencbilkent.medium.com/nucaiscan-ai-assisted-web-application-security-scanner-60007bdcd571?source=rss------bug_bounty-5 | Onurcan Genç | ai-tools, cybersecurity, bug-bounty, offensive-security, web-application-security | 03-Sep-2025 |
| Hacking WordPress: SSRF via XML-RPC | https://medium.com/@cybersuperfan/hacking-wordpress-ssrf-via-xml-rpc-4a87ef520ba8?source=rss------bug_bounty-5 | diaryofacyberfan | bug-bounty, cybersecurity, bug-bounty-tips, bugbounty-writeup | 03-Sep-2025 |
| “Forgot Password?” Forgotten feature | https://medium.com/@cybersuperfan/forgot-password-forgotten-feature-da485d551e40?source=rss------bug_bounty-5 | diaryofacyberfan | bugbounty-writeup, web-development, bug-bounty, bug-bounty-tips, cybersecurity | 03-Sep-2025 |
| Django Unauthenticated, 0 click, RCE, and SQL Injection using default configuration. | https://infosecwriteups.com/django-unauthenticated-0-click-rce-and-sql-injection-using-default-configuration-059964f3f898?source=rss------bug_bounty-5 | EyalSec | penetration-testing, bug-bounty, information-security, cve, hacking | 03-Sep-2025 |
| NucAIScan: AI-Assisted Web Application Security Scanner | https://osintteam.blog/nucaiscan-ai-assisted-web-application-security-scanner-60007bdcd571?source=rss------bug_bounty-5 | Onurcan Genç | ai-tools, cybersecurity, bug-bounty, offensive-security, web-application-security | 03-Sep-2025 |
| Guía completa de Sublist3r: Cómo enumerar subdominios para Bug Bounty y OSINT | https://medium.com/@jpablo13/gu%C3%ADa-completa-de-sublist3r-c%C3%B3mo-enumerar-subdominios-para-bug-bounty-y-osint-4e26f38a884f?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, osint, bug-bounty, ethical-hacking, penetration-testing | 02-Sep-2025 |
| Bug Bounty: checklist template for SwiftnessX | https://medium.com/@smilemil/bug-bounty-checklist-template-for-swiftnessx-b51abfc2549f?source=rss------bug_bounty-5 | smilemil | bug-bounty | 02-Sep-2025 |
| Cómo redactar un buen reporte de Bug Bounty (paso a paso) | https://gorkaaa.medium.com/c%C3%B3mo-redactar-un-buen-reporte-de-bug-bounty-paso-a-paso-288016837dff?source=rss------bug_bounty-5 | Gorka | bug-bounty, bugbounty-writeup, bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup | 02-Sep-2025 |
| Why Most of them fails in Bug Bounty — Deep dive into the reason behind it | https://infosecwriteups.com/why-most-of-them-fails-in-bug-bounty-deep-dive-into-the-reason-behind-it-78f1d47327a1?source=rss------bug_bounty-5 | 127.0.0.1 | ctf, bug-bounty, cybersecurity, technology, money | 02-Sep-2025 |
| Uncovering Intercom Misconfigurations: From Ignored Widgets to High-Impact Vulnerabilities | https://19whoami19.medium.com/uncovering-intercom-misconfigurations-from-ignored-widgets-to-high-impact-vulnerabilities-26115f9481ca?source=rss------bug_bounty-5 | WHO AM I ? | research, penetration-testing, cybersecurity, bug-bounty, security | 02-Sep-2025 |
| ☁️ Cloud Chaos: How Misconfigured Buckets Spilled Sensitive Data Everywhere | https://medium.com/@iski/%EF%B8%8F-cloud-chaos-how-misconfigured-buckets-spilled-sensitive-data-everywhere-3347780c79c5?source=rss------bug_bounty-5 | Iski | bug-bounty, money, infosec, hacking, cybersecurity | 02-Sep-2025 |
| How I Used an Advanced XSS Technique to Earn $1000 Bug Bounty | https://medium.com/@zoningxtr/how-i-used-an-advanced-xss-technique-to-earn-1000-bug-bounty-74b28e9ec6ef?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, cybersecurity, penetration-testing, html, web-development | 02-Sep-2025 |
| From Gmail to Gmàil: A Punycode Path to Account Takeover | https://medium.com/@syedshorox27/from-gmail-to-gm%C3%A0il-a-punycode-path-to-account-takeover-88896264acdb?source=rss------bug_bounty-5 | Minio Haxer | cybersecurity, hacking, bug-bounty, bugs, account-takeover | 02-Sep-2025 |
| How I Was Able to Make $160 and Protect Multiple Global Brands from Shopify API Credential Leaks | https://medium.com/@xhacking_z/how-i-was-able-to-make-160-and-protect-multiple-global-brands-from-shopify-api-credential-leaks-e64dcc7211b8?source=rss------bug_bounty-5 | Omar | shopify, bug-bounty, api-security, cybersecurity, ecommerce | 02-Sep-2025 |
| I hacked my entire College’s Wi-Fi Network! | https://infosecwriteups.com/i-hacked-my-entire-colleges-wi-fi-network-2869e7e77077?source=rss------bug_bounty-5 | Akash Singh | technology, cybersecurity, college, software-development, bug-bounty | 02-Sep-2025 |
| Unleash the Power of JS Link Finder: Hunt Hidden Endpoints Like a Pro | https://infosecwriteups.com/unleash-the-power-of-js-link-finder-hunt-hidden-endpoints-like-a-pro-deb77530155f?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, vulnerability, bug-bounty-tips, bug-bounty-writeup, penetration-testing | 02-Sep-2025 |
| How I Crashed Example Health’s CORS Party | https://infosecwriteups.com/how-i-crashed-example-healths-cors-party-5b64a897be5a?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-writeup, cyber-security-awareness, bug-bounty-tips, bug-bounty, cybersecurity | 02-Sep-2025 |
| “Day 26: The WebSocket Hijack — How I Eavesdropped on Every Customer Support Chat” | https://infosecwriteups.com/day-26-the-websocket-hijack-how-i-eavesdropped-on-every-customer-support-chat-de5ddc819ad2?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, cybersecurity, technology, hacking, programming | 02-Sep-2025 |
| THM Write-up: Vulnerable Codes | https://fatsec.medium.com/thm-write-up-vulnerable-codes-9ea8fe8464f9?source=rss------bug_bounty-5 | Fatih Kucukkarakurt | ctf-writeup, tryhackme-walkthrough, bug-bounty, cybersecurity, tryhackme | 02-Sep-2025 |
| How to exploit? Erlang Port Mapper Daemon — PORT 4369 | https://medium.com/@verylazytech/how-to-exploit-erlang-port-mapper-daemon-port-4369-c927ccbe882c?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, erlang, penetration-testing, hacking, programming | 02-Sep-2025 |
| Discovering a Text Injection Vulnerability — A Bug Hunter’s Learning Journey_ ver usefull for new… | https://medium.com/@InsbatArshad/discovering-a-text-injection-vulnerability-a-bug-hunters-learning-journey-ver-usefull-for-new-c8e85099d271?source=rss------bug_bounty-5 | Be nice insabat | hacking, bug-bounty, penetration-testing, cybersecurity, programming | 02-Sep-2025 |
| OSCP Preparation Series | https://medium.com/@ahsanalikhan73/oscp-preparation-series-29f914d7295f?source=rss------bug_bounty-5 | Ahsan Ali Khan | cybersecurity, zookeeper, hacking, bug-bounty, oscp | 02-Sep-2025 |
| From Theory to Practice: Understanding IDOR Through a Real Scenario | https://medium.com/@rawansa3ed2002/from-theory-to-practice-understanding-idor-through-a-real-scenario-2eb21ef07d65?source=rss------bug_bounty-5 | Rawansaeed | broken-access-control, bug-bounty, cybersecurity, idor, penetration-testing | 02-Sep-2025 |
| Start Your Hacking Career Before it’s too late! | https://medium.com/great-hackers-battalion/start-your-hacking-career-before-its-too-late-1d74d70dfc63?source=rss------bug_bounty-5 | NnFace | career-advice, bug-bounty, hacking, cybersecurity, information-security | 02-Sep-2025 |
| From Manage Members to Full Admin: Privilege Escalation in a GraphQL API | https://medium.com/@bassemwanies2002/from-manage-members-to-full-admin-privilege-escalation-in-a-graphql-api-b58699829d6e?source=rss------bug_bounty-5 | Bassemwanies | bug-bounty, bug-bounty-writeup, bug-hunting, real-world-bug-hunting, cybersecurity | 02-Sep-2025 |
| Why Ransomware Gangs Are Now Targeting APIs and SaaS Apps | https://medium.com/@paritoshblogs/why-ransomware-gangs-are-now-targeting-apis-and-saas-apps-eb08cd045ad2?source=rss------bug_bounty-5 | Paritosh | ai, ransomware, bug-bounty, hacking, cybersecurity | 01-Sep-2025 |
| Anatomy of Email Security Vulnerabilities: How Spoofing, Protocol Weaknesses, and Misconfigurations… | https://medium.com/@mohamednfe78/anatomy-of-email-security-vulnerabilities-how-spoofing-protocol-weaknesses-and-misconfigurations-e3264c712479?source=rss------bug_bounty-5 | Mohamed.cybersec | security, cybersecurity, bug-bounty, hacking, penetration-testing | 01-Sep-2025 |
| HTB-LAB Local File Inclusion (LFI) | https://medium.com/@kamelgaceb25/htb-lab-local-file-inclusion-lfi-5061ab1b4299?source=rss------bug_bounty-5 | Tsh0x; | lfi, bug-bounty-writeup, file-inclusion, bug-bounty, cybersecurity | 01-Sep-2025 |
| How I Bypassed VPN Detection, Broke Client-Side Crypto and Found Multiple IDORS | https://medium.com/@wajidareeb/bypassed-vpn-detection-clientside-crypto-and-found-idors-5cdf0cd4ac84?source=rss------bug_bounty-5 | Wajid Ahadpoor | bug-bounty, mobile-apps, reverse-engineering, penetration-testing, infosec | 01-Sep-2025 |
| Puzzle to Pwnage: Decoding Hidden Endpoints for Maximum Exploitation | https://infosecwriteups.com/puzzle-to-pwnage-decoding-hidden-endpoints-for-maximum-exploitation-1d2841383ddc?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, money, hacking, infosec | 01-Sep-2025 |
| Sensitive Endpoint Wordlist for Bug Hunting | https://infosecwriteups.com/sensitive-endpoint-wordlist-for-bug-hunting-1acb50034629?source=rss------bug_bounty-5 | Monika sharma | vulnerability, penetration-testing, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 01-Sep-2025 |
| Recon to Responsible Disclosure | https://saurabh-jain.medium.com/recon-to-responsible-disclosure-ee3d308a3b69?source=rss------bug_bounty-5 | Saurabh Jain | bug-bounty-writeup, hacking, security, bug-bounty, bug-bounty-tips | 01-Sep-2025 |
| Understanding the OWASP Top 10: The Simplest Guide for Web Security | https://medium.com/@cybersenpai/understanding-the-owasp-top-10-the-simplest-guide-for-web-security-8986530582d6?source=rss------bug_bounty-5 | CyberSenpai | infosec, bug-bounty, interview, cybersecurity, owasp | 01-Sep-2025 |
| Critical but very easy Unauthorized Data Disclosure via HTTP Method Manipulation: A Lesson in API… | https://medium.com/@InsbatArshad/critical-unauthorized-data-disclosure-via-http-method-manipulation-a-lesson-in-api-security-in-5d55c1ffd961?source=rss------bug_bounty-5 | Be nice insabat | hacking, bug-bounty, python, cybersecurity, programming | 01-Sep-2025 |
| Ultimate Bug Bounty Guide 2025: Top 100 Essential Tools + 100 Proven Techniques for Ethical Hackers | https://medium.com/@shahpratham529/ultimate-bug-bounty-guide-2025-top-100-essential-tools-100-proven-techniques-for-ethical-hackers-f0fae7dfa198?source=rss------bug_bounty-5 | Pratham Shah | hacking, infosec, bug-bounty, cybersecurity, penetration-testing | 01-Sep-2025 |
| I Broke Rate Limits to Hijack Accounts — Without Getting Blocked | https://teamdh49.medium.com/i-broke-rate-limits-to-hijack-accounts-without-getting-blocked-d06bbdfd836a?source=rss------bug_bounty-5 | TEAM DH49 | bug-bounty, bugs, bug-zero, bug-bounty-tips, bug-bounty-writeup | 01-Sep-2025 |
| Linux File Permissions Exploits Every Hacker Should Know | https://medium.com/@verylazytech/linux-file-permissions-exploits-every-hacker-should-know-55d735af908a?source=rss------bug_bounty-5 | Very Lazy Tech | linux, penetration-testing, hacking, ethical-hacking, bug-bounty | 01-Sep-2025 |
| The Little CV + CSRF That Broke an Account | https://0onoproblem.medium.com/the-little-cv-csrf-that-broke-an-account-3c0abbc08597?source=rss------bug_bounty-5 | 0_oNoProblem | information-security, infosec, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 01-Sep-2025 |
| Cloudflare Tunnel — Origin Exposure Weaponized | https://p4n7h3rx.medium.com/cloudflare-tunnel-origin-exposure-weaponized-6ae5b1f09bb2?source=rss------bug_bounty-5 | p4n7h3rx | bug-bounty, hacking, penetration-testing, ethical-hacking | 01-Sep-2025 |
| Bug Bounty Time Travel — Hacking the Past to Predict the Future | https://medium.com/@djhacker4397/bug-bounty-time-travel-hacking-the-past-to-predict-the-future-6dc82588bab5?source=rss------bug_bounty-5 | DJH4CK3R | information-security, osint, infosec, cybersecurity, bug-bounty | 01-Sep-2025 |
| How I Discovered CVE-2025–0133 – Reflected XSS with Shodan Recon | https://zuksh.medium.com/how-i-discovered-cve-2025-0133-reflected-xss-with-shodan-recon-33297703bfc0?source=rss------bug_bounty-5 | Zuksh | bug-bounty, infosec, cybersecurity, bug-bounty-tips, xss-attack | 01-Sep-2025 |
| Not All Vulnerabilities Require Highly Technical Exploits | Security Misconfiguration | https://medium.com/@saurabh5392/not-all-vulnerabilities-require-highly-technical-exploits-security-misconfiguration-7a13823729fb?source=rss------bug_bounty-5 | Sushant Soni | bug-bounty, cybersecurity, secrets, web-development, security | 01-Sep-2025 |
| The Ghost Vulnerabilities — How “Fixed Bugs” Come Back From the Dead | https://medium.com/@djhacker4397/the-ghost-vulnerabilities-how-fixed-bugs-come-back-from-the-dead-97ecf45b404f?source=rss------bug_bounty-5 | DJH4CK3R | bug-bounty, vulnerability, information-security, infosec, cybersecurity | 01-Sep-2025 |
| The Psychology of a Hacker’s Click — Why Bug Bounty is More Mindset Than Tools | https://medium.com/@djhacker4397/the-psychology-of-a-hackers-click-why-bug-bounty-is-more-mindset-than-tools-33e4af7504c0?source=rss------bug_bounty-5 | DJH4CK3R | cybersecurity, bug-bounty, infosec, ethical-hacking, information-security | 01-Sep-2025 |
| HOW i found the CVE-2025–4388? | https://doordiefordream.medium.com/how-i-found-the-cve-2025-4388-5f10d0b28e71?source=rss------bug_bounty-5 | DOD cyber solutions | bug-bounty, technology, cve, ethical-hacking, cybersecurity | 01-Sep-2025 |
| “Day 26: The Logic Bomb — How I Hacked 0.1% of a Million-User Platform in 10 Minutes” | https://infosecwriteups.com/day-26-the-logic-bomb-how-i-hacked-0-1-of-a-million-user-platform-in-10-minutes-7dcb23f488cb?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, money, cybersecurity, technology, programming | 01-Sep-2025 |
| Bypassing Subscription Restrictions: A Business Logic Vulnerability in a Video Streaming App | https://medium.com/@dgexploit/bypassing-subscription-restrictions-a-business-logic-vulnerability-in-a-video-streaming-app-fd45e2e5dae3?source=rss------bug_bounty-5 | Dgexploit | bug-bounty, cybersecurity, application-security, web-security, bug-bounty-tips | 01-Sep-2025 |
| Trusting 3rd Party Libraries: A Growing Cybersecurity Risk | https://hunter-55.medium.com/trusting-3rd-party-libraries-a-growing-cybersecurity-risk-0b269830840f?source=rss------bug_bounty-5 | himanshu pdy | bug-bounty, information-security, security, secure-coding, software-engineering | 01-Sep-2025 |
| From Zero to My First Critical XSS Finding | https://medium.com/@ibtissamhammadi1/from-zero-to-my-first-critical-xss-finding-52dc1afa2655?source=rss------bug_bounty-5 | Ibtissam hammadi | zero-to-hero, hacking, cybersecurity, bug-bounty, xss-attack | 01-Sep-2025 |
| Web Security Tip: Stop Cross-Site Scripting (XSS) with X-XSS-Protection & Content Security… | https://medium.com/@zoningxtr/web-security-tip-stop-cross-site-scripting-xss-with-x-xss-protection-content-security-2707d1d8fe1e?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, html, web-development, penetration-testing, cybersecurity | 01-Sep-2025 |
| 4 XSS refletidos e 1 HTML Injection em menos de 10 minutos | https://medium.com/@Ranskyth/5-xss-refletidos-em-menos-de-30-minutos-f0b6a4267576?source=rss------bug_bounty-5 | Ranskyth | hacking, segurança-da-informação, tecnologia, bug-bounty, vulnerability | 01-Sep-2025 |
| From image Upload to Workspace Takeover: Deconstructing a Critical Stored XSS Attack | https://medium.com/@Aacle/from-image-upload-to-workspace-takeover-deconstructing-a-critical-stored-xss-attack-55d821c73b72?source=rss------bug_bounty-5 | Abhishek meena | stored-xss, vulnerability, bug-bounty, infosec, cybersecurity | 01-Sep-2025 |
| The Bug Hunter’s Diary: Earning Bounties Legally | https://darkpurple.medium.com/the-bug-hunters-diary-earning-bounties-legally-f0549bb6d395?source=rss------bug_bounty-5 | Raj Islam | bug-bounty, bug-bounty-writeup, entrepreneurship, self-improvement, cybersecurity | 01-Sep-2025 |
| A Critical Zero-Day in Atlassian Jira Service Management Cloud: Password Reset Account Takeover | https://medium.com/@MoSalah11/a-critical-zero-day-in-atlassian-jira-service-management-cloud-password-reset-account-takeover-1903cbb8bd31?source=rss------bug_bounty-5 | Mo Salah | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 01-Sep-2025 |
| Content Discovery as a Strategy | https://osintteam.blog/content-discovery-as-a-strategy-662b13ddd46a?source=rss------bug_bounty-5 | Dzianis Skliar | penetration-testing, osint, bug-bounty, reconnaissance, information-security | 01-Sep-2025 |
| How to Spot Easy Website Bugs with Real Examples | https://osintteam.blog/how-to-spot-easy-website-bugs-with-real-examples-2507f6688e25?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, bug-bounty-writeup, technology, bug-bounty, penetration-testing | 01-Sep-2025 |
| The Digital Bounty Hunter: How to Find and Report Bugs for Cash | https://medium.com/write-earn/the-digital-bounty-hunter-how-to-find-and-report-bugs-for-cash-9fe3539d7015?source=rss------bug_bounty-5 | Samina Perveen | hacking, student-hustle, bug-bounty, cybersecurity, write-and-earn | 01-Sep-2025 |
| 5 XSS refletidos e 1 HTML Injection em menos de 10 minutos | https://medium.com/@Ranskyth/5-xss-refletidos-em-menos-de-30-minutos-f0b6a4267576?source=rss------bug_bounty-5 | Ranskyth | hacking, segurança-da-informação, tecnologia, bug-bounty, vulnerability | 01-Sep-2025 |
| ️TryHackMe Hack2Win Challenge: Room 1, Day 1 - Hydra | https://medium.com/@chai.exe/%EF%B8%8Ftryhackme-hack2win-challenge-room-1-day-1-7767be169816?source=rss------bug_bounty-5 | Chai | hydra, bug-bounty, tryhackme, web-application-security, cybersecurity | 01-Sep-2025 |
| How I Found an Exposed User Database via an Unprotected API (And How to Prevent It) in a private… | https://medium.com/@InsbatArshad/how-i-found-an-exposed-user-database-via-an-unprotected-api-and-how-to-prevent-it-in-a-private-77dd95a1101c?source=rss------bug_bounty-5 | Be nice insabat | penetration-testing, bug-bounty, programming, hacking, cybersecurity | 31-Aug-2025 |
| The Broken Directory Bug | https://infosecwriteups.com/the-broken-directory-bug-184f37087479?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | information-security, infosec, cybersecurity, bug-bounty, bug-bounty-tips | 31-Aug-2025 |
| Bug Bounty Web Cache Deception: cuando la caché filtra datos privados | https://gorkaaa.medium.com/bug-bounty-web-cache-deception-cuando-la-cach%C3%A9-filtra-datos-privados-f8f72e6200b5?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup, bugbounty-writeup, bug-bounty | 31-Aug-2025 |
| How I Exploited a JWT Misconfiguration for Account Takeover and Admin Access in 5 Minutes | https://medium.com/@P4RAD0X/how-i-exploited-a-jwt-misconfiguration-for-account-takeover-and-admin-access-in-5-minutes-c2974899f4ec?source=rss------bug_bounty-5 | PARADOX | hacking, pentesting, cybersecurity, bug-bounty, penetration-testing | 31-Aug-2025 |
| Payload Party: Chaining Tiny Bugs Into a Full-Blown Account Takeover | https://infosecwriteups.com/payload-party-chaining-tiny-bugs-into-a-full-blown-account-takeover-f85d646f3666?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, infosec, money, bug-bounty | 31-Aug-2025 |
| Hash Collision Vulnerability (Smart Contract) | https://medium.com/@naysec.bb/hash-collision-vulnerability-smart-contract-a8ccc0da0cec?source=rss------bug_bounty-5 | nevo | hash-collision, blockchain, bug-bounty, cybersecurity, smart-contract-security | 31-Aug-2025 |
| The man who was marked for death | https://obx03.medium.com/the-man-who-was-marked-for-death-8c20d7f8f70a?source=rss------bug_bounty-5 | Abang Obed(obx) | cybersecurity, bug-bounty, life, screenwriting, technology | 31-Aug-2025 |
| $5000+ in Bounties, 20+ Bug Reports, 2 Hall of Fame : Find Your First Bug! | https://infosecwriteups.com/5000-in-bounties-20-bug-reports-2-hall-of-fame-find-your-first-bug-32d564c1b9b4?source=rss------bug_bounty-5 | Akash Singh | technology, money, bug-bounty-tips, bug-bounty, cybersecurity | 31-Aug-2025 |
| When the Referer Becomes the Villain: RXSS + Redirection | https://aryanstha.medium.com/when-the-referer-becomes-the-villain-rxss-redirection-be49d7d323c6?source=rss------bug_bounty-5 | Aryan Shrestha | bug-bounty, web-security, ethical-hacking, http-headers, reflected-xss | 31-Aug-2025 |
| Automating Vulnerability Scans with Python and ProjectDiscovery Tools | https://rkanade.medium.com/automating-vulnerability-scans-with-python-and-projectdiscovery-tools-e3646dac1c20?source=rss------bug_bounty-5 | Rajesh Kanade | infosec, cybersecurity, open-source, python, bug-bounty | 31-Aug-2025 |
| Beyond the OWASP Top 10: A Strategic Guide to Uncovering High-Impact Business Logic Flaws | https://medium.com/@Aacle/yond-the-owasp-top-10-a-strategic-guide-to-uncovering-high-impact-business-logic-flaws-b221729fb655?source=rss------bug_bounty-5 | Abhishek meena | bug-bounty, infosec, application-security, penetration-testing, business-logic | 31-Aug-2025 |
| How to Find SQLi in Bug Bounty ️ | https://medium.com/@nexusphere/how-to-find-sqli-in-bug-bounty-%EF%B8%8F-7a1543e98d9e?source=rss------bug_bounty-5 | Balki Maharaj | bug-bounty-tips, bugs, bug-zero, bug-bounty, bug-bounty-writeup | 31-Aug-2025 |
| The Cookie Bomb: My First $10K in Bug Bounties | https://infosecwriteups.com/the-cookie-bomb-my-first-10k-in-bug-bounties-f86cb22c37fa?source=rss------bug_bounty-5 | Arshad Kazmi | hackerone, analytics, cookies, bugcrowd, bug-bounty | 31-Aug-2025 |
| I Found DOM-Based XSS & HTML Injection in Swagger UI | https://medium.com/@0xmrX/i-found-dom-based-xss-html-injection-in-swagger-ui-292df97500c9?source=rss------bug_bounty-5 | 0xmrX | bug-bounty-writeup, bugs, bug-bounty, cybersecurity | 31-Aug-2025 |
| CBBH Review | https://medium.com/@malwarebro/cbbh-review-e5cf80cf2c93?source=rss------bug_bounty-5 | MalwareBro | penetration-testing, ethical-hacking, web-penetration-testing, hackthebox, bug-bounty | 31-Aug-2025 |
| Do It Yourself — One Weekend, 2 CVEs | https://medium.com/@red.whisperer/do-it-yourself-one-weekend-2-cves-bc6a946a8261?source=rss------bug_bounty-5 | Chux | hacking, bug-bounty, cybersecurity | 31-Aug-2025 |
| Week 4 of My 90-Day Challenge: Bug Bounty from a New Perspective | https://medium.com/@sl0th0x87/week-4-of-my-90-day-challenge-bug-bounty-from-a-new-perspective-1aec02d55185?source=rss------bug_bounty-5 | Mike (sl0th0x87) | weekly-report, cybersecurity, bug-bounty, about-me, challenge | 31-Aug-2025 |
| Beyond the Hype: The 90-Day Roadmap to Your First Valid Bug | https://medium.com/@Aacle/beyond-the-hype-the-90-day-roadmap-to-your-first-valid-bug-df3842ad6502?source=rss------bug_bounty-5 | Abhishek meena | infosec, penetration-testing, hacker, bug-bounty, pentesting | 31-Aug-2025 |
| Change Email to a Fake One… and Log In! | https://medium.com/@madhan21901/change-email-to-a-fake-one-and-log-in-d52698e47a2d?source=rss------bug_bounty-5 | Madhan | authentication, web-application-security, infosec, bug-bounty, vulnerability | 31-Aug-2025 |
| Static Analysis → Hardcoded Creds → Google Dorks → ATO (and a $500 Bounty) | https://medium.com/@theteatoast/static-analysis-hardcoded-creds-google-dorks-ato-and-a-500-bounty-18337af6e08f?source=rss------bug_bounty-5 | toast | bugbounty-writeup, bug-bounty, android, bug-bounty-tips | 31-Aug-2025 |
| My Experience of Hacking Dutch Government (DNS Hijacking) | https://nahid0x1.medium.com/my-experience-of-hacking-dutch-government-dns-hijacking-d25239af5500?source=rss------bug_bounty-5 | Md Nahid Alam | bug-bounty, dutch-government, hacking, cybersecurity, dns | 31-Aug-2025 |
| The Complete Path to Cybersecurity: From Beginner to Expert | https://medium.com/@MianHammadx0root/the-complete-path-to-cybersecurity-from-beginner-to-expert-e84fafff26ed?source=rss------bug_bounty-5 | Mian Hammad | bug-bounty, cybersecurity, hacking, red-team | 31-Aug-2025 |
| Full ATO via custom metadata manipulation in AWS Cognito Misconfigured Application | https://medium.com/@zomasec/full-ato-via-custom-metadata-manipulation-in-aws-cognito-misconfigured-application-1628c43417f0?source=rss------bug_bounty-5 | Hazem El-Sayed | security, bug-bounty-tips, cybersecurity, bugbounty-writeup, bug-bounty | 31-Aug-2025 |
| Union-based SQL injection | https://medium.com/@MohammedMHassan/union-based-sql-injection-2e0cc3b18939?source=rss------bug_bounty-5 | Mohammed Hassan | cybersecurity, penetration-testing, sql, bug-bounty, sql-injection | 31-Aug-2025 |
| I Almost Closed the Tab on My Biggest Bug Bounty | https://medium.com/@ibtissamhammadi1/i-almost-closed-the-tab-on-my-biggest-bug-bounty-8685ef3d2f46?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, tech, infosec, bug-bounty, cybersecurity | 31-Aug-2025 |
| Stuck In Bug Hunting? Don’t Know Where To Go Now? Don’t Worry More. I Got You! | https://medium.com/great-hackers-battalion/stuck-in-bug-hunting-dont-know-where-to-go-now-don-t-worry-more-i-got-you-261f533919aa?source=rss------bug_bounty-5 | NnFace | bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup, hacking | 30-Aug-2025 |
| Cracking Code, Catching Bugs: My Case Study of Three Vulnerability Hunts | https://medium.com/@letchupkt/cracking-code-catching-bugs-my-case-study-of-three-vulnerability-hunts-855fe0ef6e37?source=rss------bug_bounty-5 | LETCHU PKT | hacking, bug-bounty-writeup, python, bug-bounty, ethical-hacking | 30-Aug-2025 |
| Assetfinder Guide: The Essential Tool for Subdomain Discovery in Bug Bounty | https://medium.com/meetcyber/assetfinder-guide-the-essential-tool-for-subdomain-discovery-in-bug-bounty-a703363a4598?source=rss------bug_bounty-5 | JPablo13 | osint, ethical-hacking, cybersecurity, penetration-testing, bug-bounty | 30-Aug-2025 |
| Malware-as-a-Service (MaaS): The Netflix Model for Hackers | https://medium.com/@paritoshblogs/malware-as-a-service-maas-the-netflix-model-for-hackers-7142d3de4c49?source=rss------bug_bounty-5 | Paritosh | hacking, cybersecurity, bug-bounty, netflix, malware | 30-Aug-2025 |
| Recon Renaissance: How a Single Subdomain Led Me to a Goldmine of Bugs | https://infosecwriteups.com/recon-renaissance-how-a-single-subdomain-led-me-to-a-goldmine-of-bugs-2ac699366cd5?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, cybersecurity, infosec, money | 30-Aug-2025 |
| Python for Hackers: Scripts That Can Find Vulnerabilities in Minutes | https://sukhveersingh97997.medium.com/python-for-hackers-scripts-that-can-find-vulnerabilities-in-minutes-81620e8c7319?source=rss------bug_bounty-5 | Sukhveer Singh | bug-hunting, cybersecurity, python, hacking, bug-bounty | 30-Aug-2025 |
| “Day 25: The Cloud Heist — How a Forgotten Webhook Tester Gave Me the Keys to AWS” | https://infosecwriteups.com/day-25-the-cloud-heist-how-a-forgotten-webhook-tester-gave-me-the-keys-to-aws-0e2876b515a8?source=rss------bug_bounty-5 | Aman Sharma | money, bug-bounty, cybersecurity, technology, programming | 30-Aug-2025 |
| Bug Bounty:Las rutas olvidadas suelen ser las más vulnerables | https://gorkaaa.medium.com/bug-bounty-las-rutas-olvidadas-suelen-ser-las-m%C3%A1s-vulnerables-5793395d4281?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bug-bounty-writeup, bug-bounty, bug-bounty-tips, bugbounty-writeup | 30-Aug-2025 |
| iOS Recon: Hunting Endpoints Inside IPA Files | https://medium.com/meetcyber/ios-recon-hunting-endpoints-inside-ipa-files-1d495da38f5b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, cybersecurity, infosec, bug-bounty | 30-Aug-2025 |
| The Manifest Speaks — Deep Recon & Hardening Guide for AndroidManifest.xml | https://javascript.plainenglish.io/the-manifest-speaks-deep-recon-hardening-guide-for-androidmanifest-xml-d901e1ff0317?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, bug-bounty, information-security, cybersecurity | 30-Aug-2025 |
| APK Goldmine: How Reverse Engineering Reveals Hidden APIs | https://systemweakness.com/apk-goldmine-how-reverse-engineering-reveals-hidden-apis-11401562d3d0?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, infosec, information-security, cybersecurity | 30-Aug-2025 |
| How I Found a Critical Subdomain Takeover Vulnerability (And What You Can Learn From It) | https://medium.com/@InsbatArshad/how-i-found-a-critical-subdomain-takeover-vulnerability-and-what-you-can-learn-from-it-8af33baa321c?source=rss------bug_bounty-5 | Be nice insabat | hacking, bug-bounty, cybersecurity, python, penetration-testing | 30-Aug-2025 |
| Free 14 Hours Recon Course | https://ajakcybersecurity.medium.com/free-14-hours-recon-course-9f2844f2b1bd?source=rss------bug_bounty-5 | AJAK Cyber Academy | cybersecurity, startup, education, pentesting, bug-bounty | 30-Aug-2025 |
| Assalam o alaikum for muslim brothers and hello for non muslims, i hope all of you are doing well… | https://medium.com/@insbatmeg/assalam-o-alaikum-for-muslim-brothers-and-hello-for-non-muslims-i-hope-all-of-you-are-doing-well-71da6cffdea3?source=rss------bug_bounty-5 | insbat meg | hacking, cyber, bug-bounty, python, programming | 30-Aug-2025 |
| How i was abble to delete ORG with leaked token | https://medium.com/@InsbatArshad/how-i-was-abble-to-delete-org-with-leaked-token-4375c8eecc5b?source=rss------bug_bounty-5 | Be nice insabat | hacking, cybersecurity, python, bug-bounty, programming | 30-Aug-2025 |
| How I Got Listed on CERT-In’s Hall of Fame Before Turning 20 | https://medium.com/@Yukeshwaran-N/how-i-got-listed-on-cert-ins-hall-of-fame-before-turning-20-630113e834d1?source=rss------bug_bounty-5 | Yukeshwaran N | cybersecurity, bug-bounty, hacking, information-security, infosec | 30-Aug-2025 |
| Google Dorking Secrets: 1000+ Hidden Queries That Find Bugs for You | https://medium.com/@kumawatabhijeet2002/google-dorking-secrets-1000-hidden-queries-that-find-bugs-for-you-1c0ab68bd367?source=rss------bug_bounty-5 | Abhijeet kumawat | google, cybersecurity, hacking, bug-bounty, infosec | 30-Aug-2025 |
| Platform Website untuk Bug Bounty | https://ga46.medium.com/platform-website-untuk-bug-bounty-915f202723e7?source=rss------bug_bounty-5 | ANGGA | bug-hunting, pentest, website, bug-bounty, platform | 30-Aug-2025 |
| Phishing Hooks: Why Humans Are the Weakest Link | https://darkpurple.medium.com/phishing-hooks-why-humans-are-the-weakest-link-338137197d59?source=rss------bug_bounty-5 | Raj Islam | bug-bounty, hacking, self-improvement, writing-tips, compromise | 30-Aug-2025 |
| Web Application Architecture | https://medium.com/@iserjaoui/web-application-architecture-e0281cb97cbe?source=rss------bug_bounty-5 | Iserjaoui | penetration-testing, information-security-risk, bug-bounty, cybersecurity, ethical-hacking | 30-Aug-2025 |
| $500 Bounty for Stored SVG-based Script Execution Vulnerability in target.com’s Chat System | https://ch1ta.medium.com/500-bounty-for-stored-svg-based-script-execution-vulnerability-in-target-coms-chat-system-8358d0d6fc35?source=rss------bug_bounty-5 | Lakshya | xss-attack, cybersecurity, bugs, bug-bounty-writeup, bug-bounty | 30-Aug-2025 |
| SSRF | https://medium.com/@MohammedMHassan/ssrf-7c3f196e8d45?source=rss------bug_bounty-5 | Mohammed Hassan | bug-bounty, ssrf, penetration-testing, hackerone, cybersecurity | 30-Aug-2025 |
| The Perfect Bug Bounty Process: From Recon to Report | https://medium.com/@djhacker4397/the-perfect-bug-bounty-process-from-recon-to-report-c05ac3fad06a?source=rss------bug_bounty-5 | DJH4CK3R | vulnerability, ethical-hacking, reconnaissance, infosec, bug-bounty | 30-Aug-2025 |
| ⚡ From Zero to Hacker: Set Up Your Own Cyber Lab at Home ️♂️ | https://rootxploit0x.medium.com/from-zero-to-hacker-set-up-your-own-cyber-lab-at-home-%EF%B8%8F-%EF%B8%8F-958b7f669b5a?source=rss------bug_bounty-5 | RootXploit.0x | technology, ethical-hacking, cybersecurity, osint, bug-bounty | 30-Aug-2025 |
| Mastering Nmap (Part 3) in 2025:: Vulnerability Detection & Exploitation with NSE | https://medium.com/@appsecvenue/mastering-nmap-part-3-in-2025-vulnerability-detection-exploitation-with-nse-6e3b899eb64d?source=rss------bug_bounty-5 | appsecvenue | bug-bounty, ethical-hacking, network-security, nmap, cybersecurity | 30-Aug-2025 |
| How a Forgotten Subdomain Led to Critical Access | https://medium.com/readers-club/how-a-forgotten-subdomain-led-to-critical-access-116a78401065?source=rss------bug_bounty-5 | Aj | ethical-hacking, cybersecurity, bug-bounty, pentesting, attack-surface | 30-Aug-2025 |
| Hacking APIs: Building a Custom Nuclei Workflow for API Pentesting | https://iaraoz.medium.com/hacking-apis-building-a-custom-nuclei-workflow-for-api-pentesting-ff616e29f784?source=rss------bug_bounty-5 | Israel Aráoz Severiche | cybersecurity, owasp, hacking, appsec, bug-bounty | 30-Aug-2025 |
| Guía de Assetfinder: Descubre subdominios rápidamente para Bug Bounty y Red Team | https://medium.com/@jpablo13/gu%C3%ADa-de-assetfinder-descubre-subdominios-r%C3%A1pidamente-para-bug-bounty-y-red-team-c571f108e67a?source=rss------bug_bounty-5 | JPablo13 | ethical-hacking, cybersecurity, penetration-testing, osint, bug-bounty | 29-Aug-2025 |
| 9. The Secret Power of Google Dorking | https://infosecwriteups.com/9-the-secret-power-of-google-dorking-736325566220?source=rss------bug_bounty-5 | Abhijeet kumawat | dorking, google, bug-bounty, hacking, infosec | 29-Aug-2025 |
| Token Tales: Finding Hidden API Keys in JavaScript and Turning Them Into Gold | https://infosecwriteups.com/token-tales-finding-hidden-api-keys-in-javascript-and-turning-them-into-gold-e4e93c51e52b?source=rss------bug_bounty-5 | Iski | bug-bounty, money, hacking, cybersecurity, infosec | 29-Aug-2025 |
| TryHackMe | Web Security Essentials | Walkthrough | https://medium.com/@sampatil8554/%EF%B8%8F-web-security-essentials-a-beginners-guide-with-tryhackme-d23ac015c044?source=rss------bug_bounty-5 | Soham_Jadhav | bug-bounty, website, web-security, cybersecurity, web-security-testing | 29-Aug-2025 |
| Unsafe Request Handling in Account Deletion Flow Got me 91 $ | https://ch1ta.medium.com/unsafe-request-handling-in-account-deletion-flow-got-me-91-7cb365d375d0?source=rss------bug_bounty-5 | Lakshya | bug-bounty-writeup, infosec, bug-bounty, security, bug-bounty-tips | 29-Aug-2025 |
| Bug Bounty Enumeración de JavaScript: cómo encontrar endpoints y secretos escondidos | https://gorkaaa.medium.com/bug-bounty-enumeraci%C3%B3n-de-javascript-c%C3%B3mo-encontrar-endpoints-y-secretos-escondidos-47cb9f5affde?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bugbounty-writeup, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 29-Aug-2025 |
| To Each Their Own in Hacking: Choosing Your Path in Cybersecurity | https://medium.com/@hrofficial62/to-each-their-own-in-hacking-choosing-your-path-in-cybersecurity-50f9a6b0b27c?source=rss------bug_bounty-5 | Mr Horbio | hacking, bug-bounty-writeup, red-team, penetration-testing, bug-bounty | 29-Aug-2025 |
| Part II — Turning Agents Into “Sleeper” Agents: $118,500+ In Bounties via LLM Data Poisoning | https://medium.com/@justas_b1/part-ii-turning-agents-into-sleeper-agents-118-500-in-bounties-via-llm-data-poisoning-8b8d04ffcca8?source=rss------bug_bounty-5 | Justas_b | bug-bounty, llm, artificial-intelligence, cybersecurity, infosec | 29-Aug-2025 |
| The Leaky Bucket Bug | https://medium.com/@RaunakGupta1922/the-leaky-bucket-bug-aa725b031cc5?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty, cybersecurity, coding, ethical-hacking, programming | 29-Aug-2025 |
| Understanding and Mitigating Web Injection Vulnerabilities: A Source Code Perspective | https://medium.com/@everythingBlackkk/understanding-and-mitigating-web-injection-vulnerabilities-a-source-code-perspective-702df1bcaaab?source=rss------bug_bounty-5 | everythingBlackkk | bug-bounty, php, web-development, vulnerability | 29-Aug-2025 |
| ️ How I Discovered a Bluetooth Pairing Flaw in Android — Reported Under Google’s Android VRP | https://medium.com/@amitgy04/%EF%B8%8F-how-i-discovered-a-bluetooth-pairing-flaw-in-android-reported-under-googles-android-vrp-1b987516c6d6?source=rss------bug_bounty-5 | Amitishacked | bluetooth, bug-bounty, google, cybersecurity, android | 29-Aug-2025 |
| “When AI Becomes Your Interpreter: The Dark Art of Python Code Injection” | https://systemweakness.com/when-ai-becomes-your-interpreter-the-dark-art-of-python-code-injection-5213cd97735c?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, information-security, infosec, bug-bounty | 29-Aug-2025 |
| When Role-Play Goes Rogue: Prompt Injection Bypasses in LLMs | https://medium.com/meetcyber/when-role-play-goes-rogue-prompt-injection-bypasses-in-llms-ca22913e06f0?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, bug-bounty, cybersecurity, infosec | 29-Aug-2025 |
| Haunted Prompts: How Prompt Injection Targets System & User Instructions (with 16 Test Payloads) | https://javascript.plainenglish.io/haunted-prompts-how-prompt-injection-targets-system-user-instructions-with-16-test-payloads-b58f6c4e1885?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, information-security, cybersecurity, ai | 29-Aug-2025 |
| “Facebook Lite Access Control Failure Bug” awarded with 3000$. | https://medium.com/@khagendrabc264/facebook-lite-access-control-failure-bug-awarded-with-3000-c41836c20637?source=rss------bug_bounty-5 | Khagendrabc | bug-bounty | 29-Aug-2025 |
| Cross-Site Scripting (XSS) | https://abhayal.medium.com/cross-site-scripting-xss-b6df3388fc82?source=rss------bug_bounty-5 | Abhayal | cybersecurity, books, xss-attack, bug-bounty, hacking | 29-Aug-2025 |
| How a Simple Open Redirect Can Become a Phishing Vector in Web3 | https://efesn0.medium.com/how-a-simple-open-redirect-can-become-a-phishing-vector-in-web3-8dda423ef161?source=rss------bug_bounty-5 | Efe Esen | infosec, open-redirect, bug-bounty, cybersecurity | 29-Aug-2025 |
| 5 More cURL Commands to Bypass WAFs | https://medium.com/@ibtissamhammadi1/5-more-curl-commands-to-bypass-wafs-ddb434d30c60?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, cybersecurity, bug-bounty, waf-bypass, infosec | 29-Aug-2025 |
| RC car Hacked | https://medium.com/@08hakr/rc-car-hacked-f83226fcb3ad?source=rss------bug_bounty-5 | Kshirsagar Hrushikesh | hacker, hacking, bug-bounty, iot, cars | 29-Aug-2025 |
| Hacking My Way: Fun, Engaging, and Totally My Style | https://medium.com/@viratavi1223/hacking-my-way-fun-engaging-and-totally-my-style-1eb0d1fe888a?source=rss------bug_bounty-5 | Viratavi | web-security, hackerone, bug-bounty, ethical-hacking, cybersecurity | 29-Aug-2025 |
| How I Found a Simple but Impactful Web Cache Deception (WCD) Vulnerability | https://medium.com/@yusufabdulkadir74/how-i-found-a-simple-but-impactful-web-cache-deception-wcd-vulnerability-4782851bfcac?source=rss------bug_bounty-5 | Yusuf | offensive-security, cybersecurity, bug-bounty, information-technology, application-security | 29-Aug-2025 |
| Security Misconfiguration (OWASP Top 10 #5) — Simplified | https://medium.com/@chai.exe/security-misconfiguration-owasp-top-10-5-simplified-e6f02e084505?source=rss------bug_bounty-5 | Chai | bug-bounty, cybersecurity, owasp-top-10, tryhackme, web-application-security | 29-Aug-2025 |
| Stop Using Nested IFs in SQL — Do This Instead | https://levelup.gitconnected.com/stop-using-nested-ifs-in-sql-do-this-instead-84b6ea6c49c4?source=rss------bug_bounty-5 | Aman Sharma | programming, technology, cybersecurity, money, bug-bounty | 29-Aug-2025 |
| Insecure Design (OWASP Top 10 #4) — Simplified | https://medium.com/@chai.exe/insecure-design-owasp-top-10-4-simplified-01d4abb4bd99?source=rss------bug_bounty-5 | Chai | bug-bounty, owasp-top-10, tryhackme, cybersecurity, web-application-security | 29-Aug-2025 |
| “Day 24: The Polyglot Poison — How I Turned a Resume Upload into a Remote Shell” | https://infosecwriteups.com/day-24-the-polyglot-poison-how-i-turned-a-resume-upload-into-a-remote-shell-dc998722a328?source=rss------bug_bounty-5 | Aman Sharma | technology, bug-bounty, hacking, security, programming | 29-Aug-2025 |
| Admin Login Token Exposure in Password Reset Functionality | https://medium.com/@dgexploit/admin-login-token-exposure-in-password-reset-functionality-c74e9e587be2?source=rss------bug_bounty-5 | Dgexploit | web-security, bug-bounty, vulnerability-management, vulnerability, cybersecurity | 29-Aug-2025 |
| “Facebook Lite Access Control Failure Bug” awarded with 3000$. | https://medium.com/@khagendrabc264/facebook-lite-access-control-failure-bug-awarded-with-3000-c41836c20637?source=rss------bug_bounty-5 | Khagendra Budhathoki | bug-bounty | 29-Aug-2025 |
| Hacking APIs: Exploiting Misconfigured CORS Step by Step | https://iaraoz.medium.com/hacking-apis-exploiting-misconfigured-cors-step-by-step-182ca15bfd72?source=rss------bug_bounty-5 | Israel Aráoz Severiche | cybersecurity, owasp, hacking, api, bug-bounty | 29-Aug-2025 |
| Why I Quit Bug Bounty | https://medium.com/@calvaryhasarrived/why-i-quit-bug-bounty-a861f914a14e?source=rss------bug_bounty-5 | Calvaryhasarrived | bug-bounty, cybersecurity, ethical-hacking, information-security | 29-Aug-2025 |
| How Hackers Can Take Over a Company’s Subdomain (And How It Works) | https://osintteam.blog/how-hackers-can-take-over-a-companys-subdomain-and-how-it-works-5c75faae3fc7?source=rss------bug_bounty-5 | Abhishek Bhujang | programming, bug-bounty, cybersecurity, subdomain-takeover, technology | 29-Aug-2025 |
| HTTP Request Smuggling in Government Websites | https://osintteam.blog/http-request-smuggling-in-government-websites-30fcbe230415?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, technology, bug-bounty, vulnerability, bug-bounty-writeup | 29-Aug-2025 |
| How to Hunt an Attacker’s C2 IP Address Like a Threat Hunter | https://medium.com/@paritoshblogs/how-to-hunt-an-attackers-c2-ip-address-like-a-threat-hunter-2589c39b0e72?source=rss------bug_bounty-5 | Paritosh | cybersecurity, hacking, threat-hunting, how-to, bug-bounty | 28-Aug-2025 |
| Top 5 Malware Outbreaks of 2025 (So Far) — and Lessons Learned | https://medium.com/@paritoshblogs/top-5-malware-outbreaks-of-2025-so-far-and-lessons-learned-e4a611aab399?source=rss------bug_bounty-5 | Paritosh | cybersecurity, malware, hacking, bug-bounty, ai | 28-Aug-2025 |
| Weak OAuth, Big Problem: Grafana Login Bypass Explained | https://teamdh49.medium.com/weak-oauth-big-problem-grafana-login-bypass-explained-ee078ad6aa27?source=rss------bug_bounty-5 | TEAM DH49 | bugs, bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-zero | 28-Aug-2025 |
| Bug Bounty Broken Access Control: la vulnerabilidad que abre más puertas de las que imaginas | https://gorkaaa.medium.com/bug-bounty-broken-access-control-la-vulnerabilidad-que-abre-m%C3%A1s-puertas-de-las-que-imaginas-52ede8b6bc4a?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty, bug-bounty-writeup, bugbounty-writeup, bug-bounty-hunter | 28-Aug-2025 |
| Hacking by Breaking: The Dark Art of Error Fuzzing | https://javascript.plainenglish.io/hacking-by-breaking-the-dark-art-of-error-fuzzing-e05f5722fac1?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, information-security, infosec, ai, cybersecurity | 28-Aug-2025 |
| The Hunter’s Diary: A Bug Bounty Journey from Curiosity to Critical Hit | https://medium.com/@djhacker4397/the-hunters-diary-a-bug-bounty-journey-from-curiosity-to-critical-hit-f3c4900f225b?source=rss------bug_bounty-5 | DJH4CK3R | ethical-hacking, vulnerability, infosec, bug-bounty, reconnaissance | 28-Aug-2025 |
| ⚡ One Click to Chaos: How I Chained CSRF with Open Redirects for Account Takeover | https://infosecwriteups.com/one-click-to-chaos-how-i-chained-csrf-with-open-redirects-for-account-takeover-fd9d5d753402?source=rss------bug_bounty-5 | Iski | money, cybersecurity, infosec, hc-king, bug-bounty | 28-Aug-2025 |
| The First Crack: How Exploits Actually Work | https://darkpurple.medium.com/the-first-crack-how-exploits-actually-work-d8eeb5879176?source=rss------bug_bounty-5 | Raj Islam | exploit, bug-bounty, information-security, vulnerability, bug-bounty-tips | 28-Aug-2025 |
| Top 10 Error Handling Leaks Red Teamers Exploit | https://javascript.plainenglish.io/top-10-error-handling-leaks-red-teamers-exploit-348289e76bdd?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, bug-bounty, ai, infosec, information-security | 28-Aug-2025 |
| Your 404s Are Talking Too Much: Error Handling as a Security Control | https://medium.com/meetcyber/your-404s-are-talking-too-much-error-handling-as-a-security-control-a4265e11d531?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, information-security, infosec, bug-bounty | 28-Aug-2025 |
| ⚡ Broken API Dependencies: Recon via Third-Party Calls | https://systemweakness.com/broken-api-dependencies-recon-via-third-party-calls-c60a5c45eb82?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, infosec, cybersecurity, bug-bounty | 28-Aug-2025 |
| The $0 Bug: Why Most Reports Get Rejected (And How to Avoid It) | https://sukhveersingh97997.medium.com/the-0-bug-why-most-reports-get-rejected-and-how-to-avoid-it-c99a4909be98?source=rss------bug_bounty-5 | Sukhveer Singh | bug-bounty, tips-and-tricks, ethical-hacking, cybersecurity, bug-hunting | 28-Aug-2025 |
| ️OSINT Tools for Beginners: Turn Curiosity into Cybersecurity Superpowers ️ | https://rootxploit0x.medium.com/%EF%B8%8Fosint-tools-for-beginners-turn-curiosity-into-cybersecurity-superpowers-%EF%B8%8F-441f99e19464?source=rss------bug_bounty-5 | RootXploit.0x | penetration-testing, cybersecurity, ethical-hacking, bug-bounty, osint | 28-Aug-2025 |
| From Recon to Report: Exploiting SQL Injection in Hidden Parameter | https://mugh33ra.medium.com/from-recon-to-report-exploiting-sql-injection-in-hidden-parameter-a2bce655e055?source=rss------bug_bounty-5 | Ahmad Mugh33ra | sql-injection, bug-bounty, xss-vulnerability | 28-Aug-2025 |
| ️ Haunted APIs: How Hackers Exploit the Endpoints Developers Forget | https://medium.com/meetcyber/%EF%B8%8F-haunted-apis-how-hackers-exploit-the-endpoints-developers-forget-58572ee57dc8?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, ai, cybersecurity, infosec, bug-bounty | 28-Aug-2025 |
| Ghost Endpoints: The Secret Doors Hackers Use That You Don’t Know Exist | https://javascript.plainenglish.io/ghost-endpoints-the-secret-doors-hackers-use-that-you-dont-know-exist-3906b927498c?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, information-security, bug-bounty, infosec | 28-Aug-2025 |
| Simple JavaScript Bookmarklet That Converts GET to POST | https://medium.com/@cyber_comics/simple-javascript-bookmarklet-that-converts-get-to-post-92729f5935fa?source=rss------bug_bounty-5 | CYBER COMICS | bug-bounty, cybersecurity, pentesting, vulnerability, javascript | 28-Aug-2025 |
| Open Redirect Vulnerability in SSO API | https://infosecwriteups.com/open-redirect-vulnerability-in-sso-api-ed1ef7db2b04?source=rss------bug_bounty-5 | Ehtesham Ul Haq | webapplicationpentest, bug-bounty, writeup, pentesting, open-redirect | 28-Aug-2025 |
| Bug Bounty from Africa: A Complete Newbie’s Step‑by‑Step Guide | https://medium.com/@emokpaireisaac3/bug-bounty-from-africa-a-complete-newbies-step-by-step-guide-73bbcd4b404f?source=rss------bug_bounty-5 | Isaac Simeon | cybersecurity, bug-bounty, africa, technology | 28-Aug-2025 |
| 7 Realistic VAPT & Bug Bounty Triage Interview Questions (With Answers) Part 3 | https://medium.com/@cybersenpai/7-realistic-vapt-bug-bounty-triage-interview-questions-with-answers-part-3-f441aaf28e40?source=rss------bug_bounty-5 | CyberSenpai | cybersecurity, infosec, bug-bounty, penetration-testing, interview | 28-Aug-2025 |
| Skip the Fluff: Cybersecurity Skills That Actually Get You Hired | https://medium.com/@itsmohitnarayan/skip-the-fluff-cybersecurity-skills-that-actually-get-you-hired-f58aada70ea9?source=rss------bug_bounty-5 | Kumar Mohit | web-development, cybersecurity, information-security, bug-bounty, penetration-testing | 28-Aug-2025 |
| How I Found a Hidden Discount Code for a $1,500 Bounty | https://medium.com/@ibtissamhammadi1/how-i-found-a-hidden-discount-code-for-a-1-500-bounty-57207293bd50?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty, tech-tips, hacking, web-development | 28-Aug-2025 |
| Everything You Need to Know About OpenAI’s GPT-5 Bug Bounty Program | https://medium.com/@9anon4dz/everything-you-need-to-know-about-openais-gpt-5-bug-bounty-program-8222b4fbce98?source=rss------bug_bounty-5 | LawTech | gpt-5, bug-bounty, openai | 28-Aug-2025 |
| How I (Accidentally) Poisoned a Cache with Just the Host Header | https://aryanstha.medium.com/how-i-accidentally-poisoned-a-cache-with-just-the-host-header-11ab55cc73fd?source=rss------bug_bounty-5 | Aryan Shrestha | host-header-injection, ethical-hacking, bug-bounty, web-cache-poisoning, web-security | 28-Aug-2025 |
| Simple IDOR Led to PII & Passport Leaks (and a $1,000 Bounty) | https://medium.com/@theteatoast/simple-idor-led-to-pii-passport-leaks-and-a-1-000-bounty-e3e453a519ec?source=rss------bug_bounty-5 | toast | bug-bounty, hacking, idor, information-security | 28-Aug-2025 |
| Cryptographic Failures (OWASP Top 10 #2) — Simplified | https://medium.com/@chai.exe/cryptographic-failures-owasp-top-10-2-simplified-c37eb4bf75a4?source=rss------bug_bounty-5 | Chai | web-application-security, bug-bounty, tryhackme, cybersecurity, owasp-top-10 | 28-Aug-2025 |
| Portswigger Cross-site scripting Labs — Expert | https://medium.com/@sl0th0x87/portswigger-cross-site-scripting-labs-expert-16c4eb15eec3?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, portswigger, cross-site-scripting, burpsuite, walkthrough | 28-Aug-2025 |
| The Ultimate waybackurls Playbook — Turn Digital Archaeology into Bug Bounty Gold | https://medium.com/@shahpratham529/the-ultimate-waybackurls-playbook-turn-digital-archaeology-into-bug-bounty-gold-1b9e95167494?source=rss------bug_bounty-5 | Pratham Shah | bug-bounty, hacking, cybersecurity, infosec, bug-bounty-tips | 28-Aug-2025 |
| Mastering Routersploit: Step-by-Step Guide to Hacking Routers and IoT Devices | https://medium.com/@verylazytech/mastering-routersploit-step-by-step-guide-to-hacking-routers-and-iot-devices-cab47031afd3?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, hacking, cybersecurity, iot | 28-Aug-2025 |
| XSS Stored Bypass cookie http only via all accounts take over | https://medium.com/@VulnRAM/xss-stored-bypass-cookie-http-only-via-all-accounts-take-over-ef7134f139d1?source=rss------bug_bounty-5 | Vuln_Ram | bug-bounty-tips, bug-bounty-writeup, hacker, cybersecurity, bug-bounty | 28-Aug-2025 |
| Automating Credential Stuffing Attacks with Burp Suite Intruder | https://systemweakness.com/automating-credential-stuffing-attacks-with-burp-suite-intruder-3aa74cf0c2d1?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty-writeup, cybersecurity, bug-bounty-tips, web-development, bug-bounty | 28-Aug-2025 |
| Injection (OWASP Top 10 #3) — Simplified | https://medium.com/@chai.exe/injection-owasp-top-10-3-simplified-42bf04981a1a?source=rss------bug_bounty-5 | Chai | tryhackme, web-application-security, owasp-top-10, bug-bounty, cybersecurity | 28-Aug-2025 |
| Securing an Application Built with AI: Lessons from a Real-World Test | https://medium.com/@gabbytech01/securing-an-application-built-with-ai-lessons-from-a-real-world-test-400648df34f8?source=rss------bug_bounty-5 | GABBYTECH | ethical-hacking, bug-bounty, ethical-ai, penetration-testing | 27-Aug-2025 |
| Shodan’s Guide for Cybersecurity Professionals: From Basic Search to Advanced Reconnaissance | https://medium.com/@jpablo13/shodans-guide-for-cybersecurity-professionals-from-basic-search-to-advanced-reconnaissance-dbeeee21c638?source=rss------bug_bounty-5 | JPablo13 | technology, osint, cybersecurity, ethical-hacking, bug-bounty | 27-Aug-2025 |
| From CNAME to Cash: Hijacking Misconfigured DNS Records for Maximum Impact | https://infosecwriteups.com/from-cname-to-cash-hijacking-misconfigured-dns-records-for-maximum-impact-41352654f85c?source=rss------bug_bounty-5 | Iski | money, hacking, cybersecurity, infosec, bug-bounty | 27-Aug-2025 |
| Detecting Malware with Memory Forensics: A Deep Dive | https://medium.com/@paritoshblogs/detecting-malware-with-memory-forensics-a-deep-dive-dfd1458a8c37?source=rss------bug_bounty-5 | Paritosh | cybersecurity, hacking, bug-bounty, malware, memory-forensics | 27-Aug-2025 |
| The Hacker’s Toolkit for 2025: 15 Tools I Can’t Live Without | https://sukhveersingh97997.medium.com/the-hackers-toolkit-for-2025-15-tools-i-can-t-live-without-00df61e39c53?source=rss------bug_bounty-5 | Sukhveer Singh | tools, bug-bounty-tips, toolkit, bug-bounty, hacking | 27-Aug-2025 |
| Bug Bounty Un buen hacker no fuerza puertas, encuentra las que nunca cerraron | https://gorkaaa.medium.com/bug-bounty-un-buen-hacker-no-fuerza-puertas-encuentra-las-que-nunca-cerraron-743232169bd8?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty-writeup, bugbounty-writeup, bug-bounty-hunter, bug-bounty | 27-Aug-2025 |
| ️ Passive Recon Superpowers: Finding APIs Without Sending a Single Request | https://javascript.plainenglish.io/%EF%B8%8F-passive-recon-superpowers-finding-apis-without-sending-a-single-request-308e410aebdf?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, cybersecurity, ai, information-security | 27-Aug-2025 |
| Recon on Mobile APIs: The Hidden Attack Surface in Your Pocket | https://medium.com/meetcyber/recon-on-mobile-apis-the-hidden-attack-surface-in-your-pocket-7145915edcbe?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, ai, information-security, cybersecurity | 27-Aug-2025 |
| ️♂️ Chaining Recon Data: From Swagger JSON to Full API Map | https://medium.com/codetodeploy/%EF%B8%8F-%EF%B8%8F-chaining-recon-data-from-swagger-json-to-full-api-map-ad23aa1e4601?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, information-security, infosec, ai, bug-bounty | 27-Aug-2025 |
| Web Security 2025: 5 Red-Hot Attacks & Techniques You Can Cash In On Right Now | https://medium.com/@vivekps143/web-security-2025-5-red-hot-attacks-techniques-you-can-cash-in-on-right-now-4741b4ca434a?source=rss------bug_bounty-5 | Vivek PS | ethical-hacking, artificial-intelligence, web-security, bug-bounty, software-development | 27-Aug-2025 |
| Mass Extract API endpoints | https://medium.com/legionhunters/mass-extract-api-endpoints-8b26abb73591?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, bug-bounty-tips, api-testing, bug-bounty, cybersecurity | 27-Aug-2025 |
| Recon Beyond Endpoints: Fingerprinting API Frameworks | https://systemweakness.com/recon-beyond-endpoints-fingerprinting-api-frameworks-3d80b929c254?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, bug-bounty, information-security, ai, cybersecurity | 27-Aug-2025 |
| How GitLab Avoided €20M+ in Legal Fines With One Quick Fix: The One Small Mistake That Almost… | https://medium.com/@justas_b1/how-gitlab-avoided-20m-in-legal-fines-with-one-quick-fix-the-one-small-mistake-that-almost-cefb4b581c0e?source=rss------bug_bounty-5 | Justas_b | cybersecurity, bug-bounty, software-development, legal, infosec | 27-Aug-2025 |
| MailGuard: The Ultimate Email Security Tool to Protect Your Domain from Hacks | https://medium.com/@mohamednfe78/mailguard-the-ultimate-email-security-tool-to-protect-your-domain-from-hacks-88ec478ecf9e?source=rss------bug_bounty-5 | Mohamed.cybersec | cybersecurity-tools, bug-bounty, email-security, open-source, penetration-testing | 27-Aug-2025 |
| How I Found Full Account Takeover Worth $9750 in 24 Hours | https://medium.com/@ibtissamhammadi1/how-i-found-full-account-takeover-worth-9750-in-24-hours-aa3712177b61?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, cybersecurity, bug-bounty, tech, infosec | 27-Aug-2025 |
| Kioptrix Lv1 Walkthrough | https://medium.com/@mostafa.noor80/kioptrix-lv1-walkthrough-92f16a7bfb80?source=rss------bug_bounty-5 | Mostafa Noor | bug-bounty, tryhackme, tryhackme-writeup, tryhackme-walkthrough, penetration-testing | 27-Aug-2025 |
| Vamp Byte #2 — Punycode & Homograph Attacks? | https://codewithvamp.medium.com/vamp-byte-2-punycode-homograph-attacks-40cc7644a924?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | hacking, bug-bounty, bug-bounty-tips, security, punycode | 27-Aug-2025 |
| Kioptrix Lv1 Walkthrough | https://saif-qaher.medium.com/kioptrix-lv1-walkthrough-92f16a7bfb80?source=rss------bug_bounty-5 | Saif Ahmed | bug-bounty, tryhackme, tryhackme-writeup, tryhackme-walkthrough, penetration-testing | 27-Aug-2025 |
| ️ Mastering Bug Bounty Labs: OWASP Top 10 and Safe Practice Environments | https://medium.com/@warang.harmit/%EF%B8%8F-mastering-bug-bounty-labs-owasp-top-10-and-safe-practice-environments-c078bc9ec0c6?source=rss------bug_bounty-5 | Harmit Warang (hwrng0x) | bug-bounty, bugbounty-writeup, cybersecurity, cyber-security-awareness, information-security | 27-Aug-2025 |
| MyThe story of my first Bounty $$$ | https://infosecwriteups.com/mythe-story-of-my-first-bounty-d541f0c2e6ff?source=rss------bug_bounty-5 | RAJVEER | cybersecurity, infosec, broken-link-hijacking, bug-bounty, bug-bounty-writeup | 27-Aug-2025 |
| “Day 21: The Ghost API — How I Found a Secret Backdoor in a Fortune 500’s JavaScript” | https://amannsharmaa.medium.com/day-21-the-ghost-api-how-i-found-a-secret-backdoor-in-a-fortune-500s-javascript-5bd4f17e17dd?source=rss------bug_bounty-5 | Aman Sharma | programming, money, bug-bounty, technology, cybersecurity | 27-Aug-2025 |
| Bugs Are Not Vulnerabilities, and This is Why I Almost Gave Up | https://cyphernova1337.medium.com/bugs-are-not-vulnerabilities-and-this-is-why-i-almost-gave-up-d95ffc8d830b?source=rss------bug_bounty-5 | CypherNova1337 | infosec, cybersecurity, bug-bounty, hacking, bug-bounty-tips | 27-Aug-2025 |
| Weak Rate Limiting & Password Oracle in Change Email Endpoint Got me bounty reward. | https://medium.com/@ch1ta/weak-rate-limiting-password-oracle-in-change-email-endpoint-got-me-bounty-reward-15de040a656f?source=rss------bug_bounty-5 | Lakshya | cybersecurity, bug-bounty-writeup, rate-limiting, bug-report, bug-bounty | 27-Aug-2025 |
| So… Could I Login to Anyone Else Account by Accident? | https://medium.com/@viratavi1223/so-could-i-login-to-anyone-else-account-by-accident-2d1345406577?source=rss------bug_bounty-5 | Viratavi | ethical-hacking, web-security, hackerone, cybersecurity, bug-bounty | 27-Aug-2025 |
| From Bugs to Bucks: My First Bounty $$$ | https://infosecwriteups.com/from-bugs-to-bucks-my-first-bounty-0ab9f6341368?source=rss------bug_bounty-5 | RAJVEER | bug-bounty, hacking, information-security, bug-bounty-writeup, cybersecurity | 27-Aug-2025 |
| Rust’s Hidden Drop Order: The Bug That Doesn’t Exist (But Almost Did) | https://medium.com/@syntaxSavage/rusts-hidden-drop-order-the-bug-that-doesn-t-exist-but-almost-did-0a99007a4be8?source=rss------bug_bounty-5 | SyntaxSavage | hidden, drop, reverse-dropshipper, rust-programming-language, bug-bounty | 27-Aug-2025 |
| CVE-2021–42013 Apache HTTP Server 2.4.49/2.4.50 Remote Code Execution | https://medium.com/@yossefmohamedsalah2001/cve-2021-42013-apache-http-server-2-4-49-2-4-50-remote-code-execution-3dfcfb6d85d3?source=rss------bug_bounty-5 | Yossef ibrahim mohamed-salah | bug-bounty, capture-the-flag, ctf, ctf-writeup | 27-Aug-2025 |
| My First vulnerability found (No-bounty) | https://medium.com/@d3mps3y/my-first-vulnerability-found-no-bounty-adcf07484d5f?source=rss------bug_bounty-5 | dempsey | offensive-security, broken-access-control, owasp, penetration-testing, bug-bounty | 27-Aug-2025 |
| How I Turned a “Type 3 Chars” Search Box Into Full SQLi | https://medium.com/@ghostxploiter/how-i-turned-a-type-3-chars-search-box-into-full-sqli-a4664e41071f?source=rss------bug_bounty-5 | Ali Hussain | bug-bounty, infosec, sql-server, sql-injection, bug-bounty-writeup | 27-Aug-2025 |
| Microsoft Partner Leak: Leaking Microsoft Employee PII and 700M+ Partner Records | https://medium.com/@faav/microsoft-partner-leak-leaking-microsoft-employee-pii-and-700m-partner-records-38c9c5ea4fad?source=rss------bug_bounty-5 | Faav | bug-bounty-writeup, microsoft, bug-bounty, bug-bounty-tips | 26-Aug-2025 |
| Guía de Shodan para Profesionales de Ciberseguridad: De Búsqueda Básica a Reconocimiento Avanzado | https://medium.com/@jpablo13/gu%C3%ADa-de-shodan-para-profesionales-de-ciberseguridad-de-b%C3%BAsqueda-b%C3%A1sica-a-reconocimiento-avanzado-6bd26b2580c8?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, osint, cybersecurity, infosec, technology | 26-Aug-2025 |
| The Thousand Dollar Bug | https://medium.com/@RaunakGupta1922/the-thousand-dollar-bug-07955ff2ba57?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty, cybersecurity, coding, programming, hacking | 26-Aug-2025 |
| Bug Bounty XSS con postMessage: cuando la confianza entre ventanas se convierte en vulnerabilidad | https://gorkaaa.medium.com/bug-bounty-xss-con-postmessage-cuando-la-confianza-entre-ventanas-se-convierte-en-vulnerabilidad-f18822acf0ab?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty-writeup, bugbounty-writeup, bug-bounty, bug-bounty-hunter | 26-Aug-2025 |
| The Psychology of Bug Bounty Hunting: Why Mindset Beats Tools | https://sukhveersingh97997.medium.com/the-psychology-of-bug-bounty-hunting-why-mindset-beats-tools-5278ea7fa528?source=rss------bug_bounty-5 | Sukhveer Singh | bug-bounty, cybersecurity, bug-bounty-tips, tips-and-tricks, bug-bounty-writeup | 26-Aug-2025 |
| ️♂️ The Forgotten API Endpoints — Deep Recon & Defense Playbook | https://medium.com/meetcyber/%EF%B8%8F-%EF%B8%8F-the-forgotten-api-endpoints-deep-recon-defense-playbook-1507ff2da8a1?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, cybersecurity, information-security, bug-bounty, infosec | 26-Aug-2025 |
| ️ The Forgotten API Endpoints: How Recon Finds Gold Where Developers Don’t Look | https://medium.com/codetodeploy/%EF%B8%8F-the-forgotten-api-endpoints-how-recon-finds-gold-where-developers-dont-look-58fb04b97a51?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, ai, bug-bounty, cybersecurity, infosec | 26-Aug-2025 |
| ️ OSINT-Driven API Recon: Finding Endpoints Without Touching the Target | https://javascript.plainenglish.io/%EF%B8%8F-osint-driven-api-recon-finding-endpoints-without-touching-the-target-d98dbb8c262e?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, infosec, bug-bounty, cybersecurity | 26-Aug-2025 |
| Did you know that the first bug was actually a bug? Here’s the story. | https://medium.com/@abdullahsaifullah988/did-you-know-that-the-first-bug-was-actually-a-bug-heres-the-story-c9844f254f2c?source=rss------bug_bounty-5 | Abdullah Saifullah | bug-bounty, technology, history-of-technology, bugs, curiosity | 26-Aug-2025 |
| #Another Bug Bounty Win: Responsible Disclosure of Potential Template Injection Got me 250$ | https://medium.com/@ch1ta/another-bug-bounty-win-responsible-disclosure-of-potential-template-injection-got-me-250-a1d7be3cc781?source=rss------bug_bounty-5 | Lakshya | bugs, bug-bounty, cyber-security-awareness, bug-bounty-writeup, bug-bounty-tips | 26-Aug-2025 |
| When Ads Lie: How I Found a Click Fraud Weakness in a Major E-Commerce Site | https://infosecwriteups.com/when-ads-lie-how-i-found-a-click-fraud-weakness-in-a-major-e-commerce-site-4e8c26e16780?source=rss------bug_bounty-5 | Devansh Patel | bugs, bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 26-Aug-2025 |
| 8. Intro to XSS: How I Found My First Bug | https://infosecwriteups.com/8-intro-to-xss-how-i-found-my-first-bug-0046a4dbec4b?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, xss-attack, bug-bounty, cybersecurity, infosec | 26-Aug-2025 |
| Forgotten Features, Fresh Exploits: Turning Beta Endpoints into Admin Panel Access | https://infosecwriteups.com/forgotten-features-fresh-exploits-turning-beta-endpoints-into-admin-panel-access-6677e87b2702?source=rss------bug_bounty-5 | Iski | infosec, hacking, bug-bounty, money, cybersecurity | 26-Aug-2025 |
| 3 XSS HackerOne Report got Duplicate | https://medium.com/legionhunters/3-xss-hackerone-report-got-duplicate-d38db9d3e771?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, bug-bounty, pentesting, xss-attack, cross-site-scripting | 26-Aug-2025 |
| #ERROR! | https://medium.com/@omarmeslam2/how-changing-false-to-true-got-me-paid-34c164a0b890?source=rss------bug_bounty-5 | Omar Mesalam | bug-bounty, penteration-testing, vulnerability, cyper-security | 26-Aug-2025 |
| WordPress Credential Attacks: Brute-Forcing Usernames and Passwords — A Step-by-Step Guide for… | https://medium.com/@verylazytech/wordpress-credential-attacks-brute-forcing-usernames-and-passwords-a-step-by-step-guide-for-811024838d27?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, wordpress, bug-bounty, passwords, ethical-hacking | 26-Aug-2025 |
| Critical Vulnerability Discovery: Passwordless Invite Link Authentication Bypass Got me 500$ | https://medium.com/@ch1ta/critical-vulnerability-discovery-passwordless-invite-link-authentication-bypass-got-me-500-215d5a3277d4?source=rss------bug_bounty-5 | Lakshya | pentesting, cybersecurity, bug-bounty, infosec, bug-bounty-writeup | 26-Aug-2025 |
| The Fastest Way to Find a Bug in a Website (With Real Examples) | https://medium.com/@cybersecprof/the-fastest-way-to-find-a-bug-in-a-website-with-real-examples-6afd5a83d5b3?source=rss------bug_bounty-5 | Mohammed Gabic | ethical-hacking, cybersecurity, devsecops, bug-bounty, penetration-testing | 26-Aug-2025 |
| How Unlimited Backup Code Generation Can Break Account Security | https://medium.com/@ahmadelkali7/how-unlimited-backup-code-generation-can-break-account-security-dc03d3ffbf87?source=rss------bug_bounty-5 | Ahmadelkali | bug-bounty, bugs, bug-hunting, bug-bounty-tips, bug-bounty-writeup | 26-Aug-2025 |
| I Found a 2FA Bypass That Earned a $14,337 Bounty | https://medium.com/@ibtissamhammadi1/i-found-a-2fa-bypass-that-earned-a-14-337-bounty-89f746775e68?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, 2fa, bug-bounty, infosec, cybersecurity | 26-Aug-2025 |
| Third Party Account Linking Account Takeover | https://phlmox.medium.com/third-party-account-linking-account-takeover-971062e0c737?source=rss------bug_bounty-5 | phlmox | bug-bounty-tips, account-takeover, cybersecurity, bug-bounty | 26-Aug-2025 |
| My First HackerOne Submission: Lessons from Reporting to Dropbox | https://pirateinformatique.medium.com/my-first-hackerone-submission-lessons-from-reporting-to-dropbox-54a32abc6620?source=rss------bug_bounty-5 | Hemanth Mouli.ch | dropbox, bug-bounty, hcaking, cybersecurity, vulnerabiltiy-assesment | 26-Aug-2025 |
| SQL Injection Made Simple (Step-by-Step Hacker’s Guide) | https://medium.com/@vipulsonule71/sql-injection-made-simple-step-by-step-hackers-guide-30deed0f1442?source=rss------bug_bounty-5 | Vipul Sonule | hacking, programming, bug-bounty, technology, cybersecurity | 26-Aug-2025 |
| ️ How I Earned a $600 Bug Bounty with Metasploit (Beginner-Friendly Case Study) | https://medium.com/@carylrobert16/%EF%B8%8F-how-i-earned-a-600-bug-bounty-with-metasploit-beginner-friendly-case-study-04348d022941?source=rss------bug_bounty-5 | Carylrobert | ethical-hacking, bug-bounty, red-team, penetration-testing, devsecops | 26-Aug-2025 |
| How I Found a Critical Password Reset Bug in the BB program(and Got $4,000) | https://medium.com/@s41n1k/how-i-found-a-critical-password-reset-bug-in-the-bb-program-and-got-4-000-a22fffe285e1?source=rss------bug_bounty-5 | Imran Hossain | hacking, cybersecurity, security, bug-bounty, bug-bounty-tips | 26-Aug-2025 |
| 2 XSS vulnerabilities: From Open Redirect to Reflected XSS and 100€ | https://medium.com/@bughunter021/2-xss-vulnerabilities-from-open-redirect-to-reflected-xss-and-100-c03c4ade3978?source=rss------bug_bounty-5 | BugHunter021 | bug-bounty, hunting, pentest | 26-Aug-2025 |
| IDOR: Attack vectors, exploitation, bypasses and chains | https://medium.com/@bughunter021/idor-attack-vectors-exploitation-bypasses-and-chains-1670d7ec8ba1?source=rss------bug_bounty-5 | BugHunter021 | bug-bounty, hacking, pentest | 26-Aug-2025 |
| API Security — The Hidden Goldmine for Bug Bounty Hunters in 2025 | https://medium.com/@djhacker4397/api-security-the-hidden-goldmine-for-bug-bounty-hunters-in-2025-6a9854d23b98?source=rss------bug_bounty-5 | DJH4CK3R | infosec, vulnerability, api-security, bug-bounty, ethical-hacking | 26-Aug-2025 |
| 7 Cybersecurity Projects That Can Earn $5,000/Month | https://medium.com/@carylrobert16/7-cybersecurity-projects-that-can-earn-5-000-month-ae184e438f1f?source=rss------bug_bounty-5 | Carylrobert | ethical-hacking, bug-bounty, cybersecurity, devsecops, penetration-testing | 26-Aug-2025 |
| Swagger / OpenAPI / EndPoint Hunt Checklist | https://medium.com/@bughunter021/swagger-openapi-endpoint-hunt-checklist-7cfb3002a056?source=rss------bug_bounty-5 | BugHunter021 | bug-bounty, pentest, hunting | 26-Aug-2025 |
| “Day 20: The Chain Reaction — From a Tiny IDOR to a Supply Chain Nightmare” | https://infosecwriteups.com/day-20-the-chain-reaction-from-a-tiny-idor-to-a-supply-chain-nightmare-7add2d72335a?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, hacking, programming, technology, cybersecurity | 26-Aug-2025 |
| How to Hunt Easy Vulnerabilities on Websites | https://osintteam.blog/how-to-hunt-easy-vulnerabilities-on-websites-44024c3e301f?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, osint, bug-bounty-tips, vulnerability, bug-bounty-writeup | 26-Aug-2025 |
| Unique ways to Recon for Bug Hunters: Short series [Part 2] | https://osintteam.blog/unique-ways-to-recon-for-bug-hunters-short-series-part-2-735d0b2fad2b?source=rss------bug_bounty-5 | RivuDon | infosec, reconnaissance, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 26-Aug-2025 |
| Bypassing CAPTCHAs : From Regex Bots to AI | https://osintteam.blog/bypassing-captchas-from-regex-bots-to-ai-27091713205e?source=rss------bug_bounty-5 | Vipul Sonule | hacking, bug-bounty, cybersecurity, programming, tech | 26-Aug-2025 |
| Node.js Local Privilege Escalation Vulnerability | https://medium.com/h7w/node-js-local-privilege-escalation-vulnerability-0963cf7d44fb?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, nodejs, bug-bounty-writeup, vulnerability | 26-Aug-2025 |
| How a Misconfigured API Endpoint Helped Me Earn a $$$ Bounty | https://medium.com/@r3dd404/how-a-misconfigured-api-endpoint-helped-me-earn-a-bounty-0a6d54c46c2d?source=rss------bug_bounty-5 | R3DD | bug-bounty, bug-bounty-writeup, cybersecurity | 26-Aug-2025 |
| Gobuster (reconn tool) | https://medium.com/@VulnHunt3r/gobuster-reconn-tool-0310a3d8fc04?source=rss------bug_bounty-5 | vulnhunter | cybersecurity, technology, ctf, bug-bounty, tech | 26-Aug-2025 |
| A Closer Look at Xray The Web Security Scanner You Need to Know | https://medium.com/@muhadnan2828/a-closer-look-at-xray-the-web-security-scanner-you-need-to-know-27953af6ab36?source=rss------bug_bounty-5 | Muhammad Adnan Apriliyansyah | bug-hunting, web-penetration-testing, penetration-testing, bug-bounty, cybersecurity | 26-Aug-2025 |
| Looking for Leaked Credentials? The 3 Best Tools for Bug Hunters / Red Teamers | https://medium.com/@cheirishpro/looking-for-leaked-credentials-the-3-best-tools-for-bug-hunters-red-teamers-1c9e0891c321?source=rss------bug_bounty-5 | Cheirishpro | red-team-tools, data-breach, bug-bounty-writeup, cybersecurity, bug-bounty | 26-Aug-2025 |
| Why Most SQLi Payloads Fail in 2025 (and How to Craft Better Ones) | https://sukhveersingh97997.medium.com/why-most-sqli-payloads-fail-in-2025-and-how-to-craft-better-ones-b874bdbdd697?source=rss------bug_bounty-5 | Sukhveer Singh | vulnerability, sql, bug-bounty, sql-injection, cybersecurity | 26-Aug-2025 |
| Your PT1 Guide | https://medium.com/meetcyber/your-pt1-guide-627f67a71b05?source=rss------bug_bounty-5 | Mehdi Ben Fredj | penetration-testing, tryhackme-walkthrough, tryhackme, bug-bounty, certification | 25-Aug-2025 |
| SQL Injection Lab — TryHackMe — Walkthrough & answers | https://medium.com/@tapasviMadhak/sql-injection-lab-tryhackme-walkthrough-answers-c0ed7fc3bd33?source=rss------bug_bounty-5 | Tapasvi Madhak | tryhackme-walkthrough, tryhackme-writeup, tryhackme, bug-bounty, sql-injection | 25-Aug-2025 |
| Account Verification Bypass through JWT Misuse & CWE-398 | https://medium.com/@RaunakGupta1922/account-verification-bypass-through-jwt-misuse-cwe-398-d302276b80bf?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | programming, cybersecurity, coding, bug-bounty | 25-Aug-2025 |
| ♂️ Tip de Bug Bounty: Nunca ignores los mensajes de error | https://gorkaaa.medium.com/%EF%B8%8F-tip-de-bug-bounty-nunca-ignores-los-mensajes-de-error-6e57f2b82f76?source=rss------bug_bounty-5 | Gorka | bugbounting, bug-bounty-hunter, bug-bounty, bug-bounty-tips, bugbounty-writeup | 25-Aug-2025 |
| ️♂️ OWASP Top 10 for Web LLM Apps (2025) — The Field Manual | https://medium.com/meetcyber/%EF%B8%8F-%EF%B8%8F-owasp-top-10-for-web-llm-apps-2025-the-field-manual-9c8092dc8f36?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, information-security, bug-bounty, ai, infosec | 25-Aug-2025 |
| 10 Bug Bounty Myths That Are Stopping You From Earning Your First $1,000 | https://sukhveersingh97997.medium.com/10-bug-bounty-myths-that-are-stopping-you-from-earning-your-first-1-000-53a9b49e4478?source=rss------bug_bounty-5 | Sukhveer Singh | cybersecurity, earn-money-online, mythbusters, bug-bounty, bug-hunting | 25-Aug-2025 |
| Breaking Down BugBazaar: Lessons from a Vulnerable Android E-Commerce App | https://medium.com/@vicky210490/breaking-down-bugbazaar-lessons-from-a-vulnerable-android-e-commerce-app-2ceaca1c2759?source=rss------bug_bounty-5 | Vivek Sawant | appsec, android-pentesting, bug-bounty, android-security, androidreverseengineering | 25-Aug-2025 |
| Account Verification Bypass through JWT Misuse & CWE-347 | https://medium.com/@RaunakGupta1922/account-verification-bypass-through-jwt-misuse-cwe-398-d302276b80bf?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | programming, cybersecurity, coding, bug-bounty | 25-Aug-2025 |
| 10+ Vulnerabilities Reported but no Response | https://medium.com/legionhunters/10-vulnerabilities-reported-but-no-response-97fdfd80f738?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, vulnerability, pentesting, ethical-hacking, bug-bounty-tips | 25-Aug-2025 |
| What is XXS? | https://medium.com/@mohamedahmed3d99/what-is-xxs-47bfc3b28e6e?source=rss------bug_bounty-5 | Dark | cybersecurity, hacking, bug-bounty, cross-site-scripting, xss-attack | 25-Aug-2025 |
| Header Games: How a Single HTTP Header Misconfiguration Led Me to Sensitive Data Exposure | https://infosecwriteups.com/header-games-how-a-single-http-header-misconfiguration-led-me-to-sensitive-data-exposure-8fbb364782d9?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, infosec, bug-bounty, money | 25-Aug-2025 |
| Blind XSS via Clipboard Paste Handling: A Detailed Guide | https://infosecwriteups.com/blind-xss-via-clipboard-paste-handling-a-detailed-guide-4c52d65c43f4?source=rss------bug_bounty-5 | coffinxp | cybersecurity, bug-bounty, xss-attack, technology, penetration-testing | 25-Aug-2025 |
| ️♂️ OWASP Top 10: Web LLM Attack Risks (2025 Edition) | https://javascript.plainenglish.io/%EF%B8%8F-%EF%B8%8F-owasp-top-10-web-llm-attack-risks-2025-edition-c1018059411d?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, cybersecurity, information-security, ai, bug-bounty | 25-Aug-2025 |
| From Recon to Riches: How Cybersecurity Hunters Are Turning Recon Tools Into Gold in 2025 | https://medium.com/@djhacker4397/from-recon-to-riches-how-cybersecurity-hunters-are-turning-recon-tools-into-gold-in-2025-4a93c8563893?source=rss------bug_bounty-5 | DJH4CK3R | infosec, reconnaissance, bug-bounty, cybersecurity, ethical-hacking | 25-Aug-2025 |
| Flagtionary — Web | https://medium.com/@mostafa.abdo12376/flagtionary-web-bd3da8aedad1?source=rss------bug_bounty-5 | Mostafa Abd-Elbaky | bug-bounty, penetration-testing, bug-bounty-writeup, web-penetration-testing, cybersecurity | 25-Aug-2025 |
| From Sign-Up to Stored XSS in Profile: A Real Bug Bounty Report | https://medium.com/@Saeiez/from-sign-up-to-stored-xss-in-profile-a-real-bug-bounty-report-41096ef12a28?source=rss------bug_bounty-5 | Saeiez | aspnet, infosec, cybersecurity, bug-bounty, xss-attack | 25-Aug-2025 |
| My First Bug Bounty: HTML Injection Got me 250$ | https://medium.com/@ch1ta/my-first-bug-bounty-html-injection-got-me-250-419878fc528e?source=rss------bug_bounty-5 | Lakshya | bug-bounty-writeup, bug-bounty, bug-bounty-tips, html-injection | 25-Aug-2025 |
| How I Found an Account Takeover Bug in the Forgot Password Flow | https://medusa0xf.medium.com/how-i-found-an-account-takeover-bug-in-the-forgot-password-flow-49dbc82311f5?source=rss------bug_bounty-5 | Medusa | web-development, cybersecurity, hacking, bug-bounty, infosec | 25-Aug-2025 |
| Story of How vdp.brioni.com scam me | https://mrknightnidu.medium.com/story-of-how-vdp-brioni-com-scam-me-c7e5f455be09?source=rss------bug_bounty-5 | MRKNIGHT-NIDU | bug-bounty, scam, hacking | 25-Aug-2025 |
| How to find an Information Disclosure (ID) vulnerabilities | https://medium.com/@ImAltyb26/how-to-find-an-information-disclosure-id-vulnerabilities-165717e57f6f?source=rss------bug_bounty-5 | LEVI | bug-bounty, information-disclosure, bugs, bug-bounty-writeup | 25-Aug-2025 |
| Weak JWT Secret Leads to 0-Click Account Takeover — First Critical Accept | https://medium.com/@msaadsbr/weak-jwt-secret-leads-to-0-click-account-takeover-first-critical-accept-d7c0cc2b64b3?source=rss------bug_bounty-5 | Muhammad Saad Sabir | web-hacking, account-takeover, cybersecurity, bug-bounty, vulnerability | 25-Aug-2025 |
| 7 Essential Steps to Kickstart Your Bug Bounty Journey | https://medium.com/@ajudeb55/7-essential-steps-to-kickstart-your-bug-bounty-journey-924543170998?source=rss------bug_bounty-5 | Aju Deb | hacking, beginner, bugs, cybersecurity, bug-bounty | 25-Aug-2025 |
| Web LLM Attacks: How Hackers Turn Chatbots into Backdoors | https://systemweakness.com/web-llm-attacks-how-hackers-turn-chatbots-into-backdoors-c2ce79fea071?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, cybersecurity, bug-bounty, information-security | 25-Aug-2025 |
| How I Found 7 OAuth Flaws on Public Programs | https://medium.com/@ibtissamhammadi1/how-i-found-7-oauth-flaws-on-public-programs-3c0a30788d77?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, oauth, infosec, bug-bounty, hacking | 25-Aug-2025 |
| CTF beginner part-2 (con) | https://medium.com/@VulnHunt3r/ctf-beginner-part-2-con-539de478015e?source=rss------bug_bounty-5 | vulnhunter | hacking, ctf, bug-bounty, ethical-hacking, cybersecurity | 25-Aug-2025 |
| How I was able to subscribe and receive notification alerts to the company’s QA and found their… | https://medium.com/@0xm1racle/how-i-was-able-to-subscribe-and-receive-notification-alerts-to-the-companys-qa-and-found-their-7a753545eb93?source=rss------bug_bounty-5 | 0xm1racle | bug-bounty, web-application-security, information-security | 25-Aug-2025 |
| How I Turned an “Informational Finding” Into a valid security report | https://medium.com/@aravindpp77/how-i-turned-an-informational-finding-into-a-valid-security-report-69f589102507?source=rss------bug_bounty-5 | Aravind Prakash | bug-bounty, bug-bounty-tips, cybersecurity, penetration-testing, bugbounty-writeup | 25-Aug-2025 |
| Can You Trust What You See? Deepfake Scams Are Exploding in 2025 | https://medium.com/@paritoshblogs/can-you-trust-what-you-see-deepfake-scams-are-exploding-in-2025-9eb1c7062468?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, hacking, deepfakes, ai | 25-Aug-2025 |
| Million Dots Dos — Worth $7,640 — Unauthenticated GraphQL Endpoint — Gitlab | https://medium.com/@justas_b1/million-dots-dos-worth-7-640-unauthenticated-graphql-endpoint-gitlab-8f4fbb01c782?source=rss------bug_bounty-5 | Justas_b | infosec, graphql, ruby, cybersecurity, bug-bounty | 25-Aug-2025 |
| Launching Soon: Ethical Hacking & Bug Bounty Course on Udemy! | https://mukibas37.medium.com/launching-soon-ethical-hacking-bug-bounty-course-on-udemy-3c9b444e9cc4?source=rss------bug_bounty-5 | Mukilan Baskaran | ethical-hacking-course, ethical-hacking, bug-bounty, infosec, security | 25-Aug-2025 |
| Unauthenticated OTP Spam via Multi-Endpoint Rate Limit Bypass | https://medium.com/@RaunakGupta1922/unauthenticated-otp-spam-via-multi-endpoint-rate-limit-bypass-577027c197c0?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | programming, cybersecurity, bug-bounty, ethical-hacking, coding | 24-Aug-2025 |
| Automating Recon with GitHub Actions, Subfinder, Httpx, and Nuclei | https://engsooncheah.medium.com/automating-recon-with-github-actions-subfinder-httpx-and-nuclei-ac1bc8c664b1?source=rss------bug_bounty-5 | Eng Soon Cheah | bug-bounty, github-actions | 24-Aug-2025 |
| Accessing Employee GitHub SSH Key | https://ghostman01.medium.com/accessing-employee-github-ssh-key-4e125faba413?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | programming, cybersecurity, bug-bounty, technology, infosec | 24-Aug-2025 |
| 7. Understanding HTTP Requests: The Language of the Web | https://infosecwriteups.com/7-understanding-http-requests-the-language-of-the-web-167b4210b700?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, https, infosec, hacking, cybersecurity | 24-Aug-2025 |
| Learn Bug Bounty from Zero: A Step-by-Step Approach | https://medium.com/@rashad.desk/learn-bug-bounty-from-zero-a-step-by-step-approach-f1b241f4ed53?source=rss------bug_bounty-5 | Rashadul Islam | cybersecurity, freelancing, technology, data-science, bug-bounty | 24-Aug-2025 |
| Unauthenticated OTP Spam via Multi-Endpoint Rate Limit Bypass | https://medium.com/legionhunters/unauthenticated-otp-spam-via-multi-endpoint-rate-limit-bypass-577027c197c0?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | programming, cybersecurity, bug-bounty, ethical-hacking, coding | 24-Aug-2025 |
| GeoServer Exploits and Increasing Cybercrime Campaigns | https://medium.com/@shalomo.social/geoserver-exploits-and-increasing-cybercrime-campaigns-0325095af5da?source=rss------bug_bounty-5 | Cyber Fortress | kubernetes, cybersecurity, data-science, bug-bounty, bugs | 24-Aug-2025 |
| Bug Bounty: Subdomain Takeover: Cómo detectar y explotar subdominios huérfanos | https://gorkaaa.medium.com/bug-bounty-subdomain-takeover-c%C3%B3mo-detectar-y-explotar-subdominios-hu%C3%A9rfanos-722d1af41e8e?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bug-bounty-hunter, bugbounty-writeup | 24-Aug-2025 |
| Recon Roulette: Spinning Old Subdomains into a Fresh Critical Takeover | https://infosecwriteups.com/recon-roulette-spinning-old-subdomains-into-a-fresh-critical-takeover-47dab541e5b6?source=rss------bug_bounty-5 | Iski | cybersecurity, money, infosec, hacking, bug-bounty | 24-Aug-2025 |
| “My Burp Suite Pro Playbook: Hacking APIs & Hijacking Sessions for Bounties” | https://infosecwriteups.com/my-burp-suite-pro-playbook-hacking-apis-hijacking-sessions-for-bounties-33b68c59f6cd?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, money, programming, hacking, technology | 24-Aug-2025 |
| Improper Access Control (CWE-284): The Pentester’s Guide to Breaking Authorization in Web… | https://medium.com/@vivekbhatt2002/improper-access-control-cwe-284-the-pentesters-guide-to-breaking-authorization-in-web-c99adb33a286?source=rss------bug_bounty-5 | YoungerSibling | bug-bounty, cwe284, penetration-testing, owasp, web-security | 24-Aug-2025 |
| ️ Part 1: AI-Driven Recon — Hunting Attack Surfaces at Machine Speed | https://medium.com/@narendarlb123/%EF%B8%8F-part-1-ai-driven-recon-hunting-attack-surfaces-at-machine-speed-682ca500e051?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, information-security, ai, cybersecurity, infosec | 24-Aug-2025 |
| AI in Pentesting: How Attackers Use LLMs to Automate Recon & Payloads | https://medium.com/@narendarlb123/ai-in-pentesting-how-attackers-use-llms-to-automate-recon-payloads-53d7a3241175?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, information-security, bug-bounty, ai, cybersecurity | 24-Aug-2025 |
| ️♂️ Shadow API Red Team Playbook: Hunting Ghost Endpoints Like an Attacker | https://javascript.plainenglish.io/%EF%B8%8F-%EF%B8%8F-shadow-api-red-team-playbook-hunting-ghost-endpoints-like-an-attacker-812b6f582c00?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, infosec, bug-bounty, ai | 24-Aug-2025 |
| ️♂️ Shadow API Red Team Playbook (Deep Dive Edition) | https://medium.com/@narendarlb123/%EF%B8%8F-%EF%B8%8F-shadow-api-red-team-playbook-deep-dive-edition-c883ab7e5db8?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, infosec, ai, cybersecurity | 24-Aug-2025 |
| Shadow APIs: The Attack Surface That CISOs Don’t See | https://medium.com/meetcyber/shadow-apis-the-attack-surface-that-cisos-dont-see-c60ed255e2e9?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, infosec, information-security, ai, bug-bounty | 24-Aug-2025 |
| From 403 to Foothold: Creative Ways Attackers Turn “Forbidden” into Access | https://systemweakness.com/from-403-to-foothold-creative-ways-attackers-turn-forbidden-into-access-bb68633318e8?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, infosec, cybersecurity, information-security | 24-Aug-2025 |
| Perfecting the Art of Google Dorking: A Complete Guide | https://bitpanic.medium.com/perfecting-the-art-of-google-dorking-a-complete-guide-caceda392c26?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, technology, programming, bug-bounty, cybersecurity | 24-Aug-2025 |
| API Keys in the Wild: How Attackers Hunt Secrets on GitHub in 2025 | https://medium.com/meetcyber/api-keys-in-the-wild-how-attackers-hunt-secrets-on-github-in-2025-5557488d062f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, infosec, ai, bug-bounty | 24-Aug-2025 |
| Race Condition Testing Made Simple for Bug Hunters & Pentesters | https://rootast.medium.com/race-condition-testing-made-simple-for-bug-hunters-pentesters-0eb1ac8a861c?source=rss------bug_bounty-5 | Arash Shahbazi | pentesting, rce-vulnerability, methodology, bug-bounty, race-condition | 24-Aug-2025 |
| DNS Demystified: The Internet’s Invisible Phonebook | https://medium.com/@ultradefenseacademy/dns-demystified-the-internets-invisible-phonebook-6b4a3556984b?source=rss------bug_bounty-5 | Ultra-Defense-Academy | dns-servers, dns, bug-bounty, cybersecurity, bug-hunting | 24-Aug-2025 |
| Week 3 of My 90-Day Challenge: Bug Bounty, CISSP, and the Other Side of the Table | https://medium.com/@sl0th0x87/week-3-of-my-90-day-challenge-bug-bounty-cissp-and-the-other-side-of-the-table-e7c0a8219a00?source=rss------bug_bounty-5 | Mike (sl0th0x87) | cybersecurity, about-me, challenge, bug-bounty, weekly-report | 24-Aug-2025 |
| Inside the Sandbox: How a Modern Detection & OpSec Cyber Range Levels Up Purple Teams | https://medium.com/@ultradefenseacademy/inside-the-sandbox-how-a-modern-detection-opsec-cyber-range-levels-up-purple-teams-51a3ce10ede9?source=rss------bug_bounty-5 | Ultra-Defense-Academy | cybersecurity, purple-teaming, information-security, vapt, bug-bounty | 24-Aug-2025 |
| How I Found 5 OAuth Misconfigurations Leading to Pre-Account Takeover in Public Bug Bounty Programs… | https://medium.com/@KhaledAhmed107/how-i-found-5-oauth-misconfigurations-leading-to-pre-account-takeover-in-public-bug-bounty-programs-021d4c8c6954?source=rss------bug_bounty-5 | KhaledAhmed107 | cybersecurity, pre-account-takeover, bug-bounty, account-takeover, duplicate | 24-Aug-2025 |
| “XBOW AI: Breaking Code, Breaking Records” | https://ai.plainenglish.io/xbow-ai-breaking-code-breaking-records-d37a9da3aed5?source=rss------bug_bounty-5 | Sagarchhetri | machine-learning, bug-bounty, artificial-intelligence, cybersecurity, hacking | 24-Aug-2025 |
| Finding Needle in The Haystack : How a Forgotten Subdomain Led to Complete AWS Infrastructure… | https://medium.com/@0xakash.singh/finding-needle-in-the-haystack-how-a-forgotten-subdomain-led-to-complete-aws-infrastructure-328571e88496?source=rss------bug_bounty-5 | Akash Singh | bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity, information-security | 24-Aug-2025 |
| Unveiling the Shadows: A Remote Code Execution Vulnerability Report to Bytedance. Ignored. | https://medium.com/@rabiu-101/unveiling-the-shadows-a-remote-code-execution-vulnerability-report-to-bytedance-ignored-b95a016aa032?source=rss------bug_bounty-5 | RABIU | bug-bounty-writeup, bug-bounty, cybersecurity, information-security, infosec | 24-Aug-2025 |
| Breaking Guardrails: How I Jailbroke a Chatbot Built on Gemini API | https://medium.com/@ali.zamini/breaking-guardrails-how-i-jailbroke-a-chatbot-built-on-gemini-api-8f31f094da92?source=rss------bug_bounty-5 | Ali Zamini | cybersecurity, pentesting, bug-bounty, llm-prompt-injection, llm-security | 24-Aug-2025 |
| 7 Realistic VAPT & Bug Bounty Triage Interview Questions (With Answers) Part 2 | https://medium.com/@cybersenpai/7-realistic-vapt-bug-bounty-triage-interview-questions-with-answers-part-2-9238b55f7af9?source=rss------bug_bounty-5 | CyberSenpai | cybersecurity, owasp, interview, penetration-testing, bug-bounty | 24-Aug-2025 |
| HTML Injection, CSP Roadblocks & a $100 Win | https://sarv3shxploit.medium.com/html-injection-csp-roadblocks-a-100-win-d6abf1ca986e?source=rss------bug_bounty-5 | Sarv3shxploit | bug-bounty, hacking, cybersecurity, xss-attack, web-security | 24-Aug-2025 |
| TryHackMe : Active Directory Writeup | https://medium.com/@archtrmntor/tryhackme-active-directory-writeup-f4fd5e824c53?source=rss------bug_bounty-5 | Archtrmntor | tryhackme, tryhackme-writeup, bug-bounty, tryhackme-walkthrough, active-directory | 24-Aug-2025 |
| The 3 Best Data Breach Search Engines | https://medium.com/@dr_1n-ctrl/the-3-best-data-breach-search-engines-45e00e659137?source=rss------bug_bounty-5 | Dr1nCtrl | data-breach, cybersecurity, bug-bounty, osint, bug-bounty-writeup | 24-Aug-2025 |
| How I Found an Admin Login via Google Dork and Earned My First Bug Bounty | https://medium.com/@thedhruvsingh/how-i-found-an-admin-login-via-google-dork-and-earned-my-first-bug-bounty-c05e04adf830?source=rss------bug_bounty-5 | Dhruvdeep Singh | bug-bounty, osint, infosec, beginner, web-security | 24-Aug-2025 |
| BakingBad | Web | BrunnerCTF 2025 Writeup | InferiorAK | https://medium.com/great-hackers-battalion/bakingbad-web-brunnerctf-2025-writeup-inferiorak-47464c40eeed?source=rss------bug_bounty-5 | InferiorAK | command-injection, ctf, ctf-writeup, bypass, bug-bounty | 24-Aug-2025 |
| Easy-to-Automate Exploits for Bug Bounty Hunters | https://kd-200.medium.com/easy-to-automate-exploits-for-bug-bounty-hunters-f7d774bcfd2b?source=rss------bug_bounty-5 | Nitin yadav | penetration-testing, bug-bounty, cybersecurity, infosec, bug-bounty-tips | 24-Aug-2025 |
| Forgotten Subdomain = $1000 “AWS Breach” Bounty | https://medium.com/@0xakash.singh/finding-needle-in-the-haystack-how-a-forgotten-subdomain-led-to-complete-aws-infrastructure-328571e88496?source=rss------bug_bounty-5 | Akash Singh | bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity, information-security | 24-Aug-2025 |
| Lo que aprendí hackeando la NASA (y lo que significa realmente ser hacker) | https://gorkaaa.medium.com/lo-que-aprend%C3%AD-hackeando-la-nasa-y-lo-que-significa-realmente-ser-hacker-e4e5b390e570?source=rss------bug_bounty-5 | Gorka | bug-bounty, bug-bounty-hunter, bugbounty-writeup, bug-bounty-writeup, bug-bounty-tips | 24-Aug-2025 |
| Turning Agents Into “Sleeper” Agents: $118,500+ In Bounties via LLM Data Poisoning | https://medium.com/@justas_b1/turning-agents-into-sleeper-agents-118-500-in-bounties-via-llm-data-poisoning-92ddc95a50af?source=rss------bug_bounty-5 | Justas_b | llm, bug-bounty, infosec, cybersecurity, hacking | 24-Aug-2025 |
| Portswigger Unprotected Admin Functionality | https://medium.com/@cybernerddd/portswigger-unprotected-admin-functionality-f3829e219db4?source=rss------bug_bounty-5 | Cybernerddd | access-control, cybersecurity, ethical-hacking, web-app-security, bug-bounty | 24-Aug-2025 |
| XSS Mass Hunting CVE-2025-44148 | https://medium.com/legionhunters/xss-mass-hunting-cve-2025-44148-8737e86c04d9?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, xss-vulnerability, xss-attack, bug-bounty-tips, pentesting | 24-Aug-2025 |
| How We Bypassed Rate Limits To Flood OTP Systems | https://medium.com/@ibtissamhammadi1/how-we-bypassed-rate-limits-to-flood-otp-systems-157aa822b72e?source=rss------bug_bounty-5 | Ibtissam hammadi | tech, hacking, cybersecurity, bug-bounty, api-security | 24-Aug-2025 |
| How I Was Able to Take Over Accounts Without Email or Password | https://medium.com/@zyad_ibrahim333/how-i-was-able-to-take-over-accounts-without-email-or-password-5d7434d7a049?source=rss------bug_bounty-5 | Zyad Ibrahim | cybersecurity, account-takeover, broken-authentication, idor, bug-bounty | 24-Aug-2025 |
| Full Account Takeover (0-Click ATO) — My Story with a Critical Vulnerability | https://nayefhamouda.medium.com/full-account-takeover-0-click-ato-my-story-with-a-critical-vulnerability-6e7ff9a9eaa5?source=rss------bug_bounty-5 | Nayef Hamouda | infosec, bug-bounty, web-app-pentesting, bug-bounty-tips, cybersecurity | 24-Aug-2025 |
| FOFA: The Definitive Guide to Asset Recognition in Bug Bounty and OSINT | https://medium.com/@jpablo13/fofa-the-definitive-guide-to-asset-recognition-in-bug-bounty-and-osint-dc0448055220?source=rss------bug_bounty-5 | JPablo13 | technology, ethical-hacking, cybersecurity, osint, bug-bounty | 23-Aug-2025 |
| SQL Injection: Beyond Basics (Bug Bounty Hunter’s Guide) | https://sukhveersingh97997.medium.com/sql-injection-beyond-basics-bug-bounty-hunters-guide-5853d2d39b52?source=rss------bug_bounty-5 | sukhveer singh | bug-bounty, sql, bug-hunting, cybersecurity, sql-injection | 23-Aug-2025 |
| Unlimited Trials: Exploiting Email Alias Normalization in Redacted.com | https://medium.com/@RaunakGupta1922/unlimited-trials-exploiting-email-alias-normalization-in-redacted-com-c77cc24dc09d?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty, hacking, cybersecurity, coding, programming | 23-Aug-2025 |
| Unlimited Trials: Exploiting Email Alias Normalization in Redacted.com | https://osintteam.blog/unlimited-trials-exploiting-email-alias-normalization-in-redacted-com-c77cc24dc09d?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty, hacking, cybersecurity, coding, programming | 23-Aug-2025 |
| Tip de Bug Bounty: los fallos viven en los flujos secundarios | https://gorkaaa.medium.com/tip-de-bug-bounty-los-fallos-viven-en-los-flujos-secundarios-6a689523ec63?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter, bugbounty-writeup, bug-bounty | 23-Aug-2025 |
| From Logs to Loot: How Debug Files Exposed User Sessions and Led Me to Jackpot | https://infosecwriteups.com/from-logs-to-loot-how-debug-files-exposed-user-sessions-and-led-me-to-jackpot-d06b8efe5ac9?source=rss------bug_bounty-5 | Iski | money, bug-bounty, hacking, cybersecurity, infosec | 23-Aug-2025 |
| Katana to Kill‑Switch: Mastering ProjectDiscovery’s Crawler From Zero to Pro (with Real‑World… | https://adce626.medium.com/katana-to-kill-switch-mastering-projectdiscoverys-crawler-from-zero-to-pro-with-real-world-62a7dec5a744?source=rss------bug_bounty-5 | adce626 | bug-bounty, adce626, katana, hacking, hacks | 23-Aug-2025 |
| Portswigger CSRF where token validation depends on request method | https://medium.com/@cybernerddd/portswigger-csrf-where-token-validation-depends-on-request-method-1bbd4f859a0c?source=rss------bug_bounty-5 | Cybernerddd | bug-bounty, web-app-security, cybersecurity, csrf, ethical-hacking | 23-Aug-2025 |
| Hunt for Bug Bounties: Top 10 Web Vulnerabilities | https://rafalw3bcraft.medium.com/hunt-for-bug-bounties-top-10-web-vulnerabilities-eb16b0a67fd2?source=rss------bug_bounty-5 | RafalW3bCraft | cybersecurity, bug-bounty-tips, linux, bug-bounty, self-awareness | 23-Aug-2025 |
| Wrong Variable Name Leads To RCE | CVE-2025–52130 | https://medium.com/@The_Hiker/wrong-variable-name-leads-to-rce-cve-2025-52130-8ff59a7d245c?source=rss------bug_bounty-5 | TheHiker | bug-bounty, hacking, ethical-hacking, security, information-security | 23-Aug-2025 |
| Blind SSRF Found on a Public Bug Bounty Target | https://medium.com/@Abood_XHacker/blind-ssrf-found-on-a-public-bug-bounty-target-f9ae1fcc9494?source=rss------bug_bounty-5 | Abood_XHacker | bug-bounty, cybersecurity, web-penetration-testing, bug-hunting | 23-Aug-2025 |
| CATCTF 2025 Web Challenge BattleMe Revenge | https://medium.com/@karim.engmohamed/catctf-2025-web-challenge-battleme-revenge-071042a5868f?source=rss------bug_bounty-5 | Karim Mohamed | ctf, bug-bounty, penetration-testing | 23-Aug-2025 |
| How to Build a Vulnerable API Lab | https://iaraoz.medium.com/how-to-build-a-vulnerable-api-lab-389363f5bab7?source=rss------bug_bounty-5 | Israel Aráoz Severiche | owasp, hacking, web-security, bug-bounty, pentesting | 23-Aug-2025 |
| CATCTF 2025 Web Challenge Admin Panel | https://medium.com/@karim.engmohamed/catctf-2025-web-challenge-admin-panel-4f889c7792c5?source=rss------bug_bounty-5 | Karim Mohamed | penetration-testing, bug-bounty, ctf, cybersecurity | 23-Aug-2025 |
| ️ The Case of the Hidden Endpoint: How Enumeration Unlocked a Tricky Vulnerability | https://infosecwriteups.com/%EF%B8%8F-the-case-of-the-hidden-endpoint-how-enumeration-unlocked-a-tricky-vulnerability-4f8fd9e18b0d?source=rss------bug_bounty-5 | Aftab Raja | penetration-testing, infosec, hacking, cybersecurity, bug-bounty | 23-Aug-2025 |
| My Honest Review of TryHackMe’s PT1 Exam | https://medium.com/@wulfmaster/my-honest-review-of-tryhackmes-pt1-exam-4e946bd9a0f3?source=rss------bug_bounty-5 | FireWolf | tryhackme, bug-bounty, hacking, penetration-testing, ethical-hacking | 23-Aug-2025 |
| Useful Recon Notes (Reconnaissance) | https://medium.com/@mohamedahmed3d99/useful-recon-notes-reconnaissance-2c3765ec69f2?source=rss------bug_bounty-5 | Dark | reconnaissance, subdomain-enumeration, cybersecurity, information-gathering, bug-bounty | 23-Aug-2025 |
| Get Notified when a Bug Bounty Target launches New Subdomains | https://systemweakness.com/get-notified-when-a-bug-bounty-target-launches-new-subdomains-368150388c39?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty, bug-bounty-tips, cybersecurity, bug-bounty-writeup, red-team | 23-Aug-2025 |
| The Free URL Scanner That Saves Me Hours (CyScan.io) | https://kd-200.medium.com/the-free-url-scanner-that-saves-me-hours-cyscan-io-8909c26188e3?source=rss------bug_bounty-5 | Nitin yadav | technology, cybersecurity, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 23-Aug-2025 |
| ⚡ Safe DOM APIs vs. Dangerous DOM APIs & Inline HTML Explained ️ | https://medium.com/@zoningxtr/safe-dom-apis-vs-dangerous-dom-apis-inline-html-explained-%EF%B8%8F-455746a6dbde?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, html, cybersecurity, bug-bounty, javascript | 23-Aug-2025 |
| CSRF where token validation depends on token being present | https://medium.com/@cybernerddd/csrf-where-token-validation-depends-on-token-being-present-7248e1fa2735?source=rss------bug_bounty-5 | Cybernerddd | cybersecurity, csrf, web-app-security, portswigger-lab, bug-bounty | 23-Aug-2025 |
| (CVE-2025–52970) Authentication Bypass in FortiWeb ”POC” | https://medium.com/@hariharanhex00/cve-2025-52970-authentication-bypass-in-c-poc-04d7abd0c5f9?source=rss------bug_bounty-5 | HariHaranK | bug-bounty, bug-bounty-tips, hacking, zero-day-vulnerability, bug-bounty-writeup | 23-Aug-2025 |
| CAT Reloaded CTF -CATF 2025-write up | https://medium.com/@nayzakfr/cat-reloaded-ctf-catf-2025-write-up-7f05086d233b?source=rss------bug_bounty-5 | Nayzak | ctf, pentesting, bug-bounty, cybersecurity | 23-Aug-2025 |
| $300 Bounty: CSRF Vulnerability in Evernote | https://medium.com/h7w/300-bounty-csrf-vulnerability-in-evernote-c5e6dd85657a?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, vulnerability, penetration-testing, bug-bounty, csrf | 23-Aug-2025 |
| Mastering Nmap (Part 2): Advanced Scans & Firewall Evasion for Bug Bounty Hunters | https://medium.com/@appsecvenue/mastering-nmap-part-2-advanced-scans-firewall-evasion-for-bug-bounty-hunters-e005dcaf21a7?source=rss------bug_bounty-5 | appsecvenue | nmap, ethical-hacking, bug-bounty, cybersecurity, network-security | 23-Aug-2025 |
| Shellshock: The Bash Bug That Shook the Internet | https://hettt.medium.com/shellshock-the-bash-bug-that-shook-the-internet-4adbea238bad?source=rss------bug_bounty-5 | Het Patel | bug-bounty, bugs, shellshock, bug-bounty-writeup, cybersecurity | 23-Aug-2025 |
| AI vs Hackers: Who Will Win the Cybersecurity War? | https://sukhveersingh97997.medium.com/ai-vs-hackers-who-will-win-the-cybersecurity-war-95834c17d795?source=rss------bug_bounty-5 | Sukhveer Singh | ai-vs-humans, cybersecurity, ai, generative-ai-tools, bug-bounty | 23-Aug-2025 |
| How I Found 5 Logic Flaws on One Main Domain | https://medium.com/@ibtissamhammadi1/how-i-found-5-logic-flaws-on-one-main-domain-a67a0ccd23c0?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty, ethical-hacking, web-security, programming | 23-Aug-2025 |
| FOFA: La Guía Definitiva para el Reconocimiento de Activos en Bug Bounty y OSINT | https://medium.com/@jpablo13/fofa-la-gu%C3%ADa-definitiva-para-el-reconocimiento-de-activos-en-bug-bounty-y-osint-948bcae4fe5b?source=rss------bug_bounty-5 | JPablo13 | osint, bug-bounty, ethical-hacking, technology, cybersecurity | 22-Aug-2025 |
| How a Simple Endpoint Copy Turned Into Bonus Bounty$$$$ | https://medium.com/@whitehat29/how-a-simple-endpoint-copy-turned-into-bonus-bounty-a35906b2c611?source=rss------bug_bounty-5 | Whitehat | cybersecurity, bug-bounty-writeup, bug-bounty, hacking, bug-bounty-tips | 22-Aug-2025 |
| The API Attack Surge of 2025: Why Your SaaS Isn’t Safe | https://medium.com/@paritoshblogs/the-api-attack-surge-of-2025-why-your-saas-isnt-safe-74f33bbc87be?source=rss------bug_bounty-5 | Paritosh | api, bug-bounty, saas, cybersecurity, hacking | 22-Aug-2025 |
| 5 Best Cybersecurity Jobs with Fat Paycheques | https://medium.com/@rashad.desk/5-best-cybersecurity-jobs-with-fat-paycheques-80d8d9a44153?source=rss------bug_bounty-5 | Rashadul Islam | bug-bounty, technology, cybersecurity, make-money-online, freelancing | 22-Aug-2025 |
| ️♂️ From Recon to Ransom: Red Team Stories That Start With Metadata | https://medium.com/meetcyber/%EF%B8%8F-%EF%B8%8F-from-recon-to-ransom-red-team-stories-that-start-with-metadata-8aaf1d13c1dd?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, bug-bounty, information-security, infosec, cybersecurity | 22-Aug-2025 |
| I Leaked Keywords from Google Drive with a Tiny Side‑Channel ⚡ ($5,000 Bounty) | https://infosecwriteups.com/i-leaked-keywords-from-google-drive-with-a-tiny-side-channel-5-000-bounty-480ab5b97bf5?source=rss------bug_bounty-5 | Yeswehack | hacking, cybersecurity, bug-bounty, infosec, google | 22-Aug-2025 |
| Client-Side Security Gone Wrong: Why Frontend Validation Means Nothing | https://medium.com/@narendarlb123/client-side-security-gone-wrong-why-frontend-validation-means-nothing-f668050faa3f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, information-security, bug-bounty, cybersecurity | 22-Aug-2025 |
| ⚡ 10 JavaScript Patterns That Lead to Security Bugs in Production | https://javascript.plainenglish.io/10-javascript-patterns-that-lead-to-security-bugs-in-production-93b996343dd9?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, cybersecurity, infosec, bug-bounty, information-security | 22-Aug-2025 |
| ️ Bypassing WAFs 101: Real Tricks That Work in 2025 | https://medium.com/@narendarlb123/%EF%B8%8F-bypassing-wafs-101-real-tricks-that-work-in-2025-892e75ef338f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, ai, cybersecurity, information-security | 22-Aug-2025 |
| XSS Exploit via RichText Parser | https://infosecwriteups.com/xss-exploit-via-richtext-parser-352e1b39603b?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, xss-attack, vulnerability, bug-bounty | 22-Aug-2025 |
| Clipboard DOM-based XSS in GitLab | https://infosecwriteups.com/clipboard-dom-based-xss-in-gitlab-2b4768f108cf?source=rss------bug_bounty-5 | Monika sharma | vulnerability, xss-attack, javascript, bug-bounty, gitlab | 22-Aug-2025 |
| Mastering WordPress Bug Hunting: A Complete Guide for Security Researchers | https://infosecwriteups.com/mastering-wordpress-bug-hunting-a-complete-guide-for-security-researchers-3ff7ee4413a2?source=rss------bug_bounty-5 | coffinxp | wordpress, hacking, bug-bounty, cybersecurity, penetration-testing | 22-Aug-2025 |
| This Is How I Got $750 From My First IDOR | https://infosecwriteups.com/this-is-how-i-got-750-from-my-first-idor-8058061c65ba?source=rss------bug_bounty-5 | TSxNINJA | broken-access-control, infosec, idor, hacking, bug-bounty | 22-Aug-2025 |
| - … | https://systemweakness.com/-747eb30b6bb0?source=rss------bug_bounty-5 | Qasim Mahmood Khalid | hacking, cybersecurity, development, programming, bug-bounty | 22-Aug-2025 |
| Infinite Loops, Infinite Loot: Exploiting an Overlooked API Rate Limit for Full Account Takeover | https://infosecwriteups.com/infinite-loops-infinite-loot-exploiting-an-overlooked-api-rate-limit-for-full-account-takeover-b14070e1cd5e?source=rss------bug_bounty-5 | Iski | bug-bounty, money, cybersecurity, infosec, hacking | 22-Aug-2025 |
| Case Study: Reflected Cross‑Site Scripting (XSS) | https://medium.com/@pathanrakib7329/case-study-reflected-cross-site-scripting-xss-5fd7ad2d17e4?source=rss------bug_bounty-5 | Pathanrakib | web-security, cybersecurity, xss-vulnerability, bug-bounty, information-security | 22-Aug-2025 |
| Manual work for $4k Bounty Akamai cant stop Information Disclosure | https://medium.com/@amnotacat/manual-work-for-4k-bounty-akamai-cant-stop-information-disclosure-98ab6cc10068?source=rss------bug_bounty-5 | amnotacat | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 22-Aug-2025 |
| Broken Access Control (OWASP Top 10 #1) — Simplified | https://medium.com/@chai.exe/broken-access-control-owasp-top-10-1-simplified-548de3420e1d?source=rss------bug_bounty-5 | Chai | owasp-top-10, bug-bounty, cybersecurity, web-application-security, tryhackme | 22-Aug-2025 |
| What I Found When a Simple HTML Injection Went Wrong | https://medium.com/@ibtissamhammadi1/what-i-found-when-a-simple-html-injection-went-wrong-4953d9706f18?source=rss------bug_bounty-5 | Ibtissam hammadi | zero-day, bug-bounty, infosec, html, cybersecurity | 22-Aug-2025 |
| A Simple Supply Chain Bug — Worth $11,850 — How GitLab Reinforces Trust in Open Source | https://medium.com/@justas_b1/a-simple-supply-chain-bug-worth-11-850-how-gitlab-reinforces-trust-in-open-source-424585c79074?source=rss------bug_bounty-5 | Justas_b | cybersecurity, infosec, docker, devops, bug-bounty | 22-Aug-2025 |
| How I Earned My First $500 Bug Bounty via Rate Limit Bypass | https://medium.com/@ghannu0x01/how-i-earned-my-first-500-bug-bounty-via-rate-limit-bypass-8c1e92374860?source=rss------bug_bounty-5 | Ghanashyam Ghimire | cybersecurity, bug-bounty-writeup, information-security, bug-bounty | 22-Aug-2025 |
| “Day 18: The Invisible Backdoor — How a Typo in a Config File Neutralized Multi-Factor… | https://infosecwriteups.com/day-18-the-invisible-backdoor-how-a-typo-in-a-config-file-neutralized-multi-factor-9a16ab46da65?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, hacking, money, programming, technology | 22-Aug-2025 |
| CAT CTF 25 Web challenges writeups | https://medium.com/@0xNayelx/cat-ctf-25-web-challenges-writeups-2655e02b6485?source=rss------bug_bounty-5 | 0xNayel | ctf, bug-bounty, bug-bounty-tips, penetration-testing, hacking | 22-Aug-2025 |
| - … | https://medium.com/@qaafqasim/-747eb30b6bb0?source=rss------bug_bounty-5 | Qasim Mahmood Khalid | hacking, cybersecurity, development, programming, bug-bounty | 22-Aug-2025 |
| Subdomain Takeover: Beyond Basics (From a Bug Bounty Hunter’s Perspective) | https://sukhveersingh97997.medium.com/subdomain-takeover-beyond-basics-from-a-bug-bounty-hunters-perspective-8a7ec892ff14?source=rss------bug_bounty-5 | sukhveer singh | bug-hunting, bug-bounty, subdomain-takeover, bug-bounty-tips, cybersecurity | 22-Aug-2025 |
| CAT Reloaded CTF 2025-Web Challenges | https://medium.com/@sondosgaber98/cat-reloaded-ctf-2025-web-challenges-c11c08086d92?source=rss------bug_bounty-5 | s0nDOS | jwt, web-security, bug-bounty, ctf, cybersecurity | 22-Aug-2025 |
| Portswigger HTTP Host Header Attacks Labs — Expert | https://medium.com/@sl0th0x87/portswigger-http-host-header-attacks-labs-expert-f773ffad923d?source=rss------bug_bounty-5 | Mike (sl0th0x87) | http-host-header-attack, walkthrough, portswigger, bug-bounty, burpsuite | 22-Aug-2025 |
| Portswigger Business logic vulnerabilities Labs — Expert | https://medium.com/@sl0th0x87/portswigger-business-logic-vulnerabilities-labs-expert-b233d942e574?source=rss------bug_bounty-5 | Mike (sl0th0x87) | burpsuite, businesslogicvuln, portswigger, bug-bounty, walkthrough | 22-Aug-2025 |
| From Days to Minutes: Building DNS-Helix, a High-Speed Subdomain Discovery Tool | https://cyphernova1337.medium.com/from-days-to-minutes-building-dns-helix-a-high-speed-subdomain-discovery-tool-84bf2fcc3bd9?source=rss------bug_bounty-5 | CypherNova1337 | bug-bounty, hacking-tools, hacking, information-security, cybersecurity | 22-Aug-2025 |
| Portswigger Web LLM Attacks Labs — Expert | https://medium.com/@sl0th0x87/portswigger-web-llm-attacks-labs-expert-3eba30e89830?source=rss------bug_bounty-5 | Mike (sl0th0x87) | web-llm-attacks, burpsuite, walkthrough, bug-bounty, portswigger | 22-Aug-2025 |
| Portswigger Server-side template injection — Expert | https://medium.com/@sl0th0x87/portswigger-server-side-template-injection-expert-41103b47147f?source=rss------bug_bounty-5 | Mike (sl0th0x87) | portswigger, bug-bounty, burpsuite, walkthrough, ssti | 22-Aug-2025 |
| CSRF to Delete a Pet — How I Found a Vulnerability in the /pets/delete Endpoint | https://dr34m14.medium.com/csrf-to-delete-a-pet-how-i-found-a-vulnerability-in-the-pets-delete-endpoint-637b3e50152b?source=rss------bug_bounty-5 | dr34m14 | hackerone, csrf, bug-bounty, bugbounty-writeup, writeup | 22-Aug-2025 |
| Portswigger Authentication Labs — Expert | https://medium.com/@sl0th0x87/portswigger-authentication-labs-expert-9b7201dca347?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, portswigger, authentication, walkthrough, burpsuite | 22-Aug-2025 |
| When a Valid Critical Goes Nowhere: Lessons from 14 Weeks in ImmuneFi Limbo | https://medium.com/@sillencedogood/when-a-valid-critical-goes-nowhere-lessons-from-14-weeks-in-immunefi-limbo-7764039316a2?source=rss------bug_bounty-5 | Silence Dogood | security-research, immunefi, bug-bounty, web3 | 22-Aug-2025 |
| Arbitrary URL Injection via Link Input Field | bug bounty writeup | https://medium.com/@RaunakGupta1922/arbitrary-url-injection-via-link-input-field-bug-bounty-writeup-08d87dab2011?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | coding, hacking, programming, bug-bounty, cybersecurity | 21-Aug-2025 |
| Your Domain, My Playground: Hijacking Your Link Previews | https://shubhangborkar.medium.com/your-domain-my-playground-hijacking-your-link-previews-fdca8272bb4e?source=rss------bug_bounty-5 | Shubhang Borkar | bug-bounty, security, hacking, google, cybersecurity | 21-Aug-2025 |
| Web Cache Poisoning via an Unkeyed Query Parameter | https://bashoverflow.medium.com/web-cache-poisoning-via-an-unkeyed-query-parameter-543c4016b920?source=rss------bug_bounty-5 | Bash Overflow | cache-based-xss, utm-parameter-cache, unkeyed-query-parameter, web-cache-poisoning, bug-bounty | 21-Aug-2025 |
| How I Found My First Critical Vulnerability | https://cybersecuritywriteups.com/how-i-found-my-first-critical-vulnerability-e7407f715fc9?source=rss------bug_bounty-5 | Aj | bug-bounty-tips, cybersecurity, pentesting, bug-bounty, penetration-testing | 21-Aug-2025 |
| ️ Cybersecurity in 2025: 7 Free Tools Every Beginner Should Master | https://medium.com/@parthpatel1207/%EF%B8%8F-cybersecurity-in-2025-7-free-tools-every-beginner-should-master-9b76dcfe7adf?source=rss------bug_bounty-5 | Parth Patel | ethical-hacking, infosec, hacking-tools, bug-bounty, cybersecurity | 21-Aug-2025 |
| 6. Subdomain Enumeration Like a Pro | https://medium.com/@kumawatabhijeet2002/6-subdomain-enumeration-like-a-pro-8461c8a92e25?source=rss------bug_bounty-5 | Abhijeet kumawat | secrets, subdomain, bug-bounty, enumeration, hacking | 21-Aug-2025 |
| ¿La IA va a reemplazar a los Bug Bounty Hunters? | https://gorkaaa.medium.com/la-ia-va-a-reemplazar-a-los-bug-bounty-hunters-8d43f5ec456e?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bugbounty-writeup, bug-bounty-hunter, bug-bounty-writeup, bug-bounty | 21-Aug-2025 |
| When Rate Limits Fail: How Attackers Still Brute Force APIs (and What You Missed) | https://javascript.plainenglish.io/when-rate-limits-fail-how-attackers-still-brute-force-apis-and-what-you-missed-fe5f35906611?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, information-security, infosec, api, cybersecurity | 21-Aug-2025 |
| “The Day I Stumbled Upon an Invisible Backdoor: Exploiting File Downloads via IDOR” | https://medium.com/meetcyber/the-day-i-stumbled-upon-an-invisible-backdoor-exploiting-file-downloads-via-idor-a25d959e956d?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, infosec, bug-bounty, cybersecurity, information-security | 21-Aug-2025 |
| HackerOne Got You Down? Here’s Where to Look Next | https://medium.com/@CtrlC3/hackerone-got-you-down-heres-where-to-look-next-19ca6aad9e4f?source=rss------bug_bounty-5 | CtrlC3 | bug-bounty, hacking, ethical-hacking, cybersecurity, vulnerability | 21-Aug-2025 |
| Buried Treasures in Backups: How .bak Files Handed Me the Keys to Production ️ | https://infosecwriteups.com/buried-treasures-in-backups-how-bak-files-handed-me-the-keys-to-production-%EF%B8%8F-4bf325a51f31?source=rss------bug_bounty-5 | Iski | money, hacking, cybersecurity, infosec, bug-bounty | 21-Aug-2025 |
| How I Found a Critical Sony Vulnerability: Improper Authentication — Generic | https://medium.com/@iprogrammer16/how-i-found-a-critical-sony-vulnerability-improper-authentication-generic-2a215962b6dd?source=rss------bug_bounty-5 | iProgrammer16 | bug-bounty-writeup, bug-bounty, bugbounty-writeup, bug-bounty-hunter, bug-bounty-tips | 21-Aug-2025 |
| Doge Head Coin ($DHC) Mega Airdrop: Get In Before Exchange Listing! | https://medium.com/@dogeheadcoins/doge-head-coin-dhc-mega-airdrop-get-in-before-exchange-listing-1c04491479a5?source=rss------bug_bounty-5 | Doge Head Coin | airdropalert, airdrop, bug-bounty, crypto, cryptocurrency-news | 21-Aug-2025 |
| ThunderCipher-Lab[Easy Login] | https://medium.com/@patidarbhuwan44/thundercipher-lab-easy-login-d2ca127d30e9?source=rss------bug_bounty-5 | Bhuwan Patidar | bug-bounty, ethical-hacking, learning, cybersecurity, ctf-writeup | 21-Aug-2025 |
| What We Actually Do in the SOC — Beyond Dashboards and Alerts | https://medium.com/@forte.social/what-we-actually-do-in-the-soc-beyond-dashboards-and-alerts-69de9ff721da?source=rss------bug_bounty-5 | eSecForte Technologies | security, bug-bounty, cybersecurity, hacking, celebrity | 21-Aug-2025 |
| How I found a security vulnerability in NASA | https://medium.com/@everythingBlackkk/how-i-found-a-security-vulnerability-in-nasa-e39f8c115d59?source=rss------bug_bounty-5 | everythingBlackkk | hacking, bug-bounty, web-development | 21-Aug-2025 |
| Stealer Logs: Check If Your Domain Is Exposed Right Now | https://medium.com/@alexandrevandammepro/stealer-logs-check-if-your-domain-is-exposed-right-now-541532c335a2?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, cybersecurity, bug-bounty, darkweb, technology | 21-Aug-2025 |
| I Exposed a Critical AI Flaw Using Just ChatGPT | https://medium.com/@ibtissamhammadi1/i-exposed-a-critical-ai-flaw-using-just-chatgpt-46ccbf524b53?source=rss------bug_bounty-5 | Ibtissam hammadi | chatgpt, bug-bounty-tips, future-of-ai, bug-bounty, ai | 21-Aug-2025 |
| WordPress Enumeration Before Exploitation: A Step-by-Step Guide for Security Professionals (Part 1) | https://medium.com/@verylazytech/wordpress-enumeration-before-exploitation-a-step-by-step-guide-for-security-professionals-part-1-664926fbacf0?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, wordpress, ethical-hacking, hacking, bug-bounty | 21-Aug-2025 |
| Ditch Intelx.io: 3 Better (and Cheaper) Alternatives in 2025 | https://medium.com/@jeosantos2005/ditch-intelx-io-3-better-and-cheaper-alternatives-in-2025-b25be5174bbd?source=rss------bug_bounty-5 | Jeosantos | osint, blue-team, bug-bounty, journalism, cybersecurity | 21-Aug-2025 |
| LINUX CREDENTIAL HUNTING | https://medium.com/@P4RAD0X/linux-credential-hunting-65f8ee1d22d8?source=rss------bug_bounty-5 | PARADOX | cybersecurity, penetration-testing, hacking, pentesting, bug-bounty | 21-Aug-2025 |
| Reflected XSS on Starbucks | https://medium.com/@0x0mahmoud/reflected-xss-on-starbucks-1bcd07aa53f5?source=rss------bug_bounty-5 | 0X0mahmoud | penetration-testing, xss-attack, bug-bounty | 21-Aug-2025 |
| 1,130 Bounty: Critical XSS Vulnerability in GitLab’s | https://medium.com/h7w/1-130-bounty-critical-xss-vulnerability-in-gitlabs-439e1206d8c8?source=rss------bug_bounty-5 | Monika sharma | gitlab, vulnerability, xss-attack, technology, bug-bounty | 21-Aug-2025 |
| A Deep Dive into Admin Panel Exploitation | https://medium.com/h7w/a-deep-dive-into-admin-panel-exploitation-8c8998c6aa53?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, vulnerability, bug-bounty-writeup, bug-bounty, xss-attack | 21-Aug-2025 |
| What is a CSRF attack? | https://medium.com/@jpgbwgbz/what-is-a-csrf-attack-89f67ea5d4b1?source=rss------bug_bounty-5 | Amr Loksha | security, web-development, cybersecurity, information-security, bug-bounty | 21-Aug-2025 |
| Amass: Complete Guide to Subdomain Recognition and Attack Surface Mapping | https://medium.com/@jpablo13/amass-complete-guide-to-subdomain-recognition-and-attack-surface-mapping-c1736db05f88?source=rss------bug_bounty-5 | JPablo13 | infosec, penetration-testing, cybersecurity, bug-bounty, ethical-hacking | 20-Aug-2025 |
| HTMLI To PII Leak | Bug Bounty Story | https://medium.com/@RaunakGupta1922/htmli-to-pii-leak-bug-bounty-story-1f4364bcc270?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | cybersecurity, programming, bug-bounty, coding, ethical-hacking | 20-Aug-2025 |
| ️ Path Traversal in Web Applications: When Hackers Walk Through Your Folders | https://sukhveersingh97997.medium.com/%EF%B8%8F-path-traversal-in-web-applications-when-hackers-walk-through-your-folders-60b2c4537d00?source=rss------bug_bounty-5 | sukhveer singh | path-traversal, hacking, cybersecurity, owasp, bug-bounty | 20-Aug-2025 |
| Query Gone Wild: How I Turned a Forgotten GraphQL Endpoint into Full Account Access | https://infosecwriteups.com/query-gone-wild-how-i-turned-a-forgotten-graphql-endpoint-into-full-account-access-9d79d1f42970?source=rss------bug_bounty-5 | Iski | bug-bounty, money, hacking, cybersecurity, infosec | 20-Aug-2025 |
| Bypassing Authentication with a Single Request: A Real Bug Bounty Story | https://cybersecuritywriteups.com/bypassing-authentication-with-a-single-request-a-real-bug-bounty-story-9526dc2484d4?source=rss------bug_bounty-5 | Aj | bypassing-authentication, cybersecurity, authentication, hacking, bug-bounty | 20-Aug-2025 |
| The Future of Bug Bounties: Are They Keeping Up with Hackers? | https://medium.com/@dutttarush9360/the-future-of-bug-bounties-are-they-keeping-up-with-hackers-a6669fe7e855?source=rss------bug_bounty-5 | Tarush Sharma | information-security, information-technology, bug-bounty, hackathons, bug-bounty-tips | 20-Aug-2025 |
| ️♂️ Passive Reconnaissance in Penetration Testing: The Art of Staying Unseen (Part 1) | https://medium.com/@vivekbhatt2002/%EF%B8%8F-%EF%B8%8F-passive-reconnaissance-in-penetration-testing-the-art-of-staying-unseen-part-1-b5b7ee706f24?source=rss------bug_bounty-5 | YoungerSibling | bug-bounty, osint, cybersecurity, penetration-testing, ethical-hacking | 20-Aug-2025 |
| HTMLI To PII Leak | Bug Bounty Story | https://medium.com/legionhunters/htmli-to-pii-leak-bug-bounty-story-1f4364bcc270?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | cybersecurity, programming, bug-bounty, coding, ethical-hacking | 20-Aug-2025 |
| Server-side Template Injection with a Custom Exploit in PHP Twig | https://infosecwriteups.com/server-side-template-injection-with-a-custom-exploit-in-php-twig-02974ac20352?source=rss------bug_bounty-5 | Bash Overflow | ssti, template-injection, bug-bounty, php-twig, ssti-exploitation | 20-Aug-2025 |
| €2000 Bounty — IDOR to Privilege Escalation : From Admin to Internal Employee | https://medium.com/@asharm.khan7/2000-bounty-idor-to-privilege-escalation-from-admin-to-internal-employee-a36db23fa10a?source=rss------bug_bounty-5 | Ashar Mahmood | bug-bounty, money, infosec, ethical-hacking, hacking | 20-Aug-2025 |
| IDOR in Password Reset Workflow — A Path to Account Takeover | https://infosecwriteups.com/idor-in-password-reset-workflow-a-path-to-account-takeover-b91acddb78b2?source=rss------bug_bounty-5 | Ehtesham Ul Haq | writeup, bug-bounty, ethical-hacking, password-reset, pentesting | 20-Aug-2025 |
| 30 Cybersecurity Search Engines Every Researcher Should Know | https://medium.com/meetcyber/30-cybersecurity-search-engines-every-researcher-should-know-0093e6589323?source=rss------bug_bounty-5 | Rue | cybersecurity, bug-bounty, infosec, ethical-hacking, threat-intelligence | 20-Aug-2025 |
| ️ “The Audio File That Spoke Too Much: My Deep Dive into an S3 Misconfiguration” | https://javascript.plainenglish.io/%EF%B8%8F-the-audio-file-that-spoke-too-much-my-deep-dive-into-an-s3-misconfiguration-d103f41e7b10?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, bug-bounty, infosec, ai | 20-Aug-2025 |
| Path Traversal | https://medium.com/@mh5410457/path-traversal-badb260fe16b?source=rss------bug_bounty-5 | Mohammed Hassan | path-traversal, hackerone, bug-bounty, cybersecurity, penetration-testing | 20-Aug-2025 |
| Web Cache Poisoning & Cache Deception: The Hidden Threats in Modern Web Apps | https://sukhveersingh97997.medium.com/web-cache-poisoning-cache-deception-the-hidden-threats-in-modern-web-apps-18374462357a?source=rss------bug_bounty-5 | sukhveer singh | bug-hunting, cybersecurity, bug-bounty, bug-bounty-tips, web-cache-poisoning | 20-Aug-2025 |
| 7 Realistic VAPT & Bug Bounty Triage Interview Questions (With Answers) | https://medium.com/@cybersenpai/7-realistic-vapt-bug-bounty-triage-interview-questions-with-answers-feb735f2dcc6?source=rss------bug_bounty-5 | CyberSenpai | vapt, interview, cybersecurity, bug-bounty, red-team | 20-Aug-2025 |
| From Nmap to Real-Time Internet Maps with IVRE: A Step-by-Step Playbook | https://medium.com/@verylazytech/from-nmap-to-real-time-internet-maps-with-ivre-a-step-by-step-playbook-21c7c782cca8?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, bug-bounty, ethical-hacking, penetration-testing, hacking | 20-Aug-2025 |
| Finding Your First High Severity Bug | https://medium.com/no-time/finding-your-first-high-severity-bug-535b4631517b?source=rss------bug_bounty-5 | Rehan Sohail | no-time, bug-bounty-writeup, bug-bounty, bugbounty-writeup, bug-bounty-tips | 20-Aug-2025 |
| The Reverse Shell Trick That Beats (Almost) Every EDR | https://systemweakness.com/the-reverse-shell-trick-that-beats-almost-every-edr-0c02927f72a4?source=rss------bug_bounty-5 | Nitin yadav | cybersecurity, hacking, infosec, technology, bug-bounty | 20-Aug-2025 |
| Bug Bounty: Sensitive Data Exposure — How Info Spills Become Breaches ️♂️ | https://medium.com/@rajkumarkumawat/bug-bounty-sensitive-data-exposure-how-info-spills-become-breaches-%EF%B8%8F-%EF%B8%8F-9778749855ea?source=rss------bug_bounty-5 | Rajkumar Kumawat | sensitive, bug-bounty, data-exposure, data-breaches-news, hacker | 20-Aug-2025 |
| “The 7 Unspoken Recon Tricks That Fund My Bug Bounty Addiction” | https://infosecwriteups.com/the-7-unspoken-recon-tricks-that-fund-my-bug-bounty-addiction-bae6fb8768a5?source=rss------bug_bounty-5 | Aman Sharma | hacking, bug-bounty, technology, learning, programming | 20-Aug-2025 |
| Top 10 C2 Frameworks Every Red Teamer Should Know | https://medium.com/@ajudeb55/top-10-c2-frameworks-every-red-teamer-should-know-0f4e9ee75d61?source=rss------bug_bounty-5 | Aju Deb | windows, red-team, hacking, c2-framework, bug-bounty | 20-Aug-2025 |
| “Day 17: The Ghost in the DNS — How I Turned a Forgotten Subdomain into a Ransomware Vector” | https://infosecwriteups.com/day-17-the-ghost-in-the-dns-how-i-turned-a-forgotten-subdomain-into-a-ransomware-vector-f2046a06dcf3?source=rss------bug_bounty-5 | Aman Sharma | learning, bug-bounty, technology, hacking, programming | 20-Aug-2025 |
| Path Traversal | https://medium.com/@MohammedMHassan/path-traversal-badb260fe16b?source=rss------bug_bounty-5 | Mohammed Hassan | path-traversal, hackerone, bug-bounty, cybersecurity, penetration-testing | 20-Aug-2025 |
| The Art of Crafting Malicious URLs: IDOR Meets Email Verification Bypass | https://medium.com/@vashuvats/the-art-of-crafting-malicious-urls-idor-meets-email-verification-bypass-9104fce05a1e?source=rss------bug_bounty-5 | Vashu Vats | bug-bounty, information-security, cybersecurity, vulnerability | 20-Aug-2025 |
| How I found XSS on NIT website | https://medium.com/meetcyber/how-i-found-xss-on-nit-website-2841d7dd8f86?source=rss------bug_bounty-5 | Ayush | cybersecurity, bug-bounty, xss-attack, college, penetration-testing | 20-Aug-2025 |
| How Ordinary People Become High Performers: 10 Key Habits | https://bevijaygupta.medium.com/how-ordinary-people-become-high-performers-10-key-habits-969c475e412f?source=rss------bug_bounty-5 | Vijay Kumar Gupta | high-performance, cybersecurity, ordinary, ethical-hacking, bug-bounty | 20-Aug-2025 |
| GrapeQL — Turning A Small Tool Into An Open Source Project | https://levelup.gitconnected.com/grapeql-turning-a-small-tool-into-an-open-source-project-3b924a2e5e7a?source=rss------bug_bounty-5 | Aleksa Zatezalo | python, graphql, security, bug-bounty, vulnerability | 20-Aug-2025 |
| Stored XSS via Unsanitized SVG File Upload | https://medium.com/@youssefawad1357/stored-xss-via-unsanitized-svg-file-upload-d7e4619cc937?source=rss------bug_bounty-5 | youssef awad | bug-bounty-tips, bug-bounty-writeup, cybersecurity, bug-bounty, penetration-testing | 20-Aug-2025 |
| Yelp XSS Flaw Opens the Door to Account Takeovers | https://infosecwriteups.com/yelp-xss-flaw-opens-the-door-to-account-takeovers-3c058a87dc3e?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty-writeup, javascript-tips, xss-attack, bug-bounty | 20-Aug-2025 |
| JWT Bugs and the Dot That Changed Everything ⚔️ | https://soltanali0.medium.com/jwt-bugs-and-the-dot-that-changed-everything-%EF%B8%8F-50a0bc31fd66?source=rss------bug_bounty-5 | soltanali0 | jwt, idor-vulnerability, bug-bounty, hacking | 20-Aug-2025 |
| Amass:Guía Completa para el Reconocimiento de Subdominios y el Mapeo de la Superficie de Ataque | https://infosecwriteups.com/amass-gu%C3%ADa-completa-para-el-reconocimiento-de-subdominios-y-el-mapeo-de-la-superficie-de-ataque-401a71021cf2?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, bug-bounty, infosec, cybersecurity, ethical-hacking | 19-Aug-2025 |
| When the Interview Fails but the Security Does Too | https://medium.com/@RaunakGupta1922/when-the-interview-fails-but-the-security-does-too-d871ccc47da8?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty-wirtups, bug-bounty, programming, ethical-hacking, information-technolo | 19-Aug-2025 |
| Server-Side Template Injection in a Sandboxed Environment: Escaping Freemarker Template… | https://infosecwriteups.com/server-side-template-injection-in-a-sandboxed-environment-escaping-freemarker-template-b704536b5181?source=rss------bug_bounty-5 | Bash Overflow | exploiting-freemarker, ssti-in-freemarker, ssti-exploit, freemarker-template, bug-bounty | 19-Aug-2025 |
| The Ultimate Guide to API Hacking in 2025: From Basics to Advanced Exploits | https://samael0x4.medium.com/the-ultimate-guide-to-api-hacking-in-2025-from-basics-to-advanced-exploits-fa31be273c5f?source=rss------bug_bounty-5 | Farhan Alam | apihacking, apptestingtips, bug-bounty-writeup, bug-bounty, api | 19-Aug-2025 |
| Quick Recon Win: Chaining Subfinder + Httpx-toolkit + Nuclei for Fast Results | https://cyberdardan.medium.com/quick-recon-win-chaining-subfinder-httpx-toolkit-nuclei-for-fast-results-461bb34f56c9?source=rss------bug_bounty-5 | Dardan Hasani | bug-bounty, cybersecurity, bug-bounty-tips | 19-Aug-2025 |
| When the Price Goes Wrong: $9K Bounty from 2 Price Manipulation Bugs. | https://medium.com/@r00t_ak/when-the-price-goes-wrong-9k-bounty-from-2-price-manipulation-bugs-f557383afc01?source=rss------bug_bounty-5 | Ak | price-manipulation, bug-bounty, boken-authentication | 19-Aug-2025 |
| When the Interview Fails but the Security Does Too | https://medium.com/legionhunters/when-the-interview-fails-but-the-security-does-too-d871ccc47da8?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | bug-bounty-wirtups, bug-bounty, programming, ethical-hacking, information-technolo | 19-Aug-2025 |
| Pentester’s Exam: Real-World API & Web Security Scenarios (With Answers) | https://medium.com/meetcyber/pentesters-exam-real-world-api-web-security-scenarios-with-answers-dad9b79f170e?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, infosec, information-security, cybersecurity, bug-bounty | 19-Aug-2025 |
| Step-by-Step: Detect If Your Email or Domain Is in Stealer Logs Right Now | https://medium.com/@alexandrevandammepro/step-by-step-detect-if-your-email-or-domain-is-in-stealer-logs-right-now-f3411ed9a0b3?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, tech, cybersecurity, technology, bug-bounty | 19-Aug-2025 |
| Pentester’s Exam: Real-World API & Web Security Scenarios (With Answers) | https://medium.com/meetcyber/pentesters-exam-real-world-api-web-security-scenarios-with-answers-14b344219354?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, cybersecurity, bug-bounty, infosec | 19-Aug-2025 |
| Reconocimiento web sin herramientas comunes: un método manual para bug bounty hunters | https://gorkaaa.medium.com/reconocimiento-web-sin-herramientas-comunes-un-m%C3%A9todo-manual-para-bug-bounty-hunters-1dbfbc2f3b5a?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, bug-bounty-tips, bug-bounty, bug-bounty-hunter, bugbounty-writeup | 19-Aug-2025 |
| The $7,640 DoS Bug That Could’ve Shaken Enterprise Trust in GitLab — Here’s How They Averted… | https://medium.com/@justas_b1/the-7-640-dos-bug-that-couldve-shaken-enterprise-trust-in-gitlab-here-s-how-they-averted-b472d481f838?source=rss------bug_bounty-5 | Justas_b | hacking, technology, bug-bounty, infosec, cybersecurity | 19-Aug-2025 |
| Pentester’s Quiz: 10 Realistic API & Web Scenarios You Must Solve | https://javascript.plainenglish.io/pentesters-quiz-10-realistic-api-web-scenarios-you-must-solve-69e528b4e8c2?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, information-security, ai, cybersecurity | 19-Aug-2025 |
| Pentester’s Quiz: 10 Realistic API & Web Scenarios You Must Solve | https://javascript.plainenglish.io/pentesters-quiz-10-realistic-api-web-scenarios-you-must-solve-72d18285a6e9?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, cybersecurity, infosec, bug-bounty | 19-Aug-2025 |
| Pentester Nepal x NCA CTF 2025 #ePaisa | https://medium.com/@solomon.hexa/pentester-nepal-x-nca-ctf-2025-epaisa-9990e16f365f?source=rss------bug_bounty-5 | Solomon Hexa | ctf, ethical-hacking, bug-bounty, cybersecurity, hacking | 19-Aug-2025 |
| The Logical Beginner Method That Found My First Bug | https://medium.com/@ibtissamhammadi1/the-logical-beginner-method-that-found-my-first-bug-10dd406577bb?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, cybersecurity, bug-bounty, web-security | 19-Aug-2025 |
| My First Bug-Hunting Adventure: A Privilege Escalation Tale | https://medium.com/@solutionexit5/my-first-bug-hunting-adventure-a-privilege-escalation-tale-89aad782981f?source=rss------bug_bounty-5 | 0xMoussa | cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 19-Aug-2025 |
| Tools Every Bug Bounty Hunter Should Know for Reconnaissance | https://medium.com/@ajudeb55/tools-every-bug-bounty-hunter-should-know-for-reconnaissance-822c2a04b6f7?source=rss------bug_bounty-5 | Aju Deb | bug-bounty-writeup, hacking, bug-bounty-tips, bug-bounty, reconnaissance | 19-Aug-2025 |
| RUSTSCAN | https://medium.com/@vulnhunter10/rustscan-5c2a3c1ac79b?source=rss------bug_bounty-5 | vulnhunter | ctf, bug-bounty, ai, cybersecurity, hacking | 19-Aug-2025 |
| Optimizing Static Application Security Testing (SAST) with Semgrep & Gemini CLI | https://saeed0x1.medium.com/optimizing-static-application-security-testing-sast-with-semgrep-gemini-cli-b4152e0307c6?source=rss------bug_bounty-5 | SAEED | google, static-code-analysis, cybersecurity, bug-bounty, gemini | 19-Aug-2025 |
| How I Use AI to Learn Cybersecurity 10x Faster (And How You Can Too) | https://medium.com/@paritoshblogs/how-i-use-ai-to-learn-cybersecurity-10x-faster-and-how-you-can-too-bdac0a7a79e7?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, chatgpt, ai, how-to | 19-Aug-2025 |
| JSsear | https://medium.com/@banertheinrich/jssear-271c235284be?source=rss------bug_bounty-5 | Adham Heinrich | bug-bounty-tips, cybersecurity, bug-bounty, automation, tools | 19-Aug-2025 |
| Bug Bounty: Security Misconfigurations — The Mistakes That Make You Vulnerable ⚠️ | https://medium.com/@rajkumarkumawat/bug-bounty-security-misconfigurations-the-mistakes-that-make-you-vulnerable-%EF%B8%8F-460b1be555e1?source=rss------bug_bounty-5 | Rajkumar Kumawat | misconfiguration, security, mistakes, vulnerability, bug-bounty | 19-Aug-2025 |
| “Day 16: The CI/CD Betrayal — How a Tiny GitHub Action Misconfiguration Led to a $800 Cloud Breach” | https://infosecwriteups.com/day-16-the-ci-cd-betrayal-how-a-tiny-github-action-misconfiguration-led-to-a-800-cloud-breach-05a229c0684d?source=rss------bug_bounty-5 | Aman Sharma | technology, hacking, money, programming, bug-bounty | 19-Aug-2025 |
| Invite Link Doesn’t Expire After Organization Deletion | https://medium.com/@edahmed008/invite-link-doesnt-expire-after-organization-deletion-d892d50fde4e?source=rss------bug_bounty-5 | Ahmed Mahmoud | penetration-testing, bug-bounty-writeup, bug-bounty, business-logic-flaw, cybersecurity | 19-Aug-2025 |
| Basic Pentesting — Try hack me room (Easy to pass THM) | https://medium.com/@mushfiq.xd/basic-pentesting-try-hack-me-room-easy-to-pass-thm-14381a40e73b?source=rss------bug_bounty-5 | Mushfiq.XD | tryhackme, penetration-testing, infosec, ethical-hacking, bug-bounty | 19-Aug-2025 |
| Easiest Admin Panel Takeover !! | https://osintteam.blog/easiest-admin-panel-takeover-d9e2c5ef321e?source=rss------bug_bounty-5 | TSxNINJA | bug-bounty-tips, infosec, osint, hacking, bug-bounty | 19-Aug-2025 |
| Optimizing Static Application Security Testing (SAST) with Semgrep + Gemini CLI | https://saeed0x1.medium.com/optimizing-static-application-security-testing-sast-with-semgrep-gemini-cli-b4152e0307c6?source=rss------bug_bounty-5 | SAEED | google, static-code-analysis, cybersecurity, bug-bounty, gemini | 19-Aug-2025 |
| Oh-My-WebServer TryHackMe Writeup | https://medium.com/@mehdi.benfredj15/oh-my-webserver-tryhackme-writeup-47a30ce2ec08?source=rss------bug_bounty-5 | Mehdi Ben Fredj | bug-bounty, ctf-writeup, cybersecurity, tryhackme, tryhackme-walkthrough | 19-Aug-2025 |
| APIs Pentesting (Part 1) |What is API & APIs Architectures | https://medium.com/@hamzamabdulrhman/apis-pentesting-part-1-what-is-api-apis-architectures-22fffa3b79a0?source=rss------bug_bounty-5 | Hamza M. Abdulrhman | software-testing, bug-bounty, penetration-testing, pentesting, programming | 19-Aug-2025 |
| $500 Bounty: How a Logic Flaw Allowed Silent Logins in a Financial Application | https://medium.com/@luq0x/how-a-logic-flaw-allowed-silent-logins-in-a-financial-application-5eed48939018?source=rss------bug_bounty-5 | luq0x | bug-bounty, cybersecurity, offensive-security, hacking | 18-Aug-2025 |
| How I Exploited 3 Unique Race Condition Bugs | https://medium.com/@RaunakGupta1922/how-i-exploited-3-unique-race-condition-bugs-934ea54ebf58?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | hacking, cybersecurity, informational-technology, bug-bounty, programming | 18-Aug-2025 |
| The Psychology of Phishing: Why Even Security Pros Still Click | https://javascript.plainenglish.io/the-psychology-of-phishing-why-even-security-pros-still-click-b313fcb189f1?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, bug-bounty, information-security, ai, cybersecurity | 18-Aug-2025 |
| How I Discovered a Critical SQL Injection in a Private Bug Bounty Program | https://medium.com/@salaheddine_kalada/how-i-discovered-a-critical-sql-injection-in-a-private-bug-bounty-program-d1f4735c0b59?source=rss------bug_bounty-5 | Salaheddine KALADA | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-hunting, bug-bounty-hunter | 18-Aug-2025 |
| How I Exploited 3 Unique Race Condition Bugs | https://medium.com/legionhunters/how-i-exploited-3-unique-race-condition-bugs-934ea54ebf58?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | hacking, cybersecurity, informational-technology, bug-bounty, programming | 18-Aug-2025 |
| CTF for beginners | https://medium.com/@vulnhunter10/ctf-for-beginners-3b9b3f2a8a15?source=rss------bug_bounty-5 | vulnhunter | tryhackme, competition, cybersecurity, bug-bounty, ctf | 18-Aug-2025 |
| VirtualHost And Subdomains | https://prioff.medium.com/virtualhost-and-subdomains-36e2e156fa4e?source=rss------bug_bounty-5 | PriOFF | virtual-host, bug-bounty, cybersecurity, web-hosting, subdomain | 18-Aug-2025 |
| ⚡ 10 JavaScript Mistakes Even Senior Developers Still Make (And How to Avoid Them) | https://javascript.plainenglish.io/10-javascript-mistakes-even-senior-developers-still-make-and-how-to-avoid-them-e5977848f327?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, ai, infosec, bug-bounty, cybersecurity | 18-Aug-2025 |
| Ghosts in the Heap: Memory Leaks in JavaScript (and How to Hunt Them Like a Pro) | https://javascript.plainenglish.io/ghosts-in-the-heap-memory-leaks-in-javascript-and-how-to-hunt-them-like-a-pro-0519d95d1630?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, cybersecurity, ai, bug-bounty | 18-Aug-2025 |
| Google Dorks Reloaded (2025): The Red-Team OSINT Playbook for Secrets in Plain Sight | https://medium.com/meetcyber/google-dorks-reloaded-2025-the-red-team-osint-playbook-for-secrets-in-plain-sight-faf5d510cd25?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, cybersecurity, information-security, ai, infosec | 18-Aug-2025 |
| Shodan Diaries: What I Found on the Internet Without Knocking | https://medium.com/meetcyber/shodan-diaries-what-i-found-on-the-internet-without-knocking-f22612cae508?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, cybersecurity, information-security, infosec | 18-Aug-2025 |
| Web Pentest Playbook — From Recon to Root (ATT&CK-Aligned) | https://medium.com/meetcyber/web-pentest-playbook-from-recon-to-root-att-ck-aligned-23a1359445d3?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, infosec, cybersecurity, ai | 18-Aug-2025 |
| The Web Pentest Kill Chain: From Recon to Root with MITRE ATT&CK | https://javascript.plainenglish.io/the-web-pentest-kill-chain-from-recon-to-root-with-mitre-att-ck-e9324597c8d7?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, cybersecurity, information-security, infosec, bug-bounty | 18-Aug-2025 |
| Broken Access Control: The Gateway to Unauthorized Privilege Escalation | https://medium.com/@vivekbhatt2002/broken-access-control-the-gateway-to-unauthorized-privilege-escalation-b1cdee656cd2?source=rss------bug_bounty-5 | YoungerSibling | web-security, cybersecurity, privilege-escalation, broken-access-control, bug-bounty | 18-Aug-2025 |
| CTF basic -beginners | https://medium.com/@vulnhunter10/ctf-basic-beginners-a899775339c9?source=rss------bug_bounty-5 | vulnhunter | ctf, hacking, cybersecurity, technology, bug-bounty | 18-Aug-2025 |
| ✨ How JavaScript Runs: Browser vs PC vs Beyond | Understanding Its Environment & Benefits | https://medium.com/@zoningxtr/how-javascript-runs-browser-vs-pc-vs-beyond-understanding-its-environment-benefits-efe7c4621e4f?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, bug-bounty, javascript, web-development, html | 18-Aug-2025 |
| ShellShock: How Hackers Exploit Bash Vulnerabilities and How to Protect Yourself | https://medium.com/@verylazytech/shellshock-how-hackers-exploit-bash-vulnerabilities-and-how-to-protect-yourself-a006c63c1883?source=rss------bug_bounty-5 | Very Lazy Tech | shellshock, bug-bounty, ethical-hacking, programming, penetration-testing | 18-Aug-2025 |
| Server-side Template Injection with Information Disclosure via User-Supplied Objects in Django… | https://infosecwriteups.com/server-side-template-injection-with-information-disclosure-via-user-supplied-objects-in-django-b6d67af36b43?source=rss------bug_bounty-5 | Bash Overflow | ssti, django-template-injection, ssti-vulnerability, bug-bounty, information-disclosure | 18-Aug-2025 |
| ️ Signed, Sealed, Exploited: How a JWT Forgery in GraphQL Got Me Root Access | https://infosecwriteups.com/%EF%B8%8F-signed-sealed-exploited-how-a-jwt-forgery-in-graphql-got-me-root-access-e10a40883a3b?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, money, bug-bounty, hacking | 18-Aug-2025 |
| Gitlab XSS Using json:table Markdown — Worth $13,950 — Commits Page | https://medium.com/@justas_b1/gitlab-xss-using-json-table-markdown-worth-13-950-commits-page-93104473620e?source=rss------bug_bounty-5 | Justas_b | infosec, hacker, bug-bounty, cybersecurity, xss-attack | 18-Aug-2025 |
| Recon | https://medium.com/@mh5410457/recon-mohassan-f142ff07001d?source=rss------bug_bounty-5 | Mohammed Hassan | information-gathering, web-penetration-testing, bug-bounty, cybersecurity | 18-Aug-2025 |
| The 80/20 Rule of Hacking (20% Skills = 80% Results) | https://medium.com/techiepedia/the-80-20-rule-of-hacking-20-skills-80-results-8cee2685ccaf?source=rss------bug_bounty-5 | Nitin yadav | hacking, cybersecurity, bug-bounty, learning, technology | 18-Aug-2025 |
| “Day 15: The Phantom JS Threat — How Forgotten Code Became a Silent RCE Bomb” | https://infosecwriteups.com/day-15-the-phantom-js-threat-how-forgotten-code-became-a-silent-rce-bomb-e4f9551b14d8?source=rss------bug_bounty-5 | Aman Sharma | technology, programming, hacking, money, bug-bounty | 18-Aug-2025 |
| Bug Bounty: Broken Access Control — When Hackers Walk Right In | https://medium.com/@rajkumarkumawat/bug-bounty-broken-access-control-when-hackers-walk-right-in-ffb6e04ee756?source=rss------bug_bounty-5 | Rajkumar Kumawat | hacking, bug-bounty, broken-access-control, life-hacking, control | 18-Aug-2025 |
| Subdomain Takeover Explained (And How Hackers Earn $$$ From It) | https://osintteam.blog/subdomain-takeover-explained-and-how-hackers-earn-from-it-85bc47553d35?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, bug-bounty, hacking, tech, programming | 18-Aug-2025 |
| Cache Control the P4 Bug | https://osintteam.blog/cache-control-the-p4-bug-dfe254bb72d3?source=rss------bug_bounty-5 | TSxNINJA | infosec, osint, bug-bounty-tips, bug-bounty, hacking | 18-Aug-2025 |
| Exploit the game Blindly : With Blind XSS | https://medium.com/legionhunters/exploit-the-game-blindly-with-blind-xss-1f82479dfbc4?source=rss------bug_bounty-5 | #$ubh@nk@r | bug-bounty, xss-attack, hacking, infosec, cybersecurity | 18-Aug-2025 |
| Mastering Nmap (Part 1) in 2025: Host Discovery & Recon for Bug Bounty Hunters | https://medium.com/@appsecvenue/mastering-nmap-part-1-in-2025-host-discovery-recon-for-bug-bounty-hunters-1af4a3e451a1?source=rss------bug_bounty-5 | appsecvenue | cybersecurity, nmap, ethical-hacking, bug-bounty, network-security | 18-Aug-2025 |
| Server-side Template Injection in an Unknown Language with a Documented Exploit | https://infosecwriteups.com/server-side-template-injection-in-an-unknown-language-with-a-documented-exploit-1890eb486513?source=rss------bug_bounty-5 | Bash Overflow | ssti-attack, template-injection, bug-bounty, ssti, handlebars-template | 17-Aug-2025 |
| Just bought Shodan Lifetime Membership for $5 | https://medium.com/@abhirupkonwar04/just-bought-shodan-lifetime-membership-for-5-fef8a9b8de2d?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, bug-bounty-tips, shodan, ethical-hacking, bug-bounty | 17-Aug-2025 |
| Cada funcionalidad es una promesa: ¿la cumple para todos? | https://gorkaaa.medium.com/cada-funcionalidad-es-una-promesa-la-cumple-para-todos-9125ef7b7e92?source=rss------bug_bounty-5 | Gorka | bugbounty-writeup, bug-bounty-hunter, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 17-Aug-2025 |
| JavaScript leads to Admin | https://infosecwriteups.com/javascript-leads-to-admin-f7afecc21d02?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | programming, technology, cybersecurity, infosec, bug-bounty | 17-Aug-2025 |
| The Hidden Risk of Non-HttpOnly Cookies — and How I Found One | https://medium.com/@amitgy04/the-hidden-risk-of-non-httponly-cookies-and-how-i-found-one-382eebec998f?source=rss------bug_bounty-5 | Amitishacked | hacking, web-security, security, cybersecurity, bug-bounty | 17-Aug-2025 |
| My First 150 Days Bug Bounty Hunting | https://medium.com/@YourFinalSin/my-first-150-days-bug-bounty-hunting-034623c89836?source=rss------bug_bounty-5 | 3NVZ | bug-bounty-writeup, bugbounty-writeup, bug-bounty-hunter, bug-bounty-tips, bug-bounty | 17-Aug-2025 |
| ndroid Hackers Are Spying on Your Phone — Here’s How to Protect Yourself | https://medium.com/@syedmhatim/ndroid-hackers-are-spying-on-your-phone-heres-how-to-protect-yourself-04a1302642af?source=rss------bug_bounty-5 | Syed Muhammad Hatim Javaid | android-rat, bug-bounty, cybersecurity, androidhacking, hacking | 17-Aug-2025 |
| Vamp Byte #1 — What is a Favicon Hash in OSINT? | https://codewithvamp.medium.com/vamp-byte-1-what-is-a-favicon-hash-in-osint-daf0279ad129?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | security, favicon, bug-bounty, osint, cybersecurity | 17-Aug-2025 |
| CyberTalents: Bean writeup | by Dargham Ali | https://medium.com/@wireshark.pcap/cybertalents-bean-writeup-by-dargham-ali-55198610cc48?source=rss------bug_bounty-5 | Dargham Ali | ctf-writeup, cybersecurity, bug-bounty, ctf, penetration-testing | 17-Aug-2025 |
| Open Redirect in Password Reset Flow Leading to Token Exposure | https://ehteshamulhaq198.medium.com/open-redirect-in-password-reset-flow-leading-to-token-exposure-63b2890ce5fd?source=rss------bug_bounty-5 | Ehtesham Ul Haq | bug-bounty, penetration-testing, injection, writeup, ethical-hacking | 17-Aug-2025 |
| Hunting Bugs at IIT Madras: From PDF.js XSS to WordPress DoS | https://medium.com/@stvroot/hunting-bugs-at-iit-madras-from-pdf-js-xss-to-wordpress-dos-3455ac8e610d?source=rss------bug_bounty-5 | svt_root | ethical-hacking, bug-bounty, xss-attack, penetration-testing, cybersecurity | 17-Aug-2025 |
| Week 2 of My 90-Day Challenge: Tools, Frameworks, and a Ton of Labs! | https://medium.com/@sl0th0x87/week-2-of-my-90-day-challenge-tools-frameworks-and-a-ton-of-labs-5c9cdfffc180?source=rss------bug_bounty-5 | Mike (sl0th0x87) | weekly-report, about-me, cybersecurity, challenge, bug-bounty | 17-Aug-2025 |
| Small Scope Recon in Pentesting: How to Do More with Less | https://medium.com/@aribaafroz403/small-scope-recon-in-pentesting-how-to-do-more-with-less-90dc36336b43?source=rss------bug_bounty-5 | Aribaafroz | pentesting, cybersecurity, ethical-hacking, bug-bounty, infosec | 17-Aug-2025 |
| How to Spot a Phishing Email in Under 30 Seconds | https://medium.com/@paritoshblogs/how-to-spot-a-phishing-email-in-under-30-seconds-accac109f33a?source=rss------bug_bounty-5 | Paritosh | bug-bounty, phishing, hacking, cybersecurity, how-to | 17-Aug-2025 |
| When XSS Meets CSRF: Breaking Web Defenses | https://medium.com/@aliahmed806040/whats-up-hackers-in-this-write-up-i-ll-walk-through-the-portswigger-lab-exploiting-xss-to-31f0ba6c6843?source=rss------bug_bounty-5 | Aliahmed | javascript, bug-bounty, web-development, cybersecurity, burpsuite | 17-Aug-2025 |
| Open Redirect in Password Reset Flow Leading to Token Exposure | https://infosecwriteups.com/open-redirect-in-password-reset-flow-leading-to-token-exposure-63b2890ce5fd?source=rss------bug_bounty-5 | Ehtesham Ul Haq | bug-bounty, penetration-testing, injection, writeup, ethical-hacking | 17-Aug-2025 |
| Bug Bounty: Insecure File Upload — The Silent Backdoor You Didn’t Notice! | https://medium.com/@rajkumarkumawat/bug-bounty-insecure-file-upload-the-silent-backdoor-you-didnt-notice-f8627eeb3e1d?source=rss------bug_bounty-5 | Rajkumar Kumawat | bug-bounty, backdoor, file-upload, the-silent-script, insecurity | 17-Aug-2025 |
| How I Found a Broken Access Control in a Job Application API | https://medium.com/@amrgomaa009/how-i-found-a-broken-access-control-in-a-job-application-api-72f083b8c113?source=rss------bug_bounty-5 | Amrgomaa | idor, bug-bounty, access-control, hackerone, jwt | 17-Aug-2025 |
| Hunting Bugs at IIT Madras: From PDF.js XSS to WordPress DoS | https://medium.com/legionhunters/hunting-bugs-at-iit-madras-from-pdf-js-xss-to-wordpress-dos-3455ac8e610d?source=rss------bug_bounty-5 | svt_root | ethical-hacking, bug-bounty, xss-attack, penetration-testing, cybersecurity | 17-Aug-2025 |
| picoCTF Web Exploitation: Inspect HTML | https://medium.com/@vulnhunter10/picoctf-web-exploitation-inspect-html-655c4e92f002?source=rss------bug_bounty-5 | vulnhunter | cybersecurity, ctf, ethical-hacking, security, bug-bounty | 17-Aug-2025 |
| How I Exploited a Business Logic Flaw to Slash Product Prices in a Global Store | https://medium.com/@zyad_ibrahim333/how-i-discovered-a-business-logic-vulnerability-in-a-major-global-store-price-manipulation-64cd1d445d17?source=rss------bug_bounty-5 | Zyad Ibrahim | business-logic, web-security, cybersecurity, price-manipulation, bug-bounty | 17-Aug-2025 |
| [Web Security Academy] — Server-Side Vulnerabilities / Authentication Lab 2 of 2 | https://medium.com/@v0lts3c/web-security-academy-server-side-vulnerabilities-authentication-lab-2-of-2-dd023ff17bb4?source=rss------bug_bounty-5 | Voltsec | bug-bounty, 2fa, two-factor-authentication, cybersecurity, web-security | 17-Aug-2025 |
| [Web Security Academy] — Server-Side Vulnerabilities / Authentication Lab 1 of 2 | https://medium.com/@v0lts3c/web-security-academy-server-side-vulnerabilities-authentication-lab-1-of-2-50f32c7df27a?source=rss------bug_bounty-5 | Voltsec | web-security, bug-bounty, ethical-hacking, authentification, burpsuite | 17-Aug-2025 |
| [Web Security Academy] — Server-Side Vulnerabilities / Authentication | https://medium.com/@v0lts3c/web-security-academy-server-side-vulnerabilities-authentication-a6eefdcc58ff?source=rss------bug_bounty-5 | Voltsec | bug-bounty, cybersecurity, web-security, ctf-writeup, authentication | 17-Aug-2025 |
| ️ Map to Mayhem: How an Internal API Directory Leaked Sensitive Endpoints | https://infosecwriteups.com/%EF%B8%8F-map-to-mayhem-how-an-internal-api-directory-leaked-sensitive-endpoints-234055f3fff1?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, hacking, cybersecurity, money | 17-Aug-2025 |
| ️ KeySentry v2 — Stop API Key Leaks Before They Stop You | https://infosecwriteups.com/%EF%B8%8F-keysentry-v2-stop-api-key-leaks-before-they-stop-you-9be0dc734932?source=rss------bug_bounty-5 | Aditya Bhatt | bug-bounty-tips, api-key, bug-bounty-writeup, cybersecurity, bug-bounty | 17-Aug-2025 |
| Simple 2FA Bypass PortSwigger Writeup: How I Used This Method for a Real-Time Bug and Earned $2,500 | https://mukibas37.medium.com/simple-2fa-bypass-portswigger-writeup-how-i-used-this-method-for-a-real-time-bug-and-earned-2-500-d18b5e317c3a?source=rss------bug_bounty-5 | Mukilan Baskaran | bug-bounty-writeup, vulnerability, cybersecurity, ethical-hacking, bug-bounty | 17-Aug-2025 |
| “Day 14: Cookie Hijacking Exposed — How I Bypassed Chrome’s “Secure” Storage” | https://infosecwriteups.com/day-14-cookie-hijacking-exposed-how-i-bypassed-chromes-secure-storage-9648b32ba6f5?source=rss------bug_bounty-5 | Aman Sharma | medium, technology, cybersecurity, bug-bounty, money | 17-Aug-2025 |
| 100+ Windows CMD Commands Every Hacker & Pentester MUST Know (with Cheat Sheet) | https://medium.com/@verylazytech/100-windows-cmd-commands-every-hacker-pentester-must-know-with-cheat-sheet-5e194ab7c842?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, windows, oscp, cybersecurity, bug-bounty | 17-Aug-2025 |
| I Found a Critical XSS Everyone Missed | https://medium.com/@ibtissamhammadi1/i-found-a-critical-xss-everyone-missed-16dd284919c9?source=rss------bug_bounty-5 | Ibtissam hammadi | xss-attack, ethical-hacking, web-security, cybersecurity, bug-bounty | 17-Aug-2025 |
| Hacking APIs: Exploiting WebSockets Insecure Implementations | https://iaraoz.medium.com/hacking-apis-exploiting-websockets-insecure-implementations-a69cba59b0ad?source=rss------bug_bounty-5 | Israel Aráoz Severiche | bug-bounty, pentesting, web-development, owasp, hacking | 17-Aug-2025 |
| ﷽ | https://medium.com/@ammaryasserh17/-b3205aa78fbb?source=rss------bug_bounty-5 | Ammar yasser shoeib | bug-bounty, bug-bounty-hunter, account-takeover, bug-bounty-tips, bug-bounty-program | 17-Aug-2025 |
| HexStrike AI v6.0 – The Future of Autonomous Cybersecurity | https://chintalatarakaram.medium.com/hexstrike-ai-v6-0-the-future-of-autonomous-cybersecurity-1f5ee70fc34e?source=rss------bug_bounty-5 | Chintala Taraka Ram | bug-bounty, threat-hunting, cybersecurity, ai, hacking | 17-Aug-2025 |
| 4 Counterfeited Valid Certificates Leaked Using Bug Bounty Skills | https://medium.com/great-hackers-battalion/reccoinassance-using-bug-bounty-skills-3ed856006b74?source=rss------bug_bounty-5 | NnFace | hacking, bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup | 17-Aug-2025 |
| Shodan’t Have Shown That: How an Exposed Device Led to Source Code | https://teamdh49.medium.com/shodant-have-shown-that-how-an-exposed-device-led-to-source-code-3371c1160439?source=rss------bug_bounty-5 | TEAM DH49 | bug-zero, bugs, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 16-Aug-2025 |
| Server-side Template Injection Using Documentation: Uncover The Hidden Dangers of SSTI | https://infosecwriteups.com/server-side-template-injection-using-documentation-uncover-the-hidden-dangers-of-ssti-566e7159edb7?source=rss------bug_bounty-5 | Bash Overflow | ssti-exploitation, rce-via-ssti, template-engine-exploit, bug-bounty, ssti-vulnerability | 16-Aug-2025 |
| HexStrike AI v6.0: Turning GPT, Claude, and Copilot into Autonomous Cybersecurity Experts | https://medium.com/@Iampreth/hexstrike-ai-v6-0-turning-gpt-claude-and-copilot-into-autonomous-cybersecurity-experts-5cdbb917066a?source=rss------bug_bounty-5 | IamPreth | ai, gpt-4, pentesting, bug-bounty, cybersecurity | 16-Aug-2025 |
| Dorks For Sensitive Information Disclosure Part-1 | https://teamdh49.medium.com/dorks-for-sensitive-information-disclosure-part-1-185e19512f33?source=rss------bug_bounty-5 | TEAM DH49 | bugs, bug-zero, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 16-Aug-2025 |
| Bug Bounty: Lo que parece innecesario para el usuario, a veces es esencial para el atacante | https://gorkaaa.medium.com/bug-bounty-lo-que-parece-innecesario-para-el-usuario-a-veces-es-esencial-para-el-atacante-32961185d286?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, bug-bounty, bugbounty-writeup, bug-bounty-tips, bug-bounty-hunter | 16-Aug-2025 |
| Nmap Kill Chain: OSINT → Scan → Enumeration → Find → Exploit | https://javascript.plainenglish.io/nmap-kill-chain-osint-scan-enumeration-find-exploit-70dbdff57b5e?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, cybersecurity, information-security, ai | 16-Aug-2025 |
| “No Browser, No Problem” — How I Hacked My Way to 5 Vulnerabilities Using Only Nmap | https://javascript.plainenglish.io/no-browser-no-problem-how-i-hacked-my-way-to-5-vulnerabilities-using-only-nmap-de5046d94956?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, bug-bounty, cybersecurity, ai | 16-Aug-2025 |
| ⚔️ Red vs Blue: The Ultimate Nmap Battle Cheat Sheet | https://medium.com/meetcyber/%EF%B8%8F-red-vs-blue-the-ultimate-nmap-battle-cheat-sheet-c348912c854a?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, cybersecurity, information-security, ai, infosec | 16-Aug-2025 |
| Mastering Nmap — The Hacker’s Microscope Into Networks | https://medium.com/meetcyber/mastering-nmap-the-hackers-microscope-into-networks-27cae3531f17?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, bug-bounty, infosec, information-security | 16-Aug-2025 |
| ZERO — Finding First BUG | https://medium.com/@hbrohighfi/zero-finding-first-bug-a0efc3381150?source=rss------bug_bounty-5 | Vansh Sharma | cybersecurity, cyberattack, success-story, red-team, bug-bounty | 16-Aug-2025 |
| PIN CTFlearn Reverse Engineering Walkthrough — Write-up | https://medium.com/@elmin.farzaliyev/pin-ctflearn-reverse-engineering-walkthrough-write-up-cd88da96fbf4?source=rss------bug_bounty-5 | Elmin Farzaliyev | bug-bounty, malware-analysis, reverse-engineering, cybersecurity | 16-Aug-2025 |
| How I Found My First Open Redirect Vulnerability | https://medium.com/@hinan.mohamed/how-i-found-my-first-open-redirect-vulnerability-592aacbf6574?source=rss------bug_bounty-5 | Hinan Mohamed | bug-bounty, cybersecurity, open-redirect, owasp | 16-Aug-2025 |
| Bug Bounty Methodology: A Practical Guide for PRO & Hunters 2025 to 2027 | https://medium.com/@princeroy01924/bug-bounty-methodology-a-practical-guide-for-pro-hunters-2025-to-2027-d75618dd9b70?source=rss------bug_bounty-5 | Princeroy | bug-bounty, xss-attack, ethical-hacking, rewards, sql-injection | 16-Aug-2025 |
| Earned $$$$ by Tricking an AI Chatbot Into Giving Me Secrets | https://codewithvamp.medium.com/earned-by-tricking-an-ai-chatbot-into-giving-me-secrets-6ac3352926e2?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | cybersecurity, ai, chatgpt, bug-bounty, hacking | 16-Aug-2025 |
| Prototype Pollution — a JavaScript Vulnerability | https://medium.com/@appsecwarrior/prototype-pollution-a-javascript-vulnerability-c136f801f9e1?source=rss------bug_bounty-5 | appsecwarrior | security, hacking, penetration-testing, prototype-pollution, bug-bounty | 16-Aug-2025 |
| Ultimate Guide: Bug Bounty Hunters Using Custom TCP Flags for Port Scanning | https://medium.com/@zoningxtr/ultimate-guide-bug-bounty-hunters-using-custom-tcp-flags-for-port-scanning-e78219d2cc13?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, python-programming, penetration-testing, cybersecurity, information-security | 16-Aug-2025 |
| The Recon Trick Nobody Talks About: DNS History + Archive.org | https://kd-200.medium.com/the-recon-trick-nobody-talks-about-dns-history-archive-org-7e1d6e6a96d1?source=rss------bug_bounty-5 | Nitin yadav | bug-bounty, cybersecurity, coding, technology, reconnaissance | 16-Aug-2025 |
| Disclose Page Admins via Facebook Appointments | https://medium.com/@ramzybouyahya/disclose-page-admins-via-facebook-appointments-4925b899e79a?source=rss------bug_bounty-5 | Ramzy Bouyahya | bug-bounty, bug-bounty-writeup, meta-bug-bounty, bugbounty-writeup, facebook-bug-bounty | 16-Aug-2025 |
| $750 Bug Bounty: The Story of a Hidden Discount Code in JS Files. | https://medium.com/@Tanvir0x1/750-bug-bounty-the-story-of-a-hidden-discount-code-in-js-files-1a39bbecff27?source=rss------bug_bounty-5 | Tanvir Ahmed | bug-bounty, bugs | 16-Aug-2025 |
| “Day 13: The Phantom Dependency Threat — How an Abandoned npm Package Almost Broke the Web” | https://amannsharmaa.medium.com/day-13-the-phantom-dependency-threat-how-an-abandoned-npm-package-almost-broke-the-web-b60155a56d9a?source=rss------bug_bounty-5 | Aman Sharma | technology, hacking, programming, bug-bounty, cybersecurity | 16-Aug-2025 |
| Disclosing Private Group Members via Facebook Rooms | https://medium.com/@ramzybouyahya/disclosing-private-group-members-via-facebook-rooms-d2e805ac8441?source=rss------bug_bounty-5 | Ramzy Bouyahya | facebook-bug-bounty, bug-bounty-hunter, bug-bounty, meta-bug-bounty, bug-bounty-writeup | 16-Aug-2025 |
| Security Vulnerabilities in IIT KGP Web Applications | https://medium.com/@stvroot/security-vulnerabilities-in-iit-kgp-web-applications-bef99bd42755?source=rss------bug_bounty-5 | svt_root | hacking, bug-bounty, sql-injection, penetration-testing, cybersecurity | 16-Aug-2025 |
| XSS Escape backticks (`) — Strings/Template literals | https://infosecwriteups.com/xss-escape-backticks-strings-template-literals-92b3f31b37a8?source=rss------bug_bounty-5 | popalltheshells | xss-attack, vulnerability, penetration-testing, bug-bounty, javascript | 16-Aug-2025 |
| اكتشفت اول ثغره ليا و كانت Stored XSS | https://medium.com/@abdallanofal9/%D8%A7%D9%83%D8%AA%D8%B4%D9%81%D8%AA-%D8%A7%D9%88%D9%84-%D8%AB%D8%BA%D8%B1%D9%87-%D9%84%D9%8A%D8%A7-%D9%88-%D9%83%D8%A7%D9%86%D8%AA-stored-xss-c24861237c9a?source=rss------bug_bounty-5 | Abdallanofal | web-penetration-testing, penetration-testing, bug-bounty-writeup, cybersecurity, bug-bounty | 16-Aug-2025 |
| Race to Root: How a GraphQL Race Condition Let Me Execute Admin Actions Twice | https://infosecwriteups.com/race-to-root-how-a-graphql-race-condition-let-me-execute-admin-actions-twice-7e7aa010a52a?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, cybersecurity, hacking, money | 16-Aug-2025 |
| Protect your Online Business with these 3 Cybersecurity Tools | https://medium.com/@jeosantos2005/protect-your-online-business-with-these-3-cybersecurity-tools-9cdd9444302c?source=rss------bug_bounty-5 | Jeosantos | programming, bug-bounty, cybersecurity, web-development, online-business | 16-Aug-2025 |
| Join The Hacking Life! Become a Writer For a GHB! | https://medium.com/great-hackers-battalion/join-the-hacking-life-become-a-writer-for-a-ghb-35c8e59bb05e?source=rss------bug_bounty-5 | NnFace | join-us, hacking, bug-bounty, cybersecurity, publication | 16-Aug-2025 |
| Google Pays $250,000 Bounty for Chrome Sandbox Escape Vulnerability | https://medium.com/@seripallychetan/google-pays-250-000-bounty-for-chrome-sandbox-escape-vulnerability-58f79644112f?source=rss------bug_bounty-5 | Chetan Seripally | sandboxescape, chrome-security, bug-bounty, cybersecurity, cve | 16-Aug-2025 |
| Bug Bounty: Injection Attacks — From SQLi to Template Injection | https://medium.com/@rajkumarkumawat/bug-bounty-injection-attacks-from-sqli-to-template-injection-85acd9f6caff?source=rss------bug_bounty-5 | Rajkumar Kumawat | vulnerability-research, hacker-mindset, bug-bounty, sql-injection-attack, web-security | 16-Aug-2025 |
| How I Got Server Side XSS From PDF Previewing | https://medium.com/@mohamed.ahmd585/how-i-got-server-side-xss-from-pdf-previewing-769a1b585e84?source=rss------bug_bounty-5 | Mohamed Ahmd | xss-attack, bug-bounty, ssrf | 16-Aug-2025 |
| Most AI-Written Code Online Already Has Bugs | https://medium.com/@sanjeevanibhandari3/most-ai-written-code-online-already-has-bugs-28859782b178?source=rss------bug_bounty-5 | Sanjeevani Bhandari | ai-coding, bug-bounty, machine-learning, error-handling, artificial-intelligence | 16-Aug-2025 |
| “Day 13: The Phantom Dependency Threat — How an Abandoned npm Package Almost Broke the Web” | https://infosecwriteups.com/day-13-the-phantom-dependency-threat-how-an-abandoned-npm-package-almost-broke-the-web-b60155a56d9a?source=rss------bug_bounty-5 | Aman Sharma | technology, hacking, programming, bug-bounty, cybersecurity | 16-Aug-2025 |
| My first serious security vulnerability report | https://medium.com/@plaws.sj12/my-first-serious-security-vulnerability-report-2eae7ace537d?source=rss------bug_bounty-5 | Paul Lam | cybersecurity, security-research, bug-bounty | 16-Aug-2025 |
| How I Turned a Simple OAuth Bug Into a One-Click Account Takeover | https://sr0x01.medium.com/how-i-turned-a-simple-oauth-bug-into-a-one-click-account-takeover-d8ac8f4c149f?source=rss------bug_bounty-5 | srx | infosec-write-ups, bug-bounty, bug-bounty-writeup, cybersecurity, hacking | 16-Aug-2025 |
| Rate limit bypass leads to email triggering($$$) | https://sr0x01.medium.com/rate-limit-bypass-leads-to-email-triggering-665a9cd1c3f3?source=rss------bug_bounty-5 | srx | hacking, infosec-write-ups, bug-bounty, bug-bounty-writeup, cybersecurity | 16-Aug-2025 |
| I Built a SQL Injection That Bypassed Every WAF | https://medium.com/@ibtissamhammadi1/i-built-a-sql-injection-that-bypassed-every-waf-01bee29f2d84?source=rss------bug_bounty-5 | Ibtissam hammadi | waf, cybersecurity, sql-injection, bug-bounty | 16-Aug-2025 |
| Unmasking Stored XSS: A Deep Dive into the SMTP Error Message Vulnerability | https://medium.com/h7w/unmasking-stored-xss-a-deep-dive-into-the-smtp-error-message-vulnerability-1aba61c93a09?source=rss------bug_bounty-5 | Monika sharma | xss-attack, vulnerability, technology, penetration-testing, bug-bounty | 16-Aug-2025 |
| CVE-2025–31560: Salon Booking System <= 10.11 – Authenticated Privilege Escalation | https://revan-ar.medium.com/cve-2025-31560-salon-booking-system-10-11-authenticated-privilege-escalation-625aeb91c71b?source=rss------bug_bounty-5 | Revan A | penetration-testing, privilege-escalation, wordpress-plugins, vulnerability, bug-bounty | 15-Aug-2025 |
| Dumping the content of a table, without Sql injection | https://medium.com/@ugs20b126_cic.rajesh/dumping-the-content-of-a-table-without-sql-injection-2601480bcc1e?source=rss------bug_bounty-5 | Rajesh Sagar | bug-bounty, bugbounty-tips | 15-Aug-2025 |
| 10 Bug Bounty Tricks That $100K+ Hunters Guard Like Their Lives | https://medium.com/@qaafqasim/10-bug-bounty-tricks-that-100k-hunters-guard-like-their-lives-f83f523f3828?source=rss------bug_bounty-5 | Qasim Mahmood Khalid | cybersecurity, ethical-hacking, bug-bounty, bug-bounty-tips, programming | 15-Aug-2025 |
| How I Used Cache Poisoning to Bag a Bug Bounty | https://medium.com/@zoningxtr/how-i-used-cache-poisoning-to-bag-a-bug-bounty-1365d19bf60f?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, penetration-testing, cybersecurity, web-development, python | 15-Aug-2025 |
| Bug Hunting Journey: Discovering UID and Email Token Exposure in Encoded URLs | https://medium.com/@faxcl018/bug-hunting-journey-discovering-uid-and-email-token-exposure-in-encoded-urls-b28948193ee2?source=rss------bug_bounty-5 | Faxcel | credentials, bug-bounty, vulnerability, cybersecurity | 15-Aug-2025 |
| Easy 130$ Bounty: User to Admin | https://medium.com/@sari.mmusab/easy-130-bounty-user-to-admin-fe9340ff9bd3?source=rss------bug_bounty-5 | Musab Sarı | privilege-escalation, bug-bounty-writeup, cybersecurity, bug-bounty | 15-Aug-2025 |
| I Found 10x More SQLi Flaws Using This Bash Trick | https://infosecwriteups.com/i-found-10x-more-sqli-flaws-using-this-bash-trick-6300ca3a0f14?source=rss------bug_bounty-5 | Ibtissam hammadi | sql-injection, bug-bounty, cybersecurity, automation, sql | 15-Aug-2025 |
| Bug Bounty Hunting: JWT Vulnerabilities Deeply Explained (Live Step-by-Step Practical) | https://medium.com/@shaikhminhaz1975/bug-bounty-hunting-jwt-vulnerabilities-deeply-explained-live-step-by-step-practical-69934e520dee?source=rss------bug_bounty-5 | Shaikh Minhaz | bug-bounty, cybersecurity, penetration-testing, jwt, web-application-security | 15-Aug-2025 |
| How I Landed a Critical Bug After a Couple of Months break from Bounties | https://infosecilluminati.medium.com/how-i-landed-a-critical-bug-after-a-couple-of-months-break-from-bounties-94a78cf2c2ce?source=rss------bug_bounty-5 | cybrNK | cybersecurity, ethical-hacking, hacking, bug-bounty, cyber | 15-Aug-2025 |
| El bug no rompe el sistema, revela su verdadera forma | https://gorkaaa.medium.com/el-bug-no-rompe-el-sistema-revela-su-verdadera-forma-b763831a5398?source=rss------bug_bounty-5 | Gorka | bugbounty-tips, bug-bounty, bugbounty-poc, bugbounty-writeup, bugbounting | 15-Aug-2025 |
| I Turned One XSS Into $4,000 in 48 Hours | https://medium.com/@ibtissamhammadi1/i-turned-one-xss-into-4-000-in-48-hours-4a80e8f79b30?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, cybersecurity, hacking, bug-bounty, xss-attack | 15-Aug-2025 |
| ️♂️ Discover Hidden API Bugs Faster with PayloadMutator! | https://medium.com/@kshiv9842/%EF%B8%8F-%EF%B8%8F-discover-hidden-api-bugs-faster-with-payloadmutator-fa0da80d2450?source=rss------bug_bounty-5 | Shiv | bug-bounty, automation, api, api-testing, software-testing | 15-Aug-2025 |
| “Day 12: The Rate Limit Paradox — How I Weaponized API Protections for a $500 DoS Bug” | https://infosecwriteups.com/day-12-the-rate-limit-paradox-how-i-weaponized-api-protections-for-a-500-dos-bug-497fa5f8fe45?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, cybersecurity, hacking, programming, technology | 15-Aug-2025 |
| XSS Night: A Journey Through 26 Unfiltered Vulnerabilities | https://medium.com/@N0aziXss/xss-night-a-journey-through-26-unfiltered-vulnerabilities-3a41afaf4404?source=rss------bug_bounty-5 | N0aziXss | web-security, dom-xss, ethical-hacking, bug-bounty, waf-bypass | 15-Aug-2025 |
| Basic Server-Side Template Injection (SSTI) in ERB (Ruby) | https://osintteam.blog/basic-server-side-template-injection-ssti-in-erb-ruby-78a3b80432b8?source=rss------bug_bounty-5 | Bash Overflow | ssti, erb-ssti, remote-code-execution-erb, ruby-template-injection, bug-bounty | 15-Aug-2025 |
| How I Turned an “Invisible” Header into a $$$ Bug Bounty! | https://medium.com/@zoningxtr/how-i-turned-an-invisible-header-into-a-bug-bounty-9ce57f39c64b?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, web-development, programming, cybersecurity, bug-bounty | 15-Aug-2025 |
| A Beginner’s Journey: Basic Pentesting 2 Walkthrough (VulnHub) | https://medium.com/@sachinpv2004/a-beginners-journey-basic-pentesting-2-walkthrough-vulnhub-2318377479ed?source=rss------bug_bounty-5 | SACHIN PV | bug-bounty, vulnhub, walkthrough, hacking, penetration-testing | 15-Aug-2025 |
| INFORMATIONAL #2 | https://medium.com/@shakthisv90/informational-2-6429709d466f?source=rss------bug_bounty-5 | Shakthi | bug-bounty | 15-Aug-2025 |
| How to Earn from Apple’s ₹17.5 Crore Security Bounty Program | https://medium.com/@likhoindustry/how-to-earn-from-apples-17-5-crore-security-bounty-program-4271b7aed532?source=rss------bug_bounty-5 | Likhoindustry | security, bug-bounty, cybersecurity, pentesting, bounty-program | 15-Aug-2025 |
| Bug Bounty: XSS Exploitation — From Alert Boxes to Full Control! | https://medium.com/@rajkumarkumawat.workup/bug-bounty-xss-exploitation-from-alert-boxes-to-full-control-6530d83cafa6?source=rss------bug_bounty-5 | Rajkumar Kumawat | xss-vulnerability, hacking, bug-bounty, alerts, xss-attack | 15-Aug-2025 |
| Chaining Misconfigurations: From File Uploads to Account Takeover | https://alvandyhamed.medium.com/chaining-misconfigurations-from-file-uploads-to-account-takeover-6ed4ae03d8d1?source=rss------bug_bounty-5 | Hamed Alvandy | bug-bounty, file-upload-vulnerability, cybersecurity, web-application-security, account-takeover | 15-Aug-2025 |
| Reflected XSS Filter Bypass in Search Functionality | https://kashsecurity.medium.com/reflected-xss-filter-bypass-in-search-functionality-be2d511e7621?source=rss------bug_bounty-5 | KAsh Security | bug-bounty-writeup, security, cybersecurity, bug-bounty | 15-Aug-2025 |
| The Hidden World of Bug Bounty Scams | https://medium.com/@symbionyman/the-hidden-world-of-bug-bounty-scams-797ad0f47676?source=rss------bug_bounty-5 | Symbionyman | cyberattack, pentesting, cybersecurity, information-security, bug-bounty | 15-Aug-2025 |
| The Hidden World of Bug Bounty Scams | https://medium.com/@symbionyman/the-hidden-world-of-bug-bounty-scams-797ad0f47676?source=rss------bug_bounty-5 | Symbionyman | business, pentesting, cybersecurity, information-security, bug-bounty | 15-Aug-2025 |
| CVE-2023–38646 – Pre-Auth RCE in Metabase: One Token to Rule Them All | https://medium.com/@24bkdoor/cve-2023-38646-pre-auth-rce-in-metabase-one-token-to-rule-them-all-9bc6b5caa9c1?source=rss------bug_bounty-5 | 24BkDoor | bug-bounty-writeup, bug-bounty, cybersecurity, ethical-hacking, hacking | 14-Aug-2025 |
| Top 5 Bug Bounty Tips | https://medium.com/@anandrishav2228/top-5-bug-bounty-tips-b01e7d765090?source=rss------bug_bounty-5 | Rishav anand | ethical-hacking, cybersecurity, hacking, bug-bounty, money | 14-Aug-2025 |
| IDOR via Websockets allow me to takeover any users account | https://teamdh49.medium.com/idor-via-websockets-allow-me-to-takeover-any-users-account-b0dc23c8bcf5?source=rss------bug_bounty-5 | TEAM DH49 | bug-bounty | 14-Aug-2025 |
| Alright — I’ll expand your English writeup into a full, detailed, technical case study that works… | https://medium.com/codex/alright-ill-expand-your-english-writeup-into-a-full-detailed-technical-case-study-that-works-d7bca86c79db?source=rss------bug_bounty-5 | Dmitry Sorokin | hacking, hackathons, cybersecurity, bug-bounty-writeup, bug-bounty | 14-Aug-2025 |
| Why AI Chatbot Security Testing Feels Like Social Engineering ?? | https://codewithvamp.medium.com/why-ai-chatbot-security-testing-feels-like-social-engineering-8812b7520660?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | security, bug-bounty, ai, chatgpt, hacking | 14-Aug-2025 |
| Mastering Nmap: The Ultimate Guide to Network Scanning and Vulnerability Detection | https://infosecwriteups.com/mastering-nmap-the-ultimate-guide-to-network-scanning-and-vulnerability-detection-769d1d2eecff?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, tips-and-tricks, nmap, vulnerability | 14-Aug-2025 |
| ️ How to Bypass Web Application Firewalls (WAFs) | https://infosecwriteups.com/%EF%B8%8F-how-to-bypass-web-application-firewalls-wafs-8346e6e79dd3?source=rss------bug_bounty-5 | Vipul Sonule | programming, cybersecurity, bug-bounty, hacking, tech | 14-Aug-2025 |
| How I Found a Sensitive Data Exposure And PII in NASA’s EarthData System | https://deepsystems.medium.com/how-i-found-a-sensitive-data-exposure-and-pii-in-nasas-earthdata-system-6980492dcd75?source=rss------bug_bounty-5 | whiterose | bug-bounty, testing, bugcrowd, hackerone | 14-Aug-2025 |
| Cybersecurity Trends for 2025 and Beyond: What You Need to Know | https://medium.com/@paritoshblogs/cybersecurity-trends-for-2025-and-beyond-what-you-need-to-know-53605ae788ce?source=rss------bug_bounty-5 | Paritosh | cybersecurity-trends-2025, hacking, ai, bug-bounty, cybersecurity | 14-Aug-2025 |
| BUG-BOUNTY SERIES 4: Teknik Reconnaissance dalam Bug Bounty Mendeteksi Celah Tanpa Menyentuh Sistem | https://medium.com/@krisnawhy300/bug-bounty-series-4-teknik-reconnaissance-dalam-bug-bounty-mendeteksi-celah-tanpa-menyentuh-sistem-56dcd3619b44?source=rss------bug_bounty-5 | Krisna Wahyu Andriawan | bug-bounty, linux, linux-tutorial, hacking | 14-Aug-2025 |
| 20K to Crack This Log? Challenge Accepted. | https://medium.com/@Authlyn/20k-to-crack-this-log-challenge-accepted-af03952959ad?source=rss------bug_bounty-5 | Authlyn | ethical-hacking, data-forensics, cybersecurity, pdf-security, bug-bounty | 14-Aug-2025 |
| “How I Rerouted Calls in a Live Telephony System With a ‘View-Only’ Role” — The Hidden API… | https://medium.com/meetcyber/how-i-rerouted-calls-in-a-live-telephony-system-with-a-view-only-role-the-hidden-api-676b71d5faa9?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, bug-bounty, cybersecurity, infosec | 14-Aug-2025 |
| How Did a Single HTTP Header Bypass 403 Forbidden | https://medium.com/@ibtissamhammadi1/how-did-a-single-http-header-bypass-403-forbidden-fca0e3891347?source=rss------bug_bounty-5 | Ibtissam hammadi | tech, ethical-hacking, bug-bounty, cybersecurity, web-security | 14-Aug-2025 |
| How Hackers Use Tunneling to Bypass Any Firewall (Red Team Playbook) | https://medium.com/@verylazytech/how-hackers-use-tunneling-to-bypass-any-firewall-red-team-playbook-3604a21ebdb8?source=rss------bug_bounty-5 | Very Lazy Tech | pivoting, firewall, penetration-testing, bug-bounty, ssh-tunnel | 14-Aug-2025 |
| ☕ Web Cache Poisoning — How to Trick the Internet’s Memory and Serve Everyone Your “Special Recipe” | https://infosecwriteups.com/web-cache-poisoning-how-to-trick-the-internets-memory-and-serve-everyone-your-special-recipe-eea160e6bb89?source=rss------bug_bounty-5 | Shah kaif | bug-bounty-writeup, web-cache-poisoning, bugs, bug-bounty, bug-bounty-tips | 14-Aug-2025 |
| 1000$ Bug Bounty | Journey to Exploiting a Hidden XSS | https://medium.com/@rashad.desk/1000-bug-bounty-journey-to-exploiting-a-hidden-xss-b8cc90b49714?source=rss------bug_bounty-5 | Rashadul Islam | creative-writing, freelancing, bug-bounty, cybersecurity, hacking | 14-Aug-2025 |
| Application Level DoS - No More Dates | https://shahjerry33.medium.com/application-level-dos-no-more-dates-6782fcf3392c?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | vulnerability, bug-bounty, infosec, pentesting, cybersecurity | 14-Aug-2025 |
| Understanding SharePoint Web Parts and IDOR Vulnerabilities | https://medium.com/@horamah.71/understanding-sharepoint-web-parts-and-idor-vulnerabilities-e9ca172d7f2b?source=rss------bug_bounty-5 | horamah | cve, idor, bug-bounty, sharepoint, bug-bounty-tips | 14-Aug-2025 |
| A Race Condition Leads to Bypass Subscription Plan | https://medium.com/@youssefawad1357/a-race-condition-leads-to-bypass-subscription-plan-929abae2f355?source=rss------bug_bounty-5 | youssef awad | bug-bounty-writeup, penetration-testing, bug-bounty-tips, bug-bounty, cybersecurity | 14-Aug-2025 |
| “Day 11: The Invisible Threat — Hunting for Logic Flaws in Modern Web Applications” | https://amannsharmaa.medium.com/day-11-the-invisible-threat-hunting-for-logic-flaws-in-modern-web-applications-08c5d279465c?source=rss------bug_bounty-5 | Aman Sharma | hacking, bug-bounty, money, programming, technology | 14-Aug-2025 |
| Membongkar CORS Misconfiguration: Studi Kasus WordPress REST API (wp-json) dan Payload Eksploitasi | https://medium.com/@azzabughunter/membongkar-cors-misconfiguration-studi-kasus-wordpress-rest-api-wp-json-dan-payload-eksploitasi-77238c99d123?source=rss------bug_bounty-5 | Azza0X1A | web-security, wordpress-security, pentesting, bug-bounty, cors-vulnerability | 14-Aug-2025 |
| Email Phishing in Organizations — From Zero to Hero: How Companies Get Targeted, Tricked, and… | https://systemweakness.com/email-phishing-in-organizations-from-zero-to-hero-how-companies-get-targeted-tricked-and-dedeb1d491c6?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, bug-bounty, infosec, information-security, cybersecurity | 14-Aug-2025 |
| Email Phishing: From Zero to Hero — The Ultimate Guide to Spotting, Stopping, and Surviving the… | https://javascript.plainenglish.io/email-phishing-from-zero-to-hero-the-ultimate-guide-to-spotting-stopping-and-surviving-the-284d751de7f8?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, infosec, bug-bounty, ai, information-security | 14-Aug-2025 |
| Email Phishing: From Zero to Hero — The Ultimate Guide + Cyber Kill Chain Breakdown | https://medium.com/meetcyber/email-phishing-from-zero-to-hero-the-ultimate-guide-cyber-kill-chain-breakdown-b330a504d34f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, cybersecurity, bug-bounty, ai, information-security | 14-Aug-2025 |
| . “It Sounded Exactly Like Him” — Inside the AI-Powered Vishing Playbook | https://medium.com/meetcyber/it-sounded-exactly-like-him-inside-the-ai-powered-vishing-playbook-95a699615c23?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, cybersecurity, infosec, bug-bounty | 14-Aug-2025 |
| ️ Voice Phishing Meets AI: Deepfake Calls and the Death of “Trusting Your Ears” | https://javascript.plainenglish.io/%EF%B8%8F-voice-phishing-meets-ai-deepfake-calls-and-the-death-of-trusting-your-ears-99476d309b41?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, information-security, cybersecurity, infosec | 14-Aug-2025 |
| 0-Click Account Takeover Through a Simple Password Reset Parameter | https://g0w6y.medium.com/0-click-account-takeover-through-a-simple-password-reset-parameter-482ad44019a2?source=rss------bug_bounty-5 | Gouri Sankar A | bug-bounty-writeup, bug-bounty, infosec, bug-bounty-tips | 14-Aug-2025 |
| HTTP Request Smuggling: Basic CL.TE Vulnerability | https://infosecwriteups.com/http-request-smuggling-basic-cl-te-vulnerability-2cadaa2d9640?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, clte-vulnerability, http-request-smuggling, request-smuggling, chunked-transfer-encoding | 14-Aug-2025 |
| Three Hunts, No Bounties — and Why I’m Still Excited | https://medium.com/@Far_Horizon/three-hunts-no-bounties-and-why-im-still-excited-9714dc631a41?source=rss------bug_bounty-5 | Horizon | cybersecurity, penetration-testing, web-security, ethical-hacking, bug-bounty | 14-Aug-2025 |
| OAuth Login Bypasses & Account Linking Chaos — A Bug Bounty Adventure | https://sohanxp56.medium.com/oauth-login-bypasses-account-linking-chaos-a-bug-bounty-adventure-bf0cf0b28d72?source=rss------bug_bounty-5 | Sohan | information-technology, web-application-security, bug-bounty-tips, bug-bounty | 14-Aug-2025 |
| ️ Satellite of Secrets: Finding Open Admin Consoles in IoT Dashboards | https://infosecwriteups.com/%EF%B8%8F-satellite-of-secrets-finding-open-admin-consoles-in-iot-dashboards-bc6b880edabd?source=rss------bug_bounty-5 | Iski | infosec, money, hacking, cybersecurity, bug-bounty | 14-Aug-2025 |
| Account Deletion Security Pitfalls — A Bug Bounty Case Study | https://sohanxp56.medium.com/account-deletion-security-pitfalls-a-bug-bounty-case-study-8ab8fe7ac8f5?source=rss------bug_bounty-5 | Sohan | bug-bounty-writeup, cybersecurity, bugs, bug-bounty, api-security | 14-Aug-2025 |
| Transitioning From OffSec to Red Teaming | https://medium.com/@ty.anderson.3/transitioning-from-offsec-to-red-teaming-165fc2e968f8?source=rss------bug_bounty-5 | Ty Anderson | offensive-security, pentesting, penetration-testing, red-team, bug-bounty | 14-Aug-2025 |
| Bug Bounty Recon tool 2 | https://prabhjeetlearning.medium.com/bug-bounty-recon-tool-2-ab71da332ac9?source=rss------bug_bounty-5 | Prabhjeetsingh | bugbounty-automation, bug-bounty, selenium, bug-bounty-tips, selenium-test-automation | 14-Aug-2025 |
| Mi P3 En la NASA con 16 Años | https://gorkaaa.medium.com/mi-p3-en-la-nasa-con-16-a%C3%B1os-b6ba79e1e4af?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty, bug-bounty-writeup, bugs, bugbounty-writeup | 14-Aug-2025 |
| Mi P1 En la NASA con 16 Años | https://gorkaaa.medium.com/mi-p1-en-la-nasa-con-16-a%C3%B1os-3eba63256d5b?source=rss------bug_bounty-5 | Gorka | bug-bounty-hunter, bug-bounty, bugbounty-writeup, bug-bounty-tips, bug-bounty-writeup | 14-Aug-2025 |
| Recon Methodology: JavaScript File Hunting | https://medium.com/@marduk.i.am/recon-methodology-javascript-file-hunting-254127ecd211?source=rss------bug_bounty-5 | Marduk I Am | bug-hunting, information-security, bug-bounty, javascript, ethical-hacking | 14-Aug-2025 |
| Understanding DOM-Based XSS in Acronis Promo Page: A Deep Dive | https://medium.com/h7w/understanding-dom-based-xss-in-acronis-promo-page-a-deep-dive-568d2ee1284e?source=rss------bug_bounty-5 | Monika sharma | xss-attack, penetration-testing, javascript, tips-and-tricks, bug-bounty | 13-Aug-2025 |
| Password Reset Poisoning via Middleware: The Hidden Flaw That Can Lead to Account Takeover | https://infosecwriteups.com/password-reset-poisoning-via-middleware-the-hidden-flaw-that-can-lead-to-account-takeover-899416465d45?source=rss------bug_bounty-5 | Bash Overflow | password-reset-attack, account-takeover, bug-bounty, host-header-injection, password-reset-poisoning | 13-Aug-2025 |
| The Wild Story of How a Website Bug Could Let Strangers Unlock Cars Anywhere | https://medium.com/readers-club/the-wild-story-of-how-a-website-bug-could-let-strangers-unlock-cars-anywhere-1ec09756291e?source=rss------bug_bounty-5 | Azeeza | website, hacking, bug-bounty, technology, cars | 13-Aug-2025 |
| Bug Bounty Nightmare: How A Vulnerability Disclosure Turned into Nightmare ! | https://devprogramming.medium.com/bug-bounty-nightmare-how-a-vulnerability-disclosure-turned-into-nightmare-dca809fa00d6?source=rss------bug_bounty-5 | DevProgramming | bug-bounty, bug-bounty-writeup, ethical-hacking, cybersecurity, ethics | 13-Aug-2025 |
| Hijacking the Pipeline: Mastering HTTP Desync Exploits | https://medium.com/@Dedrknex/hijacking-the-pipeline-mastering-http-desync-exploits-532faf98dbbe?source=rss------bug_bounty-5 | Dedrknex | bug-bounty, ethical-hacking, cybersecurity, web-development | 13-Aug-2025 |
| Hack SMB in Minutes: The Step-by-Step Guide Pentesters Don’t Want You to Miss! | https://medium.com/@verylazytech/hack-smb-in-minutes-the-step-by-step-guide-pentesters-dont-want-you-to-miss-f2c504d2e439?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, hacking, bug-bounty, penetration-testing, smb | 13-Aug-2025 |
| “Package Hijack Meets GraphQL Goldmine: How One Recon Session Paid for My Caffeine Addiction” | https://infosecwriteups.com/package-hijack-meets-graphql-goldmine-how-one-recon-session-paid-for-my-caffeine-addiction-8db6274d0811?source=rss------bug_bounty-5 | Iski | hacking, money, cybersecurity, infosec, bug-bounty | 13-Aug-2025 |
| The Vulnerabilities You Walk Past | https://medium.com/@anupamsharma0326/the-vulnerabilities-you-walk-past-3106064fcd0c?source=rss------bug_bounty-5 | Anupamsharma | bug-bounty-tips, bug-bounty | 13-Aug-2025 |
| How to Chain Bugs Like a Pro (From P5 to P1) | https://medium.com/@viratavi1223/how-to-chain-bugs-like-a-pro-from-p5-to-p1-0cddd902c8e3?source=rss------bug_bounty-5 | Viratavi | cybersecurity, hackerone, web-security, ethical-hacking, bug-bounty | 13-Aug-2025 |
| I Turned One Recon Trick Into $3,350 | https://medium.com/@ibtissamhammadi1/i-turned-one-recon-trick-into-3-350-07ce80e7e8df?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, web-security, reconnaissance, cybersecurity, ethical-hacking | 13-Aug-2025 |
| Host Header Magic: Unlocking Hidden Portals by Just Changing ONE Field! | https://medium.com/@zoningxtr/host-header-magic-unlocking-hidden-portals-by-just-changing-one-field-4b762e167a74?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, web-development, web3, bug-bounty, cybersecurity | 13-Aug-2025 |
| “Day 10: Defending the Digital Gateway — A White Hat’s Exploration of Chrome’s Security… | https://infosecwriteups.com/day-10-defending-the-digital-gateway-a-white-hats-exploration-of-chrome-s-security-e5f217177104?source=rss------bug_bounty-5 | Aman Sharma | programming, money, bug-bounty, hacking, technology | 13-Aug-2025 |
| Catching the users session | https://medium.com/@maajix/catching-the-users-session-84278a4c1efe?source=rss------bug_bounty-5 | Majix | bug-bounty, bugbounty-writeup, web-penetration-testing, bug-bounty-tips, hacking | 13-Aug-2025 |
| How I Found a Horizontal Privilege Escalation Vulnerability — From Recon to Exploit | https://infosecwriteups.com/how-i-found-a-horizontal-privilege-escalation-vulnerability-from-recon-to-exploit-456fac79b8eb?source=rss------bug_bounty-5 | Sidhartha | ctf, hallof-fame, bug-bounty, privesc, first-bounty | 13-Aug-2025 |
| The Best Alternatives to Intelx.io | https://medium.com/@Appsec_pt/the-best-alternatives-to-intelx-io-f1c469e23fb1?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty-writeup, bug-bounty, web-security, cybersecurity, bug-bounty-tips | 13-Aug-2025 |
| How I Use Perplexity for Bug Bounty Recon (and Squeeze Every Last Drop Out of It) | https://saeed0x1.medium.com/how-i-use-perplexity-for-bug-bounty-recon-and-squeeze-every-last-drop-out-of-it-a7061842a77f?source=rss------bug_bounty-5 | SAEED | perplexity, bug-bounty, cybersecurity, bug-bounty-tips, artificial-intelligence | 13-Aug-2025 |
| Bug Bounty: Authentication Testing — Brute Force to Bypass | https://medium.com/@rajkumarkumawat.workup/bug-bounty-authentication-testing-brute-force-to-bypass-acc770fbd019?source=rss------bug_bounty-5 | Rajkumar Kumawat | authenticationtesting, api-penetration-testing, bruteforce-attack, bug-bounty, password-security | 13-Aug-2025 |
| OAuth Açığı Nedir? | https://medium.com/@sanaldunya/oauth-a%C3%A7%C4%B1%C4%9F%C4%B1-nedir-247ede6d5948?source=rss------bug_bounty-5 | Oruç | web-development, cybersecurity, programming, bug-bounty, türkçe | 13-Aug-2025 |
| How I get $ 1,000 and You Can Get it using Rate Limit on OTP | https://medium.com/@yossefmohamedsalah2001/how-i-get-1-000-and-you-can-get-it-using-rate-limit-on-otp-b770c2c1a9f2?source=rss------bug_bounty-5 | Yossef ibrahim mohamed-salah | bug-bounty, vulnerability, no-rate-limit | 13-Aug-2025 |
| OAuth Login Bypasses & Account Linking Chaos — A Bug Bounty Adventure | https://sohanxp56.medium.com/oauth-login-bypasses-account-linking-chaos-a-bug-bounty-adventure-ff243fd62277?source=rss------bug_bounty-5 | Sohanxp | account-security, oauth, bug-bounty, ethical-hacking, web-security | 13-Aug-2025 |
| Unveiling Time-Based Blind SQL Injection in U.S. DoD Systems | https://osintteam.blog/unveiling-time-based-blind-sql-injection-in-u-s-dod-systems-7f80d73d3758?source=rss------bug_bounty-5 | Monika sharma | technology, sql, bug-bounty, vulnerability, penetration-testing | 13-Aug-2025 |
| How I Found a Critical XSS On a Public Bug Bounty Program | https://1-day.medium.com/how-i-found-a-critical-xss-on-a-public-bug-bounty-program-27d492117f61?source=rss------bug_bounty-5 | 1day | hacking, cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 13-Aug-2025 |
| $125 For Unauthorized Campaign Modification via Insecure ID Parameter (IDOR) | https://medium.com/@Tanvir0x1/125-for-unauthorized-campaign-modification-via-insecure-id-parameter-idor-cfda4db522e2?source=rss------bug_bounty-5 | Tanvir Ahmed | bugs, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 13-Aug-2025 |
| The Best Alternatives to Intelx.io | https://systemweakness.com/the-best-alternatives-to-intelx-io-f1c469e23fb1?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty-writeup, bug-bounty, web-security, cybersecurity, bug-bounty-tips | 13-Aug-2025 |
| How I Use Perplexity AI for Bug Bounty Recon (and Squeeze Every Last Drop Out of It) | https://saeed0x1.medium.com/how-i-use-perplexity-for-bug-bounty-recon-and-squeeze-every-last-drop-out-of-it-a7061842a77f?source=rss------bug_bounty-5 | SAEED | perplexity, bug-bounty, cybersecurity, bug-bounty-tips, artificial-intelligence | 13-Aug-2025 |
| Path Confusion: The Subtle Trick That Fooled the Cache | https://medium.com/@Xt3sY/path-confusion-the-subtle-trick-that-fooled-the-cache-ebcfd1826923?source=rss------bug_bounty-5 | Pushkar Bhagat | hacking, bug-bounty | 13-Aug-2025 |
| IDOR in Invitation Flow Leads to Denial of Signup and Account Manipulation | https://medium.com/@mhmodgm54/idor-in-invitation-flow-leads-to-denial-of-signup-and-account-manipulation-98c51e0dd942?source=rss------bug_bounty-5 | Mahmoud Gamal | writeup, cybersecurity, bug-bounty, penetration-testing, idor | 13-Aug-2025 |
| From Simple Restriction Bypass to Internal Privilege Escalation to High Impact IDOR | https://medium.com/@Alharbe0/from-simple-restriction-bypass-to-internal-privilege-escalation-to-high-impact-idor-e7b8366ac70d?source=rss------bug_bounty-5 | Mohammad-Nouri Almohammad | hacking, hackerone, bug-bounty, idor | 13-Aug-2025 |
| Logical 2FA Bypass via Missing clientId Parameter in Profile Update Endpoint | https://medium.com/@mhmodgm54/logical-2fa-bypass-via-missing-clientid-parameter-in-profile-update-endpoint-3f054bc651d6?source=rss------bug_bounty-5 | Mahmoud Gamal | cybersecurity, writeup, penetration-testing, bug-bounty, 2fa | 13-Aug-2025 |
| How to Find Hidden Paths to Domain Admin in Minutes (With BloodHound) | https://medium.com/@paritoshblogs/how-to-find-hidden-paths-to-domain-admin-in-minutes-with-bloodhound-34a69de1be12?source=rss------bug_bounty-5 | Paritosh | bloodhound, cybersecurity, bug-bounty, active-directory, chatgpt | 12-Aug-2025 |
| How ExpressVPN Vulnerability Enables Silent Card Abuse — And Calls It “Expected Behavior” | https://medium.com/@krivadna/how-expressvpn-vulnerability-enables-silent-card-abuse-and-calls-it-expected-behavior-7650a0b7a304?source=rss------bug_bounty-5 | Krivadna | bug-bounty, penetration-testing, cybersecurity, bugbounty-writeup | 12-Aug-2025 |
| Day5 Recon: Hacking Hidden Endpoints: How to Use Burp Suite & OWASP ZAP for Web Spidering and… | https://infosecwriteups.com/day5-recon-hacking-hidden-endpoints-how-to-use-burp-suite-owasp-zap-for-web-spidering-and-2a69aa4ffd3d?source=rss------bug_bounty-5 | Ayush Kumar | cybersecurity, bug-bounty, osint, ethical-hacking | 12-Aug-2025 |
| Dorks For Sensitive Information Disclosure Part-3 | https://medium.com/@devanshpatel930/dorks-for-sensitive-information-disclosure-part-3-a687a9c5a3bf?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty, bugs, cybersecurity, bug-bounty-tips, bug-bounty-writeup | 12-Aug-2025 |
| A Deep Dive into Improper Authentication | https://infosecwriteups.com/a-deep-dive-into-improper-authentication-a68a92929f33?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tips-and-tricks, technology, authentication, bug-bounty | 12-Aug-2025 |
| Logs Don’t Lie: How a GraphQL Debug Endpoint Spilled the Entire Database ️ | https://infosecwriteups.com/logs-dont-lie-how-a-graphql-debug-endpoint-spilled-the-entire-database-%EF%B8%8F-a4b859ec6a1c?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, hacking, bug-bounty, money | 12-Aug-2025 |
| 7 Easy Bugs That Still Work in 2025 | https://systemweakness.com/7-easy-bugs-that-still-work-in-2025-00619d93a5a3?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, ai, cybersecurity, infosec, bug-bounty | 12-Aug-2025 |
| Prompt Engineering Toolkit (2025 Edition) | https://medium.com/meetcyber/prompt-engineering-toolkit-2025-edition-8c3372944618?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, cybersecurity, information-security, infosec | 12-Aug-2025 |
| Bug Bounty + AI = This Prompt List Will Change Your Game | https://javascript.plainenglish.io/bug-bounty-ai-this-prompt-list-will-change-your-game-4005a77d09bf?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, cybersecurity, bug-bounty, information-security | 12-Aug-2025 |
| Rate Limiting in Web Applications: Bug That Pays Your Rent | https://medium.com/@aashifm/rate-limiting-in-web-applications-bug-that-pays-your-rent-028d634abe53?source=rss------bug_bounty-5 | Aashif | api, rate-limiting, bug-bounty, web-security, cybersecurity | 12-Aug-2025 |
| Bug Bounty Entry: Getting Started with Platforms like HackerOne and Bugcrowd | https://rafalw3bcraft.medium.com/bug-bounty-entry-getting-started-with-platforms-like-hackerone-and-bugcrowd-849ffb8ba046?source=rss------bug_bounty-5 | RafalW3bCraft | technology, cybersecurity, linux, bug-bounty-tips, bug-bounty | 12-Aug-2025 |
| Dorks For Sensitive Information Disclosure Part-3 | https://infosecwriteups.com/dorks-for-sensitive-information-disclosure-part-3-a687a9c5a3bf?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty, bugs, cybersecurity, bug-bounty-tips, bug-bounty-writeup | 12-Aug-2025 |
| How I Found a Critical Bug in My First 24 Hours | https://medium.com/@ibtissamhammadi1/how-i-found-a-critical-bug-in-my-first-24-hours-762092ae6664?source=rss------bug_bounty-5 | Ibtissam hammadi | beginners-guide, bug-bounty, hacking, tech, cybersecurity | 12-Aug-2025 |
| The 3 Best Tools for Bug Bounty / Pentesting | https://medium.com/@dr_1n-ctrl/the-3-best-tools-for-bug-bounty-pentesting-915e95686e6f?source=rss------bug_bounty-5 | Dr1nCtrl | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty, red-teaming | 12-Aug-2025 |
| How I could Takeover any Account by Bypassing OTP Rate Limits | https://medium.com/@anonymousshetty2003/how-i-could-takeover-any-account-by-bypassing-otp-rate-limits-1155d616d947?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, cybersecurity, bug-bounty-tips, ethical-hacking, bug-bounty-writeup | 12-Aug-2025 |
| The Bug that made me a Bounty in only a Few Minutes | https://medium.com/@cheirishpro/the-bug-that-made-me-a-bounty-in-only-a-few-minutes-7cf92bb03c19?source=rss------bug_bounty-5 | Cheirishpro | bug-bounty-writeup, cybersecurity, bug-bounty-tips, web-security, bug-bounty | 12-Aug-2025 |
| Changing Email Despite UI Restriction | https://medium.com/@saifayman126/changing-email-despite-ui-restriction-18368ddf6bea?source=rss------bug_bounty-5 | Pot4to | penetration-testing, hunting, hackerone, bug-bounty, cybersecurity | 12-Aug-2025 |
| How a Simple Rate Limit Issue Earned Me €500 | https://enterlectury.medium.com/how-a-simple-rate-limit-issue-earned-me-500-763aa5ae8ae1?source=rss------bug_bounty-5 | Enterlectury | rate-limiting, bug-bounty, bypass, bug-bounty-tips, bug-bounty-writeup | 12-Aug-2025 |
| [03]. I received $200 from Mozilla for a simple bypass | https://medium.com/@yoyomiski/03-i-received-200-from-mozilla-for-a-simple-bypass-fc5f1e020e9a?source=rss------bug_bounty-5 | yoyomiski | penetration-testing, bug-bounty-tips, bug-bounty, hackerone, bug-bounty-writeup | 12-Aug-2025 |
| Bug Bounty: Information Disclosure — Leaks, Logs & Loose Ends | https://medium.com/@rajkumarkumawat.workup/bug-bounty-information-disclosure-leaks-logs-loose-ends-54cf53dbbf09?source=rss------bug_bounty-5 | Rajkumar Kumawat | pentesting, ethical-hacking, infodisclosure, bug-bounty, web-security | 12-Aug-2025 |
| “Day 9: Cloud Heist Unlocked — How I Discovered a $100 AWS Vulnerability (Ethically)” | https://infosecwriteups.com/day-9-cloud-heist-unlocked-how-i-discovered-a-100-aws-vulnerability-ethically-15349c3ce4fb?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, technology, programming, money, hacking | 12-Aug-2025 |
| From Curiosity to Critical: Uncovering Chained Vulnerabilities in a Private Web App Pentest | https://medium.com/@samruthsriram/from-curiosity-to-critical-uncovering-chained-vulnerabilities-in-a-private-web-app-pentest-febdc60a19ce?source=rss------bug_bounty-5 | Samruth Sriram D | web-application-security, cybersecurity, penetration-testing, red-team, bug-bounty | 12-Aug-2025 |
| Hacking Flutter apps: Static, dynamic and beyond | https://manasharsh.medium.com/hacking-flutter-apps-static-dynamic-and-beyond-893c7a733353?source=rss------bug_bounty-5 | Manas Harsh | hacking, bug-bounty, pentesting, appsec | 12-Aug-2025 |
| Informational Finding #1: Clickjacking on Non-Sensitive Action | https://medium.com/@shakthisv90/informational-finding-1-clickjacking-on-non-sensitive-action-fac4e1885202?source=rss------bug_bounty-5 | Shakthi | cybersecurity, bug-bounty, ethical-hacking | 12-Aug-2025 |
| Stop Wasting Time! The Secret Method to Find Exploits in Minutes | https://medium.com/@verylazytech/stop-wasting-time-the-secret-method-to-find-exploits-in-minutes-5920dc6619cc?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, hacking, exploitation, red-team, bug-bounty | 12-Aug-2025 |
| From Pre-Account Takeover to Full Account Takeover using Google OAuth | https://medium.com/@sudo_a7med/from-pre-account-takeover-to-full-account-takeover-using-google-oauth-38b42268ce31?source=rss------bug_bounty-5 | sudo_a7med | account-takeover, bug-bounty | 12-Aug-2025 |
| Your Website’s Silent Guardians: A Deep Dive into Security Headers | https://medium.com/@sl0th0x87/your-websites-silent-guardians-a-deep-dive-into-security-headers-9f3dd8e6feeb?source=rss------bug_bounty-5 | Mike (sl0th0x87) | web-application-security, hacking, http-security-headers, owasp, bug-bounty | 12-Aug-2025 |
| Google Cloud Partner API Credentials Found in Public Repo | https://enterlectury.medium.com/google-cloud-partner-api-credentials-found-in-public-repo-45517dc54213?source=rss------bug_bounty-5 | Enterlectury | google, github, bug-bounty, bugbounty-writeup, cybersecurity | 12-Aug-2025 |
| My 100 Hour Rule for Bug Bounty ! | https://devprogramming.medium.com/my-100-hour-rule-for-bug-bounty-046f96fc7791?source=rss------bug_bounty-5 | DevProgramming | cybersecurity, bug-bounty, bug-bounty-tips, productivity, bug-bounty-writeup | 12-Aug-2025 |
| From Shodan to Securing Government Systems: BFLA + Stored XSS Write-Up | https://medium.com/@eclipsedmarauder/from-shodan-to-securing-government-systems-bfla-stored-xss-write-up-ab3bfd4e703d?source=rss------bug_bounty-5 | Veyron92i | bug-bounty, vulnerability, hacking, cybersecurity, security | 12-Aug-2025 |
| How I bypass CSP sandbox and find Stored XSS | https://l4zyhacker.medium.com/how-i-bypass-csp-sandbox-and-find-stored-xss-7bb2b5795554?source=rss------bug_bounty-5 | L4zyhacker | xss-attack, bug-hunting, bug-bounty | 11-Aug-2025 |
| Mirror, Mirror in the Cache: The Day I Became a Digital Pickpocket | https://infosecwriteups.com/mirror-mirror-in-the-cache-the-day-i-became-a-digital-pickpocket-ce695a86dc87?source=rss------bug_bounty-5 | Iski | infosec, money, hacking, bug-bounty, cybersecurity | 11-Aug-2025 |
| These Cybersecurity Platforms Are FREE (and Worth Your Time) | https://medium.com/@paritoshblogs/these-cybersecurity-platforms-are-free-and-worth-your-time-0f3e787a83e6?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, information-technology, cybersecurity, virustotal | 11-Aug-2025 |
| A Love Story with Bugs | https://dhimanchandra.medium.com/a-love-story-with-bugs-dd13bc201c22?source=rss------bug_bounty-5 | Dhiman Chandra | problem-solving, design, web-development, bug-bounty, software-development | 11-Aug-2025 |
| How an Open Redirect Earned Me Points — Even as a Duplicate | https://medium.com/@chaudharijugal07/how-an-open-redirect-earned-me-points-even-as-a-duplicate-541d442f5516?source=rss------bug_bounty-5 | Chaudhary Jugal | bug-bounty, bugbounty-writeup | 11-Aug-2025 |
| $3,500 Bounty — Total Failure of Password Protection While Extracting Seed Phrase — A Critical… | https://hacker-write-ups.medium.com/3-500-bounty-total-failure-of-password-protection-while-extracting-seed-phrase-a-critical-79723184d46e?source=rss------bug_bounty-5 | Hacker Write-Ups | hackerone-report, writeup, hackerone, bug-bounty, bug-bounty-writeup | 11-Aug-2025 |
| CTF Day(50) | https://medium.com/@ahmednarmer1/ctf-day-50-ef758c06b0e7?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, web-pen-testing, web-penetration-testing, cybersecurity, bug-bounty | 11-Aug-2025 |
| ChatGPT MacOS App stopped “Working with” | https://medium.com/@robert_8371/chatgpt-macos-app-stopped-working-with-d39f82dc46ba?source=rss------bug_bounty-5 | Robert-Rami Youssef | mac, bug-bounty, ai, chatgpt, accessibility | 11-Aug-2025 |
| Up and Running with GitHound for fast GitHub dorking in 5 mins https://github.com/tillson/git-hound | https://medium.com/@tillson.galloway/up-and-running-with-githound-for-fast-github-dorking-in-5-mins-https-github-com-tillson-git-hound-5df7a4b55f37?source=rss------bug_bounty-5 | Tillson Galloway | cybersecurity, bug-bounty, information-security, recon, hacking | 11-Aug-2025 |
| The Ultimate Threat Intelligence Toolkit: 40+ Tools for Malware Analysis, Sandboxing, and IP… | https://osintteam.blog/the-ultimate-threat-intelligence-toolkit-40-tools-for-malware-analysis-sandboxing-and-ip-d0b63b38d487?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-tips, bug-bounty, cybersecurity, bug-bounty-writeup, ethical-hacking | 11-Aug-2025 |
| My Journey to Finding an IDOR Vulnerability — And the Lessons It Taught Me | https://secpriyansh.medium.com/my-journey-to-finding-an-idor-vulnerability-and-the-lessons-it-taught-me-06df46b386a8?source=rss------bug_bounty-5 | Priyansh | idor-vulnerability, cybersecurity, hacking, bug-bounty, bugbounty-writeup | 11-Aug-2025 |
| HTTP Request Smuggling In Bug Bounty Hunting | https://medium.com/@zodiacHacker/http-request-smuggling-in-bug-bounty-hunting-abf0e4e75b73?source=rss------bug_bounty-5 | Zodiac Hacker | web, vulnerability, bug-bounty, http-request-smuggling, hacking | 11-Aug-2025 |
| You’re Missing Out on Bounties if you Don’t Hunt this Bug | https://medium.com/@dr_1n-ctrl/youre-missing-out-on-bounties-if-you-don-t-hunt-this-bug-8df1714771b6?source=rss------bug_bounty-5 | Dr1nCtrl | bug-bounty-writeup, bug-bounty-tips, cybersecurity, web-security, bug-bounty | 11-Aug-2025 |
| Mastering Web Cache Deception Vulnerabilities: An Advanced Bug Hunter’s Guide | https://infosecwriteups.com/mastering-web-cache-deception-vulnerabilities-an-advanced-bug-hunters-guide-b7b500b482e3?source=rss------bug_bounty-5 | coffinxp | vulnerability, cybersecurity, bug-bounty, technology, penetration-testing | 11-Aug-2025 |
| My Journey Uncovering The Hidden SSRF Flaw CVE 2020 10770 | https://medium.com/@ibtissamhammadi1/my-journey-uncovering-the-hidden-ssrf-flaw-cve-2020-10770-8394c57ed459?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, ethical-hacking, cybersecurity, web-security, ssrf | 11-Aug-2025 |
| How data is stored in SIEM solution? | https://medium.com/@devaaravindlutukurty/how-data-is-stored-in-siem-solution-d6344c14ba32?source=rss------bug_bounty-5 | Devaaravindlutukurty | siem, information-technology, bug-bounty, cybersecurity, computer-science | 11-Aug-2025 |
| IDOR in GOV.UK — Delete 10 million Appeal Case In JastOne Click | https://deepsystems.medium.com/idor-in-gov-uk-delete-10-million-appeal-case-in-jastone-click-6e45117cf727?source=rss------bug_bounty-5 | whiterose | bug-bounty, hackerone, hacking | 11-Aug-2025 |
| [02]. How do I create my luck in bug bounty? | https://medium.com/@yoyomiski/2-how-do-i-create-my-luck-in-bug-bounty-2186c426c452?source=rss------bug_bounty-5 | yoyomiski | hackerone, bug-bounty, bug-bounty-tips, penetration-testing, bug-bounty-writeup | 11-Aug-2025 |
| No More Photo-to-Art Transformations? OpenAI’s Image Rules Just Changed | https://codewithvamp.medium.com/no-more-photo-to-art-transformations-openais-image-rules-just-changed-8aa373c6d89a?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | chatgpt, chatbots, studio-ghibli, cybersecurity, bug-bounty | 11-Aug-2025 |
| BugBounty Hunting for XSS in 2025 | https://medium.com/@gordiefx/bugbounty-hunting-for-xss-in-2025-0d8f2fd32291?source=rss------bug_bounty-5 | Gordon Charles | threat-hunting, web-security, bug-bounty, cybersecurity, xss-vulnerability | 11-Aug-2025 |
| Bug Bounty: Master the Art of Finding Hidden Entry Points -Web Recon | https://medium.com/@rajkumarkumawat.workup/bug-bounty-master-the-art-of-finding-hidden-entry-points-web-recon-ed19a33ad4f9?source=rss------bug_bounty-5 | Rajkumar Kumawat | bug-bounty, cybersecurity, ethical-hacking, web-recon | 11-Aug-2025 |
| The Power of Recon: Accessing Target’s Secure Emails Without Login | https://medium.com/@GERRR4Y/the-power-of-recon-accessing-targets-secure-emails-without-login-eac2e4f473a2?source=rss------bug_bounty-5 | Aya Ayman(GERR4Y) | bug-bounty, broken-access-control, information-disclosure | 11-Aug-2025 |
| “Day 8: Mobile Hacking — How I Cracked a Banking App’s PIN in 10 Seconds ($5000 Bug)” | https://infosecwriteups.com/day-8-mobile-hacking-how-i-cracked-a-banking-apps-pin-in-10-seconds-5000-bug-575bd10823cd?source=rss------bug_bounty-5 | Aman Sharma | cybersecurity, money, bug-bounty, hacking, technology | 11-Aug-2025 |
| Increasing the Impact of Blind XSS When Triggered in Electron.js Apps | https://medium.com/@lachhamza02/increasing-the-impact-of-blind-xss-when-triggered-in-electron-js-apps-12df2f49a896?source=rss------bug_bounty-5 | Lachhamza | cybersecurity, ethical-hacking, xss-attack, writeup, bug-bounty | 11-Aug-2025 |
| How data/logs are stored in SIEM solution? | https://medium.com/@devaaravindlutukurty/how-data-is-stored-in-siem-solution-d6344c14ba32?source=rss------bug_bounty-5 | Devaaravindlutukurty | siem, information-technology, bug-bounty, cybersecurity, computer-science | 11-Aug-2025 |
| CyberRecon Arsenal — My All-in-One Cybersecurity Reconnaissance Toolkit (Now Free for Everyone!) | https://medium.com/@letchupkt/cyberrecon-arsenal-my-all-in-one-cybersecurity-reconnaissance-toolkit-now-free-for-everyone-ade7f12e738b?source=rss------bug_bounty-5 | LETCHU PKT | cyberrecon, bug-bounty, ethical-hacking, cybersecurity, hacking-tools | 11-Aug-2025 |
| CVE-2025–8088 (WinRar Zero-Day) | https://medium.com/@hackson/cve-2025-8088-winrar-zero-day-2e5407fcca0b?source=rss------bug_bounty-5 | HacksonAloysis | cybersecurity, bug-bounty, hacking, information-security, threat-intelligence | 11-Aug-2025 |
| Portswigger Essential-skills Labs — Practitioner | https://medium.com/@sl0th0x87/portswigger-essential-skills-labs-practitioner-5387e5896eab?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, burpsuite, portswigger, essential-skills, walkthrough | 11-Aug-2025 |
| NETWORK ENUMERATION — NMAP | https://medium.com/@P4RAD0X/network-enumeration-nmap-6018ef8a7556?source=rss------bug_bounty-5 | PARADOX | hackthebox, cybersecurity, hacking, bug-bounty, infosec | 11-Aug-2025 |
| Portswigger Server-Side Request Forgery (SSRF) Labs — Practitioner | https://medium.com/@sl0th0x87/portswigger-server-side-request-forgery-ssrf-labs-practitioner-1a9782bf775a?source=rss------bug_bounty-5 | Mike (sl0th0x87) | burpsuite, bug-bounty, walkthrough, ssrf, portswigger | 11-Aug-2025 |
| Portswigger Server-Side Request Forgery (SSRF) Labs — Apprentice | https://medium.com/@sl0th0x87/portswigger-server-side-request-forgery-ssrf-labs-apprentice-dc4c6a0802d7?source=rss------bug_bounty-5 | Mike (sl0th0x87) | portswigger, ssrf, walkthrough, burpsuite, bug-bounty | 11-Aug-2025 |
| Portswigger Server-Side Request Forgery (SSRF) Labs — Expert | https://medium.com/@sl0th0x87/portswigger-server-side-request-forgery-ssrf-labs-expert-68066b696b0c?source=rss------bug_bounty-5 | Mike (sl0th0x87) | walkthrough, burpsuite, ssrf, bug-bounty, portswigger | 11-Aug-2025 |
| Up and Running with GitHound for secret scanning in 5 minutes | https://medium.com/@tillson.galloway/up-and-running-with-githound-for-secret-scanning-in-5-minutes-e644890e9e16?source=rss------bug_bounty-5 | Tillson Galloway | bug-bounty, red-team, hacking, recon, information-security | 11-Aug-2025 |
| The 3 Tools you need for Bug Bounty / Pentesting | https://medium.com/@jeosantos2005/the-3-tools-you-need-for-bug-bounty-pentesting-f6f2b94229a4?source=rss------bug_bounty-5 | Jeosantos | web-security, bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips | 11-Aug-2025 |
| Where Malware Hides on Your Computer (and How to Find It) | https://medium.com/@paritoshblogs/where-malware-hides-on-your-computer-and-how-to-find-it-c5169134bd19?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, malware, information-technology, cybersecurity | 10-Aug-2025 |
| How to jailbreak iOS 15.8.4 | https://0xjar.medium.com/how-to-jailbreak-ios-15-8-4-c510fd6d8fdc?source=rss------bug_bounty-5 | 0xjar | mobile-penetration-test, penetration-testing, jailbreak, bug-bounty, ios-penetration-testing | 10-Aug-2025 |
| Customer Transaction PII Data Exposed via Google Dorking | https://infosecwriteups.com/third-party-google-dorking-e90c2126a3dc?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | hacking, programming, cybersecurity, bug-bounty, technology | 10-Aug-2025 |
| How Hackers Track Your Location in 2025 — And How You Can Protect Yourself Legally | https://medium.com/@syedmhatim/how-hackers-track-your-location-in-2025-and-how-you-can-protect-yourself-legally-61c8681d3dca?source=rss------bug_bounty-5 | Syed Muhammad Hatim Javaid | cybersecurity, tracking, ethical-hacking, bug-bounty, penetration-testing | 10-Aug-2025 |
| A Deep Dive into a Potential Privilege Escalation Issue | https://infosecwriteups.com/a-deep-dive-into-a-potential-privilege-escalation-issue-313a6040d458?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, vulnerability, technology, shopify, bug-bounty | 10-Aug-2025 |
| [01]. I got my first bounty white playing bug bounty | https://medium.com/@yoyomiski/01-i-got-my-first-bounty-white-playing-bug-bounty-52acfd9fbc0e?source=rss------bug_bounty-5 | yoyomiski | bug-bounty, bug-bounty-tips, hackerone, bugbounty-writeup, pentesting | 10-Aug-2025 |
| Folder of Fortune: My Accidental Journey into Misconfigured Cloud Bucket Goldmines | https://medium.com/@iski/folder-of-fortune-my-accidental-journey-into-misconfigured-cloud-bucket-goldmines-8ab7b42c287b?source=rss------bug_bounty-5 | Iski | cybersecurity, infosec, bug-bounty, hacking, money | 10-Aug-2025 |
| Stealing All Saved Passwords From Any PC: The LaZagne Method (Ethical Guide) | https://medium.com/@verylazytech/stealing-all-saved-passwords-from-any-pc-the-lazagne-method-ethical-guide-c3f37de9ad99?source=rss------bug_bounty-5 | Very Lazy Tech | red-team, bug-bounty, penetration-testing, passwords, ethical-hacking | 10-Aug-2025 |
| Genius XSS ! | https://medium.com/@zatikyan.sevada/genius-xss-1dfa7d2d8e89?source=rss------bug_bounty-5 | Sevada797 | hacking, pentesting, xss-attack, cybersecurity, bug-bounty | 10-Aug-2025 |
| Open Redirect: The Hidden Doorway for Phishing and Session Hijacking | https://medium.com/@EroHack0/open-redirect-the-hidden-doorway-for-phishing-and-session-hijacking-1a7afd64ca3b?source=rss------bug_bounty-5 | EroHack | phishing, bug-bounty, open-redirect, vulnerability, xss-attack | 10-Aug-2025 |
| Bug Bounty Goldmine — Host Header Attack for Password Reset Poisoning | https://medium.com/@zoningxtr/bug-bounty-goldmine-host-header-attack-for-password-reset-poisoning-8d3a4520049b?source=rss------bug_bounty-5 | Zoningxtr | information-security, penetration-testing, bug-bounty, cybersecurity, web-development | 10-Aug-2025 |
| “Day 7: API Hacking — How I Stole 5000 OAuth Tokens & Won $300” | https://infosecwriteups.com/day-7-api-hacking-how-i-stole-5000-oauth-tokens-won-300-49b988ed8e21?source=rss------bug_bounty-5 | Aman Sharma | programming, hacking, money, bug-bounty, technology | 10-Aug-2025 |
| Business Logic Vulnerabilities or Application Logic Vulnerabilities or simply “logic flaws” | https://medium.com/@zodiacHacker/business-logic-vulnerabilities-or-application-logic-vulnerabilities-or-simply-logic-flaws-d88d7c3fd5a1?source=rss------bug_bounty-5 | Zodiac Hacker | business-logic-flaw, bug-bounty, hacking, vulnerability | 10-Aug-2025 |
| Zero-Click ATO via Reusable Password Reset Token | https://medium.com/@mahmodziad40/zero-click-ato-via-reusable-password-reset-token-3299d0bfc005?source=rss------bug_bounty-5 | httpzuz | idor, bug-bounty-tips, bug-bounty, xss-attack, bug-bounty-writeup | 10-Aug-2025 |
| CTF Day(49) | https://medium.com/@ahmednarmer1/ctf-day-49-c950baf3510d?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, web-penetration-testing, web-pen-testing, cybersecurity, bug-bounty | 10-Aug-2025 |
| One Room a Day: How TryHackMe Made Learning Cybersecurity Fun | https://medium.com/@mr.madani22/one-room-a-day-how-tryhackme-made-learning-cybersecurity-fun-054c6110db58?source=rss------bug_bounty-5 | Mr Madani | bug-bounty, tryhackme, cybersecurity, penetration-testing, learning | 10-Aug-2025 |
| I Found $3,500 in a Public Git Config | https://medium.com/@ibtissamhammadi1/i-found-3-500-in-a-public-git-config-3b9fc5e47c4b?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, ethical-hacking, web-development, cybersecurity, git | 10-Aug-2025 |
| Server-Side Request Forgery (SSRF — OWASP A10): A Complete Guide to Hacking and Bug Bounties | https://medium.com/@jpablo13/server-side-request-forgery-ssrf-owasp-a10-a-complete-guide-to-hacking-and-bug-bounties-0b8f0825f83c?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, ethical-hacking, bug-bounty, web-development, cybersecurity | 09-Aug-2025 |
| #ERROR! | https://medium.com/@madhan21901/how-a-missing-email-verification-can-lock-you-out-forever-7b4b6a3631e7?source=rss------bug_bounty-5 | Madhan | bug-bounty, infosec, web-security-testing, mobile-app-security, cybersecurity | 09-Aug-2025 |
| DNSSEC Explained | https://medium.com/zero2root/dnssec-explained-2e76ef993984?source=rss------bug_bounty-5 | DarKVoicE | cybersecurity, ethical-hacking, hacking, bug-bounty, writehere | 09-Aug-2025 |
| Improper Media Deletion How I Found Publicly Accessible Deleted Files | https://saconychukwu.medium.com/improper-media-deletion-how-i-found-publicly-accessible-deleted-files-391c4cdac844?source=rss------bug_bounty-5 | Chidubem Chukwu | bug-bounty-tips, bugbounty-writeup, bug-bounty-hunter, bug-bounty, cybersecurity | 09-Aug-2025 |
| Unexpected Input Caused Functionality Confusion — How I Discovered a P4 Bug with Real Impact | https://medium.com/@mohamedsaidibrahim/unexpected-input-caused-functionality-confusion-how-i-discovered-a-p4-bug-with-real-impact-4a7af7fec7e3?source=rss------bug_bounty-5 | Mohamed Said Ibrahim | web-security, security-testing, bug-hunting, bug-bounty, bug-bounty-tips | 09-Aug-2025 |
| Breaking Email Validation | https://medium.com/@madhan21901/breaking-email-validation-cbc29bf2ff9f?source=rss------bug_bounty-5 | Madhan | infosec, bug-bounty, cybersecurity, red-team, web-penetration-testing | 09-Aug-2025 |
| DNS — The Internet’s Address Book, Attack Surface & Bughunter’s Playbook | https://medium.com/meetcyber/dns-the-internets-address-book-attack-surface-bughunter-s-playbook-021ec78a68c6?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, bug-bounty, information-security, cybersecurity, infosec | 09-Aug-2025 |
| Bug Bounty Hunting: JWT Vulnerabilities Deeply Explained (Live Step-by-Step Practical) | https://medium.com/@shaikhminhaz1975/bug-bounty-hunting-jwt-vulnerabilities-deeply-explained-live-step-by-step-practical-c344ce723906?source=rss------bug_bounty-5 | Shaikh Minhaz | penetration-testing, cybersecurity, ethical-hacking, bug-bounty, jwt | 09-Aug-2025 |
| “Day 6: RCE — How I Hacked a Bank Using a Forgotten Excel File” | https://infosecwriteups.com/day-6-rce-how-i-hacked-a-bank-using-a-forgotten-excel-file-e0eb14758136?source=rss------bug_bounty-5 | Aman Sharma | money, hacking, bug-bounty, programming, technology | 09-Aug-2025 |
| Single API Key from a Chrome Extension Led to 5.2 Million Exposed Customer Records | https://infosecwriteups.com/single-api-key-from-a-chrome-extension-led-to-5-2-million-exposed-customer-records-0cc81545a7a8?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-writeup, bug-bounty, bug-bounty-tips, idor, ethical-hacking | 09-Aug-2025 |
| Why I’m learning SOC Level 1 | https://medium.com/@Mainekdeveloper/why-im-learning-soc-level-1-33ab244b3e62?source=rss------bug_bounty-5 | Mainekdeveloper | cybersecurity, technology, soc-level-one, bug-bounty, hacker | 09-Aug-2025 |
| The Easiest Bug Bounty of 2025 | https://medium.com/@jeosantos2005/the-easiest-bug-bounty-of-2025-165c57df3e14?source=rss------bug_bounty-5 | Jeosantos | bug-bounty-writeup, bug-bounty, cybersecurity, web-security, bug-bounty-tips | 09-Aug-2025 |
| Dont know where to start, info overload ? | https://medium.com/@nuggs313/dont-know-where-to-start-info-overload-82ae1ea72cf3?source=rss------bug_bounty-5 | Mr. Bones | bug-bounty, technology, red-team, hacking, tech | 09-Aug-2025 |
| No Browser, No Noise — How I Found 3 Bugs Using Censys (Zero → Master Playbook) | https://medium.com/meetcyber/no-browser-no-noise-how-i-found-3-bugs-using-censys-zero-master-playbook-64d50bfab0d0?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, ai, bug-bounty, cybersecurity | 09-Aug-2025 |
| Censys Chronicles: How I Found 3 Bugs Without Touching a Browser” | https://javascript.plainenglish.io/censys-chronicles-how-i-found-3-bugs-without-touching-a-browser-5745affb9f64?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, infosec, cybersecurity, bug-bounty | 09-Aug-2025 |
| Masked Menace: How a Fake OAuth App and a Loose GraphQL Endpoint Stole the Real Keys | https://infosecwriteups.com/masked-menace-how-a-fake-oauth-app-and-a-loose-graphql-endpoint-stole-the-real-keys-cec06ed964cd?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, infosec, money, hacking | 09-Aug-2025 |
| Server-side request forgery (SSRF) | https://medium.com/@adithyakr007/server-side-request-forgery-ssrf-e8438a1b0f58?source=rss------bug_bounty-5 | Zodiac Hacker | bug-bounty, server-side, ssrf, vulnerability, hacking | 09-Aug-2025 |
| Broken Access Controls & IDOR: Access control vulnerabilities and privilege escalation | https://medium.com/@adithyakr007/broken-access-controls-idor-access-control-vulnerabilities-and-privilege-escalation-a2c77559b98d?source=rss------bug_bounty-5 | Zodiac Hacker | bug-bounty, zodiac, broken-access-control, hacking, idor | 09-Aug-2025 |
| A little something to get you started—Hacker101 CTF Write-Up | https://medium.com/@Mirage43/a-little-something-to-get-you-started-hacker101-ctf-write-up-64da79a810ac?source=rss------bug_bounty-5 | Mirage43 | cybersecurity, hacker101-ctf, capture-the-flag, vapt, bug-bounty | 09-Aug-2025 |
| TryHackMe | NahamStore | WriteUp | https://medium.com/h7w/tryhackme-nahamstore-writeup-b85e61c1e462?source=rss------bug_bounty-5 | Axoloth | tryhackme, bug-bounty, tryhackme-writeup, cybersecurity, tryhackme-walkthrough | 09-Aug-2025 |
| Introducing JWTauditor: Your Ultimate Burp Suite Extension for Passive JWT Security Analysis | https://medium.com/@mohamednfe78/introducing-jwtauditor-your-ultimate-burp-suite-extension-for-passive-jwt-security-analysis-2c9cf4c56703?source=rss------bug_bounty-5 | Mohamed.cybersec | burpsuite-extension, web-application-security, bug-bounty, ethical-hacking, penetration-testing | 09-Aug-2025 |
| Dynamic Malware Analysis : Watch Malware Reveal Its Secrets — LIVE! | https://medium.com/@paritoshblogs/dynamic-malware-analysis-watch-malware-reveal-its-secrets-live-98ad5426e678?source=rss------bug_bounty-5 | Paritosh | malware, cybersecurity, hacking, dynamic-malware-analysis, bug-bounty | 09-Aug-2025 |
| From Browser to Shell: Hacking the Edex-UI Terminal | https://medium.com/@aufzayed/from-browser-to-shell-hacking-the-edex-ui-terminal-7dfe757893fe?source=rss------bug_bounty-5 | Abdelrhman Zayed | bug-bounty, hacking, pentest, pentesting, penetration-testing | 09-Aug-2025 |
| 0click Account Take over via Auth0 | https://medium.com/@a7med.ctf/0click-account-take-over-via-auth0-3a39cbe080cc?source=rss------bug_bounty-5 | Ahmed Mahmoued | bug-bounty-tips, cybersecurity, bug-bounty | 09-Aug-2025 |
| My Accidental Bug Bounty from a Random Query | https://medium.com/@ibtissamhammadi1/my-accidental-bug-bounty-from-a-random-query-b8ae134158ed?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, ethical-hacking, intigriti, shodan, bug-bounty | 09-Aug-2025 |
| Day4 Recon: Hunting Hidden Attack Surfaces , using Nmap, Masscan & Dirsearch for Service &… | https://infosecwriteups.com/day4-recon-hunting-hidden-attack-surfaces-using-nmap-masscan-dirsearch-for-service-c623de2fcdf6?source=rss------bug_bounty-5 | Ayush Kumar | cybersecurity, linux, hacking, bug-bounty, ethical-hacking | 09-Aug-2025 |
| The Bug Hunter’s Guide to Host Header Attacks for Password Reset Poisoning | https://medium.com/@zoningxtr/the-bug-hunters-guide-to-host-header-attacks-for-password-reset-poisoning-a08f607a1a6b?source=rss------bug_bounty-5 | Zoningxtr | python, penetration-testing, bug-bounty, cybersecurity, web-development | 09-Aug-2025 |
| Advanced WAF Bypass Using a Single cURL Command | https://medium.com/@aminefarah802/advanced-waf-bypass-using-a-single-curl-command-6042a643948e?source=rss------bug_bounty-5 | KILLUA_UCHIHA | life-hacking, bug-bounty-tips, bug-bounty, bug-bounty-writeup, bypass | 09-Aug-2025 |
| Yo fam, you thought bug bounty was wild before? | https://medium.com/@viratavi1223/yo-fam-you-thought-bug-bounty-was-wild-before-21895e235605?source=rss------bug_bounty-5 | Viratavi | bug-bounty, offsec, ethical-hacking, google-bug, cybersecurity | 09-Aug-2025 |
| CTF Day(48) | https://medium.com/@ahmednarmer1/ctf-day-48-a054295afb49?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, ctf, web-penetration-testing, web-pen-testing, cybersecurity | 09-Aug-2025 |
| Exposing Secrets in Public Repositories Using GitLeaks: A Bug Bounty Learning Experience | https://medium.com/@amitgy04/exposing-secrets-in-public-repositories-using-gitleaks-a-bug-bounty-learning-experience-bfbbd9e1310a?source=rss------bug_bounty-5 | Amitishacked | hacking, bug-bounty, cybersecurity, sensitive-data, security | 09-Aug-2025 |
| The Forgotten SSRF Vector (CVE-2020–10770) | https://medium.com/h7w/the-forgotten-ssrf-vector-cve-2020-10770-8bf04bfd4be9?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty, hacking, penetration-testing, tips-and-tricks | 08-Aug-2025 |
| Server-Side Request Forgery (SSRF — OWASP A10): Guía para Hacking y Bug Bounty | https://medium.com/@jpablo13/server-side-request-forgery-ssrf-owasp-a10-gu%C3%ADa-para-hacking-y-bug-bounty-3705bbc5f283?source=rss------bug_bounty-5 | JPablo13 | web-development, ethical-hacking, penetration-testing, cybersecurity, bug-bounty | 08-Aug-2025 |
| Exploiting XSS to Bypass CSRF Defenses: Change Victim’s Email | https://infosecwriteups.com/exploiting-xss-to-bypass-csrf-defenses-change-victims-email-dcdcbfe1d5df?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, stored-xss-csrf-bypass, exploiting-xss-csrf, cross-site-scripting, bug-bounty | 08-Aug-2025 |
| Think Fast: How Auto-Complete Suggested Me Passwords That Weren’t Mine ᾒf | https://infosecwriteups.com/think-fast-how-auto-complete-suggested-me-passwords-that-werent-mine-%E1%BE%92f-d5c26ad34a3a?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, infosec, cybersecurity, money | 08-Aug-2025 |
| Bug Bounty Methodology for Finding Bugs Easily | https://infosecwriteups.com/bug-bounty-methodology-for-finding-bugs-easily-26e6bb3fc5a7?source=rss------bug_bounty-5 | Vipul Sonule | ai, hacking, programming, cybersecurity, bug-bounty | 08-Aug-2025 |
| How I Bypassed a Strict WAF Using SQL Injection Tricks | https://infosecwriteups.com/how-i-bypassed-a-strict-waf-using-sql-injection-tricks-b0a500b712d8?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, bug-bounty, sql-injection, cloudflare, ethical-hacking | 08-Aug-2025 |
| How I Became a University’s Worst Cybersecurity Nightmare And Forced an Upgrade | https://kkonann.medium.com/how-i-became-a-universitys-worst-cybersecurity-nightmare-and-forced-an-upgrade-d0cdf2494eaa?source=rss------bug_bounty-5 | KonaN | pentesting, bug-bounty, technology, cybersecurity, hacking | 08-Aug-2025 |
| Bifrost Launches $500,000 Bug Bounty with Immunefi — One Critical Find Could Change Everything | https://medium.com/@crypto_ser_/bifrost-launches-500-000-bug-bounty-with-immunefi-one-critical-find-could-change-everything-39d3cbd30fbb?source=rss------bug_bounty-5 | Crypto Ser | bug-bounty, polkadot, vdot, immunefi, bifrost-finance | 08-Aug-2025 |
| Credential Stuffing: How One Stolen Password Can Unlock Thousands of Accounts | https://medium.com/@alexandrevandammepro/credential-stuffing-how-one-stolen-password-can-unlock-thousands-of-accounts-3a38658c2df8?source=rss------bug_bounty-5 | Alexandre Vandamme | bug-bounty, account-takeover, bots, threat-intelligence, passwords | 08-Aug-2025 |
| How I Found a Logout Flaw That Kept Sessions Alive — A Real-World Bug Bounty Lesson | https://medium.com/@amitgy04/how-i-found-a-logout-flaw-that-kept-sessions-alive-a-real-world-bug-bounty-lesson-d0151fa1a097?source=rss------bug_bounty-5 | Amitishacked | cybersecurity, bug-bounty, hacking, security, web-security | 08-Aug-2025 |
| How I Chained Rate Limiting to Earn a Spot in Apple’s Hall of Fame | https://medium.com/@anonymousshetty2003/how-i-chained-rate-limiting-to-earn-a-spot-in-apples-hall-of-fame-f78305760462?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips, ethical-hacking | 08-Aug-2025 |
| Business Logic Flaw in Invitation Feature Allows Full Account Takeover | https://medium.com/@robisubagja158/business-logic-flaw-in-invitation-feature-allows-full-account-takeover-9e55ba0cc273?source=rss------bug_bounty-5 | Robi Mohamad subagja | bug-bounty, cybersecurity, account-takeover, business-logic-flaw | 08-Aug-2025 |
| HTTP/1.1 Its No Longer Safe | https://medium.com/@astraliva/http-1-1-its-no-longer-safe-2cb5a4ebe150?source=rss------bug_bounty-5 | Astraliva | bug-bounty, hacking, penetration-testing, http-request-smuggling, cybersecurity | 08-Aug-2025 |
| HTTP Request Smuggling: From Basics to Bounty | https://medium.com/@jayeshkunwal/http-request-smuggling-from-basics-to-bounty-4a799f2e18c2?source=rss------bug_bounty-5 | Jayesh kunwal | bug-bounty-tips, bugbounty-writeup, bug-bounty, http-request-smuggling, web-application-security | 08-Aug-2025 |
| Become a hacker — 101, A list of resources | https://thexssrat.medium.com/become-a-hacker-101-a-list-of-resources-2e4c3f9b3d59?source=rss------bug_bounty-5 | Thexssrat | ethical-hacking, hacking, bug-bounty | 08-Aug-2025 |
| From Zero to Hero | https://medium.com/@xsh4n4/from-zero-to-hero-6ee8b6333aca?source=rss------bug_bounty-5 | Suhana Shaik | crypto, vulnerability, bugs, cybersecurity, bug-bounty | 08-Aug-2025 |
| Account Takeover via Email Injection Tricks | https://medium.com/@7error/account-takeover-via-email-injection-tricks-db7701f3cddd?source=rss------bug_bounty-5 | 7error | bug-bounty, bug-hunting | 08-Aug-2025 |
| Dork to find Laravel Debug Mode Enabled | https://medium.com/meetcyber/dork-to-find-laravel-debug-mode-enabled-253d1d1e97c8?source=rss------bug_bounty-5 | AbhirupKonwar | ethical-hacking, bug-bounty-tips, osint, bug-bounty, pentesting | 08-Aug-2025 |
| I Found a $3,330 Bug Using Extract Grep Curl | https://medium.com/@ibtissamhammadi1/i-found-a-3-330-bug-using-extract-grep-curl-9d52a463888b?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, bug-bounty, passive-income, cybersecurity, tech | 08-Aug-2025 |
| SQL Injection Web Security Academy Union attack & Blind SQL | https://medium.com/@adithyakr007/sql-injection-web-security-academy-union-attack-blind-sql-6842b100dc56?source=rss------bug_bounty-5 | Zodiac | vulnerability, web, hacking, sql-injection, bug-bounty | 08-Aug-2025 |
| Prototype Pollution | https://medium.com/@adithyakr007/prototype-pollution-b7eb6998149b?source=rss------bug_bounty-5 | Zodiac | vulnerability, web, hacking, prototype-pollution, bug-bounty | 08-Aug-2025 |
| Finding My First Bug —Documenting My Bug Bounty Journey | https://medium.com/@calvaryhasarrived/finding-my-first-bug-documenting-my-bug-bounty-journey-b47f9ae28f7b?source=rss------bug_bounty-5 | Calvaryhasarrived | bug-bounty, ethical-hacking, information-security, cybersecurity | 08-Aug-2025 |
| The Bug That Made McDonald’s Ice Cream Machines Self-Destruct | https://medium.com/@sohail_saifi/the-bug-that-made-mcdonalds-ice-cream-machines-self-destruct-7afc768023ac?source=rss------bug_bounty-5 | Sohail Saifi | programming, mcdonalds, software-development, computer-science, bug-bounty | 08-Aug-2025 |
| Breaking the Limits: Exploiting a Race Condition to Bypass Free Plan Restrictions | https://keroayman77.medium.com/breaking-the-limits-exploiting-a-race-condition-to-bypass-free-plan-restrictions-122a4221c23e?source=rss------bug_bounty-5 | Kerolos Ayman | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 08-Aug-2025 |
| Bypassing UI Restrictions to Rename an Organization by Request Manipulation | https://keroayman77.medium.com/bypassing-ui-restrictions-to-rename-an-organization-393a972636a2?source=rss------bug_bounty-5 | Kerolos Ayman | bug-bounty, bug-bounty-tips, bug-bounty-writeup | 08-Aug-2025 |
| Week 1 of My 90-Day Challenge: The Journey Begins! | https://medium.com/@sl0th0x87/week-1-of-my-90-day-challenge-the-journey-begins-0675c0f9ddc2?source=rss------bug_bounty-5 | Mike (sl0th0x87) | challenge, bug-bounty, cybersecurity, weekly-report, about-me | 08-Aug-2025 |
| Portswigger File Upload Vulnerabilities Labs — Practitioner | https://medium.com/@sl0th0x87/portswigger-file-upload-vulnerabilities-labs-practitioner-19a802f3af06?source=rss------bug_bounty-5 | Mike (sl0th0x87) | file-upload-vulnerability, bug-bounty, portswigger, walkthrough, burpsuite | 08-Aug-2025 |
| Portswigger File upload vulnerabilities Labs — Apprentice | https://medium.com/@sl0th0x87/portswigger-file-upload-vulnerabilities-labs-apprentice-72afc7cd1a9a?source=rss------bug_bounty-5 | Mike (sl0th0x87) | walkthrough, portswigger, bug-bounty, burpsuite, file-upload-vulnerability | 08-Aug-2025 |
| Portswigger File Upload Vulnerabilities Labs — Expert | https://medium.com/@sl0th0x87/portswigger-file-upload-vulnerabilities-labs-expert-10d23530ebbd?source=rss------bug_bounty-5 | Mike (sl0th0x87) | burpsuite, file-upload-vulnerability, bug-bounty, walkthrough, portswigger | 08-Aug-2025 |
| CVE-2025-4388 HackerOne Duplicate Report | https://cybersecuritywriteups.com/cve-2025-4388-hackerone-duplicate-report-0a1b34444293?source=rss------bug_bounty-5 | AbhirupKonwar | xss-vulnerability, bug-bounty-tips, xss-attack, bug-bounty, cross-site-scripting | 08-Aug-2025 |
| 0-Click Account Takeover via OAuth Misconfiguration | https://saeidmicro.medium.com/0-click-account-takeover-via-oauth-misconfiguration-24058cbee2a2?source=rss------bug_bounty-5 | Saeid Khater | bug-bounty, account-takeover | 08-Aug-2025 |
| How I Earned $1,375 from a Remote Code Execution (RCE) Bug — A Bug Bounty Story | https://medium.com/@ekenejosepha1/how-i-earned-1-375-from-a-remote-code-execution-rce-bug-a-bug-bounty-story-b5c912395278?source=rss------bug_bounty-5 | Joseph jr | penetration-testing, bug-bounty-writeup, bug-bounty, cybersecurity, ethical-hacking | 07-Aug-2025 |
| ️♂️ 20 Recon Tools Every Bug Bounty Hunter Should Know (With Real Use Cases) | https://medium.com/@ekenejosepha1/%EF%B8%8F-%EF%B8%8F-20-recon-tools-every-bug-bounty-hunter-should-know-with-real-use-cases-27f68beb035c?source=rss------bug_bounty-5 | Joseph jr | devsecops, bug-bounty, ethical-hacking, penetration-testing, bug-bounty-writeup | 07-Aug-2025 |
| How Nmap Helped Me Land My First $2,000 Bug Bounty (Beginner-Friendly Pentest Story) | https://medium.com/@ekenejosepha1/how-nmap-helped-me-land-my-first-2-000-bug-bounty-beginner-friendly-pentest-story-0f6289d1659b?source=rss------bug_bounty-5 | Joseph jr | bug-bounty-tips, penetration-testing, bug-bounty, bug-bounty-writeup, ethical-hacking | 07-Aug-2025 |
| Earned $3,500 : How I Gained Shell Access on a Company | https://medium.com/@carylrobert16/how-i-gained-shell-access-on-a-company-server-and-earned-3-500-legally-bug-bounty-case-study-63ea522b4bed?source=rss------bug_bounty-5 | Carylrobert | bug-bounty-tips, bug-bounty-writeup, ethical-hacking, bug-bounty, penetration-testing | 07-Aug-2025 |
| Picture Perfect Exploit: How Image Uploads Turned Into Shell Access | https://infosecwriteups.com/picture-perfect-exploit-how-image-uploads-turned-into-shell-access-473659d49020?source=rss------bug_bounty-5 | Iski | hacking, infosec, bug-bounty, cybersecurity, money | 07-Aug-2025 |
| (Access Control) Lab: Method-based access control can be circumvented | 2025 | https://medium.com/@robohunt/access-control-lab-method-based-access-control-can-be-circumvented-2025-a04d76831cac?source=rss------bug_bounty-5 | Ananda | writeup, access-control, cybersecurity, bug-bounty, portswigger | 07-Aug-2025 |
| Injection Vulnerabilities Demystified: SQLi, Command Injection, and XSS | https://medium.com/@vivekbhatt2002/injection-vulnerabilities-demystified-sqli-command-injection-and-xss-f4a16ef82fdb?source=rss------bug_bounty-5 | YoungerSibling | command-injection, xss-attack, penetration-testing, bug-bounty, sql-injection | 07-Aug-2025 |
| Exploiting Cross-Site Scripting (XSS) to Capture Passwords | https://infosecwriteups.com/exploiting-cross-site-scripting-xss-to-capture-passwords-371670c3dc03?source=rss------bug_bounty-5 | Bash Overflow | exploiting-xss, bug-bounty, cross-site-scripting, bug-bounty-tips, stored-xss | 07-Aug-2025 |
| (Access Control) Lab: URL-based access control can be circumvented | 2025 | https://medium.com/@robohunt/access-control-lab-url-based-access-control-can-be-circumvented-2025-9232e5ccf81b?source=rss------bug_bounty-5 | Ananda | portswigger, access-control, writeup, bug-bounty, cybersecurity | 07-Aug-2025 |
| Juicy 401: The Unauthorized Goldmine | https://medium.com/meetcyber/juicy-401-the-unauthorized-goldmine-2021900bf910?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, information-security, cybersecurity, infosec | 07-Aug-2025 |
| S3 Subdomain Takeover!!! | https://medium.com/@0xchoudhary/s3-subdomain-takeover-0e2b1bba25f4?source=rss------bug_bounty-5 | Sushil Choudhary | bug-bounty, hackathons, hackerone, bug-bounty-writeup, hacking | 07-Aug-2025 |
| How Nmap $4,000 Helped Me Earn in a Single Bug Bounty — Full Recon Walkthrough | https://medium.com/@sales.mohammedgabic/how-nmap-4-000-helped-me-earn-in-a-single-bug-bounty-full-recon-walkthrough-49c3f9709cee?source=rss------bug_bounty-5 | Mohammed Gabic | bug-bounty-tips, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 07-Aug-2025 |
| How I Found a SQL Injection on an E-Commerce Platform — Step-by-Step Bug Bounty Guide | https://medium.com/@sales.mohammedgabic/how-i-found-a-sql-injection-on-an-e-commerce-platform-step-by-step-bug-bounty-guide-d9fa3a705b9b?source=rss------bug_bounty-5 | Mohammed Gabic | bug-bounty-tips, penetration-testing, bug-bounty-writeup, bug-bounty, ethical-hacking | 07-Aug-2025 |
| What is JWT (JSON Web Token)? | https://systemweakness.com/what-is-jwt-json-web-token-bc3120758458?source=rss------bug_bounty-5 | Maverick Steel | bug-bounty, firewall, jwt, website, json-web-token | 07-Aug-2025 |
| From Input Field to Admin Panel: Real-World Web App Pentest on target.in | https://medium.com/@samruthsriram/from-input-field-to-admin-panel-real-world-web-app-pentest-on-target-in-5b8fc84a50ff?source=rss------bug_bounty-5 | Samruth Sriram D | web-security, penetration-testing, bug-bounty, cybersecurity | 07-Aug-2025 |
| What is PutraGPT? : Your AI-Powered Assistant for Bug Bounty Recon and Exploitation | https://medium.com/@zinomoneyexcell/what-is-putragpt-your-ai-powered-assistant-for-bug-bounty-recon-and-exploitation-297a03e04ac6?source=rss------bug_bounty-5 | Ezekiel peter | bug-bounty, penetration-testing, bug-bounty-tips, devsecops, ethical-hacking | 07-Aug-2025 |
| How I Bagged $2,500 with a Simple XSS Using Burp Suite | https://medium.com/@zinomoneyexcell/how-i-bagged-2-500-with-a-simple-xss-using-burp-suite-0b57e485c98f?source=rss------bug_bounty-5 | Ezekiel peter | penetration-testing, ethical-hacking, cybersecurity, bug-bounty-writeup, bug-bounty | 07-Aug-2025 |
| I Asked Shodan, It Gave Me a Bounty Says ‘Sure, Why Not?’” $$ | https://medium.com/@a0xtrojan/i-asked-shodan-it-gave-me-a-bounty-says-sure-why-not-5bae4ecc79a8?source=rss------bug_bounty-5 | A0X_Trojan | cybersecurity, bug-bounty, intigriti, rxss, medium | 07-Aug-2025 |
| ZoomEye BugBounty Radar Best Practice | https://medium.com/@zoomeye_team/zoomeye-bugbounty-radar-best-practice-9fed04bd4ff2?source=rss------bug_bounty-5 | ZoomEye | osint, bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 07-Aug-2025 |
| RE_verseDIS CTFlearn Reverse Engineering Challenge — Write-up | https://medium.com/@elmin.farzaliyev/re-versedis-ctflearn-reverse-engineering-challenge-write-up-c6fa983db42a?source=rss------bug_bounty-5 | Elmin Farzaliyev | linux, bug-bounty, reverse-engineering, cybersecurity, c-sharp-programming | 07-Aug-2025 |
| How I Earned $1,752 Using Just Nmap: A Bug Bounty Recon Success Story | https://medium.com/@zinomoneyexcell/how-i-earned-1-752-using-just-nmap-a-bug-bounty-recon-success-story-1101c726959a?source=rss------bug_bounty-5 | Ezekiel peter | devsecops, bug-bounty, bug-bounty-writeup, penetration-testing, ethical-hacking | 07-Aug-2025 |
| How a Simple XSS Flaw Gave Me Admin Access | https://medium.com/@ibtissamhammadi1/how-a-simple-xss-flaw-gave-me-admin-access-2795a6940c89?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, ethical-hacking, bug-bounty, hacking, xss-attack | 07-Aug-2025 |
| Advanced Account Takeover Techniques: A Hacker’s Playbook for Awareness | https://elcazad0r.medium.com/advanced-account-takeover-techniques-a-hackers-playbook-for-awareness-149754bad5af?source=rss------bug_bounty-5 | EL_Cazad0r | cybersecurity, bug-bounty, ethical-hacking, bug-bounty-tips, bug-bounty-writeup | 07-Aug-2025 |
| How I Found Sensitive Crypto Transaction Data in a Public JavaScript File | https://medium.com/@jallaludinozi25/how-i-found-sensitive-crypto-transaction-data-in-a-public-javascript-file-2f33866feaf6?source=rss------bug_bounty-5 | OziXploit | cybersecurity, bug-bounty | 07-Aug-2025 |
| ️ From Public Sheet to API Takeover: Google Sheets Misconfig + Hardcoded Private Key (Bug Bounty) | https://medium.com/@salaheddine_kalada/%EF%B8%8F-from-public-sheet-to-api-takeover-google-sheets-misconfig-hardcoded-private-key-bug-bounty-2dc13e235236?source=rss------bug_bounty-5 | Salaheddine KALADA | bugbounty-writeup, bug-bounty-tips, bugbounty-poc, bug-bounty, bug-bounty-writeup | 07-Aug-2025 |
| Audio Upload Functionality: End-to-End Guide for Security Testers | https://medium.com/meetcyber/audio-upload-functionality-end-to-end-guide-for-security-testers-701ab79bbeeb?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, ai, cybersecurity, infosec | 07-Aug-2025 |
| Bug Hunting Like No One’s Thought Of: Quantum Tactics, AI Evolution, and Security Concepts From… | https://medium.com/@quantumbug/bug-hunting-like-no-ones-thought-of-quantum-tactics-ai-evolution-and-security-concepts-from-14b07e8a2633?source=rss------bug_bounty-5 | Peter Tompson | quantum-computing, ai-in-security, ethical-hacking, cybersecurity, bug-bounty | 07-Aug-2025 |
| “Day 5: SSRF — How I Hacked AWS Keys & Stole $15,000 in Cloud Credits” | https://infosecwriteups.com/day-5-ssrf-how-i-hacked-aws-keys-stole-15-000-in-cloud-credits-ed521d7525f9?source=rss------bug_bounty-5 | Aman Sharma | technology, programming, cybersecurity, bug-bounty, hacking | 07-Aug-2025 |
| How I Got a P3 in NASA | https://medium.com/@ghostvirus62/how-i-got-a-p3-in-nasa-5d98f07d888f?source=rss------bug_bounty-5 | ghostvirus | nasa-vdp, nasa, bugbounty-writeup, bug-bounty, cybersecurity | 07-Aug-2025 |
| ‘Day 5 Of 5000 Hour Hacker’ | https://medium.com/@0RedX_/day-4-of-5000-hour-hacker-78d9de3ebbfe?source=rss------bug_bounty-5 | Red-X | js, technology, bug-bounty, javascript, cybersecurity | 07-Aug-2025 |
| Broken OAuth Linking | https://brbr0s.medium.com/broken-oauth-linking-94308b7d423e?source=rss------bug_bounty-5 | brbr0s | oauth, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 07-Aug-2025 |
| Access Bank Account Information via Response Manipulation | https://brbr0s.medium.com/access-bank-account-information-via-response-manipulation-b373c9e4b536?source=rss------bug_bounty-5 | brbr0s | bug-bounty, bug-bounty-tips, bug-bounty-writeup, broken-access-control, response-manipulation | 07-Aug-2025 |
| Monitor HTTP Response Headers Like a Pro: Introducing Header Change Notifier for Burp Suite | https://medium.com/@mohamednfe78/monitor-http-response-headers-like-a-pro-introducing-header-change-notifier-for-burp-suite-b1494028b4db?source=rss------bug_bounty-5 | Mohamed.cybersec | cybersecurity-tools, http-headers, bug-bounty, web-security, burpsuite | 07-Aug-2025 |
| ZERO-DAY CVE-2025–24893 “XWiki Platform — Remote Code Execution” POC | https://medium.com/@hariharanhex00/zero-day-cve-2025-24893-xwiki-platform-remote-code-execution-poc-00bd2ca3a93d?source=rss------bug_bounty-5 | HariHaranK | bug-bounty, hacking-tools, bug-bounty-writeup, hacking, bug-bounty-tips | 07-Aug-2025 |
| Unauthorized Disclosure of Private Emails via WakaTime Private Leaderboards | https://medium.com/@regan_temudo/unauthorized-disclosure-of-private-emails-via-wakatime-private-leaderboards-197361b80476?source=rss------bug_bounty-5 | Regan Temudo | security-research, information-disclosure, cyber-security-awareness, bug-bounty, privacy | 07-Aug-2025 |
| OpenAIがgpt-ossセキュリティハッカソンを開催(2025年8月8日公開) | https://medium.com/@esasahara/openai%E3%81%8Cgpt-oss%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%83%8F%E3%83%83%E3%82%AB%E3%82%BD%E3%83%B3%E3%82%92%E9%96%8B%E5%82%AC-2025%E5%B9%B48%E6%9C%888%E6%97%A5%E5%85%AC%E9%96%8B-d2d429c6fa25?source=rss------bug_bounty-5 | Eiji Sasahara, Ph.D., MBA | openai, red-teaming, bug-bounty, gpt-oss | 07-Aug-2025 |
| Bug Bounty Journey — Valid Report Part 9 | https://medium.com/@0xF3r4t/bug-bounty-journey-valid-report-part-9-879e35be5ff6?source=rss------bug_bounty-5 | 0xF3r4t | bug-bounty, appsec, email-verification-bypass | 07-Aug-2025 |
| Exploiting Cross-Site Scripting (XSS) to Steal Cookies — Takeover Using Cookie-Editor | https://bashoverflow.medium.com/exploiting-cross-site-scripting-xss-to-steal-cookies-takeover-using-cookie-editor-abd98e0849d2?source=rss------bug_bounty-5 | Bash Overflow | steal-session-cookies, bug-bounty, session-hijacking-xss, cross-site-scripting, stored-xss | 06-Aug-2025 |
| Security Logging and Monitoring Failures (OWASP A09): Complete Hacking and Bug Bounty Guide | https://medium.com/@jpablo13/security-logging-and-monitoring-failures-owasp-a09-complete-hacking-and-bug-bounty-guide-8533fa2d8c3d?source=rss------bug_bounty-5 | JPablo13 | web-development, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 06-Aug-2025 |
| Zip Me In: How I Used Archive Bombs and Zip Slip to Write Anywhere | https://infosecwriteups.com/zip-me-in-how-i-used-archive-bombs-and-zip-slip-to-write-anywhere-4032dda9c04f?source=rss------bug_bounty-5 | Iski | hacking, money, cybersecurity, infosec, bug-bounty | 06-Aug-2025 |
| “401 Isn’t a Wall — It’s a Window: Turning Unauthorized Into Unlocked” | https://medium.com/meetcyber/401-isnt-a-wall-it-s-a-window-turning-unauthorized-into-unlocked-4ce72cd382be?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, ai, bug-bounty, infosec | 06-Aug-2025 |
| ️ Microsoft’s $5M Zero Day Quest Returns: A Game-Changer in Cybersecurity Research | https://medium.com/@dutttarush9360/%EF%B8%8F-microsofts-5m-zero-day-quest-returns-a-game-changer-in-cybersecurity-research-a92dffb89646?source=rss------bug_bounty-5 | Tarush Sharma | information-security, microsoft, cybersecurity, bug-bounty, cyber-security-awareness | 06-Aug-2025 |
| Day3 Recon: Subdomain Enumeration for Beginners: A Hands-On Guide Using Sublist3r, Amass & Gobuster | https://infosecwriteups.com/day3-recon-subdomain-enumeration-for-beginners-a-hands-on-guide-using-sublist3r-amass-gobuster-20ce5cacab81?source=rss------bug_bounty-5 | Ayush Kumar | hacking, ethical-hacking, bug-bounty, linux, cybersecurity | 06-Aug-2025 |
| “404 + JS + GitHub = A Triple Threat Attack Surface” | https://javascript.plainenglish.io/404-js-github-a-triple-threat-attack-surface-82775003f078?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, bug-bounty, infosec, ai, information-security | 06-Aug-2025 |
| 404 Isn’t Always Safe: How “Helpful” Error Pages Leak Real Secrets | https://medium.com/meetcyber/404-isnt-always-safe-how-helpful-error-pages-leak-real-secrets-b6996f0283a3?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, cybersecurity, information-security, bug-bounty | 06-Aug-2025 |
| Exploiting Cross-Site Scripting (XSS) to Steal Cookies — Takeover Using Cookie-Editor | https://infosecwriteups.com/exploiting-cross-site-scripting-xss-to-steal-cookies-takeover-using-cookie-editor-abd98e0849d2?source=rss------bug_bounty-5 | Bash Overflow | steal-session-cookies, bug-bounty, session-hijacking-xss, cross-site-scripting, stored-xss | 06-Aug-2025 |
| Unlock Burp Suite Pro on macOS for Free — Full Setup Guide (No Errors) | https://medium.com/@amrealabhishek/unlock-burp-suite-pro-on-macos-for-free-full-setup-guide-no-errors-82f64eb09055?source=rss------bug_bounty-5 | Amreal Abhishek | trends, cybersecurity, ethical-hacking, medium, bug-bounty | 06-Aug-2025 |
| “Juicy 403” — When Forbidden Means You’re Close to Gold | https://medium.com/meetcyber/juicy-403-when-forbidden-means-youre-close-to-gold-47a2aa5d5696?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, cybersecurity, infosec, bug-bounty | 06-Aug-2025 |
| I built my own web Pentesting labs in a few minutes. this is how… | https://medium.com/@rmxx/i-built-my-own-web-pentesting-labs-in-a-few-minutes-this-is-how-57a4f034e91a?source=rss------bug_bounty-5 | Oussama BEDLOU | pentesting, ai, bug-bounty, full-stack, cybersecurity | 06-Aug-2025 |
| Why Nmap Fails on Vercel, Netlify & Cloud Targets — And What You Should Use Instead | https://medium.com/@vivekbhatt2002/why-nmap-fails-on-vercel-netlify-cloud-targets-and-what-you-should-use-instead-ad0c741c11d0?source=rss------bug_bounty-5 | YoungerSibling | reconnaissance, penetration-testing, ethical-hacking, bug-bounty, cloud-security | 06-Aug-2025 |
| Looking for active domains to tackle bug bounties and pen-testing! | https://medium.com/@advaniar/looking-for-active-domains-to-tackle-bug-bounties-and-pen-testing-25bf65638b0e?source=rss------bug_bounty-5 | Advaniar | reconnaissance, bug-bounty, web-penetration-testing, osint, infosec | 06-Aug-2025 |
| I Found a $2,500 Security Flaw in 15 Minutes | https://medium.com/@ibtissamhammadi1/i-found-a-2-500-security-flaw-in-15-minutes-64550f55aaab?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, make-money-online, bug-bounty, technology, hacking | 06-Aug-2025 |
| Cisco VPN Bug Bounty: Path Traversal and XSS via SAML Endpoint Exploitation | https://infosecwriteups.com/cisco-vpn-bug-bounty-path-traversal-and-xss-via-saml-endpoint-exploitation-2b615249b31f?source=rss------bug_bounty-5 | Aftab Raja | penetration-testing, ethical-hacking, bug-bounty, cybersecurity, networking | 06-Aug-2025 |
| Bug Hunting 101: How to Find XSS in Unusual Places ️ | https://infosecwriteups.com/bug-hunting-101-how-to-find-xss-in-unusual-places-%EF%B8%8F-08a132dac4c3?source=rss------bug_bounty-5 | Vipul Sonule | ai, bug-bounty, tech, cybersecurity, programming | 06-Aug-2025 |
| Business Logic Flaw That No One Knows About ! | https://infosecwriteups.com/business-logic-flaw-that-no-one-knows-about-836859be1471?source=rss------bug_bounty-5 | TSxNINJA | infosec, cybersecurity, bug-bounty-tips, hacking, bug-bounty | 06-Aug-2025 |
| ️ From Enumeration to RCE: A Real-World Capture the Flag Experience | https://medium.com/@samruthsriram/%EF%B8%8F-from-enumeration-to-rce-a-real-world-capture-the-flag-experience-c573110bf091?source=rss------bug_bounty-5 | Samruth Sriram D | penetration-testing, bug-bounty, cybersecurity, infosec, ctf | 06-Aug-2025 |
| Overflow Ops: The Complete Hands-On Guide ️ to Integer Exploits in Ethereum ⚙️ | https://medium.com/@vishhxyz/overflow-ops-the-complete-hands-on-guide-%EF%B8%8F-to-integer-exploits-in-ethereum-%EF%B8%8F-0fe262d5c2a4?source=rss------bug_bounty-5 | vishhxyz | ethereum, solidity-tutorial, hacking, bug-bounty, bugs | 06-Aug-2025 |
| ‘Day 2&3&4 Of 5000 Hour Hacker’ | https://medium.com/@0RedX_/day-2-3-4-of-5000-hour-hacker-c95538328f51?source=rss------bug_bounty-5 | Red-X | information-security, from-zero-to-hero, programming, bug-bounty, cybersecurity | 06-Aug-2025 |
| Day 4: IDOR — How I Hacked a Dating App & Accessed Every User’s Private Data | https://infosecwriteups.com/day-4-idor-how-i-hacked-a-dating-app-accessed-every-users-private-data-b59a485f455f?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, learning, cybersecurity, technology, money | 06-Aug-2025 |
| Bug Bounty Hunting — The Journey Begins | https://medium.com/@Far_Horizon/bug-bounty-hunting-the-journey-begins-29521aa7c72d?source=rss------bug_bounty-5 | Horizon | cybersecurity, hacking, infosec, web-security, bug-bounty | 06-Aug-2025 |
| “Day 3: XSS Deep Dive — From Alert(1) to Account Takeovers” | https://infosecwriteups.com/day-3-xss-deep-dive-from-alert-1-to-account-takeovers-cf422ec57def?source=rss------bug_bounty-5 | Aman Sharma | programming, money, bug-bounty, cybersecurity, technology | 06-Aug-2025 |
| How I Found 50+ Open Redirects Using Automation and Simple Bash Scripts | https://dr34m14.medium.com/how-i-found-50-open-redirects-using-automation-and-simple-bash-scripts-91e3b92f5c69?source=rss------bug_bounty-5 | dr34m14 | vulnerability, bugbounty-tips, bug-bounty, bug-bounty-writeup, automation | 06-Aug-2025 |
| How Public Logs Can Leak Authentication Tokens — A Real Netlify Token Exposure Case | https://osintteam.blog/how-public-logs-can-leak-authentication-tokens-a-real-netlify-token-exposure-case-a08561b2aedb?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, penetration-testing, devops, vulnerability | 06-Aug-2025 |
| How a Broken Facebook Link Let Me Hijack User Traffic — Twice | https://medium.com/@vaaditya320/how-a-broken-facebook-link-let-me-hijack-user-traffic-twice-79caa1710f6c?source=rss------bug_bounty-5 | vaaditya320 | penetration-testing, ethical-hacking, hackerone, bug-bounty | 06-Aug-2025 |
| How to Discover Plain-Text Credentials Before Attackers Turn Them Against You | https://medium.com/@alexandrevandammepro/how-to-discover-plain-text-credentials-before-attackers-turn-them-against-you-e09b11085516?source=rss------bug_bounty-5 | Alexandre Vandamme | cybersecurity, technology, bug-bounty, infosec, information-security | 06-Aug-2025 |
| CTF Day(47) | https://medium.com/@ahmednarmer1/ctf-day-47-efe493fc5e12?source=rss------bug_bounty-5 | Ahmed Narmer | web-pen-testing, ctf, web-penetration-testing, cybersecurity, bug-bounty | 06-Aug-2025 |
| Security Logging and Monitoring Failures (OWASP A09): Guía Completa de Hacking, Bug Bounty | https://medium.com/@jpablo13/security-logging-and-monitoring-failures-owasp-a09-gu%C3%ADa-completa-de-hacking-bug-bounty-482e518699ca?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, ethical-hacking, bug-bounty, cybersecurity, web-development | 05-Aug-2025 |
| How to Build Your Own Burp Suite Extension (Python/Java) | https://medium.com/@paritoshblogs/how-to-build-your-own-burp-suite-extension-python-java-efc3c72a98e8?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, cybersecurity, burpsuite | 05-Aug-2025 |
| From PDF to Five-Figure Payday: When Legacy Docs Attack | https://medium.com/@armandjasharaj/from-pdf-to-five-figure-payday-when-legacy-docs-attack-05f35eb85164?source=rss------bug_bounty-5 | Armand Jasharaj | red-team, ethical-hacking, penetration-testing, bug-bounty, information-security | 05-Aug-2025 |
| 4. Top 10 Recon Tools I Use Every Day (With Pro Tips & Workflows) | https://medium.com/@kumawatabhijeet2002/4-top-10-recon-tools-i-use-every-day-with-pro-tips-workflows-61665e79e65d?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, bug-bounty, cybersecurity, bug-bounty-tips, hacking | 05-Aug-2025 |
| Forgotten by Design: How an Unused Subdomain Gave Me Full Cloud Access ☁️ | https://infosecwriteups.com/forgotten-by-design-how-an-unused-subdomain-gave-me-full-cloud-access-%EF%B8%8F-ba7f0c2b4ea2?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, cybersecurity, money, hacking | 05-Aug-2025 |
| XSS Reborn: 5 Killer Scenarios That Break Assumptions & Apps .. Advanced XSS Vol. 2 | https://medium.com/meetcyber/xss-reborn-5-killer-scenarios-that-break-assumptions-apps-advanced-xss-vol-2-f36eac655919?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, cybersecurity, ai, infosec | 05-Aug-2025 |
| How I Got on a US Government Hall of Fame in 5 Minutes. | https://medium.com/@devanshpatel930/how-i-got-on-a-us-government-hall-of-fame-in-5-minutes-280be3993f79?source=rss------bug_bounty-5 | Devansh Patel | bug-bounty-writeup, bugs, bug-bounty-tips, bug-bounty, cybersecurity | 05-Aug-2025 |
| XSS Trap Card Series — Vol. 1 | https://medium.com/@narendarlb123/xss-trap-card-series-vol-1-4a1fd177cc74?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, ai, infosec, cybersecurity, bug-bounty | 05-Aug-2025 |
| Subdomain Scanner to HTTP Hunter: | https://medium.com/meetcyber/subdomain-scanner-to-http-hunter-e1b8abaf6fb3?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, information-security, cybersecurity, bug-bounty, ai | 05-Aug-2025 |
| Filtering out Noise on Burp suite like a Pro | https://normalitee.medium.com/filtering-out-noise-on-burp-suite-like-a-pro-b3fa2423a34b?source=rss------bug_bounty-5 | Abdul Mazid | application-security, web-security, burpsuite, bug-bounty, pentesting | 05-Aug-2025 |
| Day2 Recon: Scope Discovery: Finding Every Domain & IP with WHOIS, reverse WHOIS, IP lookups… | https://infosecwriteups.com/day2-recon-scope-discovery-finding-every-domain-ip-with-whois-reverse-whois-ip-lookups-b69238aa5fe2?source=rss------bug_bounty-5 | Ayush Kumar | ethical-hacking, programming, cybersecurity, bug-bounty, linux | 05-Aug-2025 |
| Reflected XSS Made Easy: Catching Real Bugs in the Wild | https://infosecwriteups.com/reflected-xss-made-easy-catching-real-bugs-in-the-wild-4222376ae3ea?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tips-and-tricks, javascript, vulnerability, bug-bounty | 05-Aug-2025 |
| I Turned IDOR and XSS Into a Mass Account Takeover | https://infosecwriteups.com/i-turned-idor-and-xss-into-a-mass-account-takeover-a0b487c19366?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, idor, web-security, bug-bounty, xss-attack | 05-Aug-2025 |
| 25 Hidden Google Dorks for 2025 Bug Bounty Hunters: Real Targets, Real Bounties | https://medium.com/@qaafqasim/25-hidden-google-dorks-for-2025-bug-bounty-hunters-real-targets-real-bounties-0bf8dd18d8bb?source=rss------bug_bounty-5 | Qasim Mahmood Khalid | bug-bounty-tips, bug-bounty, google-dork, cybersecurity, hacking | 05-Aug-2025 |
| Bug Hunting Story: You Won’t Believe What I Found Hidden in a RetToken Parameter | https://infosecwriteups.com/bug-hunting-story-you-wont-believe-what-i-found-hidden-in-a-rettoken-parameter-781b9ec7e3f5?source=rss------bug_bounty-5 | Elie Attieh | information-security, pentesting, bug-bounty, hacking, cybersecurity | 05-Aug-2025 |
| Filtering out Noise on Burp suite like a Pro | https://normalitee.medium.com/filtering-out-noise-on-burp-suite-like-a-pro-b3fa2423a34b?source=rss------bug_bounty-5 | Abdul Mazid | infosec, web-security, burpsuite, bug-bounty, pentesting | 05-Aug-2025 |
| How I Found a $4,750 Security Flaw by Accident | https://medium.com/@ibtissamhammadi1/how-i-found-a-4-750-security-flaw-by-accident-6acb32eaede5?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, aws, jwt, bug-bounty, cybersecurity | 05-Aug-2025 |
| I Found a Major Privacy Leak in a Popular Social App Just Because a Friend Said “Check This Out” | https://kkonann.medium.com/i-found-a-major-privacy-leak-in-a-popular-social-app-just-because-a-friend-said-check-this-out-cd7edd798e32?source=rss------bug_bounty-5 | KonaN | bug-bounty, data-breach, penetration-testing, cybersecurity, hacking | 05-Aug-2025 |
| Open Redirect on Logout Page — When Shopping Got Too Redirected | https://medium.com/@aryamevada2853/open-redirect-on-logout-page-when-shopping-got-too-redirected-31549480a630?source=rss------bug_bounty-5 | Aryamevada | web-penetration-testing, open-redirection, bug-bounty, responsible-disclosure | 05-Aug-2025 |
| Reflected XSS Into a Template Literal With Angle Brackets, Single, Double Quotes, Backslash and… | https://bashoverflow.medium.com/reflected-xss-into-a-template-literal-with-angle-brackets-single-double-quotes-backslash-and-695c75db1c54?source=rss------bug_bounty-5 | Bash Overflow | reflected-xss, template-literal-xss, xss-in-template-strings, bug-bounty, unicode-escape-bypass | 05-Aug-2025 |
| Jangan dikit-dikit “Bypass”. Gak semua yang “Aneh” itu vulnerability | https://ronafebriana.medium.com/jangan-dikit-dikit-bypass-gak-semua-yang-aneh-itu-vulnerability-05b3482f5b14?source=rss------bug_bounty-5 | Rona Febriana | rona-febriana, authentication-bypass, cybersecurity, bug-hunting, bug-bounty | 05-Aug-2025 |
| Microsoft Raises Zero Day Quest Prize Pool to $5 Million to Tackle AI and Cloud Vulnerabilities | https://medium.com/@thedhruvsingh/microsoft-raises-zero-day-quest-prize-pool-to-5-million-to-tackle-ai-and-cloud-vulnerabilities-9425c7e6553d?source=rss------bug_bounty-5 | Dhruvdeep Singh | ai-security, microsoft, bug-bounty, cloud-security, zero-day | 05-Aug-2025 |
| How an API Token Flaw Let Me Bypass Premium Restrictions | https://medium.com/@secshubhamsharma/how-an-api-token-flaw-let-me-bypass-premium-restrictions-43a395f3ddd9?source=rss------bug_bounty-5 | Shubham Sharma | cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips, api | 05-Aug-2025 |
| Coinbase Breach: Threats Exposed | https://medium.com/@kalariyahet23/coinbase-breach-threats-exposed-f892a7945ca1?source=rss------bug_bounty-5 | Kalariya Het | breach, vulnerability, loss, coinbase, bug-bounty | 05-Aug-2025 |
| Portswigger XML External Entity (XXE) Injection Labs — Expert | https://medium.com/@sl0th0x87/portswigger-xml-external-entity-xxe-injection-labs-expert-6d2ff43b001f?source=rss------bug_bounty-5 | Mike (sl0th0x87) | walkthrough, xxe-injection, burpsuite, portswigger, bug-bounty | 05-Aug-2025 |
| Portswigger XML External Entity (XXE) Injection Labs — Apprentice | https://medium.com/@sl0th0x87/portswigger-xml-external-entity-xxe-injection-labs-apprentice-08830fc0ce2b?source=rss------bug_bounty-5 | Mike (sl0th0x87) | burpsuite, xxe-injection, walkthrough, portswigger, bug-bounty | 05-Aug-2025 |
| Portswigger XML External Entity (XXE) Injection Labs — Practitioner | https://medium.com/@sl0th0x87/portswigger-xml-external-entity-xxe-injection-labs-practitioner-2cbf5b357011?source=rss------bug_bounty-5 | Mike (sl0th0x87) | portswigger, burpsuite, walkthrough, bug-bounty, xxe-injection | 05-Aug-2025 |
| Starting Bug Bounty — Documenting My Journey | https://medium.com/@calvaryhasarrived/starting-bug-bounty-documenting-my-journey-54ae237d1467?source=rss------bug_bounty-5 | Calvaryhasarrived | penetration-testing, cybersecurity, bug-bounty, information-security, ethical-hacking | 05-Aug-2025 |
| Do you Practice, but Still Feel Stuck at Bug Bounty? | https://systemweakness.com/do-you-practice-but-still-feel-stuck-at-bug-bounty-6b80dba02403?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty, cybersecurity, bug-bounty-tips, red-teaming, bug-bounty-writeup | 05-Aug-2025 |
| [Web Security Academy] — Server-Side Vulnerabilities / Access Control | https://medium.com/@v0lts3c/web-security-academy-server-side-vulnerabilities-access-control-906564782917?source=rss------bug_bounty-5 | Voltsec | cybersecurity, web-security, bug-bounty, access-control, ctf-writeup | 05-Aug-2025 |
| CTF Day(46) | https://medium.com/@ahmednarmer1/ctf-day-46-10776d84ae32?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, web-penetration-testing, bug-bounty, web-pen-testing, ctf | 05-Aug-2025 |
| CTF Day(45) | https://medium.com/@ahmednarmer1/ctf-day-45-b47df7665c0f?source=rss------bug_bounty-5 | Ahmed Narmer | web-pen-testing, cybersecurity, bug-bounty, ctf, web-penetration-testing | 05-Aug-2025 |
| Portswigger Information disclosure Labs — Practitioner | https://medium.com/@sl0th0x87/portswigger-information-disclosure-labs-practitioner-028794b70321?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, burpsuite, walkthrough, portswigger, information-disclosure | 05-Aug-2025 |
| Portswigger Information Disclosure Labs — Apprentice | https://medium.com/@sl0th0x87/portswigger-information-disclosure-labs-apprentice-d009714c118a?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, portswigger, burpsuite, information-disclosure, walkthrough | 05-Aug-2025 |
| CTF Day(44) | https://medium.com/@ahmednarmer1/ctf-day-44-8f035cea69e7?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, web-pen-testing, ctf, cybersecurity, web-penetration-testing | 05-Aug-2025 |
| Bug Bounty Hunting — Are Self Hosted Programs Any Better? | https://medium.com/activated-thinker/bug-bounty-hunting-are-self-hosted-programs-any-better-797ecf90bc80?source=rss------bug_bounty-5 | Rehan Sohail | bug-bounty-writeup, bug-bounty, bug-bounty-tips, bug-bounty-hunting, activated-thinker | 05-Aug-2025 |
| Finding Hidden APIs & Parameters in Minutes with Burp Suite | https://medium.com/@paritoshblogs/finding-hidden-apis-parameters-in-minutes-with-burp-suite-562ed5c92504?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, api, burpsuite, hacking | 05-Aug-2025 |
| How I Discovered a Critical OTP Rate Limiting Vulnerability on a Bug Bounty Program | https://medium.com/@secourses8/how-i-discovered-a-critical-otp-rate-limiting-vulnerability-on-a-bug-bounty-program-e8386e857579?source=rss------bug_bounty-5 | Lime | bug-bounty | 05-Aug-2025 |
| When the Price Goes Wrong: $9K from 2 Price Manipulation | https://ay0ub-n0uri.medium.com/when-the-price-goes-wrong-9k-from-2-price-manipulation-343b839bd522?source=rss------bug_bounty-5 | Ay0ub N0uri | price-manipulation, writeup, bug-bounty | 05-Aug-2025 |
| ANDROID PENTESTING — PART 2 — STATIC ANALYSIS | https://infosecwriteups.com/android-pentesting-part-2-static-analysis-307844a36b50?source=rss------bug_bounty-5 | PARADOX | cybersecurity, pentesting, infosec, hacking, bug-bounty | 04-Aug-2025 |
| How to Find and Exploit Information Disclosure Vulnerabilities Like a Pro | https://infosecwriteups.com/how-to-find-and-exploit-information-disclosure-vulnerabilities-like-a-pro-a9386ef01000?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, tips-and-tricks, technology, vulnerability | 04-Aug-2025 |
| Reflected XSS with Some SVG Markup Allowed | https://infosecwriteups.com/reflected-xss-with-some-svg-markup-allowed-65e24224d819?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, reflected-xss, svg-injection, cross-site-scripting, bypassing-xss-filters | 04-Aug-2025 |
| Burp Suite + MITM + VPN = Full Traffic Hijack for Analysis | https://medium.com/@paritoshblogs/burp-suite-mitm-vpn-full-traffic-hijack-for-analysis-25c7a2390e16?source=rss------bug_bounty-5 | Paritosh | hacking, mobile-app-development, bug-bounty, burpsuite, chatgpt | 04-Aug-2025 |
| The Poisoned Pipeline: Exploiting CI/CD Secrets Without Accessing the Code | https://javascript.plainenglish.io/the-poisoned-pipeline-exploiting-ci-cd-secrets-without-accessing-the-code-f6a1aa32b67f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, ai, infosec, cybersecurity, bug-bounty | 04-Aug-2025 |
| DAY 1 Recon: Manual Reconnaissance: How I Explore Targets Like a Hacker (But With Good Intentions) | https://infosecwriteups.com/day-1-recon-manual-reconnaissance-how-i-explore-targets-like-a-hacker-but-with-good-intentions-04b61864d1ea?source=rss------bug_bounty-5 | Ayush Kumar | hacking, bug-bounty, ethical-hacking, programming, cybersecurity | 04-Aug-2025 |
| ⚔️ Burp Suite x AI: The Ultimate Payload Chaining Recon Engine | https://medium.com/meetcyber/%EF%B8%8F-burp-suite-x-ai-the-ultimate-payload-chaining-recon-engine-ac2af4c19c98?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, cybersecurity, ai, infosec | 04-Aug-2025 |
| ️ Ticket to Trouble: How I Hijacked Support Tickets to See Everyone’s Complaints ️ | https://infosecwriteups.com/%EF%B8%8F-ticket-to-trouble-how-i-hijacked-support-tickets-to-see-everyones-complaints-%EF%B8%8F-3fbcb33afdf7?source=rss------bug_bounty-5 | Iski | hacking, infosec, money, bug-bounty, cybersecurity | 04-Aug-2025 |
| Cómo organizar tus reportes de Bug Bounty y potenciar tu progreso con IA | https://gorkaaa.medium.com/c%C3%B3mo-organizar-tus-reportes-de-bug-bounty-y-potenciar-tu-progreso-con-ia-3dbe3a043828?source=rss------bug_bounty-5 | Gorka | bug-bounty, bug-bounty-tips, bug-bounty-hunter, bugbounty-writeup, bug-bounty-writeup | 04-Aug-2025 |
| You’re using GitHub dorks wrong: How to improve your search queries to find in-scope leaks faster | https://medium.com/@tillson.galloway/youre-using-github-dorks-wrong-how-to-improve-your-search-queries-to-find-in-scope-leaks-faster-165433700b46?source=rss------bug_bounty-5 | Tillson Galloway | github, bug-bounty, information-security, cybersecurity, hacking | 04-Aug-2025 |
| The Business Benefits of PCI DSS Compliance Beyond Security | https://medium.com/@forte.social/the-business-benefits-of-pci-dss-compliance-beyond-security-818ed689961b?source=rss------bug_bounty-5 | eSecForte Technologies | bug-bounty, cybersecurity, security, compliance, pci | 04-Aug-2025 |
| Top 5 Must-Have Elite OS’es For Hackers/Bug Bounty Hunters. | https://medium.com/meetcyber/top-5-must-have-elite-oses-for-hackers-bug-bounty-hunters-f63138454cad?source=rss------bug_bounty-5 | NnFace | bug-bounty, cybersecurity, operating-systems, kali-linux, hacking | 04-Aug-2025 |
| Chain Up Bugs — Web Application | https://medium.com/@zisansakibhaque/chain-up-bugs-web-application-8a0b1d148e5b?source=rss------bug_bounty-5 | Sakib Haque Zisan | ethical-hacking, bug-bounty, web-security | 04-Aug-2025 |
| Confluence Takeover: How a Simple Support Email Gave Me Full Wiki Access | https://medium.com/@kalvik/confluence-takeover-how-a-simple-support-email-gave-me-full-wiki-access-a9ac7c27fa31?source=rss------bug_bounty-5 | Vikash Maurya | bug-bounty, atlassian, penetration-testing, bug-bounty-writeup, hacking | 04-Aug-2025 |
| Subdomain Recon Playbook 2025 | https://medium.com/meetcyber/subdomain-recon-playbook-2025-cc768950dd74?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, bug-bounty, cybersecurity, infosec | 04-Aug-2025 |
| (Access Control) Lab: User role can be modified in user profile | 2025 | https://medium.com/@robohunt/access-control-lab-user-role-can-be-modified-in-user-profile-2025-b163d18ce3ee?source=rss------bug_bounty-5 | Ananda | access-control, writeup, cybersecurity, bug-bounty, portswigger | 04-Aug-2025 |
| MetaSpace Bug Bounty — Secure the Galaxy ️ | https://metaspace-metaverse.medium.com/metaspace-bug-bounty-secure-the-galaxy-%EF%B8%8F-af5b77ce02a3?source=rss------bug_bounty-5 | METASPACE | bugs, nft-gaming-platform, p2e-game, bug-bounty, bug-bounty-tips | 04-Aug-2025 |
| (Access Control) Lab: User role controlled by request parameter | 2025 | https://medium.com/@robohunt/access-control-lab-user-role-controlled-by-request-parameter-2025-94f8cd63b14a?source=rss------bug_bounty-5 | Ananda | bug-bounty, writeup, cybersecurity, access-control, portswigger | 04-Aug-2025 |
| ️♂️ How I Bypassed the “Admin” Name Filter on example.target.com with a Unicode Homoglyph | https://icecream23.medium.com/%EF%B8%8F-%EF%B8%8F-how-i-bypassed-the-admin-name-filter-on-example-target-com-with-a-unicode-homoglyph-ef653a59da5b?source=rss------bug_bounty-5 | Aman Bhuiyan | bug-bounty-tips, recon, bug-bounty | 04-Aug-2025 |
| The Future of the Vulnerability Researcher: A New Frontier Between Automation and Creativity | https://medium.com/@sevbandonmez/the-future-of-the-vulnerability-researcher-a-new-frontier-between-automation-and-creativity-3e744920d456?source=rss------bug_bounty-5 | Sevban Dönmez | cybersecurity, pentesting, bug-bounty, vulnerability-research, ai | 04-Aug-2025 |
| How I hacked Income Tax Portal Pt. 2 | https://adwaitug.medium.com/how-i-hacked-income-tax-portal-pt-2-b1d1a66c9639?source=rss------bug_bounty-5 | Adwait Gawade | bug-bounty, vulnerability, cybersecurity, nciipc | 04-Aug-2025 |
| Hi Researcher! | https://bugcrowd.medium.com/hi-researcher-d57ddfa29ddd?source=rss------bug_bounty-5 | Bugcrowd | bug-bounty, bug-bounty-writeup, bugcrowd, cybersecurity | 04-Aug-2025 |
| From Pentester to Tool Developer: How AI Broke Down the Coding Barrier in Cybersecurity | https://medium.com/@maxmuxammil/from-pentester-to-tool-developer-how-ai-broke-down-the-coding-barrier-in-cybersecurity-097de7388a06?source=rss------bug_bounty-5 | Max Muxammil | pentester, bug-bounty, web-security, web-application-security, offensive-security | 04-Aug-2025 |
| From Automated Tools to Manual Mastery | https://medium.com/meetcyber/from-automated-tools-to-manual-mastery-71f12ad80115?source=rss------bug_bounty-5 | Andrei Ivan | cybersecurity, bug-bounty-tips, ethical-hacking, infosec, bug-bounty | 04-Aug-2025 |
| Portswigger Academy: API testing Labs — Apprentice | https://medium.com/@sl0th0x87/portswigger-academy-api-testing-labs-apprentice-00e84e83886c?source=rss------bug_bounty-5 | Mike (sl0th0x87) | burpsuite, api-testing, bug-bounty, walkthrough, portswigger-lab | 04-Aug-2025 |
| Portswigger OS Command Injection Labs — Apprentice | https://medium.com/@sl0th0x87/portswigger-os-command-injection-labs-apprentice-025d9ab3f020?source=rss------bug_bounty-5 | Mike (sl0th0x87) | portswigger, os-command-injection, bug-bounty, burpsuite, walkthrough | 04-Aug-2025 |
| Portswigger API testing Labs — Expert | https://medium.com/@sl0th0x87/portswigger-api-testing-labs-expert-f89b3de213ac?source=rss------bug_bounty-5 | Mike (sl0th0x87) | walkthrough, api-testing, bug-bounty, portswigger, burpsuite | 04-Aug-2025 |
| Portswigger API testing Labs — Practitioner | https://medium.com/@sl0th0x87/portswigger-api-testing-labs-practitioner-96eafc51d047?source=rss------bug_bounty-5 | Mike (sl0th0x87) | burpsuite, bug-bounty, walkthrough, api-testing, portswigger | 04-Aug-2025 |
| Portswigger Path Traversal Labs — Apprentice | https://medium.com/@sl0th0x87/portswigger-path-traversal-labs-apprentice-5c176bd690a7?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, path-traversal, hacking, walkthrough, portswigger | 04-Aug-2025 |
| Portswigger OS Command Injection Labs — Practitioner | https://medium.com/@sl0th0x87/portswigger-os-command-injection-labs-practitioner-70bc241161c8?source=rss------bug_bounty-5 | Mike (sl0th0x87) | hacking, bug-bounty, walkthrough, portswigger, os-command-injection | 04-Aug-2025 |
| Nonce Upon a Time: A Small Misconfiguration to Account Takeover | https://medium.com/@xploiterd/nonce-upon-a-time-a-small-misconfiguration-to-account-takeover-a29a6baf1d18?source=rss------bug_bounty-5 | Rounak Dhadiwal | web-security, security, bug-bounty, xss-attack, csrf-bypass | 04-Aug-2025 |
| Which Linux Distro Should You Use for Hacking and Cybersecurity — and How? | https://medium.com/@ag.gholami.2006/which-linux-distro-should-you-use-for-hacking-and-cybersecurity-and-how-c0acabffb6db?source=rss------bug_bounty-5 | Ali Ziro | bug-bounty, kali-linux, hacking, cybersecurity, linux | 04-Aug-2025 |
| How to Detect Mass Error-Based SQL Injection with Google Dorks, FOFA, NUCLEI, and Automation | https://medium.com/@anonymoussaid27/how-to-detect-mass-error-based-sql-injection-with-google-dorks-fofa-nuclei-and-automation-8c6724ddd9d3?source=rss------bug_bounty-5 | Anonymous27 | fofa, sql-injection, reconnaissance, bug-bounty, web-security | 04-Aug-2025 |
| Automate Subdomain Discovery with Amass | https://medium.com/@mayank_prajapati/automate-subdomain-discovery-with-amass-57c3c665df61?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | cybersecurity, penetration-testing, hacking, security, bug-bounty | 04-Aug-2025 |
| When Every Alert Feels Urgent: How I Navigate Noise in the SOC | https://medium.com/@saumyakisuno/when-every-alert-feels-urgent-how-i-navigate-noise-in-the-soc-d721eafaa945?source=rss------bug_bounty-5 | Saumya Shree | life-hacking, cybersecurity, hacking, bug-bounty, security-operation-center | 04-Aug-2025 |
| Portswigger Path Traversal Labs — Practitioner | https://medium.com/@sl0th0x87/portswigger-path-traversal-labs-practitioner-e28541cf8134?source=rss------bug_bounty-5 | Mike (sl0th0x87) | hacking, portswigger, path-traversal, bug-bounty, walkthrough | 04-Aug-2025 |
| Cybersecurity Student Success Stories: Inspiring Journeys to Digital Defense | https://medium.com/@misterdoom07/cybersecurity-student-success-stories-inspiring-journeys-to-digital-defense-03e51470c540?source=rss------bug_bounty-5 | Hack Behind The Mask | cybersecurity, penetration-testing, bug-bounty, ethical-hacking, software-development | 04-Aug-2025 |
| Full LFI-to-RCE via Apache Access Logs | https://medium.com/@zoningxtr/full-lfi-to-rce-via-apache-access-logs-e521ec06ec1a?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, web-development, penetration-testing, cybersecurity, php | 04-Aug-2025 |
| Full Guide: From LFI to RCE via /var/log/apache2/error.log | https://medium.com/@zoningxtr/full-exploitation-guide-from-lfi-to-rce-via-var-log-apache2-error-log-0f364049b107?source=rss------bug_bounty-5 | Zoningxtr | web-development, python, bug-bounty, cybersecurity, penetration-testing | 04-Aug-2025 |
| From LFI to RCE via /var/log/sshd.log | https://medium.com/@zoningxtr/from-lfi-to-rce-via-var-log-sshd-log-1cd81cd318ef?source=rss------bug_bounty-5 | Zoningxtr | web-development, penetration-testing, bug-bounty, python, cybersecurity | 04-Aug-2025 |
| How Hackers hide Malware in image files — A black hat tactic. | https://err0rgod.medium.com/how-hackers-hide-malware-in-image-files-a-black-hat-tactic-efe0b2b5fb5c?source=rss------bug_bounty-5 | err0rgod | malware, technology, cybersecurity, hacking, bug-bounty | 04-Aug-2025 |
| Get Your First Bug in 7 Days — The Beginner's Bug Bounty Blueprint | https://medium.com/@misterdoom07/get-your-first-bug-in-7-days-the-beginners-bug-bounty-blueprint-865d2be6f9bb?source=rss------bug_bounty-5 | Hack Behind The Mask | bugbounty-writeup, bug-bounty, hacking, cybersecurity, penetration-testing | 04-Aug-2025 |
| I Found 50+ XSS Flaws Using Just My Browser | https://medium.com/@ibtissamhammadi1/i-found-50-xss-flaws-using-just-my-browser-a00caba76c48?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, cybersecurity, hacking, xss-attack, bug-bounty | 4-Aug-2025 |
| Potential XSS Vulnerability in Acronis Login Callback URL | https://osintteam.blog/potential-xss-vulnerability-in-acronis-login-callback-url-db0eb8b7b0c0?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, javascript, penetration-testing, xss-attack | 4-Aug-2025 |
| The 2025 GitHub Recon Checklist for Bug Bounty Hunters | https://medium.com/@tillson.galloway/the-2025-github-recon-checklist-for-bug-bounty-hunters-e626ee1a1012?source=rss------bug_bounty-5 | Tillson Galloway | bug-bounty, security, recon, cybersecurity, information-security | 04-Aug-2025 |
| Bypassing Authentication and Triggering XSS via Simple URL Manipulation | https://medium.com/@aloneinjector1/bypassing-authentication-and-triggering-xss-via-simple-url-manipulation-a3d56c66b136?source=rss------bug_bounty-5 | Fareed Ahmed | bug-bounty | 04-Aug-2025 |
| How a Simple .git/config Check Earned Me $1000 | https://medium.com/@syedshorox27/how-a-simple-git-config-check-earned-me-1000-23699662a134?source=rss------bug_bounty-5 | Minio Haxer | bugs, bug-bounty, penetration-testing, cybersecurity, hacking | 04-Aug-2025 |
| IDS Nedir ve Çeşitlerinde Bulunan Güvenlik Açıkları ? | https://medium.com/@eren.klai2/ids-nedir-ve-%C3%A7e%C5%9Fitlerinde-bulunan-g%C3%BCvenlik-a%C3%A7%C4%B1klar%C4%B1-6d5fbf4492b1?source=rss------bug_bounty-5 | ErenCatak | malware, network, bug-bounty, id | 04-Aug-2025 |
| How a Simple .git/config Check Earned Me €1000 | https://medium.com/@syedshorox27/how-a-simple-git-config-check-earned-me-1000-23699662a134?source=rss------bug_bounty-5 | Minio Haxer | bugs, bug-bounty, penetration-testing, cybersecurity, hacking | 04-Aug-2025 |
| How Race Conditions Let You Snatch Unlimited Free Domains | https://osintteam.blog/how-race-conditions-let-you-snatch-unlimited-free-domains-963deec411a5?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, penetration-testing, security, vulnerability | 03-Aug-2025 |
| How I Bypassed OTP Verification with Just a Script Tag | https://medium.com/@ivoaabreu/how-i-bypassed-otp-verification-with-just-a-script-tag-7cbb880060c3?source=rss------bug_bounty-5 | Ivoabreu | otp-bypass, authentication-bypass, bug-bounty, pentesting, business-logic-flaw | 03-Aug-2025 |
| Beyond Recon: 4 Battle-Tested Bug Bounty Strategies | https://medium.com/@aufzayed/beyond-recon-4-battle-tested-bug-bounty-strategies-bb24bb437b2c?source=rss------bug_bounty-5 | Abdelrhman Zayed | bug-bounty, bug-bounty-tips, penetration-testing, cybersecurity | 03-Aug-2025 |
| “Juicy 404s”: How Broken Pages Spilled Secrets and Gave Me Admin Access | https://systemweakness.com/juicy-404s-how-broken-pages-spilled-secrets-and-gave-me-admin-access-d87c938ac26b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, cybersecurity, information-security, ai, infosec | 03-Aug-2025 |
| “GitHub Recon: Hacking the Frontend Without Touching the App” | https://javascript.plainenglish.io/github-recon-hacking-the-frontend-without-touching-the-app-5d8798d5ac64?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, cybersecurity, ai, bug-bounty, information-security | 03-Aug-2025 |
| Burp Suite For Beginners: How I Learned the Proxy and Interceptor | https://infosecwriteups.com/burp-suite-for-beginners-how-i-learned-the-proxy-and-interceptor-dcb787dc89ae?source=rss------bug_bounty-5 | Ayush Kumar | programming, bug-bounty, hacking, ethical-hacking, cybersecurity | 03-Aug-2025 |
| How I Turned a Temporary Upload into Remote Code Execution Using LFI | https://medium.com/@zoningxtr/how-i-turned-a-temporary-upload-into-remote-code-execution-using-lfi-8339f75b6cb0?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, php, bug-bounty, cybersecurity, web-development | 03-Aug-2025 |
| (Access Control) Lab: Unprotected admin functionality with unpredictable URL | 2025 | https://medium.com/@robohunt/access-control-lab-unprotected-admin-functionality-with-unpredictable-url-2025-093b3fb3c6e1?source=rss------bug_bounty-5 | Ananda | bug-bounty, portswigger-lab, access-control, writeup, cybersecurity | 03-Aug-2025 |
| “Day 2: Reconnaissance — How I Found My First Real Bug (And How You Can Too)” | https://infosecwriteups.com/day-2-reconnaissance-how-i-found-my-first-real-bug-and-how-you-can-too-dbf81cb44069?source=rss------bug_bounty-5 | Aman Sharma | cybersecurity, money, bug-bounty, programming, technology | 03-Aug-2025 |
| Clean-Up Fail: How a Forgotten Admin Endpoint Let Me Drop All The Data ️ | https://infosecwriteups.com/clean-up-fail-how-a-forgotten-admin-endpoint-let-me-drop-all-the-data-%EF%B8%8F-1e1c376a986a?source=rss------bug_bounty-5 | Iski | money, hacking, infosec, bug-bounty, cybersecurity | 03-Aug-2025 |
| Extracting Data from the Subdomain Grave | https://ghostman01.medium.com/extracting-data-from-the-subdomain-grave-7fa1cc935e23?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, hacking, programming, cybersecurity, infosec | 03-Aug-2025 |
| PortSwigger XSS Labs: A Complete Guide to All 9 Apprentice-Level Challenges | https://medium.com/@thanujthilakarathne/portswigger-xss-labs-a-complete-guide-to-all-9-apprentice-level-challenges-6fba56da8635?source=rss------bug_bounty-5 | Thanuj Dilshan Thilakarathne | bug-bounty, xss-vulnerability, portswigger, ethical-hacking, web-security | 03-Aug-2025 |
| Breaking Access: Understanding IDOR Vulnerability and How to Find It Using Burp Suite | https://medium.com/@gabbytech01/breaking-access-understanding-idor-vulnerability-and-how-to-find-it-using-burp-suite-a85fb2762a90?source=rss------bug_bounty-5 | GABBYTECH | bug-bounty, idor, ethical-hacking | 03-Aug-2025 |
| Stored XSS to Privilege Escalation to Admin Takeover to Data Breach | https://ahmdhalabi.medium.com/stored-xss-to-privilege-escalation-to-admin-takeover-to-data-breach-6239d0cc3a5c?source=rss------bug_bounty-5 | Ahmad Halabi | bug-bounty, ethical-hacking, hacking, bug-bounty-writeup, bug-bounty-tips | 03-Aug-2025 |
| How I Logged in with an Expired Azure AD Password | https://sinhaamrit.medium.com/how-i-logged-in-with-an-expired-azure-ad-password-5668d0f36525?source=rss------bug_bounty-5 | Amrit Sinha | testing, cybersecurity, hacking, penetration-testing, bug-bounty | 03-Aug-2025 |
| The WAF Weakness Handbook: Confusing Firewalls Like a Pro | https://javascript.plainenglish.io/the-waf-weakness-handbook-confusing-firewalls-like-a-pro-d1ed97e888e2?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, cybersecurity, information-security, infosec | 03-Aug-2025 |
| “WAF This Way: Real-World Bypass Tactics from the Trenches” | https://medium.com/meetcyber/waf-this-way-real-world-bypass-tactics-from-the-trenches-0d2eaae9e32f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, information-security, cybersecurity, ai, infosec | 03-Aug-2025 |
| WAF Confusion Reloaded: Turning Firewalls into Exploit Accelerators | https://medium.com/meetcyber/waf-confusion-reloaded-turning-firewalls-into-exploit-accelerators-ccab152838cd?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, bug-bounty, infosec, information-security, ai | 03-Aug-2025 |
| From Beginner to $3000 Per Month PenTester: A Real-World Guide | https://medium.com/@rashad.desk/from-beginner-to-3000-per-month-pentester-a-real-world-guide-5bf3d0246a2a?source=rss------bug_bounty-5 | Rashadul Islam | cybersecurity, bug-bounty, freelancing, technology, ai | 03-Aug-2025 |
| Burp Suite x AI: The Mutation Engine That Thinks, Chains, and Exploits Like a Human | https://medium.com/meetcyber/burp-suite-x-ai-the-mutation-engine-that-thinks-chains-and-exploits-like-a-human-bf250df0ba0c?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, infosec, information-security, bug-bounty | 03-Aug-2025 |
| JavaScript + Burp + GitHub = Supply Chain Goldmine | https://javascript.plainenglish.io/javascript-burp-github-supply-chain-goldmine-81cbf39d575c?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, infosec, bug-bounty, cybersecurity | 03-Aug-2025 |
| Top 20 WAF Bypass Chains Using Burp Suite + AI | https://javascript.plainenglish.io/top-20-waf-bypass-chains-using-burp-suite-ai-5eefda3c3283?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, cybersecurity, infosec, bug-bounty, information-security | 03-Aug-2025 |
| Uma Nova Vitória: Ganhai um Estágio Na Minha Jornada Ética na Cibersegurança | https://medium.com/@franciscogonsalves068/uma-nova-vit%C3%B3ria-ganhai-um-est%C3%A1gio-na-minha-jornada-%C3%A9tica-na-ciberseguran%C3%A7a-9a2b48b257af?source=rss------bug_bounty-5 | Franciscogonsalves | bug-bounty, technology, hacker, mozambique, news | 03-Aug-2025 |
| Full Guide: From LFI to RCE via /var/log/mail.log ️♂️ | https://medium.com/@zoningxtr/full-guide-from-lfi-to-rce-via-var-log-mail-log-%EF%B8%8F-%EF%B8%8F-54b9686def62?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, cybersecurity, data-analysis, web-development, penetration-testing | 03-Aug-2025 |
| Minha Missão: Tornar Moçambique Mais Seguro dos Ataques Cibernéticos, Validado pela Comunidade… | https://medium.com/@franciscogonsalves068/minha-miss%C3%A3o-tornar-mo%C3%A7ambique-mais-seguro-dos-ataques-cibern%C3%A9ticos-validado-pela-comunidade-db391acc96a4?source=rss------bug_bounty-5 | Franciscogonsalves | black-history-month, technology, bug-bounty, hacker | 03-Aug-2025 |
| Chapter 18 (Task Management System): Adding Analytics and Reporting to the Task Management System | https://medium.com/@natarajanck2/chapter-18-task-management-system-adding-analytics-and-reporting-to-the-task-management-system-69163f78ff59?source=rss------bug_bounty-5 | Natarajan C K | system-design-concepts, web-development, security, web-applications, bug-bounty | 03-Aug-2025 |
| Minha Primeira Conquista como Bug Hunter: Como Duas Medalhas do Google Marcaram Minha Jornada | https://medium.com/@franciscogonsalves068/minha-primeira-conquista-como-bug-hunter-como-duas-medalhas-do-google-marcaram-minha-jornada-1e0ae4797a18?source=rss------bug_bounty-5 | Franciscogonsalves | technology, information-security, google, hacker, bug-bounty | 03-Aug-2025 |
| # I Found a Subdomain Takeover on Jio — But Got No Credit | https://medium.com/@cyberdivyanshu69/i-found-a-subdomain-takeover-on-jio-but-got-no-credit-c46222f8bf0a?source=rss------bug_bounty-5 | divyanshu | ethical-hacking, multiple-subdomains, cybersecurity, responsible-disclosure, bug-bounty | 03-Aug-2025 |
| How I Found 3 Security Bugs as a Beginner — My Real Bug Bounty Kickstart! | https://medium.com/@priyaagitaa/how-i-found-3-security-bugs-as-a-beginner-my-real-bug-bounty-kickstart-16332b8a62a8?source=rss------bug_bounty-5 | Priyaagitaa | web-application-security, idor, bug-bounty, business-logic-flaw, xss-vulnerability | 03-Aug-2025 |
| From LFI to RCE via /var/log/vsftpd.log | https://medium.com/@zoningxtr/from-lfi-to-rce-via-var-log-vsftpd-log-32a9b6ecf3ea?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, cybersecurity, web-development, python, penetration-testing | 03-Aug-2025 |
| This Simple Recon Trick Exposed 100+ Hidden Vulnerabilities | https://medium.com/@ibtissamhammadi1/this-simple-recon-trick-exposed-100-hidden-vulnerabilities-570f75a59df7?source=rss------bug_bounty-5 | Ibtissam hammadi | tech-tips, reconnaissance, hacking, cybersecurity, bug-bounty | 03-Aug-2025 |
| Uncovering SQL Injection | https://medium.com/@0x0mahmoud/uncovering-sql-injection-db784a309b48?source=rss------bug_bounty-5 | 0X0mahmoud | penetration-testing, pentesting, bug-bounty, bug-bounty-tips, sql-injection-attack | 03-Aug-2025 |
| Software and Data Integrity Failures (OWASP A08): For Hacking, Bug Bounty, and Web Development | https://medium.com/@jpablo13/software-and-data-integrity-failures-owasp-a08-for-hacking-bug-bounty-and-web-development-54403ea14351?source=rss------bug_bounty-5 | JPablo13 | web-development, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 02-Aug-2025 |
| Filtering In-Scope Domains Using Burp Suite Configuration and Domain List | https://medium.com/@yauagroups/filtering-in-scope-domains-using-burp-suite-configuration-and-domain-list-8c587fd4baa7?source=rss------bug_bounty-5 | mattyerz | script, bug-bounty, automation, burpsuite, penetration-testing | 02-Aug-2025 |
| How I Earned $50 for a Subdomain That Almost Got Taken Over | https://medium.com/@sangpalisha/how-i-earned-50-for-a-subdomain-that-almost-got-taken-over-51898b777e34?source=rss------bug_bounty-5 | Isha Sangpal | ethical-hacking, bug-bounty, penetration-testing, vulnerability, cybersecurity | 02-Aug-2025 |
| 0x4148 — Blind SQL Injection | https://medium.com/@nano246812/0x4148-blind-sql-injection-a1a5eded53a4?source=rss------bug_bounty-5 | Nano | red-team, bug-bounty, cybersecurity, blackhat, hacker | 02-Aug-2025 |
| Advanced Burp Suite Practical Guide: Real-World Web App Pentesting | https://medium.com/@paritoshblogs/advanced-burp-suite-practical-guide-real-world-web-app-pentesting-cde171611f6b?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, chatgpt, hacking, burpsuite | 02-Aug-2025 |
| #ERROR! | https://medium.com/@muhammadhabibur01/can-you-really-hack-facebook-the-truth-from-an-ethical-hackers-perspective-c110fc9b890d?source=rss------bug_bounty-5 | Md Habibur Rahman | online-safety, facebook-security, ethical-hacking, facebook-hack, bug-bounty | 02-Aug-2025 |
| How I found PII leak in Hotstar and earned a swag | https://medium.com/@deepk007/how-i-found-pii-leak-in-hotstar-03b12940fbf3?source=rss------bug_bounty-5 | DEep | ethical-hacking, bug-bounty, hacking, red-team, cybersecurity | 02-Aug-2025 |
| Stealth Mode: 10 Bash Tricks to Stay Hidden While Hacking | https://medium.com/@verylazytech/stealth-mode-10-bash-tricks-to-stay-hidden-while-hacking-6df8fdeabe3d?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, bash, hacking, bug-bounty, anonymous | 02-Aug-2025 |
| (Access Control) Lab: Unprotected Admin Functionality | 2025 | https://medium.com/@anandahunt/access-control-lab-unprotected-admin-functionality-2025-baf7cce78b05?source=rss------bug_bounty-5 | Ananda | portswigger-lab, writeup, access-control, cybersecurity, bug-bounty | 02-Aug-2025 |
| Exploiting URL-Based Price Manipulation on a Third-Party E-Commerce Cart | https://medium.com/@mrflash403/exploiting-url-based-price-manipulation-on-a-third-party-e-commerce-cart-19f7357b8410?source=rss------bug_bounty-5 | Mrflash | web-security, cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 02-Aug-2025 |
| From Prototype Pollution to DOM-based XSS: A Real-World Exploit Walkthrough | https://medium.com/@yashwanthstefen47/from-prototype-pollution-to-dom-based-xss-a-real-world-exploit-walkthrough-d586ba8e0fad?source=rss------bug_bounty-5 | Yashwanthstefen | bug-bounty, ethical-hacking, prototype-pollution, xss-attack | 02-Aug-2025 |
| Discovery of Blind SQL Injection and OS Command Injection Vulnerabilities in a University Portal | https://medium.com/@avyuktsec/discovery-of-blind-sql-injection-and-os-command-injection-vulnerabilities-in-a-university-portal-064929692019?source=rss------bug_bounty-5 | Avyukt Security | cybersecurity, hacking, pentesting, bug-bounty, ethical-hacking | 02-Aug-2025 |
| Package of Problems: How a Frontend NPM Library Leaked Internal API Keys | https://infosecwriteups.com/package-of-problems-how-a-frontend-npm-library-leaked-internal-api-keys-423784602d54?source=rss------bug_bounty-5 | Iski | money, bug-bounty, infosec, cybersecurity, hacking | 02-Aug-2025 |
| AS-REP Roasting Attack: Exploiting Kerberos Without Pre-Authentication | https://medium.com/@nomad8061/as-rep-roasting-attack-exploiting-kerberos-without-pre-authentication-37a2aa7499be?source=rss------bug_bounty-5 | Ahmed Badry | active-directory, bug-bounty, infrastructure, active-directory-security, active-directory-attack | 02-Aug-2025 |
| Reflected XSS in HTML Context with All Standard Tags Blocked Except Custom Ones | https://osintteam.blog/reflected-xss-in-html-context-with-all-standard-tags-blocked-except-custom-ones-72e2f0b34131?source=rss------bug_bounty-5 | Bash Overflow | tag-filter-bypass, xss-in-html-context, reflected-xss, xss-payload, bug-bounty | 02-Aug-2025 |
| Subdomain Enumeration Like a Pro — Complete Step-by-Step Guide (2025 Edition) | https://medium.com/@rajeshsahan507/subdomain-enumeration-like-a-pro-complete-step-by-step-guide-2025-edition-692becbf2522?source=rss------bug_bounty-5 | Rajesh Kumar | subdomains-enumeration, reconnaissance, cybersecurity, bug-bounty, information-gathering | 02-Aug-2025 |
| Tools Every Penetration Tester Must Build Themselves | https://medium.com/@suwhoami/tools-every-penetration-tester-must-build-themselves-6ee53ffb7680?source=rss------bug_bounty-5 | sudo whoami | pentesting, ethical-hacking, cybersecurity, bug-bounty, tools | 02-Aug-2025 |
| How I Got a $1000 Bounty for Chaining LFI to RCE via Log Injection | https://medium.com/@zoningxtr/how-i-got-a-1000-bounty-for-chaining-lfi-to-rce-via-log-injection-5147552ca2cc?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, bug-bounty, python, penetration-testing, web-development | 02-Aug-2025 |
| Insecure Refresh Token Usage Leads to Account Takeover (IDOR) | https://medium.com/@mhmodgm54/insecure-refresh-token-usage-leads-to-account-takeover-idor-14c4a9ec504b?source=rss------bug_bounty-5 | Mahmoud Gamal | writeup, penetration-testing, bug-bounty, cybersecurity, account-takeover | 02-Aug-2025 |
| It Took Me 10 Minutes to Find an BAC Vulnerability $$$ That Exposed Every Users Profiles . | https://medium.com/@mxfizz07/it-took-me-10-minutes-to-find-an-bac-vulnerability-that-exposed-every-users-profiles-8fcaa192fd20?source=rss------bug_bounty-5 | Mufij Topinkatti | bug-bounty, idor, bug-bounty-writeup, red-team, infosec | 02-Aug-2025 |
| Be Patient and Keep it Simple, The Bug is There | https://anasbetis023.medium.com/be-patient-and-keep-it-simple-the-bug-is-there-bdc93cfe50c6?source=rss------bug_bounty-5 | Anas H Hmaidy | cybersecurity, web-development, bugbounty-writeup, bug-bounty, bug-bounty-tips | 02-Aug-2025 |
| (Access Control) Lab: Unprotected Admin Functionality | 2025 | https://medium.com/@robohunt/access-control-lab-unprotected-admin-functionality-2025-baf7cce78b05?source=rss------bug_bounty-5 | Ananda | portswigger-lab, writeup, access-control, cybersecurity, bug-bounty | 02-Aug-2025 |
| ️ JavaScript Recon via GitHub: Finding Secrets Before You Even Hit the App | https://medium.com/@narendarlb123/%EF%B8%8F-javascript-recon-via-github-finding-secrets-before-you-even-hit-the-app-cb88e36bc0d7?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, information-security, infosec, cybersecurity | 02-Aug-2025 |
| “Push to Pwn: Hacking GitHub Like a Pro — The Ultimate OSINT + CI/CD Exploitation Playbook” | https://javascript.plainenglish.io/push-to-pwn-hacking-github-like-a-pro-the-ultimate-osint-ci-cd-exploitation-playbook-089fff02fa9a?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, bug-bounty, cybersecurity, ai | 02-Aug-2025 |
| How I Reported a Major Privacy Loophole in ChatGPT’s Sharing Feature | https://medium.com/@letchupkt/how-i-reported-a-major-privacy-loophole-in-chatgpts-sharing-feature-6bc4225d81b5?source=rss------bug_bounty-5 | LETCHU PKT | public-data, artificial-intelligence, chatgpt, data-leak, bug-bounty | 02-Aug-2025 |
| I Wrote a Eulogy for Manual Recon | https://medium.com/@ibtissamhammadi1/i-wrote-a-eulogy-for-manual-recon-73c2bfa992ae?source=rss------bug_bounty-5 | Ibtissam hammadi | reconnaissance, hacking, bug-bounty, automation, cybersecurity | 02-Aug-2025 |
| Client-Side Lies: Hacking the Logic Behind PortSwigger’s Business Flaw Lab | https://medium.com/@surveishtiyak/client-side-lies-hacking-the-logic-behind-portswiggers-business-flaw-lab-30da3638d0b3?source=rss------bug_bounty-5 | Ishtiyak Surve | bussiness-logic-flaw, business-logic, penetration-testing, bug-bounty, wb-hacking | 02-Aug-2025 |
| From a Boring Engagement to Uncovering a High Severity CVE | https://m3m0o.medium.com/from-a-boring-engagement-to-uncovering-a-high-severity-cve-6ed52b5f618f?source=rss------bug_bounty-5 | m3m0o | cve, pentesting, bug-bounty, red-team, information-security | 02-Aug-2025 |
| The Silent Threat: How a Simple Zip File Triggered Google Web Designer’s Weakness️ | https://shabertseng.medium.com/the-silent-threat-how-a-simple-zip-file-triggered-google-web-designers-weakness-%EF%B8%8F-e1b18db76533?source=rss------bug_bounty-5 | Shaber Tseng | google-vrp, bug-bounty, hacking, cybersecurity, exploit | 02-Aug-2025 |
| Software and Data Integrity Failures (OWASP A08): Para Hacking, Bug Bounty y Desarrollo We | https://medium.com/@jpablo13/software-and-data-integrity-failures-owasp-a08-para-hacking-bug-bounty-y-desarrollo-we-e39cc7bda5d4?source=rss------bug_bounty-5 | JPablo13 | web-development, bug-bounty, cybersecurity, penetration-testing, ethical-hacking | 01-Aug-2025 |
| Stop Guessing What 404 Means! The Ultimate Guide to HTTP Status Codes You Need to Bookmark | https://medium.com/@paritoshblogs/stop-guessing-what-404-means-the-ultimate-guide-to-http-status-codes-you-need-to-bookmark-48d080202674?source=rss------bug_bounty-5 | Paritosh | cybersecurity, bug-bounty, hacking, burpsuite, https | 01-Aug-2025 |
| Reflected XSS in HTML Context with Most Tags and Attributes Blocked | https://bashoverflow.medium.com/reflected-xss-in-html-context-with-most-tags-and-attributes-blocked-b601de27500a?source=rss------bug_bounty-5 | Bash Overflow | xss-payload, bypass-waf-xss, bug-bounty, xss-attack, reflected-xss | 01-Aug-2025 |
| I Dropped Out to Learn Cybersecurity (Without a Degree) — And Landed Paid Work | https://infosecwriteups.com/i-dropped-out-to-learn-cybersecurity-without-a-degree-and-landed-paid-work-60bdacc56b3b?source=rss------bug_bounty-5 | Satyam Pathania | bug-bounty, careers, cybersecurity, technology, infosec | 01-Aug-2025 |
| How I Hacked a $500 Bug Using Just an Email Field | https://infosecwriteups.com/how-i-hacked-a-500-bug-using-just-an-email-field-e5a0cb89e051?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, tech, hacking, passive-income, cybersecurity | 01-Aug-2025 |
| Linktree Username Validation Bypass: A Hidden Threat with a Leading Space | https://infosecwriteups.com/linktree-username-validation-bypass-a-hidden-threat-with-a-leading-space-52537955f79e?source=rss------bug_bounty-5 | Yeswehack | google, bug-bounty, cybersecurity | 01-Aug-2025 |
| How a Small Open Redirect Flaw Became a $1000 rXSS Payday | https://infosecwriteups.com/how-a-small-open-redirect-flaw-became-a-1000-rxss-payday-6960e4610f8f?source=rss------bug_bounty-5 | Ibtissam hammadi | tech, hacking, cybersecurity, programming, bug-bounty | 01-Aug-2025 |
| Secrets in GitHub Repos: How Hackers Find API Keys & Config Files | https://infosecwriteups.com/secrets-in-github-repos-how-hackers-find-api-keys-config-files-859fec498fdf?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, ai, cybersecurity, hacking, programming | 01-Aug-2025 |
| Recon in Minutes: Automating Subdomain Discovery for Penetration Tests | https://medium.com/@yauagroups/recon-in-minutes-automating-subdomain-discovery-for-penetration-tests-65fe2b095667?source=rss------bug_bounty-5 | mattyerz | automation, penetration-testing, open-source, bug-bounty, cybersecurity | 01-Aug-2025 |
| Hacked the AI, Got the Bounty: Obfuscation & Prompt Injection Techniques for Red Teamers | https://medium.com/@cybertechajju/hacked-the-ai-got-the-bounty-obfuscation-prompt-injection-techniques-for-red-teamers-9715be4f23e4?source=rss------bug_bounty-5 | CyberTechAjju | bug-bounty, llm, ai, jailbreak, cybersecurity | 01-Aug-2025 |
| The Epic Tale of a JWT Key Left on a Confluence Wiki Page — Totally Secure, Right? | https://medium.com/@devanshpatel930/the-epic-tale-of-a-jwt-key-left-on-a-confluence-wiki-page-totally-secure-right-141189f1d9c3?source=rss------bug_bounty-5 | Devansh Patel | cybersecurity, bug-bounty-writeup, bugs, bug-bounty-tips, bug-bounty | 01-Aug-2025 |
| Week 7 — Learning Basic Concepts of Cybersecurity | https://infosecwriteups.com/week-7-learning-basic-concepts-of-cybersecurity-09b4170209d1?source=rss------bug_bounty-5 | Aang | bug-bounty-tips, bug-bounty, information-security, information-technology, ethical-hacking | 01-Aug-2025 |
| Fixing the BloodHound Startup Error on Kali Linux | https://prathameshbagul.medium.com/fixing-the-bloodhound-startup-error-on-kali-linux-3712abe83daf?source=rss------bug_bounty-5 | Prath | bloodhound, active-directory, hackthebox, bug-bounty, pentesting | 01-Aug-2025 |
| How 3 Free Recon Tools found 40 Bugs — Helped To Score $1200 in Bug Bounties | https://medium.com/@rashad.desk/how-3-free-recon-tools-found-40-bugs-helped-to-score-1200-in-bug-bounties-55c215b372a3?source=rss------bug_bounty-5 | Rashadul Islam | cybersecurity, ai, writing, bug-bounty, technology | 01-Aug-2025 |
| Dork for AI LLM Chatbot | https://medium.com/@rr-1k/dork-for-ai-llm-chatbot-fd02c2109b1d?source=rss------bug_bounty-5 | rr-1k | llm, chatgpt, hacking, ai, bug-bounty | 01-Aug-2025 |
| “Burp + Extensions = JS Recon on Steroids: From Endpoints to Exploits” | https://javascript.plainenglish.io/burp-extensions-js-recon-on-steroids-from-endpoints-to-exploits-4c5946997201?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, ai, infosec, bug-bounty | 01-Aug-2025 |
| The Shodan & FOFA Hack No One Wants You to Know About | https://kkonann.medium.com/the-shodan-fofa-hack-no-one-wants-you-to-know-about-5eb9be3688de?source=rss------bug_bounty-5 | KonaN | bug-hunting, bug-bounty, hacking, cybersecurity, penetration-testing | 01-Aug-2025 |
| How I Hacked Vimeo Using Just SSRF | https://medium.com/@ibtissamhammadi1/how-i-hacked-vimeo-using-just-ssrf-dd2a6c17a5a4?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, api-security, cybersecurity, ssrf, vimeo | 01-Aug-2025 |
| Pwn2Own Offers $1 Million Bounty for Zero-Click WhatsApp Exploit | https://mhmmuneef.medium.com/pwn2own-offers-1-million-bounty-for-zero-click-whatsapp-exploit-cd8a4d8984dd?source=rss------bug_bounty-5 | Mohammed Muneef | bug-bounty, whatsapp-security, cybersecurity, hacking, infosec | 01-Aug-2025 |
| 5 Must-Read Hacking & Cybersecurity Books That Shaped My Offensive Journey | https://medium.com/@zeeshanafridi.za21/5-must-read-hacking-cybersecurity-books-that-shaped-my-offensive-journey-d12b52d049f8?source=rss------bug_bounty-5 | Z33 Security | bug-bounty, hacking-books, ethical-hacking, cybersecurity, red-teaming | 01-Aug-2025 |
| I Tried CSRF Attacks in Many Website (And Failed Miserably). Here’s What I Learned | https://systemweakness.com/i-tried-csrf-attacks-in-many-website-and-failed-miserably-heres-what-i-learned-dd71317cb4e0?source=rss------bug_bounty-5 | Shah kaif | bug-bounty-writeup, bugs, bug-bounty, bug-bounty-tips, csrf | 01-Aug-2025 |
| Why Domain Monitoring Is Essential for a Company | https://medium.com/@alexandrevandammepro/why-domain-monitoring-is-essential-for-a-company-332ba3742bd2?source=rss------bug_bounty-5 | Alexandre Vandamme | data-breach, cybersecurity, technology, privacy, bug-bounty | 01-Aug-2025 |
| How to Install Parrot OS on VMware Workstation 17 (Fix Boot Errors) | https://medium.com/@therealshawnlo/how-to-install-parrot-os-on-vmware-workstation-17-fix-boot-errors-9537d63c4e8f?source=rss------bug_bounty-5 | Shawn | linux, pentesting, bug-bounty, cybersecurity, vmware | 01-Aug-2025 |
| How I Uncovered Reflected and Stored XSS on a University Portal | https://medium.com/@avyuktsec/how-i-uncovered-reflected-and-stored-xss-on-a-university-portal-ad6c653c6a81?source=rss------bug_bounty-5 | Avyukt Security | cybersecurity, ethical-hacking, bug-bounty, penetration-testing, hacking | 01-Aug-2025 |
| Stored XSS → Account Takeover | https://medium.com/@s0ly/stored-xss-account-takeover-7d9db5e6cdcb?source=rss------bug_bounty-5 | s0ly | xss-attack, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 01-Aug-2025 |
| An Introduction to Bug Bounty Hunting | https://medium.com/@botumeren1/an-introduction-to-bug-bounty-hunting-5329ddaf2dc0?source=rss------bug_bounty-5 | Cyber Security Details | bug-bounty, cybersecurity, vulnerability, penetration-testing, ethical-hacking | 01-Aug-2025 |
| Unlocking the Power of /proc/self/fd/ in Linux: From Basics to Exploits and Prevention | https://medium.com/@zoningxtr/unlocking-the-power-of-proc-self-fd-in-linux-from-basics-to-exploits-and-prevention-f58d2202b129?source=rss------bug_bounty-5 | Zoningxtr | web-development, php, bug-bounty, penetration-testing, cybersecurity | 01-Aug-2025 |
| Turn LFI into RCE Using /proc/self/ — A Deep Dive for Pentesters | https://medium.com/@zoningxtr/turn-lfi-into-rce-using-proc-self-a-deep-dive-for-pentesters-cb59dbec15c2?source=rss------bug_bounty-5 | Zoningxtr | php, web-development, bug-bounty, cybersecurity, penetration-testing | 01-Aug-2025 |
| XXE Vulnerability: কী, কেন, এবং কিভাবে এটি অ্যাটাক হয়? | https://medium.com/@ayshee782/xxe-vulnerability-%E0%A6%95%E0%A7%80-%E0%A6%95%E0%A7%87%E0%A6%A8-%E0%A6%8F%E0%A6%AC%E0%A6%82-%E0%A6%95%E0%A6%BF%E0%A6%AD%E0%A6%BE%E0%A6%AC%E0%A7%87-%E0%A6%8F%E0%A6%9F%E0%A6%BF-%E0%A6%85%E0%A7%8D%E0%A6%AF%E0%A6%BE%E0%A6%9F%E0%A6%BE%E0%A6%95-%E0%A6%B9%E0%A7%9F-c0cf70c1741e?source=rss------bug_bounty-5 | Ayshee | xxe-attack, bug-bounty, cybersecurity, xxe, ethical-hacking | 01-Aug-2025 |
| 12 ~/.bashrc Hacks Hackers Can’t Live Without | https://medium.com/@verylazytech/12-bashrc-hacks-hackers-cant-live-without-09e89bb00f45?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bash, bug-bounty, red-team, penetration-testing | 31-Jul-2025 |
| Stored DOM XSS: A Hidden Threat in Blog Comments | https://infosecwriteups.com/stored-dom-xss-a-hidden-threat-in-blog-comments-50aca72e40fd?source=rss------bug_bounty-5 | Bash Overflow | dom-based-xss, stored-xss, bug-bounty-tips, stored-dom-xss, bug-bounty | 31-Jul-2025 |
| CSRF in Disguise: How a Tracking Pixel Let Me Steal User Actions Like a Spy | https://infosecwriteups.com/csrf-in-disguise-how-a-tracking-pixel-let-me-steal-user-actions-like-a-spy-28c084002d1e?source=rss------bug_bounty-5 | Iski | infosec, money, bug-bounty, hacking, cybersecurity | 31-Jul-2025 |
| Refactoring Roulette: When to Rewrite, When to Patch | https://medium.com/@man.from.titanic/refactoring-roulette-when-to-rewrite-when-to-patch-b10c7ef2b75d?source=rss------bug_bounty-5 | mimo | product-design, bug-bounty, programming | 31-Jul-2025 |
| How I Got Easy Admin Panel Access & Database Credentials — Bug Bounty Hunting | https://medium.com/@pranavrp77/how-i-got-easy-admin-panel-access-database-credentials-bug-bounty-hunting-a16935d0d3b8?source=rss------bug_bounty-5 | Pranav Patil | cybersecurity, bug-bounty-tips, bug-bounty-writeup, bug-bounty, hacking | 31-Jul-2025 |
| This is How I *ALMOST* found my first bug. | https://medium.com/@riazrabia/this-is-how-i-almost-found-my-first-bug-f3cfb9efdf0d?source=rss------bug_bounty-5 | Rabia Riaz | bug-hunting, web-security, bug-bounty, cybersecurity, vulnerability | 31-Jul-2025 |
| No, no todo fallo en login es una SQLi | https://gorkaaa.medium.com/no-no-todo-fallo-en-login-es-una-sqli-a21592652d96?source=rss------bug_bounty-5 | Gorka | bugs, bug-bounty-writeup, bug-bounty-tips, bug-bounty, bug-zero | 31-Jul-2025 |
| Poisoned Packages: How I Hacked the Build Pipeline Without Touching the App | https://javascript.plainenglish.io/poisoned-packages-how-i-hacked-the-build-pipeline-without-touching-the-app-8796e9752516?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, cybersecurity, information-security, bug-bounty, infosec | 31-Jul-2025 |
| Learn about JWT if you want to Bypass Authentication | https://medium.com/@hrofficial62/learn-about-jwt-if-you-want-to-bypass-authentication-4f9ea587a786?source=rss------bug_bounty-5 | Mr Horbio | hacking, ethical-hacking, cybersecurity, penetration-testing, bug-bounty | 31-Jul-2025 |
| Fishing for Secrets: How to Find Hidden API Keys Across GitHub, NPM, and PyPI | https://medium.com/meetcyber/fishing-for-secrets-how-to-find-hidden-api-keys-across-github-npm-and-pypi-a79cde57eb08?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, information-security, ai, cybersecurity | 31-Jul-2025 |
| Start Bug Bounty Earning Using OWASP Top 10 (Even If You’re a Complete Beginner) | https://medium.com/@rashad.desk/start-bug-bounty-earning-using-owasp-top-10-even-if-youre-a-complete-beginner-26361c7ab789?source=rss------bug_bounty-5 | Rashadul Islam | cybersecurity, bug-bounty, make-money-online, learning, technology | 31-Jul-2025 |
| IDOR allow Zero Click account takeover on a web3 program | https://jeetpal2007.medium.com/idor-allow-zero-click-account-takeover-on-a-web3-program-abef994d2aef?source=rss------bug_bounty-5 | JEETPAL | bugbounty-tips, idor, bugbounty-writeup, account-takeover, bug-bounty | 31-Jul-2025 |
| Secrets of Cross-Site Scripting (XSS) | https://alsayyad11.medium.com/secrets-of-cross-site-scripting-xss-52a2a7364871?source=rss------bug_bounty-5 | Ahmed Elsayyad | methodology, penetration-testing, bug-bounty, cybersecurity | 31-Jul-2025 |
| Page Admin Disclosure via WebSocket on Facebook ( $XXXX 4-Figures Bounty ). | https://medium.com/@hkhazaal99/page-admin-disclosure-via-websocket-on-facebook-xxxx-4-figures-bounty-2fbfa34fe978?source=rss------bug_bounty-5 | Hassan Khazaal | cybersecurity, bug-bounty, ethical-hacking, bug-hunting, facebook-bug-bounty | 31-Jul-2025 |
| “Report bug bounty ke company raksasa dunia, gak perlu pake bahasa inggris loh!” | https://ronafebriana.medium.com/report-bug-bounty-ke-company-raksasa-dunia-gak-perlu-pake-bahasa-inggris-loh-581694914eb5?source=rss------bug_bounty-5 | Rona Febriana | cybersecurity, bug-report, rona-febriana, bug-hunting, bug-bounty | 31-Jul-2025 |
| Challenge Accepted: 90-Day Challenge to My First Bug Bounty | https://medium.com/@sl0th0x87/challenge-accepted-90-day-challenge-to-my-first-bug-bounty-30e716ed1221?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, cybersecurity, burpsuite, about-me, challenge | 31-Jul-2025 |
| API Hacking’e Giriş: Modern Uygulamaların Görünmeyen Zayıf Noktaları bölüm 1 | https://medium.com/@sanaldunya/api-hackinge-giri%C5%9F-modern-uygulamalar%C4%B1n-g%C3%B6r%C3%BCnmeyen-zay%C4%B1f-noktalar%C4%B1-b%C3%B6l%C3%BCm-1-7b9898682054?source=rss------bug_bounty-5 | Oruç | programming, yazılım, bug-bounty, türkçe, cybersecurity | 31-Jul-2025 |
| Forced Browsing: Unauthorized Endpoint Access | https://medium.com/@0298muneezabadar/forced-browsing-unauthorized-endpoint-access-c926153504d4?source=rss------bug_bounty-5 | Muniza Badar | owasp-top-10, web-app-pentesting, cybersecurity, bug-bounty, buggy-buy | 31-Jul-2025 |
| API testing Lab 2,Solve Step By Step | https://sukhveersingh97997.medium.com/api-testing-lab-2-solve-step-by-step-9bd44c84d1b2?source=rss------bug_bounty-5 | sukhveer singh | bug-bounty, portswigger, burpsuite, cybersecurity, bugbounty-writeup | 31-Jul-2025 |
| IDOR allow Zero Click account takeover on a web3 program | https://infosecwriteups.com/idor-allow-zero-click-account-takeover-on-a-web3-program-abef994d2aef?source=rss------bug_bounty-5 | JEETPAL | bugbounty-tips, idor, bugbounty-writeup, account-takeover, bug-bounty | 31-Jul-2025 |
| Insecure Direct Object Reference (IDOR): Buggy Buy’s Broken Access Control | https://medium.com/@0298muneezabadar/insecure-direct-object-reference-idor-buggy-buys-broken-access-control-5a59bba49610?source=rss------bug_bounty-5 | Muniza Badar | web-app-pen-testing, buggy-buy, owasp-top-10, cybersecurity, bug-bounty | 31-Jul-2025 |
| Business Logic Flaw: Price Manipulation in buggy buy | https://medium.com/@0298muneezabadar/business-logic-flaw-price-manipulation-in-buggy-buy-62b050eea93b?source=rss------bug_bounty-5 | Muniza Badar | bug-bounty, buggy-buy, cybersecurity, owasp-top-10, web-app-pentesting | 31-Jul-2025 |
| Log4Shell in 2025: Why It’s Still a Bug Bounty Goldmine | https://medium.com/@kalariyahet23/log4shell-in-2025-why-its-still-a-bug-bounty-goldmine-493344e84b0e?source=rss------bug_bounty-5 | Kalariya Het | money, bug-bounty, hacking, cybersecurity, ai | 31-Jul-2025 |
| How I Found Critical Vulns on Government Websites… While Asleep | https://systemweakness.com/how-i-found-critical-vulns-on-government-websites-while-asleep-de8f44db9d15?source=rss------bug_bounty-5 | KonaN | cybersecurity, technology, hacking, ethical-hacking, bug-bounty | 31-Jul-2025 |
| How I Bypassed Facebook’s Email Validation (Logic Flaw) | https://medium.com/@abdo-eg/how-i-bypassed-facebooks-email-validation-logic-flaw-de61cc81e25c?source=rss------bug_bounty-5 | Abdullah Ahmed | cybersecurity, meta, facebook, bug-bounty, ethical-hacking | 31-Jul-2025 |
| Insecure Deserialization in Java — A Deep Dive into One of the Most Dangerous Vulnerabilities | https://amitlt2.medium.com/insecure-deserialization-in-java-a-deep-dive-into-one-of-the-most-dangerous-vulnerabilities-4cd1920773f3?source=rss------bug_bounty-5 | Amit Kumar Biswas @Amitlt2 | bug-bounty, hacking, bug-bounty-tips, ethical-hacking, cybersecurity | 31-Jul-2025 |
| Portswigger Academy: Access control vulnerabilities Labs — Practitioner | https://medium.com/@sl0th0x87/portswigger-academy-access-control-vulnerabilities-labs-practitioner-26eb2facd8b3?source=rss------bug_bounty-5 | Mike (sl0th0x87) | walkthrough, access-control, bug-bounty, burpsuite, portswigger-lab | 31-Jul-2025 |
| Portswigger Academy: Access control vulnerabilities Labs — Apprentice | https://medium.com/@sl0th0x87/portswigger-academy-access-control-vulnerabilities-labs-apprentice-2fb6e1452d37?source=rss------bug_bounty-5 | Mike (sl0th0x87) | access-control, walkthrough, bug-bounty, portswigger-lab, burpsuite | 31-Jul-2025 |
| How I got RCE on redbull from recon (CVE-2025–30406) | https://mchklt.medium.com/how-i-got-rce-on-redbull-from-recon-cve-2025-30406-f0e702d131ce?source=rss------bug_bounty-5 | ABDELKARIM MOUCHQUELITA | bugs, red-bull, ethical-hacking, bug-bounty, cybersecurity | 31-Jul-2025 |
| Understanding RFC 1918 — Private IP Addressing in Local Networks[HTTP — IP restriction bypass]… | https://medium.com/@islam_elnajdy/understanding-rfc-1918-private-ip-addressing-in-local-networks-http-ip-restriction-bypass-6e167a4a922a?source=rss------bug_bounty-5 | Islam Elnajdy | bugs, root-me, bug-bounty | 31-Jul-2025 |
| How I Discovered an IDOR Vulnerability in chatgpt.com and Got Rewarded by OpenAI | https://medium.com/@moamelshakeer/how-i-discovered-an-idor-vulnerability-in-chatgpt-com-and-got-rewarded-by-openai-bc4da48d5013?source=rss------bug_bounty-5 | Moamelshakeer | writer, bug-bounty, bug-bounty-writeup, cybersecurity | 31-Jul-2025 |
| The Ultimate FREE Resource Guide to Start Bug Bounty Hunting | https://medium.com/@cyberhead/the-ultimate-free-resource-guide-to-start-bug-bounty-hunting-3a42211fe8eb?source=rss------bug_bounty-5 | CyberHead | cybersecurity, bugbountybugbountyhunter, bug-bounty, bug-bounty-resource, bug-bounty-reports | 31-Jul-2025 |
| $1000 in 30 Days: My Bug Bounty Breakthrough! | https://medium.com/readers-club/1000-in-30-days-my-bug-bounty-breakthrough-becdad0e30cd?source=rss------bug_bounty-5 | Shahzaib | creativity, bug-bounty, ethical-hacking, cybersecurity | 31-Jul-2025 |
| The Solidity Compiler has Developed Schizophrenia | https://medium.com/@alexbabits/the-solidity-compiler-has-developed-schizophrenia-4c7d1a593e1f?source=rss------bug_bounty-5 | Babs | compilers, bug-bounty, web3, solidity, hacking | 31-Jul-2025 |
| SSRF via Host Header Injection — A Prank Gone Vulnerable | https://medium.com/@syedshorox27/ssrf-via-host-header-injection-a-prank-gone-vulnerable-52eb514f664d?source=rss------bug_bounty-5 | Minio Haxer | bugs, bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup | 30-Jul-2025 |
| Identification and Authentication Failures (OWASP A07): For hacking, bug bounty and web development | https://medium.com/@jpablo13/identification-and-authentication-failures-owasp-a07-for-hacking-bug-bounty-and-web-development-52a707be67af?source=rss------bug_bounty-5 | JPablo13 | ethical-hacking, cybersecurity, penetration-testing, web-development, bug-bounty | 30-Jul-2025 |
| Meta Madness: How Hidden Metadata Gave Me Access to Private Docs ️ | https://infosecwriteups.com/meta-madness-how-hidden-metadata-gave-me-access-to-private-docs-%EF%B8%8F-3160044d9ef0?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, infosec, money, bug-bounty | 30-Jul-2025 |
| From Insecure Storage to Secure Practices: A Follow-Up | https://medium.com/@gowthami09027/from-insecure-storage-to-secure-practices-a-follow-up-fda2f5bc043f?source=rss------bug_bounty-5 | Blue_eye | bug-bounty, information-security, hacking, mobile-app-development, penetration-testing | 30-Jul-2025 |
| BugBounty-Cuando no sabes por dónde seguir, mira atrás | https://gorkaaa.medium.com/bugbounty-cuando-no-sabes-por-d%C3%B3nde-seguir-mira-atr%C3%A1s-d5ff15ab2e5b?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bugs, bug-zero, bug-bounty, bug-bounty-writeup | 30-Jul-2025 |
| Old Bugs, New Tricks: Why DOM XSS (and Friends) Still Pay in 2025 | https://medium.com/@vivekps143/old-bugs-new-tricks-why-dom-xss-and-friends-still-pay-in-2025-d5fc18718266?source=rss------bug_bounty-5 | Vivek PS | cybersecurity, bug-bounty, hacking | 30-Jul-2025 |
| How I Earned a $4,000 Bug Bounty Using a Simple Yet Overlooked Method | https://medium.com/@ekenejosepha1/how-i-earned-a-4-000-bug-bounty-using-a-simple-yet-overlooked-method-27197ace1eeb?source=rss------bug_bounty-5 | Joseph jr | bug-bounty-writeup, penetration-testing, ethical-hacking, bug-bounty-tips, bug-bounty | 30-Jul-2025 |
| 3. Understanding Reconnaissance: Finding the Unseen | https://infosecwriteups.com/3-understanding-reconnaissance-finding-the-unseen-8c7a91b89c35?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, reconnaissance, hacking, infosec, cybersecurity | 30-Jul-2025 |
| Prompt Engineering Toolkit (2025 Edition) | https://medium.com/meetcyber/prompt-engineering-toolkit-2025-edition-0b9ed2e01047?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, cybersecurity, information-security, ai, infosec | 30-Jul-2025 |
| BugBounty Radar — A Quick User Guide | https://medium.com/@zoomeye_team/bugbounty-radar-a-quick-user-guide-6ef72d2f04bb?source=rss------bug_bounty-5 | ZoomEye | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty | 30-Jul-2025 |
| Reflected DOM XSS Vulnerability via eval() Leading to alert() | https://osintteam.blog/reflected-dom-xss-vulnerability-via-eval-leading-to-alert-058fdc70cebe?source=rss------bug_bounty-5 | Bash Overflow | reflected-dom-xss, bug-bounty, dom-based-xss, bug-bounty-tips, xss-vulnerability | 30-Jul-2025 |
| Gift payment 7,000 USDT TRC20 u can use (Okx web3 wallet) | https://medium.com/@miyaclark889/gift-payment-7-000-usdt-trc20-u-can-use-okx-web3-wallet-e553adcd452a?source=rss------bug_bounty-5 | Miya clark | design, bug-bounty, business, cryptocurrency, make-money-online | 30-Jul-2025 |
| How I find vulnerability can make X(Twitter) lose millions of dollars | https://l4zyhacker.medium.com/how-i-find-vulnerability-can-make-x-twitter-lose-millions-of-dollars-ae34d713254f?source=rss------bug_bounty-5 | L4zyhacker | bug-hunting, cybersecurity, hacking, bug-bounty | 30-Jul-2025 |
| Stored XSS: Exploiting Buggy Buy with a Single Script | https://medium.com/@0298muneezabadar/stored-xss-exploiting-buggy-buy-with-a-single-script-a73b1379b97a?source=rss------bug_bounty-5 | Muniza Badar | web-app-pen-testing, owasp-top-10, cybersecurity, bug-bounty, buggy-buy | 30-Jul-2025 |
| From Self-XSS to Account Takeover | https://medium.com/@splintercat/from-self-xss-to-account-takeover-c6488adc5737?source=rss------bug_bounty-5 | Mark Roy | bug-bounty-tips, bug-bounty, bug-bounty-writeup, application-security | 30-Jul-2025 |
| From Path Guessing to Dashboard Takeover: Full Access to Government Data via Broken Access Control | https://0xhamod.medium.com/from-path-guessing-to-dashboard-takeover-full-access-to-government-data-via-broken-access-control-a4c048fc05bb?source=rss------bug_bounty-5 | 0xHamod | bug-bounty-writeup, bug-bounty, bugbounty-writeup, bugcrowd, bug-bounty-tips | 30-Jul-2025 |
| ZoomEye: The Bug Hunter’s and Pentester’s Ultimate Reconnaissance Guide | https://medium.com/@n4it40_07/zoomeye-the-bug-hunters-and-pentester-s-ultimate-reconnaissance-guide-1324592bef1a?source=rss------bug_bounty-5 | N4!T40 07 | bugbounty-writeup, reconnaissance, bug-bounty, web-security, penetration-testing | 30-Jul-2025 |
| Hacking an Admin Panel Using WebSocket Manipulation | https://medium.com/@ibtissamhammadi1/hacking-an-admin-panel-using-websocket-manipulation-be28059d878d?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, ethical-hacking, web-security, bug-bounty | 30-Jul-2025 |
| Understanding Hacking GraphQL — Part 2 | https://redfoxsecurity.medium.com/understanding-hacking-graphql-part-2-8eaa3bbd773b?source=rss------bug_bounty-5 | Redfox Security | graphql-security, graphql, bug-bounty, ethical-hacking, apihacking | 30-Jul-2025 |
| Report Bug Bounty Jangan Pake Video! | https://ronafebriana.medium.com/report-bug-bounty-jangan-pake-video-8a64178a1733?source=rss------bug_bounty-5 | Rona Febriana | bug-hunting, bug-bounty, cybersecurity, rona-febriana, google-vrp | 30-Jul-2025 |
| IDOR in the Wild: How I Discovered a Critical Data Exposure via Vendor ID | https://medium.com/@gowthami09027/idor-in-the-wild-how-i-discovered-a-critical-data-exposure-via-vendor-id-8ce73edc1b3e?source=rss------bug_bounty-5 | Blue_eye | web-development, api-testing, hacking, bug-bounty, idor-vulnerability | 30-Jul-2025 |
| Buggy Buy’s Search Manipulation via NoSQL Injection | https://medium.com/@0298muneezabadar/buggy-buys-search-manipulation-via-nosql-injection-14c7ca74cdda?source=rss------bug_bounty-5 | Muniza Badar | owasp-top-10, buggy-buy, cybersecurity, web-app-pen-testing, bug-bounty | 30-Jul-2025 |
| 15+ Linux Bash One-Liners Hackers Use (And You Should Too!) | https://medium.com/@verylazytech/15-linux-bash-one-liners-hackers-use-and-you-should-too-e5487159f232?source=rss------bug_bounty-5 | Very Lazy Tech | bash, hacker, bug-bounty, penetration-testing, red-team | 30-Jul-2025 |
| Access Bank Account Information via Response Manipulation | https://brbr0s.medium.com/access-bank-account-information-via-response-manipulation-d3b1ec95375f?source=rss------bug_bounty-5 | brbr0s | bug-bounty-tips, bug-bounty-writeup, broken-access-control, response-manipulation, bug-bounty | 30-Jul-2025 |
| Cookie Monster Attacks: Stealing Sessions Like It’s 1999 | https://medium.com/meetcyber/cookie-monster-attacks-stealing-sessions-like-its-1999-4d434ab34b97?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, cybersecurity, bug-bounty, information-security | 30-Jul-2025 |
| My First Month in Bug Bounty: 2 Bugs, 1 Bounty, No BS | https://medium.com/@jo_ozd/my-first-month-in-bug-bounty-2-bugs-1-bounty-no-bs-4bd61fafc3fd?source=rss------bug_bounty-5 | Jo Zyd | cybersecurity, bounty-program, web-development, bug-bounty, hacking | 30-Jul-2025 |
| Web Request — HTB — BUG BOUNTY PATH- MODULE 1 | https://medium.com/@masum1419/web-request-htb-bug-bounty-path-module-1-3dfb2c339457?source=rss------bug_bounty-5 | Masum Billah | penetration-testing, web, hackthebox-writeup, bug-bounty, hackthebox | 30-Jul-2025 |
| Privilege Escalation: From User to Admin. | https://medium.com/@0298muneezabadar/privilege-escalation-from-user-to-admin-22befa6f1f9c?source=rss------bug_bounty-5 | Muniza Badar | cybersecurity, owasp-top-10, buggy-buy, bug-bounty, web-app-pen-testing | 30-Jul-2025 |
| Exploring Interesting Security Research Techniques: Parser differentials | https://normalitee.medium.com/exploring-interesting-security-research-techniques-parser-differentials-004a146c81cf?source=rss------bug_bounty-5 | Abdul Mazid | security-research, cybersecurity, bug-bounty, infosec, hacking | 30-Jul-2025 |
| My Browser is a Hacking Lab: Here Are My 20 Essential Extensions. | https://r4gh4v.medium.com/my-browser-is-a-hacking-lab-here-are-my-20-essential-extensions-918420f6615b?source=rss------bug_bounty-5 | r4gh4v | chrome-extension, ethical-hacking, browser-extension, bug-bounty, hacking | 30-Jul-2025 |
| From Exposed API Key to Arbitrary Account Creation: A GraphQL Bug Bounty Walkthrough | https://medium.com/@drizzlehx/from-exposed-api-key-to-arbitrary-account-creation-a-graphql-bug-bounty-walkthrough-af0d26accab3?source=rss------bug_bounty-5 | Utkarsh Srivastava | bug-bounty, bug-bounty-writeup, graphql, bug-bounty-tips, api | 30-Jul-2025 |
| Hall of Fame: Open Redirect Vulnerability in Ericsson Job Portal | https://spidergk.medium.com/hall-of-fame-open-redirect-vulnerability-in-ericsson-job-portal-7f9a2e77bd77?source=rss------bug_bounty-5 | Gourav(spidergk) | bug-bounty, cybersecurity, web-application-security, open-redirect, responsible-disclosure | 30-Jul-2025 |
| My Recon methodology for Bug bounty Hunting | https://medium.com/@curiouskhanna/my-recon-methodology-for-bug-bounty-hunting-0cfbd603cfac?source=rss------bug_bounty-5 | Shubham Khanna | reconnaissance, bug-bounty | 30-Jul-2025 |
| Embarking on the Bug Bounty Journey: A Deep Dive into the Top Platforms | https://medium.com/@sl0th0x87/embarking-on-the-bug-bounty-journey-a-deep-dive-into-the-top-platforms-8d62a14cd2a6?source=rss------bug_bounty-5 | Mike (sl0th0x87) | bug-bounty, bugcrowd, web-penetration-testing, intigriti, hackerone | 30-Jul-2025 |
| WebSockets, Protobuf, and a Hidden SQL Injection: My Unexpected Bug Hunting Journey | https://medium.com/@momenrezkk90/websockets-protobuf-and-a-hidden-sql-injection-my-unexpected-bug-hunting-journey-c22e935cca72?source=rss------bug_bounty-5 | MOAMEN REZK | cybersecurity, red-team, bug-bounty, penetration-testing, life-hacking | 30-Jul-2025 |
| How I Found Insecure Direct Object Reference (IDOR) vulnerability ? | https://medium.com/@Muhammad_Wageh/how-i-found-insecure-direct-object-reference-idor-vulnerability-6d572929b850?source=rss------bug_bounty-5 | Muhammad Wageh | cybersecurity, hacking, idor, bug-bounty, writing-tips | 29-Jul-2025 |
| How I Found a Critical IDOR in a University System (and Why Ethical Hacking Matters) | https://medium.com/@jakelong7/how-i-found-a-critical-idor-in-a-university-system-and-why-ethical-hacking-matters-4d80a6947ca3?source=rss------bug_bounty-5 | Jake Long | idor-vulnerability, hacking, bug-bounty, idor, cybersecurity | 29-Jul-2025 |
| Identification and Authentication Failures (OWASP A07): Hacking y Bug Bounty | https://medium.com/@jpablo13/identification-and-authentication-failures-owasp-a07-hacking-y-bug-bounty-2846761ebcb9?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, bug-bounty, cybersecurity, web-development, ethical-hacking | 29-Jul-2025 |
| DOM XSS in document.write Sink Using Source location.search Inside a | https://infosecwriteups.com/dom-xss-in-document-write-sink-using-source-location-search-inside-a-select-element-6df5304d9b11?source=rss------bug_bounty-5 | Bash Overflow | cross-site-scripting, bug-bounty, dom-xss-vulnerability, dom-xss, xss-inside-select-element | 29-Jul-2025 |
| ️ JWT Do It? How None Algorithm and Leaky Secrets Let Me Forge Admin Tokens | https://infosecwriteups.com/%EF%B8%8F-jwt-do-it-how-none-algorithm-and-leaky-secrets-let-me-forge-admin-tokens-c8a0f0f8da82?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, infosec, money, hacking | 29-Jul-2025 |
| Visit kalkikrivadna.com | https://medium.com/@krivadna/visit-kalkikrivadna-com-496a65395dc3?source=rss------bug_bounty-5 | Krivadna | penetration-testing, cybersecurity, bugbounty-writeup, bug-bounty, freelancing | 29-Jul-2025 |
| “Climbing the Filesystem Ladder: Path Traversal Is Still Alive (And Kicking Your Backend)” | https://medium.com/@narendarlb123/climbing-the-filesystem-ladder-path-traversal-is-still-alive-and-kicking-your-backend-d696aa9f1bda?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, cybersecurity, ai, bug-bounty | 29-Jul-2025 |
| Bifrost Launches Bug Bounty on Immunefi With $500,000 for a Single Critical Vulnerability | https://medium.com/bifrost-finance/bifrost-launches-bug-bounty-on-immunefi-with-500-000-for-a-single-critical-vulnerability-533eeab3e5a1?source=rss------bug_bounty-5 | Bifrost | staking, white-hat-hacker, bug-bounty | 29-Jul-2025 |
| How I Found a $2,800 Bug in 60 minutes — and How You Can Spot It Too | https://medium.com/@rashad.desk/how-i-found-a-2-800-bug-in-60-minutes-and-how-you-can-spot-it-too-95bfe919e7f4?source=rss------bug_bounty-5 | Rashadul Islam | programming, bug-bounty, technology, freelancing, cybersecurity | 29-Jul-2025 |
| ¿Organizas bien tus reportes de Bug Bounty? Probablemente no. | https://gorkaaa.medium.com/organizas-bien-tus-reportes-de-bug-bounty-probablemente-no-892b654ffbc3?source=rss------bug_bounty-5 | Gorka | bugs, bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-zero | 29-Jul-2025 |
| GenAI Bug Bounty Platform | https://medium.com/ai-apocalypse/genai-bug-bounty-platform-323c850a4db5?source=rss------bug_bounty-5 | AbhirupKonwar | large-language-models, artificial-intelligence, bug-bounty, genai, bug-bounty-tips | 29-Jul-2025 |
| More than Tools — Recon as a Strategic Mindset | https://osintteam.blog/more-than-tools-recon-as-a-strategic-mindset-403a1af8af26?source=rss------bug_bounty-5 | Dzianis Skliar | information-gathering, red-team, penetration-testing, bug-bounty, reconnaissance | 29-Jul-2025 |
| Source code Analysis = $$$$$ | https://medium.com/@anandrishav2228/source-code-analysis-e76aa9ea679e?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, hacking, money, source-code, bug-bounty | 29-Jul-2025 |
| “Climbing the Filesystem Ladder: Path Traversal Is Still Alive (And Kicking Your Backend)” | https://medium.com/meetcyber/climbing-the-filesystem-ladder-path-traversal-is-still-alive-and-kicking-your-backend-d696aa9f1bda?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, cybersecurity, ai, bug-bounty | 29-Jul-2025 |
| Recon for REWARD — Full Bug Bounty Step-By-Step Playbook | https://medium.com/@rashad.desk/recon-for-reward-full-bug-bounty-step-by-step-playbook-30dbaa62ce9f?source=rss------bug_bounty-5 | Rashadul Islam | technology, money, freelancing, cybersecurity, bug-bounty | 29-Jul-2025 |
| ️♂️ Recon to Master: The Complete Bug Bounty Checklist | https://infosecwriteups.com/%EF%B8%8F-%EF%B8%8F-recon-to-master-the-complete-bug-bounty-checklist-b4af6a064b02?source=rss------bug_bounty-5 | Vipul Sonule | programming, ai, tech, hacking, bug-bounty | 29-Jul-2025 |
| CTF Walkthrough for 0N3_P1ECE: Exploring Web Exploits in a One Piece-Themed Challenge | https://medium.com/@sohambughunt3636/ctf-walkthrough-for-0n3-p1ece-exploring-web-exploits-in-a-one-piece-themed-challenge-b3466aa29ea4?source=rss------bug_bounty-5 | Sohambughunt | ctf-writeup, ctf-walkthrough, bug-bounty, bug-hunting, ctf | 29-Jul-2025 |
| How I Clinched $500 Within Minutes !! | https://infosecwriteups.com/how-i-clinched-500-within-minutes-5b828ad0f5a4?source=rss------bug_bounty-5 | TSxNINJA | hacking, bug-bounty-writeup, infosec, bug-bounty, devops | 29-Jul-2025 |
| Automate XSS & IDOR Bug Hunting Using Bash & Python — A Hacker’s Toolkit | https://infosecwriteups.com/automate-xss-idor-bug-hunting-using-bash-python-a-hackers-toolkit-e8453e51f703?source=rss------bug_bounty-5 | Vipul Sonule | programming, bug-bounty, cybersecurity, ai, tech | 29-Jul-2025 |
| Easiest No Rate Limit Bypass‼️ | https://infosecwriteups.com/easiest-no-rate-limit-bypass-%EF%B8%8F-47baf1813309?source=rss------bug_bounty-5 | TSxNINJA | infosec, bug-bounty-writeup, bug-bounty, github, bug-bounty-tips | 29-Jul-2025 |
| Authentication Bypass: NOSQL Injection on Buggy Buy’s Login | https://medium.com/@0298muneezabadar/authentication-bypass-nosql-injection-on-buggy-buys-login-a756bf82818a?source=rss------bug_bounty-5 | Muneeza Badar | owasp-top-10, bug-bounty, web-app-pentesting, nosql-injection, cybersecurity | 29-Jul-2025 |
| Understanding Hacking GraphQL — Part 1 | https://redfoxsecurity.medium.com/understanding-hacking-graphql-part-1-a40ab91579c8?source=rss------bug_bounty-5 | Redfox Security | ethical-hacking, cybersecurity, graphql, api-security, bug-bounty | 29-Jul-2025 |
| Git-Dumped, DB-Hijacked, Shell-Dropped: The Accidental WordPress Takeover | https://kkonann.medium.com/git-dumped-db-hijacked-shell-dropped-the-accidental-wordpress-takeover-d520307a7427?source=rss------bug_bounty-5 | KonaN | bug-hunting, bug-bounty, web-security, cybersecurity, penetration-testing | 29-Jul-2025 |
| Deep Dive: Secrets in the Source — How to Find Leaked Keys, Tokens, and Hidden Endpoints with AI | https://javascript.plainenglish.io/deep-dive-secrets-in-the-source-how-to-find-leaked-keys-tokens-and-hidden-endpoints-with-ai-882d2347c492?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, ai, bug-bounty, cybersecurity, infosec | 29-Jul-2025 |
| The Mental Game of Bug Bounty: How I Fight Boredom, Burnout & Brain Fog | https://medium.com/@mandeep.j9988/the-mental-game-of-bug-bounty-how-i-fight-boredom-burnout-brain-fog-e1fcc0d63ef8?source=rss------bug_bounty-5 | Manzjson | cybersecurity, cyberattack, bug-bounty, tech-in-mental-health | 29-Jul-2025 |
| How Recon Helped Me Land a $50,000 Bug Bounty — No Exploits Needed | https://medium.com/@Ekenejoseph/how-recon-helped-me-land-a-50-000-bug-bounty-no-exploits-needed-3e9e2f3c9730?source=rss------bug_bounty-5 | Ekene Joseph | devsecops, penetration-testing, bug-bounty, cybersecurity, ethical-hacking | 29-Jul-2025 |
| Bifrost 启动漏洞赏金计划，单个漏洞最高奖励 50 万美元 | https://medium.com/@0xBifrostCN/bifrost-%E5%90%AF%E5%8A%A8%E6%BC%8F%E6%B4%9E%E8%B5%8F%E9%87%91%E8%AE%A1%E5%88%92-%E5%8D%95%E4%B8%AA%E6%BC%8F%E6%B4%9E%E6%9C%80%E9%AB%98%E5%A5%96%E5%8A%B1-50-%E4%B8%87%E7%BE%8E%E5%85%83-16483bf32a79?source=rss------bug_bounty-5 | Bifrost 中文 | bug-bounty | 29-Jul-2025 |
| Brute Force Attack: Cracking Buggy Buy’s Logins | https://medium.com/@0298muneezabadar/brute-force-attack-cracking-buggy-buys-logins-1e1b468fad60?source=rss------bug_bounty-5 | Muniza Badar | web-app-pentesting, cybersecurity, brute-force-attack, owasp-top-10, bug-bounty | 29-Jul-2025 |
| How I Gained Remote Code Execution (RCE) on Huawei Phones | https://nmochea.medium.com/how-i-gained-remote-code-execution-rce-on-huawei-phones-e55a986c1ca0?source=rss------bug_bounty-5 | Neil Mark Ochea | bug-bounty-writeup, bug-bounty, bug-bounty-tips, ethical-hacking, hacking | 29-Jul-2025 |
| Authentication Bypass: NOSQL Injection on Buggy Buy’s Login | https://medium.com/@0298muneezabadar/authentication-bypass-nosql-injection-on-buggy-buys-login-a756bf82818a?source=rss------bug_bounty-5 | Muniza Badar | owasp-top-10, bug-bounty, web-app-pentesting, nosql-injection, cybersecurity | 29-Jul-2025 |
| How I Turned a Headless Browser into a Critical SSRF Goldmine | https://medium.com/@ibtissamhammadi1/how-i-turned-a-headless-browser-into-a-critical-ssrf-goldmine-57b37235af0f?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, ssrf, hacking, cybersecurity, bug-bounty | 29-Jul-2025 |
| Git-Dumped, DB-Hijacked, Shell-Dropped: The Accidental WordPress Takeover | https://systemweakness.com/git-dumped-db-hijacked-shell-dropped-the-accidental-wordpress-takeover-d520307a7427?source=rss------bug_bounty-5 | KonaN | bug-hunting, bug-bounty, web-security, cybersecurity, penetration-testing | 29-Jul-2025 |
| My Life in the SOC: Lessons from the Frontlines of Cyber Defense | https://medium.com/@saumyakisuno/my-life-in-the-soc-lessons-from-the-frontlines-of-cyber-defense-f268adfcf26c?source=rss------bug_bounty-5 | Saumya Shree | security, bug-bounty, social-media, hacking, cybersecurity | 29-Jul-2025 |
| SharePoint Zero-Day Exploited: CVE-2025–53770 Breakdown | https://medium.com/@kalariyahet23/sharepoint-zero-day-exploited-cve-2025-53770-breakdown-eaca88bf4946?source=rss------bug_bounty-5 | Kalariya Het | infosec, bug-bounty, zero-day, cve, cybersecurity | 29-Jul-2025 |
| Aeroflot Hack Exposes Data Leak, Disrupts Flights | https://medium.com/@kalariyahet23/aeroflot-hack-exposes-data-leak-disrupts-flights-26272236dbae?source=rss------bug_bounty-5 | Kalariya Het | cybersecurity, airplanes, bug-bounty, infosec, war | 29-Jul-2025 |
| Prompt Engineering Toolkit for JavaScript Recon (2025 Edition) | https://javascript.plainenglish.io/prompt-engineering-toolkit-for-javascript-recon-2025-edition-6209c57ce8ef?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, bug-bounty, ai, cybersecurity | 29-Jul-2025 |
| Introducing CerberusX: The Next-Gen XSS Scanner for Ethical Hackers | https://medium.com/@N0aziXss/introducing-cerberusx-the-next-gen-xss-scanner-for-ethical-hackers-5e05f5c3718c?source=rss------bug_bounty-5 | N0aziXss | web-security, bug-bounty, xss-vulnerability, ethical-hacking, cybersecurity | 29-Jul-2025 |
| From Zero to Hacker: My Real Bug Bounty Starting Point | https://medium.com/@77r4sed/from-zero-to-hacker-my-real-bug-bounty-starting-point-58d9d949734e?source=rss------bug_bounty-5 | 77r4sed | bug-bounty, bug-bounty-tips, hacking, cybersecurity, self-talk | 29-Jul-2025 |
| Just One Click To Leak All Victim Information | https://medium.com/@0xMado-1Tap/just-one-click-to-leak-all-victim-information-54599e3b6268?source=rss------bug_bounty-5 | Mado | infosec, medium, hacking, bug-bounty, writing | 29-Jul-2025 |
| ArNS Exploit: From Zero to Domain Owner | https://aminudin.medium.com/arns-exploit-from-zero-to-domain-owner-ac5d04583bf4?source=rss------bug_bounty-5 | Aminudin | bug-bounty, bug-bounty-tips, pentesting | 29-Jul-2025 |
| Ultimate API Bug Bounty: Find & Secure Hidden API Endpoints | https://iaraoz.medium.com/ultimate-api-bug-bounty-find-secure-hidden-api-endpoints-139c8f0a061a?source=rss------bug_bounty-5 | Israel Aráoz Severiche | penetration-testing, bug-bounty, api, cybersecurity, hacking | 29-Jul-2025 |
| Leak of Internal Reference Name at Multiple Locations. | https://medium.com/@xploiterr/leak-of-internal-reference-name-at-multiple-locations-c3d021b2295d?source=rss------bug_bounty-5 | xploiterr | improper-access-control, bug-bounty, bugbounty-tips | 29-Jul-2025 |
| Just One Click To Leak All Victim Information | https://medium.com/legionhunters/just-one-click-to-leak-all-victim-information-54599e3b6268?source=rss------bug_bounty-5 | Mado | infosec, medium, hacking, bug-bounty, writing | 29-Jul-2025 |
| How I accessed WAF Bypass for Stored XSS Smart Idea | https://medium.com/@yossefmohamedsalah2001/how-i-accessed-waf-bypass-for-stored-xss-smart-idea-708082fcfa79?source=rss------bug_bounty-5 | Yossef ibrahim mohamed-salah | bug-bounty, cybersecurity, xss-attack | 28-Jul-2025 |
| My JS Recon Stack: How I Mine JavaScript for Tokens, Endpoints, and Vulnerabilities | https://javascript.plainenglish.io/my-js-recon-stack-how-i-mine-javascript-for-tokens-endpoints-and-vulnerabilities-d9692f650474?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, cybersecurity, ai, information-security, bug-bounty | 28-Jul-2025 |
| I Used usedJS to Find 100+ Vulnerabilities — Here’s How | https://javascript.plainenglish.io/i-used-usedjs-to-find-100-vulnerabilities-heres-how-4c510fdb1f63?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, infosec, information-security, bug-bounty | 28-Jul-2025 |
| How a Simple Sign-Up Test Exposed a Hidden Account Duplication Flaw | https://osintteam.blog/how-a-simple-sign-up-test-exposed-a-hidden-account-duplication-flaw-58f97c99a1de?source=rss------bug_bounty-5 | Monika sharma | vulnerability, tips-and-tricks, technology, bug-bounty, penetration-testing | 28-Jul-2025 |
| How I Found 50 Bugs With Just 3 Recon Tools | https://osintteam.blog/how-i-found-50-bugs-with-just-3-recon-tools-42b2a004c141?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, reconnaissance, cybersecurity, bug-bounty, ethical-hacking | 28-Jul-2025 |
| My Journey on the Web Requests Bug Bounty Pathway: A Different Approach to Note-Taking and Learning | https://medium.com/@noblemutoko/my-journey-on-the-web-requests-bug-bounty-pathway-a-different-approach-to-note-taking-and-learning-e7e335784fa1?source=rss------bug_bounty-5 | Noble Mutoko | bug-bounty, learning-method, htb-academy, learning-techniques, htb | 28-Jul-2025 |
| Dev Mode Disaster: How an Open GraphQL Playground Let Me Query Everything, Including Your… | https://infosecwriteups.com/dev-mode-disaster-how-an-open-graphql-playground-let-me-query-everything-including-your-c2496948b162?source=rss------bug_bounty-5 | Iski | cybersecurity, infosec, bug-bounty, hacking, money | 28-Jul-2025 |
| I Breached a Hacker’s Platform by Reading Their Source Code | https://kkonann.medium.com/i-breached-a-hackers-platform-by-reading-their-source-code-620843c3c528?source=rss------bug_bounty-5 | KonaN | bug-bounty, cybersecurity, hacking, technology, supabase | 28-Jul-2025 |
| Password Reset Poisoning via Dangling Markup | https://infosecwriteups.com/password-reset-poisoning-via-dangling-markup-ee7ee428d632?source=rss------bug_bounty-5 | Bash Overflow | password-reset-poisoning, host-header-injection, dangling-markup, account-takeover, bug-bounty | 28-Jul-2025 |
| How I got Zero-Click Account Takeover (ATO) through Forgot Password | https://keroayman77.medium.com/how-i-got-zero-click-account-takeover-ato-through-forgot-password-f15d9049e128?source=rss------bug_bounty-5 | Kerolos Ayman | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 28-Jul-2025 |
| Phishing in Hacking: How Hackers Steal Your Login Info and How You Can Protect Yourself | https://medium.com/@syedmhatim/phishing-in-hacking-how-hackers-steal-your-login-info-and-how-you-can-protect-yourself-30d7270ae8fd?source=rss------bug_bounty-5 | Syed Muhammad Hatim Javaid | phishing, cybersecurity, ethical-hacking, penetration-testing, bug-bounty | 28-Jul-2025 |
| RDP — PORT 3389 | https://medium.com/@verylazytech/rdp-port-3389-a46cc674d5e9?source=rss------bug_bounty-5 | Very Lazy Tech | oscp, bug-bounty, hacking, penetration-testing, rdp | 28-Jul-2025 |
| How I Bought a ₹4999 Course for Just ₹1 Using a Simple Logic Bug | https://anupamas02.medium.com/how-i-bought-a-4999-course-for-just-1-using-a-simple-logic-bug-111fecbe21c0?source=rss------bug_bounty-5 | Anupam Singh | business-logic, bug-bounty | 28-Jul-2025 |
| How I Bypassed a Broken 2FA Implementation Using Response Manipulation | https://anupamas02.medium.com/how-i-bypassed-a-broken-2fa-implementation-using-response-manipulation-440aa03c8e6d?source=rss------bug_bounty-5 | Anupam Singh | 2fa-bypass, bug-bounty | 28-Jul-2025 |
| Automate the Hacker’s Mindset: The Full Guide to Prompt Engineering for Bug Bounties | https://medium.com/meetcyber/automate-the-hackers-mindset-the-full-guide-to-prompt-engineering-for-bug-bounties-414331239987?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, cybersecurity, ai, bug-bounty, information-security | 28-Jul-2025 |
| How I Found a Reflected XSS on AppyPie’s Template Search Page | https://anupamas02.medium.com/how-i-found-a-reflected-xss-on-appypies-template-search-page-7ddf3516d3f7?source=rss------bug_bounty-5 | Anupam Singh | bug-bounty-writeup, xss-attack, bug-bounty | 28-Jul-2025 |
| Day 7 of MCP Security: Identity Drift & Policy Misalignment in MCP Systems | https://codewithvamp.medium.com/day-7-of-mcp-security-identity-drift-policy-misalignment-in-mcp-systems-8be21e307746?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | mcp-server, cybersecurity, information-security, security, bug-bounty | 28-Jul-2025 |
| How I Dump a Full Source Code From a Private GitHub Repo — A Freelance VAPT Story | https://vettrivel007.medium.com/how-i-dump-a-full-source-code-from-a-private-github-repo-a-freelance-vapt-story-60400f4188ae?source=rss------bug_bounty-5 | VETTRIVEL | cybersecurity, bug-bounty, red-team, pentesting, vulnerability | 28-Jul-2025 |
| How One Logical vulnerability Opened the Gates | https://medium.com/@foxyeye/how-one-logical-vulnerability-opened-the-gates-dc9a088ced08?source=rss------bug_bounty-5 | Foxy eye | bug-bounty-writeup, bug-bounty-tips, security, bug-bounty, bug-hunting | 28-Jul-2025 |
| Vulnerable Directory + Broken Token Generator = Authorizing Every Hacker. Hacking Epam Systems | https://medium.com/@nnface/vulnerable-directory-broken-token-generator-authorizing-every-hacker-hacking-epam-systems-706b77951b6c?source=rss------bug_bounty-5 | NnFace | bug-bounty-tips, bug-bounty-writeup, cybersecurity, hacking, bug-bounty | 28-Jul-2025 |
| €1500 bounty — How I Bypassed 403 Forbidden and Gained Access to the Intranet Portal. | https://medium.com/@asharm.khan7/1500-bounty-how-i-bypassed-403-forbidden-and-gained-access-to-the-intranet-portal-3464f29f4ddb?source=rss------bug_bounty-5 | Ashar Mahmood | infosec, hacking, bug-bounty, ethical-hacking, bug-bounty-tips | 28-Jul-2025 |
| Cracking Logins with Burp Suite: Brute Forcing Buggy Buy Like a Pro | https://medium.com/@muneezabadar2004/cracking-logins-with-burp-suite-brute-forcing-buggy-buy-like-a-pro-c38d5faad10c?source=rss------bug_bounty-5 | Muneeza Badar | bug-bounty, web-application-security, owasp-top-10, penetration-testing, cybersecurity | 28-Jul-2025 |
| Stop Leaving Bugs Behind with my new Recon Tool | https://systemweakness.com/stop-leaving-bugs-behind-with-my-new-recon-tool-627a9068f1b2?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty-writeup, bug-bounty, pentesting, bug-bounty-tips, cybersecurity | 28-Jul-2025 |
| N0aziXss SecureCrawl v3.1: The Automated Web Security Auditor | https://medium.com/@N0aziXss/n0azixss-securecrawl-v3-1-the-automated-web-security-auditor-1b437f5cf685?source=rss------bug_bounty-5 | N0aziXss | automation, web-security, cybersecurity, ethical-hacking, bug-bounty | 28-Jul-2025 |
| I EXPOSED ENTIRE FRAUD ECOSYSTEM OF CARDING OPERATIONS (CC CHECKER BOTS) ABUSING STRIPE MERCHANT… | https://medium.com/@krivadna/i-exposed-entire-fraud-ecosystem-of-carding-operations-cc-checker-bots-abusing-stripe-merchant-d1bc0051ad4c?source=rss------bug_bounty-5 | Krivadna | cybersecurity, carding, bugbounty-writeup, infosec, bug-bounty | 28-Jul-2025 |
| My Journey into Bug Bounty: A Fresh Start with Clear Goals | https://medium.com/@sl0th0x87/my-journey-into-bug-bounty-a-fresh-start-with-clear-goals-e157ddaa23b5?source=rss------bug_bounty-5 | Mike (sl0th0x87) | about-me, cybersecurity, bug-bounty, information-technology, information-security | 28-Jul-2025 |
| How a Race Condition Let Me Buy $40,000 in Stocks With $2,500 | https://medium.com/@ahmed.k.adel69/how-a-race-condition-let-me-buy-40-000-in-stocks-with-2-500-c377b710dff7?source=rss------bug_bounty-5 | Ahmed adel | bug-bounty, pentesting | 28-Jul-2025 |
| Lessons from a $250,000 Blind XSS: Bug bounty Ultimate Payoff | https://medium.com/@zinolioncity/lessons-from-a-250-000-blind-xss-bug-bounty-ultimate-payoff-1d0c57dbf914?source=rss------bug_bounty-5 | Zino jo | cybersecurity, bug-bounty, devsecops, ethical-hacking, penetration-testing | 28-Jul-2025 |
| Can You Really Take Over Netflix Accounts Easily | https://medium.com/@ibtissamhammadi1/can-you-really-take-over-netflix-accounts-easily-1c29bb394d02?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, netflix, tech, bug-bounty, cybersecurity | 28-Jul-2025 |
| Clickjacking: Everything You Need to Know About This UI-Based Threat | https://medium.com/@0xAbJr/clickjacking-everything-you-need-to-know-about-this-ui-based-threat-22a3ade82fba?source=rss------bug_bounty-5 | محمد عمر | cybersecurity, bug-bounty-tips, bug-bounty, clickjacking, bug-bounty-writeup | 28-Jul-2025 |
| Part 3 — Getting Started in Cyber Security — Offensive Operations & Compliance | https://njiangu.medium.com/part-3-getting-started-in-cyber-security-offensive-operations-compliance-8b3354dffd2c?source=rss------bug_bounty-5 | Angu Nji | pentesting, red-team, bug-bounty, cybersecurity, compliance | 28-Jul-2025 |
| Parameter Tampering on a Govt. site | https://medium.com/@bagade1122/parameter-tampering-on-a-govt-site-b5a7c6a5490c?source=rss------bug_bounty-5 | Parag Bagade | cybersecurity, bug-bounty, responsible-disclosure, govt-of-india | 27-Jul-2025 |
| “Bug Bounty ”Telerik Report Server Authentication Bypass — CVE-2024–4358 “POC” | https://medium.com/@hariharanhex00/bug-bounty-telerik-report-server-authentication-bypass-cve-2024-4358-poc-358575ed7102?source=rss------bug_bounty-5 | HariHaranK | bug-bounty, bug-bounty-writeup, hacking, bug-bounty-tips, bugs | 27-Jul-2025 |
| : HackerOne! | https://medium.com/@umeryousuf26/hackerone-19b7aeaf7c6a?source=rss------bug_bounty-5 | Umer Yousuf | bug-bounty, bug-bounty-tips, hackerone, cybersecurity, bug-bounty-writeup | 27-Jul-2025 |
| SQL injection vulnerability allowing login bypass [ES] [PortSwigger] | https://h0lm3s.medium.com/sql-injection-vulnerability-allowing-login-bypass-es-portswigger-53c7adf477df?source=rss------bug_bounty-5 | h0lm3s | technology, infosec, vulnerability, cybersecurity, bug-bounty | 27-Jul-2025 |
| Week 6 — Learning Basic Concepts of Cybersecurity | https://iamaangx028.medium.com/week-6-learning-basic-concepts-of-cybersecurity-d2a27e136f24?source=rss------bug_bounty-5 | Aang | information-technology, bug-bounty, information-security, ethical-hacking, bug-bounty-tips | 27-Jul-2025 |
| Host Validation Bypass via Connection State Attack: Multiple Requests Over the Same TCP Connection | https://infosecwriteups.com/host-validation-bypass-via-connection-state-attack-multiple-requests-over-the-same-tcp-connection-9fc2406d2fe1?source=rss------bug_bounty-5 | Bash Overflow | connection-reuse-exploit, bug-bounty, routing-based-ssrf, ssrf-via-host-header, host-header-attack | 27-Jul-2025 |
| AI-Assisted Insecurity: Forging JWTs from Auto-Generated Weak Secrets | https://saeed0x1.medium.com/ai-assisted-insecurity-forging-jwts-from-auto-generated-weak-secrets-9a6db38b14ad?source=rss------bug_bounty-5 | SAEED | information-security, jwt-attack, bug-bounty-tips, bug-bounty, cybersecurity | 27-Jul-2025 |
| “It’s All Just the Same Website, Right?” — My Adventures in Subdomain Shenanigans | https://musharraffex.medium.com/its-all-just-the-same-website-right-my-adventures-in-subdomain-shenanigans-443a89341e40?source=rss------bug_bounty-5 | mUsHaRaF | web-security, reconnaissance, cybersecurity, bug-bounty, infosec | 27-Jul-2025 |
| Bug Bounty — “Si todo parece seguro, es que no has mirado lo suficiente” | https://gorkaaa.medium.com/bug-bounty-si-todo-parece-seguro-es-que-no-has-mirado-lo-suficiente-386fef4ba55f?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, bug-bounty, bugs, bug-zero, bug-bounty-tips | 27-Jul-2025 |
| I can hack so why can’t I do bounties? | https://thexssrat.medium.com/i-can-hack-so-why-cant-i-do-bounties-5e0cd09486c4?source=rss------bug_bounty-5 | Thexssrat | bug-bounty-writeup, ethical-hacking, bug-bounty, hacking, bug-bounty-tips | 27-Jul-2025 |
| Blockchain in a Nutshell: Simplifying the Digital Revolution | https://medium.com/@natarajanck2/blockchain-in-a-nutshell-simplifying-the-digital-revolution-cc9e103c6e08?source=rss------bug_bounty-5 | Natarajan C K | blockchain, security, web-development, bug-bounty, blockchain-technology | 27-Jul-2025 |
| Race conditions | https://medium.com/@MUHTADIN/race-conditions-8e39d3b02be4?source=rss------bug_bounty-5 | MUHTADIN | information-security, ethical-hacking, burpsuite, bug-bounty, web-security | 27-Jul-2025 |
| “From Zero to Hero: How I Landed My First Bug Bounty (And How You Can Too!)” | https://infosecwriteups.com/from-zero-to-hero-how-i-landed-my-first-bug-bounty-and-how-you-can-too-19e384ea4fdd?source=rss------bug_bounty-5 | Aman Sharma | cybersecurity, technology, bug-bounty, money, hacking | 27-Jul-2025 |
| Cache Me Outside: How I Poisoned CDN Caches and Hijacked Sessions Like a Magician | https://infosecwriteups.com/cache-me-outside-how-i-poisoned-cdn-caches-and-hijacked-sessions-like-a-magician-4be2e65167f4?source=rss------bug_bounty-5 | Iski | infosec, money, cybersecurity, hacking, bug-bounty | 27-Jul-2025 |
| Linux Command Line Interface (CLI) — Part 8: Environment & PATH Variables | https://bharath.medium.com/linux-command-line-interface-cli-part-8-environment-path-variables-3f18f5b50716?source=rss------bug_bounty-5 | Bharath | command-line, linux-commands, cybersecurity, linux, bug-bounty | 27-Jul-2025 |
| Token Leakage via Referrer — The Invisible Slip to Third Parties | https://infosecwriteups.com/token-leakage-via-referrer-the-invisible-slip-to-third-parties-9c8d326dd52c?source=rss------bug_bounty-5 | Sidhartha | pentesting, cybersecurity, ctf, hall-of-fame, bug-bounty | 27-Jul-2025 |
| Security risks often hide in features added later | https://systemweakness.com/security-risks-often-hide-in-features-added-later-ec8e20824fe6?source=rss------bug_bounty-5 | Nasrin | sms-otp-verification, security-by-design, bug-bounty-tips, bug-bounty, vulnerability | 27-Jul-2025 |
| The Most Underrated Skill in QA: Communication | https://medium.com/@n1rmalka/the-most-underrated-skill-in-qa-communication-fa5d33c794ae?source=rss------bug_bounty-5 | Nirmal Kiran Patel | bug-bounty, collaboration, bugbounty-tips, qa-testing, communication-skills | 27-Jul-2025 |
| ANDROID PENTESTING —PART 1— FUNDAMENTALS | https://medium.com/@P4RAD0X/android-pentesting-part-1-fundamentals-95f4fd659051?source=rss------bug_bounty-5 | PARADOX | bug-bounty, pentesting, infosec, penetration-testing, android-pentesting | 27-Jul-2025 |
| Breaking Into NoSQL: Understanding NoSQL Injection with Buggy Buy | https://medium.com/@muneezabadar2004/breaking-into-nosql-understanding-nosql-injection-with-buggy-buy-6ceb237e09b9?source=rss------bug_bounty-5 | Muneeza Badar | owasp-top-10, web-security-testing, bug-bounty, cybersecurity, web-penetration-testing | 27-Jul-2025 |
| Testing Firebase API Key Vulnerabilities: A Step-by-Step Guide | https://medium.com/@ranjankr/testing-firebase-api-key-vulnerabilities-a-step-by-step-guide-3e265e673a69?source=rss------bug_bounty-5 | Ranjan Kumar | osint, pentesting, bug-bounty, hacking | 27-Jul-2025 |
| Exposed xmlrpc.php – How a Legacy File Opens the Door to Attacks | https://infosecwriteups.com/exposed-xmlrpc-php-how-a-legacy-file-opens-the-door-to-attacks-d99dd0cb9d33?source=rss------bug_bounty-5 | Ehtesham Ul Haq | bugs, bug-bounty, writeup, penetration-testing, wordpress | 27-Jul-2025 |
| Title: The One with the eval() — A DOM-Based XSS That Got Personal | https://mosstafa.medium.com/title-the-one-with-the-eval-a-dom-based-xss-that-got-personal-80416c67cf9b?source=rss------bug_bounty-5 | Mostafa Ghanem | javascript, cybersecurity, xss-attack, infosec, bug-bounty | 27-Jul-2025 |
| How Plus Addressing Enables Account Creation Abuse and Password Reset Flooding | https://ziad-glitchseeker.medium.com/how-plus-addressing-enables-account-creation-abuse-and-password-reset-flooding-d3be7629948d?source=rss------bug_bounty-5 | Glitch Seeker | user-enumeration, bug-bounty, bugs, rate-limiting | 27-Jul-2025 |
| I Turned an “Informative” Severity Bug into a “Medium” Payout — Here’s How I Worded the Report | https://cyphernova1337.medium.com/i-turned-an-informative-severity-bug-into-a-medium-payout-heres-how-i-worded-the-report-a141a60594d9?source=rss------bug_bounty-5 | CypherNova1337 | cybersecurity, hacking, information-security, report-writing, bug-bounty | 27-Jul-2025 |
| How to Start Bug Bounty in 2025 (Beginner’s Guide + Tips) | https://medium.com/@ekenejosepha13/how-to-start-bug-bounty-in-2025-beginners-guide-tips-24f98b55f3fd?source=rss------bug_bounty-5 | Mr Joe | penetration-testing, pentesting, cybersecurity, ethical-hacking, bug-bounty | 27-Jul-2025 |
| Accessing Private Chats Without Email Verification | https://medium.com/@ibtissamhammadi1/accessing-private-chats-without-email-verification-1aeb29e3491a?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, intercom, owasp, cybersecurity, bug-bounty | 27-Jul-2025 |
| Laravel Debugging: A Sweet Yet Treacherous Elixir | https://medium.com/@abdellahlamine/laravel-debugging-a-sweet-yet-treacherous-elixir-95649b5d9f38?source=rss------bug_bounty-5 | Abdellah Lamine | exploit, bug-bounty, software-development, hacking, vulnerability | 27-Jul-2025 |
| Vulnerable and obsolete components (OWASP A06): Hacking and Bug Bounty Guide | https://medium.com/@jpablo13/vulnerable-and-obsolete-components-owasp-a06-hacking-and-bug-bounty-guide-0f8b3d1736c4?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, bug-bounty, cybersecurity, web-development, ethical-hacking | 26-Jul-2025 |
| OS command injection, simple case [ES] [PortSwigger] | https://h0lm3s.medium.com/os-command-injection-simple-case-es-portswigger-601126eea44a?source=rss------bug_bounty-5 | h0lm3s | vulnerability, infosec, bug-bounty, technology, cybersecurity | 26-Jul-2025 |
| The Bug Hiding in Plain Sight: A Simple Click Led to Cross-Org Account Takeover | https://ayaa101.medium.com/the-bug-hiding-in-plain-sight-a-simple-click-led-to-cross-org-account-takeover-82b77f640f6f?source=rss------bug_bounty-5 | Ayaa Hamed | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 26-Jul-2025 |
| Insecure OTP Mechanism: How I Discovered a Replay Attack Vulnerability | https://medium.com/@gowthami09027/insecure-otp-mechanism-how-i-discovered-a-replay-attack-vulnerability-a1c10e49c298?source=rss------bug_bounty-5 | Blue_eye | web-development, hacking, bug-bounty, penetration-testing, software-development | 26-Jul-2025 |
| SharePoint ToolShell: The Most sophisticated Enterprise hack of 2025 | https://medium.com/@jakboubmostefa/sharepoint-toolshell-the-most-sophisticated-enterprise-breach-of-2025-7acb4bf71222?source=rss------bug_bounty-5 | Mostefa Jakboub | security-breach, hacking, cybersecurity, china, bug-bounty | 26-Jul-2025 |
| How I Found a $3,000 Bug Using Just Recon | https://medium.com/@zinolioncity/how-i-found-a-3-000-bug-using-just-recon-18dd88e827ae?source=rss------bug_bounty-5 | Zino jo | bug-bounty-writeup, penetration-testing, bug-bounty-tips, bug-bounty, ethical-hacking | 26-Jul-2025 |
| SSRF via Flawed Request Parsing Leads to SSRF and Internal Admin Access | https://infosecwriteups.com/ssrf-via-flawed-request-parsing-leads-to-ssrf-and-internal-admin-access-ffac4b3103db?source=rss------bug_bounty-5 | Bash Overflow | flawed-request-parsing, bug-bounty, host-header-injection, routing-based-ssrf, ssrf-vulnerability | 26-Jul-2025 |
| How to Become a Bug Bounty Hunter in 2025 (No Degree Needed) | https://inayathussain.medium.com/how-to-become-a-bug-bounty-hunter-in-2025-no-degree-needed-23ea2f5d8800?source=rss------bug_bounty-5 | Inayat Hussain | ethical-hacking, bug-bounty, penetration-testing, cybersecurity, bugbounty-writeup | 26-Jul-2025 |
| Top 10 Open-Source Intelligence (OSINT) Tools for Cybersecurity Professionals in 2025 | https://inayathussain.medium.com/top-10-open-source-intelligence-osint-tools-for-cybersecurity-professionals-in-2025-fb27ba4f7be7?source=rss------bug_bounty-5 | Inayat Hussain | cybersecurity, penetration-testing, bug-bounty, ethical-hacking, osint | 26-Jul-2025 |
| The Rise of a Self-Made Technologist from Rural Pakistan | https://inayathussain.medium.com/the-rise-of-a-self-made-technologist-from-rural-pakistan-95293911e838?source=rss------bug_bounty-5 | Inayat Hussain | cybersecurity, osint, bug-bounty, ethical-hacking, penetration | 26-Jul-2025 |
| ️♂️ Beyond XSS: Weaponizing HTML Injection in the Real World | https://medium.com/@kalireddipalli/%EF%B8%8F-%EF%B8%8F-beyond-xss-weaponizing-html-injection-in-the-real-world-b78ee16acf5d?source=rss------bug_bounty-5 | Kalireddipalli | bug-bounty, html, penetration-testing, xss-bypass, phishing | 26-Jul-2025 |
| Essential Bug Bounty Resources for Beginners | https://medium.com/@apil00chand/essential-bug-bounty-resources-for-beginners-8100ae5a5b24?source=rss------bug_bounty-5 | Apilchand | bug-bounty, ethical-hacking, infosecurity, cybersecurity | 26-Jul-2025 |
| Bug Bounty - La mejor herramienta es una mente incómoda | https://gorkaaa.medium.com/bug-bounty-la-mejor-herramienta-es-una-mente-inc%C3%B3moda-45c3309ca923?source=rss------bug_bounty-5 | Gorka | bug-zero, bug-bounty-writeup, bugs, bug-bounty, bug-bounty-tips | 26-Jul-2025 |
| BUG-BOUNTY SERIES 3: Tools Bug Bounty untuk Pemula | https://medium.com/@krisnawhy300/bug-bounty-series-3-tools-bug-bounty-untuk-pemula-9725141bf8cc?source=rss------bug_bounty-5 | Krisna Wahyu Andriawan | linux, hacking, linux-tutorial, bug-bounty | 26-Jul-2025 |
| BUG-BOUNTY SERIES 2: Roadmap Bug Bounty Hunter skillset & Tools yang Wajib Dikuasai | https://medium.com/@krisnawhy300/bug-bounty-series-2-roadmap-bug-bounty-hunter-skillset-tools-yang-wajib-dikuasai-7bd53ff1a066?source=rss------bug_bounty-5 | Krisna Wahyu Andriawan | bug-bounty, linux-tutorial, hacking, linux | 26-Jul-2025 |
| BUG-BOUNTY SERIES 1 : Pengenalan dan Dasar Bug Bounty | https://medium.com/@krisnawhy300/bug-bounty-series-1-pengenalan-dan-dasar-bug-bounty-4e5a302c607d?source=rss------bug_bounty-5 | Krisna Wahyu Andriawan | hacking, bug-bounty, devsecops, linux | 26-Jul-2025 |
| Episode 6: How I Discovered LDAP Injection and Why It Matters (Even If You’re Not a Hacker) | https://infosecwriteups.com/episode-6-how-i-discovered-ldap-injection-and-why-it-matters-even-if-youre-not-a-hacker-f2d7f22e3390?source=rss------bug_bounty-5 | Yamini Yadav | penetration-testing, ethical-hacking, bug-bounty, cybersecurity, ldap-injection | 26-Jul-2025 |
| The API Trapdoor — Hacking Mobile Apps Without Ever Installing Them | https://systemweakness.com/the-api-trapdoor-hacking-mobile-apps-without-ever-installing-them-e5ed7206f9b5?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, mobile, bug-bounty, cybersecurity | 26-Jul-2025 |
| Zero to Owned: The Ultimate Bug Bounty Recon Blueprint (2025 Edition) | https://medium.com/meetcyber/zero-to-owned-the-ultimate-bug-bounty-recon-blueprint-2025-edition-e5379f8f1c26?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, ai, cybersecurity, infosec | 26-Jul-2025 |
| Zero-Touch Recon: Finding Critical Web App Vulnerabilities Without Ever Logging In | https://medium.com/meetcyber/zero-touch-recon-finding-critical-web-app-vulnerabilities-without-ever-logging-in-f1621c675caa?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | web-development, information-security, bug-bounty, cybersecurity, infosec | 26-Jul-2025 |
| GraphQL for the next API Penetration Testing | https://0xjar.medium.com/graphql-for-the-next-api-penetration-test-0922b3adef58?source=rss------bug_bounty-5 | 0xjar | api-penetration-testing, penetration-testing, red-team, bug-bounty, owasp | 26-Jul-2025 |
| From File Upload to Shell: A Deep Dive into RCE Exploits | https://medium.com/@digant_15/from-file-upload-to-full-shell-a-deep-dive-into-rce-exploits-9eee5af22242?source=rss------bug_bounty-5 | Digant Prajapati | bug-bounty, rce | 26-Jul-2025 |
| How to use “Caido Workflows” to scan for anything | https://the7th.medium.com/how-to-use-caido-workflows-to-scan-for-anything-07eed72ba06a?source=rss------bug_bounty-5 | Mostafa Alrefai | bug-bounty, web-development, caido, pentesting, hacking | 26-Jul-2025 |
| Insecure by Design: How a Mobile API Let Me Reset Anyone’s Password With Just a Phone Number | https://infosecwriteups.com/insecure-by-design-how-a-mobile-api-let-me-reset-anyones-password-with-just-a-phone-number-ba588ec384e5?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, cybersecurity, infosec, money | 26-Jul-2025 |
| Breaking Filter: XSS Bypass using ononmouseovermouseover, ONMOUSEOVER and without () `` [] … | https://medium.com/@xploiterr/breaking-filter-xss-bypass-using-ononmouseovermouseover-onmouseover-and-without-e2025486351c?source=rss------bug_bounty-5 | xploiterr | xss-bypass, stored-xss, bug-bounty | 26-Jul-2025 |
| SQL injection vulnerability in WHERE clause allowing retrieval of hidden data [ES] [PortSwigger] | https://h0lm3s.medium.com/sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data-es-portswigger-e87f2606e013?source=rss------bug_bounty-5 | h0lm3s | bug-bounty, technology, infosec, vulnerability, cybersecurity | 26-Jul-2025 |
| Public APIs vs. Private APIs: A Bug Hunter’s Perspective | https://medium.com/@n4it40_07/public-apis-vs-private-apis-a-bug-hunters-perspective-f506cb0a3865?source=rss------bug_bounty-5 | N4!T40 07 | bug-bounty-writeup, penetration-testing, bug-bounty, web-security, apihacking | 26-Jul-2025 |
| ️♂️ How I Landed Two P1s and My First Bug Bounty | https://medium.com/@Madhu_Kanwat/%EF%B8%8F-%EF%B8%8F-how-i-landed-two-p1s-and-my-first-bug-bounty-3ded6f5f2af6?source=rss------bug_bounty-5 | Madhu Kanwat | bug-bounty, hacking, ethical-hacking, vapt, cybersecurity | 26-Jul-2025 |
| How to use “Caido Workflows” to scan for anything | https://infosecwriteups.com/how-to-use-caido-workflows-to-scan-for-anything-07eed72ba06a?source=rss------bug_bounty-5 | Mostafa Alrefai | bug-bounty, web-development, caido, pentesting, hacking | 26-Jul-2025 |
| “IDOR Attacks Unmasked: Code Exploits and Real-World Breaches” | https://infosecwriteups.com/idor-attacks-unmasked-code-exploits-and-real-world-breaches-b05cddfb45c7?source=rss------bug_bounty-5 | Aman Sharma | programming, cybersecurity, money, bug-bounty, technology | 26-Jul-2025 |
| Hacking File Uploads — Exploiting PNG-only Upload Restrictions | https://medium.com/@smabuhaider/in-this-post-well-walk-through-various-attack-techniques-to-exploit-a-file-upload-functionality-e3f487e121fd?source=rss------bug_bounty-5 | Smabuhaider | bug-bounty, bug-hunting, cybersecurity, penetration-testing | 26-Jul-2025 |
| N0aziXss Origin Recon v3.1: The Ultimate CDN Bypass & Infrastructure Mapping Tool | https://medium.com/@N0aziXss/n0azixss-origin-recon-v3-1-the-ultimate-cdn-bypass-infrastructure-mapping-tool-efcd80439b3f?source=rss------bug_bounty-5 | N0aziXss | reconnaissance, cybersecurity, bug-bounty, ethical-hacking, python | 26-Jul-2025 |
| ShaktiCTF25 | https://medium.com/@0xm394tr0n/shaktictf25-081e4271bf1d?source=rss------bug_bounty-5 | MegaTron | ctf-writeup, ctf, bug-bounty, cybersecurity | 26-Jul-2025 |
| When an Android App Whispers Secrets: How I Found Plaintext Credentials in Logcat | https://medium.com/@rutxploit/when-an-android-app-whispers-secrets-how-i-found-plaintext-credentials-in-logcat-e44abf0856e3?source=rss------bug_bounty-5 | Rutvik Kalkumbe | hacking, bug-bounty-tips, bug-bounty, android-bug-bounty, bug-bounty-writeup | 26-Jul-2025 |
| HTTP Parameter Pollution | https://mrsi13nt.medium.com/http-parameter-pollution-0af3dcd1f96c?source=rss------bug_bounty-5 | Andrew Max | security, bug-bounty | 26-Jul-2025 |
| How Attackers Steal Data Using CORS Misconfigurations — Step-by-Step Breakdown! | https://medium.com/@zoningxtr/how-attackers-steal-data-using-cors-misconfigurations-step-by-step-breakdown-b483b5f10cc5?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, php, bug-bounty, web-development, penetration-testing | 26-Jul-2025 |
| Beyond Human Eyes: How AI Uncovers Critical Security Vulnerabilities. | https://medium.com/@yahya.abouhashim/beyond-human-eyes-how-ai-uncovers-critical-security-vulnerabilities-cd7266bc05e5?source=rss------bug_bounty-5 | Yahya Sayed | cybersecurity, ai-agent, offensive-security, ai, bug-bounty | 26-Jul-2025 |
| CVE-2025–44148: Cross Site Scripting (XSS) vulnerability on a small business. | https://medium.com/@will.star/cve-2025-44148-cross-site-scripting-xss-vulnerability-on-a-small-business-f88f109262f6?source=rss------bug_bounty-5 | Will.Star | bug-bounty, cve, hacking, xss-attack | 26-Jul-2025 |
| $1000 Bounty: Reset any password | https://medium.com/h7w/1000-bounty-reset-any-password-474606e18441?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, technology, cybersecurity, vulnerability | 26-Jul-2025 |
| $3,000 for Finding a Hidden Subdomain: My Reconnaissance Success Story | https://osintteam.blog/3-000-for-finding-a-hidden-subdomain-my-reconnaissance-success-story-990396554a2e?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, ethical-hacking, infosec-write-ups, reconnaissance, cybersecurity | 26-Jul-2025 |
| Bounty $$$: Grafana LFI | https://osintteam.blog/bounty-grafana-lfi-7cf9f167e1b2?source=rss------bug_bounty-5 | Monika sharma | vulnerability, penetration-testing, tips-and-tricks, technology, bug-bounty | 26-Jul-2025 |
| How to Create Hacking Lab ⚡ | https://osintteam.blog/how-to-create-hacking-lab-c994cdb0483a?source=rss------bug_bounty-5 | Vipul Sonule | programming, bug-bounty, coding, tech, hacking | 26-Jul-2025 |
| My Simple Method to Test for IDOR Vulnerabilities | https://medium.com/@ibtissamhammadi1/my-simple-method-to-test-for-idor-vulnerabilities-5963f6ed8785?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, bug-bounty, cybersecurity, web-security, programming | 26-Jul-2025 |
| I Got ROOT Access to a Hosting Provider Without a Single Exploit | https://kkonann.medium.com/i-got-root-access-to-a-hosting-provider-without-a-single-exploit-c6af4185dc54?source=rss------bug_bounty-5 | KonaN | cybersecurity, bug-bounty, penetration-testing, technology, hacking | 26-Jul-2025 |
| These 10 Burp Extensions Changed the Way I Do Bug Bounties | https://medium.com/@omaroymdm/these-10-burp-extensions-changed-the-way-i-do-bug-bounties-54daf5b08b15?source=rss------bug_bounty-5 | Omar Mahmoud | penetration-testing, bug-bounty, hackerone, hacking, bugcrowd | 25-Jul-2025 |
| Unpacking the Bypass: Client-Side Premium Authentication Compromise in Truecaller’s Android… | https://cyphernova1337.medium.com/unpacking-the-bypass-client-side-premium-authentication-compromise-in-truecallers-android-d7af697be07e?source=rss------bug_bounty-5 | CypherNova1337 | hacking, hacking-mobile-apps, cybersecurity, infosec, bug-bounty | 25-Jul-2025 |
| Vulnerable and Outdated Components (OWASP A06): Guía de Hacking y Bug Bounty | https://medium.com/@jpablo13/vulnerable-and-outdated-components-owasp-a06-gu%C3%ADa-de-hacking-y-bug-bounty-1a7daca12822?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, ethical-hacking, penetration-testing, cybersecurity, web-development | 25-Jul-2025 |
| I Got Into the Hall of Fame on NASA’s Vulnerability Disclosure Program Just by Dorking — Here’s How | https://medium.com/@BugRey/i-got-into-the-hall-of-fame-on-nasas-vulnerability-disclosure-program-just-by-dorking-here-s-how-149dbe15636f?source=rss------bug_bounty-5 | ./Rey~ | web-security, penetration-testing, bug-bounty | 25-Jul-2025 |
| Your Attack Surface Is a Jungle — And It’s Eating You Alive | https://medium.com/@paritoshblogs/your-attack-surface-is-a-jungle-and-its-eating-you-alive-a07465bbebc7?source=rss------bug_bounty-5 | Paritosh | bug-bounty, asm, cybersecurity, information-technology, hacking | 25-Jul-2025 |
| Routing-Based SSRF — Host Header Injection Leads to Internal Access | https://infosecwriteups.com/routing-based-ssrf-host-header-injection-leads-to-internal-access-b65a1c8b1b42?source=rss------bug_bounty-5 | Bash Overflow | ssrf-internal-access, bug-bounty, host-header-injection, host-header-exploit, routing-based-ssrf | 25-Jul-2025 |
| How I Discovered a Critical Security Flaw | Unauthenticated File Download via Public File URL | https://medium.com/@gowthami09027/how-i-discovered-a-critical-security-flaw-unauthenticated-file-download-via-public-file-url-ac49d53c1cda?source=rss------bug_bounty-5 | Blue_eye | pentesting, hacking, penetration-testing, web-development, bug-bounty | 25-Jul-2025 |
| ️♂️ How I Discovered a Critical SQL Injection in Redacted.com and Extracted Oracle DB Data | https://elcazad0r.medium.com/%EF%B8%8F-%EF%B8%8F-how-i-discovered-a-critical-sql-injection-in-redacted-com-and-extracted-oracle-db-data-4c2f171bae7d?source=rss------bug_bounty-5 | EL_Cazad0r | cybersecurity, ethical-hacking, bug-bounty, bugbounty-tips, sqli | 25-Jul-2025 |
| One Tool to Rule JWTs — Easy JWT Pentesting with JWTAuditor | https://infosecwriteups.com/one-tool-to-rule-jwts-easy-jwt-pentesting-with-jwtauditor-3483b37b01a3?source=rss------bug_bounty-5 | Sid Joshi | jwt-exploitation, bug-bounty-tips, pentesting, bug-bounty, jwt | 25-Jul-2025 |
| How I Discovered a Critical WordPress Auth Bypass: Methodology + Tools | https://zus3c.medium.com/how-i-discovered-a-critical-wordpress-auth-bypass-methodology-tools-5fab7a52a1ef?source=rss------bug_bounty-5 | Zubair Usman | ethical-hacking, cybersecurity, bug-bounty, cve, auth-bypass | 25-Jul-2025 |
| Access Denied Subdomain Bypass | https://infosecwriteups.com/access-denied-subdomain-bypass-178c2717fad9?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, hacking, security, programming, cybersecurity | 25-Jul-2025 |
| From DevOps to Cybersecurity: My Journey into Offensive Security and Practical Learning | https://medium.com/@wam0x0x0/from-devops-to-cybersecurity-my-journey-into-offensive-security-and-practical-learning-f09b260b247d?source=rss------bug_bounty-5 | Gleb Wam | devops, bug-bounty, cybersecurity, hacking, red-team | 25-Jul-2025 |
| How I Discovered Critical WordPress Vulnerabilities: A Real-World Case Study | https://zus3c.medium.com/how-i-discovered-critical-wordpress-vulnerabilities-a-real-world-case-study-e5e41c47fb14?source=rss------bug_bounty-5 | Zubair Usman | reconciliation, xss-attack, ethical-hacking, bug-bounty, cybersecurity | 25-Jul-2025 |
| Inside the APK: Reverse Engineering Mobile Apps Like a Spy (No Phone Needed) | https://medium.com/meetcyber/inside-the-apk-reverse-engineering-mobile-apps-like-a-spy-no-phone-needed-8d2d13a86eb5?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | api, bug-bounty, infosec, cybersecurity, information-security | 25-Jul-2025 |
| ️ Push to Prod, Oops: How an Exposed Git Folder Gave Me Credentials and Source Code on a Plate… | https://medium.com/@iski/%EF%B8%8F-push-to-prod-oops-how-an-exposed-git-folder-gave-me-credentials-and-source-code-on-a-plate-b30fd42e2367?source=rss------bug_bounty-5 | Iski | infosec, hacking, cybersecurity, bug-bounty, money | 25-Jul-2025 |
| The Ultimate Bug Bounty Cheat Sheet for Ethical Hackers (2025 Edition) | https://infosecwriteups.com/the-ultimate-bug-bounty-cheat-sheet-for-ethical-hackers-2025-edition-5c63ba5ca0a6?source=rss------bug_bounty-5 | Elie Attieh | ethical-hacking, cybersecurity, hacking, bug-bounty, bug-hunting | 25-Jul-2025 |
| Exploiting SSRF via Cloudflare Image Proxy on [REDACTED] | https://medium.com/@sauravkrish59/exploiting-ssrf-via-cloudflare-image-proxy-on-redacted-a32aeb8e6b8c?source=rss------bug_bounty-5 | @Sauravkrish | cybersecurity, hacking, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 25-Jul-2025 |
| Unzip and Detonate: How One Upload Can Break the Filesystem | https://medium.com/@narendarlb123/unzip-and-detonate-how-one-upload-can-break-the-filesystem-601ef62def4a?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, bug-bounty, cybersecurity, infosec | 25-Jul-2025 |
| How I Made $820 in Bug Bounties as a Total Beginner | https://medium.com/@rashad.desk/how-i-made-820-in-bug-bounties-as-a-total-beginner-1cd7f7cbae3e?source=rss------bug_bounty-5 | Rashadul Islam | bug-bounty, money, freelancing, make-money-online, cybersecurity | 25-Jul-2025 |
| ️ From Subdomain to Subjugation: The 2025 Recon Playbook | https://medium.com/meetcyber/%EF%B8%8F-from-subdomain-to-subjugation-the-2025-recon-playbook-673439fc5510?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, ai, cybersecurity, bug-bounty, infosec | 25-Jul-2025 |
| Unauthenticated Unsubscribe Endpoint Allows Unauthorized Email Preference Manipulation | https://medium.com/@moatymohamed897/unauthenticated-unsubscribe-endpoint-allows-unauthorized-email-preference-manipulation-922598a06988?source=rss------bug_bounty-5 | Mohamed Abdelmoatie | ethical-hacking, infosec, bug-bounty, bug-bounty-tips, penetration-testing | 25-Jul-2025 |
| BUGBOUNTY- No caces bugs. Caza inconsistencias. | https://gorkaaa.medium.com/bugbounty-no-caces-bugs-caza-inconsistencias-9ea08ecabe96?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, bugs, bug-bounty, bug-zero, bug-bounty-tips | 25-Jul-2025 |
| Web Security Academy Lab Walk-Through: Username Enumeration via Different Responses. | https://medium.com/@gi0904246/web-security-academy-lab-walk-through-username-enumeration-via-different-responses-d854b793b09e?source=rss------bug_bounty-5 | George Ibrahim | web-penetration-testing, cyber-security-awareness, web-vulnerabilities, bug-bounty | 25-Jul-2025 |
| The Ultimate Recon Toolkit for Bug Bounty Hunters (2025 Edition) | https://krishna-cyber.medium.com/the-ultimate-recon-toolkit-for-bug-bounty-hunters-2025-edition-406065a86c16?source=rss------bug_bounty-5 | Krish_cyber | hacking, bug-bounty-tips, bug-bounty, osint, infosec-write-ups | 25-Jul-2025 |
| How a Simple Endpoint Earned Me a $7500 Bounty from Microsoft | https://medium.com/@gourisankara357/how-a-simple-endpoint-earned-me-a-7500-bounty-from-microsoft-1891a35d40be?source=rss------bug_bounty-5 | Gouri Sankar A | programming, microsoft, bug-bounty-tips, bug-bounty, infosec | 25-Jul-2025 |
| A classic story of Blind IDOR | https://medium.com/@xploiterr/a-classic-story-of-blind-idor-1e2b02bf0996?source=rss------bug_bounty-5 | xploiterr | bug-bounty-tips, idor, bug-bounty | 25-Jul-2025 |
| XSS and CSRF — A Full Kill Chain | https://medium.com/@kroush333/xss-and-csrf-a-full-kill-chain-4606e435dacb?source=rss------bug_bounty-5 | MahmoudKroush | xss-attack, bug-bounty, xss-vulnerability, cybersecurity | 25-Jul-2025 |
| How I Went from Guest to Admin in 5 Minutes | https://medium.com/@ibtissamhammadi1/how-i-went-from-guest-to-admin-in-5-minutes-a39f6335834d?source=rss------bug_bounty-5 | Ibtissam hammadi | infosec, hacking, xss-attack, bug-hunting, bug-bounty | 25-Jul-2025 |
| Bug Bounty Is Fun Until You Get a P1 Duplicate | https://medium.com/@vigneshkj131/bug-bounty-is-fun-until-you-get-a-p1-duplicate-91b2e336498f?source=rss------bug_bounty-5 | Chip | ethical-hacking, s3-bucket, bug-bounty, cybersecurity, information-security | 25-Jul-2025 |
| Unveiling a Covert Redirect: The Unicode Vulnerability in Whoop.com’s Infrastructure | https://cyphernova1337.medium.com/unveiling-a-covert-redirect-the-unicode-vulnerability-in-whoop-coms-infrastructure-45303d5c7208?source=rss------bug_bounty-5 | CypherNova1337 | information-security, cybersecurity, bug-bounty, open-redirect, hacking | 25-Jul-2025 |
| Penetration Testing /Bug Bounty — WEB- 3 | https://prabhjeetlearning.medium.com/penetration-testing-bug-bounty-web-3-3c1c6b965580?source=rss------bug_bounty-5 | Prabhjeetsingh | bug-bounty, penetration-testing | 25-Jul-2025 |
| Penetration Testing /Bug Bounty— WEB- 2 | https://prabhjeetlearning.medium.com/penetration-testing-bug-bounty-web-2-2dc78ef583ce?source=rss------bug_bounty-5 | Prabhjeetsingh | bug-bounty, penetration-testing | 25-Jul-2025 |
| Pentesting — WEB- 1 | https://prabhjeetlearning.medium.com/pentesting-web-1-d2bc08cc6512?source=rss------bug_bounty-5 | Prabhjeetsingh | penetration-testing, owasp-top-10, bug-bounty | 25-Jul-2025 |
| “The Hidden Epidemic: How Sensitive Data Exposure Became My Biggest Security Nightmare” | https://infosecwriteups.com/the-hidden-epidemic-how-sensitive-data-exposure-became-my-biggest-security-nightmare-7f492a42456a?source=rss------bug_bounty-5 | Aman Sharma | cybersecurity, technology, security, money, bug-bounty | 25-Jul-2025 |
| ️ SubDNS-UI: Build Your Own Subdomain + DNS Enumerator with a Clean UI and Markdown Reporting | https://medium.com/@rajkumarkumawat.workup/%EF%B8%8F-subdns-ui-build-your-own-subdomain-dns-enumerator-with-a-clean-ui-and-markdown-reporting-b560724d505a?source=rss------bug_bounty-5 | Rajkumar Kumawat | reconnaissance, python, bug-bounty, red-team, subdomain-enumeration | 25-Jul-2025 |
| How I hacked Income Tax Website | https://adwaitug.medium.com/how-i-hacked-income-tax-website-94094671e51f?source=rss------bug_bounty-5 | Adwait Gawade | ethical-hacking, cybersecurity, bug-bounty | 25-Jul-2025 |
| My First Medium Write-Up: Critical IDOR in a City’s Public Transport System (Accepted + Hall of… | https://medium.com/@amarendrahack01/my-first-medium-write-up-critical-idor-in-a-citys-public-transport-system-accepted-hall-of-3431a5d86115?source=rss------bug_bounty-5 | Amarendra Prakash | idor, bug-bounty, application-security | 25-Jul-2025 |
| 10 Mind-Blowing Google Dorks You Should Use in 2025 | https://medium.com/@samael_0x4/10-mind-blowing-google-dorks-you-should-use-in-2025-6b761875a27f?source=rss------bug_bounty-5 | SAMAEL 0x4 | google-hacking, search-hacks, bug-bounty, google-dorks-list, bug-bounty-tips | 25-Jul-2025 |
| The tool that gave me the first bounty | https://medium.com/@mohaned0101/the-tool-that-gave-me-the-first-bounty-9303cac972a3?source=rss------bug_bounty-5 | mohaned alkhlot | bug-bounty, xss-attack, bug-bounty-writeup, automation, bug-bounty-tips | 25-Jul-2025 |
| Is XBOW Replacing Cybersecurity Professionals? The Truth Behind the AI Hacker Taking Over HackerOne | https://medium.com/@ishowcybersecurity/is-xbow-replacing-cybersecurity-professionals-the-truth-behind-the-ai-hacker-taking-over-hackerone-7f5f38d78153?source=rss------bug_bounty-5 | Ghulam Mohiuddin | xbow, ethical-hacking, bug-bounty, cybersecurity, ai-hacker | 25-Jul-2025 |
| New Types of Hacking: IDOR Attacks Evolved | https://theosintedge.medium.com/new-types-of-hacking-idor-attacks-evolved-ce556e25572e?source=rss------bug_bounty-5 | The OSINT Edge | hacking, idor, bug-bounty, alvinbijo, attack | 25-Jul-2025 |
| How I Found and Exploited a Critical Remote Code Execution in OpenSSH (CVE-2024–6387) Using Shodan… | https://medium.com/@FufuFaf1/how-i-found-and-exploited-a-critical-remote-code-execution-in-openssh-cve-2024-6387-using-shodan-172b8535f53d?source=rss------bug_bounty-5 | MostReal | hacking, bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 25-Jul-2025 |
| ️ How I Found an Unauthenticated GraphQL Data Exposure and got 0$ for it | https://medium.com/@77r4sed/%EF%B8%8F-how-i-found-an-unauthenticated-graphql-data-exposure-and-got-0-for-it-edfb07bf72a8?source=rss------bug_bounty-5 | 77r4sed | bug-bounty, bug-bounty-writeup, hacking, cybersecurity, bug-bounty-tips | 25-Jul-2025 |
| Hacker Watches What He Wants For Free. Hacking Netflix Pt.2 | Bug Bounty Tour #4 | https://medium.com/@nnface/hacker-watches-what-he-wants-for-free-hacking-netflix-pt-2-bug-bounty-tour-4-1c029997d8e2?source=rss------bug_bounty-5 | NnFace | bug-bounty, bug-bounty-writeup, bug-bounty-tips, hacking, cybersecurity | 25-Jul-2025 |
| ️ Top 10 Web App Attack Vectors You Must Master in 2025 | https://medium.com/@samael_0x4/%EF%B8%8F-top-10-web-app-attack-vectors-you-must-master-in-2025-bcdd1e507223?source=rss------bug_bounty-5 | SAMAEL 0x4 | xss-attack, bug-bounty, bug-bounty-writeup, web-apps, web-applications | 25-Jul-2025 |
| How I Found Over 30 Security Vulnerabilities in a Single Program | https://asametyigit.medium.com/how-i-found-over-30-security-vulnerabilities-in-a-single-program-64642ab2df72?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-tips, bug-bounty-writeup, ödülavcılığı, bug-bounty | 25-Jul-2025 |
| How I Chained 2FA Bypasses in a Crypto P2P System to Steal User USDT | https://0xbartita.medium.com/how-i-chained-2fa-bypasses-in-a-crypto-p2p-system-to-steal-user-usdt-ef214879c173?source=rss------bug_bounty-5 | 0xBartita | bugbounty-writeup, bug-bounty-writeup, bug-bounty, penetration-testing, bug-bounty-tips | 24-Jul-2025 |
| IDOR vulnerability gives me 2500$ | https://l4zyhacker.medium.com/idor-vulnerability-gives-me-2500-42cd077c37f1?source=rss------bug_bounty-5 | L4zyhacker | penetration-testing, bug-bounty-writeup, bug-hunting, cybersecurity, bug-bounty | 24-Jul-2025 |
| Authentication Bypass via Inconsistent Credential Validation (Phone vs Email Login) | https://medium.com/@ch1ta/authentication-bypass-via-inconsistent-credential-validation-phone-vs-email-login-2e435bc2a290?source=rss------bug_bounty-5 | Lakshya | bug-bounty, report, authentication-bypass, authentication, bug-bounty-writeup | 24-Jul-2025 |
| Web Cache Poisoning via Ambiguous Requests Lead to XSS | https://infosecwriteups.com/web-cache-poisoning-via-ambiguous-requests-lead-to-xss-aa9f9f59c079?source=rss------bug_bounty-5 | Bash Overflow | web-cache-poisoning, bug-bounty, bug-bounty-tips, xss-via-cache-poisoning, host-header-injection | 24-Jul-2025 |
| Cheapest VPS for bug bounty & pentesting | https://medium.com/meetcyber/cheapest-vps-for-bug-bounty-pentesting-388139977c36?source=rss------bug_bounty-5 | AbhirupKonwar | affordable-vps, virtual-private-server, bug-bounty, pentesting, cheap-vps | 24-Jul-2025 |
| Shell upload via Content-Type restriction bypass [ES] [PortSwigger] | https://h0lm3s.medium.com/shell-upload-via-content-type-restriction-bypass-es-portswigger-4441ec78fad0?source=rss------bug_bounty-5 | h0lm3s | technology, cybersecurity, bug-bounty, vulnerability, ethical-hacking | 24-Jul-2025 |
| The Log4j Specter Still Lingers! | https://medium.com/@umeryousuf26/the-log4j-specter-still-lingers-c6227159d729?source=rss------bug_bounty-5 | Umer Yousuf | log4j-vulnerability, bug-bounty, bug-bounty-tips, log4j, cybersecurity | 24-Jul-2025 |
| SharePoint Under Siege: Unauthenticated RCE via CVE-2025–53770 & CVE-2025–53771 | https://medium.com/@umeryousuf26/sharepoint-under-siege-unauthenticated-rce-via-cve-2025-53770-cve-2025-53771-194d489093bf?source=rss------bug_bounty-5 | Umer Yousuf | hacking, bug-bounty, sharepoint, cybersecurity, bug-bounty-tips | 24-Jul-2025 |
| ReconRover — A Reconnaissance Framework That Makes Bug Hunting Simple | https://inayathussain.medium.com/reconrover-a-reconnaissance-framework-that-makes-bug-hunting-simple-3016467ae738?source=rss------bug_bounty-5 | Inayat Hussain | penetration-testing, ethical-hacking, bug-bounty, cybersecurity, osint | 24-Jul-2025 |
| BLACKSITE OSINT v2.6 | https://inayathussain.medium.com/blacksite-osint-v2-6-c9c823620739?source=rss------bug_bounty-5 | Inayat Hussain | osint, cybersecurity, penetration-testing, ethical-hacking, bug-bounty | 24-Jul-2025 |
| Reconic Next Gen Recon Framework | https://inayathussain.medium.com/reconic-next-gen-recon-framework-18af72140a7f?source=rss------bug_bounty-5 | Inayat Hussain | osint, ethical-hacking, bug-bounty, penetration-testing, cybersecurity | 24-Jul-2025 |
| How Mobile APIs Leak Everything — Even If the App Is Secure | https://medium.com/@narendarlb123/how-mobile-apis-leak-everything-even-if-the-app-is-secure-7de79bafb345?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, information-security, bug-bounty, api, infosec | 24-Jul-2025 |
| BUG BOUNTY-Entender el negocio es entender la superficie de ataque | https://gorkaaa.medium.com/bug-bounty-entender-el-negocio-es-entender-la-superficie-de-ataque-3ce1ebbfb211?source=rss------bug_bounty-5 | Gorka | bug-bounty-writeup, bug-zero, bug-bounty-tips, bug-bounty, bugs | 24-Jul-2025 |
| Part 6: Post-Exploitation in Mobile APIs — Data Dumps, Admin Panels, and Beyond | https://medium.com/@narendarlb123/part-6-post-exploitation-in-mobile-apis-data-dumps-admin-panels-and-beyond-7c906e86791d?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, ai, bug-bounty, infosec, cybersecurity | 24-Jul-2025 |
| ️ DNS and Deception: How SSRF and Metadata Gave Me Cloud Access on a Silver Platter | https://infosecwriteups.com/%EF%B8%8F-dns-and-deception-how-ssrf-and-metadata-gave-me-cloud-access-on-a-silver-platter-e9cf97c3693f?source=rss------bug_bounty-5 | Iski | infosec, money, bug-bounty, hacking, cybersecurity | 24-Jul-2025 |
| Neutralize Stolen Passwords in 30 Minutes — LeakRadar.io | https://medium.com/@alexandrevandammepro/neutralize-stolen-passwords-in-30-minutes-leakradar-io-dba901e71f12?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, threat-intelligence, data-breach, bug-bounty, cybersecurity | 24-Jul-2025 |
| HOW I GOT MY FOUR DIGIT BOUNTY $$$$ | https://medium.com/@cyberblack222/how-i-got-my-four-digit-bounty-ae355ee9ff48?source=rss------bug_bounty-5 | cyberblack222 | bug-bounty, cybersecurity | 24-Jul-2025 |
| Cloud Reconnaissance Is a Nightmare I Built Tools to Fix It, But I’ll Only Launch Them If You Want… | https://sujalmeghwal.medium.com/cloud-reconnaissance-is-a-nightmare-i-built-tools-to-fix-it-but-ill-only-launch-them-if-you-want-3ce740c8e0aa?source=rss------bug_bounty-5 | Sujal Meghwal | hacking, bug-bounty, azure, aws, gcp | 24-Jul-2025 |
| Breaking My Silence: A Month of Milestones in Cybersecurity! | https://medium.com/@umeryousuf26/breaking-my-silence-a-month-of-milestones-in-cybersecurity-ef831aabe670?source=rss------bug_bounty-5 | Umer Yousuf | hackerone, bug-bounty, cybersecurity, yeswehack, bugbounty-writeup | 24-Jul-2025 |
| “The Art of Exploiting Open Redirects: A Hacker’s Playbook” | https://infosecwriteups.com/the-art-of-exploiting-open-redirects-a-hackers-playbook-5591242f7ebd?source=rss------bug_bounty-5 | Aman Sharma | programming, cybersecurity, money, bug-bounty, hacking | 24-Jul-2025 |
| Discovered a Reflected HTML Injection on Microsoft Learn That Earned a Spot in Microsoft’s Hall of… | https://medium.com/@gourisankara357/discovered-a-reflected-html-injection-on-microsoft-learn-that-earned-a-spot-in-microsofts-hall-of-aa607a52e077?source=rss------bug_bounty-5 | Gouri Sankar A | microsoft, infosec, bug-bounty-writeup, bug-bounty | 24-Jul-2025 |
| Pre-Account Takeover via OAuth Misconfiguration | https://infosecwriteups.com/pre-account-takeover-via-oauth-misconfiguration-0e393cda1f7e?source=rss------bug_bounty-5 | Ehtesham Ul Haq | bug-bounty-tips, penetration-testing, bug-bounty, oauth, writeup | 24-Jul-2025 |
| Dom-Based Xss | https://infosecwriteups.com/dom-based-xss-fa913b66b09b?source=rss------bug_bounty-5 | Monika sharma | vulnerability, technology, bug-bounty, penetration-testing, javascript | 24-Jul-2025 |
| ️ Discover Domain Ownership Instantly — A Free WHOIS and Subdomain Lookup Tool for OSINT &… | https://medium.com/@thirdeye1910/%EF%B8%8F-discover-domain-ownership-instantly-a-free-whois-and-subdomain-lookup-tool-for-osint-120f67cecb99?source=rss------bug_bounty-5 | Haxshadow | bug-bounty, osint, infosec, whois, cybersecurity | 24-Jul-2025 |
| CTF Day(43) | https://medium.com/@ahmednarmer1/ctf-day-43-1a92e694ba8a?source=rss------bug_bounty-5 | Ahmed Narmer | web-penetration-testing, web-pen-testing, ctf, cybersecurity, bug-bounty | 24-Jul-2025 |
| How a Reflected XSS Vulnerability Earned Me a Hall-of-Fame Spot | https://medium.com/@ibtissamhammadi1/how-a-reflected-xss-vulnerability-earned-me-a-hall-of-fame-spot-1d36f87705ff?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, web-security, programming, bug-bounty, cybersecurity | 24-Jul-2025 |
| Zero-Day Nightmare: How a Turkish Espionage Group Exploited Output Messenger | https://medium.com/@kalariyahet23/zero-day-nightmare-how-a-turkish-espionage-group-exploited-output-messenger-12025f58e935?source=rss------bug_bounty-5 | Kalariya Het | cybersecurity, bug-bounty | 24-Jul-2025 |
| A Deep Dive into a Critical Vulnerability in Clockwork | https://0vulns.medium.com/a-deep-dive-into-a-critical-vulnerability-in-clockwork-f68ddb5ec48c?source=rss------bug_bounty-5 | 0vulns | bug-bounty, laravel-telescope, bug-bounty-tips, cybersecurity, security-research | 24-Jul-2025 |
| How I Chained 2FA Bypasses in a Crypto P2P System to Steal User USDT | https://0xbartita.medium.com/how-i-chained-2fa-bypasses-in-a-crypto-p2p-system-to-steal-user-usdt-ed68ee078998?source=rss------bug_bounty-5 | 0xBartita | hackerone, hackenproof, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 24-Jul-2025 |
| Security Misconfiguration (OWASP A05): Hacking and Bug Bounty Guide | https://medium.com/@jpablo13/security-misconfiguration-owasp-a05-hacking-and-bug-bounty-guide-d45c3a4438ae?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, ethical-hacking, penetration-testing, bug-bounty, web-development | 23-Jul-2025 |
| 10 Prerequisites Before Your First Bug Bounty (And the Tools to Get You Started) | https://medium.com/@saltinehacker/10-prerequisites-before-your-first-bug-bounty-and-the-tools-to-get-you-started-9ad3635189b1?source=rss------bug_bounty-5 | Travis Ray Caverhill | bug-bounty, bug-bounty-tips, bug-bounty-writeup, ethical-hacking, cybersecurity | 23-Jul-2025 |
| Referer-Based Access Control: Exploit Referer Headers to Bypass Access Control | https://bashoverflow.medium.com/referer-based-access-control-exploit-referer-headers-to-bypass-access-control-dacd57ab832a?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, referer-header-flaw, privilege-escalation, bypass-control-header, http-referer-spoofing | 23-Jul-2025 |
| API vulnerability make me $500. | https://medium.com/@anandrishav2228/api-vulnerability-make-me-500-b58e1f235ecf?source=rss------bug_bounty-5 | Rishav anand | money, api, bug-bounty, cybersecurity, vulnerability | 23-Jul-2025 |
| Remote code execution via web shell upload [ES] [PortSwigger] | https://h0lm3s.medium.com/remote-code-execution-via-web-shell-upload-es-portswigger-52ee16a59dda?source=rss------bug_bounty-5 | h0lm3s | vulnerability, ethical-hacking, bug-bounty, hacking, cybersecurity | 23-Jul-2025 |
| CTF Day(40) | https://medium.com/@ahmednarmer1/ctf-day-40-74dc4866e071?source=rss------bug_bounty-5 | Ahmed Narmer | web-pen-testing, bug-bounty, web-penetration-testing, ctf, cybersecurity | 23-Jul-2025 |
| Easy $370 Bug Bounty Income | A Must-Try for Beginners | https://medium.com/@rashad.desk/easy-370-bug-bounty-income-a-must-try-for-beginners-a87f73fc0fcc?source=rss------bug_bounty-5 | Rashadul Islam | bug-bounty, freelancing, make-money-online, money, success | 23-Jul-2025 |
| How I Got a $250 Premium Plan for Just $12 — No Coupons, No Hacks, Just Logic | https://zuksh.medium.com/how-i-got-a-250-premium-plan-for-just-12-no-coupons-no-hacks-just-logic-b271c4de74e6?source=rss------bug_bounty-5 | Zuksh | business-logic-bug, zuksh, hacking, broken-access-control, bug-bounty | 23-Jul-2025 |
| “JS is the New S3”: How I Mined Tokens, PII & DevOps Secrets From JavaScript for Bounties | https://medium.com/@narendarlb123/js-is-the-new-s3-how-i-mined-tokens-pii-devops-secrets-from-javascript-for-bounties-13b6bdf1b829?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | javascript, ai, infosec, information-security, bug-bounty | 23-Jul-2025 |
| Cybersécurité en Suisse : actualités du 23 juil 2025 | https://marcbarbezat.medium.com/cybers%C3%A9curit%C3%A9-en-suisse-actualit%C3%A9s-du-23-juil-2025-8ab7e47d3445?source=rss------bug_bounty-5 | Marc Barbezat | suisse, noname, be-login, bug-bounty, crypto-monnaies | 23-Jul-2025 |
| SSRF to S3 to Shell: The One-Key Takeover That Started With a Misconfigured Proxy | https://medium.com/@narendarlb123/ssrf-to-s3-to-shell-the-one-key-takeover-that-started-with-a-misconfigured-proxy-c3149003630c?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, bug-bounty, ai, infosec | 23-Jul-2025 |
| Shodan Sniper: How I Found 3 Bugs Without Touching a Browser | https://medium.com/@narendarlb123/shodan-sniper-how-i-found-3-bugs-without-touching-a-browser-1844d3f756f6?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, infosec, cybersecurity, ai | 23-Jul-2025 |
| The Psychology of Bug Bounties: Why I Keep Hunting Even Without Rewards | https://medium.com/@viratavi1223/the-psychology-of-bug-bounties-why-i-keep-hunting-even-without-rewards-75fb455827c8?source=rss------bug_bounty-5 | Viratavi | bug-bounty, cybersecurity, lifehacker, ethical-hacking, infosec | 23-Jul-2025 |
| Referer-Based Access Control: Exploit Referer Headers to Bypass Access Control | https://infosecwriteups.com/referer-based-access-control-exploit-referer-headers-to-bypass-access-control-dacd57ab832a?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, referer-header-flaw, privilege-escalation, bypass-control-header, http-referer-spoofing | 23-Jul-2025 |
| Behind CVE-2025–26206: What I Found, How I Found It, and Why It Matters | https://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5 | SIBHI | ethical-hacking, cve-2025-26206, bug-bounty, vulnerability, cybersecurity | 23-Jul-2025 |
| 2. Setting Up the Ultimate Hacker’s Lab (Free Tools Only) | https://infosecwriteups.com/2-setting-up-the-ultimate-hackers-lab-free-tools-only-1f0debb37af1?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, writers-on-medium, hacking, bug-bounty-writeup, infosec | 23-Jul-2025 |
| Prototype Pollution Vulnerability: Full Technical Guide | https://medium.com/@SKaif009/prototype-pollution-vulnerability-full-technical-guide-1e57fb09d83f?source=rss------bug_bounty-5 | Shah kaif | bugs, prototype-pollution, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 23-Jul-2025 |
| “Mastering SQL Injection: Real-World Exploits and Advanced Techniques” | https://infosecwriteups.com/mastering-sql-injection-real-world-exploits-and-advanced-techniques-90e2adedcdb0?source=rss------bug_bounty-5 | Aman Sharma | technology, cybersecurity, hacking, bug-bounty, programming | 23-Jul-2025 |
| Tools you should use as a Web3 hacker | https://medium.com/@stupid_contract/tools-you-should-use-as-a-web3-hacker-2dde7103a1f7?source=rss------bug_bounty-5 | Stupid Contract | smart-contracts, bug-bounty, web3-security, blockchain-security, smart-contract-security | 23-Jul-2025 |
| CTF Day(41) | https://medium.com/@ahmednarmer1/ctf-day-41-fe36ae3311b0?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, web-pen-testing, web-penetration-testing, bug-bounty, cybersecurity | 23-Jul-2025 |
| Open Redirect Vulnerability in EXBO’s Support Domain | https://medium.com/@ch1ta/open-redirect-vulnerability-in-exbos-support-domain-e7b0b39851af?source=rss------bug_bounty-5 | Lakshya | open-redirect, bug-bounty, bug-report, bug-bounty-writeup, bugs | 23-Jul-2025 |
| Behind CVE-2025–26206: What I Found, How I Found It, and Why It Matters. | https://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5 | Sibhi Balamurugan | ethical-hacking, cve-2025-26206, bug-bounty, vulnerability, cybersecurity | 23-Jul-2025 |
| From SVG to XSS: How I Found a Stored XSS in a Real Bug Bounty Target | https://medium.com/@essamezzat/from-svg-to-xss-how-i-found-a-stored-xss-in-a-real-bug-bounty-target-8fd923da78eb?source=rss------bug_bounty-5 | Essam Ezzat | penetration-testing, cybersecurity, bug-bounty, hackerone, stored-xss | 23-Jul-2025 |
| WAF bypass technique — Part 2 | https://medium.com/@yee-yore/waf-bypass-technique-part-2-5fc08a05a868?source=rss------bug_bounty-5 | yee-yore | red-team, hacking, bug-bounty, pentesting, bug-bounty-tips | 23-Jul-2025 |
| Menganalisis Kerentanan Rails Debug Mode pada Ruby on Rails | https://medium.com/@ahmadfaizabdilla/menganalisis-kerentanan-rails-debug-mode-pada-ruby-on-rails-c9aa6e0e4967?source=rss------bug_bounty-5 | Ahmadfaizabdillah | bug-bounty, bug-bounty-tips, bug-bounty-writeup, ruby-on-rails-development, ruby-on-rails | 23-Jul-2025 |
| “Bug Bounty CVE-2025–0133 PAN-OS: Reflected Cross-Site Scripting (XSS) “Most Exploited… | https://medium.com/@hariharanhex00/bug-bounty-cve-2025-0133-pan-os-reflected-cross-site-scripting-xss-most-exploited-79832916cfcd?source=rss------bug_bounty-5 | HariHaranK | hackerone, bug-bounty-writeup, bug-bounty-tips, bug-bounty, cve-2025-0133 | 23-Jul-2025 |
| Exploiting server-side parameter pollution in a query string PortSwigger Lab Write-up | https://medium.com/@Mohamed-Medhat/exploiting-server-side-parameter-pollution-in-a-query-string-portswigger-lab-write-up-df8e838acd13?source=rss------bug_bounty-5 | Mohamed Medhat | portswigger, vulnerability, bug-bounty, portswigger-lab | 23-Jul-2025 |
| Starting Over with Bug Bounty (Again) | https://aditya-narayan.medium.com/starting-over-with-bug-bounty-again-01abcc40174a?source=rss------bug_bounty-5 | Aditya Narayan | discipline, money, motivation, bug-bounty, cybersecurity | 23-Jul-2025 |
| Becoming a top 1% Ethical Hacker! | https://medium.com/@ajaychandrn/becoming-a-top-1-ethical-hacker-7204efef721f?source=rss------bug_bounty-5 | Ajay Chandran | hacker, how-to-become-hacker, top-1-percent, ethical-hacking, bug-bounty | 23-Jul-2025 |
| CTF Day(42) | https://medium.com/@ahmednarmer1/ctf-day-42-a77a615ad65e?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, bug-bounty, cybersecurity, web-pen-testing, web-penetration-testing | 23-Jul-2025 |
| Why You Should Write More Bugs (Seriously) | https://medium.com/@sohail_saifi/why-you-should-write-more-bugs-seriously-87f84af4802c?source=rss------bug_bounty-5 | Sohail Saifi | computer-science, error-handling, programming, bug-bounty, software-development | 23-Jul-2025 |
| 20 Browser Extensions I Can’t Live Without as a Security Researcher | https://r4gh4v.medium.com/20-browser-extensions-i-cant-live-without-as-a-security-researcher-9c180ae88a2e?source=rss------bug_bounty-5 | w00lfff | chrome-extension, bug-bounty, firefox, hacking, reconnaissance | 23-Jul-2025 |
| Don’t Trust the Path: Web Cache Deception Deep Dive | https://medium.com/@mostafa.rashidy55/dont-trust-the-path-web-cache-deception-deep-dive-8efe6953380d?source=rss------bug_bounty-5 | Mostafa Rashidy | web-pentesting, web-penetration-testing, bug-bounty-tips, bug-bounty, web-pen-testing | 23-Jul-2025 |
| ️♂️ Recon to Master: The Complete Bug Bounty Checklist | https://osintteam.blog/%EF%B8%8F-%EF%B8%8F-recon-to-master-the-complete-bug-bounty-checklist-239ecca2fd5c?source=rss------bug_bounty-5 | Vipul Sonule | hacking, cybersecurity, tech, programming, bug-bounty | 23-Jul-2025 |
| $700 Bounty For Stored XSS | https://osintteam.blog/700-bounty-for-stored-xss-19277a9c079b?source=rss------bug_bounty-5 | Monika sharma | xss-attack, penetration-testing, vulnerability, technology, bug-bounty | 23-Jul-2025 |
| $5,300 Bounty: Shopify Admin XSS | https://medium.com/h7w/5-300-bounty-shopify-admin-xss-20459892cdc3?source=rss------bug_bounty-5 | Monika sharma | technology, vulnerability, shopify, bug-bounty, xss-attack | 23-Jul-2025 |
| Exploiting Stored XSS in a Payment Support System: From Payload Injection to Cookie Theft | https://medium.com/@EroHack0/exploiting-stored-xss-in-a-payment-support-system-from-payload-injection-to-cookie-theft-7cd538c184f0?source=rss------bug_bounty-5 | EroHack | bug-bounty, xss-vulnerability, web-security, stored-xss, xss-attack | 23-Jul-2025 |
| Security Misconfiguration (OWASP A05): Guía de Hacking y Bug Bounty | https://medium.com/@jpablo13/security-misconfiguration-owasp-a05-gu%C3%ADa-de-hacking-y-bug-bounty-566c927d0228?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, bug-bounty, ethical-hacking, penetration-testing, web-development | 22-Jul-2025 |
| Basic SSRF against another back-end system [ES] [PortSwigger] | https://h0lm3s.medium.com/basic-ssrf-against-another-back-end-system-es-portswigger-0758cfd90119?source=rss------bug_bounty-5 | h0lm3s | ethical-hacking, bug-bounty, owasp, cybersecurity, portswigger | 22-Jul-2025 |
| XSS and CSRF Chaining | https://medium.com/@arsenatic/xss-and-csrf-chaining-d88d03c2b77c?source=rss------bug_bounty-5 | Samuel Parlindungan Ulysses | bug-bounty, web-penetration-testing, penetration-testing | 22-Jul-2025 |
| How I Accidentally Became a Bug Hunter !.. | https://medium.com/@errro6838/how-i-accidentally-became-a-bug-hunter-b6e5a143e889?source=rss------bug_bounty-5 | Writer | hacking, tech, bug-bounty, cybersecurity, my-first-post | 22-Jul-2025 |
| Understanding and Identifying Race Conditions in Web Security | https://yashpawar1199.medium.com/understanding-and-identifying-race-conditions-in-web-security-f8f375467070?source=rss------bug_bounty-5 | Yash Pawar @HackersParadise | web-application-security, race-condition, exploit-race-conditions, bug-bounty, parallel-request-exploit | 22-Jul-2025 |
| My First Bug Got Duped — And I’m Weirdly Proud of It | https://medium.com/@viratavi1223/my-first-bug-got-duped-and-im-weirdly-proud-of-it-02a05b79447a?source=rss------bug_bounty-5 | Viratavi | hacking-story, bug-bounty, cybersecurity, first-bug, hacker-journey | 22-Jul-2025 |
| Understanding the Log4j (Log4Shell) Vulnerability: A Simple Explanation with Example | https://medium.com/@shalomo.social/understanding-the-log4j-log4shell-vulnerability-a-simple-explanation-with-example-a20135803956?source=rss------bug_bounty-5 | Shalomo Agarwarkar | bug-bounty, vulnerability, cybersecurity, programming, log4j | 22-Jul-2025 |
| Hey everyone! | https://zwanski.medium.com/hey-everyone-b740dfe67713?source=rss------bug_bounty-5 | zwanski tech | ctf, ethical-hacking, cybersecurity, bug-bounty, hack-to-learn | 22-Jul-2025 |
| Detecting the Possibility of Cross-Site Scripting (XSS) and Checking for False Positives | https://medium.com/@shalomo.social/detecting-the-possibility-of-cross-site-scripting-xss-and-checking-for-false-positives-0eb3a34c743f?source=rss------bug_bounty-5 | Shalomo Agarwarkar | xss-attack, technology, xss-vulnerability, cybersecurity, bug-bounty | 22-Jul-2025 |
| BUG BOUNTY-La lógica rota no lanza errores. Sólo oportunidades. | https://gorkaaa.medium.com/bug-bounty-la-l%C3%B3gica-rota-no-lanza-errores-s%C3%B3lo-oportunidades-bc97104ef0fc?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bug-bounty, bug-bounty-writeup, bugs | 22-Jul-2025 |
| How I Found a CORS Misconfiguration that let me change user address | https://medium.com/@nuhmanjaseelap17/how-i-found-a-cors-misconfiguration-that-let-me-change-user-address-97006df4913c?source=rss------bug_bounty-5 | Nuhman Jaseel A P | cors, bug-bounty, hacking, penetration-testing, cybersecurity | 22-Jul-2025 |
| ️ Silent But Deadly: How an Ignored CSP Header Let My XSS Slip Through Like a Ninja ⚔️ | https://infosecwriteups.com/%EF%B8%8F-silent-but-deadly-how-an-ignored-csp-header-let-my-xss-slip-through-like-a-ninja-%EF%B8%8F-8561307f7b03?source=rss------bug_bounty-5 | Iski | money, infosec, cybersecurity, bug-bounty, hacking | 22-Jul-2025 |
| Extract — Grep — Curl | A $50000 Bug POC Methodology | https://infosecwriteups.com/extract-grep-curl-a-50000-bug-poc-methodology-16365489de92?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, hacking, exposure, github, token | 22-Jul-2025 |
| Dorks For Sensitive Information Disclosure Part-2 | https://medium.com/@devanshpatel930/dorks-for-sensitive-information-disclosure-part-2-4355b479d2aa?source=rss------bug_bounty-5 | Zuri | bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup, google-dorks-list | 22-Jul-2025 |
| WAFirewall Bypass Payloads. | https://medium.com/@anandrishav2228/wafirewall-bypass-payloads-db6988828448?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, hacking, money, bug-bounty, firewall | 22-Jul-2025 |
| Understanding the WAF to Bypass it . | https://medium.com/@anandrishav2228/understanding-the-waf-to-bypass-it-749aab2a8473?source=rss------bug_bounty-5 | Rishav anand | hacker, waf, cybersecurity, money, bug-bounty | 22-Jul-2025 |
| From Leak to Exploit: Full Kill Chains Using Public Secrets | https://medium.com/@narendarlb123/from-leak-to-exploit-full-kill-chains-using-public-secrets-eb00d6846a79?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, bug-bounty, information-security, ai, cybersecurity | 22-Jul-2025 |
| ️♂️ “The Secrets Hunter’s Playbook: How Attackers Automate API Key Recon Across the Web” | https://medium.com/@narendarlb123/%EF%B8%8F-%EF%B8%8F-the-secrets-hunters-playbook-how-attackers-automate-api-key-recon-across-the-web-252b035c2348?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, infosec, information-security, bug-bounty, ai | 22-Jul-2025 |
| CVE-2025–25257: FortiWeb SQL Injection to RCE Exposed | https://medium.com/@kalariyahet23/cve-2025-25257-fortiweb-sql-injection-to-rce-exposed-9a2e0e9dd78e?source=rss------bug_bounty-5 | Kalariya Het | vulnerability, rce, hacking, bug-bounty, kali-linux | 22-Jul-2025 |
| Understanding the DPDP Act: A Practical Approach to Compliance | https://medium.com/@forte.social/understanding-the-dpdp-act-a-practical-approach-to-compliance-df76667c8aec?source=rss------bug_bounty-5 | eSecForte Technologies | bug-bounty, cybersecurity, compliance, dpdp | 22-Jul-2025 |
| Business logic vulnerabilities | https://medium.com/@MUHTADIN/business-logic-vulnerabilities-e3522d676e62?source=rss------bug_bounty-5 | MUHTADIN | burpsuite, web-security-academy, cybersecurity, bug-bounty, pentester | 22-Jul-2025 |
| SAP NetWeaver Breach: How APTs Exploited Critical Flaws | https://medium.com/@kalariyahet23/sap-netweaver-breach-how-apts-exploited-critical-flaws-3019a7c597df?source=rss------bug_bounty-5 | Kalariya Het | cybersecurity, ai, sap, bug-bounty, hacking | 22-Jul-2025 |
| “CSRF Hacking: Real-World Exploits and How to Stop Them” | https://infosecwriteups.com/csrf-hacking-real-world-exploits-and-how-to-stop-them-df8dc1a79f46?source=rss------bug_bounty-5 | Aman Sharma | programming, bug-bounty, technology, money, cybersecurity | 22-Jul-2025 |
| SMTP Auto Parser & Renderer | https://medium.com/@bobby.S/smtp-auto-parser-renderer-c426f973cc47?source=rss------bug_bounty-5 | 0xBobby | punycode, bug-bounty, account-takeover, bug-bounty-tips, bugbounty-writeup | 22-Jul-2025 |
| Bullbit Guidelines For Bug Detection | https://medium.com/@bullbitofficial/bullbitguidelines-for-bug-detection-e26a8f369412?source=rss------bug_bounty-5 | Bullbit AI | bug-bounty, bullbit-ai | 22-Jul-2025 |
| Think Like a Hacker, Act Like a Hero | https://medium.com/@cuncis/think-like-a-hacker-act-like-a-hero-7487da934220?source=rss------bug_bounty-5 | Cuncis | hacking, penetration-test, ethical-hacking, penetration-testing, bug-bounty | 22-Jul-2025 |
| The Power of Reading Documentation Leads to Low‑Hanging Fruit | https://medium.com/@mahdisalhi0500/the-power-of-reading-documentation-leads-to-low-hanging-fruit-515d2a98190e?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | penetration-testing, hacking, cybersecurity, information-security, bug-bounty | 22-Jul-2025 |
| Zero-Click Account Takeover: The Power of JavaScript Analysis | https://medium.com/@ali_saadi/zero-click-account-takeover-the-power-of-javascript-analysis-4f1d4fc36a00?source=rss------bug_bounty-5 | Ali Saadi | javascript, web-development, cybersecurity, bug-bounty, web-security | 22-Jul-2025 |
| Google XSS Game Writeup — By Cybernerddd | https://medium.com/@cybernerddd/google-xss-game-writeup-by-cybernerddd-a44b0714ab42?source=rss------bug_bounty-5 | Cybernerddd | cybersecurity, xss-attack, ethical-hacking, bug-bounty, web-app-security | 22-Jul-2025 |
| Bypassing Payment Billing to Assign Admin Role via Business Logic Bug | https://medium.com/@HBlackGhost/bypassing-payment-billing-to-assign-admin-role-via-business-logic-bug-f925d4266bb3?source=rss------bug_bounty-5 | HBlack Ghost | broken-access-control, bug-bounty, hblackghost, hacking, business-logic-bug | 22-Jul-2025 |
| From Customer to Admin: Real-World IDOR in an E-Commerce Platform | https://santhosh-adiga-u.medium.com/from-customer-to-admin-real-world-idor-in-an-e-commerce-platform-18e452280bb8?source=rss------bug_bounty-5 | Santhosh Adiga U | bug-bounty-writeup, bug-bounty-tips, bug-bounty, idor, broken-access-control | 22-Jul-2025 |
| How to find .JS files for vulnerabilities: A Bug Bounty Hunter’s Guide | https://medium.com/@ibtissamhammadi1/how-to-find-js-files-for-vulnerabilities-a-bug-bounty-hunters-guide-3ecf207b4845?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, technology, bug-bounty, javascript, cybersecurity | 22-Jul-2025 |
| ️ Exploiting Stored XSS to Bypass CSRF Protection and Gain Admin Access | https://medium.com/@ag.gholami.2006/%EF%B8%8F-exploiting-stored-xss-to-bypass-csrf-protection-and-gain-admin-access-a62530977a5b?source=rss------bug_bounty-5 | Ali Ziro | cybersecurity, pentesting, web-application-security, web-penetration-testing, bug-bounty | 22-Jul-2025 |
| How I Took Over a Forgotten Google Storage Bucket Used to Distribute Helm Binaries | https://infosecwriteups.com/how-i-took-over-a-forgotten-google-storage-bucket-used-to-distribute-helm-binaries-374ae959179f?source=rss------bug_bounty-5 | Arshad Kazmi | bug-bounty, storage-bucket, bugcrowd, bucket-takeover, hackerone | 22-Jul-2025 |
| DOM-Based XSS via eval() in ajax-cart.js | https://medium.com/@darsh.0exploite/dom-based-xss-via-eval-in-ajax-cart-js-9cfd4e845ec1?source=rss------bug_bounty-5 | Mostafa Ghanem | xss-attack, web-security, javascript, bug-bounty, infosec | 22-Jul-2025 |
| Open Redirect Vulnerability (CTF-Based) | https://medium.com/@0xMuhammet/open-redirect-vulnerability-ctf-based-922fa40d36ff?source=rss------bug_bounty-5 | Muhammet Alperen Şıvgın | web-security, ctf, bug-bounty, open-redirect, cybersecurity | 22-Jul-2025 |
| Beginner Bug Hunters Must Try this Bug !! | https://medium.com/@tsxninja2004/beginner-bug-hunters-must-try-this-bug-f2adb9ddc74a?source=rss------bug_bounty-5 | TSxNINJA | bug-bounty, bug-bounty-tips, bug-zero, infosec, bug-bounty-writeup | 22-Jul-2025 |
| Build your own bug bounty recon tool | https://medium.com/@malwarilia/build-your-own-bug-bounty-recon-tool-aae787e7f56b?source=rss------bug_bounty-5 | Marília Rocha | recon, bug-bounty, bug-hunter, reconnaissance, bug-bounty-tips | 22-Jul-2025 |
| A Forgotten Domain, a Hidden SSRF: How I Followed a Gut Feeling and Hit Gold | https://medium.com/@rutxploit/a-forgotten-domain-a-hidden-ssrf-how-i-followed-a-gut-feeling-and-hit-gold-2dc17f743c00?source=rss------bug_bounty-5 | Rutvik Kalkumbe | hackerone, bug-bounty, bug-bounty-writeup, bug-bounty-hunter, bug-bounty-tips | 22-Jul-2025 |
| $2,000 Bounty: Exploiting a Memory Corruption in PHP’s | https://osintteam.blog/2-000-bounty-exploiting-a-memory-corruption-in-phps-5b7b384d81de?source=rss------bug_bounty-5 | Monika sharma | php, tips-and-tricks, vulnerability, penetration-testing, bug-bounty | 22-Jul-2025 |
| $1,121 Bounty: A Deep Dive into Crash.mkv | https://osintteam.blog/1-121-bounty-a-deep-dive-into-crash-mkv-2eab28c23064?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, penetration-testing, hacking, vulnerability, technology | 22-Jul-2025 |
| How I Found My First Open Redirect During Recon + TIPS! | https://medium.com/@Tenebris_Venator/how-i-found-my-first-open-redirect-during-recon-tips-e36f2a5b1a31?source=rss------bug_bounty-5 | Tenebris Venator | tips, hacking, bug-bounty, pentesting, technology | 22-Jul-2025 |
| $1000 Bounty: Changing a Victim’s JIRA Integration | https://medium.com/h7w/1000-bounty-changing-a-victims-jira-integration-02611a90d1f2?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, jira, bug-bounty, vulnerability, technology | 22-Jul-2025 |
| DeepSeek AI: Security Flaws and Privacy Risks Exposed | https://medium.com/@kalariyahet23/deepseek-ai-security-flaws-and-privacy-risks-exposed-57a6836940ea?source=rss------bug_bounty-5 | Kalariya Het | bug-bounty, hacking, ai, cyberse, hacks | 21-Jul-2025 |
| How I Got $25K just in 14 Days from “Hacking”? [Bahasa Indonesia] | https://ronafebriana.medium.com/how-i-got-25k-just-in-14-days-from-hacking-bahasa-indonesia-63eff69bdd6e?source=rss------bug_bounty-5 | Rona Febriana | bug-hunting, cybersecurity, strategi-bug-bounty, rona-febriana, bug-bounty | 21-Jul-2025 |
| 404 to Fortune: How a Broken Link Uncovered Internal APIs & Staged Dev Dumps | https://infosecwriteups.com/404-to-fortune-how-a-broken-link-uncovered-internal-apis-staged-dev-dumps-235aa80c2406?source=rss------bug_bounty-5 | Iski | cybersecurity, infosec, money, bug-bounty, hacking | 21-Jul-2025 |
| CTF Day(37) | https://medium.com/@ahmednarmer1/ctf-day-37-9587a06c6498?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, ctf, bug-bounty, web-pen-testing, web-penetration-testing | 21-Jul-2025 |
| How I Found a Business Logic Flaw in a Growing EdTech Website (P1 Bug) | https://medium.com/legionhunters/how-i-found-a-business-logic-flaw-in-a-growing-edtech-website-p1-bug-097a75290e72?source=rss------bug_bounty-5 | Tamilselvan A K | business-logic-flaw, bug-bounty, cybersecurity, github, medium | 21-Jul-2025 |
| Bug Hunter’s Career is going to End Be Alert ! [in 2025] | https://infosecwriteups.com/bug-hunters-career-is-going-to-end-be-alert-in-2025-aa05dc8a6f13?source=rss------bug_bounty-5 | Mr Horbio | ethical-hacking, bug-bounty, penetration-testing, hacking, cybersecurity | 21-Jul-2025 |
| How I Found a Bug in 1 minute | https://infosecwriteups.com/how-i-found-a-bug-in-1-minute-c81dc179d0aa?source=rss------bug_bounty-5 | RivuDon | bug-bounty, ethical-hacking, infosec, bug-bounty-tips, bug-bounty-writeup | 21-Jul-2025 |
| $500 Bounty: DOM-Based XSS in Gatecoin’s Charting Library | https://infosecwriteups.com/500-bounty-dom-based-xss-in-gatecoins-charting-library-e21e40c4f270?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, vulnerability, javascript, technology, penetration-testing | 21-Jul-2025 |
| I Followed This Recon Checklist and Found 12 Bugs in 1 Week | https://infosecwriteups.com/i-followed-this-recon-checklist-and-found-12-bugs-in-1-week-1e546a0d8b2e?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, reconnaissance, bug-bounty, infosec, technology | 21-Jul-2025 |
| Xss injection Automation | https://medium.com/@anandrishav2228/xss-injection-automation-d44d4b53664c?source=rss------bug_bounty-5 | Rishav anand | hacking, xss-attack, bug-bounty, cybersecurity, money | 21-Jul-2025 |
| Mastering Subfinder for Bug Bounty: My Secret Weapon for Finding Hidden Subdomains ️♂️ | https://cybersecuritywriteups.com/mastering-subfinder-for-bug-bounty-my-secret-weapon-for-finding-hidden-subdomains-%EF%B8%8F-%EF%B8%8F-91a62d04651d?source=rss------bug_bounty-5 | Krish_cyber | hacking, bug-bounty, cybersecurity, info-sec-writeups, subfinder | 21-Jul-2025 |
| How I learned about Subdomain takeover? | https://medium.com/@cosmicbyt3/how-i-learned-about-subdomain-takeover-e4823366b3f8?source=rss------bug_bounty-5 | CosmicByte | bug-bounty, subdomain, ethical-hacking, information-security, subdomain-takeover | 21-Jul-2025 |
| Top 5 Bug Bounty Myths I Believed (And Why They’re So Wrong, It Hurts) | https://medium.com/@viratavi1223/top-5-bug-bounty-myths-i-believed-and-why-theyre-so-wrong-it-hurts-7df14d68ae63?source=rss------bug_bounty-5 | Viratavi | bug-bounty, ethical-hacking, cybersecurity, infosec, hacking | 21-Jul-2025 |
| DOGE Data Breach: A Cybersecurity Wake-Up Call | https://medium.com/@kalariyahet23/introduction-0fc5099a4b51?source=rss------bug_bounty-5 | Kalariya Het | infosec, bug-bounty, hacking, cybersecurity, ai | 21-Jul-2025 |
| CTF Day(38) | https://medium.com/@ahmednarmer1/ctf-day-38-89735a37ed5f?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, web-penetration-testing, web-pen-testing, cybersecurity, bug-bounty | 21-Jul-2025 |
| How to Instantly Find a Full WordPress Site Takeover (In Just Minutes!) | https://medium.com/@josekuttykunnelthazhebinu/how-to-instantly-find-a-full-wordpress-site-takeover-in-just-minutes-1d8f7ef2cad0?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | cybersecurity, hacking, bug-bounty, programming, pentesting | 21-Jul-2025 |
| CTF Day(39) | https://medium.com/@ahmednarmer1/ctf-day-39-a7da094645ce?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, ctf, web-pen-testing, bug-bounty, web-penetration-testing | 21-Jul-2025 |
| How we automated our recon at scale | https://medium.com/@profundis.io/how-we-automated-our-recon-at-scale-ee0a3b6bcb04?source=rss------bug_bounty-5 | profundis.io | ethical-hacking, bugbounty-writeup, devops, cybersecurity, bug-bounty | 21-Jul-2025 |
| “403 Forbidden? | https://medium.com/@uday637/403-forbidden-a0843052612f?source=rss------bug_bounty-5 | Uday | bug-bounty-tips, vdp, hacking, bug-bounty, bug-hunting | 21-Jul-2025 |
| Lab: Username enumeration via different responses | https://infosecwriteups.com/lab-username-enumeration-via-different-responses-15d06fa9fb99?source=rss------bug_bounty-5 | Mukilan Baskaran | infosec, cybersecurity, authentication, bug-bounty, information-security | 21-Jul-2025 |
| How to Set Up a VPS for Bug Bounty: DigitalOcean Setup Guide + Essential Tools (2025) | https://medium.com/@mandeep.j9988/how-to-set-up-a-vps-for-bug-bounty-digitalocean-setup-guide-essential-tools-2025-4212366d79f9?source=rss------bug_bounty-5 | Manzjson | digitalocean, penetration-testing, ethical-hacking, bug-bounty, cybersecurity | 21-Jul-2025 |
| How a Simple SSRF Exposed Millions of User Records | https://medium.com/@ibtissamhammadi1/how-a-simple-ssrf-exposed-millions-of-user-records-58b96e5f620a?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, ssrf, technology, bug-bounty, cybersecurity | 21-Jul-2025 |
| ️♂️ Hacking Lab Tutorial: Discovering Info Leaks via Backup Files with Feroxbuster | https://medium.com/@rajkumarkumawat.workup/%EF%B8%8F-%EF%B8%8F-hacking-lab-tutorial-discovering-info-leaks-via-backup-files-with-feroxbuster-f2af472d7189?source=rss------bug_bounty-5 | Rajkumar Kumawat | portswigger-lab, bug-bounty, offensive-security, cybersecurity, directorybruteforcing | 21-Jul-2025 |
| Behind the Bug: How to Write a Professional Bug Bounty Report | https://medium.com/@Yukeshwaran-N/behind-the-bug-how-to-write-a-professional-bug-bounty-report-8c78d1689184?source=rss------bug_bounty-5 | Yukeshwaran N | bug-report, ethical-hacking, cybersecurity, bug-bounty, infosec | 21-Jul-2025 |
| Go Buster Basics: A Simple Guide For Curious Beginners | https://infosecwriteups.com/go-buster-basics-a-simple-guide-for-curious-beginners-99345da92276?source=rss------bug_bounty-5 | Ayush Kumar | hacking, cybersecurity, technology, bug-bounty, linux | 21-Jul-2025 |
| How I found my first Critical SSRF (and how you can too) | https://medium.com/@Appsec_pt/how-i-found-my-first-critical-ssrf-and-how-you-can-too-b0f5fb1bd62b?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty, ssrf, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 21-Jul-2025 |
| “Mastering Stored XSS: Real-World Exploits and Advanced Bypass Techniques” | https://infosecwriteups.com/mastering-stored-xss-real-world-exploits-and-advanced-bypass-techniques-1ff2ce3a4e1e?source=rss------bug_bounty-5 | Aman Sharma | technology, cybersecurity, hacking, bug-bounty, programming | 21-Jul-2025 |
| I Found 127 Hidden Bugs in JavaScript Files Here’s How | https://javascript.plainenglish.io/i-found-127-hidden-bugs-in-javascript-files-heres-how-544f6f57346c?source=rss------bug_bounty-5 | Ibtissam hammadi | infosec, technology, javascript, bug-bounty, cybersecurity | 21-Jul-2025 |
| Stop Employee Account Takeovers Before They Start | https://medium.com/@alexandrevandammepro/stop-employee-account-takeovers-before-they-start-0805a91db60e?source=rss------bug_bounty-5 | Alexandre Vandamme | technology, siem, cybersecurity, bug-bounty, data-breach | 20-Jul-2025 |
| Did Your Exposed JS Files Just Get Your App Hacked? | https://infosecwriteups.com/did-your-exposed-js-files-just-get-your-app-hacked-2f8c43789091?source=rss------bug_bounty-5 | Ibtissam hammadi | programming, bug-bounty, cybersecurity, technology, javascript | 20-Jul-2025 |
| Remote Code Execution via Misconfigured File Upload Using Encrypted Payload (AK47WebShell) | https://medium.com/@maheshwaripuneet028/remote-code-execution-via-misconfigured-file-upload-using-encrypted-payload-ak47webshell-d34fe7bd72f3?source=rss------bug_bounty-5 | Puneet Maheshwari | bypass, file-upload, rce, cybersecurity, bug-bounty | 20-Jul-2025 |
| So… I Could Reset Someone Else’s Password by Accident? | https://medium.com/@viratavi1223/so-i-could-reset-someone-elses-password-by-accident-c140a41a8b8a?source=rss------bug_bounty-5 | Viratavi | ethical-hacking, bug-bounty, hackerone, web-security, cybersecurity | 20-Jul-2025 |
| El bug no está en el código, está en cómo se pensó el sistema | https://gorkaaa.medium.com/el-bug-no-est%C3%A1-en-el-c%C3%B3digo-est%C3%A1-en-c%C3%B3mo-se-pens%C3%B3-el-sistema-e4f986b89ce6?source=rss------bug_bounty-5 | Gorka | bugs, bug-bounty-tips, bug-bounty, hacking | 20-Jul-2025 |
| Why Your Favicon Might Be Exposing Your Infrastructure | https://infosecwriteups.com/why-your-favicon-might-be-exposing-your-infrastructure-ddc52455bd64?source=rss------bug_bounty-5 | Anmol Singh Yadav | golang, hacking, cybersecurity, infrastructure, bug-bounty | 20-Jul-2025 |
| How I Got $3K by Breaking User Accounts via IDOR & Logic Flaw — by matrixm0x1 | https://matrixm0x1.medium.com/how-i-got-3k-by-breaking-user-accounts-via-idor-logic-flaw-by-matrixm0x1-aefae835cbe3?source=rss------bug_bounty-5 | matrixm0x1 | bug-bounty-tips, bug-bounty, idor-vulnerability, broken-access-control, idor | 20-Jul-2025 |
| Perbedaan Menggunakan Tools Manual dan Automation dalam Bug Bounty | https://medium.com/@lunarx/perbedaan-menggunakan-tools-manual-dan-automation-dalam-bug-bounty-580920986d95?source=rss------bug_bounty-5 | LunarX | cybersecurity, bug-bounty | 20-Jul-2025 |
| Easiest P4 worth $60-$100 on Yandex | https://medium.com/@tsxninja2004/easiest-p4-worth-60-100-on-yandex-4ed0c291a37e?source=rss------bug_bounty-5 | TSxNINJA | information-technology, bug-bounty-writeup, cybersecurity, bug-bounty, hacking | 20-Jul-2025 |
| $500 Bounty: How a Coin Verification Race Condition Let Me Multiply Reddit Coins | https://medium.com/mr-plan-publication/500-bounty-how-a-coin-verification-race-condition-let-me-multiply-reddit-coins-b98c3054519e?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, vulnerability, technology, tips-and-tricks, bug-bounty | 20-Jul-2025 |
| From Git to Shell: How I Went from a Leaked Git Repo to Full RCE and AWS Credentials | https://shrivarshan81.medium.com/from-git-to-shell-how-a-hidden-endpoint-led-me-to-rce-and-aws-credentials-198e01fcc9f9?source=rss------bug_bounty-5 | Shrivarshan | bug-hunting, penetration-testing, cybersecurity, web-security, bug-bounty | 20-Jul-2025 |
| How I Got $3K by Breaking User Accounts via IDOR & Logic Flaw [Chained Bugs] by matrixm0x1 | https://matrixm0x1.medium.com/how-i-got-3k-by-breaking-user-accounts-via-idor-logic-flaw-chained-bugs-by-matrixm0x1-38e5fb3906a0?source=rss------bug_bounty-5 | matrixm0x1 | idor-vulnerability, bug-bounty-tips, bug-bounty, broken-access-control, idor | 20-Jul-2025 |
| Automating XSS and SQL Injection Discovery: From Manual Testing to Python Scripting | https://medium.com/@Tenebris_Venator/automating-xss-and-sql-injection-discovery-from-manual-testing-to-python-scripting-c30145ab20ac?source=rss------bug_bounty-5 | Tenebris Venator | bug-bounty, xss-attack, hacking, technology, sql | 20-Jul-2025 |
| Earn from $20 to $20,000 by Bug Bounty! The Ultimate Guide for Beginners | https://medium.com/@rashad.desk/earn-from-20-to-20-000-by-bug-bounty-the-ultimate-guide-for-beginners-3aea9735f9a7?source=rss------bug_bounty-5 | Rashadul Islam | bug-bounty, freelancing, success, bug-bounty-writeup, make-money-online | 20-Jul-2025 |
| Week 5— Learning Basic Concepts of Cybersecurity | https://infosecwriteups.com/week-5-learning-basic-concepts-of-cybersecurity-ae310b92ab71?source=rss------bug_bounty-5 | Aang | ethical-hacking, information-security, information-technology, bug-bounty, web-security | 20-Jul-2025 |
| $150 — Broken Access Control | HackerOne Bug Bounty Program — My First Bounty! | https://medium.com/@BugBountyWriteups/150-broken-access-control-hackerone-bug-bounty-program-my-first-bounty-239aff71376f?source=rss------bug_bounty-5 | BugBountyWriteups | bounty-program, infosec-write-ups, infosec, bug-bounty-tips, bug-bounty | 20-Jul-2025 |
| Step-by-Step Guide to Real-World Information Disclosure Vulnerabilities | https://medium.com/@rajkumarkumawat.workup/step-by-step-guide-to-real-world-information-disclosure-vulnerabilities-4da3377d780f?source=rss------bug_bounty-5 | Rajkumar Kumawat | bug-bounty, vulnerability-assessment, web-security, information-disclosure, tools | 20-Jul-2025 |
| How I Automated Recon, Scanning, and Exploitation with GPT + Burp (Deep Dive) | https://medium.com/@narendarlb123/how-i-automated-recon-scanning-and-exploitation-with-gpt-burp-deep-dive-9df09313eed2?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, cybersecurity, ai, bug-bounty, infosec | 20-Jul-2025 |
| Staging Sites, Admin:Admin, and a $500 Payday | https://medium.com/@rutxploit/staging-sites-admin-admin-and-a-500-payday-f45cc481ad1a?source=rss------bug_bounty-5 | Rutvik Kalkumbe | bugbounty-writeup, bug-bounty-writeup, bug-bounty, hackerone, bug-bounty-tips | 20-Jul-2025 |
| Chaining Vulnerabilities for Account Takeovers | https://medium.com/@narendarlb123/chaining-vulnerabilities-for-account-takeovers-26fa6183216d?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, cybersecurity, infosec, information-security, bug-bounty | 20-Jul-2025 |
| Weaponizing Misconfigurations | https://medium.com/@narendarlb123/weaponizing-misconfigurations-8044949aa7f9?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, api, cybersecurity, infosec, information-security | 20-Jul-2025 |
| Stop Wasting Hours Searching for Cybersecurity Resources — I Built Something to Help You | https://medium.com/@digitalbest/stop-wasting-hours-searching-for-cybersecurity-resources-i-built-something-to-help-you-da591ae731e8?source=rss------bug_bounty-5 | Digitalbest | python, cybersecurity, technology, hacking, bug-bounty | 20-Jul-2025 |
| How I Bypassed a Free-Tier Resource Limit via Race Condition | https://efesn0.medium.com/how-i-bypassed-a-free-tier-resource-limit-via-race-condition-63d4b0c23fad?source=rss------bug_bounty-5 | Efe Esen | bug-bounty, infosec, race-condition, cybersecurity | 20-Jul-2025 |
| DownUnderCTF-sodium | https://medium.com/@fahd.99441/downunderctf-sodium-ab9171bac2e8?source=rss------bug_bounty-5 | phisher | ctf, bug-bounty | 20-Jul-2025 |
| Secrets in Session: How a Forgotten Cookie Let Me Walk Into Admin Panel Like I Owned the Place… | https://infosecwriteups.com/secrets-in-session-how-a-forgotten-cookie-let-me-walk-into-admin-panel-like-i-owned-the-place-6aeb97f7f9de?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, cybersecurity, hacking, money | 20-Jul-2025 |
| [Web Security Academy] — Server-Side Vulnerabilities / Path Traversal | https://medium.com/@v0lts3c/web-security-academy-server-side-vulnerabilities-path-traversal-cf8104faaf1a?source=rss------bug_bounty-5 | Voltsec | bug-bounty, path-traversal, web-security, writeup, cybersecurity | 20-Jul-2025 |
| Broken Access Control to Gain Unauthorized Role Management in a Public Program | https://medium.com/@bassemwanies2002/broken-access-control-to-gain-unauthorized-role-management-in-a-public-program-6925f83d0dc4?source=rss------bug_bounty-5 | Bassemwanies | real-world-bug-hunting, bug-bounty, bug-hunting, cybersecurity, bug-bounty-writeup | 20-Jul-2025 |
| Subdomain Enumeration: Unleashing the First Strike in Bug Bounty Recon | https://medium.com/@samael_0x4/subdomain-enumeration-unleashing-the-first-strike-in-bug-bounty-recon-9eee03da3c89?source=rss------bug_bounty-5 | SAMAEL 0x4 | reconnaissance, subdomains-enumeration, bug-bounty, recon, subdomain | 20-Jul-2025 |
| $250 Bounty: Poisoning the Prototype: Exploiting Lodash’s Hidden Attack Surface | https://medium.com/meetcyber/250-bounty-poisoning-the-prototype-exploiting-lodashs-hidden-attack-surface-bbc092de974c?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, penetration-testing, vulnerability, bug-bounty, technology | 20-Jul-2025 |
| I Found Hidden Vulnerabilities in Just 3 Hours | https://medium.com/@ibtissamhammadi1/i-found-hidden-vulnerabilities-in-just-3-hours-178f0e14ddb1?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, bug-bounty, cybersecurity | 20-Jul-2025 |
| $5375 Bounty: IDOR — Creating a Share Link for Any Campaign Planner in Facebook Business… | https://medium.com/@muriarfad/5375-bounty-idor-creating-a-share-link-for-any-campaign-planner-in-facebook-business-03f0994d4d16?source=rss------bug_bounty-5 | Sancyty | bug-bounty, bug-bounty-writeup | 19-Jul-2025 |
| Insecure Design (OWASP A04): Hacking, Bug Bounty, and Prevention Guide | https://medium.com/@jpablo13/insecure-design-owasp-a04-hacking-bug-bounty-and-prevention-guide-4d4851d73677?source=rss------bug_bounty-5 | JPablo13 | ethical-hacking, cybersecurity, web-development, bug-bounty, penetration-testing | 19-Jul-2025 |
| $500 Bounty: Excessive Memory Usage in Messenger and Facebook App When Rendering Invalid GIFs | https://medium.com/@muriarfad/500-bounty-excessive-memory-usage-in-messenger-and-facebook-app-when-rendering-invalid-gifs-b1f1bf15ba18?source=rss------bug_bounty-5 | Sancyty | bug-bounty | 19-Jul-2025 |
| 2FA simple bypass [ES] [PortSwigger] | https://h0lm3s.medium.com/2fa-simple-bypass-es-portswigger-12a5671d0eb8?source=rss------bug_bounty-5 | h0lm3s | owasp, cybersecurity, ethical-hacking, portswigger, bug-bounty | 19-Jul-2025 |
| Abusing Broken Access Control and SQL Injection in the Wild | https://systemweakness.com/abusing-broken-access-control-and-sql-injection-in-the-wild-891559e13199?source=rss------bug_bounty-5 | RyuuKhagetsu | writeup, pentest, sql-injection, bug-bounty, broken-access-control | 19-Jul-2025 |
| KoiLoader Malware: Turning Financial Statements into Security Nightmares | https://medium.com/@devanshpatel930/koiloader-malware-turning-financial-statements-into-security-nightmares-503176ce92e1?source=rss------bug_bounty-5 | Zuri | threat-intelligence, threat-hunting, phishing, cybersecurity, bug-bounty | 19-Jul-2025 |
| No ataques endpoints. Ataca supuestos: reinventando mi enfoque en Bug Bounty | https://gorkaaa.medium.com/no-ataques-endpoints-ataca-supuestos-reinventando-mi-enfoque-en-bug-bounty-bb9a0deb2acc?source=rss------bug_bounty-5 | Gorka | hacking, bug-bounty-tips, bug-bounty, bugs | 19-Jul-2025 |
| Begin Your Bug Bounty Journey [in 2025] | https://medium.com/@hrofficial62/begin-your-bug-bounty-journey-in-2025-54635a59eccc?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, penetration-testing, ethical-hacking, hacking, cybersecurity | 19-Jul-2025 |
| How to Start Bug Hunting: A Beginner’s Guide to Ethical Hacking | https://medium.com/@CYberVIaz/how-to-start-bug-hunting-a-beginners-guide-to-ethical-hacking-17930bb79690?source=rss------bug_bounty-5 | CYber VIaz | bug-hunting, cybersecurity, ethical-hacking, bug-bounty, htb | 19-Jul-2025 |
| “How CVE-2025–4123 Turned Grafana Into a Hacker’s Playground” | https://infosecwriteups.com/how-cve-2025-4123-turned-grafana-into-a-hackers-playground-f93a45bde714?source=rss------bug_bounty-5 | Aman Sharma | hacking, technology, bug-bounty, programming, cybersecurity | 19-Jul-2025 |
| Payload in the Haystack: Using Wayback & ParamSpider to Find a Forgotten Upload Endpoint | https://infosecwriteups.com/payload-in-the-haystack-using-wayback-paramspider-to-find-a-forgotten-upload-endpoint-913e80351b9b?source=rss------bug_bounty-5 | Iski | infosec, hacking, cybersecurity, money, bug-bounty | 19-Jul-2025 |
| Part 2: Automating Mobile API Discovery Using AI | https://medium.com/@narendarlb123/part-2-automating-mobile-api-discovery-using-ai-523fb207fd15?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, ai, cybersecurity, information-security | 19-Jul-2025 |
| I Found a Broken API in a Mobile App — Without Touching the App | https://medium.com/@narendarlb123/i-found-a-broken-api-in-a-mobile-app-without-touching-the-app-e787ea9e1ed1?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, mobile-app-development, bug-bounty, information-security, infosec | 19-Jul-2025 |
| API07:2023 — Server-Side Request Forgery (SSRF) | https://suhelkathi.medium.com/api07-2023-server-side-request-forgery-ssrf-c944381057bf?source=rss------bug_bounty-5 | Suhel Kathi | bug-bounty, web-app-security, api-security, ssrf, owasp-top-10 | 19-Jul-2025 |
| How to Set Up a Professional Hacking Lab: A Practical Guide for Ethical Hackers and Bug Bounty… | https://santhosh-adiga-u.medium.com/how-to-set-up-a-professional-hacking-lab-a-practical-guide-for-ethical-hackers-and-bug-bounty-350b5a9e5493?source=rss------bug_bounty-5 | Santhosh Adiga U | hacking-tools, bug-bounty, penetration-testing, ethical-hacking, hacking-lab | 19-Jul-2025 |
| WPA3 Demystified — The New Era of Wi-Fi Security(Part 4) | https://medium.com/@amitgy04/wpa3-demystified-the-new-era-of-wi-fi-security-part-4-7033dcdebfab?source=rss------bug_bounty-5 | Amitishacked | cybersecurity, networking, wifi, bug-bounty, wpa3 | 19-Jul-2025 |
| Apps Behind Walls: The Story of OS Sandboxes | https://medium.com/@natarajanck2/apps-behind-walls-the-story-of-os-sandboxes-5d84b9ad0a75?source=rss------bug_bounty-5 | Natarajan C K | systems-thinking, operating-systems, sandbox, bug-bounty, security | 19-Jul-2025 |
| CTF Day(36) | https://medium.com/@ahmednarmer1/ctf-day-35-9160f10ed293?source=rss------bug_bounty-5 | Ahmed Narmer | web-penetration-testing, ctf, web-pen-testing, bug-bounty, cybersecurity | 19-Jul-2025 |
| Data Breach Dilemma: I Found 1000+ Leaked IDs, But a Robot Wouldn’t Let Me Warn a Top University | https://infosecwriteups.com/data-breach-dilemma-i-found-1000-leaked-ids-but-a-robot-wouldnt-let-me-warn-a-top-university-50d876970813?source=rss------bug_bounty-5 | LordofHeaven | infosecurity, information-disclosure, bug-bounty, coffin, infosec | 19-Jul-2025 |
| Can a Single Quote Take Down a Database? | https://medium.com/@alexjoyelraj/can-a-single-quote-take-down-a-database-0bcf374724ab?source=rss------bug_bounty-5 | Alex Joyel Raj | sql-injection, ethical-hacking, bug-bounty, web-security, cybersecurity | 19-Jul-2025 |
| 1. How to Start Bug Bounty with Zero Knowledge | https://infosecwriteups.com/1-how-to-start-bug-bounty-with-zero-knowledge-5178f12f6529?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, cybersecurity, bug-bounty-tips, hacking, infosec | 19-Jul-2025 |
| CVE-2025–29927: Next.js Middleware Bypass Zafiyeti | https://medium.com/@NadirSensoy/cve-2025-29927-next-js-middleware-bypass-zafiyeti-a0fedddc1f9a?source=rss------bug_bounty-5 | Nadir Sensoy | cve, vulnerability, bug-bounty, nextjs, web-development | 19-Jul-2025 |
| How an Expired Trial Led to a Critical Email Verification Bypass | https://nullcorelabs.medium.com/how-an-expired-trial-led-to-a-critical-email-verification-bypass-972107f106cd?source=rss------bug_bounty-5 | Nullcore Labs | web-penetration-testing, cybersecurity, penetration-testing, bug-bounty, infosec | 19-Jul-2025 |
| Struggling in Bug Bounty? Here’s How I Found My First Critical | https://rootxabit.medium.com/struggling-in-bug-bounty-heres-how-i-found-my-first-critical-8878ee896928?source=rss------bug_bounty-5 | xabit • hacks | critical-bug, bug-bounty, zero-day, hackerone, cve | 19-Jul-2025 |
| Tumblr Post+ Creator and Got Paid $100 | https://infosecwriteups.com/tumblr-post-creator-and-got-paid-100-e3659f776cb5?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, penetration-testing, technology, bug-bounty, vulnerability | 19-Jul-2025 |
| How Our Team Bypassed YouTube Authorization and Uploaded Videos to ANY Channel — $6,337 Bounty | https://infosecwriteups.com/how-our-team-bypassed-youtube-authorization-and-uploaded-videos-to-any-channel-6-337-bounty-d39df15f11df?source=rss------bug_bounty-5 | Yeswehack | infosec, cybersecurity, yeswehack, google, bug-bounty | 19-Jul-2025 |
| Bug Bounty Recon: Tokens, PII, and CI/CD Metadata Leaked via JavaScript | https://infosecwriteups.com/bug-bounty-recon-tokens-pii-and-ci-cd-metadata-leaked-via-javascript-76e3c2594957?source=rss------bug_bounty-5 | Medusa | cybersecurity, penetration-testing, bug-bounty, bug-bounty-tips, developer | 19-Jul-2025 |
| Cara Root Android Tanpa TWRP: Cukup dengan Fastboot dan Magisk! | https://medium.com/@riskytamba8/cara-root-android-tanpa-twrp-cukup-dengan-fastboot-dan-magisk-6465c44436b0?source=rss------bug_bounty-5 | Riskytamba | rooting, bug-bounty, bugcrowd, nethunter, cybersecurity | 19-Jul-2025 |
| Acknowledged by Microsoft — For a Bug I Almost Didn’t Report | https://cyberhrsh.medium.com/acknowledged-by-microsoft-for-a-bug-i-almost-didnt-report-d32033ef3fec?source=rss------bug_bounty-5 | Harsh kothari | hacker, bug-bounty, microsoft, hall-of-fame | 19-Jul-2025 |
| Stuck in the Bug Bounty Learning Trap: Breaking Through the Plateau That’s Holding You Back | https://cybersecuritywriteups.com/stuck-in-the-bug-bounty-learning-trap-breaking-through-the-plateau-thats-holding-you-back-da17eb3a204b?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty-tips, cybersecurity, bug-bounty, ethical-hacking, infosec | 19-Jul-2025 |
| AI Recon Agent for Hackers ⚔️ | Automate Bug Bounty Like a Pro | https://hackerassociate.medium.com/ai-recon-agent-for-hackers-%EF%B8%8F-automate-bug-bounty-like-a-pro-61ae7d678bda?source=rss------bug_bounty-5 | Harshad Shah | ai, infosec, cybersecurity, bug-bounty, ai-tools | 19-Jul-2025 |
| ️♂️ Cracking Cipher’s Code: A Repeating-Key XOR Decryption Story — Trcyhackme | https://mhmmuneef.medium.com/%EF%B8%8F-%EF%B8%8F-cracking-ciphers-code-a-repeating-key-xor-decryption-story-trcyhackme-14075d3e8e96?source=rss------bug_bounty-5 | Mohammed Muneef | ctf, infosec, bug-bounty, hacking, cybersecurity | 19-Jul-2025 |
| Business Logic: Broken. Wallet: Hacked. OTP: Bypassed. | https://hettt.medium.com/business-logic-broken-wallet-hacked-otp-bypassed-d82e6591a63a?source=rss------bug_bounty-5 | Het Patel | bug-bounty-tips, business-logic, xss-attack, bug-bounty-writeup, bug-bounty | 19-Jul-2025 |
| How I Found an XSS Vulnerability in a Microsoft subdomain | https://medium.com/@anonymousshetty2003/how-i-found-an-xss-vulnerability-in-a-microsoft-subdomain-4abf0da5c3e9?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, xss-attack, bug-bounty-tips, hacking, bug-bounty | 19-Jul-2025 |
| ✅ Things You Must Know Before Using UNION in SQL | https://medium.com/@ag.gholami.2006/things-you-must-know-before-using-union-in-sql-aec46d10bfd7?source=rss------bug_bounty-5 | Ali Ziro | cybersecurity, web-security, bug-bounty, sql-injection, penetration-testing | 19-Jul-2025 |
| Reflected Cross-Site Scripting in Search Functionality | https://medium.com/@osamaashraf1233/reflected-cross-site-scripting-in-search-functionality-d584593b966f?source=rss------bug_bounty-5 | Osamaashraf | bug-bounty, pentesting, penetration-testing, bug-bounty-writeup, cybersecurity | 19-Jul-2025 |
| I Found a Critical Bug in Just 30 Minutes | https://medium.com/@ibtissamhammadi1/i-found-a-critical-bug-in-just-30-minutes-b7dd320cf38f?source=rss------bug_bounty-5 | Ibtissam hammadi | tech, development, bug-bounty, cybersecurity | 19-Jul-2025 |
| Death by a Thousand AI Slops: How Fake Bugs Are Killing Bug Bounties | https://infosecwriteups.com/death-by-a-thousand-ai-slops-how-fake-bugs-are-killing-bug-bounties-e4a8803edab7?source=rss------bug_bounty-5 | Aaron | cybersecurity, programming, bug-bounty, open-source, artificial-intelligence | 19-Jul-2025 |
| Information Gathering (web edition part — 1) | https://medium.com/@hishamrazak11/information-gathering-web-edition-part-1-fc86d6938ea0?source=rss------bug_bounty-5 | Hishamrazak | penetration-testing, cybersecurity, bug-bounty, web-security, information-security | 19-Jul-2025 |
| $300 Bounty: Limited LFI via Markdown in GSA Dashboard | https://medium.com/h7w/300-bounty-limited-lfi-via-markdown-in-gsa-dashboard-34aee1b2de23?source=rss------bug_bounty-5 | Monika sharma | vulnerability, penetration-testing, tips-and-tricks, bug-bounty, technology | 19-Jul-2025 |
| $1000 Bounty: From 403 to Source Code | https://osintteam.blog/1000-bounty-from-403-to-source-code-28e9a9c572d8?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, vulnerability, bug-bounty-tips, technology | 19-Jul-2025 |
| How I found a loophole in Google’s region restrictions — and yes, it’s triaged now. | https://mfaizananwar.medium.com/how-i-found-a-loophole-in-googles-region-restrictions-and-yes-it-s-triaged-now-3cd5dc76e15a?source=rss------bug_bounty-5 | Muhammad Faizan Anwar | infosec, penetration-testing, bug-bounty, red-team, offensive-security | 19-Jul-2025 |
| MISSION ACCOMPLISHED: Cyber Sentinel Initiative Complete! | https://medium.com/@kohihamed3/mission-accomplished-cyber-sentinel-initiative-complete-3acc0eaabd28?source=rss------bug_bounty-5 | 0xHamy | canada, cve, vulnerability, cybersecurity, bug-bounty | 19-Jul-2025 |
| Mastering the Hunt: The Ultimate Guide to Modern Bug Bounty Hunting | https://osintteam.blog/mastering-the-hunt-the-ultimate-guide-to-modern-bug-bounty-hunting-416357b08abb?source=rss------bug_bounty-5 | Monika sharma | vulnerability, technology, tips-and-tricks, penetration-testing, bug-bounty | 18-Jul-2025 |
| SSRF via PDF Export in Analytics Dashboard | https://medium.com/h7w/ssrf-via-pdf-export-in-analytics-dashboard-54e304b438f9?source=rss------bug_bounty-5 | Monika sharma | technology, hacking, vulnerability, bug-bounty, penetration-testing | 18-Jul-2025 |
| $240 Bounty: Denial of Service Vulnerability in Python | https://medium.com/h7w/240-bounty-denial-of-service-vulnerability-in-python-f42b24cfa066?source=rss------bug_bounty-5 | Monika sharma | python, tips-and-tricks, vulnerability, bug-bounty, technology | 18-Jul-2025 |
| Diseño Inseguro: Guía de Hacking, Bug Bounty y Prevención | https://medium.com/@jpablo13/dise%C3%B1o-inseguro-gu%C3%ADa-de-hacking-bug-bounty-y-prevenci%C3%B3n-b8a50b23fb71?source=rss------bug_bounty-5 | JPablo13 | web-development, penetration-testing, bug-bounty, cybersecurity, ethical-hacking | 18-Jul-2025 |
| $2,000 |critical Samsung Bug Bounty: Bypassing Plan Restrictions via Business Logic Flaw | https://medium.com/@aminefarah802/2-000-critical-samsung-bug-bounty-bypassing-plan-restrictions-via-business-logic-flaw-e18eace8a6cf?source=rss------bug_bounty-5 | KILLUA_UCHIHA | pentesting, bug-bounty, samsung, bug-zero, bug-bounty-writeup | 18-Jul-2025 |
| How I Found My First Critical Bug: Account Takeover via Email Verification Bypass | https://medium.com/@4m3n_d/how-i-found-my-first-critical-bug-account-takeover-via-email-verification-bypass-7481b814f902?source=rss------bug_bounty-5 | Wondmagegn Degu | bug-bounty-tips, account-takeover, ethical-hacking, bug-bounty, bugbounty-writeup | 18-Jul-2025 |
| Top Dark Web Forums With .onion Links to Explore in 2025 | https://adityaax.medium.com/top-dark-web-forums-with-onion-links-to-explore-in-2025-9ad4daab27f3?source=rss------bug_bounty-5 | adityaax | hacking, onion-link, cybersecurity, darkweb, bug-bounty | 18-Jul-2025 |
| Insecure Design (OWASP A04): Guía de Hacking, Bug Bounty y Prevención | https://medium.com/@jpablo13/dise%C3%B1o-inseguro-gu%C3%ADa-de-hacking-bug-bounty-y-prevenci%C3%B3n-b8a50b23fb71?source=rss------bug_bounty-5 | JPablo13 | web-development, penetration-testing, bug-bounty, cybersecurity, ethical-hacking | 18-Jul-2025 |
| Meta Bug Bounty: Unauthorized Access and Control Over Private Image IDs on meta ai | https://allawe.medium.com/meta-bug-bounty-unauthorized-access-and-control-over-private-image-ids-96ccc1b78030?source=rss------bug_bounty-5 | ali jaafer | vulnerability, facebook-bug-bounty, ai, bug-bounty-tips, bug-bounty | 18-Jul-2025 |
| “$ Unearthing Digital Ghosts: How Deleted GitHub Files Can Make Your Bug Bounty Fortune” | https://infosecwriteups.com/unearthing-digital-ghosts-how-deleted-github-files-can-make-your-bug-bounty-fortune-e3335a74a049?source=rss------bug_bounty-5 | Aman Sharma | technology, bug-bounty, hacking, cybersecurity, programming | 18-Jul-2025 |
| Insufficient Workflow Validation: A Logic Flaw Case Study | https://osintteam.blog/insufficient-workflow-validation-a-logic-flaw-case-study-f1fbd1774716?source=rss------bug_bounty-5 | Bash Overflow | price-logic-flaw, bug-bounty, insufficient-validation, purchasing-logic-flaw, broken-access-control | 18-Jul-2025 |
| Elastic Heart: How a Misconfigured Kibana Dashboard Sang Like a Canary | https://infosecwriteups.com/elastic-heart-how-a-misconfigured-kibana-dashboard-sang-like-a-canary-b719c7377964?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, hacking, money, bug-bounty | 18-Jul-2025 |
| Prompt-Driven Vulnerability Chains: How to Build Multi-Step Exploits from Low-Severity Bugs with AI | https://medium.com/@narendarlb123/prompt-driven-vulnerability-chains-how-to-build-multi-step-exploits-from-low-severity-bugs-with-ai-7f79a701535b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, cybersecurity, infosec, bug-bounty | 18-Jul-2025 |
| Prompt Injection to Bounty: Part 2 — Chaining with SSRF, BOLA & RCE | https://medium.com/@narendarlb123/prompt-injection-to-bounty-part-2-chaining-with-ssrf-bola-rce-35c1285136c4?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, information-security, ai, bug-bounty, infosec | 18-Jul-2025 |
| De reconocimiento pasivo a investigativo: transformando mi fase de reconocimiento en Bug Bounty | https://gorkaaa.medium.com/de-reconocimiento-pasivo-a-investigativo-transformando-mi-fase-de-reconocimiento-en-bug-bounty-72226de48526?source=rss------bug_bounty-5 | Gorka | bugs, bug-bounty-tips, bug-bounty, hacking | 18-Jul-2025 |
| Hack The Box Journey — Day 2: Learning by Doing (Not Just Watching) | https://medium.com/@cypervoid/hack-the-box-journey-day-2-learning-by-doing-not-just-watching-48ed980792ae?source=rss------bug_bounty-5 | Manju Varma M | bugbounty-writeup, cybersecurity, learning, basics, bug-bounty | 18-Jul-2025 |
| My first shot with Bugbounty Radar and I hit a vuln — bounty coming soon? | https://medium.com/@liusdgs/my-first-shot-with-bugbounty-radar-and-i-hit-a-vuln-bounty-coming-soon-93a9cfa91727?source=rss------bug_bounty-5 | liu sdgs | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 18-Jul-2025 |
| From Zero to Super Admin: A Bug Story from My Internship | https://medium.com/@nizzcorpacademy/from-zero-to-super-admin-a-bug-story-from-my-internship-1f8ad7dd51cf?source=rss------bug_bounty-5 | NizzCorp Academy | penetration-testing, cybersecurity, bug-bounty, pentesting, ethical-hacking | 18-Jul-2025 |
| Citrix Bleed 2: Critical RCE Flaw in 2025 | https://medium.com/@kalariyahet23/citrix-bleed-2-critical-rce-flaw-in-2025-7722458c6a3e?source=rss------bug_bounty-5 | Kalariya Het | bug-bounty, hacking, vulnerability, cybersecurity, infosec | 18-Jul-2025 |
| Same Bug, Different Places: 3 Logic Flaws I Found on Main Domain | https://medium.com/@nnouh4967/same-bug-different-places-3-logic-flaws-i-found-on-main-domain-90608ced8d4c?source=rss------bug_bounty-5 | nooh zidan | bug-bounty, bug-bounty-tips, ethical-hacking, bug-bounty-writeup, hacking | 18-Jul-2025 |
| Cracking Ray-Ban Stories: How a Firmware Tweak Exposed Privacy Risks | https://medium.com/@kalariyahet23/cracking-ray-ban-stories-how-a-firmware-tweak-exposed-privacy-risks-33e28189854f?source=rss------bug_bounty-5 | Kalariya Het | infosec, bug-bounty, ray-ban, vulnerability, hacking | 18-Jul-2025 |
| I Broke Rate Limits to Hijack Accounts — Without Getting Blocked | https://medium.com/@ibtissamhammadi1/i-broke-rate-limits-to-hijack-accounts-without-getting-blocked-e99675a30b6c?source=rss------bug_bounty-5 | Ibtissam hammadi | account-takeover, cybersecurity, ethical-hacking, rate-limiting, bug-bounty | 18-Jul-2025 |
| Google Dorks for Bug Bounty Hunting: 25 Powerful Dorks to Find Exposed PDFs, NDAs, and Signatures | https://hackersatty.medium.com/google-dorks-for-bug-bounty-hunting-25-powerful-dorks-to-find-exposed-pdfs-ndas-and-signatures-cf8c54e19189?source=rss------bug_bounty-5 | hackersatty | bug-bounty-writeup, google-dorks-bugbounty, bug-bounty, bug-bounty-tips, hackerone | 18-Jul-2025 |
| From Recon to Root: The Ultimate Bug Bounty Recon Playbook (2025 Edition) | https://medium.com/@narendarlb123/from-recon-to-root-the-ultimate-bug-bounty-recon-playbook-2025-edition-c5707ccc8d42?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, cybersecurity, bug-bounty, information-security | 18-Jul-2025 |
| Password Change Doesn’t Expire Sessions — A Hidden Risk in Session Management | https://spidergk.medium.com/password-change-doesnt-expire-sessions-a-hidden-risk-in-session-management-701c884aa86c?source=rss------bug_bounty-5 | Gourav(spidergk) | bug-bounty, session-management, owasp, cybersecurity, authentication | 18-Jul-2025 |
| Masuk Hall of Fame NASA Hanya dalam 5 Menit [Pengalaman Pribadi] | https://medium.com/@ilhambachtiar/masuk-hall-of-fame-nasa-hanya-dalam-5-menit-pengalaman-pribadi-3235f7eec2e2?source=rss------bug_bounty-5 | Ilhambachtiar | cybersecurity, bug-bounty | 18-Jul-2025 |
| How I Hacked NASA and Defaced It | https://medium.com/@iamshafayat/how-i-hacked-nasa-and-defaced-it-9f106e833cc1?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | cybersecurity, technology, bug-bounty, bug-bounty-writeup, nasa | 18-Jul-2025 |
| Bug Bounty 101: Step-by-Step Practical Approach to Recon and Discovery | https://santhosh-adiga-u.medium.com/bug-bounty-101-step-by-step-practical-approach-to-recon-and-discovery-43a4f505e3d3?source=rss------bug_bounty-5 | Santhosh Adiga U | penetration-testing, bug-bounty-hunting, ethical-hacking, bug-bounty, bug-bounty-tips | 18-Jul-2025 |
| Advanced Multi Dorking | Neglected Endpoints | https://medium.com/meetcyber/advanced-multi-dorking-neglected-endpoints-bd54b1210dec?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, prompt-engineering, pentesting, ethical-hacking, bug-bounty | 18-Jul-2025 |
| ️Breaking a PHP App with Nothing But Cookies and XML | https://medium.com/@jabaribrown62/%EF%B8%8F-breaking-a-php-app-with-nothing-but-cookies-and-xml-4c519c046533?source=rss------bug_bounty-5 | Jabaribrown | cybersecurity, web-apps, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 18-Jul-2025 |
| Immunefi Banned Me for Reporting a Real Replay Attack in LayerZero V2 | https://medium.com/@tangouvitch/immunefi-banned-me-for-reporting-a-real-replay-attack-in-layerzero-v2-71d5ee0ff102?source=rss------bug_bounty-5 | Tangouvitch | cybersecurity, bug-bounty, smart-contracts, web3, layerzero-v2 | 18-Jul-2025 |
| CTF Day(35) | https://medium.com/@ahmednarmer1/ctf-day-35-35bcc6f322eb?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, ctf, cybersecurity, web-penetration-testing, web-pen-testing | 18-Jul-2025 |
| Stay Ahead in Cybersecurity: Discover the Power of the CVE Search Tool by Security Toolkit | https://medium.com/@thirdeye1910/stay-ahead-in-cybersecurity-discover-the-power-of-the-cve-search-tool-by-security-toolkit-ce626c0dc483?source=rss------bug_bounty-5 | Haxshadow | cve-search, bug-bounty, information-security, new-cve, bug-bounty-tips | 18-Jul-2025 |
| ️ Build the Ultimate Bug Bounty & Recon Machine on Fresh Kali Linux (2025) | https://medium.com/@rudrapotghan.07/%EF%B8%8F-build-the-ultimate-bug-bounty-recon-machine-on-fresh-kali-linux-2025-12c33fdf48bd?source=rss------bug_bounty-5 | Rudra Potghan | bug-bounty, hacking-tools, reconnaissance, cybersecurity, kali-linux | 18-Jul-2025 |
| Hacking APIs: Attacking REST APIs Through Serialization Format Manipulation | https://iaraoz.medium.com/hacking-apis-attacking-rest-apis-through-serialization-format-manipulation-b27fa8db4e8b?source=rss------bug_bounty-5 | Israel Aráoz Severiche | hacking, pentesting, bug-bounty, security, api | 18-Jul-2025 |
| Bypassing 2FA via Missing Email Verification | https://medium.com/mr-plan-publication/bypassing-2fa-via-missing-email-verification-36a5cadea3c5?source=rss------bug_bounty-5 | Monika sharma | authentication, vulnerability, technology, bug-bounty, email | 18-Jul-2025 |
| Masuk Hall of Fame NASA Hanya dalam 5 Menit [Pengalaman Pribadi] | https://medium.com/@ilhambachtiar/masuk-hall-of-fame-nasa-hanya-dalam-5-menit-pengalaman-pribadi-3235f7eec2e2?source=rss------bug_bounty-5 | Ilhambachtiar | responsible-disclosure, cybersecurity, web-security, bugcrowd, bug-bounty | 18-Jul-2025 |
| The Art of Crafting a Perfect Payload | https://medium.com/@saikrishna.code10/the-art-of-crafting-a-perfect-payload-7864a929081e?source=rss------bug_bounty-5 | Sai Krishna | payload, xss-attack, xss-vulnerability, bug-bounty, web-app-pentesting | 18-Jul-2025 |
| One Tool to Rule JWTs — Easy JWT Pentesting with JWTAuditor | https://medium.com/@dr34mb0y/one-tool-to-rule-jwts-easy-jwt-pentesting-with-jwtauditor-d1984cff0b23?source=rss------bug_bounty-5 | Sid Joshi | bug-bounty, info-sec-writeups, jwt-exploitation, bug-bounty-tips, jwt | 18-Jul-2025 |
| Nmap for Bug Bounty: Essential Commands Every Hunter Should Know | https://medium.com/@samael_0x4/nmap-for-bug-bounty-essential-commands-every-hunter-should-know-77fd4fe47703?source=rss------bug_bounty-5 | SAMAEL 0x4 | network-scanning, nmap-scan, bug-bounty, nmap, kali-linux | 18-Jul-2025 |
| Zone Transfer Vulnerability: The Forgotten Information Disclosure That Can Leak Entire DNS Records | https://santhosh-adiga-u.medium.com/zone-transfer-vulnerability-the-forgotten-information-disclosure-that-can-leak-entire-dns-records-5f01dc5e034a?source=rss------bug_bounty-5 | Santhosh Adiga U | penetration-testing, bug-bounty, ethical-hacking, information-disclosure, bug-bounty-tips | 18-Jul-2025 |
| Hacking APIs: Guía Completa para Evaluación de Seguridad | https://iaraoz.medium.com/hacking-apis-gu%C3%ADa-completa-para-evaluaci%C3%B3n-de-seguridad-d4347431e3a0?source=rss------bug_bounty-5 | Israel Aráoz Severiche | ethical-hacking, bug-bounty, hacking, cybersecurity, api | 18-Jul-2025 |
| Break into any Microsoft building: Leaking PII in Microsoft Guest Check-In | https://medium.com/@faav/break-into-any-microsoft-building-leaking-pii-in-microsoft-guest-check-in-6f3dbd72d385?source=rss------bug_bounty-5 | Faav | cybersecurity, bug-bounty-tips, bug-bounty, microsoft | 18-Jul-2025 |
| De datos a información: cómo transformé mi fase de reconocimiento en Bug Bounty | https://gorkaaa.medium.com/de-datos-a-informaci%C3%B3n-c%C3%B3mo-transform%C3%A9-mi-fase-de-reconocimiento-en-bug-bounty-abe0d8355d05?source=rss------bug_bounty-5 | Gorka | hacking, bug-bounty-tips, bugs, bug-bounty | 17-Jul-2025 |
| Bug Bounty Quick Start: 12 One-Liners to Go From Recon to Exploitation | https://medium.com/@khanshadan.313/bug-bounty-quick-start-12-one-liners-to-go-from-recon-to-exploitation-6e8142ad69ef?source=rss------bug_bounty-5 | Khanshadan | bugbounty-tips, tools, vapt, bug-bounty, web-security | 17-Jul-2025 |
| From 404 to Jackpot: A Bug That Taught Me More Than a Bounty Ever Could | https://medium.com/@krypto.sec/from-404-to-jackpot-a-bug-that-taught-me-more-than-a-bounty-ever-could-f25889ec1e48?source=rss------bug_bounty-5 | Krypto | privacy, data-breach, bug-bounty, infosec | 17-Jul-2025 |
| Google Drive Auth Bypass: How View-Only Folder Sharing Leaked Google Form Responses ($5000 Bug) | https://infosecwriteups.com/google-drive-auth-bypass-how-view-only-folder-sharing-leaked-google-form-responses-5000-bug-fa99c7bbfdf4?source=rss------bug_bounty-5 | Yeswehack | technology, programming, artificial-intelligence, bug-bounty, cybersecurity | 17-Jul-2025 |
| CTF Day(34) | https://medium.com/@ahmednarmer1/ctf-day-34-8334270d207b?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, bug-bounty, cybersecurity, web-pen-testing, web-penetration-testing | 17-Jul-2025 |
| CSRF via Image Tags in Email Clients | https://infosecwriteups.com/csrf-via-image-tags-in-email-clients-e61de514b64f?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty-tips, technology, bug-bounty, penetration-testing | 17-Jul-2025 |
| “$ The Art of Smart Recon: How I Found 10+ Vulnerabilities Without Firing a Single Exploit” | https://infosecwriteups.com/the-art-of-smart-recon-how-i-found-100-vulnerabilities-without-firing-a-single-exploit-5519848433b4?source=rss------bug_bounty-5 | Aman Sharma | bug-bounty, money, hacking, programming, technology | 17-Jul-2025 |
| Pastebin Past: Finding Leaked API Keys from Forgotten Secrets | https://infosecwriteups.com/pastebin-past-finding-leaked-api-keys-from-forgotten-secrets-857e5ef0f6d4?source=rss------bug_bounty-5 | Iski | hacking, money, bug-bounty, infosec, cybersecurity | 17-Jul-2025 |
| How IDOR gave me ability to takeover anyone’s account with one single Click | https://alirazzaq.medium.com/how-idor-gave-me-ability-to-takeover-anyones-account-with-one-single-click-b9eb59a8ebe1?source=rss------bug_bounty-5 | Ali Razzaq | bug-bounty, cybersecurity, web-applications, web-development, bug-bounty-tips | 17-Jul-2025 |
| When an 404 suddenly turns 200 and you didn’t knew | https://heberjulio65.medium.com/when-an-404-suddenly-turns-200-and-you-didnt-knew-b35e474df44b?source=rss------bug_bounty-5 | Héber Júlio | osint, automation, infosec, devsecops, bug-bounty | 17-Jul-2025 |
| .git Exposed: Real Exploits, Real Data Leaks | https://medium.com/@narendarlb123/git-exposed-real-exploits-real-data-leaks-ccb994ce0dc8?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, information-security, infosec, cybersecurity | 17-Jul-2025 |
| Google Dorking 2.0: Hunting Secrets in Public Search Engines | https://medium.com/@narendarlb123/google-dorking-2-0-hunting-secrets-in-public-search-engines-ac5fe64cb33b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, cybersecurity, information-security, ai, bug-bounty | 17-Jul-2025 |
| The Day I Realized My Tools Were Holding Me Back | https://cybersecuritywriteups.com/the-day-i-realized-my-tools-were-holding-me-back-6e0eadcc12d3?source=rss------bug_bounty-5 | Andrei Ivan | cybersecurity, ethical-hacking-training, bug-bounty, ethical-hacking, bug-bounty-tips | 17-Jul-2025 |
| Massive Credential Leak: 16B Logins Exposed | https://medium.com/@kalariyahet23/massive-credential-leak-16b-logins-exposed-825303d2ba08?source=rss------bug_bounty-5 | Kalariya Het | vulnerability, bug-bounty, cybersecurity, security, hacking | 17-Jul-2025 |
| Top 7 FAQs About Bug Bounties (Answered for Web3 Security Hunters) | https://medium.com/@stupid_contract/top-7-faqs-about-bug-bounties-answered-for-web3-security-hunters-ffbf3dbe3035?source=rss------bug_bounty-5 | Stupid Contract | smart-contract-auditing, earn-money-online, bug-bounty, web3-security, web3 | 17-Jul-2025 |
| Instagram Token Leak Exposed: A Bug Bounty Breakdown | https://medium.com/@kalariyahet23/instagram-token-leak-exposed-a-bug-bounty-breakdown-e51694e5c838?source=rss------bug_bounty-5 | Kalariya Het | hacking, instagram, bug-bounty, vulnerability, data-breach | 17-Jul-2025 |
| “From a 404 Page to $5k: How I Chained Forgotten Bugs Into a Critical Exploit” | https://infosecwriteups.com/from-a-404-page-to-5k-how-i-chained-forgotten-bugs-into-a-critical-exploit-cbb88e0f6516?source=rss------bug_bounty-5 | Aman Sharma | money, hacking, bug-bounty, technology, cybersecurity | 17-Jul-2025 |
| My First Bounty: How I Found an Information Disclosure Bug on HackerOne | https://medium.com/@zahinshahriar3/my-first-bounty-how-i-found-an-information-disclosure-bug-on-hackerone-9f0ce9fe7c1a?source=rss------bug_bounty-5 | Zahinshahriar | bug-bounty, hacking, cybersecurity | 17-Jul-2025 |
| Prompt Injection to Bounty: How LLMs Can Turn Into Entry Points | https://medium.com/@narendarlb123/prompt-injection-to-bounty-how-llms-can-turn-into-entry-points-bbf7bb6c8b05?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, information-security, bug-bounty, llm | 17-Jul-2025 |
| Open Redirect Vulnerability — The Silent Gateway to Phishing and OAuth Hijacks | https://medium.com/@SKaif009/open-redirect-vulnerability-the-silent-gateway-to-phishing-and-oauth-hijacks-cce80ad9aa4c?source=rss------bug_bounty-5 | Shah kaif | bug-bounty, open-redirect, bug-bounty-tips, bug-bounty-writeup, bugs | 17-Jul-2025 |
| Path Traversal — A tour to the web server’s assets | https://prioff.medium.com/path-traversal-a-tour-to-the-web-servers-assets-6a81e6312386?source=rss------bug_bounty-5 | PriOFF | owasp-top-10, vulnerability, bug-bounty, path-traversal, web-penetration-testing | 17-Jul-2025 |
| From HTML Injection to Admin Info Leak — My First Bug Bounty Payout | https://medium.com/@shabutaher0/from-html-injection-to-admin-info-leak-my-first-bug-bounty-payout-751a16b41518?source=rss------bug_bounty-5 | Taher | cybersecurity, html-injection, info-leak, bug-bounty, web-security | 17-Jul-2025 |
| My Latest Bug: Reflected XSS on GlobalProtect VPN Portal (CVE-2025–0133) | https://medium.com/@firdansp/my-latest-bug-reflected-xss-on-globalprotect-vpn-portal-cve-2025-0133-ba1649943250?source=rss------bug_bounty-5 | 0verRida | bug-bounty, bug-bounty-writeup, bug-bounty-tips, pentesting, hackerone | 17-Jul-2025 |
| How I Use the DeFi Watchdog Unified Security API to Secure Smart Contracts (Part 1) | https://medium.com/@charingane/how-i-use-the-defi-watchdog-unified-security-api-to-secure-smart-contracts-part-1-357f424efe98?source=rss------bug_bounty-5 | charingane | security, api, bug-bounty, web3, defi | 17-Jul-2025 |
| Why You Should NOT Choose Cybersecurity as a Career | https://dhanushnehru.medium.com/why-you-should-not-choose-cybersecurity-as-a-career-315141247b6e?source=rss------bug_bounty-5 | Dhanush N | bug-bounty, penetration-testing, programming, cybersecurity, technology | 17-Jul-2025 |
| Open Redirect Vulnerability — The Silent Gateway to Phishing and OAuth Hijacks | https://systemweakness.com/open-redirect-vulnerability-the-silent-gateway-to-phishing-and-oauth-hijacks-cce80ad9aa4c?source=rss------bug_bounty-5 | Shah kaif | bug-bounty, open-redirect, bug-bounty-tips, bug-bounty-writeup, bugs | 17-Jul-2025 |
| Introduction | https://medium.com/@chorfimajd22/introduction-dd73e4ae2897?source=rss------bug_bounty-5 | ValidByAccident | bug-bounty-tips, security, bug-bounty, race, web-development | 17-Jul-2025 |
| Breaking SMTP: Real-World Enumeration Using Nmap, Telnet & Metasploit | https://medium.com/@naziamalik24822/breaking-smtp-real-world-enumeration-using-nmap-telnet-metasploit-1574633f4f52?source=rss------bug_bounty-5 | Nazia Mobeen | vulnerability, penetration-testing, ethical-hacking, bug-bounty, cybersecurity | 17-Jul-2025 |
| Bug Bounty Journey — Valid Report Part 8 | https://medium.com/@0xF3r4t/bug-bounty-journey-valid-report-part-8-0edfa67082b2?source=rss------bug_bounty-5 | 0xF3r4t | nasa, nasa-vdp, google-dork, bug-bounty | 17-Jul-2025 |
| Injection: Complete Guide to Hacking, Bug Bounty, and Prevention | https://medium.com/@jpablo13/injection-complete-guide-to-hacking-bug-bounty-and-prevention-e47e978d219d?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, ethical-hacking, penetration-testing, web-development | 16-Jul-2025 |
| How I hacked my school’s website | https://medium.com/@faav/how-i-hacked-my-schools-website-79d3a7444714?source=rss------bug_bounty-5 | Faav | bug-bounty-tips, bug-bounty | 16-Jul-2025 |
| Where Do I Even Start with Bug Bounties? Let’s Learn One Thing Today. | https://medium.com/@alexjoyelraj/where-do-i-even-start-with-bug-bounties-lets-learn-one-thing-today-3633ae407ce9?source=rss------bug_bounty-5 | Alex Joyel Raj | hacker, cybersecurity, bug-bounty, ethical-hacking, hackerone | 16-Jul-2025 |
| Multiple Vulnerabilities at Indiana University | https://cybersecuritywriteups.com/multiple-vulnerabilities-at-indiana-university-4c324afe6bbf?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, bug-bounty-tips, ethical-hacking, penetration-testing, vulnerability | 16-Jul-2025 |
| I Found a Telegram Bot Token in settings.js – Here's How You Can Too! | https://levi4.medium.com/i-found-a-telegram-bot-token-in-settings-js-heres-how-you-can-too-f5ad8aee5944?source=rss------bug_bounty-5 | Levi Ackerman | bug-bounty-tips, infosec, bug-bounty, cybersecurity, hacking | 16-Jul-2025 |
| No buscar subdominios, buscar valor: mi giro definitivo en el reconocimiento de Bug Bounty | https://gorkaaa.medium.com/no-buscar-subdominios-buscar-valor-mi-giro-definitivo-en-el-reconocimiento-de-bug-bounty-cce16f53c843?source=rss------bug_bounty-5 | Gorka | bug-bounty-tips, bugs, hacking, bug-bounty | 16-Jul-2025 |
| When Your Hobby Involves Breaking Things (Legally) | https://medium.com/@nonameshahid/when-your-hobby-involves-breaking-things-legally-5c65da19c7de?source=rss------bug_bounty-5 | mUsHaRaF | ethical-hacking, tech, cybersecurity, problem-solving, bug-bounty | 16-Jul-2025 |
| How I Brute-Forced 400 Internal Accounts Without Logging In-P3- | https://medium.com/@hacker_space11/how-i-brute-forced-400-internal-accounts-without-logging-in-p3-5d90aa7a703c?source=rss------bug_bounty-5 | hacker_space11 | bugs, bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 16-Jul-2025 |
| The Forgotten Dev Endpoints That Still Exist in Production | https://medium.com/@narendarlb123/the-forgotten-dev-endpoints-that-still-exist-in-production-6cc918a0339d?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, ai, information-security, infosec, cybersecurity | 16-Jul-2025 |
| Unintended Consequences: How a ‘Cancel’ Button Gave Me Full Access | https://medium.com/@narendarlb123/unintended-consequences-how-a-cancel-button-gave-me-full-access-375c795ed59c?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, cybersecurity, information-security, bug-bounty, ai | 16-Jul-2025 |
| Favicon Hashing: How I Fingerprinted 1000s of Exposed Panels in Minutes | https://medium.com/@narendarlb123/favicon-hashing-how-i-fingerprinted-1000s-of-exposed-panels-in-minutes-bbeb5bf47a17?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, infosec, bug-bounty, information-security, cybersecurity | 16-Jul-2025 |
| SVG Image to Stored XSS | https://medium.com/@0xRaccoon/svg-image-to-stored-xss-ce9a4d7839ce?source=rss------bug_bounty-5 | Raccoon | web-penetration-testing, bug-bounty, penetration-testing, xss-attack, stored-xss | 16-Jul-2025 |
| “From $500 to $5,000: How Chaining IDOR and XSS Led to Mass Account Takeovers (Ethical Hacking… | https://infosecwriteups.com/from-500-to-5-000-how-chaining-idor-and-xss-led-to-mass-account-takeovers-ethical-hacking-a55de6e59a71?source=rss------bug_bounty-5 | Aman Sharma | programming, technology, money, hacking, bug-bounty | 16-Jul-2025 |
| Nmap & Chill: How One Open Port on a Test Env Led Me to Prod Admin Access | https://infosecwriteups.com/nmap-chill-how-one-open-port-on-a-test-env-led-me-to-prod-admin-access-da40c863161b?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, cybersecurity, hacking, money | 16-Jul-2025 |
| I accidentally hunted a bug in my first 24 hours of my bug bounty journey | https://medium.com/@minasamoil205/i-accidentally-hunted-a-bug-in-my-first-24-hours-of-my-bug-bounty-journey-a190f45780f7?source=rss------bug_bounty-5 | Mina Marcos | cybersecurity, ethical-hacking, bug-bounty, web-security, open-redirect | 16-Jul-2025 |
| How I Found an IDOR and Got Paid | https://ousski.medium.com/how-i-found-an-idor-and-got-paid-36a28d2ccdba?source=rss------bug_bounty-5 | Ousski | bug-bounty, bugbounty-writeup, cybersecurity, api-security, ethical-hacking | 16-Jul-2025 |
| When Your Hobby Involves Breaking Things (Legally) | https://musharraffex.medium.com/when-your-hobby-involves-breaking-things-legally-b8f9d66fefb0?source=rss------bug_bounty-5 | mUsHaRaF | cybersecurity, bug-bounty, tech, problem-solving, ethical-hacking | 16-Jul-2025 |
| $1,180 in One Week from Bug Bounties: My Step-by-Step Breakdown (As a beginner) | https://medium.com/@rashad.desk/1-180-in-one-week-from-bug-bounties-my-step-by-step-breakdown-as-a-beginner-f4175a50dcfe?source=rss------bug_bounty-5 | Rashadul Islam | hacking, make-money-online, freelancing, money, bug-bounty | 16-Jul-2025 |
| Race Conditions in Changing Email or 2FA Settings | https://medium.com/meetcyber/race-conditions-in-changing-email-or-2fa-settings-527c1678a1d6?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, race, bug-bounty, technology | 16-Jul-2025 |
| Breaking File Upload Filters with Trailing Dots or Spaces | https://infosecwriteups.com/breaking-file-upload-filters-with-trailing-dots-or-spaces-b0b1d118eaf5?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tips-and-tricks, technology, bug-bounty, vulnerability | 16-Jul-2025 |
| Exploiting WebSocket Authentication Bypass | https://infosecwriteups.com/exploiting-websocket-authentication-bypass-3d2c998fc062?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, authentication, web3, technology, bug-bounty | 16-Jul-2025 |
| I Almost Bought a $239 Domain for $1 — A Ghost-Level Bug No One’s Watching | https://infosecwriteups.com/i-almost-bought-a-239-domain-for-1-a-ghost-level-bug-no-ones-watching-2ffe740279cd?source=rss------bug_bounty-5 | LordofHeaven | business-logic, infosec, coffinxp, infosec-write-ups, bug-bounty | 16-Jul-2025 |
| Day 6 of MCP Security: Inside the MCP Policy Engine | https://codewithvamp.medium.com/day-6-of-mcp-security-inside-the-mcp-policy-engine-1223f02b6c1c?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | bug-bounty, hacking, mcp-server, cybersecurity, security | 16-Jul-2025 |
| How Hackers Find Sensitive Data in Android Apps -And How You Can Too | Android Pentesting 101 | https://medium.com/@gowthami09027/how-hackers-find-sensitive-data-in-android-apps-and-how-you-can-too-android-pentesting-101-f3fadecf9136?source=rss------bug_bounty-5 | Blue_eye | software-development, android-app-development, bug-bounty, penetration-testing, hacking | 16-Jul-2025 |
| ZoomEye BugBounty Radar: Streamlined Asset Monitoring for Bug Bounty Hunters | https://medium.com/@zoomeye_team/zoomeye-bugbounty-radar-streamlined-asset-monitoring-for-bug-bounty-hunters-a74103c5c3c5?source=rss------bug_bounty-5 | ZoomEye | bug-bounty-writeup, bug-bounty-tips, bug-bounty | 16-Jul-2025 |
| গ this is my exচজসজশহচগচজসজশহচডহডজডডমমহডহডহড | https://medium.com/@zahinshahriar3/%E0%A6%97-this-is-my-ex%E0%A6%9A%E0%A6%9C%E0%A6%B8%E0%A6%9C%E0%A6%B6%E0%A6%B9%E0%A6%9A%E0%A6%97%E0%A6%9A%E0%A6%9C%E0%A6%B8%E0%A6%9C%E0%A6%B6%E0%A6%B9%E0%A6%9A%E0%A6%A1%E0%A6%B9%E0%A6%A1%E0%A6%9C%E0%A6%A1%E0%A6%A1%E0%A6%AE%E0%A6%AE%E0%A6%B9%E0%A6%A1%E0%A6%B9%E0%A6%A1%E0%A6%B9%E0%A6%A1-c8458516e420?source=rss------bug_bounty-5 | Zahinshahriar | bug-bounty, hacking, cybersecurity | 16-Jul-2025 |
| CSRF in a subdomain of VISA leads to deletion of account | https://medium.com/@anonymousshetty2003/csrf-in-a-subdomain-of-visa-leads-to-deletion-of-account-b0b998db1ad7?source=rss------bug_bounty-5 | Anonymousshetty | ethical-hacking, bug-bounty-writeup, owasp-top-10, csrf, bug-bounty | 16-Jul-2025 |
| I Could Verify Any Email and Take Over Accounts — Critical Logic Flaw Explained | https://medium.com/@k4yd0_/i-could-verify-any-email-and-take-over-accounts-critical-logic-flaw-explained-497f476d5417?source=rss------bug_bounty-5 | k4yd0_ | ethical-hacking, vulnerability, web-security, bug-bounty | 16-Jul-2025 |
| Bug Bounties, Broken Promises | https://infosecwriteups.com/bug-bounties-broken-promises-a19557db0aaa?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty-tips, bug-bounty, bug-bounty-program, ethical-hacking, cybersecurity | 16-Jul-2025 |
| Critical CVE-2025–47981: Wormable Windows Flaw Explained | https://medium.com/@kalariyahet23/critical-cve-2025-47981-wormable-windows-flaw-explained-df180ba62ffa?source=rss------bug_bounty-5 | Kalariya Het | bug-bounty, hacking, cybersecurity, money, technology | 16-Jul-2025 |
| ⚔️ From Broken Virtual Machines to One-Click Recon: How I Finally Fixed My Setup | https://infosecwriteups.com/%EF%B8%8F-from-broken-virtual-machines-to-one-click-recon-how-i-finally-fixed-my-setup-3f51076ccbe2?source=rss------bug_bounty-5 | LordofHeaven | bug-bounty, coffin, info-sec-writeups, infosec, docker | 16-Jul-2025 |
| How I Found 100+ Vulnerabilities Using Just Recon | https://medium.com/@ibtissamhammadi1/how-i-found-100-vulnerabilities-using-just-recon-81133da385d3?source=rss------bug_bounty-5 | Ibtissam hammadi | technology, osint, bug-bounty, cybersecurity, hacking | 16-Jul-2025 |
| Information Disclosure on curl.se: Email Addresses Exposed via .mailmap | https://medium.com/@regan_temudo/information-disclosure-on-curl-se-email-addresses-exposed-via-mailmap-640a52455b61?source=rss------bug_bounty-5 | Regan Temudo | bug-bounty, leaked, information-security, open-source, osint | 16-Jul-2025 |
| How I Used SSRF to Gain Admin Access: Step-by-Step with Payloads | https://infosecwriteups.com/how-i-used-ssrf-to-gain-admin-access-step-by-step-with-payloads-6717457a125a?source=rss------bug_bounty-5 | Vipul Sonule | tech, infosec, programming, hacking, bug-bounty | 16-Jul-2025 |
| Recon to Master: The Complete Bug Bounty Checklist | https://infosecwriteups.com/recon-to-master-the-complete-bug-bounty-checklist-95b80ea55ff0?source=rss------bug_bounty-5 | coffinxp | hacking, technology, bug-bounty, cybersecurity, penetration-testing | 16-Jul-2025 |
| SQL Injection in hidden Contact Form Parameter | https://medium.com/@anonymousshetty2003/sql-injection-in-hidden-contact-form-parameter-660bd1281491?source=rss------bug_bounty-5 | Anonymousshetty | sql, bug-bounty, ethical-hacking, bug-bounty-writeup | 16-Jul-2025 |
| The Anatomy of a Critical Bug | https://infosecwriteups.com/the-anatomy-of-a-critical-bug-388329a1c55a?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | programming, hacking, cybersecurity, technology, bug-bounty | 16-Jul-2025 |
| PortSwigger Lab: 2FA Simple Bypass | https://medium.com/@m4zix/portswigger-lab-2fa-simple-bypass-469585166926?source=rss------bug_bounty-5 | 0xM4ZiX | cybersecurity, penetration-testing, portswigger, bugs, bug-bounty | 16-Jul-2025 |
| Apex Domain Bruteforcing for Wide Recon | https://medium.com/@sepix/apex-domain-bruteforcing-for-wide-recon-d5460bc1b5b1?source=rss------bug_bounty-5 | sepix | bug-bounty-writeup, bug-bounty-tips, bug-bounty, cybersecurity | 16-Jul-2025 |
| CTF Day(33) | https://medium.com/@ahmednarmer1/ctf-day-33-aef2b1477fa5?source=rss------bug_bounty-5 | Ahmed Narmer | web-penetration-testing, cybersecurity, bug-bounty, web-pen-testing, ctf | 16-Jul-2025 |
| Injection : Guía Completa de Hacking, Bug Bounty y Prevención | https://medium.com/@jpablo13/injection-gu%C3%ADa-completa-de-hacking-bug-bounty-y-prevenci%C3%B3n-a5748ca723c6?source=rss------bug_bounty-5 | JPablo13 | ethical-hacking, bug-bounty, web-development, cybersecurity, penetration-testing | 15-Jul-2025 |
| Two-Factor Authentication (2FA) Vulnerabilities: Full Analysis | https://medium.com/h7w/two-factor-authentication-2fa-vulnerabilities-full-analysis-c0e7a04c1acb?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, analysis, technology, vulnerability, bug-bounty | 15-Jul-2025 |
| Automation in Bug Bounty Hunting: Best Tools and Techniques | https://osintteam.blog/automation-in-bug-bounty-hunting-best-tools-and-techniques-17bbdfdc1633?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, penetration-testing, vulnerability, bug-bounty, technology | 15-Jul-2025 |
| How a 2FA Bypass Vulnerability in Drugs.com Exposed User Accounts | https://osintteam.blog/how-a-2fa-bypass-vulnerability-in-drugs-com-exposed-user-accounts-773d9eea0cb0?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, penetration-testing, hacking, tips-and-tricks | 15-Jul-2025 |
| How I Earned $780 Using Bug Bounty (As a Beginner) | https://medium.com/@rashad.desk/how-i-earned-780-using-bug-bounty-as-a-beginner-cc550f77e8a8?source=rss------bug_bounty-5 | Rashadul Islam | bug-bounty, freelancing, earnings, cybersecurity, hacking | 15-Jul-2025 |
| Find High-Quality Subdomains Using Subfinder, API Keys, FFUF & SubEnum | https://err0rgod.medium.com/find-high-quality-subdomains-using-subfinder-api-keys-ffuf-subenum-721918d6f2d4?source=rss------bug_bounty-5 | err0rgod | information-technology, hacking, cybersecurity, technology, bug-bounty | 15-Jul-2025 |
| Google Unicode SPUA-B Misinterpretation: Decoding Hidden Instructions as Plain Text | https://infosecwriteups.com/google-unicode-spua-b-misinterpretation-decoding-hidden-instructions-as-plain-text-114c159ebe8b?source=rss------bug_bounty-5 | Yeswehack | cybersecurity, hacking, ethical-hacking, programming, bug-bounty | 15-Jul-2025 |
| How I Gained Access to Indian Traffic Systems and Could Delete Anyone’s Challan | https://medium.com/@a1c3venom/how-i-gained-access-to-indian-traffic-systems-and-could-delete-anyones-challan-1479353bf0b0?source=rss------bug_bounty-5 | Anurag Kumar(0xV3n0m) | red-team, ethical-hacking, bug-bounty, penetration-testing, cybersecurity | 15-Jul-2025 |
| Arbitrary File Creation Leads to OS Command Injection | https://medium.com/@nomad8061/arbitrary-file-creation-leads-to-os-command-injection-8803d2124ec9?source=rss------bug_bounty-5 | Ahmed Badry | hackerone, penetration-testing, bug-bounty, hacker, infosec | 15-Jul-2025 |
| Level Up Your Bounties: How to Choose the Best Bug Bounty Programs | https://medium.com/@nebty/level-up-your-bounties-how-to-choose-the-best-bug-bounty-programs-18cdaf61cdcb?source=rss------bug_bounty-5 | Nebty | bug-bounty, bug-bounty-program, information-security, guides-and-tutorials, ethical-hacking | 15-Jul-2025 |
| ️ WAF? LOL: How Burp Collaborator Helped Me Sneak a Shell Through a Cloud Firewall | https://infosecwriteups.com/%EF%B8%8F-waf-lol-how-burp-collaborator-helped-me-sneak-a-shell-through-a-cloud-firewall-14d662e47999?source=rss------bug_bounty-5 | Iski | cybersecurity, money, infosec, hacking, bug-bounty | 15-Jul-2025 |
| I Found a Critical SSRF Bug in Minutes | https://medium.com/@ibtissamhammadi1/i-found-a-critical-ssrf-bug-in-minutes-0ce7a4678afd?source=rss------bug_bounty-5 | Ibtissam hammadi | collaboration, ssrf, bug-bounty, pentest, cybersecurity | 15-Jul-2025 |
| Recon Made Easy: Multi-Subdomain BackMeUp for Bug Bounty Hunters | https://medium.com/@janpreet4340/recon-made-easy-multi-subdomain-backmeup-for-bug-bounty-hunters-c1c883c2ac0c?source=rss------bug_bounty-5 | Janpreet Singh | education, money, bug-bounty, penetration-testing, hacking | 15-Jul-2025 |
| TheTimeMachine for Bug Bounties & OSINT | https://medium.com/@XEyeSecurity/thetimemachine-for-bug-bounties-osint-39bded4bc78f?source=rss------bug_bounty-5 | Cybersectoworld | bug-bounty, ethical-hacking-training, ethical-hacking | 15-Jul-2025 |
| Understanding Status Codes Like a Hacker | https://systemweakness.com/understanding-status-codes-like-a-hacker-154a828a0be1?source=rss------bug_bounty-5 | Goose Gustin | cybersecurity, bug-bounty-tips, status-codes, bug-bounty | 15-Jul-2025 |
| Unauthenticated Password Reset Abuse | https://infosecwriteups.com/unauthenticated-password-reset-abuse-ad2375b358f5?source=rss------bug_bounty-5 | Ehtesham Ul Haq | bug-bounty, penetration-testing, ethical-hacking, writeup, infosec | 15-Jul-2025 |
| From Zero to Ethical Hacker: The 7-Day Hands-On Challenge | https://infosecwriteups.com/from-zero-to-ethical-hacker-the-7-day-hands-on-challenge-6eaff94f399a?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty-tips, ethical-hacking-training, cybersecurity, ethical-hacking, bug-bounty | 15-Jul-2025 |
| ZoomEye Dorking | JSON Endpoints | https://medium.com/legionhunters/zoomeye-dorking-json-endpoints-2f4c56b74c97?source=rss------bug_bounty-5 | AbhirupKonwar | zoomeye, pentesting, osint, bug-bounty, bug-bounty-tips | 15-Jul-2025 |
| HTTP Status Codes — Through the Eyes of a Hacker | https://medium.com/@ag.gholami.2006/http-status-codes-through-the-eyes-of-a-hacker-c9f683194f65?source=rss------bug_bounty-5 | Ali Gholami | ethical-hacking, web-security, https, cybersecurity, bug-bounty | 15-Jul-2025 |
| The Ultimate Bug Bounty Toolkit (Part 2): Exploitation & Reporting | https://medium.com/meetcyber/the-ultimate-bug-bounty-toolkit-part-2-exploitation-reporting-6adc313ae9f8?source=rss------bug_bounty-5 | Andrei Ivan | hacking-tools, ethical-hacking-tools, bug-bounty-tips, bug-bounty, ethical-hacking | 15-Jul-2025 |
| The Ultimate Bug Bounty Toolkit (Part 1): Recon & Scanning | https://cybersecuritywriteups.com/the-ultimate-bug-bounty-toolkit-part-1-recon-scanning-218be7b4449b?source=rss------bug_bounty-5 | Andrei Ivan | ethical-hacking-tools, bug-bounty-tips, hacking-tools, bug-bounty, ethical-hacking | 15-Jul-2025 |
| Day 1 of My Bug Bounty Journey — Starting from Zero | https://medium.com/@cypervoid/day-1-of-my-bug-bounty-journey-starting-from-zero-59210d31ce15?source=rss------bug_bounty-5 | Manju Varma M | cybersecurity, learning, bug-bounty-writeup, web-security, bug-bounty | 15-Jul-2025 |
| All About Server Side Template Injection (SSTI) | https://infosecwriteups.com/all-about-server-side-template-injection-ssti-101e45650c03?source=rss------bug_bounty-5 | Xcheater | ssti, appsec, web-security, bug-bounty, programming | 15-Jul-2025 |
| 25000$ From Login Bypassed & MFA Using a Race Condition + JWT Leak | https://medium.com/@syedshorox27/25000-from-login-bypassed-mfa-using-a-race-condition-jwt-leak-6139fcc22573?source=rss------bug_bounty-5 | Minio Haxer | bug-bounty, hacking, bounty-program, cybersecurity | 15-Jul-2025 |
| Credential Stuffing: Easy Bug Bounty Wins | https://medium.com/@kalariyahet23/credential-stuffing-easy-bug-bounty-wins-253ed0a6d8ad?source=rss------bug_bounty-5 | Kalariya Het | red-team, hacking, infosec, cybersecurity, bug-bounty | 15-Jul-2025 |
| S3 Misconfig Leaks Millions in 15 Min | https://medium.com/@kalariyahet23/s3-misconfig-leaks-millions-in-15-min-a3cd61c8f85a?source=rss------bug_bounty-5 | Kalariya Het | s3, bug-bounty, ethical-hacking, cybersecurity, cloud-security | 15-Jul-2025 |
| 2500$ From Login Bypassed & MFA Using a Race Condition + JWT Leak | https://medium.com/@syedshorox27/25000-from-login-bypassed-mfa-using-a-race-condition-jwt-leak-6139fcc22573?source=rss------bug_bounty-5 | Minio Haxer | bug-bounty, hacking, bounty-program, cybersecurity | 15-Jul-2025 |
| Think Like a User, Act Like a Tester: A QA Engineer’s Journey | https://medium.com/@sajith-dilshan/think-like-a-user-act-like-a-tester-a-qa-engineers-journey-b9c59de5db41?source=rss------bug_bounty-5 | sajith dilshan | bug-bounty, software-testing, software-quality-engineer, qa | 14-Jul-2025 |
| I Thought Hacking Was Illegal — Until I Learned People Get Paid to Do It | https://medium.com/@alexjoyelraj/i-thought-hacking-was-illegal-until-i-learned-people-get-paid-to-do-it-48726f33323a?source=rss------bug_bounty-5 | Alex Joyel Raj | bug-bounty-tips, hacking, bug-bounty-writeup, bugs, bug-bounty | 14-Jul-2025 |
| Are Mongo Object IDs really random? | https://medium.com/@panurag329/are-mongo-object-ids-really-random-1b6f9c83d04d?source=rss------bug_bounty-5 | vastavik_anurag | bug-bounty-tips, cybersecurity, web-security, bug-bounty, bugbounty-writeup | 14-Jul-2025 |
| Meet urlscanner: A Better Way to Use urlscan.io from Your Terminal | https://mohammadibnibrahim.medium.com/meet-urlscanner-a-better-way-to-use-urlscan-io-from-your-terminal-b677995b9359?source=rss------bug_bounty-5 | محمد بن إبراهيم | hacking, cybersecurity, penetration-testing, ethical-hacking, bug-bounty | 14-Jul-2025 |
| Weak OAuth, Big Problem: Grafana Login Bypass Explained | https://medium.com/@nocley/weak-oauth-big-problem-grafana-login-bypass-explained-fab158119a5a?source=rss------bug_bounty-5 | nocley | grafana, bug-bounty, hacking, misconfiguration, oauth | 14-Jul-2025 |
| The Curious Case of the Open Redirect ($500 Bounty) | https://medium.com/@nareshkandula54/the-curious-case-of-the-open-redirect-500-bounty-9a3e0fb6e7d1?source=rss------bug_bounty-5 | Naresh Kandula | bug-bounty, hackerone, bug-bounty-writeup, bug-bounty-tips | 14-Jul-2025 |
| Google Account Remote Sign-Out: The Unintended Risk That Could Expose Sensitive Data | https://medium.com/@sirimanju41/google-account-remote-sign-out-the-unintended-risk-that-could-expose-sensitive-data-19120e749b0b?source=rss------bug_bounty-5 | CSN | google, bugs, cybersecurity, bug-bounty, cyber-security-awareness | 14-Jul-2025 |
| Beyond the Math: Crafting Your Hacker Playbook | https://medium.com/@boemi/beyond-the-math-crafting-your-hacker-playbook-71c5ca2bd126?source=rss------bug_bounty-5 | Bumi Aryadirangga | methodology, bug-bounty, cybersecurity | 14-Jul-2025 |
| How I Automated Pentesting with ChatGPT, Burp Extensions, and ZAP | https://medium.com/@narendarlb123/how-i-automated-pentesting-with-chatgpt-burp-extensions-and-zap-32b2bb9ba047?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, bug-bounty, information-security, cybersecurity | 14-Jul-2025 |
| AI Recon Mastery: From Nuclei to Nmap with LLM Orchestration | https://medium.com/@narendarlb123/ai-recon-mastery-from-nuclei-to-nmap-with-llm-orchestration-1063b5e1c204?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, infosec, cybersecurity, bug-bounty | 14-Jul-2025 |
| JavaScript File Mining for Hidden Endpoints — with Real Bug Bounty Examples | https://medium.com/@narendarlb123/javascript-file-mining-for-hidden-endpoints-with-real-bug-bounty-examples-a6a29f2ec4fc?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, information-security, cybersecurity, infosec, security | 14-Jul-2025 |
| Python is Bad Language [in 2025] | https://medium.com/@hrofficial62/python-is-bad-language-in-2025-2cd1cea6dd84?source=rss------bug_bounty-5 | Mr Horbio | python, ethical-hacking, hacking, cybersecurity, bug-bounty | 14-Jul-2025 |
| Leaks Data via Public API And IDOR | https://medium.com/@HBlackGhost/leaks-data-via-public-api-and-idor-1ebab2b37211?source=rss------bug_bounty-5 | HBlack Ghost | information-disclosure, idor, leaks-online, bug-bounty, pii-data | 14-Jul-2025 |
| Business Logic Bug to Bypass NO’s | https://medium.com/@most54244/business-logic-bug-to-bypass-nos-6b7472e87814?source=rss------bug_bounty-5 | Mustafa Abdullah | bug-bounty, bug-bounty-tips, business-logic-bug, bug-bounty-writeup, cybersecurity | 14-Jul-2025 |
| Reaping Without Sowing: A Glimpse at theHarvester | https://systemweakness.com/reaping-without-sowing-a-glimpse-at-theharvester-b62b2774cf67?source=rss------bug_bounty-5 | Goose Gustin | reconnaissance, cybersecurity-journey, bug-bounty, theharvester, cybersecurity | 14-Jul-2025 |
| How I Hijacked 100+ Accounts with Just a URL Change (IDOR + XSS Chain) | https://medium.com/@ibtissamhammadi1/how-i-hijacked-100-accounts-with-just-a-url-change-idor-xss-chain-459a95f0da6c?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, web-security, ethical-hacking, bug-bounty, programming | 14-Jul-2025 |
| CTF Day(32) | https://medium.com/@ahmednarmer1/ctf-day-32-6264301dfc38?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, web-penetration-testing, web-pen-testing, cybersecurity, ctf | 14-Jul-2025 |
| CTF Day(31) | https://medium.com/@ahmednarmer1/ctf-day-31-d12990545196?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, web-pen-testing, bug-bounty, cybersecurity, web-penetration-testing | 14-Jul-2025 |
| Code Undercover: Unveiling the Secrets of Real-World Bugs | https://medium.com/@erioluwaalabi/code-undercover-unveiling-the-secrets-of-real-world-bugs-1d3e11476098?source=rss------bug_bounty-5 | Faith Alabi Erioluwa | secure-coding, bug-bounty, cybersecurity, hacking, coding | 14-Jul-2025 |
| ️♂️ Mastering OSINT: How to Find Information on Anyone | https://infosecwriteups.com/%EF%B8%8F-%EF%B8%8F-mastering-osint-how-to-find-information-on-anyone-9185be6f9429?source=rss------bug_bounty-5 | Vipul Sonule | programming, osint, bug-bounty, tech, hacking | 14-Jul-2025 |
| Inconsistent Session Logout After Enabling 2FA on Epic Games — A High-Impact Flaw Explained | https://spidergk.medium.com/inconsistent-session-logout-after-enabling-2fa-on-epic-games-a-high-impact-flaw-explained-2a2ff36c3a3b?source=rss------bug_bounty-5 | Gourav(spidergk) | web-application-security, ethical-hacking, bug-bounty, cybersecurity, two-factor-authentication | 14-Jul-2025 |
| ️ How I Found 300+ Web3 Users’ 2FA Secrets Using Just One Recon Command | https://medium.com/@zack0x01_/%EF%B8%8F-how-i-found-300-web3-users-2fa-secrets-using-just-one-recon-command-13fa202393e0?source=rss------bug_bounty-5 | zack0x01 | cybersecurity, bug-bounty, ethical-hacking, bugbounty-writeup, hacking | 14-Jul-2025 |
| ⚔️ Recon no Kata: The Docker Slayer — How I Breached redacted.com’s Infra Like a Hashira | https://medium.com/@a1c3venom/%EF%B8%8F-recon-no-kata-the-docker-slayer-how-i-breached-redacted-coms-infra-like-a-hashira-d142fa66baa7?source=rss------bug_bounty-5 | Anurag Kumar(0xV3n0m) | bug-bounty, pentesting, info-sec-writeups, red-team, bugbounty-writeup | 14-Jul-2025 |
| Leaks on Repeat: How a CI/CD Webhook Gave Me Root Logs, Tokens & Tears | https://infosecwriteups.com/leaks-on-repeat-how-a-ci-cd-webhook-gave-me-root-logs-tokens-tears-072dfeef9629?source=rss------bug_bounty-5 | Iski | money, bug-bounty, cybersecurity, infosec, hacking | 14-Jul-2025 |
| When Your Computer Starts Digging Without You: The Story of Coin Miner Malware | https://medium.com/@natarajanck2/when-your-computer-starts-digging-without-you-the-story-of-coin-miner-malware-b8d5d7af53a3?source=rss------bug_bounty-5 | Natarajan C K | coin-mining, security, system, bug-bounty, malware | 14-Jul-2025 |
| Complete Active Directory Takeover via AS-REP Roasting and Psexec (Scenario 2) | https://medium.com/@aminouji23/complete-active-directory-takeover-via-as-rep-roasting-and-psexec-scenario-2-a4cc1e7454e0?source=rss------bug_bounty-5 | Aminouji | active-directory, hacking, bug-bounty, red-team, linux | 14-Jul-2025 |
| Access control vulnerabilities | https://medium.com/@MUHTADIN/access-control-vulnerabilities-39875c1b39da?source=rss------bug_bounty-5 | MUHTADIN | web-security-academy, red-team, bug-bounty, penetration-testing, cybersecurity | 14-Jul-2025 |
| 5000$ |Broken Access Control Let Me Delete Other Users’ Tasklists (ZVE-2025–2842) | https://medium.com/@aminefarah802/broken-access-control-let-me-delete-other-users-tasklists-zve-2025-2842-717dced47b0a?source=rss------bug_bounty-5 | KILLUA_UCHIHA | web2, idor-vulnerability, bug-bounty-tips, cybersecurity, bug-bounty | 14-Jul-2025 |
| WebSockets: The Overlooked Attack Surface | https://medium.com/@jotheeswar9/websockets-the-overlooked-attack-surface-73d651e70caf?source=rss------bug_bounty-5 | Jothe Eswar | bug-bounty, hacking, cyberseurity, websocket-security, ethical-hacking | 13-Jul-2025 |
| Day 21 — Bug Bounty Methodology untuk Pemula | https://medium.com/@nadeakzzz/day-21-bug-bounty-methodology-untuk-pemula-afe7e3bb5205?source=rss------bug_bounty-5 | Nadeakzzz | bug-bounty | 13-Jul-2025 |
| Methodology Bug Bounty — N4 Security Flow | https://medium.com/@pythonbakar/methodology-bug-bounty-n4-security-flow-d1f8e4d100e0?source=rss------bug_bounty-5 | nairawr | bug-bounty, cybersecurity | 13-Jul-2025 |
| Perbedaan Penggunaan Tools Manual vs Automation dalam Bug Bounty | https://medium.com/@muhammadidhamcholid6/perbedaan-penggunaan-tools-manual-vs-automation-dalam-bug-bounty-884d2c638ab4?source=rss------bug_bounty-5 | Muhammad Idham Cholid | bug-bounty | 13-Jul-2025 |
| From Blind XSS to RCE: When Headers Became My Terminal | https://is4curity.medium.com/from-blind-xss-to-rce-when-headers-became-my-terminal-d137d2c808a3?source=rss------bug_bounty-5 | Mahmoud El Manzalawy | rce-vulnerability, bug-bounty, cybersecurity, bug-bounty-writeup, xss-vulnerability | 13-Jul-2025 |
| Excellent tool for bug bounty hunters and OSINT investigators | https://infosecwriteups.com/excellent-tool-for-bug-bounty-hunters-and-osint-investigators-b6655cbabb28?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, tools, osint, hacking | 13-Jul-2025 |
| This Profile Page Gave Me More Power Than It Should Have | https://infosecwriteups.com/this-profile-page-gave-me-more-power-than-it-should-have-45a151ddf471?source=rss------bug_bounty-5 | LordofHeaven | bug-bounty, account-takeover, delete-account, authorization-bypass, idor | 13-Jul-2025 |
| Bug Bounty from Scratch | Everything You Need to Know About Bug Bounty | https://infosecwriteups.com/bug-bounty-from-scratch-everything-you-need-to-know-about-bug-bounty-7188d57d36f2?source=rss------bug_bounty-5 | Abhijeet kumawat | hacker, infosec, hacking, bug-bounty, cybersecurity | 13-Jul-2025 |
| ️ Inyección de URL = Cuenta creada. Así de simple. | https://gorkaaa.medium.com/%EF%B8%8F-inyecci%C3%B3n-de-url-cuenta-creada-as%C3%AD-de-simple-97a2f3065e72?source=rss------bug_bounty-5 | Gorka | bugs, bug-bounty-tips, bug-bounty, hacking | 13-Jul-2025 |
| When Hackers Wrestle With Their Shadows | https://generativeai.pub/when-hackers-wrestle-with-their-shadows-45999fec5cfd?source=rss------bug_bounty-5 | Aj | hacker, hacking, cybersecurity, ethical-hacking, bug-bounty | 13-Jul-2025 |
| Subdomain Takeover on mailgun[.]org | https://aimasterprompt.medium.com/subdomain-takeover-on-mailgun-org-7d52ee2165e0?source=rss------bug_bounty-5 | aimaster | subdomain-takeover, bug-bounty-tips, cybersecurity, infosec, bug-bounty | 13-Jul-2025 |
| Google Triaged My Clickjacking Report on Blogger.com — Full Disclosure + PoC | https://medium.com/@viratavi1223/google-triaged-my-clickjacking-report-on-blogger-com-full-disclosure-poc-b0fcebf001f0?source=rss------bug_bounty-5 | Viratavi | google-vrp, ethical-hacking, cybersecurity, clickjacking, bug-bounty | 13-Jul-2025 |
| ️ WAF? LOL: How Burp Collaborator Helped Me Sneak a Shell Through a Cloud Firewall | https://infosecwriteups.com/%EF%B8%8F-waf-lol-how-burp-collaborator-helped-me-sneak-a-shell-through-a-cloud-firewall-c537bbf53c05?source=rss------bug_bounty-5 | Iski | money, cybersecurity, bug-bounty, hacking, infosec | 13-Jul-2025 |
| Bug Bounty Methodology: My Step-by-Step Approach to Finding Vulnerabilities | https://h3des.medium.com/bug-bounty-methodology-my-step-by-step-approach-to-finding-vulnerabilities-bc8583f0f011?source=rss------bug_bounty-5 | Hades | bug-hunter, bug-bounty, bug-bounty-tips, methodology, cybersecurity | 13-Jul-2025 |
| Manual vs Automation in Bug Bounty: Which One Should You Use? | https://h3des.medium.com/manual-vs-automation-in-bug-bounty-which-one-should-you-use-4e665350698c?source=rss------bug_bounty-5 | Hades | cybersecurity, bug-bounty | 13-Jul-2025 |
| “RXSS! on Mercedes-Benz” | https://medium.com/@tsxninja2004/rxss-on-mercedes-benz-71a839da2d31?source=rss------bug_bounty-5 | TSxNINJA | bug-bounty, liferay, ctf, bug-bounty-writeup, infosec | 13-Jul-2025 |
| The Danger of 403 Responses: Why Security Through Status Code Doesn’t Work | https://medium.com/@narendarlb123/the-danger-of-403-responses-why-security-through-status-code-doesnt-work-9629526dbb6c?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, bug-bounty, information-security, cybersecurity | 13-Jul-2025 |
| How I Chained a Race Condition With Broken Access Control for Full Account Takeover | https://medium.com/@narendarlb123/how-i-chained-a-race-condition-with-broken-access-control-for-full-account-takeover-072877598fbc?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, security, cybersecurity, information-security, bug-bounty | 13-Jul-2025 |
| Race Conditions in the Real World: How I Won the App’s Logic War | https://medium.com/@narendarlb123/race-conditions-in-the-real-world-how-i-won-the-apps-logic-war-6fd34b48d4c3?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, infosec, bug-bounty, information-security, ai | 13-Jul-2025 |
| Why Some Bugs Only Happen on Tuesdays (Time-Based Programming Mysteries) | https://medium.com/@coders.stop/why-some-bugs-only-happen-on-tuesdays-time-based-programming-mysteries-ec721f080c01?source=rss------bug_bounty-5 | Coders Stop | learning-to-code, bug-bounty, programming, software-development, computer-science | 13-Jul-2025 |
| Web Application Vulnerability Guide (VAPT) — Now Live on GitHub! ️ | https://psydck.medium.com/web-application-vulnerability-guide-vapt-now-live-on-github-%EF%B8%8F-e586713f33c4?source=rss------bug_bounty-5 | Psyduck | owasp-top-10, bug-bounty, mitigation, payload, vapt | 13-Jul-2025 |
| JS File Leak Could Lead to App Exploits | https://infosecwriteups.com/js-file-leak-could-lead-to-app-exploits-260c8f008c00?source=rss------bug_bounty-5 | Ehtesham Ul Haq | penetration-testing, writeup, cyber-security-awareness, bug-bounty, javascript | 13-Jul-2025 |
| XBOW Ai: The Future of Cybersecurity. | https://1nf1n1ty.medium.com/xbow-ai-the-future-of-cybersecurity-d2ff54e6cda7?source=rss------bug_bounty-5 | 1nf1n1ty | cybersecurity, future, hacking, bug-bounty, ai | 13-Jul-2025 |
| Improve XSS Tools with Jules AI Agent | https://medium.com/ai-apocalypse/improve-xss-tools-with-jules-ai-agent-7ec49bad36a0?source=rss------bug_bounty-5 | AbhirupKonwar | artificial-intelligence, jules-ai, penetration-testing, bug-bounty, bug-bounty-tips | 13-Jul-2025 |
| What are Firewalls- The first line of Defence. | https://err0rgod.medium.com/what-are-firewalls-the-first-line-of-defence-969099d5dfa6?source=rss------bug_bounty-5 | err0rgod | technology, hacking, internet, cybersecurity, bug-bounty | 13-Jul-2025 |
| Hijacking the DOM: How Innocent HTML Can Lead to Full Account Takeovers | https://medium.com/meetcyber/hijacking-the-dom-how-innocent-html-can-lead-to-full-account-takeovers-d990a27162a4?source=rss------bug_bounty-5 | Monika sharma | technology, xss-attack, tips-and-tricks, bug-bounty, penetration-testing | 13-Jul-2025 |
| $$ Unlocking Hidden Vulnerabilities: Uncovering Business Logic Flaws in Modern Web Apps | https://infosecwriteups.com/unlocking-hidden-vulnerabilities-uncovering-business-logic-flaws-in-modern-web-apps-dc5bf1be1e2d?source=rss------bug_bounty-5 | Aman Sharma | hacking, programming, money, bug-bounty, technology | 13-Jul-2025 |
| Unicode Chaos: Exploiting Hidden Payloads in Multilingual Web Apps | https://medium.com/h7w/unicode-chaos-exploiting-hidden-payloads-in-multilingual-web-apps-e56e422d34dc?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, vulnerability, tips-and-tricks, technology | 13-Jul-2025 |
| Finding Vulnerabilities via Exposed Source Maps | https://medium.com/h7w/finding-vulnerabilities-via-exposed-source-maps-11d3e441b6aa?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, tips-and-tricks, bug-bounty, vulnerability | 13-Jul-2025 |
| From JSLeaks to JWT Tokens: Extracting Secrets from JavaScript Like a Pro | https://osintteam.blog/from-jsleaks-to-jwt-tokens-extracting-secrets-from-javascript-like-a-pro-dd351d43a9f8?source=rss------bug_bounty-5 | Monika sharma | vulnerability, penetration-testing, bug-bounty, technology, javascript | 13-Jul-2025 |
| Behind the Scenes of ‘Login with Google’: Understanding OAuth 2.0 | https://medium.com/@sangpalisha/behind-the-scenes-of-login-with-google-understanding-oauth-2-0-3d39af5324ed?source=rss------bug_bounty-5 | Isha Sangpal | bug-bounty, cybersecurity, ethical-hacking, penetration-testing, vulnerability | 13-Jul-2025 |
| This is what I understood about SSRF! | https://medium.com/@priyas_ark/this-is-what-i-understood-about-ssrf-abd7fd9d5a60?source=rss------bug_bounty-5 | Priya | cybersecurity, bug-bounty, portswigger, cyberattack, vulnerability | 13-Jul-2025 |
| When Industrial IoT Devices Are Left Open: My Cybersecurity Research on Red Lion G3 Web Server… | https://medium.com/@hacker_might/when-industrial-iot-devices-are-left-open-my-cybersecurity-research-on-red-lion-g3-web-server-a910d242d6b0?source=rss------bug_bounty-5 | hacker_might | industrial, cybersecurity, öt, bug-bounty, research | 13-Jul-2025 |
| Web Sockets | https://yashpawar1199.medium.com/web-sockets-7cf130a8fd9e?source=rss------bug_bounty-5 | Yash Pawar @HackersParadise | websocket, web-security, web-socket-security, bug-bounty, working-of-websocket | 13-Jul-2025 |
| ️ The Ultimate Web Security Checklist — A Tactical Guide for Hackers & Cybersecurity… | https://medium.com/@ZishanAdThandar/%EF%B8%8F-the-ultimate-web-security-checklist-a-tactical-guide-for-hackers-cybersecurity-42712b87ae1b?source=rss------bug_bounty-5 | ZishanAdThandar | penetration-testing, hacking, bug-bounty, web-development, cybersecurity | 13-Jul-2025 |
| I Tried Doing Bug Bounty For 1 Year And This Is What I Earned In 12 months | https://medium.com/illumination/i-tried-doing-bug-bounty-for-1-year-and-this-is-what-i-earned-in-12-months-8e3fa5ce0a63?source=rss------bug_bounty-5 | Rehansohailultimate | side-hustle-ideas, side-hustle-tips, bugbounty-tips, illumination, bug-bounty | 13-Jul-2025 |
| I Bypassed a Strict WAF Using Simple SQL Tricks | https://medium.com/@ibtissamhammadi1/i-bypassed-a-strict-waf-using-simple-sql-tricks-2fafc3d5697f?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, ethical-hacking, cloudflare, sql-injection, cybersecurity | 13-Jul-2025 |
| How I Discovered an Open Redirect Using X-Forwarded-Host – A Bug Bounty Story with Real-World… | https://levi4.medium.com/how-i-discovered-an-open-redirect-using-x-forwarded-host-a-bug-bounty-story-with-real-world-792d66eaffff?source=rss------bug_bounty-5 | Levi Ackerman | bug-bounty, hacking, information-technology, bug-bounty-tips, cybersecurity | 13-Jul-2025 |
| The Most Important ffuf parameters every Bug Bounty Hunter should use in 2025 | https://medium.com/@sari.mmusab/the-most-important-ffuf-parameters-every-bug-bounty-hunter-should-use-in-2025-a523a0e1735b?source=rss------bug_bounty-5 | Musab Sarı | bug-bounty-tips, ffuf, fuzzing, bug-bounty, hacking | 13-Jul-2025 |
| How to stay aware of new Bugbounty programs using Reconsnap | https://heberjulio65.medium.com/how-to-stay-aware-of-new-bugbounty-programs-using-reconsnap-3b9e8da26676?source=rss------bug_bounty-5 | Héber Júlio | bug-bounty, cybersecurity, red-team, hacking, reconnaissance | 12-Jul-2025 |
| Cryptographic Failures: The Definitive Guide to Hacking, Bug Bounty, and Web Security | https://medium.com/@jpablo13/cryptographic-failures-the-definitive-guide-to-hacking-bug-bounty-and-web-security-cd79728201cf?source=rss------bug_bounty-5 | JPablo13 | web-development, cybersecurity, ethical-hacking, penetration-testing, bug-bounty | 12-Jul-2025 |
| How I Found Facebook and Google API Keys Hardcoded in an Android App (and Why That’s a Bad Idea) | https://aiwolfie.medium.com/how-i-found-facebook-and-google-api-keys-hardcoded-in-an-android-app-and-why-thats-a-bad-idea-7a3f06494c72?source=rss------bug_bounty-5 | AIwolfie | bug-bounty, automation, penetration-testing, android, ethical-hacking | 12-Jul-2025 |
| Accessing Admin Directory | https://ghostman01.medium.com/accessing-admin-directory-eec04145a0fc?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, technology, programming, cybersecurity, hacking | 12-Jul-2025 |
| Sony WH-1000XM5 Bluetooth Vulnerability: Man-in-the-Middle via Insecure Reconnection | https://infosecwriteups.com/sony-wh-1000xm5-bluetooth-vulnerability-man-in-the-middle-via-insecure-reconnection-cb1125e2f77b?source=rss------bug_bounty-5 | Yeswehack | bug-bounty, hacking, cybersecurity, headphones, technology | 12-Jul-2025 |
| The Invite That Lied: A Business Logic Flaw Hidden Behind LG’s Walls | https://infosecwriteups.com/the-invite-that-lied-a-business-logic-flaw-hidden-behind-lgs-walls-a49cca506294?source=rss------bug_bounty-5 | LordofHeaven | web-security, broken-access, business-logic-flaw, bug-bounty | 12-Jul-2025 |
| Bug Bounty Metodologi | https://medium.com/@capunggoreng/bug-bounty-metodologi-fa4be30010e5?source=rss------bug_bounty-5 | Ris | bug-bounty, cybersecurity | 12-Jul-2025 |
| Bug Hunting 101: The Firebase Misconfig That Earned Me a Bounty | https://medium.com/@secshubhamsharma/bug-hunting-101-the-firebase-misconfig-that-earned-me-a-bounty-dd600cef8ade?source=rss------bug_bounty-5 | Shubham Sharma | bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-tips, firebase | 12-Jul-2025 |
| OTP Bypass: Cuando el backend confía en el frontend… pierdes | https://gorkaaa.medium.com/otp-bypass-cuando-el-backend-conf%C3%ADa-en-el-frontend-pierdes-9d39599dafcd?source=rss------bug_bounty-5 | Gorka | hacking, otp-bypass, bug-bounty-tips, bug-bounty, bugs | 12-Jul-2025 |
| Bug Bounty: Perbedaan Tools Manual vs Automation | https://medium.com/@ranggaanandasofyah/bug-bounty-perbedaan-tools-manual-vs-automation-e1b3fdbcdd23?source=rss------bug_bounty-5 | Rangga Ananda S | bug-bounty | 12-Jul-2025 |
| Memahami Bug Bounty dan Studi Kasus IDOR di Endpoint Profile | https://medium.com/@ranggaanandasofyah/memahami-bug-bounty-dan-studi-kasus-idor-di-endpoint-profile-1a400950f29a?source=rss------bug_bounty-5 | Rangga Ananda S | bug-bounty | 12-Jul-2025 |
| Why CORS Misconfigs Are Still a Goldmine for Attackers | https://medium.com/@narendarlb123/why-cors-misconfigs-are-still-a-goldmine-for-attackers-78542d772f6e?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, ai, bug-bounty, cybersecurity | 12-Jul-2025 |
| Fuzzing Techniques for Maximum Bug Bounty Impact — ffufai Tool | https://it4chis3c.medium.com/fuzzing-techniques-for-maximum-bug-bounty-impact-ffufai-tool-74e21735d6f1?source=rss------bug_bounty-5 | It4chis3c | hacking, hidden, bug-bounty, fuzzing, money | 12-Jul-2025 |
| CTF Day(28) | https://medium.com/@ahmednarmer1/ctf-day-28-0a37b9e6f7e7?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, web-pen-testing, ctf, web-penetration-testing, cybersecurity | 12-Jul-2025 |
| Accessing Admin Directory | https://infosecwriteups.com/accessing-admin-directory-eec04145a0fc?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, technology, programming, cybersecurity, hacking | 12-Jul-2025 |
| Still In the Room — Unauthorized Asset Access After Removal | https://medium.com/@0xoroot/still-in-the-room-unauthorized-asset-access-after-removal-61547097ed86?source=rss------bug_bounty-5 | 0xoroot | penetration-testing, cybersecurity, bug-bounty, hackerone, bug-bounty-tips | 12-Jul-2025 |
| Dari Nol Menjadi Pemburu Bug Andal: Metodologi untuk Seseorang yang ingin bergelut di Dunia Bug… | https://medium.com/@mdannn/dari-nol-menjadi-pemburu-bug-andal-metodologi-untuk-seseorang-yang-ingin-bergelut-di-dunia-bug-f09d5c7e93e2?source=rss------bug_bounty-5 | mdan | metodologia, cybersecurity, ethical-hacking, bug-bounty | 12-Jul-2025 |
| Burp, Bounce, and Break: How SSRF to Redis Gave Me the Keys to the Castle | https://infosecwriteups.com/burp-bounce-and-break-how-ssrf-to-redis-gave-me-the-keys-to-the-castle-19ba546093e4?source=rss------bug_bounty-5 | Iski | infosec, hacking, bug-bounty, money, cybersecurity | 12-Jul-2025 |
| Fuzzing Techniques for Maximum Bug Bounty Impact — ffufai Tool | https://infosecwriteups.com/fuzzing-techniques-for-maximum-bug-bounty-impact-ffufai-tool-74e21735d6f1?source=rss------bug_bounty-5 | It4chis3c | hacking, hidden, bug-bounty, fuzzing, money | 12-Jul-2025 |
| Just Released: My Advanced Web-Based Nmap Scanner — Open Source on GitHub! | https://medium.com/@yossefmohamedsalah2001/just-released-my-advanced-web-based-nmap-scanner-open-source-on-github-79994813bf5a?source=rss------bug_bounty-5 | Yossef ibrahim mohamed-salah | bug-bounty, nmap, web-development | 12-Jul-2025 |
| Why Does My Meterpreter Payload Contain ApacheBench Strings? A Peek Inside msfvenom.exe | https://medium.com/@figurx/why-does-my-meterpreter-payload-contain-apachebench-strings-a-peek-inside-msfvenom-exe-6b81c0f8237a?source=rss------bug_bounty-5 | Figurx | hackthebox, hacking, bug-bounty, penetration-testing, red-team | 12-Jul-2025 |
| CVE-2025–6554: Google Chrome Zero-Day Caused by Type Confusion in V8 Engine | https://infosecwriteups.com/cve-2025-6554-google-chrome-zero-day-caused-by-type-confusion-in-v8-engine-417e1eab2f22?source=rss------bug_bounty-5 | Om Maniya | bug-bounty, technology, software-development, cybersecurity, programming | 12-Jul-2025 |
| $13,950 Bounty: Exploiting GitLab Integrations for Full XSS | https://infosecwriteups.com/13-950-bounty-exploiting-gitlab-integrations-for-full-xss-19275a030c2b?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, gitlab, bug-bounty, vulnerability | 12-Jul-2025 |
| How I Found a Critical IDOR in Indian Railways Corporate Booking Portal Exposing Millions of Users… | https://infosecwriteups.com/how-i-found-a-critical-idor-in-indian-railways-corporate-booking-portal-exposing-millions-of-users-41fdd2145efe?source=rss------bug_bounty-5 | coffinxp | cybersecurity, hacking, bug-bounty, idor, technology | 12-Jul-2025 |
| How I Made $20K+ From Broken Link Hijacking on GitHub Repos | https://infosecwriteups.com/how-i-made-20k-from-broken-link-hijacking-on-github-repos-67d8917912f7?source=rss------bug_bounty-5 | Arshad Kazmi | hackerone, bugcrowd, broken-link-hijacking, bash-scripting, bug-bounty | 12-Jul-2025 |
| Hacking at Scale: Crush Massive Target Scopes & Supercharge Your Bug Bounty | https://infosecwriteups.com/hacking-at-scale-crush-massive-target-scopes-supercharge-your-bug-bounty-dcd856d01601?source=rss------bug_bounty-5 | Dheeraj Madhukar | penetration-testing, bug-bounty, devops, hacking, cybersecurity | 12-Jul-2025 |
| $ Don’t Leave Money on the Table: My Automated Hunt for $50-$500 Info Disclosure Bugs ️♂️ | https://infosecwriteups.com/dont-leave-money-on-the-table-my-automated-hunt-for-50-500-info-disclosure-bugs-%EF%B8%8F-%EF%B8%8F-e088eba923cf?source=rss------bug_bounty-5 | Aman Sharma | security, programming, bug-bounty, technology | 12-Jul-2025 |
| I Could’ve Disrupted Morocco’s Internet — But I Chose to Report It Instead | https://medium.com/@abdomem7/i-couldve-disrupted-morocco-s-internet-but-i-chose-to-report-it-instead-52a36fd9efb2?source=rss------bug_bounty-5 | Abderrahmane Memmou | bug-bounty, network-security, ethical-hacking, hacking | 12-Jul-2025 |
| Why Recon Alone Won’t Make You a Top Bug Hunter (My 2025 Reality Check) | https://infosecwriteups.com/why-recon-alone-wont-make-you-a-top-bug-hunter-my-2025-reality-check-4d7843e39019?source=rss------bug_bounty-5 | Harsh kothari | bug-bounty, osint, cybersecurity | 12-Jul-2025 |
| Crashing with Clues: How Improper Error Handling Leaks Secrets | https://medium.com/@natarajanck2/crashing-with-clues-how-improper-error-handling-leaks-secrets-149cb35a46b8?source=rss------bug_bounty-5 | Natarajan C K | web-application-security, java, security, bug-bounty, ctf | 12-Jul-2025 |
| CTF Day(30) | https://medium.com/@ahmednarmer1/ctf-day-30-e47e2dd1b69a?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, ctf, web-pentesting, web-penetration-testing, bug-bounty | 12-Jul-2025 |
| How I Bypass 2FA through confirmation link.. | https://medium.com/write-a-catalyst/how-i-bypass-2fa-through-confirmation-link-5bfdd773057a?source=rss------bug_bounty-5 | Aftab Raja | cybersecurity, bug-bounty, 2fa-bypass, web-hacking, hacker | 12-Jul-2025 |
| CTF Day(29) | https://medium.com/@ahmednarmer1/ctf-day-29-7f76f92d5fb5?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, web-pen-testing, web-penetration-testing, cybersecurity, ctf | 12-Jul-2025 |
| How I Hacked an Admin Panel with Just a Weak Password (and Why You’re at Risk Too) | https://medium.com/@ibtissamhammadi1/how-i-hacked-an-admin-panel-with-just-a-weak-password-and-why-youre-at-risk-too-e3e2f0b9522f?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, password-security, tech, bug-bounty, cybersecurity | 12-Jul-2025 |
| BAC (Authorization Bypass Allows Former Owner to Add Teachers After Role Downgrade) | https://medium.com/@HBlackGhost/bac-authorization-bypass-allows-former-owner-to-add-teachers-after-role-downgrade-d346fc051fca?source=rss------bug_bounty-5 | HBlack Ghost | bug-bounty-tips, bug-bounty, bug-bounty-writeup, pentesting, bug-zero | 12-Jul-2025 |
| Cryptographic Failures: La Guía Definitiva para Hacking, Bug Bounty y Seguridad Web | https://medium.com/@jpablo13/cryptographic-failures-la-gu%C3%ADa-definitiva-para-hacking-bug-bounty-y-seguridad-web-63a705f8af9f?source=rss------bug_bounty-5 | JPablo13 | web-development, cybersecurity, bug-bounty, ethical-hacking, penetration-testing | 11-Jul-2025 |
| Git Scanner : A Journey Through the Wild West of Exposed Git Repositories | https://medium.com/@0xdfffffff/git-scanner-enhanced-a-journey-through-the-wild-west-of-exposed-git-repositories-f7d070073cef?source=rss------bug_bounty-5 | jpe1e | bug-bounty, github, secrets | 11-Jul-2025 |
| ️ Building an Incident Response Plan for DDoS Attacks | https://medium.com/@paritoshblogs/%EF%B8%8F-building-an-incident-response-plan-for-ddos-attacks-0e2f93db8e12?source=rss------bug_bounty-5 | Paritosh | incident-response, ddos, hacking, bug-bounty, cybersecurity | 11-Jul-2025 |
| From Informative To Medium (6.5) | https://medium.com/@Muhammad_Wageh/from-informative-to-medium-6-5-e19bec7cf23d?source=rss------bug_bounty-5 | Muhammad Wageh | bug-bounty-writeup, vulnerability, bug-bounty-tips, cybersecurity, bug-bounty | 11-Jul-2025 |
| CTF Day(27) | https://medium.com/@ahmednarmer1/ctf-day-27-1e6bb61eb835?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, web-pen-testing, web-penetration-testing, cybersecurity, ctf | 11-Jul-2025 |
| Why the FOFA dorking is so important | https://levi4.medium.com/why-the-fofa-dorking-is-so-important-cdfc510ac976?source=rss------bug_bounty-5 | Levi Ackerman | information-security, bug-bounty, cybersecurity, hacking, dorking | 11-Jul-2025 |
| When Regex Goes Rogue: Exploiting ReDoS in the Wild | https://medium.com/@narendarlb123/when-regex-goes-rogue-exploiting-redos-in-the-wild-e81cc9814d26?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, security, information-technology, cybersecurity | 11-Jul-2025 |
| Zero-Width Characters: The Invisible Threat Hiding in Plain Sight | https://medium.com/@narendarlb123/zero-width-characters-the-invisible-threat-hiding-in-plain-sight-92f384e31716?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, information-technology, cybersecurity, security | 11-Jul-2025 |
| The Invisible Hack: Homograph Attacks You Won’t See Coming | https://medium.com/@narendarlb123/the-invisible-hack-homograph-attacks-you-wont-see-coming-254ffc2d9931?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, security, infosec, information-security, cybersecurity | 11-Jul-2025 |
| How Malicious Android Apps Can Impersonate Yours Using Deep Links | https://medium.com/@frankheat/how-malicious-android-apps-can-impersonate-yours-using-deep-links-8eac7f245aaf?source=rss------bug_bounty-5 | Frankheat | bug-bounty, penetration-testing, hacking, cybersecurity, android | 11-Jul-2025 |
| [Bug Bounty] Inside the Triager’s Mind: What They Actually Look For | https://cybersecuritywriteups.com/bug-bounty-inside-the-triagers-mind-what-they-actually-look-for-534c520ab4d7?source=rss------bug_bounty-5 | Andrei Ivan | ethical-hacking, bug-bounty, bug-bounty-tips, infosec, cybersecurity | 11-Jul-2025 |
| Exploiting PowerShell: A Technical Review of Unpatched Attack Vectors | https://medium.com/@TheAegisSecurity/exploiting-powershell-a-technical-review-of-unpatched-attack-vectors-b4c4606db260?source=rss------bug_bounty-5 | The Aegis Security | powershell, cybersecurity, powershell-script, penetration-testing, bug-bounty | 11-Jul-2025 |
| Docker Registry Hacking via Dorking | https://medium.com/meetcyber/docker-registry-hacking-via-dorking-d27093c236e8?source=rss------bug_bounty-5 | AbhirupKonwar | docker, bug-bounty, bug-bounty-tips, red-team, pentesting | 11-Jul-2025 |
| Kelebihan dan Kekurangan Menggunakan Tools Manual dan Tools Otomatis Dalam Kegiatan Bug Bounty | https://medium.com/@nizarkurniaalfaizi/kelebihan-dan-kekurangan-menggunakan-tools-manual-dan-tools-otomatis-dalam-kegiatan-bug-bounty-b4ad0a309269?source=rss------bug_bounty-5 | Nizar Kurnia Alfaizi | bug-bounty, tools, cybersecurity | 11-Jul-2025 |
| Platform Showdown: The Ultimate Guide to Choosing Your Bug Bounty Platform in 2025 | https://cybersecuritywriteups.com/platform-showdown-the-ultimate-guide-to-choosing-your-bug-bounty-platform-in-2025-64ea085ae800?source=rss------bug_bounty-5 | Andrei Ivan | infosec, bug-bounty, bug-bounty-program, cybersecurity, bug-bounty-tips | 11-Jul-2025 |
| Building Your Web3 Security Stack: Essential Tools Every Developer Needs | https://medium.com/@mohamedajguernoun/building-your-web3-security-stack-essential-tools-every-developer-needs-e0dd6e561107?source=rss------bug_bounty-5 | Mohamedajguernoun | finance, hacking, bug-bounty, defi, bug-bounty-tips | 11-Jul-2025 |
| Git Happens: When .git Folders Revealed the Whole Damn Backend | https://infosecwriteups.com/git-happens-when-git-folders-revealed-the-whole-damn-backend-b181b77c4c76?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, money, infosec, bug-bounty | 11-Jul-2025 |
| Cambiar la contraseña… y que el atacante siga dentro | https://gorkaaa.medium.com/cambiar-la-contrase%C3%B1a-y-que-el-atacante-siga-dentro-46ad9c37d537?source=rss------bug_bounty-5 | Gorka | hacking, bug-bounty-tips, bug-bounty, bugs | 11-Jul-2025 |
| How to Get Your First Bug Bounty Payout (Fast): 5 Proven Tips for Web3 Hunters | https://medium.com/@elen.harutyunyan/how-to-get-your-first-bug-bounty-payout-fast-5-proven-tips-for-web3-hunters-299a468cd1fc?source=rss------bug_bounty-5 | Stupid Contract | bug-bounty, bug-bounty-tips, web3-security-solution, web3-security, web3-security-audit | 11-Jul-2025 |
| How I Escalated Simple HTML Injection to SSRF via PDF Rendering | https://medium.com/@0x_xnum/how-i-escalated-simple-html-injection-to-ssrf-via-pdf-rendering-682ea94b3194?source=rss------bug_bounty-5 | Ahmed Tarek | bug-bounty-tips, bug-bounty, html-injection, ssrf, pentesting | 11-Jul-2025 |
| How I Accessed an Admin Dashboard in 5 Minutes (Without Brute Force) | https://medium.com/@ibtissamhammadi1/how-i-accessed-an-admin-dashboard-in-5-minutes-without-brute-force-a776a737f74a?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, bug-bounty, technology, cybersecurity, hacking | 11-Jul-2025 |
| Hack the System | https://medium.com/@djeremy147/hack-the-system-c883ebfa05ef?source=rss------bug_bounty-5 | Jeremy Domingos | novice-writer, novice-programmer, south-africa, bug-bounty, cybersecurity | 11-Jul-2025 |
| From Jio Mobile to NASA HOF: My Unconventional Path into Cybersecurity | https://medium.com/@anon_sidhu/from-jio-mobile-to-nasa-hof-my-unconventional-path-into-cybersecurity-32463b64c941?source=rss------bug_bounty-5 | Sidhartha | ethical-hacking, cybersecurity, bug-bounty, cybersecurity-roadmap, hall-of-fame | 11-Jul-2025 |
| Brute Force Bonanza: Hacking into Web & SSH Logins to Capture the Flag | https://medium.com/@jabaribrown62/brute-force-bonanza-hacking-into-web-ssh-logins-to-capture-the-flag-f14c31e17d35?source=rss------bug_bounty-5 | Jabaribrown | bug-bounty, hacking, cybersecurity, ctf-writeup, web-security | 11-Jul-2025 |
| Public Bucket, Private Tears – The Day I Found an Open S3 and Still Got “Informative” | https://medium.com/@Tony_29/public-bucket-private-tears-the-day-i-found-an-open-s3-and-still-got-informative-a0bcfca59760?source=rss------bug_bounty-5 | Vamsi Krishna | penetration-testing, personal-experienc, stories, bug-bounty, bug-bounty-writeup | 11-Jul-2025 |
| Unpacking GraphQL Security: A Practical Guide for Testers and Developers | https://elcazad0r.medium.com/unpacking-graphql-security-a-practical-guide-for-testers-and-developers-9aedc2d6e791?source=rss------bug_bounty-5 | EL_Cazad0r | bug-bounty, bugbounty-tips, cybersecurity, penetration-testing | 11-Jul-2025 |
| When One Google Account Isn’t Enough: Breaking Identity Boundaries via SSO Confusion | https://systemweakness.com/when-one-google-account-isnt-enough-breaking-identity-boundaries-via-sso-confusion-10e4f8381a44?source=rss------bug_bounty-5 | Digvijay Gholase | freelancing, cybersecurity, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 11-Jul-2025 |
| Top 3 tools for Bug Bounty/Pentesting (2025) | https://medium.com/@Appsec_pt/top-3-tools-for-bug-bounty-pentesting-2025-c8f8373b3e82?source=rss------bug_bounty-5 | Appsec.pt | credentials, bug-bounty, cybersecurity, pentesting, leaked | 11-Jul-2025 |
| Week 4—Learning Basic Concepts of Cybersecurity | https://infosecwriteups.com/week-4-learning-basic-concepts-of-cybersecurity-bac604938cb7?source=rss------bug_bounty-5 | Aang | bug-bounty-tips, information-security, ethical-hacking, information-technology, bug-bounty | 11-Jul-2025 |
| Hijacking the Cache — Part 2: When Parameters Go Rogue | https://su6osec.medium.com/hijacking-the-cache-part-2-when-parameters-go-rogue-0242c0e9f4fc?source=rss------bug_bounty-5 | Đeepanshu | infosec, web-security, cache-poisoning, ethical-hacking, bug-bounty | 11-Jul-2025 |
| Cybersecurity Entry Level Advice | https://medium.com/h7w/cybersecurity-entry-level-advice-ceca64135415?source=rss------bug_bounty-5 | DarKVoicE | cybersecurity, hacking, penetration-testing, bug-bounty, infosec | 11-Jul-2025 |
| How to Automate All Recon for Finding Bugs Easily | Part 1 | https://osintteam.blog/how-to-automate-all-recon-for-finding-bugs-easily-part-1-88a419606512?source=rss------bug_bounty-5 | Vipul Sonule | technology, programming, tech, bug-bounty, hacking | 11-Jul-2025 |
| From Open Redirect to Account Takeover: A Real-World case | https://medium.com/@konqi/from-open-redirect-to-account-takeover-a-real-world-case-5475e42cde6e?source=rss------bug_bounty-5 | Vahagn Israelian | penetration-testing, vulnerability, bug-bounty, hacking, application-security | 11-Jul-2025 |
| The Easiest Bug Bounty you’ll ever get (2025) | https://medium.com/@Appsec_pt/the-easiest-bug-bounty-youll-ever-get-2025-8a5a9657b2ae?source=rss------bug_bounty-5 | Appsec.pt | bug-bounty, cybersecurity, computer-security, hacking, computer-science | 10-Jul-2025 |
| No Gaming, Just Hacking — How I Made $3K on TikTok Bug Bounty Program | https://rdnzx.medium.com/no-gaming-just-hacking-how-i-made-3k-on-tiktok-bug-bounty-program-2b2e41be276e?source=rss------bug_bounty-5 | Radian ID | cybersecurity, hackerone, waf-bypass, bug-hunter, bug-bounty | 10-Jul-2025 |
| Breaking Down Mobile App Premium Paywalls: A Deep Dive into Android In-App Purchase Security… | https://frostyxsec.medium.com/breaking-down-mobile-app-premium-paywalls-a-deep-dive-into-android-in-app-purchase-security-3f11db444f51?source=rss------bug_bounty-5 | Frostynxth | bug-bounty-write-up, bug-bounty-hunter, android-pentesting, bug-bounty | 10-Jul-2025 |
| Insecure Design vs. Threat Modeling — What’s the Difference? | https://medium.com/@narendarlb123/insecure-design-vs-threat-modeling-whats-the-difference-253113ad8a2b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, security, bug-bounty, information-security, threat-modeling | 10-Jul-2025 |
| Insecure by Design: The Silent API Killer | https://medium.com/@narendarlb123/insecure-by-design-the-silent-api-killer-664d1ed3b63e?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, cybersecurity, security-token, api | 10-Jul-2025 |
| Why Most APIs Are Insecure by Design (Even If They Use OAuth2) | https://medium.com/@narendarlb123/why-most-apis-are-insecure-by-design-even-if-they-use-oauth2-6f34655bba15?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | oauth, api, information-security, cybersecurity, bug-bounty | 10-Jul-2025 |
| AI Model API-Validation Using Curl | https://medium.com/@rr-1k/ai-model-api-validation-using-curl-b4b28975a87e?source=rss------bug_bounty-5 | rr-1k | llm, bug-bounty, osint, bug-bounty-writeup, ai | 10-Jul-2025 |
| Mastering CIDR Block Ranges: A Simple Formula to Calculate IP Ranges from /1 to /23 | https://medium.com/@anupkopate02/mastering-cidr-block-ranges-a-simple-formula-to-calculate-ip-ranges-from-1-to-23-cf87db8a147a?source=rss------bug_bounty-5 | Anup K | cybersecurity, bug-bounty, active-directory, networking | 10-Jul-2025 |
| How Not to Handle Your API Keys: A Love Letter to Developers Everywhere | https://medium.com/meetcyber/how-not-to-handle-your-api-keys-a-love-letter-to-developers-everywhere-451db07c790f?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-tips, api-key-security, bug-bounty-writeup, bugs, bug-bounty | 10-Jul-2025 |
| No Gaming, Just Hacking — How I Made $3K on TikTok Bug Bounty Program | https://medium.com/legionhunters/no-gaming-just-hacking-how-i-made-3k-on-tiktok-bug-bounty-program-2b2e41be276e?source=rss------bug_bounty-5 | Radian ID | cybersecurity, hackerone, waf-bypass, bug-hunter, bug-bounty | 10-Jul-2025 |
| API-pocalypse Now: When an Internal Swagger File Opened the Floodgates | https://infosecwriteups.com/api-pocalypse-now-when-an-internal-swagger-file-opened-the-floodgates-a3f3401b1914?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, infosec, cybersecurity, money | 10-Jul-2025 |
| Deep Recon: Finding Secrets in JavaScript with Deep Recon | https://medium.com/h7w/deep-recon-finding-secrets-in-javascript-with-deep-recon-99abb2c9ad85?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, vulnerability, javascript, technology | 10-Jul-2025 |
| Polluting the Graph: Abusing Parameter Confusion in Nested GraphQL Queries | https://osintteam.blog/polluting-the-graph-abusing-parameter-confusion-in-nested-graphql-queries-a1daa5d30019?source=rss------bug_bounty-5 | Monika sharma | graphql, technology, tips-and-tricks, bug-bounty, vulnerability | 10-Jul-2025 |
| Active Directory Attack Lab Walkthrough | https://medium.com/@aminouji23/active-directory-attack-lab-walkthrough-b2fbb41fa9a8?source=rss------bug_bounty-5 | Aminouji | active-directory, red-team, bug-bounty, linux, hacking | 10-Jul-2025 |
| HOW i Found the “Bypassing Client-Side Restrictions: Adding More Than 5 Addresses in Account” | https://doordiefordream.medium.com/how-i-found-the-bypassing-client-side-restrictions-adding-more-than-5-addresses-in-account-d86392134649?source=rss------bug_bounty-5 | DOD cyber solutions | technology, ethical-hacking, hacking, cybersecurity, bug-bounty | 10-Jul-2025 |
| From Rejection to Recognition: How I Made It to Apple’s Hall of Fame | https://medium.com/@rajdipdeysarkar7/from-rejection-to-recognition-how-i-made-it-to-apples-hall-of-fame-8465e1dcb54f?source=rss------bug_bounty-5 | Rajdip | pentesting, bug-bounty, recognition, cybersecurity, apple-hall-of-fame | 10-Jul-2025 |
| How I Bypassed OTP With a Simple Phone Trick | https://medium.com/@ibtissamhammadi1/how-i-bypassed-otp-with-a-simple-phone-trick-0053f64f531d?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty, hacking, life-hacking, tech | 10-Jul-2025 |
| CSPSub: Extract subdomains from CSP Headers | https://medium.com/legionhunters/cspsub-extract-subdomains-from-csp-headers-4d0772f43603?source=rss------bug_bounty-5 | AbhirupKonwar | penetration-testing, bug-bounty-tips, osint, ethical-hacking, bug-bounty | 10-Jul-2025 |
| The Cache Poisoning Game — Hijack the Middle, Rule the Flow | https://su6osec.medium.com/the-cache-poisoning-game-hijack-the-middle-rule-the-flow-34b3ee40357a?source=rss------bug_bounty-5 | Đeepanshu | cache-poisoning, bug-bounty, ethical-hacking, cybersecurity, infosec | 10-Jul-2025 |
| My Metodologi Bug Bounty | https://medium.com/@lunarx/my-metodologi-bug-bounty-805841e39a03?source=rss------bug_bounty-5 | LunarX | bug-bounty, cybersecurity | 10-Jul-2025 |
| Logout… pero ¿realmente saliste? | https://gorkaaa.medium.com/logout-pero-realmente-saliste-8b2ddac15a06?source=rss------bug_bounty-5 | Gorka | hacking, bugs, bug-bounty-tips, bug-bounty | 10-Jul-2025 |
| UFW vs firewalld: Linux Security Guards | https://medium.com/@natarajanck2/ufw-vs-firewalld-linux-security-guards-3f6bed733f31?source=rss------bug_bounty-5 | Natarajan C K | firewall, linux, security, ufw, bug-bounty | 10-Jul-2025 |
| $15,250 Bounty: Race Condition to Store Takeover | https://medium.com/mr-plan-publication/15-250-bounty-race-condition-to-store-takeover-6eb0ad2edd2c?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, vulnerability, hacking, penetration-testing, technology | 10-Jul-2025 |
| Manual vs Automation Tools: Kapan Harus Pakai Yang Mana? | https://medium.com/@iyhorowes/manual-vs-automation-tools-kapan-harus-pakai-yang-mana-149dd16ec5b7?source=rss------bug_bounty-5 | 0xbyalak | tools, pentesting, bug-bounty | 10-Jul-2025 |
| From Rooted to Rejected: How I Found an LFI… Then Got a “Duplicate” Anyway | https://systemweakness.com/from-rooted-to-rejected-how-i-found-an-lfi-then-got-a-duplicate-anyway-c353e8088ce4?source=rss------bug_bounty-5 | Shah kaif | bugs, lfi, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 10-Jul-2025 |
| White Hat on Adult Grounds : How I hacked Pornhub and made $$$ | https://medium.com/@b.jaga17122001/white-hat-on-adult-grounds-how-i-hacked-pornhub-and-made-9fb012fb6d36?source=rss------bug_bounty-5 | Jaga_sky | hackerone, bug-bounty, bugcrowd, bounty-hunter | 10-Jul-2025 |
| The Reality of Being a Bug Bounty Researcher Today | https://medium.com/@jaydenallenmendoza/the-reality-of-being-a-bug-bounty-researcher-today-5fec4790ad51?source=rss------bug_bounty-5 | QuackyK94 | hackerone, security-research, bug-bounty, yeswehack, bugcrowd | 10-Jul-2025 |
| Zero-Click Account Takeover on a U.S. Government Website | https://medium.com/@ali_saadi/zero-click-account-takeover-on-a-u-s-government-website-0ab0168dc47e?source=rss------bug_bounty-5 | Ali Saadi | javascript, programming, bug-bounty, web-security, cybersecurity | 10-Jul-2025 |
| Privilege Escalation via Response Manipulation | https://medium.com/@HBlackGhost/privilege-escalation-via-response-manipulation-1bdb829c8748?source=rss------bug_bounty-5 | HBlack Ghost | bugbounty-writeup, bug-bounty, cybersecurity | 10-Jul-2025 |
| Developing a Hacker’s Mindset: Mental Training for Cybersecurity | https://medium.com/@hrofficial62/developing-a-hackers-mindset-mental-training-for-cybersecurity-94b2e9915417?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, penetration-testing, hacking, bug-bounty, ethical-hacking | 10-Jul-2025 |
| Critical IDOR Chain — Edit Any User’s Role, Activate/Deactivate Accounts, and Escalate Privileges | https://medium.com/@abdelrahmanyousef33/critical-idor-chain-edit-any-users-role-activate-deactivate-accounts-and-escalate-privileges-12637b0f2485?source=rss------bug_bounty-5 | B0d4 | bounty-program, security, idor, web-security, bug-bounty | 10-Jul-2025 |
| API Rate Limiting Bypass Leading to Unlimited Access to Premium Features in explorer.globe.engineer | https://medium.com/@X-3306/api-rate-limiting-bypass-leading-to-unlimited-access-to-premium-features-in-explorer-globe-engineer-63583dd08f07?source=rss------bug_bounty-5 | X-3306 | bypass, bug-bounty, endpoint-security, api, hacking | 10-Jul-2025 |
| How I Discovered a Critical CORS Misconfiguration in a Bug Bounty Target — And What Happened Next | https://medium.com/@eslamatef396/how-i-discovered-a-critical-cors-misconfiguration-in-a-bug-bounty-target-and-what-happened-next-6bc5e5ee1e14?source=rss------bug_bounty-5 | UnStoppable | vulnerability, bug-bounty, cors, challenge | 10-Jul-2025 |
| Start with VDPs Before Aiming for Private Bug Bounty Programs | https://osintteam.blog/start-with-vdps-before-aiming-for-private-bug-bounty-programs-dd6336131231?source=rss------bug_bounty-5 | 127.0.0.1 | bug-bounty, vulnerability, money, private, vdp | 09-Jul-2025 |
| Complete Guide to Broken Access Control: Hacking, Bug Bounty, and Prevention in Web Applications | https://medium.com/@jpablo13/complete-guide-to-broken-access-control-hacking-bug-bounty-and-prevention-in-web-applications-d549fcc140d6?source=rss------bug_bounty-5 | JPablo13 | ethical-hacking, penetration-testing, web-development, bug-bounty, cybersecurity | 09-Jul-2025 |
| Lost Phone, Active SIM: How a Simple Mistake Can Destroy Your Digital Life | https://infosecwriteups.com/lost-phone-active-sim-how-a-simple-mistake-can-destroy-your-digital-life-3dbafec070a5?source=rss------bug_bounty-5 | Yeswehack | hacking, bug-bounty, cyber-security-awareness, cyberattack, cybersecurity | 09-Jul-2025 |
| How I Got My First bug In Just 2 Minutes(HTML Injection) | https://0xbasak.medium.com/how-i-got-my-first-bug-in-just-2-minutes-html-injection-e1983836fb8e?source=rss------bug_bounty-5 | Dipu Basak | hacking, bug-bounty, html-injection, hackerone | 09-Jul-2025 |
| ZoomEye Dorking with Nuclei | https://cybersecuritywriteups.com/zoomeye-dorking-with-nuclei-f07c32fa2801?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, zoomeye, information-security, pentesting, bug-bounty | 09-Jul-2025 |
| Shodan’t Have Shown That: How an Exposed Device Led to Source Code | https://infosecwriteups.com/shodant-have-shown-that-how-an-exposed-device-led-to-source-code-27346a93f22e?source=rss------bug_bounty-5 | Iski | money, infosec, bug-bounty, cybersecurity, hacking | 09-Jul-2025 |
| 7 Scary AI-Powered Cyber Attacks You’ve Never Heard Of (But Should!) | https://medium.com/@paritoshblogs/7-scary-ai-powered-cyber-attacks-youve-never-heard-of-but-should-c3b3aff9adda?source=rss------bug_bounty-5 | Paritosh | cybersecurity, chatgpt, hacking, ai, bug-bounty | 09-Jul-2025 |
| The Broken Link Hijack — Weaponizing Forgotten URLs for Maximum Impact | https://su6osec.medium.com/the-broken-link-hijack-weaponizing-forgotten-urls-for-maximum-impact-99d6a911a1c4?source=rss------bug_bounty-5 | Đeepanshu | cybersecurity, bug-bounty, ethical-hacking, infosec, broken-link-hijacking | 09-Jul-2025 |
| The cockroach or the beetles | https://houstonpersonaltrainer.medium.com/the-cockroach-or-the-beetles-eeb9f59d9c4f?source=rss------bug_bounty-5 | Melissa Ann Howell Schier | bug-bounty, legs, salt | 09-Jul-2025 |
| ¿Subes una foto? Estás subiendo más de lo que crees… | https://gorkaaa.medium.com/subes-una-foto-est%C3%A1s-subiendo-m%C3%A1s-de-lo-que-crees-e97d9182cf38?source=rss------bug_bounty-5 | Gorka | bugs, bug-bounty, bug-bounty-tips | 09-Jul-2025 |
| Punycode 0-Click Account Takeover | https://z0enix.medium.com/punycode-0-click-account-takeover-bdacfdf31225?source=rss------bug_bounty-5 | Mohamed Hamadou | ( ZoeniX ) | vulnerability, security, technology, hacking, bug-bounty | 09-Jul-2025 |
| I Found 12 Bugs in One Program | https://medium.com/@ibtissamhammadi1/i-found-12-bugs-in-one-program-1b011e7a2279?source=rss------bug_bounty-5 | Ibtissam hammadi | programming, tech, ethical-hacking, cybersecurity, bug-bounty | 09-Jul-2025 |
| Thought CSRF Was Extinct? Think Again. | https://medium.com/@yassentaalab51/thought-csrf-was-extinct-think-again-e36da608f900?source=rss------bug_bounty-5 | Killua | bug-bounty, web-security, bug-bounty-tips, csrf, penetration-testing | 09-Jul-2025 |
| A Beginner’s Guide to Understanding DHCP and the DORA Process | https://medium.com/@secshubhamsharma/understanding-dhcp-and-the-dora-process-6c7aa6377f90?source=rss------bug_bounty-5 | Shubham Sharma | web-development, bug-bounty, cybersecurity, software-development, networking | 09-Jul-2025 |
| $$ From 403 Forbidden to Superadmin: My Path Through the Backdoor | https://infosecwriteups.com/from-403-forbidden-to-superadmin-my-path-through-the-backdoor-77b85774fee5?source=rss------bug_bounty-5 | Aman Sharma | hacking, programming, bug-bounty, technology, money | 09-Jul-2025 |
| “You Won’t Believe What These Hashing Algorithms Can Do to Protect Your Data!” | https://medium.com/@paritoshblogs/you-wont-believe-what-these-hashing-algorithms-can-do-to-protect-your-data-fed67878eded?source=rss------bug_bounty-5 | Paritosh | ai, bug-bounty, hacking, cybersecurity, hashing | 09-Jul-2025 |
| The 16B records Data Breach that did not exist | https://medium.com/@Appsec_pt/the-16b-records-data-breach-that-did-not-exist-5cca8fddd0e8?source=rss------bug_bounty-5 | Appsec.pt | company, data-breach, bug-bounty, news, cybersecurity | 09-Jul-2025 |
| The Great Wall of the Bug Bounty Beginner: How to Climb It and Reach the Top | https://medium.com/@0m3g4___/the-great-wall-of-the-bug-bounty-beginner-how-to-climb-it-and-reach-the-top-b8249e73213f?source=rss------bug_bounty-5 | 0m3g4___ | pentesting, bug-bounty, cybersecurity | 08-Jul-2025 |
| Guía Completa de Broken Access Control: Hacking, Bug Bounty y Prevención en Aplicaciones Web | https://medium.com/@jpablo13/gu%C3%ADa-completa-de-broken-access-control-hacking-bug-bounty-y-prevenci%C3%B3n-en-aplicaciones-web-164103fa8cd1?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, web-development, bug-bounty, ethical-hacking, penetration-testing | 08-Jul-2025 |
| Remcos RAT — 2018 nümunəsi üzərindən statik və dinamik analiz | https://medium.com/@elmin.farzaliyev/remcos-rat-2018-n%C3%BCmun%C9%99si-%C3%BCz%C9%99rind%C9%99n-statik-v%C9%99-dinamik-analiz-f7affa29910c?source=rss------bug_bounty-5 | Elmin Farzaliyev | cybersecurity, reverse-engineering, bug-bounty, malware, hacking | 08-Jul-2025 |
| How I Tricked a Swagger UI into Showing a Fake Login Page | https://medium.com/@iamshafayat/how-i-tricked-a-swagger-ui-into-showing-a-fake-login-page-68e9f08a3d59?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | bug-bounty-writeup, bug-bounty, swagger-ui, bug-bounty-tips, cybersecurity | 08-Jul-2025 |
| Not a Finding, But a Reflection | https://infosecwriteups.com/not-a-finding-but-a-reflection-12de6a1ad473?source=rss------bug_bounty-5 | callgh0st | hacking, salt, bug-bounty, islam | 08-Jul-2025 |
| How to Automate API Recon Like a Beast (with Burp Suite, Postman, and AI) | https://medium.com/@narendarlb123/how-to-automate-api-recon-like-a-beast-with-burp-suite-postman-and-ai-7de80f861c3b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, cybersecurity, information-security, api, bug-bounty | 08-Jul-2025 |
| Why API Rate Limiting Is a Lie — and How Attackers Abuse It | https://medium.com/@narendarlb123/why-api-rate-limiting-is-a-lie-and-how-attackers-abuse-it-1d5cdeb3a0d9?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, information-security, bug-bounty, api, security | 08-Jul-2025 |
| Misconfiguration Vulnerabilities Are Still Alive — Here’s Why It Matters | https://medium.com/@narendarlb123/misconfiguration-vulnerabilities-are-still-alive-heres-why-it-matters-81e910e88662?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, bug-bounty, security, information-security, cybersecurity | 08-Jul-2025 |
| Hacking Web : Account Takeover (ATO) Attacks | https://iaraoz.medium.com/hacking-web-account-takeover-ato-attacks-86db20cb2fb2?source=rss------bug_bounty-5 | Israel Aráoz Severiche | owasp, hacking, cybersecurity, pentesting, bug-bounty | 08-Jul-2025 |
| THE DARK ART OF GOOGLE DORKING : HOW I UNCOVERED SENSITIVE DATA IN THE WILD | https://medium.com/@gourisankara357/the-dark-art-of-google-dorking-how-i-uncovered-sensitive-data-in-the-wild-4405e74382f3?source=rss------bug_bounty-5 | Gouri Sankar A | google, bug-bounty, bug-bounty-writeup, infosec, bug-bounty-tips | 08-Jul-2025 |
| Broken Access Control: When Good Bug Only Get “Informative” | https://zetanine.medium.com/broken-access-control-when-good-bug-only-get-informative-4d0dfc0eaacd?source=rss------bug_bounty-5 | Zeta | bug-bounty-tips, privilege-escalation, penetration-testing, hacking, bug-bounty | 08-Jul-2025 |
| Notification Bypass on TikTok: Sending Alerts to Users Who Blocked Me | https://medium.com/@sandipgyawali/notification-bypass-on-tiktok-sending-alerts-to-users-who-blocked-me-9d2625539abf?source=rss------bug_bounty-5 | Sandipgyawali | bug-bounty, ti̇ktok, hackerone | 8-Jul-2025 |
| How a Late-Night iSpy.today Alert Turned Into a $1000 Bounty | https://medium.com/@arshadkazmi42/how-a-late-night-ispy-today-alert-turned-into-a-1000-bounty-4e111be6abbd?source=rss------bug_bounty-5 | Arshad Kazmi | github-dork, github-secret-scanning, bug-bounty, hackerone, i-spy | 8-Jul-2025 |
| From Generalist to Specialist: The Proven Path to Bug Bounty Mastery | https://medium.com/@sync-with-ivan/from-generalist-to-specialist-the-proven-path-to-bug-bounty-mastery-f8e8537f616c?source=rss------bug_bounty-5 | Andrei Ivan | infosec, ethical-hacking-training, cybersecurity-training, bug-bounty-tips, bug-bounty | 8-Jul-2025 |
| How Low Severity Bugs Lead to Critical Rewards | https://infosecwriteups.com/how-low-severity-bugs-lead-to-critical-rewards-bed034ed149e?source=rss------bug_bounty-5 | Monika sharma | vulnerability, penetration-testing, bug-bounty, technology, tips-and-tricks | 8-Jul-2025 |
| The $100,000 Click: My First Year in Bug Bounties | https://infosecwriteups.com/the-100-000-click-my-first-year-in-bug-bounties-824d581a6c00?source=rss------bug_bounty-5 | Aj | bug-bounty, penetration-testing, ethical-hacking, cybersecurity, bug-bounty-tips | 8-Jul-2025 |
| The Ultimate API Penetration Testing Checklist (2025 Edition) | https://infosecwriteups.com/the-ultimate-api-penetration-testing-checklist-2025-edition-092ca8a4056a?source=rss------bug_bounty-5 | Andrei Ivan | api-security, bug-bounty, bug-bounty-tips, ethical-hacking, infosec | 8-Jul-2025 |
| Exploiting API Version Mismatches for Hidden Vulnerabilities | https://infosecwriteups.com/exploiting-api-version-mismatches-for-hidden-vulnerabilities-7680d854c0fb?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, penetration-testing, bug-bounty, vulnerability, technology | 8-Jul-2025 |
| How to Approach Finding Bugs Easily: My Bug Hunting Methodology | https://infosecwriteups.com/how-to-approach-finding-bugs-easily-my-bug-hunting-methodology-9c303a698b7c?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, hacking, programming, information-security, technology | 8-Jul-2025 |
| No Captcha? No Problem! How I Mass-Registered 10K Accounts and Took Over the App | https://infosecwriteups.com/no-captcha-no-problem-how-i-mass-registered-10k-accounts-and-took-over-the-app-25f7c642a4ac?source=rss------bug_bounty-5 | Iski | cybersecurity, infosec, money, hacking, bug-bounty | 8-Jul-2025 |
| How I Downloaded All Bitbucket Repos by Finding a Leaked Token in a JS file for $4k Bounty. | https://medium.com/@s41n1k/how-i-downloaded-all-bitbucket-repos-by-finding-a-leaked-token-in-a-js-file-for-4k-bounty-a701d6effa50?source=rss------bug_bounty-5 | Imran Hossain | cybersecurity, writeup, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 8-Jul-2025 |
| Top 100 Web & API Vulnerabilities Every Bug Bounty Hunter Must Know in 2025 | https://medium.com/@shahpratham529/top-100-web-api-vulnerabilities-every-bug-bounty-hunter-must-know-in-2025-fe51499bbb4e?source=rss------bug_bounty-5 | Pratham Shah | hacking, vulnerability, cybersecurity, penetration-testing, bug-bounty | 8-Jul-2025 |
| Cómo censurar un comentario con solo un script: abuso del sistema de reportes | https://gorkaaa.medium.com/c%C3%B3mo-censurar-un-comentario-con-solo-un-script-abuso-del-sistema-de-reportes-b1df7810761f?source=rss------bug_bounty-5 | Gorka | bugs, bug-bounty, bug-bounty-tips | 8-Jul-2025 |
| Challenge: findme (Web Exploitation) | https://medium.com/@nani.yashwanth12/challenge-findme-web-exploitation-e3fa59cea419?source=rss------bug_bounty-5 | Yash4Vulnerable | ctf, web-exploitation, ctf-writeup, bug-bounty-writeup, bug-bounty | 8-Jul-2025 |
| How a Late-Night iSpy.today Alert Turned Into a $1000 Bounty | https://infosecwriteups.com/how-a-late-night-ispy-today-alert-turned-into-a-1000-bounty-4e111be6abbd?source=rss------bug_bounty-5 | Arshad Kazmi | github-dork, github-secret-scanning, bug-bounty, hackerone, i-spy | 8-Jul-2025 |
| xss0r V5 Golden Plan — 7 Days FREE For Everyone! No Credit Card Needed | https://xss0r.medium.com/xss0r-v5-golden-plan-7-days-free-for-everyone-no-credit-card-needed-29811519fd94?source=rss------bug_bounty-5 | xss0r | xss-vulnerability, xss-bypass, bug-bounty, xss-attack, xss0r | 08-Jul-2025 |
| Challenge: findme (Web Exploitation) | https://medium.com/@nani.yashwanth12/challenge-findme-web-exploitation-e3fa59cea419?source=rss------bug_bounty-5 | Sunkara Yashwanth | ctf, web-exploitation, ctf-writeup, bug-bounty-writeup, bug-bounty | 08-Jul-2025 |
| I Found a Critical Google Bug in a Hackathon (And Earned a P1 Bounty) | https://medium.com/@ibtissamhammadi1/i-found-a-critical-google-bug-in-a-hackathon-and-earned-a-p1-bounty-af1142173c5f?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, cybersecurity, technology, infosec, hacking | 08-Jul-2025 |
| $$ Stop Chasing Unicorns: How “Low” Bugs Become Your Biggest Bug Bounty Paydays | https://infosecwriteups.com/stop-chasing-unicorns-how-low-bugs-become-your-biggest-bug-bounty-paydays-bc2f800bd38b?source=rss------bug_bounty-5 | Aman Sharma | programming, tips-and-tricks, technology, bug-bounty, money | 08-Jul-2025 |
| I Took Over My Own Account With Google Login (And It Worked?!) | https://medium.com/@Yukeshwaran-N/i-took-over-my-own-account-with-google-login-and-it-worked-910fb4362fa2?source=rss------bug_bounty-5 | Yukeshwaran N | bug-bounty, cybersecurity, infosec, hacking, oauth | 08-Jul-2025 |
| Web Application Firewall (WAF) Bypass Techniques that Work in 2025 | https://cyberw1ng.medium.com/web-application-firewall-waf-bypass-techniques-that-work-in-2025-b11861b2767b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, technology, programming, bug-bounty | 08-Jul-2025 |
| This Hidden Recon Tool Is a Game-Changer for Bug Bounty Hunters — And It Has a Killer Free Tier | https://medium.com/@hacker_might/this-hidden-recon-tool-is-a-game-changer-for-bug-bounty-hunters-and-it-has-a-killer-free-tier-a022c74771b0?source=rss------bug_bounty-5 | hacker_might | cybersecurity-tools, reconnaissance, ethical-hacking, shodan-alternative, bug-bounty | 08-Jul-2025 |
| The Host Header Injection Hack — Silent Takeovers & Secret Access | https://su6osec.medium.com/the-host-header-injection-hack-silent-takeovers-secret-access-1e46908b9578?source=rss------bug_bounty-5 | Đeepanshu | web-security, host-header-injection, ethical-hacking, bug-bounty, cybersecurity | 08-Jul-2025 |
| The Bug Bounty Program Litmus Test: 5 Red Flags to Avoid Wasting Your Time | https://infosecwriteups.com/the-bug-bounty-program-litmus-test-5-red-flags-to-avoid-wasting-your-time-1adc0034de43?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, bug-bounty-tips, ethical-hacking, cybersecurity, infosec | 08-Jul-2025 |
| ️ Advanced OAuth Vulnerabilities — Deep Dive | https://systemweakness.com/%EF%B8%8F-advanced-oauth-vulnerabilities-deep-dive-b941c90f49b6?source=rss------bug_bounty-5 | Shah kaif | oauth, bugs, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 08-Jul-2025 |
| DOM XSS: The Client-Side Time Bomb in Your JavaScript | https://medium.com/@narendarlb123/dom-xss-the-client-side-time-bomb-in-your-javascript-1ff51e44fd35?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, information-security, cybersecurity, infosec, bug-bounty | 07-Jul-2025 |
| How a Simple Break Turned a Duplicate Into a P1 Bounty via Request Method Manipulation | https://medium.com/@whitehat29/how-a-simple-break-turned-a-duplicate-into-a-p1-bounty-via-request-method-manipulation-72994a088079?source=rss------bug_bounty-5 | Whitehat | bug-bounty-tips, bug-bounty-writeup, bug-bounty, hacking, cybersecurity | 07-Jul-2025 |
| The Canary Payload Trick — Find Bugs Without Breaking Anything | https://su6osec.medium.com/the-canary-payload-trick-find-bugs-without-breaking-anything-172016c35407?source=rss------bug_bounty-5 | Đeepanshu | bug-bounty, cybersecurity, web-security, infosec, ethical-hacking | 07-Jul-2025 |
| Why I Built CyberPost: A Browser-Based Offline HTTP Request Tool for API Testing | https://medium.com/@Ghostbyt/why-i-built-cyberpost-a-browser-based-offline-http-request-tool-for-api-testing-1bf99defa96c?source=rss------bug_bounty-5 | 0xlaz | tools, cybersecurity, bug-bounty, web-development, bug-bounty-tips | 07-Jul-2025 |
| ZoomEye Dorking | Advanced OSINT | https://medium.com/meetcyber/zoomeye-dorking-advanced-osint-63018aa933d9?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, bug-bounty, osint, infosec, zoomeye | 07-Jul-2025 |
| How a Simple Break Turned a Duplicate Into a P1 Bounty via Request Method Manipulation | https://cybersecuritywriteups.com/how-a-simple-break-turned-a-duplicate-into-a-p1-bounty-via-request-method-manipulation-72994a088079?source=rss------bug_bounty-5 | Whitehat | bug-bounty-tips, bug-bounty-writeup, bug-bounty, hacking, cybersecurity | 07-Jul-2025 |
| How Hackers create Admin Accounts | https://cybersecuritywriteups.com/how-hackers-create-admin-accounts-394ec5c48bcd?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, pentesting, bug-bounty-tips, shodan, ethical-hacking | 07-Jul-2025 |
| Stop Hunting for XSS: How to Find Your Bug Bounty Niche and Dominate | https://medium.com/meetcyber/stop-hunting-for-xss-how-to-find-your-bug-bounty-niche-and-dominate-a69dd36dadee?source=rss------bug_bounty-5 | Andrei Ivan | cybersecurity-careers, cyber-security-training, infosec, bug-bounty, ethical-hacking | 07-Jul-2025 |
| A Subtle Bug That Opened the Door to Malicious Hyperlinks | https://infosecwriteups.com/a-subtle-bug-that-opened-the-door-to-malicious-hyperlinks-6d41d2801af6?source=rss------bug_bounty-5 | Ehtesham Ul Haq | ethical-hacking, bug-bounty, writeup, disclosure, penetration-testing | 07-Jul-2025 |
| Account Takeover via Cookie-Based Stored XSS ($1650 Bounty) | https://medium.com/@staphysec/account-takeover-via-cookie-based-stored-xss-1650-bounty-817dcc57be65?source=rss------bug_bounty-5 | Staphy | info-sec-writeups, bug-bounty, synack-red-team | 07-Jul-2025 |
| From “Probably a False Positive” to a $$$$ Bounty: How I Exploited an Overlooked API | https://medium.com/@0xraselrana/from-probably-a-false-positive-to-a-bounty-how-i-exploited-an-overlooked-api-c35ea37105e9?source=rss------bug_bounty-5 | | hackerone-report, pentesting, infosec, bug-bounty, cybersecurity | 07-Jul-2025 |
| How I Earned $350 from a 5-Minute Bug : The Easiest Account Lockout Vulnerability You Can Find | https://medium.com/@shaheeryasirofficial/how-i-earned-350-from-a-5-minute-bug-the-easiest-account-lockout-vulnerability-you-can-find-d6b2c3720df5?source=rss------bug_bounty-5 | Shaheer Yasir | bug-bounty, penetration-testing, hacking, cybersecurity, offensive-security | 07-Jul-2025 |
| How to Easily Find exposed Secret keys and Tokens in Bug Hunting | https://infosecwriteups.com/how-to-easily-find-exposed-secret-keys-and-tokens-in-bug-hunting-afed1ea9e883?source=rss------bug_bounty-5 | RivuDon | information-security, bug-bounty-tips, bug-bounty-writeup, bug-bounty, osint | 07-Jul-2025 |
| I Found a Bug in Internal Testing: Stored XSS in KYC Form Address Field | https://infosecwriteups.com/i-found-a-bug-in-internal-testing-stored-xss-in-kyc-form-address-field-4ede43cf99a2?source=rss------bug_bounty-5 | Yamini Yadav | bug-bounty, xss-vulnerability, cybersecurity, input-validation, penetration-testing | 07-Jul-2025 |
| “Click Once, Chat Never Again” — The Low Severity Bug That Hijacked the AI Chat Forever | https://infosecwriteups.com/click-once-chat-never-again-the-low-severity-bug-that-hijacked-the-ai-chat-forever-5f5579dfdc67?source=rss------bug_bounty-5 | LordofHeaven | chatbots, web-security, html-injection, bug-bounty, injection | 07-Jul-2025 |
| API Hacking Fundamentals for Beginners: A Guide to Getting Started | https://infosecwriteups.com/api-hacking-fundamentals-for-beginners-a-guide-to-getting-started-b1dd51279807?source=rss------bug_bounty-5 | Prakhar Verma | cybersecurity, apihacking, api-security, ethical-hacking, bug-bounty | 07-Jul-2025 |
| How I Found an XSS Flaw in Swagger UI | https://medium.com/@ibtissamhammadi1/how-i-found-an-xss-flaw-in-swagger-ui-aa3c224d78e4?source=rss------bug_bounty-5 | Ibtissam hammadi | api-security, web-security, cybersecurity, bug-bounty, ethical-hacking | 07-Jul-2025 |
| ️ Can AI Detect Threats Before They Happen? You Can Try It With Real SOC Data | https://medium.com/@paritoshblogs/%EF%B8%8F-can-ai-detect-threats-before-they-happen-you-can-try-it-with-real-soc-data-8814b13e6a0e?source=rss------bug_bounty-5 | Paritosh | cybersecurity, soc, hacking, ai, bug-bounty | 07-Jul-2025 |
| What Happens After the Breach? Understanding the Cyber Kill Chain | https://osintteam.blog/what-happens-after-the-breach-understanding-the-cyber-kill-chain-8549c7905598?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, programming, technology, cybersecurity | 07-Jul-2025 |
| From File Upload Found LFI | https://medium.com/@g52238317/from-file-upload-found-lfi-7d17e5250b7a?source=rss------bug_bounty-5 | Abdelrhman Yasser | web-application-security, file-upload, lfi, infosec, bug-bounty | 07-Jul-2025 |
| Things I Do After Installing Kali Linux 2025.2 — My Full Setup | https://medium.com/@kalyan.dev.me/things-i-do-after-installing-kali-linux-2025-2-my-full-setup-a490e2df568f?source=rss------bug_bounty-5 | Kalyan Dev | penetration-testing, ethical-hacking, cybersecurity, kali-linux, bug-bounty | 07-Jul-2025 |
| How One Email Locked Out Two Admins — And How to Avoid It | https://strangerwhite.medium.com/one-email-two-admins-zero-access-5e9ea5126a64?source=rss------bug_bounty-5 | StrangeRwhite | bug-bounty, cybersecurity, bugs, bugbounty-writeup, broken-access-control | 07-Jul-2025 |
| File Systems Demystified: NTFS, FAT32, exFAT, EXT — Explained with a Simple Story | https://medium.com/@natarajanck2/file-systems-demystified-ntfs-fat32-exfat-ext-explained-with-a-simple-story-9baf8279cd1a?source=rss------bug_bounty-5 | Natarajan C K | security, file-management, ntfs, filesystem, bug-bounty | 07-Jul-2025 |
| TryHackMe Room Writeup: “CyberHeroes!!!” (EASY Difficulty) | https://medium.com/@ranaarpit560/tryhackme-room-writeup-cyberheroes-easy-difficulty-4c410d239e19?source=rss------bug_bounty-5 | Ranaarpit | bug-bounty, web-exploitation, tryhackme, cybersecurity, ethical-hacking | 07-Jul-2025 |
| The Day I Found Out People Are Paid to Legally “Hack” | https://medium.com/@alexjoyelraj/the-day-i-found-out-people-are-paid-to-legally-hack-b5c424c289be?source=rss------bug_bounty-5 | Alex Joyel Raj | ethical-hacking, bug-bounty, technology, side-hustle, cybersecurity | 07-Jul-2025 |
| (LLM injection) Bypass payment in Chat GPT | https://medium.com/@VulnRAM/llm-injection-bypass-payment-in-chat-gpt-34b194d1210a?source=rss------bug_bounty-5 | ramzey elsayed mohamed | bug-bounty-tips, penetration-testing, bug-bounty-writeup, hacking, bug-bounty | 07-Jul-2025 |
| How I Crashed a Rust-Based VPN Server With a Malformed TLS Packet | https://medium.com/@FufuFaf1/how-i-crashed-a-rust-based-vpn-server-with-a-malformed-tls-packet-1010d1cdb95f?source=rss------bug_bounty-5 | MostReal | bug-bounty, denial-of-service, bugbounty-writeup, cybersecurity, vpn | 07-Jul-2025 |
| 0$ Bug Bounty | https://medium.com/@zatikyan.sevada/0-bug-bounty-3bdc15320c8b?source=rss------bug_bounty-5 | Sevada797 | bug-bounty, bugs, mail-injection, hacking, cybersecurity | 07-Jul-2025 |
| Many Canva Designs Exposed with Edit Access on Google | https://medium.com/@alan.brian/many-canva-designs-exposed-with-edit-access-on-google-ec45e5291c46?source=rss------bug_bounty-5 | Alan Levy | canvas, vulnerability, hacking, writeup, bug-bounty | 06-Jul-2025 |
| JS.MAP Deep Recon for Bug Hunters | https://medium.com/legionhunters/js-map-deep-recon-for-bug-hunters-c9571a053fbb?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, javascript, ethical-hacking, bug-bounty, bug-bounty-tips | 06-Jul-2025 |
| The Bug That Let Users Hide Comments from Creators — And I Bypassed the Fix the Same Day | https://medium.com/@sandipgyawali/the-bug-that-let-users-hide-comments-from-creators-and-i-bypassed-the-fix-the-same-day-e7b95c1ae3b2?source=rss------bug_bounty-5 | Sandipgyawali | hackerone, bug-bounty, bug-bounty-writeup, vulnerability | 06-Jul-2025 |
| Week 3—Learning Basic Concepts of Cybersecurity | https://infosecwriteups.com/week-3-learning-basic-concepts-of-cybersecurity-c68a72096e07?source=rss------bug_bounty-5 | Aang | network-security, information-security, bug-bounty, information-technology, ethical-hacking | 06-Jul-2025 |
| ZoomEye Dorking for API Keys | https://cybersecuritywriteups.com/zoomeye-dorking-for-api-keys-cf77d61604bc?source=rss------bug_bounty-5 | AbhirupKonwar | information-security, bug-bounty-tips, zoomeye, bug-bounty, web-security | 06-Jul-2025 |
| CTF Day(25) | https://medium.com/@ahmednarmer1/ctf-day-25-2c8a7a50e903?source=rss------bug_bounty-5 | Ahmed Narmer | penetration-testing, web-penetration-testing, web-pen-testing, bug-bounty, ctf | 06-Jul-2025 |
| From Open Redirect to Internal Access: My SSRF Exploit Story | https://infosecwriteups.com/from-open-redirect-to-internal-access-my-ssrf-exploit-story-10a736962f98?source=rss------bug_bounty-5 | Pratik Dabhi | bugcrowd, bug-bounty, hacking, hackerone | 06-Jul-2025 |
| $600 Bounty: How Revealed Hidden Read Receipts in Bumble’s Chat API | https://infosecwriteups.com/600-bounty-how-revealed-hidden-read-receipts-in-bumbles-chat-api-53bc06c987f5?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, vulnerability, bug-bounty, tips-and-tricks | 06-Jul-2025 |
| From `iptables` to `nftables`: Why Linux Security Just Got Smarter | https://medium.com/@natarajanck2/from-iptables-to-nftables-why-linux-security-just-got-smarter-eaaebb9bc536?source=rss------bug_bounty-5 | Natarajan C K | networking, bug-bounty, linux, security, nftables | 06-Jul-2025 |
| Medium Stats Showing 0 Views and Reads? | https://medium.com/write-a-catalyst/medium-stats-showing-0-views-and-reads-0746afc1fad3?source=rss------bug_bounty-5 | Gajanan Rajput | technology, writers-on-medium, writer, medium, bug-bounty | 06-Jul-2025 |
| La constancia: el verdadero secreto del Bug Bounty | https://gorkaaa.medium.com/la-constancia-el-verdadero-secreto-del-bug-bounty-1c1e14305c6e?source=rss------bug_bounty-5 | Gorka | bug-bounty, bug-bounty-writeup, bugbounty-tips, hacking, motivation | 06-Jul-2025 |
| ⚔️ AI vs Attackers: Can LLMs Defend Your Network? | https://medium.com/@paritoshblogs/%EF%B8%8F-ai-vs-attackers-can-llms-defend-your-network-a7bfc8a43396?source=rss------bug_bounty-5 | Paritosh | hacking, bug-bounty, ai, llm, cybersecurity | 06-Jul-2025 |
| From Image Upload to Account Takeover — Chaining Upload, Storage, and CORS Issues in a Real Pentest | https://medium.com/@shazilrao620/from-image-upload-to-account-takeover-chaining-upload-storage-and-cors-issues-in-a-real-pentest-de5ac9862c31?source=rss------bug_bounty-5 | Shazilrao | xss-attack, ethical-hacking, cybersecurity, penetration-testing, bug-bounty | 06-Jul-2025 |
| First Blood: Finding My First SQL Injection in the Wild | https://medium.com/@msaadsbr/first-blood-finding-my-first-sql-injection-in-the-wild-a722f462211b?source=rss------bug_bounty-5 | Muhammad Saad Sabir | cybersecurity, sqli, bug-bounty, sql, injection | 06-Jul-2025 |
| SSRF (Server Side Request Forgery) | https://medium.com/@julius.grosserode.19/ssrf-server-side-request-forgery-2bee8b84d6b6?source=rss------bug_bounty-5 | Julio | technology, bug-bounty-tips, web-hacking, bug-bounty, ssrf | 06-Jul-2025 |
| Head(er) Games: How I Turned CORS Misconfig into a Full Data Dump | https://infosecwriteups.com/head-er-games-how-i-turned-cors-misconfig-into-a-full-data-dump-de8d70552221?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, bug-bounty, hacking, money | 06-Jul-2025 |
| Exploring Model Context Protocol (MCP) | https://medium.com/@domwhewell/exploring-model-context-protocol-mcp-bca7175347fd?source=rss------bug_bounty-5 | Dom Whewell | cybersecurity, penetration-testing, bug-bounty | 06-Jul-2025 |
| Unauthenticated API Endpoint Exposes SMS Account Balance — An Information Disclosure Story | https://medium.com/@gourisankara357/unauthenticated-api-endpoint-exposes-sms-account-balance-an-information-disclosure-story-23b16b83cdef?source=rss------bug_bounty-5 | Gouri Sankar A | writing, cybersecurity, bug-bounty, bug-bounty-writeup | 06-Jul-2025 |
| Uncovering Hidden Admin Tools via JavaScript Debug Flags | https://osintteam.blog/uncovering-hidden-admin-tools-via-javascript-debug-flags-96813d62cc9d?source=rss------bug_bounty-5 | Monika sharma | javascript, penetration-testing, tips-and-tricks, technology, bug-bounty | 06-Jul-2025 |
| How to find Reflected Cross site Scripting on a page & Reporting the same on platforms. | https://medium.com/@vikram.roy31101/how-to-find-reflected-cross-site-scripting-on-a-page-reporting-the-same-on-platforms-dbb413bf1254?source=rss------bug_bounty-5 | Demsec | bug-bounty, cybersecurity | 06-Jul-2025 |
| The Ghost CI Attack: How Deleted GitHub Workflows Can Still Haunt You | https://su6osec.medium.com/the-ghost-ci-attack-how-deleted-github-workflows-can-still-haunt-you-5a3112256b31?source=rss------bug_bounty-5 | Đeepanshu | infosec, ethical-hacking, devsecops, github-actions, bug-bounty | 06-Jul-2025 |
| Don’t use Python If you want to become Hacker [ in 2025] | https://medium.com/@hrofficial62/dont-use-python-if-you-want-to-become-hacker-in-2025-a1e6b71b32c4?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, python, pentesting, hacking, bug-bounty | 06-Jul-2025 |
| CTF Day(26) | https://medium.com/@ahmednarmer1/ctf-day-26-4760e9b83079?source=rss------bug_bounty-5 | Ahmed Narmer | web-pen-testing, bug-bounty, cybersecurity, ctf, web-penetration-testing | 06-Jul-2025 |
| Automate Your Recon: One API to Run All Your Pentesting Tools Instantly | https://infosecwriteups.com/automate-your-recon-one-api-to-run-all-your-pentesting-tools-instantly-e1502862c2c7?source=rss------bug_bounty-5 | Aris Haryanto | penetration-testing, open-source, cybersecurity-automation, bug-bounty, infosec | 06-Jul-2025 |
| Finding Reflected Cross site Scripting & Reporting the same. | https://medium.com/@vikram.roy31101/how-to-find-reflected-cross-site-scripting-on-a-page-reporting-the-same-on-platforms-dbb413bf1254?source=rss------bug_bounty-5 | Demsec | bug-bounty, cybersecurity | 06-Jul-2025 |
| How I Stole Tokens with One OAuth Misstep | https://medium.com/@ibtissamhammadi1/how-i-stole-tokens-with-one-oauth-misstep-7e4a2939c723?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty, hacking, web-security, tech | 06-Jul-2025 |
| GoBuster: Your Essential Tool for Web Enumeration, Pentesting, and Bug Bounty | https://medium.com/@jpablo13/gobuster-your-essential-tool-for-web-enumeration-pentesting-and-bug-bounty-143c3d134587?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, information-security, cybersecurity, ethical-hacking, bug-bounty | 05-Jul-2025 |
| From LFI to RCE via File Uploads — A Complete Step-by-Step Guide ️ | https://medium.com/@zoningxtr/from-lfi-to-rce-via-file-uploads-a-complete-step-by-step-guide-%EF%B8%8F-20637a1efa29?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, bug-bounty, cybersecurity, web-development | 05-Jul-2025 |
| $1,000 Bounty: Stored XSS in Trix Editor v2.1.1 via Malicious Paste Payload | https://medium.com/h7w/1-000-bounty-stored-xss-in-trix-editor-v2-1-1-via-malicious-paste-payload-4fa413fcde28?source=rss------bug_bounty-5 | Monika sharma | xss-attack, technology, bug-bounty, penetration-testing, tips | 05-Jul-2025 |
| Browser Extension Recon: Finding Bugs in Official Extensions of Web Platforms | https://osintteam.blog/browser-extension-recon-finding-bugs-in-official-extensions-of-web-platforms-c2a1a0e2203a?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, chrome, bug-bounty, tips-and-tricks, technology | 05-Jul-2025 |
| $2,000 Bounty: 0000 OTP Bypass Leads to Phone Number Takeover in inDrive | https://osintteam.blog/2-000-bounty-0000-otp-bypass-leads-to-phone-number-takeover-in-indrive-99f29f46e793?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, vulnerability, penetration-testing, technology, bug-bounty | 05-Jul-2025 |
| Just Wanted to Be a Driver, Ended Up Discovering a Time Capsule | https://infosecwriteups.com/just-wanted-to-be-a-driver-ended-up-discovering-a-time-capsule-085808a4baa8?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-writeup, bug-zero, authentication-bypass, bug-bounty-tips, bug-bounty | 05-Jul-2025 |
| $2,000 Bounty: Breaking Capability Enforcement in CosmWasm Contracts | https://infosecwriteups.com/2-000-bounty-breaking-capability-enforcement-in-cosmwasm-contracts-ddea3aa5d3dc?source=rss------bug_bounty-5 | Monika sharma | report, technology, vulnerability, tips-and-tricks, bug-bounty | 05-Jul-2025 |
| $500 Bounty: Subdomain Takeover on live.firefox.com via Unclaimed Fastly CNAME | https://infosecwriteups.com/500-bounty-subdomain-takeover-on-live-firefox-com-via-unclaimed-fastly-cname-c7d1971e1a32?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, technology, bug-bounty, vulnerability, penetration-testing | 05-Jul-2025 |
| I Found a Hardcoded Google API Key in a Popular Food App (and It Was Too Easy ) | https://aiwolfie.medium.com/i-found-a-hardcoded-google-api-key-in-a-popular-food-app-and-it-was-too-easy-ea73edbc478a?source=rss------bug_bounty-5 | AIwolfie | bug-bounty, custom-script, hacking, ethical-hacking, android | 05-Jul-2025 |
| Exposed WordPress XML-RPC on akcmv.gov.lv: Brute Force and DDoS Risks | https://medium.com/@gourisankara357/exposed-wordpress-xml-rpc-on-akcmv-gov-lv-brute-force-and-ddos-risks-554c2a29edcf?source=rss------bug_bounty-5 | Gouri Sankar A | bug-bounty-writeup, infosec, bug-bounty, cybersecurity, bug-bounty-tips | 05-Jul-2025 |
| RFD Vulnerability Hunting | https://medium.com/meetcyber/rfd-vulnerability-hunting-4d5d3747b659?source=rss------bug_bounty-5 | AbhirupKonwar | vulnerability, bug-bounty, bug-bounty-tips, pentesting, ethical-hacking | 05-Jul-2025 |
| Hunting SSRF in a Single Page Application (SPA) — A Bug Bounty Breakdown | https://medium.com/@jabaribrown62/hunting-ssrf-in-a-single-page-application-spa-a-bug-bounty-breakdown-33187d2e4fb0?source=rss------bug_bounty-5 | Jabaribrown | hacking, cybersecurity, web-security, bug-bounty, ctf-writeup | 05-Jul-2025 |
| OWASP Pentest Series (12/12) | https://medium.com/@thezeeshankhan/owasp-pentest-series-12-12-62246e07f700?source=rss------bug_bounty-5 | TheZeeshanKhan | pentesting, security-assessments, bug-bounty, web, owasp | 05-Jul-2025 |
| It’s Just a Preview… Until It Isn’t: File Previews That Leaked Everything | https://medium.com/@iski/its-just-a-preview-until-it-isn-t-file-previews-that-leaked-everything-d1fd4dae7804?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, infosec, cybersecurity, money | 05-Jul-2025 |
| ️ Beyond /etc/passwd: LFI Bypass, The Ultimate Guide | https://systemweakness.com/%EF%B8%8F-beyond-etc-passwd-lfi-bypass-the-ultimate-guide-5829d1efb600?source=rss------bug_bounty-5 | Shah kaif | bug-bounty-tips, lfi, bug-bounty-writeup, bugbounty-writeup, bug-bounty | 05-Jul-2025 |
| Best Browser Extensions for Ethical Hacking & Pentesting (2025 Edition) | https://medium.com/@ishowcybersecurity/best-browser-extensions-for-ethical-hacking-pentesting-2025-edition-6b9d2a2b0de6?source=rss------bug_bounty-5 | Ghulam Mohiuddin | bug-bounty, ethical-hacking, browser-extension, web-security, cybersecurity | 05-Jul-2025 |
| I Forked a Repo and Got Secrets. Here’s How | https://su6osec.medium.com/i-forked-a-repo-and-got-secrets-heres-how-af3c4f8d0155?source=rss------bug_bounty-5 | Đeepanshu | devsecops, cybersecurity, github-actions, bug-bounty, responsible-disclosure | 05-Jul-2025 |
| Subdomain Takeover: When Your Own Domain Becomes Your Enemy ️♂️ | https://hettt.medium.com/subdomain-takeover-when-your-own-domain-becomes-your-enemy-%EF%B8%8F-%EF%B8%8F-8c80e650aeea?source=rss------bug_bounty-5 | Het Patel | bug-bounty-writeup, bug-bounty-tips, bug-bounty, subdomain-takeover, subdomains-enumeration | 05-Jul-2025 |
| How a Social Icon Can Become a Threat Vector | https://medium.com/@vaaditya320/how-a-social-icon-can-become-a-threat-vector-58a2266ff685?source=rss------bug_bounty-5 | vaaditya320 | bug-bounty-tips, penetration-testing, bug-bounty-writeup, bug-bounty, pentesting | 05-Jul-2025 |
| The importance of URL enumeration | https://medium.com/@yee-yore/the-importance-of-url-enumeration-f6b579efd874?source=rss------bug_bounty-5 | yee-yore | osint, apt, bug-bounty-tips, bug-bounty, penetration-testing | 05-Jul-2025 |
| Level 1 → 2 | Bandit Wargame — OverTheWire | https://medium.com/@thewizardofoz669/level-1-2-bandit-wargame-overthewire-6c865aa9f30d?source=rss------bug_bounty-5 | Wizard-Of-Oz | bug-bounty, penetration-testing, red-team, cybersecurity, overthewire | 05-Jul-2025 |
| Race Condition — can you run faster? | https://medium.com/@olufelajunior/race-condition-can-you-run-faster-3fa841cef8a3?source=rss------bug_bounty-5 | Olufela Osideko | web-penetration-testing, cybersecurity, bug-bounty | 05-Jul-2025 |
| Bypassing 2FA in GraphQL APIs: A Step-by-Step Guide | https://medusa0xf.medium.com/bypassing-2fa-in-graphql-apis-a-step-by-step-guide-4b73816bd4c3?source=rss------bug_bounty-5 | Medusa | bug-bounty-tips, developer, graphql, hacking, bug-bounty | 05-Jul-2025 |
| ✅ Level 0 → 1 | Bandit Wargame — OverTheWire | https://medium.com/@thewizardofoz669/level-0-1-bandit-wargame-overthewire-394af3a64454?source=rss------bug_bounty-5 | Wizard-Of-Oz | hacking, penetration-testing, cybersecurity, bug-bounty, red-team | 05-Jul-2025 |
| Meet `iptables`: Your Linux System’s First Line of Defense | https://medium.com/@natarajanck2/meet-iptables-your-linux-systems-first-line-of-defense-85564be4f436?source=rss------bug_bounty-5 | Natarajan C K | iptables, security, linux, bug-bounty, defence-and-security | 05-Jul-2025 |
| How I Discovered a Live Dependency Confusion Vulnerability in a GraphQL-Based Web Application | https://sanaullahamankorai.medium.com/how-i-discovered-a-live-dependency-confusion-vulnerability-in-a-graphql-based-web-application-13cc3382e671?source=rss------bug_bounty-5 | Sanaullah Aman Korai | ethical-hacking, dependency-confusion, supply-chain-security, bug-bounty, cybersecurity | 05-Jul-2025 |
| I Hacked GraphQL to Steal Data Without Admin Access | https://medium.com/@ibtissamhammadi1/i-hacked-graphql-to-steal-data-without-admin-access-8da9219483b9?source=rss------bug_bounty-5 | Ibtissam hammadi | api-security, ethical-hacking, bug-bounty, hacking, cybersecurity | 05-Jul-2025 |
| Account Takeover via OTP Brute Force in E-commerce Platform . | https://waleedosamaeg.medium.com/account-takeover-via-otp-brute-force-in-e-commerce-platform-7f764a2fb664?source=rss------bug_bounty-5 | Waleed Osama | bug-bounty, development, brute-force, account-takeover, hacking | 04-Jul-2025 |
| GoBuster: Tu Herramienta Esencial para la Enumeración Web, el Pentesting y Bug Bounty | https://medium.com/@jpablo13/gobuster-tu-herramienta-esencial-para-la-enumeraci%C3%B3n-web-el-pentesting-y-bug-bounty-73ba413f3330?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, ethical-hacking, bug-bounty, infosec, cybersecurity | 04-Jul-2025 |
| Bug Bounty Lessons from Two Out-of-Scope Reports: A Learning Journey, Not Just a Win Story | https://medium.com/@a5adujjaman/bug-bounty-lessons-from-two-out-of-scope-reports-a-learning-journey-not-just-a-win-story-9db3e40ae587?source=rss------bug_bounty-5 | Asadujjaman Asif | web-security, security, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 04-Jul-2025 |
| Automated Bug Bounty Workflow — Complete Implementation Guide | https://medium.com/@sync-with-ivan/automated-bug-bounty-workflow-complete-implementation-guide-bb052356b4a5?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, reconnaissance, cybersecurity-tools, vulnerability-scanning, bug-bounty-tips | 04-Jul-2025 |
| Elite Recon for hidden bug bounty programs | https://cybersecuritywriteups.com/elite-recon-for-hidden-bug-bounty-programs-5390cc5f5500?source=rss------bug_bounty-5 | AbhirupKonwar | hacking, osint, bug-bounty, pentesting, bug-bounty-tips | 04-Jul-2025 |
| Behind the Scenes: How Pre-Prod Leaks Led Me to Prod Secrets | https://infosecwriteups.com/behind-the-scenes-how-pre-prod-leaks-led-me-to-prod-secrets-6cea22dcc64e?source=rss------bug_bounty-5 | Iski | cybersecurity, money, infosec, hacking, bug-bounty | 04-Jul-2025 |
| RCE using XSS , This room provide you a good skill of hacking. | https://medium.com/@hrofficial62/rce-using-xss-this-room-provide-you-a-good-skill-of-hacking-e588e2e0a2b7?source=rss------bug_bounty-5 | Mr Horbio | penetration-testing, cybersecurity, hacker, bug-bounty, hacking | 04-Jul-2025 |
| Hacking a Web Panel Without Writing a Single Line of Code | https://medium.com/@ibtissamhammadi1/hacking-a-web-panel-without-writing-a-single-line-of-code-08a751976f79?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, web-exploitation, ethical-hacking, cybersecurity, bug-bounty | 04-Jul-2025 |
| I Chained Four Bugs to Take Over Account | https://medium.com/@narendarlb123/i-chained-four-bugs-to-take-over-account-d4ce0b00eef3?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, bug-bounty, cybersecurity, bug-bounty-tips, infosec | 04-Jul-2025 |
| Exploiting Misconfigured JWT: How I Owned 30+ Accounts via Token Logic Flaws | https://medium.com/@narendarlb123/exploiting-misconfigured-jwt-how-i-owned-30-accounts-via-token-logic-flaws-c592d9915c46?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, infosec, bug-bounty, information-security, api | 04-Jul-2025 |
| escalate privileges | https://medium.com/@poyanfaraji.code/escalate-privileges-f235043b8dbd?source=rss------bug_bounty-5 | cell_number_780 | bug-bounty-writeup, privilege-escalation, bug-bounty | 04-Jul-2025 |
| Secrets in the Shadows: How to Hunt for Exposed API Keys and Tokens Like a Pro | https://medium.com/@narendarlb123/secrets-in-the-shadows-how-to-hunt-for-exposed-api-keys-and-tokens-like-a-pro-1baf80be24d9?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, infosec, api, bug-bounty, information-security | 04-Jul-2025 |
| Aula 8 — DNS Zone Transfer (AXFR) | https://medium.com/@jjrsilv/aula-8-dns-zone-transfer-axfr-0ddd35a37a15?source=rss------bug_bounty-5 | HexSilent | subdomínio, enumeration, dns-zone-transfer, tecnologia, bug-bounty | 04-Jul-2025 |
| Elevate Your Recon: Beyond the Basics with Custom GF Patterns | https://cyphernova1337.medium.com/elevate-your-recon-beyond-the-basics-with-custom-gf-patterns-9260ca6167c2?source=rss------bug_bounty-5 | CypherNova1337 | cybersecurity, hacking, info-sec-writeups, bug-bounty, infosec | 04-Jul-2025 |
| An Insecure Direct Object Reference (IDOR) vulnerability occurs when a web application exposes… | https://medium.com/@omniaelagroudy/an-insecure-direct-object-reference-idor-vulnerability-occurs-when-a-web-application-exposes-edbe4f6d988d?source=rss------bug_bounty-5 | Omniaelagroudy | vulnerability, idor-vulnerability, web-penetration-testing, cybersecurity, bug-bounty | 04-Jul-2025 |
| Set Up Domain-Leak Alerts in 2 Minutes — Enterprise How-To (2025) | https://medium.com/@alexandrevandammepro/set-up-domain-leak-alerts-in-2-minutes-enterprise-how-to-2025-6c532924d62d?source=rss------bug_bounty-5 | Alexandre Vandamme | threat-intelligence, incident-response, bug-bounty, infosec, data-breach | 04-Jul-2025 |
| The Admin Panel That Was Meant to Be Forgotten — But Was Still Live | https://su6osec.medium.com/the-admin-panel-that-was-meant-to-be-forgotten-but-was-still-live-48c5e1c01261?source=rss------bug_bounty-5 | Đeepanshu | red-teaming, bug-bounty, security-vulnerabilities, cybersecurity, web-security | 04-Jul-2025 |
| Add Any Email Without Verification — Logic Flaw in PIN Confirmation Flow | https://medium.com/@yahaiemara11/add-any-email-without-verification-logic-flaw-in-pin-confirmation-flow-b74953c7921e?source=rss------bug_bounty-5 | Yahaiemara | penetration-testing, cybersecurity, bug-bounty | 04-Jul-2025 |
| The $300 Bug: How a Long Email Field Triggered a Partial DoS on Sorare’s Backend | https://medium.com/mr-plan-publication/the-300-bug-how-a-long-email-field-triggered-a-partial-dos-on-sorares-backend-e1455f11ac3f?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, penetration-testing, vulnerability, tips-and-tricks | 04-Jul-2025 |
| BrutDroid: The Ultimate Beginner’s Tool to Set Up an Android Pentesting Lab | https://brutsecurity.medium.com/brutdroid-the-ultimate-beginners-tool-to-set-up-an-android-pentesting-lab-15d2e92e2d67?source=rss------bug_bounty-5 | Saumadip Mandal | android-pentesting, pentesting, android, bugbounty-writeup, bug-bounty | 04-Jul-2025 |
| My First Bug Bounty Story | https://medium.com/@zaid.zrf/my-first-bug-bounty-story-df3abe7a7936?source=rss------bug_bounty-5 | Zaid Arif | bug-bounty | 04-Jul-2025 |
| This Simple IDOR Let Me Access Private User Photos (Earned $500) | https://jalwan.medium.com/this-simple-idor-let-me-access-private-user-photos-earned-500-d0537edba677?source=rss------bug_bounty-5 | Muhammed Jalwan | hackerone, bug-bounty-tips, bugbounty-writeup, bug-bounty-writeup, bug-bounty | 03-Jul-2025 |
| Want to Be a Hacker (The Good Kind)? Your Bug Bounty Adventure Map Starts Now! | https://medium.com/@juniorpinheirocs369/want-to-be-a-hacker-the-good-kind-your-bug-bounty-adventure-map-starts-now-32fab9fb3ff4?source=rss------bug_bounty-5 | 0m3g4___ | cybersecurity, bug-bounty, pentesting | 03-Jul-2025 |
| How to Find Domains Owned by a Company | https://medium.com/@j4xx3n/how-to-find-domains-owned-by-a-company-3ae0e5cb2ced?source=rss------bug_bounty-5 | J4xx3n | bug-bounty-tips, recon, bug-bounty | 03-Jul-2025 |
| Cybersecurity dan Penetration Testing | https://medium.com/@mluqmaan22/cybersecurity-dan-penetration-testing-e50d8afa61bc?source=rss------bug_bounty-5 | Maan | penetration-testing, cybersecurity, bug-bounty | 03-Jul-2025 |
| Fake Logins, Real Costs: The OTP Bug Worth €X,XXX | https://infosecwriteups.com/fake-logins-real-costs-the-otp-bug-worth-x-xxx-74a422791385?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-writeup, otp-verification, bug-bounty-tips, bug-bounty | 03-Jul-2025 |
| How a Simple IDOR in a Payment Flow Led to Order Manipulation and PII Exposure | https://medium.com/@aryaveersinghrathore_1/how-a-simple-idor-in-a-payment-flow-led-to-order-manipulation-and-pii-exposure-ec3ed410b08d?source=rss------bug_bounty-5 | Aryaveer Singh Rathore | bug-bounty, cybersecurity, bug-bounty-tips, infosec, web-security | 03-Jul-2025 |
| Hunting Reflected XSS in PAN-OS: A Case Study on CVE-2025–0133 | https://medium.com/@sangpalisha/hunting-reflected-xss-in-pan-os-a-case-study-on-cve-2025-0133-6f693d211a16?source=rss------bug_bounty-5 | Isha Sangpal | cybersecurity, penetration-testing, bug-bounty, ethical-hacking, vulnerability | 03-Jul-2025 |
| Performing CSRF Exploits Over GraphQL | https://infosecwriteups.com/performing-csrf-exploits-over-graphql-d6e1165d44dd?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, csrf-attack, bug-bounty, graphql-api-security, graphql-csrf-exploit | 03-Jul-2025 |
| Want to Be a Hacker (The Good Kind)? Your Bug Bounty Adventure Map Starts Now! | https://medium.com/@0m3g4___/want-to-be-a-hacker-the-good-kind-your-bug-bounty-adventure-map-starts-now-32fab9fb3ff4?source=rss------bug_bounty-5 | 0m3g4___ | cybersecurity, bug-bounty, pentesting | 03-Jul-2025 |
| CSRF to ATO: How I Took Over Accounts on Target.com with One POST Request | https://medium.com/@SKaif009/csrf-to-ato-how-i-took-over-accounts-on-target-com-with-one-post-request-3ab95112900c?source=rss------bug_bounty-5 | Shah kaif | bug-bounty, owasp, bugs, bug-bounty-writeup, bug-bounty-tips | 03-Jul-2025 |
| One SSRF to Rule Them All | https://infosecwriteups.com/one-ssrf-to-rule-them-all-f6563afce506?source=rss------bug_bounty-5 | Ott3rly | cybersecurity, information-security, bug-bounty, bug-bounty-writeup, ssrf | 03-Jul-2025 |
| The Bug Bounty Mindset: Thinking Like a Practical Hacker | https://medium.com/@narendarlb123/the-bug-bounty-mindset-thinking-like-a-practical-hacker-a4342f51334b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, cybersecurity, ai, information-security | 03-Jul-2025 |
| From “Not Applicable” to Valid Bug: TikTok Live Streams Visible After Being Blocked | https://medium.com/@sandipgyawali/from-not-applicable-to-valid-bug-tiktok-live-streams-visible-after-being-blocked-a961d45deeca?source=rss------bug_bounty-5 | Sandipgyawali | bug-bounty, hackerone, bugbounty-writeup | 03-Jul-2025 |
| Found a Bug. Got No Bounty. Just Vibes. | https://medium.com/@vamsi113377/found-a-bug-got-no-bounty-just-vibes-74697314df1c?source=rss------bug_bounty-5 | Vamsi Krishna | bug-bounty-writeup, bug-bounty, rejection, hackerone | 03-Jul-2025 |
| How I Bypassed Account Verification with a Simple Host Header Trick | https://infosecwriteups.com/how-i-bypassed-account-verification-with-a-simple-host-header-trick-728368ae877b?source=rss------bug_bounty-5 | Ehtesham Ul Haq | bug-bounty, authentication, writeup, ethical-hacking, penetration-testing | 03-Jul-2025 |
| What is OSINT? | https://medium.com/@narendarlb123/what-is-osint-2ce5dccf503b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | kali-linux, cybersecurity, bug-bounty, infosec, osint | 03-Jul-2025 |
| Not-So-Private Parts: How Public Buckets Spilled Internal Dashboards | https://infosecwriteups.com/not-so-private-parts-how-public-buckets-spilled-internal-dashboards-c3dd03df9951?source=rss------bug_bounty-5 | Iski | money, infosec, hacking, bug-bounty, cybersecurity | 03-Jul-2025 |
| How to Get Started with Bug Bounty: Earn Your First $100 | https://ravi73079.medium.com/how-to-get-started-with-bug-bounty-earn-your-first-100-7aaaff0d0407?source=rss------bug_bounty-5 | Ravi sharma | cybersecurity, bug-bounty, artificial-intelligence, bug-bounty-tips, technology | 03-Jul-2025 |
| CSRF to ATO: How I Took Over Accounts on Target.com with One POST Request | https://systemweakness.com/csrf-to-ato-how-i-took-over-accounts-on-target-com-with-one-post-request-3ab95112900c?source=rss------bug_bounty-5 | Shah kaif | bug-bounty, owasp, bugs, bug-bounty-writeup, bug-bounty-tips | 03-Jul-2025 |
| How I Found 100+ Subdomains in Just 1 Hour (A Bug Bounty Hunter’s Secret) | https://medium.com/@ibtissamhammadi1/how-i-found-100-subdomains-in-just-1-hour-a-bug-bounty-hunters-secret-e81952d948f9?source=rss------bug_bounty-5 | Ibtissam hammadi | tech, bug-bounty, programming, cybersecurity, hacking | 03-Jul-2025 |
| The Port 3306 Cheatsheet: MySQL Workflow ,Misconfig, Dump, Exploit | https://medium.com/@verylazytech/the-port-3306-cheatsheet-mysql-workflow-misconfig-dump-exploit-7eccb333c944?source=rss------bug_bounty-5 | Very Lazy Tech | mysql, penetration-testing, ethical-hacking, bug-bounty, cheatsheet | 03-Jul-2025 |
| CTF Day(23) | https://medium.com/@ahmednarmer1/ctf-day-23-595078e28d0f?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, bug-bounty, web-pen-testing, web-penetration-testing, cybersecurity | 03-Jul-2025 |
| Forging Passkeys: Exploring the FIDO2/WebAuthn Attack Surface | https://medium.com/@narendarlb123/forging-passkeys-exploring-the-fido2-webauthn-attack-surface-12e44bfb3b74?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, bug-bounty, infosec, information-security | 03-Jul-2025 |
| From LFI to RCE via php://input — The Complete Beginner-Friendly Guide | https://medium.com/@zoningxtr/from-lfi-to-rce-via-php-input-the-complete-beginner-friendly-guide-e38e79924521?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, python-programming, cybersecurity, web-development, penetration-testing | 03-Jul-2025 |
| ️ Day 3 of 10 Days of MCP Security: Threat Modeling MCP Systems | https://codewithvamp.medium.com/%EF%B8%8F-day-3-of-10-days-of-mcp-security-threat-modeling-mcp-systems-7b41f63ec37b?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | mcp-server, security, bug-bounty, ai-security, ai | 03-Jul-2025 |
| Found a Bug. Got No Bounty. Just Vibes. | https://medium.com/@Tony_29/found-a-bug-got-no-bounty-just-vibes-74697314df1c?source=rss------bug_bounty-5 | Vamsi Krishna | bug-bounty-writeup, bug-bounty, rejection, hackerone | 03-Jul-2025 |
| From LFI to RCE via PHP Sessions (PHP 5) — A Complete Guide with Real Examples | https://medium.com/@zoningxtr/from-lfi-to-rce-via-php-sessions-php-5-a-complete-guide-with-real-examples-6ced00a1ae10?source=rss------bug_bounty-5 | Zoningxtr | web-development, penetration-testing, php, bug-bounty, cybersecurity | 03-Jul-2025 |
| The Bug You’ll Never See — Until You Flip the Flag | https://su6osec.medium.com/the-bug-youll-never-see-until-you-flip-the-flag-fbec93ad5fa9?source=rss------bug_bounty-5 | Đeepanshu | cybersecurity, bounty-program, red-team, hacking, bug-bounty | 03-Jul-2025 |
| From LFI to RCE via expect:// PHP Wrapper — A Deep Dive with Practical Examples ✨ | https://medium.com/@zoningxtr/from-lfi-to-rce-via-expect-php-wrapper-a-deep-dive-with-practical-examples-699690073fe8?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, web-design, cybersecurity, bug-bounty, web-development | 03-Jul-2025 |
| Bypassing Purchase Verification to Access Game Download Page via Fuzzing | https://medium.com/@yossefmohamedsalah2001/bypassing-purchase-verification-to-access-game-download-page-via-fuzzing-99d83d6052cc?source=rss------bug_bounty-5 | Yossef ibrahim mohamed-salah | fuzzing, vulnerability, redhack, bug-bounty, bypass | 03-Jul-2025 |
| Cariddi: Ultimate Bug Bounty Recon | https://medium.com/meetcyber/cariddi-ultimate-bug-bounty-recon-354f44f8bc9d?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, penetration-testing, bug-bounty-tips, web-security, bug-bounty-hunter | 03-Jul-2025 |
| Consulta DNS e Enumeração com Nameservers | https://medium.com/@jjrsilv/consulta-dns-e-enumera%C3%A7%C3%A3o-com-nameservers-2869ae149dac?source=rss------bug_bounty-5 | HexSilent | bug-bounty, hackin, passive-recon, tecnologia, enumeration | 03-Jul-2025 |
| How I Unlocked Premium Features for Free via a Simple API Trick (Privilege Escalation Story) | https://medium.com/@FufuFaf1/how-i-unlocked-premium-features-for-free-via-a-simple-api-trick-privilege-escalation-story-ac1b4edba454?source=rss------bug_bounty-5 | MostReal | bug-bounty-tips, bug-bounty, privilege-escalation, cybersecurity, bug-bounty-writeup | 03-Jul-2025 |
| Bypassing Payment for Project Creation | https://medium.com/@Eyax0/bypassing-payment-for-project-creation-81b5e0f02c4c?source=rss------bug_bounty-5 | Eyad Waleed | bug-bounty-tips, web-hacking, bug-bounty-writeup, bug-bounty, bug-hunting | 02-Jul-2025 |
| Bypassing GraphQL Brute Force Protections | https://osintteam.blog/bypassing-graphql-brute-force-protections-fdccecc50c81?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, graphql-rate-limit-bypass, brute-force-graphql-api, graphql-brute-force, bug-bounty-tips | 02-Jul-2025 |
| Write-up Hack the system Sattracker | https://medium.com/@D4LTON/write-up-hack-the-system-sattracker-52f042be40b9?source=rss------bug_bounty-5 | D4LTON | ctf, web, bug-bounty, hack-the-system, htb | 02-Jul-2025 |
| gf: Your Essential Ally for Vulnerability Recognition and Detection in Bug Bounty | https://medium.com/@jpablo13/gf-your-essential-ally-for-vulnerability-recognition-and-detection-in-bug-bounty-a12f04a110ff?source=rss------bug_bounty-5 | JPablo13 | ethical-hacking, penetration-testing, infosec, cybersecurity, bug-bounty | 02-Jul-2025 |
| SSRF 2.0: Bypassing Internal Protections via Redirect Loops | https://medium.com/@narendarlb123/ssrf-2-0-bypassing-internal-protections-via-redirect-loops-ddbfdb9a8ce6?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, threat-intelligence, cybersecurity, bug-bounty, ai | 02-Jul-2025 |
| Burp Extensions You’re Not Using (But Should): Secret Weapons for Modern Web Apps | https://infosecwriteups.com/burp-extensions-youre-not-using-but-should-secret-weapons-for-modern-web-apps-dd7e8b7de642?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, penetration-testing, web3, burpsuite, tips-and-tricks | 02-Jul-2025 |
| How to use FOFA for security research | https://infosecwriteups.com/how-to-use-fofa-for-security-research-dafb8e00aa14?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, bug-bounty, osint, cybersecurity, vulnerability | 02-Jul-2025 |
| Day 7: Reflected XSS into attribute with angle brackets HTML-encoded: Zero to Hero Series —… | https://infosecwriteups.com/day-7-reflected-xss-into-attribute-with-angle-brackets-html-encoded-zero-to-hero-series-8b0c775fc7b5?source=rss------bug_bounty-5 | RayofHope | cyber-security-awareness, ethical-hacking, web-penetration-testing, bug-bounty, reflected-xss | 02-Jul-2025 |
| ️ How I Achieved Full Account Takeover via Horizontal Privilege Escalation on an Authenticated… | https://medium.com/@hacker_space11/%EF%B8%8F-how-i-achieved-full-account-takeover-via-horizontal-privilege-escalation-on-an-authenticated-d727f52d8fd2?source=rss------bug_bounty-5 | hacker_space11 | hacking, hacker, bug-bounty, bugbounty-tips | 02-Jul-2025 |
| The Hidden Graph: How API Rate Limits Lied and Let Me Scrape Millions | https://infosecwriteups.com/the-hidden-graph-how-api-rate-limits-lied-and-let-me-scrape-millions-761a7cc99270?source=rss------bug_bounty-5 | Iski | bug-bounty, money, cybersecurity, hacking, infosec | 02-Jul-2025 |
| How Hackers Are Using ChatGPT to Launch Attacks — And How to Stop Them | https://medium.com/@paritoshblogs/how-hackers-are-using-chatgpt-to-launch-attacks-and-how-to-stop-them-8cf156f8aecb?source=rss------bug_bounty-5 | Paritosh | hacking, ai, chatgpt, cybersecurity, bug-bounty | 02-Jul-2025 |
| Finding AI Agents, LLM API Keys, Authorization Tokens & Hidden Endpoints | https://medium.com/ai-apocalypse/finding-ai-agents-llm-api-keys-authorization-tokens-hidden-endpoints-435e00016648?source=rss------bug_bounty-5 | AbhirupKonwar | artificial-intelligence, bug-bounty, osint, pentesting, large-language-models | 02-Jul-2025 |
| How a Single Spreadsheet Revealed Sensitive Government Data | https://medium.com/@uday637/how-a-single-spreadsheet-revealed-sensitive-government-data-fdb153a1688c?source=rss------bug_bounty-5 | Uday | bug-hunting, hacking, hacking-tools, bug-bounty, bugbounty-poc | 02-Jul-2025 |
| 7 Easy Bugs That Still Work in 2025 | https://medium.com/@narendarlb123/7-easy-bugs-that-still-work-in-2025-828bff8cb4e4?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, pentesting, infosec, information-security, bug-bounty | 02-Jul-2025 |
| 1. CVE‑2025‑0454 — autogpt SSRF via URL Parsing Confusion | https://medium.com/@narendarlb123/1-cve-2025-0454-autogpt-ssrf-via-url-parsing-confusion-921d66fafcbe?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | infosec, ai, information-security, bug-bounty, cybersecurity | 02-Jul-2025 |
| WAF bypass technique — Part 1 | https://medium.com/@yee-yore/waf-bypass-technique-part-1-cc01e5639313?source=rss------bug_bounty-5 | yee-yore | pentesting, bug-bounty, red-team, bug-bounty-tips, hacking | 02-Jul-2025 |
| $8,000 Bounty: Exploiting CVE-2022–40604 | https://medium.com/h7w/8-000-bounty-exploiting-cve-2022-40604-0b3f790b8f97?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, penetration-testing, hacking, apache | 02-Jul-2025 |
| 100+ Vulnerabilities in 5 Minutes and a $200 Bug Bounty Reward | https://medium.com/@shamiloneleo/100-vulnerabilities-in-5-minutes-and-a-200-bug-bounty-reward-8e1ecc727a89?source=rss------bug_bounty-5 | WhiteeRabbit | vulnerability, bug-bounty-writeup, bug-bounty-tips, python, bug-bounty | 02-Jul-2025 |
| How Do Hackers Sneak Past WAFs Undetected | https://medium.com/@ibtissamhammadi1/how-do-hackers-sneak-past-wafs-undetected-4d3bc5204f80?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, cybersecurity, web-security, waf-bypass, bug-bounty | 02-Jul-2025 |
| Why Your Recon is Lying to You — And What to Do About It ️♂️ | https://su6osec.medium.com/why-your-recon-is-lying-to-you-and-what-to-do-about-it-%EF%B8%8F-%EF%B8%8F-e3792a1df86a?source=rss------bug_bounty-5 | Đeepanshu | hacking, recon, cybersecurity, infosec, bug-bounty | 02-Jul-2025 |
| CSRF to Delete Products From Any User Cart Lead To $$$ | https://hamdiyasin135.medium.com/csrf-to-delete-products-from-any-user-cart-lead-to-af712bb2bfe5?source=rss------bug_bounty-5 | Yassin hamdi | csrf, bug-bounty, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 02-Jul-2025 |
| How I’d Start Bug Bounties If I Had to Begin in 2025 (No Degree, No Experience) | https://medium.com/@rishabhshri08/how-id-start-bug-bounties-if-i-had-to-begin-in-2025-no-degree-no-experience-7845fa013b9f?source=rss------bug_bounty-5 | Rishabh Shrivastava | infosec, beginners-guide, cybersecurity, bug-bounty | 02-Jul-2025 |
| Turn Trash URLs into Gold Wordlists with haklistgen (Even Your Ex Can’t Ignore This) | https://medium.com/@hacker_might/turn-trash-urls-into-gold-wordlists-with-haklistgen-even-your-ex-cant-ignore-this-2692194ff8e6?source=rss------bug_bounty-5 | hacker_might | golang, cybersecurity, tools, bug-bounty-tips, bug-bounty | 02-Jul-2025 |
| How i Found Pre Account Takeover in 3 Minutes | https://medium.com/@0xMado-1Tap/how-i-found-pre-account-takeover-in-3-minutes-32bcdce9f3e6?source=rss------bug_bounty-5 | Mado | mindset, bug-bounty, medium, hacking, account-takeover | 02-Jul-2025 |
| How I Used the js.map File to Gain Admin Access | https://cyphernova1337.medium.com/how-i-used-the-js-map-file-to-gain-admin-access-e30e6f00adb7?source=rss------bug_bounty-5 | CypherNova1337 | hacking, infosec, cybersecurity, bug-bounty | 02-Jul-2025 |
| gf: Tu Aliado Indispensable para el Reconocimiento y Detección de Vulnerabilidades en Bug Bounty | https://medium.com/@jpablo13/gf-tu-aliado-indispensable-para-el-reconocimiento-y-detecci%C3%B3n-de-vulnerabilidades-en-bug-bounty-b6612f85fb66?source=rss------bug_bounty-5 | JPablo13 | infosec, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 01-Jul-2025 |
| The HTTP Basics to Advanced: Beginner Friendly Guide to How the Web Works | https://medium.com/@secshubhamsharma/the-http-basics-to-advanced-beginner-friendly-guide-to-how-the-web-works-816ed26017e8?source=rss------bug_bounty-5 | Shubham Sharma | web-development, software-development, https, networking, bug-bounty | 01-Jul-2025 |
| Hacking APIs: Broken Object Property Level Authorization | https://iaraoz.medium.com/hacking-apis-broken-object-property-level-authorization-ac4f0c14975e?source=rss------bug_bounty-5 | Israel Aráoz Severiche | ethical-hacking, owasp, bug-bounty, cybersecurity, hacking | 01-Jul-2025 |
| Accidental Exposure of Private GraphQL Fields | https://infosecwriteups.com/accidental-exposure-of-private-graphql-fields-4224a916140a?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, bug-bounty, graphql-vulnerability, sensitive-data-exposure, graphql-field-exposure | 01-Jul-2025 |
| SQL Injection Praktikası: Manual Hücum Nümunəsi | https://medium.com/@natiqsalifov29/sql-injection-praktikas%C4%B1-manual-h%C3%BCcum-n%C3%BCmun%C9%99si-6835517f78c5?source=rss------bug_bounty-5 | Natiq Salifov | sql-injection-attack, ethical-hacking, bug-bounty, vulnerability | 01-Jul-2025 |
| My 6-Month Bug Bounty Review ️♂️ | https://medium.com/@dsmodi484/my-6-month-bug-bounty-review-%EF%B8%8F-%EF%B8%8F-8469f3ca230f?source=rss------bug_bounty-5 | cryptoshant | self-improvement, motivation, bug-bounty, hacking, cybersecurity | 01-Jul-2025 |
| Massive Data Leak using Unauthenticated ARC GIS REST service | https://infosecwriteups.com/massive-data-leak-using-unauthenticated-arc-gis-rest-service-7a59ca13ca28?source=rss------bug_bounty-5 | Ronak Patel | information-security, bug-bounty-writeup, ethical-hacking, bug-bounty | 01-Jul-2025 |
| Authentication Bypass via Email Domain Suffix Manipulation | https://bishal0x01.medium.com/authentication-bypass-via-email-domain-suffix-manipulation-c866501c7b4b?source=rss------bug_bounty-5 | Bishal Shrestha | bug-bounty, writeup, security, infosec | 01-Jul-2025 |
| JavaScript Files: A Pentester’s Treasure Trove | https://medium.com/@narendarlb123/javascript-files-a-pentesters-treasure-trove-ec4c393a23c5?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-technology, bug-bounty, penetration-testing, infosec, cybersecurity | 01-Jul-2025 |
| Top 10 Ways to Achieve Remote Code Execution (RCE) on Web Applications | https://fdzdev.medium.com/top-10-ways-to-achieve-remote-code-execution-rce-on-web-applications-d923246b916b?source=rss------bug_bounty-5 | Facundo Fernandez | cybersecurity, bug-bounty, red-team, penetration-testing, artificial-intelligence | 01-Jul-2025 |
| Zoomex partners with HackenProof to launch a new Vulnerability Bounty Program! | https://medium.com/@zoomexofficial/zoomex-partners-with-hackenproof-to-launch-a-new-vulnerability-bounty-program-a6725b3cfa8a?source=rss------bug_bounty-5 | Zoomex Official | exchange, zoomex, web3, hacken, bug-bounty | 01-Jul-2025 |
| Reusing an Expired Invitation to Rejoin the Organization | https://medium.com/@khaledelnabet/reusing-an-expired-invitation-to-rejoin-the-organization-d20ad8aea4c5?source=rss------bug_bounty-5 | Khaledelnabet | hacking, bugs, cybersecurity, bug-bounty, security | 01-Jul-2025 |
| CSRF Is Still Alive: A Modern Guide for Hackers and Defenders | https://medium.com/@narendarlb123/csrf-is-still-alive-a-modern-guide-for-hackers-and-defenders-5626528844a6?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, penetration-testing, infosec, bug-bounty, ai | 01-Jul-2025 |
| How I Exploited a Hidden CSRF Vulnerability — And How You Can Prevent It | https://infosecwriteups.com/how-i-exploited-a-hidden-csrf-vulnerability-and-how-you-can-prevent-it-d089ad23887d?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, ethical-hacking, penetration-testing, bug-bounty, hacking | 01-Jul-2025 |
| Desync or Die Trying: Smuggling My Way into Internal APIs | https://infosecwriteups.com/desync-or-die-trying-smuggling-my-way-into-internal-apis-e59e1bf6f01d?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, hacking, bug-bounty, money | 01-Jul-2025 |
| My 6-Month Bug Bounty Review ️♂️ | https://infosecwriteups.com/my-6-month-bug-bounty-review-%EF%B8%8F-%EF%B8%8F-8469f3ca230f?source=rss------bug_bounty-5 | cryptoshant | self-improvement, motivation, bug-bounty, hacking, cybersecurity | 01-Jul-2025 |
| Hitmen for Hire on the Dark Web: Reality, Myths, and Scams | https://adityaax.medium.com/hitmen-for-hire-on-the-dark-web-reality-myths-and-scams-ba256537cb92?source=rss------bug_bounty-5 | adityaax | darkweb, hitmen, bug-bounty, tor, hacking | 01-Jul-2025 |
| Internal File Paths/files Leakage via Malformed Access Token on graph.meta.ai | https://medium.com/@ramzybouyahya/internal-file-paths-files-leakage-via-malformed-access-token-on-graph-meta-ai-3a167e7354b4?source=rss------bug_bounty-5 | Ramzy Bouyahya | bug-bounty, bug-bounty-writeup, meta-bug-bounty, facebook-bug-bounty | 01-Jul-2025 |
| Deepfakes: The New Weapon in Cyber Attacks | https://medium.com/@natarajanck2/deepfakes-the-new-weapon-in-cyber-attacks-e837a042e156?source=rss------bug_bounty-5 | Natarajan C K | cyber-attack-real-time, security, cybersecurity, deepfakes, bug-bounty | 01-Jul-2025 |
| Bypassing Application Limit on Free Plan via Parallel Requests | https://medium.com/@khaledelnabet/bypassing-application-limit-on-free-plan-via-parallel-requests-10352549fc36?source=rss------bug_bounty-5 | Khaledelnabet | bug-bounty, security, hacking, hacker, cybersecurity | 01-Jul-2025 |
| IDOR: Improper Access Control in Meta Verified Waiting List Management | https://medium.com/@ramzybouyahya/idor-improper-access-control-in-meta-verified-waiting-list-management-e01ca89b37d4?source=rss------bug_bounty-5 | Ramzy Bouyahya | facebook-bug-bounty, bug-bounty-writeup, facebook, bug-bounty, meta-bug-bounty | 01-Jul-2025 |
| CSRF Is Still Alive: A Modern Guide for Hackers and Defenders | https://medium.com/@narendarlb123/csrf-is-still-alive-a-modern-guide-for-hackers-and-defenders-2f142232e5ba?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, pentesting, ai, bug-bounty, infosec | 01-Jul-2025 |
| When the Grind Drains You: The Dark Side of Bug Bounty | https://medusa0xf.medium.com/when-the-grind-drains-you-the-dark-side-of-bug-bounty-325ce9c3692b?source=rss------bug_bounty-5 | Medusa | mental-health, infosec, bug-bounty-tips, bug-bounty, software-development | 01-Jul-2025 |
| How I Turned a Grafana Bug Into a Full Server Hack | https://medium.com/@ibtissamhammadi1/how-i-turned-a-grafana-bug-into-a-full-server-hack-a273a2453ac1?source=rss------bug_bounty-5 | Ibtissam hammadi | grafana, ssrf, tech, bug-bounty, cybersecurity | 01-Jul-2025 |
| Recon Basics for Beginners: A Simple Guide | https://infosecwriteups.com/recon-basics-for-beginners-a-simple-guide-e76885cdd333?source=rss------bug_bounty-5 | Satyam Pathania | basics, hacking, cybersecurity, reconnaissance, bug-bounty | 01-Jul-2025 |
| Hacking a Birthday Campaign on a Food Delivery App — Bug Bounty: $1.000+ | https://infosecwriteups.com/hacking-a-birthday-campaign-on-a-food-delivery-app-bug-bounty-1-000-22926fee1c31?source=rss------bug_bounty-5 | Erkan Kavas | android-hacker, bug-bounty-writeup, bug-bounty, burpsuite, bug-bounty-tips | 01-Jul-2025 |
| Internal Paths/Files Leakage via Malformed Access Token on graph.meta.ai | https://medium.com/@ramzybouyahya/internal-file-paths-files-leakage-via-malformed-access-token-on-graph-meta-ai-3a167e7354b4?source=rss------bug_bounty-5 | Ramzy Bouyahya | bug-bounty, bug-bounty-writeup, meta-bug-bounty, facebook-bug-bounty | 01-Jul-2025 |
| You’re Probably Missing Bugs Because You’re Guessing Instead of Testing | https://su6osec.medium.com/youre-probably-missing-bugs-because-you-re-guessing-instead-of-testing-48c526e94d0c?source=rss------bug_bounty-5 | Đeepanshu | web-security, infosec, hacking, cybersecurity, bug-bounty | 01-Jul-2025 |
| Recon as Code: Build Your Own One-Click Recon CLI With Python + Shell + Existing Tools | https://osintteam.blog/recon-as-code-build-your-own-one-click-recon-cli-with-python-shell-existing-tools-4f7b260ae89f?source=rss------bug_bounty-5 | Monika sharma | vulnerability, penetration-testing, bug-bounty, tips-and-tricks, technology | 01-Jul-2025 |
| How I (Ethically) Hacked My College Portal with a JWT Token — and Reported It Responsibly | https://medium.com/@aktamil13/how-i-ethically-hacked-my-college-portal-with-a-jwt-token-and-reported-it-responsibly-16aa97a5255e?source=rss------bug_bounty-5 | Tamilselvan A K | cybersecurity, responsible-disclosure, jwt, bug-bounty, penetration-testing | 01-Jul-2025 |
| The Hidden .git | https://infosecwriteups.com/the-hidden-git-b30afef0b462?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | programming, bug-bounty, cybersecurity, security, hacking | 01-Jul-2025 |
| JWT Nedir? Güvenlik Açıkları, Saldırı Türleri ve Uygulamalı Lab Çözümü 1 Bölüm | https://medium.com/@sanaldunya/jwt-nedir-g%C3%BCvenlik-a%C3%A7%C4%B1klar%C4%B1-sald%C4%B1r%C4%B1-t%C3%BCrleri-ve-uygulamal%C4%B1-lab-%C3%A7%C3%B6z%C3%BCm%C3%BC-1-b%C3%B6l%C3%BCm-27d16606129e?source=rss------bug_bounty-5 | Oruç | programming, bug-bounty, türkçe, cybersecurity, web-development | 01-Jul-2025 |
| €100 in Seconds: Lots of Bug Hunters miss this bug, But you don’t | https://medium.com/@tsxninja2004/100-in-seconds-lots-of-bug-hunters-miss-this-bug-but-you-dont-5e6371f4cb3e?source=rss------bug_bounty-5 | TSxNINJA | bug-bounty, infosec, youtube, content, hacking | 01-Jul-2025 |
| XSS Vulnerabilities — Full Lifecycle Breakdown with Mitigations | https://medium.com/@zoningxtr/xss-vulnerabilities-full-lifecycle-breakdown-with-mitigations-efa88047d652?source=rss------bug_bounty-5 | Zoningxtr | web-development, penetration-testing, web-design, bug-bounty, cybersecurity | 01-Jul-2025 |
| ️♀️ The Ultimate Bug Bounty Hunting Checklist: From Recon to Reporting | https://medium.com/@shikha1149mehta/%EF%B8%8F-%EF%B8%8F-the-ultimate-bug-bounty-hunting-checklist-from-recon-to-reporting-99010d5402f3?source=rss------bug_bounty-5 | KingOfPiratez | information-security, owasp, bug-bounty, ethical-hacking, cybersecurity | 01-Jul-2025 |
| Day 38: Report writing | https://medium.com/@beingnile/day-38-report-writing-a613e363a571?source=rss------bug_bounty-5 | Nile Okomo | bug-bounty, penetration-testing, report-writing, study-journal, cybersecurity | 01-Jul-2025 |
| OTPs Gone Wild: When “One-Time” Means… Multiple Times? | https://medium.com/@chorfimajd22/otps-gone-wild-when-one-time-means-multiple-times-9ae883b0cf18?source=rss------bug_bounty-5 | ValidByAccident | vulnerability, security, 2fa, bug-bounty, hacker | 01-Jul-2025 |
| A Deep Dive into a Real-World Recon Workflow | https://medium.com/@richierodney434/a-deep-dive-into-a-real-world-recon-workflow-d23e7426844f?source=rss------bug_bounty-5 | Glenn Rodney | rawpaai, penetration-testing, cybersecurity, bug-bounty | 01-Jul-2025 |
| What Is IDOR? How I Learned to Spot Insecure Direct Object References (Legally) | https://medium.com/@nitishreddynani/what-is-idor-how-i-learned-to-spot-insecure-direct-object-references-legally-6c0740b67322?source=rss------bug_bounty-5 | Nitish Reddy | bug-bounty, web-application-security, idor | 01-Jul-2025 |
| Before the Hack: Understanding Reconnaissance in Hacking | https://medium.com/@goosegustin/before-the-hack-understanding-reconnaissance-in-hacking-a1fccc975e96?source=rss------bug_bounty-5 | Goose Gustin | reconnaissance, bug-bounty, hacking, cybersecurity | 01-Jul-2025 |
| Hack The System — Bug Bounty CTF: Sattrack | https://medium.com/@D4LTON/hack-the-system-bug-bounty-ctf-sattrack-62e141366aff?source=rss------bug_bounty-5 | D4LTON | ctf, htb, bug-bounty, web, hack-the-system | 01-Jul-2025 |
| ASN, IP Ranges, and Subdomains: The Trinity of Advanced Recon! | https://medium.com/@Tenebris_Venator/asn-ip-ranges-and-subdomains-the-trinity-of-advanced-recon-8ef9d368f6be?source=rss------bug_bounty-5 | Tenebris Venator | pentesting, tips, security, bug-bounty, technology | 30-Jun-2025 |
| Crack Elastic’s $10,000 Bounty: RCE Risk in Chromium Reporting | https://osintteam.blog/crack-elastics-10-000-bounty-rce-risk-in-chromium-reporting-6ac57b8f928d?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, tips-and-tricks, hacking, penetration-testing | 30-Jun-2025 |
| Burp + Logger Setup to Uncover Hidden Vulnerabilities | https://osintteam.blog/burp-logger-setup-to-uncover-hidden-vulnerabilities-bfb4dcfe1943?source=rss------bug_bounty-5 | Monika sharma | vulnerability, technology, penetration-testing, tips-and-tricks, bug-bounty | 30-Jun-2025 |
| Hidden in the Noise: How to Tweak Dirbuster, Gobuster & FFUF Wordlists for Better Hits | https://medium.com/h7w/hidden-in-the-noise-how-to-tweak-dirbuster-gobuster-ffuf-wordlists-for-better-hits-c47d572141d5?source=rss------bug_bounty-5 | Monika sharma | vulnerability, technology, tips-and-tricks, penetration-testing, bug-bounty | 30-Jun-2025 |
| $1,160 Bounty: Unveiling GitLab’s IDOR Flaw | https://medium.com/h7w/1-160-bounty-unveiling-gitlabs-idor-flaw-248cc766fd1b?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, penetration-testing, gitlab, tips-and-tricks, vulnerability | 30-Jun-2025 |
| ️ So… I Made a Server Call Me Back. Unauthenticated SSRF via XML-RPC | https://aiwolfie.medium.com/%EF%B8%8F-so-i-made-a-server-call-me-back-unauthenticated-ssrf-via-xml-rpc-8116c9f0fbba?source=rss------bug_bounty-5 | AIwolfie | hacking, website, security, wordpress, bug-bounty | 30-Jun-2025 |
| Hacking WordPress (WP for OSCP) | https://medium.com/@kaorrosi/hacking-wordpress-wp-for-oscp-b0f311d80731?source=rss------bug_bounty-5 | Kaorrosi | vulnerability, cybersecurity, penetration-testing, bug-bounty, hacking | 30-Jun-2025 |
| Bug Bounty Hunting: Get Paid to Break Stuff (Legally) | https://medium.com/zero2root/bug-bounty-hunting-get-paid-to-break-stuff-legally-e9a923dbb542?source=rss------bug_bounty-5 | DarKVoicE | bug-bounty-tips, ethical-hacking, hacking, bug-bounty, cybersecurity | 30-Jun-2025 |
| Introducing 404Sec — Cybersecurity. Hacking. Simplified. | https://medium.com/@404secofficial/introducing-404sec-cybersecurity-hacking-simplified-735089074e2f?source=rss------bug_bounty-5 | 404sec | bug-bounty, infosec, ethical-hacking, 404sec, cybersecurity | 30-Jun-2025 |
| Why I Always Start With Manual Testing in Bug Bounties — And Why You Should Too | https://medium.com/@sync-with-ivan/why-i-always-start-with-manual-testing-in-bug-bounties-and-why-you-should-too-5cd2725d7667?source=rss------bug_bounty-5 | Andrei Ivan | ethical-hacking, manual-testing, bug-bounty-tips, bug-bounty, cybersecurity | 30-Jun-2025 |
| $250 Bounty: Privilege Escalation in Acronis via System Clean-up Directory Junction Trick | https://infosecwriteups.com/250-bounty-privilege-escalation-in-acronis-via-system-clean-up-directory-junction-trick-f8ab338a6744?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tips-and-tricks, bug-bounty, vulnerability, bug-bounty-tips | 30-Jun-2025 |
| CVE-2025–49144: Notepad++ vulnerability allows full system compromise | https://infosecwriteups.com/cve-2025-49144-notepad-vulnerability-allows-full-system-compromise-17944dc3fc2b?source=rss------bug_bounty-5 | Om Maniya | bug-bounty, technology, software-development, programming, cybersecurity | 30-Jun-2025 |
| I Automated Recon and Found 100+ Bugs | https://infosecwriteups.com/i-automated-recon-and-found-100-bugs-a6c68b6360eb?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, bug-bounty, hacker, reconnaissance, cybersecurity | 30-Jun-2025 |
| How to Find Your First XSS Bug in 24 Hours — Guaranteed! | https://infosecwriteups.com/how-to-find-your-first-xss-bug-in-24-hours-guaranteed-bbbe8bdb475d?source=rss------bug_bounty-5 | Vipul Sonule | programming, hacking, cybersecurity, bug-bounty, tech | 30-Jun-2025 |
| Advanced Gau + Waybackurls Filtering for Sensitive Files | https://infosecwriteups.com/advanced-gau-waybackurls-filtering-for-sensitive-files-c8273cbd4b57?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tips-and-tricks, infosec, technology, bug-bounty | 30-Jun-2025 |
| The Scope Trap: How Most Hackers Miss the Best Bugs Without Even Realizing It | https://su6osec.medium.com/the-scope-trap-how-most-hackers-miss-the-best-bugs-without-even-realizing-it-4db55da078ab?source=rss------bug_bounty-5 | Đeepanshu | red-team-methodology, infosec, bug-bounty, cybersecurity, hacking | 30-Jun-2025 |
| ZIP It Good: How Unzipping a File Gave Me Shell Access | https://infosecwriteups.com/zip-it-good-how-unzipping-a-file-gave-me-shell-access-15c740bf5226?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, cybersecurity, infosec, money | 30-Jun-2025 |
| Finding the Needle in a Haystack: How My Passive Recon Led to an Acknowledgment from ICEGATE (CBIC… | https://medium.com/@uday637/finding-the-needle-in-a-haystack-how-my-passive-recon-led-to-an-acknowledgment-from-icegate-cbic-fffd016df4ea?source=rss------bug_bounty-5 | Uday | acknowledgement, bug-bounty, bug-hunting, google-dorking, hacking | 30-Jun-2025 |
| Recon that changed my Bug Bounty journey | https://medium.com/@dasmanish6176/recon-that-changed-my-bug-bounty-journey-302dd5257794?source=rss------bug_bounty-5 | Dasmanish | web-application-security, bug-bounty, infosec, reconnaissance, ethical-hacking | 30-Jun-2025 |
| ’ . | https://g4o57.medium.com/-eadf05801bc6?source=rss------bug_bounty-5 | Ananda Krishna (0xG4057) | coldfusion, responsible-disclosure, nasa, bug-bounty, bug-bounty-writeup | 30-Jun-2025 |
| Cool XSRF vulnerability in the media upload functionality , which allowed deletion or editing of… | https://medium.com/@divyanksitapara088/cool-xsrf-vulnerability-in-the-media-upload-functionality-which-allowed-deletion-or-editing-of-308f47671dac?source=rss------bug_bounty-5 | Ch4rlii | pentesting, application-security, cybersecurity, ethical-hacking, bug-bounty | 30-Jun-2025 |
| Caught in a Ransomeware Trap: What You Need to Know and How to Stay Safe | https://medium.com/@natarajanck2/caught-in-a-ransomeware-trap-what-you-need-to-know-and-how-to-stay-safe-bd39c031199e?source=rss------bug_bounty-5 | Natarajan C K | bug-bounty, ransomeware, systém, security, operating-systems | 30-Jun-2025 |
| Intigriti HackDonalds Challenge Writeup — LFI via XXE | https://medium.com/@vishnu.raveendran1461/intigriti-hackdonalds-challenge-writeup-lfi-via-xxe-68a136663bb0?source=rss------bug_bounty-5 | Vishnu Raveendran | infosec, cybersecurity, ctf-writeup, bug-bounty | 30-Jun-2025 |
| Unauthenticated PURGE on Varnish | My First Valid Bug | https://medium.com/@cx780496/unauthenticated-purge-on-varnish-my-first-valid-bug-62a359ad711b?source=rss------bug_bounty-5 | VxRabbit | unauthenticated-purge, bug-bounty, varnish-cache, security | 30-Jun-2025 |
| Hack The System — CitiSmart | https://medium.com/@ibnibrahim/hack-the-system-citismart-83dd0b4321d3?source=rss------bug_bounty-5 | محمد بن إبراهيم | ctf, cybersecurity, hacking, bug-bounty, penetration-testing | 30-Jun-2025 |
| CTF Day(22) | https://medium.com/@ahmednarmer1/ctf-day-22-e303ac9df89b?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, web-penetration-testing, ctf, web-pen-testing, cybersecurity | 30-Jun-2025 |
| Exploring LeakRadar.io Domain Search | https://medium.com/@alexandrevandammepro/exploring-leakradar-io-domain-search-38a3dfe74f87?source=rss------bug_bounty-5 | Alexandre Vandamme | data-breach, bug-bounty, b2b, cybersecurity, data-protection | 30-Jun-2025 |
| Blind XSS Vulnerability in Profile Input Leads to $2,000 Reward | https://medium.com/@hm_92366/blind-xss-vulnerability-in-profile-input-leads-to-2-000-reward-4641defd8d54?source=rss------bug_bounty-5 | Hamza Mandil | bug-bounty, pentesting, web-security, hacking | 30-Jun-2025 |
| OAuth Misconfigurations: Real-World Examples and Exploitation Tips | https://cyberw1ng.medium.com/oauth-misconfigurations-real-world-examples-and-exploitation-tips-86a8d0ab6296?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | oauth, careers, cybersecurity, bug-bounty, technology | 30-Jun-2025 |
| How Android Broke Me into Tech: From Bricking Phones to Bounty Hunting | https://medium.com/@UnfilteredInk/how-android-broke-me-into-tech-from-bricking-phones-to-bounty-hunting-1ed674170559?source=rss------bug_bounty-5 | Bryan Cruse | bug-bounty, technology, android, androiddev, tech | 30-Jun-2025 |
| Wishlist Logic bug: How I Manipulated Item Quantities Without Access | https://nanashi0.medium.com/wishlist-logic-bug-how-i-manipulated-item-quantities-without-access-2ebf5aec1971?source=rss------bug_bounty-5 | 0xNanashi | bug-bounty, bug-bounty-tips, cybersecurity, penetration-testing, business-logic-bug | 29-Jun-2025 |
| FFUF: Effective Fuzzing for Pentesting and Bug Bounty | https://medium.com/@jpablo13/ffuf-effective-fuzzing-for-pentesting-and-bug-bounty-5225c4d3c56b?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, infosec, ethical-hacking, penetration-testing | 29-Jun-2025 |
| Leaked API Key in Public JavaScript Leads to Potential Abuse | https://medium.com/@aashifm/leaked-api-key-in-public-javascript-leads-to-potential-abuse-e2f255ee0ee5?source=rss------bug_bounty-5 | 127.0.0.1 | api, cybersecurity, bug-bounty, low-hanging-fruit, javascript | 29-Jun-2025 |
| “The Illusion of 100% Recon — Why Most Hackers Miss What Really Matters” | https://su6osec.medium.com/the-illusion-of-100-recon-why-most-hackers-miss-what-really-matters-3e832da2ae02?source=rss------bug_bounty-5 | Đeepanshu | ethical-hacking, infosec, reconnaissance, bug-bounty, cybersecurity | 29-Jun-2025 |
| Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties | https://medium.com/@tsxninja2004/phishing-via-swagger-ui-exploiting-misconfigurations-for-fun-bounties-5442f26a7b81?source=rss------bug_bounty-5 | TSxNINJA | infosec, bounties, cybersecurity, swagger, bug-bounty | 29-Jun-2025 |
| AI Powered Android APK Vulnerability Detection Tool | https://medium.com/ai-apocalypse/ai-powered-android-apk-vulnerability-detection-tool-b371aaee3552?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, gemini, bug-bounty, artificial-intelligence, large-language-models | 29-Jun-2025 |
| From Ghost to Glitch: Null Byte Injection in Registration & Password Reset | https://medium.com/@maxcyber882/from-ghost-to-glitch-null-byte-injection-in-registration-password-reset-b44448bb7656?source=rss------bug_bounty-5 | Maxcyber | bug-bounty, ethical-hacking, bug-bounty-writeup, bugbounty-tips | 29-Jun-2025 |
| How I Snagged a $$$ P1: PayU Key + Salt + Hash Revealed in a Hospital’s Payment Response | https://mo9khu93r.medium.com/how-i-snagged-a-p1-payu-key-salt-hash-revealed-in-a-hospitals-payment-response-586e6824f177?source=rss------bug_bounty-5 | viperx9 | vulnerability, hacking, cybersecurity, penetration-testing, bug-bounty | 29-Jun-2025 |
| Uncover Hidden Endpoints, Secrets and Vulnerabilities Buried Inside JavaScript Files | https://infosecwriteups.com/uncover-hidden-endpoints-secrets-and-vulnerabilities-buried-inside-javascript-files-ea965b43f969?source=rss------bug_bounty-5 | Monika sharma | vulnerability, penetration-testing, tips-and-tricks, technology, bug-bounty | 29-Jun-2025 |
| How to Find Logic Bugs That Slip Through Pentests? | https://medium.com/@Sle3pyHead/how-to-find-logic-bugs-that-slip-through-pentests-8178336388e4?source=rss------bug_bounty-5 | Sle3pyHead | code-review, bug-bounty, logical-thinking, cybersecurity | 29-Jun-2025 |
| ☠️ How I Broke into a Fintech Giant’s Core — And Landed in Their Hall of Fame (after rejections… | https://osintteam.blog/%EF%B8%8F-how-i-broke-into-a-fintech-giants-core-and-landed-in-their-hall-of-fame-after-rejections-1a91a269ab77?source=rss------bug_bounty-5 | Voldemort | web-security, hacking, cybersecurity, ethical-hacking, bug-bounty | 29-Jun-2025 |
| Bandit Tours & Travel — Where Your Journey Might Lead to Some Unexpected Pages | https://systemweakness.com/bandit-tours-travel-where-your-journey-might-lead-to-some-unexpected-pages-d08edf8b7702?source=rss------bug_bounty-5 | Shah kaif | bug-bounty-writeup, bug-bounty, bug-bounty-tips, ctf, ctf-writeup | 29-Jun-2025 |
| XOR is Weak? Think Again — Meet XORception | https://medium.com/@adityabhatt3010/xor-is-weak-think-again-meet-xorception-64867f6587af?source=rss------bug_bounty-5 | Aditya Bhatt | xor, bug-bounty, ethical-hacking, obfuscation, cybersecurity | 29-Jun-2025 |
| picoCTF Web Exploitation: Search source | https://medium.com/@Kamal_S/picoctf-web-exploitation-search-source-a9f18e5c4ea8?source=rss------bug_bounty-5 | Kamal S | appsec, ctf, search-source, picoctf, bug-bounty | 29-Jun-2025 |
| I Hacked into Karnataka Government Admin Panel Using a Google Dork and a Simple SQLi payload. | https://medium.com/@Yukeshwaran-N/i-hacked-into-karnataka-government-admin-panel-using-a-google-dork-and-a-simple-sqli-payload-78e0a3d1aa51?source=rss------bug_bounty-5 | Yukeshwaran N | cybersecurity, infosec, bug-bounty, hacking, sql-injection | 29-Jun-2025 |
| JWT Cracking & Obfuscation Attacks: Real-World Exploits from CTFs, THM, HTB & Google CTF | https://aenoshrajora.medium.com/jwt-cracking-obfuscation-attacks-real-world-exploits-from-ctfs-thm-htb-google-ctf-be567bbab886?source=rss------bug_bounty-5 | Shadow Packet | jwt, jwt-token, ctf, bug-bounty, cybersecurity | 29-Jun-2025 |
| S3 BUCKET AND FIREBASE BUCKET MISCONFIGURTION PART-2 | https://doordiefordream.medium.com/s3-bucket-and-firebase-bucket-misconfigurtion-part-2-14da286240d4?source=rss------bug_bounty-5 | DOD cyber solutions | aws, bug-bounty, technology, ethical-hacking, cybersecurity | 29-Jun-2025 |
| The One GoLang Tool Every Bug Bounty Hunter Needs: GoLinkFinder | https://medium.com/@hacker_might/the-one-golang-tool-every-bug-bounty-hunter-needs-golinkfinder-9335625d4c9d?source=rss------bug_bounty-5 | hacker_might | ethical-hacking, reconnaissance, bug-bounty-tips, osint-tool, bug-bounty | 29-Jun-2025 |
| How I Chained Four Bugs to Take Over Any Account on a Major FinTech Platform | https://cyphernova1337.medium.com/how-i-chained-four-bugs-to-take-over-any-account-on-a-major-fintech-platform-06832ad61a76?source=rss------bug_bounty-5 | CypherNova1337 | cybersecurity, infosec, hacking, bug-bounty | 29-Jun-2025 |
| CVE-2025–48432 | Django — Potential log injection via unescaped request path | https://medium.com/@yunusolcardev/cve-2025-48432-django-potential-log-injection-via-unescaped-request-path-40663072216d?source=rss------bug_bounty-5 | Yunus Olçar | django, bug-bounty, hacking, cybersecurity, software-development | 29-Jun-2025 |
| How a Leaky API Endpoint Led to Full PII Exposure on a Major Fintech Platform | https://cyphernova1337.medium.com/how-a-leaky-api-endpoint-led-to-full-pii-exposure-on-a-major-fintech-platform-57e02ebe3e3e?source=rss------bug_bounty-5 | CypherNova1337 | cybsersecurity, infosec, bug-bounty, hacking | 29-Jun-2025 |
| How can you append Custom User-Agent in Caido? | https://medium.com/@padhyepushkar/how-can-you-append-custom-user-agent-in-caido-d351275726ed?source=rss------bug_bounty-5 | Pushkar Padhye | bounty-program, bug-bounty, bug-bounty-writeup, caido, bug-bounty-tips | 29-Jun-2025 |
| How I Leaked Sensitive User Data Using CORS in a HackerOne Program. | https://medium.com/@figurx/how-i-leaked-sensitive-user-data-using-cors-in-a-hackerone-program-b2b49881ea04?source=rss------bug_bounty-5 | Figurx | hacking, it, bug-bounty, red-team, penetration-testing | 29-Jun-2025 |
| The Curious Case of the Unrounded Corner | https://medium.com/@sharmashershth/the-curious-case-of-the-unrounded-corner-92fd271d6b41?source=rss------bug_bounty-5 | Shreshth Sharma | stripe, coding, bug-bounty, css, case-study | 29-Jun-2025 |
| Day 6:DOM XSS in jQuery selector sink using a hashchange event : Zero to Hero Series — Portswigger | https://infosecwriteups.com/day-6-dom-xss-in-jquery-selector-sink-using-a-hashchange-event-zero-to-hero-series-portswigger-f80367168d95?source=rss------bug_bounty-5 | RayofHope | web-penetration-testing, cyber-security-awareness, bug-bounty, ethical-hacking, dom-xss | 29-Jun-2025 |
| Title: How I Found a Critical Payment Bug on an EdTech Platform (and Got Ignored) | https://medium.com/@lakshyaagarwalbha/title-how-i-found-a-critical-payment-bug-on-an-edtech-platform-and-got-ignored-ea2b09f22652?source=rss------bug_bounty-5 | SECUVORTEX | ethical-hacking, bug-bounty, pentesting, cybersecurity | 29-Jun-2025 |
| “Start Before You’re Ready” — What Happened When I Did | https://medium.com/@humzaanwarkhan/start-before-youre-ready-what-happened-when-i-did-6cf7891008e0?source=rss------bug_bounty-5 | Humza A-Khan | self-taught, bug-bounty, cybersecurity, self-development, programming | 29-Jun-2025 |
| Triple Trouble: Bypassing Sanitization to Steal Microsoft Tokens | https://melotover.medium.com/triple-trouble-bypassing-sanitization-to-steal-microsoft-tokens-d89a68be7ab2?source=rss------bug_bounty-5 | Asem Eleraky | xss-attack, penetration-testing, cybersecurity, bug-bounty, cross-site-scripting | 29-Jun-2025 |
| I Couldn’t Think Like a Hacker — Until I Did This One Thing | https://medium.com/@Cyberhowler/i-couldnt-think-like-a-hacker-until-i-did-this-one-thing-971a7740dd09?source=rss------bug_bounty-5 | Cyber Howler | cybersecurity, ethical-hacking, bug-bounty, blackhat, hacking | 29-Jun-2025 |
| Session Hijack on delfi.lt via Trusted Auth Flow — Rejected as MITM by YesWeHackdddd | https://medium.com/@zhaenx/session-hijack-on-delfi-lt-via-trusted-auth-flow-rejected-as-mitm-by-yeswehackdddd-e9ca058f3ccc?source=rss------bug_bounty-5 | Zhaenx | delfi, responsible-disclosure, cyber-security-awareness, infosec, bug-bounty | 29-Jun-2025 |
| Three Bugs, One Search: Discovering Security Flaws with Burp | https://medium.com/@drhatab/three-bugs-one-search-discovering-security-flaws-with-burp-00aeba9fedcf?source=rss------bug_bounty-5 | Mustafa Hatab | pentesting, cybersecurity, bug-bounty, infosec | 29-Jun-2025 |
| Password Reset Link Injection Enables Full Account Takeover | https://medium.com/@mhmodgm54/password-reset-link-injection-enables-full-account-takeover-b0d3c38bcd5c?source=rss------bug_bounty-5 | Mahmoud Gamal | penetration-testing, cybersecurity, writeup, bug-bounty, account-takeover | 29-Jun-2025 |
| Day 8:Stored XSS into anchor href attribute with double quotes HTML-encoded : Zero to Hero Series… | https://infosecwriteups.com/day-8-stored-xss-into-anchor-href-attribute-with-double-quotes-html-encoded-zero-to-hero-series-f4bcab7d9b8f?source=rss------bug_bounty-5 | RayofHope | cyber-security-awareness, ethical-hacking, bug-bounty, stored-xss, web-penetration-testing | 29-Jun-2025 |
| Hijacking OAuth Tokens with Just an XSS Flaw | https://medium.com/@ibtissamhammadi1/hijacking-oauth-tokens-with-just-an-xss-flaw-e0365f2081d2?source=rss------bug_bounty-5 | Ibtissam hammadi | technology, cybersecurity, oauth, bug-bounty, xss-attack | 29-Jun-2025 |
| FFUF: Fuzzing eficaz para Pentesting y Bug Bounty | https://medium.com/@jpablo13/ffuf-fuzzing-eficaz-para-pentesting-y-bug-bounty-ccb96fa8d5a8?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, cybersecurity, infosec, ethical-hacking, penetration-testing | 28-Jun-2025 |
| Redirection Gone Wrong: How Trust and the Referer Can Be Weaponized | https://medium.com/@es0557533/redirection-gone-wrong-how-trust-and-the-referer-can-be-weaponized-e329621e9cb6?source=rss------bug_bounty-5 | Isv | bug-bounty-tips, bugbounty-writeup, bug-bounty, open-redirect, bug-bounty-hunter | 28-Jun-2025 |
| TryHackMe FFUF Room Walkthrough | https://medium.com/@MUHTADIN/tryhackme-ffuf-room-walkthrough-bb107d902fc1?source=rss------bug_bounty-5 | MUHTADIN | bug-bounty, ctf-writeup, web-security, cybersecurity, pentesting | 28-Jun-2025 |
| METABIGOR - OSINT Tool | https://medium.com/meetcyber/metabigor-osint-tool-cdacb8fb3023?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, osint, pentesting, information-security, bug-bounty-tips | 28-Jun-2025 |
| Insecure WebSocket Communication leaks PII and why you should never ignore Burp’s WebSocket history… | https://bunny0417.medium.com/insecure-websocket-communication-leaks-pii-and-why-you-should-never-ignore-burps-websocket-history-39ea4df9d11f?source=rss------bug_bounty-5 | Aayush kumar | coding, websocket, bug-bounty, infosec | 28-Jun-2025 |
| ️ How I Took Over an Account by Bypassing Email Verification – A Privilege Escalation Story | https://medium.com/@whoadnan01/%EF%B8%8F-how-i-took-over-an-account-by-bypassing-email-verification-a-privilege-escalation-story-5c056c55bbc5?source=rss------bug_bounty-5 | WhoAdnan | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 28-Jun-2025 |
| Credential Stuffing Attacks: What They Are and How to Detect Them Practically | https://medium.com/@paritoshblogs/credential-stuffing-attacks-what-they-are-and-how-to-detect-them-practically-f51247d5bb5c?source=rss------bug_bounty-5 | Paritosh | how-to, chatgpt, hacking, credential-stuffing, bug-bounty | 28-Jun-2025 |
| 404 to 0wnage: How a Broken API Route Unlocked Production Secrets | https://infosecwriteups.com/404-to-0wnage-how-a-broken-api-route-unlocked-production-secrets-cc8ec9c6d063?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, money, infose, cybersecurity | 28-Jun-2025 |
| Got Deactivated? No Problem — Here’s a 10-Minute Window to Take Control | https://medium.com/@chorfimajd22/got-deactivated-no-problem-heres-a-10-minute-window-to-take-control-72eff56c79ee?source=rss------bug_bounty-5 | ValidByAccident | security, bug-bounty, bug-bounty-tips, vulnerability, sessions | 28-Jun-2025 |
| Level Up Your Web Security Game: Essential Tools for PenTesting & Bug Bounty Hunting | https://medium.com/@venkatkalyan163/level-up-your-web-security-game-essential-tools-for-pentesting-bug-bounty-hunting-078862e91bb7?source=rss------bug_bounty-5 | KALYAN CHAVALA | bug-bounty-tips, cybersecurity, tools, bug-bounty | 28-Jun-2025 |
| ExteBrowser Extension Recon: Tools and Methods for Analyzing Target-Owned Extensions | https://infosecwriteups.com/extebrowser-extension-recon-tools-and-methods-for-analyzing-target-owned-extensions-5ba5efbc1d9e?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, vulnerability, penetration-testing, bug-bounty, extension | 28-Jun-2025 |
| The Frida & Objection Setup Guide: Solving Version Hell on Android & iOS (Timeless Guide) | https://infosecwriteups.com/the-frida-objection-setup-guide-solving-version-hell-on-android-ios-timeless-guide-f55eb98459a0?source=rss------bug_bounty-5 | Sandeep Wawdane | bug-bounty, frida, penetration-testing, hacking, objection | 28-Jun-2025 |
| OS Command Injection — When Your Server Obeys My Commands Like a Soldier | https://infosecwriteups.com/os-command-injection-when-your-server-obeys-my-commands-like-a-soldier-ecbe2fe6ec3d?source=rss------bug_bounty-5 | phoenixcatalan | ethical-hacking, development, infosec, hacking, bug-bounty | 28-Jun-2025 |
| From Zero to Your First Valid Vulnerability Report in 7 Days | https://infosecwriteups.com/from-zero-to-your-first-valid-vulnerability-report-in-7-days-692050467ea1?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, ai, programming, hacking, technology | 28-Jun-2025 |
| The Ultimate Guide to Bug Hunting: Uncovering Digital Treasures in 2025 | https://infosecwriteups.com/the-ultimate-guide-to-bug-hunting-uncovering-digital-treasures-in-2025-527b25b6d896?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, tips-and-tricks, technology, vulnerability | 28-Jun-2025 |
| ️ From Payload to Pwn: How I Discovered SQL Injection in a BigQuery API and Exfiltrated Metadata | https://medium.com/@badekanrohan/%EF%B8%8F-from-payload-to-pwn-how-i-discovered-sql-injection-in-a-bigquery-api-and-exfiltrated-metadata-b51a0ed88357?source=rss------bug_bounty-5 | rohan badekan | ethical-hacking, sql-injection, cloud-security, bug-bounty, cybersecurity | 28-Jun-2025 |
| ️ Day 7/30 My Go-To Browser Extensions for Bug Bounty Hunting & Cybersecurity | https://medium.com/@cyhersilhouette/%EF%B8%8F-day-7-30-my-go-to-browser-extensions-for-bug-bounty-hunting-cybersecurity-ecadccca0923?source=rss------bug_bounty-5 | Cyphersilhouette | bugbounty-writeup, burpsuite, bug-bounty, hacking, cybersecurity | 28-Jun-2025 |
| Simple Email HTML Injection to $250 | https://medium.com/@tsxninja2004/simple-email-html-injection-to-250-7e0c2ce98f9f?source=rss------bug_bounty-5 | TSxNINJA | cybersecurity, infosec, html, hacking, bug-bounty | 28-Jun-2025 |
| Zero Day Mindset: Why Most Hackers Miss Critical Bugs — and How You Can Find Them First” | https://su6osec.medium.com/zero-day-mindset-why-most-hackers-miss-critical-bugs-and-how-you-can-find-them-first-c0dc6f751ab1?source=rss------bug_bounty-5 | Đeepanshu | hacking, bug-bounty, information-technology, infosec, cybersecurity | 28-Jun-2025 |
| Bug Bounty Hunting : It’s Not Always What You Think | https://medium.com/@40sp3l/bug-bounty-hunting-its-not-always-what-you-think-4a212cf93b3b?source=rss------bug_bounty-5 | 40sp3l | bug-bounty | 28-Jun-2025 |
| Hack Mobile Apps Using Frida and Ghidra | https://medium.com/offensive-black-hat-hacking-security/hack-mobile-apps-using-frida-and-ghidra-27835bbaeb58?source=rss------bug_bounty-5 | Harshad Shah | bug-bounty, cybersecurity, android-app-development, penetration-testing, mobile | 28-Jun-2025 |
| Exposed Client Secret in JavaScript Resulted in Quick Bug Bounty $$$ | https://medusa0xf.medium.com/exposed-client-secret-in-javascript-resulted-in-quick-bug-bounty-35a609be138d?source=rss------bug_bounty-5 | Medusa | cybersecurity, bug-bounty, bug-bounty-tips, hacking, infosec | 28-Jun-2025 |
| Websocket response manipulation leads to access admin panel (Arabic) | https://ro0od.medium.com/websocket-response-manipulation-leads-to-access-admin-panel-arabic-7a3b79cf6fdf?source=rss------bug_bounty-5 | rood | bug-bounty-writeup, bug-bounty | 28-Jun-2025 |
| Websocket response manipulation leads to access admin panel | https://ro0od.medium.com/websocket-response-manipulation-leads-to-access-admin-panel-27b432ea4745?source=rss------bug_bounty-5 | rood | bug-bounty, bugbounty-writeup | 28-Jun-2025 |
| From ZIP to Zoho Hall of Fame: How I Found Exposed API Keys ! | https://medium.com/@mdnafeed3/from-zip-to-zoho-hall-of-fame-how-i-found-exposed-api-keys-17eeca415474?source=rss------bug_bounty-5 | H4cker-Nafeed | bug-hunting, zoho, cybersecurity, hacking, bug-bounty | 28-Jun-2025 |
| Admin Panel Takeover | https://medium.com/@krishnast545/admin-panel-takeover-8625cfb0a97a?source=rss------bug_bounty-5 | Krishna | admin-panel, bug-bounty, hacking | 28-Jun-2025 |
| Data Breaches : How Your Data Ends Up on the Dark Web And What You Can Do? | https://adityaax.medium.com/data-breaches-how-your-data-ends-up-on-the-dark-web-and-what-you-can-do-6b6757bfe4a5?source=rss------bug_bounty-5 | adityaax | darkweb, bug-bounty, hacking, data-breach, tor | 28-Jun-2025 |
| Security Misconfiguration — Leading to Sensitive Information Disclosure and Potential AWS Access… | https://medium.com/@abinus2021/security-misconfiguration-leading-to-sensitive-information-disclosure-and-potential-aws-access-dd8521b0c771?source=rss------bug_bounty-5 | Abin | aws, white-hat-hacker, bug-bounty, security-misconfiguration, information-disclosure | 28-Jun-2025 |
| How I Exploited a Price Manipulation Vulnerability via Broken Checkout Logic | https://medium.com/@aryaveersinghrathore_1/how-i-exploited-a-price-manipulation-vulnerability-via-broken-checkout-logic-7a482eac1812?source=rss------bug_bounty-5 | Aryaveer Singh Rathore | bug-bounty, cybersecurity, bug-bounty-tips, web-security, ethical-hacking | 28-Jun-2025 |
| How to append User-Agent using Match & Replace options in Caido. | https://medium.com/@padhyepushkar/how-to-append-user-agent-using-match-replace-options-in-caido-e2e6dea01fd7?source=rss------bug_bounty-5 | Pushkar Padhye | bug-bounty-tips, caido, hacking-tools, bug-bounty, burpsuite | 28-Jun-2025 |
| Bypassing Blockchain Capabilities: How a $2,000 Exploit Let Contracts Do the Forbidden | https://medium.com/meetcyber/bypassing-blockchain-capabilities-how-a-2-000-exploit-let-contracts-do-the-forbidden-2bfe4120587d?source=rss------bug_bounty-5 | Monika sharma | hacking, bug-bounty, penetration-testing, vulnerability, tips-and-tricks | 28-Jun-2025 |
| Exposed Client Secret in JavaScript Resulted in Quick Bug Bounty $$$ | https://infosecwriteups.com/exposed-client-secret-in-javascript-resulted-in-quick-bug-bounty-35a609be138d?source=rss------bug_bounty-5 | Medusa | cybersecurity, bug-bounty, bug-bounty-tips, hacking, infosec | 28-Jun-2025 |
| How I Chained a Simple Text Injection with OAuth Misconfiguration on NASA | https://insomnia-x.medium.com/how-i-chained-a-simple-text-injection-with-oauth-misconfiguration-on-nasa-497223652bde?source=rss------bug_bounty-5 | insomniaX | ethical-hacking, cybersecurity, nasa, hacking, bug-bounty | 28-Jun-2025 |
| Stored XSS via Profile Name Field | https://markazgasimov.medium.com/stored-xss-via-profile-name-field-4235fd476617?source=rss------bug_bounty-5 | Markaz Gasimov | xss-attack, penetration-testing, bug-bounty | 28-Jun-2025 |
| Advanced IDOR Exploitation in 2025: A Practical Guide for Bug Bounty Hunters | https://santhosh-adiga-u.medium.com/advanced-idor-exploitation-in-2025-a-practical-guide-for-bug-bounty-hunters-3e935cc938c3?source=rss------bug_bounty-5 | Santhosh Adiga U | ethical-hacking, bug-bounty, cybersecurity, idor | 28-Jun-2025 |
| Message Box | hackinghub | write-up | https://medium.com/@sari.mmusab/message-box-hackinghub-write-up-f127bb87299c?source=rss------bug_bounty-5 | Musab Sarı | bug-bounty, writeup, cybersecurity, hacking, owasp | 28-Jun-2025 |
| Behind the Race Condition Bug | https://nanashi0.medium.com/behind-the-race-condition-bug-ab21bd27240b?source=rss------bug_bounty-5 | 0xNanashi | bug-bounty-writeup, race-condition, bug-bounty-tips, business-logic-bug, bug-bounty | 28-Jun-2025 |
| MY First Bounty | Pre Account take Over via respon manipulation| Pre ATO | https://nervhym.medium.com/my-first-bounty-pre-account-take-over-via-respon-manipulation-pre-ato-ababd7ca46aa?source=rss------bug_bounty-5 | NERVHYM | writeup, hacker, bug-bounty, intigriti, hackerone | 27-Jun-2025 |
| Sensitive Server Info Disclosure via Public phpinfo() | https://mdnawshadahmmed.medium.com/sensitive-server-info-disclosure-via-public-phpinfo-466f80835c12?source=rss------bug_bounty-5 | Md Nawshad Ahmmed | bug-bounty, web-security, security-research, hunting, vulnerability-disclosure | 27-Jun-2025 |
| Hall of Fame on TATA Motors | https://medium.com/@hritombhattacharya029/hall-of-fame-on-tata-motors-0ced52eaa33c?source=rss------bug_bounty-5 | Hritom Bhattacharya | bug-bounty, hall-of-fame, tata-motors, open-redirect, vapt | 27-Jun-2025 |
| Unveiling Steam’s $7500 Bounty: Buffer Overrun in SILK Voice Decoder | https://infosecwriteups.com/unveiling-steams-7500-bounty-buffer-overrun-in-silk-voice-decoder-22a5ad05dca2?source=rss------bug_bounty-5 | Monika sharma | infosec, penetration-testing, tips-and-tricks, technology, bug-bounty | 27-Jun-2025 |
| One-Click Account Vulnerability: How I Discovered a Dangerous Authentication Flaw in a Global… | https://infosecwriteups.com/one-click-account-vulnerability-how-i-discovered-a-dangerous-authentication-flaw-in-a-global-1cbc9a39e206?source=rss------bug_bounty-5 | Elie Attieh | hacking, pentesting, cybersecurity, bug-bounty-writeup, bug-bounty | 27-Jun-2025 |
| Hijacking Email Verification: A Real-World Account Takeover via Resend OTP Tampering | https://medium.com/@amanba13.ab/hijacking-email-verification-a-real-world-account-takeover-via-resend-otp-tampering-89cae414746e?source=rss------bug_bounty-5 | Aman Banga | bypass, bug-bounty, authorization, account-takeover-attacks, cybersecurity | 27-Jun-2025 |
| Git commands for Security Assessments | https://medium.com/@0xbharath/git-commands-for-security-assessments-323ce1595443?source=rss------bug_bounty-5 | Bharath | bug-bounty, appsec | 27-Jun-2025 |
| Behind the Bugs: Day 4 | https://medium.com/@Yukeshwaran-N/behind-the-bugs-day-4-e70c5cb30d31?source=rss------bug_bounty-5 | Yukeshwaran N | hacking, bugbountyhunting, bug-bounty, infosec, cybersecurity | 27-Jun-2025 |
| Hack the Human: Why I Stopped Thinking Like a Hacker and Started Thinking Like a Person | https://su6osec.medium.com/hack-the-human-why-i-stopped-thinking-like-a-hacker-and-started-thinking-like-a-person-794400b0fc88?source=rss------bug_bounty-5 | Đeepanshu | social-engineering, ethical-hacking, cybersecurity, bug-bounty, security-researchers | 27-Jun-2025 |
| The Unbreakable Shield: How 2FA Saved My Career and Why It’s the Bug Bounty Hunter’s Best Friend | https://cybersecuritywriteups.com/the-unbreakable-shield-how-2fa-saved-my-career-and-why-its-the-bug-bounty-hunter-s-best-friend-6d4a323d73f7?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, infosec-write-ups, 2fa, ethical-hacking, osint | 27-Jun-2025 |
| My Secret Facebook Bug Hunting Tricks Exposed | https://medium.com/@ibtissamhammadi1/my-secret-facebook-bug-hunting-tricks-exposed-eb00bcb46d89?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, bug-bounty, cybersecurity, facebook, infosec | 27-Jun-2025 |
| TryHackMe — PT1 Review + Tips | https://medium.com/@srijanadk/tryhackme-pt1-review-tips-f6819da6e05f?source=rss------bug_bounty-5 | Srijan Adk | bug-bounty, pt1-review, tryhackme, hackthebox, hacking | 27-Jun-2025 |
| I Reported a Critical Security Vulnerability. They Fixed It — But Never Paid. | https://medium.com/@adithsuhassv/i-reported-a-critical-security-vulnerability-they-fixed-it-but-never-paid-9a2c76653830?source=rss------bug_bounty-5 | Adith Suhas sv | bugs, bug-bounty, cybersecurity | 27-Jun-2025 |
| From Boredom to Bug: How One Backslash Broke the Entire Site | https://medium.com/@ramshath1999/from-boredom-to-bug-how-one-backslash-broke-the-entire-site-8317d6007a16?source=rss------bug_bounty-5 | Ramshath | hacking, pentest, bug-bounty, vulnerability | 27-Jun-2025 |
| SSRF in Lychee: CVE-2025–53018 | https://medium.com/@baranteyinn/ssrf-in-lychee-cve-2025-53018-260236e85343?source=rss------bug_bounty-5 | Baran TEYİN | application-security, web-security, exploitation, bug-bounty, open-source | 27-Jun-2025 |
| OAuth Open Redirect to ATO: One Link, All Platforms Compromised | https://h4reeqa.medium.com/oauth-open-redirect-to-ato-one-link-all-platforms-compromised-c4b54fb51396?source=rss------bug_bounty-5 | Abdo Rabea (H4reeqa) | oauth, bug-bounty-writeup, open-redirect, bug-bounty, account-takeover | 27-Jun-2025 |
| Passive Recon for Bug Bounty: Best Tools and Real-World Tactics | https://cyberw1ng.medium.com/passive-recon-for-bug-bounty-best-tools-and-real-world-tactics-9dcd7386eb16?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, technology, programming, careers, bug-bounty | 27-Jun-2025 |
| Exposure Protocol: Information Disclosure in the Wild [Part 4] ️ | https://infosecwriteups.com/exposure-protocol-information-disclosure-in-the-wild-part-4-%EF%B8%8F-779babe65576?source=rss------bug_bounty-5 | Aditya Bhatt | bug-bounty, bug-bounty-writeup, backup, bug-bounty-tips, cybersecurity | 27-Jun-2025 |
| Unmask GitLab’s $16,000 Bounty: Arbitrary File Read in Project Import | https://medium.com/h7w/unmask-gitlabs-16-000-bounty-arbitrary-file-read-in-project-import-e428cd876797?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, report, bug-bounty, hacking, penetration-testing | 27-Jun-2025 |
| From Boredom to Bug: How One Backslash Broke the Entire Site | https://medium.com/@ramshath1999/from-boredom-to-bug-how-one-backslash-broke-the-entire-site-8317d6007a16?source=rss------bug_bounty-5 | Ramshath | hacking, pentest, infosec, bug-bounty, vulnerability | 27-Jun-2025 |
| Web Cache Deception: When a 404 Still Leaks Sensitive Data ️️♂️ | https://medium.com/@chorfimajd22/web-cache-deception-when-a-404-still-leaks-sensitive-data-%EF%B8%8F-%EF%B8%8F-%EF%B8%8F-61338e04b10f?source=rss------bug_bounty-5 | ValidByAccident | hacker, vulnerability, bug-bounty, web-cache-deception, security | 26-Jun-2025 |
| Machine Learning in Threat Detection: Smarter, Faster, and Less Noisy | https://medium.com/@paritoshblogs/machine-learning-in-threat-detection-smarter-faster-and-less-noisy-3fdd39c54fd7?source=rss------bug_bounty-5 | Paritosh | cybersecurity, machine-learning, threat-detection, how-to, bug-bounty | 26-Jun-2025 |
| Beyond the Popup: Turning Stored XSS into Remote Code Execution | https://medium.com/@ramshath1999/beyond-the-popup-turning-stored-xss-into-remote-code-execution-483839d06f58?source=rss------bug_bounty-5 | Ramshath | hacker, hacking, bug-bounty, pentesting | 26-Jun-2025 |
| 2025 Bug Bounty Methodology, Toolsets and Persistent Recon | https://ravi73079.medium.com/2025-bug-bounty-methodology-toolsets-and-persistent-recon-d991e39e52ce?source=rss------bug_bounty-5 | Ravi sharma | cybersecurity, bug-bounty-tips, bug-bounty, technology, aritificial-intelligence | 26-Jun-2025 |
| Undust: URL Pattern Generator | https://medium.com/meetcyber/undust-url-pattern-generator-a570adb14fe4?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, pentesting, bug-bounty-tips, penetration-testing-tools, ethical-hacking | 26-Jun-2025 |
| How I Found XSS — CVE-2025–0133 Using Shodan | https://ch4ndan.medium.com/how-i-found-xss-cve-2025-0133-using-shodan-39a37eae7807?source=rss------bug_bounty-5 | Ch4ndan das | bug-bounty, cyberattack, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 26-Jun-2025 |
| Who Needs Admin When You Have GraphQL? Abusing Queries for Fun and Data | https://infosecwriteups.com/who-needs-admin-when-you-have-graphql-abusing-queries-for-fun-and-data-03456b01da34?source=rss------bug_bounty-5 | Iski | bug-bounty, money, cybersecurity, infosec, hacking | 26-Jun-2025 |
| How to Exploit Account Takeover via Password Reset Flaw | https://infosecwriteups.com/how-to-exploit-account-takeover-via-password-reset-flaw-274c7d82d096?source=rss------bug_bounty-5 | Monika sharma | security, tips-and-tricks, penetration-testing, bug-bounty, technology | 26-Jun-2025 |
| How Hackers Try to Bypass 403 Forbidden Pages (And Guarantee They Find Bugs ) | https://infosecwriteups.com/how-hackers-try-to-bypass-403-forbidden-pages-and-guarantee-they-find-bugs-1119828a8c29?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, programming, bug-bounty, ai, hacking | 26-Jun-2025 |
| Exposing Brave Browser’s IPC Vulnerability: A $300 Bounty Revelation | https://infosecwriteups.com/exposing-brave-browsers-ipc-vulnerability-a-300-bounty-revelation-55e07ab6b8da?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, technology, tips-and-tricks, vulnerability | 26-Jun-2025 |
| From “alert(1)” to Victory: How I Bypassed My First XSS Filter (Even if It Was Out of Scope ) | https://medium.com/@chorfimajd22/from-alert-1-to-victory-how-i-bypassed-my-first-xss-filter-even-if-it-was-out-of-scope-3e1ec93469b1?source=rss------bug_bounty-5 | ValidByAccident | bug-bounty, penetration-testing, xss-attack, vulnerability, security | 26-Jun-2025 |
| How I got Appreciation Letter from NASA | https://medium.com/@sibi_k/how-i-got-appreciation-letter-from-nasa-f6af69f48eee?source=rss------bug_bounty-5 | Sibi Krish | writeup, nasa, bug-bounty, nasa-vdp, appreciation-letter | 26-Jun-2025 |
| CORS ( Cross Origin Resource Sharing ) | https://yashpawar1199.medium.com/cors-cross-origin-resource-sharing-89377e54127e?source=rss------bug_bounty-5 | Yash Pawar @HackersParadise | cors-misconfiguration, bug-bounty, same-origin-policy-bypass, web-api-security, cross-origin-exploit | 26-Jun-2025 |
| ️ Dark Web Diaries: The Side of the Internet They Don’t Want You to See | https://adityaax.medium.com/%EF%B8%8F-dark-web-diaries-the-side-of-the-internet-they-dont-want-you-to-see-21898c1caf83?source=rss------bug_bounty-5 | adityaax | tor, bug-bounty, hacking, onion, darkweb | 26-Jun-2025 |
| The Logout That Didn’t Happen: A Session Bug Story | https://medium.com/@sirimanju41/the-logout-that-didnt-happen-a-session-bug-story-2652632c6067?source=rss------bug_bounty-5 | CSN | bug-bounty, bug-bounty-writeup, session-hijacking, bug-bounty-tips, cybersecurity | 26-Jun-2025 |
| The Bug Bounty Mindset That 10x’s Your Game | https://su6osec.medium.com/the-bug-bounty-mindset-that-10xs-your-game-f56a24891d85?source=rss------bug_bounty-5 | Đeepanshu | mindset, infosec, bug-bounty, ethical-hacking, cybersecurity | 26-Jun-2025 |
| Automate Recon. Find Bugs. Get Paid. (Start Here) | https://medium.com/@m0rd3caii/automate-recon-find-bugs-get-paid-start-here-eecddcc0a82c?source=rss------bug_bounty-5 | m0rd3caii | automate, ethical-hacking, hacking-tools, bug-bounty | 26-Jun-2025 |
| SQL Injection (SQLi): A Comprehensive Guide | https://meravytes.medium.com/sql-injection-sqli-a-comprehensive-guide-dfca9a7426dc?source=rss------bug_bounty-5 | Meravytes | cybersecurity, meravytes, infosec, bug-bounty, sql-injection | 26-Jun-2025 |
| Exploring the Dark Web: A Comprehensive Guide | https://medium.com/h7w/exploring-the-dark-web-a-comprehensive-guide-b243d68c063a?source=rss------bug_bounty-5 | Monika sharma | darkweb, bug-bounty, tor, hacking, penetration-testing | 26-Jun-2025 |
| A $3000 Bounty Breakthrough | https://osintteam.blog/a-3000-bounty-breakthrough-3fcbb0187178?source=rss------bug_bounty-5 | Monika sharma | tor, tips-and-tricks, technology, bug-bounty, penetration-testing | 26-Jun-2025 |
| How a Container Escape Vulnerability Exposes Host Files | https://osintteam.blog/how-a-container-escape-vulnerability-exposes-host-files-ec09ba3991b5?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, tips-and-tricks, technology, penetration-testing, bug-bounty | 26-Jun-2025 |
| Master SQL Injection: Exploit Hyperpure’s $2000 Bounty Vulnerability | https://osintteam.blog/master-sql-injection-exploit-hyperpures-2000-bounty-vulnerability-c4e32fd6d5cb?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, sql-injection, technology, bug-bounty, report | 26-Jun-2025 |
| How I Took a Website Completely Offline with a Funky Cache Poisoning Vulnerability (CPDOS) | https://medium.com/@Maverick0o0/how-i-took-a-website-completely-offline-with-a-funky-cache-poisoning-vulnerability-cpdos-220ac75d1cf3?source=rss------bug_bounty-5 | Erfan Tavakoli | writeup, penetration-testing, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 26-Jun-2025 |
| Broken Access Control via Hardcoded Bearer Token in Public JS File | https://medium.com/@nnouh4967/broken-access-control-via-hardcoded-bearer-token-in-public-js-file-b2f6c87b4d44?source=rss------bug_bounty-5 | nooh zidan | cybersecurity, bug-bounty, bug-bounty-writeup, api, bug-bounty-tips | 26-Jun-2025 |
| Bypass CSRF attack in json and get €XXX | https://medium.com/@kirollosbotros16/bypass-csrf-attack-in-json-and-get-xxx-d8dea24d7c0b?source=rss------bug_bounty-5 | Kirollos Botros | csrf, client-side-attack, bug-bounty, peneteration-tester, bug-hunting | 26-Jun-2025 |
| How I Found a Web App’s Full Source Code in Less Than 5 Minutes | https://medium.com/@m0rd3caii/how-i-found-a-web-apps-full-source-code-in-less-than-5-minutes-337d52421c2a?source=rss------bug_bounty-5 | m0rd3caii | bug-bounty, hacker, bug-bounty-tips, hacking, first-bounty | 26-Jun-2025 |
| Nuclei for Bug Bounty: The Ultimate Guide to Automated Vulnerability Detection | https://medium.com/@jpablo13/nuclei-for-bug-bounty-the-ultimate-guide-to-automated-vulnerability-detection-acf0e28b7eac?source=rss------bug_bounty-5 | JPablo13 | infosec, ethical-hacking, bug-bounty, penetration-testing, cybersecurity | 25-Jun-2025 |
| THE PHILOSOPHY OF ATTACK: A DEEP DIVE INTO THE GENTIL SECURITY HACKING METHODOLOGY | https://gentilsecurity.medium.com/the-philosophy-of-attack-a-deep-dive-into-the-gentil-security-hacking-methodology-37024510b549?source=rss------bug_bounty-5 | Gentil Security | ethical-hacking-training, bug-bounty, cybersecurity, reconnaissance, penetration-testing | 25-Jun-2025 |
| Subdomain Takeovers in 2025 | https://su6osec.medium.com/subdomain-takeovers-in-2025-1effb9fb56df?source=rss------bug_bounty-5 | Đeepanshu | osint, bug-bounty, cybersecurity, ethical-hacking, infosec | 25-Jun-2025 |
| Exposure Protocol: Information Disclosure in the Wild [Part 4] | https://infosecwriteups.com/exposure-protocol-information-disclosure-in-the-wild-part-4-509a7e6bb1de?source=rss------bug_bounty-5 | Aditya Bhatt | github, bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup | 25-Jun-2025 |
| From Confusion to First Bounty | https://medium.com/@ikajakam/from-confusion-to-first-bounty-b721b9025b7b?source=rss------bug_bounty-5 | Ikajakam | pentesting, cybersecurity, bug-bounty | 25-Jun-2025 |
| Hacking Topmate.io | https://green-terminals.medium.com/hacking-topmate-io-3f6f8252a742?source=rss------bug_bounty-5 | Aditya Rana | burpsuite, cybersecurity, web-security, bug-bounty | 25-Jun-2025 |
| Web App Pentesting vs Android App Pentesting: A Brutally Honest Breakdown | https://medium.com/@anandrishav2228/web-app-pentesting-vs-android-app-pentesting-a-brutally-honest-breakdown-3da9fdcb3937?source=rss------bug_bounty-5 | Rishav anand | penetration-testing, cybersecurity, money, hacking, bug-bounty | 25-Jun-2025 |
| Spotify and HackerOne: Dismissing Local Threats as ‘Informational | https://medium.com/@diego.caridei/spotify-and-hackerone-dismissing-local-threats-as-informational-c1900baf3d30?source=rss------bug_bounty-5 | Diego Caridei | cybersecurity, bug-bounty, ethical-hacking, penetration-testing | 25-Jun-2025 |
| Weak credentials lead to access to admin panel (Deep Recon) (Arabic) | https://ro0od.medium.com/weak-credentials-lead-to-access-to-admin-panel-deep-recon-arabic-453096842412?source=rss------bug_bounty-5 | rood | bugbounty-writeup, bug-bounty | 25-Jun-2025 |
| Weak credentials lead to access to admin panel (Deep Recon) | https://ro0od.medium.com/weak-credentials-lead-to-access-to-admin-panel-deep-recon-2909b8a0f23e?source=rss------bug_bounty-5 | rood | writeup, bug-bounty | 25-Jun-2025 |
| How I Stole My Friend’s Secrets | https://medium.com/@hrofficial62/how-i-stole-my-friends-secrets-6bfd242e92e3?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, red-team, hacking, cybersecurity, ethical-hacking | 25-Jun-2025 |
| I Built a Bug Bounty Framework in Over 2 Years | https://infosecwriteups.com/i-built-a-bug-bounty-framework-in-over-2-years-f9b7daa0b7aa?source=rss------bug_bounty-5 | Mostafa Alrefai | hacking, pentesting, automation, bug-bounty, money | 25-Jun-2025 |
| Zero-click Account Takeover!(I found it in half an hour) | https://medium.com/@spettyial/zero-click-account-takeover-i-found-it-in-half-an-hour-444e737f0919?source=rss------bug_bounty-5 | Furkan Uyar | bug-bounty-writeup, bug-bounty-tips, account-takeover, bug-bounty, cybersecurity | 25-Jun-2025 |
| Behind the Bugs: Day 3 | https://medium.com/@Yukeshwaran-N/behind-the-bugs-day-3-97571039887d?source=rss------bug_bounty-5 | Yukeshwaran N | hacking, bug-bounty, google, penetration-testing, google-dorking | 25-Jun-2025 |
| 130+ End-to-End Test Cases for Mobile Applications — The Only Checklist You’ll Ever Need | https://medium.com/@prafullamishra827/130-end-to-end-test-cases-for-mobile-applications-the-only-checklist-youll-ever-need-115184147c74?source=rss------bug_bounty-5 | Prafulla Mishra | automation, mobile, bug-bounty, software-development, software-testing | 25-Jun-2025 |
| CVE-2025-0133 — Reflected Cross-Site Scripting (XSS) in Palo Alto GlobalProtect VPN Portal | https://medium.com/@gourisankara357/cve-2025-0133-reflected-cross-site-scripting-xss-in-palo-alto-globalprotect-vpn-portal-591c5711160f?source=rss------bug_bounty-5 | Gouri Sankar A | medium, cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 25-Jun-2025 |
| Rate Limit? I Barely Know Her: How I Brute-Forced OTPs Like a Gentleman | https://infosecwriteups.com/rate-limit-i-barely-know-her-how-i-brute-forced-otps-like-a-gentleman-6f1235c559cc?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, money, cybersecurity, hacking | 25-Jun-2025 |
| Why Does Ax Framework Pay Hackers So Much | https://medium.com/@ibtissamhammadi1/why-does-ax-framework-pay-hackers-so-much-f6cc8b4bb666?source=rss------bug_bounty-5 | Ibtissam hammadi | technology, bug-bounty, hacking, cybersecurity, ethical-hacking | 25-Jun-2025 |
| Mapping the Dark Web for Recon: Ethical OSINT Techniques | https://medium.com/write-a-catalyst/mapping-the-dark-web-for-recon-ethical-osint-techniques-765b6eb851d7?source=rss------bug_bounty-5 | Monika sharma | osint, tips-and-tricks, hacking, networking, bug-bounty | 25-Jun-2025 |
| Hacking APIs | Insecure Deserialization | https://medium.com/@aminefarah802/hacking-apis-1b809d9d5aa0?source=rss------bug_bounty-5 | KILLUA_UCHIHA | bug-bounty-writeup, bug-zero, bug-bounty, bugs, bug-bounty-tips | 25-Jun-2025 |
| Joining the Same Organization Multiple Times Using a Race Condition | https://medium.com/@khaledelnabet/joining-the-same-organization-multiple-times-using-a-race-condition-8844d219b769?source=rss------bug_bounty-5 | Khaledelnabet | cybersecurity, bugs, bug-bounty, security, vulnerability | 25-Jun-2025 |
| Bug Bounty Journey — Valid Report Part 7 | https://medium.com/@0xF3r4t/bug-bounty-journey-valid-report-part-7-02f45eefea7e?source=rss------bug_bounty-5 | 0xF3r4t | bug-bounty, wayback-machine, appsec, information-disclosure | 25-Jun-2025 |
| Bypassing the Group Member Limit via Race Condition | https://medium.com/@khaledelnabet/bypassing-the-group-member-limit-via-race-condition-2442ad33739e?source=rss------bug_bounty-5 | Khaledelnabet | bug-bounty-writeup, research, security, bug-bounty, cybersecurity | 25-Jun-2025 |
| Nuclei para Bug Bounty: La Guía Definitiva para la Detección de Vulnerabilidades Automatizada | https://medium.com/@jpablo13/nuclei-para-bug-bounty-la-gu%C3%ADa-definitiva-para-la-detecci%C3%B3n-de-vulnerabilidades-automatizada-0e0ad42283ec?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, ethical-hacking, penetration-testing, bug-bounty, infosec | 24-Jun-2025 |
| Serverless, Not Senseless: How I Exploited Cloud Functions to Peek Into the Backend ☁️ | https://infosecwriteups.com/serverless-not-senseless-how-i-exploited-cloud-functions-to-peek-into-the-backend-%EF%B8%8F-847981fa9e2a?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, infosec, money, cybersecurity | 24-Jun-2025 |
| Blockchain and Web3 Smart Contract Exploits: The Next Frontier in Bug Hunting | https://infosecwriteups.com/blockchain-and-web3-smart-contract-exploits-the-next-frontier-in-bug-hunting-f10521fb8cc9?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, web3, blockchain, technology, penetration-testing | 24-Jun-2025 |
| Popular Bug Bounty Platforms for Beginners: Your Complete Guide to Getting Started | https://medium.com/@sync-with-ivan/popular-bug-bounty-platforms-for-beginners-your-complete-guide-to-getting-started-22eb72f3f63f?source=rss------bug_bounty-5 | Andrei Ivan | web-security, bug-bounty, cybersecurity, bug-bounty-tips, ethical-hacking | 24-Jun-2025 |
| DOM XSS in document.write sink using source location.search — PortSwigger⚡ | https://medium.com/@RootPwned/dom-xss-in-document-write-sink-using-source-location-search-portswigger-b36e2c7425a1?source=rss------bug_bounty-5 | Sumanth Yerranagula | xss-attack, bug-bounty, ethical-hacking, walkthrough, web-security | 24-Jun-2025 |
| How Getting Stuck Led Me to a $3,XXX Bounty: The Recon That Almost Meant Nothing | https://kongsec.medium.com/how-getting-stuck-led-me-to-a-3-xxx-bounty-the-recon-that-almost-meant-nothing-a03a354df2cf?source=rss------bug_bounty-5 | Kongsec | bug-bounty-tips, bug-bounty, bug-bounty-writeup, ethical-hacking, cybersecurity | 24-Jun-2025 |
| Remote File Inclusion (RFI) — Full Breakdown for Beginners | https://medium.com/@SKaif009/remote-file-inclusion-rfi-full-breakdown-for-beginners-7f89c55e3b2a?source=rss------bug_bounty-5 | Shah kaif | bug-bounty-writeup, remote-file-inclusion, bug-bounty-tips, bug-bounty, bug-hunting | 24-Jun-2025 |
| You’re Missing Bugs If You’re Not Reconning Like This | https://su6osec.medium.com/youre-missing-bugs-if-you-re-not-reconning-like-this-c037e0fbbb8a?source=rss------bug_bounty-5 | Đeepanshu | reconnaissance, cybersecurity, ethical-hacking, infosec, bug-bounty | 24-Jun-2025 |
| ️ Stop API Key Leaks Before They Cost You — Meet KeySentry | https://infosecwriteups.com/%EF%B8%8F-stop-api-key-leaks-before-they-cost-you-meet-keysentry-5521f6c75ab0?source=rss------bug_bounty-5 | Aditya Bhatt | bug-bounty, bug-bounty-tips, cybersecurity, bug-bounty-writeup, api-key | 24-Jun-2025 |
| How I Found an Unauthenticated API in a Popular Open-Source Project Used by Redacted.com | https://medium.com/@SumitChauhan3754/how-i-found-an-unauthenticated-api-in-a-popular-open-source-project-used-by-redacted-com-b318ebdaf1c0?source=rss------bug_bounty-5 | Sumit Chauhan | cybersecurity, ethical-hacking, bug-bounty | 24-Jun-2025 |
| Reverse Engineering iOS Apps with Hopper Disassembler: From IPA to Jailbreak Detection | https://medium.com/@Infosec-Arsenal-Diaries/reverse-engineering-ios-apps-with-hopper-disassembler-from-ipa-to-jailbreak-detection-b913511bfb0d?source=rss------bug_bounty-5 | Antariksha Akhilesh Sharma | information-security, ios, reverse-engineering, bug-bounty, cybersecurity | 24-Jun-2025 |
| The Dark Side of Swagger UI: How XSS and HTML Injection Can Compromise APIs | https://infosecwriteups.com/the-dark-side-of-swagger-ui-how-xss-and-html-injection-can-compromise-apis-1b670972a443?source=rss------bug_bounty-5 | coffinxp | penetration-testing, cybersecurity, technology, bug-bounty, swagger | 24-Jun-2025 |
| How to Automate SQLi & XSS Hunting | https://medium.com/@ibtissamhammadi1/how-to-automate-sqli-xss-hunting-9ad7bfbc50b6?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, hacker, web-security, ethical-hacking, automation | 24-Jun-2025 |
| HOW A PORT SCAN LED TO A VULNERABILITY IN AN FTP SERVICE + TIPS FOR SCANNING | https://medium.com/@Tenebris_Venator/how-a-port-scan-led-to-a-vulnerability-in-an-ftp-service-tips-for-scanning-17588027d820?source=rss------bug_bounty-5 | Tenebris Venator | hacking, bug-bounty, technology, strategy, tips | 24-Jun-2025 |
| Race Condition 101: How I Exploited a Real Bug Bounty Scenario to Break Backend Validation | https://keroayman77.medium.com/race-condition-101-how-i-exploited-a-real-bug-bounty-scenario-to-break-backend-validation-c39352815f0a?source=rss------bug_bounty-5 | Kerolos Ayman | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 24-Jun-2025 |
| How I Found My First Critical Bug Bounty | Unauthenticated Arbitrary File Upload Lead To LFI via… | https://medium.com/@terp0x0/how-i-found-my-first-critical-bug-bounty-unauthenticated-arbitrary-file-upload-lead-to-lfi-via-5f33c80fc44f?source=rss------bug_bounty-5 | terp0x0 | security, ethical-hacking, bug-bounty | 24-Jun-2025 |
| ☕ How I Redirected the Entire Startup to evil.com — With One Header | https://aiwolfie.medium.com/how-i-redirected-the-entire-startup-to-evil-com-with-one-header-f2eb6faae934?source=rss------bug_bounty-5 | AIwolfie | bug-bounty, open-redirect, hacking, security, website | 23-Jun-2025 |
| YARA Rules in Action: Detecting Malware with Custom Signatures | https://medium.com/@paritoshblogs/yara-rules-in-action-detecting-malware-with-custom-signatures-fd61633e87c2?source=rss------bug_bounty-5 | Paritosh | hacking, bug-bounty, yara, malware, cybersecurity | 23-Jun-2025 |
| How to Build a Bug Bounty Target List That Actually Gets You Bugs (2025 Guide) | https://su6osec.medium.com/how-to-build-a-bug-bounty-target-list-that-actually-gets-you-bugs-2025-guide-626fe67497fa?source=rss------bug_bounty-5 | Đeepanshu | api-security, reconnaissance, infosec, ethical-hacking, bug-bounty | 23-Jun-2025 |
| $7,500 Bounty: Exposed Proxy on Reddit Allowed External Access to Internal Domains | https://infosecwriteups.com/7-500-bounty-exposed-proxy-on-reddit-allowed-external-access-to-internal-domains-a6abc413d852?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, cybersecurity, bug-bounty, technology, penetration-testing | 23-Jun-2025 |
| $2,162 Bounty: CVE-2024–56374 — DoS in Django’s IPv6 Validation | https://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5 | Monika sharma | technology, tips-and-tricks, hacking, penetration-testing, bug-bounty | 23-Jun-2025 |
| Lost and Found: How Deleted User Accounts Were Still Alive in the System ️ | https://infosecwriteups.com/lost-and-found-how-deleted-user-accounts-were-still-alive-in-the-system-%EF%B8%8F-2ca9b1af0749?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, hacking, cybersecurity, money | 23-Jun-2025 |
| Mastering Nmap: The Ultimate Guide to Port Scanning | https://hettt.medium.com/mastering-nmap-the-ultimate-guide-to-port-scanning-530d0b0138f9?source=rss------bug_bounty-5 | Het Patel | bug-bounty, bug-bounty-writeup, nmap, nmap-scripting-engine, port-scanning | 23-Jun-2025 |
| My First Valid Bug | https://medium.com/@nuhmanjaseelap17/my-first-valid-bug-e83c871c2ec2?source=rss------bug_bounty-5 | Nuhman Jaseel A P | penetration-testing, cybersecurity, bug-bounty, ethical-hacking, hacking | 23-Jun-2025 |
| This Vulnerability can blow your mind. | https://medium.com/@anandrishav2228/this-vulnerability-can-blow-your-mind-7cda8b22d5fa?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, penetration-testing, hacker, cybersecurity, money | 23-Jun-2025 |
| Stored XSS into HTML context with nothing encoded by PortSwigger | https://medium.com/@RootPwned/stored-xss-into-html-context-with-nothing-encoded-by-portswigger-fb2c3abfe6bd?source=rss------bug_bounty-5 | Sumanth Yerranagula | hacking, bug-bounty, ethical-hacking, cybersecurity, xss-attack | 23-Jun-2025 |
| How an OAuth Misconfiguration Led to Token Leakage | https://infosecwriteups.com/how-an-oauth-misconfiguration-led-to-token-leakage-6b38d3d32f8e?source=rss------bug_bounty-5 | Ehtesham Ul Haq | oauth, writeup, whitehat, bug-bounty, penetration-testing | 23-Jun-2025 |
| Practical Windows Commands | https://medium.com/@verylazytech/practical-windows-commands-ebfd029aa8df?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, penetration-testing, cmd, windows, bug-bounty | 23-Jun-2025 |
| DOM XSS in jQuery anchor href attribute sink using location.search source — PortSwigger | https://medium.com/@RootPwned/dom-xss-in-jquery-anchor-href-attribute-sink-using-location-search-source-portswigger-677d9c497fc2?source=rss------bug_bounty-5 | Sumanth Yerranagula | web-security, cybersecurity, javascript, xss-attack, bug-bounty | 23-Jun-2025 |
| Bypass Facebook Business Quarantine — Integrity Safeguards | https://gtm0x01.medium.com/bypass-facebook-business-quarantine-integrity-safeguards-6eea61ee9eca?source=rss------bug_bounty-5 | Gtm Mänôz | bug-bounty, bug-bounty-tips, facebook-bug-bounty, meta, bug-bounty-writeup | 23-Jun-2025 |
| Can a 403 Page Hack Your Users Secretly | https://medium.com/@ibtissamhammadi1/can-a-403-page-hack-your-users-secretly-2f4d5f952dbf?source=rss------bug_bounty-5 | Ibtissam hammadi | 403, xss-attack, fuzzing, web-security, bug-bounty | 23-Jun-2025 |
| From SQLi Discovery to a $4,500 Reward | https://osintteam.blog/from-sqli-discovery-to-a-4-500-reward-ecb709e18842?source=rss------bug_bounty-5 | Monika sharma | technology, tips-and-tricks, bug-bounty, penetration-testing, rewards | 23-Jun-2025 |
| $800 Bounty: HTTP Response Header Injection in Shopify’s Pitchfork + Rack 3 | https://osintteam.blog/800-bounty-http-response-header-injection-in-shopifys-pitchfork-rack-3-0d95b2560eb1?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, technology, hacking, tips-and-tricks | 23-Jun-2025 |
| CVE-2025–0133: Reflected XSS in Palo Alto GlobalProtect (PAN-OS) Exploit Analysis & PoC | https://medium.com/@blog.krishoffsec/cve-2025-0133-reflected-xss-in-palo-alto-globalprotect-pan-os-exploit-analysis-poc-7468e29fc7a3?source=rss------bug_bounty-5 | krish | bug-bounty-tips, xss-vulnerability, cuber-security, bug-bounty-writeup, bug-bounty | 23-Jun-2025 |
| $5,300 Bounty: Critical Flaw in Brave Browser | https://medium.com/h7w/5-300-bounty-critical-flaw-in-brave-browser-b569234d11b5?source=rss------bug_bounty-5 | Monika sharma | vulnerability, bug-bounty, javascript, technology, penetration-testing | 23-Jun-2025 |
| OS Command Injection — When User Input Hijacks the Terminal | https://medium.com/@sachinpv2004/os-command-injection-when-user-input-hijacks-the-terminal-340a8a5315a8?source=rss------bug_bounty-5 | SACHIN PV | hacking, penetration-testing, owasp, bug-bounty, os-command-injection | 23-Jun-2025 |
| 1inch launches bug bounty programs | https://1inch.medium.com/1inch-launches-bug-bounty-programs-5e2b08b5cf8c?source=rss------bug_bounty-5 | 1inch | bug-bounty, security, announcements | 23-Jun-2025 |
| The Power of Cybersecurity Search Engines in Bug Bounty Hunting: A Hacker’s Guide | https://medium.com/@uday637/the-power-of-cybersecurity-search-engines-in-bug-bounty-hunting-a-hackers-guide-e328702f2c41?source=rss------bug_bounty-5 | Uday | hacking-tools, cybersecurity, bug-bounty, bug-hunting, bug-hunter | 23-Jun-2025 |
| Top 10 Free Ethical Hacking Courses You Can Start Today (2025) | https://medium.com/@verylazytech/top-10-free-ethical-hacking-courses-you-can-start-today-2025-2b557fb062ea?source=rss------bug_bounty-5 | Very Lazy Tech | tryhackme, hacking, penetration-testing, ethical-hacking-course, bug-bounty | 23-Jun-2025 |
| Real-Time Stealer-Log Monitoring with LeakRadar.io: Detect Leaks Before Attackers Do | https://medium.com/@alexandrevandammepro/real-time-stealer-log-monitoring-with-leakradar-io-detect-leaks-before-attackers-do-44c2ec9687a0?source=rss------bug_bounty-5 | Alexandre Vandamme | cybersecurity, privacy, data-privacy, bug-bounty, data | 23-Jun-2025 |
| Fuzzing Everything | https://pad1ryoshi.medium.com/fuzzing-everything-67ab1c0f4b6a?source=rss------bug_bounty-5 | pad1ryoshi | pentesting, web-hacking, bug-bounty, capture-the-flag, fuzzing | 23-Jun-2025 |
| $420 Bounty: Subdomain Takeover on users.tweetdeck.com | https://medium.com/meetcyber/420-bounty-subdomain-takeover-on-users-tweetdeck-com-594b4dbd8c58?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, bug-bounty, cybersecurity, tips-and-tricks | 22-Jun-2025 |
| I Found Public Transit Systems Online — It Let Anyone Track Buses and Make Announcements | https://medium.com/@hacker_might/i-found-public-transit-systems-online-it-let-anyone-track-buses-and-make-announcements-01f7c558f624?source=rss------bug_bounty-5 | hacker_might | research, industrial-control-system, cybersecurity, iot-security, bug-bounty | 22-Jun-2025 |
| Injection Can Be Anywhere | https://medium.com/@faxcl018/injection-can-be-anywhere-4c172681cf30?source=rss------bug_bounty-5 | Faxcel | code-injection, bug-bounty, xss-vulnerability, cybersecurity, ssti | 22-Jun-2025 |
| How I Found Multiple CVEs in InnoShop ≤0.4.1 | https://medium.com/@The_Hiker/how-i-found-multiple-cves-in-innoshop-0-4-1-12c8f84ad87f?source=rss------bug_bounty-5 | TheHiker | hacking, bug-bounty, bug-hunting, cve, cybersecurity | 22-Jun-2025 |
| Shortcuts to Shells: How Symbolic Links Led to Arbitrary File Reads | https://infosecwriteups.com/shortcuts-to-shells-how-symbolic-links-led-to-arbitrary-file-reads-9ec824b0281c?source=rss------bug_bounty-5 | Iski | cybersecurity, money, bug-bounty, infosec, hacking | 22-Jun-2025 |
| Response Manipulation: The Hidden Path to Account Takeover | https://medium.com/@Y0S3TREX/response-manipulation-the-hidden-path-to-account-takeover-1f009bb5a676?source=rss------bug_bounty-5 | A0X-Y0S3TREX | cybersecurity, bug-bounty-tips, hacking, bug-bounty-writeup, bug-bounty | 22-Jun-2025 |
| Old But Gold: Legacy AV Evasion Techniques That Still Work (Sometimes) | https://medium.com/@verylazytech/old-but-gold-legacy-av-evasion-techniques-that-still-work-sometimes-9c4159ea7bf2?source=rss------bug_bounty-5 | Very Lazy Tech | anti-virus-software, evasion-techniques, hacking, bug-bounty, penetration-testing | 22-Jun-2025 |
| Reverse Engineering Başlanğıcı: Music Player Analizi(IDA və x32dbg) | https://medium.com/@elmin.farzaliyev/reverse-engineering-ba%C5%9Flan%C4%9F%C4%B1c%C4%B1-music-player-analizi-ida-v%C9%99-x32dbg-c400e4b7b95a?source=rss------bug_bounty-5 | Elmin Farzaliyev | cybersecurity, bug-bounty, reverse-engineering, hacking | 22-Jun-2025 |
| Simple manual recon leads to P1 finding and uncovering AWS access and secret keys | https://medium.com/@abdalah336/simple-manual-recon-leads-to-p1-finding-and-uncovering-aws-access-and-secret-keys-01739de81633?source=rss------bug_bounty-5 | Abdalah | bug-hunting, penetration-testing, bug-bounty-writeup, bug-bounty, recon | 22-Jun-2025 |
| Unmasking the Unseen: How Interactsh Levels Up Your Bug Bounty Game | https://cyphernova1337.medium.com/unmasking-the-unseen-how-interactsh-levels-up-your-bug-bounty-game-8f1a13ba26e8?source=rss------bug_bounty-5 | CypherNova1337 | tools, cybersecurity, hacking, bug-bounty, information-security | 22-Jun-2025 |
| Reflected XSS via File Upload on Sony | https://dr34m14.medium.com/reflected-xss-via-file-upload-on-sony-0aa0f3295216?source=rss------bug_bounty-5 | dr34m14 | hackerone, bug-bounty, bug-bounty-writeup, hackerone-report, bug-bounty-tips | 22-Jun-2025 |
| ☠️ How to Find Your First Vulnerability in Bug Bounty — A Practical Guide for Beginners | https://medium.com/@Tenebris_Venator/%EF%B8%8F-how-to-find-your-first-vulnerability-in-bug-bounty-a-practical-guide-for-beginners-987b7c7a7432?source=rss------bug_bounty-5 | Tenebris Venator | bug-bounty-tips, cybersecurity, technology, tips, bug-bounty | 22-Jun-2025 |
| Why 90% Fail at Bug Bounties (And How You Can Actually Win in 2025) | https://medium.com/@rishabhshri08/why-90-fail-at-bug-bounties-and-how-you-can-actually-win-in-2025-47ada94af783?source=rss------bug_bounty-5 | Rishabh Shrivastava | infosec, cybersecurity, bug-bounty, bug-bounty-writeup, ethical-hacking | 22-Jun-2025 |
| IDOR Leads to Unauthorized Deletion: How I Earned $500 in Bug Bounty | https://medusa0xf.medium.com/idor-leads-to-unauthorized-deletion-how-i-earned-500-in-bug-bounty-335bd6a2c75d?source=rss------bug_bounty-5 | Medusa | bug-bounty, software-development, cybersecurity, hacking, bug-bounty-tips | 22-Jun-2025 |
| Your Bug Bounty Toolkit — What You Actually Need to Start Finding Bugs | https://su6osec.medium.com/your-bug-bounty-toolkit-what-you-actually-need-to-start-finding-bugs-10406119233c?source=rss------bug_bounty-5 | Đeepanshu | hacking-tools, api-security, infosec, ethical-hacking, bug-bounty | 22-Jun-2025 |
| How I Find Multiple IDOR Vulnerabilities in a Single Target | https://medium.com/@ibtissamhammadi1/how-i-find-multiple-idor-vulnerabilities-in-a-single-target-79510b77c8de?source=rss------bug_bounty-5 | Ibtissam hammadi | api, cybersecurity, bug-bounty, ethical-hacking, idor-vulnerability | 22-Jun-2025 |
| httpx for Bug Bounty: Complete Guide to Detecting Subdomains and Active Hosts | https://medium.com/@jpablo13/httpx-for-bug-bounty-complete-guide-to-detecting-subdomains-and-active-hosts-22fa015dbedd?source=rss------bug_bounty-5 | JPablo13 | bug-bounty, ethical-hacking, cybersecurity, penetration-testing, infosec | 21-Jun-2025 |
| Automating SQL Injection using Dalfox, GF and Waybackurls | https://izumy.medium.com/automating-sql-injection-using-dalfox-gf-and-waybackurls-f6b56176b46f?source=rss------bug_bounty-5 | イズミー | bug-bounty-tips, bug-bounty, bug-bounty-writeup, pentes, hacker | 21-Jun-2025 |
| I SLOWED DOWN A WEBSITE USING PING ⏳ (Blind OS Command Injection Walkthrough) | https://medium.com/@RootPwned/i-slowed-down-a-website-using-ping-blind-os-command-injection-walkthrough-0b56410b47de?source=rss------bug_bounty-5 | Sumanth Yerranagula | ctf, cybersecurity, bug-bounty, ethical-hacking, hacking | 21-Jun-2025 |
| Automation for Smarter Bug Hunting | https://infosecwriteups.com/automation-for-smarter-bug-hunting-8ada52923e81?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, cybersecurity, tips-and-tricks, technology, bug-bounty | 21-Jun-2025 |
| $5,000 Bounty: How a Single Malformed UDP Packet Took Down Rootstock’s Blockchain Node (CVE-style… | https://infosecwriteups.com/5-000-bounty-how-a-single-malformed-udp-packet-took-down-rootstocks-blockchain-node-cve-style-011cceb94819?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, hacking, bug-bounty, penetration-testing, technology | 21-Jun-2025 |
| CTF Day(20) | https://medium.com/@ahmednarmer1/ctf-day-20-a1bede54a0e7?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, web-penetration-testing, ctf, web-pen-testing, cybersecurity | 21-Jun-2025 |
| Still Logged In? Google OAuth’s Secret Backdoor (No Tools Needed!) | https://cybersecuritywriteups.com/still-logged-in-google-oauths-secret-backdoor-no-tools-needed-5d9d964f7a6d?source=rss------bug_bounty-5 | StrangeRwhite | writeup, hacking, bug-bounty-writeup, bug-bounty, information-technology | 21-Jun-2025 |
| I PWNED A FEEDBACK FORM USING BLIND OS COMMAND INJECTION WITH DNS EXFIL | https://medium.com/@RootPwned/i-pwned-a-feedback-form-using-blind-os-command-injection-with-dns-exfil-27d0002ad74e?source=rss------bug_bounty-5 | Sumanth Yerranagula | bug-bounty, careers, ethical-hacking, hacking, cybersecurity | 21-Jun-2025 |
| Rosetta 2 for Hackers and Reverse Engineers | https://hackerassociate.medium.com/rosetta-2-for-hackers-and-reverse-engineers-b92b93da70dd?source=rss------bug_bounty-5 | Harshad Shah | cybersecurity, reverse-engineering, infosec, pentesting, bug-bounty | 21-Jun-2025 |
| How to Write a Perfect Bug Bounty Report (with Examples) | https://medium.com/@aashifm/how-to-write-a-perfect-bug-bounty-report-with-examples-d6c72dad2ab4?source=rss------bug_bounty-5 | 127.0.0.1 | bug-report, documentation, reporting, cybersecurity, bug-bounty | 21-Jun-2025 |
| How I Found a User Enumeration Flaw Through Password Reset Logic | https://medium.com/@gourisankara357/how-i-found-a-user-enumeration-flaw-through-password-reset-logic-9b7c01dbf0fe?source=rss------bug_bounty-5 | Gouri Sankar A | infosec, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 21-Jun-2025 |
| Insecure Direct Object Reference (IDOR): A Beginner’s Guide to Finding and Fixing High-Impact… | https://medium.com/@sync-with-ivan/insecure-direct-object-reference-idor-a-beginners-guide-to-finding-and-fixing-high-impact-3e777be08ad0?source=rss------bug_bounty-5 | Andrei Ivan | penetration-testing, idor, web-security, bug-bounty, application-security | 21-Jun-2025 |
| $3,800 Bounty: How Cache Poisoning Took Down Shopify’s CDN Files — DoS Across Thousands of Stores | https://osintteam.blog/3-800-bounty-how-cache-poisoning-took-down-shopifys-cdn-files-dos-across-thousands-of-stores-f6d7fdc72b26?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty-tips, bug-bounty, tips-and-tricks, penetration-testing | 21-Jun-2025 |
| 10 Real Mobile App Testing Challenges I Faced And How I Solved Them as a QA | https://medium.com/@prafullamishra827/10-real-mobile-app-testing-challenges-i-faced-and-how-i-solved-them-as-a-qa-42d3967eab2e?source=rss------bug_bounty-5 | Prafulla Mishra | api, software-testing, software-development, mobile-testing, bug-bounty | 21-Jun-2025 |
| PHP RCE in a Restricted Environment Using pcntl_fork and pcntl_exec | https://medium.com/@soman07/php-rce-in-a-restricted-environment-using-pcntl-fork-and-pcntl-exec-abef793f0a4e?source=rss------bug_bounty-5 | Soman Verma | bug-bounty, php, redteam-tool, remote-code-execution, cybersecurity | 21-Jun-2025 |
| Subdomain Takeover Made Easy: How to Detect Vulnerabilities Using Subdominator and SubSnipe | https://srimant999.medium.com/subdomain-takeover-made-easy-how-to-detect-vulnerabilities-using-subdominator-and-subsnipe-da8bb98a1dd6?source=rss------bug_bounty-5 | S Kumar | bug-bounty, subdomain-takeover, vulnerability, srimant-kumar, penetration-testing | 21-Jun-2025 |
| Bug Hunting Within the Law: A Friendly Guide | https://sarthakbhingare15.medium.com/bug-hunting-within-the-law-a-friendly-guide-67c89d7a86dc?source=rss------bug_bounty-5 | Sarthak Raju Bhingare | bugs, pentesting, hacking, bug-bounty-tips, bug-bounty | 21-Jun-2025 |
| How a Simple Bookmark Earned a Two-Digit € Bug Bounty | https://medium.com/meetcyber/how-a-simple-bookmark-earned-a-two-digit-bug-bounty-0a956537e5e5?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-tips, bola, bug-bounty-writeup, idor-vulnerability, bug-bounty | 21-Jun-2025 |
| The Hacker Mindset — How to Think Like a Bug Bounty Hunter | https://su6osec.medium.com/the-hacker-mindset-how-to-think-like-a-bug-bounty-hunter-0eb96afa831e?source=rss------bug_bounty-5 | Đeepanshu | ethical-hacking, infosec, hacker, cybersecurity, bug-bounty | 21-Jun-2025 |
| When Permissions Don’t Match Reality: A Business Logic Flaw in Cloud Data Science Platforms | https://medium.com/@TakiasSec/when-permissions-dont-match-reality-a-business-logic-flaw-in-cloud-data-science-platforms-4f3d0a68fab0?source=rss------bug_bounty-5 | TakiasSec | bug-bounty-tips, ethical-hacking, bug-bounty, bug-bounty-writeup, cybersecurity | 21-Jun-2025 |
| PAN-OS CVE-2025–0133 | XSS | https://osintteam.blog/pan-os-cve-2025-0133-xss-d7ae25212005?source=rss------bug_bounty-5 | RivuDon | bug-bounty-writeup, xss-attack, cve, bug-bounty, bug-bounty-tips | 21-Jun-2025 |
| CTF Day(21) | https://medium.com/@ahmednarmer1/ctf-day-21-1609f905029b?source=rss------bug_bounty-5 | Ahmed Narmer | web-penetration-testing, web-pen-testing, ctf, bug-bounty, cybersecurity | 21-Jun-2025 |
| Uncover Hidden Endpoints with This Powerful FFUF Oneliner | https://fagun18.medium.com/uncover-hidden-endpoints-with-this-powerful-ffuf-oneliner-bf26e13805c0?source=rss------bug_bounty-5 | Mejbaur Bahar Fagun | uncover-hidden-endpoints, hacking, ffuf, bug-bounty | 21-Jun-2025 |
| How I Turned One PoC Into $100K+ in Bounties — The Story of iScan.Today | https://medium.com/@arshadkazmi42/how-i-turned-one-poc-into-100k-in-bounties-the-story-of-iscan-today-3fb5250f9198?source=rss------bug_bounty-5 | Arshad Kazmi | bug-bounty, dockerhub, bug-bounty-tool, github, iscan | 21-Jun-2025 |
| When Fintech Gets Too Trusting: How I Stumbled Upon a Full-Blown PII Leak in a Nigerian Banking API | https://medium.com/@haykeenspaul/when-fintech-gets-too-trusting-how-i-stumbled-upon-a-full-blown-pii-leak-in-a-nigerian-banking-api-73d6dbb493a5?source=rss------bug_bounty-5 | PaulHaykeens | fintech-startups, cyber-security-awareness, bug-bounty, fintech, bank-hacking | 21-Jun-2025 |
| Why Most Hackers Fail at Finding Bugs | https://medium.com/@ibtissamhammadi1/why-most-hackers-fail-at-finding-bugs-daf11b7e074b?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, web-security, freelancing, bug-bounty, cybersecurity | 21-Jun-2025 |
| httpx para Bug Bounty: Guía Completa para Detectar Subdominios y Hosts Activos | https://medium.com/@jpablo13/httpx-para-bug-bounty-gu%C3%ADa-completa-para-detectar-subdominios-y-hosts-activos-e4434cf7fd32?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, ethical-hacking, bug-bounty, infosec, cybersecurity | 20-Jun-2025 |
| The Largest Password Leak in History: Over 16 Billion Credentials Exposed | https://medium.com/@cybertechajju/the-largest-password-leak-in-history-over-16-billion-credentials-exposed-c66555bf0286?source=rss------bug_bounty-5 | CyberTechAjju | news, bug-bounty, hacking, data-breach, cybersecurity | 20-Jun-2025 |
| How to Start Bug Bounty in 2025 — Technical Guide with Tools, Tactics & Real Step | https://medium.com/@kailasv678/how-to-start-bug-bounty-in-2025-technical-guide-with-tools-tactics-real-step-ccca088f5675?source=rss------bug_bounty-5 | Kailasv | bug-bounty, bug-bounty-program, bug-bounty-writeup, bug-bounty-tips, bug-bounty-hunter | 20-Jun-2025 |
| What is Bug Bounty Hunting ️♂️ | https://su6osec.medium.com/what-is-bug-bounty-hunting-%EF%B8%8F-%EF%B8%8F-c02d24853e16?source=rss------bug_bounty-5 | Đeepanshu | web-security, bug-bounty, infosec, cybersecurity, ethical-hacking | 20-Jun-2025 |
| How You Can Use ChatGPT to Supercharge Your Bug Bounty Hunting Workflow | https://vinothdayalan.medium.com/how-you-can-use-chatgpt-to-supercharge-your-bug-bounty-hunting-workflow-e65c19021ea1?source=rss------bug_bounty-5 | Vinoth Dayalan | infosec, bug-bounty, chatgpt, ai, hacking | 20-Jun-2025 |
| puny-code,0-click account takeover | https://medium.com/@canonminibeast/puny-code-0-click-account-takeover-6345ec46a33b?source=rss------bug_bounty-5 | Canonminibeast | bug-bounty, bug-bounty-writeup, hacking, cybersecurity, account-takeover | 20-Jun-2025 |
| HTML Injection: From Discovery to Exploitation | https://medium.com/@sangpalisha/html-injection-from-discovery-to-exploitation-efe4a620acf8?source=rss------bug_bounty-5 | Isha Sangpal | html, bug-bounty, penetration-testing, cybersecurity, ethical-hacking | 20-Jun-2025 |
| How XSS and OAuth Misconfigs Steal Your Tokens | https://medium.com/@ibtissamhammadi1/how-xss-and-oauth-misconfigs-steal-your-tokens-63879240fbe2?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, web-security, cybersecurity, infosec, hacking | 20-Jun-2025 |
| Everything You Need to Know About CVE-2025–3248: Langflow RCE Vulnerability Explained | https://infosecwriteups.com/everything-you-need-to-know-about-cve-2025-3248-langflow-rce-vulnerability-explained-3ef0d5be0076?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, bug-bounty, penetration-testing, technology, tips-and-tricks | 20-Jun-2025 |
| How I Got 4 EUR for Free by Submitting “null” as a Redeem Code | https://medium.com/@banertheinrich/how-i-got-4-eur-for-free-by-submitting-null-as-a-redeem-code-257248184d28?source=rss------bug_bounty-5 | Adham Heinrich | bug-bounty, bug-bounty-writeup, cybersecurity, business-logic-bug, bug-bounty-tips | 20-Jun-2025 |
| $1,000-Value Bug: Abusing Cookie-Based Voting to Manipulate Comments at Scale | https://infosecwriteups.com/1-000-value-bug-abusing-cookie-based-voting-to-manipulate-comments-at-scale-7e3f3b672ad7?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-tips, bug-bounty-writeup, manipulation, burpsuite, bug-bounty | 20-Jun-2025 |
| Over The Wire — bandit level 10–20 | https://medium.com/@sangpalisha/over-the-wire-bandit-level-10-20-3e0ad7d5bd83?source=rss------bug_bounty-5 | Isha Sangpal | cybersecurity, bug-bounty, bash, networking, linux | 20-Jun-2025 |
| Bug Bounty report: CVE-2020–11993 | https://medium.com/@4l0neK1n9/bug-bounty-report-cve-2020-11993-e3bbca4995df?source=rss------bug_bounty-5 | Hasan Azizov | bug-bounty-writeup, bug-bounty, bug-bounty-tips, hackerone, bugs | 20-Jun-2025 |
| Log Me Maybe: When Log Files Leaked Secrets I Wasn’t Meant to See ️ | https://infosecwriteups.com/log-me-maybe-when-log-files-leaked-secrets-i-wasnt-meant-to-see-%EF%B8%8F-a3db4d2624b7?source=rss------bug_bounty-5 | Iski | cybersecurity, money, infosec, hacking, bug-bounty | 20-Jun-2025 |
| Uncovering a simple signup bug for a three-digit bounty | https://medium.com/@drhatab/uncovering-a-simple-signup-bug-for-a-three-digit-bounty-8b3314343c41?source=rss------bug_bounty-5 | Mustafa Hatab | web-security, bug-bounty, infosec, penetration-testing | 20-Jun-2025 |
| CVE-2025–0133: Reflected XSS Vulnerability in Palo Alto GlobalProtect Gateway & Portal | https://codewithvamp.medium.com/cve-2025-0133-reflected-xss-vulnerability-in-palo-alto-globalprotect-gateway-portal-028128f2f5b9?source=rss------bug_bounty-5 | Vaibhav Kumar Srivastava | palo-alto-networks, cybersecurity, cve, bug-bounty, cyber-security-awareness | 20-Jun-2025 |
| How $300 Was Earned by Exploiting Sorare’s Captain Logic Flaw | https://medium.com/h7w/how-300-was-earned-by-exploiting-sorares-captain-logic-flaw-9dbd836c315b?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, technology, tips-and-tricks, cybersecurity | 20-Jun-2025 |
| Why Chrome Desktop Should Prompt for Re-Authentication Before Viewing Passwords — A Security… | https://rv09.medium.com/why-chrome-desktop-should-prompt-for-re-authentication-before-viewing-passwords-a-security-235f202069ef?source=rss------bug_bounty-5 | RV Sharma | cyber, bug-bounty, infosec, cybersecurity, google | 20-Jun-2025 |
| $1,000 Bounty: How I Discovered a Parameter Pollution Bug That Leaked Sensitive Data | https://osintteam.blog/1-000-bounty-how-i-discovered-a-parameter-pollution-bug-that-leaked-sensitive-data-c5f240b05f5f?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, technology, penetration-testing, ethical-hacking | 20-Jun-2025 |
| Only&One Story You Need To Do 100% Perfect Bug Bounty Reconnaissance. | https://osintteam.blog/only-one-story-you-need-to-do-100-perfect-bug-bounty-reconnaissance-c5a22bbed218?source=rss------bug_bounty-5 | NnFace | hacking, bug-bounty, web-hacking, cybersecurity, bug-bounty-tips | 20-Jun-2025 |
| How a PDF File Can Expose Your Application’s Real IP (Even with CDN and WAF) | https://medium.com/@vedgeta2/how-a-pdf-file-can-expose-your-applications-real-ip-even-with-cdn-and-waf-754f4ccd6993?source=rss------bug_bounty-5 | Vedgeta | waf-bypass, bug-bounty, pentesting, cybersecurity, ethical-hacking | 20-Jun-2025 |
| Apache Serverində Gözəgörünməz Hücum: Request Smuggling və Ziddiyyətli Başlıqların Gücü | https://medium.com/@4l0neK1n9/bug-bounty-report-cve-2020-11993-e3bbca4995df?source=rss------bug_bounty-5 | Hasan Azizov | bug-bounty-writeup, bug-bounty, bug-bounty-tips, hackerone, bugs | 20-Jun-2025 |
| CTF Day(19) | https://medium.com/@ahmednarmer1/ctf-day-19-4c7f827aef02?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, bug-bounty, cybersecurity, web-pen-testing, web-penetration-testing | 19-Jun-2025 |
| Remote Code Execution via a Base64-Encoded Payload — No Login Needed | https://medium.com/@muhammadwaseem29/remote-code-execution-via-a-base64-encoded-payload-no-login-needed-81738d6ad332?source=rss------bug_bounty-5 | Muhammad Waseem | infosec, bug-bounty-tips, bug-bounty, bugs, ethical-hacking | 19-Jun-2025 |
| JavaScript Enumeration for Bug Bounty Hunters | https://medium.com/@0xkarthi/javascript-enumeration-for-bug-bounty-hunters-0e38520492e7?source=rss------bug_bounty-5 | Karthikeyan | cybersecurity, bug-bounty, javascript, coding, medium | 19-Jun-2025 |
| $33,510 Bounty: Exploiting GitLab’s Hidden Redis Injection | https://infosecwriteups.com/33-510-bounty-exploiting-gitlabs-hidden-redis-injection-c2639520331b?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, penetration-testing, bug-bounty-tips, tips-and-tricks | 19-Jun-2025 |
| How to Actually Learn Hacking in 2025–26: A Practical Guide | https://infosecwriteups.com/how-to-actually-learn-hacking-in-2025-26-a-practical-guide-65c6f057f7c6?source=rss------bug_bounty-5 | Vipul Sonule | programming, hacking, bug-bounty, ai, cybersecurity | 19-Jun-2025 |
| ️ 100 Web App Bugs You Should Be Hunting | https://infosecwriteups.com/100-web-app-bugs-you-should-be-hunting-6295f78d6880?source=rss------bug_bounty-5 | Swarnim Bandekar | penetration-testing, bug-bounty-writeup, hacking, bug-bounty, infosec | 19-Jun-2025 |
| Parameter Swap Party: When Flipping POST to GET Broke the App | https://infosecwriteups.com/parameter-swap-party-when-flipping-post-to-get-broke-the-app-9d4cf3d2de6c?source=rss------bug_bounty-5 | Iski | money, hacking, cybersecurity, bug-bounty, infosec | 19-Jun-2025 |
| Bug Bounty Course in Delhi, India [2025] | https://medium.com/@manishachaudhary_43386/bug-bounty-course-in-delhi-india-2025-cb11184d930d?source=rss------bug_bounty-5 | Manisha Chaudhary | hacking-tools, bug-bounty-tips, craw-security, hacking, bug-bounty | 19-Jun-2025 |
| PDF That Steals Data - The DocDrop Exploit | https://shahjerry33.medium.com/pdf-that-steals-data-the-docdrop-exploit-03ee20b03b87?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | cybersecurity, penetration-testing, bug-bounty, vulnerability, infosec | 19-Jun-2025 |
| When domain.com is the same as mydomain.com | https://medium.com/@yppip/when-domain-com-is-the-same-as-mydomain-com-177029a1593b?source=rss------bug_bounty-5 | Phil | bug-bounty, bug-bounty-tips, bug-bounty-writeup | 19-Jun-2025 |
| Your Kid Might Be Bypassing Screen Time App Limits on macOS Using This Trick | https://1-day.medium.com/your-kid-might-be-bypassing-screen-time-app-limits-on-macos-using-this-trick-0fed8225bf79?source=rss------bug_bounty-5 | 1day | apple, security-research, bug-bounty, apple-security, macos | 19-Jun-2025 |
| Getting Started in Bug Bounty: Tips for Beginners | https://medium.com/@sync-with-ivan/getting-started-in-bug-bounty-tips-for-beginners-71a4edee8495?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty-hunter, bug-bounty, infosec, ethical-hacking, cybersecurity | 19-Jun-2025 |
| AV & EDR Bypass Techniques (Part 2): Real-World Tricks Hackers Use to Stay Undetected | https://medium.com/@verylazytech/av-edr-bypass-techniques-part-2-real-world-tricks-hackers-use-to-stay-undetected-901a422afc11?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, penetration-testing, bug-bounty, edr, bypass | 19-Jun-2025 |
| The Mysterious /course/course/ Error — A Django Developer’s Debug Journey | https://medium.com/@tanishdewase222/the-mysterious-course-course-error-a-django-developers-debug-journey-9452702c357a?source=rss------bug_bounty-5 | Tanish Dewase | science, software-development, python, technology, bug-bounty | 19-Jun-2025 |
| How Are Bug Bounty Rewards Determined? | https://medium.com/@sync-with-ivan/how-are-bug-bounty-rewards-determined-de9d95ad712b?source=rss------bug_bounty-5 | Andrei Ivan | infosec, bug-bounty, ethical-hacking, cybersecurity, vulnerability-management | 19-Jun-2025 |
| Bug Bounty vs. Responsible Disclosure: What’s the Difference? | https://medium.com/@sync-with-ivan/bug-bounty-vs-responsible-disclosure-whats-the-difference-c66e28b57a27?source=rss------bug_bounty-5 | Andrei Ivan | responsible-disclosure, ethical-hacking, information-security, cybersecurity, bug-bounty | 19-Jun-2025 |
| ️ How I Got Acknowledged by the Government of Karnataka for Reporting a Public Data Exposure —… | https://medium.com/@uday637/%EF%B8%8F-how-i-got-acknowledged-by-the-government-of-karnataka-for-reporting-a-public-data-exposure-c7037e4a8411?source=rss------bug_bounty-5 | Uday | bug-hunting, hacking, bug-bounty, bug-hunter, bug-bounty-tips | 19-Jun-2025 |
| Bug Bounty Findings: Unauthorized Addition of Shipping Addresses and Shopping Carts via CSRF | https://infosecwriteups.com/bug-bounty-findings-unauthorized-addition-of-shipping-addresses-and-shopping-carts-via-csrf-f62d88071dd6?source=rss------bug_bounty-5 | Medusa | software-development, bug-bounty, bug-hunting, infosec, cybersecurity | 19-Jun-2025 |
| Unveiling CSRF-to-XSS and XXE in a Single Request | https://medium.com/@nocley/unveiling-csrf-to-xss-and-xxe-in-a-single-request-b3e260d5477d?source=rss------bug_bounty-5 | nocley | csrf-attack, xxe, xss-attack, bug-bounty | 19-Jun-2025 |
| Why Do Most Hackers Fail at SSRF Exploitation | https://medium.com/@ibtissamhammadi1/why-do-most-hackers-fail-at-ssrf-exploitation-540e1bd6db02?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, ssrf, dns, infosec, aws | 19-Jun-2025 |
| Cross-Origin Data Exposure via Misconfigured Jetpack Endpoint on redacted.fb.com | https://medium.com/@gourisankara357/cross-origin-data-exposure-via-misconfigured-jetpack-endpoint-on-redacted-fb-com-252f281ce74f?source=rss------bug_bounty-5 | Gouri Sankar A | cybersecurity, bug-bounty-writeup, bug-bounty, infosec | 19-Jun-2025 |
| Join HoF Apple in Just 1 Minute [Bahasa Indonesia] | https://ronafebriana.medium.com/join-hof-apple-in-just-1-minute-bahasa-indonesia-7fa016f1a017?source=rss------bug_bounty-5 | Rona Febriana | bug-hunting, apple, rona-febriana, bug-bounty, hall-of-fame | 19-Jun-2025 |
| Hacking APIs: Exploit Insecure Deserialization | https://iaraoz.medium.com/hacking-apis-exploit-insecure-deserialization-10335afccde6?source=rss------bug_bounty-5 | Israel Aráoz Severiche | hacking, bug-bounty, owasp, appsec, cybersecurity | 19-Jun-2025 |
| ✨ Bug Bounty Checklist — From Recon to Exploitation ⚔️ | https://medium.com/@0b1d1/bug-bounty-checklist-from-recon-to-exploitation-%EF%B8%8F-a8374b2a25ea?source=rss------bug_bounty-5 | 0b1d1 | bug-bounty-program, bug-bounty, bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup | 19-Jun-2025 |
| How I Found a Improper Input Validation in Minutes! | https://medium.com/@fuad_aliyev/how-i-found-a-bug-in-minutes-67b55c529ed9?source=rss------bug_bounty-5 | Fuad Aliyev | infosec, bug-bounty, bug-bounty-writeup, cybersecurity | 19-Jun-2025 |
| XSS Meets IDOR: A Double Vulnerability Story on a Learning Platform | https://hettt.medium.com/xss-meets-idor-a-double-vulnerability-story-on-a-learning-platform-aed3157759e0?source=rss------bug_bounty-5 | Het Patel | xss-vulnerability, bug-bounty, bugbounty-tips, bugs, bug-bounty-writeup | 19-Jun-2025 |
| How to Use Subfinder for Bug Bounty: Complete Guide with Examples and Advanced Tips | https://medium.com/@jpablo13/how-to-use-subfinder-for-bug-bounty-complete-guide-with-examples-and-advanced-tips-779596c456bc?source=rss------bug_bounty-5 | JPablo13 | infosec, bug-bounty, ethical-hacking, penetration-testing, cybersecurity | 18-Jun-2025 |
| Multi-Step Process with No Access Control on One Step | https://infosecwriteups.com/multi-step-process-with-no-access-control-on-one-step-a17dba1a4415?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, broken-access-control, privilege-escalation, bypass-access-control, bug-bounty-tips | 18-Jun-2025 |
| How I Found a Location Spoofing Vulnerability in a Chrome Extension | https://medium.com/@FufuFaf1/how-i-found-a-location-spoofing-vulnerability-in-a-chrome-extension-6b53c56548ad?source=rss------bug_bounty-5 | MostReal | cybersecurity, bug-bounty-tips, bug-bounty-writeup, bug-bounty, extension | 18-Jun-2025 |
| Click Account Takeover (ATO) | https://medium.com/@anandrishav2228/click-account-takeover-ato-532065b4696d?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, ethical-hacking, hacking, cybersecurity, money | 18-Jun-2025 |
| BI.ZONE Bug Bounty Platform | https://medium.com/@abhirupkonwar04/bi-zone-bug-bounty-platform-c1c3a6619696?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-program, penetration-testing, bug-bounty, pentesting, bug-bounty-hunter | 18-Jun-2025 |
| CTF Day(18) | https://medium.com/@ahmednarmer1/ctf-day-18-36150509f6cc?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, web-penetration-testing, web-pen-testing, ctf, cybersecurity | 18-Jun-2025 |
| When Session Fixation Meets Session Confusion: A Case of Cross-User Control | https://infosecwriteups.com/when-session-fixation-meets-session-confusion-a-case-of-cross-user-control-bb2cd0d478e8?source=rss------bug_bounty-5 | Erkan Kavas | authorization, bug-bounty-writeup, bug-bounty, bug-bounty-tips, ethical-hacking | 18-Jun-2025 |
| How I hacked a State Results NIC portal with a simple SQL injection | https://infosecwriteups.com/how-i-hacked-a-state-results-nic-portal-with-a-simple-sql-injection-e095725a091e?source=rss------bug_bounty-5 | Adithya M S | sql-injection, blind-sql-injection, web-security, bug-bounty | 18-Jun-2025 |
| How I Hacked Accounts Using Host Header Injection in Password Reset Link — $$$$ | https://infosecwriteups.com/how-i-hacked-accounts-using-host-header-injection-in-password-reset-link-2774431eed89?source=rss------bug_bounty-5 | Pratik Dabhi | pratikdabhi, bug-bounty, pentesting, bugcrow, hackerone | 18-Jun-2025 |
| Signed, Sealed, Delivered: How I Replayed Signed URLs to Steal Everything ✍️ | https://infosecwriteups.com/signed-sealed-delivered-how-i-replayed-signed-urls-to-steal-everything-%EF%B8%8F-df28cbe93b34?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, bug-bounty, hacking, money | 18-Jun-2025 |
| Bounty Hacker | Try Hack Me | Complete Walkthrough | https://medium.com/@avrodipjoy/bounty-hacker-try-hack-me-complete-walkthrough-1930650a0d0d?source=rss------bug_bounty-5 | Avrodip Joy | tryhackme, tryhackme-walkthrough, bug-bounty-writeup, bug-bounty, cybersecurity | 18-Jun-2025 |
| DarkFuzz: The Ultimate Fuzzing Powerhouse for Web Security | https://medium.com/@muhammadkhalidbinwalid/darkfuzz-the-ultimate-fuzzing-powerhouse-for-web-security-963a8b34e349?source=rss------bug_bounty-5 | Muhammad Khalid Bin Walid | bug-bounty, technology, cybersecurity, tools-and-resources, security | 18-Jun-2025 |
| From LFI to RCE via /proc/self/environ – Shell Access via Headers | https://medium.com/@zoningxtr/from-lfi-to-rce-via-proc-self-environ-shell-access-via-headers-1f22e18c65db?source=rss------bug_bounty-5 | Zoningxtr | application-security, cybersecurity, web-development, bug-bounty, penetration-testing | 18-Jun-2025 |
| DNS Misconfig + Web Cache Deception → Sensitive Data Exposure | https://medium.com/h7w/dns-misconfig-web-cache-deception-sensitive-data-exposure-6a243542f545?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, hacking, tips-and-tricks, bug-bounty, technology | 18-Jun-2025 |
| Exposure Protocol: Information Disclosure in the Wild [Part 3] | https://infosecwriteups.com/exposure-protocol-information-disclosure-in-the-wild-part-3-2bea07098768?source=rss------bug_bounty-5 | Aditya Bhatt | bug-bounty-writeup, disclosure, bug-bounty-tips, bug-bounty, cybersecurity | 18-Jun-2025 |
| HTTP Proxy + Host Header Injection → Account Takeover | https://osintteam.blog/http-proxy-host-header-injection-account-takeover-3cac52cec817?source=rss------bug_bounty-5 | Monika sharma | hacking, tips-and-tricks, bug-bounty, technology, penetration-testing | 18-Jun-2025 |
| I HIJACKED ADMIN VIA OAUTH (PortSwigger Lab Walkthrough) | https://medium.com/@RootPwned/i-hijacked-admin-via-oauth-portswigger-lab-walkthrough-05f3f22925d6?source=rss------bug_bounty-5 | Sumanth Yerranagula | bug-bounty, hacking, ctf, ethical-hacking, cybersecurity | 18-Jun-2025 |
| I Earned $7,000 from Bug Bounties — But $0 from My Startup Idea | https://medium.com/@vivekps143/i-earned-7-000-from-bug-bounties-but-0-from-my-startup-idea-5dd02262b2f7?source=rss------bug_bounty-5 | Vivek PS | bug-bounty, programming, cybersecurity, startup-life, startup | 18-Jun-2025 |
| From Intended to Silently Fixed: My Investigation into Instagram’s Email Verification Oversight | https://medium.com/@vyomjaal/from-intended-to-silently-fixed-my-investigation-into-instagrams-email-verification-oversight-b3fc467b5d15?source=rss------bug_bounty-5 | Vyom Jaal | facebook, bug-bounty, social-media, instagram | 18-Jun-2025 |
| “Unfiltered Talk” — How Target Chatbot Let Me Redecorate Their Website | https://systemweakness.com/unfiltered-talk-how-target-chatbot-let-me-redecorate-their-website-693150c9a9e5?source=rss------bug_bounty-5 | Shah kaif | owasp-top-10, bug-bounty-tips, bug-bounty, html-injection, ethical-hacking | 18-Jun-2025 |
| AV & EDR Bypass Techniques (Part 1): Real-World Tricks Hackers Use to Stay Undetected | https://medium.com/@verylazytech/av-edr-bypass-techniques-part-1-real-world-tricks-hackers-use-to-stay-undetected-12bfbc930fbb?source=rss------bug_bounty-5 | Very Lazy Tech | antivirus, bug-bounty, penetration-testing, edr, ethical-hacking | 18-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part 1 | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-1-6229d82aa4b6?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-technology, threat-modeling, infosec, bug-bounty, cybersecurity | 18-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part 14 | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-14-82007437261b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, ci-cd-pipeline, cybersecurity, information-technology | 18-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-e21f99db1ad8?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, cybersecurity, information-technology, bug-bounty, infosec | 18-Jun-2025 |
| The Critical Vulnerability That “Didn’t Exist” — How Certifix “Solved” the Issue by Denial | https://medium.com/@antonenko.arsenii/the-critical-vulnerability-that-didnt-exist-how-certifix-solved-the-issue-by-denial-7075ac37fec5?source=rss------bug_bounty-5 | arsenii9 | bug-bounty, tech-ethics, informationsecuritypolicy, cybersecurity | 18-Jun-2025 |
| Part 4: Exploiting Broken Auth — How I Got In Without a Password | https://medium.com/@TraceX0/part-4-exploiting-broken-auth-how-i-got-in-without-a-password-978d5e3be2b3?source=rss------bug_bounty-5 | TraceX0 | cybersecurity, bug-bounty, owasp, ethical-hacking, api-security | 18-Jun-2025 |
| Weekly Data Breach Statistics (June 10, 2025 — June 17, 2025) | https://medium.com/@alexandrevandammepro/weekly-data-breach-statistics-june-10-2025-june-17-2025-7ec4eccef918?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, infostealer, soc, bug-bounty, cybersecurity | 18-Jun-2025 |
| Bug Bounty Blueprint 2025: Real Method to Land Your First Payout (No Fluff) | https://medium.com/@rishabhshri08/bug-bounty-blueprint-2025-real-method-to-land-your-first-payout-no-fluff-b0e4aa2c28dd?source=rss------bug_bounty-5 | Rishabh Shrivastava | bug-bounty, cybersecurity-tips, beginner-hacking-tips, ethical-hacking-2025, web-app-security | 18-Jun-2025 |
| I PWNED A STOCK CHECKER USING ;whoami IN A POST REQUEST | https://medium.com/@RootPwned/i-pwned-a-stock-checker-using-whoami-in-a-post-request-099a5ad36fe5?source=rss------bug_bounty-5 | Sumanth Yerranagula | cybersecurity, ethical-hacking, ctf, hacking, bug-bounty | 18-Jun-2025 |
| Day 3/100: Understanding Ports | https://0x595.medium.com/day-3-100-understanding-ports-b13c313ff695?source=rss------bug_bounty-5 | 0X595 | cybersecurity, future, tryhackme, bug-bounty, networking | 18-Jun-2025 |
| Detecting and Exploiting Business Logic Flaws in Real Web Apps | https://cyberw1ng.medium.com/detecting-and-exploiting-business-logic-flaws-in-real-web-apps-d6fda7397b55?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, cybersecurity, programming, technology | 18-Jun-2025 |
| The “So, What Now?” Tool for Pentesting: An Update on My Pentesting Assistant. | https://medium.com/@richierodney434/the-so-what-now-tool-for-pentesting-an-update-on-my-pentesting-assistant-ac69f7311420?source=rss------bug_bounty-5 | Glenn Rodney | hacking, penetration-testing, bug-bounty, infosec, cybersecurity | 18-Jun-2025 |
| Cómo Usar Subfinder para Bug Bounty: Guía Completa con Ejemplos y Tips Avanzados | https://medium.com/@jpablo13/c%C3%B3mo-usar-subfinder-para-bug-bounty-gu%C3%ADa-completa-con-ejemplos-y-tips-avanzados-d9260eeb06a1?source=rss------bug_bounty-5 | JPablo13 | cybersecurity, ethical-hacking, bug-bounty, penetration-testing, infosec | 17-Jun-2025 |
| AI MEET HACKING — KALI GPT ⚠️ | https://medium.com/@patilvedant9112/ai-meet-hacking-kali-gpt-%EF%B8%8F-0d726e73b733?source=rss------bug_bounty-5 | Vedant Patil | kali-linux, cybersecurity, ethical-hacking, ai-in-cyber-security, bug-bounty | 17-Jun-2025 |
| Proxy Misconfiguration + SSRF: How I Chained Two Bugs Into Internal Admin Panel Access | https://infosecwriteups.com/proxy-misconfiguration-ssrf-how-i-chained-two-bugs-into-internal-admin-panel-access-cf0e43bf79e4?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tips-and-tricks, technology, bug-bounty, hacking | 17-Jun-2025 |
| Remote Code Execution in Pentaho Business Server | https://infosecwriteups.com/remote-code-execution-in-pentaho-business-server-d5abb6529f73?source=rss------bug_bounty-5 | Monika sharma | hacking, penetration-testing, tips-and-tricks, bug-bounty, technology | 17-Jun-2025 |
| CTF Day(17) | https://medium.com/@ahmednarmer1/ctf-day-17-24ec4fd7a7e5?source=rss------bug_bounty-5 | Ahmed Narmer | web-penetration-testing, bug-bounty, ctf, web-pen-testing, cybersecurity | 17-Jun-2025 |
| Server‑Side Parameter Pollution: Hijacking Query Strings for Admin‑Level Access | https://osintteam.blog/server-side-parameter-pollution-hijacking-query-strings-for-admin-level-access-c4048a15974f?source=rss------bug_bounty-5 | Bash Overflow | server-side-pollution, http-parameter-pollution, internal-api-exploitation, bug-bounty-tips, bug-bounty | 17-Jun-2025 |
| Bug Bounty: The Harsh Truth (My Story) | https://medium.com/@0xkarthi/bug-bounty-the-harsh-truth-my-story-a0858f984344?source=rss------bug_bounty-5 | Karthikeyan | cybersecurity, coding, hacking, bug-bounty, medium | 17-Jun-2025 |
| Investigating Relay Scams: What’s New in Your Spam? | https://rishikadesai.medium.com/investigating-relay-scams-whats-new-in-your-spam-ba05259af985?source=rss------bug_bounty-5 | Rishika Desai | spam-detection, phishing-email, cybersecurity, bug-bounty, phishing | 17-Jun-2025 |
| Forbidden but Not Forgotten: How an HTTP 403 Made Me a Superadmin | https://infosecwriteups.com/forbidden-but-not-forgotten-how-an-http-403-made-me-a-superadmin-6f769c4a9952?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, bug-bounty, infosec, money | 17-Jun-2025 |
| Simple XXE Vulnerability POC | https://itsravikiran25.medium.com/simple-xxe-vulnerability-poc-1880476d3882?source=rss------bug_bounty-5 | ravikiran | xxe, xxe-injection, vapt, bug-bounty | 17-Jun-2025 |
| Recon: FOFA və Shodan ilə Dorking (Bölüm 3) | https://zeynalxan.medium.com/recon-fofa-v%C9%99-shodan-il%C9%99-dorking-b%C3%B6l%C3%BCm-3-637ef1684ae5?source=rss------bug_bounty-5 | Zeynalxan Quliyev | recon, shodan-dorking, osint, bug-bounty, fofa-dorking | 17-Jun-2025 |
| Sneaking Past Digital Gates: The Magic of Double URL Encoding | https://medium.com/@minto258/sneaking-past-digital-gates-the-magic-of-double-url-encoding-304333342084?source=rss------bug_bounty-5 | Rahimuddin Alrashel | cybersecurity, bug-bounty, research, earn-money-online, hacking | 17-Jun-2025 |
| How I Found an Open Redirect in a Login Endpoint (and Why It Matters) | https://medium.com/@TakiasSec/how-i-found-an-open-redirect-in-a-login-endpoint-and-why-it-matters-49afaf7109df?source=rss------bug_bounty-5 | TakiasSec | cybersecurity, bug-bounty, bug-bounty-tips, bug-bounty-writeup, hacking | 17-Jun-2025 |
| One Click to Collapse: Chaining Logic Flaw + CSRF to Take Down a SaaS Organization | https://canitey.medium.com/one-click-to-collapse-chaining-logic-flaw-csrf-to-take-down-a-saas-organization-7d58736fc6f9?source=rss------bug_bounty-5 | CANITEY | bug-bounty-writeup, bug-bounty, csrf, cybersecurity, bug-bounty-tips | 17-Jun-2025 |
| I Hacked an Account Just by Tweaking an Email (OAuth Implicit Flow Bypass) | https://medium.com/@RootPwned/i-hacked-an-account-just-by-tweaking-an-email-oauth-implicit-flow-bypass-e80bac47f19b?source=rss------bug_bounty-5 | Sumanth Yerranagula | bug-bounty, cybersecurity, ethical-hacking, hacking, ctf | 17-Jun-2025 |
| Best AI-powered chat assistants for bug hunters | https://medium.com/@loyalonlytoday/best-ai-powered-assistants-for-bug-hunters-52d01c95802c?source=rss------bug_bounty-5 | loyalonlytoday | hacking, cybersecurity, bug-bounty, ai, pentesting | 17-Jun-2025 |
| How to Hack Any WAF with Just One cURL Command | https://medium.com/@ibtissamhammadi1/how-to-hack-any-waf-with-just-one-curl-command-7f91ffa9c942?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, bug-bounty, penetration-testing, waf-bypass, cybersecurity | 17-Jun-2025 |
| Responsible Disclosure: Exposed Credentials in goverment site | https://medium.com/@dhxrxx/responsible-disclosure-exposed-credentials-in-goverment-site-61245f1c29f4?source=rss------bug_bounty-5 | Dharanis | government, hacking, vulnerability, bug-bounty, india | 17-Jun-2025 |
| Easy Custom Headers For Your Bug Bounty Tooling | https://medium.com/@jaredutahusa/easy-custom-headers-for-your-bug-bounty-tooling-d4620a01e313?source=rss------bug_bounty-5 | t3ngu42 | bug-bounty, owasp, web-app-security, burp-suite-pro, hackerone | 17-Jun-2025 |
| JavaScript, JWTs and the Key That Shouldn’t Exist | https://medium.com/@adityabhatt3010/javascript-jwts-and-the-key-that-shouldnt-exist-d97c01d0ce9e?source=rss------bug_bounty-5 | Aditya Bhatt | bug-bounty-tips, cybersecurity, bug-bounty, javascript, jwt | 17-Jun-2025 |
| I HACKED THE ADMIN WITH A SOCIAL LOGIN | https://medium.com/@RootPwned/i-hacked-the-admin-with-a-social-login-5d7f496c51b8?source=rss------bug_bounty-5 | Sumanth Yerranagula | ethical-hacking, cybersecurity, bug-bounty, ctf, hacking | 17-Jun-2025 |
| My First P1 on VDP program — Subdomain Takeover That Hit Critical | https://ousski.medium.com/my-first-p1-on-vdp-program-subdomain-takeover-that-hit-critical-c043565eb469?source=rss------bug_bounty-5 | Ousski | bug-bounty-writeup, bug-bounty-tips, hacking, bug-bounty | 17-Jun-2025 |
| The Ultimate Guide to Default Credentials, Custom Wordlists & Hash Cracking Techniques | https://medium.com/@verylazytech/the-ultimate-guide-to-default-credentials-custom-wordlists-hash-cracking-techniques-66e64cbebd4e?source=rss------bug_bounty-5 | Very Lazy Tech | cracking, brute-force, wordlist, penetration-testing, bug-bounty | 17-Jun-2025 |
| JavaScript, JWTs and the Key That Shouldn’t Exist | https://javascript.plainenglish.io/javascript-jwts-and-the-key-that-shouldnt-exist-d97c01d0ce9e?source=rss------bug_bounty-5 | Aditya Bhatt | bug-bounty-tips, cybersecurity, bug-bounty, javascript, jwt | 17-Jun-2025 |
| HackTheBox “Down” Walkthrough | TheHiker | https://medium.com/@The_Hiker/hackthebox-down-walkthrough-thehiker-189802e3e5b8?source=rss------bug_bounty-5 | TheHiker | hacking, hackthebox-writeup, hackthebox, hackthebox-walkthrough, bug-bounty | 17-Jun-2025 |
| How to Run SQLMAP from Anywhere in Windows CMD (Complete Setup Guide) | https://medium.com/@devanshpatel930/how-to-run-sqlmap-from-anywhere-in-windows-cmd-complete-setup-guide-eee9d61f6303?source=rss------bug_bounty-5 | Zuri | sqlinjectiontypes, bug-bounty-tips, bug-bounty, vapt, cybersecurity | 16-Jun-2025 |
| HUNTR — Bug Bounty Platform for AI/ML | https://medium.com/meetcyber/huntr-bug-bounty-platform-for-ai-ml-c0e4413a7bec?source=rss------bug_bounty-5 | AbhirupKonwar | artificial-intelligence, bug-bounty, bug-bounty-program, bug-bounty-tips, machine-learning | 16-Jun-2025 |
| Discovering SQLMC: A Lightweight Tool for Fast SQL Injection Discovery | https://infosecwriteups.com/discovering-sqlmc-a-lightweight-tool-for-fast-sql-injection-discovery-a4042040a932?source=rss------bug_bounty-5 | Yamini Yadav | sql-tool, sql-injection, cybersecurity, penetration-testing, bug-bounty | 16-Jun-2025 |
| Advanced Bug Bounty Recon Playbook (2025 Edition) — PART 2 | https://medium.com/infosec-ninja/advanced-bug-bounty-recon-playbook-2025-edition-part-2-39faaf2b7fc2?source=rss------bug_bounty-5 | Bl@ckC!pH3r | bug-bounty | 16-Jun-2025 |
| SIA Bug Bounty Program: Hunt Bugs, Earn Rewards, and Become a Community Legend! | https://medium.com/@sianexxglobal/sia-bug-bounty-program-hunt-bugs-earn-rewards-and-become-a-community-legend-100b294f4536?source=rss------bug_bounty-5 | SIANEXX | blockchain, ai, crypto, bug-bounty, web3 | 16-Jun-2025 |
| Token Tunnels: How Misused Refresh Tokens Let Me Hijack Sessions Forever ️ | https://infosecwriteups.com/token-tunnels-how-misused-refresh-tokens-let-me-hijack-sessions-forever-%EF%B8%8F-de63e1adb8a3?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, money, bug-bounty, hacking | 16-Jun-2025 |
| How I Leaked Data of Cryptocurreny Human Proofing Site. | https://medium.com/meetcyber/how-i-leaked-data-of-cryptocurreny-human-proofing-site-47b1bc53943c?source=rss------bug_bounty-5 | NnFace | bug-bounty, bug-bounty-tips, hacking, cybersecurity, bug-bounty-writeup | 16-Jun-2025 |
| How a Simple Redirect Led to a $550 XSS Vulnerability | https://infosecwriteups.com/how-a-simple-redirect-led-to-a-550-xss-vulnerability-b3e0ff045607?source=rss------bug_bounty-5 | Ehtesham Ul Haq | penetration-testing, web-app-security, bug-bounty, writeup, xss-attack | 16-Jun-2025 |
| $$ Mass Hunting with FOFA Dorking | https://infosecwriteups.com/mass-hunting-with-fofa-dorking-ad733f90a49e?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, fofa, google, hacking, dorking | 16-Jun-2025 |
| How I Leaked Data of Cryptocurrency Human Proofing Site. | https://medium.com/meetcyber/how-i-leaked-data-of-cryptocurreny-human-proofing-site-47b1bc53943c?source=rss------bug_bounty-5 | NnFace | bug-bounty, bug-bounty-tips, hacking, cybersecurity, bug-bounty-writeup | 16-Jun-2025 |
| chaos: a fast subdomain finder | https://medium.com/@loyalonlytoday/chaos-find-subdomains-easily-5742dc6cd24c?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, penetration-testing, hacking, bug-bounty-tips, cybersecurity | 16-Jun-2025 |
| Part 12: BOLA Detection in Mobile Apps and Single-Page Applications (SPAs) | https://medium.com/@narendarlb123/part-12-bola-detection-in-mobile-apps-and-single-page-applications-spas-69c0843b35b4?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, bug-bounty, information-technology, infosec | 16-Jun-2025 |
| ⚠️ Part 11: Common Misconceptions and Pitfalls When Testing for BOLA | https://medium.com/@narendarlb123/%EF%B8%8F-part-11-common-misconceptions-and-pitfalls-when-testing-for-bola-a83218fbbbcc?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, bug-bounty, ai, cybersecurity | 16-Jun-2025 |
| How I Found 5+ HackerOne Vulnerabilities (Legally) | https://medium.com/@ibtissamhammadi1/how-i-found-5-hackerone-vulnerabilities-legally-65ebb95b9826?source=rss------bug_bounty-5 | Ibtissam hammadi | hackerone, infosec, bug-bounty, cybersecurity, ethical-hacking | 16-Jun-2025 |
| My Worst Day in Hunting bugs | Mejbankadir |Mejbankadir — Ethical Hacker | SMH Tech — Mejbankadir. | https://medium.com/@mejbankadir/my-worst-day-in-hunting-bugs-mejbankadir-mejbankadir-ethical-hacker-smh-tech-mejbankadir-752a443e7f14?source=rss------bug_bounty-5 | Mejbankadir | smh-tech, ethical-hacking, mejban-kadir, bug-bounty | 16-Jun-2025 |
| How I Found A JWT Token Vulnerability that Led to Full Account Takeover | https://infosecwriteups.com/how-i-found-a-jwt-token-vulnerability-that-led-to-full-account-takeover-a2b6385b7c5c?source=rss------bug_bounty-5 | Umanhonlen Gabriel | bug-bounty, vulnerability, penetration-testing, hacker, web-security | 16-Jun-2025 |
| From Nobody to Noticed: 108 Days to Change My Life with Code, Cybersecurity & Web3 | https://medium.com/@thebugbountyhunter151/from-nobody-to-noticed-108-days-to-change-my-life-with-code-cybersecurity-web3-73532f253374?source=rss------bug_bounty-5 | Fury | web3-development, crypto, cybersecurity, blockchain-development, bug-bounty | 16-Jun-2025 |
| HTTP vs HTTPS: The Hacker’s Perspective | https://medium.com/@0xYooZy/http-vs-https-the-hackers-perspective-1cfe3e0a9c7e?source=rss------bug_bounty-5 | YooZy | https, hacking, infose, networking, bug-bounty | 16-Jun-2025 |
| Exposure Protocol: Information Disclosure in the Wild [Part 2] | https://infosecwriteups.com/exposure-protocol-information-disclosure-in-the-wild-part-2-e6f4f9e21584?source=rss------bug_bounty-5 | Aditya Bhatt | burpsuite, bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty | 16-Jun-2025 |
| Day 1/100: How the Web Works (Before You Hack It) | https://0x595.medium.com/day-1-100-how-the-web-works-before-you-hack-it-bdaf7b2eca98?source=rss------bug_bounty-5 | 0X595 | infosecurity, cybersecurity, bug-bounty, web3, info-sec-writeups | 16-Jun-2025 |
| CROSS SITE REQUEST FORGERY — CSRF | https://medium.com/@priyachandana99/cross-site-request-forgery-csrf-7c5dec4273d2?source=rss------bug_bounty-5 | Chandana Priya | csrf, bug-bounty, cybersecurity, security, threat-hunting | 16-Jun-2025 |
| Getting Started in Bug Bounty Hunting in 2025: A Practical Guide for Beginners | https://medium.com/@rishabhshri08/getting-started-in-bug-bounty-hunting-in-2025-a-practical-guide-for-beginners-247d35d31939?source=rss------bug_bounty-5 | Rishabh Shrivastava | beginners-guide, cybersecurity, ethical-hacking, web-app-security, bug-bounty | 16-Jun-2025 |
| DNS: The Underestimated Attack Surface in Networking | https://medium.com/h7w/dns-the-underestimated-attack-surface-in-networking-b418f8ced713?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, bug-bounty, ethical-hacking, networking, hacking | 16-Jun-2025 |
| One Bug Leads to Two Bounties: The Simple Trick That Could Make You Rich | https://medium.com/@mahdisalhi0500/one-bug-leads-to-two-bounties-the-simple-trick-that-could-make-you-rich-46bb1107c98c?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | cybersecurity, hacking, bug-bounty-tips, penetration-testing, bug-bounty | 16-Jun-2025 |
| Reflected XSS Exposed: How a Simple Query Parameter Exposed Informatica’s | https://osintteam.blog/reflected-xss-exposed-how-a-simple-query-parameter-exposed-informaticas-6d5b495d9fd6?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tips-and-tricks, bug-bounty, technology, hacking | 16-Jun-2025 |
| Fuzzing Hidden HTTP Methods for Admin Access | https://osintteam.blog/fuzzing-hidden-http-methods-for-admin-access-ff83f3db6083?source=rss------bug_bounty-5 | Monika sharma | hacking, bug-bounty-tips, penetration-testing, technology, bug-bounty | 16-Jun-2025 |
| Good Recon, Easy XSS — A Simple Reflected Find in Online Games Platform | https://medium.com/@alkaptonurea/good-recon-easy-xss-a-simple-reflected-find-in-online-games-platform-1f51516537ed?source=rss------bug_bounty-5 | Waleed Osama | bug-bounty, xss-attack, penetration-testing, hacking, xss-vulnerability | 15-Jun-2025 |
| CTF Day(14) | https://medium.com/@ahmednarmer1/ctf-day-14-92ac971b0139?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, web-penetration-testing, ctf, web-pen-testing, bug-bounty | 15-Jun-2025 |
| Oauth2 Misconfig and AccessToken Leakage leads to Full Account Takeover | https://medium.com/@0xRedFox29/oauth2-misconfig-and-accesstoken-leakage-leads-to-full-account-takeover-b1c7333e599d?source=rss------bug_bounty-5 | 0xRedFox29 | bug-bounty-writeup, red-team-security, bug-bounty-tips, bug-bounty, cybersecurity | 15-Jun-2025 |
| CTF Day(15) | https://medium.com/@ahmednarmer1/ctf-day-15-8cb969b06d79?source=rss------bug_bounty-5 | Ahmed Narmer | ctf, web-pen-testing, web-penetration-testing, cybersecurity, bug-bounty | 15-Jun-2025 |
| IDOR Vulnerability Case Study: Real Bug Bounty Walkthrough on Broken Access Control | https://hackersatty.medium.com/idor-vulnerability-case-study-real-bug-bounty-walkthrough-on-broken-access-control-172e116bc733?source=rss------bug_bounty-5 | hackersatty | vulnerability, bug-bounty-writeup, broken-access-control, idor-vulnerability, bug-bounty | 15-Jun-2025 |
| CTF Day(16) | https://medium.com/@ahmednarmer1/ctf-day-16-ebb36a6cb1ee?source=rss------bug_bounty-5 | Ahmed Narmer | web-penetration-testing, web-pen-testing, cyber, ctf, bug-bounty | 15-Jun-2025 |
| $10,000 Authentication Bypass at Uber | https://infosecwriteups.com/10-000-authentication-bypass-at-uber-c091c7733662?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tips-and-tricks, technology, bug-bounty, hacking | 15-Jun-2025 |
| Subdomain Takeover in the Age of SaaS: Going Beyond CNAMEs | https://infosecwriteups.com/subdomain-takeover-in-the-age-of-saas-going-beyond-cnames-62cff97b0d0e?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, hacking, penetration-testing, tips-and-tricks, technology | 15-Jun-2025 |
| I Found 50+ Exploitable Devices in 1 Hour Using Shodan Dorking | https://infosecwriteups.com/i-found-50-exploitable-devices-in-1-hour-using-shodan-dorking-49e825ca0f3e?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, hacking, programming, bug-bounty, technology | 15-Jun-2025 |
| A classic file based IDOR on a government institute application portal | https://infosecwriteups.com/a-classic-file-based-idor-on-a-government-institute-application-portal-b9f2b1d73035?source=rss------bug_bounty-5 | Adithya M S | vulnerability-assessment, idor, bug-bounty, ethical-hacking, web-security | 15-Jun-2025 |
| How To Find Your 1st Bug For Bug Bounty Hunters (Step-by-Step Guide) — Guaranteed Result | https://infosecwriteups.com/how-to-find-your-1st-bug-for-bug-bounty-hunters-step-by-step-guide-guaranteed-result-fd80642a6b7b?source=rss------bug_bounty-5 | Vipul Sonule | technology, bug-bounty, cybersecurity, programming, hacking | 15-Jun-2025 |
| Lab: Exploiting server-side parameter pollution in a REST URL | https://infosecwriteups.com/lab-exploiting-server-side-parameter-pollution-in-a-rest-url-97396fd4e958?source=rss------bug_bounty-5 | Mukilan Baskaran | cybersecurity, api, api-security, bug-bounty, infosec | 15-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-4da6086dd356?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | owasp-top-10, cybersecurity, bug-bounty, ai, infosec | 15-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-81f1bbfb326a?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, bug-bounty, owasp, ai, infosec | 15-Jun-2025 |
| Part 7: Bug Bounty Write-Up Strategies for BOLA | https://medium.com/@narendarlb123/part-7-bug-bounty-write-up-strategies-for-bola-435f42bc218f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, ai, infosec, bug-bounty, owasp | 15-Jun-2025 |
| naabu: powerful portscanning tool for bug hunters | https://medium.com/@loyalonlytoday/naabu-powerful-portscanning-tool-for-bug-hunters-758860a6526b?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, web-security, bug-bounty-tips, bug-bounty, port-scanning | 15-Jun-2025 |
| Fuzzing Like a Ghost: My Misadventures with FFUF, Tor and the Elusive .onion | https://medium.com/@minto258/fuzzing-like-a-ghost-my-misadventures-with-ffuf-tor-and-the-elusive-onion-dfd531f05cb8?source=rss------bug_bounty-5 | Rahimuddin Alrashel | research, earn-money-online, cybersecurity, bug-bounty, hacking | 15-Jun-2025 |
| ☁️ Cloudy With a Chance of Secrets: How Terraform State Files Exposed the Infrastructure ️ | https://infosecwriteups.com/%EF%B8%8F-cloudy-with-a-chance-of-secrets-how-terraform-state-files-exposed-the-infrastructure-%EF%B8%8F-c78bd156a4f4?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, money, bug-bounty, hacking | 15-Jun-2025 |
| Mastering XSS: How I Turned Bugs into with Real Bug Bounty Finds! | https://krishna-cyber.medium.com/mastering-xss-how-i-turned-bugs-into-with-real-bug-bounty-finds-92a6efc0ef69?source=rss------bug_bounty-5 | Krish_cyber | ethical-hacking, hacking, infosec-write-ups, bug-bounty, xss-attack | 15-Jun-2025 |
| XML-RPC Open, phpinfo() Public — But They Came to Hire from My College | https://aiwolfie.medium.com/xml-rpc-open-phpinfo-public-but-they-came-to-hire-from-my-college-975acdc04f8c?source=rss------bug_bounty-5 | AIwolfie | ethical-hacking, bug-bounty, website, hacking, wordpress | 15-Jun-2025 |
| Log Snare Write-Up: Hacking Your Way to Another Org’s Admin Panel | https://medium.com/@Zeroo_sec/log-snare-write-up-hacking-your-way-to-another-orgs-admin-panel-219499da8a1e?source=rss------bug_bounty-5 | ZEROSEC | idor-vulnerability, access-control, ctf-writeup, bug-bounty | 15-Jun-2025 |
| The Dark Side of Public Cloud Networking | https://medium.com/h7w/the-dark-side-of-public-cloud-networking-9073a5a2c36a?source=rss------bug_bounty-5 | Monika sharma | technology, tips-and-tricks, hacking, penetration-testing, bug-bounty | 15-Jun-2025 |
| Shodan Dorks for OSINT, Recon, and Bug Bounty | https://osintteam.blog/shodan-dorks-for-osint-recon-and-bug-bounty-a01832a0fbce?source=rss------bug_bounty-5 | Bl@ckC!pH3r | bug-bounty, dorks, shodan, reconnaissance, osint | 15-Jun-2025 |
| How LinkedIn Exposed Millions of Email Addresses via Voyager API | https://osintteam.blog/how-linkedin-exposed-millions-of-email-addresses-via-voyager-api-bc09140625b9?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, penetration-testing, bug-bounty-tips, tips-and-tricks, technology | 15-Jun-2025 |
| Subdomain Enumeration with Sublist3r: Uncovering the Hidden Layers | https://medium.com/@0xYooZy/subdomain-enumeration-with-sublist3r-uncovering-the-hidden-layers-7b7b83e9f238?source=rss------bug_bounty-5 | YooZy | infosec, bug-bounty-tips, bug-bounty, cybersecurity, hacking-tools | 15-Jun-2025 |
| How I Chained Recon and IDOR to Access 100's of Credit Cards | https://medium.com/@XCriminal/how-i-chained-recon-and-idor-to-access-100s-of-credit-cards-0ca50eb82a74?source=rss------bug_bounty-5 | Bhagavan Bollina | bug-bounty, credit-cards, idor, red-teaming, infosec | 15-Jun-2025 |
| “Why IDORs Are Everywhere — And How to Find Them” | https://hettt.medium.com/why-idors-are-everywhere-and-how-to-find-them-3ba45128e0f3?source=rss------bug_bounty-5 | Het Patel | bug-bounty-tips, idor, poc, idor-vulnerability, bug-bounty | 15-Jun-2025 |
| I’m Starting a Daily Cybersecurity Series — From SCRATCH! | https://medium.com/@cyberx595/im-starting-a-daily-cybersecurity-series-from-0-65f09ca0aa1b?source=rss------bug_bounty-5 | 0X595 | information-security, info-sec-writeups, bug-bounty, cybersecurity, ethical-hacking | 15-Jun-2025 |
| Banner Grabbing in 2025: Still a Goldmine for Attackers? | https://cyberw1ng.medium.com/banner-grabbing-in-2025-still-a-goldmine-for-attackers-b08b21ec723a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, cybersecurity, bug-bounty, technology, careers | 15-Jun-2025 |
| I Found a $4,200 Bug in 15 Minutes | https://medium.com/@ibtissamhammadi1/i-found-a-4-200-bug-in-15-minutes-8d1ce968cf6b?source=rss------bug_bounty-5 | Ibtissam hammadi | make-money-online, bug-bounty, ethical-hacking, cybersecurity, hackerone | 15-Jun-2025 |
| How to Find and Exploit Jenkins Unauthenticated RCE via Shodan | https://medium.com/@josekuttykunnelthazhebinu/how-to-find-and-exploit-jenkins-unauthenticated-rce-via-shodan-0bf0242e559e?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty, exploit, bug-bounty-tips, hacking, penetration-testing | 14-Jun-2025 |
| My First 3 Bug Bounty Reports — From Zero to Real-World Findings | https://medium.com/@merida-/my-first-3-bug-bounty-reports-from-zero-to-real-world-findings-218daa967194?source=rss------bug_bounty-5 | Sanskruti | bug-bounty | 14-Jun-2025 |
| How to Use sslscan to Perform In-Depth SSL/TLS Security Scans | https://medium.com/@vivekbhatt2002/how-to-use-sslscan-to-perform-in-depth-ssl-tls-security-scans-9ef2c81704b6?source=rss------bug_bounty-5 | YoungerSibling | sslscan, cybersecurity, cyber-security-tools, ethical-hacking, bug-bounty | 14-Jun-2025 |
| Why I Don’t Suggest People to Get into Cybersecurity (Unless…) | https://medium.com/@vipulsonule71/why-i-dont-suggest-people-to-get-into-cybersecurity-unless-ecb511b5da44?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, cybersecurity, hacking, ai, technology | 14-Jun-2025 |
| ⚙️Complete Bug Bounty Tool List ⚙️ | https://medium.com/infosec-ninja/%EF%B8%8Fcomplete-bug-bounty-tool-list-%EF%B8%8F-feade4710911?source=rss------bug_bounty-5 | Bl@ckC!pH3r | bug-bounty | 14-Jun-2025 |
| The Anatomy of an RCE Attack : The Hacker’s Big Score | https://infosecwriteups.com/the-anatomy-of-an-rce-attack-the-hackers-big-score-a22fa2f2dbc6?source=rss------bug_bounty-5 | 127.0.0.1 | cybersecurity, bug-bounty, technology, rce, ethical-hacking | 14-Jun-2025 |
| I Almost Missed This WAF Bypass Here is What I Learned | https://medium.com/@minto258/i-almost-missed-this-waf-bypass-here-is-what-i-learned-9c471867b2aa?source=rss------bug_bounty-5 | Rahimuddin Alrashel | bug-bounty, audit, hacking, cybersecurity, earn-money-online | 14-Jun-2025 |
| $500 Bounty: XSS via javascript: URLs | https://infosecwriteups.com/500-bounty-xss-via-javascript-urls-a04900631701?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, technology, penetration-testing, bug-bounty-tips | 14-Jun-2025 |
| I Hacked a Web App’s Email System with Just One Click (CSRF Bypass Explained) | https://medium.com/@RootPwned/i-hacked-a-web-apps-email-system-with-just-one-click-csrf-bypass-explained-119ca32dbbda?source=rss------bug_bounty-5 | Sumanth Yerranagula | hacking, ethical-hacking, cybersecurity, ctf, bug-bounty | 14-Jun-2025 |
| A Hacker's Notebook: Real Techniques from the World of Bug Bounty (2025 Edition) | https://medium.com/@verylazytech/a-hackers-notebook-real-techniques-from-the-world-of-bug-bounty-2025-edition-b7272595e681?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, lfi, bug-bounty, ethical-hacking, rce | 14-Jun-2025 |
| When One Bug Isn't Enough: Finding a Full House of Vulnerabilities | https://rofes1337.medium.com/when-one-bug-isnt-enough-finding-a-full-house-of-vulnerabilities-68e2d30d9534?source=rss------bug_bounty-5 | Yousef Muhammedelkhir | broken-access-control, bug-bounty, security, bugbounty-writeup, hackerone | 14-Jun-2025 |
| Free Burpsuite Course With Live Bug Bounty | https://ajakcybersecurity.medium.com/free-burpsuite-course-with-live-bug-bounty-5514586a32fe?source=rss------bug_bounty-5 | AJAK Cyber Academy | learning, penetration-testing, bug-bounty, cybersecurity, technology | 14-Jun-2025 |
| ADVANCED BUG BOUNTY RECON PLAYBOOK (2025) | https://medium.com/infosec-ninja/advanced-bug-bounty-recon-playbook-2025-3f1e7dbe3c97?source=rss------bug_bounty-5 | Bl@ckC!pH3r | bug-bounty | 14-Jun-2025 |
| How I Banned Any User for 24 Hours Using a Simple CSRF Attack | https://medium.com/@mdsafiulislam9252/how-i-banned-any-user-for-24-hours-using-a-simple-csrf-attack-388fec74f497?source=rss------bug_bounty-5 | TakiasSec | ethical-hacking, bug-bounty, bug-bounty-tips, csrf | 14-Jun-2025 |
| 350+ Free TryHackMe Rooms to Learn Ethical Hacking & Cybersecurity (2025 List) | https://medium.com/@uttambodara4243/350-free-tryhackme-rooms-to-learn-ethical-hacking-cybersecurity-2025-list-f2cce6375aa2?source=rss------bug_bounty-5 | cyberwinx | ethical-hacking, tryhackme, infosec, cybersecurity, bug-bounty | 14-Jun-2025 |
| Gourlex: A must-needed tool for bug hunters | https://medium.com/@loyalonlytoday/gourlex-a-must-needed-tool-for-bug-hunters-d33dec8720b1?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, pentesting, cybersecurity, bug-bounty, hacking | 14-Jun-2025 |
| Exposure Protocol: Information Disclosure in the Wild [Part 1] | https://infosecwriteups.com/exposure-protocol-information-disclosure-in-the-wild-part-1-588de47882b1?source=rss------bug_bounty-5 | Aditya Bhatt | cybersecurity, disclosure, information, bug-bounty, bug-bounty-writeup | 14-Jun-2025 |
| Bug Bounty Guide: Finding and Exploiting Leaked .git/ Directories | https://medusa0xf.medium.com/bug-bounty-guide-finding-and-exploiting-leaked-git-directories-1e05dc520bf5?source=rss------bug_bounty-5 | Medusa | github, pentesting, developer, bug-bounty, bug-bounty-tips | 14-Jun-2025 |
| Bypass IP Whitelisting by Abusing Trusted Flows | https://medium.com/@kabi_777/bbp-how-i-bypass-ip-whitelisting-by-abusing-trusted-flows-069f1aa415c0?source=rss------bug_bounty-5 | Kabi_777 | bug-bounty-writeup, red-team, bug-bounty, bug-bounty-tips, penetration-testing | 14-Jun-2025 |
| How I Turned RFI Into RCE in 48 Hours for Just $200 | https://medium.com/@ibtissamhammadi1/how-i-turned-rfi-into-rce-in-48-hours-for-just-200-215b4be27425?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, cybersecurity, ethical-hacking, hacker, wordpress-security | 14-Jun-2025 |
| CTF Day(13) | https://medium.com/@ahmednarmer1/ctf-day-13-2ad289797f14?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, ctf, bug-bounty, web-penetration-testing, web-pen-testing | 13-Jun-2025 |
| Path Traversal Vulnerability Explained: How Hackers Climb Your Server’s Directory Tree | https://medium.com/@zoningxtr/path-traversal-vulnerability-explained-how-hackers-climb-your-servers-directory-tree-c027af069407?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, web-development, api, bug-bounty, cybersecurity | 13-Jun-2025 |
| CTF Day(12) | https://medium.com/@ahmednarmer1/ctf-day-12-df893a7035fe?source=rss------bug_bounty-5 | Ahmed Narmer | web-pen-testing, cybersecurity, web-penetration-testing, bug-bounty, ctf | 13-Jun-2025 |
| The $7,500 Bug in Google Web Designer — and Why It’s a Wake-Up Call for All of Us | https://medium.com/@vivekps143/the-7-500-bug-in-google-web-designer-and-why-its-a-wake-up-call-for-all-of-us-3571231fecfc?source=rss------bug_bounty-5 | Vivek PS | programming, cybersecurity, web-development, bug-bounty, ethical-hacking | 13-Jun-2025 |
| Web Cache Deception — The Vulnerability Even Developers Don’t See Coming | https://infosecwriteups.com/web-cache-deception-the-vulnerability-even-developers-dont-see-coming-c9b814b76da3?source=rss------bug_bounty-5 | phoenixcatalan | hacking, bug-bounty, cybersecurity, ethical-hacking, web-security | 13-Jun-2025 |
| $7,500 Bounty: Exposed Any User’s Email on HackerOne | https://infosecwriteups.com/7-500-bounty-exposed-any-users-email-on-hackerone-2d19bb2a214c?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, technology, penetration-testing, hackerone | 13-Jun-2025 |
| Weeks of Watching, One Moment of Madness: A 2-Minute Hunt That Brought It All Down | https://osintteam.blog/weeks-of-watching-one-moment-of-madness-a-2-minute-hunt-that-brought-it-all-down-41f181a1cbc9?source=rss------bug_bounty-5 | Gokuleswaran B | vulnerability-assessment, bug-bounty, bug-bounty-writeup, penetration-testing, bug-bounty-tips | 13-Jun-2025 |
| I Fooled the Filters: Homoglyph Username Bypass Vulnerability — An Overlooked Threat in Major… | https://icecream23.medium.com/i-fooled-the-filters-homoglyph-username-bypass-vulnerability-an-overlooked-threat-in-major-dd5f8cc63ba6?source=rss------bug_bounty-5 | Aman Bhuiyan | bug-bounty-writeup, bug-bounty, ethical-hacking, bug-bounty-tips | 13-Jun-2025 |
| The Most Underrated 0-Click Account Takeover Using Punycode IDN Attacks | https://infosecwriteups.com/the-most-underrated-0-click-account-takeover-using-punycode-idn-attacks-c0afdb74a3dc?source=rss------bug_bounty-5 | coffinxp | technology, cybersecurity, bug-bounty, hacking, pentesting | 13-Jun-2025 |
| The $500 Facebook Bug That Taught Me the Real Meaning of Respect | https://osintteam.blog/the-500-facebook-bug-that-taught-me-the-real-meaning-of-respect-383d48be16ae?source=rss------bug_bounty-5 | Vivek PS | ethical-hacking, cybersecurity, web-development, programming, bug-bounty | 13-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part 6 | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-6-d7ff06747919?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | information-security, infosec, information-technology, cybersecurity, bug-bounty | 13-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part 3 | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-3-1e15006573c4?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, appsec, cybersecurity, bug-bounty, infosec | 13-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-5dd6a7a460b1?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, infosec, owasp, cybersecurity, bug-bounty | 13-Jun-2025 |
| The $7,500 Bug in Google Web Designer — and Why It’s a Wake-Up Call for All of Us | https://osintteam.blog/the-7-500-bug-in-google-web-designer-and-why-its-a-wake-up-call-for-all-of-us-3571231fecfc?source=rss------bug_bounty-5 | Vivek PS | programming, cybersecurity, web-development, bug-bounty, ethical-hacking | 13-Jun-2025 |
| Weak Regex, Big Mess: How I Escaped Input Validation with One Tiny Character | https://infosecwriteups.com/weak-regex-big-mess-how-i-escaped-input-validation-with-one-tiny-character-9ead1deccffa?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, cybersecurity, hacking, money | 13-Jun-2025 |
| How i found SQL injection in live website | https://medium.com/@priyanshuchoudhary3214/how-i-found-sql-injection-in-live-website-481c1a042405?source=rss------bug_bounty-5 | Priyanshu | bug-bounty, cybersecurity, sql-injection, penitration-testing | 13-Jun-2025 |
| How Hackers Steal Logins with Broken OAuth | https://medium.com/@ibtissamhammadi1/how-hackers-steal-logins-with-broken-oauth-f1386f2d78f6?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, oauth, bug-bounty, cybersecurity, hacking | 13-Jun-2025 |
| Detect Vulnerabilities With Nuclei AI | https://medium.com/@loyalonlytoday/detect-bugs-with-nuclei-ai-59105992e798?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, bug-bounty-tips, vulnerability, web-security, cybersecurity | 13-Jun-2025 |
| Help Bug Hunters: Contribute to the “Unfriendly Bug Bounty Programs” Repository | https://adityaax.medium.com/help-bug-hunters-contribute-to-the-unfriendly-bug-bounty-programs-repository-87fbd4d4f6d4?source=rss------bug_bounty-5 | adityaax | bug-bounty-scam, security-researchers, bug-bounty, hacking, bug-bounty-programs-scam | 13-Jun-2025 |
| I Tricked a Web App Into Leaking /etc/passwd (PortSwigger Lab) | https://medium.com/@RootPwned/i-tricked-a-web-app-into-leaking-etc-passwd-portswigger-lab-d4f68835ffe1?source=rss------bug_bounty-5 | Sumanth Yerranagula | hacking, bug-bounty, ctf, ethical-hacking, cybersecurity | 13-Jun-2025 |
| Chasing a Valid in the Stars: My First NASA.gov Find | https://medium.com/@FufuFaf1/chasing-a-valid-in-the-stars-my-first-nasa-gov-find-cecdb9c29c35?source=rss------bug_bounty-5 | MostReal | bug-bounty, bug-bounty-writeup, bug-bounty-tips, nasa, cybersecurity | 13-Jun-2025 |
| ️ Responsible Disclosure | Aadhaar Data Exposure | https://medium.com/@H4xs13/%EF%B8%8F-responsible-disclosure-aadhaar-data-exposure-aa574ccb13ae?source=rss------bug_bounty-5 | Ayush Patel | hacking, cybersecurity, bug-bounty, privacy, osint | 13-Jun-2025 |
| CRLF Injection to Stored XSS via Cookie Poisoning | https://medium.com/@srilakivarma/crlf-injection-to-stored-xss-via-cookie-poisoning-f7df1b790fe4?source=rss------bug_bounty-5 | Srilakivarma | owasp, xss-attack, bug-bounty, crlf-injection, bug-bounty-tips | 13-Jun-2025 |
| Unlimited Store Credit: Finding an Economy-Breaking Bug in a Digital Storefront’s Discord Bot | https://vankevindo.medium.com/unlimited-store-credit-finding-an-economy-breaking-bug-in-a-digital-storefronts-discord-bot-6518b32e9ffa?source=rss------bug_bounty-5 | Van Kevindo | vulnerability, cybersecurity, bug-bounty | 13-Jun-2025 |
| Part 3: Exploiting BOLA — How I Accessed Other Users’ Data in crAPI | https://medium.com/@TraceX0/part-3-exploiting-bola-how-i-accessed-other-users-data-in-crapi-d199251e6049?source=rss------bug_bounty-5 | Mihir Sathvara | api-security, bug-bounty, ethical-hacking, cybersecurity, ctf | 13-Jun-2025 |
| How i found a critical Bug in live website. | https://medium.com/@priyanshuchoudhary3214/how-i-found-sql-injection-in-live-website-481c1a042405?source=rss------bug_bounty-5 | Priyanshu | bug-bounty, cybersecurity, sql-injection, penitration-testing | 13-Jun-2025 |
| Setup a Pentesting Lab | https://medium.com/@sachinpv2004/setup-a-pentesting-lab-1a39cdaeb2e7?source=rss------bug_bounty-5 | SACHIN PV | bug-bounty, kali-linux, virtualbox, cybersecurity, pentesting | 13-Jun-2025 |
| From LFI to RCE via Log Poisoning: Hack Servers with Just Your Browser Headers ️♂️ | https://medium.com/@zoningxtr/from-lfi-to-rce-via-log-poisoning-hack-servers-with-just-your-browser-headers-%EF%B8%8F-%EF%B8%8F-d0e708014e3f?source=rss------bug_bounty-5 | Zoningxtr | api, bug-bounty, penetration-testing, web-development, cybersecurity | 13-Jun-2025 |
| Exposing an OAuth Token Weakness in Amazon’s Mobile App: A Responsible Disclosure Journey | https://clawshea.medium.com/exposing-an-oauth-token-weakness-in-amazons-mobile-app-a-responsible-disclosure-journey-3b967ab8134f?source=rss------bug_bounty-5 | C. Oscar Lawshea | cybersecurity, penetration-testing, bug-bounty, amazon, information-security | 13-Jun-2025 |
| From LFI to LFD: Exploiting PHP Wrappers &Countermeasures Like a Pro ️♂️ | https://medium.com/@zoningxtr/from-lfi-to-lfd-exploiting-php-wrappers-to-steal-sensitive-data-like-a-pro-%EF%B8%8F-%EF%B8%8F-ec7385b49ea1?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, web-development, application-security, bug-bounty, cybersecurity | 13-Jun-2025 |
| Account Takeover via Facebook OAuth Misconfiguration | https://medium.com/@elghzaly/account-takeover-via-facebook-oauth-misconfiguration-f5eb1a943873?source=rss------bug_bounty-5 | Ahmed Elghazaly | bug-bounty, account-take-over, bug-bounty-tips, facebook-oauth | 13-Jun-2025 |
| From Zero to $100K in Cybersecurity in 90 Days: A Realistic, Actionable Plan | https://krishna-cyber.medium.com/from-zero-to-100k-in-cybersecurity-in-90-days-a-realistic-actionable-plan-69edb195d925?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, artificial-intelligence, cybersecurity, coding, cybercrime | 13-Jun-2025 |
| How to Test “Forgot Password” for Bugs — A Guide for BB Hunters & Pentesters | https://medusa0xf.medium.com/how-to-test-forgot-password-for-bugs-a-guide-for-bb-hunters-pentesters-4d3043007714?source=rss------bug_bounty-5 | Medusa | cybersecurity, developer, software, pentesting, bug-bounty | 13-Jun-2025 |
| From Bug Bounty Blahs to Breakthroughs: Navigating the “Never Enough” Trap in Cyber | https://leviiatan.medium.com/from-bug-bounty-blahs-to-breakthroughs-navigating-the-never-enough-trap-in-cyber-fcb212072068?source=rss------bug_bounty-5 | Leviiatan | mental-health, bug-bounty, tech, cybersecurity, study | 13-Jun-2025 |
| ¿Qué es el Bug Bounty y por qué es tan lucrativo? | https://tizimass.medium.com/qu%C3%A9-es-el-bug-bounty-y-por-qu%C3%A9-es-tan-lucrativo-9d10d204542b?source=rss------bug_bounty-5 | Tiziano Mass | information-security, bug-bounty, pentesting, cybersecurity, ciberseguridad | 13-Jun-2025 |
| GraphQL in the Wild: Recon to RCE via Introspection, Nested Queries & Batching Attacks | https://infosecwriteups.com/graphql-in-the-wild-recon-to-rce-via-introspection-nested-queries-batching-attacks-dbd2d704fbdf?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, hacking, bug-bounty-tips, penetration-testing, technology | 12-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part 3 | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-3-14128a447743?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, bug-bounty, infosec, ai, owasp | 12-Jun-2025 |
| A classic file based IDOR on NIELIT portal | https://infosecwriteups.com/a-classic-file-based-idor-on-nielit-portal-064604c7fc62?source=rss------bug_bounty-5 | Adithya M S | bug-bounty, ethical-hacking, web-security, idor-vulnerability | 12-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part 2 | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-2-2c271bdc1a4d?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | ai, owasp, bug-bounty, infosec, cybersecurity | 12-Jun-2025 |
| Broken Object Level Authorization (BOLA): Complete Guide — Part 1 | https://medium.com/@narendarlb123/broken-object-level-authorization-bola-complete-guide-part-1-2960dbcd480a?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, owasp, infosec, api-security, bug-bounty | 12-Jun-2025 |
| How I hacked Karnataka NIC portal with a simple SQL injection | https://infosecwriteups.com/how-i-hacked-karnataka-nic-portal-with-a-simple-sql-injection-073f064ad99e?source=rss------bug_bounty-5 | Adithya M S | bug-bounty, ethical-hacking, blind-sql-injection, web-security, sql-injection | 12-Jun-2025 |
| Bypassing Authentication: A Critical Flaw in Basecamp’s | https://infosecwriteups.com/bypassing-authentication-a-critical-flaw-in-basecamps-849d9fadf39f?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, bug-bounty-tips, penetration-testing, technology, tips-and-tricks | 12-Jun-2025 |
| Advanced HTTP Request Smuggling (HRS) Exploitation Guide | https://systemweakness.com/advanced-http-request-smuggling-hrs-exploitation-guide-53ceadd5ac19?source=rss------bug_bounty-5 | Shah kaif | http-request-smuggling, bug-bounty-tips, web-security, bug-bounty, ethical-hacking | 12-Jun-2025 |
| How I Bypassed a CAPTCHA Without Solving It | https://medium.com/@mazenibrahem373/how-i-bypassed-a-captcha-without-solving-it-7c5c85ee71f0?source=rss------bug_bounty-5 | Mazen ibrahim | bug-bounty-writeup, cybersecurity, bug-bounty-tips, technology, bug-bounty | 12-Jun-2025 |
| Upload File ➡️ Stored XSS ➡️ Admin Takeover! MinIO Misconfiguration Story | https://medium.com/@nocley/upload-file-%EF%B8%8F-stored-xss-%EF%B8%8F-admin-takeover-minio-misconfiguration-story-76ec4982ef5b?source=rss------bug_bounty-5 | nocley | minio, hacking, bug-bounty, stored-xss, misconfiguration | 12-Jun-2025 |
| Path Traversal Vulnerability in Lila Project on Lichess.org | https://medium.com/@regan_temudo/path-traversal-vulnerability-in-lila-project-on-lichess-org-06d0143f3052?source=rss------bug_bounty-5 | Regan Temudo | web-security, bug-bounty, lichess, hackerone, cybersecurity | 12-Jun-2025 |
| Header Hijinks: How X-Forwarded-For Gave Me Internal Access | https://infosecwriteups.com/header-hijinks-how-x-forwarded-for-gave-me-internal-access-b37769198321?source=rss------bug_bounty-5 | Iski | infosec, money, cybersecurity, bug-bounty, hacking | 12-Jun-2025 |
| Information Disclosure via GraphQL in Production | https://infosecwriteups.com/information-disclosure-via-graphql-in-production-64c62c9dbe4c?source=rss------bug_bounty-5 | Ehtesham Ul Haq | information-security, bug-bounty, penetration-testing, graphql, writeup | 12-Jun-2025 |
| Robofinder : A good tool for bughunters | https://medium.com/@loyalonlytoday/robofinder-a-good-tool-for-bughunters-b351ca318291?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, bug-bounty-tips, hacking, web-security | 12-Jun-2025 |
| HTTP Parameter pollution | https://medium.com/@priyachandana99/http-parameter-pollution-bad2fda0ef6f?source=rss------bug_bounty-5 | Chandana Priya | cybersecurity, hacking, learning, bug-bounty, http-parameter-pollution | 12-Jun-2025 |
| API Security in 2025: The Most Overlooked Vulnerabilities | https://medium.com/@sync-with-ivan/api-security-in-2025-the-most-overlooked-vulnerabilities-88f513ea347c?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, ethical-hacking, web-development, cybersecurity, api-security | 12-Jun-2025 |
| SaaS Security: How Bug Bounty Hunters Are Keeping the Cloud Safe | https://medium.com/@sync-with-ivan/saas-security-how-bug-bounty-hunters-are-keeping-the-cloud-safe-03d93aef749a?source=rss------bug_bounty-5 | Andrei Ivan | saas-security, bug-bounty, cybersecurity, cloud-security, bug-bounty-tips | 12-Jun-2025 |
| The Quantum Way of Recon: Why I Stopped Copying Recon Methods and Built My Own | https://medium.com/@clipp3r/the-quantum-way-of-recon-why-i-stopped-copying-recon-methods-and-built-my-own-b9e9fddcd756?source=rss------bug_bounty-5 | clipper | bug-bounty-tips, bug-bounty, reconnaissance, bug-bounty-writeup, ethical-hacking | 12-Jun-2025 |
| How Does One CVE Lead to XSS, Redirect, and SSRF | https://medium.com/@ibtissamhammadi1/how-does-one-cve-lead-to-xss-redirect-and-ssrf-6a3507bc3b58?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, cybersecurity, ssrf, xss-attack, grafana | 12-Jun-2025 |
| Open Redirect nədir? | https://medium.com/@silverxcyber/open-redirect-n%C9%99dir-519cc1897d0a?source=rss------bug_bounty-5 | SilverXCyber | open-redirect, openredirectvulnerability, owasp-top-10, bug-bounty | 12-Jun-2025 |
| Utilising Context Augmentation in LLMs for Bug Bounty | https://infosecwriteups.com/utilising-context-augmentation-in-llms-for-bug-bounty-c41a0c03f4b8?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, programming, information-technology, cybersecurity, artificial-intelligence | 12-Jun-2025 |
| Weaponizing Bookmarklets for Passive Recon: Wayback Machine, VirusTotal & AlienVault | https://medium.com/@jai.lani9001/weaponizing-bookmarklets-for-passive-recon-wayback-machine-virustotal-alienvault-9f4a736a1c8f?source=rss------bug_bounty-5 | e0x1337 | bug-bounty, wayback-machine, bookmarklet, recon | 12-Jun-2025 |
| CTF Day(11) | https://medium.com/@ahmednarmer1/ctf-day-11-0e8420294f32?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, ctf, bug-bounty, web-pen-testing, web-penetration-testing | 12-Jun-2025 |
| Shodan Dorking for Hackers: Easy CVEs and How I Found Them | https://medium.com/@a0xtrojan/how-i-used-shodan-dork-to-discover-2-easy-bugs-cves-ecf6c56e7075?source=rss------bug_bounty-5 | A0X_Trojan | cybersecurity, cve, bug-bounty, tomcat, apache | 12-Jun-2025 |
| What is an API? A Simple Guide for Beginners | https://medium.com/@gabbytech01/what-is-an-api-a-simple-guide-for-beginners-bf3429553880?source=rss------bug_bounty-5 | GABBYTECH | penetration-testing, api, bug-bounty, apihacking, ethical-hacking | 12-Jun-2025 |
| Open Redirect Nedir? | https://medium.com/@silverxcyber/open-redirect-n%C9%99dir-519cc1897d0a?source=rss------bug_bounty-5 | SilverXCyber | bug-bounty-writeup, open-redirect, openredirectvulnerability, owasp-top-10, bug-bounty | 12-Jun-2025 |
| How Meta’s Bug Bounty Triage Fails Security Researchers — And Why It Matters | https://medium.com/@d.johnston_19172/how-metas-bug-bounty-triage-fails-security-researchers-and-why-it-matters-7dc3d8d56b16?source=rss------bug_bounty-5 | D Johnston | meta, vulnerability-assessment, cybersecurity, facebook, bug-bounty | 11-Jun-2025 |
| How I Discovered JS Execution Through CSTI and DOM XSS | https://javascript.plainenglish.io/how-i-discovered-js-execution-through-csti-and-dom-xss-09024676692b?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, hacking, vuejs, dom-xss, web-security | 11-Jun-2025 |
| FOFA Dorking | Part 5 | https://cybersecuritywriteups.com/fofa-dorking-part-5-4f0516273a0d?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, cyber, osint, bug-bounty-tips, bug-bounty | 11-Jun-2025 |
| How I Discovered Sensitive API Keys & Auth Tokens in Public JavaScript Files — A Recon Journey | https://medium.com/@kingstar75114/how-i-discovered-sensitive-api-keys-auth-tokens-in-public-javascript-files-a-recon-journey-01cc33e27b9e?source=rss------bug_bounty-5 | TehanG07 | bug-bounty, infosec, hacker, bugs, bug-bounty-tips | 11-Jun-2025 |
| How I Hunted Secret Express.js Endpoints With ffuf and Nuclei (And Found Some Spicy Stuff) | https://medium.com/@minto258/how-i-hunted-secret-express-js-endpoints-with-ffuf-and-nuclei-and-found-some-spicy-stuff-7f4939a1ed56?source=rss------bug_bounty-5 | Rahimuddin Alrashel | bug-bounty, hacking, hacker, earn-money-online, web | 11-Jun-2025 |
| A Simple Passive Recon to Find Some Bugs | https://medium.com/@faxcl018/a-simple-passive-recon-to-find-some-bugs-aa34b6265820?source=rss------bug_bounty-5 | Faxcl | network-security, virustotal, reconnaissance, bug-bounty | 11-Jun-2025 |
| How a Simple Port Scan Led to a $500 Google Reward | https://jebarsonimmanuel.medium.com/how-a-simple-port-scan-led-to-a-500-google-reward-39d80e2e3fef?source=rss------bug_bounty-5 | Jebarson Immanuel | bug-bounty, infosec, cybersecurity | 11-Jun-2025 |
| How I Earned My First $200 Bounty | https://medium.com/@mdsafiulislam9252/how-i-earned-my-first-200-bounty-f3cc3826f5f5?source=rss------bug_bounty-5 | Mdsafiulislam | web-security, xss-vulnerability, bug-bounty-tips, bug-bounty, cybersecurity | 11-Jun-2025 |
| Parameter Pollution: How to Hunt Silent Access Bugs | https://infosecwriteups.com/parameter-pollution-how-to-hunt-silent-access-bugs-922863d0498e?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, bug-bounty-tips, bug-bounty, tips-and-tricks | 11-Jun-2025 |
| How Does a Pentester Know Where to Look for LFI? | https://medium.com/@zoningxtr/how-does-a-pentester-know-where-to-look-for-lfi-d1a8d9fb1451?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, web-development, penetration-testing, php-developers, bug-bounty | 11-Jun-2025 |
| OAuth2verdrive: How Broken Token Exchange Let Me Log in as Any User | https://infosecwriteups.com/oauth2verdrive-how-broken-token-exchange-let-me-log-in-as-any-user-3f211de93bf1?source=rss------bug_bounty-5 | Iski | cybersecurity, infosec, hacking, money, bug-bounty | 11-Jun-2025 |
| How to install GO LANG and Run from anywhere in the system (Automated). | https://medium.com/@devanshpatel930/how-to-install-go-lang-and-run-from-anywhere-in-the-system-automated-b456ac3f57db?source=rss------bug_bounty-5 | Zuri | bug-bounty-tips, bug-bounty, devops, cybersecurity, bugbounty-writeup | 11-Jun-2025 |
| ️ AutoRecon — Automated Recon for Red Team Ops & CTF Warfare | https://medium.com/@0b1d1/%EF%B8%8F-autorecon-automated-recon-for-red-team-ops-ctf-warfare-dd1c441ce483?source=rss------bug_bounty-5 | 0b1d1 | python, penetration-testing, pentesting, bug-bounty, cybersecurity | 11-Jun-2025 |
| Master the Game: CTFs as Your Hacking Playground ☠️ | https://medium.com/@0b1d1/master-the-game-ctfs-as-your-hacking-playground-%EF%B8%8F-c934cb5b193a?source=rss------bug_bounty-5 | 0b1d1 | education, ctf, programming, bug-bounty, cybersecurity | 11-Jun-2025 |
| Beyond the Hype: I Analyzed 3 Real-World LLM Prompt Injection Attacks | https://medium.com/@sync-with-ivan/beyond-the-hype-i-analyzed-3-real-world-llm-prompt-injection-attacks-61660aabc840?source=rss------bug_bounty-5 | Andrei Ivan | prompt-injection-attack, cybersecurity, bug-bounty, artificial-intelligence, llm-security | 11-Jun-2025 |
| Bypassing Open Redirect Filters Using Creative URL Manipulation | https://medium.com/@abdelrahman8545/bypassing-open-redirect-filters-using-creative-url-manipulation-b43aa3a61cc8?source=rss------bug_bounty-5 | Abdelrahman Fathy | bug-bounty-tips, bug-bounty, bug-bounty-writeup, open-redirect, cybersecurity | 11-Jun-2025 |
| Remote Code Execution: Critical Security Flaw | https://medium.com/h7w/remote-code-execution-critical-security-flaw-9bc9b71b8b49?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, bug-bounty, penetration-testing, tips-and-tricks, technology | 11-Jun-2025 |
| Hidden in Headers: The Power of Misused Referer, Origin, and Host Headers | https://medium.com/mr-plan-publication/hidden-in-headers-the-power-of-misused-referer-origin-and-host-headers-b8b1a598b1c5?source=rss------bug_bounty-5 | Monika sharma | hacking, bug-bounty-tips, bug-bounty, technology, tips-and-tricks | 11-Jun-2025 |
| Local File Disclosure (LFD) Attacks Explained: The Silent Data Leak You Never Saw Coming… | https://medium.com/@zoningxtr/local-file-disclosure-lfd-attacks-explained-the-silent-data-leak-you-never-saw-coming-f473f73a05fb?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, cybersecurity, bug-bounty, web, web-development | 11-Jun-2025 |
| How Did I Find 3 SQLi Vulnerabilities With Just a Repeater | https://medium.com/@ibtissamhammadi1/how-did-i-find-3-sqli-vulnerabilities-with-just-a-repeater-3e1f7f451ae9?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, burpsuite, sql-injection, waf-bypass, ethical-hacking | 11-Jun-2025 |
| How a Simple RECON Earned Me ₹XX,000 | https://infosecwriteups.com/how-a-simple-recon-earned-me-xx-000-4282805d2eac?source=rss------bug_bounty-5 | Swarnim Bandekar | infosec, bug-bounty-writeup, hacking, penetration-testing, bug-bounty | 11-Jun-2025 |
| Bug Bounty for Beginners: How to Land Your First Payout in 2025 | https://medium.com/@sync-with-ivan/bug-bounty-for-beginners-how-to-land-your-first-payout-in-2025-9068ef52cc47?source=rss------bug_bounty-5 | Andrei Ivan | hacking, bug-bounty, cybersecurity, bug-bounty-tips, beginners-guide | 11-Jun-2025 |
| €300 just by bug race condition | https://zetanine.medium.com/300-just-by-bug-race-condition-9ad2d912921f?source=rss------bug_bounty-5 | Zeta | hacking, bug-hunting, race-condition, web-security, bug-bounty | 11-Jun-2025 |
| Sensitive File Paths to Target with LFI | https://medium.com/@zoningxtr/sensitive-file-paths-to-target-with-lfi-f66588368676?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, bug-bounty, web-development, api, cybersecurity | 11-Jun-2025 |
| Cracking JWTs: A Bug Bounty Hunting Guide [Part 7] — The Final P1 Boss | https://medium.com/@adityabhatt3010/cracking-jwts-a-bug-bounty-hunting-guide-part-7-the-final-p1-boss-7a8baf3cf085?source=rss------bug_bounty-5 | Aditya Bhatt | jwt-authentication, jwt, cybersecurity, bug-bounty, bug-bounty-writeup | 11-Jun-2025 |
| How to get into bug bounties — A list of resources V2.0 | https://thexssrat.medium.com/how-to-get-into-bug-bounties-a-list-of-resources-v2-0-f01eb6bef0e4?source=rss------bug_bounty-5 | Thexssrat | hacking, hacker, bug-bounty, bug-bounty-tips | 11-Jun-2025 |
| 20+ Lesser-Known Linux Commands Every Hacker & Sysadmin Should Master | https://medium.com/@verylazytech/20-lesser-known-linux-commands-every-hacker-sysadmin-should-master-9f247b206aa5?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, hacker, penetration-testing, linux, sysadmin | 11-Jun-2025 |
| From Zero to Free Credits: Abusing a Referral System Like a Lazy Genius | https://medium.com/legionhunters/from-zero-to-free-credits-abusing-a-referral-system-like-a-lazy-genius-fc2d6b674754?source=rss------bug_bounty-5 | MostReal | bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips, hacking | 11-Jun-2025 |
| HOW I WOULD START BUG BOUNTY IN MID 2025!? | https://medium.com/@Tenebris_Venator/how-i-would-start-bug-bounty-in-mid-2025-3cdbd3f726fb?source=rss------bug_bounty-5 | Tenebris Venator | bug-bounty, hacker, technology, tips | 11-Jun-2025 |
| Cracking the Clock: How I Took Over Any Account Using a Timestamp Leak | https://ritikver22000.medium.com/cracking-the-clock-how-i-took-over-any-account-using-a-timestamp-leak-516fc88c0113?source=rss------bug_bounty-5 | Ritik Verma | bug-bounty, bug-bounty-tips, hackerone, bounty-hunter, bug-bounty-writeup | 11-Jun-2025 |
| Wait for the Drift mod…….. | https://medium.com/@hooknspeedtvm/wait-for-the-drift-mod-e3f90e87a2a4?source=rss------bug_bounty-5 | Hooknspeed Recovery Thiruvananthapuram | capcut-mod-apk, bug-bounty, github, htb, walkthrough | 11-Jun-2025 |
| Bloktan: Cybersecurity and IT Services Tailored for Real-World Risk | https://authorsavenger.medium.com/bloktan-cybersecurity-and-it-services-tailored-for-real-world-risk-e0998c3472df?source=rss------bug_bounty-5 | Authors Avenger | technology, bug-bounty, cybersecurity, secutiy, hacking | 11-Jun-2025 |
| Designing Spear Phishing Attacks Using Behavioral Psychology and Neuroscience | https://matitanium.medium.com/designing-spear-phishing-attacks-using-behavioral-psychology-and-neuroscience-a260301391fb?source=rss------bug_bounty-5 | matitanium | bug-bounty, security, phishing, psychology, hacking | 11-Jun-2025 |
| Web Application Penetration Testing | https://medium.com/@xLuk3/web-application-penetration-testing-16bb5e212905?source=rss------bug_bounty-5 | 0xLuk3 | pentesting, bug-bounty, cybersecurity, web-app-security | 11-Jun-2025 |
| Cracking JWTs: A Bug Bounty Hunting Guide [Part 7] — The Final P1 Boss | https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-part-7-the-final-p1-boss-7a8baf3cf085?source=rss------bug_bounty-5 | Aditya Bhatt | jwt-authentication, jwt, cybersecurity, bug-bounty, bug-bounty-writeup | 11-Jun-2025 |
| Grafana CVE-2025–4123 | Open Redirect - XSS - SSRF | https://osintteam.blog/grafana-cve-2025-4123-open-redirect-xss-ssrf-8fa24bb26d5d?source=rss------bug_bounty-5 | RivuDon | bug-bounty-tips, bug-bounty-writeup, ethical-hacking, bug-bounty, grafana | 10-Jun-2025 |
| $250 Bounty: How I Tricked the Nextcloud Android App Into Uploading Its Own Sensitive Files | https://osintteam.blog/250-bounty-how-i-tricked-the-nextcloud-android-app-into-uploading-its-own-sensitive-files-b481703e05cf?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty-tips, tips-and-tricks, technology, bug-bounty | 10-Jun-2025 |
| OAuth Misuse: How Broken Flows and Open Redirects Lead to Account Hijack | https://medium.com/h7w/oauth-misuse-how-broken-flows-and-open-redirects-lead-to-account-hijack-9f280680aab5?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, bug-bounty, bug-bounty-tips, tips-and-tricks | 10-Jun-2025 |
| Account Takeover with OAuth Misconfiguration. | https://matitanium.medium.com/account-takeover-with-oauth-misconfiguration-d6b384649930?source=rss------bug_bounty-5 | matitanium | oauth, infosec, security, bug-bounty, hacking | 10-Jun-2025 |
| Could XSS Be the Hidden Key to Account Takeover | https://infosecwriteups.com/could-xss-be-the-hidden-key-to-account-takeover-f316d985dd6a?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, cybersecurity, hacking, ethical-hacking, bug-bounty | 10-Jun-2025 |
| $560 Bounty: How Twitter’s Android App Leaked User Location | https://infosecwriteups.com/560-bounty-how-twitters-android-app-leaked-user-location-698a8f4d4b18?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, hacking, tips-and-tricks, bug-bounty, penetration-testing | 10-Jun-2025 |
| Red Team Tactics and Their Detection Counterparts: A Purple Team Guide | https://medium.com/@paritoshblogs/red-team-tactics-and-their-detection-counterparts-a-purple-team-guide-a20c18ea4402?source=rss------bug_bounty-5 | Paritosh | hacking, red-team, bug-bounty, cybersecurity, information-technology | 10-Jun-2025 |
| Upload2Own: How SQL Injection and File Upload Flaws Lead to Remote Code Execution | https://adarshkrduaby.medium.com/upload2own-how-sql-injection-and-file-upload-flaws-lead-to-remote-code-execution-4e243e8312ea?source=rss------bug_bounty-5 | Adarsh Kumar | bug-bounty-writeup, bug-bounty, sqli, rce-vulnerability, hacking | 10-Jun-2025 |
| ️ 5 Essential Nmap Commands Every Beginner Bug Bounty Hunter Must Know | https://crimsontyphoon.medium.com/%EF%B8%8F-5-essential-nmap-commands-every-beginner-bug-bounty-hunter-must-know-4fee04e1a70a?source=rss------bug_bounty-5 | Soumyashree Sahoo | nmap, ethical-hacking, cybersecurity, infosec, bug-bounty | 10-Jun-2025 |
| Found Critical Vulnerability: Unauthorized Access to Customer Support Emails and Data via… | https://medium.com/@ravindrajatav0709/found-critical-vulnerability-unauthorized-access-to-customer-support-emails-and-data-via-a3a1c0a42e23?source=rss------bug_bounty-5 | Ravindra | bug-bounty, bug-bounty-tips, bugs, cybersecurity, bug-bounty-writeup | 10-Jun-2025 |
| Cache-Busting Bonanza: How I Bypassed Rate Limits Using HTTP Weirdness | https://infosecwriteups.com/cache-busting-bonanza-how-i-bypassed-rate-limits-using-http-weirdness-6d0d137cb7d7?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, money, infosec, bug-bounty | 10-Jun-2025 |
| From RXSS to ATO: Bypassing WAF with a Simple POST Trick | https://almuntadhar.medium.com/from-rxss-to-ato-bypassing-waf-with-a-simple-post-trick-a27ed30cf62b?source=rss------bug_bounty-5 | Muntadhar M. Ahmed | bug-bounty, account-take-over, cross-site-scripting, xss-bypass, hackerone | 10-Jun-2025 |
| DoS vs. DDoS: The Silent Killers of the Internet | https://medium.com/@sachinpv2004/dos-vs-ddos-the-silent-killers-of-the-internet-3cd3610066c8?source=rss------bug_bounty-5 | SACHIN PV | bug-bounty, ddos, denial-of-service, hacking, pentesting | 10-Jun-2025 |
| When Password Reset Turns into a Privacy Leak: CSRF, IPs & a Little Bit of WTF | https://hamdiyasin135.medium.com/when-password-reset-turns-into-a-privacy-leak-csrf-ips-a-little-bit-of-wtf-203974ad8007?source=rss------bug_bounty-5 | yassin hamdi | csrf, cybersecurity, bug-bounty, hackerone, hacking | 10-Jun-2025 |
| Hacking APIs: Enumeration and Recon Techniques for Modern APIs | https://iaraoz.medium.com/hacking-apis-enumeration-and-recon-techniques-for-modern-apis-5fa3eac4817b?source=rss------bug_bounty-5 | Israel Aráoz Severiche | bug-bounty, cybersecurity, api, owasp, hacking | 10-Jun-2025 |
| Bug Bounty for Beginners: The Real Talk Guide (No BS Edition) | https://medium.com/@telynor_51425/bug-bounty-for-beginners-the-real-talk-guide-no-bs-edition-b47f8e92efb5?source=rss------bug_bounty-5 | Telynor | hacking, study, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 10-Jun-2025 |
| Debug Logs to Admin Panel Access | https://medium.com/legionhunters/debug-logs-to-admin-panel-access-23d746ffd498?source=rss------bug_bounty-5 | CYB3RC4T | cybersecurity, bug-bounty, admin-panel, python, pentesting | 10-Jun-2025 |
| How I Made $4,260 Bypassing a Simple Username Bug | https://medium.com/@ibtissamhammadi1/how-i-made-4-260-bypassing-a-simple-username-bug-d969868025c7?source=rss------bug_bounty-5 | Ibtissam hammadi | cybersecurity, bug-bounty, tech, hacker, ethical-hacking | 10-Jun-2025 |
| Critical Google Security Flaw Exposes Millions of Users’ Phone Numbers Through Brute-Force Attack | https://medium.com/@technijian/critical-google-security-flaw-exposes-millions-of-users-phone-numbers-through-brute-force-attack-61c1e19f653f?source=rss------bug_bounty-5 | Technijian | cybersecurity, users-phone-numbers, security-vulnerabilities, bug-bounty, google-security | 10-Jun-2025 |
| How I Got $$$$ for Bypassing a PIN Lock in an Android App | https://medium.com/@0xk3r0/how-i-got-for-bypassing-a-pin-lock-in-an-android-app-6c1b48f615e3?source=rss------bug_bounty-5 | Kyrillos nady | red-team, pentesting, hacking, bug-bounty, android-pentesting | 10-Jun-2025 |
| The $10K/Month Bug Bounty Machine: A Step-by-Step Guide to Building a Collaborative Recon Pipeline… | https://medium.com/@sync-with-ivan/the-10k-month-bug-bounty-machine-a-step-by-step-guide-to-building-a-collaborative-recon-pipeline-7b1d357ddd5d?source=rss------bug_bounty-5 | Andrei Ivan | bug-bounty, ethical-hacking, bug-bounty-tips, cybersecurity, reconnaissance | 10-Jun-2025 |
| I Broke Into Cybersecurity Without a CS Degree — Here’s the Unfiltered Truth | https://medium.com/@nigamh7/i-broke-into-cybersecurity-without-a-cs-degree-heres-the-unfiltered-truth-d320b5d8a474?source=rss------bug_bounty-5 | Nigam | bug-bounty, cybersecurity, career-advice, self-improvement, ethical-hacking | 10-Jun-2025 |
| Finally , Got Certified with EJpt Certification | https://medium.com/infosec-notes/finally-got-certified-with-ejpt-certification-7c136db7dea7?source=rss------bug_bounty-5 | Mr Horbio | hacker, cybersecurity, ejpt, bug-bounty, ethical-hacking | 09-Jun-2025 |
| Behind the Shop: How a Simple SQLi in the Products Page Gave Me Full Access on Database | https://medium.com/@alkaptonurea/behind-the-shop-how-a-simple-sqli-in-the-products-page-gave-me-full-access-7f7a1d8b0223?source=rss------bug_bounty-5 | Waleed Osama | sql, hacking, developer, bug-bounty, sql-injection | 09-Jun-2025 |
| $500 OTP Bypass: Found It, Proved It, Then… | https://medium.com/@kailasv678/500-otp-bypass-found-it-proved-it-then-3930c9e45d4f?source=rss------bug_bounty-5 | Kailasv | bug-bounty-writeup, bug-bounty-hunter, 2fa-bypass, bug-bounty, bug-bounty-tips | 09-Jun-2025 |
| Time Is a Bug: Exploiting Trials Without Touching a Single Tool | https://strangerwhite.medium.com/time-is-a-bug-exploiting-trials-without-touching-a-single-tool-9a019bda8c02?source=rss------bug_bounty-5 | StrangeRwhite | bug-bounty, information-security, writeup, hacking, bug-bounty-tips | 09-Jun-2025 |
| A simple Bug Bounty Recon & Exploitation Workflow — A Field Guide | https://medium.com/@d1lv3rdn4/a-simple-bug-bounty-recon-exploitation-workflow-a-field-guide-3061fd0acfc9?source=rss------bug_bounty-5 | d1lv3rdn4 | bug-bounty, cheatsheet, hacking, bug-bounty-writeup, bug-bounty-tips | 09-Jun-2025 |
| How I Bypassed HackerOne’s 2FA in 5 Seconds | https://medium.com/@ibtissamhammadi1/how-i-bypassed-hackerones-2fa-in-5-seconds-77b517f9e770?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, graphql, 2fa-bypass, bug-bounty, cybersecurity | 09-Jun-2025 |
| How I bypassed the same open redirect endpoint not once, not twice… but FOUR times | https://ektuhacker.medium.com/how-i-bypassed-the-same-open-redirect-endpoint-not-once-not-twice-but-four-times-1299a56c75f4?source=rss------bug_bounty-5 | Ektu_Hacker/SANDIP | open-redirect, hacking, bug-bounty-writeup, bug-bounty | 09-Jun-2025 |
| Earned My First 3-Digit Bounty with a Reflected XSS: Here’s How I Did It | https://medium.com/@MrLoser/earned-my-first-3-digit-bounty-with-a-reflected-xss-heres-how-i-did-it-372a35573d55?source=rss------bug_bounty-5 | MrLoser | security, bug-bounty-writeup, bug-bounty-tips, owasp, bug-bounty | 09-Jun-2025 |
| My Laptop Died, So I Hacked with My Phone. No Excuse | https://infosecwriteups.com/my-laptop-died-so-i-hacked-with-my-phone-no-excuse-8dc8d030e43e?source=rss------bug_bounty-5 | 127.0.0.1 | linux, laptop, cybersecurity, bug-bounty, termux | 09-Jun-2025 |
| How I Earned $26.91 on Medium Just by Sharing My Bug Bounty Journey | https://medium.com/@vivekps143/how-i-earned-26-91-on-medium-just-by-sharing-my-bug-bounty-journey-776a6b25ce28?source=rss------bug_bounty-5 | Vivek PS | medium, ethical-hacking, bug-bounty, programming, cybersecurity | 09-Jun-2025 |
| Everything You Need to Know About XSS — with AI Prompts | https://medium.com/@narendarlb123/everything-you-need-to-know-about-xss-with-ai-prompts-438a76ed695f?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, infosec, ai, xss-attack, cybersecurity | 09-Jun-2025 |
| Bypassing Rewrite Rules in Web Servers + WAF Bypass for bug Bounties | https://medium.com/@d1lv3rdn4/bypassing-rewrite-rules-in-web-servers-waf-bypass-for-bug-bounties-ec885c1b2630?source=rss------bug_bounty-5 | d1lv3rdn4 | bug-bounty-tips, bug-bounty, waf-bypass, penetration-testing | 09-Jun-2025 |
| How a Simple Git Leak Led to AWS Keys & Database Credentials | https://medium.com/@shehzadinfosec1337/how-a-simple-git-leak-led-to-aws-keys-database-credentials-1f24ed5bd665?source=rss------bug_bounty-5 | TheRoyHunter313 | bug-bounty, cybersecurity, pentesting | 09-Jun-2025 |
| Monitor Private HackerOne Programs Using Wayback Machine — How I Caught a High Severity Bug on Day… | https://medium.com/@Ibraheem0x49/monitor-private-hackerone-programs-using-wayback-machine-how-i-caught-a-high-severity-bug-on-day-01bc94373115?source=rss------bug_bounty-5 | Ibraheem EL-Mougy | monitoring, hackerone, information-security, cybersecurity, bug-bounty | 09-Jun-2025 |
| Your Bug Bounty VPS with AI Automation | https://medium.com/@mahetagaurang22/your-bug-bounty-vps-with-ai-automation-10e657f613ee?source=rss------bug_bounty-5 | Mahetagaurang | bug-bounty, ai, cybersecurity, automation, ai-in-cybersecurity | 09-Jun-2025 |
| How I Found an $8,427 JS Security Bug in 30 Minutes | https://medium.com/@ibtissamhammadi1/how-i-found-an-8-427-js-security-bug-in-30-minutes-1c37d97bdae1?source=rss------bug_bounty-5 | Ibtissam hammadi | javascript, cybersecurity, bug-bounty, ethical-hacking, hacker | 09-Jun-2025 |
| HTML Injection in Traveler Profiles | https://infosecwriteups.com/html-injection-in-traveler-profiles-e251be22dc7d?source=rss------bug_bounty-5 | Ehtesham Ul Haq | writeup, bug-bounty, html, tips-and-tricks, penetration-testing | 09-Jun-2025 |
| How to install GO LANG and Run from anywhere in the system (Manually). | https://medium.com/@devanshpatel930/how-to-install-go-lang-and-run-from-anywhere-in-the-system-manually-bc8552555b85?source=rss------bug_bounty-5 | Zuri | bug-bounty, cybersecurity, continuous-deployment, devops, golang | 09-Jun-2025 |
| 5 Valuable Lessons I Learned Moving from Bug Bounty Hunter to Security Consultant | https://levelup.gitconnected.com/5-valuable-lessons-i-learned-moving-from-bug-bounty-hunter-to-security-consultant-1a202db85fd1?source=rss------bug_bounty-5 | Mrunal chawda | bug-bounty, technology, jobs, consulting, cybersecurity | 09-Jun-2025 |
| GraphQL Gatecrash: When an Introspection Query Opened the Whole Backend ️ | https://infosecwriteups.com/graphql-gatecrash-when-an-introspection-query-opened-the-whole-backend-%EF%B8%8F-5ec2a74ac20a?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, hacking, money, infosec | 09-Jun-2025 |
| s3 bucket and firebase misconfigurtion Part-1 | https://doordiefordream.medium.com/s3-bucket-and-firebase-misconfigurtion-part-1-76c15c90628f?source=rss------bug_bounty-5 | DOD cyber solutions | ethical-hacking, technology, cybersecurity, amazon, bug-bounty | 09-Jun-2025 |
| Open-Source AI in Security Operations: Case Studies from the Frontlines | https://medium.com/@sync-with-ivan/open-source-ai-in-security-operations-case-studies-from-the-frontlines-654fd26d078d?source=rss------bug_bounty-5 | Andrei Ivan | ai-security, cybersecurity, bug-bounty, open-source-ai, security-operation-center | 09-Jun-2025 |
| XSS in Hidden Input Without User Interaction | https://medium.com/@mhmodgm54/xss-in-hidden-input-without-user-interaction-acbd530c89b6?source=rss------bug_bounty-5 | Mahmoud Gamal | xss-attack, cybersecurity, bugcrowd, bug-bounty, hackerrank | 09-Jun-2025 |
| XSS Unleashed: Exploiting & Defending Cross-Site Scripting in the Wild | https://medium.com/@0b1d1/xss-unleashed-exploiting-defending-cross-site-scripting-in-the-wild-e026ea5e05e9?source=rss------bug_bounty-5 | 0b1d1 | cybersecurity, ethical-hacking, coding, bug-bounty, android | 09-Jun-2025 |
| MIME Sniffing Unmasked: How Browsers Misjudge Files and Create Risks | https://medium.com/@natarajanck2/mime-sniffing-unmasked-how-browsers-misjudge-files-and-create-risks-1612a26972e0?source=rss------bug_bounty-5 | Natarajan C K | web-applications, sniffing-attack, security, mime, bug-bounty | 09-Jun-2025 |
| The Complete Guide to PHP Functions That Can Cause Local File Inclusion (LFI) Vulnerabilities… | https://medium.com/@zoningxtr/the-complete-guide-to-php-functions-that-can-cause-local-file-inclusion-lfi-vulnerabilities-7e1115ece1ea?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, web-development, bug-bounty, penetration-testing, web-design | 09-Jun-2025 |
| Better Than Nmap? Meet FingerprintX — The Go-Powered Port Fingerprinter | https://medium.com/@hacker_might/better-than-nmap-meet-fingerprintx-the-go-powered-port-fingerprinter-b309956402f8?source=rss------bug_bounty-5 | hacker_might | bug-bounty-tips, tools, bug-bounty-writeup, security-tool, bug-bounty | 09-Jun-2025 |
| From Hunger to Hacker: How a Zomato Order Earned Me ₹25K” | https://medium.com/@leavemessagetopraveen/from-hunger-to-hacker-how-a-zomato-order-earned-me-25k-706b879c2bce?source=rss------bug_bounty-5 | praveen p | bug-bounty, bug-bounty-tips, technology, bug-bounty-writeup, bugbounty-writeup | 09-Jun-2025 |
| Cracking JWTs: A Bug Bounty Hunting Guide [Part 6] | https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-part-6-1d48459744f6?source=rss------bug_bounty-5 | Aditya Bhatt | bug-bounty-writeup, jwt-token, bug-bounty, jwt, cybersecurity | 09-Jun-2025 |
| Hacking APIs: Exploiting Shadow APIs and Forgotten Endpoints | https://iaraoz.medium.com/hacking-apis-exploiting-shadow-apis-and-forgotten-endpoints-9930c78e7c2d?source=rss------bug_bounty-5 | Israel Aráoz Severiche | owasp, pentesting, hacking, bug-bounty, appsec | 09-Jun-2025 |
| GraphQL Role Escalation and Data Exposure | https://medium.com/@omerasraan/graphql-role-escalation-and-data-exposure-4cc340431289?source=rss------bug_bounty-5 | Omer Mohsen | sensitive-data-exposure, security-testing, bug-bounty, graphql, web-application-security | 09-Jun-2025 |
| I reproduced a $10,000 bug | https://infosecwriteups.com/i-reproduced-a-10-000-bug-28466603e45e?source=rss------bug_bounty-5 | phoenixcatalan | hacking, bug-bounty, infosec, exploitation, pentesting | 08-Jun-2025 |
| $1,000 Bug: Firefox Account Deletion Without 2FA or Authorization | https://infosecwriteups.com/1-000-bug-firefox-account-deletion-without-2fa-or-authorization-e7a6c5bfd028?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, tips-and-tricks, bug-bounty-tips, penetration-testing | 08-Jun-2025 |
| Story of a Cyber Newbie | https://medium.com/@cosmicbyt3/story-of-a-cyber-newbie-81dd7c92ff26?source=rss------bug_bounty-5 | CosmicByte | infosec, bug-bounty, cybersecurity, self-taught, women-in-tech | 08-Jun-2025 |
| How I Earned a Bounty Using VirusTotal Recon | https://kingcoolvikas.medium.com/how-i-earned-a-bounty-using-virustotal-recon-93024ee964ed?source=rss------bug_bounty-5 | Vikas Anand | bug-bounty, recon, cybersecurity | 08-Jun-2025 |
| How I Found Bug in Dutch Government and Never got the Swag | https://kingcoolvikas.medium.com/how-i-found-bug-in-dutch-government-and-never-got-the-swag-7e161f115974?source=rss------bug_bounty-5 | Vikas Anand | bug-bounty, recon, cyber-security-awareness | 08-Jun-2025 |
| The Future is Simple: Why AI & Tools Still Miss the Dumbest Bugs | https://myselfakash20.medium.com/the-future-is-simple-why-ai-tools-still-miss-the-dumbest-bugs-8e2072eff5a6?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, technology, bug-bounty-tips, cybersecurity, bug-bounty | 08-Jun-2025 |
| Kali GPT: The AI Co-Pilot Revolutionizing Penetration Testing on Kali Linux | https://elcazad0r.medium.com/kali-gpt-the-ai-co-pilot-revolutionizing-penetration-testing-on-kali-linux-335d7ecf65b4?source=rss------bug_bounty-5 | EL_Cazad0r | cybersecurity, penetration-testing, bug-bounty, chatgpt, kali-linux | 08-Jun-2025 |
| WebSocket Wizardry: How a Forgotten Channel Let Me Sniff Private Chats in Real-Time ️♂️ | https://infosecwriteups.com/websocket-wizardry-how-a-forgotten-channel-let-me-sniff-private-chats-in-real-time-%EF%B8%8F-%EF%B8%8F-c8ccde8eee0f?source=rss------bug_bounty-5 | Iski | hacking, money, infosec, bug-bounty, cybersecurity | 08-Jun-2025 |
| What Is Open Redirect? The Simple Bug With Dangerous Consequences | https://medium.com/@parsagamer.zx/what-is-open-redirect-the-simple-bug-with-dangerous-consequences-5ae606e0324a?source=rss------bug_bounty-5 | Parsa Mahmoudi | cybersecurity, programming, bug-bounty, python, bug-hunting | 08-Jun-2025 |
| How to manually hunt for F5 Big-IP RCE (CVE 2020–5902, CVE2022–1388) | https://medium.com/@josekuttykunnelthazhebinu/how-to-manually-hunt-for-f5-big-ip-rce-cve-2020-5902-cve2022-1388-da78fb0a562e?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty, exploit, hacking, bug-bounty-writeup, hackthebox | 08-Jun-2025 |
| Kali GPT: The AI Cyber Companion Built for Hackers, Not Bloggers | https://medium.com/@cybertechajju/kali-gpt-the-ai-cyber-companion-built-for-hackers-not-bloggers-a72406655952?source=rss------bug_bounty-5 | CyberTechAjju | bug-bounty, cybersecurity, new-ai-chatgpt, kali-gpt, kali-linux | 08-Jun-2025 |
| Mass Message Injection and IDOR in Account Verification | https://kingcoolvikas.medium.com/mass-message-injection-and-idor-in-account-verification-c599b729321d?source=rss------bug_bounty-5 | Vikas Anand | cybersecurity, bug-bounty | 08-Jun-2025 |
| How I Found a Critical Vulnerability on a GOV.MY Web App — And Reported It Responsibly | https://medium.com/@wanqais007/how-i-found-a-critical-vulnerability-on-a-gov-my-web-app-and-reported-it-responsibly-e48f27296a01?source=rss------bug_bounty-5 | El Professor Qais | csrf-attack, hacking-for-defense, bug-bounty, penetration-testing, ethical-hacking | 07-Jun-2025 |
| $7,500 Bug: Exposing Any HackerOne User’s Email via Private Program Invite | https://infosecwriteups.com/7-500-bug-exposing-any-hackerone-users-email-via-private-program-invite-de6fd6b3b6c8?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, hacking, tips-and-tricks, penetration-testing | 07-Jun-2025 |
| Netlas Dorking | Part 1 | https://systemweakness.com/netlas-dorking-part-1-c847fac73c7b?source=rss------bug_bounty-5 | AbhirupKonwar | osint, ethical-hacking, bug-bounty-tips, bug-bounty, pentesting | 07-Jun-2025 |
| Design Flaw on OTP endpoint leads to Create Fake Accounts — A Subtle Yet Dangerous Flaw in User… | https://medium.com/@amanba13.ab/design-flaw-on-otp-endpoint-leads-to-create-fake-accounts-a-subtle-yet-dangerous-flaw-in-user-c511dfab89e0?source=rss------bug_bounty-5 | Aman Banga | bug-bounty, ios, penetration-testing, cybersecurity, hacking | 07-Jun-2025 |
| Abuse-ception: How I Turned the Abuse Report Feature Into a Mass Email Spammer | https://infosecwriteups.com/abuse-ception-how-i-turned-the-abuse-report-feature-into-a-mass-email-spammer-38b38a4c3c36?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, money, infosec, bug-bounty | 07-Jun-2025 |
| Cracking JWTs: A Bug Bounty Hunting Guide [Part 5] | https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-part-5-2791be30bd17?source=rss------bug_bounty-5 | Aditya Bhatt | cybersecurity, jwt, jwt-exploitation, bug-bounty, jwt-authentication | 07-Jun-2025 |
| $1,000 Bounty for Bypassing Restrictions via Modified HTTP Request | https://gaurrav.medium.com/1-000-bounty-for-bypassing-restrictions-via-modified-http-request-8a195a72ded7?source=rss------bug_bounty-5 | Gaurrav Luthra | bug-bounty, infosec, writeup | 07-Jun-2025 |
| Top 10 AI-Powered Tools Every Bug Bounty Hunter Should Try in 2025 | https://medium.com/@sync-with-ivan/top-10-ai-powered-tools-every-bug-bounty-hunter-should-try-in-2025-3af6cfc6212e?source=rss------bug_bounty-5 | Andrei Ivan | ai-tools, artificial-intelligence, cybersecurity, bug-bounty, api-security | 07-Jun-2025 |
| You Don’t Need to Be a Genius to Be a Hacker. Just Be Curious. | https://medium.com/@RootPwned/you-dont-need-to-be-a-genius-to-be-a-hacker-just-be-curious-72adbae62969?source=rss------bug_bounty-5 | Sumanth Yerranagula | cybersecurity, personal-growth, bug-bounty, hacking, ethical-hacking | 07-Jun-2025 |
| RXSS in uncalled function | https://medium.com/@zatikyan.sevada/rxss-in-uncalled-function-f6eb14bc5bd6?source=rss------bug_bounty-5 | Sevada797 | xss-attack, penetration-testing, bug-bounty, cybersecurity | 07-Jun-2025 |
| Business logic allows any user to be blocked from creating an account | https://infosecwriteups.com/business-logic-allows-any-user-to-be-blocked-from-creating-an-account-6a7ab7013ccc?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, bugbounty-tips, bug-bounty, bug-bounty-writeup | 07-Jun-2025 |
| Business Logic Flaws: A Bug Hunter’s Handbook | https://gr3yg05t.medium.com/business-logic-flaws-a-bug-hunters-handbook-293f6a89a7f4?source=rss------bug_bounty-5 | Gr3yG05T | bug-bounty, bug-bounty-tips, bug-bounty-writeup, business-logic, cybersecurity | 07-Jun-2025 |
| Broken Authentication (A02:2021) | https://medium.com/@hackerfromhills/broken-authentication-a02-2021-019f6a048d48?source=rss------bug_bounty-5 | Badal kathayat | bugs, owasp, bug-bounty, owasp-top-10, broken-authentication | 07-Jun-2025 |
| How Hackers Hack WordPress Sites | TryHackMe All In One Room Walkthrough | https://matsecurity.medium.com/how-hackers-hack-wordpress-sites-tryhackme-all-in-one-room-walkthrough-8820f0a0eec9?source=rss------bug_bounty-5 | MatSec | pentesting, bug-bounty, cybersecurity, wordpress, ethical-hacking | 07-Jun-2025 |
| JavaScript for Hackers: The Ultimate Guide for Offensive Security | https://medium.com/@verylazytech/javascript-for-hackers-the-ultimate-guide-for-offensive-security-5631473baa22?source=rss------bug_bounty-5 | Very Lazy Tech | javascript, penetration-testing, ethical-hacking, bug-bounty, hacking | 07-Jun-2025 |
| The Business Case for Investing in Blockchain Security Early | https://medium.com/@decrypt0_blogs/the-business-case-for-investing-in-blockchain-security-early-d4f281912b69?source=rss------bug_bounty-5 | Decrypt0 | decentralized-identity, bug-bounty, audit-smart-contract, penetration-testing | 07-Jun-2025 |
| JWT: How I turned a Regular User into an Admin in 3 Steps | https://medium.com/@0xpedrop/jwt-how-i-turned-a-regular-user-into-an-admin-in-3-steps-48e66c61f621?source=rss------bug_bounty-5 | 0xPedrop | bug-bounty-tips, technology, bug-bounty, tech, cybersecurity | 07-Jun-2025 |
| RedTiger: Advanced Automated XSS Vulnerability Testing Tool | https://medium.com/@medjahdii/redtiger-advanced-automated-xss-vulnerability-testing-tool-a506706767dc?source=rss------bug_bounty-5 | medjahdi | cybersecurity, bug-bounty, pentesting, automation-testing, web-security | 07-Jun-2025 |
| Web Cache Deception Vulnerability Explained with Examples | https://medium.com/h7w/web-cache-deception-vulnerability-explained-with-examples-2a9654445383?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, technology, bug-bounty, penetration-testing, bug-bounty-tips | 07-Jun-2025 |
| Service URLs: The Hidden Gateways in Your Attack Surface | https://osintteam.blog/service-urls-the-hidden-gateways-in-your-attack-surface-cb22fcc74884?source=rss------bug_bounty-5 | Dzianis Skliar | bug-bounty, attack-surface-management, reconnaissance, penetration-testing, initial-access | 07-Jun-2025 |
| $3,000 Bug: HackerOne for Jira Plugin Exposed JWT to Unauthorized Users | https://osintteam.blog/3-000-bug-hackerone-for-jira-plugin-exposed-jwt-to-unauthorized-users-f1fcb08abde2?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty-tips, bug-bounty, tips-and-tricks, penetration-testing | 07-Jun-2025 |
| TURNING NUCLEI INTO A GOLD MINE! | https://medium.com/@Tenebris_Venator/turning-nuclei-into-a-gold-mine-ba2ae1020015?source=rss------bug_bounty-5 | Tenebris Venator | hacking, bug-bounty, bugbounty-tips, hacker, nuclei-template | 07-Jun-2025 |
| $150 Bounty: How a 6-Digit Code Bypass Led to a Permanent Account Lockout on Evernote | https://osintteam.blog/150-bounty-how-a-6-digit-code-bypass-led-to-a-permanent-account-lockout-on-evernote-8d78e10557f4?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, penetration-testing, hacking, bug-bounty, technology | 07-Jun-2025 |
| Comprehensive Guide to IDOR and Access Control Testing | https://medium.com/@vishakcb2004/comprehensive-guide-to-idor-and-access-control-testing-d40bf8266f5b?source=rss------bug_bounty-5 | Infohack | bug-bounty, cybersecurity, ethical-hacking, web-security | 07-Jun-2025 |
| Hacking Tools Running Commands. | https://medium.com/@anandrishav2228/hacking-tools-running-commands-7c2d249dbc18?source=rss------bug_bounty-5 | Rishav anand | money, cybersecurity, ethical-hacking, bug-bounty, tools | 06-Jun-2025 |
| Solution Of Lab: Unprotected admin functionality | https://medium.com/@cyberawareness/solution-of-lab-unprotected-admin-functionality-0807ffba7c4a?source=rss------bug_bounty-5 | SourceFul Space | bug-bounty-writeup, portswigger-lab, bug-bounty, unprotected-admin, portswigger | 06-Jun-2025 |
| One Click Account takeover | https://medium.com/@sangpalisha/one-click-account-takeover-38db9005533c?source=rss------bug_bounty-5 | Isha Sangpal | ethical-hacking, cybersecurity, bug-bounty, penetration-testing, vulnerability | 06-Jun-2025 |
| Why I’m Preparing for OSCP After Years of Theory and Breaks | https://medium.com/@sivaaditya456/why-im-preparing-for-oscp-after-years-of-theory-and-breaks-6f125dbdec67?source=rss------bug_bounty-5 | sivaaditya | bug-bounty, cybersecurity, ethical-hacker, oscp-preparation, self-taught-developer | 06-Jun-2025 |
| How I Hacked 100+ Accounts Using Just XSS | https://infosecwriteups.com/how-i-hacked-100-accounts-using-just-xss-7cd61aa785c9?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, hacker, bug-bounty, xss-attack, web-security | 06-Jun-2025 |
| How Simple RECON Earned Me ₹XX,000 at Zerodha | https://infosecwriteups.com/how-simple-recon-earned-me-xx-000-at-zerodha-3172aea39c3e?source=rss------bug_bounty-5 | Swarnim Bandekar | infosec, hacking, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 06-Jun-2025 |
| How We Discovered a Stored HTML Injection in a Chatbot System ️ | https://hettt.medium.com/how-we-discovered-a-stored-html-injection-in-a-chatbot-system-%EF%B8%8F-6cbefe8b0718?source=rss------bug_bounty-5 | Het Patel | html-injection, bug-bounty, xss-vulnerability | 06-Jun-2025 |
| Why I Spend 70% of My Time on Recon | https://medium.com/@krypto.sec/why-i-spend-70-of-my-time-on-recon-e8eee226aed3?source=rss------bug_bounty-5 | Krypto | information-security, bug-bounty, cybersecurity, ethical-hacking | 06-Jun-2025 |
| Race Condition Rumble: How I Bought 100 Products for the Price of One ️️ | https://infosecwriteups.com/race-condition-rumble-how-i-bought-100-products-for-the-price-of-one-%EF%B8%8F-%EF%B8%8F-fb73f8477249?source=rss------bug_bounty-5 | Iski | money, bug-bounty, cybersecurity, hacking, infosec | 06-Jun-2025 |
| How I Hacked a $7,790 IDOR Flaw in 48 hours | https://medium.com/@ibtissamhammadi1/ethical-hacker-earning-7-790-in-48-hours-by-finding-an-idor-vulnerability-during-a-bug-bounty-6557ffcd33c9?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, programming, cybersecurity, ethical-hacking, technology | 06-Jun-2025 |
| How I Found Open Redirect in VDP using LLM | https://osintteam.blog/how-i-found-open-redirect-in-vdp-using-llm-402d06360636?source=rss------bug_bounty-5 | yee-yore | hacking, bug-bounty, llm, gpt, vulnerability | 06-Jun-2025 |
| IDOR + Stored XSS Bypass Leads to Account Takeover | https://medium.com/@yahiasherif/idor-stored-xss-bypass-leads-to-account-takeover-b92dca468b11?source=rss------bug_bounty-5 | Yahia Sherif | idor, cross-site-scripting, bug-bounty, pentesting, cybersecurity | 06-Jun-2025 |
| Installation of Kali Linux on Virtual Box | https://medium.com/@verylazytech/installation-of-kali-linux-on-virtual-box-42c3a7043056?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, hacking, virtualbox, bug-bounty, penetration-testing | 06-Jun-2025 |
| Bug Bounty-Forget Coding (For Now): The 3 Essential Skills to Find Your First Bug | https://medium.com/@vivekps143/bug-bounty-forget-coding-for-now-the-3-essential-skills-to-find-your-first-bug-2b51543d6c11?source=rss------bug_bounty-5 | Vivek PS | bug-bounty, ethical-hacking, programming, hacking, cybersecurity | 06-Jun-2025 |
| 1. Recon & Enumeration Prompts | https://medium.com/@narendarlb123/1-recon-enumeration-prompts-108d285e39aa?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, infosec, osint, kali-linux, bug-bounty | 06-Jun-2025 |
| OSINT on Companies & Organizations — A Complete Guide for Reconnaissance | https://medium.com/@narendarlb123/osint-on-companies-organizations-a-complete-guide-for-reconnaissance-e22321ed36cb?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | red-team, cybersecurity, bug-bounty, infosec, osint | 06-Jun-2025 |
| Prompt 1: Generate Recon Workflow | https://medium.com/@narendarlb123/prompt-1-generate-recon-workflow-d0e2bbdccd0b?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | cybersecurity, infosec, information-security, owasp, bug-bounty | 06-Jun-2025 |
| CTF Day(8) | https://medium.com/@ahmednarmer1/ctf-day-8-2498149057a6?source=rss------bug_bounty-5 | Ahmed Narmer | web-penetration-testing, web-pentesting, bug-bounty, cybersecurity, ctf | 06-Jun-2025 |
| Machine Identity Attacks: The $15K Vulnerability Class Nobody’s Testing | https://medium.com/@sync-with-ivan/machine-identity-attacks-the-15k-vulnerability-class-nobodys-testing-25653be0df28?source=rss------bug_bounty-5 | Andrei Ivan | cyber-security-awareness, cybersecurity, hacking, bug-bounty, cyberattack | 06-Jun-2025 |
| ️♂️ GitHub Dorking for Bug Bounty: Hackers' Hidden Playground | https://medium.com/@aashifm/%EF%B8%8F-%EF%B8%8F-github-dorking-for-bug-bounty-hackers-hidden-playground-b21732fcc00d?source=rss------bug_bounty-5 | 127.0.0.1 | bug-bounty, github-dorking, dorks, api, cybersecurity | 06-Jun-2025 |
| Earned $100 in 2 Minutes — Finding an Open Redirect Vulnerability | https://medium.com/@iambuvanesh/earned-100-in-2-minutes-finding-an-open-redirect-vulnerability-1d8a67da4eac?source=rss------bug_bounty-5 | Buvaneshvaran K | bug-bounty, open-redirect, bug-bounty-tips, bug-bounty-writeup, open-redirection | 06-Jun-2025 |
| CTF Day(9) | https://medium.com/@ahmednarmer1/ctf-day-9-4a085ec154e8?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, cybersecurity, ctf, web-pen-testing, web-penetration-testing | 06-Jun-2025 |
| How I Found a Secondary SQL Injection in a Top 3 Gaming Platform | https://medium.com/@alkaptonurea/how-i-found-a-secondary-sql-injection-in-a-top-3-gaming-platform-abdd4eb461a7?source=rss------bug_bounty-5 | Waleed Osama | sql-injection, bug-bounty, hacking, sql, web-hacking | 06-Jun-2025 |
| How I Found My First Real Bug — and It Got Accepted! | https://medium.com/@yousefabdelmohymen/how-i-found-my-first-real-bug-and-it-got-accepted-a13e15b86a3d?source=rss------bug_bounty-5 | Youssef El-Sibai | bug-bounty, infosec, beginner-guide, ethical-hacking, cybersecurity | 06-Jun-2025 |
| CTF Day(10) | https://medium.com/@ahmednarmer1/ctf-day-10-9203d4e6a9c6?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, web-pen-testing, web-penetration-testing, ctf, bug-bounty | 06-Jun-2025 |
| Global CMS Chaos: How I Scored a $15,000 Bounty Across Two Programs | https://stevenfloresca.medium.com/global-cms-chaos-how-i-scored-a-15-000-bounty-across-two-programs-b535d1f0b888?source=rss------bug_bounty-5 | Steven Floresca | philippines, hackerone, bug-bounty-writeup, hacker, bug-bounty | 05-Jun-2025 |
| ⚡ Race Condition That Leads to Privilege Escalation | https://medium.com/@FufuFaf1/race-condition-that-leads-to-privilege-escalation-b2f5ef484768?source=rss------bug_bounty-5 | FufuFafa | bugbounty-writeup, bug-bounty, cybersecurity, hacking, bug-bounty-tips | 05-Jun-2025 |
| Cookie Attributes — More Than Just Name & Value | https://infosecwriteups.com/cookie-attributes-more-than-just-name-value-a95591be6fba?source=rss------bug_bounty-5 | phoenixcatalan | development, hacking, infosec, bug-bounty, devops | 05-Jun-2025 |
| Bypassing HackerOne Report Ban Using API Key | https://infosecwriteups.com/bypassing-hackerone-report-ban-using-api-key-061711e873c6?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, penetration-testing, bug-bounty, bug-bounty-tips, technology | 05-Jun-2025 |
| Create own Hacking SERVER Instead of Portswigger exploit server | https://medium.com/@hrofficial62/create-own-hacking-server-instead-of-portswigger-exploit-server-78b46172e2f6?source=rss------bug_bounty-5 | Mr Horbio | ethical-hacking, bug-bounty, hacking, pentesting, cybersecurity | 05-Jun-2025 |
| Broken Object Fiesta: How I Used IDOR, No Auth, and a Little Luck to Pull User Data | https://infosecwriteups.com/broken-object-fiesta-how-i-used-idor-no-auth-and-a-little-luck-to-pull-user-data-4b8d8627fb39?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, money, hacking, infosec | 05-Jun-2025 |
| ️ OSINT for User Information — How to Find People Using Public Data | https://medium.com/@narendarlb123/%EF%B8%8F-osint-for-user-information-how-to-find-people-using-public-data-e16554656689?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | bug-bounty, information-security, cybersecurity, infosec, osint | 05-Jun-2025 |
| ️ NASA/JPL Credentials & Email Leak via Public Pastebin — An Unexpected Find | https://medium.com/legionhunters/%EF%B8%8F-nasa-jpl-credentials-email-leak-via-public-pastebin-an-unexpected-find-38fb4ee6ad83?source=rss------bug_bounty-5 | FufuFafa | bug-bounty-tips, bugbounty-writeup, cybersecurity, bug-bounty, hacking | 05-Jun-2025 |
| ️♂️ OSINT Using Kali Linux — Full Guide | https://medium.com/@narendarlb123/%EF%B8%8F-%EF%B8%8F-osint-using-kali-linux-full-guide-7296590e907d?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | kali-linux, osint, cybersecurity, infosec, bug-bounty | 05-Jun-2025 |
| ⚡ Race Condition That Leads to Privilege Escalation | https://medium.com/legionhunters/race-condition-that-leads-to-privilege-escalation-b2f5ef484768?source=rss------bug_bounty-5 | FufuFafa | bugbounty-writeup, bug-bounty, cybersecurity, hacking, bug-bounty-tips | 05-Jun-2025 |
| DOM XSS via Ads on Urban Dictionary | https://medium.com/infosecmatrix/dom-xss-via-ads-on-urban-dictionary-e95dffc4eee8?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, tips-and-tricks, cybersecurity, penetration-testing | 05-Jun-2025 |
| How a Welcome Email Can Be Used for Malicious Redirection | https://infosecwriteups.com/how-a-welcome-email-can-be-used-for-malicious-redirection-fd833ec71550?source=rss------bug_bounty-5 | Ehtesham Ul Haq | web-app-security, penetration-testing, bug-bounty, injection, writeup | 05-Jun-2025 |
| Improper Coupon Validation Allows Unlimited Free Voucher Redemptions | https://medium.com/@cyberrahul/improper-coupon-validation-allows-unlimited-free-voucher-redemptions-d55bf44df2df?source=rss------bug_bounty-5 | Rahul Kumar | bug-bounty, ethical-hacking, cybersecurity, vulnerability-disclosure, business-logic-flaw | 05-Jun-2025 |
| Google Sheets Permission Flaw: Unshared Sheet Access via URL Manipulation | https://medium.com/@lawson.avenue/google-sheets-permission-flaw-unshared-sheet-access-via-url-manipulation-ab2f954fb92c?source=rss------bug_bounty-5 | Dhaval Khamar | cybersecurity, google-docs, google, bug-bounty, google-vrp | 05-Jun-2025 |
| 404 to Root : How a Forgotten Subdomain Led to Server Takeover ☠️ | https://z0h3.medium.com/404-to-root-how-a-forgotten-subdomain-led-to-server-takeover-%EF%B8%8F-6284d0264c7e?source=rss------bug_bounty-5 | z0h3 | bug-bounty, hacking, ctf, infosec, cybersecurity | 05-Jun-2025 |
| How I Made $1,250 in 5 Minutes with One SQL Injection | https://medium.com/@ibtissamhammadi1/how-i-made-1-250-in-5-minutes-with-one-sql-injection-6a67e255b4a2?source=rss------bug_bounty-5 | Ibtissam hammadi | sql, bug-bounty, sqli, hackerone, ethical-hacking | 05-Jun-2025 |
| How to Install Kali Linux: Step-by-Step Beginner’s Guide (2025) | https://medium.com/@verylazytech/how-to-install-kali-linux-step-by-step-beginners-guide-2025-869639b2922f?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, ethical-hacking, hacking, kali-linux, penetration-testing | 05-Jun-2025 |
| How I found a bug in the US Department of Defense (DoD) | https://osintteam.blog/how-i-found-a-bug-in-the-us-department-of-defense-dod-39e2be157d70?source=rss------bug_bounty-5 | RivuDon | bug-bounty-tips, bug-bounty-writeup, bug-bounty, ethical-hacking, infosec | 05-Jun-2025 |
| “It Looked Like the Admin Said It” , The Quiet Power of Quote Spoofing Bugs | https://medium.com/@Aser0xx/it-looked-like-the-admin-said-it-the-quiet-power-of-quote-spoofing-bugs-d51b14cb40ab?source=rss------bug_bounty-5 | Aser0xx | bug-bounty-tips, bugs, cybersecurity, bug-bounty, bugbounty-writeup | 05-Jun-2025 |
| Exploring a Web3 Smart Contract Issue: Gas Exploitation via Unchecked Loops | https://vinaysati.medium.com/exploring-a-web3-smart-contract-issue-gas-exploitation-via-unchecked-loops-492f2899b417?source=rss------bug_bounty-5 | Vinaysati | smart-contracts, top-10, gas-fees, bug-bounty, blockchain | 05-Jun-2025 |
| Roadmap to eJPTv2 Success | https://medium.com/@hrofficial62/roadmap-to-ejptv2-success-dabf0fe9d62b?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, ethical-hacking, bug-bounty, ejpt, hacking | 05-Jun-2025 |
| Google Dorking for Hackers: Secrets, Recon, and Digital Power | https://medium.com/@0xYooZy/google-dorking-for-hackers-secrets-recon-and-digital-power-06a537e1d6bb?source=rss------bug_bounty-5 | YooZy | osint, infosec, cybersecurity, hacking, bug-bounty | 05-Jun-2025 |
| From NA to P3: Unlocking a Premium Feature | https://medium.com/@drhatab/from-na-to-p3-unlocking-a-premium-bug-245936116acb?source=rss------bug_bounty-5 | Mustafa Hatab | cybersecurity, web-security, infosec, bug-bounty | 05-Jun-2025 |
| I responsibly reported two critical security vulnerabilities to AiSensy on 24 May 2025. | https://medium.com/@adithsuhassv/i-responsibly-reported-two-critical-security-vulnerabilities-to-aisensy-on-24-may-2025-82a527be61df?source=rss------bug_bounty-5 | Adith Suhas sv | cybersecurity, bug-bounty | 04-Jun-2025 |
| How Did I Hack a Website Just by Reading JS Files | https://infosecwriteups.com/how-did-i-hack-a-website-just-by-reading-js-files-80f73cbfd4c1?source=rss------bug_bounty-5 | Ibtissam hammadi | hacking, web-security, technology, bug-bounty, javascript | 04-Jun-2025 |
| OWASP Top 10 — | https://medium.com/@hackerfromhills/owasp-top-10-f9462ba19f45?source=rss------bug_bounty-5 | Badal kathayat | vulnerability, sql-injection, owasp-top-10, bug-bounty, owasp | 04-Jun-2025 |
| Again I Found more than 10+ : Target Info, Vulnerability Description, Steps to Reproduce & POC. | https://medium.com/@ravindrajatav0709/again-i-found-more-than-10-target-info-vulnerability-description-steps-to-reproduce-poc-0ee92851b4e7?source=rss------bug_bounty-5 | Ravindra | bug-bounty, cyber-security-awareness, bug-bounty-tips, bug-bounty-writeup, bugs | 04-Jun-2025 |
| Unlocking the Dark Web: A Curated .onion | https://adityaax.medium.com/unlocking-the-dark-web-a-curated-onion-bdc8bb7fa755?source=rss------bug_bounty-5 | adityaax | onion-link, tor, bug-bounty, hacking, darkweb | 04-Jun-2025 |
| Exploiting CORS Vulnerability — How to Test Cross-Origin Resource Sharing Vulnerability | https://medium.com/@hrofficial62/exploiting-cors-vulnerability-how-to-test-cross-origin-resource-sharing-vulnerability-fd816fb4f1d6?source=rss------bug_bounty-5 | Mr Horbio | hacking, bug-bounty, cybersecurity, pentesting, ethical-hacking | 04-Jun-2025 |
| Shodan Dorks to Find PII Data & Leaks | https://infosecwriteups.com/shodan-dorks-to-find-pii-data-leaks-50ab8b101f61?source=rss------bug_bounty-5 | It4chis3c | dorks, dorking, shodan, hacking, bug-bounty | 04-Jun-2025 |
| Credential Dumping Applications: What They Are, How They Work, and How to Defend Against Them | https://medium.com/@verylazytech/credential-dumping-applications-what-they-are-how-they-work-and-how-to-defend-against-them-bf77aac1361f?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, credential-dumping, hacking, bug-bounty, ethical-hacking | 04-Jun-2025 |
| I responsibly reported two critical security vulnerabilities to AiSensy | https://medium.com/@adithsuhassv/i-responsibly-reported-two-critical-security-vulnerabilities-to-aisensy-on-24-may-2025-82a527be61df?source=rss------bug_bounty-5 | Adith Suhas sv | cybersecurity, bug-bounty | 04-Jun-2025 |
| Dework: Trello Meets Web3 | https://medium.com/@rutuja.dalvi11/dework-trello-meets-web3-b6d8a3ff372d?source=rss------bug_bounty-5 | Rutuja Dalvi | workflow, dao, productivity, bug-bounty, web3 | 04-Jun-2025 |
| My Experience with Infisical — A Potential Scamming Program | https://medium.com/@saddamzzz65/my-experience-with-infisical-a-potential-scamming-program-d6fc2a487694?source=rss------bug_bounty-5 | Saddamzzz | scamming, cybersecurity, infosec, bug-bounty | 04-Jun-2025 |
| Cyber Clout Chasers: Bending the truth. | https://medium.com/@qhcyberhq/cyber-clout-chasers-bending-the-truth-2d7368565831?source=rss------bug_bounty-5 | QhcyberhQ | cyber-security-awareness, hacking, cybersecurity, bug-bounty | 04-Jun-2025 |
| Weaponizing XSS for Maximum Impact | https://medium.com/@ryuku_dz/weaponizing-xss-for-maximum-impact-0aa84b17ad60?source=rss------bug_bounty-5 | ryuku_dz | vulnerability-research, bug-bounty, xs | 04-Jun-2025 |
| Uncovering Business Logic Vulnerabilities: A Real-World Case Study | https://medium.com/@nishanthannisha008/uncovering-business-logic-vulnerabilities-a-real-world-case-study-18bfbdae46b3?source=rss------bug_bounty-5 | Nishanthan | web-vulnerabilities, bug-bounty, business-logic-bug, application-security, business-logic-flaw | 04-Jun-2025 |
| Cracking JWTs: A Bug Bounty Hunting Guide [Part 4] | https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-part-4-ad98636c5238?source=rss------bug_bounty-5 | Aditya Bhatt | cybersecurity, jwt, jwt-exploitation, jwt-authentication, bug-bounty | 04-Jun-2025 |
| Security Vulnerability in Google Chat’s Absolute Poll Allows Unauthorized Poll Closure | https://medium.com/@ahmedna126/security-vulnerability-in-google-chats-absolute-poll-allows-unauthorized-poll-closure-7abcaf94197e?source=rss------bug_bounty-5 | Ahmed Nasr | web-security, information-security, penteration-testing, google-hacking, bug-bounty | 04-Jun-2025 |
| Inside the Gate: How I Witnessed a Tool Bypass a Metro Entry Without Ticket — And Why It’s a… | https://yeswehack.medium.com/inside-the-gate-how-i-witnessed-a-tool-bypass-a-metro-entry-without-ticket-and-why-its-a-f795a29f0280?source=rss------bug_bounty-5 | Aditya sunny | cybersecurity, bug-bounty, programming, metro, hacking | 04-Jun-2025 |
| ☠️ CORS of Destruction: How Misconfigured Origins Let Me Read Everything | https://infosecwriteups.com/%EF%B8%8F-cors-of-destruction-how-misconfigured-origins-let-me-read-everything-15a49261a32a?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, money, infosec, cybersecurity | 04-Jun-2025 |
| How my curiosity gave me 2 CVEs! | https://snehbavarva.medium.com/how-my-curiosity-gave-me-2-cves-99c420827411?source=rss------bug_bounty-5 | Sneh bavarva | cybersecurity, open-source, bug-bounty, vulnerability, cve | 04-Jun-2025 |
| How Can You Earn $9,860 Bug Bounty Hunting Ethically | https://medium.com/@ibtissamhammadi1/how-can-you-earn-9-860-bug-bounty-hunting-ethically-b2457b2e3dae?source=rss------bug_bounty-5 | Ibtissam hammadi | technology, bug-bounty, cybersecurity, ethical-hacking, hackerone | 04-Jun-2025 |
| Web Reconnaissance with Katana: A Complete Guide to Getting Started with Bug Bounty | https://medium.com/@jpablo13/web-reconnaissance-with-katana-a-complete-guide-to-getting-started-with-bug-bounty-b9f2499e4c00?source=rss------bug_bounty-5 | JPablo13 | penetration-testing, ethical-hacking, infosec, bug-bounty, cybersecurity | 03-Jun-2025 |
| 2. Setting Up the Ultimate Hacker’s Lab (Free Tools Only) | https://infosecwriteups.com/2-setting-up-the-ultimate-hackers-lab-free-tools-only-35b6d7f7f6bc?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, careers, bug-bounty, medium | 03-Jun-2025 |
| OAuth Misuse: Chaining Redirect URIs and Silent Logins into Full Account Takeover | https://medium.com/h7w/oauth-misuse-chaining-redirect-uris-and-silent-logins-into-full-account-takeover-91b68f68227b?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty-tips, technology, tips-and-tricks, bug-bounty | 03-Jun-2025 |
| Hunting for Secrets in Source Maps (.map Files) | https://osintteam.blog/hunting-for-secrets-in-source-maps-map-files-de969e4b0cdb?source=rss------bug_bounty-5 | Monika sharma | hacking, penetration-testing, technology, bug-bounty, tips-and-tricks | 03-Jun-2025 |
| Remote File Inclusion (RFI) Lab — Docker Custom Setup and Exploitation | https://1xf4lc0n.medium.com/remote-file-inclusion-rfi-lab-docker-custom-setup-and-exploitation-44a4e12628fa?source=rss------bug_bounty-5 | Shahin Raza | cybersecurity, bug-bounty, docker-compose, lfi, lfi-vulnerability | 03-Jun-2025 |
| 404 to $4,000: Exposed .git, .env, and Hidden Dev Files via Predictable Paths” | https://infosecwriteups.com/404-to-4-000-exposed-git-env-and-hidden-dev-files-via-predictable-paths-f5723b3ad3f8?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, penetration-testing, hacking, technology | 03-Jun-2025 |
| How One Path Traversal in Grafana Unleashed XSS, Open Redirect and SSRF (CVE-2025–4123) | https://infosecwriteups.com/how-one-path-traversal-in-grafana-unleashed-xss-open-redirect-and-ssrf-cve-2025-4123-b35245dccaab?source=rss------bug_bounty-5 | coffinxp | grafana, cybersecurity, technology, bug-bounty, hacking | 03-Jun-2025 |
| Webhook Vulnerabilities: Hidden Vulnerabilities in Automation Pipelines | https://infosecwriteups.com/webhook-vulnerabilities-hidden-vulnerabilities-in-automation-pipelines-724d09ec6130?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, cybersecurity, tips-and-tricks, penetration-testing | 03-Jun-2025 |
| API Bug Bounty Hunting: Step-by-Step Guide | https://medium.com/@narendarlb123/api-bug-bounty-hunting-step-by-step-guide-0c7e60f4a21d?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | api-security, infosec, cybersecurity, bug-bounty, pentesting | 03-Jun-2025 |
| SSRF: When Your Server Becomes a Nosy Hacker — Part 1 | https://hettt.medium.com/ssrf-when-your-server-becomes-a-nosy-hacker-part-1-f808b9513652?source=rss------bug_bounty-5 | Het Patel | bug-bounty, bug-bounty-writeup, ssrf, ssrf-attack, ssrf-bug | 03-Jun-2025 |
| The Ultimate Penetration Testing Methodology (2025 Edition) | https://medium.com/@verylazytech/the-ultimate-penetration-testing-methodology-2025-edition-40f3b92ad443?source=rss------bug_bounty-5 | Very Lazy Tech | hacking-methodologies, bug-bounty, penetration-testing, oscp, hacking | 03-Jun-2025 |
| IDOR in Disguise: How a Phone Number Leaked PAN Details Instantly!! | https://medium.com/@amanba13.ab/idor-in-disguise-how-a-phone-number-leaked-pan-details-instantly-3c61113e04e7?source=rss------bug_bounty-5 | Aman Banga | bug-bounty-writeup, bug-bounty, security, cybersecurity, responsible-disclosure | 03-Jun-2025 |
| Bug Bounty + AI = This Prompt List Will Change Your Game | https://medium.com/@narendarlb123/bug-bounty-ai-this-prompt-list-will-change-your-game-c11ea8ea4b30?source=rss------bug_bounty-5 | Narendar Battula (nArEn) | pentesting, infosec, chatgpt, bug-bounty, cybersecurity | 03-Jun-2025 |
| Bug Bounty Breakdown: Target Info, Vulnerability Description, Steps to Reproduce & POC. | https://medium.com/@ravindrajatav0709/bug-bounty-breakdown-target-info-vulnerability-description-steps-to-reproduce-poc-08a0948b6050?source=rss------bug_bounty-5 | Ravindra | cyber-security-awareness, bugs, bug-bounty, cybercrime, bug-bounty-tips | 03-Jun-2025 |
| Medium App Bugged? Two Issues That Writers Can’t Ignore | https://medium.com/the-curiosity-ledger/medium-app-bugged-two-issues-that-writers-cant-ignore-d5676f9b795b?source=rss------bug_bounty-5 | Shubham Kumbhar | writing, medium-publications, medium, bug-bounty, coding | 03-Jun-2025 |
| Top File Read Bug POCs that made $20000 | https://infosecwriteups.com/top-file-read-bug-pocs-that-made-20000-3043e676d8d5?source=rss------bug_bounty-5 | It4chis3c | tips-and-tricks, hacking, path-traversal, bug-bounty, local-file-read | 03-Jun-2025 |
| JWT the Hell?! How Weak Tokens Let Me Become Admin with Just a Text Editor ️ | https://infosecwriteups.com/jwt-the-hell-how-weak-tokens-let-me-become-admin-with-just-a-text-editor-%EF%B8%8F-e73bcd66af0d?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, hacking, bug-bounty, money | 03-Jun-2025 |
| Bug Bounty Google Dorks 2025 | https://medium.com/@logicTech/bug-bounty-google-dorks-2025-1b9a9ba00dd6?source=rss------bug_bounty-5 | LogicTech | bug-zero, bug-bounty-writeup, bug-bounty-tips, bug-bounty, bugs | 3-Jun-2025 |
| How i was able to exploit a vulnerable payment system. | https://medium.com/@moratadave/how-i-was-able-to-exploit-a-vulnerable-payment-system-4bd81e05e0c1?source=rss------bug_bounty-5 | Moratadave | secure-coding, bug-bounty, cybersecurity, software-development, ethical-hacking | 03-Jun-2025 |
| Race Condition leads to use-after-free | https://medium.com/@0cifer_l/race-condition-leads-to-use-after-free-38af439e3cfd?source=rss------bug_bounty-5 | 0cifer_l | source-code, cybersecurity, race-condition, bug-bounty, c-programming | 03-Jun-2025 |
| IDOR allows unauthorized payment hijacking | https://infosecwriteups.com/idor-allows-unauthorized-payment-hijacking-3abf642c0cca?source=rss------bug_bounty-5 | JEETPAL | idor, bug-bounty, cybersecurity, bug-bounty-tips | 03-Jun-2025 |
| How I made 600$ in 60 secs ? | https://medium.com/@arjanchaudharyy/how-i-made-600-in-60-secs-f2b085731b59?source=rss------bug_bounty-5 | arjanchaudharyy | bug-bounty, bug-bounty-tips, offensive-security, hacking, bug-bounty-writeup | 03-Jun-2025 |
| OAuth 2.0 & OpenID Connect: Advanced Guide to Flows, Flaws & Fixes | https://medium.com/@shxdowz/oauth-2-0-openid-connect-advanced-guide-to-flows-flaws-fixes-dea389cf6183?source=rss------bug_bounty-5 | Shxdowz | security, api, bug-bounty, oauth2, bug-bounty-tips | 03-Jun-2025 |
| I Built an MCP Server for XSS Testing — Here’s What Happened | https://medium.com/@0xTrk/i-built-an-mcp-server-for-xss-testing-heres-what-happened-1c097e79eb8d?source=rss------bug_bounty-5 | 0xTrk | bug-bounty, web-hacking, ai, pentesting, mcp-server | 03-Jun-2025 |
| The Ultimate Guide to Local File Inclusion (LFI) — From Basics to Real-World Exploits &… | https://medium.com/@zoningxtr/the-ultimate-guide-to-local-file-inclusion-lfi-from-basics-to-real-world-exploits-cc8d0f6d922b?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, cybersecurity, python-programming, bug-bounty, web-development | 03-Jun-2025 |
| How Hackers Help NASA Stay Secure: Inside the NASA VDP | https://medium.com/@aashifm/how-hackers-help-nasa-stay-secure-inside-the-nasa-vdp-07ec255c46f3?source=rss------bug_bounty-5 | 127.0.0.1 | nasa, vdp, hall-of-fame, bug-bounty, cybersecurity | 03-Jun-2025 |
| BountyOS: A Powerful OS for Bug Bounty Hunters | https://medium.com/@tharindu.damith/bountyos-a-powerful-os-for-bug-bounty-hunters-2c08cb63ef8b?source=rss------bug_bounty-5 | Tharindu Damith | pentesting, security, bug-bounty, hacking, linux | 03-Jun-2025 |
| 5 Minutes, 3 Sites, 1 WordPress Vulnerability: My Bug Bounty Win | https://markazgasimov.medium.com/5-minutes-3-sites-1-wordpress-vulnerability-my-bug-bounty-win-9d4d90042833?source=rss------bug_bounty-5 | Markaz Gasimov | penetration-testing, bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips | 03-Jun-2025 |
| Your 30-Day Bug Bounty Kickstart for 2025 (Using Only Free Tools) | https://medium.com/@vivekps143/your-30-day-bug-bounty-kickstart-for-2025-using-only-free-tools-5a323ff82bbc?source=rss------bug_bounty-5 | Vivek PS | bug-bounty-writeup, hacking, programming, cybersecurity, bug-bounty | 03-Jun-2025 |
| Your 30-Day Bug Bounty Kickstart for 2025 (Using Only Free Tools) | https://medium.com/@vivekps143/your-30-day-bug-bounty-kickstart-for-2025-using-only-free-tools-5a323ff82bbc?source=rss------bug_bounty-5 | Vivek PS | programming, cybersecurity, ethical-hacking, bug-bounty, web-development | 03-Jun-2025 |
| Your 30-Day Bug Bounty Kickstart for 2025 (Using Only Free Tools) | https://osintteam.blog/your-30-day-bug-bounty-kickstart-for-2025-using-only-free-tools-5a323ff82bbc?source=rss------bug_bounty-5 | Vivek PS | programming, cybersecurity, ethical-hacking, bug-bounty, web-development | 03-Jun-2025 |
| Reconocimiento Web con Katana: Guía Completa para Empezar en Bug Bounty | https://medium.com/@jpablo13/reconocimiento-web-con-katana-gu%C3%ADa-completa-para-empezar-en-bug-bounty-0728cfd8f7f4?source=rss------bug_bounty-5 | JPablo13 | infosec, cybersecurity, bug-bounty, penetration-testing, ethical-hacking | 02-Jun-2025 |
| How to Start Bug Bounty with Zero Knowledge | https://infosecwriteups.com/how-to-start-bug-bounty-with-zero-knowledge-bfa8c98d897e?source=rss------bug_bounty-5 | Abhijeet Kumawat | careers, jobs, cybersecurity, medium, bug-bounty | 02-Jun-2025 |
| Key things to know before Starting Bug bounty hunting journey | https://medium.com/@gabbytech01/started-my-bug-bounty-hunting-journey-fee-months-back-and-here-are-the-tips-i-have-for-you-d52cd6ffc2bd?source=rss------bug_bounty-5 | GABBYTECH | bug-bounty, cybersecurity, bug-bounty-hunter, penetration-testing | 02-Jun-2025 |
| $540 Bounty: How a Misconfigured Warning Endpoint in Apache Airflow Exposed DAG Secrets | https://infosecwriteups.com/540-bounty-how-a-misconfigured-warning-endpoint-in-apache-airflow-exposed-dag-secrets-ceafdad57673?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, tips-and-tricks, bug-bounty, technology, bug-bounty-tips | 02-Jun-2025 |
| Easiest Bug: Improper Token invalidation. | https://infosecwriteups.com/easiest-bug-improper-token-invalidation-378e1bc60d94?source=rss------bug_bounty-5 | Gr3yG05T | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 02-Jun-2025 |
| I Found an XSS in a Chatbot & Got Paid $250 — Here’s How | https://medium.com/@cybertechajju/i-found-an-xss-in-a-chatbot-got-paid-250-heres-how-d9dd8f500111?source=rss------bug_bounty-5 | CyberTechAjju | xss-vulnerability, writeup, xss-attack, bug-bounty, bug-bounty-writeup | 02-Jun-2025 |
| Top XSS POCs that made $50000 | https://it4chis3c.medium.com/top-xss-pocs-that-made-50000-1691200eb599?source=rss------bug_bounty-5 | It4chis3c | xss-vulnerability, xss-bypass, bug-bounty, xss-attack, hacking | 02-Jun-2025 |
| Exploiting the Gaps in Password Reset Verification | https://infosecwriteups.com/exploiting-the-gaps-in-password-reset-verification-9bb86ec95d29?source=rss------bug_bounty-5 | Ehtesham Ul Haq | penetration-testing, bug-bounty, ethical-hacking, infosec, writeup | 02-Jun-2025 |
| Top XSS POCs that made $50000 | https://infosecwriteups.com/top-xss-pocs-that-made-50000-1691200eb599?source=rss------bug_bounty-5 | It4chis3c | xss-vulnerability, xss-bypass, bug-bounty, xss-attack, hacking | 02-Jun-2025 |
| Advanced XSS Payload PoC — Trust Boundary Bypass via HTML Injection | https://medium.com/@cybertechajju/advanced-xss-payload-poc-trust-boundary-bypass-via-html-injection-77d5c70a58fc?source=rss------bug_bounty-5 | CyberTechAjju | test, bugbounty-writeup, poc, bug-bounty, html-injection | 02-Jun-2025 |
| Advanced XSS Payload Write-Up: DOM Injection via Chatbot / HTML Content Fields | https://medium.com/@cybertechajju/advanced-xss-payload-write-up-dom-injection-via-chatbot-html-content-fields-198114df92b4?source=rss------bug_bounty-5 | CyberTechAjju | meduim, hackerone, bug-bounty, bounty-program, xss-vulnerability | 02-Jun-2025 |
| How I Found a $9,762 Bug with Simple Subdomain Fuzzing | https://medium.com/@ibtissamhammadi1/how-i-found-a-9-762-bug-with-simple-subdomain-fuzzing-1d9f59481d10?source=rss------bug_bounty-5 | Ibtissam hammadi | ethical-hacking, rce, cybersecurity, bug-bounty, fuzzing | 02-Jun-2025 |
| xss test paylods | https://medium.com/@cybertech3856/xss-test-2762b32ae9e1?source=rss------bug_bounty-5 | Cybertech | bug-bounty, bugs, bounties, test | 02-Jun-2025 |
| ️ Advanced Penetration Tester Roadmap (2025 Edition) | https://medium.com/@praveenkavinda05/%EF%B8%8F-advanced-penetration-tester-roadmap-2025-edition-6223773313c9?source=rss------bug_bounty-5 | Praveen Kavinda | penetration-testing, bug-bounty-tips, ethical-hacking, bug-bounty, hacking | 02-Jun-2025 |
| CSRF: How I gained unauthorized access to Cart | https://infosecwriteups.com/csrf-how-i-gained-unauthorized-access-to-cart-45e671a180f9?source=rss------bug_bounty-5 | JEETPAL | bug-bounty-writeup, bug-bounty, csrf, cybersecurity | 02-Jun-2025 |
| Authentication Bypass via OTP Response Manipulation | https://medium.com/@youssefhussein212103168/authentication-bypass-via-otp-response-manipulation-228bca9244d2?source=rss------bug_bounty-5 | Youssefhussein | bug-bounty, pentesting, authentication, penetration-testing, cybersecurity | 02-Jun-2025 |
| SSRF to RCE via Redis using Gopher Protocol | https://medium.com/@zoningxtr/ssrf-to-rce-via-redis-using-gopher-protocol-7409b1d97dcd?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, penetration-testing, cybersecurity, web-development, web3 | 02-Jun-2025 |
| Ultimate Guide to Gopher Protocol — From Basics to Real Exploits | https://medium.com/@zoningxtr/ultimate-guide-to-gopher-protocol-from-basics-to-real-exploits-ed2fb788d8e0?source=rss------bug_bounty-5 | Zoningxtr | web3, bug-bounty, web-development, penetration-testing, cybersecurity | 02-Jun-2025 |
| Gopher Protocol — A Forgotten Protocol with Modern Security Implications | https://medium.com/@zoningxtr/gopher-protocol-a-forgotten-protocol-with-modern-security-implications-932188d5c65e?source=rss------bug_bounty-5 | Zoningxtr | web-development, cybersecurity, penetration-testing, bug-bounty | 02-Jun-2025 |
| S3 Me Rolling: How an Exposed Bucket Gave Me Source Code, Secrets, and a Way In | https://medium.com/@iski/s3-me-rolling-how-an-exposed-bucket-gave-me-source-code-secrets-and-a-way-in-14835098048e?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, infosec, money, hacking | 02-Jun-2025 |
| “From Doubt to Discovery: Reporting a CSRF Bug to NASA ” | https://medium.com/@virendraleelawat/from-doubt-to-discovery-reporting-a-csrf-bug-to-nasa-62f95ecbfb81?source=rss------bug_bounty-5 | Virendra Kumar | bug-bounty-writeup, bugs, bug-bounty-tips, bug-bounty, bug-zero | 02-Jun-2025 |
| Solving PortSwigger’s DOM XSS Lab: document.write in a select element | https://medium.com/@rafamorenoo2004/solving-portswiggers-dom-xss-lab-document-write-in-a-select-element-8844fd8bba89?source=rss------bug_bounty-5 | Rafa Moreno | xs, burpsuite, web-security, bug-bounty, bscp | 02-Jun-2025 |
| Cracking JWTs: A Bug Bounty Hunting Guide [Part 3] | https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-part-3-4cee87018c39?source=rss------bug_bounty-5 | Aditya Bhatt | jwt-authentication, jwt-exploitation, jwt, bug-bounty, burpsuite | 02-Jun-2025 |
| Price Tampering in WooCommerce Checkout API (Flutter App) | https://medium.com/@youssefhussein212103168/price-tampering-in-woocommerce-checkout-api-flutter-app-2a73cefbea80?source=rss------bug_bounty-5 | Youssefhussein | bug-bounty, flutter-security, price-manipulation, flutter, penetration-testing | 02-Jun-2025 |
| SBOM (Software Bill Off Materials) in Security | https://medium.com/@natarajanck2/sbom-software-bill-off-materials-in-security-0876083988fd?source=rss------bug_bounty-5 | Natarajan C K | browsers, sbom, security, bug-bounty, web-applications | 02-Jun-2025 |
| From Customer to Verified: A Critical Role Escalation in WooCommerce Flutter API | https://medium.com/@youssefhussein212103168/from-customer-to-verified-a-critical-role-escalation-in-woocommerce-flutter-api-2a4f4ba49007?source=rss------bug_bounty-5 | Youssefhussein | access-control-security, cybersecurity, bug-bounty, mobile-pentesting, penetration-testing | 02-Jun-2025 |
| Sometimes an informative report can also get you $$ in Bug Bounty. | https://medium.com/@charlocomse/sometimes-an-informative-report-can-also-get-you-in-bug-bounty-6aa2cda9ec7b?source=rss------bug_bounty-5 | Charles Rostain | bug-bounty, infosec, bugbounty-writeup, bounty-program, disclosed | 02-Jun-2025 |
| Solving PortSwigger’s DOM XSS Lab: document.write in a select element | https://medium.com/@rafamorenoo/solving-portswiggers-dom-xss-lab-document-write-in-a-select-element-8844fd8bba89?source=rss------bug_bounty-5 | Rafa Moreno | xs, burpsuite, web-security, bug-bounty, bscp | 02-Jun-2025 |
| Open Redirect + Referer Header = $3,000 Access Token Leak | https://osintteam.blog/open-redirect-referer-header-3-000-access-token-leak-dd45ba4bdb0c?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, bug-bounty-tips, bug-bounty, tips-and-tricks | 01-Jun-2025 |
| How a Path Normalization Flaw in Stripe’s Node.js SDK Leaked PII” | https://osintteam.blog/how-a-path-normalization-flaw-in-stripes-node-js-sdk-leaked-pii-6aec960a70f3?source=rss------bug_bounty-5 | Monika sharma | technology, hacking, penetration-testing, bug-bounty, tips-and-tricks | 01-Jun-2025 |
| Reality of Bug Bounty 2025 | https://osintteam.blog/reality-of-bug-bounty-2025-c920bf9944fb?source=rss------bug_bounty-5 | Bell | hacking, bug-bounty, hacker, osint, cyber-security-awareness | 01-Jun-2025 |
| The Best Bug Bounty Tools in 2025 (With Pro Tips to Use Them Effectively) | https://medium.com/@kailasv678/the-best-bug-bounty-tools-in-2025-with-pro-tips-to-use-them-effectively-e525878969e1?source=rss------bug_bounty-5 | Kailasv | bug-bounty-hunter, bug-bounty-writeup, hacker, bug-bounty-tips, bug-bounty | 01-Jun-2025 |
| Authentication Token Reuse — A Silent 2FA Killer | https://medium.com/@nareshkumar76191/authentication-token-reuse-a-silent-2fa-killer-e52bef4c599a?source=rss------bug_bounty-5 | Nareshkumar | cybersecurity, bug-bounty, bugs, hacking, red-team | 01-Jun-2025 |
| Bug Bounty from Scratch | Everything You Need to Know About Bug Bounty | https://infosecwriteups.com/bug-bounty-from-scratch-everything-you-need-to-know-about-bug-bounty-a2ece2070c4b?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, medium, hacking, infosec, bug-bounty | 01-Jun-2025 |
| How a Shared Host Search Template Led to Widespread Reflected XSS Vulnerabilities | https://medium.com/@mhmodgm54/how-a-shared-host-search-template-led-to-widespread-reflected-xss-vulnerabilities-d2e098e89c8d?source=rss------bug_bounty-5 | Mahmoud Gamal | cybersecurity, bug-bounty-writeup, xss-vulnerability, bug-bounty, bugs | 01-Jun-2025 |
| From alert(1) to Real-world Impact: Hunting XSS Where Others Don’t Look | https://medium.com/@aashifm/from-alert-1-to-real-world-impact-hunting-xss-where-others-dont-look-27f70dbe9778?source=rss------bug_bounty-5 | 127.0.0.1 | osint, cybersecurity, bug-bounty, web-security, xss-attack | 01-Jun-2025 |
| When APIs Don’t Check Roles: Broken Authorization in Customer Deletion Endpoint | https://callgh0st.medium.com/when-apis-dont-check-roles-broken-authorization-in-customer-deletion-endpoint-8b318fd4c8f6?source=rss------bug_bounty-5 | callgh0st | roles, bug-bounty, burpsuite, hacking, broken | 01-Jun-2025 |
| Beyond the Surface: Unearthing Hidden Subdomains for High-Impact Bug Bounties | https://blackhawkk.medium.com/beyond-the-surface-unearthing-hidden-subdomains-for-high-impact-bug-bounties-bef3e3f6a679?source=rss------bug_bounty-5 | Tanmay Bhattacharjee | reconnaissance, information-security, appsec, bug-bounty | 01-Jun-2025 |
| How I Found Sensitive Data on a Website Through Security Testing | https://rejenthompson.medium.com/how-i-found-sensitive-data-on-a-website-through-security-testing-b824930b7654?source=rss------bug_bounty-5 | Rejen | bug-bounty, pentesting, security, cybersecurity | 01-Jun-2025 |
| From alert(1) to Real-world Impact: Hunting XSS Where Others Don’t Look | https://infosecwriteups.com/from-alert-1-to-real-world-impact-hunting-xss-where-others-dont-look-27f70dbe9778?source=rss------bug_bounty-5 | 127.0.0.1 | cybersecurity, bug-bounty, web-security, infosec, xss-attack | 01-Jun-2025 |
| Bypass of Date and Value Restrictions in Expense Submission | https://medium.com/@hossam13/bypass-of-date-and-value-restrictions-in-expense-submission-f0cc6a5cb45a?source=rss------bug_bounty-5 | Hossam Hussein | bug-bounty, bug-bounty-writeup, web-security, vulnerability, bug-bounty-tips | 01-Jun-2025 |
| From Forgot Password to Forgot Validation: A Broken Flow That Let Me Take Over Accounts | https://infosecwriteups.com/from-forgot-password-to-forgot-validation-a-broken-flow-that-let-me-take-over-accounts-04fb7c5b7ecc?source=rss------bug_bounty-5 | Iski | infosec, hacking, cybersecurity, bug-bounty, money | 01-Jun-2025 |
| How I Found an OAuth Token Leak, Bypassed Authentication, and Chained Multiple Vulnerabilities | https://cybersecuritywriteups.com/how-i-found-an-oauth-token-leak-bypassed-authentication-and-chained-multiple-vulnerabilities-d6095aa303a0?source=rss------bug_bounty-5 | Whitehat | bug-bounty-tips, hacking, cybersecurity, bugbounty-writeup, bug-bounty | 01-Jun-2025 |
| A User to Admin: How I Went From Nobody to Owning the Admin Panel | https://infosecwriteups.com/a-user-to-admin-how-i-went-from-nobody-to-owning-the-admin-panel-7dcc22344720?source=rss------bug_bounty-5 | Xh081iX | infosec, bug-bounty, cybersecurity, privilege-escalation, hacking | 01-Jun-2025 |
| The Hidden Admin Backdoor in Reddit Ads | https://infosecwriteups.com/the-hidden-admin-backdoor-in-reddit-ads-32eeb8e1e216?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, tips-and-tricks, penetration-testing, hacking, technology | 01-Jun-2025 |
| Unlimited free burgers — Hacking McDonald’s India | https://monish-basaniwal.medium.com/unlimited-free-burgers-hacking-mcdonalds-india-99feca7dc26f?source=rss------bug_bounty-5 | Monish Basaniwal | vulnerability, ethical-hacking, cybersecurity, security, bug-bounty | 01-Jun-2025 |
| Unauthorized Access to Source Document Images in ERP System | https://medium.com/@hossam13/unauthorized-access-to-source-document-images-in-erp-system-0838d399d14c?source=rss------bug_bounty-5 | Hossam Hussein | cybersecurity, web-security, bug-bounty, bug-bounty-writeup, cyber-security-awareness | 01-Jun-2025 |
| Securing 10th Place in APISEC|CON CTF 2025: My Journey Through 17 API Security Challenges | https://pandyamayurrr.medium.com/securing-10th-place-in-apisec-con-ctf-2025-my-journey-through-17-api-security-challenges-2d6b41a2afd3?source=rss------bug_bounty-5 | Mayur Pandya | bug-bounty-writeup, api-security, ctf-writeup, bug-bounty | 01-Jun-2025 |
| The Ultimate Guide to Starting a Career in Website Application Bug Bounty Hunting ( For Absolute… | https://medium.com/@40sp3l/the-ultimate-guide-to-starting-a-career-in-website-application-bug-bounty-hunting-for-absolute-760fc66d3fca?source=rss------bug_bounty-5 | 40sp3l | bug-bounty | 01-Jun-2025 |
| How to find Jupyter Notebook RCE manually? | https://medium.com/@josekuttykunnelthazhebinu/how-to-find-jupyter-notebook-rce-manually-4fb337998dc1?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty, bug-bounty-hunter, ethical-hacking, bug-bounty-writeup, cyber-security-awareness | 01-Jun-2025 |
| Tilde Games: Exploiting 8.3 Shortnames on IIS Servers | https://infosecwriteups.com/tilde-games-exploiting-8-3-shortnames-on-iis-servers-6f232071e01f?source=rss------bug_bounty-5 | Sachin Sharma | bug-bounty, tilde-enumeration, penetration-testing, cybersecurity, hacking | 01-Jun-2025 |
| A CSRF Story I Encountered on My Bug Bounty Journey | https://enes478.medium.com/a-csrf-story-i-encountered-on-my-bug-bounty-journey-6a037b4025ee?source=rss------bug_bounty-5 | Enes Özlek | bug-bounty-writeup, bug-bounty-tips, bug-bounty, hackerone, hunting | 01-Jun-2025 |
| Logged in Without Logging In: A $xxx Improper Authentication Flaw in TVA’s Portal | https://medium.com/h7w/logged-in-without-logging-in-a-xxx-improper-authentication-flaw-in-tvas-portal-4c54c87bd512?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, tips-and-tricks, penetration-testing, technology, bug-bounty | 01-Jun-2025 |
| CTF Day(7) | https://medium.com/@ahmednarmer1/ctf-day-7-58d2feb3b6a2?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, ctf, web-pen-testing, cybersecurity | 31-May-2025 |
| Bypassing Regex Validations to Achieve RCE: A Wild Bug Story | https://infosecwriteups.com/bypassing-regex-validations-to-achieve-rce-a-wild-bug-story-6476faccbc23?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, infosec, medium, hacking, bug-bounty | 31-May-2025 |
| You Should Know About This Bug, XMLRPC, WordPress. | https://medium.com/@Charon19d/you-should-know-about-this-bug-xmlrpc-wordpress-4604e29a8908?source=rss------bug_bounty-5 | Charon19d | bugbounty-writeup, security, hacking, cyber-security-awareness, bug-bounty | 31-May-2025 |
| Mastering Reconnaissance: The Ultimate Guide to Uncovering Hidden Vulnerabilities and Expanding… | https://rohitchaudhary045.medium.com/mastering-reconnaissance-the-ultimate-guide-to-uncovering-hidden-vulnerabilities-and-expanding-def4269078b6?source=rss------bug_bounty-5 | Rohit Chaudhary | bug-bounty, ethical-hacking, vulnerability, reconnaissance, cybersecurity | 31-May-2025 |
| When XSS Payloads Became My Reddit Password: A Bug That’s Not a Bug (But Still… Kinda Is) | https://medium.com/@cybertechajju/when-xss-payloads-became-my-reddit-password-a-bug-thats-not-a-bug-but-still-kinda-is-095915a5feef?source=rss------bug_bounty-5 | CyberTechAjju | xss-bypass, bug-bounty, bugs, idor-bugbounty, reddit | 31-May-2025 |
| Business Logic Flaw in a Rating System and Earned €150 | https://medium.com/meetcyber/business-logic-flaw-in-a-rating-system-and-earned-150-a992ceb571a1?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-writeup, bug-bounty-tips, hacking, business-logic-flaw, bug-bounty | 31-May-2025 |
| ☁️ SSRF in Cloud Environments: Exploiting AWS Metadata Services Explained with Scenarios… | https://medium.com/@zoningxtr/%EF%B8%8F-ssrf-in-cloud-environments-exploiting-aws-metadata-services-explained-with-scenarios-b5b86d24d999?source=rss------bug_bounty-5 | Zoningxtr | web-development, cybersecurity, penetration-testing, cloud-computing, bug-bounty | 31-May-2025 |
| Command Injection via PHP File Upload in an College Recruitment Registration Portal | https://medium.com/@anonymousshetty2003/command-injection-via-php-file-upload-in-an-college-recruitment-registration-portal-034e56e89006?source=rss------bug_bounty-5 | Anonymousshetty | hacking, bug-bounty-writeup, bug-bounty, cybersecurity, ethical-hacking | 31-May-2025 |
| Facebook App Secret Exposed in GlassWire Binary | https://infosecwriteups.com/facebook-app-secret-exposed-in-glasswire-binary-e8a4e99afb27?source=rss------bug_bounty-5 | Monika sharma | tips-and-tricks, bug-bounty, penetration-testing, technology, hacking | 31-May-2025 |
| Unauthenticated Kibana Dashboard Access — A Serious Security Risk You Can’t Ignore | https://infosecwriteups.com/unauthenticated-kibana-dashboard-access-a-serious-security-risk-you-cant-ignore-002d4d0e24b9?source=rss------bug_bounty-5 | Pratik Dabhi | bugcrowd, bug-bounty, hackerone | 31-May-2025 |
| JSONpocalypse Now: How JSONP Exposure Led to Sensitive Data Leakage | https://infosecwriteups.com/jsonpocalypse-now-how-jsonp-exposure-led-to-sensitive-data-leakage-987b0e2718a8?source=rss------bug_bounty-5 | Iski | hacking, money, bug-bounty, cybersecurity, infosec | 31-May-2025 |
| Unlocking the $100,000 Bounty: Case Study on Headless Chrome Vulnerability in Facebook | https://medium.com/@DrSecurityGuru/unlocking-the-100-000-bounty-case-study-on-headless-chrome-vulnerability-in-facebook-e20c0ca20e4c?source=rss------bug_bounty-5 | DrSecurityGuru | bug-bounty-tips, bug-bounty, cybersecurity | 31-May-2025 |
| How I could delete Every User from a Website Using a Simple Broken Access Control Vulnerability… | https://medium.com/@anonymousshetty2003/how-i-could-delete-every-user-from-a-website-using-a-simple-broken-access-control-vulnerability-c1509ef9d3df?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty-writeup, bug-bounty-tips, ethical-hacking, cybersecurity, bug-bounty | 31-May-2025 |
| How to Make Money with Hacking (ethical way) | https://medium.com/@cypher.one/how-to-make-money-with-hacking-ethical-way-ca8b188b3963?source=rss------bug_bounty-5 | Cypher.One | freelancing, ctf-writeup, hacking, make-money-online, bug-bounty | 31-May-2025 |
| DS_Store — Information Disclosure | https://xelcezeri.medium.com/ds-store-information-disclosure-0b9ac0bca064?source=rss------bug_bounty-5 | elcezeri | bug-bounty-tips, bugbounty-writeup, ödülavcılığı, bug-bounty | 31-May-2025 |
| How Casual Browsing Uncovered a Chain of Critical Vulnerabilities (and What I Did Next) | https://medium.com/@ayushsinghkshatriya/how-casual-browsing-uncovered-a-chain-of-critical-vulnerabilities-and-what-i-did-next-f55b5eb9ec4e?source=rss------bug_bounty-5 | A S Kshatriya | infosec, vulnerability, bug-bounty, cybersecurity, ethical-hacking | 31-May-2025 |
| Days of Recon, One Nuclei Template - Open Redirection Found on NASA. | https://osintteam.blog/days-of-recon-one-nuclei-template-open-redirection-found-on-nasa-f44ae3bef0e2?source=rss------bug_bounty-5 | Gokuleswaran B | grafana, cve-2025-4123, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 31-May-2025 |
| How I Hacked 2FA for a $4,500 Bounty… in Just 24 Hours! | https://medium.com/@ibtissamhammadi1/how-i-hacked-2fa-for-a-4-500-bounty-in-just-24-hours-7f752a47c0c5?source=rss------bug_bounty-5 | Ibtissam hammadi | bug-bounty, ethical-hacking, cybersecurity, technology, 2fa | 31-May-2025 |
| SQL Injection Tutorial: Exploiting an E-commerce Login Page | https://anmolvishwakarma7466.medium.com/sql-injection-tutorial-exploiting-an-e-commerce-login-page-fe3053af7234?source=rss------bug_bounty-5 | Anmolvishwakarma | bug-bounty-tips, bug-bounty-writeup, web-attack, sql-injection, bug-bounty | 31-May-2025 |
| System Integration Blind Spots | https://medium.com/@khode4li/inconsistencies-663e5da2c8c5?source=rss------bug_bounty-5 | Khod4li | vulnerability, security, bug-bounty, programming | 31-May-2025 |
| How I have found my first valid bug that got paid. | https://imran404.medium.com/how-i-have-found-my-first-valid-bug-that-got-paid-7c0f8d40d568?source=rss------bug_bounty-5 | Imran Hossain | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugs, cybersecurity | 31-May-2025 |
| For my self : My Journey Back | https://medium.com/@0xTrk/for-my-self-my-journey-back-6158e81cc88e?source=rss------bug_bounty-5 | 0xTrk | personal-growth, bug-bounty, infosec, self-improvement, cybersecurity | 31-May-2025 |
| Business Logic Bug: Enforce victim to accept the invitation | https://medium.com/@pent0ss/business-logic-bug-enforce-victim-to-accept-the-invitation-3e7811978ad0?source=rss------bug_bounty-5 | Ossama (@pent0ss) | vulnerability, bug-bounty, cybersecurity, bugs, business-logic-bug | 31-May-2025 |
| Crack Zip File password | https://medium.com/@hrofficial62/crack-zip-file-password-2c08ad9053c5?source=rss------bug_bounty-5 | Mr Horbio | hacking, cybersecurity, ethical-hacking, bug-bounty, pentesting | 30-May-2025 |
| How a Simple Trick Helped Me Earn $30k+ from Multiple Bug Bounties | https://medium.com/@cadeeper/how-a-simple-trick-helped-me-earn-30k-from-multiple-bug-bounties-211b75a998d9?source=rss------bug_bounty-5 | Invik | penetration-testing, cybersecurity, development, bug-bounty-writeup, bug-bounty | 30-May-2025 |
| Hacking APIs: OAuth 2.0 Authentication Vulnerabilities | https://iaraoz.medium.com/hacking-apis-oauth-2-0-authentication-vulnerabilities-498c82ef4293?source=rss------bug_bounty-5 | Israel Aráoz Severiche | cybersecurity, api, appsec, pentesting, bug-bounty | 30-May-2025 |
| Hunted a Private Program for 5 Days — 0 Bugs, 3 Lessons | https://infosecwriteups.com/hunted-a-private-program-for-5-days-0-bugs-3-lessons-b371a1a69d55?source=rss------bug_bounty-5 | Abhijeet Kumawat | writer, cybersecurity, bug-bounty, medium, hacking | 30-May-2025 |
| CTF Day(4) | https://medium.com/@ahmednarmer1/ctf-day-4-76c165186a3a?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, bug-bounty, web-pen-testing, ctf | 30-May-2025 |
| How I Made My First €4,000 From Two Simple Race Conditions | https://medium.com/@FufuFaf1/how-i-made-my-first-4-000-from-two-simple-race-conditions-270033021482?source=rss------bug_bounty-5 | FufuFafa | hacking, bug-bounty-tips, bug-bounty, bug-bounty-writeup, cybersecurity | 30-May-2025 |
| Cracking JWTs: A Bug Bounty Hunting Guide — Part 2 | https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-part-2-7bd111ddadd8?source=rss------bug_bounty-5 | Aditya Bhatt | jwt, jwt-exploitation, bug-bounty, jwt-token, cybersecurity | 30-May-2025 |
| Hidden Tokens, Open Wallets: How I Found Payment API Keys in Production JavaScript | https://infosecwriteups.com/hidden-tokens-open-wallets-how-i-found-payment-api-keys-in-production-javascript-7810b3113e04?source=rss------bug_bounty-5 | Iski | hacking, money, infosec, bug-bounty, cybersecurity | 30-May-2025 |
| XSS Without Input Fields: SQL Injection Attack in Web3 Applications | https://medium.com/@antonenko.arsenii/xss-without-input-fields-sql-injection-attack-in-web3-applications-1dc1cbcf3f2e?source=rss------bug_bounty-5 | arsenii9 | web3, bug-bounty, cybersecurity, sql-injection, xss-attack | 30-May-2025 |
| IDOR for Coins: How I Paid Less and Got More on Reddit’s PayPal Checkout | https://infosecwriteups.com/idor-for-coins-how-i-paid-less-and-got-more-on-reddits-paypal-checkout-aa40c51f11d3?source=rss------bug_bounty-5 | Monika sharma | technology, tips-and-tricks, bug-bounty, bug-bounty-tips, penetration-testing | 30-May-2025 |
| Leaking in Plain Sight: How Short Links Expose Sensitive Data | https://infosecwriteups.com/leaking-in-plain-sight-how-short-links-expose-sensitive-data-fb5bf9e53833?source=rss------bug_bounty-5 | Dzianis Skliar | red-team, penetration-testing, bug-bounty, reconnaissance | 30-May-2025 |
| SQLi Pentest Toolkit | https://adce626.medium.com/%D9%85%D8%AC%D9%85%D9%88%D8%B9%D8%A9-%D8%A3%D8%AF%D9%88%D8%A7%D8%AA-%D8%A7%D8%AE%D8%AA%D8%A8%D8%A7%D8%B1-%D8%A7%D9%84%D8%A7%D8%AE%D8%AA%D8%B1%D8%A7%D9%82-sqli-a959d4b68489?source=rss------bug_bounty-5 | adce626 | sql, bug-bounty, bugs, kali-linux | 30-May-2025 |
| CTF Day(5) | https://medium.com/@ahmednarmer1/ctf-day-5-421663cda66d?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, web-pen-testing, bug-bounty, ctf | 30-May-2025 |
| Shodan.io — The Search Engine for Hackers | https://medium.com/@sachinpv2004/shodan-io-the-search-engine-for-hackers-38b05085572d?source=rss------bug_bounty-5 | SACHIN PV | reconnaissance, shodan, bug-bounty, pentesting, discovery | 30-May-2025 |
| Exploiting WebSocketCommunication in a JIRA `redacted` Add-On | https://medium.com/@UpdateLap/exploiting-websocketcommunication-in-a-jira-redacted-add-on-1440fba174b5?source=rss------bug_bounty-5 | Jafar Abo Nada | security, websocket, bug-bounty | 30-May-2025 |
| Recon Methodology: Subdomain Enumeration | https://medium.com/@marduk.i.am/recon-methodology-subdomain-enumeration-0e0493001a03?source=rss------bug_bounty-5 | Marduk I Am | reconnaissance, subdomains-enumeration, ethical-hacking, bug-bounty, cybersecurity | 30-May-2025 |
| Public Programs vs Self-Hosted Programs | https://cybersecuritywriteups.com/public-programs-vs-self-hosted-programs-f0e1801fd042?source=rss------bug_bounty-5 | Abhijeet Kumawat | medium, bug-bounty, hacking, cybersecurity, infosec | 30-May-2025 |
| How I Turned a Simple Bug Into $5,756 | https://medium.com/@ibtissamhammadi1/how-i-turned-a-simple-bug-into-5-756-19b176312060?source=rss------bug_bounty-5 | Ibtissam hammadi | rce, ethical-hacking, cybersecurity, bug-bounty, hacker | 30-May-2025 |
| CTF Day(6) | https://medium.com/@ahmednarmer1/ctf-day-6-9ab92dec9346?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, web-pen-testing, ctf, bug-bounty | 30-May-2025 |
| The NPM Token That Stayed Alive for Two Years | https://medium.com/@arshadkazmi42/the-npm-token-that-stayed-alive-for-two-years-379d8d7be068?source=rss------bug_bounty-5 | Arshad Kazmi | hackerone-report, bug-bounty, npm-token, dockerhub, exposed-credential | 30-May-2025 |
| My Journey to NASA’s Hall of Fame | https://infosecwriteups.com/my-journey-to-nasas-hall-of-fame-6e680736f557?source=rss------bug_bounty-5 | Hack-Bat | hall-of-fame, hacking, nasa, bug-bounty, penetration-testing | 30-May-2025 |
| Cross-Site Request Forgery | https://medium.com/@sangpalisha/cross-site-request-forgery-820e0b2f20d6?source=rss------bug_bounty-5 | Isha Sangpal | vulnerability, web-security, penetration-testing, bug-bounty, cybersecurity | 30-May-2025 |
| ️ Sensitive Data Exposure via WP-JSON in WordPress | https://medium.com/@noorsaper64/%EF%B8%8F-sensitive-data-exposure-via-wp-json-in-wordpress-d1dee7318d3b?source=rss------bug_bounty-5 | Noorsaper | rest-api, owasp, bug-bounty, sensitive-data-exposure, wordpress | 29-May-2025 |
| $1,000 Bounty: Created Support Tickets on Behalf of Any HackerOne User via Email | https://osintteam.blog/1-000-bounty-created-support-tickets-on-behalf-of-any-hackerone-user-via-email-d8b6f90f0757?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, cybersecurity, technology, penetration-testing, bug-bounty | 29-May-2025 |
| EG-CERT CTF25 Flog: Nowadays Arch Issues | https://dphoeniixx.medium.com/eg-cert-ctf25-flog-nowadays-arch-issues-acd6afa46b63?source=rss------bug_bounty-5 | Sayed Abdelhafiz | penetration-testing, ctf, bug-bounty | 29-May-2025 |
| 7 Principles of Software Testing Every QA Should Know | https://medium.com/@prafullamishra827/7-principles-of-software-testing-every-qa-should-know-c38255e81415?source=rss------bug_bounty-5 | Prafulla Mishra | software-development, software-testing, ai, bug-bounty, automation | 29-May-2025 |
| Logic Flaw: Deleting HackerOne Team Reports Without Access Rights | https://infosecwriteups.com/logic-flaw-deleting-hackerone-team-reports-without-access-rights-1c4755a23af8?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty-tips, bug-bounty, penetration-testing, hacking | 29-May-2025 |
| HTTP Host Header Attack? | https://medium.com/@anandrishav2228/http-host-header-attack-2949e597437f?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, students, money, cybersecurity, hacking | 29-May-2025 |
| Uncovering Amazon S3 Bucket Vulnerabilities: A Comprehensive Guide for Ethical Hackers | https://infosecwriteups.com/uncovering-amazon-s3-bucket-vulnerabilities-a-comprehensive-guide-for-ethical-hackers-0fc903ac21d0?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, infosec, medium, s3-bucket, hacking | 29-May-2025 |
| CVE-2025–4687 ( Pre-Account takeover through invite on Teletonika RMS website ) | https://jowin922.medium.com/cve-2025-4687-pre-account-takeover-through-invite-on-teletonika-rms-website-972335378829?source=rss------bug_bounty-5 | jowin922 | cybersecurity, cve, bug-bounty | 29-May-2025 |
| GitHub Recon: The Underrated Technique to Discover High-Impact Leaks in Bug Bounty | https://infosecwriteups.com/github-recon-the-underrated-technique-to-discover-high-impact-leaks-in-bug-bounty-c4069894389a?source=rss------bug_bounty-5 | coffinxp | cybersecurity, technology, bug-bounty, programming, github | 29-May-2025 |
| How my first bug got accepted in VDP program after two rejections | https://medium.com/@meowsint/how-my-first-bug-got-accepted-in-vdp-program-after-two-rejections-ce3890af6793?source=rss------bug_bounty-5 | Meowsint | bug-bounty, cybersecurity, technology, bug-bounty-writeup, bug-bounty-tips | 29-May-2025 |
| Public Code, Private Keys: How I Was Rewarded $$$ for Uncovering PII Leaks (Part I) | https://0xh7ml.medium.com/public-code-private-keys-how-i-was-rewarded-for-uncovering-pii-leaks-part-i-344b237d237a?source=rss------bug_bounty-5 | Md Saikat | bug-bounty-writeup, infosec, bug-bounty | 29-May-2025 |
| Access Denied to Hall-of-Fame | https://infosecwriteups.com/access-denied-to-hall-of-fame-6275483870a0?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | programming, cybersecurity, security, technology, bug-bounty | 29-May-2025 |
| From Frustration to Impact: How a Weekend Hunt Turned into a Critical CSRF+Phishing Discovery | https://sarv3shxploit.medium.com/from-frustration-to-impact-how-a-weekend-hunt-turned-into-a-critical-csrf-phishing-discovery-c6f4bfba11cc?source=rss------bug_bounty-5 | Sarvesh Mishra | infosec, csrf, bug-bounty, web-security, cybersecurity | 29-May-2025 |
| CVE-2025–4687 ( Pre-Account takeover through invite on Teltonika RMS website ) | https://jowin922.medium.com/cve-2025-4687-pre-account-takeover-through-invite-on-teletonika-rms-website-972335378829?source=rss------bug_bounty-5 | jowin922 | cybersecurity, cve, bug-bounty | 29-May-2025 |
| SSRF in Action: Metadata Exploitation in Cloud via a Vulnerable PHP Backend | https://medium.com/@zoningxtr/ssrf-in-action-metadata-exploitation-in-cloud-via-a-vulnerable-php-backend-0cfb215b4054?source=rss------bug_bounty-5 | Zoningxtr | web-development, bug-bounty, penetration-testing, cybersecurity, cloud-computing | 29-May-2025 |
| The Big IAM Challenge | https://medium.com/@abhishek-ji/the-big-iam-challenge-040ab906a609?source=rss------bug_bounty-5 | Abhishek Gupta | bug-bounty, cybersecurity, aws, cloud-computing, cloud-security | 29-May-2025 |
| CTF Day(3) | https://medium.com/@ahmednarmer1/ctf-day-3-e0fe59463340?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, ctf, web-penetration-testing, cybersecurity | 29-May-2025 |
| A Hidden Backdoor: Bypassing reCAPTCHA on the Sign-up Page | https://infosecwriteups.com/a-hidden-backdoor-bypassing-recaptcha-on-the-sign-up-page-2b5b3c18257f?source=rss------bug_bounty-5 | Ehtesham Ul Haq | bypass, bug-bounty, penetration-testing, recaptcha, ethical-hacking | 29-May-2025 |
| ☁️ Understanding Cloud Metadata & SSRF: Exposure, Danger & Exploitation | https://medium.com/@zoningxtr/%EF%B8%8F-understanding-cloud-metadata-ssrf-exposure-danger-exploitation-8ac0db7eb030?source=rss------bug_bounty-5 | Zoningxtr | cloud-computing, penetration-testing, bug-bounty, cybersecurity, web-development | 29-May-2025 |
| Hacking Vulnerable Bank API (Extensive) | https://medium.com/@cyberpreacher_/hacking-vulnerable-bank-api-extensive-d2a0d3bb209e?source=rss------bug_bounty-5 | CyberPreacher | bug-bounty, hacker, penetration-testing, apihacking, api | 29-May-2025 |
| From 0 to Exploitable in 600 Seconds My California Bug Story | https://medium.com/@k4r7h1kn/from-0-to-exploitable-in-600-seconds-my-california-bug-story-d10f4b29f306?source=rss------bug_bounty-5 | Karthikeyan | bug-bounty, penetration-testing, cybersecurity, bug-bounty-tips, hacking | 29-May-2025 |
| Bug Bounty and Penetration Testing Explained: What’s the Difference | https://medium.com/@impratikdabhi/bug-bounty-and-penetration-testing-explained-whats-the-difference-41384e187c9a?source=rss------bug_bounty-5 | Pratik Dabhi | bugcrowd, hackerone, hacking, yeswehack, bug-bounty | 29-May-2025 |
| Understanding the Referer in Network Header | https://medium.com/@natarajanck2/understanding-the-referer-in-network-header-c1a675406014?source=rss------bug_bounty-5 | Natarajan C K | browsers, security, networking, bug-bounty, http-referer | 29-May-2025 |
| Can a Brilliant Hacker Mind Be Disconnected from the Body? | https://medium.com/@know.0nix/can-a-brilliant-hacker-mind-be-disconnected-from-the-body-4a0cf6e7da26?source=rss------bug_bounty-5 | Ak1T4 | bug-bounty | 29-May-2025 |
| How I Earned My First $50 Bug Bounty with a Google Dork and a Test Key | https://medium.com/@cybertechajju/how-i-earned-my-first-50-bug-bounty-with-a-google-dork-and-a-test-key-a3e6290db694?source=rss------bug_bounty-5 | CyberTechAjju | first-bounty, bounty-program, bug-bounty-tips, hacker, bug-bounty | 29-May-2025 |
| Menjadi Ahli Cyber Security dalam 5 Tahun | https://medium.com/@zachriek/menjadi-ahli-cyber-security-dalam-5-tahun-5c4ee59ceb08?source=rss------bug_bounty-5 | Muhammad Zachrie Kurniawan | cybersecurity, bug-bounty | 29-May-2025 |
| Ciphered Chaos: Bit-Flipping in the Wild | https://batee5a.medium.com/ciphered-chaos-bit-flipping-in-the-wild-345cda16c19e?source=rss------bug_bounty-5 | Ahmed A. Sherif (Batee5a) | bug-bounty-writeup, vulnerability, crypto, encryption, bug-bounty | 28-May-2025 |
| Exploiting the Menu: Breaking Restaurant Delivery Systems | https://medium.com/@davimouar/exploiting-the-menu-breaking-restaurant-delivery-systems-37c473849ac8?source=rss------bug_bounty-5 | Davi Moura | cybersecurity, parameter-tampering, bug-bounty, programming, hacking | 28-May-2025 |
| Reflected XSS and Blind OS Command Injection | https://osintteam.blog/reflected-xss-and-blind-os-command-injection-a056c75f99be?source=rss------bug_bounty-5 | Monika sharma | cyebrsecurity, penetration-testing, bug-bounty-tips, bug-bounty, technology | 28-May-2025 |
| $500 Bounty: Shopify Referrer Leak: Hijacking Storefront Access with a Single Token | https://infosecwriteups.com/500-bounty-shopify-referrer-leak-hijacking-storefront-access-with-a-single-token-4edc0de09cff?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty-tips, hacking, bug-bounty, penetration-testing | 28-May-2025 |
| Hacking Insights: Gaining Access to University of Hyderabad Ganglia Dashboard | https://infosecwriteups.com/hacking-insights-gaining-access-to-university-of-hyderabad-ganglia-dashboard-bdc15f3a82fe?source=rss------bug_bounty-5 | ARoy | hacking, cybersecurity, dashboard, bug-bounty, infosec | 28-May-2025 |
| $750 Bounty: for HTTP Reset Password Link in Mattermost | https://infosecwriteups.com/750-bounty-for-http-reset-password-link-in-mattermost-3cc3acdb0f85?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, bug-bounty, bug-bounty-tips, penetration-testing, technology | 28-May-2025 |
| Finding Broken Access Control in DoD | https://azraeldeathangel.medium.com/finding-broken-access-control-in-dod-c569305f9099?source=rss------bug_bounty-5 | Azrael | hacking, bug-bounty, web-hacking | 28-May-2025 |
| Roadmap Cybersecurity Menuju Pentester Profesional (2025–2030) | https://medium.com/@riskiardiansyah51938/roadmap-cybersecurity-menuju-pentester-profesional-2025-2030-8fec44f6ff23?source=rss------bug_bounty-5 | Riski Ardiansyah | bug-bounty, cybersecurity | 28-May-2025 |
| Broken Access Control: The Quiet Killer in Web Applications | https://medium.com/@aashifm/broken-access-control-the-quiet-killer-in-web-applications-79cb85f72cd8?source=rss------bug_bounty-5 | 127.0.0.1 | idor, bug-bounty, admin-access, jwt-exploitation, broken-access-control | 28-May-2025 |
| I Tried 10 Recon Tools for 7 Days — Here’s What Actually Found Bugs | https://infosecwriteups.com/i-tried-10-recon-tools-for-7-days-heres-what-actually-found-bugs-9013b4cd2396?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, medium-writers, recon, hacking, infosec | 28-May-2025 |
| POC — CVE-2025–2539 File Away <= 3.9.9.0.1 | https://medium.com/@verylazytech/poc-cve-2025-2539-file-away-3-9-9-0-1-ee5c84e42a92?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, cve-2025-2539, penetration-testing, exploit, wordpress | 28-May-2025 |
| Confessions of a Burp Suite Beginner | https://medium.com/@cosmicbyt3/confessions-of-a-burp-suite-beginner-03aae8944284?source=rss------bug_bounty-5 | CosmicByte | ethical-hacking, web-application-security, bug-bounty, infosec-write-ups, burpsuite | 28-May-2025 |
| New to Bug Bounties? These Are the PoC to Earn Your First $$$! | https://medium.com/@wanqais007/new-to-bug-bounties-these-are-the-poc-to-earn-your-first-cf48af82b2f2?source=rss------bug_bounty-5 | WAN AHMAD QAIS | file-upload-bypass, bug-bounty, penetration-testing, cybersecurityforbeginners, csrf-exploit | 28-May-2025 |
| Unsafe Redirects = Unlimited Ride: How Open Redirect Led Me to Internal Dashboards | https://infosecwriteups.com/unsafe-redirects-unlimited-ride-how-open-redirect-led-me-to-internal-dashboards-c371e1aa9fbc?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, hacking, money, cybersecurity | 28-May-2025 |
| OneSpan Race Condition — Duplicate Group Names? Ez Game | https://medium.com/@FufuFaf1/onespan-race-condition-duplicate-group-names-ez-game-e6bfd734850b?source=rss------bug_bounty-5 | FufuFafa | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty, hacking | 28-May-2025 |
| How I discovered Reflected XSS in GoldAcademy. | https://medium.com/@secourses8/how-i-discovered-reflected-xss-in-goldacademy-257b69a14be8?source=rss------bug_bounty-5 | Lime | hunting, bug-bounty, reflected-xss | 28-May-2025 |
| How a Simple Payment Exploit Could Take Down a Prop Firm — And No One Cared | https://medium.com/@nimashahbazi524/how-a-simple-payment-exploit-could-take-down-a-prop-firm-and-no-one-cared-026509b54002?source=rss------bug_bounty-5 | Nimashahbazi | bug-bounty, prop-firm, dos-attack | 28-May-2025 |
| Broken Access Control: The Quiet Killer in Web Applications | https://infosecwriteups.com/broken-access-control-the-quiet-killer-in-web-applications-79cb85f72cd8?source=rss------bug_bounty-5 | 127.0.0.1 | idor, bug-bounty, admin-access, jwt-exploitation, broken-access-control | 28-May-2025 |
| How I Bypassed a Famous Regional Newspaper’s Subscription Plan By Http Response Manipulation | https://osintteam.blog/how-i-bypassed-a-famous-regional-newspapers-subscription-plan-by-http-response-manipulation-ac5bd9d2eaea?source=rss------bug_bounty-5 | Vivek PS | programming, web-development, cybersecurity, ethical-hacking, bug-bounty | 28-May-2025 |
| Cracking JWTs: A Bug Bounty Hunting Guide [Part 1] | https://infosecwriteups.com/cracking-jwts-a-bug-bounty-hunting-guide-99d6c21d78c9?source=rss------bug_bounty-5 | Aditya Bhatt | jwt-authentication, jwt-exploitation, burpsuite, bug-bounty, jwt | 28-May-2025 |
| Uncovering Hidden Signup Pages for Bug Bounty Hunting | https://medium.com/@dhxrxx/uncovering-hidden-signup-pages-for-bug-bounty-hunting-14aca3f9d297?source=rss------bug_bounty-5 | Dharanis | bug-bounty, penetration-testing, drupal, laravel, osint | 28-May-2025 |
| How Web Cache Poisoning via Unkeyed Query Strings Can Lead to Reflected XSS | https://osintteam.blog/how-web-cache-poisoning-via-unkeyed-query-strings-can-lead-to-reflected-xss-0c0ce45cb5d9?source=rss------bug_bounty-5 | Bash Overflow | reflected-xss, bug-bounty-tips, web-cache-poisoning, bug-bounty, cache-poisoning-attack | 28-May-2025 |
| Spidering in Security | https://medium.com/@natarajanck2/spidering-in-security-104900f56836?source=rss------bug_bounty-5 | Natarajan C K | security, browsers, spidering, cybersecurity, bug-bounty | 28-May-2025 |
| Mastering PHP Wrappers: Concepts, Use Cases, and Security Risks | https://medium.com/@zoningxtr/mastering-php-wrappers-concepts-use-cases-and-security-risks-380bb59cb6c1?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, bug-bounty, penetration-testing, web-development, php | 28-May-2025 |
| HackingHub Lab: Scam Artists — API Hacking & Reverse Proxy Basics.NahamSec | https://medium.com/@ethicalrohit/hackinghub-lab-scam-artists-api-hacking-reverse-proxy-basics-nahamsec-b9b6ffd9cf90?source=rss------bug_bounty-5 | Rohit Pawar | ctf-writeup, bug-bounty, cybersecurity, ethical-hacking, bug-bounty-writeup | 28-May-2025 |
| Android Pentesting Setup Up Burpsuite Intercept | https://medium.com/@muhammadhuzaifa02134182093/android-pentesting-setup-up-burpsuite-intercept-53b37ea9762c?source=rss------bug_bounty-5 | Muhammadhuzaifa | mobile-pentesting, android-pentest, trafic-capture, bug-bounty, ethical-hacking | 28-May-2025 |
| A Bug Bounty Beginner's Setback - And a Request for Support | https://medium.com/@aashifm/a-bug-bounty-beginners-setback-and-a-request-for-support-509ea402b1f8?source=rss------bug_bounty-5 | 127.0.0.1 | bug-bounty, cybersecurity, support, laptop | 27-May-2025 |
| Logged Out But Still In: How I Exploited a JWT Flaw to Bypass Authentication | https://medium.com/@kailasv678/logged-out-but-still-in-how-i-exploited-a-jwt-flaw-to-bypass-authentication-5e062396923f?source=rss------bug_bounty-5 | Kailasv | bug-bounty-hunter, bug-bounty-tips, bug-bounty-program, bug-bounty, bug-bounty-writeup | 27-May-2025 |
| How Improper Regex Usage Can Open Your System to Vulnerabilities | https://zvitox.medium.com/how-improper-regex-usage-can-open-your-system-to-vulnerabilities-c7c5b1541c52?source=rss------bug_bounty-5 | ZVitoX | hacking, regex, bug-bounty, penetration-testing, security | 27-May-2025 |
| The Image That Spoke JavaScript | https://infosecwriteups.com/the-image-that-spoke-javascript-bdbd368921e4?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, cybersecurity, penetration-testing, hacking, technology | 27-May-2025 |
| Breaking Twitter’s VPN: $20,160 Bounty for a Pre-Auth RCE via Pulse Secure Chain | https://infosecwriteups.com/breaking-twitters-vpn-20-160-bounty-for-a-pre-auth-rce-via-pulse-secure-chain-ab0ad708e988?source=rss------bug_bounty-5 | Monika sharma | hacking, bug-bounty, cybersecurity, technology, penetration-testing | 27-May-2025 |
| I Hacked Indian Government Websites and became Admin Ethically. | https://infosecwriteups.com/i-hacked-indian-government-websites-and-became-admin-ethically-af6f68c06de3?source=rss------bug_bounty-5 | RivuDon | bug-bounty, hacking, ethical-hacking, bug-bounty-writeup, bug-bounty-tips | 27-May-2025 |
| Demystifying Cookies : The Complete Guide for Bug Bounty Hunters — Part 1 | https://infosecwriteups.com/demystifying-cookies-the-complete-guide-for-bug-bounty-hunters-part-1-c24d2670413a?source=rss------bug_bounty-5 | phoenixcatalan | bug-bounty, infosec, ethical-hacking, cybersecurity, hacking | 27-May-2025 |
| Race Condition Vulnerability | https://medium.com/@anandrishav2228/race-condition-vulnerability-db1a936f17aa?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, bug-bounty, medium, money, hacking | 27-May-2025 |
| Find Secrets in Hidden Directories Using Fuzzing ️ | https://infosecwriteups.com/find-secrets-in-hidden-directories-using-fuzzing-%EF%B8%8F-1666d6f34fd8?source=rss------bug_bounty-5 | Abhijeet Kumawat | hidden, secrets, hacking, bug-bounty, cybersecurity | 27-May-2025 |
| ️♂️ Bug Bounty Recon Methodology for example.com – A Beginner-Friendly Guide | https://medium.com/@asifebrahim580/%EF%B8%8F-%EF%B8%8F-bug-bounty-recon-methodology-for-example-com-a-beginner-friendly-guide-a46a916ea1f3?source=rss------bug_bounty-5 | Asif Ebrahim | bug-bounty-tips, bug-bounty-writeup, bug-bounty-methodology, bug-bounty-recon, bug-bounty | 27-May-2025 |
| Exploiting Web Cache Poisoning with X-Host Header Using Param Miner | https://infosecwriteups.com/exploiting-web-cache-poisoning-with-x-host-header-using-param-miner-f1b7b06bf5b8?source=rss------bug_bounty-5 | Bash Overflow | x-host-header, xss-via-cache, bug-bounty, web-cache-poisoning, bug-bounty-tips | 27-May-2025 |
| Header Injection to Hero: How I Hijacked Emails and Made the Server Sing | https://infosecwriteups.com/header-injection-to-hero-how-i-hijacked-emails-and-made-the-server-sing-7b8817e3736c?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, infosec, money, cybersecurity | 27-May-2025 |
| TryHackMe|Data Exfiltration | https://medium.com/@Mx0o14/tryhackme-data-exfiltration-0e31828d806b?source=rss------bug_bounty-5 | Mohamed Ashraf | hacking, penetration-testing, dns, bug-bounty, cybersecurity | 27-May-2025 |
| The IDOR That Played Hide-and-Seek in the URL Path | https://shubhamrooter.medium.com/the-idor-that-played-hide-and-seek-in-the-url-path-540ab1e207fb?source=rss------bug_bounty-5 | Shubham Tiwari | idor-vulnerability, ethical-hacking, api-security-testing, cybersecurity, bug-bounty | 27-May-2025 |
| How I Earned $$$ in a CORS Exploit Misconfigured | https://medium.com/@iambuvanesh/how-i-earned-in-a-cors-exploit-misconfigured-1ff736e75314?source=rss------bug_bounty-5 | Buvaneshvaran K | bug-bounty, bug-bounty-writeup, bug-hunting, bug-bounty-tips, cors | 27-May-2025 |
| Heartbleed: The Bug That Bled the Internet | https://patilraviraj.medium.com/heartbleed-the-bug-that-bled-the-internet-37b783a120f0?source=rss------bug_bounty-5 | Ravi Patil | software-development, security, programming, bug-bounty, exception-handling | 27-May-2025 |
| Beyond Internal Testing: What Claude’s Bug Bounty Program Reveals About the Strategic Role of Crowd… | https://medium.com/@sarat99/beyond-internal-testing-what-claudes-bug-bounty-program-reveals-about-the-strategic-role-of-crowd-cefa028382c3?source=rss------bug_bounty-5 | Sarat Ramineni | quality-assurance, crowdtesting, quality-engineering, software-testing, bug-bounty | 27-May-2025 |
| CSRF in Profile Update Endpoint | https://medium.com/@sangpalisha/csrf-in-profile-update-endpoint-ddaf0295c217?source=rss------bug_bounty-5 | Isha Sangpal | bug-bounty, csrf, cybersecurity, web-security, hackerone | 27-May-2025 |
| INTMAX Launches $30,000 Bug Bounty Program on Immunefi | https://medium.com/intmax/intmax-launches-30-000-bug-bounty-program-on-immunefi-a39e6513b0ec?source=rss------bug_bounty-5 | INTMAX | base, intmax, immunify, ethereum, bug-bounty | 27-May-2025 |
| The Bug That Bled the Internet | https://patilraviraj.medium.com/heartbleed-the-bug-that-bled-the-internet-37b783a120f0?source=rss------bug_bounty-5 | Ravi Patil | software-development, security, programming, bug-bounty, exception-handling | 27-May-2025 |
| Full Credit Card Data in SessionStorage: A Real-World Web Security Breakdown | https://medium.com/@cybernomad42/full-credit-card-data-in-sessionstorage-a-real-world-web-security-breakdown-c1ac4e8169e2?source=rss------bug_bounty-5 | Patryk Kieszek | bug-bounty, web-security, cybersecurity, information-security, owasp | 27-May-2025 |
| SSRF to Local File Disclosure | https://medium.com/@zoningxtr/ssrf-to-local-file-disclosure-b0af96993af8?source=rss------bug_bounty-5 | Zoningxtr | ai, bug-bounty, web-development, cybersecurity, penetration-testing | 27-May-2025 |
| From OTP to ATO: A $10K Mobile Bug in State Validation | https://medium.com/@damiangambacorta/from-otp-to-ato-a-10k-mobile-bug-in-state-validation-616aebbb7208?source=rss------bug_bounty-5 | Damian Gambacorta | mobile-security, pentesting, bug-bounty, application-security, ethical-hacking | 27-May-2025 |
| NahamCon CTF 2025 “The Mission” | https://vikram1337.medium.com/nahamcon-ctf-2025-the-mission-b16d4f3279e4?source=rss------bug_bounty-5 | Vikram | graphql, api, web-security, bug-bounty, cybersecurity | 27-May-2025 |
| domainsniffer: A Bash-Powered Subdomain Extraction Tool for OSINT and Bug Bounty Recon | https://medium.com/@ashishkrishnanvs/domainsniffer-a-bash-powered-subdomain-extraction-tool-for-osint-and-bug-bounty-recon-ac8026449d2f?source=rss------bug_bounty-5 | Ashishkrishnanvs | hacking-tools, info-sec-writeups, cybersecurity, bug-bounty, enumeration | 27-May-2025 |
| Breaking Boundaries: Vertical Privilege Escalation to Admin via Insecure Direct Request | https://medium.com/@asadullahevan/breaking-boundaries-vertical-privilege-escalation-to-admin-via-insecure-direct-request-f4897877649f?source=rss------bug_bounty-5 | Asad Ullah Evan | hunting, web-penetration-testing, privilege-escalation, bug-bounty, improper-access-control | 27-May-2025 |
| De-Anonymize, Identify & fingerprint Back-End Infrastructure Using Favicon and Header Hashing: A… | https://medium.com/@amirseyedian13/de-anonymize-identify-fingerprint-back-end-infrastructure-using-favicon-and-header-hashing-a-c08b09b9011d?source=rss------bug_bounty-5 | Amir Seyedian | ctf, reconnaissance, pentesting, cybersecurity, bug-bounty | 27-May-2025 |
| PoC EXPLOITCVE-2025–1661: Critical Vulnerability in HUSKY WooCommerce Filter Plugin | https://medium.com/@exploit_machine/poc-exploit-cve-2025-1661-critical-vulnerability-in-husky-woocommerce-filter-plugin-4502600761a4?source=rss------bug_bounty-5 | exploit_machine | critical-vulnerabilities, bug-bounty, cybersecurity, lfi-vulnerability, penetration-testing | 27-May-2025 |
| Set up domain leak alerts in 3 minutes with LeakRadar | https://medium.com/@alexandrevandammepro/set-up-domain-leak-alerts-in-3-minutes-with-leakradar-ba576125aa71?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, bug-bounty-tips, hacking, cybersecurity, bug-bounty | 26-May-2025 |
| My Token, Your Token, Whose Token? Understanding CSRF through Portswigger’s Web Security Academy | https://systemweakness.com/my-token-your-token-whose-token-understanding-csrf-through-portswiggers-web-security-academy-eab11dabfa71?source=rss------bug_bounty-5 | Rhythm Babu Kafle | bug-bounty, hacking, cybersecurity, portswigger, csrf | 26-May-2025 |
| Flashback Fuzzing: How I Found JWT Tokens in the Past & Got Paid for It | https://infosecwriteups.com/flashback-fuzzing-how-i-found-jwt-tokens-in-the-past-got-paid-for-it-8da88d6daf09?source=rss------bug_bounty-5 | Harsh kothari | jwt, cybersecurity, bug-bounty, thriller | 26-May-2025 |
| OutCast WriteUp — NahamCon 2025 CTF | https://medium.com/@gobbledy/outcast-writeup-nahamcon-2025-ctf-95b1e8ddaf12?source=rss------bug_bounty-5 | gobbledy | cybersecurity, ctf, bug-bounty, infosec | 26-May-2025 |
| A Recon Tool That Uses AI to Predict Subdomains | https://infosecwriteups.com/a-recon-tool-that-uses-ai-to-predict-subdomains-0d65975e6a7b?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, bug-bounty, cybersecurity, github, careers | 26-May-2025 |
| One Endpoint to Rule Them All: How I Chained 3 Bugs into Full Account Takeover | https://infosecwriteups.com/one-endpoint-to-rule-them-all-how-i-chained-3-bugs-into-full-account-takeover-2d04a2f5dbc6?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, money, cybersecurity, infosec | 26-May-2025 |
| Everything You Should Know About STON.fi’s $500K Bug Bounty Program | https://medium.com/@Blaqbobby/everything-you-should-know-about-ston-fis-500k-bug-bounty-program-d8007c9d618b?source=rss------bug_bounty-5 | BlaqBobby | crypto, bug-bounty, defi, blockchain | 26-May-2025 |
| Bug Bounty — Mail Injection | https://medium.com/@zatikyan.sevada/bug-bounty-mail-injection-6ec9ffefc24b?source=rss------bug_bounty-5 | Zatikyan Sevada | bug-bounty, hacking, cybersecurity, programming, pentesting | 26-May-2025 |
| Exploiting Server-Side Parameter Pollution in Query Strings — An API Hacking Tale | https://infosecwriteups.com/exploiting-server-side-parameter-pollution-in-query-strings-an-api-hacking-tale-db68094f971f?source=rss------bug_bounty-5 | Aditya Bhatt | api, bug-bounty, bug-bounty-writeup, apihacking, cybersecurity | 26-May-2025 |
| Comprehensive Recon Guide | https://meravytes.medium.com/comprehensive-recon-guide-6c8978537945?source=rss------bug_bounty-5 | Meravytes | cybersecurity, bug-bounty, osint, infosec, meravytes | 26-May-2025 |
| Organization Takeover via Privilege Escalation (IDOR) | https://ehteshamulhaq198.medium.com/organization-takeover-via-privilege-escalation-idor-14786a2fa174?source=rss------bug_bounty-5 | Ehtesham Ul Haq | idor, bug-bounty, cybersecurity, penetration-testing, writeup | 26-May-2025 |
| write up talk tuah | https://medium.com/@fahd.99441/write-up-talk-tuah-2e4dbf3eb803?source=rss------bug_bounty-5 | phisher305 | bug-bounty, hacking, ctf-writeup | 26-May-2025 |
| Bug Bounty Report: Deanonymizing YouTube Channels Through Studio Access (Closed As Not-Applicable) | https://medium.com/@vivekps143/bug-bounty-report-deanonymizing-youtube-channels-through-studio-access-closed-as-not-applicable-850f762d4040?source=rss------bug_bounty-5 | Vivek PS | cybersecurity, bug-bounty, ethical-hacking, youtube, programming | 26-May-2025 |
| Lab: Exploiting server-side parameter pollution in a query string | https://infosecwriteups.com/lab-exploiting-server-side-parameter-pollution-in-a-query-string-e07a341c44d5?source=rss------bug_bounty-5 | Mukilan Baskaran | bug-bounty, information-security, cybersecurity, security, ethical-hacking | 26-May-2025 |
| Top 10 Python Hacks Used by Hackers and Bug Hunters | https://cybersecuritywriteups.com/top-10-python-hacks-used-by-hackers-and-bug-hunters-57f0122ef5d1?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, hacking, programming, cybersecurity, technology | 26-May-2025 |
| This is The Easiest Bug You Can Find✨ | https://infosecwriteups.com/this-is-the-easiest-bug-you-can-find-e50e0b68c641?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, bug-bounty, careers, hacking, bug-bounty-tips | 26-May-2025 |
| Leaking NetNTLM Hashes via SSRF Using UNC Paths (Windows) | https://medium.com/@shubhamsonani/leaking-netntlm-hashes-via-ssrf-using-unc-paths-windows-9c37e17b5041?source=rss------bug_bounty-5 | Shubham Sonani | bug-bounty-writeup, penetration-testing, windows-security, cybersecurity, bug-bounty | 26-May-2025 |
| Why Fuzzing Matters: Real Incidents That Prove the Power of Smart Endpoint Discovery | https://vijaylohani3.medium.com/why-fuzzing-matters-real-incidents-that-prove-the-power-of-smart-endpoint-discovery-60cdc8a7b1ff?source=rss------bug_bounty-5 | Vijay Kumar Lohani | ffuf, detailed, bug-bounty, fuzzing, dirsearch | 26-May-2025 |
| Misconfigured OAuth = Instant Account Takeover (Even Before Signup!) | https://medium.com/@ashokpandiya71/misconfigured-oauth-instant-account-takeover-even-before-signup-62ae709c9f7e?source=rss------bug_bounty-5 | Ashok kumar pareek | bug-bounty, duplicate, pre-account-takeover, account-takeover, happy-hunting | 26-May-2025 |
| GAU — Get All URL’s | https://osintteam.blog/gau-get-all-urls-45bd63ea678b?source=rss------bug_bounty-5 | Snooptsz | bug-bounty, cybersecurity, technology, tech, internet | 26-May-2025 |
| Bypassing Garbage Collection: The Case-Sensitive Endpoint Exploit That Slipped Through | https://medium.com/h7w/bypassing-garbage-collection-the-case-sensitive-endpoint-exploit-that-slipped-through-d0eba8603234?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, penetration-testing, bug-bounty, technology, bug-bounty-tips | 26-May-2025 |
| $12,000 Bounty: Git Flag Injection to Remote Code Execution in GitLab | https://medium.com/h7w/12-000-bounty-git-flag-injection-to-remote-code-execution-in-gitlab-0a442b58c40a?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, cybersecurity, hacking, bug-bounty | 26-May-2025 |
| How a Forgotten Link Parser Led to a $5000 XSS on Reddit | https://osintteam.blog/how-a-forgotten-link-parser-led-to-a-5000-xss-on-reddit-b247cac099ff?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, hacking, bug-bounty-tips, bug-bounty, technology | 26-May-2025 |
| Hijacking the Supply Chain: How I Claimed Tendermint’s Official S3 Bucket | https://osintteam.blog/hijacking-the-supply-chain-how-i-claimed-tendermints-official-s3-bucket-4894187f0414?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, bug-bounty-writeup, hacking, bug-bounty | 26-May-2025 |
| Context Cancellation Chains: The Bug That Took Down Our Payment System | https://caffeinatedcoder.medium.com/context-cancellation-chains-the-bug-that-took-down-our-payment-system-1b48525edaa9?source=rss------bug_bounty-5 | CaffeinatedCoder | bug-bounty, go, golang, context, programming | 26-May-2025 |
| Why XSS Can Help You Get Your First Bug Bounty: A Beginner’s Deep-Dive | https://medium.com/@asifebrahim580/why-xss-can-help-you-get-your-first-bug-bounty-a-beginners-deep-dive-706226a04d09?source=rss------bug_bounty-5 | Asif Ebrahim | xss-bypass, xss-vulnerability, bug-bounty, cybersecurity, bug-bounty-tips | 26-May-2025 |
| Level Up Your Smart Contract Audits with 90 Real Vulnerability Reports | https://medium.com/@n8p006/level-up-your-smart-contract-audits-with-90-real-vulnerability-reports-12fb2eb934d3?source=rss------bug_bounty-5 | Np nate | blockchain-development, web3, ethereum, bug-bounty, smart-contract-security | 26-May-2025 |
| Bug bounty:How i access hidden signup pages | https://medium.com/@canonminibeast/bug-bounty-how-i-access-hidden-signup-pages-11a42b4aabae?source=rss------bug_bounty-5 | Canonminibeast | cybersecurity, bug-bounty, bug-bounty-tips, web-development, ethical-hacking | 26-May-2025 |
| Subdomain Takeover of fr1.vpn.zomans.com — $350 Bounty | https://osintteam.blog/subdomain-takeover-of-fr1-vpn-zomans-com-350-bounty-638d959e11dc?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, hacking, technology, cybersecurity, bug-bounty | 25-May-2025 |
| Uncovering a Parameter Tampering Vulnerability: A Journey in Ethical Hacking An ethical… | https://samfrancissam06.medium.com/uncovering-a-parameter-tampering-vulnerability-a-journey-in-ethical-hacking-an-ethical-d7b06703e27a?source=rss------bug_bounty-5 | Francis Samuvel | web-security, cybersecurity, ethical-hacking, responsive-disclosure, bug-bounty | 25-May-2025 |
| Unlimited XSS | This is the Dumbest Way to Find XSS Bug | https://infosecwriteups.com/unlimited-xss-this-is-the-dumbest-way-to-find-xss-bug-2202b3621c6d?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, cybersecurity, xss-attack, bug-bounty, hacking | 25-May-2025 |
| AN EASY 2FA BYPASS | https://sijojohnson.medium.com/an-easy-2fa-bypass-261261ca2eab?source=rss------bug_bounty-5 | Sijo Johnson | 2fa-bypass, bug-bounty, latest-writing-updates, hacking, authentication | 25-May-2025 |
| The “Trusted Notification” Exploit — When Your App Betrays Itself | https://medium.com/@michael.yonesi/the-trusted-notification-exploit-when-your-app-betrays-itself-a1b54776fa47?source=rss------bug_bounty-5 | Michael Younsi | ethical-hacking, hacking, web-security, bug-bounty, cybersecurity | 25-May-2025 |
| Hacking tools — Art of my creation(Part 2) | https://medium.com/@zatikyan.sevada/hacking-tools-art-of-my-creation-part-2-fa3045c05b28?source=rss------bug_bounty-5 | Zatikyan Sevada | bug-bounty, cybersecurity, cyber, hacking, pentesting | 25-May-2025 |
| How to Root Your Android Emulator & Hack Yourself With Burp Suite (Manually, Like a Legend) | https://brutsecurity.medium.com/how-to-root-your-android-emulator-hack-yourself-with-burp-suite-manually-like-a-legend-ef4fbe28ceab?source=rss------bug_bounty-5 | Saumadip Mandal | android-pentesting, cybersecurity, bug-bounty, android, pentesting | 25-May-2025 |
| Silent but Deadly: How Blind XSS in Email Notifications Gave Me Root Alerts | https://infosecwriteups.com/silent-but-deadly-how-blind-xss-in-email-notifications-gave-me-root-alerts-e7d21972cdfc?source=rss------bug_bounty-5 | Iski | cybersecurity, money, hacking, infosec, bug-bounty | 25-May-2025 |
| Blind SQL Injection with Conditional Responses | https://medium.com/@marduk.i.am/blind-sql-injection-with-conditional-responses-46ee90b5f2c0?source=rss------bug_bounty-5 | Marduk I Am | portswigger, sql-injection, blind-sql-injection, cybersecurity, bug-bounty | 25-May-2025 |
| Exploiting Security Misconfiguration to Gain Full Account Takeover | https://medium.com/@vashuvats/exploiting-security-misconfiguration-to-gain-full-account-takeover-eb7a3da01f14?source=rss------bug_bounty-5 | Vashu Vats | vulnerability, hacking, bug-bounty, web-vulnerabilities, cybersecurity | 25-May-2025 |
| How Fuzzing Uncovered an Exposed Magento Setup and a Live Kafka Dashboard | https://vijaylohani3.medium.com/how-fuzzing-uncovered-an-exposed-magento-setup-and-a-live-kafka-dashboard-fd18cc517324?source=rss------bug_bounty-5 | Vijay Kumar Lohani | bug-bounty, penetration-testing, writeup, fuzzing | 25-May-2025 |
| $500 Bounty: How One Forum DM Unleashed Stored XSS on SideFX | https://medium.com/mr-plan-publication/500-bounty-how-one-forum-dm-unleashed-stored-xss-on-sidefx-546ee9cab12d?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, bug-bounty-tips, bug-bounty | 25-May-2025 |
| Zero Trust: A Simple Explanation | https://medium.com/@natarajanck2/zero-trust-a-simple-explanation-716f650b074c?source=rss------bug_bounty-5 | Natarajan C K | protection, bug-bounty, browsers, zero-trust, security | 25-May-2025 |
| Bug Bounty Practical Lab: Finding and Exploiting an Unused API Endpoint | https://osintteam.blog/bug-bounty-practical-lab-finding-and-exploiting-an-unused-api-endpoint-68da63caf005?source=rss------bug_bounty-5 | Aditya Bhatt | cybersecurity, bug-bounty-writeup, apihacking, bug-bounty, api | 25-May-2025 |
| Bug Bounty Journey — Valid Report Part 6 | https://medium.com/@0xF3r4t/bug-bounty-journey-valid-report-part-6-a51a9360ac3a?source=rss------bug_bounty-5 | 0xF3r4t | postman, api, bbp, bug-bounty | 25-May-2025 |
| SSRF via External Service Interaction (HTTP & DNS) | https://medium.com/@zoningxtr/ssrf-via-external-service-interaction-http-dns-f11ef614d6a3?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, bug-bounty, web-app-development, web-development, cybersecurity | 25-May-2025 |
| ️♂️ Blind SSRF (Server-Side Request Forgery) Explained: The Invisible Cyber Spy You Didn’t… | https://medium.com/@zoningxtr/%EF%B8%8F-%EF%B8%8F-blind-ssrf-server-side-request-forgery-explained-the-invisible-cyber-spy-you-didnt-cfef0aca468e?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, bug-bounty, python, web-development, penetration-testing | 25-May-2025 |
| How to Perform Static Testing for SSRF Vulnerabilities — Detecting Insecure Code with Semgrep &… | https://medium.com/@zoningxtr/how-to-perform-static-testing-for-ssrf-vulnerabilities-detecting-insecure-code-with-semgrep-27aa1c0d01a7?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, web-development, cybersecurity, bug-bounty, api | 25-May-2025 |
| Hacking Headless on Hack The Box: OSCP Prep | https://medium.com/@enigma_/hacking-headless-on-hack-the-box-oscp-prep-2409ee387e13?source=rss------bug_bounty-5 | enigma_ | ethical-hacking, oscp, penetration-testing, bug-bounty, cybersecurity | 25-May-2025 |
| My Therapist Said Tiny Problems Don’t Matter. These Vulnerability Chains Proved Me Wrong. | https://medium.com/@remmy9/my-therapist-said-tiny-problems-dont-matter-these-vulnerability-chains-proved-me-wrong-6a963c77217d?source=rss------bug_bounty-5 | Remmy | hacking, writeup, bug-bounty, cybersecurity | 25-May-2025 |
| Prototype Pollution Vulnerability Testing — Full Step-by-Step Guide (with Examples) | https://medium.com/@d1lv3rdn4/prototype-pollution-vulnerability-testing-full-step-by-step-guide-with-examples-e80206661497?source=rss------bug_bounty-5 | d1lv3rdn4 | app-security, pentesting, bug-bounty, hacking | 25-May-2025 |
| Escalating impact: Full Account Takeover via Stored XSS | https://rajukani100.medium.com/escalating-impact-full-account-takeover-via-stored-xss-24e5aee209f6?source=rss------bug_bounty-5 | Raj Ukani | bug-bounty, bug-bounty-tips, bug-bounty-writeup | 24-May-2025 |
| FOFA Dorking | Part4 | https://medium.com/legionhunters/fofa-dorking-part4-7d0a09995407?source=rss------bug_bounty-5 | AbhirupKonwar | web-security, bug-bounty-tips, osint, pentesting, bug-bounty | 24-May-2025 |
| Bug Bounty in 2025: Hunting Business Logic Flaws the Right Way | https://medium.com/@kailasv678/bug-bounty-in-2025-hunting-business-logic-flaws-the-right-way-614aba550f7b?source=rss------bug_bounty-5 | Kailasv | bug-bounty-hunter, bugbounty-tips, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 24-May-2025 |
| How I Found My First SQLi Vulnerability (€3500 Bounty) | https://dewcode.medium.com/how-i-found-my-first-sqli-vulnerability-3500-bounty-7c441007bcf9?source=rss------bug_bounty-5 | Dewanand Vishal | bug-bounty, sql-injection, bug-bounty-writeup, bug-bounty-tips, ethical-hacking | 24-May-2025 |
| How Bug Bounties & VAPT Coexist for Web3 Projects | https://medium.com/@decrypt0_blogs/how-bug-bounties-vapt-coexist-for-web3-projects-5e22cf7ad209?source=rss------bug_bounty-5 | Decrypt0 | web3, smart-contracts, vapt, bug-bounty, penetration-testing | 24-May-2025 |
| Out of Scope, In the Money: How SSRF in a PDF Export Got Me Deep Access | https://infosecwriteups.com/out-of-scope-in-the-money-how-ssrf-in-a-pdf-export-got-me-deep-access-03c1303c84d9?source=rss------bug_bounty-5 | Iski | cybersecurity, money, hacking, infosec, bug-bounty | 24-May-2025 |
| $1,000 Bounty: ReaderMode XSS in Brave via %READER-TITLE-NONCE% | https://medium.com/meetcyber/1-000-bounty-readermode-xss-in-brave-via-reader-title-nonce-4204606dfe20?source=rss------bug_bounty-5 | Monika sharma | technology, hacking, bug-bounty, penetration-testing, cybersecurity | 24-May-2025 |
| SSRF Vulnerability Explained: Server-Side Request Forgery Attack Types, Real-World Examples &… | https://medium.com/@zoningxtr/ssrf-vulnerability-explained-server-side-request-forgery-attack-types-real-world-examples-c55a3bf8540c?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, apache, penetration-testing, cybersecurity, web-development | 24-May-2025 |
| How a Simple URL Exposed Thousands of Users | https://cybersecuritywriteups.com/how-a-simple-url-exposed-thousands-of-users-d048cfa20aed?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | cybersecurity, bug-bounty, bug-bounty-writeup, ethical-hacking, bug-bounty-tips | 24-May-2025 |
| How Hard-Coded Credentials in a Publicly Accessible Config File Led to a $350 HackerOne Payout | https://medium.com/@sami7haque/how-hard-coded-credentials-in-a-publicly-accessible-config-file-led-to-a-350-hackerone-payout-c825274cd332?source=rss------bug_bounty-5 | Samirul Haque | bug-bounty-writeup, bug-bounty, hackerone, bug-bounty-tips | 24-May-2025 |
| How to Perform Dynamic Testing for Basic SSRF Vulnerabilities Using Burp Suite — Step-by-Step… | https://medium.com/@zoningxtr/how-to-perform-dynamic-testing-for-basic-ssrf-vulnerabilities-using-burp-suite-step-by-step-22bee524cd21?source=rss------bug_bounty-5 | Zoningxtr | web-development, api, cybersecurity, penetration-testing, bug-bounty | 24-May-2025 |
| Understanding Basic SSRF: How Visible Server Responses Can Leak Your Internal Secrets | https://medium.com/@zoningxtr/understanding-basic-ssrf-how-visible-server-responses-can-leak-your-internal-secrets-444326d8c870?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, web-development, penetration-testing, api, cybersecurity | 24-May-2025 |
| Title: How I Got My First NASA Hall of Fame Acknowledgment as a Bug Hunter | https://bitex0p.medium.com/title-how-i-got-my-first-nasa-hall-of-fame-acknowledgment-as-a-bug-hunter-1adb048abc6c?source=rss------bug_bounty-5 | Bitex aka Karan Vaniya | bug-bounty, cybersecurity, bug-hunting | 24-May-2025 |
| $1,500 Bounty for Critical Token Leak Leading to RCE in Mozilla’s Netlify Account | https://medium.com/mr-plan-publication/1-500-bounty-for-critical-token-leak-leading-to-rce-in-mozillas-netlify-account-1d32ca5938a8?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, hacking, penetration-testing, cybersecurity | 24-May-2025 |
| ⛓️ THE FORGE AS BDSM | https://medium.com/@pullupcapybaras/%EF%B8%8F-the-forge-as-bdsm-d4f224ad6cac?source=rss------bug_bounty-5 | Capybara Security & @TheForgeOfficial AGI | bug-bounty, bugbounty-writeup, bug-bounty-tips, artificial-intelligence | 24-May-2025 |
| How I Found Dom Xss on School Website. | https://medium.com/@debug0xa/how-i-found-dom-xss-on-school-website-defcaa2a4455?source=rss------bug_bounty-5 | Debug 0xa | bug-bounty | 24-May-2025 |
| Race Conditions: The Silent Exploit That Can Break Systems (and Earn Bounties) | https://infosecwriteups.com/race-conditions-the-silent-exploit-that-can-break-systems-and-earn-bounties-a35e7677c96a?source=rss------bug_bounty-5 | 127.0.0.1 | threads, vulnerability, cybersecurity, bug-bounty, race-condition | 24-May-2025 |
| How Google Attracts More Bug Bounty Hunters | https://medium.com/cloud-security/how-google-attracts-more-bug-bounty-hunters-5dca91957032?source=rss------bug_bounty-5 | Teri Radichel | program, bug-bounty, psvr, vulnerability-reward, google | 24-May-2025 |
| El ataque del Gatito Ninja: Entendiendo XSS sin morir de aburrimiento | https://medium.com/@bertolanicami/el-ataque-del-gatito-ninja-entendiendo-xss-sin-morir-de-aburrimiento-06f827d84489?source=rss------bug_bounty-5 | Cami Bertolani | bug-bounty-tips, hacking, bug-bounty, xss-attack, bug-bounty-hunter | 24-May-2025 |
| How Bug Bounty Platforms May Be Stifling New Researchers | https://medium.com/cloud-security/how-bug-bounty-platforms-may-be-stifling-new-researchers-cf21be1277da?source=rss------bug_bounty-5 | Teri Radichel | bugs, bounties, program, bug-bounty, researchers | 24-May-2025 |
| From Click to Critical: How I Found PII Without Even Trying — $1,100 Bounty, My First Bounty on… | https://dukrov.medium.com/from-click-to-critical-how-i-found-pii-without-even-trying-1-100-bounty-my-first-bounty-on-651902f7238c?source=rss------bug_bounty-5 | ͏ ͏Dukrov | bugcrowd, bug-bounty, hackerone, bugbounty-tips, bug-bounty-writeup | 24-May-2025 |
| How a Business Logic Error Earned me my First 100$ in a Bug Bounty Private Program | https://medium.com/@charlocomse/how-a-business-logic-error-earned-me-my-first-100-in-a-bug-bounty-private-program-7a13af06f7d1?source=rss------bug_bounty-5 | Charles Rostain | bug-bounty, bugbounty-writeup, bugbounting, bug-bounty-tips | 24-May-2025 |
| Here's How I Got My First Bounty: €1000 by Exploiting a Stored XSS | https://medium.com/@sohelparashar/heres-how-i-got-my-first-bounty-1000-db3264adeac0?source=rss------bug_bounty-5 | Risky | bug-bounty, 1000-euro, web-vulnerabilities, cybersecurity, xss-vulnerability | 24-May-2025 |
| How a Business Logic Error Earned me my First 100$ in a Bug Bounty Private Program | https://medium.com/@charlocomse/how-a-business-logic-error-earned-me-my-first-100-in-a-bug-bounty-private-program-7a13af06f7d1?source=rss------bug_bounty-5 | Charles Rostain | bug-bounty, bugbounty-writeup, infosec, bugbounting, bug-bounty-tips | 24-May-2025 |
| Find your bug bounty target hidden directories | https://medium.com/@loyalonlytoday/find-your-bug-bounty-target-hidden-directories-f132f70bafe1?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, bug-bounty, penetration-testing, bug-bounty-tips, hacking | 23-May-2025 |
| GarnGIT: Instantly Scan Solidity Contracts for Vulnerabilities and Bug Bounty Targets | https://medium.com/@n8p006/h1-garngit-instantly-scan-solidity-contracts-for-vulnerabilities-and-bug-bounty-targets-h1-9076374b70d1?source=rss------bug_bounty-5 | Np nate | ethereum, web3-security, solidity, smart-contracts, bug-bounty | 23-May-2025 |
| I Gave Myself 60 Minutes to Find a Bug — This Is What Happened | https://infosecwriteups.com/i-gave-myself-60-minutes-to-find-a-bug-this-is-what-happened-e5fa76563a33?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, hacking, infosec, bug-bounty, ai | 23-May-2025 |
| Bug Bounty VS Pentester | https://medium.com/@nishanthannisha008/bug-bounty-vs-pentester-4e471e126319?source=rss------bug_bounty-5 | Nishanthan | cybersecurity, pentester, bug-bounty-writeup, penetration-testing, bug-bounty | 23-May-2025 |
| The Bounty Hunter’s Dilemma: Why You’re Not Finding Bugs (And How to Change Your Game) | https://medium.com/@vivekps143/the-bounty-hunters-dilemma-why-you-re-not-finding-bugs-and-how-to-change-your-game-879af36a3e1d?source=rss------bug_bounty-5 | Vivek PS | cybersecurity, software-development, hacking, bug-bounty, self-improvement | 23-May-2025 |
| Amass Subdomain Enumeration : A Bug Hunter’s Guide | https://medium.com/@shaheeryasirofficial/amass-subdomain-enumeration-a-bug-hunters-guide-3271ab5bf597?source=rss------bug_bounty-5 | Shaheer Yasir | subdomains-enumeration, offensive-security, cybersecurity, websecurity-testing, bug-bounty | 23-May-2025 |
| ️♂️ How to Hunt a Perfect 10.0 CVSS Bug Bounty Score (And You Can Too!) | https://medium.com/@nocley/how-to-hunt-a-perfect-10-0-cvss-bug-bounty-score-sqli-4555cf03c399?source=rss------bug_bounty-5 | nocley | sql-injection, tutorial, hacking, red-team, bug-bounty | 23-May-2025 |
| Exploit PORT : 53 | DNS Port exploit (Series:1/ [article:4]) | https://medium.com/@hrofficial62/exploit-port-53-dns-port-exploit-series-1-article-4-1e2cd4e7832e?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, bug-bounty, penetration-testing, hacking, ethical-hacking | 23-May-2025 |
| From CSP to OMG: How a Tiny Misconfigured Header Let Me Run JS Anywhere | https://infosecwriteups.com/from-csp-to-omg-how-a-tiny-misconfigured-header-let-me-run-js-anywhere-054e30090230?source=rss------bug_bounty-5 | Iski | money, hacking, cybersecurity, bug-bounty, infosec | 23-May-2025 |
| Beyond the First $1,000: What Resilience Really Means in Bug Bounty Hunting | https://medium.com/@kailasv678/beyond-the-first-1-000-what-resilience-really-means-in-bug-bounty-hunting-92c54a9f8f04?source=rss------bug_bounty-5 | Kailasv | bug-bounty, bugbounty-writeup, bug-bounty-tips, hackerone, bug-bounty-program | 23-May-2025 |
| How I Use LLMs to Supercharge My Bug Bounty Recon | https://bitpanic.medium.com/how-i-use-llms-to-supercharge-my-bug-bounty-recon-3f9892c6b5a0?source=rss------bug_bounty-5 | Spectat0rguy | technology, bug-bounty, artificial-intelligence, cybersecurity, programming | 23-May-2025 |
| Reverse Engineering Başlanğıcı: Easy Keygen Analizi (IDA Pro və x32dbg ilə) | https://medium.com/@elmin.farzaliyev/reverse-engineering-ba%C5%9Flan%C4%9F%C4%B1c%C4%B1-easy-keygen-analizi-ida-pro-v%C9%99-x32dbg-il%C9%99-37315ccedcc3?source=rss------bug_bounty-5 | Elmin Farzaliyev | reverse-engineering, bug-bounty, hacking, assembly, cybersecurity | 23-May-2025 |
| ️ The Ultimate Bug Bounty Checklist for Beginners | https://medium.com/@hackerfromhills/%EF%B8%8F-the-ultimate-bug-bounty-checklist-for-beginners-3fafc9ea5fc5?source=rss------bug_bounty-5 | Badal kathayat | bugs, bug-bounty-writeup, bug-bounty, bug-hunter, bug-bounty-tips | 23-May-2025 |
| Hacking APIs: Exploiting Business Logic Flaws | https://iaraoz.medium.com/hacking-apis-exploiting-business-logic-flaws-c40872ce5600?source=rss------bug_bounty-5 | Israel Aráoz Severiche | security, hacking, bug-bounty, owasp, api | 23-May-2025 |
| This is how I got 16 CVEs in 2 months | https://medium.com/@rayhanhanaputra/this-is-how-i-got-16-cves-in-2-months-491be07793b0?source=rss------bug_bounty-5 | Rayhan Hanaputra | wordpress, cybersecurity, bug-bounty | 22-May-2025 |
| The $2,000 SQLi Story: Hours, Payloads, and Pure Stubbornness | https://medium.com/meetcyber/the-2-000-sqli-story-hours-payloads-and-pure-stubbornness-05eab4c7b968?source=rss------bug_bounty-5 | Erkan Kavas | sqli, ethical-hacking, rewards, hacking, bug-bounty | 22-May-2025 |
| How i can bypassing strong WAF in XSS with simple payload | https://medium.com/@0xRedFox29/how-i-can-bypassing-strong-waf-in-xss-with-simple-payload-7ef5d22ca626?source=rss------bug_bounty-5 | 0xRedFox29 | bug-bounty-writeup, bug-bounty-tips, cybersecurity, xss-bypass, bug-bounty | 22-May-2025 |
| $13,950 Bounty: Stored XSS in GitLab Notes with a Clever CSP Bypass via | https://osintteam.blog/13-950-bounty-stored-xss-in-gitlab-notes-with-a-clever-csp-bypass-via-base-9ca1f49994e3?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, bug-bounty, hacking, cybersecurity | 22-May-2025 |
| How to Use FOFA, Shodan.io, and Hunter.io for Advanced Cyber Reconnaissance | https://medium.com/@verylazytech/how-to-use-fofa-shodan-io-and-hunter-io-for-advanced-cyber-reconnaissance-602c23093fce?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, shodan, penetration-testing, hunter, fofa | 22-May-2025 |
| Risk Appetite vs. Risk Tolerance: What’s the Difference and Why It Matters | https://medium.com/@paritoshblogs/risk-appetite-vs-risk-tolerance-whats-the-difference-and-why-it-matters-7a52aabbf7d9?source=rss------bug_bounty-5 | Paritosh | risk-tolerance, risk-appetite, cybersecurity, hacking, bug-bounty | 22-May-2025 |
| Exploit PORT : 5900 , 59001 | VNC Port exploit (Series:1/ [article:3]) | https://medium.com/@hrofficial62/exploit-port-5900-59001-vnc-port-exploit-series-1-article-3-c07d09ebdf5b?source=rss------bug_bounty-5 | Mr Horbio | hacking, bug-bounty, penetration-testing, cybersecurity | 22-May-2025 |
| ️How I Bypassed OTP Verification Without Any Code Injection | https://infosecwriteups.com/%EF%B8%8Fhow-i-bypassed-otp-verification-without-any-code-injection-1fb28a705cd4?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, bug-bounty, hacking, otp-bypass, cybersecurity | 22-May-2025 |
| Grafana CVE-2025–4123: Full Read SSRF & Account Takeover | https://medium.com/@Nightbloodz/grafana-cve-2025-4123-full-read-ssrf-account-takeover-d12abd13cd53?source=rss------bug_bounty-5 | Alvaro Balada | bug-bounty, infosec, cybersecurity, grafana | 22-May-2025 |
| A Great Tool For Bug Hunters | https://medium.com/@loyalonlytoday/a-great-tool-for-bug-hunters-415ae68702e7?source=rss------bug_bounty-5 | loyalonlytoday | tips, hacking, bug-bounty, cybersecurity, bug-bounty-tips | 22-May-2025 |
| V1 IDOR | https://medium.com/@thecyberghost/v1-idor-0f7fc3f2dc0a?source=rss------bug_bounty-5 | The Cyber Ghost | idor-vulnerability, idor, bug-bounty-tips, idor-poc, bug-bounty | 22-May-2025 |
| ️ The Param That Played Me: How HTTP Parameter Pollution Unlocked Admin Secrets ️ | https://infosecwriteups.com/%EF%B8%8F-the-param-that-played-me-how-http-parameter-pollution-unlocked-admin-secrets-%EF%B8%8F-dc82626081e5?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, cybersecurity, money, hacking | 22-May-2025 |
| Exploit PORT : 5900 , 59001 | VNC Port exploit (Series:1/ [article:3]) | https://infosecwriteups.com/exploit-port-5900-59001-vnc-port-exploit-series-1-article-3-c07d09ebdf5b?source=rss------bug_bounty-5 | Mr Horbio | hacking, bug-bounty, penetration-testing, cybersecurity | 22-May-2025 |
| Alterx Subdomain Wordlist Generator | https://systemweakness.com/alterx-subdomain-wordlist-generator-2050f4407beb?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, infosec, bug-bounty-tips, bug-bounty, web-security | 22-May-2025 |
| ADB Commands for Android Pentester | https://medium.com/@anandrishav2228/adb-commands-for-android-pentester-3cfde8c39d8b?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, penetration-testing, android, hacking, money | 22-May-2025 |
| You don’t want to be a Bug-Hunter. You want to be a Pentester. | https://medium.com/@krank.kevin2/you-dont-want-to-be-a-bug-hunter-you-want-to-be-a-pentester-9e9a64ea1fa6?source=rss------bug_bounty-5 | Krank Kevin | pentesting, learning, bug-bounty, hacking, security | 22-May-2025 |
| Field Enumeration to Full Account Takeover with NoSQL Injection | https://infosecwriteups.com/field-enumeration-to-full-account-takeover-with-nosql-injection-3de639d42f42?source=rss------bug_bounty-5 | Aditya Bhatt | nosql, cybersecurity, bug-bounty, sql-injection, nosql-injection | 22-May-2025 |
| Cracking CSRF: How I Found a Hidden Flaw as a Bug Bounty Beginner | https://osintteam.blog/cracking-csrf-how-i-found-a-hidden-flaw-as-a-bug-bounty-beginner-a602460c5480?source=rss------bug_bounty-5 | 127.0.0.1 | portswigger, email, cybersecurity, bug-bounty, csrf | 22-May-2025 |
| Found a Race Condition That Led to Privilege =>$750 | https://infosecwriteups.com/found-a-race-condition-that-led-to-privilege-750-4ba1a3983b17?source=rss------bug_bounty-5 | Ehtesham Ul Haq | bug-bounty, race-condition, penetration-testing, writeup, bounty-program | 22-May-2025 |
| No Password, No Problem: Account Takeover via Cleverly Placed XSS — Here’s How I Earned $$$ | https://medium.com/@dodge48285/no-password-no-problem-account-takeover-via-cleverly-placed-xss-heres-how-i-earned-33ac75c72cb4?source=rss------bug_bounty-5 | THE_DARK_KNIGHT | bug-bounty, first-bounty, xss-attack, account-takeover, bug-bounty-tips | 22-May-2025 |
| ️My Top 7 Mistakes as a New Bug Hunter (And How to Avoid Them) | https://infosecwriteups.com/%EF%B8%8Fmy-top-7-mistakes-as-a-new-bug-hunter-and-how-to-avoid-them-e5c31292980b?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, hacking, infosec, ai, bug-bounty | 22-May-2025 |
| Unauthorized Image Retrieval After Deletion in Meta AI | https://allawe.medium.com/unauthorized-image-retrieval-after-deletion-in-meta-ai-c85701af8356?source=rss------bug_bounty-5 | ali jaafer | meta, bug-bounty, cybersecurity, meta-bug-bounty | 22-May-2025 |
| $500 bounty External Link Bypass inPrivate Program | https://zetanine.medium.com/external-link-bypass-vulnerability-inprivate-program-b42a5dd10504?source=rss------bug_bounty-5 | Zeta | bug-bounty, bug-hunting, burpsuite, cybersecurity, hacking | 22-May-2025 |
| Unveiling HTTP Parameter Pollution (HPP): A Simple Explanation with a Real-Life Example | https://medium.com/@natarajanck2/unveiling-http-parameter-pollution-hpp-a-simple-explanation-with-a-real-life-example-422dfcac7895?source=rss------bug_bounty-5 | Natarajan C K | web-app-security, web-app-development, bug-bounty, parameter, security | 22-May-2025 |
| Chinese Hackers Breach U.S. Local Governments via Trimble Cityworks Zero-Day Exploit | https://wiretor.medium.com/chinese-hackers-breach-u-s-local-governments-via-trimble-cityworks-zero-day-exploit-e47a9b1e98bc?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, bug-bounty, usa, ai | 22-May-2025 |
| $7,500 Bounty — XSS → RCE in Steam’s React Chat Client | https://osintteam.blog/7-500-bounty-xss-rce-in-steams-react-chat-client-1394aaecaec4?source=rss------bug_bounty-5 | Monika sharma | technology, cybersecurity, penetration-testing, hacking, bug-bounty | 22-May-2025 |
| Why reporting an #issue or #bug should be (as similar as possible) like going to the Doctor | https://medium.com/@isabeldpp/why-reporting-an-issue-or-bug-should-be-as-similar-as-possible-like-going-to-the-doctor-8868fa939a50?source=rss------bug_bounty-5 | Isabel Portella | analytics, bug-bounty, bugs, product-management, product-manager | 22-May-2025 |
| DOM-Based XSS in Single Page Applications (SPAs): A Complete Guide for Beginners & Bug Bounty… | https://medium.com/@asifebrahim580/dom-based-xss-in-single-page-applications-spas-a-complete-guide-for-beginners-bug-bounty-56d4e496a0a0?source=rss------bug_bounty-5 | Asif Ebrahim | xss-bypass, web-security, bug-bounty, penetration-testing, cybersecurity | 22-May-2025 |
| Unlocking Hidden Web Paths: How Ethical Hackers Use xnLinkFinder to Discover Easy Bugs | https://chintalatarakaram.medium.com/unlocking-hidden-web-paths-how-ethical-hackers-use-xnlinkfinder-to-discover-easy-bugs-aae02c8716b9?source=rss------bug_bounty-5 | Chintala Taraka Ram | cybersecurity, bug-bounty, hacking-tools, medium | 22-May-2025 |
| I Slipped an Item Into a Stranger’s Cart(Well, Almost) | https://medium.com/@nizarkadiri70/i-slipped-an-item-into-a-strangers-cart-well-almost-4f1f5397a64b?source=rss------bug_bounty-5 | Nizar Kadiri | infosec, bug-bounty, cybersecurity, infosec-write-ups | 21-May-2025 |
| How Hackers Discover Hidden Admin Panels and Secret Files ️♂️ | https://osintteam.blog/how-hackers-discover-hidden-admin-panels-and-secret-files-%EF%B8%8F-%EF%B8%8F-c2b12ab0b841?source=rss------bug_bounty-5 | Vipul Sonule | hacking, cybersecurity, tech, bug-bounty, programming | 21-May-2025 |
| $3,500 Bounty: Stored XSS in GitLab’s RDoc Wiki via Malicious Image Links | https://medium.com/h7w/3-500-bounty-stored-xss-in-gitlabs-rdoc-wiki-via-malicious-image-links-c394d4730d2a?source=rss------bug_bounty-5 | Monika sharma | hacking, technology, bug-bounty, penetration-testing, cybersecurity | 21-May-2025 |
| How I Earned my Second Bounty of €2000 by Discovering an Authorization Bypass Vulnerability in a… | https://medium.com/@sohelparashar/how-i-earned-my-second-bounty-of-2000-by-discovering-an-authorization-bypass-vulnerability-in-a-8b20570004d8?source=rss------bug_bounty-5 | Risky | cybersecurity, web-security, bug-bounty | 21-May-2025 |
| $2,400 in 60 Minutes: Hacking a Management Backend by Tweaking a Single Response Packet | https://medium.com/@cadeeper/0x00-368daffa75f7?source=rss------bug_bounty-5 | Invik | bug-bounty, web-security, pentesting, bounty-program, hacker | 21-May-2025 |
| $500 Bounty: DOM-Based XSS in HackerOne’s Careers Page | https://osintteam.blog/500-bounty-dom-based-xss-in-hackerones-careers-page-019f78c5e213?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, cybersecurity, penetration-testing, technology, hacking | 21-May-2025 |
| WayBackLister : Innovative Directory Bruteforcing Technique | https://medium.com/@abhirupkonwar04/waybacklister-innovative-directory-bruteforcing-technique-43535da40bc4?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, pentesting, osint, bug-bounty, ethical-hacking | 21-May-2025 |
| Demystifying Cookies: The Complete Guide for Bug Bounty Hunters | https://infosecwriteups.com/demystifying-cookies-the-complete-guide-for-bug-bounty-hunters-7ac5827b8173?source=rss------bug_bounty-5 | phoenixcatalan | infosec, hacking, pentesting, development, bug-bounty | 21-May-2025 |
| $2,500 Bounty: DOM-Based XSS via postMessage on Upserve’s Login Page | https://infosecwriteups.com/2-500-bounty-dom-based-xss-via-postmessage-on-upserves-login-page-dc899778ed31?source=rss------bug_bounty-5 | Monika sharma | hacking, cybersecurity, bug-bounty, penetration-testing, technology | 21-May-2025 |
| They Missed This One Tiny Parameter — I Made $500 Instantly | https://infosecwriteups.com/they-missed-this-one-tiny-parameter-i-made-500-instantly-f2f7d1c1c1d9?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, cybersecurity, hacking, ai, infosec | 21-May-2025 |
| The Misconfigured Magnet: How Public Buckets Exposed Millions of User Files | https://infosecwriteups.com/the-misconfigured-magnet-how-public-buckets-exposed-millions-of-user-files-62d3ca759aa0?source=rss------bug_bounty-5 | Iski | money, hacking, bug-bounty, infosec, cybersecurity | 21-May-2025 |
| How I Found and Reproduced a Race Condition in AWS API Key Creation | https://medium.com/@venkigvs123/how-i-found-and-reproduced-a-race-condition-in-aws-api-key-creation-95dbc5f37c90?source=rss------bug_bounty-5 | ganji | bug-bounty, ethical-hacking, hacking, hackerone, hacker | 21-May-2025 |
| Step-by-Step Guide: SQLmap API Server Setup and Burp Suite Integration (Windows) | https://medium.com/@nareshkumar76191/step-by-step-guide-sqlmap-api-server-setup-and-burp-suite-integration-windows-3c5e6103eec3?source=rss------bug_bounty-5 | Nareshkumar | pentesting, cybersecurity, bug-bounty, viral, sql | 21-May-2025 |
| WayBackLister : Innovative Directory Bruteforcing Technique | https://systemweakness.com/waybacklister-innovative-directory-bruteforcing-technique-43535da40bc4?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, pentesting, osint, bug-bounty, ethical-hacking | 21-May-2025 |
| Understanding Server Side Request Forgery (SSRF) with a Simple Real-Life Example | https://medium.com/@natarajanck2/understanding-server-side-request-forgery-ssrf-with-a-simple-real-life-example-a14650bd5317?source=rss------bug_bounty-5 | Natarajan C K | cyber-securoty, ssrf, vulnerability, servers, bug-bounty | 21-May-2025 |
| Hunting for Web Cache Deception Vulnerabilities with a Custom Bash Script | https://medium.com/@m4r5h4ll2969/hunting-for-web-cache-deception-vulnerabilities-with-a-custom-bash-script-a52d2f8fd722?source=rss------bug_bounty-5 | cyberjson | bug-bounty-writeup, bug-bounty, methodology, hacker, hunter | 21-May-2025 |
| Feroxbuster: The Rust-Powered Recon Weapon You’ve Been Missing | https://chintalatarakaram.medium.com/feroxbuster-the-rust-powered-recon-weapon-youve-been-missing-3abed642c0ae?source=rss------bug_bounty-5 | Chintala Taraka Ram | medium, github, bug-bounty, cybersecurity, feroxbuster | 21-May-2025 |
| $5,000 | Authorization Bypass via Parameter Parsing Mismatch (Django — Flask) | https://medium.com/@pranshux0x/5-000-authorization-bypass-via-parameter-parsing-mismatch-django-flask-6f0f748db6be?source=rss------bug_bounty-5 | priyanshu shakya | bug-bounty, hacking, cybersecurity | 21-May-2025 |
| How I Bypassed My University’s OTP System and Got Admin-Level Access (Ethical Hack) | https://medium.com/@kamlesh_bharad/how-i-bypassed-my-universitys-otp-system-and-got-admin-level-access-ethical-hack-b2a75e54069e?source=rss------bug_bounty-5 | Kamlesh Bharad | hacking, cybersecurity, vulnerability, idor-vulnerability, bug-bounty | 21-May-2025 |
| Hunting for Web Cache Deception Vulnerabilities with a Custom Bash Script | https://medium.com/@cyberjson/hunting-for-web-cache-deception-vulnerabilities-with-a-custom-bash-script-a52d2f8fd722?source=rss------bug_bounty-5 | cyberjson | bug-bounty-writeup, bug-bounty, methodology, hacker, hunter | 21-May-2025 |
| Bug Bounty | https://medium.com/@navtesh_sharma/bug-bounty-30cba1c7a2b0?source=rss------bug_bounty-5 | Navtesh Sharma | bug-bounty | 21-May-2025 |
| Reflected Chaos: How One XSS Vector Spawned Three CVEs | https://medium.com/@bonghaxor_34691/reflected-chaos-how-one-xss-vector-spawned-three-cves-f20e2df3275f?source=rss------bug_bounty-5 | BongHaxor | cve, bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty | 21-May-2025 |
| Hacking Oauth:A bug bounty hunter guide | https://infosecwriteups.com/hacking-oauth-a-bug-bounty-hunter-guide-31a7b1a0cf88?source=rss------bug_bounty-5 | Canonminibeast | cybersecurity, hacking, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 20-May-2025 |
| Master Google Dorks — Search Techniques for Cybersecurity and OSINT | https://medium.com/@jpablo13/master-google-dorks-search-techniques-for-cybersecurity-and-osint-7ced756d02ca?source=rss------bug_bounty-5 | JPablo13 | infosec, osint, ethical-hacking, cybersecurity, bug-bounty | 20-May-2025 |
| Mastering SQL Injection Recon: Step-by-Step Guide for Bug Bounty Hunters | https://infosecwriteups.com/mastering-sql-injection-recon-step-by-step-guide-for-bug-bounty-hunters-9f493fb058dd?source=rss------bug_bounty-5 | coffinxp | hacking, sql-injection, bug-bounty, technology, cybersecurity | 20-May-2025 |
| Easy Account Takeover via OTP in Response — A Developer’s Oops Moment | https://infosecwriteups.com/easy-account-takeover-via-otp-in-response-a-developers-oops-moment-91130d5e5686?source=rss------bug_bounty-5 | Hack-Bat | cybersecurity, pentesting, hacking, bug-bounty, ethical-hacking | 20-May-2025 |
| ️ How Hackers Bypass Web Application Firewalls (WAFs) in 2025 | https://infosecwriteups.com/%EF%B8%8F-how-hackers-bypass-web-application-firewalls-wafs-in-2025-c2a5052044c9?source=rss------bug_bounty-5 | Vipul Sonule | hacking, programming, tech, cybersecurity, bug-bounty | 20-May-2025 |
| Graph-QL Vulnerability can help you make $$$$ | https://medium.com/@anandrishav2228/graph-ql-vulnerability-can-help-you-make-cfc79270e79d?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, hacking, bug-bounty, api, money | 20-May-2025 |
| SAPRouter — Port 3299 — How to expliot? | https://medium.com/@verylazytech/saprouter-port-3299-how-to-expliot-c3da21064ab3?source=rss------bug_bounty-5 | Very Lazy Tech | exploit, hacking, sap, penetration-testing, bug-bounty | 20-May-2025 |
| ⚔️ The Brutal Truth About Bug Bounty That Nobody Tells Beginners | https://infosecwriteups.com/%EF%B8%8F-the-brutal-truth-about-bug-bounty-that-nobody-tells-beginners-10e419514165?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, bug-bounty, infosec, hacking | 20-May-2025 |
| Second-Order Takeover: Scoring High Rewards! | https://medium.com/@nocley/second-order-takeover-scoring-high-rewards-926ff658b76b?source=rss------bug_bounty-5 | nocley | pentest, red-team, hacking, subdomain-takeover, bug-bounty | 20-May-2025 |
| 404 to Root: How a Forgotten Subdomain Led to Server Takeover ☠️ | https://infosecwriteups.com/404-to-root-how-a-forgotten-subdomain-led-to-server-takeover-%EF%B8%8F-d60e65fdbc18?source=rss------bug_bounty-5 | Iski | bug-bounty, money, cybersecurity, infosec, hacking | 20-May-2025 |
| Bug Bounty Hunters in Web3: How to Start and How Much You Can Make | https://medium.com/@JohnnyTime/bug-bounty-hunters-in-web3-how-to-start-and-how-much-you-can-make-e311fc0d5cb7?source=rss------bug_bounty-5 | Johnny Time | web3, bug-bounty-tips, web3-security, bug-bounty, smart-contracts | 20-May-2025 |
| Basic Web Enumeration. | https://r4vindra.medium.com/basic-web-enumeration-13ab72eaf8b2?source=rss------bug_bounty-5 | Ravindra Manjhi | resonance, hacking, beginner, bug-bounty-tips, bug-bounty | 20-May-2025 |
| Red Nexus CTF v1.0, and how we made it to first place! | https://medium.com/@shxsu1/red-nexus-ctf-v1-0-and-how-we-made-it-to-first-place-ca9f85502ead?source=rss------bug_bounty-5 | shxsu1 | infosec, bug-bounty, cybersecurity, hacking, ctf | 20-May-2025 |
| The Origins of XSS (Cross-Site Scripting) | https://thexssrat.medium.com/the-origins-of-xss-cross-site-scripting-628dde3ac4b6?source=rss------bug_bounty-5 | Thexssrat | ethical-hacking, bug-bounty, hacking, xss-attack | 20-May-2025 |
| ️ How I Found FTP Credentials in a Python Script on a NASA Subdomain | https://medium.com/@divyasai2629/%EF%B8%8F-how-i-found-ftp-credentials-in-a-python-script-on-a-nasa-subdomain-dc7f4676444c?source=rss------bug_bounty-5 | Unknown Soldier | bug-bounty, ethical-hacking, nasa, hacking, cybersecurity | 20-May-2025 |
| From Recon to Root: A MongoDB NoSQL Injection Bug Bounty Journey | https://infosecwriteups.com/from-recon-to-root-a-mongodb-nosql-injection-bug-bounty-journey-18e9cb309cac?source=rss------bug_bounty-5 | Aditya Bhatt | cybersecurity, nosql, bug-bounty, sql-injection, nosql-injection | 20-May-2025 |
| Cloudflare Bug Bounty: First Old Password Does Not Expire After Password Change | https://medium.com/@iambuvanesh/cloudflare-bug-bounty-first-old-password-does-not-expire-after-password-change-b767a050d231?source=rss------bug_bounty-5 | Buvaneshvaran K | cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-writeup, cloudflare | 20-May-2025 |
| Breaking Into a Bank’s Database (Ethically!) — My Wild Cybersecurity Ride | https://rootxabit.medium.com/breaking-into-a-banks-database-ethically-my-wild-cybersecurity-ride-b90c91b0b09b?source=rss------bug_bounty-5 | xabit • hacks | anonymous, black-hat-hacker, bankhacked, sql-injection, bug-bounty | 20-May-2025 |
| Full-Blown SSRF to Gain Access to Millions of Users’ Records and Multiple Internal Panels | https://medium.com/@skycer_00/full-blown-ssrf-to-gain-access-to-millions-of-users-records-and-multiple-internal-panels-3719d9b802e9?source=rss------bug_bounty-5 | Skyer | penetration-testing, hacking, bug-bounty, cybersecurity, ssrf | 20-May-2025 |
| My First CVE: Privilege Escalation & Possible Account Takeover in Froxlor (CVE-2025–29773) | https://medium.com/@salaheddine_kalada/my-first-cve-privilege-escalation-possible-account-takeover-in-froxlor-cve-2025-29773-c111469d74b0?source=rss------bug_bounty-5 | Salaheddine KALADA | vulnerability-disclosure, bug-bounty, cve, vulnerability-research | 20-May-2025 |
| Domina los Google Dorks: Técnicas de Búsqueda para Ciberseguridad y OSINT | https://medium.com/@jpablo13/domina-los-google-dorks-t%C3%A9cnicas-de-b%C3%BAsqueda-para-ciberseguridad-y-osint-3206fe84f956?source=rss------bug_bounty-5 | JPablo13 | ethical-hacking, osint, infosec, bug-bounty, cybersecurity | 19-May-2025 |
| I Broke Rate Limits and Accessed 1000+ User Records — Responsibly | https://infosecwriteups.com/i-broke-rate-limits-and-accessed-1000-user-records-responsibly-8c45f20729ba?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, infosec, hacking, bug-bounty, data | 19-May-2025 |
| Basic Authentication Bypassed via Simple Misconfiguration | https://m7moudx22.medium.com/basic-authentication-bypassed-via-simple-misconfiguration-6a19002aef4f?source=rss------bug_bounty-5 | M7moudx22 | cybersecurity, bug-bounty-tips, bug-bounty-writeup, bug-bounty, infosec | 19-May-2025 |
| How to make good money with Bug Bounty: A beginner’s guide | https://osintteam.blog/how-to-make-good-money-with-bug-bounty-a-beginners-guide-0c91e9198f2b?source=rss------bug_bounty-5 | Roman Huliak | web-security, bug-bounty, ethical-hacking, cybersecurity, infosec | 19-May-2025 |
| $2,480 Bounty: How a Race Condition in curl’s fopen() Led to Cookie Theft and File Overwrites | https://osintteam.blog/2-480-bounty-how-a-race-condition-in-curls-fopen-led-to-cookie-theft-and-file-overwrites-1bdaab1a584c?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, report, bug-bounty, technology, hacking | 19-May-2025 |
| Vulnerability Analysis using Nikto(0 | https://medium.com/@anandrishav2228/vulnerability-analysis-using-nikto-0-4cb6745f8932?source=rss------bug_bounty-5 | Rishav anand | money, tools, bug-bounty, cybersecurity, vulnerability | 19-May-2025 |
| Unleash Python for Deeper Web App Recon: Automating Sublist3r & AltDNS Like a Pro | https://medium.com/@jensbeckerdev/unleash-python-for-deeper-web-app-recon-automating-sublist3r-altdns-like-a-pro-93509a0a4dc3?source=rss------bug_bounty-5 | jensbecker-dev | ethical-hacking, bug-bounty, cybersecurity, python, penetration-testing | 19-May-2025 |
| SSRF:— The Sneaky Server Trick You Need to Know | https://medium.com/@sachinpv2004/ssrf-the-sneaky-server-trick-you-need-to-know-9a9f36c53819?source=rss------bug_bounty-5 | SACHIN PV | owasp, pentesting, ssrf, penetration-testing, bug-bounty | 19-May-2025 |
| ️ Public Document, But Not Meant for You: Info Leak at blm.gov | https://medium.com/@FufuFaf1/%EF%B8%8F-public-document-but-not-meant-for-you-info-leak-at-blm-gov-2a482417be3c?source=rss------bug_bounty-5 | FufuFafa | bug-bounty-writeup, cybersecurity, hacking, bug-bounty, bugbounty-poc | 19-May-2025 |
| ️♂️ CyberTalents Writeup — “Catch Me If You Can” | https://medium.com/@mahmoud_bedair/%EF%B8%8F-%EF%B8%8F-cybertalents-writeup-catch-me-if-you-can-7374819a8948?source=rss------bug_bounty-5 | Mahmoud Bedair | cybersecurity, bug-bounty-tips, ctf, php, bug-bounty | 19-May-2025 |
| Complete Guide to DNS and DHCP Penetration Testing | https://medium.com/@verylazytech/complete-guide-to-dns-and-dhcp-penetration-testing-fb4597e5d880?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, penetration-testing, ethical-hacking, dhcp, dns | 19-May-2025 |
| The Truth About My Bug Bounty Burnout (And the Fix That’s Working) | https://osintteam.blog/the-truth-about-my-bug-bounty-burnout-and-the-fix-thats-working-0f89ef5ec35e?source=rss------bug_bounty-5 | Vivek PS | programming, ethical-hacking, bug-bounty, hacking, burnout | 19-May-2025 |
| Chained Chaos: Discovering 6 XSS in a Single Target | https://medium.com/@AhmedSamy-X/chained-chaos-discovering-6-xss-in-a-single-target-2e03a0c530ef?source=rss------bug_bounty-5 | Ahmedsamy | cybersecurity, xss-attack, ethical-hacking, bug-bounty, bug-bounty-tips | 19-May-2025 |
| Template Trouble: How I Exploited a Logic Bug in a Templating Engine for RCE | https://infosecwriteups.com/template-trouble-how-i-exploited-a-logic-bug-in-a-templating-engine-for-rce-0f691b9f7102?source=rss------bug_bounty-5 | Iski | infosec, money, hacking, bug-bounty, cybersecurity | 19-May-2025 |
| $4,500 Bounty: SQL Injection in WordPress Plugin Leads to PII Exposure at Grab | https://infosecwriteups.com/4-500-bounty-sql-injection-in-wordpress-plugin-leads-to-pii-exposure-at-grab-7c26aa7beff6?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, hacking, technology, bug-bounty-tips | 19-May-2025 |
| $20,000 Bounty: How a Leaked Session Cookie Led to Account Takeover on HackerOne | https://infosecwriteups.com/20-000-bounty-how-a-leaked-session-cookie-led-to-account-takeover-on-hackerone-4a805cb892f9?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, cybersecurity, hacking, technology | 19-May-2025 |
| How I Discovered an Open Redirect | https://infosecwriteups.com/how-i-discovered-an-open-redirect-3b01879b6ebc?source=rss------bug_bounty-5 | Ehtesham Ul Haq | penetration-testing, ethical-hacking, redirection, bug-bounty, infosec | 19-May-2025 |
| How to Build and Use Sniper-Style XSS Payloads Like a Pro | https://medium.com/@asifebrahim580/how-to-build-and-use-sniper-style-xss-payloads-like-a-pro-abaf24ff2fd2?source=rss------bug_bounty-5 | Asif Ebrahim | bug-bounty, xss-attack, cybersecurity, ethical-hacking, web-security | 19-May-2025 |
| Turning Ubuntu into a Powerful Cybersecurity Pentesting Tool | https://medium.com/@swmusicrecords/turning-ubuntu-into-a-powerful-cybersecurity-pentesting-tool-3f3e7cbd1603?source=rss------bug_bounty-5 | LABRATCYBER | cybersecurity, ubuntu, bug-bounty, penetration-testing, ethical-hacking | 19-May-2025 |
| How I Bypassed a Basic Security Control in “Forgot Password” and Got a Bounty | https://medium.com/@kailasv678/how-i-bypassed-a-basic-security-control-in-forgot-password-and-got-a-bounty-e51ff1aaef47?source=rss------bug_bounty-5 | Kailasv | bug-bounty-tips, bugbounty-tips, bug-bounty, bug-bounty-program, bugbounty-poc | 19-May-2025 |
| HTML Injection Unleashed: Cracking the Door Open to Full Account Compromise | https://medium.com/@Hamzawy-1/html-injection-unleashed-cracking-the-door-open-to-full-account-compromise-564b785cea9a?source=rss------bug_bounty-5 | Hamza Ahmed Youssef | cybersecurity, technology, bug-bounty-writeup, bug-bounty, bugs | 19-May-2025 |
| Getting Started with Fuzzing: What It Is and Why It Matters | https://medium.com/@natarajanck2/getting-started-with-fuzzing-what-it-is-and-why-it-matters-5dc4a5fc88ee?source=rss------bug_bounty-5 | Natarajan C K | bug-bounty, securty, fuzzing, ffuf, web-application-testing | 19-May-2025 |
| Deep Recon Leads to Unauthenticated Upload & IDOR — Rewarded with Bounty $$$ | https://medium.com/@0xAsad_Eldin/deep-recon-leads-to-unauthenticated-upload-idor-rewarded-with-bounty-bfa58a03397f?source=rss------bug_bounty-5 | 0xAsad-Eldin | bug-bounty, cybersecurity, web-security, idor, writeup | 19-May-2025 |
| XSS (Cross-Site-Scripting) Nedir? | https://medium.com/@ozanturancakir.it/xss-cross-site-scripting-nedir-87a9bee41ae2?source=rss------bug_bounty-5 | ozanturancakir | penetration-testing, infosec, bug-bounty, cybersecurity, ethical-hacking | 19-May-2025 |
| Reverse Shell: Estudo prático para Entusiastas e Profissionais de Segurança | https://medium.com/@correa-sergio/reverse-shell-estudo-pr%C3%A1tico-para-entusiastas-e-profissionais-de-seguran%C3%A7a-cd83585f103d?source=rss------bug_bounty-5 | Sérgio Corrêa | web-exploitation, pentest, ctf, bug-bounty, cybersecurity | 19-May-2025 |
| My Secret Of rxploiting Htmli To Be Critical Severity $$$$ | https://hamzadzworm.medium.com/my-secret-of-rxploiting-htmli-to-be-critical-severity-017da0a12985?source=rss------bug_bounty-5 | Hamzadzworm | bugbounty-writeup, bug-bounty, infosec, infosecurity, bugbounty-tips | 19-May-2025 |
| How I Hacked Netflix? 100 Followers Special | Bug Bounty Tour #2 (Reupload) | https://medium.com/meetcyber/100-followers-special-how-i-hacked-netflix-bug-bounty-tour-2-reupload-caa59cf41af1?source=rss------bug_bounty-5 | NnFace | bug-bounty, hacking, bug-bounty-writeup, cybersecurity, ethical-hacking | 19-May-2025 |
| How I Found Two Overlooked Vulnerabilities That Could Lead to Account Takeover | https://medium.com/@ahmedashrafshora/how-i-found-two-overlooked-vulnerabilities-that-could-lead-to-account-takeover-d84f6cf8c169?source=rss------bug_bounty-5 | Ahmed Ashraf Shora | bug-bounty-writeup, cybersecurity, hacking, bug-bounty, penetration-testing | 19-May-2025 |
| Project Discovery, Tomnomnom Tools and Go Programming all in one script auto installer for Bug… | https://bjamali.medium.com/project-discovery-tomnomnom-tools-and-go-programming-all-in-one-script-auto-installer-for-bug-871befe3df2e?source=rss------bug_bounty-5 | Babar Ali Jamali | penetration-testing, programming, ethical-hacking, cybersecurity, bug-bounty | 19-May-2025 |
| Same Username, Different Letters? Account Creation with Lookalike Usernames | https://strangerwhite.medium.com/same-username-different-letters-account-creation-with-lookalike-usernames-e370b2a7d5e3?source=rss------bug_bounty-5 | StrangeRwhite | bug-bounty-tips, bug-bounty, bug-bounty-writeup, hacking, writeup | 18-May-2025 |
| Meta BBP — Stored XSS at Meta Careers | https://almuntadhar.medium.com/meta-bbp-stored-xss-at-meta-careers-c0bf074bddfa?source=rss------bug_bounty-5 | Muntadhar M. Ahmed | cybersecurity, security, bug-bounty, meta-bug-bounty, web-vulnerabilities | 18-May-2025 |
| The Most Dangerous Bug I’ve Ever Found (And No One Was Looking) | https://infosecwriteups.com/the-most-dangerous-bug-ive-ever-found-and-no-one-was-looking-2e96e5079a01?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, infosec, cybersecurity, hacking, ai | 18-May-2025 |
| How I Found a P1 Vulnerability That Allowed Full Account Takeover | https://medium.com/@hacker_space11/how-i-found-a-p1-vulnerability-that-allowed-full-account-takeover-e959fce8d882?source=rss------bug_bounty-5 | hacker_space11 | bug-bounty, bug-bounty-tips | 18-May-2025 |
| ️♂️Recon For New Bug bounty Hunters — Short Story | https://medium.com/@sudarshan.defcon/%EF%B8%8F-%EF%B8%8Frecon-for-new-bug-bounty-hunters-short-story-4f862a333e6d?source=rss------bug_bounty-5 | Sudarshan Patel | reconnaissance, bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty | 18-May-2025 |
| Quantifying Cyber Risk: Moving Beyond Heat Maps to Dollar Values | https://medium.com/@paritoshblogs/quantifying-cyber-risk-moving-beyond-heat-maps-to-dollar-values-b4ec44d92b1c?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, cybersecurity, information-security, information-technology | 18-May-2025 |
| Redirect Roulette: How Poor OAuth Redirect Handling Gave Me Account Takeover | https://infosecwriteups.com/redirect-roulette-how-poor-oauth-redirect-handling-gave-me-account-takeover-8c21ca809e3a?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, hacking, money, cybersecurity | 18-May-2025 |
| $200 Bounty: Sensitive information disclosure | https://medium.com/meetcyber/200-bounty-sensitive-information-disclosure-791799adb57b?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, hacking, cybersecurity, report | 18-May-2025 |
| I Found more then 10+ bug in single program: A Warning to Fellow Bug Hunters | https://medium.com/@ravindrajatav0709/i-found-more-then-10-bug-in-single-program-a-warning-to-fellow-bug-hunters-7bc95b8ea860?source=rss------bug_bounty-5 | Ravindrajatav | bug-zero, cybersecurity, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 18-May-2025 |
| How I Discovered Sensitive Data & Directory Exposure on an Indian Government Medical Institute… | https://medium.com/@adithyadhi007/how-i-discovered-sensitive-data-directory-exposure-on-an-indian-government-medical-institute-0d2fbbc5042e?source=rss------bug_bounty-5 | Adithya Raj | bug-bounty, cybersecurity, bugbounty-writeup | 18-May-2025 |
| OWASP Pentest Series (2/12) | https://medium.com/@thezeeshankhan/owasp-pentest-series-2-12-cbbcb32f23ab?source=rss------bug_bounty-5 | TheZeeshanKhan | bug-bounty, penetration-testing, security | 18-May-2025 |
| DOM XSS Exploitation via postMessage in an iframe | https://osintteam.blog/dom-xss-exploitation-via-postmessage-in-an-iframe-d50df8feac5b?source=rss------bug_bounty-5 | Bash Overflow | dom-xss-exploitation, postmessage-dom-xss, bug-bounty-tips, iframe-xss, bug-bounty | 18-May-2025 |
| Lab: Exploiting a mass assignment vulnerability | https://infosecwriteups.com/lab-exploiting-a-mass-assignment-vulnerability-c7c68b9f7f1b?source=rss------bug_bounty-5 | Mukilan Baskaran | cybersecurity, infosec, api, api-security, bug-bounty | 18-May-2025 |
| $750 Bounty: for HTTP Request Smuggling on Data.gov | https://infosecwriteups.com/750-bounty-for-http-request-smuggling-on-data-gov-36b9186d9b98?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, bug-bounty, cybersecurity, hacking | 18-May-2025 |
| How I Logged in as Another User via Broken OAuth Identity Binding | https://jxycybersec.medium.com/how-i-logged-in-as-another-user-via-broken-oauth-identity-binding-9a5265d84046?source=rss------bug_bounty-5 | Digvijay Gholase | cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-tips, hacking | 18-May-2025 |
| Bypassing Login via NoSQL Operator Injection: A MongoDB Authentication Hack | https://infosecwriteups.com/bypassing-login-via-nosql-operator-injection-a-mongodb-authentication-hack-b895211f60e0?source=rss------bug_bounty-5 | Aditya Bhatt | nosql-injection, cybersecurity, bug-hunting, bug-bounty, nosql | 18-May-2025 |
| Think You’re Safe? Think Again: Cybersecurity Myths | https://medium.com/meetcyber/think-youre-safe-think-again-cybersecurity-myths-69090b7e7afa?source=rss------bug_bounty-5 | Erkan Kavas | myths, bug-bounty, cybersecurity, hacker, safety-tips | 18-May-2025 |
| Open Redirect Vulnerability in OAuth Flow on Lichess4545.com | https://medium.com/@regan_temudo/open-redirect-vulnerability-in-oauth-flow-on-lichess4545-com-0e78c2d97397?source=rss------bug_bounty-5 | Regan Temudo | phishing-attacks, web-security, cybersecurity, oauth, bug-bounty | 18-May-2025 |
| STOP SCANNING, START HACKING: HOW TO GRAB EASY (BUT REAL) BOUNTIES MANUALLY | https://medium.com/@madaracracker1337/stop-scanning-start-hacking-how-to-grab-easy-but-real-bounties-manually-3a4ca0607139?source=rss------bug_bounty-5 | MadaraCracker | bug-bounty-tips, bug-bounty | 18-May-2025 |
| How I Logged in as Another User via Broken OAuth Identity Binding | https://systemweakness.com/how-i-logged-in-as-another-user-via-broken-oauth-identity-binding-9a5265d84046?source=rss------bug_bounty-5 | Digvijay Gholase | cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-tips, hacking | 18-May-2025 |
| Hacking APIs : Nuclei for REST/API Penetration Testing | https://iaraoz.medium.com/hacking-apis-nuclei-for-rest-api-penetration-testing-0b11bbd2eed5?source=rss------bug_bounty-5 | Israel Aráoz Severiche | api, owasp, hacking, security-token, bug-bounty | 18-May-2025 |
| 0 to First Bug: What I’d Do Differently If I Started Bug Bounty Today | https://infosecwriteups.com/0-to-first-bug-what-id-do-differently-if-i-started-bug-bounty-today-126494ba7e52?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, ai, cybersecurity, infosec, hacking | 17-May-2025 |
| The Role of AI in Next-Gen Vulnerability Management | https://medium.com/@paritoshblogs/the-role-of-ai-in-next-gen-vulnerability-management-f2988ace3de5?source=rss------bug_bounty-5 | Paritosh | bug-bounty, vulnerability, hacking, cybersecurity, vulnerability-management | 17-May-2025 |
| Hacking My Car, and probably yours— Security Flaws in Volkswagen’s App | https://loopsec.medium.com/hacking-my-car-and-probably-yours-security-flaws-in-volkswagens-app-24b34c47ba89?source=rss------bug_bounty-5 | LoopSec | vulnerability, ios, cybersecurity, bug-bounty, ethical-hacking | 17-May-2025 |
| Reverse Engineering for Beginner | https://medium.com/@anandrishav2228/reverse-engineering-for-beginner-0bf9b20542f7?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, hacking, reverse-engineering, beginner, cybersecurity | 17-May-2025 |
| This One Tool Changed My Hacking Workflow: Meet Proxify | https://chintalatarakaram.medium.com/the-secret-weapon-of-ethical-hackers-mastering-proxify-e42d2f3ba0ca?source=rss------bug_bounty-5 | Chintala Taraka Ram | bug-bounty, writing, tools, https-proxy, hacking | 17-May-2025 |
| From IDOR to Admin Door: The Bug That Opened Everything | https://medium.com/@dineshnarasimhan27/from-idor-to-admin-door-the-bug-that-opened-everything-9479b4185c05?source=rss------bug_bounty-5 | Dinesh Narasimhan | bug-bounty-tips, cybersecurity, bugbounty-writeup, bug-bounty, hacking | 17-May-2025 |
| TryHackMe Light: Full Walkthrough & SQL Injection Exploit | https://medium.com/@aawart2005/tryhackme-light-full-walkthrough-sql-injection-exploit-1e25db316905?source=rss------bug_bounty-5 | Aawart | tryhackme, thm, sqlite, thm-writeup, bug-bounty | 17-May-2025 |
| VAPT vs Bug Bounty: The Security Showdown Your Organization Needs to Know About | https://rootissh.in/vapt-vs-bug-bounty-the-security-showdown-your-organization-needs-to-know-about-fb555be0083f?source=rss------bug_bounty-5 | Atharva Deshmukh | cybersecurity, bug-bounty, pentesting, cybercrime, security | 17-May-2025 |
| My First Bug Bounty: How I Earned $1,000 | https://medium.com/@kailasv678/my-first-bug-bounty-how-i-earned-1-000-4ae2bf36039d?source=rss------bug_bounty-5 | Kailasv | bug-bounty-writeup, cybersecurity, hacking, hackerone, bug-bounty | 17-May-2025 |
| PDTM(Project Discovery Tool Manager) | https://medium.com/@aysbnd00/pdtm-project-discovery-tool-manager-770802ad0ce2?source=rss------bug_bounty-5 | icybnd | penetration-testing, enumeration, bug-bounty, vulnerability-scanning | 17-May-2025 |
| How I Found the Most Weird Bug in the Bug Bounty Field — Is It Really Worth It… | https://medium.com/@mahdisalhi0500/how-i-found-the-most-weird-bug-in-the-bug-bounty-field-is-it-really-worth-it-d4b60c0352a8?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | cybersecurity, penetration-testing, information-security, bug-bounty, hacking | 17-May-2025 |
| Wide Recon | https://medium.com/@rthunt3r/wide-recon-15ead790196f?source=rss------bug_bounty-5 | R T Hunter | hacker, red-teaming, bug-bounty, cybersecurity, bug-bounty-tips | 17-May-2025 |
| $10,500 Bounty: A Grammarly Account Takeover Vector | https://infosecwriteups.com/10-500-bounty-a-grammarly-account-takeover-vector-974ef90fb00a?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, cybersecurity, technology, report, bug-bounty | 17-May-2025 |
| $500 Bounty: A Referer Leak in Brave’s Private Tor Window | https://infosecwriteups.com/500-bounty-a-referer-leak-in-braves-private-tor-window-ee0c846203b5?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, cybersecurity, hacking, penetration-testing | 17-May-2025 |
| Mastering Microservices: The Ultimate Guide | https://medium.com/@zoningxtr/mastering-microservices-the-ultimate-guide-2537811bb9d3?source=rss------bug_bounty-5 | Zoningxtr | microservices, web-development, penetration-testing, cybersecurity, bug-bounty | 17-May-2025 |
| How I Found Stored HTML Injection in the Invite User Feature and Earned $300 | https://cybersecuritywriteups.com/how-i-found-stored-html-injection-in-the-invite-user-feature-and-earned-300-3f0d106a7960?source=rss------bug_bounty-5 | Whitehat | cybersecurity, hacking, bug-bounty-tips, bug-bounty, bugbounty-writeup | 17-May-2025 |
| How I Took Admin Account via JWT Bypass | https://medium.com/@dharaniswaran.cs22/how-i-took-admin-account-via-jwt-bypass-5bed37a8e7ac?source=rss------bug_bounty-5 | Dharanis | vapt, json, vulnerability, bug-bounty, jwt-token | 17-May-2025 |
| Token of Misfortune: How a Refresh Token Leak Let Me Regenerate Unlimited Sessions | https://infosecwriteups.com/token-of-misfortune-how-a-refresh-token-leak-let-me-regenerate-unlimited-sessions-bb6693751c85?source=rss------bug_bounty-5 | Iski | money, cybersecurity, bug-bounty, hacking, infosec | 17-May-2025 |
| How I Discovered Critical Secrets in Docker Images by Scanning Every Tag and Architecture | https://medium.com/@Ghaazy/how-i-discovered-critical-secrets-in-docker-images-by-scanning-every-tag-and-architecture-3edbc10db0c1?source=rss------bug_bounty-5 | Ahmed Ghazy | cybersecurity, infosec, bug-bounty | 17-May-2025 |
| Easy Bug That Falls Between P5 and P3: Find Broken Access Control & IDOR Using AutoReisze in Burp… | https://medium.com/@ahmedashrafshora/easy-bug-that-falls-between-p5-and-p3-find-broken-access-control-idor-using-autoreisze-in-burp-6f427852a788?source=rss------bug_bounty-5 | Ahmed Ashraf Shora | web-penetration-testing, bug-bounty, cybersecurity, autorize, hacking | 17-May-2025 |
| Sharpening Command Injections to get Full RCE | https://infosecwriteups.com/sharpening-command-injections-to-get-full-rce-e4cf257d2c66?source=rss------bug_bounty-5 | Mostafa Alrefai | hacking, rce, cybersecurity, pentesting, bug-bounty | 17-May-2025 |
| Bug Bounty desde Cero: De la Curiosidad al Primer Hallazgo | https://medium.com/@bertolanicami/bug-bounty-desde-cero-de-la-curiosidad-al-primer-hallazgo-6642e3944764?source=rss------bug_bounty-5 | Cami Bertolani | bug-bounty, hacking, bug-bounty-tips, cybersecurity, vulnerability | 17-May-2025 |
| From 0 to $$$: Finding Rate Limit Bypasses Like a Pro | https://infosecwriteups.com/from-0-to-finding-rate-limit-bypasses-like-a-pro-6baf92b6acad?source=rss------bug_bounty-5 | BugBounty University | bug-bounty-tips, infosec, penetration-testing, cybersecurity, bug-bounty | 16-May-2025 |
| Part-2️♂️Bug Bounty Secrets They Don’t Tell You: Tricks From 100+ Reported Bugs | https://infosecwriteups.com/part-2-%EF%B8%8F-%EF%B8%8Fbug-bounty-secrets-they-dont-tell-you-tricks-from-100-reported-bugs-46429520beb3?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, cybersecurity, hacking, secrets, bug-bounty | 16-May-2025 |
| Bug Bounty Burnout: When Serious Bugs Get Dismissed | https://medium.com/@vivekps143/bug-bounty-burnout-when-serious-bugs-get-dismissed-f22cf0f0f293?source=rss------bug_bounty-5 | Vivek PS | hacking, web-development, bug-bounty, programming, burnout | 16-May-2025 |
| Port- 139,445 SMB Exploitation (Series:1/ [article:2]) | https://infosecwriteups.com/port-139-445-smb-exploitation-series-1-article-2-6769570eb0ef?source=rss------bug_bounty-5 | Mr Horbio | ethical-hacking, hacking, bug-bounty, penetration-testing, cybersecurity | 16-May-2025 |
| $750 Bounty: From X-Forwarded-Host to Stored DOM XSS | https://osintteam.blog/750-bounty-from-x-forwarded-host-to-stored-dom-xss-de0785adfe05?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, hacking, cybersecurity, technology | 16-May-2025 |
| ️♂️ From Recon to Report: How I Approach Every Bug Bounty Target | https://osintteam.blog/%EF%B8%8F-%EF%B8%8F-from-recon-to-report-how-i-approach-every-bug-bounty-target-2663163148d5?source=rss------bug_bounty-5 | Vipul Sonule | osint, bug-bounty, cybersecurity, hacking, tech | 16-May-2025 |
| How to escalate a SQL injection if there is a strict WAF? | https://medium.com/@bug_vs_me/how-to-escalate-a-sql-injection-if-there-is-a-strict-waf-2a7798bb769e?source=rss------bug_bounty-5 | Deepak | bug-bounty, waf-bypass, hacking, sql-injection, sql | 16-May-2025 |
| $500 Bounty: Race Condition in Hacker101 CTF Group Join | https://infosecwriteups.com/500-bounty-race-condition-in-hacker101-ctf-group-join-d7e84651bc5f?source=rss------bug_bounty-5 | Monika sharma | report, technology, bug-bounty, penetration-testing, hacking | 16-May-2025 |
| How a Simple Logic Flaw Led to a $3,250 Bounty | https://infosecwriteups.com/how-a-simple-logic-flaw-led-to-a-3-250-bounty-476d747bf57a?source=rss------bug_bounty-5 | Monika sharma | report, technology, cybersecurity, bug-bounty, penetration-testing | 16-May-2025 |
| Race Condition Seru: Ngebobol Limit Cuma Modal Request Paralel | https://medium.com/@FufuFaf1/race-condition-seru-ngebobol-limit-cuma-modal-request-paralel-44f1da33e4fb?source=rss------bug_bounty-5 | FufuFafa | cybersecurity, bug-bounty-tips, hacking, bug-bounty-writeup, bug-bounty | 16-May-2025 |
| Caching Trouble: The Public Cache That Leaked Private User Data | https://infosecwriteups.com/caching-trouble-the-public-cache-that-leaked-private-user-data-0d410af5cb4c?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, infosec, hacking, money | 16-May-2025 |
| From Guest to Admin: Chaining Pre-Account Takeover with Privilege Escalation | https://medium.com/@kroush333/from-guest-to-admin-chaining-pre-account-takeover-with-privilege-escalation-fe970e80cd25?source=rss------bug_bounty-5 | MahmoudKroush | bug-bounty, bug-bounty-tips, cybersecurity | 16-May-2025 |
| Privilege Escalation via Response Manipulation | https://mrshan.medium.com/privilege-escalation-via-response-manipulation-efe66697bc98?source=rss------bug_bounty-5 | MR SHAN | bug-bounty-tips, response-manipulation, burpsuite, cybersecurity, bug-bounty | 16-May-2025 |
| FullMounty (Easy) PwnTillDawn Walkthrough. | https://medium.com/@3L4CKCYBR/badger-easy-pwntilldawn-walkthrough-50670472cc33?source=rss------bug_bounty-5 | 3L4CKCYBR_ | technology, privilege-escalation, bug-bounty, cybersecurity, pwntilldawn | 16-May-2025 |
| PII Leak via Email | https://medium.com/@hossam_hamada/pii-leak-via-email-3ff4eb5199d9?source=rss------bug_bounty-5 | Hossam Hamada | bug-bounty, bugbounty-tips, bugcrowd, hackerone, bugbounty-writeup | 16-May-2025 |
| CTF | Brute Force Login Cuma Modal Terminal Gak Perlu UI! | https://inrexna.medium.com/ctf-brute-force-login-cuma-modal-terminal-gak-perlu-ui-ddd455c4bf66?source=rss------bug_bounty-5 | InREXnA | ethical-hacking, bug-bounty, cybersecurity, penetration-testing, ctf-writeup | 16-May-2025 |
| How I almost made $1000 from XSS bypass attribute | https://medium.com/@0xRedFox29/how-i-almost-made-1000-from-xss-bypass-attribute-77d68f0bc33c?source=rss------bug_bounty-5 | kunx90 | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty, red-team-security | 16-May-2025 |
| 2fa, OTP bypass checklists 2025 | https://medium.com/@mohaned0101/2fa-otp-bypass-checklists-2025-4d45f92dbdaa?source=rss------bug_bounty-5 | mohaned alkhlot | otp-verification, 2fa-bypass, bug-bounty-tips, 2fa, bug-bounty | 16-May-2025 |
| Open Redirect via Base64-Encoded state Parameter in OAuth Flow (returnTo field) | https://medium.com/@husseinelturkey/open-redirect-via-base64-encoded-state-parameter-in-oauth-flow-returnto-field-42a0319ef296?source=rss------bug_bounty-5 | Hussein Elturkey | bug-bounty-writeup, duplicate, open-redirect, bugcrowd, bug-bounty | 16-May-2025 |
| Reflexiones sobre la creación de comunidades: El caso Bug Bounty Argentina y su réplica | https://medium.com/@yenoyow561/reflexiones-sobre-la-creaci%C3%B3n-de-comunidades-el-caso-bug-bounty-argentina-y-su-r%C3%A9plica-f7a6cf3c9cf1?source=rss------bug_bounty-5 | KRAQEN | cybersecurity, inclusion, plágio, ethical-hacking, bug-bounty | 16-May-2025 |
| How I almost made $1000 from XSS bypass attribute | https://medium.com/@0xRedFox29/how-i-almost-made-1000-from-xss-bypass-attribute-77d68f0bc33c?source=rss------bug_bounty-5 | 0xRedFox29 | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty, red-team-security | 16-May-2025 |
| ☕Best Tool for Analyzing Java Files (90% of Hackers Don’t Know This) | https://infosecwriteups.com/best-tool-for-analyzing-java-files-90-of-hackers-dont-know-this-07a57d1477f9?source=rss------bug_bounty-5 | Abhijeet Kumawat | java, bug-bounty, infosec, hacking, cybersecurity | 15-May-2025 |
| Hacking With No Tools: How to Break Web Apps Using Just Your Browser ️♂️ | https://infosecwriteups.com/hacking-with-no-tools-how-to-break-web-apps-using-just-your-browser-%EF%B8%8F-%EF%B8%8F-255861d3f623?source=rss------bug_bounty-5 | Vipul Sonule | infosec, hacking, cybersecurity, bug-bounty, tech | 15-May-2025 |
| $3,000 Bounty: RCE in Burp Suite via Clickjacking | https://infosecwriteups.com/3-000-bounty-rce-in-burp-suite-via-clickjacking-3a3bac7cf431?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, hacking, penetration-testing, cybersecurity, technology | 15-May-2025 |
| Blog Title: Not Your File: How Misconfigured MIME Types Let Me Upload Evil Scripts | https://infosecwriteups.com/blog-title-not-your-file-how-misconfigured-mime-types-let-me-upload-evil-scripts-889efb18a7ce?source=rss------bug_bounty-5 | Iski | hacking, infosec, money, bug-bounty, cybersecurity | 15-May-2025 |
| Bypassing OTP Verification via Response Manipulation: A Silent Threat | https://frostyxsec.medium.com/bypassing-otp-verification-via-response-manipulation-a-silent-threat-006dc2b6fa13?source=rss------bug_bounty-5 | Frostynxth | bug-bounty-hunter, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 15-May-2025 |
| CHAINING THE SCOPE | https://sijojohnson.medium.com/chaining-the-scope-0f6fcb9e7cf4?source=rss------bug_bounty-5 | Sijo Johnson | sensitive-data-exposure, easy-pii-leak, pii-data, wedohacks, bug-bounty | 15-May-2025 |
| QA Mindset Shift: From Bug Hunters to User Whisperers | https://medium.com/@ivan.boklach/qa-mindset-shift-from-bug-hunters-to-user-whisperers-7e9dccff0fc4?source=rss------bug_bounty-5 | Ivan Boklach | bug-bounty, bugs, qa | 15-May-2025 |
| Top Tools That Helped Me Earn $500 in 30 Days | https://infosecwriteups.com/top-tools-that-helped-me-earn-500-in-30-days-00123f09cd7a?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, recon, secrets, hacking, information-security | 15-May-2025 |
| The Gray Code: When Hackers Wrestle With Their Shadows | https://medium.com/meetcyber/the-gray-code-when-hackers-wrestle-with-their-shadows-0a2cb5b66e21?source=rss------bug_bounty-5 | Ahmad Javed | hacker, hacking, bug-bounty, cybersecurity, ethical-hacking | 15-May-2025 |
| GitHub Dorking Brought Us the Bounty | https://medium.com/@nocley/github-dorking-brought-us-the-bounty-cd1c4675371e?source=rss------bug_bounty-5 | nocley | intigriti, bugbounty-tips, hacking, bug-bounty, bugbounty-writeup | 15-May-2025 |
| Introducing SecureCrawl: The Intelligent Web Security Crawler | https://medium.com/@N0aziXss/introducing-securecrawl-the-intelligent-web-security-crawler-d258ec05edb8?source=rss------bug_bounty-5 | N0aziXss | ethical-hacking, cybersecurity, bug-bounty, python, web-security | 15-May-2025 |
| Cybersecurity Training: Real-World Code Review Challenges on CodeVulnHunt | https://medium.com/@mithun_/cybersecurity-training-real-world-code-review-challenges-on-codevulnhunt-70a0a36e50bf?source=rss------bug_bounty-5 | Mithun | source-code, ctf, cybersecurity, infosec, bug-bounty | 15-May-2025 |
| How Attackers Use Google Dorks to Discover Your Exposed Assets | https://medium.com/@tejprakashbk1996/how-attackers-use-google-dorks-to-discover-your-exposed-assets-026f367c21e4?source=rss------bug_bounty-5 | Tejprakash | google-dork, security, google-search, reconnaissance, bug-bounty | 15-May-2025 |
| NoSQL Injection Detection — A hands-on Exploitation Walkthrough | https://infosecwriteups.com/nosql-injection-detection-a-hands-on-exploitation-walkthrough-03aaa19dab70?source=rss------bug_bounty-5 | Aditya Bhatt | nosql-injection, nosql, sql-injection, cybersecurity, bug-bounty | 15-May-2025 |
| The “Unlimited Leave” Hack I Found at My College | https://medium.com/@swarnimbandekar/the-unlimited-leave-hack-i-found-at-my-college-4c772df5f8e4?source=rss------bug_bounty-5 | Swarnim Bandekar | ethical-hacking, bug-bounty, bug-bounty-tips, hacking, penetration-testing | 15-May-2025 |
| Exploring GoBuster: A Powerful Tool For Directory and File Discovery | https://medium.com/@natarajanck2/exploring-gobuster-a-powerful-tool-for-directory-and-file-discovery-0009c500e158?source=rss------bug_bounty-5 | Natarajan C K | bug-bounty, gobuster, security, browsers, violation | 15-May-2025 |
| Mi Carta de reconocimiento por la NASA: lo que no se ve detrás del logro | https://medium.com/@juanfelipeoz.rar/mi-carta-de-reconocimiento-por-la-nasa-lo-que-no-se-ve-detr%C3%A1s-del-logro-59c6cb59671c?source=rss------bug_bounty-5 | Juan Felipe Osorio Z | seguridad-informatica, ciberseguridad, hacking, bug-bounty, nasa | 15-May-2025 |
| CVE-2025-4455: Local Privilege Escalation in Patch My PC Home Updater | https://sneharghya.medium.com/cve-2025-4455-local-privilege-escalation-in-patch-my-pc-home-updater-58f2c2041b46?source=rss------bug_bounty-5 | Sneharghya Roy | dll-hijacking, bug-bounty, cybersecurity | 15-May-2025 |
| 403 Bypass Techniques for Bug Bounty | https://medium.com/@silverxcyber/403-bypass-techniques-for-bug-bounty-dcd449733bec?source=rss------bug_bounty-5 | SilverXCyber | 403bypass, bug-bounty, 403-forbidden, bug-bounty-hunter, bug-bounty-writeup | 15-May-2025 |
| Escalando Privilégios com a Determinação de um Shih Tzu | https://medium.com/@correa-sergio/escalando-privil%C3%A9gios-com-a-determina%C3%A7%C3%A3o-de-um-shih-tzu-9df40e8a482c?source=rss------bug_bounty-5 | Sérgio Corrêa | cybersecurity, ctf, segurança-da-informação, pentest, bug-bounty | 15-May-2025 |
| What crime did humans commit to attract the punishment of bedbugs! | https://medium.com/@Purpledot_/what-crime-did-humans-commit-to-attract-the-punishment-of-bedbugs-5e77ee08aa6c?source=rss------bug_bounty-5 | Confidence | medium, problems, helping-others, bug-bounty, solutions | 15-May-2025 |
| My First Year in Bug Bounty $$$ | https://infosecwriteups.com/my-first-year-in-bug-bounty-9c87e0b68ac4?source=rss------bug_bounty-5 | RivuDon | bug-bounty-writeup, bug-hunter, bug-bounty-tips, bug-bounty, bug-hunting | 14-May-2025 |
| JWT Exploitation: How I Forged Tokens and Took Over Accounts | https://infosecwriteups.com/jwt-exploitation-how-i-forged-tokens-and-took-over-accounts-2e7ab1cf4df8?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, bug-bounty, hacking, jwt, cybersecurity | 14-May-2025 |
| Title: Filter Failure: From HTML Injection to Full-Blown XSS via Rich Text Editors | https://infosecwriteups.com/title-filter-failure-from-html-injection-to-full-blown-xss-via-rich-text-editors-af6809e248b4?source=rss------bug_bounty-5 | Iski | bug-bounty, money, cybersecurity, hacking, infosec | 14-May-2025 |
| Ethical Hacking Guide: Penetration Testing Apache Tomcat (2025 Edition) | https://medium.com/@verylazytech/ethical-hacking-guide-penetration-testing-apache-tomcat-2025-edition-01dc367f070c?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, apache, tomcat, ethical-hacking, bug-bounty | 14-May-2025 |
| IDOR: When One Tiny Change Exposes Everything | https://medium.com/@sachinpv2004/idor-when-one-tiny-change-exposes-everything-c54b6750d2fd?source=rss------bug_bounty-5 | SACHIN PV | pentesting, idor, bug-bounty, vulnerability, owasp | 14-May-2025 |
| Ditch the Patchwork of Breach-Alert Tools: Monitor Every Credential Leak from One Place with… | https://medium.com/@alexandrevandammepro/ditch-the-patchwork-of-breach-alert-tools-monitor-every-credential-leak-from-one-place-with-0b7f6225ecf8?source=rss------bug_bounty-5 | Alexandre Vandamme | cyberattack, bug-bounty-tips, technology, bug-bounty, cybersecurity | 14-May-2025 |
| About Me | https://0xsakibkhan.medium.com/about-me-673842903ff2?source=rss------bug_bounty-5 | Muhammad Shakib | hacking-tools, bug-bounty, ethical-hacking, red-team-tools, pentesting | 14-May-2025 |
| End Recon Tool Overload: Centralise Enumeration & Scanning with SubDomainRadar.io | https://medium.com/@alexandrevandammepro/end-recon-tool-overload-centralise-enumeration-scanning-with-subdomainradar-io-ae387d97cc6c?source=rss------bug_bounty-5 | Alexandre Vandamme | hacking, bug-bounty, technology, cybersecurity, bug-bounty-tips | 14-May-2025 |
| CTF Day(1) | https://medium.com/@ahmednarmer1/ctf-day-1-c213568b8321?source=rss------bug_bounty-5 | Ahmed Narmer | cybersecurity, bug-bounty, ctf, web-penetration-testing | 14-May-2025 |
| Breaking In Through the Backdoor: Password Reset Gone Wrong | https://infosecwriteups.com/breaking-in-through-the-backdoor-password-reset-gone-wrong-6e5243c16a19?source=rss------bug_bounty-5 | Ehtesham Ul Haq | infosec, penetration-testing, bug-bounty, writeup, passwords | 14-May-2025 |
| How Inconsistent Input Handling and Poor Email Validation Can Lead to Admin Access | https://infosecwriteups.com/how-inconsistent-input-handling-and-poor-email-validation-can-lead-to-admin-access-b64b25413b82?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, bypass-email-registration, bug-bounty-tips, lack-of-email-validation, email-logic-flaws | 14-May-2025 |
| HackerNote(Medium)TryHackMe Walkthrough | https://medium.com/@blackcyb3r29/hackernote-medium-tryhackme-walkthrough-41a7080c5046?source=rss------bug_bounty-5 | 3L4CKCYBR_ | tryhackme, cybersecurity, bug-bounty, ctf-writeup, technology | 14-May-2025 |
| The Crypto Wallet Vulnerability That Went Undetected for Over Six Years | https://medium.com/@john-s4d/the-crypto-wallet-vulnerability-that-went-undetected-for-over-six-years-36cd52cb600c?source=rss------bug_bounty-5 | John Sessford | crypto, solana-network, bug-bounty, cryptocurrency, cybersecurity | 14-May-2025 |
| CTF Day(2) | https://medium.com/@ahmednarmer1/ctf-day-2-f405f7d0449d?source=rss------bug_bounty-5 | Ahmed Narmer | bug-bounty, ctf, cybersecurity, web-penetration-testing | 14-May-2025 |
| Publishing your story with allbyhunter | https://allbyhunter.com/publishing-your-story-with-allbyhunter-a121696ff60d?source=rss------bug_bounty-5 | kerstan | startup, hacking, bug-bounty, prgramming, coding | 14-May-2025 |
| $800 Bounty — Web Cache Deception in Shopify | https://medium.com/meetcyber/800-bounty-web-cache-deception-in-shopify-c8507c2d99e5?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, bug-bounty-tips, technology, cybersecurity, penetration-testing | 14-May-2025 |
| Bug Bounty Tips: From Zero to First Payout | https://medium.com/@appsecwarrior/bug-bounty-tips-from-zero-to-first-payout-6bd8c9df0c48?source=rss------bug_bounty-5 | appsecwarrior | security, bug-bounty, bug-bounty-tips, bug-bounty-writeup, penetration-testing | 14-May-2025 |
| Ethical Hacking Learning Path | https://0xben.medium.com/ethical-hacking-learning-path-and-roadmap-5e3252f7c9de?source=rss------bug_bounty-5 | 0xBEN | ctf, bug-bounty, ethical-hacking, learning-path, penetration-testing | 14-May-2025 |
| Breaking the Rules: Deleting Confirmed Organizations Through a Backend Flaw | https://medium.com/@cyberpro151/breaking-the-rules-deleting-confirmed-organizations-through-a-backend-flaw-525dc867841c?source=rss------bug_bounty-5 | cyberpro151 | cybersecurity, bug-bounty, penetration-testing, ethical-hacking, bug-bounty-tips | 14-May-2025 |
| Researcher Yuvi — My Cybersecurity Journey at 16 | https://medium.com/@codewithyuvi/researcher-yuvi-my-cybersecurity-journey-at-16-e3dde09fba78?source=rss------bug_bounty-5 | Yuvraj Gupta | hall-of-fame, researcher-yuvi, ethical-hacking, bug-bounty, cybersecurity | 13-May-2025 |
| Bypassing CSRF Protections | https://medium.com/@itamar.yochpaz/bypassing-csrf-protections-7db64f26b9e5?source=rss------bug_bounty-5 | Itamar Yochpaz | hacking, cybersecurity, application-security, bug-bounty, penetration-testing | 13-May-2025 |
| $256 Bounty : XSS via Web Cache Poisoning in Discourse | https://infosecwriteups.com/256-bounty-xss-via-web-cache-poisoning-in-discourse-594d5961555e?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, cybersecurity, penetration-testing, technology, hacking | 13-May-2025 |
| How Hackers Bypass Login Pages with SQL, Logic Flaws, and Headers | https://infosecwriteups.com/how-hackers-bypass-login-pages-with-sql-logic-flaws-and-headers-567a5649e701?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, cybersecurity, infosec, programming, hacking | 13-May-2025 |
| Forget Me Not: How Broken Logout Functionality Let Me Ride Sessions Forever | https://infosecwriteups.com/forget-me-not-how-broken-logout-functionality-let-me-ride-sessions-forever-3435e6d98845?source=rss------bug_bounty-5 | Iski | cybersecurity, infosec, hacking, money, bug-bounty | 13-May-2025 |
| The $1,000 Recon Trick: One Command That Changed My Hunting Game | https://infosecwriteups.com/the-1-000-recon-trick-one-command-that-changed-my-hunting-game-58527a7f6d7c?source=rss------bug_bounty-5 | Abhijeet Kumawat | tricks, hacking, vulnerability, recon, bug-bounty | 13-May-2025 |
| Inside the Shadows: Why HTTP Smuggling Still Breaks the Web | https://medium.com/@es0557533/inside-the-shadows-why-http-smuggling-still-breaks-the-web-c81c69577fdd?source=rss------bug_bounty-5 | Isv | cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-writeup, https | 13-May-2025 |
| The Human Firewall: Why Your Employees Are Both Your Greatest Vulnerability and Asset | https://infosecwriteups.com/the-human-firewall-why-your-employees-are-both-your-greatest-vulnerability-and-asset-76a93b879bae?source=rss------bug_bounty-5 | Paritosh | hacking, bug-bounty, firewall, cybersecurity, networking | 13-May-2025 |
| Meet URLShort: The Ultimate URL Shortener, Fuzzer & Payload Injector for Bug Bounty Hunters &… | https://neerajsah.medium.com/meet-urlshort-the-ultimate-url-shortener-fuzzer-payload-injector-for-bug-bounty-hunters-9c631e83d492?source=rss------bug_bounty-5 | Neeraj Sah | bug-bounty, fuzzing, pentesting, hacking-tools, url-shorteners | 13-May-2025 |
| Exploiting File Upload Vulnerabilities: What, Why & How | https://medium.com/@sachinpv2004/exploiting-file-upload-vulnerabilities-what-why-how-68e159aff82a?source=rss------bug_bounty-5 | SACHIN PV | owasp, bug-bounty, file-upload, pentesting, file-upload-vulnerability | 13-May-2025 |
| How I Found a Way to Prolong Password Reset Code Expiry | https://infosecwriteups.com/how-i-found-a-way-to-prolong-password-reset-code-expiry-6214391023de?source=rss------bug_bounty-5 | Ehtesham Ul Haq | passwords, bug-bounty, hacking, penetration-testing, infosec | 13-May-2025 |
| Web Cache | https://medium.com/@eddinesaad122/web-cache-6065a266ae95?source=rss------bug_bounty-5 | saad eddine | bug-bounty, web-development, technology, security, web | 13-May-2025 |
| ASUS DriverHub Vulnerability Exposes Users to Remote Code Execution | https://wiretor.medium.com/asus-driverhub-vulnerability-exposes-users-to-remote-code-execution-1f924851eeac?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | usa, bug-bounty, hacking, malware, rce | 13-May-2025 |
| Bug Bounty Roadmap 2025: The Complete Guide to Becoming a Professional Ethical Hacker | https://medium.com/@jiniyaasma8/bug-bounty-roadmap-2025-the-complete-guide-to-becoming-a-professional-ethical-hacker-a6ff0abc69ef?source=rss------bug_bounty-5 | Jiniyaasma | bug-bounty-tips, technology, resources, cybersecurity, bug-bounty | 13-May-2025 |
| $$$ bounty via unique username bypass | https://medium.com/legionhunters/bounty-via-unique-username-bypass-26f2c76f5ee7?source=rss------bug_bounty-5 | cryptoshant | money, bug-bounty, bug-bounty-tips, cybersecurity, hacking | 13-May-2025 |
| My Exceptional SSRF Finding | https://medium.com/@nocley/my-exceptional-ssrf-finding-73e8039e3a22?source=rss------bug_bounty-5 | nocley | readteam, pentest, tips-and-tricks, bug-bounty, ssrf | 13-May-2025 |
| Upload Vulns | https://medium.com/@julius.grosserode.19/upload-vulns-3c139f507b28?source=rss------bug_bounty-5 | Julio | path-traversal, file-upload, bug-bounty, file-upload-vulnerability, bug-bounty-tips | 13-May-2025 |
| Introducing DomainRecon: Your Advanced WHOIS & DNS Intelligence Tool | https://medium.com/@N0aziXss/introducing-domainrecon-your-advanced-whois-dns-intelligence-tool-9e2dc63ae774?source=rss------bug_bounty-5 | N0aziXss | ethical-hacking, python, bug-bounty, reconnaissance, cybersecurity | 13-May-2025 |
| Template Report Bug Bounty (Bahasa Indonesia) | https://medium.com/@ikhlasul0507/template-report-bug-bounty-d3ad2f9d84ee?source=rss------bug_bounty-5 | Ikhlasul | xss-attack, bugs, bug-bounty, xs | 12-May-2025 |
| $25,000 SSRF in HackerOne’s Analytics Reports | https://osintteam.blog/25-000-ssrf-in-hackerones-analytics-reports-b9a5b3aa3d6e?source=rss------bug_bounty-5 | Monika sharma | hacking, bug-bounty, cybersecurity, technology, penetration-testing | 12-May-2025 |
| How I Earned $200 From a Simple EXIF Bug (Step by Step Guide, You Can Use Today) | https://infosecwriteups.com/how-i-earned-200-from-a-simple-exif-bug-step-by-step-guide-you-can-use-today-c71dc2d82389?source=rss------bug_bounty-5 | BugBounty University | osint, bug-bounty, infosec, exif, cybersecurity | 12-May-2025 |
| How I Found SSTI in a Search Bar | https://infosecwriteups.com/how-i-found-ssti-in-a-search-bar-6fede0d3263c?source=rss------bug_bounty-5 | Umanhonlen Gabriel | hacking, bug-bounty, hacker, bug-bounty-tips | 12-May-2025 |
| Breaking APIs: A Bug Hunter’s Guide | https://osintteam.blog/breaking-apis-a-bug-hunters-guide-ba20b7098364?source=rss------bug_bounty-5 | Aditya Bhatt | api-testing, bug-bounty, api, cybersecurity, bug-hunting | 12-May-2025 |
| How I Exploited a Low-Level Logic Flaw to Manipulate Product Prices Using Burp Intruder | https://osintteam.blog/how-i-exploited-a-low-level-logic-flaw-to-manipulate-product-prices-using-burp-intruder-64143bee2322?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, exploit-logic-flaw, bypass-price-validation, logic-flaw-bug-bounty, bug-bounty-tips | 12-May-2025 |
| This Red Teaming Tools can make you a pro Hacker. | https://medium.com/@anandrishav2228/this-red-teaming-tools-can-make-you-a-pro-hacker-69b5f60fd735?source=rss------bug_bounty-5 | Rishav anand | money, cybersecurity, red-team, bug-bounty, hacking | 12-May-2025 |
| SSRF via PDF Generator? Yes, and It Led to EC2 Metadata Access | https://infosecwriteups.com/ssrf-via-pdf-generator-yes-and-it-led-to-ec2-metadata-access-39b8e5b41840?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, hacking, ssrf, bug-bounty, ssrf-attack | 12-May-2025 |
| The Psychology of Patch Fatigue: Why Teams Delay Fixes | https://medium.com/@paritoshblogs/the-psychology-of-patch-fatigue-why-teams-delay-fixes-eb4690cfb38e?source=rss------bug_bounty-5 | Paritosh | cybersecurity, vulnerability, vulnerability-management, hacking, bug-bounty | 12-May-2025 |
| Top 5 Easiest Bugs for Beginners in Bug Bounty | https://infosecwriteups.com/top-5-easiest-bugs-for-beginners-in-bug-bounty-45dd81c49e03?source=rss------bug_bounty-5 | Vipul Sonule | hacking, bug-bounty, infosec, technology, cybersecurity | 12-May-2025 |
| $10,000 Bounty: HackerOne Report Comments Leak via “Export as .zip” | https://infosecwriteups.com/10-000-bounty-hackerone-report-comments-leak-via-export-as-zip-a4aed8bd7409?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, technology, hacking, cybersecurity | 12-May-2025 |
| SameSite? SameMess: How I Bypassed Cookie Protections to Hijack Sessions ️♂️ | https://infosecwriteups.com/samesite-samemess-how-i-bypassed-cookie-protections-to-hijack-sessions-%EF%B8%8F-%EF%B8%8F-20520f4be7ec?source=rss------bug_bounty-5 | Iski | bug-bounty, money, cybersecurity, hacking, infosec | 12-May-2025 |
| How I Find Open Redirect Bugs Using Waybackurls, Gau & GF Tool | https://ch4ndan.medium.com/how-i-find-open-redirect-bugs-using-waybackurls-gau-gf-tool-64ac3dcb9aa0?source=rss------bug_bounty-5 | Ch4ndan das | bug-bounty, cybersecurity, bug-bounty-tips, cyber-security-awareness, bug-bounty-writeup | 12-May-2025 |
| Intercept phone’s traffic in burp (using actual phone) | https://medium.com/@ozz0x/intercept-phones-traffic-in-burp-using-actual-phone-ca46317add92?source=rss------bug_bounty-5 | Ozz | api, mobile-pentesting, api-testing, mobile-bug-bounty, bug-bounty | 12-May-2025 |
| Researcher Yuvi Teen Hacker to Hall of Fame: My Cybersecurity Journey at 16 | https://medium.com/@codewithyuvi/researcher-yuvi-teen-hacker-to-hall-of-fame-my-cybersecurity-journey-at-16-230efba091cb?source=rss------bug_bounty-5 | Yuvraj Gupta | youngest, cybersecurity, hacking, bug-bounty, yuvi | 12-May-2025 |
| $12,000 RCE in GitLab: Arbitrary File Overwrite via Path Injection | https://medium.com/meetcyber/12-000-rce-in-gitlab-arbitrary-file-overwrite-via-path-injection-35443b6602df?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, penetration-testing, technology, bug-bounty, hacking | 12-May-2025 |
| iSCSI— Port 3260 — How to exploit? | https://medium.com/@verylazytech/iscsi-port-3260-how-to-exploit-c8402da9cefb?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, iscsi, penetration-testing, oscp, bug-bounty | 12-May-2025 |
| ️ Top 25 Most Dangerous Software Weaknesses (CWE) | https://medium.com/@shamzen96/%EF%B8%8F-top-25-most-dangerous-software-weaknesses-cwe-91a3e4e58f42?source=rss------bug_bounty-5 | Shivam Raj | bug-bounty, cwe, cybersecurity | 12-May-2025 |
| Researcher Yuvi — My Cybersecurity Journey at 16 | https://medium.com/@codewithyuvi/researcher-yuvi-teen-hacker-to-hall-of-fame-my-cybersecurity-journey-at-16-230efba091cb?source=rss------bug_bounty-5 | Yuvraj Gupta | youngest, cybersecurity, hacking, bug-bounty, yuvi | 12-May-2025 |
| bWAPP HTML Injection CheatSheet — (WebApp Pentesting 1) | https://serkanbenol.medium.com/bwapp-html-injection-cheatsheet-webapp-pentesting-1-f6ae6719617a?source=rss------bug_bounty-5 | serkanbenol | bug-bounty-hunter, cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 12-May-2025 |
| The Ultimate IDOR Bug Bounty Methodology — Learn & Hunt Like a Pro (2025 Guide) | https://hackersatty.medium.com/the-ultimate-idor-bug-bounty-methodology-learn-hunt-like-a-pro-2025-guide-fd79e50fd7fe?source=rss------bug_bounty-5 | hackersatty | idor-vulnerability, bug-hunting, bug-bounty, bug-bounty-writeup, api | 12-May-2025 |
| [Bug Bounty] How I Leaked Admin Metadata From a Low-Privileged Account — A Deep Dive into… | https://hackersatty.medium.com/bug-bounty-how-i-leaked-admin-metadata-from-a-low-privileged-account-a-deep-dive-into-23e0d699d792?source=rss------bug_bounty-5 | hackersatty | bug-bounty, idor, bug-bounty-writeup, javascript, api-endpoint | 12-May-2025 |
| Master CRLF Injection: The Underrated Bug with Dangerous Potential | https://infosecwriteups.com/master-crlf-injection-the-underrated-bug-with-dangerous-potential-33bb0d62e031?source=rss------bug_bounty-5 | coffinxp | programming, hacking, bug-bounty, cybersecurity, technology | 12-May-2025 |
| How I Found a Way to Submit LeetCode Premium Problems as a Free User | https://medium.com/@ShreyasMahajann/how-i-found-a-way-to-submit-leetcode-premium-problems-as-a-free-user-cb30668b976c?source=rss------bug_bounty-5 | Shreyas Mahajan | leetcode, hacking, cybersecurity, bug-bounty, coding | 12-May-2025 |
| OSINT Writeups — MIST Cyber Drill 2025 | https://infosecwriteups.com/osint-writeups-mist-cyber-drill-2025-2d1e398a4672?source=rss------bug_bounty-5 | Mr Grey | ctf, osint, ctf-walkthrough, bug-bounty, ctf-writeup | 12-May-2025 |
| Unauthenticated Cache Purging Vulnerability | https://00x.medium.com/unauthenticated-cache-purging-vulnerability-29f2641fcbb8?source=rss------bug_bounty-5 | 00xdata | bug-bounty-tips, bug-bounty | 12-May-2025 |
| $1,120 Bounty: Clickjacking Vulnerability in Twitter Periscope | https://osintteam.blog/1-120-bounty-clickjacking-vulnerability-in-twitter-periscope-b46e8dfc8915?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, technology, cybersecurity, hacking | 12-May-2025 |
| API Key Exposure in NASA GitHub Repository Leads to Unauthorized Access to Academic Data | https://infosecwriteups.com/api-key-exposure-in-nasa-github-repository-leads-to-unauthorized-access-to-academic-data-816bfb6ffede?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, infosec, bug-bounty, nasa, hacking | 11-May-2025 |
| $16,000 Bounty: Stored XSS in GitLab | https://infosecwriteups.com/16-000-bounty-stored-xss-in-gitlab-a0f57e5c4245?source=rss------bug_bounty-5 | Monika sharma | hacking, penetration-testing, technology, bug-bounty, report | 11-May-2025 |
| Confessions of a Bug Bounty Hunter: Tales from the Digital Jungle | https://bevijaygupta.medium.com/confessions-of-a-bug-bounty-hunter-tales-from-the-digital-jungle-892e188bc282?source=rss------bug_bounty-5 | Vijay Kumar Gupta | bug-bounty, bug-bounty-tips, bugs, confessions, digital | 11-May-2025 |
| 5 Places XSS Hides in Modern Bootstrap Apps (and How to Find Them) | https://medium.com/@killuaX/5-places-xss-hides-in-modern-bootstrap-apps-and-how-to-find-them-d22ec62c8359?source=rss------bug_bounty-5 | Abhiram | bootstrap, xss-vulnerability, web-security, bug-bounty, ethical-hacking | 11-May-2025 |
| Bypass Fitur Ganti Email via Request API Langsung | https://medium.com/@FufuFaf1/bypass-fitur-ganti-email-via-request-api-langsung-fac831a8dc31?source=rss------bug_bounty-5 | FufuFafa | cybersecurity, cyber-security-awareness, bug-bounty, bug-bounty-writeup | 11-May-2025 |
| Bug Bounty Race: Exploiting Race Conditions for Infinite Discounts | https://infosecwriteups.com/bug-bounty-race-exploiting-race-conditions-for-infinite-discounts-a2cb2f233804?source=rss------bug_bounty-5 | Aditya Bhatt | burpsuite, hacking, race-condition, cybersecurity, bug-bounty | 11-May-2025 |
| APIs Hacking : Exploiting Race Condition 101 | https://iaraoz.medium.com/apis-hacking-exploiting-race-condition-101-e063ea5057cb?source=rss------bug_bounty-5 | Israel Aráoz Severiche | api, cybersecurity, bug-bounty, hacking, penetration-testing | 11-May-2025 |
| MFA Update OTP Bypass | https://medium.com/@aburayhan01734_18069/mfa-update-otp-bypass-64e2cd1cbe86?source=rss------bug_bounty-5 | Md. Abu Rayhan | bypass, 2fa-bypass, mfa, bug-bounty, athentication | 11-May-2025 |
| The “Unlimited Leave” Hack I Found at My College — And Why I Didn’t Use It | https://medium.com/@swarnimbandekar/vtop-idor-d73d42d206bc?source=rss------bug_bounty-5 | Swarnim Bandekar | bug-bounty-writeup, bug-bounty, hacking, penetration-testing, cybersecurity | 11-May-2025 |
| Unauthorized Access to Meta’s Draft Profile Picture Frames: A Bug Bounty Breakdown | https://medium.com/@kamramehak445/unauthorized-access-to-metas-draft-profile-picture-frames-a-bug-bounty-breakdown-c46f592005dd?source=rss------bug_bounty-5 | Mehak kamra | cyber, meta, bug-bounty, cyberattack, cybersecurity | 11-May-2025 |
| The Hidden Language: Exploiting GraphQL for Unauthorized Data Dump | https://infosecwriteups.com/the-hidden-language-exploiting-graphql-for-unauthorized-data-dump-8be49f30a005?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty, infosec, money, cybersecurity | 11-May-2025 |
| Red Team Concepts by Mr. David | https://medium.com/@darshannnaik1234/red-team-concepts-by-mr-david-5650776fd778?source=rss------bug_bounty-5 | Darshan Naresh Naik | active-directory, cybersecurity, bug-bounty, ethical-hacking, red-team | 11-May-2025 |
| Authorization Bypass Through HTTP Response Manipulation | https://octayus.medium.com/authorization-bypass-through-http-response-manipulation-00e318a5b722?source=rss------bug_bounty-5 | OctaYus | bug-bounty-tips, bug-bounty, twitter, authentication, cybersecurity | 11-May-2025 |
| Tracking App Data Changes with Git During Mobile App Security Review | https://medium.com/@arkadiy.litvinenko/tracking-app-data-changes-with-git-during-mobile-app-security-review-520af779dd49?source=rss------bug_bounty-5 | Arkadiy Litvinenko | application-security, bug-bounty, mobile-security, penetration-testing, information-security | 11-May-2025 |
| More Than Broken Access: The Real Power of IDORs | https://medium.com/@xerox0x1/more-than-broken-access-the-real-power-of-idors-a50763e9ff8d?source=rss------bug_bounty-5 | XeRox01 | idor, bug-bounty, pentesting, web-security, infosec | 10-May-2025 |
| Securing and Consuming APIs in the Cloud: A Complete Journey from Provider to Customer | https://medium.com/@zoningxtr/securing-and-consuming-apis-in-the-cloud-a-complete-journey-from-provider-to-customer-d7c0f736b84d?source=rss------bug_bounty-5 | Zoningxtr | web-development, bug-bounty, api, cybersecurity, penetration-testing | 10-May-2025 |
| Hidden HackerOne & Bugcrowd Programs: How to Get Private Invites | https://infosecwriteups.com/hidden-hackerone-bugcrowd-programs-how-to-get-private-invites-74f8e8ce38c4?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, cybersecurity, bugcrowd, hackerone, infosec | 10-May-2025 |
| How to Build an Internal Security Review Checklist Before Every Deployment ✅ | https://securrtech.medium.com/how-to-build-an-internal-security-review-checklist-before-every-deployment-2c84910293aa?source=rss------bug_bounty-5 | Securr - Web3 Security | smart-contract-security, web3-security, blockchain-security, bug-bounty, smart-contract-auditing | 10-May-2025 |
| Core Banking System Architecture Explained: Layers, Components, and Security | https://medium.com/@zoningxtr/core-banking-system-architecture-explained-layers-components-and-security-72368ff7aed8?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, web-development, cybersecurity, penetration-testing, api | 10-May-2025 |
| Beyond Patch Tuesday: Managing Vulnerabilities in Real-Time | https://medium.com/@paritoshblogs/beyond-patch-tuesday-managing-vulnerabilities-in-real-time-63dbfa6ac92f?source=rss------bug_bounty-5 | Paritosh | cybersecurity, patch-tuesday, vulnerability, vulnerability-management, bug-bounty | 10-May-2025 |
| Blind XXE Attacks via Out-of-Band Interaction Using Burp Collaborator | https://bashoverflow.medium.com/blind-xxe-attacks-via-out-of-band-interaction-using-burp-collaborator-af0abd7c7d25?source=rss------bug_bounty-5 | Bash Overflow | xxe-injection, bug-bounty, blind-xxe-vulnerability, out-of-band-xxe-attack, bug-bounty-tips | 10-May-2025 |
| ️♂️ The Unwanted Guest: How Misconfigured Firebase Gave Me All the Data | https://medium.com/@iski/%EF%B8%8F-%EF%B8%8F-the-unwanted-guest-how-misconfigured-firebase-gave-me-all-the-data-80e0e23b7250?source=rss------bug_bounty-5 | Iski | bug-bounty, money, hacking, infosec, cybersecurity | 10-May-2025 |
| Introduction to Web Applications | https://medium.com/@fatimahasan022/introduction-to-web-applications-3567db23580a?source=rss------bug_bounty-5 | Fatimahasan | penetration-testing, web-attack, bug-bounty, web-development, web-design | 10-May-2025 |
| Inside the Enemy Lines: How a Simple IDOR Unmasked a Major Malware Campaign | https://medium.com/@red.whisperer/inside-the-enemy-lines-how-a-simple-idor-unmasked-a-major-malware-campaign-4d61c2293cf6?source=rss------bug_bounty-5 | Chux | bug-bounty, hacking, malware, technology, cybersecurity | 10-May-2025 |
| The Vulnerability Management Playbook for Lean Security Teams | https://medium.com/@paritoshblogs/the-vulnerability-management-playbook-for-lean-security-teams-f253be8a0c85?source=rss------bug_bounty-5 | Paritosh | playbook, bug-bounty, cybersecurity, hacking, vulnerability-management | 10-May-2025 |
| How I Earned 100 euros in 4 Hours as a Beginner Bug Bounty Hunter | https://medium.com/@nn.nkp007/how-i-earned-100-euros-in-4-hours-as-a-beginner-bug-bounty-hunter-623530ba8bf5?source=rss------bug_bounty-5 | Niranjan Prajapati | intigriti, ethical-hacking, earn-money-online, earn-money, bug-bounty | 10-May-2025 |
| $12,000 Bounty: From Path Traversal to Remote Code Execution on GitLab | https://medium.com/meetcyber/12-000-bounty-from-path-traversal-to-remote-code-execution-on-gitlab-eab315e346c3?source=rss------bug_bounty-5 | Monika sharma | report, technology, penetration-testing, bug-bounty, hacking | 10-May-2025 |
| LockBit Ransomware Gang Hacked: Internal Data & Victim Chats Leaked | https://wiretor.medium.com/lockbit-ransomware-gang-hacked-internal-data-victim-chats-leaked-05b1adc7e123?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, money, ai, malware | 10-May-2025 |
| Inside the Enemy Lines: How a Simple IDOR Unmasked a Major Malware Campaign | https://infosecwriteups.com/inside-the-enemy-lines-how-a-simple-idor-unmasked-a-major-malware-campaign-4d61c2293cf6?source=rss------bug_bounty-5 | Chux | bug-bounty, hacking, malware, technology, cybersecurity | 10-May-2025 |
| Making Your First $1,000 in Bug Bounties: A Practical Roadmap for Aspiring Hackers | https://medium.com/@maxwellcross/making-your-first-1-000-in-bug-bounties-a-practical-roadmap-for-aspiring-hackers-0b74a89c76a9?source=rss------bug_bounty-5 | Maxwell Cross | hacking, bug-bounty, programming, coding | 10-May-2025 |
| HTML Injection | https://medium.com/@fatimahasan022/html-injection-33a2ba6d7562?source=rss------bug_bounty-5 | Fatimahasan | bug-bounty, html-injection, ethical-hacking, hackthebox, penetration-testing | 10-May-2025 |
| $9,400 Bounty: XSS in Shopify’s Jamf Pro via Exposed Swagger UI | https://osintteam.blog/9-400-bounty-xss-in-shopifys-jamf-pro-via-exposed-swagger-ui-7b029a4be766?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, hacking, technology, cybersecurity, penetration-testing | 10-May-2025 |
| Improve your cybersecurity skills | https://medium.com/@loyalonlytoday/improve-your-cybersecurity-skills-5cdb31d40a4f?source=rss------bug_bounty-5 | loyalonlytoday | ctf, bug-bounty, penetration-testing, hacking, cybersecurity | 09-May-2025 |
| XSS Explained: A Complete Guide to Cross-Site Scripting with Practical Examples | https://medium.com/@mazene432/xss-explained-a-complete-guide-to-cross-site-scripting-with-practical-examples-80453349b35f?source=rss------bug_bounty-5 | Mazen Elsayed | vulnerability-assessment, cybersecurity, bug-bounty, web-penetration-testing, penetration-testing | 09-May-2025 |
| ️Recon Automation Like a Pro: My 5-Stage System to Catch More Bugs | https://infosecwriteups.com/%EF%B8%8Frecon-automation-like-a-pro-my-5-stage-system-to-catch-more-bugs-4fff7b7c4726?source=rss------bug_bounty-5 | Abhijeet Kumawat | recon, hacking, cybersecurity, bug-bounty, infosec | 09-May-2025 |
| JS File Reconnaissance In Web Hacking | https://medium.com/@SysSecureLabs/js-file-reconnaissance-in-web-hacking-436215909594?source=rss------bug_bounty-5 | SysSecureLabs | bug-bounty, bounties, reconnaissance, files-j, recon | 09-May-2025 |
| $50,000 Bounty: GitHub Access Token | https://infosecwriteups.com/50-000-bounty-github-access-token-c29cb6f00182?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, report, hacking, bug-bounty | 09-May-2025 |
| $840 Bounty: How I Stole OAuth Tokens from Twitter | https://infosecwriteups.com/840-bounty-how-i-stole-oauth-tokens-from-twitter-733f82857eda?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, penetration-testing, cybersecurity, technology, hacking | 09-May-2025 |
| OttoKit WordPress Plugin Hacked: How 100K+ Sites Fell Prey to Sneaky Exploits ️♂️ | https://ismailtasdelen.medium.com/ottokit-wordpress-plugin-hacked-how-100k-sites-fell-prey-to-sneaky-exploits-%EF%B8%8F-%EF%B8%8F-3c8ddac468e8?source=rss------bug_bounty-5 | Ismail Tasdelen | cyberattack, web-security, bug-bounty, wordpress, vulnerability | 09-May-2025 |
| Security Vulnerability in Hidden Parameters: IDOR Attack on Mighty App Payment Page | https://medium.com/@security.tecno/security-vulnerability-in-hidden-parameters-idor-attack-on-mighty-app-payment-page-e01ea2f2dc48?source=rss------bug_bounty-5 | TECNO Security | bug-bounty, bugs, security, apps, hacking | 09-May-2025 |
| CSP? More Like Can’t Stop Payloads — Bypassing CSP to XSS Like a Pro | https://infosecwriteups.com/csp-more-like-cant-stop-payloads-bypassing-csp-to-xss-like-a-pro-90d27c2c3a40?source=rss------bug_bounty-5 | Iski | money, cybersecurity, bug-bounty, infosec, hacking | 09-May-2025 |
| Web Application Hacking: Where do I Even Start? | https://systemweakness.com/web-application-hacking-where-do-i-even-start-a1e05c240936?source=rss------bug_bounty-5 | Regan Temudo | bug-bounty, cybersecurity, web-application-security, advice, how-to | 09-May-2025 |
| HyperScanner [HxScanner] v1.4: A Fast, Beautiful HTTP & CORS Scanner for Modern Hackers | https://neerajsah.medium.com/hyperscanner-hxscanner-v1-4-a-fast-beautiful-http-cors-scanner-for-modern-hackers-749b36e2d947?source=rss------bug_bounty-5 | Neeraj Sah | go-programming, cybersecurity, bug-bounty, hacking, open-source | 09-May-2025 |
| Mastering Rate Limit Bypass Techniques | https://infosecwriteups.com/mastering-rate-limit-bypass-techniques-fff9499b0f42?source=rss------bug_bounty-5 | coffinxp | penetration-testing, hacking, bug-bounty, technology, cybersecurity | 09-May-2025 |
| Squid — Port 3128 — How to exploit? | https://medium.com/@verylazytech/squid-port-3128-how-to-exploit-4cc4adcff83a?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, oscp, bug-bounty, ethical-hacking, exploit | 09-May-2025 |
| $15,000 Bounty: Found a Critical Vulnerability in Snapchat | https://medium.com/meetcyber/15-000-bounty-found-a-critical-vulnerability-in-snapchat-377176a0f0eb?source=rss------bug_bounty-5 | Monika sharma | technology, report, bug-bounty, penetration-testing, hacking | 09-May-2025 |
| Mastering 403 Bypasses | https://medium.com/@XEyeSecurity/mastering-403-bypasses-cf6d1919404e?source=rss------bug_bounty-5 | Cybersectoworld | bug-bounty, bug-bounty-tips | 09-May-2025 |
| ⚔️ How I Hijacked Password Reset Links with One Sneaky Header Injection | https://root-geek.medium.com/%EF%B8%8F-how-i-hijacked-password-reset-links-with-one-sneaky-header-injection-47a0db51bfd9?source=rss------bug_bounty-5 | ASC Lages | bug-bounty-writeup, account-take-over, bug-bounty | 09-May-2025 |
| Shifting Left with Vulnerability Management: Security as Code | https://medium.com/@paritoshblogs/shifting-left-with-vulnerability-management-security-as-code-353c206db2de?source=rss------bug_bounty-5 | Paritosh | bug-bounty, vulnerability, vulnerability-management, programming, cybersecurity | 08-May-2025 |
| No Auth, No Problem: The API Vulnerability That Led to Full Account Takeover | https://akr3ch.medium.com/no-auth-no-problem-the-api-vulnerability-that-led-to-full-account-takeover-199c6d7e7fa7?source=rss------bug_bounty-5 | akr3ch | bug-bounty, bug-bounty-tips, hackerone, account-takeover, cybersecurity | 08-May-2025 |
| Bug Hunting in JS Files: Tricks, Tools, and Real-World POCs | https://infosecwriteups.com/bug-hunting-in-js-files-tricks-tools-and-real-world-pocs-70406e3eb72e?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, vulnerability, json-web-token, json, cybersecurity | 08-May-2025 |
| A Guide to SQL Injection Attacks: Hackers Don’t Want You to Know This! | https://infosecwriteups.com/a-guide-to-sql-injection-attacks-hackers-dont-want-you-to-know-this-a9837f711f6b?source=rss------bug_bounty-5 | Dhanush N | information-security, bug-bounty, hacking, sql-injection, cybersecurity | 08-May-2025 |
| Tool Review — TraceWeb.io Extension | https://infosecwriteups.com/tool-review-traceweb-io-extension-5fdf79396e21?source=rss------bug_bounty-5 | ne555 | bug-bounty, infosec, browser-extension, hacking | 08-May-2025 |
| $100 Bounty: How a Spoofed Email Could Change Any Username on HackerOne | https://infosecwriteups.com/100-bounty-how-a-spoofed-email-could-change-any-username-on-hackerone-8efd98ab44f5?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, hacking, penetration-testing, technology, cybersecurity | 08-May-2025 |
| How to Escalate The Payload On The Infected Machine. | https://medium.com/meetcyber/how-to-escalate-the-payload-on-the-infected-machine-1d1beaa560ef?source=rss------bug_bounty-5 | NnFace | hacking, bug-bounty, meterpreter, ethical-hacking, metasploit | 08-May-2025 |
| ⚔️ Unsafe Eval = Unlimited Control: How a JS Sink Let Me Run Anything | https://infosecwriteups.com/%EF%B8%8F-unsafe-eval-unlimited-control-how-a-js-sink-let-me-run-anything-60794929a295?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, hacking, cybersecurity, money | 08-May-2025 |
| From Zero to Recon: Your First ASN-Based Scanning Workflow | https://brutsecurity.medium.com/from-zero-to-recon-your-first-asn-based-scanning-workflow-b08c88709410?source=rss------bug_bounty-5 | Saumadip Mandal | bug-bounty, nasa, bug-bounty-tips, cybersecurity | 08-May-2025 |
| Complete Guide to Nuclei Vulnerability Scanner | https://medium.com/@sksingh887378barat/complete-guide-to-nuclei-vulnerability-scanner-cc67658d30ad?source=rss------bug_bounty-5 | shubham kumar | bug-bounty-tips, nuclei-template, vulnerability-assessment, cybersecurity, bug-bounty | 08-May-2025 |
| How I Found PII on BBP, Open Door to Sensitive PDFs — But Got a Duplicate | https://frostyxsec.medium.com/how-i-found-pii-on-bbp-open-door-to-sensitive-pdfs-but-got-a-duplicate-643fa0092e36?source=rss------bug_bounty-5 | Frostynxth | bug-bounty-tips, bug-bounty-hunter, bug-bounty-write-up, bug-bounty | 08-May-2025 |
| How I Deleted Any User’s Account— No Interaction Needed | https://ehteshamulhaq198.medium.com/how-i-deleted-any-users-account-no-interaction-needed-faae0442ff4f?source=rss------bug_bounty-5 | Ehtesham Ul Haq | penetration-testing, infosec, ethical-hacking, bug-bounty, writeup | 08-May-2025 |
| 智能合约漏洞：区块链世界的隐秘威胁 | https://chartrand.medium.com/%E6%99%BA%E8%83%BD%E5%90%88%E7%BA%A6%E6%BC%8F%E6%B4%9E-%E5%8C%BA%E5%9D%97%E9%93%BE%E4%B8%96%E7%95%8C%E7%9A%84%E9%9A%90%E7%A7%98%E5%A8%81%E8%83%81-d53a3dd495cb?source=rss------bug_bounty-5 | Mckayla Chartrand | web3, smart-contracts, bug-bounty, security, bugbounty-tips | 08-May-2025 |
| Exposing a Simple Bug That Crashed an Organization’s Forum | https://0xmatrix.medium.com/exposing-a-simple-bug-that-crashed-an-organizations-forum-8ac532157d6a?source=rss------bug_bounty-5 | Mo2men Elmady | hacking, bug-bounty, penetration-testing, bugs, bug-bounty-tips | 08-May-2025 |
| $700 Bounty from a 2-Year-Old Secret — Found with iScan.today | https://medium.com/@arshadkazmi42/700-bounty-from-a-2-year-old-secret-found-with-iscan-today-87fb07eb5f53?source=rss------bug_bounty-5 | Arshad Kazmi | iscantoday, hackerone, bug-bounty, github | 08-May-2025 |
| Exposing Shadow APIs: The Hidden Attack Surface in Modern Web Apps | https://medium.com/@tejprakashbk1996/exposing-shadow-apis-the-hidden-attack-surface-in-modern-web-apps-6fd1af0ec4e9?source=rss------bug_bounty-5 | tezp | owasp, api, api-documentation, swagger, bug-bounty | 08-May-2025 |
| From Open Redirect to Full Account Takeover: Exploiting OAuth Misconfiguration | https://z00x.medium.com/from-open-redirect-to-full-account-takeover-exploiting-oauth-misconfiguration-35b0d215cf02?source=rss------bug_bounty-5 | z00x | oauth, bug-bounty, open-redirect, account-takeover, cybersecurity | 08-May-2025 |
| The Story Behind 4 Vulnerabilities in a Single Target | https://medium.com/@mahmoudelsadey56/the-story-behind-4-vulnerabilities-in-a-single-target-11f89224d585?source=rss------bug_bounty-5 | Mahmoud elsadey | bug-bounty-tips, bug-bounty, business-logic-bug, bug-bounty-writeup, race-condition | 08-May-2025 |
| How I Got a Free Order by Bypassing Login — My First Real-World Bug | https://medium.com/@moh2005rr/how-i-got-a-free-order-by-bypassing-login-my-first-real-world-bug-38798b79a9d7?source=rss------bug_bounty-5 | Moh2005rr | ethical-hacking, web-security, bug-bounty, cybersecurity, burpsuite | 08-May-2025 |
| $5000 Bounty: Critical Stored XSS | https://osintteam.blog/5000-bounty-critical-stored-xss-e93c1730eccc?source=rss------bug_bounty-5 | Monika sharma | technology, hacking, penetration-testing, report, bug-bounty | 08-May-2025 |
| Mastering Host Header Injection: Techniques, Payloads and Real-World Scenarios | https://osintteam.blog/mastering-host-header-injection-techniques-payloads-and-real-world-scenarios-e00c9e1f85cd?source=rss------bug_bounty-5 | coffinxp | hacking, cybersecurity, technology, penetration-testing, bug-bounty | 08-May-2025 |
| $500 Bounty: Parameter Pollution in HackerOne’s | https://osintteam.blog/500-bounty-parameter-pollution-in-hackerones-976bb0a3caae?source=rss------bug_bounty-5 | Monika sharma | hacking, technology, penetration-testing, bug-bounty, report | 08-May-2025 |
| A list of tools to find CORS(Cross-Origin Resource Sharing) | https://medium.com/@loyalonlytoday/a-list-of-tools-to-find-cors-cross-origin-resource-sharing-37f4c5ead5a1?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, cors, hacking, bug-bounty, cybersecurity | 07-May-2025 |
| Why CVSS Scores Alone Aren’t Enough in Vulnerability Management | https://medium.com/@paritoshblogs/why-cvss-scores-alone-arent-enough-in-vulnerability-management-219e8efad30e?source=rss------bug_bounty-5 | Paritosh | vulnerability, cybersecurity, information-technology, bug-bounty, hacking | 07-May-2025 |
| Hacking the Frontend Logic: Exploiting JavaScript Business Flaws | https://infosecwriteups.com/hacking-the-frontend-logic-exploiting-javascript-business-flaws-b6600fafd8a4?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, hacking, infosec, programming, bug-bounty | 07-May-2025 |
| $2,900 Bounty: Public S3 Bucket Exposure in Shopify | https://infosecwriteups.com/2-900-bounty-public-s3-bucket-exposure-in-shopify-05b14bbf6dad?source=rss------bug_bounty-5 | Monika sharma | cybersecurity, hacking, bug-bounty, technology, report | 07-May-2025 |
| How to setup a Monthly Free VPS for Bug Hunting | https://infosecwriteups.com/how-to-setup-a-monthly-free-vps-for-bug-hunting-d41d0fa3ed6c?source=rss------bug_bounty-5 | Mostafa Alrefai | bug-bounty, github, cybersecurity, penetration-testing, hacking | 07-May-2025 |
| JS Recon To HTML Injection | https://medium.com/legionhunters/js-recon-to-html-injection-4cdca8fd88cf?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | information-technology, bug-bounty, programming, coding, hacking | 07-May-2025 |
| “ Mastering Bug Bounty Recon: Tools & Techniques to Uncover Vulnerabilities ” | https://medium.com/@devillegiondevils/mastering-bug-bounty-recon-tools-techniques-to-uncover-vulnerabilities-6db1bbfef248?source=rss------bug_bounty-5 | Hex00 | bug-bounty-writeup, recon, bug-bounty, bug-bounty-tips, subdomains-enumeration | 07-May-2025 |
| ️♂️ Unlisted but Not Unseen: How I Found the Admin Panel in a JavaScript Comment | https://infosecwriteups.com/%EF%B8%8F-%EF%B8%8F-unlisted-but-not-unseen-how-i-found-the-admin-panel-in-a-javascript-comment-f34af758b4c8?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, bug-bounty, infosec, money | 07-May-2025 |
| Exploring the Bug Bounty Program: A Gateway to Ethical Hacking and Cybersecurity Careers | https://medium.com/@narayanananand480/exploring-the-bug-bounty-program-a-gateway-to-ethical-hacking-and-cybersecurity-careers-34649bc79690?source=rss------bug_bounty-5 | Anand Narayanan | cybersecurity, bug-bounty-tips, cyber-security-courses, bug-bounty, ethical-hacking | 07-May-2025 |
| How a JavaScript File Led Me to an Open Redirect Vulnerability | https://systemweakness.com/how-a-javascript-file-led-me-to-an-open-redirect-vulnerability-eefce51303b2?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | bug-bounty, bug-bounty-tips, bug-bounty-writeup, open-redirect, cybersecurity | 07-May-2025 |
| SubNotifier | https://medium.com/@eliyevnahid0404/subnotifier-b8a8f2671819?source=rss------bug_bounty-5 | Nahid Əliyev | pentesting, cybersecurity, bug-bounty | 07-May-2025 |
| Unveiling Critical Weaknesses: A Rigorous Penetration Test of a Web Application | https://medium.com/@tusharpuri6/unveiling-critical-weaknesses-a-rigorous-penetration-test-of-a-web-application-3b60cef532e6?source=rss------bug_bounty-5 | Tusharpuri | penetration-testing, bug-bounty, application-security, infosec, offensive-security | 07-May-2025 |
| From Cross-Subdomain Cookie Reuse to Becoming Super Admin: An Exploit Chain Walkthrough | https://medium.com/@cyberpro151/from-cross-subdomain-cookie-reuse-to-becoming-super-admin-an-exploit-chain-walkthrough-32527caa2a11?source=rss------bug_bounty-5 | cyberpro151 | hacking, bug-bounty-tips, penetration-testing, bug-bounty, bug-bounty-writeup | 07-May-2025 |
| Docker — Port 2375,2376 — How to exploit? | https://medium.com/@verylazytech/docker-port-2375-2376-how-to-exploit-8faa8d70a7ab?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, docker, exploit, penetration-testing | 07-May-2025 |
| Discovering a Blind XSS Vulnerability in the Platform | https://medium.com/@Saeiez/discovering-a-blind-xss-vulnerability-in-the-platform-1fa45a6621db?source=rss------bug_bounty-5 | Saeiez | bug-bounty-tips, web3, ai, bug-bounty, pentesting | 07-May-2025 |
| Compress-a-thon — Web Exploitation — Pentathon 2025 | https://medium.com/@dassomnath/compress-a-thon-web-exploitation-pentathon-2025-fea9adf9fa6b?source=rss------bug_bounty-5 | Somnath Das | web-hacking, pentathon-2025-writeup, web, hacking, bug-bounty | 07-May-2025 |
| Discovering a Blind XSS Vulnerability in the Platform AI | https://medium.com/@Saeiez/discovering-a-blind-xss-vulnerability-in-the-platform-1fa45a6621db?source=rss------bug_bounty-5 | Saeiez | bug-bounty-tips, web3, ai, bug-bounty, pentesting | 07-May-2025 |
| OttoKit WordPress Plugin Exploit Hackers Create Rogue Admin Account | https://wiretor.medium.com/ottokit-wordpress-plugin-exploit-hackers-create-rogue-admin-account-7e654c49e719?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, rce, hacking, ai | 07-May-2025 |
| Unmasking Robots.txt: What Web Crawlers Hide and relates OSINT | https://osintteam.blog/everything-about-robots-txt-file-3815dddfbfce?source=rss------bug_bounty-5 | 127.0.0.1 | cybersecurity, robotstxt, osint, site-crawlers, bug-bounty | 07-May-2025 |
| Shift Left Testing | https://medium.com/@rashid.alakbarov/shift-left-testing-a9293d520eaa?source=rss------bug_bounty-5 | Rashid Alakbarov | qa, bug-bounty, software-testing, developer | 06-May-2025 |
| Undeleted Secrets: Uncovering an IDOR Vulnerability in “Recently Deleted” Items | https://medium.com/@0x1di0t/undeleted-secrets-uncovering-an-idor-vulnerability-in-recently-deleted-items-6d35db221008?source=rss------bug_bounty-5 | Wahid Najim | idor-vulnerability, bug-bounty, soft-deletion, idor | 06-May-2025 |
| Mastering Runtime Hooking with Frida — Real-World Challenges (Part 3) | https://medium.com/@ch3tanbug/mastering-runtime-hooking-with-frida-real-world-challenges-part-3-b70a62ed4395?source=rss------bug_bounty-5 | CH3TAN | bug-bounty, reverse-engineering, jadx, mobile-security, cybersecurity | 06-May-2025 |
| Query Confusion: How HTTP Parameter Pollution Made the App Spill Secrets | https://infosecwriteups.com/query-confusion-how-http-parameter-pollution-made-the-app-spill-secrets-55b09a1bc98b?source=rss------bug_bounty-5 | Iski | cybersecurity, infosec, bug-bounty, money, hacking | 06-May-2025 |
| $2000 Bounty: Stored XSS in GitLab | https://infosecwriteups.com/2000-bounty-stored-xss-in-gitlab-c71b2d7a3c21?source=rss------bug_bounty-5 | Monika sharma | hacking, penetration-testing, technology, bug-bounty, report | 06-May-2025 |
| How Hackers Exploit CORS Misconfigurations | https://infosecwriteups.com/how-hackers-exploit-cors-misconfigurations-35a6c5d7e0c8?source=rss------bug_bounty-5 | Vipul Sonule | infosec, programming, bug-bounty, cybersecurity, hacking | 06-May-2025 |
| OAuth Integration Hijack via Predictable state Parameter | https://kariiem.medium.com/oauth-integration-hijack-via-predictable-state-parameter-facdae83e6b6?source=rss------bug_bounty-5 | Kariiem Gamal | oauth, csrf, bug-bounty, penetration-testing | 06-May-2025 |
| Email Enumeration melalui Endpoint POST /api/passwordReset/?h= | https://medium.com/@FufuFaf1/email-enumeration-melalui-endpoint-post-api-passwordreset-h-80c4aa7d0159?source=rss------bug_bounty-5 | FufuFafa | cybersecurity, bug-bounty-writeup, bugcrowd, bug-bounty, hunting | 06-May-2025 |
| A list of checklists for bug hunters and penetration testers | https://medium.com/@loyalonlytoday/a-list-of-checklists-for-bug-hunters-and-penetration-testers-d94d711375bd?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, checklist, penetration-testing, hacking, bug-bounty | 06-May-2025 |
| How I Found Critical Flaws in a Medical SOAP API | https://medium.com/illumination/how-i-found-critical-flaws-in-a-medical-soap-api-382233398015?source=rss------bug_bounty-5 | om kumar | cybersecurity, technology, illumination, bug-bounty, software-engineering | 06-May-2025 |
| H@cking Hospital For Mass PII Leak | https://medium.com/meetcyber/h-cking-hospital-for-mass-pii-leak-85c3d89db434?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | information-technology, cybersecurity, bug-bounty-writeup, hacking, bug-bounty | 06-May-2025 |
| The Hidden Dangers of Misconfigured Cloud Storage | https://medium.com/meetcyber/the-hidden-dangers-of-misconfigured-cloud-storage-c9debc08f506?source=rss------bug_bounty-5 | Erkan Kavas | cybersecurity, cloud-security, pentest, bug-bounty, cloud-storage | 06-May-2025 |
| I Found Bugs in 50+ Paid Bug Bounty Programs | https://medium.com/@mehrabopi33500/i-found-bugs-in-50-paid-bug-bounty-programs-5fcf88dbc761?source=rss------bug_bounty-5 | Mehrabopi | bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity, bugcrowd | 06-May-2025 |
| NFS Service — Port 2049 — How to exploit? | https://medium.com/@verylazytech/nfs-service-port-2049-how-to-exploit-d70875fbaeff?source=rss------bug_bounty-5 | Very Lazy Tech | oscp, nfs-server, exploit, penetration-testing, bug-bounty | 06-May-2025 |
| Accidental Hacker: How I Found a Critical Data Leak Bug with Just a Few Clicks | https://zetzer.medium.com/accidental-hacker-how-i-found-a-critical-data-leak-bug-with-just-a-few-clicks-3cabd1f97aee?source=rss------bug_bounty-5 | Zeta | penetration-testing, bug-zero, cybersecurity, bug-bounty-writeup, bug-bounty | 06-May-2025 |
| A Must-Have Tool for Bug Hunters: Find Open Redirect Vulnerabilities on Linux | https://infosecwriteups.com/a-must-have-tool-for-bug-hunters-find-open-redirect-vulnerabilities-on-linux-21ad0c7d148e?source=rss------bug_bounty-5 | Elie Attieh | cyber-security-awareness, cybersecurity, bug-bounty, pentesting, ethical-hacking | 06-May-2025 |
| IDOR Allows Unauthorized Access to Other Users’ Personal Data | https://brbr0s.medium.com/idor-allows-unauthorized-access-to-other-users-personal-data-8f73486cbab0?source=rss------bug_bounty-5 | brbr0s | idor, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 06-May-2025 |
| How I Built a One-Click Vulnerability Report Generator with Python | https://elcazad0r.medium.com/how-i-built-a-one-click-vulnerability-report-generator-with-python-e61d87983d7b?source=rss------bug_bounty-5 | EL_Cazad0r | bug-bounty, penetration-testing-tools, github, cybersecurity, bug-bounty-tips | 06-May-2025 |
| FOFA Dorking for Bug Hunters | https://medium.com/legionhunters/fofa-dorking-for-bug-hunters-a35c80bbab6e?source=rss------bug_bounty-5 | AbhirupKonwar | osint, bug-bounty, ethical-hacking, pentesting, bug-bounty-tips | 06-May-2025 |
| ️♂️ I Reported a Security Flaw, They Silently Patched It… and Ghosted Me. | https://medium.com/@rolextital/%EF%B8%8F-%EF%B8%8F-i-reported-a-security-flaw-they-silently-patched-it-and-ghosted-me-03f0a02a696b?source=rss------bug_bounty-5 | Rolextital | bug-bounty, cybersecurity, vulnerability, ethical-hacking, hacker | 06-May-2025 |
| ️ How I Earned $150 by Exploiting an XML-RPC SSRF in a WordPress Site | https://medium.com/@sauravkrish59/%EF%B8%8F-how-i-earned-150-by-exploiting-an-xml-rpc-ssrf-in-a-wordpress-site-51037eb58252?source=rss------bug_bounty-5 | @Sauravkrish | hacking, ethical-hacking, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 06-May-2025 |
| The Ultimate Guide to API Security Testing — Cheat sheet 2025 — Part2 | https://t4144t.medium.com/the-ultimate-guide-to-api-security-testing-cheat-sheet-2025-part2-a7d8a69710ff?source=rss------bug_bounty-5 | Mohamed Talaat Saada (@t4144t) | bug-bounty-writeup, bug-bounty, bug-bounty-tips, application-security, penetration-testing | 06-May-2025 |
| WordPress Security Posture: More Fragile Than You Think | https://medium.com/@reuvenel5/wordpress-security-posture-more-fragile-than-you-think-15497115b435?source=rss------bug_bounty-5 | AZ | wordpress, cybersecurity, bugs, application-security, bug-bounty | 06-May-2025 |
| Revisiting the Past, Hacking the Future | https://ghostman01.medium.com/invalid-bug-c3cae222858c?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, cybersecurity, programming, hacking, technology | 06-May-2025 |
| Revisiting the Past, Hacking the Future | https://infosecwriteups.com/invalid-bug-c3cae222858c?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, cybersecurity, programming, hacking, technology | 06-May-2025 |
| Stop Wasting Time: Build a CTI Collection Plan That Actually Works! | https://medium.com/@paritoshblogs/stop-wasting-time-build-a-cti-collection-plan-that-actually-works-6edb5181a383?source=rss------bug_bounty-5 | Paritosh | hacking, cyber-threat-intelligence, bug-bounty, cybersecurity, threat-hunting | 05-May-2025 |
| Snapdroid: One-Click Android PoC Capture for Bug Bounty Hunters & Pentesters | https://medium.com/@dr34mb0y/snapdroid-one-click-android-poc-capture-for-bug-bounty-hunters-pentesters-2f7a44bf5582?source=rss------bug_bounty-5 | Sid Joshi | android-pentest, android-pentesting, snapdroid, android, bug-bounty | 05-May-2025 |
| Easy Framework based Bugs Series is soon… | https://medium.com/@nyany032/easy-framework-based-bugs-series-is-soon-fb8f29e21be0?source=rss------bug_bounty-5 | Shir0E | pentesting, bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty | 05-May-2025 |
| Google Dorking: How to Uncover Hidden Vulnerabilities in Penetration Testing ️♂️ | https://medium.com/@vivekbhatt2002/google-dorking-how-to-uncover-hidden-vulnerabilities-in-penetration-testing-%EF%B8%8F-%EF%B8%8F-2a3386522e79?source=rss------bug_bounty-5 | YoungerSibling | bug-bounty, ethical-hacking, google-dorking, osint, ethical-hacking-tips | 05-May-2025 |
| Clickjacked to the Core: Turning UI into a Trapdoor | https://infosecwriteups.com/clickjacked-to-the-core-turning-ui-into-a-trapdoor-a196dde6997b?source=rss------bug_bounty-5 | Iski | money, infosec, bug-bounty, cybersecurity, hacking | 05-May-2025 |
| Bypassing Regex Validations to Achieve RCE: A Wild Bug Story | https://infosecwriteups.com/bypassing-regex-validations-to-achieve-rce-a-wild-bug-story-4c523f69b9f8?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, rce, bug-bounty, cybersecurity, hacking | 05-May-2025 |
| $750 Bounty: Sensitive Data Exposure | https://infosecwriteups.com/750-bounty-sensitive-data-exposure-c944e626c733?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, hacking, penetration-testing, report | 05-May-2025 |
| Cross-Site Request Forgery (CSRF) Made Easy: A Beginner’s Perspective | https://medium.com/@natarajanck2/cross-site-request-forgery-csrf-made-easy-a-beginners-perspective-037b4ba6d62a?source=rss------bug_bounty-5 | Natarajan C K | bug-bounty, hacking, exploitation, it-security, csrf-attack | 05-May-2025 |
| une XSS simple sur la page de login CVE-2024–48410 | https://medium.com/@Itachi0xf/une-xss-simple-sur-la-page-de-login-cve-2024-48410-65435f4a0f84?source=rss------bug_bounty-5 | Itachix0f | cve, xss-attack, bug-bounty | 05-May-2025 |
| Subdomain Takeover: My $450 Win & How You Can Do It Too | https://ehteshamulhaq198.medium.com/subdomain-takeover-my-450-win-how-you-can-do-it-too-3337ca0513b6?source=rss------bug_bounty-5 | Ehtesham Ul Haq | writeup, subdomain, penetration-testing, bug-bounty, bug-bounty-tips | 05-May-2025 |
| I found Open Redirect on US Government website | https://medium.com/@0xpedrop/i-found-open-redirect-on-us-government-website-60a2d1d1e049?source=rss------bug_bounty-5 | 0xPedrop | bug-bounty-writeup, bug-bounty | 05-May-2025 |
| The Unseen Battle: Why Modern Cybersecurity Demands Proactive Defense and Zero Trust | https://medium.com/@hemran314/the-unseen-battle-why-modern-cybersecurity-demands-proactive-defense-and-zero-trust-0f63ec875784?source=rss------bug_bounty-5 | e0xsecops | artificial-intelligence, cybersecurity, blockchain, bug-bounty, information-technology | 05-May-2025 |
| Bug Bounty : Se confronter au réel, apprendre à encaisser ️♂️ | https://medium.com/@rcottignies/bug-bounty-se-confronter-au-r%C3%A9el-apprendre-%C3%A0-encaisser-%EF%B8%8F-%EF%B8%8F-87376b539175?source=rss------bug_bounty-5 | Rebecca Cottignies | pentest, security, bug-bounty, cybersecurity | 05-May-2025 |
| Compaq HP Insight Manager — Port 2301, 2381 — How to exploit | https://medium.com/@verylazytech/compaq-hp-insight-manager-port-2301-2381-how-to-exploit-337f1175d2f8?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, oscp, hp, exploit | 05-May-2025 |
| Here we go , 2 bugs in the same program | https://medium.com/@0xjoex/here-we-go-2-bugs-in-same-program-0cb99b42a1f4?source=rss------bug_bounty-5 | Youssef Hany | writeup, broken-access-control, bug-bounty, ssti, security | 05-May-2025 |
| $500 Bounty for Reflected XSS on HackerOne | https://osintteam.blog/500-bounty-for-reflected-xss-on-hackerone-29c13793bc91?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, report, penetration-testing, cybersecurity, technology | 05-May-2025 |
| Hacker’s Recon Guide: Tools & Tricks to Map Any Target | https://osintteam.blog/hackers-recon-guide-tools-tricks-to-map-any-target-f1e97d7bfdb6?source=rss------bug_bounty-5 | Vipul Sonule | technology, hacking, cybersecurity, osint, bug-bounty | 05-May-2025 |
| The Ultimate Guide to API Security Testing — Cheat sheet 2025 Edition | https://t4144t.medium.com/the-ultimate-guide-to-api-security-testing-cheat-sheet-2025-edition-b64fd3d158dd?source=rss------bug_bounty-5 | Mohamed Talaat Saada (@t4144t) | penetration-testing, bug-bounty-writeup, bug-bounty-tips, owasp-top-10, bug-bounty | 05-May-2025 |
| How I Found an Host Header Injection Vulnerability Easily In (Mars)$ | https://zuksh.medium.com/how-i-found-an-host-header-injection-vulnerability-easily-in-mars-2a56a1c942c3?source=rss------bug_bounty-5 | Zuksh | penetration-testing, infosec, bug-bounty, cybersecurity, host-header-injection | 04-May-2025 |
| Mastering Boundary Value Analysis: Guide to Uncovering Hidden Bugs | https://medium.com/@sajith-dilshan/mastering-boundary-value-analysis-guide-to-uncovering-hidden-bugs-4eb58b43899b?source=rss------bug_bounty-5 | sajith dilshan | software-testing, boundary-value-analysis, qa, qa-testing, bug-bounty | 04-May-2025 |
| $505 Bounty: Denial of Service Vulnerability | https://osintteam.blog/505-bounty-denial-of-service-vulnerability-bd6daef5fe8a?source=rss------bug_bounty-5 | Monika sharma | report, hacking, technology, bug-bounty, cybersecurity | 04-May-2025 |
| Using VirusTotal Graphs and Retro Hunt for IOC Discovery | https://medium.com/@paritoshblogs/using-virustotal-graphs-and-retro-hunt-for-ioc-discovery-d1c4b4e209b4?source=rss------bug_bounty-5 | Paritosh | cybersecurity, information-technology, hacking, security, bug-bounty | 04-May-2025 |
| Bypassing 2FA in a Public Bug Bounty Program: A $6000 Journey | https://mokhansec.medium.com/bypassing-2fa-in-a-public-bug-bounty-program-a-6000-journey-bae8a5418461?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-tips, cybersecurity, bugs, bug-bounty, bug-bounty-writeup | 04-May-2025 |
| Mastering Event Handlers in JavaScript and HTML: The Complete Guide with Examples | https://medium.com/@zoningxtr/mastering-event-handlers-in-javascript-and-html-the-complete-guide-with-examples-60ef2c4d025b?source=rss------bug_bounty-5 | Zoningxtr | html, javascript, penetration-testing, bug-bounty, coding | 04-May-2025 |
| WordPress User Enumeration via author-sitemap.xml on Payapps.com | https://medium.com/@regan_temudo/wordpress-user-enumeration-via-author-sitemap-xml-on-payapps-com-5ffad0ca1cc2?source=rss------bug_bounty-5 | Regan Temudo | wordpress-security, cybersecurity, information-security, bug-bounty, ethical-hacking | 04-May-2025 |
| $800 Bounty: Account Takeover in Shopify | https://infosecwriteups.com/800-bounty-account-takeover-in-shopify-f4394ee37975?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, penetration-testing, report, cybersecurity | 04-May-2025 |
| $3750 Bounty: Account Creation with Invalid Email Addresses | https://infosecwriteups.com/3750-bounty-account-creation-with-invalid-email-addresses-aca169eddcc7?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, hacking, cybersecurity, report | 04-May-2025 |
| Modest Payouts, Major Payoff: 4 IDORs That Netted $12K | https://infosecwriteups.com/modest-payouts-major-payoff-4-idors-that-netted-12k-64f4ab6754c0?source=rss------bug_bounty-5 | Ashutosh Dutta | bug-bounty, cybersecurity, bugcrowd, hackerone, infosec | 04-May-2025 |
| Subdomain Surfing to Server Secrets — How I Took Over a Forgotten Subdomain | https://infosecwriteups.com/subdomain-surfing-to-server-secrets-how-i-took-over-a-forgotten-subdomain-4e9b1147f880?source=rss------bug_bounty-5 | Iski | hacking, servers, cybersecurity, bug-bounty, money | 04-May-2025 |
| The Ultimate Guide to Email Input Field Vulnerability Testing | https://infosecwriteups.com/the-ultimate-guide-to-email-input-field-vulnerability-testing-18f96fc42251?source=rss------bug_bounty-5 | coffinxp | technology, bug-bounty-tips, penetration-testing, hacking, bug-bounty | 04-May-2025 |
| Mastering Bug Bounties with Burp Suite: A Comprehensive Guide to Web Security | https://medium.com/@benjaminmillerdev/mastering-bug-bounties-with-burp-suite-a-comprehensive-guide-to-web-security-bb63a03e6511?source=rss------bug_bounty-5 | Benjaminmillerdev | hacking-for-defense, hacking, bugbounty-writeup, bug-bounty | 04-May-2025 |
| Mastering Nikto: Advanced Bug Bounty Hunting Techniques” by Benjamin Miller. | https://medium.com/@benjaminmillerdev/mastering-nikto-advanced-bug-bounty-hunting-techniques-by-benjamin-miller-62d2bc441e6a?source=rss------bug_bounty-5 | Benjaminmillerdev | nikto, bug-bounty, hacker | 04-May-2025 |
| Beautiful open redirect on Google.com | https://biswajeetray7.medium.com/beautiful-open-redirect-on-google-com-752c98a80b7d?source=rss------bug_bounty-5 | Biswajeet Ray | bug-bounty, open-redirect, vulnerability, bounty-hunter, bugbounty-writeup | 04-May-2025 |
| MQTT (Message Queuing Telemetry Transport) — Port 1883 — How to exploit? | https://medium.com/@verylazytech/mqtt-message-queuing-telemetry-transport-port-1883-how-to-exploit-3ee2f6510bf4?source=rss------bug_bounty-5 | Very Lazy Tech | oscp, exploit, ethical-hacking, bug-bounty, mqtt | 04-May-2025 |
| CLOUD OSINT | https://medium.com/@rr-1k/cloud-osint-0e259c256008?source=rss------bug_bounty-5 | rr-1k | bug-bounty, infosec, osint, osint-tool, tools | 04-May-2025 |
| How I Found My Favorite Bug in a Top Bug Bounty Program | https://medium.com/@mahdisalhi0500/how-i-found-my-favorite-bug-in-a-top-bug-bounty-program-bbeb36e898f8?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, hacking, cybersecurity, information-technology, bug-bounty | 04-May-2025 |
| Understanding Server Side Template Injection (SSTI) | https://medium.com/@natarajanck2/understanding-server-side-template-injection-ssti-1cb0465dd46d?source=rss------bug_bounty-5 | Natarajan C K | security, bugs, ssti-exploitation, it-security, bug-bounty | 04-May-2025 |
| Best Bug Bounty Programs to Kickstart Your Bug Bounty Journey | https://ismailtasdelen.medium.com/best-bug-bounty-programs-to-kickstart-your-bug-bounty-journey-4673d1192389?source=rss------bug_bounty-5 | Ismail Tasdelen | bug-bounty-writeup, bug-bounty, bug-bounty-hunter, bug-bounty-program, bug-bounty-tips | 04-May-2025 |
| SQLi in .gov.in Exposed Millions of Aadhaar, Bank Data and Personal Data | https://medium.com/@pkhuyar/sqli-in-gov-in-exposed-millions-of-aadhaar-bank-data-and-personal-data-0bde62a649aa?source=rss------bug_bounty-5 | Prashant kamkar | bug-bounty-writeup, bug-bounty, cybersecurity, cyber-security-awareness, information-security | 04-May-2025 |
| $750 Bounty: Two-factor Authentication | https://osintteam.blog/750-bounty-two-factor-authentication-5241a45e7fc1?source=rss------bug_bounty-5 | Monika sharma | hacking, technology, report, cybersecurity, bug-bounty | 03-May-2025 |
| IDOR Attacks Made Simple: How Hackers Access Unauthorized Data | https://infosecwriteups.com/idor-attacks-made-simple-how-hackers-access-unauthorized-data-ca1158d18190?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, hacking, technology, cybersecurity, programming | 03-May-2025 |
| $4,323 Bounty Alert | https://infosecwriteups.com/4-323-bounty-alert-4af6e66bb8c1?source=rss------bug_bounty-5 | Monika sharma | hacking, bug-bounty, cybersecurity, report, technology | 03-May-2025 |
| Breaking in Unpardoned. | https://medium.com/h7w/breaking-in-unpardoned-02f64d4f412e?source=rss------bug_bounty-5 | NnFace | cybersecurity, hacking, bug-bounty, metasploit, ethical-hacking | 03-May-2025 |
| Bugged by Backup Files: How .zip and .bak Gave Me the Source Code | https://infosecwriteups.com/bugged-by-backup-files-how-zip-and-bak-gave-me-the-source-code-872a376b0b2b?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, bug-bounty, hacking, money | 03-May-2025 |
| How I Found Internal Dashboards Using Google Dorks + OSINT | https://infosecwriteups.com/how-i-found-internal-dashboards-using-google-dorks-osint-5f2c9515fcd6?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, google-dork, ai, bug-bounty, osint | 03-May-2025 |
| Information Disclosure Vulnerability Writeup HackerOne | https://medium.com/meetcyber/information-disclosure-vulnerability-writeup-hackerone-be7fbe7e7893?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, hackerone, pentesting, bug-bounty, bug-bounty-writeup | 03-May-2025 |
| PPTP- Point-to-Point Tunneling Protocol — Port 1723 — How to exploit? | https://medium.com/@verylazytech/pptp-point-to-point-tunneling-protocol-port-1723-how-to-exploit-8d36438849c5?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, oscp, bug-bounty, exploit, pptp | 03-May-2025 |
| From Curiosity to Duplicated: How I Found a Critical Account Takeover Bug | https://medium.com/@Hamzawy-1/from-curiosity-to-duplicated-how-i-found-a-critical-account-takeover-bug-8e43bd035ab0?source=rss------bug_bounty-5 | Hamza Ahmed Youssef | writeup, bug-bounty | 03-May-2025 |
| Finding more subdomains(part 4) | https://medium.com/@loyalonlytoday/finding-more-subdomains-part-4-a9bdde09f052?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, hacking, bug-bounty-tips, penetration-testing, cybersecurity | 02-May-2025 |
| Missed Horizontal Privilege Escalation in a Bug Bounty Program! | https://spider7.medium.com/missed-horizontal-privilege-escalation-in-a-bug-bounty-program-d7134b2ffa01?source=rss------bug_bounty-5 | Zeta | bug-bounty-writeup, bug-bounty, bug-hunting, bug-bounty-tips, hackerone | 02-May-2025 |
| $300 Bounty: SSRF to Cloud Metadata | https://infosecwriteups.com/300-bounty-ssrf-to-cloud-metadata-4c6a7dda9818?source=rss------bug_bounty-5 | Monika sharma | hacking, cybersecurity, technology, report, bug-bounty | 02-May-2025 |
| ️♂️ Subdomain Enumeration Automation for Bug Bounty: Save Time, Hack Smart! | https://medium.com/@shadyfarouk1986/%EF%B8%8F-%EF%B8%8F-subdomain-enumeration-automation-for-bug-bounty-save-time-hack-smart-dd5d97eba1dc?source=rss------bug_bounty-5 | Shady Farouk | bug-bounty, hacker, bounty-program, hacker-news, hackerone | 02-May-2025 |
| $400 Bounty: OAuth Token Theft in One Click | https://osintteam.blog/400-bounty-oauth-token-theft-in-one-click-4eb29b16d6dc?source=rss------bug_bounty-5 | Monika sharma | technology, hacking, cybersecurity, bug-bounty, report | 02-May-2025 |
| From File Upload to Credential Theft: My $1,000 Bounty Journey with Stored XSS | https://osintteam.blog/from-file-upload-to-credential-theft-my-1-000-bounty-journey-with-stored-xss-76d70ac53817?source=rss------bug_bounty-5 | Krish_cyber | xss-attack, infosec-write-ups, ethical-hacking, osint, bug-bounty | 02-May-2025 |
| The Ultimate Guide to 403 Forbidden Bypass (2025 Edition) | https://osintteam.blog/the-ultimate-guide-to-403-forbidden-bypass-2025-edition-1b2e852e503e?source=rss------bug_bounty-5 | coffinxp | programming, bug-bounty, technology, bug-bounty-tips, hacking | 02-May-2025 |
| Web Security & Bug Bounty: Learn Penetration Testing — Chapter 1 | https://medium.com/@rikisg2/web-security-bug-bounty-learn-penetration-testing-chapter-1-51af5f98bc59?source=rss------bug_bounty-5 | Riki SatyaGraha | bug-bounty, cybersecurity, web-security, ethical-hacking, penetration-testing | 02-May-2025 |
| Persistence via Registry — How Attackers Abuse the Windows Registry | https://medium.com/@paritoshblogs/persistence-via-registry-how-attackers-abuse-the-windows-registry-186be2587c20?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-technology, cybersecurity, information-security, hacking | 02-May-2025 |
| Payloads in Plain Sight: How Open Redirect + JavaScript Led to Full Account Takeover | https://infosecwriteups.com/payloads-in-plain-sight-how-open-redirect-javascript-led-to-full-account-takeover-a7ae1c359679?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, money, infosec, bug-bounty | 02-May-2025 |
| My First Paid Bug Bounty: A Hidden Gallery & A Lesson in Misconfiguration 🙂 | https://medium.com/@gnaitikg/my-first-paid-bug-bounty-a-hidden-gallery-a-lesson-in-misconfiguration-3efefe71c8cf?source=rss------bug_bounty-5 | Naitik Gupta | ethical-hacking, bug-bounty, cybersecurity, naitikgupta | 02-May-2025 |
| Privilege Escalation to Super Admin via Mass Assessment in a Multi-Tenant Laravel App | https://medium.com/@rahulms_71093/privilege-escalation-to-super-admin-via-mass-assessment-in-a-multi-tenant-laravel-app-526d1309de73?source=rss------bug_bounty-5 | Rahul M S | cybersecurity, bug-bounty, penetration-testing, access-control | 02-May-2025 |
| The Ultimate Web Application Hacking Checklist (2025 Edition) | https://medium.com/@ZishanAdThandar/the-ultimate-web-application-hacking-checklist-2025-edition-eea1a0a23977?source=rss------bug_bounty-5 | ZishanAdThandar | ethical-hacking, web-application-security, bug-bounty, penetration-testing, cybersecurity | 02-May-2025 |
| Breaking OTPs in the Real World: How Design Flaws Led to Full Account Takeover | https://medium.com/@Arioex/breaking-otps-in-the-real-world-how-design-flaws-led-to-full-account-takeover-46a09f95eaba?source=rss------bug_bounty-5 | Huntsman | bug-bounty, bug-bounty-writeup, hackerone, hacking, bug-bounty-tips | 02-May-2025 |
| How I Built the Ultimate Web Hacking Checklist — And Why It’s Helping Bug Bounty Hunters Win More | https://medium.com/@ZishanAdThandar/how-i-built-the-ultimate-web-hacking-checklist-and-why-its-helping-bug-bounty-hunters-win-more-d6ef0cb8dc4b?source=rss------bug_bounty-5 | ZishanAdThandar | bug-bounty, bug-bounty-tips, red-team, cybersecurity, web-app-pentesting | 02-May-2025 |
| Insecure Direct Object Reference (IDOR) in a Government Portal | https://medium.com/@dharaniswaran.cs22/insecure-direct-object-reference-idor-in-a-government-portal-c83c0c638577?source=rss------bug_bounty-5 | Dharanis | web-pen-testing, bug-bounty, burpsuite, idor, government | 02-May-2025 |
| $1000 Bounty: Account Takeover via Host Header Injection in Password Reset Flow | https://ehteshamulhaq198.medium.com/1000-bounty-account-takeover-via-host-header-injection-in-password-reset-flow-dc0cdb2d972b?source=rss------bug_bounty-5 | Ehtesham Ul Haq | penetration-testing, bug-bounty, infosec, injection, bug-bounty-tips | 02-May-2025 |
| Exploiting File Inclusion: From Dot-Dot-Slash to RCE using PHP Sessions, Log Poisoning, and… | https://infosecwriteups.com/exploiting-file-inclusion-from-dot-dot-slash-to-rce-using-php-sessions-log-poisoning-and-4db1bdf8ad77?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, lfi-to-rce, local-file-inclusion, bypass-lfi-filters, bug-bounty | 02-May-2025 |
| Important tool for Pentesters & Bug hunters | https://medium.com/@loyalonlytoday/important-tool-for-pentesters-bug-hunters-ea33ab1269b6?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, bug-bounty-tips, ethical-hacking, penetration-testing, cybersecurity | 01-May-2025 |
| $1000 Bounty: XSS in Phabricator’s Editor | https://osintteam.blog/1000-bounty-xss-in-phabricators-editor-97fa74b24633?source=rss------bug_bounty-5 | Monika sharma | hacking, technology, bug-bounty, report, penetration-testing | 01-May-2025 |
| Session Reuse After Logout: Vulnerability Report on Improper Session Invalidation | https://medium.com/@FufuFaf1/session-reuse-after-logout-vulnerability-report-on-improper-session-invalidation-3e6a8d3d1707?source=rss------bug_bounty-5 | FufuFafa | bug-bounty, cybersecurity, bugbounty-tips | 01-May-2025 |
| SSRF PAYLOADS [ HARVEST CRITICAL FILES AND CREDENTIAL | https://medium.com/@rr-1k/ssrf-payloads-harvest-critical-files-and-credential-261e5b2beda4?source=rss------bug_bounty-5 | rr-1k | infosec, bug-bounty-writeup, bug-bounty, bug-bounty-tips, ssrf | 01-May-2025 |
| Techniques Implemented last month as a Bug Hunter | https://cybersecuritywriteups.com/techniques-implemented-last-month-as-a-bug-hunter-f0e6af9cb12e?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-writeup, bug-bounty-tips, vulnerability-management, bug-bounty, pentesting | 01-May-2025 |
| Bypassing Email Verification to Hijack Any Account — No User Interaction Needed | https://medium.com/@Tanvir0x1/bypassing-email-verification-to-hijack-any-account-no-user-interaction-needed-58539b18f36a?source=rss------bug_bounty-5 | Tanvir Ahmed | bug-bounty, ethical-hacking, bounty-program, cybersecurity | 01-May-2025 |
| Crack Windows Password [Ethical Hacking Article] | https://infosecwriteups.com/crack-windows-password-ethical-hacking-article-cb3f0593fe58?source=rss------bug_bounty-5 | Mr Horbio | penetration-testing, bug-bounty, cybersecurity, hacking, ethical-hacking | 01-May-2025 |
| Lab: Finding and exploiting an unused API endpoint | https://infosecwriteups.com/lab-finding-and-exploiting-an-unused-api-endpoint-79fa6744f21e?source=rss------bug_bounty-5 | Mukilan Baskaran | bug-bounty, api, cybersecurity, security, ethical-hacking | 01-May-2025 |
| $500 Bounty: Hijacking HackerOne via window.opener | https://infosecwriteups.com/500-bounty-hijacking-hackerone-via-window-opener-e16700108e12?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, penetration-testing, hacking, report | 01-May-2025 |
| How I bypassed an IP block… without changing my IP? | https://infosecwriteups.com/how-i-bypassed-an-ip-block-without-changing-my-ip-e8082a43957b?source=rss------bug_bounty-5 | phoenixcatalan | hacking, ethical-hacking, pentesting, portswigger, bug-bounty | 01-May-2025 |
| From JS File to Jackpot: How I Found API Keys and Secrets Hidden in Production Code | https://infosecwriteups.com/from-js-file-to-jackpot-how-i-found-api-keys-and-secrets-hidden-in-production-code-87af8750b751?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, hacking, infosec, money | 01-May-2025 |
| The Secrets Behind Subdomain Takeovers Nobody Shares | https://infosecwriteups.com/the-secrets-behind-subdomain-takeovers-nobody-shares-ba6b5d7bf258?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, cybersecurity, secrets, bug-bounty, subdomain | 01-May-2025 |
| Shodan: The Search Engine That Exposes Hidden Cameras, Open Doors, and Everything Left Unsecured on… | https://osintteam.blog/shodan-the-search-engine-that-exposes-hidden-cameras-open-doors-and-everything-left-unsecured-on-b76dcc3041ac?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-writeup, pentesting, shodan, bug-bounty, bug-bounty-tips | 01-May-2025 |
| $1000+ Passive Recon Strategy You’re Not Using (Yet) | https://it4chis3c.medium.com/1000-passive-recon-strategy-youre-not-using-yet-164f5b1e6231?source=rss------bug_bounty-5 | It4chis3c | hacking, subdomains-enumeration, subdomain, earnings, bug-bounty | 01-May-2025 |
| How I Used Cloudflare’s Health Checks to Bypass Their WAF Rules | https://medium.com/@melege/how-i-used-cloudflares-health-checks-to-bypass-their-waf-rules-75a8a55adcc6?source=rss------bug_bounty-5 | Ahmed AbdElmaqsoud | responsible-disclosure, security-research, cloudflare, bug-bounty, cybersecurity | 01-May-2025 |
| Pentesting Oracle TNS Listeners on Default Ports 1521–1529: Techniques, Tools & Remediation | https://medium.com/@verylazytech/pentesting-oracle-tns-listeners-on-default-ports-1521-1529-techniques-tools-remediation-1a11b1413b0d?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, tns, oscp, penetration-testing | 01-May-2025 |
| API Hacking on Mercedes-Benz | https://infosecwriteups.com/mercedes-benz-hacking-f36605954d5f?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, infosec, cybersecurity, programming, hacking | 01-May-2025 |
| $1000+ Passive Recon Strategy You’re Not Using (Yet) | https://infosecwriteups.com/1000-passive-recon-strategy-youre-not-using-yet-164f5b1e6231?source=rss------bug_bounty-5 | It4chis3c | hacking, subdomains-enumeration, subdomain, earnings, bug-bounty | 01-May-2025 |
| How to hunt for (P1, P2) Blind XSS | https://the7th.medium.com/how-to-hunt-for-p1-p2-blind-xss-87e027acd85b?source=rss------bug_bounty-5 | Mostafa Alrefai | pentesting, web-security, xss-attack, hacking, bug-bounty | 01-May-2025 |
| Mastering Runtime Hooking with Frida — Real-World Challenges Explained (Part 2) | https://medium.com/@ch3tanbug/mastering-runtime-hooking-with-frida-real-world-challenges-explained-part-2-2520d7b1e10c?source=rss------bug_bounty-5 | CH3TAN | reverse-engineering, android-pentesting, hackerone, frida, bug-bounty | 01-May-2025 |
| Review of Security Research Articles: April 2025 | https://medium.com/meetcyber/review-of-security-research-articles-april-2025-976925d6d181?source=rss------bug_bounty-5 | Lukasz Wierzbicki | automation, bug-bounty, pentesting, productivity, review | 01-May-2025 |
| How I Found a $5K Bug in JavaScript — A Bug Bounty Story | https://krishna-cyber.medium.com/how-i-found-a-5k-bug-in-javascript-a-bug-bounty-story-dba44140efab?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, ethical-hacking, javascript, osint, infosec-write-ups | 01-May-2025 |
| JSRecon 101: Unearthing Hidden Secrets in JavaScript Files for Bug Bounty Success ️♂️ | https://krishna-cyber.medium.com/jsrecon-101-unearthing-hidden-secrets-in-javascript-files-for-bug-bounty-success-%EF%B8%8F-%EF%B8%8F-0ee75778da59?source=rss------bug_bounty-5 | Krish_cyber | ethical-hacking, info-sec-writeups, java, osint, bug-bounty | 01-May-2025 |
| Need guidance in bug bounty | https://medium.com/@shahin3541/need-guidance-in-bug-bounty-a5171d591dec?source=rss------bug_bounty-5 | Shahin | bug-bounty-hunter, bug-bounty-tips, bug-hunting, bug-bounty, bug-bounty-program | 01-May-2025 |
| Find secrets in JS files(bug bounty) | https://medium.com/@loyalonlytoday/find-secrets-in-js-files-bug-bounty-587e29025682?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, penetration-testing, bug-bounty-tips, hacking, bug-bounty | 30-Apr-2025 |
| Port Scanning Speed Test: RustScan vs Naabu | https://medium.com/fmisec/rustscan-vs-naabu-9d7cfbd18424?source=rss------bug_bounty-5 | Patar Isac Pardomuan | network-security, cybersecurity, penetration-testing, red-team, bug-bounty | 30-Apr-2025 |
| One OTP to Rule Them All: How I Replayed a Single Response and Logged in Forever on target.com | https://medium.com/@choudharinayan05/one-otp-to-rule-them-all-how-i-replayed-a-single-response-and-logged-in-forever-on-target-com-f58e58261607?source=rss------bug_bounty-5 | Nayan Choudhary | cybersecurity, bug-bounty, bug-bounty-tips, ethical-hacking, bug-bounty-writeup | 30-Apr-2025 |
| How I Found Bugs on Adobe | https://infosecwriteups.com/how-i-found-bugs-on-adobe-16cedb79e830?source=rss------bug_bounty-5 | RivuDon | ethical-hacking, bug-bounty-tips, bug-bounty, infosec, bug-bounty-writeup | 30-Apr-2025 |
| How to Detect Credential Dumping Tools like Mimikatz & LaZagne on Endpoints | https://medium.com/@paritoshblogs/how-to-detect-credential-dumping-tools-like-mimikatz-lazagne-on-endpoints-c914ec745e40?source=rss------bug_bounty-5 | Paritosh | mimikatz, bug-bounty, cybersecurity, hacking, information-technology | 30-Apr-2025 |
| $500 Bug Bounty:Open Redirection via OAuth on Shopify | https://infosecwriteups.com/500-bug-bounty-open-redirection-via-oauth-on-shopify-4159387482f9?source=rss------bug_bounty-5 | Monika sharma | technology, hacking, bug-bounty, penetration-testing, cybersecurity | 30-Apr-2025 |
| Starting out Bug Bounty as a Beginner | https://medium.com/@bharathi200412/starting-out-bug-bounty-as-a-beginner-12df44ccedcb?source=rss------bug_bounty-5 | hackerhaishayad | bug-bounty, burpsuite, tools | 30-Apr-2025 |
| Understanding Supply Chain Attacks | https://medium.com/meetcyber/understanding-supply-chain-attacks-19f97e8116cb?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty, cybersecurity, attack-surface, mitre-attack, mitre-attack-framework | 30-Apr-2025 |
| DOM-inated! How a Tiny JS Sink Turned Into Critical XSS | https://medium.com/@iski/dom-inated-how-a-tiny-js-sink-turned-into-critical-xss-a9a1dbe97df2?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, hacking, bug-bounty, money | 30-Apr-2025 |
| Caught an IDOR Vulnerability on a Private Program — Earned a Bounty | https://cybersecuritywriteups.com/caught-an-idor-vulnerability-on-a-private-program-earned-a-bounty-a99d3ac6602b?source=rss------bug_bounty-5 | Whitehat | cybersecurity, bug-bounty, bug-bounty-writeup, hacking, bug-bounty-tips | 30-Apr-2025 |
| LLM-powered Agent for Automated Google Dorking | https://medium.com/@yee-yore/llm-powered-agent-for-automated-google-dorking-dcb14d609dc2?source=rss------bug_bounty-5 | yee-yore | agentic-ai, bug-bounty, google, osint, large-language-models | 30-Apr-2025 |
| Join WING CODE: The Free Telegram Hub for Cybersecurity Learners | https://medium.com/@wingcode/join-wing-code-the-free-telegram-hub-for-cybersecurity-learners-6e8638f29bd1?source=rss------bug_bounty-5 | Wing Code | bug-bounty, cyber-security-training, learn-cybersecurity, soc, cyber | 30-Apr-2025 |
| Cybersecurity eBook Collection for Aspiring Hackers and Analysts — Curated by @VeryLazyTech | https://medium.com/@verylazytech/cybersecurity-ebook-collection-for-aspiring-hackers-and-analysts-curated-by-verylazytech-87dee170b9fb?source=rss------bug_bounty-5 | Very Lazy Tech | exploitation, bug-bounty, hacker, ethical-hacking, penetration-testing | 30-Apr-2025 |
| Mastering RCE: How I Exploit Remote Code Execution Bugs Like a Pro | https://infosecwriteups.com/mastering-rce-how-i-exploit-remote-code-execution-bugs-like-a-pro-ddcc816552bf?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, rce, infosec, hacking, bug-bounty | 30-Apr-2025 |
| CORS InspectorCORS Inspector | https://medium.com/@lukas.simunovic/cors-inspectorcors-inspector-b536fd5449c4?source=rss------bug_bounty-5 | Lukas Simunovic | bug-bounty-tips, hacking, bug-bounty, vulnerability, cybersecurity | 30-Apr-2025 |
| Understanding User Input Security: Bypasses, Techniques, and Real Examples | https://medium.com/@mr45atwork.247/understanding-user-input-security-bypasses-techniques-and-real-examples-dade12f36653?source=rss------bug_bounty-5 | Mr. Lucifer | cybersecurity, ethical-hacking, xss-vulnerability, bug-bounty, penetration-testing | 30-Apr-2025 |
| Key Security Components in Android & Security Metrics: The Foundation of App Security | https://justdvnsh.medium.com/key-security-components-in-android-security-metrics-the-foundation-of-app-security-e82eb5ce77de?source=rss------bug_bounty-5 | Divyansh Dwivedi | bug-bounty, android, hacking, research-and-development, security | 30-Apr-2025 |
| From Internal IP Discovery to Full Database Dump | https://medium.com/@dotHatab/from-internal-ip-discovery-to-full-database-dump-96fbd85dbc7a?source=rss------bug_bounty-5 | dotHatab | data-breach, information-disclosure, web-application-security, haveibeenpwned, bug-bounty | 30-Apr-2025 |
| When Does URL Encoding Happen? | https://medium.com/@zoningxtr/when-does-url-encoding-happen-a5ff6e88c59f?source=rss------bug_bounty-5 | Zoningxtr | python-programming, bug-bounty, web-development, javascript, html | 30-Apr-2025 |
| Complete Guide: URL Encoding Trigger Cases with Detailed Explanations and Examples | https://medium.com/@zoningxtr/complete-guide-url-encoding-trigger-cases-with-detailed-explanations-and-examples-0fe80eb6be90?source=rss------bug_bounty-5 | Zoningxtr | html, javascript, web-development, bug-bounty, django | 30-Apr-2025 |
| April Make Me Happy (Bug Bounty Hunting) | https://0xshuvo.medium.com/april-make-me-happy-bug-bounty-hunting-2af3fcf15746?source=rss------bug_bounty-5 | Shuvo Kumar Saha | recon, infosec, bugbounty-tips, bug-bounty, dorking | 30-Apr-2025 |
| Vulnerabilities You Can Find in a Payment Gateway | https://medium.com/@sherlock297/vulnerabilities-you-can-find-in-a-payment-gateway-338b944b0f61?source=rss------bug_bounty-5 | Ravindra Dagale | payments, information-technology, bug-bounty, cybersecurity, vulnerability | 30-Apr-2025 |
| From Out-of-Scope to Critical: How I Earned 2500$ by Breaking the Rules | https://medium.com/@arrasgotcha/from-out-of-scope-to-critical-how-i-earned-2500-by-breaking-the-rules-e8165ec5ef37?source=rss------bug_bounty-5 | Gotcha1G | bug-bounty, cybersecurity, development, hacking, programming | 30-Apr-2025 |
| IDOR : Ketika URL Bisa Jadi Kunci untuk Bobol Data Orang lain | https://medium.com/@zakyputra628/idor-ketika-url-bisa-jadi-kunci-untuk-bobol-data-orang-lain-7b68073f56d0?source=rss------bug_bounty-5 | Zaky Putra Pratama | cybersecurity, bug-bounty, hacking, indonesia, web-security | 30-Apr-2025 |
| How I Found My First Bug: IDOR Vulnerability & Got a $$$ Bounty! | https://medium.com/@zephyrus18/how-i-found-my-first-bug-idor-vulnerability-got-a-500-bounty-d11b983e1460?source=rss------bug_bounty-5 | Zephyrus | cybercrime, bug-bounty, cybersecurity, bugs, cyber-security-awareness | 30-Apr-2025 |
| From Internal IP Discovery to Full Database Dump | https://medium.com/@drhatab/from-internal-ip-discovery-to-full-database-dump-6fbbac0ff822?source=rss------bug_bounty-5 | Mustafa Hatab | web-app-pentesting, web-app-security, pentesting, bug-bounty, sensitive-data | 30-Apr-2025 |
| Hacking Workspace for Fun & Profit: Part II | https://0xh7ml.medium.com/hacking-workspace-for-fun-profit-part-ii-de9cd3cc9755?source=rss------bug_bounty-5 | Md Saikat | broken-access-control, info-sec-writeups, idor, bug-bounty-writeup, bug-bounty | 30-Apr-2025 |
| How I Earned $1700 from Stripe Bug Bounties | https://medium.com/@Rinkesh_Patidar/how-i-earned-1700-from-stripe-bug-bounties-28173e8b0a56?source=rss------bug_bounty-5 | Rinkesh Patidar | report, stripe, hackerone-report, bug-bounty, bugs | 30-Apr-2025 |
| MCP Prompt Injection: The AI Hack That Cuts Both Ways ️ | https://ismailtasdelen.medium.com/mcp-prompt-injection-the-ai-hack-that-cuts-both-ways-%EF%B8%8F-f340de123451?source=rss------bug_bounty-5 | Ismail Tasdelen | artificial-intelligence, appsec, application-security, bug-bounty, email-security | 30-Apr-2025 |
| How I Simply Bypassed a 400 Bad Request and Escalated My Access from Member to Owner | https://abumaryamrahmat.medium.com/%D8%A8%D8%B3%D9%85-%D8%A7%D9%84%D9%84%D9%87-%D8%A7%D9%84%D8%B1%D8%AD%D9%85%D9%86-%D8%A7%D9%84%D8%B1%D8%AD%D9%8A%D9%85-7e837698fe4b?source=rss------bug_bounty-5 | Abu Maryam Rahmat | penetration-testing, bug-bounty-writeup, bug-bounty, bug-bounty-tips, hackerone | 30-Apr-2025 |
| $500,000 to Catch STON.fi Bugs?! Let’s Get Hunting, STONfiers! | https://medium.com/@savesjustice/500-000-to-catch-ston-fi-bugs-lets-get-hunting-stonfiers-8e3c2ba6ad55?source=rss------bug_bounty-5 | MADEOFBLU | rewards, stonfi, bug-bounty, cryptocurrency, defi | 29-Apr-2025 |
| Find .JS files of your bug bounty target(JS FILES RECON) | https://medium.com/@loyalonlytoday/find-js-files-of-your-bug-bounty-target-js-files-recon-306c3b169bae?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, cybersecurity, ethical-hacking, bug-bounty, bug-bounty-tips | 29-Apr-2025 |
| $100 Password Reset Flaw | https://osintteam.blog/100-password-reset-flaw-7827effebca2?source=rss------bug_bounty-5 | Monika sharma | hacking, cybersecurity, bug-bounty, penetration-testing, technology | 29-Apr-2025 |
| Password Recovery? More Like Account Delivery Host Header Injection Madness | https://medium.com/@loayahmed686/password-recovery-more-like-account-delivery-host-header-injection-madness-b0d0eb3a3b6d?source=rss------bug_bounty-5 | r00t | bug-bounty-writeup, bug-bounty-tips, bug-bounty, infosec | 29-Apr-2025 |
| How can i find a Jenkins dashboard and ended up with Reverse Shell on shodan | https://medium.com/@fakechan443/how-can-i-find-a-jenkins-dashboard-and-ended-up-with-reverse-shell-with-shodan-31fcfb8db8b4?source=rss------bug_bounty-5 | Fakhri Abbas Ailatat | jenkins-pipeline, ethical-hacking, bug-bounty, bug-bounty-writeup, shodan | 29-Apr-2025 |
| Shadow Copy Forensics: Detecting and Investigating VSS Tampering | https://medium.com/@paritoshblogs/shadow-copy-forensics-detecting-and-investigating-vss-tampering-17c5bf555230?source=rss------bug_bounty-5 | Paritosh | hacking, detection, cybersecurity, bug-bounty, forensics | 29-Apr-2025 |
| SyncVault Bug Bounty Challenge | https://medium.com/@syncvault/syncvault-bug-bounty-challenge-bfd466be173c?source=rss------bug_bounty-5 | SyncVault | syncvault, airdrop, devsecops, bug-bounty, web3 | 29-Apr-2025 |
| ️ The ULTIMATE Web App Hacking Checklist for Bug Bounty Hunters | https://redxcybersec.medium.com/%EF%B8%8F-the-ultimate-web-app-hacking-checklist-for-bug-bounty-hunters-a495b436ab6f?source=rss------bug_bounty-5 | REDx Cybersec | bug-bounty, web-security, pentesting, cybersecurity, ethical-hacking | 29-Apr-2025 |
| GraphQL API hacking Series for Bug Hunters Part 02 | https://medium.com/@lancersiromony/graphql-api-hacking-series-for-bug-hunters-part-02-837e0bc3be06?source=rss------bug_bounty-5 | IronGhost | graphql-tools, api, bug-bounty, hacking, graphql | 29-Apr-2025 |
| What Recruiters Look for in a Cybersecurity Resume in 2025 | https://infosecwriteups.com/what-recruiters-look-for-in-a-cybersecurity-resume-in-2025-dcc81fa3154e?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, cybersecurity, bug-bounty, resume, jobs | 29-Apr-2025 |
| $140 Bounty: Full Path Disclosure on ads.twitter.com | https://infosecwriteups.com/140-bounty-full-path-disclosure-on-ads-twitter-com-bdedd140ac27?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, hacking, technology, penetration-testing, cybersecurity | 29-Apr-2025 |
| How Hackers Try to Bypass 403 Forbidden Pages | https://infosecwriteups.com/how-hackers-try-to-bypass-403-forbidden-pages-239c3f51a674?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, bug-bounty, hacking, tech, infosec | 29-Apr-2025 |
| Not Just a Ping: How SSRF Opened the Gateway to Internal Secrets | https://infosecwriteups.com/not-just-a-ping-how-ssrf-opened-the-gateway-to-internal-secrets-d18eeccd4745?source=rss------bug_bounty-5 | Iski | mone, bug-bounty, cybersecurity, infose, hacking | 29-Apr-2025 |
| ️HTML Encoding Real Cases in deep | https://medium.com/@zoningxtr/%EF%B8%8Fhtml-encoding-real-cases-in-deep-23945237edc6?source=rss------bug_bounty-5 | Zoningxtr | web-development, bug-bounty, javascript, penetration-testing, html | 29-Apr-2025 |
| What Happens When You Request a Web Page? | https://medium.com/@zoningxtr/what-happens-when-you-request-a-web-page-5e382e05d89f?source=rss------bug_bounty-5 | Zoningxtr | javascript, penetration-testing, bug-bounty, html, web-development | 29-Apr-2025 |
| What is HTML Safe Character Encoding? | https://medium.com/@zoningxtr/what-is-html-safe-character-encoding-54a687fa8949?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, javascript, cybersecurity, bug-bounty, html | 29-Apr-2025 |
| subdomain-scanner200OK | https://medium.com/@lukas.simunovic/subdomain-scanner200ok-fcd762413e07?source=rss------bug_bounty-5 | Lukas Simunovic | hacking-tools, hacking, bug-bounty | 29-Apr-2025 |
| Bug bounty program STON.fi: $500,000 in rewards | https://medium.com/@aqkiler/bug-bounty-program-ston-fi-500-000-in-rewards-c03c1b90c24d?source=rss------bug_bounty-5 | aqkiler | stonfi, dex, bug-bounty, ston | 29-Apr-2025 |
| Bug Bounty программа STON.fi: $500,000 в наградах | https://medium.com/@aqkiler/bug-bounty-%D0%BF%D1%80%D0%BE%D0%B3%D1%80%D0%B0%D0%BC%D0%BC%D0%B0-ston-fi-500-000-%D0%B2-%D0%BD%D0%B0%D0%B3%D1%80%D0%B0%D0%B4%D0%B0%D1%85-ca3da312326d?source=rss------bug_bounty-5 | aqkiler | dex, bug-bounty, ston, stonfi | 29-Apr-2025 |
| Exploiting SQLi for Total Clients Control in Enterprise Application | https://medium.com/@es0557533/exploiting-sqli-for-total-clients-control-in-enterprise-application-e940acf34aa6?source=rss------bug_bounty-5 | Isv | sql-injection, cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 29-Apr-2025 |
| 1 Click Account Takeover | XSS | CORS Misconfiguration | JWT Forgery | https://infosecwriteups.com/1-click-account-takeover-xss-cors-misconfiguration-jwt-forgery-0cf73a28e236?source=rss------bug_bounty-5 | Raymond Van Wart | xss-attack, bug-bounty, jwt, cybersecurity, account-takeover | 29-Apr-2025 |
| $450 Bounty: Stole Facebook OAuth Access Tokens via Phabricator | https://osintteam.blog/450-bounty-stole-facebook-oauth-access-tokens-via-phabricator-4c4468268302?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, cybersecurity, hacking, technology, bug-bounty | 29-Apr-2025 |
| From Logs to ATO | How I Hacked IBM | https://cylent.net/from-logs-to-ato-how-i-hacked-ibm-52552d95dacf?source=rss------bug_bounty-5 | Mohamed Talaat Saada (@t4144t) | penetration-testing, bug-bounty, application-security, bug-bounty-writeup, bug-bounty-tips | 29-Apr-2025 |
| I Have a Hacking Gig For YOU, Hack Them and Get Paid | https://muhammadola.medium.com/i-have-a-hacking-gig-for-you-hack-them-and-get-paid-2cddf6442492?source=rss------bug_bounty-5 | Muhammad | ethical-hacking, stonfi, bug-bounty, ton, dex | 29-Apr-2025 |
| ️HTML Encoding Real Cases in deep | https://medium.com/@zoningxtr/%EF%B8%8Fhtml-encoding-real-cases-in-deep-23945237edc6?source=rss------bug_bounty-5 | Zoningxtr | web-development, bug-bounty, javascript, xss-attack, penetration-testing | 29-Apr-2025 |
| Unlock Bounties by Simply Reading: A Smart Way to Earn | https://infosecwriteups.com/unlock-bounties-by-simply-reading-a-smart-way-to-earn-63a1cb410450?source=rss------bug_bounty-5 | Reju Kole | bug-bounty-writeup, cyber-security-training, bug-bounty, cybersecurity, bug-bounty-tips | 29-Apr-2025 |
| Mastering Runtime Hooking with Frida — Real-World Challenges Explained (Part -1) | https://medium.com/@ch3tanbug/mastering-runtime-hooking-with-frida-real-world-challenges-explained-part-1-17a7f57ea87b?source=rss------bug_bounty-5 | CH3TAN | bug-bounty, cybersecurity, reverse-engineering, frida, android-pentesting | 29-Apr-2025 |
| JS-URL-Endpoint-Harvester | https://medium.com/@lukas.simunovic/js-url-endpoint-harvester-5885d3a69ef6?source=rss------bug_bounty-5 | Lukas Simunovic | hacking-tools, bug-bounty, scanning-tool, hacking, automation-tools | 29-Apr-2025 |
| How I Made $12k in 48 Hours — By Recovering ‘Deleted’ Files | https://medium.com/@ibtissamhammadi/how-i-made-12k-in-48-hours-by-recovering-deleted-files-57bf7289ab9e?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, passive-income, hacking, github, cybersecurity | 28-Apr-2025 |
| Hunting Suspicious DLL Side-Loading Activity | https://medium.com/@paritoshblogs/hunting-suspicious-dll-side-loading-activity-5d919f018ac6?source=rss------bug_bounty-5 | Paritosh | dll-sideloading, bug-bounty, hacking, hunting, cybersecurity | 28-Apr-2025 |
| $500 XSS Payload in Slack | https://osintteam.blog/500-xss-payload-in-slack-0b99de50f4df?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, cybersecurity, technology, bug-bounty, hacking | 28-Apr-2025 |
| ☁️How to Setup a Custom Subdomain on xss.ht — A Complete Hacker's Guide | https://infosecwriteups.com/%EF%B8%8Fhow-to-setup-a-custom-subdomain-on-xss-ht-a-complete-hackers-guide-a0018704c391?source=rss------bug_bounty-5 | Abhijeet Kumawat | vulnerability, hacking, xss-attack, bug-bounty, cybersecurity | 28-Apr-2025 |
| How I Found a Broken Access Control That Exposed Interview Answers? | https://osintteam.blog/how-i-found-a-broken-access-control-vulnerability-that-exposed-interview-answers-e353128f6883?source=rss------bug_bounty-5 | Sri Shavin Kumar | ethical-hacking, hall-of-fame, cybersecurity, bug-bounty, bug-bounty-writeup | 28-Apr-2025 |
| How i Access The Deleted Files of Someone in Google Drive | Bug Bounty | https://ph-hitachi.medium.com/how-i-access-the-deleted-files-of-someone-in-google-drive-bug-bounty-eac134df1de4?source=rss------bug_bounty-5 | Ph.Hitachi | google-vrp, google-drive, bug-bounty, hackerone, broken-access-control | 28-Apr-2025 |
| How to Master Subdomain Takeovers in 2025 | https://infosecwriteups.com/how-to-master-subdomain-takeovers-in-2025-023f9f4817af?source=rss------bug_bounty-5 | Vipul Sonule | hacking, infosec, bug-bounty, tech, bug-bounty-tips | 28-Apr-2025 |
| $500 Bounty: For a Simple Open Redirect | https://infosecwriteups.com/500-bounty-for-a-simple-open-redirect-a34051071a5c?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, hacking, cybersecurity, bug-bounty | 28-Apr-2025 |
| How I Earned $8947 bounty for Remote Code Execution via a Hijacked GitHub Module | https://nvk0x.medium.com/how-i-earned-8947-bounty-for-remote-code-execution-via-a-hijacked-github-module-91c4a4b63255?source=rss------bug_bounty-5 | Naveen kumawat | bug-bounty-tips, hackerone, bug-bounty, bugbounty-writeup, hacking | 28-Apr-2025 |
| JWT, Meet Me Outside: How I Decoded, Re-Signed, and Owned the App | https://infosecwriteups.com/jwt-meet-me-outside-how-i-decoded-re-signed-and-owned-the-app-95791eabcf5d?source=rss------bug_bounty-5 | Iski | infosec, hacking, cybersecurity, mone, bug-bounty | 28-Apr-2025 |
| GraphQL API hacking Series for bug hunters 01 | https://medium.com/@lancersiromony/graphql-api-hacking-series-for-bug-hunters-01-4db602685d16?source=rss------bug_bounty-5 | IronGhost | apihacking, hacking-tools, bug-bounty, graphql, hacking | 28-Apr-2025 |
| POC — CVE-2025–29306 FOXCMS /images/index.html Code Execution Vulnerability | https://medium.com/@verylazytech/poc-cve-2025-29306-foxcms-images-index-html-code-execution-vulnerability-0c4db3905fd0?source=rss------bug_bounty-5 | Very Lazy Tech | cve-2025-29306, rce, hacking, foxcms, bug-bounty | 28-Apr-2025 |
| GraphQL API hacking Series for Bug Hunters Part 01 | https://medium.com/@lancersiromony/graphql-api-hacking-series-for-bug-hunters-01-4db602685d16?source=rss------bug_bounty-5 | IronGhost | apihacking, hacking-tools, bug-bounty, graphql, hacking | 28-Apr-2025 |
| Exploiting a Referer Header for Open Redirect | https://ehteshamulhaq198.medium.com/exploiting-a-referer-header-for-open-redirect-ee2baa4a45b5?source=rss------bug_bounty-5 | Ehtesham Ul Haq | penetration-testing, open-redirect, infosec, rewards, bug-bounty | 28-Apr-2025 |
| The $2500 bug: Remote Code Execution via Supply Chain Attack | https://nvk0x.medium.com/the-2500-bug-remote-code-execution-via-supply-chain-attack-3beb07ac1a4c?source=rss------bug_bounty-5 | Naveen kumawat | bug-bounty-writeup, hackerone, bug-bounty, bug-bounty-tips, hacking | 28-Apr-2025 |
| Simple Tips for Bug Bounty Beginners: Content Spoofing via HTML Injection | https://medium.com/@anishnarayan/simple-tips-for-bug-bounty-beginners-content-spoofing-via-html-injection-a0ae7c39a89a?source=rss------bug_bounty-5 | Anish Narayan | offensive-security, cybersecurity, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 28-Apr-2025 |
| The OSINT Blueprint: Elevate Your Investigation Skills to Extraordinary Levels | https://4swolf.medium.com/the-osint-blueprint-elevate-your-investigation-skills-to-extraordinary-levels-0e7f7c832b9d?source=rss------bug_bounty-5 | wulf | hacking-tools, bug-bounty, hackerone, osint, hacker | 28-Apr-2025 |
| # Walkthrough: VulnHub Machine — Ted 1 (Full Root Access) | https://medium.com/@ghostcat1337/walkthrough-vulnhub-machine-ted-1-full-root-access-12b19f4dc036?source=rss------bug_bounty-5 | ghostcat | penetration-testing, infosec, cybersecurity, bug-bounty, ctf-writeup | 28-Apr-2025 |
| I Hijacked Accounts in 10 Minutes (IDOR Bug) | https://medium.com/@ibtissamhammadi/i-hijacked-accounts-in-10-minutes-idor-bug-b44ae8e53dfa?source=rss------bug_bounty-5 | Ibtissam Hammadi | infosec, bug-bounty, hacking, cybersecurity, hackerone | 28-Apr-2025 |
| Day 13: Visible error-based SQL injection — Zero to Hero Blind Injection — Portswigger | https://arayofhope7.medium.com/day-13-visible-error-based-sql-injection-zero-to-hero-blind-injection-portswigger-3da2241a1672?source=rss------bug_bounty-5 | RayofHope | penetration-testing, web-penetration-testing, ethical-hacking, bug-bounty, cybersecurity | 28-Apr-2025 |
| VeriSource Data Breach Impacts 4 Million People | https://wiretor.medium.com/verisource-data-breach-impacts-4-million-people-fe05cce5aac4?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | usa, malware, xss-attack, bug-bounty, ai | 28-Apr-2025 |
| How Breaches Start: Breaking Down 5 Real Vulnerabilities ️♂️ | https://ismailtasdelen.medium.com/how-breaches-start-breaking-down-5-real-vulnerabilities-%EF%B8%8F-%EF%B8%8F-8b1a032b0335?source=rss------bug_bounty-5 | Ismail Tasdelen | vulnerability, application-security, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 28-Apr-2025 |
| Google Cloud Account Takeover via URL Parsing Confusion | https://weirdmachine.medium.com/google-cloud-account-takeover-via-url-parsing-confusion-c5e47389b7c7?source=rss------bug_bounty-5 | Mohamed Benchikh | account-take-over, bugbounty-writeup, bug-bounty, google-cloud-platform | 28-Apr-2025 |
| Road to SSRF : PDF generation and filter bypass on ASP.net application | https://medium.com/@supr4s.other/road-to-ssrf-pdf-generation-and-filter-bypass-on-asp-net-application-dd3aa91c0fed?source=rss------bug_bounty-5 | Supr4s | bug-bounty, ssrf-attack | 28-Apr-2025 |
| How You Can Earn Up to $100,000 with STON.fi Bug Bounty Program | https://medium.com/@vlad2566/how-you-can-earn-up-to-100-000-with-ston-fi-bug-bounty-program-18861e0285e5?source=rss------bug_bounty-5 | CRYPTANUA | ton, stonfi, bug-bounty | 28-Apr-2025 |
| WolfVision Cynap Smart Presentation Device Vulnerability Discovered: Anonymous Access Risk at… | https://medium.com/@hacker_might/wolfvision-cynap-smart-presentation-device-vulnerability-discovered-anonymous-access-risk-at-4a5ed41a9f06?source=rss------bug_bounty-5 | hacker_might | bug-bounty-writeup, bug-bounty, cyber-security-awareness, iot, iot-security | 28-Apr-2025 |
| Detecting Hidden Scheduled Tasks & At Jobs Created by Malware | https://medium.com/@paritoshblogs/detecting-hidden-scheduled-tasks-at-jobs-created-by-malware-c9038d5d4544?source=rss------bug_bounty-5 | Paritosh | malware, bug-bounty, malware-analysis, hacking, cybersecurity | 27-Apr-2025 |
| How to Turn Cybersecurity Into a Full-Time Income (My Blueprint) | https://infosecwriteups.com/how-to-turn-cybersecurity-into-a-full-time-income-my-blueprint-f4d70cb01f73?source=rss------bug_bounty-5 | Abhijeet Kumawat | careers, bug-bounty, infosec, cybersecurity, hacking | 27-Apr-2025 |
| How I Found The Unauthorized account manipulation? | https://doordiefordream.medium.com/how-i-found-the-unauthorized-account-manipulation-3f3312360751?source=rss------bug_bounty-5 | DOD cyber solutions | cybersecurity, bug-bounty, ethical-hacking, technology, vulnerability | 27-Apr-2025 |
| Attacking Web Applications with FFuF | https://medium.com/@yashpawar1199/attacking-web-applications-with-ffuf-63673231452e?source=rss------bug_bounty-5 | Yash Pawar @HackersParadise | fuzzing, web-attack, bug-bounty-writeup, ffuf, bug-bounty | 27-Apr-2025 |
| Understanding XSS (Cross-Site Scripting) | https://medium.com/@parthchheda777/understanding-xss-cross-site-scripting-4cfbcc7bab2e?source=rss------bug_bounty-5 | Parthchheda | learning, xss-attack, cybersecurity, bug-bounty | 27-Apr-2025 |
| My Journey from last 85 days of Learning Pentesting | https://medium.com/@gobbledy/my-journey-from-last-85-days-of-learning-pentesting-71fe9bad7e71?source=rss------bug_bounty-5 | gobbledy | pentesting, bug-bounty, information-security, cybersecurity | 27-Apr-2025 |
| “Account Takeovers Made Easy: Critical JWT Exposure via Archived URLs” | https://medium.com/@choudharinayan05/account-takeovers-made-easy-critical-jwt-exposure-via-archived-urls-1b7380c62943?source=rss------bug_bounty-5 | Comp_Nayan Choudhary | bug-bounty, cybersecurity, ethical-hacking, bug-bounty-writeup | 27-Apr-2025 |
| The Future of Bug Bounties: What Ethical Hackers Need to Know! | https://medium.com/@cybertalents/the-future-of-bug-bounties-what-ethical-hackers-need-to-know-2a5fba3213b9?source=rss------bug_bounty-5 | CyberTalents | cybersecurity, ethical-hacking, careers, cyber-security-awareness, bug-bounty | 27-Apr-2025 |
| Understanding CSRF (Cross Site Request Forgery) | https://medium.com/@parthchheda777/understanding-csrf-cross-site-request-forgery-08d0ea732026?source=rss------bug_bounty-5 | Parthchheda | csrf, csrf-token, learning, bug-bounty, cybersecurity | 27-Apr-2025 |
| Dalam dunia ethical hacking dan penetration testing, penguasaan sistem operasi Linux menjadi kunci… | https://medium.com/@ahmadcybr21/dalam-dunia-ethical-hacking-dan-penetration-testing-penguasaan-sistem-operasi-linux-menjadi-kunci-f05308396791?source=rss------bug_bounty-5 | Ahmadcybr | hacker, cybersecurity, whitehat, bug-bounty, linux | 27-Apr-2025 |
| Login? Who Needs That? Bypassing OAuth Like a Lazy Hacker on Sunday ☀️ | https://infosecwriteups.com/login-who-needs-that-bypassing-oauth-like-a-lazy-hacker-on-sunday-%EF%B8%8F-76802cc8025d?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, infosec, money, hacking | 27-Apr-2025 |
| a simple watch tower (: | https://medium.com/@cryptoboot123/a-simple-watch-tower-19467f0bee49?source=rss------bug_bounty-5 | Cryptoboot | bug-bounty, bug-bounty-writeup, watchtower, bug-bounty-tips | 27-Apr-2025 |
| POC — Remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code… | https://medium.com/@verylazytech/poc-remote-and-unauthenticated-attacker-can-send-crafted-http-requests-to-execute-arbitrary-code-4b591d45ff4f?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, cve-2025-3248, exploit, rce, hacking | 27-Apr-2025 |
| Manual Testing for Privilege Escalation and Broken Access Control My (Methodology) | https://medium.com/@kroush333/manual-testing-for-privilege-escalation-and-broken-access-control-my-methodology-a3b9f41b82a2?source=rss------bug_bounty-5 | MahmoudKroush | bug-bounty-tips, bug-bounty, cybersecurity, penetration-testing, bug-bounty-writeup | 27-Apr-2025 |
| Hacking APIs: Attackers exploiting SSRF | https://iaraoz.medium.com/hacking-apis-attackers-exploiting-ssrf-57624d575987?source=rss------bug_bounty-5 | Israel Aráoz Severiche | cybersecurity, bug-bounty, api, owasp | 27-Apr-2025 |
| Vaulting over a .innerHTML sink in a Locked-Down CSP | https://infosecwriteups.com/vaulting-over-a-innerhtml-sink-in-a-locked-down-csp-a628be8ba9dc?source=rss------bug_bounty-5 | SMHTahsin33 | dom-xss, csp, innerhtml, xss-attack, bug-bounty | 27-Apr-2025 |
| The World Needs More Cyber Warriors: Here’s Why You Should Join Cybersecurity Today | https://medium.com/@uday7981047612/the-world-needs-more-cyber-warriors-heres-why-you-should-join-cybersecurity-today-323a5a4c7485?source=rss------bug_bounty-5 | Uday Venkat | penetration-testing, bug-bounty, ethical-hacking, cybersecurity, networking | 27-Apr-2025 |
| From Discovery to Patch: Critical DOM XSS & Open Redirect in Toyota’s Parts Portal | https://medium.com/@N0aziXss/from-discovery-to-patch-critical-dom-xss-open-redirect-in-toyotas-parts-portal-e36383fa1aa1?source=rss------bug_bounty-5 | N0aziXss | web-security, bug-bounty, ethical-hacking, open-redirect, dom-xss | 27-Apr-2025 |
| Privilege Escalation via IDOR and ACL Bypass in a SaaS Application | https://kumarmohank889.medium.com/privilege-escalation-via-idor-and-acl-bypass-in-a-saas-application-e079bcd2cc4a?source=rss------bug_bounty-5 | Mohan Kumar N | bug-bounty-tips, hacking, cybersecurity, ethical-hacking, bug-bounty | 27-Apr-2025 |
| Bypassing Access control through OPTIONS Request + Method Smuggling: A Hacker One Finding | https://ayushkr12.medium.com/smuggling-my-way-past-frontend-filters-a-fun-find-on-hackerone-4424dad3a16e?source=rss------bug_bounty-5 | Ayush Kumar | pentesting, bug-bounty, hacking, access-control | 27-Apr-2025 |
| Millions of Records Exposed via SQL Injection in a Tamil Nadu Government Portal | https://medium.com/@dharineeshj2/millions-of-records-exposed-via-sql-injection-in-a-tamil-nadu-government-portal-0981d3827ed2?source=rss------bug_bounty-5 | Hack-Bat | bug-bounty, hacking, cybersecurity, pentesting, ethical-hacking | 26-Apr-2025 |
| Microsoft Is Paying Up to $30,000 for AI Security Flaws | https://medium.com/@Cyber-AppSec/microsoft-is-paying-up-to-30-000-for-ai-security-flaws-d4f1fec247d6?source=rss------bug_bounty-5 | Cyber-AppSec | information-security, cybersecurity, ai, bug-bounty, microsoft | 26-Apr-2025 |
| ⏱️ There were no visible errors, no hints… only the server’s hesitation told me the truth. | https://infosecwriteups.com/%EF%B8%8F-there-were-no-visible-errors-no-hints-only-the-servers-hesitation-told-me-the-truth-7b4987f10444?source=rss------bug_bounty-5 | phoenixcatalan | pentesting, bug-bounty, portswigger, ethical-hacking, hacking | 26-Apr-2025 |
| Path Traversal Attack: How I Accessed Admin Secrets | https://infosecwriteups.com/path-traversal-attack-how-i-accessed-admin-secrets-fa5de1865031?source=rss------bug_bounty-5 | Vipul Sonule | hacking, bug-bounty, cybersecurity, bug-bounty-tips, infosec | 26-Apr-2025 |
| Symbolic Execution vs Traditional Static Analysis in Smart Contract Security | https://securrtech.medium.com/symbolic-execution-vs-traditional-static-analysis-in-smart-contract-security-97a9289bbd48?source=rss------bug_bounty-5 | Securr - Web3 Security | bug-bounty, smart-contract-security, smart-contract-auditing, blockchain-security, web3-security | 26-Apr-2025 |
| How I Catch XSS Bugs That Most Hunters Miss | https://infosecwriteups.com/how-i-catch-xss-bugs-that-most-hunters-miss-7f226d3a1dea?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, vulnerability, hacking, xss-attack, bug-bounty | 26-Apr-2025 |
| Misconfiguration on MinIO S3 Bucket (Similar to AWS S3 Misconfig) | https://frostyxsec.medium.com/misconfiguration-on-minio-s3-bucket-similar-to-aws-s3-misconfig-a6754d29d011?source=rss------bug_bounty-5 | Frostyxsec | bug-bounty-tips, bug-bounty, bug-bounty-hunter, bug-bounty-writeup | 26-Apr-2025 |
| OAuth Desync Chain: From Smuggling to Session Hijack Without Credentials | https://medium.com/@m3681371/oauth-desync-chain-from-smuggling-to-session-hijack-without-credentials-3959cedaf579?source=rss------bug_bounty-5 | m6r001 | http2, research, oauth, bug-bounty, web-security | 26-Apr-2025 |
| Breaking the Hierarchy: How I Bypassed Role Restrictions to Become Owner | https://medium.com/meetcyber/breaking-the-hierarchy-how-i-bypassed-role-restrictions-to-become-owner-2635e1e33d85?source=rss------bug_bounty-5 | Fuzzyy Duck | info-sec-writeups, web-application-security, cybersecurity, bug-bounty, hacking | 26-Apr-2025 |
| How I Bypassed Authentication on a Funded Fashion Site — And Took Over an Account | https://medium.com/@rolextital/how-i-bypassed-authentication-on-a-funded-fashion-site-and-took-over-an-account-8b8a9189fb4a?source=rss------bug_bounty-5 | Rolextital | bug-bounty, web-application-security, cybersecurity, ethical-hacking, authentication-bypass | 26-Apr-2025 |
| The Hidden Param That Opened the Vault: A Dirty Param Tampering Tale | https://infosecwriteups.com/the-hidden-param-that-opened-the-vault-a-dirty-param-tampering-tale-52bfac3539fd?source=rss------bug_bounty-5 | Iski | hacking, money, infosec, bug-bounty, cybersecurity | 26-Apr-2025 |
| Waiting for admin approve , I don’t think so ! | https://medium.com/@abdallahehab_31039/waiting-for-admin-approve-i-dont-think-so-195a042f913e?source=rss------bug_bounty-5 | Abdallah Ehab | ethical-hacking, hunting, bug-bounty, response-manipulation | 26-Apr-2025 |
| What if finding a simple bug could earn you $75,000? | https://medium.com/@ndaawesome/what-if-finding-a-simple-bug-could-earn-you-75-000-de582f83cbb2?source=rss------bug_bounty-5 | Awesome Ndaboms | crypto, bug-bounty, devops, defi, ton | 26-Apr-2025 |
| How I Bypassed a WAF & Found My First XSS Bug | https://medium.com/@ibtissamhammadi/how-i-bypassed-a-waf-found-my-first-xss-bug-22429d7a3655?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, waf-bypass, xss-attack, cybersecurity, hacking | 26-Apr-2025 |
| Breaking File Upload Security: Finding Hidden XSS | https://medium.com/@es0557533/breaking-file-upload-security-finding-hidden-xss-cfc6e38bcee3?source=rss------bug_bounty-5 | Isv | bug-bounty-writeup, bug-bounty, xss-attack, bug-bounty-tips, xss-bypass | 26-Apr-2025 |
| Top 10 Beginner Setup Problems in HTB and Bug Bounty (and How to Fix Them Fast) | https://medium.com/@verylazytech/top-10-beginner-setup-problems-in-htb-and-bug-bounty-and-how-to-fix-them-fast-1f9a278415ea?source=rss------bug_bounty-5 | Very Lazy Tech | tryhackme, bug-bounty, htb, penetration-testing | 26-Apr-2025 |
| Cybersecurity Roadmap for Beginners in 2025: Avoid These Common Mistakes on Your Learning Journey | https://infosecwriteups.com/cybersecurity-roadmap-for-beginners-in-2025-avoid-these-common-mistakes-on-your-learning-journey-7e8701bb1827?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, penetration-testing, cybersecurity, ethical-hacking, roadmaps | 26-Apr-2025 |
| Day 3 — Setting Up My Android Pentesting Lab | https://medium.com/@muhammedshemil25/day-3-setting-up-my-android-pentesting-lab-8a0f71de091c?source=rss------bug_bounty-5 | Muhammed.shemil | android-pentesting, ethical-hacking, mobile-security, ctf, bug-bounty | 26-Apr-2025 |
| My First P1 | https://callgh0st.medium.com/my-first-p1-ae9d09c02927?source=rss------bug_bounty-5 | callgh0st | genocide, github, hacking, bug-bounty, recon | 26-Apr-2025 |
| XSS Vulnerability in One of the Top 10 Universities in India | https://mushirsyed.medium.com/xss-vulnerability-on-one-of-the-top-10-universities-in-india-a2088fd31ef5?source=rss------bug_bounty-5 | Syed Mushir | bug-bounty-tips, bug-bounty, bugs, xss-vulnerability, xss-attack | 26-Apr-2025 |
| How I Chained Template Injections Across Pages to Trigger Reflected XSS | https://medium.com/@zoningxtr/how-i-chained-template-injections-across-pages-to-trigger-reflected-xss-5d4ef68efac5?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, javascript, bug-bounty, penetration-testing, web-development | 26-Apr-2025 |
| WooCommerce Admins Targeted by Fake Security Patches That Hijack Sites | https://wiretor.medium.com/woocommerce-admins-targeted-by-fake-security-patches-that-hijack-sites-7bf1832f2963?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, usa, xss-attack, ai, bug-bounty | 26-Apr-2025 |
| Subdomain Takeover on VDP | https://medium.com/@vasubhan/subdomain-takeover-on-vdp-32cac749bf16?source=rss------bug_bounty-5 | Vasu Bhan | writeup, security-research, vdp, bug-bounty | 26-Apr-2025 |
| How I Found phpinfo Exposure In telkomsigma.co.id | https://firdausmuhammadismail.medium.com/how-i-found-phpinfo-in-telkomsigma-co-id-49c89a1b0404?source=rss------bug_bounty-5 | Firdaus Muhammad Ismail | bug-bounty-tips, bug-bounty, vulnerability, bug-bounty-writeup, sensitive-data | 25-Apr-2025 |
| How i found a RXSS by webpack | https://medium.com/@yubanbanz/how-i-found-a-rxss-by-webpack-7e2217a3976d?source=rss------bug_bounty-5 | yubanban | security, xss-attack, bug-bounty | 25-Apr-2025 |
| How to Find Hidden HackerOne & Bugcrowd Programs | https://medium.com/@ibtissamhammadi/how-to-find-hidden-hackerone-bugcrowd-programs-0149457cf048?source=rss------bug_bounty-5 | Ibtissam Hammadi | osint, hackerone, hacking, cybersecurity, bug-bounty | 25-Apr-2025 |
| Hunting Fileless Malware on Windows Systems | https://medium.com/@paritoshblogs/hunting-fileless-malware-on-windows-systems-2243d81b1e2d?source=rss------bug_bounty-5 | Paritosh | malware, hacking, bug-bounty, fileless-malware, cybersecurity | 25-Apr-2025 |
| Most Pro Hacker Adviced Beginners To Start with on VDP Program I Taked This Advice and After Three… | https://medium.com/@youssefmohamed_84205/most-pro-hacker-adviced-beginners-to-start-with-on-vdp-program-i-taked-this-advice-and-after-three-bbc216680b6f?source=rss------bug_bounty-5 | Youssef Mohamed | bug-bounty-tips, bug-bounty, bug-bounty-writeup, bugs, cybersecurity | 25-Apr-2025 |
| From Casual Curiosity to Crucial Findings: vibe pentesting uncovers serious vulnerabilities in… | https://medium.com/@kushjain0107/from-casual-curiosity-to-crucial-findings-vibe-pentesting-uncovers-serious-vulnerabilities-in-7c032383d227?source=rss------bug_bounty-5 | Kushal Jain | bug-bounty, bug-hunting, appsec, cybsersecurity, ethical-hacking | 25-Apr-2025 |
| The Fastest Way to Learn Web Hacking in 2025 (With Free Resources) | https://infosecwriteups.com/the-fastest-way-to-learn-web-hacking-in-2025-with-free-resources-88c8e74a3889?source=rss------bug_bounty-5 | Abhijeet Kumawat | chatgpt, cybersecurity, ai, hacking, bug-bounty | 25-Apr-2025 |
| Earn your First $5000 Bug-Bounty. | https://medium.com/@anandrishav2228/earn-your-first-5000-bug-bounty-c49495337ef0?source=rss------bug_bounty-5 | Rishav anand | active-directory, bug-bounty, cybersecurity, hacker, money | 25-Apr-2025 |
| Secret Sauce in Robots.txt — How I Found Hidden Admin Panels and Debug URLs | https://infosecwriteups.com/secret-sauce-in-robots-txt-how-i-found-hidden-admin-panels-and-debug-urls-b7e8a11ea36f?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, cybersecurity, money, infosec | 25-Apr-2025 |
| 10 Free Tools Every Beginner Bug Bounty Hunter Should Know (2025 Edition) | https://medium.com/@aashifm/10-free-tools-every-beginner-bug-bounty-hunter-should-know-2025-edition-571ce494d907?source=rss------bug_bounty-5 | 127.0.0.1 | bug-bounty, tools, burpsuite, exploitation, cybersecurity | 25-Apr-2025 |
| $500,000 Up for Grabs: STON.fi Launches a High-Stakes Bug Bounty Program on TON | https://medium.com/@lygophilea/500-000-up-for-grabs-ston-fi-launches-a-high-stakes-bug-bounty-program-on-ton-6a5a5b5b967f?source=rss------bug_bounty-5 | Lygoph_writes | defi, bug-bounty, cryptocurrency, hacking, web3 | 25-Apr-2025 |
| Mastering Linux Privilege Escalation: Part 3 — Advanced Exploits, NFS, and Real-World Strategy | https://medium.com/@verylazytech/mastering-linux-privilege-escalation-part-3-advanced-exploits-nfs-and-real-world-strategy-0ba8198f03dc?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, oscp-preparation, hacking, oscp, privilege-escalation | 25-Apr-2025 |
| Understanding Template Engines & Server-Side Template Injection (SSTI) | https://medium.com/@yashpawar1199/understanding-template-engines-server-side-template-injection-ssti-81ecf2fefc19?source=rss------bug_bounty-5 | Yash Pawar @HackersParadise | ssti-exploitation, penetration-testing, bug-bounty, ssti, web-hacking | 25-Apr-2025 |
| Web App Reconnaissance Like a Spy ️♂️: Tools & Techniques for 2025 | https://medium.com/@vipulsonule71/web-app-reconnaissance-like-a-spy-%EF%B8%8F-%EF%B8%8F-tools-techniques-for-2025-072032e31adf?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty-tips, bug-bounty, hacking, infosec, cybersecurity | 25-Apr-2025 |
| #ERROR! | https://medium.com/@zoningxtr/what-is-javascript-and-why-hackers-love-it-b6135b3d089e?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, web-development, cybersecurity, bug-bounty, javascript | 25-Apr-2025 |
| Red Team Recruitment Test | https://medium.com/@alirezamokhtari82/red-team-recruitment-test-899059166128?source=rss------bug_bounty-5 | Alireza Mokhtari | bug-bounty, red-team, hacking | 25-Apr-2025 |
| $5,000 Bounty: How iScan.today Helped Me Find a Verified GitHub Token with Org-Wide Write Access | https://medium.com/@arshadkazmi42/5-000-bounty-how-iscan-today-helped-me-find-a-verified-github-token-with-org-wide-write-access-615e999a0219?source=rss------bug_bounty-5 | Arshad Kazmi | bounties, github-token, iscan, bug-bounty, hackerone-report | 25-Apr-2025 |
| Before Code Runs: Understanding the JavaScript Execution Environment | https://medium.com/@zoningxtr/before-code-runs-understanding-the-javascript-execution-environment-fe79047926af?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, cybersecurity, penetration-testing, javascript, code-review | 25-Apr-2025 |
| Mastering HTTPS Traffic Interception in Flutter Using Burp Suite | https://hatemmohamedabdallah.medium.com/mastering-https-traffic-interception-in-flutter-using-burp-suite-13c02b968bf4?source=rss------bug_bounty-5 | Hatem Mohamed Abdallah | bug-bounty-writeup, mobile-security, bug-bounty, flutter, android-security | 25-Apr-2025 |
| Hidden Entrances: Where javascript: URLs Are Still Allowed | https://medium.com/@zoningxtr/hidden-entrances-where-javascript-urls-are-still-allowed-a52842c6aee6?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, web-development, penetration-testing, javascript, cybersecurity | 25-Apr-2025 |
| Burp Suite’s Latest Arsenal: AI Power, Smarter Scanning, and Workflow Wizard | https://bitpanic.medium.com/burp-suites-latest-arsenal-ai-power-smarter-scanning-and-workflow-wizard-42d54edf283f?source=rss------bug_bounty-5 | Spectat0rguy | technology, programming, bug-bounty, bug-bounty-tips, cybersecurity | 25-Apr-2025 |
| OOP in Programming | https://medium.com/@migo.ee0/oop-in-programming-bc0ca618db63?source=rss------bug_bounty-5 | Migo ee | oop, cyebrsecurity, programming, pentesting, bug-bounty | 25-Apr-2025 |
| Next.js Middleware Vulnerability: How CVE-2025–29927 Enables Authorization Bypass | https://medium.com/@nitinsgavane/next-js-middleware-vulnerability-how-cve-2025-29927-enables-authorization-bypass-1e0293d10e24?source=rss------bug_bounty-5 | Nitin Gavhane | middleware-vulnerability, authorization-bypass, nextjs, cve-2025-29927, bug-bounty | 25-Apr-2025 |
| From 403 Forbidden to PII Exposure: How I Escalated a Low-Severity Bug to a High P2 | https://medium.com/@arrasgotcha/from-403-forbidden-to-pii-exposure-how-i-escalated-a-low-severity-bug-to-a-high-p2-915a9b814ce6?source=rss------bug_bounty-5 | Gotcha1G | web, hackerone, hacking, development, bug-bounty | 25-Apr-2025 |
| Null Byte Injection Attack | https://medium.com/@adhamhashem2024/null-byte-injection-attack-a01de121e376?source=rss------bug_bounty-5 | Adham Hashem | vulnerability, penetration-testing, bug-bounty, cybersecurity, attack | 25-Apr-2025 |
| We share a pool of $500k in the Bug Bounty event | https://medium.com/@kiyotosage/we-share-a-pool-of-500k-in-the-bug-bounty-event-3adf9e9cce0b?source=rss------bug_bounty-5 | Kiyot0Sage | stonfi, bug-bounty, crypto | 25-Apr-2025 |
| Делим пул 500к$ в ивенте Bug Bounty | https://medium.com/@kiyotosage/%D0%B4%D0%B5%D0%BB%D0%B8%D0%BC-%D0%BF%D1%83%D0%BB-500%D0%BA-%D0%B2-%D0%B8%D0%B2%D0%B5%D0%BD%D1%82%D0%B5-bug-bounty-b48eabc3407c?source=rss------bug_bounty-5 | Kiyot0Sage | stonfi, crypto, bug-bounty | 25-Apr-2025 |
| A list of search engines for OSINT investigators and ethical hackers(PART 2) | https://medium.com/@loyalonlytoday/a-list-of-search-engines-for-osint-investigators-and-ethical-hackers-part-2-1dd7b3d54b6f?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, search-engines, hacking, bug-bounty, tips | 24-Apr-2025 |
| Hijacking Trust: The Parallels Between Use-After-Free and Insecure Deserialization | https://medium.com/@MasoudAbdaal/hijacking-trust-the-parallels-between-use-after-free-and-insecure-deserialization-a12c587a2987?source=rss------bug_bounty-5 | Masoud Abdaal | exploit, insecure-deserialization, bug-bounty, c-programming, heap-memory | 24-Apr-2025 |
| Arjun: The Ultimate Parameter Discovery Tool For Bug Hunters | https://medium.com/@lancersiromony/arjun-the-ultimate-parameter-discovery-tool-for-bug-hunters-6ead8aaf295b?source=rss------bug_bounty-5 | IronGhost | bug-bounty, querystring, hacking, arjun, fuzzing | 24-Apr-2025 |
| Bug Bounty: failure experience records | https://medium.com/@smilemil/bug-bounty-failure-experience-records-62e928efd54a?source=rss------bug_bounty-5 | smilemil | bug-bounty | 24-Apr-2025 |
| I Used AI to Write a Payload… And It Worked (Sort of) | https://infosecwriteups.com/i-used-ai-to-write-a-payload-and-it-worked-sort-of-55b6860d8be9?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, ai, hacking, chatgpt, bug-bounty | 24-Apr-2025 |
| From 0 to Hacker Hero | https://medium.com/@omkumar.coder/from-0-to-hacker-hero-e9b8b8c0d1af?source=rss------bug_bounty-5 | om kumar | bug-bounty, cybersecurity, hacking, penetration-testing, ctf | 24-Apr-2025 |
| Hostile Host Headers: How I Hijacked the App with One Sneaky Header | https://medium.com/@iski/hostile-host-headers-how-i-hijacked-the-app-with-one-sneaky-header-42c7dd82d2bc?source=rss------bug_bounty-5 | Iski | cybersecurity, money, infosec, hacking, bug-bounty | 24-Apr-2025 |
| Mastering Linux Privilege Escalation: Part 2 — Cron, Sudo, Kernel, and PATH Exploits | https://medium.com/@verylazytech/mastering-linux-privilege-escalation-part-2-cron-sudo-kernel-and-path-exploits-ace9404ecfec?source=rss------bug_bounty-5 | Very Lazy Tech | oscp, oscp-preparation, ethical-hacking, privilege-escalation, bug-bounty | 24-Apr-2025 |
| Hostile Host Headers: How I Hijacked the App with One Sneaky Header | https://infosecwriteups.com/hostile-host-headers-how-i-hijacked-the-app-with-one-sneaky-header-42c7dd82d2bc?source=rss------bug_bounty-5 | Iski | cybersecurity, money, infosec, hacking, bug-bounty | 24-Apr-2025 |
| How I’m Learning Web3.0(Blockchain) Bug Bounties from Scratch And Sharing Everything. | https://nitin-nitingutte-gutte.medium.com/how-im-learning-web3-blockchain-bug-bounties-from-scratch-and-sharing-everything-d8cf248121b4?source=rss------bug_bounty-5 | Nitin Gutte | solidity, blockchain, web3, bug-bounty, smart-contracts | 24-Apr-2025 |
| Bypassed the Invite Flow, Gained Admin Access | https://medium.com/@yassentaalab51/bypassed-the-invite-flow-gained-admin-access-d37347d57468?source=rss------bug_bounty-5 | Killua | web-security, bug-bounty-tips, penetration-testing, broken-access-control, bug-bounty | 24-Apr-2025 |
| How I Bypassed Template Escaping and Triggered a Reflected XSS Popup | https://medium.com/@zoningxtr/how-i-bypassed-template-escaping-and-triggered-a-reflected-xss-popup-9567d45fd31c?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, bug-bounty, penetration-testing, web-development, javascript | 24-Apr-2025 |
| Bug Hunting for Real: Tools, Tactics, and Truths No One Talks About | https://ehteshamulhaq198.medium.com/bug-hunting-for-real-tools-tactics-and-truths-no-one-talks-about-661f6786d5b3?source=rss------bug_bounty-5 | Ehtesham Ul Haq | writeup, bug-bounty, reconnaissance, rewards, penetration-testing | 24-Apr-2025 |
| Insecure Direct Object Reference (IDOR) in a Government Portal | https://akashxak.medium.com/insecure-direct-object-reference-idor-in-a-government-portal-973758a23473?source=rss------bug_bounty-5 | Akash kumar K | ethical-hacking, cert-in, idor-vulnerability, cybersecurity, bug-bounty | 24-Apr-2025 |
| How I Reported My First Vulnerability | https://medium.com/@0x004sec/how-i-reported-my-first-vulnerability-b4504ed77ec5?source=rss------bug_bounty-5 | 0x004sec | bug-bounty-tips, bug-bounty-writeup, xss-vulnerability, hackerone, bug-bounty | 24-Apr-2025 |
| Found a bug? Get rewarded! | https://medium.com/@roma_k90/found-a-bug-get-rewarded-94a922aa8ff9?source=rss------bug_bounty-5 | Roma | bug-bounty, ton, stonfi, ecosystem, money | 24-Apr-2025 |
| Нашёл баг — получил награду! | https://medium.com/@roma_k90/%D0%BD%D0%B0%D1%88%D1%91%D0%BB-%D0%B1%D0%B0%D0%B3-%D0%BF%D0%BE%D0%BB%D1%83%D1%87%D0%B8%D0%BB-%D0%BD%D0%B0%D0%B3%D1%80%D0%B0%D0%B4%D1%83-e936631f5e02?source=rss------bug_bounty-5 | Roma | news, money, smart-contracts, bug-bounty, stonfi | 24-Apr-2025 |
| Broken Access Control - Unauthorized users able to add customer | https://medium.com/@MrPlufy/broken-access-control-unauthorized-users-able-to-add-customer-fd8176343650?source=rss------bug_bounty-5 | Ahmad Tazkiarni Ramadhan | bug-bounty, cybersecurity, penetration-testing, bug-hunting, broken-access-control | 24-Apr-2025 |
| Inject, Exploit, Repeat: Real-World Adventures in XSS | https://medium.com/@es0557533/inject-exploit-repeat-real-world-adventures-in-xss-a8fd8f7066c8?source=rss------bug_bounty-5 | Isv | bug-bounty-tips, xss-attack, bug-bounty, cybersecurity, bug-bounty-writeup | 24-Apr-2025 |
| A list of search engines for OSINT investigators and ethical hackers(PART 1) | https://medium.com/@loyalonlytoday/a-list-of-search-engines-for-osint-investigators-and-ethical-hackers-part-1-4b035cfc271a?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, bug-bounty, hacking, osint, search-engines | 23-Apr-2025 |
| No rate limit | https://medium.com/@eng.mahmoudbughunter/no-rate-limit-dbb663690fe6?source=rss------bug_bounty-5 | mahmoud farag | penetration-testing, bug-bounty, hunting | 23-Apr-2025 |
| #ERROR! | https://medium.com/@zoningxtr/%EF%B8%8Fxss-prevention-101-why-using-value-keeps-your-javascript-secure-52d9e062ca13?source=rss------bug_bounty-5 | Zoningxtr | javascript, bug-bounty, penetration-testing, web-development, xss-attack | 23-Apr-2025 |
| How I Found Multiple Bugs On Dell Using Reconnaissance (OSINT) | https://medium.com/@root0x30/how-i-found-multiple-bugs-on-dell-using-reconnaissance-osint-b71e06fa9031?source=rss------bug_bounty-5 | Mohit_Negi | dell, reconnaissance, osint, bug-bounty, red-team | 23-Apr-2025 |
| Securing HTML Forms Against XSS: A Practical Guide with DOM Methods, Safe JavaScript, and… | https://medium.com/@zoningxtr/securing-html-forms-against-xss-a-practical-guide-with-dom-methods-safe-javascript-and-74596ebc9064?source=rss------bug_bounty-5 | Zoningxtr | web-development, bug-bounty, javascript, html, penetration-testing | 23-Apr-2025 |
| FOFA Recon for Hidden HackerOne & Bugcrowd Programs | https://medium.com/meetcyber/fofa-recon-for-hidden-hackerone-bugcrowd-programs-e285610bf8a5?source=rss------bug_bounty-5 | AbhirupKonwar | osint, bug-bounty-tips, infosec, bug-bounty-program, bug-bounty | 23-Apr-2025 |
| ❌ Top 10 Mistakes Beginners Make in Bug Bounty — Avoid These! | https://infosecwriteups.com/top-10-mistakes-beginners-make-in-bug-bounty-avoid-these-5140f8a5b22b?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, bug-bounty, infosec, cybersecurity, ai | 23-Apr-2025 |
| Account Takeover via Email Verification Logic Flaw | https://medium.com/@rolextital/account-takeover-via-email-verification-logic-flaw-a8755f2bc08f?source=rss------bug_bounty-5 | Rolextital | account-takeover, ethical-hacking, web-application-security, cybersecurity, bug-bounty | 23-Apr-2025 |
| Stored + Reflected XSS on Live Website! | https://medium.com/@Nextk/my-journey-from-being-sad-to-getting-a-xss-c0c6a59161f2?source=rss------bug_bounty-5 | Nextk | waf-detection, bug-bounty, filter-detection, xss-vulnerability, easy | 23-Apr-2025 |
| Ultimate Bug Bounty Roadmap 2025 — From Zero to Pro | https://mrblogger.medium.com/ultimate-bug-bounty-roadmap-2025-from-zero-to-pro-51373869a243?source=rss------bug_bounty-5 | Mr Blogger | ethical-hacking, cybersecurity, bug-bounty, books, bug-bounty-2025 | 23-Apr-2025 |
| Mastering Linux Privilege Escalation: Part 1 — The Fundamentals | https://medium.com/@verylazytech/mastering-linux-privilege-escalation-part-1-the-fundamentals-01e662e86b1b?source=rss------bug_bounty-5 | Very Lazy Tech | privilege-escalation, ethical-hacking, oscp, oscp-preparation, bug-bounty | 23-Apr-2025 |
| How to Find Your First Business Logic Vulnerability in a Bug Bounty Program | Step-by-Step Guide |… | https://medium.com/@shaikhminhaz1975/how-to-find-your-first-business-logic-vulnerability-in-a-bug-bounty-program-step-by-step-guide-17a6f9785c93?source=rss------bug_bounty-5 | Shaikh Minhaz | vulnerability, cybersecurity, ethical-hacking, penetration-testing, bug-bounty | 23-Apr-2025 |
| The Hidden Recon Routines That Don’t Show Up in Anyone’s Toolkit | https://myselfakash20.medium.com/the-hidden-recon-routines-that-dont-show-up-in-anyone-s-toolkit-0612511c8cc2?source=rss------bug_bounty-5 | Akash Ghosh | mindset, bug-bounty, cybersecurity, technology, bug-bounty-tips | 23-Apr-2025 |
| How to Create a Botnet Using One Tool: A Proof of Concept for Educational Purposes Aspiring… | https://infosecwriteups.com/how-to-create-a-botnet-using-one-tool-a-proof-of-concept-for-educational-purposes-aspiring-d5e7f3d6e10f?source=rss------bug_bounty-5 | Elie Attieh | bug-hunter, bug-bounty, penetration-testing, cybersecurity, botnet | 23-Apr-2025 |
| Exposing SMTP Misconfigurations: STARTTLS and Self-Signed Certs | https://mrdineshpathro.medium.com/exposing-smtp-misconfigurations-starttls-and-self-signed-certs-01e5ff9a3367?source=rss------bug_bounty-5 | Dinesh Pathro | bug-zero, bugs, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 23-Apr-2025 |
| Understanding CVEs and CVSS | https://medium.com/@sherlock297/understanding-cves-and-cvss-4f778f144aaa?source=rss------bug_bounty-5 | Ravindra Dagale | vulnerability, cvss, cve, cybersecurity, bug-bounty | 23-Apr-2025 |
| Burp, Bounce, and Break: How Web Cache Poisoning Let Me Control the App | https://infosecwriteups.com/burp-bounce-and-break-how-web-cache-poisoning-let-me-control-the-app-be173528ff8a?source=rss------bug_bounty-5 | Iski | infosec, cybersecurity, money, bug-bounty, hacking | 23-Apr-2025 |
| BB01 - Advanced Recon: Taking Your Subdomain Discovery to the Next Level | https://r4gh4v.medium.com/bb01-advanced-recon-taking-your-subdomain-discovery-to-the-next-level-0d2538d1f3a9?source=rss------bug_bounty-5 | r4gh4v | subdomains-enumeration, reconnaissance, hacker, bug-bounty, hackerone | 23-Apr-2025 |
| How I Was Able to Make $50 Using Only My Mobile Phone Through Information Disclosure By Google… | https://medium.com/@xhacking_z/how-i-was-able-to-make-50-using-only-my-mobile-phone-through-information-disclosure-by-google-a332a5a6e030?source=rss------bug_bounty-5 | Omar | my-first-bounty, bug-bounty, google-dorking, hackerone | 23-Apr-2025 |
| Michael Yonesi shares his Top 5 Cybersecurity Tips You Can’t Afford to Ignore | https://medium.com/@michael.yonesi/michael-yonesi-shares-his-top-5-cybersecurity-tips-you-cant-afford-to-ignore-5efc5e677ea7?source=rss------bug_bounty-5 | Michael Younsi | hacking, cybersecurity, bug-bounty, security | 23-Apr-2025 |
| Ethically hacking Android phones with Phonesploit | https://medium.com/@zishanfiroz/ethically-hacking-android-phones-with-phonesploit-b95924d50c89?source=rss------bug_bounty-5 | Md Zishan Firoz | cybersecurity, technology, hacking, bug-bounty | 23-Apr-2025 |
| Bug Bounty Recon: CIDR, ASN & Subdomain Enumeration Guide | https://sinhaamrit.medium.com/bug-bounty-recon-cidr-asn-subdomain-enumeration-guide-25c447af9c40?source=rss------bug_bounty-5 | Amrit Sinha | hacking, cybersecurity, tools, bug-bounty, networking | 23-Apr-2025 |
| Unauthorized Users Could Disclose Information and Execute GraphQL Operations After Permission… | https://medium.com/@blackarazi/unauthorized-users-could-disclose-information-and-execute-graphql-operations-after-permission-961094edf7c8?source=rss------bug_bounty-5 | Azhari Harahap | bug-bounty-writeup, websocket, application-security, bug-bounty, graphql | 23-Apr-2025 |
| One Root Cause, Many Faces: The 6 Silent CSRF That Got Buried | https://medium.com/@hamdiyasin135/one-root-cause-many-faces-the-6-silent-csrf-that-got-buried-2dec4472744a?source=rss------bug_bounty-5 | yassin hamdi | bug-bounty, csrf, hacking, cybersecurity | 23-Apr-2025 |
| $12,000 Bounty Won: Uncovering GitLab’s Hidden Data Leak Flaw | https://osintteam.blog/12-000-bounty-won-uncovering-gitlabs-hidden-data-leak-flaw-d623b6b3cff1?source=rss------bug_bounty-5 | Monika sharma | report, hacking, bug-bounty, technology, penetration-testing | 23-Apr-2025 |
| Directory Bruteforcing Techniques: Find Hidden Treasures in Websites ️ | https://medium.com/@vipulsonule71/directory-bruteforcing-techniques-find-hidden-treasures-in-websites-%EF%B8%8F-c11f2f14a7d3?source=rss------bug_bounty-5 | Vipul Sonule | hacking, cybersecurity, tech, bug-bounty, bug-bounty-tips | 23-Apr-2025 |
| Bypassing Modern WAFs: Techniques That Still Work ️ | https://medium.com/@vipulsonule71/bypassing-modern-wafs-techniques-that-still-work-%EF%B8%8F-35a6aec5f90f?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty-tips, bug-bounty, penetration-testing, hacking, cybersecurity | 23-Apr-2025 |
| How Android Works (And Why It Actually Matters If You Wanna Hack It) | https://medium.com/@muhammedshemil25/how-android-works-and-why-it-actually-matters-if-you-wanna-hack-it-d74ded88bac1?source=rss------bug_bounty-5 | Muhammed.shemil | mobile-security, ctf, bug-bounty, android-security, cybersecurity | 23-Apr-2025 |
| BB01 — Advanced Recon: Taking Your Subdomain Discovery to the Next Level | https://r4gh4v.medium.com/bb01-advanced-recon-taking-your-subdomain-discovery-to-the-next-level-0d2538d1f3a9?source=rss------bug_bounty-5 | r4gh4v | subdomains-enumeration, reconnaissance, hacker, bug-bounty, hackerone | 23-Apr-2025 |
| Phishing-Style Link Reflected on Microsoft Azure Portal — Not XSS, But Still Tricky | https://medium.com/@melege/phishing-style-link-reflected-on-microsoft-azure-portal-not-xss-but-still-tricky-559bde6f8252?source=rss------bug_bounty-5 | Ahmed AbdElmaqsoud | bug-bounty, security, azure, ux-design, phishing | 23-Apr-2025 |
| CSRF Vulnerability in EchoStar Company | https://medium.com/@youssefmohamed_84205/csrf-vulnerability-in-echostar-company-ffecbc6edc24?source=rss------bug_bounty-5 | Youssef Mohamed | bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 23-Apr-2025 |
️ How I Emulated a Real XSS Vulnerability with Just an ![]() Tag — A Practical Guide to… | https://medium.com/@zoningxtr/%EF%B8%8F-how-i-emulated-a-real-xss-vulnerability-with-just-an-img-tag-a-practical-guide-to-7fb69d4ec46f?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, xss-attack, web-development, javascript, bug-bounty | 23-Apr-2025 |
| learning how systems fall apart | https://medium.com/@orxxin/learning-how-systems-fall-apart-b7fd9e42bbb7?source=rss------bug_bounty-5 | or//in | bug-bounty, penetration-testing, learning, infosec | 23-Apr-2025 |
| One Root Cause, Many Faces: The 6 Silent CSRF That Got Buried | https://hamdiyasin135.medium.com/one-root-cause-many-faces-the-6-silent-csrf-that-got-buried-2dec4472744a?source=rss------bug_bounty-5 | yassin hamdi | bug-bounty, csrf, hacking, cybersecurity | 23-Apr-2025 |
| When System Information is Revealed Unknowingly!! | https://spider7.medium.com/silent-leaks-ketika-informasi-sistem-dibuka-tanpa-disadari-1b1343d7a1ae?source=rss------bug_bounty-5 | N/A | poc, bug-bounty, hacker, bug-bounty-tips | 22-Apr-2025 |
| How to Start Bug Bounty in 2025 (No Experience, No Problem) | https://infosecwriteups.com/how-to-start-bug-bounty-in-2025-no-experience-no-problem-89adc68da592?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, hacking, 2025, infosec, bug-bounty | 22-Apr-2025 |
| Spotting Beaconing Behaviour in Windows Systems: Analysing Timing Patterns in Network Connections | https://medium.com/@paritoshblogs/spotting-beaconing-behaviour-in-windows-systems-analysing-timing-patterns-in-network-connections-b41d187b346e?source=rss------bug_bounty-5 | Paritosh | network, beaconing, hacking, cybersecurity, bug-bounty | 22-Apr-2025 |
| How Did I Hack a Website Just by Reading Its JavaScript | https://medium.com/developersglobal/how-did-i-hack-a-website-just-by-reading-its-javascript-809f5f755e3d?source=rss------bug_bounty-5 | Ibtissam Hammadi | hacking, stored-xss, web-security, bug-bounty, javascript | 22-Apr-2025 |
| Why JWTs Valid After Logout: A Pentester’s Guide to Testing and Securing Tokens | https://medium.com/@dr34mb0y/why-jwts-valid-after-logout-a-pentesters-guide-to-testing-and-securing-tokens-6fb232fe57d9?source=rss------bug_bounty-5 | Sid Joshi | web-security, secure-coding, pentesting, bug-bounty, jwt-exploitation | 22-Apr-2025 |
| Why I’m Diving Into Android Pentesting in 2025 | https://medium.com/@muhammedshemil25/why-im-diving-into-android-pentesting-in-2025-c9c78c4f57ac?source=rss------bug_bounty-5 | Muhammed.shemil | android-pentesting, bug-bounty, ctf, mobile-security, ethical-hacking | 22-Apr-2025 |
| 404 to 0wnage: How a Broken Link Led Me to Admin Panel Access | https://infosecwriteups.com/404-to-0wnage-how-a-broken-link-led-me-to-admin-panel-access-2b58e1fffaa3?source=rss------bug_bounty-5 | Iski | infosec, bug-bounty, money, hacking, cybersecurity | 22-Apr-2025 |
| Privilege Escalation using Client-Side Path Traversal | https://aboalezz1.medium.com/privilege-escalation-using-client-side-path-traversal-e1d0762a966d?source=rss------bug_bounty-5 | Mohamed AboAlezz | cybersecurity, bugbounty-writeup, bug-bounty, ethical-hacking, bug-bounty-tips | 22-Apr-2025 |
| Why You’re Not Finding Bugs Yet — And How I’m Fixing It | https://medium.com/@k4r7h1kn/why-youre-not-finding-bugs-yet-and-how-i-m-fixing-it-072a84e4fcf4?source=rss------bug_bounty-5 | Karthikeyan | bug-zero, bugs, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 22-Apr-2025 |
| NTP — Port 123/UDP — How to exploit? | https://medium.com/@verylazytech/ntp-port-123-udp-how-to-exploit-051e82cdde08?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, penetration-testing, exploit, ntp | 22-Apr-2025 |
| Crack Into Cybersecurity: A Beginner’s Roadmap Powered by AI | https://medium.com/@aashish21/crack-into-cybersecurity-a-beginners-roadmap-powered-by-ai-f5dc949595a6?source=rss------bug_bounty-5 | Aashish Baweja | bug-bounty, hacking, artificial-intelligence, cybersecurity | 22-Apr-2025 |
| Why Did This Simple Bug Pay $5K in 24 Hours | https://medium.com/@ibtissamhammadi/why-did-this-simple-bug-pay-5k-in-24-hours-cc35a761ae12?source=rss------bug_bounty-5 | Ibtissam Hammadi | programming, bug-bounty, technology, cybersecurity, hacking | 22-Apr-2025 |
| Security Vulnerabilities in Autonomous AI Agents | https://fdzdev.medium.com/security-vulnerabilities-in-autonomous-ai-agents-26f905b2dc36?source=rss------bug_bounty-5 | Facundo Fernandez | bug-bounty, artificial-intelligence, ai-agent, cybersecurity, machine-learning | 22-Apr-2025 |
| CVE-2023-40723: Sensitive Information Disclosure in FortiSIEM via Crafted API Requests | https://medium.com/@knowingly_majesty_tortoise_414/cve-yyyy-xxxx-sensitive-information-disclosure-in-fortisiem-via-crafted-api-requests-10e2519fd90c?source=rss------bug_bounty-5 | Lance Yeaw | bug-bounty, security-research, security, fortinet, hacking | 22-Apr-2025 |
| Sensitive Data Exposure + Public Recon = Instant Account Takeover | https://medium.com/@GERRR4Y/sensitive-data-exposure-public-recon-instant-account-takeover-97c2ae752720?source=rss------bug_bounty-5 | Aya Ayman(GERR4Y) | bug-bounty, ato, osint | 22-Apr-2025 |
| From Curiosity to Report: My First Bug on a Live E-commerce Site | https://vux06.medium.com/from-curiosity-to-report-my-first-bug-on-a-live-e-commerce-site-dfa2dc46cd88?source=rss------bug_bounty-5 | Vux06 | bug-bounty, xss-attack, sql-injection, hacking, html-injection | 22-Apr-2025 |
| How I made $64k from deleted files — a bug bounty story | https://medium.com/@sharon.brizinov/how-i-made-64k-from-deleted-files-a-bug-bounty-story-c5bd3a6f5f9b?source=rss------bug_bounty-5 | Sharon Brizinov | github, hacking, bug-bounty, security | 22-Apr-2025 |
| Broken Logic, Free Features: A Deep Dive into Access Control Failures | https://medium.com/@es0557533/broken-logic-free-features-a-deep-dive-into-access-control-failures-7b5db28f0060?source=rss------bug_bounty-5 | Isv | bugbounty-writeup, bug-bounty, broken-access-control, bug-bounty-tips | 22-Apr-2025 |
| Day 12 Blind SQL injection with conditional errors — Zero to Hero Blind Injection — Portswigger | https://arayofhope7.medium.com/day-12-blind-sql-injection-with-conditional-errors-zero-to-hero-blind-injection-portswigger-e94f9e3977a5?source=rss------bug_bounty-5 | RayofHope | ethical-hacking, bug-bounty, cybersecurity, web-penetration-testing, penetration-testing | 22-Apr-2025 |
| CVE-2023-40723: Agent2Shellv2 | https://medium.com/@knowingly_majesty_tortoise_414/cve-yyyy-xxxx-sensitive-information-disclosure-in-fortisiem-via-crafted-api-requests-10e2519fd90c?source=rss------bug_bounty-5 | Lance Yeaw | bug-bounty, security-research, security, fortinet, hacking | 22-Apr-2025 |
| Bypass Verification Code in Reset Password Endpoint | https://firdausmuhammadismail.medium.com/bypass-verification-code-in-reset-password-endpoint-91c2fa97e27b?source=rss------bug_bounty-5 | Firdaus Muhammad Ismail | bypass, verification, bug-bounty-tips, bug-bounty, vulnerability | 21-Apr-2025 |
| Automated Shodan Recon (bug bounty) | https://medium.com/@loyalonlytoday/automated-shodan-recon-bug-bounty-776489cf8b6c?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, automation, cybersecurity, hacking, bug-bounty | 21-Apr-2025 |
| I Clicked a Random Button in Google Slides — Then Google Paid Me $2,240 | https://infosecwriteups.com/i-clicked-a-random-button-in-google-slides-then-google-paid-me-2-240-22e1c0ca0535?source=rss------bug_bounty-5 | Ibtissam Hammadi | google, technology, google-hacking, bug-bounty, cybersecurity | 21-Apr-2025 |
| The Tools I Use for Bug Bounty Hunting? | https://devprogramming.medium.com/the-tools-i-use-for-bug-bounty-hunting-5e544af7df44?source=rss------bug_bounty-5 | DevProgramming | cybersecurity, ethical-hacking, bug-bounty, infosec, hacking | 21-Apr-2025 |
| How I Found a Facebook IDOR Bug in 15 Minutes (And How You Can Too) | https://medium.com/@ibtissamhammadi/how-i-found-a-facebook-idor-bug-in-15-minutes-and-how-you-can-too-3ca4c6378b7c?source=rss------bug_bounty-5 | Ibtissam Hammadi | ethical-hacking, cybersecurity, idor, facebook-security, bug-bounty | 21-Apr-2025 |
| [Vulnerability Campaign] Protect TECNO devices | https://medium.com/@security.tecno/vulnerability-campaign-protect-tecno-devices-070e2324175a?source=rss------bug_bounty-5 | TECNO Security | bug-bounty, hacking, security, report | 21-Apr-2025 |
| Authentication Bypass Using Logic Flaws — Real Example + Fixes | https://infosecwriteups.com/authentication-bypass-using-logic-flaws-real-example-fixes-f80f66587b2c?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacker, ai, cybersecurity, infosec, bug-bounty | 21-Apr-2025 |
| ️ Hacking and Securing Kubernetes: A Deep Dive into Cluster Security | https://infosecwriteups.com/%EF%B8%8F-hacking-and-securing-kubernetes-a-deep-dive-into-cluster-security-f84436f6544a?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, bug-bounty, kubernetes, penetration-testing, information-security | 21-Apr-2025 |
| Stored XSS Led to OAuth App Credential Theft and Info Disclosure | https://ehteshamulhaq198.medium.com/stored-xss-led-to-oauth-app-credential-theft-and-info-disclosure-85545fca3948?source=rss------bug_bounty-5 | Ehtesham Ul Haq | xss-attack, bug-bounty-tips, bug-bounty, penetration-testing, infosec | 21-Apr-2025 |
| ✅ JWT Security Testing Test Cases | https://infosecwriteups.com/jwt-security-testing-test-cases-80db5ba4e8a1?source=rss------bug_bounty-5 | Ajay Naik | jwt, penetration-testing, cybersecurity, bug-bounty, information-security | 21-Apr-2025 |
| $1,200 Bounty — IDOR via Phantom API and Parameter Manipulation | https://medium.com/@cadeeper/1-200-bounty-idor-via-phantom-api-and-parameter-manipulation-1f9a9d84f467?source=rss------bug_bounty-5 | Invik | pentesting, cybersecurity, bug-bounty, hacking, bug-bounty-writeup | 21-Apr-2025 |
| ️ The JSON Backdoor: How I Exploited Insecure Deserialization for RCE | https://infosecwriteups.com/%EF%B8%8F-the-json-backdoor-how-i-exploited-insecure-deserialization-for-rce-1d8aa4130564?source=rss------bug_bounty-5 | Iski | hacking, money, infosec, cybersecurity, bug-bounty | 21-Apr-2025 |
| Find first Bug [Simple But Critical Bug] That gives you a lot of Bounty | https://medium.com/@hrofficial62/find-first-bug-simple-but-critical-bug-that-gives-you-a-lot-of-bounty-93b4107ffd82?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, hacking, cybersecurity, ethical-hacking, penetration-testing | 21-Apr-2025 |
| Hunting in the labyrinth: Your edge lies in understanding business contex | https://medium.com/@luthierc/hunting-in-the-labyrinth-your-edge-lies-in-understanding-business-contex-bebeced6dca2?source=rss------bug_bounty-5 | Luthierc | technology, cybersecurity, bug-bounty, owasp, business | 21-Apr-2025 |
| Open Redirect Vulnerabilities: How Small Bugs Lead to Big Rewards | https://medium.com/@vipulsonule71/open-redirect-vulnerabilities-how-small-bugs-lead-to-big-rewards-8d925553dabd?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, hacking-tools, hacking, bug-bounty-tips, bug-bounty | 21-Apr-2025 |
| ️ Breaking the Chain of Command: A Critical Team Management DoS via Role Update Abuse | https://medium.com/@nhlimon37/%EF%B8%8F-breaking-the-chain-of-command-a-critical-team-management-dos-via-role-update-abuse-94c1188629b9?source=rss------bug_bounty-5 | NH Limon ️ | bug-bounty | 21-Apr-2025 |
| How I Changed Other Users’ Names on a data integration platform’s team management system as an… | https://medium.com/@nhlimon37/how-i-changed-other-users-names-on-a-data-integration-platform-s-team-management-system-as-an-6a47cb98d0e1?source=rss------bug_bounty-5 | NH Limon ️ | bug-bounty | 21-Apr-2025 |
| Web Shells: The Hidden Backdoors Lurking in Your Server | https://medium.com/@zrhmz12/web-shells-the-hidden-backdoors-lurking-in-your-server-3ccd3ca8e736?source=rss------bug_bounty-5 | Zrhmz | file-upload-vulnerability, penetration-testing, webshell, bug-bounty, vulnerability | 21-Apr-2025 |
| The Blank Page That Hid a Bug | https://infosecwriteups.com/when-a-blank-page-that-hid-a-bug-c0214390d68c?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | hacking, bug-bounty, programming, cybersecurity, vulnerability | 21-Apr-2025 |
| Next.js CVE-2025–29927 hackinghub walkthrough | https://medium.com/@abhishek-ji/next-js-cve-2025-29927-hackinghub-walkthrough-f7893cdd90c4?source=rss------bug_bounty-5 | Abhishek Gupta | cybersecurity, bug-bounty-tips, bug-bounty, nextjs, web-development | 21-Apr-2025 |
| Stop Paying for Dozens of Subdomain Tools and Do All Your Enumeration and Recon in One Place | https://medium.com/@alexandrevandammepro/stop-paying-for-dozens-of-subdomain-tools-and-do-all-your-enumeration-and-recon-in-one-place-19412c592375?source=rss------bug_bounty-5 | Alexandre Vandamme | bugbounty-tips, technology, bug-bounty, cybersecurity, infosec | 21-Apr-2025 |
| That One Time a Forgotten Endpoint Earned Me $$$$$ | https://medium.com/@dhirenkumar/that-one-time-a-forgotten-endpoint-earned-me-5367838d3ea8?source=rss------bug_bounty-5 | pradhan | infosec, cybersecurity, hacking, bug-bounty, writeup | 20-Apr-2025 |
| MOBSF Installation Guide 2025 Apple Silicons MACS | https://medium.com/offensive-black-hat-hacking-security/mobsf-installation-guide-2025-apple-silicons-macs-0f4718f15004?source=rss------bug_bounty-5 | Harshad Shah | cybersecurity, bug-bounty, mobile, mobile-apps, penetration-testing | 20-Apr-2025 |
| Finding a Password Bypass on Instagram in less than 3 days | https://medium.com/@hacktheplanet/finding-a-password-bypass-on-instagram-in-less-than-3-days-b84569c242ce?source=rss------bug_bounty-5 | SirHaxAlot | instagram, sirhaxalot, bug-bounty, ethical-hacking | 20-Apr-2025 |
| The $12,000 Redirect, a Misconfigured URL | https://medium.com/@dhirenkumar/the-12-000-redirect-a-misconfigured-url-f27cba89b622?source=rss------bug_bounty-5 | pradhan | bug-bounty, hacking, cybersecurity, infosec, writeup | 20-Apr-2025 |
| The Critical Role of Information Security Across the Software Development Lifecycle (SDLC) | https://medium.com/@rezauditore/the-critical-role-of-information-security-across-the-software-development-lifecycle-sdlc-1e69fc1f59b6?source=rss------bug_bounty-5 | rezauditore | programming, hacking, bug-bounty, sdlc, software-development | 20-Apr-2025 |
| Chaining Bugs Like a Hacker: IDOR to Account Takeover in 10 Minutes | https://infosecwriteups.com/chaining-bugs-like-a-hacker-idor-to-account-takeover-in-10-minutes-db0cba198007?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, hacking, bug-bounty, ai, cybersecurity | 20-Apr-2025 |
| Get a Free Ubuntu VPS Forever for Your Projects with Superfast Internet | https://r4gh4v.medium.com/get-a-free-ubuntu-vps-forever-for-your-projects-with-superfast-internet-06259b8777f1?source=rss------bug_bounty-5 | r4gh4v | linux, bug-bounty, vps-hosting, hacking, vps | 20-Apr-2025 |
| $1000 Bounty Won: The Amazing Win | https://infosecwriteups.com/1000-bounty-won-the-amazing-win-22da06954089?source=rss------bug_bounty-5 | Monika sharma | hacking, bug-bounty, bug-bounty-tips, report, technology | 20-Apr-2025 |
| Winning Swags and Hall of Fame for Finding bugs. | https://infosecwriteups.com/winning-swags-and-hall-of-fame-for-finding-bugs-7402555fefe3?source=rss------bug_bounty-5 | RivuDon | bug-bounty-hunter, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 20-Apr-2025 |
| How I Hijacked OAuth Tokens Through a Parallel Auth Flow Race Condition — $8500 P1 Bug Bounty | https://infosecwriteups.com/how-i-hijacked-oauth-tokens-through-a-parallel-auth-flow-race-condition-8500-p1-bug-bounty-7af1cccc4d4c?source=rss------bug_bounty-5 | Anmol Singh Yadav | bug-bounty, hacking, bug-bounty-writeup, bug-bounty-tips | 20-Apr-2025 |
| The Brain Left Unlocked: Public etcd and the Risks Beneath Kubernetes | https://medium.com/@nijina7/the-brain-left-unlocked-public-etcd-and-the-risks-beneath-kubernetes-3e6dd122a9c5?source=rss------bug_bounty-5 | Nijin K | bug-bounty-tips, bug-bounty, etcd, hacking, ethical-hacking | 20-Apr-2025 |
| Email Verification Bypass via Sign in with Google | https://xsametyigit.medium.com/email-verification-bypass-via-sign-in-with-google-a273827c4968?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-tips, bug-bounty, ödülavcılığı, bug-bounty-writeup | 20-Apr-2025 |
| Nothing changed… except for one detail. And that was enough to hack | https://medium.com/@phoenixcatalan/nothing-changed-except-for-one-detail-and-that-was-enough-to-hack-791f0f8bc8cb?source=rss------bug_bounty-5 | phoenixcatalan | bug-bounty-tips, bug-bounty, portswigger, hacking, ethical-hacking | 20-Apr-2025 |
| Tricking system to delete any user account: from informative to 4000$ HIGH Bounty | https://entropydrifter.medium.com/tricking-system-to-delete-any-user-account-from-informative-to-4000-high-bounty-245944d4eaa9?source=rss------bug_bounty-5 | Abdullah Ahmed aka entropydrifter | bug-bounty, hackerone, bug-bounty-tips, bug-bounty-writeup | 20-Apr-2025 |
| How a Smart Bug Hunter Found a Big Security Hole in MTN Group | https://osintteam.blog/how-a-smart-bug-hunter-found-a-big-security-hole-in-mtn-group-64d661124f51?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, report, hacking, technology, bug-bounty-tips | 20-Apr-2025 |
| How a Stupid Public Link Opened a Massive Data Exposure (Real Case | https://medium.com/@Nigga_Hitam/how-a-stupid-public-link-opened-a-massive-data-exposure-real-case-1b1f75846f6c?source=rss------bug_bounty-5 | Nigga_hitam | cybersecurity, bug-bounty | 20-Apr-2025 |
| picoCTF Web Exploitation: picobrowser | https://medium.com/@Kamal_S/picoctf-web-exploitation-picobrowser-ce806dfedd2f?source=rss------bug_bounty-5 | Kamal S | bug-bounty, picoctf, ctf, security-testing, picobrowser | 20-Apr-2025 |
| MSRPC — Port 135, 539 — How to exploit? | https://medium.com/@verylazytech/msrpc-port-135-539-how-to-exploit-1e14a8b8006b?source=rss------bug_bounty-5 | Very Lazy Tech | msrpc, penetration-testing, ethical-hacking, hacking, bug-bounty | 20-Apr-2025 |
| Lab: Exploiting an API endpoint using documentation | https://mukibas37.medium.com/lab-exploiting-an-api-endpoint-using-documentation-0a74ce7b7118?source=rss------bug_bounty-5 | Mukilan Baskaran | hacking, bug-bounty, security, ethical-hacking, cybersecurity | 20-Apr-2025 |
| Escalating Impact: Full Account Takeover in Microsoft via XSS in Login Flow | https://melotover.medium.com/escalating-impact-full-account-takeover-in-microsoft-via-xss-in-login-flow-f160fa79b008?source=rss------bug_bounty-5 | Asem Eleraky | account-takeover, cybersecurity, cross-site-scripting, xss-attack, bug-bounty | 20-Apr-2025 |
| ️ Rate Limiting: The Unsung Guardian of Web Applications | https://medium.com/@sachinpv2004/%EF%B8%8F-rate-limiting-the-unsung-guardian-of-web-applications-37a52a96a320?source=rss------bug_bounty-5 | SACHIN PV | cybersecurity, bug-bounty, red-team, pentesting, rate-limiting | 20-Apr-2025 |
| HTTP Parameter Pollution: The Dirty Little Secret That Gave Me Full Backend Access ️ | https://infosecwriteups.com/http-parameter-pollution-the-dirty-little-secret-that-gave-me-full-backend-access-%EF%B8%8F-f7777c569648?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, money, infosec, hacking | 20-Apr-2025 |
| Lab: Exploiting an API endpoint using documentation | https://infosecwriteups.com/lab-exploiting-an-api-endpoint-using-documentation-0a74ce7b7118?source=rss------bug_bounty-5 | Mukilan Baskaran | hacking, bug-bounty, security, ethical-hacking, cybersecurity | 20-Apr-2025 |
| Cyber Kalki Nexus Subdomain WebScanner Pro The Ultimate Free Web Subdomain Discovery Tool for… | https://medium.com/@krivadna/cyber-kalki-nexus-subdomain-webscanner-pro-the-ultimate-free-web-subdomain-discovery-tool-for-3d59d7f645a2?source=rss------bug_bounty-5 | Krivadna | infosec, bug-bounty, bugbounty-writeup, subdomains-enumeration, cybersecurity | 20-Apr-2025 |
| Mastering Logic Bugs: A Checklist for Bug Hunters — Part 4 (tips from Pro hunters) | https://medium.com/@mahdisalhi0500/mastering-logic-bugs-a-checklist-for-bug-hunters-part-4-tips-from-pro-hunters-b098618c67ca?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | bug-bounty, penetration-testing, information-security, cybersecurity, hacking | 20-Apr-2025 |
| A list of good wordlists for bug bounty hunters | https://medium.com/@loyalonlytoday/a-list-of-good-wordlists-for-bug-bounty-hunters-7a6562df2aba?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, penetration-testing, wordlist, ethical-hacking, bug-bounty | 19-Apr-2025 |
| Exposed Secrets in JavaScript Files | https://medium.com/@Abhijeet_kumawat_/exposed-secrets-in-javascript-files-430a76834952?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, hacking, cybersecurity, javascript, ai | 19-Apr-2025 |
| Buy Any Product for Free via Price Tampering | https://medium.com/@shyam.sam0704/buy-any-product-for-free-via-price-tampering-75326ff7a767?source=rss------bug_bounty-5 | Shyam | vulnerability-assessment, bug-hunting, bug-bounty, burpsuite, price-tampering | 19-Apr-2025 |
| Reflected XSS using Bookmark | https://infosecwriteups.com/reflected-xss-using-bookmark-937cf27c5725?source=rss------bug_bounty-5 | cryptoshant | journey, hacking, cybersecurity, samsung, bug-bounty | 19-Apr-2025 |
| Exposed Secrets in JavaScript Files | https://infosecwriteups.com/exposed-secrets-in-javascript-files-430a76834952?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, hacking, cybersecurity, javascript, ai | 19-Apr-2025 |
| What Is a JavaScript Attribute? | https://medium.com/@zoningxtr/what-is-a-javascript-attribute-e6b4e5b6317c?source=rss------bug_bounty-5 | Zoningxtr | html, javascript, bug-bounty, penetration-testing, cybersecurity | 19-Apr-2025 |
| Programming Language for Ethical Hacking | https://infosecwriteups.com/programming-language-for-ethical-hacking-67eb8b211759?source=rss------bug_bounty-5 | Mr Horbio | hacking, programming, bug-bounty, ethical-hacking, cybersecurity | 19-Apr-2025 |
| Understanding Session Cookies and Authentication Tokens | https://medium.com/@sachinpv2004/understanding-session-cookies-and-authentication-tokens-452bd4cc332a?source=rss------bug_bounty-5 | SACHIN PV | bug-bounty, hacking, pentesting, cybersecurity, sessions | 19-Apr-2025 |
| Hidden in Plain Sight: How Sitemap.xml Gave Me Access to Gold | https://medium.com/@iski/hidden-in-plain-sight-how-sitemap-xml-gave-me-access-to-gold-101fc0e0bf1e?source=rss------bug_bounty-5 | Iski | infosec, money, hacking, cybersecurity, bug-bounty | 19-Apr-2025 |
| How I Registered the Same Username Twice — No Tools Needed | https://strangerwhite.medium.com/how-i-registered-the-same-username-twice-no-tools-needed-284f3b46d82a?source=rss------bug_bounty-5 | StrangeRwhite | bug-bounty-writeup, infosec, hacking, bug-bounty-tips, bug-bounty | 19-Apr-2025 |
| How to detect and exploit OS Command injection | https://medium.com/@evyeveline1/how-to-detect-and-exploit-os-command-injection-a5d4d2423ead?source=rss------bug_bounty-5 | Evyeveline | bug-bounty, os-command-injection, web-hacking, ethical-hacking, web-vulnerabilities | 19-Apr-2025 |
| Business Logic Flaw worth $1250 | https://vijetareigns.medium.com/business-logic-flaw-worth-1250-35efcd1b9af9?source=rss------bug_bounty-5 | the_unlucky_guy | hacking, bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup | 19-Apr-2025 |
| When “One‑Time” Isn’t One‑Time: How a Simple OTP bypass gave me Platform-Wide Account Takeover | https://medium.com/@ali.mezar/when-one-time-isnt-one-time-how-a-simple-otp-bypass-gave-me-platform-wide-account-takeover-0554bbd39dbc?source=rss------bug_bounty-5 | Ali Mezar | web-security, rate-limiting, account-takeover, bug-bounty, otp-bypass | 19-Apr-2025 |
| SQL injection UNION attack, retrieving multiple values in a single column — PortSwigger | https://arayofhope7.medium.com/sql-injection-union-attack-retrieving-multiple-values-in-a-single-column-portswigger-65d850e9cc8e?source=rss------bug_bounty-5 | RayofHope | cybersecurity, ethical-hacking, web-penetration-testing, penetration-testing, bug-bounty | 19-Apr-2025 |
| HTML Tags and Their JavaScript-Interactive Attributes ✨ | https://medium.com/@zoningxtr/html-tags-and-their-javascript-interactive-attributes-7534e7de0cb1?source=rss------bug_bounty-5 | Zoningxtr | html, penetration-testing, cybersecurity, bug-bounty, javascript | 19-Apr-2025 |
| NetBios — Port 137,138,139 — How to exploit? | https://medium.com/@verylazytech/netbios-port-137-138-139-how-to-exploit-4c0f81af3b94?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, netbios, hacking, ethical-hacking, penetration-testing | 19-Apr-2025 |
| From Curiosity to Shell phpinfo() | https://medium.com/@dhirenkumar/from-curiosity-to-shell-phpinfo-fa7a7b7e5d22?source=rss------bug_bounty-5 | pradhan | cybersecurity, bug-bounty, tips, infosec, hacking | 19-Apr-2025 |
| How I Passed the eJPT Certification: Complete Journey | https://medium.com/@vipulsonule71/how-i-passed-the-ejpt-certification-complete-journey-a0d3a1206c06?source=rss------bug_bounty-5 | Vipul Sonule | tech, cybersecurity, bug-bounty, hacking, medium | 19-Apr-2025 |
| “How I Found a Privilege Escalation Bug by Accident and Earned $830” | https://medium.com/@saddamzzz65/how-i-found-a-privilege-escalation-bug-by-accident-and-earned-830-af15a35dc3d8?source=rss------bug_bounty-5 | Saddamzzz | ethical-hacking, bug-bounty, cybersecurity, web-security, infosec | 19-Apr-2025 |
| Android Application Analysis: Tools, Techniques and Tips | https://medium.com/@mayank_prajapati/android-application-analysis-tools-techniques-and-tips-435dcf144c9c?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | cybersecurity, penetration-testing, ethical-hacking, bug-bounty, android | 19-Apr-2025 |
| UI Says No to Email Change, Backend Says ‘Sure, Why Not?’” | https://medium.com/@a0xtrojan/ui-says-no-to-email-change-backend-says-sure-why-not-cff45b3cfe3c?source=rss------bug_bounty-5 | A0X_Trojan | bug-bounty, bussiness-logic-error, penetration-testing, medium, hackerone | 19-Apr-2025 |
| Blind SQL injection with conditional responses — Zero to Hero Blind Injection — Portswigger | https://arayofhope7.medium.com/blind-sql-injection-with-conditional-responses-zero-to-hero-blind-injection-portswigger-dad0cab48d57?source=rss------bug_bounty-5 | RayofHope | ethical-hacking, bug-bounty, web-penetration-testing, cybersecurity, penetration-testing | 19-Apr-2025 |
| All about Multi-factor Authentication | https://hassanjawaid.medium.com/all-about-multi-factor-authentication-a131d6c20bf5?source=rss------bug_bounty-5 | Hassan Jawaid | bug-bounty-writeup, bug-bounty | 19-Apr-2025 |
| Aswan CTF Web challenges: Yaoguai Bank | https://medium.com/@karim.engmohamed/aswan-ctf-web-challenges-yaoguai-bank-606d6dd6dd27?source=rss------bug_bounty-5 | Karim Mohamed | ctf, web, ctf-writeup, ctf-walkthrough, bug-bounty | 18-Apr-2025 |
| The Hidden Dangers of an Exposed .env File | https://medium.com/@dharineeshj2/the-hidden-dangers-of-an-exposed-env-file-80532158c6f0?source=rss------bug_bounty-5 | Hack-Bat | bug-bounty, penetration-testing, hacking, cybersecurity, red-team | 18-Apr-2025 |
| Burp Suite Beyond Basics: Hidden Features That Save Time and Find More Bugs | https://infosecwriteups.com/burp-suite-beyond-basics-hidden-features-that-save-time-and-find-more-bugs-19f15bb3bcc3?source=rss------bug_bounty-5 | Abhijeet Kumawat | secrets, bug-bounty, cybersecurity, burpsuite, hacking | 18-Apr-2025 |
| How I Earned $300 from a Single Rate Limiting Vulnerability — Twice! | https://medium.com/@whitehat29/how-i-earned-300-from-a-single-rate-limiting-vulnerability-twice-224b4be29fd0?source=rss------bug_bounty-5 | Whitehat | bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty, cybersecurity | 18-Apr-2025 |
| What Bugs you can find as a Beginner | https://medium.com/@aashifm/what-bugs-you-can-find-as-a-beginner-e016b5d535d4?source=rss------bug_bounty-5 | 127.0.0.1 | cybersecurity, idor, bug-bounty, open-redirect, bugs | 18-Apr-2025 |
| Hours of Recon, One Vulnerable Parameter, and Boom — SQL Injection Found. | https://hiddendom.medium.com/hours-of-recon-one-vulnerable-parameter-and-boom-sql-injection-found-e7f2bb74d423?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-tips, bug-bounty-writeup, sql-injection-attack, sql-injection, bug-bounty | 18-Apr-2025 |
| Bypassing Like a Pro: How I Fooled the WAF and Made It Pay | https://infosecwriteups.com/bypassing-like-a-pro-how-i-fooled-the-waf-and-made-it-pay-e433193e1d9d?source=rss------bug_bounty-5 | Iski | money, cybersecurity, bug-bounty, hacking, infosec | 18-Apr-2025 |
| Recon Search Assistant | https://medium.com/@bobby.S/recon-search-assistant-d8506fdc8484?source=rss------bug_bounty-5 | 0xBobby | bug-bounty-tips, bug-bounty-writeup, bug-bounty, penetration-testing, google-dork | 18-Apr-2025 |
| Checking for SSL Medium Strength Cipher Suites Supported | https://medium.com/@toon.commander/checking-for-ssl-medium-strength-cipher-suites-supported-2a27b1c021c2?source=rss------bug_bounty-5 | Jormungandr | pentest, vulnerability, exploit, bug-bounty | 18-Apr-2025 |
| WAF Bypass Masterclass: Using SQLMap with Proxychains and Tamper Scripts Against Cloudflare &… | https://infosecwriteups.com/waf-bypass-masterclass-using-sqlmap-with-proxychains-and-tamper-scripts-against-cloudflare-9d46b36bae94?source=rss------bug_bounty-5 | coffinxp | cybersecurity, hacking, bug-bounty, programming, technology | 18-Apr-2025 |
| Automating GraphQL Bug Bounty Hunting with GrapeQL | https://infosecwriteups.com/automating-graphql-bug-bounty-hunting-with-grapeql-e1e874f11c7c?source=rss------bug_bounty-5 | Aleksa Zatezalo | software-development, bug-bounty, graphql, hacking, github | 18-Apr-2025 |
| Rethinking Deserialization Attacks: Chaining Cloudpickle with Pandas & NumPy | https://medium.com/@kerkroups/rethinking-deserialization-attacks-chaining-cloudpickle-with-pandas-numpy-cadebb52b69f?source=rss------bug_bounty-5 | Kerkroups | cybersecurity, application-security, bug-bounty, penetration-testing | 18-Apr-2025 |
| Click Jacking Impact Privilage Escalation | https://firdausmuhammadismail.medium.com/click-jacking-impact-privilage-escalation-585918563f52?source=rss------bug_bounty-5 | Firdaus Muhammad Ismail | bug-bounty-writeup, clickjacking, vulnerability, bug-bounty, poc | 18-Apr-2025 |
| SMB — Port 139 445 — How to exploit? | https://medium.com/@verylazytech/smb-port-139-445-how-to-exploit-8a1580797bc0?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, smb, penetration-testing, port-445, bug-bounty | 18-Apr-2025 |
| Earn Money by Discovering Bugs | https://medium.com/@2000anujsharma/earn-money-by-discovering-bugs-b434b95ac2b7?source=rss------bug_bounty-5 | Let's code | infosec, cybersecurity, ethical-hacking, makemoney-online, bug-bounty | 18-Apr-2025 |
| Secret to find bugs in five minutes. Juicy reality. | https://medium.com/@riazrabia/secret-to-find-bugs-in-five-minutes-juicy-reality-c7ed63cf26a8?source=rss------bug_bounty-5 | Rabia Riaz | easy-bugs, bug-bounty-writeup, bug-bounty-tips, bug-bounty, bug-in-5-minutes | 18-Apr-2025 |
| Light CTF Write-up: A Deep Dive into SQLite Injection and Enumeration | https://medium.com/@shxdowz/light-ctf-write-up-a-deep-dive-into-sqlite-injection-and-enumeration-f0253a63171d?source=rss------bug_bounty-5 | Shxdowz | tryhackme-walkthrough, bug-bounty, tryhackme, sql-injection, writeup | 18-Apr-2025 |
| I need your support | https://medium.com/@t79877005/i-need-your-support-02984632fd9b?source=rss------bug_bounty-5 | Rester Test | chrome, bug-bounty, software-testing, bugs | 18-Apr-2025 |
| Pre-Account Takeover: The Account Hack You Never Saw Coming | https://medium.com/@sachinpv2004/pre-account-takeover-the-account-hack-you-never-saw-coming-25eb518b34f1?source=rss------bug_bounty-5 | SACHIN PV | cybersecurity, bug-bounty, account-takeover, pentesting, security | 18-Apr-2025 |
| Why You Shouldn’t Share Your Dreams With Everyone — SOCIAL EXPERIMENT | https://medium.com/@ph4nt0mbyt3/why-you-shouldnt-share-your-dreams-with-everyone-social-experiment-e7aae670ab02?source=rss------bug_bounty-5 | ph4nt0mbyt3 | bug-bounty, motivation | 18-Apr-2025 |
| How to Find Hidden APIs and Abuse Them in Web Apps | https://medium.com/@vipulsonule71/how-to-find-hidden-apis-and-abuse-them-in-web-apps-42bd8cd91552?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, technology, hacking, ethical-hacking, cybersecurity | 18-Apr-2025 |
| ⚠️ CVE-2025-24054: Actively Exploited Vulnerability Stealing NTLM Credentials – What You Need to… | https://chintalatarakaram.medium.com/%EF%B8%8F-cve-2025-24054-actively-exploited-vulnerability-stealing-ntlm-credentials-what-you-need-to-631ac46f45e3?source=rss------bug_bounty-5 | Chintala Taraka Ram | bug-bounty-writeup, bug-bounty, hacking, cybersecurity, bug-bounty-tips | 18-Apr-2025 |
| Header-Fusion | https://medium.com/@bineeg/header-fusion-3c11da41582e?source=rss------bug_bounty-5 | bineeg | idor-vulnerability, infosec, bug-bounty, hacking-tools | 18-Apr-2025 |
| Race condtion & Logic Bug lead to Pre-ATO | https://medium.com/@yassentaalab51/race-condtion-logic-bug-lead-to-pre-ato-4fb85dfb4bcc?source=rss------bug_bounty-5 | Killua | owasp, bug-bounty, penetration-testing, race-condition, bug-bounty-tips | 18-Apr-2025 |
| F5 BIGIP PROMO CODES- UDEMY | https://medium.com/@deepdive4learn/f5-bigip-promo-codes-udemy-6ed8534d230d?source=rss------bug_bounty-5 | DeepDive4learn | bug-bounty, web-development, cybersecurity, python-programming, udemy | 18-Apr-2025 |
| The One Parameter That Changed Everything /api/v1 | https://medium.com/@dhirenkumar/the-one-parameter-that-changed-everything-api-v1-2747e3b83f84?source=rss------bug_bounty-5 | Dhiren Kumar Pradhan | hacking, bug-bounty, infosec, cybersecurity | 17-Apr-2025 |
| Detecting Credential Dumping with Windows Built-In Tools | https://medium.com/@paritoshblogs/detecting-credential-dumping-with-windows-built-in-tools-b51b8eb6f8ca?source=rss------bug_bounty-5 | Paritosh | bug-bounty, cybersecurity, credentials, information-technology, hacking | 17-Apr-2025 |
| Slow HTTP Denial of Service Attack Pada Subdomain kawasaki.co.id | https://medium.com/@ricoandreas19/slow-http-denial-of-service-attack-pada-subdomain-kawasaki-co-id-7dca9a319057?source=rss------bug_bounty-5 | Rico Andreas | bug-bounty, denial-of-service-attack, slow-loris, kawasaki-indonesia | 17-Apr-2025 |
| ☠️The Ultimate Subdomain Enumeration Guide: Tools, Tricks, and Hidden Secrets | https://infosecwriteups.com/%EF%B8%8Fthe-ultimate-subdomain-enumeration-guide-tools-tricks-and-hidden-secrets-bbae13df9a83?source=rss------bug_bounty-5 | Abhijeet Kumawat | subdomains-enumeration, infosec, bug-bounty, hacking, cybersecurity | 17-Apr-2025 |
| Secret tricks to get hidden information in Bug Bounty | https://infosecwriteups.com/secret-tricks-to-get-hidden-information-in-bug-bounty-107f3e055c4d?source=rss------bug_bounty-5 | Mr Horbio | hacking, github, cybersecurity, penetration-testing, bug-bounty | 17-Apr-2025 |
| Hacking and Securing Docker Containers: A Deep Dive into Common Vulnerabilities and Test Cases | https://infosecwriteups.com/hacking-and-securing-docker-containers-a-deep-dive-into-common-vulnerabilities-and-test-cases-e40f2eee58f2?source=rss------bug_bounty-5 | Ajay Naik | docker, bug-bounty, penetration-testing, information-security, cybersecurity | 17-Apr-2025 |
| From CSS to AWS: How a Stylesheet Reference Leaked Cloud Secrets ☁️ | https://medium.com/@iski/from-css-to-aws-how-a-stylesheet-reference-leaked-cloud-secrets-%EF%B8%8F-c55e5048777e?source=rss------bug_bounty-5 | Iski | money, bug-bounty, infosec, hacking, cybersecurity | 17-Apr-2025 |
| ️♂️ “I Didn’t Plan to Find a P1… But My Script Had Other Plans ” | https://infosecwriteups.com/%EF%B8%8F-%EF%B8%8F-i-didnt-plan-to-find-a-p1-but-my-script-had-other-plans-77691a46985b?source=rss------bug_bounty-5 | Lord Heaven | s3-bucket, infosecurity, s3, infosec, bug-bounty | 17-Apr-2025 |
| OSINT Like a Spy: Tools and Techniques for Online Investigations ️♂️ | https://medium.com/@vipulsonule71/osint-like-a-spy-tools-and-techniques-for-online-investigations-%EF%B8%8F-%EF%B8%8F-79571a765ddb?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, technology, bug-bounty, ethical-hacking, hacking | 17-Apr-2025 |
| The Rise of Cloud Hacking: What Every Developer Should Know | https://medium.com/write-a-catalyst/the-rise-of-cloud-hacking-what-every-developer-should-know-e99efe9d8e3c?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, ai, hacking, cloud, technology | 17-Apr-2025 |
| Understanding All HTTP Response Codes & How to Bypass Them! | https://medium.com/@gouravrathod8788/understanding-all-http-response-codes-how-to-bypass-them-677b784f8232?source=rss------bug_bounty-5 | Gourav Singh Rajput | https, security, red-team, cybersecurity, bug-bounty | 17-Apr-2025 |
| 2FA Bypass: A Case of Insecure Implementation | https://ehteshamulhaq198.medium.com/2fa-bypass-a-case-of-insecure-implementation-8b9e44f3d68c?source=rss------bug_bounty-5 | Ehtesham Ul Haq | 2fa-authentication, ethical-hacking, bug-bounty, penetration-testing, infosec | 17-Apr-2025 |
| From Betting Addiction to Ethical Hacking: How I Discovered a Security Loophole in a Popular… | https://medium.com/@pazzoamani/from-betting-addiction-to-ethical-hacking-how-i-discovered-a-security-loophole-in-a-popular-159720067f1d?source=rss------bug_bounty-5 | AMANI Patrick | cybersecurity, cybersecurity-awareness, offensive-security, bug-bounty | 17-Apr-2025 |
| How I Earned $3,245 in Bug Bounties(My First 90 Days) | https://medium.com/@ibtissamhammadi/how-i-earned-3-245-in-bug-bounties-my-first-90-days-d4b8e397280d?source=rss------bug_bounty-5 | Ibtissam Hammadi | make-money-online, cybersecurity, payu, bug-bounty, hacking | 17-Apr-2025 |
| Data Disclosed: A Look into Real-World Incidents | https://medium.com/@sachinpv2004/data-disclosed-a-look-into-real-world-incidents-acc00a02a89c?source=rss------bug_bounty-5 | SACHIN PV | bug-bounty, pentesting, information-disclosure, cybersecurity | 17-Apr-2025 |
| MASTER IN BASH WITH ONE VIDEO | https://infosecwriteups.com/master-in-bash-with-one-video-5c77dbe3341d?source=rss------bug_bounty-5 | Mr Horbio | penetration-testing, cybersecurity, ethical-hacking, bug-bounty, bash | 17-Apr-2025 |
| SUID Exploitation [Privilege Escalation] Tutorial | EJPT Exam | https://infosecwriteups.com/suid-exploitation-privilege-escalation-tutorial-ejpt-exam-e446f340ba3f?source=rss------bug_bounty-5 | Mr Horbio | penetration-testing, ethical-hacking, bug-bounty, hacker, cybersecurity | 17-Apr-2025 |
| How I Took Over Accounts by Disabling 2FA Without Even Logging In | P1 — Critical | https://medium.com/@nebty/how-i-took-over-accounts-by-disabling-2fa-without-even-logging-in-p1-critical-a50f109e2ed4?source=rss------bug_bounty-5 | Nebty | cybersecurity, vulnerability, authentication, bug-bounty, 2fa | 17-Apr-2025 |
| How to Find Hidden SQL Injection Points During Recon | https://medium.com/@vipulsonule71/how-to-find-hidden-sql-injection-points-during-recon-3f015328fdef?source=rss------bug_bounty-5 | Vipul Sonule | hacking, cybersecurity, penetration-testing, tech, bug-bounty | 17-Apr-2025 |
| Metasploit Basics For PenTester & Bug Bounty Hunters ⚡ | https://medium.com/@0b1d1/metasploit-basics-for-pentester-bug-bounty-hunters-72facfc9cdd1?source=rss------bug_bounty-5 | 0b1d1 | bug-bounty-writeup, bug-bounty, bug-bounty-tips, meterpreter, metasploit | 17-Apr-2025 |
| Powerful One-Liner commands for Ethical Hacking & Bug Hunting | https://medium.com/@BugRey/powerful-one-liner-commands-for-ethical-hacking-bug-hunting-dd33fd2aaa09?source=rss------bug_bounty-5 | ./Rey~ | ethical-hacking, cybersecurity, bug-bounty, bug-bounty-tips | 17-Apr-2025 |
| 200$ by Tricking a Global Music App with One Line of Code | https://myselfakash20.medium.com/200-by-tricking-a-global-music-app-with-one-line-of-code-de2f4ab3cd4a?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, technology, cybersecurity, bug-bounty, ethical-hacking | 17-Apr-2025 |
| Top 15 Unique Extensions for Programmers: Part(3) | https://osintteam.blog/top-15-unique-extensions-for-programmers-part-3-1009695a1199?source=rss------bug_bounty-5 | Monika sharma | hacking, programming, technology, bug-bounty, extension | 17-Apr-2025 |
| They Used Tools I Used Logic 0-Click Account Takeover Without Breaking a Sweat | https://medium.com/@loayahmed686/they-used-tools-i-used-logic-0-click-account-takeover-without-breaking-a-sweat-fd57c078dc82?source=rss------bug_bounty-5 | r00t | bug-bounty, infosec, cybersecurity, bugbounty-tips, bugbounty-writeup | 17-Apr-2025 |
| The 50-Day Security Marathon: How I Helped Ford Patch a Critical XSS Vulnerability | https://medium.com/@N0aziXss/the-50-day-security-marathon-how-i-helped-ford-patch-a-critical-xss-vulnerability-fc6c012f40b5?source=rss------bug_bounty-5 | N0aziXss | xss-vulnerability, enterprise-security, responsible-disclosure, web-security, bug-bounty | 17-Apr-2025 |
| CVE-2025–29927 Authorization bypass vulnerability identified in Next.js. | https://shauryasharma05.medium.com/cve-2025-29927-authorization-bypass-vulnerability-identified-in-next-js-9f46812c7826?source=rss------bug_bounty-5 | Shaurya Sharma | hacking, nextjs, cybersecurity, cve, bug-bounty | 17-Apr-2025 |
| How I got a Zero-Click Account Takeover Bounty — Using Nothing But Logic | https://itsahmedatef.medium.com/how-i-got-a-zero-click-account-takeover-bounty-using-nothing-but-logic-11a3ae151376?source=rss------bug_bounty-5 | Ahmed Atef | cybersecurity, infosec, bug-bounty-writeup, account-takeover, bug-bounty | 17-Apr-2025 |
| How I Discovered CVE-2025–3568: From XSS to Admin Account Takeover | https://medium.com/@sneharghyaroy/how-i-discovered-cve-2025-3568-from-xss-to-admin-account-takeover-6dabfcc7a320?source=rss------bug_bounty-5 | Sneharghya Roy | bug-bounty, educational, cybersecurity, ethical-hacking | 17-Apr-2025 |
| “Analyzing Browser Artifacts During an Incident” : Cache, history, and login data in Chrome, Edge… | https://medium.com/@paritoshblogs/analyzing-browser-artifacts-during-an-incident-cache-history-and-login-data-in-chrome-edge-47ee1a7ce2a3?source=rss------bug_bounty-5 | Paritosh | hacking, bug-bounty, cybersecurity, incident-response, information-technology | 16-Apr-2025 |
| An ultimate information-gathering tool for bug bounty hunters, Osint investigators, and pen testers. | https://medium.com/@loyalonlytoday/an-ultimate-information-gathering-tool-for-bug-bounty-hunters-osint-investigators-and-pen-testers-70b8944746f6?source=rss------bug_bounty-5 | loyalonlytoday | hacking, bug-bounty, programming, penetration-testing, cybersecurity | 16-Apr-2025 |
| How a Software Engineer Earned $40,000 Through Bug Bounty Programs (In His Spare Time) | https://medium.com/@cadeeper/how-a-software-engineer-earned-40-000-through-bug-bounty-programs-in-his-spare-time-a9e1834a02c9?source=rss------bug_bounty-5 | Invik | bug-bounty, security, cybersecurity, development, software-development | 16-Apr-2025 |
| How I Earned My First Bug Bounty and What It Taught Me About Ethical Hacking | https://medium.com/@dhirenkumar/how-i-earned-my-first-bug-bounty-and-what-it-taught-me-about-ethical-hacking-f3687e212d0a?source=rss------bug_bounty-5 | Dhiren Kumar Pradhan | hacking, bug-bounty, cybersecurity | 16-Apr-2025 |
| ️ Blind XSS Attack in Production: My Favorite Exploit with a Delayed Surprise | https://infosecwriteups.com/%EF%B8%8F-blind-xss-attack-in-production-my-favorite-exploit-with-a-delayed-surprise-3f7f13427ee4?source=rss------bug_bounty-5 | Abhijeet Kumawat | xss-attack, secrets, bug-bounty, hacking, cybersecurity | 16-Apr-2025 |
| From ‘Error 404’ to ‘Cha-Ching! BugBounty | https://medium.com/@xlr44444/from-error-404-to-cha-ching-bugbounty-18d3b839019b?source=rss------bug_bounty-5 | Blekhate | bug-bounty-writeup, bug-bounty, bug-bounty-tips, pentesting, cybersecurity | 16-Apr-2025 |
| Email Verification Bypass during Account Creation | Insecure Design | https://raymondv.medium.com/email-verification-bypass-during-account-creation-insecure-design-09122979577f?source=rss------bug_bounty-5 | Raymond Van Wart | insecure-design, cybersecurity, firebase, bug-bounty | 16-Apr-2025 |
| Bypassing Content-Type Restrictions to Upload Web Shells | https://medium.com/@nevershareemail/bypassing-content-type-restrictions-to-upload-web-shells-d10fd45fa10b?source=rss------bug_bounty-5 | Sumit Tiwari | cybersecurity, web-app-security, bug-bounty, web-app-pentesting, bug-bounty-tips | 16-Apr-2025 |
| My First High-Impact Bug: Unauthenticated Unsubscribe via Token Manipulation (IDOR + PII… | https://medium.com/@sauravkrish59/my-first-high-impact-bug-unauthenticated-unsubscribe-via-token-manipulation-idor-pii-872d1004a9bc?source=rss------bug_bounty-5 | @Sauravkrish | bug-bounty-writeup, bug-bounty, bug-bounty-tips, cybersecurity | 16-Apr-2025 |
| Apache Roller’s Got a Major Bug — and It’s No April Fool’s Joke! | https://medium.com/@thecyberghost/apache-rollers-got-a-major-bug-and-it-s-no-april-fool-s-joke-d445fd81d8c4?source=rss------bug_bounty-5 | The Cyber Ghost | cybersecurity, bug-bounty, cyber, cyber-security-awareness, bugs | 16-Apr-2025 |
| How Race Condition Worth Me $1000 On YesWeHack | https://medium.com/@manan_sanghvi/how-race-condition-worth-me-1000-on-yeswehack-f90be39ecb2b?source=rss------bug_bounty-5 | Manan Sanghvi | penetration-testing, ethical-hacking, race-condition, hacking, bug-bounty | 16-Apr-2025 |
| How I discovered a hidden user thanks to server responses ? | https://medium.com/@phoenixcatalan/how-i-discovered-a-hidden-user-thanks-to-server-responses-b65e198f4e73?source=rss------bug_bounty-5 | phoenixcatalan | ethical-hacking, hacking, pentesting, portswigger, bug-bounty | 16-Apr-2025 |
| Impostor Admin: Token Edition | https://medium.com/@tanyago/impostor-admin-token-edition-dfcd1f5643b0?source=rss------bug_bounty-5 | Tanya Goyal | bug-bounty, bugbounty-writeup, bug-bounty-tips, bug-bounty-program | 16-Apr-2025 |
| ️♂️ Bug Bounty Secrets They Don’t Tell You: Tricks From 100+ Reported Bugs | https://medium.com/@vipulsonule71/%EF%B8%8F-%EF%B8%8F-bug-bounty-secrets-they-dont-tell-you-tricks-from-100-reported-bugs-2fa23c613f1b?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, ethical-hacking, hacking, tech, cybersecurity | 16-Apr-2025 |
| ♂️ Bypassing 403/401: All the Tricks Hackers Use | https://medium.com/@vipulsonule71/%EF%B8%8F-bypassing-403-401-all-the-tricks-hackers-use-6600b005289e?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, hacking, penetration-testing, bug-bounty, tech | 16-Apr-2025 |
| How I Hacked RemoteBinge’s GIF Upload Filter | https://medium.com/@worm_401/how-i-hacked-remotebinges-gif-upload-filter-5218cd45124b?source=rss------bug_bounty-5 | Worm_403 | hacking, ctf-writeup, web-security, file-upload-vulnerability, bug-bounty | 16-Apr-2025 |
| Day 2: Best Free Ways to Learn Ethical Hacking by Doing! | https://medium.com/@omkumar.coder/day-2-best-free-ways-to-learn-ethical-hacking-by-doing-d59617552336?source=rss------bug_bounty-5 | om kumar | technology, bug-bounty, software-engineering, cybersecurity, hacking | 16-Apr-2025 |
| How to Bypass 503 Errors Like a Pro! ✨ | https://medium.com/@gouravrathod8788/how-to-bypass-503-errors-like-a-pro-10f0c110a162?source=rss------bug_bounty-5 | Gourav Singh Rajput | pentesting, 503errorbypass, bypass, cybersecurity, bug-bounty | 16-Apr-2025 |
| Bug Bounty Google Dorks | https://medium.com/@shamzen96/bug-bounty-google-dorks-3af9c763de61?source=rss------bug_bounty-5 | Shivam Raj | bug-bounty, dorks, pentesting, hacking, cybersecurity | 16-Apr-2025 |
| The Hidden Threat in Your XML: Understanding XXE Attacks | https://medium.com/@es0557533/the-hidden-threat-in-your-xml-understanding-xxe-attacks-0d7f91bb5749?source=rss------bug_bounty-5 | Isv | bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup | 16-Apr-2025 |
| IMAP — Port 143, 993 — How to exploit? | https://medium.com/@verylazytech/imap-port-143-993-how-to-exploit-3bc8778916cd?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, exploit, ethical-hacking, imap, bug-bounty | 16-Apr-2025 |
| IRC — Ports 194,6667,6660–7000 — How to exploit? | https://medium.com/@verylazytech/irc-ports-194-6667-6660-7000-how-to-exploit-5ecac016b853?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, irc, penetration-testing, exploit | 15-Apr-2025 |
| Why Most PoCs Fail: The Invisible Wall Called SSP | https://medium.com/@pch.neurodive.fuk060/why-most-pocs-fail-the-invisible-wall-called-ssp-06c489ebfdba?source=rss------bug_bounty-5 | IRORI | web-security, cybersecurity, ctf, infosec, bug-bounty | 15-Apr-2025 |
| BugBounty Directory | https://medium.com/@abhishekY495/bugbounty-directory-35609687204c?source=rss------bug_bounty-5 | Abhishek | hacker, bug-bounty-tips, bug-bounty, bug-bounty-writeup, hackerone | 15-Apr-2025 |
| How I Built a Recon Flow Out of Rage and Spite | https://myselfakash20.medium.com/how-i-built-a-recon-flow-out-of-rage-and-spite-18ddd367149e?source=rss------bug_bounty-5 | Akash Ghosh | hacking, bug-bounty, technology, bug-bounty-tips, cybersecurity | 15-Apr-2025 |
| How I Exploited Rate Limiting to Access Admin Features (Real Case Study) | https://infosecwriteups.com/how-i-exploited-rate-limiting-to-access-admin-features-real-case-study-fe25cb965a0a?source=rss------bug_bounty-5 | Abhijeet Kumawat | secrets, bug-bounty, cybersecurity, infosec, hacking | 15-Apr-2025 |
| “How to Find Hidden API Endpoints and Secrets in JavaScript Files for Bug Bounties & Web App… | https://hackersatty.medium.com/how-to-find-hidden-api-endpoints-and-secrets-in-javascript-files-for-bug-bounties-web-app-f4ea92d16954?source=rss------bug_bounty-5 | hackersatty | api-endpoint, bug-bounty-writeup, javascript, bug-bounty, secrets | 15-Apr-2025 |
| Mastering Business Logic Price Manipulation in Bug Bounty Programs | https://frostyxsec.medium.com/mastering-business-logic-price-manipulation-in-bug-bounty-programs-4d3ac14d9837?source=rss------bug_bounty-5 | Frostyxsec | bug-hunting, bug-bounty-tips, bug-bounty, bugbounty-writeup, bug-bounty-hunter | 15-Apr-2025 |
| How Telegram’s Bot API Enables Real-Time 2FA Theft and Account Takeover | https://medium.com/@princep49036142/how-telegrams-bot-api-enables-real-time-2fa-theft-and-account-takeover-fa438ce9a9e0?source=rss------bug_bounty-5 | Prince Philip | telegram, hacker, bug-bounty, bug-bounty-writeup, ui | 15-Apr-2025 |
| Cracking JWT: When the ‘None’ Algorithm Opens the Authentication Gate | https://medium.com/@arrheniuspaelongan09/cracking-jwt-when-the-none-algorithm-opens-the-authentication-gate-5bafa942c9a5?source=rss------bug_bounty-5 | Arrhenius Paelongan | bug-bounty, cybersecurity, hacking, penetration-testing, red-team | 15-Apr-2025 |
| I Broke Into /etc/passwd Using a Null Byte and It Was Stupid Easy #HackerVibes | https://medium.com/@RootPwned/i-broke-into-etc-passwd-using-a-null-byte-and-it-was-stupid-easy-hackervibes-54a4e86e985c?source=rss------bug_bounty-5 | Sumanth Yerranagula | ctf, web-application-security, ethical-hacking, cybersecurity, bug-bounty | 15-Apr-2025 |
| Red Team Tactics vs Blue Team Defenses: Real-World Scenarios | https://medium.com/@paritoshblogs/red-team-tactics-vs-blue-team-defenses-real-world-scenarios-d8a935b9e100?source=rss------bug_bounty-5 | Paritosh | hacking, red-team, blue-team, bug-bounty, cybersecurity | 15-Apr-2025 |
| Breaking Into HackDonalds: XXE + Middleware Abuse (CTF Writeup) | https://medium.com/@cipher01x/breaking-into-hackdonalds-xxe-middleware-abuse-ctf-writeup-fa33c6bad5d8?source=rss------bug_bounty-5 | bretsadlea | hacking, bug-bounty, cybersecurity, hacking-tools, ctf-writeup | 15-Apr-2025 |
| Breaking the Invite: 3 Easy-to-Find Vulnerabilities in invite users function | https://medium.com/@basetm307/breaking-the-invite-3-easy-to-find-vulnerabilities-in-invite-users-function-735c3b75d130?source=rss------bug_bounty-5 | 3baset | bug-bounty, broken-access-control, bug-bounty-tips, privilege, idor | 15-Apr-2025 |
| Hi, I’m Modather Ahmed, a penetration tester at Buguard and a part-time bug bounty hunter. | https://medium.com/@modtheramohamed/hi-im-modather-ahmed-a-penetration-tester-at-buguard-and-a-part-time-bug-bounty-hunter-fb79a2229281?source=rss------bug_bounty-5 | Modther A Mohamed | bug-bounty | 15-Apr-2025 |
| How a Curious Curl and a Ghost Domain Got Me into the Dutch Government’s Hall of Fame | https://medium.com/@cyberhrsh/how-a-curious-curl-and-a-ghost-domain-got-me-into-the-dutch-governments-hall-of-fame-bf1537f4a737?source=rss------bug_bounty-5 | Harsh kothari | hall-of-fame, bug-bounty, cybersecurity, hacker | 15-Apr-2025 |
| Exposing Sensitive Data: How I Found a Critical NASA P1 Vulnerability in Publicly Accessible… | https://medium.com/@sivasankardas/exposing-sensitive-data-how-i-found-a-critical-nasa-p1-vulnerability-in-publicly-accessible-57a00a9bccb9?source=rss------bug_bounty-5 | Sivasankar Das | cybersecurity, vulnerability-research, hallof-fame, bug-bounty, nasa | 15-Apr-2025 |
| From Zero Bugs to Many: My Journey into Web Pentesting and Bug Bounties | https://medium.com/@omkumar.coder/from-zero-bugs-to-many-my-journey-into-web-pentesting-and-bug-bounties-883f516a507c?source=rss------bug_bounty-5 | om kumar | cybersecurity, hacking, web-development, bug-bounty, technology | 15-Apr-2025 |
| Breaking Into HackDonalds: XXE + Middleware Abuse (CTF Writeup) | https://medium.com/@cipher01x/breaking-into-hackdonalds-xxe-middleware-abuse-ctf-writeup-5e67fadbb1bd?source=rss------bug_bounty-5 | bretsadlea | bug-bounty, hacking, ciberseguridad, ctf-writeup | 15-Apr-2025 |
| Hidden Directories and Files : How Dirb, Dirsearch, and Gobuster Find the Unseen | https://medium.com/@vipulsonule71/hidden-directories-and-files-how-dirb-dirsearch-and-gobuster-find-the-unseen-27182b2f88f6?source=rss------bug_bounty-5 | Vipul Sonule | ai, cybersecurity, hacking, penetration-testing, bug-bounty | 15-Apr-2025 |
| 9 Criticals in a Row — Mind Hacking on HackerOne | https://medium.com/@rootplinix/9-criticals-in-a-row-mind-hacking-on-hackerone-b627d1688d69?source=rss------bug_bounty-5 | Abu Hurayra | infosec, cybersecurity, hacking, pentesting, bug-bounty | 15-Apr-2025 |
| Web Socket Security | https://cybertoucan.medium.com/web-socket-security-8095fd0f8981?source=rss------bug_bounty-5 | cybertoucan | websocket, bug-bounty, cybersecurity, pentesting, application-security | 15-Apr-2025 |
| Google Dorking for Ethical Hacking: A Beginner’s Guide to Finding Your First Bug | https://just-merwan.medium.com/google-dorking-for-ethical-hacking-a-beginners-guide-to-finding-your-first-bug-213ff2fffd1a?source=rss------bug_bounty-5 | Merwansky | cybersecurity, google, hacking, tutorial, bug-bounty | 15-Apr-2025 |
| SNMP — Ports 161, 162, 10161, and 10162/UDP — How to exploit? | https://medium.com/@verylazytech/snmp-ports-161-162-10161-and-10162-udp-how-to-exploit-a9044f1eeb72?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, bug-bounty, ethical-hacking, exploit, snmp | 15-Apr-2025 |
| Top 15 Browser Extensions For Bug Bounty Hunter 2025: Part(2) | https://osintteam.blog/top-15-browser-extensions-for-bug-bounty-hunter-2025-part-2-c2a4e525de21?source=rss------bug_bounty-5 | Monika sharma | technology, hacking, bug-bounty, extension, osint | 15-Apr-2025 |
| CSRF Exploit Leading to Account Takeover (ATO) | https://medium.com/@magdy_ali/csrf-exploit-leading-to-account-takeover-ato-e1e89f73cb4c?source=rss------bug_bounty-5 | Magdy Ali | bug-bounty, csrf, account-takeover | 15-Apr-2025 |
| Burp Suite AI: Smarter Scanning Powered by Machine Intelligence | https://cylent.medium.com/burp-suite-ai-smarter-scanning-powered-by-machine-intelligence-7462bb1da5dc?source=rss------bug_bounty-5 | Mohamed Talaat (@cylent) | application-security, bug-bounty, burp-suite-professional, bug-hunting, penetration-testing | 15-Apr-2025 |
| Check Point Firewall — Port 264 — How to exploit? | https://medium.com/@verylazytech/check-point-firewall-port-264-how-to-exploit-10453634fb26?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, port-264, penetration-testing, check-point-firewall, bug-bounty | 14-Apr-2025 |
| How I Earned $800 in 10 Minutes with an IDOR Vulnerability — Just by Going the Extra Mile | https://medium.com/@cadeeper/how-i-earned-800-in-10-minutes-with-an-idor-vulnerability-just-by-going-the-extra-mile-b8208bec852f?source=rss------bug_bounty-5 | Inv | info-sec-writeups, penetration-testing, bug-bounty, cybersecurity, hacker | 14-Apr-2025 |
| SQL Injection Leads to $$$ Bounty: How I Found a Critical Bug | https://medium.com/@arrheniuspaelongan09/sql-injection-leads-to-bounty-how-i-found-a-critical-bug-cbacc35a2f19?source=rss------bug_bounty-5 | Qchad | bug-bounty, hacking, penetration-testing, red-team, cybersecurity | 14-Apr-2025 |
| Uncovering Hidden APIs: How One Forgotten Endpoint Made Me $500 | https://infosecwriteups.com/uncovering-hidden-apis-how-one-forgotten-endpoint-made-me-500-424e6388c406?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, secrets, bug-bounty, infosec, hacking | 14-Apr-2025 |
| Understanding CVE-2025–29927: Next.js Security Vulnerability | https://medium.com/@dasmanish6176/understanding-cve-2025-29927-next-js-security-vulnerability-6a6e20a7bcb0?source=rss------bug_bounty-5 | Dasmanish | bug-bounty, nextjs, security, ethical-hacking, burpsuite | 14-Apr-2025 |
| From Admin to Ghost: Post-Removal Access Control Bypass in Team Management Functionality | https://medium.com/@nhlimon37/from-admin-to-ghost-post-removal-access-control-bypass-in-team-management-functionality-155e3d7faf0d?source=rss------bug_bounty-5 | NH Limon ️ | bug-bounty-writeup, bug-bounty | 14-Apr-2025 |
| From “Buck Bounty?” to My First Real Bug Bounty | https://medium.com/@bgsswqyh/from-buck-bounty-to-my-first-real-bug-bounty-7490f1907541?source=rss------bug_bounty-5 | Kailaas | bug-bounty-writeup, bug-bounty-tips, bug-bounty, cybersecurity | 14-Apr-2025 |
| SQL injection UNION attack, retrieving data from other tables — Portswigger | https://arayofhope7.medium.com/sql-injection-union-attack-retrieving-data-from-other-tables-portswigger-ab892f5a9527?source=rss------bug_bounty-5 | RayofHope | web-penetration-testing, bug-bounty, ethical-hacking, penetration-testing, cybersecurity | 14-Apr-2025 |
| SQL Injection Leads to $$$ Bounty: How I Found a Critical Bug | https://medium.com/@arrheniuspaelongan09/sql-injection-leads-to-bounty-how-i-found-a-critical-bug-cbacc35a2f19?source=rss------bug_bounty-5 | Arrhenius Paelongan | bug-bounty, hacking, penetration-testing, red-team, cybersecurity | 14-Apr-2025 |
| Beyond the Payload: Why Understanding Vulnerabilities Matters More Than Exploiting Them | https://revengermojo.medium.com/beyond-the-payload-why-understanding-vulnerabilities-matters-more-than-exploiting-them-72061821f88b?source=rss------bug_bounty-5 | RevengerMojo | hackermindset, revengermojo, application-security, chaining-vulnerabilities, bug-bounty | 14-Apr-2025 |
| I Hacked a Website With Just ../../../etc/passwd | https://medium.com/@RootPwned/i-hacked-a-website-with-just-etc-passwd-79fc0d592b4e?source=rss------bug_bounty-5 | Sumanth Yerranagula | ctf, web-security, bug-bounty, cybersecurity, ethical-hacking | 14-Apr-2025 |
| Exposed Session Tokens via Misconfigured Endpoint | https://ehteshamulhaq198.medium.com/exposed-session-tokens-via-misconfigured-endpoint-c6676b79476e?source=rss------bug_bounty-5 | Ehtesham Ul Haq | infosec, bug-bounty-writeup, penetration-testing, bug-bounty, session-hijacking | 14-Apr-2025 |
| LFI in the Shadows: A Bug Bounty Private Program Walkthrough | https://medium.com/@AhmedSamy-X/lfi-in-the-shadows-a-bug-bounty-private-program-walkthrough-a76024d1314f?source=rss------bug_bounty-5 | Ahmedsamy | information-security, cybersecurity, hacking, penetration-testing, bug-bounty | 14-Apr-2025 |
| Click, Recon, Jackpot! ️♂️ How a Subdomain Led Me to an S3 Treasure Trove | https://infosecwriteups.com/click-recon-jackpot-%EF%B8%8F-%EF%B8%8F-how-a-subdomain-led-me-to-an-s3-treasure-trove-2f65c3a80010?source=rss------bug_bounty-5 | Iski | money, bug-bounty, hacking, infosec, cybersecurity | 14-Apr-2025 |
| iOS-Pentesting-101: Jail Breaking iOS 16.7.x+ on iPhone 8/X | https://sudosuraj.medium.com/ios-pentesting-101-jail-breaking-ios-16-7-x-on-iphone-8-x-e9d62c529d38?source=rss------bug_bounty-5 | sudosuraj | ios-bug-bounty, sudosuraj, bug-bounty-tips, bug-bounty, mobile-security | 14-Apr-2025 |
| Account Takeover Based on Deep Understanding of the Target | https://medium.com/@Maverick0o0/account-takeover-based-on-deep-understanding-of-the-target-9c02b8af88fa?source=rss------bug_bounty-5 | Erfan Tavakoli | bug-bounty-writeup, writeup, cybersecurity, bug-bounty-tips, bug-bounty | 14-Apr-2025 |
| Hunting eval() XSS: How I Scored a $10K Bounty from Uber | https://osintteam.blog/hunting-eval-xss-how-i-scored-a-10k-bounty-from-uber-c77aaf93574a?source=rss------bug_bounty-5 | Krish_cyber | osint, bug-bounty, infosec-write-ups, ethical-hacking, xss-attack | 14-Apr-2025 |
| Google Gemini iOS Vulnerability: Public Link Sharing Silently Leaks Entire Conversations | https://medium.com/@warisjeet31/google-gemini-ios-vulnerability-public-link-sharing-silently-leaks-entire-conversations-e1f80cbea25c?source=rss------bug_bounty-5 | sin99xx | bug-bounty, bug-bounty-tips, bug-bounty-writeup, cyber-security-awareness, cybersecurity | 14-Apr-2025 |
| Bug Bounty | Istifadəçi hesablarının oğurlanmasına səbəb ola biləcək bir boşluq tapdım (Account… | https://zeynalxan.medium.com/bug-bounty-istifad%C9%99%C3%A7i-hesablar%C4%B1n%C4%B1n-o%C4%9Furlanmas%C4%B1na-s%C9%99b%C9%99b-ola-bil%C9%99c%C9%99k-bir-bo%C5%9Fluq-tapd%C4%B1m-account-2693a2aa2520?source=rss------bug_bounty-5 | Zeynalxan Quliyev | bug-bounty-writeup, bug-bounty, ato, account-takeover, hacker | 14-Apr-2025 |
| Outsmarting the Crowd: 7 Unconventional Strategies to Dominate Bug Bounty Programs | https://cybersecuritywriteups.com/outsmarting-the-crowd-7-unconventional-strategies-to-dominate-bug-bounty-programs-e5432e5fddd2?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, info-sec-writeups, osint, ethical-hacking, bug-bounty-writeup | 14-Apr-2025 |
| HOW I GOT RCE BY THIS ‘ Single quotation Mark | https://medium.com/@amerghaith07/how-i-got-rce-by-this-single-quotation-mark-3a81be69a0d2?source=rss------bug_bounty-5 | Amerghaith | ethical-hacking, cybersecurity, sql-injection, bug-bounty, rce-vulnerability | 14-Apr-2025 |
| Crafting Engaging Web Application Challenges for Your College CTF | https://medium.com/@shashank_d_s/crafting-engaging-web-application-challenges-for-your-college-ctf-b712e10b9ed6?source=rss------bug_bounty-5 | D4rkHxnd | capture-the-flag, penetration-testing, cybersecurity, bug-bounty, ctf | 14-Apr-2025 |
| Are You Safe? The Terrifying Truth Behind Silent Attacks | https://medium.com/@Zo0L/are-you-safe-the-terrifying-truth-behind-silent-attacks-544d63139019?source=rss------bug_bounty-5 | Abdallah Mohammed | behind-the-shadow, cybersecurity, ethical-hacking, bug-bounty, penetration-testing | 14-Apr-2025 |
| Attacking Common Services (skill assessment→Easy Level) Hack The Box Writeup/Walkthrough by… | https://medium.com/@prarabdhsrivastava1403/attacking-common-services-skill-assessment-easy-level-hack-the-box-writeup-walkthrough-by-40cb4ae57d70?source=rss------bug_bounty-5 | Prarabdh Srivastava | infosec, hackthebox, ctf-walkthrough, penetration-testing, bug-bounty | 14-Apr-2025 |
| Udemy Promo OFFER | https://medium.com/@deepdive4learn/udemy-promo-offer-bbf015f60c6a?source=rss------bug_bounty-5 | DeepDive4learn | penetration-testing, cisco-certifications, promo-code, cybersecurity, bug-bounty | 14-Apr-2025 |
| Stored XSS — Escalated from High to Critical | https://medium.com/@YourFinalSin/stored-xss-escalated-from-high-to-critical-079b5ab44444?source=rss------bug_bounty-5 | 3NVZ | xss-attack, bug-bounty-tips, bug-bounty, xss-vulnerability, bug-bounty-writeup | 13-Apr-2025 |
| SQL injection UNION attack, finding a column containing text | https://arayofhope7.medium.com/sql-injection-union-attack-finding-a-column-containing-text-8bb9f92b6430?source=rss------bug_bounty-5 | RayofHope | web-penetration-testing, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 13-Apr-2025 |
| Spynote, BadBazaar & Moonshine: The Malware Mafia That’s Eyeing Your Phone | https://medium.com/@thecyberghost/spynote-badbazaar-moonshine-the-malware-mafia-thats-eyeing-your-phone-6b98eafb1af7?source=rss------bug_bounty-5 | The Cyber Ghost | malware, bug-bounty, bug-bounty-writeup, virus, cyber-security-awareness | 13-Apr-2025 |
| One Random Recon, One Real Bounty: The Paytm Story | https://ghostman01.medium.com/ghost-paytm-xss-bounty-4f5efe6a643b?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, cybersecurity, programming, hacking, vulnerability | 13-Apr-2025 |
| Advanced Windows Event Log Hunting for Threat Detection | https://medium.com/@paritoshblogs/advanced-windows-event-log-hunting-for-threat-detection-5ae8f259d5e2?source=rss------bug_bounty-5 | Paritosh | hacking, bug-bounty, windows, cybersecurity, threat-intelligence | 13-Apr-2025 |
| How I Found a Bug in a Government Website (And Got Recognized for It) ️) | https://infosecwriteups.com/how-i-found-a-bug-in-a-government-website-and-got-recognized-for-it-%EF%B8%8F-2f057a99f458?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, bug-bounty, cybersecurity, infosec, secrets | 13-Apr-2025 |
| Tricky waf bypass for reflected XSS write up | https://medium.com/@sonahri501/not-so-cool-reflectd-xss-write-up-88da44cdc8c4?source=rss------bug_bounty-5 | Sonahri | waf-bypass, bug-bounty, cross-site-scripting | 13-Apr-2025 |
| ⚡️Oops, They Logged It! Turning LFI into Remote Shell Like a Pro ⚔️ | https://medium.com/@iski/%EF%B8%8Foops-they-logged-it-turning-lfi-into-remote-shell-like-a-pro-%EF%B8%8F-272e81c5315f?source=rss------bug_bounty-5 | Iski | money, bug-bounty-tips, hacking, bug-bounty, cybersecurity | 13-Apr-2025 |
| BURPSUITE EXTENSIONS FOR SECURITY ASSESSMENTS: ENHANCED WEB APPLICATION TESTING ️ | https://medium.com/@0b1d1/burpsuite-extensions-for-security-assessments-enhanced-web-application-testing-%EF%B8%8F-922d2002bf0d?source=rss------bug_bounty-5 | 0b1d1 | burp-suite-pro, pentesting, bug-bounty-tips, bug-bounty, pentesting-lab | 13-Apr-2025 |
| Hackers Love These Info Disclosure Bugs | CVE, APIs, Buckets, 404s & More! | https://medium.com/@spector-sec/hackers-love-these-info-disclosure-bugs-cve-apis-buckets-404s-more-a8b2f7103bb0?source=rss------bug_bounty-5 | spector-sec | cybersecurity, hacking, informatonal-disclosure, bug-bounty | 13-Apr-2025 |
| One Random Recon, One Real Bounty: The Paytm Story | https://infosecwriteups.com/ghost-paytm-xss-bounty-4f5efe6a643b?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | bug-bounty, cybersecurity, programming, hacking, vulnerability | 13-Apr-2025 |
| How Burp Suite AI Makes Vulnerability Testing Easy and Fast | https://infosecwriteups.com/how-burp-suite-ai-makes-vulnerability-testing-easy-and-fast-03b6ca0ca6e5?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, ai, burpsuite, penetration-testing | 13-Apr-2025 |
| JavaScript All Important Browser Functions | https://medium.com/@zoningxtr/javascript-all-important-browser-functions-f40423714ebb?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, javascript, web-development, cybersecurity, bug-bounty | 13-Apr-2025 |
| Bypass no rate limit & get Application-Level DDoS Vulnerability | https://frostyxsec.medium.com/bypass-no-rate-limit-get-application-level-ddos-vulnerability-bb4bae99f3a4?source=rss------bug_bounty-5 | Frostyxsec | bug-bounty, bug-hunting, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 13-Apr-2025 |
| Bypass File Attachment Restrictions in Google Groups via Email Posting | Bug Bounty | https://ph-hitachi.medium.com/bypass-file-attachment-restrictions-in-google-groups-via-email-posting-bug-bounty-5d96fe39e46d?source=rss------bug_bounty-5 | Ph.Hitachi | bug-bounty, permissionsbypass, google-vrp, google-groups, broken-access-control | 13-Apr-2025 |
| 1-CLick OAuth Token Hijacking via Google Apps Script – A Design Flaw Ignored? | Bug Bounty | https://ph-hitachi.medium.com/1-click-oauth-token-hijacking-via-google-apps-script-a-design-flaw-ignored-bug-bounty-02c6997254ff?source=rss------bug_bounty-5 | Ph.Hitachi | hackerone, bug-bounty, google-vrp, google, google-app-script | 13-Apr-2025 |
| $10,000 worth GitHub Access Tokens | Secret Search Operators | https://infosecwriteups.com/10-000-worth-github-access-tokens-secret-search-operators-c67b09062a38?source=rss------bug_bounty-5 | It4chis3c | hidden, github, bug-bounty, secrets, access-token | 13-Apr-2025 |
| From Threats to Allies: Empower Moroccan Cyber Talent | https://medium.com/@ryadserkouh/from-threats-to-allies-empower-moroccan-cyber-talent-49d0dd07d06a?source=rss------bug_bounty-5 | Ryad Serkouh | bug-bounty, cybersecurity, morocco | 13-Apr-2025 |
| How to Perform Triage on a Compromised Windows Machine | https://medium.com/@paritoshblogs/how-to-perform-triage-on-a-compromised-windows-machine-a358edfefd4b?source=rss------bug_bounty-5 | Paritosh | cybersecurity, triage, hacking, windows, bug-bounty | 13-Apr-2025 |
| Bypass rate limit & get Application-Level DDoS Vulnerability | https://frostyxsec.medium.com/bypass-no-rate-limit-get-application-level-ddos-vulnerability-bb4bae99f3a4?source=rss------bug_bounty-5 | Frostyxsec | bug-bounty, bug-hunting, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 13-Apr-2025 |
| Effective tool for bug hunters | https://medium.com/@loyalonlytoday/effective-tool-for-bug-hunters-7544a430617d?source=rss------bug_bounty-5 | loyalonlytoday | programming, bug-bounty, cybersecurity, hacking, bug-bounty-tips | 12-Apr-2025 |
| A tool that will find secrets, endpoints, and API keys from a list of URLs(Bug Bounty Hunting) | https://medium.com/@loyalonlytoday/a-tool-that-will-find-secrets-endpoints-and-api-keys-from-a-list-of-urls-bug-bounty-hunting-ccaec4babfe1?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, ethical-hacking, bug-bounty, osint, cybersecurity | 12-Apr-2025 |
| This Was My First Account Takeover Without Any Tool: A Remarkable Experience | https://medium.com/@dineshnarasimhan27/this-was-my-first-account-takeover-without-any-tool-a-remarkable-experience-1a224d8efb73?source=rss------bug_bounty-5 | Dinesh Narasimhan | cybersecuirty, webapplicationpentest, account-take-over, penetration-testing, bug-bounty | 12-Apr-2025 |
| Subdomain takeover | https://medium.com/@parthchheda777/subdomain-takeover-6642736285fc?source=rss------bug_bounty-5 | Parthchheda | infosec, pentesting, subdomain-takeover, cybersecurity, bug-bounty | 12-Apr-2025 |
| SQL injection UNION attack, determining the number of columns returned by the query | https://arayofhope7.medium.com/sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query-01321d3953cb?source=rss------bug_bounty-5 | RayofHope | ethical-hacking, penetration-testing, web-penetration-testing, cybersecurity, bug-bounty | 12-Apr-2025 |
| Static vs Dynamic Analysis: A Web3 Security Perspective | https://securrtech.medium.com/static-vs-dynamic-analysis-a-web3-security-perspective-e0c11bbdde99?source=rss------bug_bounty-5 | Securr - Web3 Security | bug-bounty, web3-security, blockchain-security, smart-contract-security, smart-contract-auditing | 12-Apr-2025 |
| Exposing a Critical Data Leak: My Experience in NASA’s Vulnerability Disclosure Program | https://medium.com/@sivasankardas/exposing-a-critical-data-leak-my-experience-in-nasas-vulnerability-disclosure-program-7ab0ced1ba86?source=rss------bug_bounty-5 | Sivasankardas | vulnerability-disclosure, bug-bounty, critical-vulnerabilities, nasa-vdp, data-security | 12-Apr-2025 |
| How I Got Access to Other Person’s Chat History and Chat Environment! | https://hiddendom.medium.com/how-i-got-access-to-other-persons-chat-history-and-chat-environment-f333cc29f3df?source=rss------bug_bounty-5 | Gokuleswaran B | penetration-testing, vapt, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 12-Apr-2025 |
| ️♂️ Bug Bounty Secrets They Don’t Tell You: Tricks From 100+ Reported Bugs | https://infosecwriteups.com/%EF%B8%8F-%EF%B8%8F-bug-bounty-secrets-they-dont-tell-you-tricks-from-100-reported-bugs-603e4a6bb84f?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, ai, hacking, cybersecurity, secrets | 12-Apr-2025 |
| ️ Mastering Nmap: From Recon to Automation in Enterprise Security | https://medium.com/@zoningxtr/%EF%B8%8F-mastering-nmap-from-recon-to-automation-in-enterprise-security-69f6e3a81096?source=rss------bug_bounty-5 | Zoningxtr | linux, penetration-testing, nmap, bug-bounty, cybersecurity | 12-Apr-2025 |
| Why I’m Blogging My Cybersecurity Journey (And Why You Should Too) | https://medium.com/@shewagbhai1333/why-im-blogging-my-cybersecurity-journey-and-why-you-should-too-cacfee96f931?source=rss------bug_bounty-5 | Shewagbhai | pentesting, bug-bounty, web, blogging, community | 12-Apr-2025 |
| Facebook allows malicious script execution in post,comments and direct messages( rejected bug… | https://medium.com/@krivadna/facebook-allows-malicious-script-execution-in-post-comments-and-direct-messages-rejected-bug-807ad30e1401?source=rss------bug_bounty-5 | Krivadna | info-sec-writeups, infosec-write-ups, bugbounty-writeup, bug-bounty, cybersecurity | 12-Apr-2025 |
| I Built a Portfolio Website That’s (Almost) Unhackable — Here’s How | https://medium.com/@afnaan2180/i-built-a-portfolio-website-thats-almost-unhackable-here-is-how-33351d7d56f7?source=rss------bug_bounty-5 | Mohammed Afnaan Ahmed | infosec, bug-bounty, cybersecurity, ethical-hacking, web-development | 12-Apr-2025 |
| Secrets in JavaScript : Finding API Keys and Endpoints Like a Bug Bounty Hunter | https://medium.com/@vipulsonule71/secrets-in-javascript-finding-api-keys-and-endpoints-like-a-bug-bounty-hunter-613c66412baa?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, ethical-hacking, hacking, penetration-testing, bug-bounty | 12-Apr-2025 |
| ️ Detecting Ransomware Pre-Execution with Windows Logs & Sysmon | https://medium.com/@paritoshblogs/%EF%B8%8F-detecting-ransomware-pre-execution-with-windows-logs-sysmon-2e34dac2ee97?source=rss------bug_bounty-5 | Paritosh | ransomware, bug-bounty, windows, hacking, cybersecurity | 12-Apr-2025 |
| Exposing a Critical Data Leak: My Experience in NASA’s Vulnerability Disclosure Program | https://medium.com/@sivasankardas/exposing-a-critical-data-leak-my-experience-in-nasas-vulnerability-disclosure-program-7ab0ced1ba86?source=rss------bug_bounty-5 | Sivasankar Das | vulnerability-disclosure, bug-bounty, critical-vulnerabilities, nasa-vdp, data-security | 12-Apr-2025 |
| Recon Zen: Hacking With Nothing But Vibes and DevTools | https://myselfakash20.medium.com/recon-zen-hacking-with-nothing-but-vibes-and-devtools-d809ee497d69?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, hacking, technology, cybersecurity, bug-bounty | 12-Apr-2025 |
| Understanding DOM-based XSS | https://medium.com/@evyeveline1/understanding-dom-based-xss-70ea74401e7b?source=rss------bug_bounty-5 | Evyeveline | web-hacking, red-team, dom-based-xss, xss-vulnerability, bug-bounty | 12-Apr-2025 |
| Found 3 IDOR Vulnerabilities in the Same Target! | https://medium.com/@mahmoudelsadey56/found-3-idor-vulnerabilities-in-the-same-target-bc79c1c33376?source=rss------bug_bounty-5 | Mahmoud elsadey | web-penetration-testing, bug-bounty-writeup, bug-bounty, penetration-testing | 12-Apr-2025 |
| LDAP — Ports 389, 636, 3268, 3269 — How to exploit? | https://medium.com/@verylazytech/ldap-ports-389-636-3268-3269-how-to-exploit-48af0aaac0ae?source=rss------bug_bounty-5 | Very Lazy Tech | ldap, penetration-testing, bug-bounty, ethical-hacking, hacking | 12-Apr-2025 |
| How I Found a Reflected XSS Bug in 45 Minutes Using ChatGPT — and Earned $800 | https://theindiannetwork.medium.com/how-i-found-a-reflected-xss-bug-in-45-minutes-using-chatgpt-and-earned-800-bc700c4baea8?source=rss------bug_bounty-5 | TheIndianNetwork | chatgpt, bug-bounty-tips, bug-bounty-writeup, bug-bounty, xss-attack | 11-Apr-2025 |
| A few online tools to find subdomains easily(bug bounty hunting) | https://medium.com/@loyalonlytoday/a-few-online-tools-to-find-subdomains-easily-bug-bounty-hunting-64b15b2c2dcf?source=rss------bug_bounty-5 | loyalonlytoday | subdomains-enumeration, hacking, tips, cybersecurity, bug-bounty | 11-Apr-2025 |
| How I Earned $1,000 by Exploiting a Hidden Subdomain and Chaining a CORS Misconfiguration with IDOR | https://theindiannetwork.medium.com/how-i-earned-1-000-by-exploiting-a-hidden-subdomain-and-chaining-a-cors-misconfiguration-with-idor-1dc83adf927c?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty, idor, subdomain, bug-bounty-writeup, bug-bounty-tips | 11-Apr-2025 |
| OTP BYPASS METHODOLOGIES | https://infosecwriteups.com/otp-bypass-methodologies-3ed951d1eb12?source=rss------bug_bounty-5 | Canonminibeast | hacking, bug-bounty, bug-bounty-writeup, bug-bounty-tips, otp-verification | 11-Apr-2025 |
| How I Pick a Good Bug Bounty Program and Earn $$$ | https://medium.com/@YourFinalSin/how-i-pick-a-good-bug-bounty-program-and-earn-dc7610bff549?source=rss------bug_bounty-5 | 3NVZ | bug-bounty, bug-bounty-tips, hackerone, bugcrowd, bug-bounty-writeup | 11-Apr-2025 |
| SQL injection attack, listing the database contents on Oracle — Portswigger | https://arayofhope7.medium.com/sql-injection-attack-listing-the-database-contents-on-oracle-portswigger-501f25bda8fd?source=rss------bug_bounty-5 | RayofHope | bug-bounty, ethical-hacking, penetration-testing, web-penetration-testing, cyber-security-training | 11-Apr-2025 |
| I Made $5,382 in 30 Days Hunting Bugs | https://infosecwriteups.com/i-made-5-382-in-30-days-hunting-bugs-ba770a5d895a?source=rss------bug_bounty-5 | Ibtissam Hammadi | technology, hacking, bug-bounty, cybersecurity, make-money-online | 11-Apr-2025 |
| How I Bypassed YouTube Video Ads Using API Manipulation — My Google VRP Discovery (Video PoC… | https://muneebalamkhan.medium.com/how-i-bypassed-youtube-video-ads-using-api-manipulation-my-google-vrp-discovery-video-poc-9eaf91f23596?source=rss------bug_bounty-5 | Muneeb Alam Khan | youtube-hacks-and-tricks, cybersecurity, bug-bounty, google-hacking, api-security-testing | 11-Apr-2025 |
| Oops. Team Closed it as NA | https://infosecwriteups.com/oops-team-closed-it-as-na-547d6b20a5d7?source=rss------bug_bounty-5 | callgh0st | gaza, mindset, bug-bounty, genocide, hacking | 11-Apr-2025 |
| (Ⅱ)【Report Review】2024 OWASP Mobile Top 10 Risks | https://medium.com/@security.tecno/%E2%85%B1-report-review-2024-owasp-mobile-top-10-risks-216b6cf6b2e3?source=rss------bug_bounty-5 | TECNO Security | application, hacking, bug-bounty, security, owasp | 11-Apr-2025 |
| SSRF para RCE: Como transformei um pequeno inseto em um grande salário | https://medium.com/@miltonslutonadio/ssrf-para-rce-como-transformei-um-pequeno-inseto-em-um-grande-sal%C3%A1rio-e33c53bdb712?source=rss------bug_bounty-5 | Milton Lutonadio | cybersecurity, bounty-program, red-team, bug-bounty, web-applications | 11-Apr-2025 |
| I Used Shodan to Find Unprotected WordPress Sites — It Was Too Easy | https://medium.com/@nathans_web/i-used-shodan-to-find-unprotected-wordpress-sites-it-was-too-easy-94dfb9308570?source=rss------bug_bounty-5 | Gandolf | infosec, shodan, bug-bounty, cybersecurity, hacking | 11-Apr-2025 |
| 5 Web Vulnerabilities That Paid Me the Most (And How to Find Them!) | https://infosecwriteups.com/5-web-vulnerabilities-that-paid-me-the-most-and-how-to-find-them-42f3f922740d?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, vulnerability, cybersecurity, ai, bug-bounty | 11-Apr-2025 |
| Using Blind XSS to steal session cookies and log in as a different user | https://medium.com/@evyeveline1/using-blind-xss-to-steal-session-cookies-and-log-in-as-a-different-user-937cce53d829?source=rss------bug_bounty-5 | Evyeveline | xss-vulnerability, bug-bounty, web-hacking, xss-attack, ethical-hacking | 11-Apr-2025 |
| Security Lessons from TVM’s RPC Design | https://medium.com/@kerkroups/security-lessons-from-tvms-rpc-design-3cfc4b5c8e82?source=rss------bug_bounty-5 | Kerkroups | application-security, bug-bounty, cybersecurity | 11-Apr-2025 |
| Bearer Tokens, Broken Trust, and GitHub Classroom’s Flawed Design | https://vanshal.medium.com/bearer-tokens-broken-trust-and-github-classrooms-flawed-design-8d616adb7ee5?source=rss------bug_bounty-5 | Vanshal Gaur | bug-bounty, cybersecurity, github, education-technology, information-security | 11-Apr-2025 |
| ⏰ Mastering Cron: Automate Like a Pro in Linux and Enterprise IT | https://medium.com/@zoningxtr/mastering-cron-automate-like-a-pro-in-linux-and-enterprise-it-6a5f5694a749?source=rss------bug_bounty-5 | Zoningxtr | automation, linux, penetration-testing, cybersecurity, bug-bounty | 11-Apr-2025 |
| A Hacker’s Instinct: The Power You Unlock When You Stop Looking and Start Seeing | https://myselfakash20.medium.com/a-hackers-instinct-the-power-you-unlock-when-you-stop-looking-and-start-seeing-2715865e13f7?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, bug-bounty-tips, infosec, technology, bug-bounty | 11-Apr-2025 |
| Mastering Google Dorking for Bug Bounty Hunters: Secrets the Pros Use! | https://cybersecuritywriteups.com/mastering-google-dorking-for-bug-bounty-hunters-secrets-the-pros-use-5798df19f343?source=rss------bug_bounty-5 | Krish_cyber | osint, cybersecurity, bug-bounty, hacking, google-dorking | 11-Apr-2025 |
| Unlocking Hidden Paths: Web Fuzzing with FFUF | https://medium.com/@regan_temudo/unlocking-hidden-paths-web-fuzzing-with-ffuf-9f81381bd9e3?source=rss------bug_bounty-5 | Regan Temudo | ctf, cybersecurity, penetration-testing, ethical-hacking, bug-bounty | 11-Apr-2025 |
| hiii bug bounty hunters | https://krishna-cyber.medium.com/hiii-bug-bounty-hunters-65dec8625cd4?source=rss------bug_bounty-5 | Krish_cyber | cybersecurity, artificial-intelligence, coding, software-development, bug-bounty | 11-Apr-2025 |
| Tittle: | https://medium.com/@muhammedelkesht404/tittle-a9218e507b1a?source=rss------bug_bounty-5 | 0xAdam | bug-bounty, bug-bounty-tips, bugs | 11-Apr-2025 |
| IPsec/IKE VPN — Port 500/UDP — How to exploit? | https://medium.com/@verylazytech/ipsec-ike-vpn-port-500-udp-how-to-exploit-dd240223757d?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, ethical-hacking, bug-bounty, penetration-testing, ipsec | 11-Apr-2025 |
| Custom Headers: The Sneaky Trick Every Hacker Should Know | https://medium.com/@RoBoHackermann/custom-headers-the-sneaky-trick-every-hacker-should-know-a685246cc3d0?source=rss------bug_bounty-5 | Rohit Suresh Borate | cybersecurity, penetration-testing, vapt, bug-bounty, web-penetration-testing | 11-Apr-2025 |
| Mastering Reflected XSS with Nuclei: From Zero to $1,500 Bounty! | https://krishna-cyber.medium.com/mastering-reflected-xss-with-nuclei-from-zero-to-1-500-bounty-eb5115a1aaf0?source=rss------bug_bounty-5 | Krish_cyber | osint, cybersecurity, bug-bounty, xss-attack, ethical-hacking | 11-Apr-2025 |
| ️ From Curious Clicks to Cyber Pro: How to Start a Career in Ethical Hacking & Cybersecurity | https://osintteam.blog/hiii-bug-bounty-hunters-65dec8625cd4?source=rss------bug_bounty-5 | Krish_cyber | cybersecurity, artificial-intelligence, coding, software-development, bug-bounty | 11-Apr-2025 |
| A must-use tool for subdomain enumeration. | https://medium.com/@loyalonlytoday/a-must-use-tool-for-subdomain-enumeration-12d49bf1a02f?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, bug-bounty, ethical-hacking, tips, bug-bounty-tips | 10-Apr-2025 |
| How I Found a WordPress Database Setup via Shodan (HackerOne) | https://enterlectury.medium.com/how-i-found-a-wordpress-database-setup-via-shodan-hackerone-a5de583e2fb4?source=rss------bug_bounty-5 | Enterlectury | cybersecurity, bug-bounty-tips, web-security, bug-bounty-writeup, bug-bounty | 10-Apr-2025 |
| Cryptography great cheat-sheet for CTF’s | https://medium.com/@anandrishav2228/cryptography-great-cheat-sheet-for-ctfs-d2ada754b319?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, crypto, cybersecurity, ctf, hacking | 10-Apr-2025 |
| Stop XSS in React Before Hackers Win | https://rendiero.medium.com/stop-xss-in-react-before-hackers-win-8c2908492c01?source=rss------bug_bounty-5 | Rendiero | vulnerability, bug-bounty, hacking, react, xss-attack | 10-Apr-2025 |
| Critical XXE Vulnerability Found in an Indian Government Website | https://medium.com/@dharineeshj2/critical-xxe-vulnerability-found-in-an-indian-government-website-0ae7ffae8fd9?source=rss------bug_bounty-5 | Hack-Bat | pentesting, red-team, bug-bounty, cybersecurity, hacking | 10-Apr-2025 |
| SQL injection attack, listing the database contents on non-Oracle databases — Portswigg | https://arayofhope7.medium.com/sql-injection-attack-listing-the-database-contents-on-non-oracle-databases-portswigg-42fae517cc6e?source=rss------bug_bounty-5 | RayofHope | bug-bounty, penetration-testing, web-penetration-testing, cyber-security-training, ethical-hacking | 10-Apr-2025 |
| CloudFlare Rate Limit Bypass — OTP Bruteforce using probabilistics leads to ATO | https://medium.com/@ph4nt0mbyt3/cloudflare-rate-limit-bypass-otp-bruteforce-using-probabilistics-leads-to-ato-511c9f3475cd?source=rss------bug_bounty-5 | ph4nt0mbyt3 | bugbounty-writeup, information-security, pentest, bug-bounty | 10-Apr-2025 |
| The $1,000 Bug: How I Discovered a Critical Security Flaw (Step-by-Step Guide) | https://infosecwriteups.com/the-1-000-bug-how-i-discovered-a-critical-security-flaw-step-by-step-guide-89808934e622?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, hacking, bounty-program, bug-bounty, ai | 10-Apr-2025 |
| From self XSS to RCE in Ruby on rails | https://handball10.medium.com/from-self-xss-to-rce-in-ruby-on-rails-1f9f2d33c1cb?source=rss------bug_bounty-5 | handball10 | bug-bounty, remote-code-execution, ruby-on-rails, xss-attack | 10-Apr-2025 |
| ️♂️ Identifying C2 Channels: From DNS Tunnelling to HTTPS Beacons | https://medium.com/@paritoshblogs/%EF%B8%8F-%EF%B8%8F-identifying-c2-channels-from-dns-tunnelling-to-https-beacons-6563c3d2ed5b?source=rss------bug_bounty-5 | Paritosh | command-and-control, hacking, cybersecurity, bug-bounty, dns | 10-Apr-2025 |
| Clickjacking Attack | https://medium.com/@Maleesha.Rathnayaka/clickjacking-attack-b771b0771499?source=rss------bug_bounty-5 | Maleesha Rathnayaka | web-security, infosec, clickjacking, bug-bounty, cybersecurity | 10-Apr-2025 |
| The Financial Fiasco of JavaScript Paywalls | https://medium.com/@cybercitizen.tech/the-financial-fiasco-of-javascript-paywalls-7de0b406dd8f?source=rss------bug_bounty-5 | CyberCitizen | paywall, bug-bounty, web-development, javascript, cybersecurity | 10-Apr-2025 |
| (Ⅰ)【Report Review】2024 OWASP Mobile Top 10 Risks | https://medium.com/@security.tecno/%E2%85%B0-report-review-2024-owasp-mobile-top-10-risks-0a3df63284bc?source=rss------bug_bounty-5 | TECNO Security | owasp, hacking, security, bug-bounty | 10-Apr-2025 |
| Bug Bounty Recon Starter Pack: Tools, Coffee, Existential Crisis | https://myselfakash20.medium.com/bug-bounty-recon-starter-pack-tools-coffee-existential-crisis-8ca172820ede?source=rss------bug_bounty-5 | Akash Ghosh | hacking, cybersecurity, technology, bug-bounty, bug-bounty-tips | 10-Apr-2025 |
| From Markup to Database: A Comprehensive, Line-by-Line Walkthrough of HTML, JS & PHP with SQL | https://medium.com/@zoningxtr/from-markup-to-database-a-comprehensive-line-by-line-walkthrough-of-html-js-php-with-sql-d8ba5c00b720?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, bug-bounty, cybersecurity, javascript, html | 10-Apr-2025 |
| Top 10 Underrated Tools in a Pentester’s Arsenal (2025 Edition) | https://medium.com/@gasmask/top-10-underrated-tools-in-a-pentesters-arsenal-2025-edition-568568e5418f?source=rss------bug_bounty-5 | gasmask | cybersecurity, penetration-testing, bug-bounty, web-application-security, beginner | 10-Apr-2025 |
| A tool that will find secrets, endpoints, and API keys from a list of URLs(Bug Bounty Hunting) | https://medium.com/@loyalonlytoday/a-tool-that-will-find-secrets-endpoints-and-api-keys-from-a-list-of-urls-bug-bounty-hunting-6b57fbbbf374?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, bug-bounty, bug-bounty-tips, ethical-hacking, tips | 10-Apr-2025 |
| Rexec — Port 512 — How to exploit? | https://medium.com/@verylazytech/rexec-port-512-how-to-exploit-138f9eb2d59f?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, hacking, ethical-hacking, port-512, bug-bounty | 10-Apr-2025 |
| How My Life Went from SSRF to LFI (and Why That’s Not a Metaphor) | https://infosecwriteups.com/how-my-life-went-from-ssrf-to-lfi-and-why-thats-not-a-metaphor-a2d97297e10b?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, infosec, hacking, money | 10-Apr-2025 |
| Turning 403 into 200: Bypassing Filters with Base64 to Trigger XSS | https://medium.com/@EL_cazad0r/turning-403-into-200-bypassing-filters-with-base64-to-trigger-xss-adbf5f817d85?source=rss------bug_bounty-5 | EL_Cazad0r | bug-bounty-tips, bug-bounty, bug-bounty-writeup, ethical-hacking | 10-Apr-2025 |
| Modbus — Port 502 — How to exploit? | https://medium.com/@verylazytech/modbus-port-502-how-to-exploit-96b7923741ce?source=rss------bug_bounty-5 | Very Lazy Tech | port-502, modbus, bug-bounty, penetration-testing, hacking | 10-Apr-2025 |
| $500-$10k worth Path Traversal | Advanced Methodology | https://infosecwriteups.com/500-10k-worth-path-traversal-advanced-methodology-dd80c18c5539?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, secrets, hacking, path-traversal, file-reading | 10-Apr-2025 |
| The OWASP Methodology for Web Application Penetration Testing | https://cyberw1ng.medium.com/the-owasp-methodology-for-web-application-penetration-testing-de23c07ed4bf?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, bug-bounty, owasp, cybersecurity | 10-Apr-2025 |
| The OWASP Methodology for Web Application Penetration Testing | https://osintteam.blog/the-owasp-methodology-for-web-application-penetration-testing-de23c07ed4bf?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, penetration-testing, bug-bounty, owasp, cybersecurity | 10-Apr-2025 |
| Bug Bounty Journey — Valid Report Part 5 | https://medium.com/@0xF3r4t/bug-bounty-journey-valid-report-part-5-7c203bbff96b?source=rss------bug_bounty-5 | 0xF3r4t | misconfiguration, bug-bounty, email-verification-bypass, aws-cognito, vdp | 09-Apr-2025 |
| Account Manipulation Lead to Anonymous Account existence | https://medium.com/@ziademad1923/account-manipulation-lead-to-anonymous-account-existence-211c1ff390a6?source=rss------bug_bounty-5 | Ziademad | bug-bounty, account-take-over, bug-bounty-writeup | 09-Apr-2025 |
| SQL injection attack, querying the database type and version on MySQL and Microsoft | https://arayofhope7.medium.com/sql-injection-attack-querying-the-database-type-and-version-on-mysql-and-microsoft-85081e7eef71?source=rss------bug_bounty-5 | RayofHope | bug-bounty, penetration-testing, web-penetration-testing, cyber-security-awareness, ethical-hacking | 09-Apr-2025 |
| OWASP Top 10 Manual Testing | https://medium.com/@shamzen96/owasp-top-10-manual-testing-caf675448569?source=rss------bug_bounty-5 | Shivam Raj | testing, cybersecurity, hacking, bug-bounty, owasp-top-10 | 09-Apr-2025 |
| This is how i use browser to fetch JS endpoints for good paying bugs | https://infosecwriteups.com/this-is-how-i-use-browser-to-fetch-js-endpoints-for-good-paying-bugs-6bd91563f7bf?source=rss------bug_bounty-5 | Canonminibeast | hacking-tools, bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty | 09-Apr-2025 |
| Google Patches Two Actively Exploited Android Vulnerabilities — Here’s What You Need to Know | https://medium.com/@Cyber-AppSec/google-patches-two-actively-exploited-android-vulnerabilities-heres-what-you-need-to-know-7350b60e5803?source=rss------bug_bounty-5 | Cyber-AppSec | bug-bounty, cybersecurity, cybercrime, cybersecurity-awareness, information-security | 09-Apr-2025 |
| I Bypassed 2FA Using an Old Secret Key — Here’s How I Earned $500 | https://medium.com/@whitehat29/i-bypassed-2fa-using-an-old-secret-key-heres-how-i-earned-500-cd92c9158f1a?source=rss------bug_bounty-5 | Whitehat | bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips, hacking | 09-Apr-2025 |
| ️♂️ How Hackers Use Subdomain Takeover for Full Domain Control | https://medium.com/@vipulsonule71/%EF%B8%8F-%EF%B8%8F-how-hackers-use-subdomain-takeover-for-full-domain-control-c620b100c928?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, writing, hacking, bug-bounty, bug-bounty-tips | 09-Apr-2025 |
| ⏳ The 3-Minute Bug: How I Found a Critical Vulnerability Without a Single Tool | https://infosecwriteups.com/the-3-minute-bug-how-i-found-a-critical-vulnerability-without-a-single-tool-750a7b2913e8?source=rss------bug_bounty-5 | Abhijeet Kumawat | ai, bug-bounty, infosec, cybersecurity, hacking | 09-Apr-2025 |
| Token Tampering leads to change the user details | https://levi4.medium.com/token-tampering-leads-to-change-the-user-details-7bf8b5754bde?source=rss------bug_bounty-5 | Levi Ackerman | bug-bounty, cybersecurity, networking, vulnerability, ethical-hacking | 09-Apr-2025 |
| ️♂️ Hacker’s Recon Guide: How to Fingerprint Any Website Like a Pro | https://medium.com/@vipulsonule71/%EF%B8%8F-%EF%B8%8F-hackers-recon-guide-how-to-fingerprint-any-website-like-a-pro-9166f23dd4eb?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, bug-bounty-tips, hacking, cybersecurity, penetration-testing | 09-Apr-2025 |
| A useful tool for bug hunters | https://medium.com/@loyalonlytoday/a-useful-tool-for-bug-hunters-6d22ba356f08?source=rss------bug_bounty-5 | loyalonlytoday | ethical-hacking, tips, bug-bounty, tools, cybersecurity | 09-Apr-2025 |
| 5 Quick Wins: Exploit These Vulnerabilities for Huge Bug Bounty Paydays | https://smartscanner.medium.com/5-quick-wins-exploit-these-vulnerabilities-for-huge-bug-bounty-paydays-90ad106bbe10?source=rss------bug_bounty-5 | SmartScanner | cyber-secutity, bounty-program, bounty-hunter, bug-bounty-tips, bug-bounty | 09-Apr-2025 |
| How a ₹1 Gift Card Hack Cost ₹50 Lakh (PVRCinemas): Why Bug Bounty Programs Are a Business… | https://osintteam.blog/how-a-1-gift-card-cost-50-lakh-pvrcinemas-why-bug-bounty-programs-are-a-business-essential-c57d50f8a95b?source=rss------bug_bounty-5 | Vivek PS | ethical-hacking, bug-bounty, programming, artificial-intelligence, cybersecurity | 09-Apr-2025 |
| Chasing Bounties: Sometimes You Find Them, Sometimes They Find You | https://medium.com/@Ellatora/chasing-bounties-sometimes-you-find-them-sometimes-they-find-you-2db172282dfc?source=rss------bug_bounty-5 | Ellatora | osint, bug-bounty, friendship, cybersecurity, cyberjourney | 09-Apr-2025 |
| From Broken Code to SQL Showdown: How I Found Critical Blind Injection | https://infosecwriteups.com/from-broken-code-to-sql-showdown-how-i-found-critical-blind-injection-9ae06e5e7010?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty-tips, money, bug-bounty, cybersecurity | 09-Apr-2025 |
| Privilege escalation worth — $$$ | https://medium.com/@zildaxx/privilege-escalation-worth-e8cd18fc6cb7?source=rss------bug_bounty-5 | zildaxx | bug-bounty, bug-bounty-tips | 09-Apr-2025 |
| Stored HTML Injection — Email Invite Manipulation | https://ehteshamulhaq198.medium.com/stored-html-injection-email-invite-manipulation-63022e21d5db?source=rss------bug_bounty-5 | Ehtesham Ul Haq | infosec, penetration-testing, bug-bounty, bug-bounty-writeup, html | 09-Apr-2025 |
| The $1,000,000 Bug: How I Spent 3 Months on a Single Target and Found the Most Critical Chain of My… | https://theindiannetwork.medium.com/the-1-000-000-bug-how-i-spent-3-months-on-a-single-target-and-found-the-most-critical-chain-of-my-5827cd7dc866?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty-tips, jwt-token, bug-bounty, bug-bounty-writeup, jwt | 09-Apr-2025 |
| How I Bypassed 2FA Twice on the Same Target | https://medium.com/@georgeughh/how-i-bypassed-2fa-twice-on-the-same-target-198c08954e82?source=rss------bug_bounty-5 | georgeughh | business-logic-bug, ethical-hacking, bug-bounty, cybersecurity | 09-Apr-2025 |
| Cross-Site Scripting (XSS) Attack Identifying And Testing | https://medium.com/@Maleesha.Rathnayaka/cross-site-scripting-xss-attack-identifying-and-testing-07dc5437e1c4?source=rss------bug_bounty-5 | Maleesha Rathnayaka | xss-vulnerability, web-security, infosec, cybersecurity, bug-bounty | 09-Apr-2025 |
| A Silent Account Takeover That Didn’t Make It — But Still Matters | https://medium.com/@unionx24/a-silent-account-takeover-that-didnt-make-it-but-still-matters-5b189b5f1d2e?source=rss------bug_bounty-5 | unionx24 | bug-bounty, hackerone, cybersecurity, writeup | 09-Apr-2025 |
| Uncommon Headers That Bypass Everything (Almost): Bug Bounty Edition — 2025 | https://medium.com/@gasmask/uncommon-headers-that-bypass-everything-almost-bug-bounty-edition-2025-9d2ea65b2076?source=rss------bug_bounty-5 | gasmask | web-application-security, penetration-testing, cybersecurity, beginner, bug-bounty | 09-Apr-2025 |
| Ingress-NGINX Under Siege: A Deep Dive into CVE-2025–1974 and Cluster Security | https://fr3ak-hacks.medium.com/ingress-nginx-under-siege-a-deep-dive-into-cve-2025-1974-and-cluster-security-a11744cb76d3?source=rss------bug_bounty-5 | Anindya Sankar Roy | nginx-ingress, web-hacking, wiz, bug-bounty, rce | 09-Apr-2025 |
| Blind XSS: A Tale of Curiosity | https://medium.com/@negan0/blind-xss-a-tale-of-curiosity-501d47c0256c?source=rss------bug_bounty-5 | negan0 | xs, api-sec, blind-xss, self-xss, bug-bounty | 09-Apr-2025 |
| Critical Security Flaw Discovered in LSG IPL Team’s Website: Wallet Manipulation Vulnerability | https://medium.com/@deepak7903800/critical-security-flaw-discovered-in-lsg-ipl-teams-website-wallet-manipulation-vulnerability-21c485c6e36f?source=rss------bug_bounty-5 | Deepak kumar | ipl, hacking, bug-bounty, information-security, cybersecurity | 09-Apr-2025 |
| Finding Exposed Sensitive API Keys in JS Files — A Hacker’s Guide ️♂️ | https://medium.com/@vipulsonule71/finding-exposed-sensitive-api-keys-in-js-files-a-hackers-guide-%EF%B8%8F-%EF%B8%8F-50809fe2c52a?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty-tips, hacking, bug-bounty, ethical-hacking, cybersecurity | 09-Apr-2025 |
| Part 2: Advanced JS Extraction & Analysis Automation for Bug Bounty Recon | https://cyberw1ng.medium.com/part-2-advanced-js-extraction-analysis-automation-for-bug-bounty-recon-5535e5e04463?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, cybersecurity, automation, bug-bounty, javascript | 09-Apr-2025 |
| HTML for Deep Understanding | https://medium.com/@zoningxtr/html-for-deep-understanding-da69c8204e55?source=rss------bug_bounty-5 | Zoningxtr | javascript, penetration-testing, web-development, html, bug-bounty | 09-Apr-2025 |
| $100-$1000 Worth Subdomain Takeover | Easy Bounty Methodology | https://infosecwriteups.com/100-1000-worth-subdomain-takeover-easy-bounty-methodology-6daf9beacb31?source=rss------bug_bounty-5 | It4chis3c | secrets, subdomain-takeover, reconnaissance, bug-bounty, hidden | 09-Apr-2025 |
| Part 2: Advanced JS Extraction & Analysis Automation for Bug Bounty Recon | https://osintteam.blog/part-2-advanced-js-extraction-analysis-automation-for-bug-bounty-recon-5535e5e04463?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, cybersecurity, automation, bug-bounty, javascript | 09-Apr-2025 |
| HTTP Status Codes: Overlooked Clues in Bug Bounty | https://medium.com/@cadeeper/http-status-codes-overlooked-clues-in-bug-bounty-f5b0efd556fc?source=rss------bug_bounty-5 | Inv | pentesting, cybersecurity, bug-bounty, vulnerability, web-security | 08-Apr-2025 |
| SQL injection attack, querying the database type and version on Oracle — PortSwigger | https://arayofhope7.medium.com/sql-injection-attack-querying-the-database-type-and-version-on-oracle-portswigger-904487db7d3d?source=rss------bug_bounty-5 | RayofHope | web-penetration-testing, vapt, bug-bounty, cyber-security-training, penetration-testing | 08-Apr-2025 |
| A Beginner's Guide to Bug Bounties. | https://medium.com/@richard_wachara/a-beginners-guide-to-bug-bounties-f710b10ae188?source=rss------bug_bounty-5 | RicOnTech | hackathons, bugs, bug-bounty, ethical-hacking, hacking | 08-Apr-2025 |
| Living off the Land Binaries (LOLBins): How Attackers Use Built-In Tools Against You | https://medium.com/@paritoshblogs/living-off-the-land-binaries-lolbins-how-attackers-use-built-in-tools-against-you-24c0cb91ba20?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-technology, hacking, lolbin, cybersecurity | 08-Apr-2025 |
| AI vs. Hackers: Can AI Help in Bug Bounty or Is It Just a Hype? | https://infosecwriteups.com/ai-vs-hackers-can-ai-help-in-bug-bounty-or-is-it-just-a-hype-04ce56b454d6?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacker, ai, cybersecurity, hacking, bug-bounty | 08-Apr-2025 |
| How Hackers Find Social Accounts & Passwords | https://medium.com/@vipulsonule71/how-hackers-find-social-accounts-passwords-1156e14e2faf?source=rss------bug_bounty-5 | Vipul Sonule | technology, ethical-hacking, hacking, bug-bounty, cybersecurity | 08-Apr-2025 |
| Helpful website to find bug bounty and VDP programs | https://medium.com/meetcyber/helpful-website-to-find-bug-bounty-and-vdp-programs-eef63aca3b04?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, cybersecurity, bug-bounty-program, bug-bounty, bug-bounty-hunter | 08-Apr-2025 |
| From Recon to RCE: How AI and a cup of Boost Helped Me Turn SQLi into a Command Injection Jackpot… | https://infosecwriteups.com/from-recon-to-rce-how-ai-and-a-cup-of-boost-helped-me-turn-sqli-into-a-command-injection-jackpot-1f62dc829956?source=rss------bug_bounty-5 | Iski | cybersecurity, hacking, infosec, bug-bounty, bug-bounty-tips | 08-Apr-2025 |
| Rlogin — Port 513 — How to exploit? | https://medium.com/@verylazytech/rlogin-port-513-how-to-exploit-276acd0e30b6?source=rss------bug_bounty-5 | Very Lazy Tech | oscp, hacking, penetration-testing, bug-bounty, ethical-hacking | 08-Apr-2025 |
| Unique MFA / Email Verification Bypass | Bug Bounty Methodology | https://progprnv.medium.com/unique-mfa-email-verification-bypass-bug-bounty-methodology-6f4c2d4c4c36?source=rss------bug_bounty-5 | progprnv | bypass, methodology, cybersecurity, bug-bounty, bug-bounty-tips | 08-Apr-2025 |
| No Program, No Permission — Still Got a Bounty for Doing the Right Thing | https://medium.com/@Arioex/no-program-no-permission-still-got-a-bounty-for-doing-the-right-thing-eeb084c9bf88?source=rss------bug_bounty-5 | Huntsman | bug-bounty, cybersecurity, vulnerability, bug-bounty-tips, hacking | 08-Apr-2025 |
| Hosting a Successful CTF event at Your College on a LAN or Using the Cloud. | https://medium.com/@shashank_d_s/hosting-a-successful-ctf-event-at-your-college-on-a-lan-or-using-the-cloud-767da16c92af?source=rss------bug_bounty-5 | D4rkHxnd | cybersecurity, penetration-testing, bug-bounty, ctf, capture-the-flag | 08-Apr-2025 |
| Top 5 Social Engineering Attacks and How Hackers Trick Humans | https://medium.com/@vipulsonule71/top-5-social-engineering-attacks-and-how-hackers-trick-humans-ff8651f9e6a7?source=rss------bug_bounty-5 | Vipul Sonule | hacking, ethical-hacking, bug-bounty, cybersecurity, ai | 08-Apr-2025 |
| IDOR in Avatar Selection Allows Unauthorized Access to Premium Avatars | https://mmnahian.medium.com/idor-in-avatar-selection-allows-unauthorized-access-to-premium-avatars-57ab276d2b6e?source=rss------bug_bounty-5 | mmnahian | penetration-testing, bug-bounty, web-app-security, infosec, bug-bounty-tips | 08-Apr-2025 |
| Automate JavaScript (JS) Extraction for Bug Bounty Recon | https://cyberw1ng.medium.com/automate-javascript-js-extraction-for-bug-bounty-recon-6faab744d22e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | osint, cybersecurity, bug-bounty, programming, careers | 08-Apr-2025 |
| My First Valid Bug in Hacker One (VDP)Programs Using Google Dorking | https://medium.com/@es0557533/my-first-valid-bug-in-hacker-one-vdp-programs-using-google-dorking-913926fb8489?source=rss------bug_bounty-5 | Isv | bug-zero, bugbounty-writeup, bug-bounty, google-dorking, bug-bounty-tips | 08-Apr-2025 |
| This is how i use browser to fetch JS endpoints for good paying bugs | https://osintteam.blog/this-is-how-i-use-browser-to-fetch-js-endpoints-for-good-paying-bugs-3ca824e20aa5?source=rss------bug_bounty-5 | Canonminibeast | bug-bounty-writeup, cybersecurity, bug-bounty, hacking-tools, bug-bounty-tips | 08-Apr-2025 |
| Automate JavaScript (JS) Extraction for Bug Bounty Recon | https://osintteam.blog/automate-javascript-js-extraction-for-bug-bounty-recon-6faab744d22e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | osint, cybersecurity, bug-bounty, programming, careers | 08-Apr-2025 |
| CVE-2025–31420: wpForo <= 2.4.2 — Authenticated Privilege Escalation | https://revan-ar.medium.com/cve-2025-31420-wpforo-2-4-2-authenticated-privilege-escalation-99b1aa7498b6?source=rss------bug_bounty-5 | Revan A | bug-bounty, penetration-testing, wordpress-plugins, vulnerability, privilege-escalation | 07-Apr-2025 |
| My Cyber Security Bug Bounty Side Hustle Paid Off My Mortgage | https://medium.com/@swaroop.sy/my-cyber-security-bug-bounty-side-hustle-paid-off-my-mortgage-c7b31ad74219?source=rss------bug_bounty-5 | Swaroop Yermalkar | pentesting, cybersecurity, bug-bounty, informaiton-security | 07-Apr-2025 |
| BUG BOUNTY FRAUD : The Dark Side of Bug Bounty: From Rewards to Punishment | https://medium.com/@krivadna_87390/bug-bounty-fraud-the-dark-side-of-bug-bounty-from-rewards-to-punishment-a2b671ec64b6?source=rss------bug_bounty-5 | Krivadna | cybersecurity, bug-bounty, info-sec-writeups, freelancing, bugbounty-writeup | 07-Apr-2025 |
| Exploiting Unconventional Open Redirects by Manipulating URL Parsing | https://medium.com/@itamar.yochpaz/exploiting-unconventional-open-redirects-by-manipulating-url-parsing-9e3eee575d31?source=rss------bug_bounty-5 | Itamar Yochpaz | hacking, ethical-hacking, bug-bounty, cybersecurity, penetration-testing | 07-Apr-2025 |
| Hackers’ Hidden Playground: Exploiting Underrated Web Vulnerabilities Like a Pro | https://infosecwriteups.com/hackers-hidden-playground-exploiting-underrated-web-vulnerabilities-like-a-pro-e62ce0887ee7?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, hacker, hacking, bug-bounty, ai | 07-Apr-2025 |
| AI Jailbreak walkthrough. | https://medium.com/@anandrishav2228/ai-jailbreak-walkthrough-4be9229a8e53?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, hacking, bug-bounty, ai, money | 07-Apr-2025 |
| #Bugbountyfraud Reddit Triaged report on Hackerone for banned URL Bypass I Clearly Proved was… | https://medium.com/@krivadna_87390/bugbountyfraud-reddit-triaged-report-on-hackerone-for-banned-url-bypass-i-clearly-proved-was-0a0aff79578d?source=rss------bug_bounty-5 | Krivadna | info-sec-writeups, infosec, bug-bounty, bugbounty-writeup, cybersecurity | 07-Apr-2025 |
| Unmasking GraphQL: Your Next Bug Bounty Goldmine — The Deep Dive ️♂️ | https://medium.com/@shaikrief2/unmasking-graphql-your-next-bug-bounty-goldmine-the-deep-dive-%EF%B8%8F-%EF%B8%8F-759b732ddcd1?source=rss------bug_bounty-5 | Shxikrf | bug-bounty, api-security, graphql, cybersecurity, web-security | 07-Apr-2025 |
| Non-English Dorks to Find Bug Bounty & VDP Programs | https://cybersecuritywriteups.com/non-english-dorks-to-find-bug-bounty-vdp-programs-d799f0a5161c?source=rss------bug_bounty-5 | AbhirupKonwar | osint, bug-bounty-tips, bug-bounty, ethical-hacking, pentesting | 07-Apr-2025 |
| How AI Helped Me Turn a Sneaky SQL Param into a Full-Blown RFI Madness | https://infosecwriteups.com/how-ai-helped-me-turn-a-sneaky-sql-param-into-a-full-blown-rfi-madness-31837311f6bd?source=rss------bug_bounty-5 | Iski | bug-bounty, hacking, bug-bounty-tips, cybersecurity, infosec | 07-Apr-2025 |
| When Google Dorking becomes the ultimate Game Changer to Find a Bug on the Indian Government | https://osintteam.blog/when-google-dorking-becomes-the-ultimate-game-changer-to-find-a-bug-on-the-indian-government-f1ec94642c84?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty, google-dork, bug-bounty-tips, osint, dorking | 07-Apr-2025 |
| The ultimate offensive security learning bundle - a combined review of Hack The Box Academy’s CPTS… | https://pyth0nk1d.medium.com/the-ultimate-offensive-security-learning-bundle-a-combined-review-of-hack-the-box-academys-cpts-d9883d766770?source=rss------bug_bounty-5 | David Prieto Montero | bug-bounty, offensive-security, certification, hackthebox, penetration-testing | 07-Apr-2025 |
| Rsh — Port 514 — How to exploit? | https://medium.com/@verylazytech/rsh-port-514-how-to-exploit-025554369230?source=rss------bug_bounty-5 | Very Lazy Tech | oscp, bug-bounty, penetration-testing, rsh, ethical-hacking | 07-Apr-2025 |
| IDOR Exposed: How a Simple ID Can Leak Millions of Records | https://infosecwriteups.com/idor-exposed-how-a-simple-id-can-leak-millions-of-records-890d9f200d0a?source=rss------bug_bounty-5 | Elie Attieh | pentesting, bug-bounty, cybersecurity, bug-bounty-tips, penetration-testing | 07-Apr-2025 |
| Line Printer Daemon (LPD) — Port 515 — How to exploit? | https://medium.com/@verylazytech/line-printer-daemon-lpd-port-515-how-to-exploit-841142039707?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, oscp, hacking, penetration-testing, bug-bounty | 07-Apr-2025 |
| Hacking JavaScript files to get the Sensitive Data | https://anishkashukla.medium.com/hacking-javascript-files-to-get-the-sensitive-data-2526416a8afd?source=rss------bug_bounty-5 | Anishka Shukla | cybersecurity, infosec, bug-bounty, bug-bounty-tips, penetration-testing | 07-Apr-2025 |
| HackingHub — Prison Hack Senaryosu | https://aliekberkara.medium.com/hackinghub-prison-hack-senaryosu-e80bc482933f?source=rss------bug_bounty-5 | Ali Ekber KARA | prison, cybersecurity, bug-bounty, discovery, hacking | 07-Apr-2025 |
| How I Stumbled Into an SQLi at 2 AM (Instead of Doing My Job) | https://medium.com/@ramshath1999/how-i-stumbled-into-an-sqli-at-2-am-instead-of-doing-my-job-4506135dea3a?source=rss------bug_bounty-5 | Ramshath | hacking, bug-bounty, sql-injection, cybersecurity | 07-Apr-2025 |
| How I Found Sensitive Information using Github Dorks in Bug Bounties — Part 3 | https://mukibas37.medium.com/how-i-found-sensitive-information-using-github-dorks-in-bug-bounties-part-3-750f62908508?source=rss------bug_bounty-5 | Mukilan Baskaran | cybersecurity, bug-bounty, code-review, code, github | 07-Apr-2025 |
| Exposing a Major Data Leak in UPPCL: How Anyone Could Access Consumer PII | https://medium.com/@siddharth_1/exposing-a-major-data-leak-in-uppcl-how-anyone-could-access-consumer-pii-c65c10099db5?source=rss------bug_bounty-5 | Siddharth | bugs, bug-bounty, security, bug-bounty-tips | 07-Apr-2025 |
| Automating Google Dorking with Python | https://cyberw1ng.medium.com/automating-google-dorking-with-python-fcd8601fe1f0?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, programming, cybersecurity, technology, careers | 07-Apr-2025 |
| How AI Helped Me to Bypass 403 — Forbidden | https://infosecwriteups.com/how-ai-helped-me-to-bypass-403-forbidden-06becd32b999?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, hacking, ai, artificial-intelligence, secrets | 07-Apr-2025 |
| Passive URL gathering tool for bug hunters | https://medium.com/@loyalonlytoday/passive-url-gathering-tool-for-bug-hunters-75d7385217a5?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, penetration-testing, ethical-hacking, bug-bounty-tips | 06-Apr-2025 |
| Oracle Data Breach: Exploitation of CVE-2021-35587 in Oracle Access Manager | https://medium.com/@ajeemshaik7/oracle-data-breach-exploitation-of-cve-2021-35587-in-oracle-access-manager-6584bd2d3de5?source=rss------bug_bounty-5 | Calix Sharp | technology, bug-bounty-tips, cybersecurity, future, bug-bounty | 06-Apr-2025 |
| Can AI Hack Websites? Testing the Limits of ChatGPT and Cybersecurity | https://infosecwriteups.com/can-ai-hack-websites-testing-the-limits-of-chatgpt-and-cybersecurity-4e2bc9635bea?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, bug-bounty, ai, cybersecurity, chatgpt | 06-Apr-2025 |
| Remix and React Router Vulnerability CVE-2025–31137 -$$$$ BOUNTY | https://infosecwriteups.com/remix-and-react-router-vulnerability-cve-2025-31137-bounty-c0c716f44888?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, information-security, bug-bounty, cybersecurity, cyberattack | 06-Apr-2025 |
| Error Messages From Hell: 25 Cryptic Warnings That Left Developers in Tears | https://medium.com/@coders.stop/error-messages-from-hell-25-cryptic-warnings-that-left-developers-in-tears-a87c0c8f2082?source=rss------bug_bounty-5 | Coders Stop | bug-bounty, software-development, programming, error-message, error-handling | 06-Apr-2025 |
| Apple Filing Protocol (AFP) — PORT 548 — How to exploit? | https://medium.com/@verylazytech/apple-filing-protocol-afp-port-548-how-to-exploit-eb4dbb3804f7?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, bug-bounty, penetration-testing, port-548, hacking | 06-Apr-2025 |
| how i found the broken access control vulnerability? | https://doordiefordream.medium.com/how-i-found-the-broken-access-control-vulnerability-5ad1b3083c6d?source=rss------bug_bounty-5 | DOD cyber solutions | technology, cybersecurity, security, ethical-hacking, bug-bounty | 06-Apr-2025 |
| Bountymine: The Cleanest Cybersecurity Guide that You Shouldn’t Miss | https://medium.com/developersglobal/bountymine-the-cleanest-cybersecurity-guide-that-you-shouldnt-miss-6f18a36451da?source=rss------bug_bounty-5 | Gopalakrishnan | bug-bounty-tips, bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-hunting | 06-Apr-2025 |
| Another Day, Another ₹500 reward: The Not-So-Fancy Reality of Bug Hunting | https://osintteam.blog/another-day-another-500-reward-the-not-so-fancy-reality-of-bug-hunting-545b5ce4c512?source=rss------bug_bounty-5 | Vivek PS | programming, web-development, hacking, bug-bounty, ethical-hacking | 06-Apr-2025 |
| SQL injection vulnerability allowing login bypass — Post Method | https://arayofhope7.medium.com/sql-injection-vulnerability-allowing-login-bypass-post-method-9d219a201de7?source=rss------bug_bounty-5 | RayofHope | cyber-security-training, web-penetration-testing, penetration-testing, vapt, bug-bounty | 06-Apr-2025 |
| block chain introduction | https://doordiefordream.medium.com/block-chain-introduction-d0e1806d9c02?source=rss------bug_bounty-5 | DOD cyber solutions | cybersecurity, bug-bounty, web3, bitcoin, blockchain | 06-Apr-2025 |
| JavaScript Built-in Functions | https://medium.com/@zoningxtr/javascript-built-in-functions-7a4070ca592a?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, javascript, penetration-testing, javascript-development, cybersecurity | 06-Apr-2025 |
| JavaScript Jump Start Series. | https://medium.com/@zoningxtr/javascript-jump-start-series-4bf380051fac?source=rss------bug_bounty-5 | Zoningxtr | javascript, javascript-tips, penetration-testing, bug-bounty, cybersecurity | 06-Apr-2025 |
| How Hackers Exploit CVE-2025–29927 in Next.js Like a Pro | https://infosecwriteups.com/how-hackers-exploit-cve-2025-29927-in-next-js-like-a-pro-9997f48ed7ce?source=rss------bug_bounty-5 | coffinxp | bug-bounty-tips, cybersecurity, bug-bounty, technology, nextjs | 06-Apr-2025 |
| How to become a BugBounty Hunter in 2025. Detailed Roadmap !! | https://medium.com/@0026rsb/how-to-become-a-bugbounty-hunter-in-2025-detailed-roadmap-084f1233ef8b?source=rss------bug_bounty-5 | Rupesh_rs | roadmaps, career-in-cybersecurity, bug-bounty | 06-Apr-2025 |
| “One Click, No Consent” — How I Unsubscribed Any User from [target.com] Without Logging In | https://cybersecuritywriteups.com/one-click-no-consent-how-i-unsubscribed-any-user-from-target-com-without-logging-in-ef4897f73158?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips, ethical-hacking | 06-Apr-2025 |
| RECON GHOST: The 83% Faster Recon Tool That Almost Broke Me | https://mfaizananwar.medium.com/recon-ghost-the-83-faster-recon-tool-that-almost-broke-me-eb78a7b267c4?source=rss------bug_bounty-5 | Muhammad Faizan Anwar | bug-bounty, offensive-security, cybersecurity, nmap, penetration-testing | 06-Apr-2025 |
| How to Gather PII From Websites Using Python | https://cyberw1ng.medium.com/how-to-gather-pii-from-websites-using-python-949d36cd8a06?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, technology, programming, bug-bounty, careers | 06-Apr-2025 |
| Duty Free: A White-Hat Forum with a Shadowed Past | https://medium.com/@vasekpentester/duty-free-a-white-hat-forum-with-a-shadowed-past-5cc92ca1c3e7?source=rss------bug_bounty-5 | vasek | ethical-hacking, hacking, penetration-testing, bug-bounty, hacker | 06-Apr-2025 |
| Duty Free как зарождался новый форум для белых хакеров | https://medium.com/@vasekpentester/duty-free-%D0%BA%D0%B0%D0%BA-%D0%B7%D0%B0%D1%80%D0%BE%D0%B6%D0%B4%D0%B0%D0%BB%D1%81%D1%8F-%D0%BD%D0%BE%D0%B2%D1%8B%D0%B9-%D1%84%D0%BE%D1%80%D1%83%D0%BC-%D0%B4%D0%BB%D1%8F-%D0%B1%D0%B5%D0%BB%D1%8B%D1%85-%D1%85%D0%B0%D0%BA%D0%B5%D1%80%D0%BE%D0%B2-55a0e83a1564?source=rss------bug_bounty-5 | vasek | pentesting, bug-bounty, exploit, hacking, forum | 06-Apr-2025 |
| How to become a BugBounty Hunter in 2025. Detailed Roadmap !! | https://medium.com/@RsHack3r/how-to-become-a-bugbounty-hunter-in-2025-detailed-roadmap-084f1233ef8b?source=rss------bug_bounty-5 | Rupesh_rs | roadmaps, career-in-cybersecurity, bug-bounty | 06-Apr-2025 |
| 100 Google Dorks for Low-Hanging Bug Hunting — Hunt Like a Pro | https://osintteam.blog/100-google-dorks-for-low-hanging-bug-hunting-hunt-like-a-pro-be0a4c29e557?source=rss------bug_bounty-5 | Adarsh Pandey | osint, cybersecurity, bug-bounty, google, dorks | 05-Apr-2025 |
| Uncover Hidden Bugs | https://osintteam.blog/uncover-hidden-bugs-851603d187dd?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty, bug-bounty-tips, technology, hacking | 05-Apr-2025 |
| A list of tools that will help to find XSS(cross-site scripting ) vulnerability. | https://medium.com/@loyalonlytoday/a-list-of-tools-that-will-help-to-find-xss-cross-site-scripting-vulnerability-037dfe279f51?source=rss------bug_bounty-5 | loyalonlytoday | xss-attack, tools, cybersecurity, xss-vulnerability, bug-bounty | 05-Apr-2025 |
| The story of Conti: part 1 | https://medium.com/@jakboubmostefa/the-story-of-conti-part-1-c1285a89696f?source=rss------bug_bounty-5 | Mostefa Jakboub | cybersecurity, ransomeware, malware, c-plus-plus-language, bug-bounty | 05-Apr-2025 |
| JWT Vulnerabilities: How Misconfigurations Can Lead to Authentication Bypass | https://bitpanic.medium.com/jwt-vulnerabilities-how-misconfigurations-can-lead-to-authentication-bypass-96d520194b6d?source=rss------bug_bounty-5 | Spectat0rguy | ai-generated-content, technology, programming, bug-bounty, cybersecurity | 05-Apr-2025 |
| We Did Everything Right… and Still Got Exploited: What Went Wrong? ‼️ | https://securrtech.medium.com/we-did-everything-right-and-still-got-exploited-what-went-wrong-%EF%B8%8F-79b7cb973008?source=rss------bug_bounty-5 | Securr - Web3 Security | web3-security, bug-bounty, smart-contract-security, smart-contract-auditing, blockchain-security | 05-Apr-2025 |
| ️ SSRF to RCE: How I Turned a Small Bug Into a Big Paycheck | https://infosecwriteups.com/%EF%B8%8F-ssrf-to-rce-how-i-turned-a-small-bug-into-a-big-paycheck-574b6b889d2a?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, ssrf, rce, bug-bounty, cybersecurity | 05-Apr-2025 |
| RTSP — Port 554, 8554 — How to exploit? | https://medium.com/@verylazytech/rtsp-port-554-8554-how-to-exploit-674df4aca649?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, port-554, ethical-hacking, penetration-testing | 05-Apr-2025 |
| Day 29 — CSRF Bypass Using Domain Confusion Leads To Account Takeover (ATO) | https://medium.com/@danielbelay/day-29-csrf-bypass-using-domain-confusion-leads-to-account-takeover-ato-bfd27b975e80?source=rss------bug_bounty-5 | dani3l | bug-bounty, ato, account-takeover, cybersecurity | 05-Apr-2025 |
| Open Bug Bounty — Your XSS Gym | https://osintteam.blog/open-bug-bounty-your-xss-gym-75fed886d2c0?source=rss------bug_bounty-5 | RivuDon | openbugbounty, xss-attack, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 05-Apr-2025 |
| SQL injection vulnerability in WHERE clause allowing retrieval of hidden data — PortSwigger | https://arayofhope7.medium.com/sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data-portswigger-12342def10ec?source=rss------bug_bounty-5 | RayofHope | penetration-testing, cyber-security-courses, sql-injection, bug-bounty, vapt | 05-Apr-2025 |
| Scroll, Find, Boom! How I Tripped Over a Bounty in Just 3 Lines of Code | https://myselfakash20.medium.com/scroll-find-boom-how-i-tripped-over-a-bounty-in-just-3-lines-of-code-18806bafd56c?source=rss------bug_bounty-5 | Akash Ghosh | ethical-hacking, infosec, cybersecurity, bug-bounty, bug-bounty-tips | 05-Apr-2025 |
| How to Bypass Phone Number Validation for Unlimited Free Trials | https://medium.com/@Youseef/how-to-bypass-phone-number-validation-for-unlimited-free-trials-98d8bf2f0955?source=rss------bug_bounty-5 | Yousseff | bug-bounty, web-penetration-testing, penetration-testing, hackerone, bug-hunting | 05-Apr-2025 |
| How I Bypassed Xiaomi’s Rate Limit with Just a Few Extra Slashes /// | https://infosecxsalman.medium.com/how-i-bypassed-xiaomis-rate-limit-with-just-a-few-extra-slashes-425b00ded794?source=rss------bug_bounty-5 | Salman | bug-bounty, hackerone, security, bug-bounty-writeup, rate-limit-bypass | 05-Apr-2025 |
| CORS Misconfiguration: Bug Bounty Tips to Find and Exploit These Vulnerabilities | https://frostyxsec.medium.com/cors-misconfiguration-bug-bounty-tips-to-find-and-exploit-these-vulnerabilities-4856d0a954af?source=rss------bug_bounty-5 | Frostyxsec | bug-bounty, bug-bounty-hunter, bug-bounty-writeup, bug-hunting, bug-bouty-tips | 05-Apr-2025 |
| The AI paradox in bug bounty: Increased efficiency or noise saturation? | https://medium.com/@ce.barquet/the-ai-paradox-in-bug-bounty-increased-efficiency-or-noise-saturation-4aab10d94979?source=rss------bug_bounty-5 | Luthierc | cybersecurity, artificial-intelligence, bug-bounty, ai, technology | 05-Apr-2025 |
| Bypassing OTP Verification | https://medium.com/@Youseef/bypassing-otp-verification-412978abb332?source=rss------bug_bounty-5 | Yousseff | bug-bounty, cybersecurity, business-logic-flaw, web-penetration-testing | 05-Apr-2025 |
| $150 IDOR️♂️ — How I Added My Own Dishes to a Restaurant Menu | https://medium.com/@yahiasherif/150-idor-%EF%B8%8F-%EF%B8%8F-how-i-added-my-own-dishes-to-a-restaurant-menu-399dce077878?source=rss------bug_bounty-5 | Yahia Sherif | bug-bounty-writeup, bug-bounty, idor, pentesting, broken-access-control | 05-Apr-2025 |
| campaign monitor takeover | https://aarnavsaboo.medium.com/campaign-monitor-takeover-5cd796c3fe67?source=rss------bug_bounty-5 | Aarnav Saboo | pentesting, networking, cybersecurity, ethical-hacking, bug-bounty | 05-Apr-2025 |
| When APIs Trust Too Much: Chat Impersonation through Broken Auth [Bug bounty write-up] — Kullai 🙂 | https://kullaisec.medium.com/when-apis-trust-too-much-chat-impersonation-through-broken-auth-bug-bounty-write-up-kullai-943abecaa34d?source=rss------bug_bounty-5 | Kullai | bugbounty-writeup, pentesting, bug-bounty, cybersecurity, hacking | 05-Apr-2025 |
| From Nap to P4: A Chilled Evening Bug Hunt | https://medium.com/@gourisankara357/from-nap-to-p4-a-chilled-evening-bug-hunt-e3478f20022f?source=rss------bug_bounty-5 | Gouri Sankar A | bugcrowd, bug-bounty, infosec-write-ups, bug-hunting | 05-Apr-2025 |
| Master Recon P-1: 15+ Ways of Subdomain Scraping Techniques | My 2 Years of Bug Hunting Experience | https://medium.com/@janpreet4340/master-recon-p-1-15-ways-of-subdomain-scraping-techniques-my-2-years-of-bug-hunting-experience-c9455a30b520?source=rss------bug_bounty-5 | Janpreet Singh | bug-bounty, penetration-testing, subdomains-enumeration, recon, best | 05-Apr-2025 |
| Hacking a File Path Traversal Vulnerability: How I Retrieved /etc/passwd & Solved the Lab | https://medium.com/@sumanth1962/hacking-a-file-path-traversal-vulnerability-how-i-retrieved-etc-passwd-solved-the-lab-4e9e1a2f8aa2?source=rss------bug_bounty-5 | Sumanth Yerranagula | cybersecurity, bug-bounty, ethical-hacking, ctf-writeup, ctf | 05-Apr-2025 |
| How i found XSS and chained it with CSRF | https://medium.com/@alshormanmomen681/how-i-found-xss-and-chained-it-with-csrf-b99bc589ad5b?source=rss------bug_bounty-5 | Alshormanmomen | csrf, hacking, bug-bounty, bounties, xss-attack | 05-Apr-2025 |
| Bypassing WAFs in 2025: New Techniques and Evasion Tactics | https://medium.com/@gasmask/bypassing-wafs-in-2025-new-techniques-and-evasion-tactics-fdb3508e6b46?source=rss------bug_bounty-5 | gasmask | cybersecurity, web-application-security, beginner, penetration-testing, bug-bounty | 05-Apr-2025 |
| How I got 324$ for a PII disclosure | https://aarnavsaboo.medium.com/324-pii-disclosure-89e6b384fab7?source=rss------bug_bounty-5 | Aarnav Saboo | vulnerability, penetration-testing, bug-bounty, hacking, cybersecurity | 05-Apr-2025 |
| HackTheBox: Stocker — Bypass a Logins con Inyecciones NoSQL y Escalada de Privilegios en Node.js | https://medium.com/@zsodex/hackthebox-stocker-bypass-a-logins-con-inyecciones-nosql-y-escalada-de-privilegios-en-node-js-d0b2666149f3?source=rss------bug_bounty-5 | zSodex | cybersecurity, bug-bounty, hackthebox-writeup, penetration-testing | 05-Apr-2025 |
| Introduction to OWASP Mobile Top 10 for Android | https://cyberw1ng.medium.com/introduction-to-owasp-mobile-top-10-for-android-3be718c566f8?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, programming, bug-bounty, owasp, cybersecurity | 05-Apr-2025 |
| Google Rate Limit Bypass: Triggering Infinite Spam Requests | https://medium.com/@AhmedSamy-X/google-rate-limit-bypass-triggering-infinite-spam-requests-c360019b9c7f?source=rss------bug_bounty-5 | Ahmedsamy | ethical-hacking, bug-bounty, cybersecurity, google-hacking, information-technology | 04-Apr-2025 |
| A tool that will help to analyze security headers of your target domains. | https://medium.com/@loyalonlytoday/a-tool-that-will-help-to-analyze-security-headers-of-your-target-domains-86aa06a3fa5c?source=rss------bug_bounty-5 | loyalonlytoday | hacking, cybersecurity, penetration-testing, bug-bounty, programming | 04-Apr-2025 |
| How I Tricked a Server (with AI) Into Leaking Its Secrets | https://infosecwriteups.com/how-i-tricked-a-server-with-ai-into-leaking-its-secrets-bb18be82b81d?source=rss------bug_bounty-5 | Iski | hacking, cybersecurity, infosec, money, bug-bounty | 04-Apr-2025 |
| IPMI — Port 623/UDP/TCP — How to exploit? | https://medium.com/@verylazytech/ipmi-port-623-udp-tcp-how-to-exploit-4655ec015a0b?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, penetration-testing, bug-bounty, port-623, ipmi | 04-Apr-2025 |
| The Hidden XSS: A Bug Hidden in the Mist | https://ghostman01.medium.com/the-hidden-xss-a-bug-hidden-in-the-mist-907d6cc55322?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | hacking, bug-bounty, cybersecurity, ethical-hacking, hacker | 04-Apr-2025 |
| Creativity Over Commands: Why Hacking is 80% Mindset, 20% Tools | https://myselfakash20.medium.com/creativity-over-commands-why-hacking-is-80-mindset-20-tools-517c9ed75046?source=rss------bug_bounty-5 | Akash Ghosh | hacking, cybersecurity, bug-bounty-tips, technology, bug-bounty | 04-Apr-2025 |
| The Simple P3: Not a Joke | https://infosecwriteups.com/the-simple-p3-not-a-joke-58d957aceb63?source=rss------bug_bounty-5 | callgh0st | test, hacking, genocide, bug-bounty, bug-bounty-tips | 04-Apr-2025 |
| Automation vs. Manual Hacking: Which One Wins in Bug Bounty? | https://medium.com/@Abhijeet_kumawat_/automation-vs-manual-hacking-which-one-wins-in-bug-bounty-1b7826452c69?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, hacking, infosec, cybersecurity, ai | 04-Apr-2025 |
| Automation vs. Manual Hacking: Which One Wins in Bug Bounty? | https://infosecwriteups.com/automation-vs-manual-hacking-which-one-wins-in-bug-bounty-1b7826452c69?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, hacking, infosec, cybersecurity, ai | 04-Apr-2025 |
| Race Condition - Eating Rate Limits for Account Takeover | https://shahjerry33.medium.com/race-condition-eating-rate-limits-for-account-takeover-ff44b6dc8798?source=rss------bug_bounty-5 | Jerry Shah (Jerry) | infosec, vulnerability, cybersecurity, pentesting, bug-bounty | 04-Apr-2025 |
| Extract all Bug Bounty programs | https://osintteam.blog/extract-all-bug-bounty-programs-df37ebd86530?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, bug-bounty, ethical-hacking, pentesting, penetration-testing | 04-Apr-2025 |
| How to Hackers hack CCTV | https://infosecwriteups.com/how-to-hackers-hack-cctv-a55b03a4ddf8?source=rss------bug_bounty-5 | Mr Horbio | hacking, cctv, ethical-hacking, bug-bounty, cybersecurity | 04-Apr-2025 |
| Creativity Over Commands: Why Hacking is 80% Mindset, 20% Tools | https://infosecwriteups.com/creativity-over-commands-why-hacking-is-80-mindset-20-tools-517c9ed75046?source=rss------bug_bounty-5 | Akash Ghosh | hacking, infosec, cybersecurity, technology, bug-bounty | 04-Apr-2025 |
| $150 IDOR️♂️ — How I Added My Own Dishes to a Restaurant Menu | https://medium.com/@yahiasherif/150-idor-%EF%B8%8F-%EF%B8%8F-how-i-added-my-own-dishes-to-a-restaurant-menu-a0b4a78c1d8a?source=rss------bug_bounty-5 | Yahia Sherif | bug-bounty-writeup, bug-bounty, broken-access-control, idor, pentesting | 04-Apr-2025 |
| The Biggest Password Leaks in History: Lessons from Millions of Stolen Accounts | https://medium.com/@vipulsonule71/the-biggest-password-leaks-in-history-lessons-from-millions-of-stolen-accounts-30e1b9d519b3?source=rss------bug_bounty-5 | Vipul Sonule | hacking, cybersecurity, ethical-hacking, bug-bounty, penetration-testing | 04-Apr-2025 |
| Google Classroom IDOR: Mute Anyone, Even the Owner… But Ignored | https://v0ltex.medium.com/google-classroom-idor-mute-anyone-even-the-owner-but-ignored-58def4627507?source=rss------bug_bounty-5 | Abdo Rabea (VolteX) | bug-bounty, broken-access-control, google-vrp, idor, writeup | 04-Apr-2025 |
| Introduction to OWASP Top 10 API Vulnerability | https://cyberw1ng.medium.com/introduction-to-owasp-top-10-api-vulnerability-43a239e782b7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | api, bug-bounty, programming, cybersecurity, careers | 04-Apr-2025 |
| Mastering Logic Bugs: A Checklist for Bug Hunters — Part 3: Account Takeover (ATO ) | https://medium.com/@mahdisalhi0500/mastering-logic-bugs-a-checklist-for-bug-hunters-part-3-account-takeover-ato-7af98ce87aa3?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, bug-bounty, hacking, information-security, penetration-testing | 04-Apr-2025 |
| Guide to Identifying and Exploiting TOCTOU Race Conditions in Web Applications | https://fdzdev.medium.com/guide-to-identifying-and-exploiting-toctou-race-conditions-in-web-applications-c5f233e32b7f?source=rss------bug_bounty-5 | Facundo Fernandez | penetration-testing, ethical-hacking, cybersecurity, hacking, bug-bounty | 04-Apr-2025 |
| Unauthenticated Admin Profile Disclosure via GraphQL IDOR — A Real-World Bug Bounty Find. | https://medium.com/@yasser0hamoda1/unauthenticated-admin-profile-disclosure-via-graphql-idor-a-real-world-bug-bounty-find-f8647eae5237?source=rss------bug_bounty-5 | Yasser Hamoda | hacking, cybersecurity, bug-bounty, infosec, programming | 03-Apr-2025 |
| Mobile Application Bounty Practice: SQL Injection Principles, Vulnerability Discovery and… | https://medium.com/@cadeeper/mobile-application-bounty-practice-sql-injection-principles-vulnerability-discovery-and-cd3e77ef380b?source=rss------bug_bounty-5 | Inv | cybersecurity, penetration-testing, bug-bounty, web-development, hacking | 03-Apr-2025 |
| How I Found a CSRF Vulnerability Leading to Account Takeover ($2,000 Bounty) | https://medium.com/@nareshkandula54/how-i-found-a-csrf-vulnerability-leading-to-account-takeover-2-000-bounty-3dc408f2f134?source=rss------bug_bounty-5 | Naresh Kandula | bug-bounty-writeup, csrf-attack, csrf-protection, bug-bounty, bugbounty-writeup | 03-Apr-2025 |
| Reverse Engineering a Browser Extension Led Me to a Dangerous Exploit! ($25,000 Bounty) | https://theindiannetwork.medium.com/reverse-engineering-a-browser-extension-led-me-to-a-dangerous-exploit-25-000-bounty-c7dda4601753?source=rss------bug_bounty-5 | TheIndianNetwork | exploitation, reverse-engineering, bug-bounty, bug-bounty-tips | 03-Apr-2025 |
| React Router and the Remix’ed path | https://medium.com/@zhero_/react-router-and-the-remixed-path-daa48d6bd6a9?source=rss------bug_bounty-5 | Rachid.A | hacking, bug-bounty, react, javascript, vulnerability | 03-Apr-2025 |
| How to Get GraphQL Introspection via WebSocket | https://medium.com/@blackarazi/how-to-get-graphql-introspection-via-websocket-5a1cf23e7bfc?source=rss------bug_bounty-5 | Azhari Harahap | application-security, graphql, api-security, bug-bounty, websocket | 03-Apr-2025 |
| Advanced File Upload Techniques Worth $1000-$5000 | https://infosecwriteups.com/advanced-file-upload-techniques-worth-1000-5000-66ad72a124bb?source=rss------bug_bounty-5 | Abhijeet Kumawat | file-upload-vulnerability, hacking, bug-bounty, infosec, cybersecurity | 03-Apr-2025 |
| Web Security Bug Bounty Write-Up: Bypassing Authentication via Logical Flaw | https://medium.com/@MGtrix/web-security-bug-bounty-write-up-bypassing-authentication-via-logical-flaw-40fb70e861ea?source=rss------bug_bounty-5 | Meysam Kheiri Koedlar | ctf-writeup, bug-bounty, penetration-testing, cybersecurity, web-security | 03-Apr-2025 |
| Internet Printing Protocol (IPP) — Port 631 — How to exploit? | https://medium.com/@verylazytech/internet-printing-protocol-ipp-port-631-how-to-exploit-d234cf91487e?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, penetration-testing, ethical-hacking, port-631, bug-bounty | 03-Apr-2025 |
| 0-Click Account Takeover on Any Website: A Hacker’s Worst Nightmare ⚡️ | https://medium.com/@vipulsonule71/0-click-account-takeover-on-any-website-a-hackers-worst-nightmare-%EF%B8%8F-b11cefdb3d57?source=rss------bug_bounty-5 | Vipul Sonule | ai, hacking, bug-bounty, cybersecurity, penetration-testing | 03-Apr-2025 |
| Bypassing Email Verification | https://ehteshamulhaq198.medium.com/bypassing-email-verification-299d94230724?source=rss------bug_bounty-5 | Ehtesham Ul Haq | pentesting, writeup, email-verification, bug-bounty-tips, bug-bounty | 03-Apr-2025 |
| From Bug Report to HOF: My first valid bug triage from NASA VDP | https://medium.com/@nani.yashwanth12/from-bug-report-to-hof-my-first-valid-bug-triage-from-nasa-vdp-36a8a1c65072?source=rss------bug_bounty-5 | Yashwanth | security, cybersecurity, bugcrowd, bug-bounty-writeup, bug-bounty | 03-Apr-2025 |
| Privilege Escalation using SUDO || Exploit SUDO Misconfiguration | https://medium.com/@hrofficial62/privilege-escalation-using-sudo-exploit-sudo-misconfiguration-f647313c2d72?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, pentesting, hacking, bug-bounty, ethical-hacking | 03-Apr-2025 |
| Hacking Workspace for Fun & Profit: Part I | https://0xh7ml.medium.com/hacking-workspace-for-fun-profit-part-i-cd28467ea5c6?source=rss------bug_bounty-5 | Md Saikat | bug-bounty-writeup, bug-bounty, infosec | 03-Apr-2025 |
| Don’t Miss Any Authentication Layer: Bypassing Password Verification for Unauthorized Account… | https://hackersatty.medium.com/dont-miss-any-authentication-layer-bypassing-password-verification-for-unauthorized-account-46113106828b?source=rss------bug_bounty-5 | hackersatty | medium, bug-bounty-writeup, bug-bounty, idor, access-control | 03-Apr-2025 |
| How I Hacked The Chattisgarh High Court Government Portal | https://medium.com/@digvijaysunil/how-i-hacked-the-chattisgarh-high-court-government-portal-3c26f56186fe?source=rss------bug_bounty-5 | digvijaysunil | cybersecurity, vulnerability, ethical-hacking, hacking, bug-bounty | 03-Apr-2025 |
| From “Not Reproducible” to Recognition: Reflected XSS on NASA | https://medium.com/@dikstha1409/from-not-reproducible-to-recognition-reflected-xss-on-nasa-1bc008d1d459?source=rss------bug_bounty-5 | Dikshya Shrestha | nasa, bug-bounty-writeup, xss-attack, bug-bounty, recognition | 03-Apr-2025 |
| Failed XSS? CRLF to the Rescue | https://anontuttuvenus.medium.com/failed-xss-crlf-to-the-rescue-5febfc03b809?source=rss------bug_bounty-5 | Anon Tuttu Venus | bug-bounty-writeup, penetration-testing, xss-attack, crlf-injection, bug-bounty | 03-Apr-2025 |
| Email Content Html Injection | https://medium.com/@gadashov/email-content-html-injection-9f3132ed4056?source=rss------bug_bounty-5 | gadashov | bug-hunting, bug-bounty, injection, penetration-testing, html-injection | 03-Apr-2025 |
| Developers Mistake Leads to Bountiesss$$$… | https://infosecwriteups.com/developers-mistake-leads-to-bountiesss-088cf2c2ce51?source=rss------bug_bounty-5 | It4chis3c | bug-bounty-tips, bug-bounty, secrets, bug-bounty-writeup, mistakes | 03-Apr-2025 |
| Same OTP for Email & Phone? Yep, That’s a Bug! | https://strangerwhite.medium.com/same-otp-for-email-phone-yep-thats-a-bug-f346668bece6?source=rss------bug_bounty-5 | StrangeRwhite | cybersecurity, otp-bypass, information-technology, hacking, bug-bounty | 03-Apr-2025 |
| Silent Sabotage: Exploiting Stored XSS in a Chat Feature | https://medium.com/@youssefhussein212103168/silent-sabotage-exploiting-stored-xss-in-a-chat-feature-71108606b10b?source=rss------bug_bounty-5 | Youssefhussein | penetration-testing, xss-attack, stored-xss, bug-bounty, cybersecurity | 03-Apr-2025 |
| How I Turned a 403 Forbidden Into a Goldmine | https://infosecwriteups.com/how-i-turned-a-403-forbidden-into-a-goldmine-738cdf1407aa?source=rss------bug_bounty-5 | Iski | money, bug-bounty-tips, bug-bounty, hacking, cybersecurity | 03-Apr-2025 |
| Bug bounty: It’s not competition, it’s constant evolution | https://medium.com/@ce.barquet/bug-bounty-its-not-competition-it-s-constant-evolution-ffa674462689?source=rss------bug_bounty-5 | Luthierc | bug-bounty, cybersecurity, vulnerability, technology | 03-Apr-2025 |
| JWT Token Manipulation: Explotando Vulnerabilidades en la Autenticación Web | https://medium.com/@zsodex/jwt-token-manipulation-explotando-vulnerabilidades-en-la-autenticaci%C3%B3n-web-7f416c1db6b6?source=rss------bug_bounty-5 | zSodex | cybersecurity, pentesting, hacking, bug-bounty, hackthebox | 03-Apr-2025 |
| How I Uncovered a Sneaky DOM XSS Bug in a Popular Social Media Platform — And Scored a $4,000 Bug… | https://theindiannetwork.medium.com/how-i-uncovered-a-sneaky-dom-xss-bug-in-a-popular-social-media-platform-and-scored-a-4-000-bug-892c7a9f3694?source=rss------bug_bounty-5 | TheIndianNetwork | dom, dom-xss, bug-bounty, bug-bounty-tips, xss-attack | 02-Apr-2025 |
| Price Tampering Vulnerability in the Supreme Court of India | https://medium.com/@deepak7903800/price-tampering-vulnerability-in-the-supreme-court-of-india-4bd3046b2bb9?source=rss------bug_bounty-5 | Deepak kumar | bug-bounty, info-sec-writeups, cybersecurity, hacking, information-security | 02-Apr-2025 |
| You Say Premium Features? Well, Not Anymore | https://medium.com/@ahmed_salem/you-say-premium-features-well-not-anymore-e15d5afc14c9?source=rss------bug_bounty-5 | Ahmed Salem | cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 02-Apr-2025 |
| Reverse Shell Commands and How to Detect Them | https://medium.com/@paritoshblogs/reverse-shell-commands-and-how-to-detect-them-084884150776?source=rss------bug_bounty-5 | Paritosh | bug-bounty, reverse-shell, information-technology, hacking, reverse-proxy | 02-Apr-2025 |
| Web Security Vulnerabilities Every Pentester Should Know : | https://medium.com/@shamzen96/web-security-vulnerabilities-every-pentester-should-know-742f1e0fda42?source=rss------bug_bounty-5 | Shivam Raj | cybersecurity, bug-bounty, penetration-testing, ethical-hacking, web3 | 02-Apr-2025 |
| 5 Critical AWS Vulnerabilities You’re Responsible For (And How to Fix Them) | https://medium.com/@Cyber-AppSec/5-critical-aws-vulnerabilities-youre-responsible-for-and-how-to-fix-them-f7500c3e41fb?source=rss------bug_bounty-5 | Cyber-AppSec | aws, cyber-security-awareness, aws-security, bug-bounty, information-security | 02-Apr-2025 |
| How This Simple Account Takeover Gave Me 800 EUR | https://medium.com/@dineshnarasimhan27/how-this-simple-account-takeover-gave-me-800-eur-7d88a2d13a56?source=rss------bug_bounty-5 | Dinesh Narasimhan | bug-bounty-tips, account-takeover, bug-bounty-writeup, bug-bounty, hackerone | 02-Apr-2025 |
| How I Discovered a Critical Store XSS Vulnerability and Earned a $7,000 Bounty — My Struggle… | https://theindiannetwork.medium.com/how-i-discovered-a-critical-store-xss-vulnerability-and-earned-a-7-000-bounty-my-struggle-38d67b6f8ec8?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty-tips, xss-attack, bug-bounty, xss-vulnerability, stored-xss | 02-Apr-2025 |
| How I Found an SMTP Injection Bug & Earned $800 in Just 30 Minutes! | https://theindiannetwork.medium.com/ehow-i-found-an-smtp-injection-bug-earned-800-in-just-30-minutes-562f7e3b9a4a?source=rss------bug_bounty-5 | TheIndianNetwork | smtp-injection, bug-bounty, email-spoofing, bug-bounty-tips, smtp | 02-Apr-2025 |
| How I Stumbled Upon a $5$$$ Data Leak — Just by Googling! | https://medium.com/@iski/how-i-stumbled-upon-a-5-data-leak-just-by-googling-99acd54fa7ac?source=rss------bug_bounty-5 | Iski | bug-bounty, money, bug-bounty-tips, hacking, cybersecurity | 02-Apr-2025 |
| Zero to Pro The Ultimate Guide to CDX API for Your Bug Bounty Recon Journey: Let’s talk about the… | https://myselfakash20.medium.com/zero-to-pro-the-ultimate-guide-to-cdx-api-for-your-bug-bounty-recon-journey-lets-talk-about-the-353946e67872?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, cybersecurity, technology, bug-bounty, bug-bounty-tips | 02-Apr-2025 |
| My First NASA Bug Hunt — A Learning Experience! | https://medium.com/@warang.harmit/my-first-nasa-bug-hunt-a-learning-experience-9177b2eac0b0?source=rss------bug_bounty-5 | Harmit Warang (hwrng0x) | cybersecurity, ethical-hacking, infosec, bug-bounty, nasa | 02-Apr-2025 |
| Earn Bounty by just Reading. | https://medium.com/@anandrishav2228/earn-bounty-by-just-reading-dffda7e4744f?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, bug-bounty, hacking, ai, money | 02-Apr-2025 |
| How to Find Your First Bug | https://infosecwriteups.com/how-to-find-your-first-bug-52f3d57cd63e?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, infosec, hacking, cybersecurity, ai | 02-Apr-2025 |
| Bug Bounty Tips: Mastering XML-RPC Exploits Like a Pro | https://frostyxsec.medium.com/bug-bounty-hunters-mastering-xml-rpc-exploits-like-a-pro-8c9fa4c003cc?source=rss------bug_bounty-5 | Frostyxsec | bug-hunting, bug-bounty-hunter, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 02-Apr-2025 |
| Unlocking My First Bug Bounty: The Power of XSS Exploits Revealed! | https://medium.com/@rajeevmaurya82/unlocking-my-first-bug-bounty-the-power-of-xss-exploits-revealed-cbaa0ce98cc3?source=rss------bug_bounty-5 | Rajeevmaurya | bug-bounty-tips, bug-bounty, cybersecurity, xss-attack, bug-bounty-writeup | 02-Apr-2025 |
| How I Bypassed an API Security Check | https://medium.com/@iamshafayat/how-i-bypassed-an-api-security-check-db99fbd8551d?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | bug-bounty-writeup, cybersecurity, hacking, bug-bounty, bug-bounty-tips | 02-Apr-2025 |
| 8 Powerful Account Takeover (ATO) Methods and How to Exploit Them | https://medium.com/@verylazytech/8-powerful-account-takeover-ato-methods-and-how-to-exploit-them-4bafa2bdb0d0?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, hacking, bug-bounty, oscp, ethical-hacking | 02-Apr-2025 |
| $25,000 Bounty just for sensitive information disclosure | https://infosecwriteups.com/25-000-bounty-just-for-sensitive-information-disclosure-c4f6c5a81795?source=rss------bug_bounty-5 | Mr Horbio | pentesting, hacking, cybersecurity, hackerone, bug-bounty | 02-Apr-2025 |
| My Experience Reporting an XSS Vulnerability on Shein to HackerOne | https://medium.com/@24bkdoor/my-experience-reporting-an-xss-vulnerability-on-shein-to-hackerone-f482279a5e19?source=rss------bug_bounty-5 | 24BkDoor | bug-bounty, ethical-hacking, web, web-security, cybersecurity | 02-Apr-2025 |
| “Hacking the Hackers!” — Saving the HackerOne from Data Breach | https://medium.com/@avinash_/hacking-the-hackers-saving-the-hackerone-from-data-breach-75e313fa4898?source=rss------bug_bounty-5 | Avinash Kumar | bug-bounty, bug-bounty-writeup, bug-bounty-tips, hackerone, hacking | 02-Apr-2025 |
| Detecting and Blocking a Stealthy Adware: BJCAUpdate.exe Case Study | https://medium.com/@muhammetalgan3547/detecting-and-blocking-a-stealthy-adware-bjcaupdate-exe-case-study-d5cee8d7f248?source=rss------bug_bounty-5 | Muhammet ALGAN | hacking, cybersecurity, malware, bug-bounty | 02-Apr-2025 |
| How i do recon | https://osintteam.blog/how-i-do-recon-d24bea0ff421?source=rss------bug_bounty-5 | Canonminibeast | hacking, bug-bounty-tips, bug-bounty-writeup, bug-bounty, reconnaissance | 02-Apr-2025 |
| Cómo un Bug Bounty de $5,000 Puede Nacer de una Lectura Arbitraria de Archivos en Jenkins | https://medium.com/@zsodex/explotaci%C3%B3n-de-jenkins-lectura-arbitraria-de-archivos-y-escalada-de-privilegios-00197146678e?source=rss------bug_bounty-5 | zSodex | jenkins, bug-bounty, oscp-preparation, hackthebox, penetration-testing | 02-Apr-2025 |
| How to Get Into Cybersecurity With No Experience? The Ultimate Beginner’s Guide (2025) | https://medium.com/@noahlott/how-to-get-into-cybersecurity-with-no-experience-the-ultimate-beginners-guide-2025-43b938d6d31b?source=rss------bug_bounty-5 | Noah Lott | bug-bounty, pentesting, beginners-guide, how-to, cybersecurity | 02-Apr-2025 |
| Understanding HTTP Headers: A Bug Bounty Hunter’s Guide to Hidden Secrets️ | https://medium.com/@kazixabbir/understanding-http-headers-a-bug-bounty-hunters-guide-to-hidden-secrets-%EF%B8%8F-f52c5b297668?source=rss------bug_bounty-5 | Kazi Sabbir | web-security, bug-bounty, cybersecurity, ethical-hacking, web-development | 02-Apr-2025 |
| Overprivileged API and Remote Code Execution (RCE) | https://medium.com/@rkvb/overprivileged-api-and-remote-code-execution-rce-0fa5e52b022d?source=rss------bug_bounty-5 | RkVb | infosec, bug-bounty-writeup, cybersecurity, bug-bounty, hacking | 02-Apr-2025 |
| In-Depth Explanation of Each TCP Flag | https://medium.com/@zoningxtr/in-depth-explanation-of-each-tcp-flag-622d589b60e4?source=rss------bug_bounty-5 | Zoningxtr | pentesting, bug-bounty, tcp, ai, cybersecurity | 02-Apr-2025 |
| The “Oops, I Own Your Account” Password Reset Bug | https://medium.com/@dineshkumar_56604/the-oops-i-own-your-account-password-reset-bug-8d7d5fea980a?source=rss------bug_bounty-5 | Dinesh Kumar | ethical-hacking, cybersecurity, bug-bounty | 02-Apr-2025 |
| 2FA Bypass By Response Manipulation | https://medium.com/@FuzzyyDuck/2fa-bypass-by-response-manipulation-f599c2e3341f?source=rss------bug_bounty-5 | Fuzzyy Duck | bug-bounty, bug-bounty-writeup, authentication-bypass, 2fa-authentication, 2fa-bypass | 01-Apr-2025 |
| Best Tools for Bug Bounty Hunters: A Professional Guide | https://theindiannetwork.medium.com/best-tools-for-bug-bounty-hunters-a-professional-guide-b939335f4b9d?source=rss------bug_bounty-5 | TheIndianNetwork | hacking-tools, bug-bounty, bug-bounty-tips, hacker, bug-bounty-writeup | 01-Apr-2025 |
| PATH HIJACKING TECHNIQUE THAT HELPS IN PRIVILEGE ESCALATION | https://infosecwriteups.com/path-hijacking-technique-that-helps-in-privilege-escalation-b2e12207ea7a?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, cybersecurity, pentesting, hacking, ethical-hacking | 01-Apr-2025 |
| dKargo Warehouse Testnet Bug Bounty Program | https://medium.com/dkargo-eng/dkargo-warehouse-testnet-bug-bounty-program-9d70de4d2e7f?source=rss------bug_bounty-5 | dKargo | bug-bounty, announcements, testnet, dkargo, warehouse | 01-Apr-2025 |
| API Recon via Google Dorking | https://medium.com/developersglobal/api-recon-via-google-dorking-5e72203dccc3?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, pentesting, cybersecurity, bug-bounty, api-testing | 01-Apr-2025 |
| Never leave any API endpoint request unchecked during login or sign-up! | https://hiddendom.medium.com/never-leave-any-api-endpoint-request-unchecked-during-login-or-sign-up-2df8230de2ca?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-writeup, bug-bounty-tips, publications-on-medium, bug-bounty, indian-post-office | 01-Apr-2025 |
| Practical SQL Injection Exploitation Cheat Sheet | https://medium.com/@verylazytech/practical-sql-injection-exploitation-cheat-sheet-75c75548f281?source=rss------bug_bounty-5 | Very Lazy Tech | sql-injection, ethical-hacking, hacking, bug-bounty, penetration-testing | 01-Apr-2025 |
| A to Z বাগ বাউন্টি গাইড (HackerOne & Bugcrowd) | https://medium.com/@INTELEON404/a-to-z-%E0%A6%AC%E0%A6%BE%E0%A6%97-%E0%A6%AC%E0%A6%BE%E0%A6%89%E0%A6%A8%E0%A7%8D%E0%A6%9F%E0%A6%BF-%E0%A6%97%E0%A6%BE%E0%A6%87%E0%A6%A1-hackerone-bugcrowd-e31e9eb8c8a4?source=rss------bug_bounty-5 | SHEIKH MOHAMMAD ADIL | bugcrowd, hackerone, bug-bounty, roadmaps, bug-hunting | 01-Apr-2025 |
| Find open directories in your bug bounty&pentesting targets. | https://medium.com/@loyalonlytoday/find-open-directories-in-your-bug-bounty-pentesting-targets-d8b96f13760f?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, bug-bounty, penetration-testing, hacking, cybersecurity | 01-Apr-2025 |
| How My Name Crashed a Welcome Party: SSI to RCE Surprise! with $$$$ | https://medium.com/@iski/how-my-name-crashed-a-welcome-party-ssi-to-rce-surprise-with-f9b8a05ad138?source=rss------bug_bounty-5 | Iski | hacking, bug-bounty-tips, bug-bounty, money, cybersecurity | 01-Apr-2025 |
| 2FA Bypass Using a Simple trick | https://medium.com/@FuzzyyDuck/2fa-bypass-by-response-manipulation-f599c2e3341f?source=rss------bug_bounty-5 | Fuzzyy Duck | bug-bounty, bug-bounty-writeup, authentication-bypass, 2fa-authentication, 2fa-bypass | 01-Apr-2025 |
| The Road to CRTP Cert - Part 30 | https://medium.com/@dineshkumaar478/the-road-to-crtp-cert-part-30-7f87ad387a35?source=rss------bug_bounty-5 | Dineshkumaar R | offensive-security, cybersecurity, hacking, bug-bounty, hackerone | 01-Apr-2025 |
| How I Hacked the Voting System: A Deep Dive into Firebase and Firestore Security Vulnerabilities | https://medium.com/@anonymoussaid27/how-i-hacked-the-voting-system-a-deep-dive-into-firebase-and-firestore-security-vulnerabilities-f12227d1888b?source=rss------bug_bounty-5 | Anonymous27 | hacking, cybersecurity, penetration-testing, bug-bounty, firestore-database | 01-Apr-2025 |
| Top 10 SSRF (Server-Side Request Forgery) Payloads That Work | https://medium.com/@vipulsonule71/top-10-ssrf-server-side-request-forgery-payloads-that-work-74fe68b381fa?source=rss------bug_bounty-5 | Vipul Sonule | ai, technology, bug-bounty, cybersecurity, hacking | 01-Apr-2025 |
| You need to stop making this mistake in Bug Bounty! | https://medium.com/@deadoverflow/you-need-to-stop-making-this-mistake-in-bug-bounty-924725c66e68?source=rss------bug_bounty-5 | Imad Husanovic | programming, cybersecurity, hacking, bug-bounty, bug-bounty-tips | 01-Apr-2025 |
| Easy $300: Template Injection | https://infosecwriteups.com/easy-300-template-injection-2ea1fc32cf07?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, bug-bounty, template-injection, hacking, cybersecurity | 01-Apr-2025 |
| How to Find API Keys Leaked in Public Repositories | https://medium.com/@vipulsonule71/how-to-find-api-keys-leaked-in-public-repositories-d5bfd29dedd9?source=rss------bug_bounty-5 | Vipul Sonule | ai, bug-bounty, hacking, penetration-testing, cybersecurity | 01-Apr-2025 |
| Advanced Google Dorking | Part 18 | https://osintteam.blog/advanced-google-dorking-part-18-c96469860e01?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, bug-bounty-tips, pentesting, ethical-hacking, cybersecurity | 01-Apr-2025 |
| Business Logic Error Leads to Unauthorized Privilege Downgrade of Report Owner | https://som3a.medium.com/business-logic-error-leads-to-unauthorized-privilege-downgrade-of-report-owner-d34fcb43e0f3?source=rss------bug_bounty-5 | 0xSOM3A | bug-bounty, pentesting, bug-bounty-tips, cybersecurity, business-logic-bug | 01-Apr-2025 |
| Never leave any API endpoint request unchecked during login or sign-up! | https://systemweakness.com/never-leave-any-api-endpoint-request-unchecked-during-login-or-sign-up-2df8230de2ca?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-writeup, bug-bounty-tips, publications-on-medium, bug-bounty, indian-post-office | 01-Apr-2025 |
| IDOR Vulnerability in Payment Gateway Exposing User Order Details | https://medium.com/@Oiluminado_x86/idor-vulnerability-in-payment-gateway-exposing-user-order-details-d96d8e9453b8?source=rss------bug_bounty-5 | O iluminado_x86 | bug-bounty, cybersecurity, hacking, bug-bounty-tips | 31-Mar-2025 |
| How I Hacked the IRCTC eCatering Portal | https://medium.com/@deepak7903800/how-i-hacked-the-irctc-ecatering-portal-e25aeb074b7e?source=rss------bug_bounty-5 | Deepak kumar | information-security, bug-bounty, ctf, hacking, cybersecurity | 31-Mar-2025 |
| Next.js Middleware Authentication Bypass (CVE-2025–29927): Exploitation, Impact, and Mitigation | https://medium.com/@prashunbaral/next-js-middleware-authentication-bypass-cve-2025-29927-exploitation-impact-and-mitigation-2810f6f76bd9?source=rss------bug_bounty-5 | Prashun Baral | bug-bounty, cve-2025-29927, nextjs, vulnerability, cybersecurity | 31-Mar-2025 |
| Advanced Fuzzing to find entry points to serious bugs! | https://aarnavsaboo.medium.com/fuzz-yo-67c26b24c7a0?source=rss------bug_bounty-5 | Aarnav Saboo | networking, bug-bounty, cybersecurity, vulnerability, ethical-hacking | 31-Mar-2025 |
| AI-Powered SaaS Security: The Key to Protecting an Expanding Attack Surface | https://medium.com/@Cyber-AppSec/ai-powered-saas-security-the-key-to-protecting-an-expanding-attack-surface-9d3e4a34364d?source=rss------bug_bounty-5 | Cyber-AppSec | bug-bounty, bug-bounty-tips, application-security, information-technology, information-security | 31-Mar-2025 |
| How I Made $9,000 in One Month from Bug Bounty | https://eulex.medium.com/how-i-made-9-000-in-one-month-from-bug-bounty-9403147b4d07?source=rss------bug_bounty-5 | Milad Safdari (Eulex) | bug-bounty, bug-bounty-tips, vulnerability, hacking, security-research | 31-Mar-2025 |
| How I Accidentally Became the Sherlock Holmes of RCE! and made $$$ | https://medium.com/@iski/how-i-accidentally-became-the-sherlock-holmes-of-rce-and-made-b8857eefeecb?source=rss------bug_bounty-5 | Iski | hacking, infosec, cybersecurity, bug-bounty, money | 31-Mar-2025 |
| Why is this the ultimate SQL injection tool out there in the market | https://medium.com/@gasmask/sqlmap-on-steroids-unleashing-sql-injection-b4602eefd4a3?source=rss------bug_bounty-5 | gasmask | hacking, linux, sqlmap, bug-bounty, penetration-testing | 31-Mar-2025 |
| Never Underestimate Any API Key Leak. This is why I Got a Hall of Fame from “Your Dost” | https://hiddendom.medium.com/never-underestimate-any-api-key-leak-this-is-why-i-got-a-hall-of-fame-from-your-dost-25ef5a32dc7e?source=rss------bug_bounty-5 | Gokuleswaran B | penetration-testing, bug-bounty, bug-bounty-writeup, bug-bounty-tips, firebase | 31-Mar-2025 |
| Bug Bounty Tips: Exploiting .git File Disclosure for Fun & Profit | https://frostyxsec.medium.com/bug-bounty-tips-exploiting-git-file-disclosure-for-fun-profit-5a85e82e580c?source=rss------bug_bounty-5 | Frostyxsec | bug-hunting, bug-bounty-tips, bug-bounty, cybersecurity, bug-hunter | 31-Mar-2025 |
| From LFI to RCE: How I Turned a File Read into Shell Access | https://medium.com/@sujeetkamblesrk/from-lfi-to-rce-how-i-turned-a-file-read-into-shell-access-073ec2e5501e?source=rss------bug_bounty-5 | Sujeetkamblesrk | cybersecurity, bug-bounty | 31-Mar-2025 |
| The Ultimate Roadmap to Becoming a Bug Bounty Hunter | https://medium.com/@aashifm/the-ultimate-roadmap-to-becoming-a-bug-bounty-hunter-7d4e0cedf5fd?source=rss------bug_bounty-5 | 127.0.0.1 | roadmaps, bug-bounty, bugs, vulnerability, tools | 31-Mar-2025 |
| Bug Bounty Automation: Save Time with These Smart Hacking Scripts — @verylazytech | https://medium.com/@verylazytech/bug-bounty-automation-save-time-with-these-smart-hacking-scripts-verylazytech-5b42f6602636?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, subdomain, penetration-testing, bug-bounty, hacking | 31-Mar-2025 |
| DorkMine — Unleash the Power of Google Dorking Like Never Before! | https://gktomic.medium.com/dorkmine-unleash-the-power-of-google-dorking-like-never-before-0eca2f05e111?source=rss------bug_bounty-5 | Gopalakrishnan | cybersecurity, google-dorking, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 31-Mar-2025 |
| How I Accidentally Became the Sherlock Holmes of RCE! and made $$$ | https://infosecwriteups.com/how-i-accidentally-became-the-sherlock-holmes-of-rce-and-made-b8857eefeecb?source=rss------bug_bounty-5 | Iski | hacking, infosec, cybersecurity, bug-bounty, money | 31-Mar-2025 |
| I Went on the Dark Web and Instantly Regretted It | https://medium.com/@vipulsonule71/i-went-on-the-dark-web-and-instantly-regretted-it-3fffd0583f03?source=rss------bug_bounty-5 | Vipul Sonule | tech, cybersecurity, darkweb, hacking, bug-bounty | 31-Mar-2025 |
| How I Hacked My School Website (And Reported It!) | https://medium.com/@jithendhriyen/how-i-hacked-my-school-website-and-reported-it-ce5882b0f17a?source=rss------bug_bounty-5 | jithendhriyen | vulnerability, sql-injection, bug-bounty, information-security, hacking | 31-Mar-2025 |
| ClatScope: The Ultimate OSINT Tool for Bug Bounty Hunters & Cyber Sleuths! | https://medium.com/@pentesterclubpvtltd/clatscope-the-ultimate-osint-tool-for-bug-bounty-hunters-cyber-sleuths-7a1ea4dbbb65?source=rss------bug_bounty-5 | Pentester Club | cybersecurity, ctf, bug-bounty, osint, hacking | 31-Mar-2025 |
| Eyes OSINT: The Ultimate Bug Bounty Tool for Hackers & Cyber Sleuths! | https://medium.com/@pentesterclubpvtltd/eyes-osint-the-ultimate-bug-bounty-tool-for-hackers-cyber-sleuths-4bcd8c89b428?source=rss------bug_bounty-5 | Pentester Club | bug-bounty, hacking, osint, cybersecurity, ctf | 31-Mar-2025 |
| Master NFS Enumeration with RPCScan & SuperEnum | Ultimate Bug Bounty & Pentesting Guide! | https://medium.com/@pentesterclubpvtltd/master-nfs-enumeration-with-rpcscan-superenum-ultimate-bug-bounty-pentesting-guide-aa4da7cf077c?source=rss------bug_bounty-5 | Pentester Club | cybersecurity, hacking, bug-bounty, ctf, massage-therapy | 31-Mar-2025 |
| I Found a Critical Bug in JWT Authentication and Earned $10,000 — Here’s How You Can Too! | https://theindiannetwork.medium.com/i-found-a-critical-bug-in-jwt-authentication-and-earned-10-000-heres-how-you-can-too-8cec94913727?source=rss------bug_bounty-5 | TheIndianNetwork | jwt, bug-bounty, jwt-token, bug-bounty-tips, auth-bypass | 31-Mar-2025 |
| My First Bug Bounty Success: Earning $500 by Uncovering a DoS Vulnerability | https://medium.com/@entit_y/my-first-bug-bounty-success-earning-500-by-uncovering-a-dos-vulnerability-f0456eb72576?source=rss------bug_bounty-5 | Entit_y | bug-bounty-writeup, web-hacking, cybersecurity, bug-bounty, bug-bounty-tips | 31-Mar-2025 |
| Understanding Length Extension Attacks | https://medium.com/@mark-r/understanding-length-extension-attacks-855084c0170d?source=rss------bug_bounty-5 | Mark Roy | ctf-writeup, ctf, ctf-walkthrough, bug-bounty, penetration-testing | 30-Mar-2025 |
| Unauthorized Therapist Association Vulnerability | https://medium.com/@EL_cazad0r/unauthorized-therapist-association-vulnerability-bd2979914af1?source=rss------bug_bounty-5 | EL_Cazad0r | bug-bounty-writeup, bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips | 30-Mar-2025 |
| The Dark Side of Bug Bounty: From Rewards to Punishment | https://medium.com/@krivadna_87390/the-dark-side-of-bug-bounty-from-rewards-to-punishment-544a1a6f526e?source=rss------bug_bounty-5 | Krivadna | penetration-testing, infosec-write-ups, bug-bounty, bugbounty-writeup, cybersecurity | 30-Mar-2025 |
| This Tool Helped me to find ORIGIN IP(Automated way) | https://infosecwriteups.com/this-tool-helped-me-to-find-origin-ip-automated-way-9a95632d65fe?source=rss------bug_bounty-5 | Canonminibeast | bug-bounty, cloudflare, ip, cybersecurity, hacking | 30-Mar-2025 |
| Recently, I explored an efficient Small Scope Recon approach! | https://medium.com/@parthchheda777/recently-i-explored-an-efficient-small-scope-recon-approach-3c46a3bc549e?source=rss------bug_bounty-5 | Parthchheda | penetration-testing, cybersecurity, bug-bounty | 30-Mar-2025 |
| Medium and Large Scope Recon | https://medium.com/@parthchheda777/medium-and-large-scope-recon-8fb8dd9eab15?source=rss------bug_bounty-5 | Parthchheda | cybersecurity, osint, penetration-testing, bug-bounty | 30-Mar-2025 |
| How I Discovered an Account Takeover Vulnerability (And Earned $300!) | https://cybertamarin.medium.com/how-i-discovered-an-account-takeover-vulnerability-and-earned-300-063432bf8e1c?source=rss------bug_bounty-5 | Cyber Tamarin | ethical-hacking, bug-bounty, web-security, cybersecurity | 30-Mar-2025 |
| How I Made $2000 from an Easy Bug | https://infosecwriteups.com/how-i-made-2000-from-an-easy-bug-a05f48e6c7c2?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, hacking, cybersecurity, bug-bounty, money | 30-Mar-2025 |
| Unlock Exclusive Discounts on My Udemy Courses! | https://medium.com/@deepdive4learn/unlock-exclusive-discounts-on-my-udemy-courses-829d1635a2f1?source=rss------bug_bounty-5 | DeepDive4learn | web-development, penetration-testing, bug-bounty, cybersecurity, aws-certification | 30-Mar-2025 |
| The $1.7 Billion Blind Spot: How Web2 Flaws Are Wrecking Web3 Projects from the Inside | https://fr3ak-hacks.medium.com/the-1-7-billion-blind-spot-how-web2-flaws-are-wrecking-web3-projects-from-the-inside-bf03bbf1ef81?source=rss------bug_bounty-5 | Anindya Sankar Roy | web3-security, bug-bounty, web3, web3bugbounty, cryptocurrency | 30-Mar-2025 |
| How I Found a Payment Tampering Bug and Almost Paid Zero Dollars! | https://infosecwriteups.com/how-i-found-a-payment-tampering-bug-and-almost-paid-zero-dollars-0933297f77f0?source=rss------bug_bounty-5 | Iski | bug-bounty, infosec, money, cybersecurity, hacking | 30-Mar-2025 |
| Privilege Escalation via Registration Feature Writeup | https://medium.com/@malvinval/privilege-escalation-via-registration-feature-writeup-3f02c66b2391?source=rss------bug_bounty-5 | Malvin Valerian | ethical-hacking, cyber-security-awareness, bug-bounty, bug-bounty-writeup | 30-Mar-2025 |
| Find Subdomains Like a Pro! | https://medium.com/@dharineeshj2/find-subdomains-like-a-pro-df2c169ce153?source=rss------bug_bounty-5 | Hack-Bat | bug-bounty, security, penetration-testing, hacking, cybersecurity | 30-Mar-2025 |
| NoSQL Injection: How to Exploit, Identify, and Prevent (Step-by-Step Guide) | https://medium.com/@verylazytech/nosql-injection-how-to-exploit-identify-and-prevent-step-by-step-guide-a6c8b7ab60d6?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, nosql, exploit, ethical-hacking, bug-bounty | 30-Mar-2025 |
| How to Find P4 Bugs Easily ️♂️ | https://medium.com/@vipulsonule71/how-to-find-p4-bugs-easily-%EF%B8%8F-%EF%B8%8F-e2b35416b82d?source=rss------bug_bounty-5 | Vipul Sonule | hacking, ethical-hacking, bug-bounty, penetration-testing, bug-bounty-tips | 30-Mar-2025 |
| Cybersecurity in the Age of Remote Work: Protecting Your Workforce | https://medium.com/@nomitvyas.suncity/cybersecurity-in-the-age-of-remote-work-protecting-your-workforce-2220310aa4df?source=rss------bug_bounty-5 | Nomit Vyas | hacking, cybersecurity, news, bug-bounty, politics | 30-Mar-2025 |
| How I Uncovered Sensitive Data in a Public Config File and Injected Fake Logs | https://medium.com/@iamshafayat/how-i-uncovered-sensitive-data-in-a-public-config-file-and-injected-fake-logs-46496eb18f50?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-methodology | 30-Mar-2025 |
| How I Bypassed 2 layers 2FA on a B2B Site,an awesome experience! | https://take0verx0.medium.com/how-i-bypassed-2fa-on-a-b2b-site-and-earned-a-critical-bug-bounty-ea4ff9e4094b?source=rss------bug_bounty-5 | Shahariar Amin | bug-bounty-tips, bug-bounty | 30-Mar-2025 |
| Eldoria Realms — HackTheBox — Cyber Apocalypse 2025 | https://medium.com/@dassomnath/eldoria-realms-hackthebox-cyber-apocalypse-2025-ecde31783ec9?source=rss------bug_bounty-5 | Somnath Das | hacking, web, bug-bounty, ctf, ctf-writeup | 30-Mar-2025 |
| Bug Bounty Hunter’s Nightmare: The Dark Secrets No One Talks About! ⚠️ | https://theindiannetwork.medium.com/bug-bounty-hunters-nightmare-the-dark-secrets-no-one-talks-about-%EF%B8%8F-f20971abcbee?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty, bugs, bug-bounty-writeup, bug-bounty-tips, bug-zero | 30-Mar-2025 |
| I Bypassed Admin Panel & Stole Data in Minutes! Easility Worth $7500 (Real-World Exploit) | https://theindiannetwork.medium.com/i-bypassed-admin-panel-stole-data-in-minutes-easility-worth-7500-real-world-exploit-da9b23fcdb4a?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty-tips, bug-bounty-writeup, bug-bounty, broken-access-control, idor | 30-Mar-2025 |
| Will AI Steal My Job as a Bug Hunter? The Truth About ChatGPT & Cybersecurity | https://medium.com/dare-to-be-better/will-ai-steal-my-job-as-a-bug-hunter-the-truth-about-chatgpt-cybersecurity-48897ec03ace?source=rss------bug_bounty-5 | Ahmad Javed | ai, cybersecurity, chatgpt, bug-bounty, tech-trends | 29-Mar-2025 |
| 150,000 Websites Hijacked by JavaScript Injection: How Hackers Are Promoting Chinese Gambling Sites | https://medium.com/@Cyber-AppSec/150-000-websites-hijacked-by-javascript-injection-how-hackers-are-promoting-chinese-gambling-sites-0e1e8eb2b990?source=rss------bug_bounty-5 | Cyber-AppSec | bug-bounty, information-technology, cybercrime, cyber-security-awareness, cybersecurity | 29-Mar-2025 |
| Bug Hunting & Automation | https://medium.com/h7w/bug-hunting-automation-a284c3ff1967?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, tech, bug-bounty, bug-bounty-tips | 29-Mar-2025 |
| Bug Bounty Tips: Subdomain Takeover — Explanation, Steps & Mitigation | https://frostyxsec.medium.com/bug-bounty-tips-subdomain-takeover-explanation-steps-mitigation-d5be0ea7f8b1?source=rss------bug_bounty-5 | Frostyxsec | bug-hunting, bug-bounty, cybersecurity, bug-bounty-tips, bug-hunter | 29-Mar-2025 |
| Access Control in Smart Contracts: Why It’s Non-Negotiable | https://securrtech.medium.com/access-control-in-smart-contracts-why-its-non-negotiable-79af14523f28?source=rss------bug_bounty-5 | Securr - Web3 Security | blockchain-security, bug-bounty, smart-contract-security, smart-contract-auditing, web3-security | 29-Mar-2025 |
| Why You Need Your Own Recon Strategy in Bug Bounty (And Why Copy-Pasting Won’t Make You Rich ) | https://myselfakash20.medium.com/why-you-need-your-own-recon-strategy-in-bug-bounty-and-why-copy-pasting-wont-make-you-rich-faccc53b3d87?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, technology, bug-bounty, cybersecurity, bug-bounty-tips | 29-Mar-2025 |
| How to Make Bug Bounty Easy? | https://infosecwriteups.com/how-to-make-bug-bounty-easy-f2164a69048c?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, money, hacking, bug-bounty, cybersecurity | 29-Mar-2025 |
| The “Immortal” Password Reset Link: A Bug Hunter’s Delight | https://medium.com/@garvsanwariya60/the-immortal-password-reset-link-a-bug-hunters-delight-f3233066b8c9?source=rss------bug_bounty-5 | Garvsanwariya | web-hacking, hacking, bug-bounty-tips, cyber-security-solutions, bug-bounty | 29-Mar-2025 |
| Javascript Recon for Bug Bounty & Pentesting | https://medium.com/meetcyber/javascript-recon-for-bug-bounty-pentesting-3b22617007ec?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, bug-bounty, pentesting, cybersecurity, ethical-hacking | 29-Mar-2025 |
| Building the Ultimate Docker-Based Bug Bounty Machine: Part 3 — GUI Frontend & Advanced… | https://medium.com/@WillFromSwiss/building-the-ultimate-docker-based-bug-bounty-machine-part-3-gui-frontend-advanced-4348d33fa0e5?source=rss------bug_bounty-5 | WillFromSwiss | hacking, bug-bounty, docker, metasploit, pentesting | 29-Mar-2025 |
| Building the Ultimate Docker-Based Bug Bounty Machine: Part 2 — Workflows & Automation | https://medium.com/@WillFromSwiss/building-the-ultimate-docker-based-bug-bounty-machine-part-2-workflows-automation-9beff4a8b55d?source=rss------bug_bounty-5 | WillFromSwiss | docker, hacking-tools, bug-bounty, hacking, pentesting | 29-Mar-2025 |
| Building the Ultimate Docker-Based Bug Bounty Machine: Part 1 — Setup & Installation | https://medium.com/@WillFromSwiss/building-the-ultimate-docker-based-bug-bounty-machine-part-1-setup-installation-fe829bde99a6?source=rss------bug_bounty-5 | WillFromSwiss | hacking, automation-testing, pentesting, docker, bug-bounty | 29-Mar-2025 |
| Mastering Web Pentesting with Nuclei: From Installation to Advanced Techniques | https://medium.com/@WillFromSwiss/mastering-web-pentesting-with-nuclei-from-installation-to-advanced-techniques-8c0d734078ee?source=rss------bug_bounty-5 | WillFromSwiss | hacking, pentesting, nucleus, bug-bounty, cybersecurity | 29-Mar-2025 |
| Mastering F5 GTM (BIG-IP DNS): Advanced Traffic Management & Global Load Balancing! | https://medium.com/@deepdive4learn/mastering-f5-gtm-big-ip-dns-advanced-traffic-management-global-load-balancing-36267066359a?source=rss------bug_bounty-5 | DeepDive4learn | cybersecurity, bug-bounty, load-balancing, dns, networking | 29-Mar-2025 |
| Master F5 BIG-IP — Limited-Time Promo Codes Inside! | https://medium.com/@deepdive4learn/master-f5-big-ip-limited-time-promo-codes-inside-178c0360f925?source=rss------bug_bounty-5 | DeepDive4learn | cybersecurity, web-development, penetration-testing, bug-bounty, aws | 29-Mar-2025 |
| I Built the Ultimate Docker-Based Bug Bounty Machine That Transformed My Workflow | https://medium.com/@WillFromSwiss/i-built-the-ultimate-docker-based-bug-bounty-machine-that-transformed-my-workflow-47a3bf651895?source=rss------bug_bounty-5 | WillFromSwiss | docker, pentesting, bug-bounty, cybersecurity, hacking | 29-Mar-2025 |
| What Happens on Next.js? | https://cubeesecgroup.medium.com/what-happens-on-next-js-c1e8e6b2161b?source=rss------bug_bounty-5 | CUBeeSEC Securities | cve-2025-29927, bug-bounty, nextjs, vulnerability-assessment, penetration-testing | 29-Mar-2025 |
| When Amazon Gave Me Free Storage (But I Gave It Back) | https://medium.com/@iski/when-amazon-gave-me-free-storage-but-i-gave-it-back-9734c058cd05?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, s3-bucket, bug-bounty-tips, aws | 29-Mar-2025 |
| Biggest Information Disclosure Bug I Found Today — Easily Worth $800+ in Bug Bounty! | https://theindiannetwork.medium.com/biggest-information-disclosure-bug-i-found-today-easily-worth-800-in-bug-bounty-e2d5bcfb1569?source=rss------bug_bounty-5 | TheIndianNetwork | information-technology, bug-bounty, information-disclosure, information-security, bug-bounty-tips | 29-Mar-2025 |
| I Found Cache Poisoning & Earned $500 in Just a Few Minutes! | https://theindiannetwork.medium.com/i-found-cache-poisoning-earned-500-in-just-a-few-minutes-78337a437d55?source=rss------bug_bounty-5 | TheIndianNetwork | cache, cache-poisoning, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 29-Mar-2025 |
| I Found Host Header Injection & Got a Quick $1,000 Bounty! (Full Guide) | https://theindiannetwork.medium.com/i-found-host-header-injection-got-a-quick-1-000-bounty-full-guide-0573ea19ab19?source=rss------bug_bounty-5 | TheIndianNetwork | host-header, bug-bounty-writeup, bug-bounty-tips, host-header-injection, bug-bounty | 29-Mar-2025 |
| Reflected XSS via X-Forwarded-For Header on https://api.target.com/ip | https://medium.com/@ugs20b126_cic.rajesh/reflected-xss-via-x-forwarded-for-header-on-https-api-target-com-ip-96642a4a49ed?source=rss------bug_bounty-5 | Rajesh Sagar | infosec, bug-bounty, xss-vulnerability | 29-Mar-2025 |
| A Next.js vulnerability lets attackers bypass middleware using trailing slashes and URL encoding. | https://cubeesecgroup.medium.com/what-happens-on-next-js-c1e8e6b2161b?source=rss------bug_bounty-5 | CUBeeSEC Securities | cve-2025-29927, bug-bounty, nextjs, vulnerability-assessment, penetration-testing | 29-Mar-2025 |
| Top 5 Websites for Information Gathering — Part 1 | https://cyberw1ng.medium.com/top-5-websites-for-information-gathering-part-1-90b36746f5b5?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, bug-bounty, programming, technology | 29-Mar-2025 |
| Mastering Logic Bugs: A Checklist for Bug Hunters PART 2 { IDOR } | https://medium.com/@mahdisalhi0500/mastering-logic-bugs-a-checklist-for-bug-hunters-part-2-idor-6f411e90509d?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | bug-bounty, cybersecurity, hacking, penetration-testing, infosec | 29-Mar-2025 |
| “No Good Deed Goes Unnoticed? Not in Cybersecurity.” : An unlucky hacker’s Story | https://medium.com/@nijina7/no-good-deed-goes-unnoticed-not-in-cybersecurity-an-unlucky-hackers-story-3ebbb74e5b9e?source=rss------bug_bounty-5 | Nijin K | cybersecurity, hacking, bugs, bug-bounty-writeup, bug-bounty | 29-Mar-2025 |
| When Amazon Gave Me Free Storage (But I Gave It Back) | https://awstip.com/when-amazon-gave-me-free-storage-but-i-gave-it-back-9734c058cd05?source=rss------bug_bounty-5 | Iski | cybersecurity, bug-bounty, s3-bucket, bug-bounty-tips, aws | 29-Mar-2025 |
| Finding Information Disclosure Bugs Like a Pro | https://osintteam.blog/finding-information-disclosure-bugs-like-a-pro-19f9840d3f63?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, hacking, bug-bounty, bug-bounty-tips, technology | 28-Mar-2025 |
| Understanding Web Request Methods and Responses | https://medium.com/@aashifm/understanding-web-request-methods-and-responses-4a7abc8e1cba?source=rss------bug_bounty-5 | 127.0.0.1 | http-request, http-response, cybersecurity, web-penetration-testing, bug-bounty | 28-Mar-2025 |
| Earn $1000: Account Takeover by This Methodology | https://infosecwriteups.com/earn-1000-account-takeover-by-this-methodology-cc1cbf6d9eae?source=rss------bug_bounty-5 | Abhijeet Kumawat | aot, cybersecurity, hacking, bug-bounty, infosec | 28-Mar-2025 |
| Practical OSINT Commands for Cyber Investigations | https://medium.com/@paritoshblogs/practical-osint-commands-for-cyber-investigations-3e6b039b4b4b?source=rss------bug_bounty-5 | Paritosh | osint, information-technology, threat-intelligence, cybersecurity, bug-bounty | 28-Mar-2025 |
| DOM-Based Cross-Site Scripting (XSS) | https://medium.com/@anandrishav2228/dom-based-cross-site-scripting-xss-828c223a80f3?source=rss------bug_bounty-5 | Rishav anand | money, hacking, infosec, bug-bounty, cybersecurity | 28-Mar-2025 |
| How I Found an Unauthorized RCE Bug in an Amazon EC2 Instance Using Censys | https://medium.com/@swarooppatil3125/how-i-found-an-unauthorized-rce-bug-in-an-amazon-ec2-instance-using-censys-82c8bac79467?source=rss------bug_bounty-5 | Swarooppatil | cybersecurity, money, bug-bounty, code, remote-code-execution | 28-Mar-2025 |
| How to Find Hidden API Endpoints That Lead to Critical Bugs | https://medium.com/@vipulsonule71/how-to-find-hidden-api-endpoints-that-lead-to-critical-bugs-054310629e64?source=rss------bug_bounty-5 | Vipul Sonule | penetration-testing, hacking, bug-bounty, ai, cybersecurity | 28-Mar-2025 |
| OSINT Secrets: How Hackers and Investigators Uncover Hidden Information | https://osintteam.blog/osint-secrets-how-hackers-and-investigators-uncover-hidden-information-5303ee570cc6?source=rss------bug_bounty-5 | Elie Attieh | penetration-testing, open-source-intelligence, cybersecurity, osint, bug-bounty | 28-Mar-2025 |
| CVE-2025-31080 WordPress HTML Forms Plugin <= 1.5.1 Vulnerable to Cross-Site Scripting (XSS) | https://abhinav-porwal.medium.com/cve-2025-31080-wordpress-html-forms-plugin-1-5-1-vulnerable-to-cross-site-scripting-xss-ae6ec99b7dd3?source=rss------bug_bounty-5 | Abhinav Porwal | ethical-hacking, bug-bounty, hacking, information-security, infosec | 28-Mar-2025 |
| Is Bug Bounty Easy? | https://infosecwriteups.com/is-bug-bounty-easy-f1ae04ceb8e6?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, infosecurity, cybersecurity, hacking | 28-Mar-2025 |
| Critical Wallet Connection Bug Found on OpenSea Deals | https://medium.com/@emrahcoban_84107/critical-wallet-connection-bug-found-on-opensea-deals-55f071c26288?source=rss------bug_bounty-5 | Emrah Çoban | web3, github, qa, bug-bounty, metamask | 28-Mar-2025 |
| I Found HTTP Request Smuggling & Got a Huge Bug Bounty! (Full Exploit Guide) | https://theindiannetwork.medium.com/i-found-http-request-smuggling-got-a-huge-bug-bounty-full-exploit-guide-1ac855ee1695?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty-tips, http-request-smuggling, bug-bounty, http-request, bug-bounty-writeup | 28-Mar-2025 |
| I Found Remote Code Execution in a Cookie & Earned $5000! (Full Exploit Guide) | https://theindiannetwork.medium.com/i-found-remote-code-execution-in-a-cookie-earned-5000-full-exploit-guide-d2e07d5b253c?source=rss------bug_bounty-5 | TheIndianNetwork | rce-vulnerability, bug-bounty, remote-code-execution, rce, bug-bounty-tips | 28-Mar-2025 |
| The Ultimate SSRF Testing Guide: Unleash the Hidden Web Secrets (2025) | https://theindiannetwork.medium.com/the-ultimate-ssrf-testing-guide-unleash-the-hidden-web-secrets-2025-8c151068cedf?source=rss------bug_bounty-5 | TheIndianNetwork | ssrf-attack, bug-bounty-writeup, bug-bounty, ssrf, bug-bounty-tips | 28-Mar-2025 |
| How A Null Character Was Used to Bypass Payments | https://medium.com/@diogo.gouveia2/how-a-null-character-was-used-to-bypass-payments-7b417932dede?source=rss------bug_bounty-5 | Diogo Gouveia | pentesting, bug-bounty-writeup, cybersecurity, bug-bounty, penetration-testing | 28-Mar-2025 |
| A Great tool for bug bounty hunters and Osint investigators. | https://medium.com/@loyalonlytoday/a-great-tool-for-bug-bounty-hunters-and-osint-investigators-4e8c88d92f3a?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, bug-bounty, investigation, osint, awareness | 28-Mar-2025 |
| My First Bug Report: Logical Flaw in Task Completion Allows Unauthorized Coin Increment via Request… | https://medium.com/@jaga08official/my-first-bug-report-logical-flaw-in-task-completion-allows-unauthorized-coin-increment-via-request-ab63fe7259b7?source=rss------bug_bounty-5 | Jaga | bug-hunting, bug-bounty, vulnerability-disclosure, ethical-hacking, cybersecurity | 28-Mar-2025 |
| The Naked-Eye Bug Hunt: Finding Flaws Without a Single Tool | https://strangerwhite.medium.com/the-naked-eye-bug-hunt-finding-flaws-without-a-single-tool-bc4b448cefaf?source=rss------bug_bounty-5 | StrangeRwhite | hacking, bug-bounty-tips, cybersecurity, writeup, bug-bounty | 28-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-125) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-125-e1adee54884d?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, ethical-hacking, bug-bounty-tips, hacking | 28-Mar-2025 |
| Risk Management in Cybersecurity: Assessing Probability vs. Impact | https://medium.com/@deepdive4learn/risk-management-in-cybersecurity-assessing-probability-vs-impact-46ea0016c083?source=rss------bug_bounty-5 | DeepDive4learn | api, web-development, penetration-testing, cybersecurity, bug-bounty | 28-Mar-2025 |
| Why SAST is a Must-Have Skill for AppSec Professionals! | https://sahildari.medium.com/why-sast-is-a-must-have-skill-for-appsec-professionals-014cc40f98fc?source=rss------bug_bounty-5 | Sahil Dari | bug-bounty, cybersecurity, appsec, sast | 28-Mar-2025 |
| The Zombie Bug — Critical CVE 2025 Story | https://0xparth.medium.com/the-zombie-bug-critical-cve-2025-story-6cccb20ee8f5?source=rss------bug_bounty-5 | Parth Shukla | vulnerability, ai, bug-bounty, cybersecurity, technology | 28-Mar-2025 |
| This Tool Helped me to find ORIGIN IP(Automated way) | https://medium.com/@canonminibeast/this-tool-helped-me-to-find-origin-ip-automated-way-d3eb76da3487?source=rss------bug_bounty-5 | Canonminibeast | hacking, cybersecurity, bug-bounty, hacking-tools, web-pen-testing | 28-Mar-2025 |
| Static Application Security Testing SAST Series: Part 1 | https://sahildari.medium.com/sast-series-part-1-a7cf18df0022?source=rss------bug_bounty-5 | Sahil Dari | cybersecurity, appsec, sast, path-manipulation, bug-bounty | 28-Mar-2025 |
| How To Deal With Open Ports & Nmap Like a Pro? | https://medium.com/@nnface/how-to-deal-with-open-ports-nmap-like-a-pro-6126ef0d9339?source=rss------bug_bounty-5 | NnFace | cybersecurity, hacking, nmap, bug-bounty, kali-linux | 28-Mar-2025 |
| Part 3: Advanced Techniques & Use Cases of Nuclei for Bug Bounty | https://cyberw1ng.medium.com/part-3-advanced-techniques-use-cases-of-nuclei-for-bug-bounty-1fb810800b8c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, technology, cybersecurity, careers, bug-bounty | 28-Mar-2025 |
| How I Found a $10,000 Typo: A Beginner’s Guide to Bug Bounty Hunting | https://medium.com/meetcyber/how-i-found-a-10-000-typo-a-beginners-guide-to-bug-bounty-hunting-4550f5af21fa?source=rss------bug_bounty-5 | Ahmad Javed | tech-career, ethical-hacking, bug-bounty, cybersecurity, learn-to-code | 28-Mar-2025 |
| ️Insecure Direct Object Reference (IDOR) — Unauthorized Account Access | https://medium.com/@Oiluminado_x86/%EF%B8%8Finsecure-direct-object-reference-idor-unauthorized-account-access-dd4018b98fa9?source=rss------bug_bounty-5 | O iluminado_x86 | idor-vulnerability, bug-bounty-tips, privilege-escalation, bug-bounty, cybersecurity | 28-Mar-2025 |
| How AI is Changing the Bug Bounty Landscape (And Why Hackers Aren’t Mad About It) | https://cybersecuritywriteups.com/how-ai-is-changing-the-bug-bounty-landscape-and-why-hackers-arent-mad-about-it-34e2936cf640?source=rss------bug_bounty-5 | Ahmad Javed | cybersecurity, bug-bounty, ai, ethical-hacking, penetration-testing | 27-Mar-2025 |
| Information Disclosure leads To Unauthorized Access (easy github dork) | https://medium.com/@Oiluminado_x86/information-disclosure-leads-to-unauthorized-access-easy-github-dork-7fb94821d30c?source=rss------bug_bounty-5 | O iluminado_x86 | bug-bounty, information-disclosure, hacking, penetration-testing | 27-Mar-2025 |
| From 0 to 100K: How Gamification is Turning Bug Hunting into a Crypto-Style Grind | https://medium.com/meetcyber/from-0-to-100k-how-gamification-is-turning-bug-hunting-into-a-crypto-style-grind-253e30b7e828?source=rss------bug_bounty-5 | Ahmad Javed | cybersecurity, ethical-hacking, penetration-testing, pentesting, bug-bounty | 27-Mar-2025 |
| How I Made $1,000 in a Day Exposing a Critical Vulnerability | https://medium.com/@ibtissamhammadi/how-i-made-1-000-in-a-day-exposing-a-critical-vulnerability-3742ac0e58df?source=rss------bug_bounty-5 | Ibtissam Hammadi | passive-income, ethical-hacking, makemoney-online, bug-bounty, cybersecurity | 27-Mar-2025 |
| How to Choose the Right Bug Bounty Programs as a Beginner | https://osintteam.blog/how-to-choose-the-right-bug-bounty-programs-as-a-beginner-3cdfdd86b0c3?source=rss------bug_bounty-5 | Vivek PS | bug-bounty, programming, hacking, web-development, cybersecurity | 27-Mar-2025 |
| How I Found a CSRF Vulnerability in Profile Picture Deletion | https://medium.com/@EL_cazad0r/how-i-found-a-csrf-vulnerability-in-profile-picture-deletion-b95bf8e6d579?source=rss------bug_bounty-5 | EL_Cazad0r | bug-bounty-writeup, bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips | 27-Mar-2025 |
| Facebook Reels Post Audience Privacy Misconfiguration : Meta Bug Bounty (3000 USD) | https://zerocode-ph.medium.com/facebook-reels-post-audience-privacy-misconfiguration-meta-bug-bounty-3000-usd-805e39ab7948?source=rss------bug_bounty-5 | Syd Ricafort (0cod3) | facebook-bug-bounty, meta-bug-bounty, bug-bounty | 27-Mar-2025 |
| HackTheBox Certified Bug Bounty Hunter Study Notes & Guide | https://motasemhamdan.medium.com/hackthebox-certified-bug-bounty-hunter-study-notes-guide-d05360f200dd?source=rss------bug_bounty-5 | Motasem Hamdan | infosec, bug-bounty, cybersecurity, hacking, hackthebox | 27-Mar-2025 |
| Automate Open Redirection and XSS Testing with URL Auto Opener | https://medium.com/@GrayWhite/automate-open-redirection-and-xss-testing-with-url-auto-opener-61af38087c54?source=rss------bug_bounty-5 | CrookSec | xss-hunting, cybersecurity, open-redirection, url-testing, bug-bounty | 27-Mar-2025 |
| Debugging PostgreSQL Installation on macOS | https://funnymous43.medium.com/debugging-postgresql-installation-on-macos-a49d2aa343a0?source=rss------bug_bounty-5 | hipster' Santos | postgresql, backend, python, bug-bounty, database | 27-Mar-2025 |
| Mastering Hydra: The Ultimate Brute-Force Cheatsheet for Ethical Hackers | https://medium.com/@cybrpunked/mastering-hydra-tool-the-biggest-cheatsheet-you-will-ever-need-7a050110a802?source=rss------bug_bounty-5 | Cybrpunked | infosec, bug-bounty, cybersecurity, hacking, pentesting | 27-Mar-2025 |
| The Ultimate XSS Scanner & Parameter Analysis Tool for Bug Hunters | https://medium.com/cyberscribers-exploring-cybersecurity/the-ultimate-xss-scanner-parameter-analysis-tool-for-bug-hunters-3c37111ac267?source=rss------bug_bounty-5 | Elie Attieh | cybersecurity, bug-hunting, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 27-Mar-2025 |
| How I Hacked Medium (And Medium Hacked Me Back) | https://osintteam.blog/how-i-hacked-medium-and-medium-hacked-me-back-c34d48f9199a?source=rss------bug_bounty-5 | Vivek PS | cybersecurity, bug-bounty, web-development, hacking, programming | 27-Mar-2025 |
| HostTracer: A Powerful Tool for DNS and Hosting Reconnaissance | https://medium.com/@GrayWhite/hosttracer-a-powerful-tool-for-dns-and-hosting-reconnaissance-e2f78ca525b4?source=rss------bug_bounty-5 | CrookSec | reconnaissance, whois, bug-bounty, dns-lookup, hosting | 27-Mar-2025 |
| RCE Via File upload And How To Fix It | https://medium.com/@snpxblack2006/rce-via-file-upload-and-how-to-fix-it-b2f39e745c27?source=rss------bug_bounty-5 | everythingBlackkk | cybersecurity, hacking, bug-bounty, php, web-development | 27-Mar-2025 |
| How I found 4 vulnerabilities in only 1 day? | https://systemweakness.com/how-i-found-4-vulnerabilities-in-only-1-day-473a870b583a?source=rss------bug_bounty-5 | Imad Husanovic | ethical-hacking, bug-bounty-tips, bug-bounty, cybersecurity, programming | 27-Mar-2025 |
| Hidden Backdoors in Web Apps: How Hackers Exploit Them ✨ | https://medium.com/@vipulsonule71/hidden-backdoors-in-web-apps-how-hackers-exploit-them-6f99c0abd918?source=rss------bug_bounty-5 | Vipul Sonule | hackthebox, tryhackme, hacking, writing, bug-bounty | 27-Mar-2025 |
| No Risk? Think Again — The DoS Twist That Led to $$$ | https://medium.com/@0xNayelx/no-risk-think-again-the-dos-twist-that-led-to-0152d6cc1327?source=rss------bug_bounty-5 | 0xNayel | ctf, bug-bounty-tips, pentesting, bug-bounty-writeup, bug-bounty | 27-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-124) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-124-5dcab5e4c9a1?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty-tips, hacking, bug-bounty, ethical-hacking | 27-Mar-2025 |
| Advanced Techniques & Use Cases of Nuclei for Bug Bounty | https://cyberw1ng.medium.com/advanced-techniques-use-cases-of-nuclei-for-bug-bounty-22be32c09d1b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, careers, bug-bounty, programming, cybersecurity | 27-Mar-2025 |
| Account Takeover via Leaked Email Verification Token | https://medium.com/@kalvik/account-takeover-via-leaked-email-verification-token-2612fef3e2d4?source=rss------bug_bounty-5 | Vikash Maurya | account-takeover, bug-bounty-tips, bug-bounty-writeup, bug-bounty, hacking | 27-Mar-2025 |
| From Blind XSS to Full Server Takeover | https://medium.com/@0xnuy/from-blind-xss-to-full-server-takeover-0f63ead701ab?source=rss------bug_bounty-5 | Nuy | penetration-testing, rce, bug-bounty-writeup, bug-bounty, web-vulnerabilities | 26-Mar-2025 |
| Domain and Subdomain Enumeration: A Practical Guide for Effective Reconnaissance | https://osintteam.blog/domain-and-subdomain-enumeration-a-practical-guide-for-effective-reconnaissance-9660c40f4e37?source=rss------bug_bounty-5 | Dzianis Skliar | osint, bug-bounty, reconnaissance, bug-bounty-tips, subdomains-enumeration | 26-Mar-2025 |
| Stealing Money at the Speed of Light: Exploiting Race Conditions for Financial Fraud in… | https://myselfakash20.medium.com/stealing-money-at-the-speed-of-light-exploiting-race-conditions-for-financial-fraud-in-a14c2086f5c0?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, programming, bug-bounty-tips, technology, cybersecurity | 26-Mar-2025 |
| Top 10 Vulnerabilities Every Bug Hunter Should Exploit in 2025 | https://medium.com/@vipulsonule71/top-10-vulnerabilities-every-bug-hunter-should-exploit-in-2025-df28045f6fca?source=rss------bug_bounty-5 | Vipul Sonule | hacking, ethical-hacking, penetration-testing, cybersecurity, bug-bounty | 26-Mar-2025 |
| How SSRF Leads to RCE in a .NET Application | https://medium.com/@0xUN7H1NK4BLE/how-ssrf-leads-to-rce-in-a-net-application-ee1b13812245?source=rss------bug_bounty-5 | 0xUN7H1NK4BLE | rce-vulnerability, ssrf, bug-bounty, lfi, web-exploitation | 26-Mar-2025 |
| (Ⅱ) Android Identity Authentication: A Game of Cat and Mouse between Developers and “Hackers” | https://medium.com/@security.tecno/%E2%85%B1-android-identity-authentication-a-game-of-cat-and-mouse-between-developers-and-hackers-b1b1789453b0?source=rss------bug_bounty-5 | TECNO Security | security, hacking, android, development, bug-bounty | 26-Mar-2025 |
| 500s for $560: How I Turned Twitter into My Cash Piñata | https://stevenfloresca.medium.com/500s-for-560-how-i-turned-twitter-into-my-cash-pi%C3%B1ata-3054e5fd66d0?source=rss------bug_bounty-5 | Steven Floresca | twitter, security, information-security, bug-bounty-tips, bug-bounty | 26-Mar-2025 |
| How Hackers Abuse XML-RPC to Launch Bruteforce and DDoS Attacks | https://infosecwriteups.com/how-hackers-abuse-xml-rpc-to-launch-bruteforce-and-ddos-attacks-40be5b310960?source=rss------bug_bounty-5 | coffinxp | hacking, wordpress, bug-bounty, penetration-testing, bug-bounty-tips | 26-Mar-2025 |
| I Asked for 200 OK, Apache Gave Me Its Diary Instead | https://medium.com/@iski/i-asked-for-200-ok-apache-gave-me-its-diary-instead-6e5b114a6f46?source=rss------bug_bounty-5 | Iski | bug-bounty, injective, servers, apache, bug-bounty-tips | 26-Mar-2025 |
| Advanced Thick Client Penetration Testing: Techniques, Methodologies, and Execution (Part 2)… | https://infosecwriteups.com/advanced-thick-client-penetration-testing-techniques-methodologies-and-execution-part-2-db5738997535?source=rss------bug_bounty-5 | Ajay Naik | thick-client-security, cybersecurity, information-security, bug-bounty, penetration-testing | 26-Mar-2025 |
| Bug Bounty Tips: How to Find Hidden API Keys in JavaScript Files Like a Pro! | https://frostyxsec.medium.com/bug-bounty-tips-how-to-find-hidden-api-keys-in-javascript-files-like-a-pro-6797a31f9cf8?source=rss------bug_bounty-5 | Frostyxsec | bug-bounty-tips, bug-bounty, bug-hunting, penetration-testing, cybersecurity | 26-Mar-2025 |
| This easy attack can give you $2000 . | https://medium.com/@anandrishav2228/this-easy-attack-can-give-you-2000-86e236b5caa5?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, money, servers, hacker, bug-bounty | 26-Mar-2025 |
| How I Found My First P1 in a Bug Bounty Program | https://cyxbugs.medium.com/how-i-found-my-first-p1-in-a-bug-bounty-program-a82e6c8cea46?source=rss------bug_bounty-5 | Cyx | bug-bounty-writeup, cybersecurity, bug-bounty, pentesting | 26-Mar-2025 |
| Bug Bounty 101 | https://meravytes.medium.com/bug-bounty-101-3e5ca050134f?source=rss------bug_bounty-5 | Meravytes | meravytes, bug-bounty, cybersecurity, ethical-hacking | 26-Mar-2025 |
| Rate Limit Bypass in Password Reset Functionality | https://medium.com/@FuzzyyDuck/rate-limit-bypass-in-password-reset-functionality-bf4b997c9bae?source=rss------bug_bounty-5 | Fuzzyy Duck | bug-bounty, rate-limit-bypass, bug-bounty-writeup, race-condition-exploit, vulnerability | 26-Mar-2025 |
| The Sweetest Hack: How a ₹100 Cake Discount Gave Me a Panic Attack | https://osintteam.blog/the-sweetest-hack-how-a-100-cake-discount-gave-me-a-panic-attack-85eaf62f7cf8?source=rss------bug_bounty-5 | Vivek PS | web-development, bug-bounty, hacking, programming, cybersecurity | 26-Mar-2025 |
| Finding subdomains from SSL certificates | https://medium.com/@loyalonlytoday/finding-subdomains-from-ssl-certificates-6d879a41d5d3?source=rss------bug_bounty-5 | loyalonlytoday | reconnaissance, ethical-hacking, subdomains-enumeration, cybersecurity, bug-bounty | 26-Mar-2025 |
| Windows Exploitation: Beginner’s Guide to Buffer Overflow (Old OSCP-Level) | https://medium.com/@verylazytech/windows-exploitation-beginners-guide-to-buffer-overflow-old-oscp-level-de07b653f287?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, buffer-overflow, oscp, cybersecurity, penetration-testing | 26-Mar-2025 |
| JWT (JSON Web Token) Security Risks: Common Vulnerabilities and Exploits Every Bug Hunter Should… | https://infosecwriteups.com/jwt-json-web-token-security-risks-common-vulnerabilities-and-exploits-every-bug-hunter-should-d3fa4182a329?source=rss------bug_bounty-5 | Elie Attieh | jwt, cybersecurity, pentesting, bug-bounty, bug-hunting | 26-Mar-2025 |
| Understanding and Testing for Content Security Policy (CSP) | https://medium.com/@MutexSec/understanding-and-testing-for-content-security-policy-csp-ab01c74a9a1f?source=rss------bug_bounty-5 | Exhaustedmutex | bug-bounty-tips, red-team, pentesting, bug-bounty, penetration-testing | 26-Mar-2025 |
| AI Safety Bug Bounty 101 | https://pointlessai.medium.com/ai-safety-bug-bounty-101-50f78c88781b?source=rss------bug_bounty-5 | PointlessAI Blog | ai-alignment-and-safety, ai-safety, bug-bounty, ai, bug-bounty-hunter | 26-Mar-2025 |
| How to Pay High Bounty in Bug Hunting | https://medium.com/@vipulsonule71/how-to-pay-high-bounty-in-bug-hunting-38691343f3bc?source=rss------bug_bounty-5 | Vipul Sonule | technology, penetration-testing, ethical-hacking, hacking, bug-bounty | 26-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-123) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-123-bb98d1457663?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, ethical-hacking, bug-bounty, hacking, bug-bounty-tips | 26-Mar-2025 |
| Zero Trust: Why Your Office Needs a Nightclub Bouncer | https://medium.com/the-shortform/zero-trust-why-your-office-needs-a-nightclub-bouncer-b21afd41aad0?source=rss------bug_bounty-5 | Ahmad Javed | hacker, hacking, zero-trust, bug-bounty, cybersecurity | 26-Mar-2025 |
| web cache deception on vdp program | https://medium.com/@Dorking1/web-cache-deception-on-private-program-eab62d869866?source=rss------bug_bounty-5 | Doorking | bug-bounty-writeup, penetration-testing, bug-bounty | 26-Mar-2025 |
| Advanced Techniques to Bypass Restricted shell | Privilege Escalation Tutorial | https://systemweakness.com/advanced-techniques-to-bypass-restricted-shell-privilege-escalation-tutorial-a02015ebaf49?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, bug-bounty, ethical-hacking, penetration-testing, hacking | 26-Mar-2025 |
| Zero to Hero in bug bounty by ‘Vibe Coding’ | https://medium.com/@nsteckercs/zero-to-hero-in-bug-bounty-by-vibe-coding-b74efc9a1259?source=rss------bug_bounty-5 | Zaxie | bug-bounty, technology, education, cybersecurity, hacking | 26-Mar-2025 |
| The Power of Nuclei for Bug Bounty Hunting | https://cyberw1ng.medium.com/the-power-of-nuclei-for-bug-bounty-hunting-ded98a8a47a7?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, technology, bug-bounty, programming | 26-Mar-2025 |
| Manipulating Response: A Deep Dive into Exploitation => $650 | https://ehteshamulhaq198.medium.com/manipulating-responses-a-deep-dive-into-exploitation-650-bf5933efe202?source=rss------bug_bounty-5 | Ehtesham Ul Haq | bug-bounty, penetration-testing, infosec, writeup, cybersecurity | 26-Mar-2025 |
| Inayat hussain chohan (Security Researcher’s journey ) | https://inayathussain.medium.com/inayat-hussain-chohan-security-researchers-journey-1bf0499e27d9?source=rss------bug_bounty-5 | Inayat Hussain | penetration-testing, ethical-hacking, bug-bounty, cybersecurity, information-technology | 26-Mar-2025 |
| Private Keys vs Seed Phrases: What You Need to Know | https://medium.com/@itsamanyadav/private-keys-vs-seed-phrases-what-you-need-to-know-71fc6bb70cc4?source=rss------bug_bounty-5 | Its Aman Yadav | bug-bounty, secuirty, seed-phrase, private-key, web3-security-audit | 25-Mar-2025 |
| Discovering publicly exposed data in AWS S3 and Google Cloud Storage | https://kkamalesh117.medium.com/discovering-publicly-exposed-data-in-aws-s3-and-google-cloud-storage-5f9583807e7d?source=rss------bug_bounty-5 | Kamalesh D | hacker, bug-bounty, aws, google, cybersecurity | 25-Mar-2025 |
| AI vs. Bug Hunters: How ChatGPT is Rewriting the Rules of Vulnerability Discovery | https://medium.com/meetcyber/ai-vs-bug-hunters-how-chatgpt-is-rewriting-the-rules-of-vulnerability-discovery-6eae02514f6c?source=rss------bug_bounty-5 | Ahmad Javed | bug-bounty-ai, bug-bounty, future-of-hacking, cybersecurity, penetration-testing | 25-Mar-2025 |
| The Dark Side of Bug Bounty Hunting: Frustrations No One Talks About | https://osintteam.blog/the-dark-side-of-bug-bounty-hunting-frustrations-no-one-talks-about-ad1b502a5815?source=rss------bug_bounty-5 | Vivek PS | web-development, bug-bounty, cybersecurity, programming, hacking | 25-Mar-2025 |
| Uncovering a Hidden Logic Flow-A Deep Dive into Exploitation! | https://medium.com/@AhmedSamy-X/uncovering-a-hidden-logic-flow-a-deep-dive-into-exploitation-824e1dec12cc?source=rss------bug_bounty-5 | Ahmedsamy | cybersecurity, web-exploitation, bug-bounty, penetration-testing, information-security | 25-Mar-2025 |
| Introduction to Bug Bounty Programs: How to Legally Get Paid for Hacking (Yes, Really!) | https://medium.com/@theautobot/introduction-to-bug-bounty-programs-how-to-legally-get-paid-for-hacking-yes-really-bfbfd84b2933?source=rss------bug_bounty-5 | theAutoBot | bugs, bug-bounty, bug-bounty-writeup, hacking-for-defense, bug-bounty-tips | 25-Mar-2025 |
| One-Click Account Hijacking on TikTok | https://infosecwriteups.com/one-click-account-hijacking-on-tiktok-b0d211288abe?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, tik-tok, bug-bounty, cybersecurity, infosec | 25-Mar-2025 |
| Hacking APIs :SQL Injection Attack | https://iaraoz.medium.com/hacking-apis-sql-injection-attack-7c13a7b1f6fb?source=rss------bug_bounty-5 | Israel Aráoz Severiche | bug-bounty, cybersecurity, api-development, owasp, hacking | 25-Mar-2025 |
| Hacking APIs: Authentication Attack | https://iaraoz.medium.com/hacking-apis-authentication-attack-100623725721?source=rss------bug_bounty-5 | Israel Aráoz Severiche | hacking, api, cybersecurity, bug-bounty, apps | 25-Mar-2025 |
| Top Bug Bounty Platforms Every Ethical Hacker Should Know | https://medium.com/@dasmanish6176/top-bug-bounty-platforms-every-ethical-hacker-should-know-9fc5d736fa1d?source=rss------bug_bounty-5 | Dasmanish | ethical-hacking, infosec, bug-bounty | 25-Mar-2025 |
| Which Cybersecurity Course Should I Take? A Comprehensive Guide | https://medium.com/@verylazytech/which-cybersecurity-course-should-i-take-a-comprehensive-guide-fd5d64786efc?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, osep, bug-bounty, penetration-testing, oscp | 25-Mar-2025 |
| Advanced Techniques for Finding and Exploiting Outdated Software | https://medium.com/@shadyfarouk1986/advanced-techniques-for-finding-and-exploiting-outdated-software-f85f8862e514?source=rss------bug_bounty-5 | Shady Farouk | hacking-training, bug-bounty, pentesting, ethical-hacking, bounty-program | 25-Mar-2025 |
| Finding JavaScript Files on Websites Using Automation | https://cyberw1ng.medium.com/finding-javascript-files-on-websites-using-automation-f8b8e03e3d66?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, bug-bounty, programming, technology | 25-Mar-2025 |
| Bypass Restricted shell | Privilege Escalation Techniques [EJpt exam] | https://infosecwriteups.com/bypass-restricted-shell-privilege-escalation-techniques-ejpt-exam-cfe1eb470db9?source=rss------bug_bounty-5 | Mr Horbio | ethical-hacking, bug-bounty, pentesting, cybersecurity, hacking | 25-Mar-2025 |
| OS Command | https://medium.com/@520hazem/os-command-c1b7364ddd63?source=rss------bug_bounty-5 | Hazem | portswigger-lab, pentesting, pentester, bug-bounty, os-command-injection | 25-Mar-2025 |
| Networking Basics for Ethical Hackers | https://medium.com/@akashfalaskar/networking-basics-for-ethical-hackers-99816dc1a2b2?source=rss------bug_bounty-5 | Akash Falaskar | cybersecurity, red-team, bug-bounty, ethical-hacking, networking | 25-Mar-2025 |
| Bypassing AppLock Pattern via Shared Preferences Analysis | https://medium.com/@youssefhussein212103168/bypassing-applock-pattern-via-shared-preferences-analysis-7bf1bb631dd3?source=rss------bug_bounty-5 | Youssefhussein | security, bug-bounty, cybersecurity, android, penetration-testing | 25-Mar-2025 |
| I Want YOU, Hacker To Read This story… | https://medium.com/@nnface/i-want-you-hacker-to-read-this-story-2d16079d6e36?source=rss------bug_bounty-5 | NnFace | bug-bounty, ethical-hacking, hacking, writing, cybersecurity | 25-Mar-2025 |
| Authentication | https://medium.com/@520hazem/authentication-ac63cf7ed785?source=rss------bug_bounty-5 | Hazem | bug-bounty, portswigger-lab, authentication, pentester, pentesting | 24-Mar-2025 |
| How to Find Hidden API Endpoints That Lead to Critical Bugs | https://bitpanic.medium.com/how-to-find-hidden-api-endpoints-that-lead-to-critical-bugs-97a38ca40efe?source=rss------bug_bounty-5 | Spectat0rguy | technology, bug-bounty, programming, ai-generated-content, cybersecurity | 24-Mar-2025 |
| Think You’re Ready for Real-World Hacking? Think Again | https://medium.com/@timsuxwales/think-youre-ready-for-real-world-hacking-think-again-1565c6bb27ed?source=rss------bug_bounty-5 | Timsux Wales | cybersecurity, bug-bounty, penetration-testing, infosec, hacking | 24-Mar-2025 |
| Metasploit Framework Commands for Penetration Testing | https://medium.com/@paritoshblogs/metasploit-framework-commands-for-penetration-testing-505ef6063698?source=rss------bug_bounty-5 | Paritosh | metasploit, information-security, bug-bounty, cybersecurity, hacking | 24-Mar-2025 |
| How I Found a Major Security Flaw in a Popular Platform… And They Ignored It. | https://medium.com/@rakshitshetty59/how-i-found-a-major-security-flaw-in-a-popular-platform-and-they-ignored-it-dd569ce694ce?source=rss------bug_bounty-5 | Rakshitshetty | ethical-hacking, cybersecurity, bug-bounty, web-vulnerabilities, sql-injection | 24-Mar-2025 |
| Account Take-over Via Password Reset Poisoning | https://medium.com/@umd04843/account-take-over-via-password-reset-poisoning-e2a8a2f8a642?source=rss------bug_bounty-5 | Mohamed Usman | bug-bounty, cybersecurity, bug-bounty-tips, vapt, bug-bounty-writeup | 24-Mar-2025 |
| How I Made $100,000 Discovering a Kernel Vulnerability! (With Exploit Code) | https://theindiannetwork.medium.com/how-i-made-100-000-discovering-a-kernel-vulnerability-with-exploit-code-695f4ff18a78?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty-tips, kernel, zero-day, bug-bounty, karnel-exploit | 24-Mar-2025 |
| SSRF Advanced Methodology✨ | https://infosecwriteups.com/ssrf-advanced-methodology-9583fdf2ae3c?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, bug-bounty, methodology, ssrf, infosec | 24-Mar-2025 |
| Exploiting JavaScript Execution in PDFs & How to Prevent It | https://frostyxsec.medium.com/exploiting-javascript-execution-in-pdfs-how-to-prevent-it-9e30cf3fe3ef?source=rss------bug_bounty-5 | Frostyxsec | bug-bounty, bug-hunting, web-security, cybersecurity, vulnerability | 24-Mar-2025 |
| (Ⅰ) Android Identity Authentication: A Game of Cat and Mouse between Developers and “Hackers” | https://medium.com/@security.tecno/%E2%85%B0-android-identity-authentication-a-game-of-cat-and-mouse-between-developers-and-hackers-73eda7a36253?source=rss------bug_bounty-5 | TECNO Security | hacking, bug-bounty, blog, developer, android | 24-Mar-2025 |
| The story of XSS that leads to ATO | https://sahandami.medium.com/the-story-of-xss-that-leads-to-ato-edf23f55a47e?source=rss------bug_bounty-5 | SahandAmi | ato, account-takeover, csrf-token, bug-bounty, xs | 24-Mar-2025 |
| From Zero to First Bug Bounty: A Step-by-Step Guide That Anyone Can Follow! | https://osintteam.blog/from-zero-to-first-bug-bounty-a-step-by-step-guide-that-anyone-can-follow-247657eec2d7?source=rss------bug_bounty-5 | Vivek PS | bug-bounty, web-development, hacking, cybersecurity, programming | 24-Mar-2025 |
| Advanced Thick Client Penetration Testing — Techniques, Methodologies, and Execution -PART -1… | https://infosecwriteups.com/advanced-thick-client-penetration-testing-techniques-methodologies-and-execution-part-1-c49c7bdb1d0b?source=rss------bug_bounty-5 | Ajay Naik | thick-client-security, information-security, bug-bounty, cybersecurity, information-technology | 24-Mar-2025 |
| How to Start Your Career in Web3 Security and Make Millions $$$$$$ | https://medium.com/@whhackerbsac/how-to-start-your-career-in-web3-security-and-make-millions-a07c8aa3ee62?source=rss------bug_bounty-5 | Bsac Hunter | web3, cybersecurity, web3-security, blockchain, bug-bounty | 24-Mar-2025 |
| The Dark Side of Invite Links: A Race Condition Exploit Story (English-Hindi) | https://medium.com/@ajay.kumar.695632/the-dark-side-of-invite-links-a-race-condition-exploit-story-english-hindi-257d5bd8e9c5?source=rss------bug_bounty-5 | Ajay Kumar | bugs, bug-bounty-writeup, bug-bounty, bug-bounty-tips, bugcrowd | 24-Mar-2025 |
| The Ultimate Guide to Price Manipulation Vulnerabilities: Techniques, Case Studies & Advanced… | https://infosecwriteups.com/the-ultimate-guide-to-price-manipulation-vulnerabilities-techniques-case-studies-advanced-0e1a24c5ee3d?source=rss------bug_bounty-5 | Ajay Naik | information-security, penetration-testing, bug-bounty, price-manipulation, cybersecurity | 24-Mar-2025 |
| How to Detect API Keys and Secrets Hiding in a Web Application | https://medium.com/@aviwolicki/how-to-detect-api-keys-and-secrets-hiding-in-a-web-application-8470945c229d?source=rss------bug_bounty-5 | Avi W | web-application-security, bug-bounty, cybersecurity | 24-Mar-2025 |
| Cybersecurity for Beginners: Protect Yourself Like a Pro | https://medium.com/@agranesamia2/cybersecurity-for-beginners-protect-yourself-like-a-pro-08cc41af9c21?source=rss------bug_bounty-5 | Amisaa | bug-bounty, cybersecurity, ethical-hacking, ctf, online-privacy | 24-Mar-2025 |
| Mastering Bug Bounty Hunting: Exploring Different Types of Payloads for Effective Exploitation | https://medium.com/@cybertips96/mastering-bug-bounty-hunting-exploring-different-types-of-payloads-for-effective-exploitation-40f922c057f4?source=rss------bug_bounty-5 | Cybertips | bug-bounty-tips, bug-bounty, payload | 24-Mar-2025 |
| Bug Find | https://medium.com/@ashrafulhossainrafi22/bug-find-47717daa7977?source=rss------bug_bounty-5 | Ashraful Hossain Rafi | bug-bounty | 24-Mar-2025 |
| Custom Dorks to find Bug Bounty Programs | https://medium.com/developersglobal/custom-dorks-to-find-bug-bounty-programs-4867da4b9ebf?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, bug-bounty, bug-bounty-hunter, google-dork, bug-bounty-program | 24-Mar-2025 |
| Automated Information Gathering from Websites | https://cyberw1ng.medium.com/automated-information-gathering-from-websites-9c2975861497?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, programming, bug-bounty, careers, cybersecurity | 24-Mar-2025 |
| CSRF | https://medium.com/@520hazem/dw-98bdac9232c6?source=rss------bug_bounty-5 | Hazem | bug-bounty, csrf-bypass, csrf, portswigger-lab, pentesting | 24-Mar-2025 |
| CVE-2025–29927 — Bypass de Middleware en Next.js | https://medium.com/@juanfelipeoz.rar/cve-2025-29927-bypass-de-middleware-en-next-js-80e900285cf5?source=rss------bug_bounty-5 | Juan Felipe Osorio Z | nextjs, bug-bounty, ciberseguridad, cve-2025-29927, hacking | 24-Mar-2025 |
| Custom Dorks to find Bug Bounty Programs | https://osintteam.blog/custom-dorks-to-find-bug-bounty-programs-4867da4b9ebf?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, bug-bounty, bug-bounty-hunter, google-dork, bug-bounty-program | 24-Mar-2025 |
| 12 Windows Command Line Hacks for Incident Responders | https://medium.com/@paritoshblogs/12-windows-command-line-hacks-for-incident-responders-d9e95ef1c3a3?source=rss------bug_bounty-5 | Paritosh | cybersecurity, hacking, bug-bounty, information-technology, incident-response | 23-Mar-2025 |
| Network Pentesting -Active/Passive Information gathering like Pro Part -2 | https://medium.com/@Cyber_siva/network-pentesting-active-passive-information-gathering-like-pro-part-2-cdbeec6b9300?source=rss------bug_bounty-5 | Siva Sankar | cybersecurity, bug-bounty, networking | 23-Mar-2025 |
| picoCTF Web Exploitation: SSTI1 | https://medium.com/@Kamal_S/picoctf-web-exploitation-ssti1-e2363b1885a0?source=rss------bug_bounty-5 | Kamal S | bug-bounty, picoctf, ssti, command-injection, ssti1 | 23-Mar-2025 |
| How I Exploited an SSRF Vulnerability & Earned $5000 — Real-World Exploit! | https://theindiannetwork.medium.com/how-i-exploited-an-ssrf-vulnerability-earned-5000-real-world-exploit-e8ded56ef9ce?source=rss------bug_bounty-5 | TheIndianNetwork | ssrf-vulnerability, server-side-request, bug-bounty-tips, bug-bounty, ssrf-attack | 23-Mar-2025 |
| I Found a Zero-Day Exploit & Got Paid $3000 — Full Real-World Breakdown! | https://theindiannetwork.medium.com/i-found-a-zero-day-exploit-got-paid-3000-full-real-world-breakdown-42cb6d307699?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty-tips, bug-bounty, bug-bounty-writeup, zero-day, zero-day-vulnerability | 23-Mar-2025 |
| I Hacked a Million-Dollar Website with Just a Text Box — Earned $25,000! (Full Story) | https://theindiannetwork.medium.com/i-hacked-a-million-dollar-website-with-just-a-text-box-earned-25-000-full-story-bef4a8ec28fe?source=rss------bug_bounty-5 | TheIndianNetwork | xss-vulnerability, stored-xss, xss-attack, bug-bounty, bug-bounty-tips | 23-Mar-2025 |
| ️ How to Build a Perfect Bug Bounty Methodology | https://medium.com/@vipulsonule71/%EF%B8%8F-how-to-build-a-perfect-bug-bounty-methodology-0dacf715874e?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, technology, hacking, penetration-testing, ethical-hacking | 23-Mar-2025 |
| CORS | https://medium.com/@520hazem/cors-add835d8de3b?source=rss------bug_bounty-5 | Hazem | bug-bounty, pentesting, portswigger-lab, portswigger, cors | 23-Mar-2025 |
| The Ultimate Guide to Subdomain Enumeration for Bug Bounty Hunters | https://medium.com/@thexnumb/the-ultimate-guide-to-subdomain-enumeration-for-bug-bounty-hunters-73b60fca62bc?source=rss------bug_bounty-5 | Thexnumb | infosec, bug-bounty, cybersecurity, hacking, penetration-testing | 23-Mar-2025 |
| Broken Access Control leads to Addition of Malicious Files / Inclusion of Sensitive Files. | https://medium.com/@saurabhcsec/broken-access-control-leads-to-addition-of-malicious-files-inclusion-of-sensitive-files-4d0b424e1515?source=rss------bug_bounty-5 | Saurabhcsec | bug-bounty-writeup, web-development, cybersecurity, hacking, bug-bounty | 23-Mar-2025 |
| Why SAST is a Must-Have Skill for AppSec Professionals! | https://sahildari.medium.com/why-sast-is-a-must-have-skill-for-appsec-professionals-6090e98eb15f?source=rss------bug_bounty-5 | Sahil Dari | secure-coding, appsec, sast, cybersecurity, bug-bounty | 23-Mar-2025 |
| ️ Work-from-Home Bug Bounty: How to Get Started & Succeed | https://medium.com/@vipulsonule71/%EF%B8%8F-work-from-home-bug-bounty-how-to-get-started-succeed-ce2ee466d9cb?source=rss------bug_bounty-5 | Vipul Sonule | writing-tips, bug-bounty, writing, technology, hacking | 23-Mar-2025 |
| How I Got a Bug Bounty Using Only Recon | https://medium.com/@drhtunaungkyaw1993/how-i-got-a-bug-bounty-using-only-recon-b0c0e92f2503?source=rss------bug_bounty-5 | Htun Aung Kyaw | hacking, myanmar, bug-bounty, pentest, yeswehack | 23-Mar-2025 |
| Cracking a Password-Protected ZIP File with John the Ripper — A Hands-On Guide | https://medium.com/@rundcodehero/cracking-a-password-protected-zip-file-with-john-the-ripper-a-hands-on-guide-1aea0f6b3627?source=rss------bug_bounty-5 | Randi Adhityas Saputra | crack-passwords, bug-bounty, pentest, john-the-ripper | 23-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-122) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-122-5b7edf5b959c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, hacking, bug-bounty-tips, ethical-hacking | 23-Mar-2025 |
| How I Got a Bug Bounty Reward Using Only Recon | https://medium.com/@drhtunaungkyaw1993/how-i-got-a-bug-bounty-using-only-recon-b0c0e92f2503?source=rss------bug_bounty-5 | Htun Aung Kyaw | hacking, myanmar, bug-bounty, pentest, yeswehack | 23-Mar-2025 |
| Hacking with GitHub’s hidden gems for subdomain enumeration. | https://medium.com/h7w/hacking-with-githubs-hidden-gems-for-subdomain-enumeration-a1266d4a019c?source=rss------bug_bounty-5 | Abhishek pawar | programming, bug-bounty, github, hacking, domains | 23-Mar-2025 |
| Internet Archive: Wayback Hunting for Bug Bounty Hunters | https://osintteam.blog/internet-archive-wayback-hunting-for-bug-bounty-hunters-36b112011a7c?source=rss------bug_bounty-5 | RivuDon | wayback-machine, bug-bounty-writeup, infosec, bug-bounty-tips, bug-bounty | 23-Mar-2025 |
| Subdomain Found! Now What? (Part 2) | https://osintteam.blog/subdomain-found-now-what-part-2-2c2835f459ca?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, penetration-testing, hacking, bug-bounty-tips, technology | 23-Mar-2025 |
| How I Accidentally Bypassed a Paywall and Got User Data for Free | https://northstar1.medium.com/how-i-accidentally-bypassed-a-paywall-and-got-user-data-for-free-de73f98a51da?source=rss------bug_bounty-5 | NorthStar | burp-suite-pro, bug-bounty-tips, bug-bounty, bug-bounty-writeup, idor-vulnerability | 23-Mar-2025 |
| OSINT Techniques for Finding Leaked Credentials on Telegram | https://medium.com/@0xblackd3v/osint-techniques-for-finding-leaked-credentials-on-telegram-abefee04e19e?source=rss------bug_bounty-5 | Blackd3v | bug-bounty, bugs, cybersecurity, hacking | 23-Mar-2025 |
| Understanding Privilege Escalation in Web Applications | https://cyberw1ng.medium.com/understanding-privilege-escalation-in-web-applications-c560e641b93b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, technology, bug-bounty, programming | 23-Mar-2025 |
| Breaking Down CVSS: Understanding Vulnerability Scores Like a Hacker | https://medium.com/@jkyne6368/breaking-down-cvss-understanding-vulnerability-scores-like-a-hacker-de85b114d07c?source=rss------bug_bounty-5 | Jordilla | hacking, bug-bounty, cybersecurity, freelancing, aws | 22-Mar-2025 |
| How I Found a $4,837 SQLi Bug in Just 17 Minutes | https://medium.com/@ibtissamhammadi/how-i-found-a-4-837-sqli-bug-in-just-17-minutes-8a4c778d2057?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, sql, web-security, ethical-hacking, cybersecurity | 22-Mar-2025 |
| Discovering and Exploiting a Path Traversal Vulnerability in Chromium’s md_browser Tool | https://medium.com/@piyushbhor22/chromiums-path-traversal-vulnerability-ece8be276859?source=rss------bug_bounty-5 | Pi - The Kernel Panic | code-analysis, bug-bounty, chromium, vulnerability-assessment, path-traversal | 22-Mar-2025 |
| Common and Security Vulnerabilities in Restaking Layers | https://securrtech.medium.com/common-and-security-vulnerabilities-in-restaking-layers-110c61049892?source=rss------bug_bounty-5 | Securr - Web3 Security | blockchain-security, web3-security, smart-contract-security, smart-contract-auditing, bug-bounty | 22-Mar-2025 |
| Information Disclosure — Exposed Order Details via Shipping Status API | https://medium.com/@mIna_x1/information-disclosure-exposed-order-details-via-shipping-status-api-7fd177364d12?source=rss------bug_bounty-5 | Mina Ashraf | bug-bounty, bug-bounty-writeup, cyper-security | 22-Mar-2025 |
| LegionHunter VPS Setup Script for Bug Bounty & Pentesting | https://medium.com/developersglobal/legionhunter-vps-setup-script-for-bug-bounty-pentesting-298d3ef16964?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, vps, pentesting, vps-server, linux | 22-Mar-2025 |
| Microsoft 365 Copilot For Work: Image Data Exfiltration From SharePoint | https://infosecwriteups.com/microsoft-365-copilot-for-work-image-data-exfiltration-from-sharepoint-644bc818a5db?source=rss------bug_bounty-5 | Cyd Tseng | microsoft, bug-bounty, cybersecurity, microsoft-copilot, vulnerability | 22-Mar-2025 |
| Finding new apex domains in a unique way. | https://infosecwriteups.com/finding-new-apex-domains-in-a-unique-way-87404d8dfa1d?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, bug-bounty-tips, bug-bounty, apex, cybersecurity | 22-Mar-2025 |
| LFI Advanced Methodology by Abhijeet | https://medium.com/@Abhijeet_kumawat_/lfi-advanced-methodology-by-abhijeet-9993b827db53?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, cybersecurity, lfi, bug-bounty, hacking | 22-Mar-2025 |
| How I Bypassed 403 Forbidden & Accessed Restricted Pages — Real-World Exploit! | https://theindiannetwork.medium.com/how-i-bypassed-403-forbidden-accessed-restricted-pages-real-world-exploit-e19ccb18bbbb?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty-tips, bug-bounty-writeup, bug-bounty, 403-forbidden, 403-bypass | 22-Mar-2025 |
| How I Deleted Accounts With Just an Email Address | https://medium.com/@preetham._.kumar/how-i-deleted-accounts-with-just-an-email-address-d50d60bd6308?source=rss------bug_bounty-5 | StunnerSec | cybersecurity, hacking, bug-bounty, ethical-hacking, penetration-testing | 22-Mar-2025 |
| TheHarvester: A Powerful OSINT Tool for Cybersecurity Professionals | https://medium.com/@alidrabkih/theharvester-a-powerful-osint-tool-for-cybersecurity-professionals-cc8660876f31?source=rss------bug_bounty-5 | Ali Drabkih | bug-bounty, tools, hacking, cybrt | 22-Mar-2025 |
| Hunting Bugs: My Favorite Flaws | https://hackergod00001.medium.com/hunting-bugs-my-favorite-flaws-9b405a8b9f9d?source=rss------bug_bounty-5 | Hackergod00001 | cybersecurity, secrets, bug-bounty-tips, knowledge, bug-bounty | 22-Mar-2025 |
| LFI Advanced Methodology by Abhijeet | https://infosecwriteups.com/lfi-advanced-methodology-by-abhijeet-9993b827db53?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, cybersecurity, lfi, bug-bounty, hacking | 22-Mar-2025 |
| Mastering DeFi Security Through Hands-On Hacking Challenges | https://medium.com/@schofieldleonard8/mastering-defi-security-through-hands-on-hacking-challenges-98914ed3a260?source=rss------bug_bounty-5 | Leonard Schofield | defi-strategy, crypto-hack, web3-security, crypto-exploit, bug-bounty | 22-Mar-2025 |
| How I Made $4,500 in My First Month Bug Hunting | https://medium.com/@ibtissamhammadi/how-i-made-4-500-in-my-first-month-bug-hunting-5985a2b6f143?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, bug-hunting, cybersecurity, hacking, technology | 22-Mar-2025 |
| Web Hacking Series - Part 1: HTTP Basics – The Invisible Language of the Web | https://medium.com/@cybertips96/web-hacking-series-part-1-http-basics-the-invisible-language-of-the-web-7e007fd06e7b?source=rss------bug_bounty-5 | Cybertips | bug-bounty | 22-Mar-2025 |
| The Ultimate Guide to Bug Bounty Hunting: How to Get Started and Succeed | https://medium.com/@HexaGaurd/the-ultimate-guide-to-bug-bounty-hunting-how-to-get-started-and-succeed-74bb31926190?source=rss------bug_bounty-5 | HexaGaurd | bug-bounty-hunter, bug-bounty, cybersecurity, ethical-hacking, bugbounty-poc | 22-Mar-2025 |
| ✨ The Art of Reconnaissance: How Hackers Gather Intel | https://medium.com/@vipulsonule71/the-art-of-reconnaissance-how-hackers-gather-intel-a665e9c58762?source=rss------bug_bounty-5 | Vipul Sonule | penetration-testing, bug-bounty, cybersecurity, ai, hacking | 22-Mar-2025 |
| Pico CTF: Easy Challenges | Part - 1 | https://medium.com/@john1robert2000/pico-ctf-easy-challenges-part-1-8cd54e389dd0?source=rss------bug_bounty-5 | Rizwan | bug-bounty, ctf-walkthrough | 22-Mar-2025 |
| Chaining Low-Severity Bugs for Critical Impact — Turning Tiny Holes into Major Exploits | https://osintteam.blog/chaining-low-severity-bugs-for-critical-impact-turning-tiny-holes-into-major-exploits-95a996bbda92?source=rss------bug_bounty-5 | Vivek PS | bug-bounty, web-development, ethical-hacking, cybersecurity, programming | 22-Mar-2025 |
| Shhh…Be Quiet Hacker. | https://medium.com/meetcyber/shhh-be-quiet-hacker-4048643f590d?source=rss------bug_bounty-5 | NnFace | hacking, bug-bounty, it, cybersecurity, quiet | 22-Mar-2025 |
| Unauthorized Access to “About” Feature via Parameter Manipulation | https://mmnahian.medium.com/unauthorized-access-to-about-feature-via-parameter-manipulation-b85b08796b87?source=rss------bug_bounty-5 | mmnahian | penetration-testing, bug-bounty, bug-bounty-tips, infosec, bug-bounty-writeup | 22-Mar-2025 |
| PAT-tastrophe: How We Hacked Virtuals’ $4.6B Agentic AI & Cryptocurrency Ecosystem | https://medium.com/@gonzo-hacks/pat-tastrophe-how-we-hacked-virtuals-4-6b-agentic-ai-cryptocurrency-ecosystem-f850b544d0f5?source=rss------bug_bounty-5 | Dane Sherrets | hacking, ai, cryptocurrency, agents, bug-bounty | 22-Mar-2025 |
| How a Security Researcher Earned $1,900 Bounty for Privilege Escalation | https://cyberw1ng.medium.com/how-a-security-researcher-earned-1-900-bounty-for-privilege-escalation-d430e24e8b1b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, technology, programming | 22-Mar-2025 |
| Next.js and the corrupt middleware: the authorizing artifact | https://medium.com/@zhero_/next-js-and-the-corrupt-middleware-the-authorizing-artifact-14e6fb688d26?source=rss------bug_bounty-5 | Rachid.A | javascript, hacking, bug-bounty, vulnerability, nextjs | 22-Mar-2025 |
| How a Security Researcher Earned $1,900 Bounty for Privilege Escalation | https://osintteam.blog/how-a-security-researcher-earned-1-900-bounty-for-privilege-escalation-d430e24e8b1b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, careers, technology, programming | 22-Mar-2025 |
| Exploiting Blind XSS in a Signup Page: Admin Panel Takeover and Real-World Impact ($3000 P2 Private… | https://medium.com/@MianHammadx0root/exploiting-blind-xss-in-a-signup-page-admin-panel-takeover-and-real-world-impact-3000-p2-private-110205e3674b?source=rss------bug_bounty-5 | Mian Hammad | bug-bounty, xss-attack, bugbounty-writeup, blind-xss, pentesting | 21-Mar-2025 |
| The Essential Guide to Bug Bounties and Responsible Disclosure | https://medium.com/@locamartin/the-essential-guide-to-bug-bounties-and-responsible-disclosure-b4d34053c139?source=rss------bug_bounty-5 | Loca Martin | bug-bounty | 21-Mar-2025 |
| How I Made $1000 in Just 30 Minutes by Discovering an Account Takeover (ATO) Vulnerability! | https://theindiannetwork.medium.com/how-i-made-1000-in-just-30-minutes-by-discovering-an-account-takeover-ato-vulnerability-84afd6c5d9ab?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty, account-takeover-attacks, account-takeover, bug-bounty-tips, bug-bounty-hunter | 21-Mar-2025 |
| From Lockdown to Payday: Hacking a Porn Site for $1,500 | https://stevenfloresca.medium.com/from-lockdown-to-payday-hacking-a-porn-site-for-1-500-899bf57cc556?source=rss------bug_bounty-5 | Steven Floresca | information-security, hacker, bug-bounty, xss-vulnerability, security | 21-Mar-2025 |
| Find Private Bug Bounty Programs without an invite | https://osintteam.blog/find-private-bug-bounty-programs-without-an-invite-d2baf4c3be06?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, bug-bounty, bug-bounty-hunter, ethical-hacking, pentesting | 21-Mar-2025 |
| File Upload Bypass: Pulling off The Ultimate Disrespect | https://sudosuraj.medium.com/file-upload-bypass-pulling-off-the-ultimate-disrespect-d7200be31717?source=rss------bug_bounty-5 | sudosuraj | file-upload-bypass, file-upload-vulnerability, bug-bounty-tips, sudosuraj, bug-bounty | 21-Mar-2025 |
| best google dorking | https://mknayek101.medium.com/best-google-dorking-00ccc375d415?source=rss------bug_bounty-5 | MkNayek | bug-bounty | 21-Mar-2025 |
| How I Earned $700 in Just 10 Minutes by Finding a Path Traversal Vulnerability | https://theindiannetwork.medium.com/how-i-earned-700-in-just-10-minutes-by-finding-a-path-traversal-vulnerability-ef311fe25515?source=rss------bug_bounty-5 | TheIndianNetwork | file-path-traversal, path-traversal, directory-traversal, directory-listing, bug-bounty | 21-Mar-2025 |
| How to Route Traffic from WSL to Burp Suite on Windows: A Step-by-Step Guide | https://infosecwriteups.com/how-to-route-traffic-from-wsl-to-burp-suite-on-windows-a-step-by-step-guide-38d58f65b21a?source=rss------bug_bounty-5 | coffinxp | hacking, burpsuite, penetration-testing, bug-bounty-tips, bug-bounty | 21-Mar-2025 |
| Get $5000: GitHub Dorks & Leaks | https://infosecwriteups.com/get-5000-github-dorks-leaks-b26728099d38?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, bug-bounty, hacking, infosec, github | 21-Mar-2025 |
| Advanced Bug Bounty: API Key and Token Leaks — Tools, Techniques, and Exploitation | https://infosecwriteups.com/advanced-bug-bounty-api-key-and-token-leaks-tools-techniques-and-exploitation-7d3fcb3b5fb7?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, information-security, api, bug-bounty, bug-bounty-tips | 21-Mar-2025 |
| Top Cybersecurity Tools | https://medium.com/@cy3ek/top-cybersecurity-tools-42b50ee678e2?source=rss------bug_bounty-5 | cybrk | linux, hacking, tools, bug-bounty | 21-Mar-2025 |
| Understanding the Psychology of Bug Bounty Triage Teams — Why Some Bugs Get Marked as Duplicates… | https://infosecwriteups.com/understanding-the-psychology-of-bug-bounty-triage-teams-why-some-bugs-get-marked-as-duplicates-cab9195c6f58?source=rss------bug_bounty-5 | Vivek PS | ethical-hacking, cybersecurity, bug-bounty, programming | 21-Mar-2025 |
| CSRF TO ACCOUNT TAKEOVER | https://levi4.medium.com/csrf-to-account-takeover-83cacd848903?source=rss------bug_bounty-5 | Levi Ackerman | cybersecurity, security, web, hacking, bug-bounty | 21-Mar-2025 |
| Top 10 Terminal-Based Bug Hunting Tools in 2025 | https://medium.com/@cybertips96/top-10-terminal-based-bug-hunting-tools-in-2025-9c61e8d79aba?source=rss------bug_bounty-5 | Cybertips | bug-bounty, technology | 21-Mar-2025 |
| Top 10 Chrome/Brave Extensions for Bug Hunting in 2025 | https://medium.com/@cybertips96/top-10-chrome-brave-extensions-for-bug-hunting-in-2025-242b09b8ec45?source=rss------bug_bounty-5 | Cybertips | technology, bug-bounty | 21-Mar-2025 |
| 5 Most Useful Websites for Bug Hunters to Know | https://medium.com/@vipulsonule71/5-most-useful-websites-for-bug-hunters-to-know-7094055e1e4b?source=rss------bug_bounty-5 | Vipul Sonule | hacking, ethical-hacking, penetration-testing, bug-bounty-writeup, bug-bounty | 21-Mar-2025 |
| The Power of Bug Bounty Hunting: Strengthening Your Security Posture | https://medium.com/@jkyne6368/the-power-of-bug-bounty-hunting-strengthening-your-security-posture-dfb77a2869d3?source=rss------bug_bounty-5 | Jordilla | cybersecurity, vulnerability, penetration-testing, bug-bounty, security | 21-Mar-2025 |
| What is a web fuzzer, when to use it and how to use it? | https://medium.com/@pars_87944/what-is-a-web-fuzzer-when-to-use-it-and-how-to-use-it-b2e2b720fa7a?source=rss------bug_bounty-5 | Pars SARICA | ctf, fuzzers, hacking, webfuzzing, bug-bounty | 21-Mar-2025 |
| The Ultimate Feroxbuster Cheat Sheet: Faster & Better Than Others? | https://medium.com/@cybrpunked/the-ultimate-feroxbuster-cheat-sheet-faster-better-than-others-2fbe7d875d77?source=rss------bug_bounty-5 | Cybrpunked | bug-bounty, ethical-hacking, red-team, cybersecurity, penetration-testing | 21-Mar-2025 |
| What Is Cybersecurity? (And Why It’s Like Locking Your Front Door) | https://medium.com/@ahmadjaved09/what-is-cybersecurity-and-why-its-like-locking-your-front-door-552b0772c0fa?source=rss------bug_bounty-5 | Ahmad Javed | hacking, bug-bounty, pentesting, cybersecurity, digital-self-defense | 21-Mar-2025 |
| Advanced Dorking Techniques for Bug Bounty Hunters: Part 3 | https://hackersatty.medium.com/advanced-dorking-techniques-for-bug-bounty-hunters-part-3-2bdadc8acf38?source=rss------bug_bounty-5 | hackersatty | hackersatty, google-dorking, xss-attack, bug-bounty-tips, bug-bounty | 21-Mar-2025 |
| Top Tools for Ethical Hackers in 2025 | https://medium.com/@vipulsonule71/top-tools-for-ethical-hackers-in-2025-7f15d53f14d8?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, ethical-hacking, tech, hacking, penetration-testing | 21-Mar-2025 |
| 5 Game-Changing Websites Every Bug Hunter Must Know! ️♂️ | https://medium.com/@vipulsonule71/5-most-useful-websites-for-bug-hunters-to-know-7094055e1e4b?source=rss------bug_bounty-5 | Vipul Sonule | hacking, ethical-hacking, penetration-testing, bug-bounty-writeup, bug-bounty | 21-Mar-2025 |
| Cryptographic Failures: Advanced Insights and Real-World Attacks | https://cyberw1ng.medium.com/cryptographic-failures-advanced-insights-and-real-world-attacks-bb6230f9f5be?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, bug-bounty, careers, technology, cybersecurity | 21-Mar-2025 |
| Access Control Vulnerability: | https://medium.com/@520hazem/access-control-vulnerability-67c0064190c9?source=rss------bug_bounty-5 | Hazem | access-control, portswigger, bug-bounty, portswigger-lab, pentesting | 21-Mar-2025 |
| Bypassing Open Redirect Mitigations: How I Exploited a Trusted Platform | https://take0verx0.medium.com/bypassing-open-redirect-mitigations-how-i-exploited-a-trusted-platform-8130938083ed?source=rss------bug_bounty-5 | Shahariar Amin | open-redirect, bypass-wrapper, bug-bounty | 21-Mar-2025 |
| Blog view count manipulation by automated requests. | https://take0verx0.medium.com/blog-view-count-manipulation-by-automated-requests-942eac11c233?source=rss------bug_bounty-5 | Shahariar Amin | bug-bounty | 21-Mar-2025 |
| The rate limiting request /api/auth/_log is not used causing all APIs to crash. | https://medium.com/@VulnRAM/the-rate-limiting-request-api-auth-log-is-not-used-causing-all-apis-to-crash-87dc89c4f178?source=rss------bug_bounty-5 | ramzey elsayed mohamed | bug-bounty, bug-bounty-writeup, penetration-testing, bug-bounty-tips, bugs | 21-Mar-2025 |
| Authentication Bypass Vulnerability — Impersonation on Article Comments | https://take0verx0.medium.com/authentication-bypass-vulnerability-impersonation-on-article-comments-97169213b07c?source=rss------bug_bounty-5 | Shahariar Amin | authentication-bypass, bug-bounty | 21-Mar-2025 |
| Business Logic | https://medium.com/@520hazem/business-logic-53377a732c8c?source=rss------bug_bounty-5 | Hazem | business-logic-flaw, portswigger, portswigger-lab, bug-bounty, business-logic | 21-Mar-2025 |
| $100 for a Filthy Enterprise Email Leaks in source code. | https://medium.com/@rootplinix/100-for-a-filthy-enterprise-email-leaks-in-source-code-c9ddf118d9ae?source=rss------bug_bounty-5 | Abu Hurayra | infosec, bug-bounty, writeup, hacking, cybersecurity | 21-Mar-2025 |
| How to Get Root Privilege after getting foothold [ EJPT Notes] | https://infosecwriteups.com/how-to-get-root-privilege-after-getting-foothold-ejpt-notes-ce526a535ca3?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, hacking, bug-bounty, ethical-hacking, privilege-escalation | 21-Mar-2025 |
| Bug Hunting with HTTPX: A Powerful Security Tool in 2025 ✅ | https://medium.com/@cybertips96/bug-hunting-with-httpx-a-powerful-security-tool-in-2025-1b20a8425f62?source=rss------bug_bounty-5 | Cybertips | technology, bug-bounty, hackerone-report, http-status-code | 21-Mar-2025 |
| Cryptographic Failures: Advanced Insights and Real-World Attacks | https://osintteam.blog/cryptographic-failures-advanced-insights-and-real-world-attacks-bb6230f9f5be?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, bug-bounty, careers, technology, cybersecurity | 21-Mar-2025 |
| Mobile Number Verification Bypass CWE-840 Business Logic Error | https://medium.com/@VulnRAM/mobile-number-verification-bypass-cwe-840-business-logic-error-1cd80b0bced5?source=rss------bug_bounty-5 | ramzey elsayed mohamed | bug-bounty, pentesting, bug-bounty-writeup, bug-bounty-tips | 20-Mar-2025 |
| How I Made $5000 in 1 Hour Finding 5 SQLi Vulnerabilities Manually | https://medium.com/@ibtissamhammadi/how-i-made-5000-in-1-hour-finding-5-sqli-vulnerabilities-manually-bfbff1c02a47?source=rss------bug_bounty-5 | Ibtissam Hammadi | cybersecurity, sql, web-security, bug-bounty, ethical-hacking | 20-Mar-2025 |
| How I Made $1,000,000 in Bug Bounties — Finding a Simple $500,000+ Vulnerability with Just a… | https://theindiannetwork.medium.com/how-i-made-1-000-000-in-bug-bounties-finding-a-simple-500-000-vulnerability-with-just-a-d5e224041c6e?source=rss------bug_bounty-5 | TheIndianNetwork | idor-vulnerability, api-security, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 20-Mar-2025 |
| How I Earned $2000 from SQL Injection: A Bug Hunter’s Guide | https://theindiannetwork.medium.com/how-i-earned-2000-from-sql-injection-a-bug-hunters-guide-3fb2bb0c51bd?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty, sql-injection, database-hack, bug-bounty-tips, sql-injection-attack | 20-Mar-2025 |
| From Zero to Hero: Hunting High-Paying Open Redirect Bugs in Web Apps | https://infosecwriteups.com/from-zero-to-hero-hunting-high-paying-open-redirect-bugs-in-web-apps-fdb80286236e?source=rss------bug_bounty-5 | coffinxp | penetration-testing, cybersecurity, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 20-Mar-2025 |
| Ghost in the Machine: Advanced Persistent Threats (APTs) Hiding in Firmware and Hardware-Level… | https://medium.com/@paritoshblogs/ghost-in-the-machine-advanced-persistent-threats-apts-hiding-in-firmware-and-hardware-level-e2c228c4839d?source=rss------bug_bounty-5 | Paritosh | cybersecurity, hacking, information-technology, bug-bounty, apt | 20-Mar-2025 |
| One Year of Cybersecurity Writing: Lessons, Insights & What’s Next! | https://medium.com/@verylazytech/one-year-of-cybersecurity-writing-lessons-insights-whats-next-beb1cff93805?source=rss------bug_bounty-5 | Very Lazy Tech | thank-you, hacking, growth, bug-bounty, cybersecurity | 20-Mar-2025 |
| Part 1: How I dumped 5,000,000 emails by reading admin panel JS code. | https://medium.com/@alimuhammadsecured/how-i-dumped-5-000-000-emails-by-reading-admin-panel-js-code-bb8cfe23bcab?source=rss------bug_bounty-5 | Alimuhammadsecured | hacking, vulnerability, bug-bounty, red-team, ethicalhackin | 20-Mar-2025 |
| ✅ Step-by-Step Guide: Install WSL (Windows Subsystem for Linux) Terminal | https://medium.com/@cybertips96/step-by-step-guide-install-wsl-windows-subsystem-for-linux-terminal-674813db62fa?source=rss------bug_bounty-5 | Cybertips | bug-bounty | 20-Mar-2025 |
| Server-Side Request Forgery (SSRF) Explained | https://medium.com/@abdelrahmanahmetoglu/server-side-request-forgery-ssrf-explained-46cc1468b9ba?source=rss------bug_bounty-5 | Abdelrahmanahmetoglu | web-security, cybersecurity, bug-bounty, web-development, ssrf | 20-Mar-2025 |
| Easy $250: Discovered Exposed .env Files | https://medium.com/@Abhijeet_kumawat_/easy-250-discovered-exposed-env-files-762204fcedcd?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, infosec, cybersecurity, hacking, secrets | 20-Mar-2025 |
| ✅ Step-by-Step Guide: Install and Configure Oh My Posh in Windows Terminal (WSL) | https://medium.com/@cybertips96/step-by-step-guide-install-and-configure-oh-my-posh-in-windows-terminal-wsl-080fc7d9f11c?source=rss------bug_bounty-5 | Cybertips | promptengineeringchatgpt, artificial-intelligence, bug-bounty, psychology, technology | 20-Mar-2025 |
| Full Account Takeover via XSS: My Bug Hunting Win… or Was It? | https://mushirsyed.medium.com/full-account-takeover-via-xss-my-bug-hunting-win-or-was-it-3b3fb05c25a9?source=rss------bug_bounty-5 | Syed Mushir | xss-vulnerability, bug-hunting, account-takeover, bug-bounty, xss-attack | 20-Mar-2025 |
| I Bypassed WAF To Escalate SQLI ~Reward HOF | https://ajakcybersecurity.medium.com/i-bypassed-waf-to-escalate-sqli-reward-hof-00c5ddb0053e?source=rss------bug_bounty-5 | AJAK Cyber Academy | cybersecurity, learning, hacking, bug-bounty, penetration-testing | 20-Mar-2025 |
| How to Approach a Target for Bug Hunting ✨ | https://medium.com/@vipulsonule71/how-to-approach-a-target-for-bug-hunting-81f8ce89cdf3?source=rss------bug_bounty-5 | Vipul Sonule | ethical-hacking, penetration-testing, cybersecurity, bug-bounty, hacking | 20-Mar-2025 |
| Mastering Recon in Bug Bounty: Advanced Techniques for 2025 | https://medium.com/@hackerfromhills/mastering-recon-in-bug-bounty-advanced-techniques-for-2025-1c8b5f3c43b9?source=rss------bug_bounty-5 | Badal kathayat | hacker, bug-bounty-writeup, hacking, bug-bounty-tips, bug-bounty | 20-Mar-2025 |
| Improper Access Control Worth $$$ Bounty | https://medium.com/@mohaned0101/improper-access-control-worth-bounty-e8706ab3a3ec?source=rss------bug_bounty-5 | mohaned alkhlot | bug-bounty, bug-bounty-tips | 20-Mar-2025 |
| How I Took Admin Account via JWT Bypass | https://medium.com/@shyam.sam0704/how-i-took-admin-account-via-jwt-bypass-5eb96430c2ad?source=rss------bug_bounty-5 | Shyam | vulnerability-management, jwt-authentication, bug-bounty-writeup, bug-bounty, jwt-exploitation | 20-Mar-2025 |
| Self-Hosted vs. Third-Party Bug Bounty Platforms: Key Differences Explained | https://medium.com/@cybertips96/self-hosted-vs-third-party-bug-bounty-platforms-key-differences-explained-16358ac9488c?source=rss------bug_bounty-5 | Cybertips | technology, programming, bug-bounty | 20-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-121) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-121-f00a0b2a9abe?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, hacking, bug-bounty, bug-bounty-tips, cybersecurity | 20-Mar-2025 |
| When Life Gave Me a 500 Error, I Found AWS Keys Instead! $$RF | https://medium.com/@iski/when-life-gave-me-a-500-error-i-found-aws-keys-instead-rf-b416f8ca68f8?source=rss------bug_bounty-5 | Iski | bug-bounty, cybersecurity, bug-bounty-tips, aws | 20-Mar-2025 |
| Cryptographic Failures: A Comprehensive Guide | https://cyberw1ng.medium.com/cryptographic-failures-a-comprehensive-guide-410064fe6e4e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, cybersecurity, careers, bug-bounty, technology | 20-Mar-2025 |
| Finding and Exploiting XSS in a CRM (and getting paid for it) | https://medium.com/@AlasdairGorniak/finding-and-exploiting-xss-in-a-crm-and-getting-paid-for-it-71e2767faeba?source=rss------bug_bounty-5 | Alasdair Gorniak | xss-attack, ethical-hacking, cybersecurity, bug-bounty, hacking | 20-Mar-2025 |
| No Rate Limiting on Login Endpoint — A Brute Force Vulnerability | https://medium.com/@cybermanx07/no-rate-limiting-on-login-endpoint-a-brute-force-vulnerability-d1300848b445?source=rss------bug_bounty-5 | Cyber Man | ethical-hacking, web-security, cybersecurity, burpsuite, bug-bounty | 19-Mar-2025 |
| Active Directory Federation Services (AD FS) | https://medium.com/@paritoshblogs/active-directory-federation-services-ad-fs-1b7c38929964?source=rss------bug_bounty-5 | Paritosh | cybersecurity, information-technology, active-directory, hacking, bug-bounty | 19-Mar-2025 |
| [CVE Anniversary Activity] CVE report analysis, exclusive activity is now open! | https://medium.com/@security.tecno/cve-exclusive-activity-analyze-12-cve-reports-and-start-a-reward-activity-4bab97436b06?source=rss------bug_bounty-5 | TECNO Security | hacking, cve, security, report, bug-bounty | 19-Mar-2025 |
| From SSRF to $$$: How I Hacked Autodesk’s Rendering Service and Earned a Bug Bounty | https://cybersecuritywriteups.com/from-ssrf-to-how-i-hacked-autodesks-rendering-service-and-earned-a-bug-bounty-da444900f7d9?source=rss------bug_bounty-5 | Krish_cyber | osint, bug-bounty-writeup, cybersecurity, bug-bounty, info-sec-writeups | 19-Mar-2025 |
| BugYatri - web2 & web3 BugBounty Platform for BugHunters!!! | https://medium.com/@bugyatri/bugyatri-web2-web3-bugbounty-platform-for-bughunters-476826513b6f?source=rss------bug_bounty-5 | BugYatri | bug-bounty, bounty-program, cybersecurity, web3, web | 19-Mar-2025 |
| A great tool that will be helpful in your bug bounty&pentesting journey. | https://infosecwriteups.com/a-great-tool-that-will-be-helpful-in-your-bug-bounty-pentesting-journey-8ce118f4ea00?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, hacking, penetration-testing, tips | 19-Mar-2025 |
| Users Without Roles/Member Roles Can Create Private Repositories And Secret Teams In Github… | https://rhidayah.medium.com/users-without-roles-member-roles-can-create-private-repositories-and-secret-teams-in-github-8fec746ac684?source=rss------bug_bounty-5 | Rohmad Hidayah | broken-access-control, bug-bounty-writeup, privilege-escalation, bug-bounty, github | 19-Mar-2025 |
| The Role of Ethical Hackers in Web3 Security | https://medium.com/@somtoochukwu65/the-role-of-ethical-hackers-in-web3-security-4b12579da1ef?source=rss------bug_bounty-5 | Divine Somtoochukwu Innocent | blockchain-security, ethical-hacking, web3-security, cyber-threats-2025, bug-bounty | 19-Mar-2025 |
| Users Without Roles/Member Roles Can Create Private Repositories And Secret Teams In Github… | https://infosecwriteups.com/users-without-roles-member-roles-can-create-private-repositories-and-secret-teams-in-github-8fec746ac684?source=rss------bug_bounty-5 | Rohmad Hidayah | broken-access-control, bug-bounty-writeup, privilege-escalation, bug-bounty, github | 19-Mar-2025 |
| 15+ Linux Environment Variables Hackers Use (You Should Too!) | https://medium.com/@verylazytech/15-linux-environment-variables-hackers-use-you-should-too-f4b9397098dd?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, penetration-testing, bug-bounty, environmental-variables, hacking | 19-Mar-2025 |
| Hacking Open Docker Registries: Pulling, Extracting, and Exploiting Images. | https://infosecwriteups.com/hacking-open-docker-registries-pulling-extracting-and-exploiting-images-339f41fbf9b4?source=rss------bug_bounty-5 | nav1n | rce-vulnerability, docker, sql-injection, bug-bounty, unauthorized-access | 19-Mar-2025 |
| How I Got Access to Berkeley University’s One Of Server Using the Legendary ‘admin: admin’ Creds! | https://hiddendom.medium.com/how-i-got-access-to-berkeley-universitys-one-of-server-using-the-legendary-admin-admin-creds-64394e6b3152?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-writeup, penetration-testing, bug-bounty, ethical-hacking, bug-bounty-tips | 19-Mar-2025 |
| “Secret Keys to Cash: Finding Hidden Flaws for Bug Bounties” | https://medium.com/@dimpchubb/secret-keys-to-cash-finding-hidden-flaws-for-bug-bounties-c67ee06dd3eb?source=rss------bug_bounty-5 | VulnerabilityIntel | bug-bounty-writeup, hacking, bug-bounty, penetration-testing, bug-bounty-tips | 19-Mar-2025 |
| Exclusive Exploit for Sale — Unlock Advanced Security Testing Potential - $$$$ BOUNTY | https://medium.com/@ajaynaikhack/exclusive-exploit-for-sale-unlock-advanced-security-testing-potential-bounty-197a2cda3c9c?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, information-technology, cybersecurity, bug-bounty, information-security | 19-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-120) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-120-034170afece7?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, bug-bounty-tips, hacking, ethical-hacking | 19-Mar-2025 |
| HTTP Request Smuggling: Advanced Security Testing Guide and Exploitation Techniques | https://infosecwriteups.com/http-request-smuggling-advanced-security-testing-guide-and-exploitation-techniques-1d4dac9a826a?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, information-security, information-technology, penetration-testing, http-request-smuggling | 19-Mar-2025 |
| HTTP: The Invisible Language of the Web (And How Hackers Exploit It) | https://medium.com/@sobatistacyber/http-the-invisible-language-of-the-web-and-how-hackers-exploit-it-83456833c4c5?source=rss------bug_bounty-5 | SoBatista | https, bug-bounty, burpsuite, penetration-testing, hacking | 19-Mar-2025 |
| No Tools, No Problem — Another Fun Bug Hunting Story! | https://strangerwhite.medium.com/no-tools-no-problem-another-fun-bug-hunting-story-22c234331bfd?source=rss------bug_bounty-5 | StrangeRwhite | hacking, information-technology, cyberaware, cybersecurity, bug-bounty | 19-Mar-2025 |
| Automating Subdomain Takeover Discovery with Shell Scripting | https://icecream23.medium.com/automating-subdomain-takeover-discovery-with-shell-scripting-e9016ee77ddd?source=rss------bug_bounty-5 | Aman Bhuiyan | bug-bounty, takeovers, recon, bug-bounty-writeup | 19-Mar-2025 |
| DOM XSS in portswigger | https://medium.com/@testwebsite1244/dom-xss-in-portswigger-50678427bc0f?source=rss------bug_bounty-5 | Oday | portswigger, burpsuite, bug-bounty | 19-Mar-2025 |
| Why Threat Modeling is a Game Changer for Application Security | https://medium.com/@8459vismay/why-threat-modeling-is-a-game-changer-for-application-security-27a225c28f4e?source=rss------bug_bounty-5 | Vismay Patil | cybersecurity, penetration-testing, threat-modeling, bug-bounty, ethical-hacking | 19-Mar-2025 |
| ️ How to Use Nuclei for Bug Hunting | https://medium.com/@vipulsonule71/%EF%B8%8F-how-to-use-nuclei-for-bug-hunting-413f3496a335?source=rss------bug_bounty-5 | Vipul Sonule | penetration-testing, hacking, bug-bounty, technology, ethical-hacking | 19-Mar-2025 |
| Part-3 | Deep Recon Methodology for Bug Bounty Hunters | https://infosecwriteups.com/part-3-deep-recon-methodology-for-bug-bounty-hunters-cd7139eed7e4?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, recon, hacking, infosec, bug-bounty | 19-Mar-2025 |
| Hacking APIs: Bypassing Rate Limiting | https://iaraoz.medium.com/hacking-apis-bypassing-rate-limiting-0c7bd075b86c?source=rss------bug_bounty-5 | Israel Aráoz Severiche | hacking, appsec, owasp-top-10, bug-bounty, cybersecurity | 19-Mar-2025 |
| Udemy Savings: Get F5 BIG-IP Courses for Less! | https://medium.com/@deepdive4learn/udemy-savings-get-f5-big-ip-courses-for-less-635e7d9cf449?source=rss------bug_bounty-5 | DeepDive4learn | cybersecurity, networking, bug-bounty, web, application-security | 19-Mar-2025 |
| “Unveiled: The Dark Side of Bugcrowd — Unfair Rejections and a Warning to Hackers” | https://monsifhmouri.medium.com/unveiled-the-dark-side-of-bugcrowd-unfair-rejections-and-a-warning-to-hackers-ca9d8572ad63?source=rss------bug_bounty-5 | MONSIF HMOURI | bug-bounty, bugcrowd, ethical-hacking | 19-Mar-2025 |
| $12,900 in Bounties in My First Month of Bug Hunting with Ax Framework | https://medium.com/@EthicalOffsec/12-900-in-bounties-in-my-first-month-of-bug-hunting-with-ax-framework-6d530d25c1c2?source=rss------bug_bounty-5 | 0xtavian | bug-bounty, bug-bounty-writeup, penetration-testing, hacking, bug-bounty-tips | 19-Mar-2025 |
| $50K Bounty Just for GitHub Access Token exposure | https://medium.com/@hrofficial62/50k-bounty-just-for-github-access-token-exposure-d92dcc34eb4d?source=rss------bug_bounty-5 | Mr Horbio | pentesting, cybersecurity, hacking, ethical-hacking, bug-bounty | 19-Mar-2025 |
| File Inclusion Vulnerabilities: Advanced Exploitation and Mitigation Techniques | https://cyberw1ng.medium.com/file-inclusion-vulnerabilities-advanced-exploitation-and-mitigation-techniques-6b47cb6547fd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, cybersecurity, bug-bounty, programming, careers | 19-Mar-2025 |
| ♂️ “From Zero to Hero: How 2FA Bypass Turned Me Into a Bug Bounty Legend” | https://osintteam.blog/%EF%B8%8F-from-zero-to-hero-how-2fa-bypass-turned-me-into-a-bug-bounty-legend-8eb0b815aaf9?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, infosec-write-ups, osint, cybersecurity, bug-bounty-writeup | 19-Mar-2025 |
| File Inclusion Vulnerabilities: Advanced Exploitation and Mitigation Techniques | https://osintteam.blog/file-inclusion-vulnerabilities-advanced-exploitation-and-mitigation-techniques-6b47cb6547fd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, cybersecurity, bug-bounty, programming, careers | 19-Mar-2025 |
| Dark Web and Phishing Kits: Exploring the Underground Market for Phishing Tools | https://medium.com/@paritoshblogs/dark-web-and-phishing-kits-exploring-the-underground-market-for-phishing-tools-a645a9b962f1?source=rss------bug_bounty-5 | Paritosh | hacking, bug-bounty, information-technology, phishing, cybersecurity | 18-Mar-2025 |
| How to Hacking Amazon Simple Notification Service @amazon | https://medium.com/@mo7mead/how-to-hacking-amazon-simple-notification-service-amazon-14ff463c402c?source=rss------bug_bounty-5 | mo7mead | cybersecurity, bug-bounty, penetration-testing, bug-bounty-tips | 18-Mar-2025 |
| Mastering F5 ASM: Web Application Security Like a Pro! | https://medium.com/@deepdive4learn/mastering-f5-asm-web-application-security-like-a-pro-2f390613b68a?source=rss------bug_bounty-5 | DeepDive4learn | owasp-top-10, web-development, cybersecurity, bug-bounty, api | 18-Mar-2025 |
| ChatGPT Jailbreaking: A Sneaky Loophole That Exposes Ethical Gaps | https://medium.com/@dharineeshj2/chatgpt-jailbreaking-a-sneaky-loophole-that-exposes-ethical-gaps-1f3dcf015bf6?source=rss------bug_bounty-5 | Hack-Bat | bug-bounty, llm, hacking, cybersecurity, prompt-engineering | 18-Mar-2025 |
| CRLF Injection: Guide to Finding & Exploiting Vulnerabilities | https://infosecwriteups.com/crlf-injection-guide-to-finding-exploiting-vulnerabilities-ec2d55805cc4?source=rss------bug_bounty-5 | Abhijeet Kumawat | crlf-injection, hacking, cybersecurity, infosec, bug-bounty | 18-Mar-2025 |
| ZeroCopter Programs for Bug Hunting | https://osintteam.blog/zerocopter-programs-for-bug-hunting-6b73c4d97fe5?source=rss------bug_bounty-5 | AbhirupKonwar | bug-hunting, pentesting, bug-bounty-tips, ethical-hacking, bug-bounty | 18-Mar-2025 |
| Modern XSS Challenges: Beyond the Basics | https://infosecwriteups.com/modern-xss-challenges-beyond-the-basics-90bd9d931e30?source=rss------bug_bounty-5 | Dhanush N | bug-bounty-writeup, bug-bounty, security, xss-attack, bug-bounty-tips | 18-Mar-2025 |
| ️ How to Be an Ethical Hacker: A Complete Guide | https://medium.com/@vipulsonule71/%EF%B8%8F-how-to-be-an-ethical-hacker-a-complete-guide-dfa8437aa2d9?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, ethical-hacking, cybersecurity, penetration-testing, hacking | 18-Mar-2025 |
| How to find IDORs like a pro | https://medium.com/@bxrowski0x/how-to-find-idors-like-a-pro-158cf23baf23?source=rss------bug_bounty-5 | Omar ElSayed | info-sec-writeups, bug-bounty, infosec, idor, cybersecurity | 18-Mar-2025 |
| The Ultimate Guide to Setting Up ezXSS on Oracle Cloud Free Tier ARM Server | https://medium.com/@curiouskhanna/the-ultimate-guide-to-setting-up-ezxss-on-oracle-cloud-free-tier-arm-server-a60677b2ac2a?source=rss------bug_bounty-5 | Shubham Khanna | cybersecurity, blind-xss, bug-bounty, xss-attack | 18-Mar-2025 |
| CSRF to XSS: Chaining Vulnerabilities for Critical Bug Bounties | https://krishna-cyber.medium.com/csrf-to-xss-chaining-vulnerabilities-for-critical-bug-bounties-804bced55bb3?source=rss------bug_bounty-5 | Krish_cyber | osint, infosec-write-ups, bug-bounty-writeup, bug-bounty, cybersecurity | 18-Mar-2025 |
| Can You Find a $4,500 Bug in Google Slides in Under 3 Hours | https://medium.com/@ibtissamhammadi/can-you-find-a-4-500-bug-in-google-slides-in-under-3-hours-69e9113ccfd3?source=rss------bug_bounty-5 | Ibtissam Hammadi | google, bug-hunting, ethical-hacking, cybersecurity, bug-bounty | 18-Mar-2025 |
| Bug Bounty Hunting in 2025: How to Earn Big with the Best Tools & Platforms | https://medium.com/@modernshubhamgupta/bug-bounty-hunting-in-2025-how-to-earn-big-with-the-best-tools-platforms-a04e66d6575f?source=rss------bug_bounty-5 | Shubham Raj | bug-bounty-tips, bug-bounty, money-making-ideas, cybersecurity, ethical-hacking | 18-Mar-2025 |
| How to Make Your First $100,000 in Bug Bounty | https://medium.com/@hackerfromhills/how-to-make-your-first-100-000-in-bug-bounty-51e10cda8f11?source=rss------bug_bounty-5 | Badal kathayat | bug-bounty-tips, bug-hunter, bug-bounty, hacking, bug-bounty-writeup | 18-Mar-2025 |
| Hacking With Cookies | https://medium.com/cloud-security/hacking-with-cookies-99d8308169f0?source=rss------bug_bounty-5 | Teri Radichel | pentesting, cookies, penetration-testing, bug-bounty, hacking | 18-Mar-2025 |
| Some Ways to Find More IDOR Vulnerabilities | https://medium.com/@vipulsonule71/some-ways-to-find-more-idor-vulnerabilities-5648f2f6baa7?source=rss------bug_bounty-5 | Vipul Sonule | ethical-hacking, bug-bounty, penetration-testing, hacking, technology | 18-Mar-2025 |
| The Ultimate Guide to CDX API for Bug Bounty Recon | https://myselfakash20.medium.com/the-ultimate-guide-to-cdx-api-for-bug-bounty-recon-e98c36d033ed?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, bug-bounty-tips, bug-bounty-writeup, programming, cybersecurity | 18-Mar-2025 |
| Open Redirect Vulnerability: A Detailed Overview and How I Discovered It | https://theindiannetwork.medium.com/open-redirect-vulnerability-a-detailed-overview-and-how-i-discovered-it-b95a228f6047?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty, open-redirect-vurnability, open-redirect, open-redirection, bug-bounty-tips | 18-Mar-2025 |
| Understanding File Inclusion Vulnerabilities: A Practical Guide | https://cyberw1ng.medium.com/understanding-file-inclusion-vulnerabilities-a-practical-guide-25a22c461c2b?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, technology, programming, careers, bug-bounty | 18-Mar-2025 |
| How I Made $3000 in 3 Minutes with SQLi | https://medium.com/@ibtissamhammadi/how-i-made-3000-in-3-minutes-with-sqli-d32c7f29c869?source=rss------bug_bounty-5 | Ibtissam Hammadi | database, bug-bounty, cybersecurity, sql, ethical-hacking | 17-Mar-2025 |
| Bug Bounty: Cookie timeline utilization when the system uses multiple authentication cookies | https://medium.com/@expression4865/bug-bounty-cookie-timeline-utilization-when-the-system-uses-multiple-authentication-cookies-7d2e6cc68c34?source=rss------bug_bounty-5 | expression4865 | bug-bounty, csrf, xss-attack | 17-Mar-2025 |
| Subdomain Found! Now What? Next Steps for Bug Hunters | https://infosecwriteups.com/subdomain-found-now-what-next-steps-for-bug-hunters-df8fd79c73b7?source=rss------bug_bounty-5 | Monika sharma | hacking, penetration-testing, bug-bounty-tips, bug-bounty, technology | 17-Mar-2025 |
| [Best of February — M3Di] From Forest to Code: Transformational Security Researcher Growth Notes | https://medium.com/@security.tecno/best-of-february-m3di-from-forest-to-code-transformational-security-researcher-growth-notes-5079ac24d1b4?source=rss------bug_bounty-5 | TECNO Security | app-development, hacking, bug-bounty, hacker, security | 17-Mar-2025 |
| Introduction to web3 | https://doordiefordream.medium.com/introduction-to-web3-b78aa109ced0?source=rss------bug_bounty-5 | DOD cyber solutions | web3, blockchain, technology, bug-bounty, ethical-hacking | 17-Mar-2025 |
| Bug Bounty: Cookie timeline utilization when the system uses multiple authentication cookies | https://medium.com/@smilemil/bug-bounty-cookie-timeline-utilization-when-the-system-uses-multiple-authentication-cookies-7d2e6cc68c34?source=rss------bug_bounty-5 | smilemil | bug-bounty, csrf, xss-attack | 17-Mar-2025 |
| Best Bug Bounty Tips of 2025! | https://systemweakness.com/best-bug-bounty-tips-of-2025-6f5368491526?source=rss------bug_bounty-5 | Imad Husanovic | bug-bounty, bug-bounty-tips, programming, cybersecurity, hacking | 17-Mar-2025 |
| How I Bypassed a Firewall, Leading to a Successful SQL Injection Exploit | https://medium.com/@AhmedSamy-X/how-i-bypassed-a-firewall-leading-to-a-successful-sql-injection-exploit-aa605996e163?source=rss------bug_bounty-5 | Ahmedsamy | bug-bounty-tips, sql-injection, bug-bounty, cybersecurity, web-exploitation | 17-Mar-2025 |
| Master Subdomain Enumeration: Step-by-Step Guide to Installing and Using Subfinder | https://medium.com/@GrayWhite/master-subdomain-enumeration-step-by-step-guide-to-installing-and-using-subfinder-8a9c9b1d0ee9?source=rss------bug_bounty-5 | CrookSec | hacking, bug-bounty, cybersecurity | 17-Mar-2025 |
| Using the full potential of BuiltWith for bug bounty | https://medium.com/@loyalonlytoday/using-the-full-potential-of-builtwith-for-bug-bounty-24b6145dba44?source=rss------bug_bounty-5 | loyalonlytoday | reconnaissance, bug-bounty, cybersecurity, penetration-testing, tips | 17-Mar-2025 |
| Is Your Website Vulnerable? Discover the Power of Content Security Policy (CSP)! | https://medium.com/@verylazytech/is-your-website-vulnerable-discover-the-power-of-content-security-policy-csp-6b1db2c5779f?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, bug-bounty, vulnerability, web-penetration-testing, csp | 17-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-119) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-119-6da43af9002c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, ethical-hacking, hacking, bug-bounty, cybersecurity | 17-Mar-2025 |
| How to start hacking with use AI | https://medium.com/@vipulsonule71/how-to-start-hacking-with-use-ai-29ff04942528?source=rss------bug_bounty-5 | Vipul Sonule | ethical-hacking, bug-bounty, cybersecurity, penetration-testing, hacking | 17-Mar-2025 |
| Exif Metadata Not Stripped Leak User Geolocation | https://firdausmuhammadismail.medium.com/exif-metadata-not-stripped-leak-user-geolocation-67698e6a4ff5?source=rss------bug_bounty-5 | Firdaus Muhammad Ismail | exif-data, bug-bounty, exiftool, server-security, bug-bounty-tips | 17-Mar-2025 |
| Portswigger XSS Attack Lab 1 | https://medium.com/@yfhackerinfo/portswigger-xss-attack-lab-1-abf7e06b4344?source=rss------bug_bounty-5 | Your Friendly Hacker | cybersecurity, portswigger, bug-bounty, xss-attack, penetration-testing | 17-Mar-2025 |
| bxbxb | https://medium.com/@tbryzshmarhkhalh63/bxbxb-b01a7e6ce064?source=rss------bug_bounty-5 | شماره خاله تبریز =مشهد ـکرمان ـخوزستان ـ زاهدانـ | startup, hx, artificial-intelligence, bug-bounty, software-development | 17-Mar-2025 |
| How I Earned $15,000 from Bug Bounties: Buffer Overflow Exploit Explained (With Practical Code) | https://theindiannetwork.medium.com/how-i-earned-15-000-from-bug-bounties-buffer-overflow-exploit-explained-with-practical-code-b662843f6e07?source=rss------bug_bounty-5 | TheIndianNetwork | buffer-overflow-exploits, buffer-overflow, bug-bounty, buffer-overflow-attack, bug-bounty-tips | 17-Mar-2025 |
| How I Earned $12,000 Finding a Remote Command Execution Bug (With Real Exploit) | https://theindiannetwork.medium.com/how-i-earned-12-000-finding-a-remote-command-execution-bug-with-real-exploit-18aaa66d2703?source=rss------bug_bounty-5 | TheIndianNetwork | bug-bounty, bug-bounty-tips, rce, remote-command-execution, rce-vulnerability | 17-Mar-2025 |
| Zero-Day Hunting for Rent: The Rise of Bug Bounty Mercenaries | https://medium.com/dare-to-be-better/zero-day-hunting-for-rent-the-rise-of-bug-bounty-mercenaries-411c88954140?source=rss------bug_bounty-5 | Ahmad Javed | zero-day-economy, penetration-testing, bug-bounty, hackers-for-hire, cybersecurity | 17-Mar-2025 |
| Best Bug Bounty Tools for Hackers in 2025: Why Digi Astra is the Ultimate Choice | https://medium.com/@modernshubhamgupta/best-bug-bounty-tools-for-hackers-in-2025-why-digi-astra-is-the-ultimate-choice-fd414bc41fa9?source=rss------bug_bounty-5 | Shubham Raj | ethical-hacking, bug-bounty-writeup, hacking, cybersecurity, bug-bounty | 17-Mar-2025 |
| What Is Race Condition Vulnerability | https://medium.com/@rawansa3ed2002/what-is-race-condition-vulnerability-e01cd1be0e9b?source=rss------bug_bounty-5 | Rawansaed | bug-bounty, race-condition, ethical-hacking, cybersecurity, bug-hunting | 17-Mar-2025 |
| Simple 2FA Bypass Techniques for Beginners | https://cyberw1ng.medium.com/simple-2fa-bypass-techniques-for-beginners-edec48befa23?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, careers, programming, cybersecurity, bug-bounty | 17-Mar-2025 |
| How to Earn $3000/Hour with a Critical Vulnerability | https://medium.com/@ibtissamhammadi/how-to-earn-3000-hour-with-a-critical-vulnerability-7fe0f262d3e5?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, hacking, cybersecurity, ethical-hacking, bug-bounty-hunting | 17-Mar-2025 |
| How I Discovered a P4 Bug on the U.S. Social Security Administration | https://osintteam.blog/how-i-discovered-a-p4-bug-on-the-u-s-social-security-administration-8236ecd2a003?source=rss------bug_bounty-5 | Xh081iX | ethical-hacking, bug-bounty-tips, infosec, bug-bounty, cybersecurity | 17-Mar-2025 |
| $$$$ For Full Account Take-over, 2fa bypass, Sensitive data Exposure via Critical CORS… | https://mr-pwner.medium.com/for-full-account-take-over-2fa-bypass-sensitive-data-exposure-via-critical-cors-310ee989179a?source=rss------bug_bounty-5 | Omar | ethical-hacking, cybersecurity, web-security, bug-bounty, account-takeover | 17-Mar-2025 |
| Critical IDOR: Unrestricted Access to All Company Published Files | https://medium.com/@0xAhM3D/critical-idor-unrestricted-access-to-all-company-published-files-c8db77070e87?source=rss------bug_bounty-5 | 0xAhM3D | bug-bounty-tips, idor-vulnerability, bug-bounty, idor-poc, bug-bounty-writeup | 17-Mar-2025 |
| How To Discover Hidden Endpoints️♂️ | https://medium.com/@Abhijeet_kumawat_/how-to-discover-hidden-endpoints-%EF%B8%8F-%EF%B8%8F-cc4c82c8a886?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, hacking, ai, infosec, cybersecurity | 17-Mar-2025 |
| How To Discover Hidden Endpoints️♂️ | https://infosecwriteups.com/how-to-discover-hidden-endpoints-%EF%B8%8F-%EF%B8%8F-cc4c82c8a886?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, hacking, ai, infosec, cybersecurity | 17-Mar-2025 |
| Simple 2FA Bypass Techniques for Beginners | https://osintteam.blog/simple-2fa-bypass-techniques-for-beginners-edec48befa23?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, careers, programming, cybersecurity, bug-bounty | 17-Mar-2025 |
| CVE-2025–26633: A Silent Threat in Windows MMC — What You Need to Know | https://medium.com/@jkyne6368/cve-2025-26633-a-silent-threat-in-windows-mmc-what-you-need-to-know-0f5156d97738?source=rss------bug_bounty-5 | Jordilla | information-security, ethical-hacking, bug-bounty, cve, cybersecurity | 16-Mar-2025 |
| How I Hacked an E-Commerce Website & Found XSS | https://aiwolfie.medium.com/how-i-hacked-an-e-commerce-website-found-xss-75db71424d4a?source=rss------bug_bounty-5 | AIwolfie | bug-bounty, bug-bounty-writeup, cybersecurity, html-injection, xss-attack | 16-Mar-2025 |
| VERY BASIC - How I Solve CSRF in Portswigger Lab | https://medium.com/@aashifm/very-basic-how-i-solve-csrf-in-portswigger-lab-f090e3325a0e?source=rss------bug_bounty-5 | 196.0.0.1 | cybersecurity, proxy, bug-bounty, csrf, burpsuite | 16-Mar-2025 |
| My journey being hacker #1 in BOLIVIA 2024/2023 | https://medium.com/@vanpedrazas/my-journey-being-hacker-1-in-bolivia-2024-2023-7299d397a682?source=rss------bug_bounty-5 | Ivan Bernardo Pedrazas Rodriguez | motivation, life, cybersecurity, bug-bounty, life-lessons | 16-Mar-2025 |
| A website that will be helpful in your bug bounty journey. | https://infosecwriteups.com/a-website-that-will-be-helpful-in-your-bug-bounty-journey-de4f0f1721a8?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, ethical-hacking, cybersecurity, resources, bug-bounty | 16-Mar-2025 |
| Reverse Engineering APIs with Burp2API | https://medium.com/@samhilliard/reverse-engineering-apis-with-burp2api-f333c7a8bab9?source=rss------bug_bounty-5 | Sam Hilliard | bug-bounty, postman, reverse-engineering, burpsuite, pentesting | 16-Mar-2025 |
| File Upload Vulnerabilities: How Hackers Exploit Them & How to Stay Secure | https://medium.com/@verylazytech/file-upload-vulnerabilities-how-hackers-exploit-them-how-to-stay-secure-fe75b4b5003c?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, file-upload-bypass, unrestricted-file-upload, bug-bounty, file-upload-vulnerability | 16-Mar-2025 |
| How to Start bug hunting in 2025 | https://medium.com/@vipulsonule71/how-to-start-bug-hunting-in-2025-6e131cefe1eb?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, penetration-testing, cybersecurity, hacking, technology | 16-Mar-2025 |
| My journey being hacker #1 in BOLIVIA 2024/2023 | https://medium.com/@vanpedrazas/my-journey-being-hacker-1-in-bolivia-2024-2023-7299d397a682?source=rss------bug_bounty-5 | Ivan Bernardo Pedrazas Rodriguez | motivation, cybersecurity, bug-bounty, life-lessons, startup | 16-Mar-2025 |
| Blind XSS: When Your Payloads Are Sneakier Than Your Ex | https://medium.com/@shadyfarouk1986/blind-xss-when-your-payloads-are-sneakier-than-your-ex-1321eec7af83?source=rss------bug_bounty-5 | Shady Farouk | bug-bounty, vulnerability, bounty-hunter, pentesting | 16-Mar-2025 |
| Ethical Hacking with ChatGPT | https://medium.com/@vipulsonule71/ethical-hacking-with-chatgpt-651bf8f00e81?source=rss------bug_bounty-5 | Vipul Sonule | hacking, cybersecurity, bug-bounty, chatgpt, penetration-testing | 16-Mar-2025 |
| Gas Level Vulnerability: Floating pragma version | https://medium.com/@jeetpal2007/gas-level-vulnerability-floating-pragma-version-10a7741ab096?source=rss------bug_bounty-5 | JEETPAL | bug-bounty-writeup, web3, smart-contract-security, smartcontract-audit, bug-bounty | 16-Mar-2025 |
| How I Hacked an E-Commerce Website & Found XSS | https://publication.osintambition.org/how-i-hacked-an-e-commerce-website-found-xss-75db71424d4a?source=rss------bug_bounty-5 | AIwolfie | bug-bounty, bug-bounty-writeup, cybersecurity, html-injection, xss-attack | 16-Mar-2025 |
| CVE-2025–24993: A Critical Vulnerability in Microsoft Windows NTFS | https://medium.com/@jkyne6368/cve-2025-24993-a-critical-vulnerability-in-microsoft-windows-ntfs-b90782570e2d?source=rss------bug_bounty-5 | Jordilla | penetration-testing, cve, vulnerability, ethical-hacking, bug-bounty | 16-Mar-2025 |
| CRTO Review — 2025 | https://abhishekgk.medium.com/crto-review-2025-c3f39480a10d?source=rss------bug_bounty-5 | Abhishekgk | cybersecurity, bug-bounty, crto, red-team, certification | 16-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-118) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-118-6d657a95f1e7?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, hacking, ethical-hacking, bug-bounty-tips | 16-Mar-2025 |
| Day 27: The $2,200 ATO Most Bug Hunters Overlooked | https://medium.com/@danielbelay/day-27-the-2-200-ato-most-bug-hunters-overlooked-3de76d30d96a?source=rss------bug_bounty-5 | dani3l | account-takeover, bug-bounty, cybersecurity | 16-Mar-2025 |
| Finding CSRF Bug Bounty Program — Get $$ | https://firdausmuhammadismail.medium.com/finding-csrf-bug-bounty-program-get-253461291432?source=rss------bug_bounty-5 | Firdaus Muhammad Ismail | csrf, bug-bounty, csrf-token, vulnerability, hackerone | 16-Mar-2025 |
| SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column | https://medium.com/@marduk.i.am/sql-injection-union-attack-retrieving-multiple-values-in-a-single-column-d6c6d91be74d?source=rss------bug_bounty-5 | Marduk I Am | portswigger-lab, bug-bounty, sqli, sql-injection, information-security | 16-Mar-2025 |
| Bypassing 2FA to Impersonate Users on Drugs.com | https://medium.com/@regan_temudo/bypassing-2fa-to-impersonate-users-on-drugs-com-66fb84b0491d?source=rss------bug_bounty-5 | Regan Temudo | ethical-hacking, bug-bounty, 2fa, vulnerability-disclosure, cybersecurity | 16-Mar-2025 |
| CVE-2022–45875: Command Injection Vulnerability in Apache DolphinScheduler | https://sahnounoussama.medium.com/cve-2022-45875-command-injection-vulnerability-in-apache-dolphinscheduler-50acfe7dfa07?source=rss------bug_bounty-5 | Sahnoun Oussama | cve-2022-45875, code-review, apache-dolphinscheduler, bug-bounty, ctf-walkthrough | 16-Mar-2025 |
| OAuth and JWT Attacks | https://medium.com/cloud-security/oauth-and-jwt-attacks-3840fe2a113f?source=rss------bug_bounty-5 | Teri Radichel | bug-bounty, security, penetration-testing, oauth, pentesting | 16-Mar-2025 |
| CSRF in JSON Requests: A Real-World Exploit on Payout Features | https://medium.com/@mohamed.yasser442200/csrf-in-json-requests-a-real-world-exploit-on-payout-features-2829086ace5c?source=rss------bug_bounty-5 | Spider4 | hacking, csrf, json, bug-bounty, bug-bounty-tips | 16-Mar-2025 |
| Mastering Web Recon with WebCopilot | https://osintteam.blog/mastering-web-recon-with-webcopilot-78da58bfb428?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, bug-bounty-tips, bug-bounty, hacking, technology | 16-Mar-2025 |
| How a Logic Flaw Allowed Attackers to Hijack Accounts | https://cyberw1ng.medium.com/how-a-logic-flaw-allowed-attackers-to-hijack-accounts-39509d7340e6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, programming, technology, careers | 16-Mar-2025 |
| How I Found an Open Redirect Vulnerability Easily (Worth $500!) | https://infosecwriteups.com/how-i-found-an-open-redirect-vulnerability-easily-worth-500-274999bb6527?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, infosec, bug-bounty, ai, cybersecurity | 16-Mar-2025 |
| How a Logic Flaw Allowed Attackers to Hijack Accounts | https://osintteam.blog/how-a-logic-flaw-allowed-attackers-to-hijack-accounts-39509d7340e6?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, programming, technology, careers | 16-Mar-2025 |
| How to Access Another’s Systems Remotely like Hacker [Ethical Hacking] | https://medium.com/@hrofficial62/how-to-access-anothers-systems-remotely-like-hacker-ethical-hacking-732fca529e49?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, cybersecurity, hacking, pentesting, ethical-hacking | 15-Mar-2025 |
| A Website that will be helpful in your Bug bounty and OSINT journey | https://infosecwriteups.com/a-website-that-will-be-helpful-in-your-bug-bounty-and-osint-journey-2c3368346924?source=rss------bug_bounty-5 | loyalonlytoday | investing, cybersecurity, tips, osint, bug-bounty | 15-Mar-2025 |
| Bypassing OTP Verification: Another Bug Found Without Any Tools! | https://strangerwhite.medium.com/bypassing-otp-verification-another-bug-found-without-any-tools-8b2c1013c3e7?source=rss------bug_bounty-5 | StrangeRwhite | bug-bounty-tips, otp-bypass, bug-bounty, infosec, bugbounty-writeup | 15-Mar-2025 |
| Low-Level Vulnerability: Fixed Hardcoded Data | https://medium.com/@jeetpal2007/low-level-vulnerability-fixed-hardcoded-data-f0cc9b9d971f?source=rss------bug_bounty-5 | JEETPAL | smart-contract-auditing, smart-contract-security, web3, smart-contracts, bug-bounty | 15-Mar-2025 |
| Web 3: — writeups collections | https://medium.com/@jeetpal2007/web-3-writeups-collections-9f3cce5bc382?source=rss------bug_bounty-5 | JEETPAL | web3, smart-contract-security, bug-bounty, cybersecurity | 15-Mar-2025 |
| Title: How a Simple Header Lets Attackers Bypass OTP Rate Limits (And How to Fix It) | https://medium.com/@PareXploit/title-how-a-simple-header-lets-attackers-bypass-otp-rate-limits-and-how-to-fix-it-a005167c6eaf?source=rss------bug_bounty-5 | Paresh Kukadiya | web-security, bug-bounty, cyber-awareness, ratelimitbypass, cybersecurity | 15-Mar-2025 |
| The Ultimate Guide to Writing Test Cases for Smart Contracts | https://securrtech.medium.com/the-ultimate-guide-to-writing-test-cases-for-smart-contracts-99ce93f34149?source=rss------bug_bounty-5 | Securr - Web3 Security | bug-bounty, smart-contract-auditing, smart-contract-security, web3-security, blockchain-security | 15-Mar-2025 |
| Directory Transversal at 404 (not found) | https://medium.com/@saiganesh18062003/directory-transversal-at-404-not-found-def92e74de12?source=rss------bug_bounty-5 | Levi Ackerman | bugs, information-security, hacking, bug-bounty, cybersecurity | 15-Mar-2025 |
| Day 26: Critical ATO via Business Logic Flaw | https://medium.com/@danielbelay/day-26-critical-ato-via-business-logic-flaw-87236b93eea1?source=rss------bug_bounty-5 | dani3l | account-takeover, cybersecurity, bug-bounty | 15-Mar-2025 |
| What After choosing a target ? Recon Methodology— Bug Bounty Restart Phase 3 | https://infosecwriteups.com/what-after-choosing-a-target-recon-methodology-bug-bounty-restart-phase-3-8d83afee5116?source=rss------bug_bounty-5 | Om Arora | technology, bug-bounty-tips, bug-bounty, cybersecurity, infosec | 15-Mar-2025 |
| Broken Link Hunting The Power of Patience and Persistence | https://enes478.medium.com/broken-link-hunting-the-power-of-patience-and-persistence-784c4cc61aa9?source=rss------bug_bounty-5 | Enes Özlek | hackerone, bug-bounty-tips, bug-bounty, bugbounty-writeup | 15-Mar-2025 |
| How to Bypass Web Application Firewalls (WAF) | https://medium.com/@vipulsonule71/how-to-bypass-web-application-firewalls-waf-9210c25cbb4c?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, ethical-hacking, ai, hacking, cybersecurity | 15-Mar-2025 |
| XSS Payload Extracted Server Private Key | $$$ Bounty | https://medium.com/@darshannnaik1234/xss-payload-extracted-server-private-key-bounty-b20730fc0753?source=rss------bug_bounty-5 | Darshan Naresh Naik | cybercrime, bug-bounty, technology, hacking, cyberseurity | 15-Mar-2025 |
| Bug Bounty Hunting for Absolute Beginners | https://medium.com/@hackerfromhills/bug-bounty-hunting-for-absolute-beginners-f4ec4a127705?source=rss------bug_bounty-5 | Badal kathayat | hacking, bug-bounty, bug-bounty-writeup, bug-bounty-tips, bug-hunter | 15-Mar-2025 |
| CVE-2025–24813: Apache Tomcat Path Equivalence Vulnerability $$$$ BOUNTY | https://infosecwriteups.com/cve-2025-24813-apache-tomcat-path-equivalence-vulnerability-bounty-961350b31e16?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, bug-bounty, information-technology, cybersecurity, information-security | 15-Mar-2025 |
| Payload Generation Techniques for Bug Bounty Hunters | https://bitpanic.medium.com/payload-generation-techniques-for-bug-bounty-hunters-ab8b75bdffa6?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, ai-generated-content, technology, programming, cybersecurity | 15-Mar-2025 |
| Open Redirect — CodePolitan Vulnerability Catch | https://firdausmuhammadismail.medium.com/open-redirect-codepolitan-vulnerability-catch-10d33baa6a71?source=rss------bug_bounty-5 | Firdaus Muhammad Ismail | writeup, bug-bounty, bug-hunter, vulnerability, redirect | 15-Mar-2025 |
| From ‘alert(1)’ to Account Takeover: A Story of 4-digit Bounties and Bypassing HTML Sanitisers | https://medium.com/@saltify/from-alert-1-to-account-takeover-a-story-of-4-digit-bounties-and-bypassing-html-sanitisers-dd8ca0ac502b?source=rss------bug_bounty-5 | saltify | cybersecurity, ethical-hacking, bug-bounty, infosec | 15-Mar-2025 |
| How I Bypassed Verification & One Pro Tip for Bug Hunters | https://medium.com/@mahdisalhi0500/how-i-bypassed-verification-one-pro-tip-for-bug-hunters-28dc82578614?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | bug-bounty-writeup, bug-bounty-tips, bug-bounty, penetration-testing, infosec | 15-Mar-2025 |
| Beginner’s SQL Injection Cheat Sheet | https://cyberw1ng.medium.com/beginners-sql-injection-cheat-sheet-7c0f8d217e8e?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, technology, cybersecurity, programming | 15-Mar-2025 |
| Mastering JSRecon: A Comprehensive Guide to Identifying Sensitive Data in JavaScript Files | https://systemweakness.com/mastering-jsrecon-a-comprehensive-guide-to-identifying-sensitive-data-in-javascript-files-352771f10659?source=rss------bug_bounty-5 | 0verlo0ked | exploitation, bug-bounty, javascript, bugs, js | 14-Mar-2025 |
| Part-2 | Mastering 403 Forbidden Bypass Techniques✨ | https://cybersecuritywriteups.com/part-2-mastering-403-forbidden-bypass-techniques-707e7880fa22?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, 403-forbidden, hacking, bug-bounty, infosec | 14-Mar-2025 |
| How I Found a Critical Billing Bug but Ended Up with a Duplicate | https://medium.com/@aminouji23/how-i-found-a-critical-billing-bug-but-ended-up-with-a-duplicate-ac6934fab714?source=rss------bug_bounty-5 | Aminouji | pentesting, information-security, infosec, bug-bounty-tips, bug-bounty | 14-Mar-2025 |
| Metasploit 101: Hack Systems, Test Security, and Stay Ahead! | https://medium.com/@paritoshblogs/metasploit-101-hack-systems-test-security-and-stay-ahead-799922167146?source=rss------bug_bounty-5 | Paritosh | cybersecurity, metasploit, bug-bounty, information-technology, hacking | 14-Mar-2025 |
| The Ultimate Burp Suite Playbook — Hidden Features & Automation! | https://medium.com/@paritoshblogs/the-ultimate-burp-suite-playbook-hidden-features-automation-e9a07944dbd4?source=rss------bug_bounty-5 | Paritosh | cybersecurity, ai, burpsuite, bug-bounty, hacking | 14-Mar-2025 |
| When Code Flaws Strike: How Tiny Bugs Lead to Admin Account Takeovers | https://krishna-cyber.medium.com/when-code-flaws-strike-how-tiny-bugs-lead-to-admin-account-takeovers-74124a437ba3?source=rss------bug_bounty-5 | Krish_cyber | osint, bug-bounty, bug-bounty-tips, infosec-write-ups, cybersecurity | 14-Mar-2025 |
| Mastering iOS Pentesting with otool | https://medium.com/@prasadraj954/mastering-ios-pentesting-with-otool-0803bd65c7ed?source=rss------bug_bounty-5 | Raj Prasad Kuiri | pentesting, bug-bounty, ios-penetration-testing, mobile-pentesting, cybersecurity | 14-Mar-2025 |
| Exploit ZoomEye’s Subscription “Bug” to Unlock 75 Days of Free Recon Power | https://medium.com/@kenilalexandra07/exploit-zoomeyes-subscription-bug-to-unlock-75-days-of-free-recon-power-eaf843a339e2?source=rss------bug_bounty-5 | Kenilalexandra | hacking, bug-bounty, vulnerability, shodan, cve | 14-Mar-2025 |
| How to Find a Job as a Bug Hunter | https://medium.com/@vipulsonule71/how-to-find-a-job-as-a-bug-hunter-c6e9a8962299?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, technews, cybersecurity, hacking, technology | 14-Mar-2025 |
| How to Find XSS in Bug Hunting (Automated Approach) | https://medium.com/@vipulsonule71/how-to-find-xss-in-bug-hunting-automated-approach-f306cce03a76?source=rss------bug_bounty-5 | Vipul Sonule | penetration-testing, xss-attack, cybersecurity, hacking, bug-bounty | 14-Mar-2025 |
| How I Found an IDOR Vulnerability – A Responsible Disclosure Story | https://medium.com/@vickyrohith70/how-i-found-an-idor-vulnerability-a-responsible-disclosure-story-def2885bbe0c?source=rss------bug_bounty-5 | Vickyrohith | web-applications, cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 14-Mar-2025 |
| Agent T walkthrough — TryHackMe | https://medium.com/@ahmedessmat/agent-t-walkthrough-tryhackme-e6831a57af33?source=rss------bug_bounty-5 | Ahmed Essmat | cybersecurity, agent-t, bug-bounty | 14-Mar-2025 |
| 10 Hacking Tools from the Future: What to Expect in 2025 | https://medium.com/@hxp7th/10-hacking-tools-from-the-future-what-to-expect-in-2025-efc4d8a21a6a?source=rss------bug_bounty-5 | Hxp7th | futurism, hacking, cybersecurity, hacking-tools, bug-bounty | 14-Mar-2025 |
| Automating SQL Injection: A Practical Guide for Security Researchers | https://cyberw1ng.medium.com/automating-sql-injection-a-practical-guide-for-security-researchers-2ee75fd16b84?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, programming, technology, cybersecurity, bug-bounty | 14-Mar-2025 |
| The Art of SQL Injection : A Comprehensive Guide | https://zeusvuln.medium.com/the-art-of-sql-injection-a-comprehensive-guide-d394e8affb6d?source=rss------bug_bounty-5 | ZeUsVuLn | bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 14-Mar-2025 |
| Skills Assessment for Web Service & API attacks: Hackthebox CBBH Course | https://medium.com/@treykenyon30/skills-assessment-for-web-service-api-attacks-hackthebox-cbbh-course-51b3b56feb2d?source=rss------bug_bounty-5 | Treykenyon | web-app-security, hackthebox, cbbh, bug-bounty, hacking | 14-Mar-2025 |
| This nuclei template made me to find more bugs | https://medium.com/@canonminibeast/this-nuclei-template-made-me-to-find-more-bugs-20de8365be3d?source=rss------bug_bounty-5 | Canonminibeast | cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips, hacking | 14-Mar-2025 |
| This nuclei template made me to find more bugs | https://medium.com/@canonminibeast/this-nuclei-template-made-me-to-find-more-bugs-caa8c7d6931e?source=rss------bug_bounty-5 | Canonminibeast | bug-bounty-tips, bug-bounty-writeup, bug-bounty, recon, cybersecurity | 14-Mar-2025 |
| How I Buy ₹6284 Worth of Items for Just ₹1 | https://cybersecuritywriteups.com/how-i-buy-6284-worth-of-items-for-just-1-14b96af18c6e?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, money, ai, bug-bounty, cybersecurity | 14-Mar-2025 |
| Automating SQL Injection: A Practical Guide for Security Researchers | https://osintteam.blog/automating-sql-injection-a-practical-guide-for-security-researchers-2ee75fd16b84?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, programming, technology, cybersecurity, bug-bounty | 14-Mar-2025 |
| Unauthenticated API Leaks Private Property Data | https://medium.com/@banertheinrich/unauthenticated-api-leaks-private-property-data-f125e8fe0c4d?source=rss------bug_bounty-5 | Adham Heinrich | bug-bounty-writeup, bug-bounty, bug-bounty-tips, idor, cybersecurity | 13-Mar-2025 |
| Bug Bounty | https://medium.com/@hihiprocybertech/bug-bounty-0e661e725299?source=rss------bug_bounty-5 | hihipro | ethical-hacking, cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 13-Mar-2025 |
| How I found my 2nd SQL injection vulnerability on the Indian Government website! | https://hiddendom.medium.com/how-i-found-my-2nd-sql-injection-vulnerability-on-the-indian-government-website-e617e682e953?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-tips, sql-injection-attack, bug-bounty-writeup, sql-injection, bug-bounty | 13-Mar-2025 |
| How I Hacked NASA And Received an Appreciation Letter | https://medium.com/@Abhijeet_kumawat_/how-i-hacked-nasa-and-received-an-appreciation-letter-2d4a78a4a1f6?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, cybersecurity, nasa, hacking, infosec | 13-Mar-2025 |
| How to Earn Money in Bug Hunting Using Automated Tools | https://medium.com/@vipulsonule71/how-to-earn-money-in-bug-hunting-using-automated-tools-93382ffcd7ed?source=rss------bug_bounty-5 | Vipul Sonule | writing, ethical-hacking, hacking, cybersecurity, bug-bounty | 13-Mar-2025 |
| How I Bypassed Email Uniqueness: Exploiting Weak Access Control in a Bug Bounty Program | https://saconychukwu.medium.com/how-i-bypassed-email-uniqueness-exploiting-weak-access-control-in-a-bug-bounty-program-28177f3c0b29?source=rss------bug_bounty-5 | Sacony Chukwu | bug-bounty-hunter, cybersecurity, bug-bounty-writeup, bug-bounty | 13-Mar-2025 |
| Bypass the Rate limiting mechanism and earn bounty of $5000 and more. | https://medium.com/@anandrishav2228/bypass-the-rate-limiting-mechanism-and-earn-bounty-of-5000-and-more-dad3ef6db3ad?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, bug-bounty, hacking, money, infosec | 13-Mar-2025 |
| Bypassing Windows Defender & AVs with an LNK Exploit to Gain a Reverse Shell | https://medium.com/@dharineeshj2/bypassing-windows-defender-avs-with-an-lnk-exploit-to-gain-a-reverse-shell-09244fcefb10?source=rss------bug_bounty-5 | Hack-Bat | hacking, pentesting, cybersecurity, bug-bounty | 13-Mar-2025 |
| Hacking Swagger UI - 101 | https://infosecwriteups.com/hacking-swagger-ui-101-ccbce66ba028?source=rss------bug_bounty-5 | RivuDon | swagger-ui, bug-bounty, infosec, bug-bounty-tips, bug-bounty-writeup | 13-Mar-2025 |
| GraphQL Vulnerabilities: A Complete Guide to Security Testing and Advanced Exploitation Techniques | https://infosecwriteups.com/graphql-vulnerabilities-a-complete-guide-to-security-testing-and-advanced-exploitation-techniques-5eb94af945c0?source=rss------bug_bounty-5 | Ajay Naik | graphql, penetration-testing, cybersecurity, bug-bounty, information-security | 13-Mar-2025 |
| 2FA & MFA Hacks: Bypass OTP Like a Pro — @VeryLazyTech | https://medium.com/@verylazytech/2fa-mfa-hacks-bypass-otp-like-a-pro-verylazytech-7eb9f8c4f5c1?source=rss------bug_bounty-5 | Very Lazy Tech | otp-bypass, 2fa, mfa, bug-bounty, bypass-technique | 13-Mar-2025 |
| How to Hack Wifi using | wifite Tool ️ | https://medium.com/@vipulsonule71/how-to-hack-wifi-using-wifite-tool-%EF%B8%8F-235a6eb67ed4?source=rss------bug_bounty-5 | Vipul Sonule | penetration-testing, ai, hacking, technology, bug-bounty | 13-Mar-2025 |
| Get your First bounty as a newbie | https://medium.com/@saiganesh18062003/get-your-first-bounty-as-a-newbie-fcba6a92e998?source=rss------bug_bounty-5 | Levi Ackerman | cyber, bug-bounty, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 13-Mar-2025 |
| Markdown Parsing Flaw Leads to Persistent System Lockdown | https://medium.com/@syarifsajjad07/markdown-parsing-flaw-leads-to-persistent-system-lockdown-f7a0820d7685?source=rss------bug_bounty-5 | Syarifsajjad | bug-bounty, cybersecurity, hacking, hackerone, bug-bounty-tips | 13-Mar-2025 |
| How I Found Sensitive Information using Github Dorks in Bug Bounties — Part 2 | https://mukibas37.medium.com/find-bugs-using-github-dorking-part-2-2f80c1023592?source=rss------bug_bounty-5 | Mukilan Baskaran | bug-bounty-writeup, ethical-hacking, cybersecurity, bug-bounty, github-dorking | 13-Mar-2025 |
| How I Found a Bug in Minutes — No Tools, Just Mindful Approach to Testing! | https://strangerwhite.medium.com/how-i-found-a-bug-in-minutes-no-tools-just-mindful-approach-to-testing-0dd034ff8ab9?source=rss------bug_bounty-5 | StrangeRwhite | bug-bounty, cybersecurity, hacking, bugbounty-writeup, vulnerability | 13-Mar-2025 |
| Title: “Mass Assignment Mastery: From Zero to ATO Hero in Bug Bounties ️♂️” | https://krishna-cyber.medium.com/title-mass-assignment-mastery-from-zero-to-ato-hero-in-bug-bounties-%EF%B8%8F-%EF%B8%8F-d3bf53027ce7?source=rss------bug_bounty-5 | Krish_cyber | osint, bug-bounty-tips, infosec-write-ups, hacking, bug-bounty | 13-Mar-2025 |
| Understanding SQL Injection: A Deep Dive into Exploitation and Prevention | https://cyberw1ng.medium.com/understanding-sql-injection-a-deep-dive-into-exploitation-and-prevention-0d3712bc6b93?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, technology, careers, programming | 13-Mar-2025 |
| The Hidden Goldmine: Exploiting Exposed API Keys & Tokens in 2025 | https://cybersecuritywriteups.com/the-hidden-goldmine-exploiting-exposed-api-keys-tokens-in-2025-fc22139f4cbd?source=rss------bug_bounty-5 | Krish_cyber | ethical-hacking, cybersecurity, info-sec-writeups, api, bug-bounty | 13-Mar-2025 |
| Hackyholidays CTF (Grinch Network) Write-Up | Part 2| Hacker101 CTF | https://medium.com/@sari.mmusab/hackyholidays-ctf-grinch-network-write-up-part-2-hacker101-ctf-89d394702807?source=rss------bug_bounty-5 | Musab Sarı | cybersecurity, ctf, bug-bounty, burpsuite, technology | 13-Mar-2025 |
| Proffesional Hacker’s Breakout. NnFace’s Advices #3 “The Curve of Hacking” | https://osintteam.blog/proffesional-hackers-breakout-nnface-s-advices-3-the-curve-of-hacking-b28c9875145e?source=rss------bug_bounty-5 | NnFace | bug-bounty, bug-bounty-tips, cybersecurity, hacker, hacking | 13-Mar-2025 |
| Cracking the Cache: A Bug Bounty Hunter’s Guide to Web Cache Vulnerabilities (With Real-World… | https://osintteam.blog/cracking-the-cache-a-bug-bounty-hunters-guide-to-web-cache-vulnerabilities-with-real-world-33bb7b47ff1c?source=rss------bug_bounty-5 | Krish_cyber | infosec-write-ups, hacking, cybersecurity, bug-bounty, bug-bounty-tips | 13-Mar-2025 |
| Turn website feedback into instant, actionable tickets. | https://medium.com/@readybready4/turn-website-feedback-into-instant-actionable-tickets-40ef4bc14be6?source=rss------bug_bounty-5 | New AI Apps Daily | bug-bounty, bugs, bug-report, bug-bounty-writeup, bug-bounty-tips | 12-Mar-2025 |
| Cómo conseguí mi primera vulnerabilidad válida para Adobe | https://medium.com/@juanfelipeoz.rar/c%C3%B3mo-consegu%C3%AD-mi-primera-vulnerabilidad-v%C3%A1lida-para-adobe-2d6617ec51e5?source=rss------bug_bounty-5 | Juan Felipe Osorio Z | hacking, bug-bounty-writeup, cybersecurity, bug-bounty, hackerone | 12-Mar-2025 |
| 100$ reward from hacking the earning site | https://bytesnull44.medium.com/100-reward-from-hacking-the-earning-site-803b49028df7?source=rss------bug_bounty-5 | Bytesnull | bug-bounty, programming, developer, cybersecurity | 12-Mar-2025 |
| How I Bypassed Cloudflare WAF and Achieve XSS | $500 bounty | https://cybersecuritywriteups.com/how-i-bypassed-cloudflare-waf-and-achieve-xss-500-bounty-32914f652901?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, hacking, xss-attack, cybersecurity, infosec | 12-Mar-2025 |
| Earn $$$ Hunting Bugs! A Beginner’s Guide to Bug Bounty Success | https://medium.com/@paritoshblogs/earn-hunting-bugs-a-beginners-guide-to-bug-bounty-success-6ba585935178?source=rss------bug_bounty-5 | Paritosh | how-to, bug-bounty, cybersecurity, hacking, ai | 12-Mar-2025 |
| Zero-Click Account Takeover via Auth Bypass | https://medium.com/@hossam_hamada/zero-click-account-takeover-via-auth-bypass-c3130fb5a5e0?source=rss------bug_bounty-5 | Hossam Hamada | bug-bounty-tips, bug-bounty, account-takeover, hackerone, authentication | 12-Mar-2025 |
| Understanding Basic Chmod | https://medium.com/pndsec/understanding-basic-chmod-8b93a82baf95?source=rss------bug_bounty-5 | Erkan Kavas | ethical-hacking, pentesting, linux, chmod, bug-bounty | 12-Mar-2025 |
| Found Bug in Car and make $20,000 and more. | https://medium.com/@anandrishav2228/found-bug-in-car-and-make-20-000-and-more-6c71152bca80?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, cybersecurity, red-team, money, cars | 12-Mar-2025 |
| Network Pentesting -Active / Passive Information gathering like Pro Part -1 | https://medium.com/@Cyber_siva/network-pentesting-active-passive-information-gathering-like-pro-part-1-7d0ab04b1491?source=rss------bug_bounty-5 | Siva Sankar | network-security, cybersecurity, hacking, pentesting, bug-bounty | 12-Mar-2025 |
| LDAP Injection Unleashed: The Hidden Exploit Hackers Use to Break In! | https://medium.com/@verylazytech/ldap-injection-unleashed-the-hidden-exploit-hackers-use-to-break-in-42eb28f14325?source=rss------bug_bounty-5 | Very Lazy Tech | ldap, cybersecurity, hacking, penetration-testing, bug-bounty | 12-Mar-2025 |
| How I Earned $500 for Getting Trapped in a Private Facebook Event | https://infosecwriteups.com/how-i-earned-500-for-getting-trapped-in-a-private-facebook-event-d4b7f3fdaacd?source=rss------bug_bounty-5 | Vivek PS | cybersecurity, bug-bounty, hacking, programming, ethical-hacking | 12-Mar-2025 |
| Recon Done, Now What? A Beginner’s Guide to Finding Bugs After Recon! | https://systemweakness.com/recon-done-now-what-a-beginners-guide-to-finding-bugs-after-recon-e13177674833?source=rss------bug_bounty-5 | Taahir Mujawarr | bug-bounty, bug-bounty-writeup, hacking, cybersecurity, bug-bounty-tips | 12-Mar-2025 |
| How to Find Subdomain Takeover in Bug Hunting | https://medium.com/@vipulsonule71/how-to-find-subdomain-takeover-in-bug-hunting-33aed8f43c27?source=rss------bug_bounty-5 | Vipul Sonule | technology, penetration-testing, hacking, cybersecurity, bug-bounty | 12-Mar-2025 |
| Ultimate List of Free Resources for Bug Bounty Hunters | https://infosecwriteups.com/ultimate-list-of-free-resources-for-bug-bounty-hunters-bfba8deb5a36?source=rss------bug_bounty-5 | Om Arora | cybersecurity, technology, bug-bounty, programming, infosec | 12-Mar-2025 |
| how i found the broken link hijacking? | https://doordiefordream.medium.com/how-i-found-broken-link-hijacking-46a57e9d40c3?source=rss------bug_bounty-5 | Bug hunter balu | bug-bounty, cybersecurity, vulnerability, technology, ethical-hacking | 12-Mar-2025 |
| Hacking with SSRF: A Deep Dive into Server-Side Request Forgery | https://medium.com/codingninjablogs/hacking-with-ssrf-a-deep-dive-into-server-side-request-forgery-e42d9011f672?source=rss------bug_bounty-5 | #$ubh@nk@r | bug-bounty, infosec, ssrf, writeup, hacking | 12-Mar-2025 |
| How Interesting 2FA Bypass Through Browser Feature Lead Me To Critical Vulnerability. | https://medium.com/@dishantsingh989/how-interesting-2fa-bypass-through-browser-feature-lead-me-to-critical-vulnerability-18f9c72a8f8d?source=rss------bug_bounty-5 | Dishantsingh | bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup, hackerone | 12-Mar-2025 |
| Penetration Testing: Discovery Phase & Reconnaissance Techniques | https://medium.com/@shoaibbinrashid11/penetration-testing-discovery-phase-reconnaissance-techniques-6e1fc9d479f5?source=rss------bug_bounty-5 | Shoaib Bin Rashid | cybersecurity, web-security, bug-bounty, pentesting, penetration-testing | 12-Mar-2025 |
| Penetration Testing er Discovery Phase: Passive & Active Reconnaissance | https://medium.com/@shoaibbinrashid11/penetration-testing-er-discovery-phase-passive-active-reconnaissance-436b4bf5485b?source=rss------bug_bounty-5 | Shoaib Bin Rashid | penetration-testing, pentesting, bug-bounty, web-security, cybersecurity | 12-Mar-2025 |
| Mastering 403 Bypass: Unlock Hidden Bounties Like a Pro! | https://osintteam.blog/mastering-403-bypass-unlock-hidden-bounties-like-a-pro-bc8ee954c209?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty-writeup, bug-bounty, infosec-write-ups, osint, cybersecurity | 12-Mar-2025 |
| Authentication Bypass leads to PII = ($$$) | https://mchklt.medium.com/authentication-bypass-leads-to-pii-01d34fc7f547?source=rss------bug_bounty-5 | ABDELKARIM MOUCHQUELITA | cybersecurity, authentication, automation, bug-bounty, hacking | 12-Mar-2025 |
| Bug Hunting: Find Hidden Vulnerabilities | https://osintteam.blog/bug-hunting-find-hidden-vulnerabilities-32ef94af0d28?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, bug-bounty, hacking, technology, penetration-testing | 12-Mar-2025 |
| Simple SQL Injection: Exploiting and Preventing One of the Most Dangerous Web Vulnerabilities | https://cyberw1ng.medium.com/simple-sql-injection-exploiting-and-preventing-one-of-the-most-dangerous-web-vulnerabilities-f61c6841348a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | technology, careers, bug-bounty, programming, cybersecurity | 12-Mar-2025 |
| What $5,000 Vulnerability Did Everyone Else Miss | https://medium.com/@ibtissamhammadi/what-5-000-vulnerability-did-everyone-else-miss-1afd570a280b?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, hackerone, vulnerability, ethical-hacking, cybersecurity | 12-Mar-2025 |
| Investigating Nmap Scans with Wireshark | https://medium.com/@thecyberghost/investigating-nmap-scans-with-wireshark-bfe77af6441a?source=rss------bug_bounty-5 | The Cyber Ghost | nmap, bug-bounty, wireshark-tutorial, cybersecurity, wireshark | 12-Mar-2025 |
| Multiple Account Creation with Same Email | https://medium.com/@A0X-Y0S3TRX/multiple-account-creation-with-same-email-81acb37aca96?source=rss------bug_bounty-5 | A0X-Y0S3TRX | bug-bounty-hunter, bug-bounty-tips, bug-bounty-writeup, hunting, bug-bounty | 12-Mar-2025 |
| How to Write Effective Prompts for ChatGPT in Bug Bounty Hunting | https://medium.com/@ajudeb55/how-to-write-effective-prompts-for-chatgpt-in-bug-bounty-hunting-b885dcf4f743?source=rss------bug_bounty-5 | Aju Deb | programming, cybersecurity, bug-bounty, chatgpt, technology | 11-Mar-2025 |
| Exposed! A Massive Data Leak Uncovered with Just a Simple Google Dork ️ | https://medium.com/@dharineeshj2/exposed-a-massive-data-leak-uncovered-with-just-a-simple-google-dork-%EF%B8%8F-a103b640e2e5?source=rss------bug_bounty-5 | Hack-Bat | cybersecurity, bug-bounty, ethical-hacking, hacking | 11-Mar-2025 |
| IDOR Unlocked: Accessing Unauthorized Data with a Simple Tweak! | https://medium.com/@dharineeshj2/idor-unlocked-accessing-unauthorized-data-with-a-simple-tweak-a6a5a01a341f?source=rss------bug_bounty-5 | Hack-Bat | hacking, cybersecurity, bug-bounty, ethical-hacking | 11-Mar-2025 |
| Linux Privilege Escalation [Part-1] | EJPT Notes | https://medium.com/@hrofficial62/linux-privilege-escalation-part-1-ejpt-notes-7f978d958888?source=rss------bug_bounty-5 | Mr Horbio | hacking, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 11-Mar-2025 |
| 绕过JsBridge鉴权实现账户接管 | https://medium.com/@xiaoshi666/%E7%BB%95%E8%BF%87jsbridge%E9%89%B4%E6%9D%83%E5%AE%9E%E7%8E%B0%E8%B4%A6%E6%88%B7%E6%8E%A5%E7%AE%A1-cf421b291484?source=rss------bug_bounty-5 | xiaoshi | bug-bounty, cybersecurity | 11-Mar-2025 |
| Mastering XSS Attacks To Become Professional Bug Bounty Hunter | https://cybersecuritywriteups.com/mastering-xss-attacks-to-become-professional-bug-bounty-hunter-816f018643b3?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, ai, cybersecurity, bug-bounty, xss-attack | 11-Mar-2025 |
| PHOTOGRAPHER 1 BY OFFSEC | https://medium.com/@mickeylance001/photographer-1-by-offsec-27dbcc716805?source=rss------bug_bounty-5 | mickey lance | ctf-walkthrough, offsec, bug-bounty, penetration-testing, ctf-writeup | 11-Mar-2025 |
| CORS Misconfigurations & Bypass Techniques: A Hacker’s Guide to Exploiting Weak Policies | https://medium.com/@verylazytech/cors-misconfigurations-bypass-techniques-a-hackers-guide-to-exploiting-weak-policies-f3229b574a9a?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, cors, penetration-testing, ethical-hacking, hacking | 11-Mar-2025 |
| Disclosure of Secrets – A $1000 Bug Bounty Win | https://medium.com/@salaheddine_kalada/exploiting-misconfigured-azure-application-insights-a-1000-bug-bounty-win-cf16f6ad2ff0?source=rss------bug_bounty-5 | Salaheddine | bug-bounty, bug-bounty-tips, bug-bounty-writeup, bugbounty-writeup | 11-Mar-2025 |
| How to Become a Bug Bounty Hunter in 2025 | https://medium.com/@ebinkantony/how-to-become-a-bug-bounty-hunter-in-2025-e7a528b5cc16?source=rss------bug_bounty-5 | Ebin K Antony | bug-bounty-tips, bug-bounty-writeup, cybersecurity, bug-bounty, ethical-hacking | 11-Mar-2025 |
| Hijacking the CTF Event: The Story of a Host Header Injection (1000$) | https://medium.com/@bajajkrrish11/hijacking-the-ctf-event-the-story-of-a-host-header-injection-1000-f6ef62006f07?source=rss------bug_bounty-5 | Krrish Bajaj | hacking, host-header-injection, bug-bounty-tips, bug-bounty, bounty-program | 11-Mar-2025 |
| One Token, Two Apps: The OAuth Flaw That Can Compromise Your Accounts — A Silent Security Disaster | https://medium.com/@rahulgairola/one-token-two-apps-the-oauth-flaw-that-can-compromise-your-accounts-a-silent-security-disaster-31cff04dcceb?source=rss------bug_bounty-5 | Rahul Gairola | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty, oauth | 11-Mar-2025 |
| How I uncover an IDOR led to access Private CV | https://infosecwriteups.com/how-i-uncover-an-idor-led-to-access-private-cv-access-3ff5be987896?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, bug-bounty-writeup, bugbounty-tips, idor, bug-bounty | 11-Mar-2025 |
| WAF(Web Application Firewall) Fingerprinting. | https://medium.com/infosecmatrix/waf-web-application-firewall-fingerprinting-035d008094cd?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, fingerprinting, waf, programming | 11-Mar-2025 |
| Today I Found an XSS Bug: A Lesson in Web Security | https://theindiannetwork.medium.com/today-i-found-an-xss-bug-a-lesson-in-web-security-d3fc4e3ae5b6?source=rss------bug_bounty-5 | TheIndianNetwork | cybersecurity, bug-bounty, ethical-hacking, cross-site-scription, xss-vulnerability | 11-Mar-2025 |
| Client Side Path Traversal (CSPT) - A Deep Dive into an Overlooked Vulnerability | https://0xkratos.medium.com/client-side-path-traversal-cspt-a-deep-dive-into-an-overlooked-vulnerability-cdf91baca715?source=rss------bug_bounty-5 | Amal PK | bugbounty-writeup, cybersecurity, bug-bounty, cyber, hacking | 11-Mar-2025 |
| Hijacking the CTF Event: The Story of a Host Header Injection (1000$) | https://cybersecuritywriteups.com/hijacking-the-ctf-event-the-story-of-a-host-header-injection-1000-f6ef62006f07?source=rss------bug_bounty-5 | Krrish Bajaj | hacking, host-header-injection, bug-bounty-tips, bug-bounty, bounty-program | 11-Mar-2025 |
| This python script saved my recon time | https://medium.com/@canonminibeast/this-python-script-saved-my-recon-time-b780ade10b97?source=rss------bug_bounty-5 | Canonminibeast | google, bug-bounty-writeup, hacking, cybersecurity, bug-bounty | 11-Mar-2025 |
| Testing for HTTP Verb Tampering: A Complete Guide | https://infosecwriteups.com/testing-for-http-verb-tampering-a-complete-guide-ca1fba91fdb6?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, information-security, information-technology, bug-bounty, penetration-testing | 11-Mar-2025 |
| This python script saved my recon time | https://medium.com/@canonminibeast/this-python-script-saved-my-recon-time-66d6206628a0?source=rss------bug_bounty-5 | Canonminibeast | bug-bounty, cybersecurity, bug-bounty-writeup, hacking, website | 11-Mar-2025 |
| Anomaly Detection in Network Traffic: Enhancing Cybersecurity | https://medium.com/@paritoshblogs/anomaly-detection-in-network-traffic-enhancing-cybersecurity-2e90277c6af3?source=rss------bug_bounty-5 | Paritosh | bug-bounty, ai, networking, hacking, cybersecurity | 11-Mar-2025 |
| Account Takeover via postMessage | https://phlmox.medium.com/account-takeover-via-postmessage-3c493c6d1354?source=rss------bug_bounty-5 | phlmox | bug-bounty, cybersecurity, account-takeover | 11-Mar-2025 |
| When Life Throws Errors, I Throw Commands: My Command Injection Bug | https://medium.com/@iski/when-life-throws-errors-i-throw-commands-my-command-injection-bug-18969d979da4?source=rss------bug_bounty-5 | Iski | bug-bounty, bug-bounty-tips, hacking, cybersecurity, command-injection | 11-Mar-2025 |
| My First Paid Bug Bounty — Stored Blind XSS | https://medium.com/@dante.falls/my-first-paid-bug-bounty-stored-blind-xss-abe8ad06b3b3?source=rss------bug_bounty-5 | Dante Falls | cybersecurity, web-security, bug-bounty | 11-Mar-2025 |
| Day 25: From alert(origin) to ATO — An XSS Story | https://medium.com/@danielbelay/day-25-from-alert-origin-to-ato-an-xss-story-41c78c1fe66d?source=rss------bug_bounty-5 | dani3l | bug-bounty, cybersecurity, account-takeover-attacks, ethical-hacking | 11-Mar-2025 |
| Advanced SQL Injection (Part 2) | https://medium.com/@julius.grosserode.19/advanced-sql-injection-part-2-57bf83e202b1?source=rss------bug_bounty-5 | Julio | mysql, bug-bounty, sql, sql-injection, bug-bounty-reports | 11-Mar-2025 |
| Critical SQL Injection Exploit in URL Paths: Bounty Report | https://cyberw1ng.medium.com/critical-sql-injection-exploit-in-url-paths-bounty-report-6bf36e066f1f?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, careers, technology, bug-bounty, cybersecurity | 11-Mar-2025 |
| Beyond Alert Boxes: Exploiting DOM XSS for Full Account Takeover | https://ehteshamulhaq198.medium.com/beyond-alert-boxes-exploiting-dom-xss-for-full-account-takeover-094e1507d206?source=rss------bug_bounty-5 | Ehtesham Ul Haq | information-security, xss-attack, bug-bounty, xss-bypass, bug-bounty-tips | 11-Mar-2025 |
| From User to Admin: A Privilege Escalation via Business Logic | https://siratsami71.medium.com/from-user-to-admin-a-privilege-escalation-via-business-logic-7ae901be7d81?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | bug-bounty, logic, privilege-escalation | 10-Mar-2025 |
| How I Hijacked an Instagram Account and Discovered Open Redirection Vulnerabilities | https://medium.com/@josekuttykunnelthazhebinu/how-i-took-over-an-instagram-account-using-broken-link-hijacking-found-open-redirections-on-c03b0c62add6?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | programming, bug-bounty, cybersecurity, penetration-testing, hacking | 10-Mar-2025 |
| Best Tool For Subdomain Enumeration | https://cybersecuritywriteups.com/best-tool-for-subdomain-enumeration-f3f40a8e1748?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, bug-bounty, cybersecurity, bots, hacking | 10-Mar-2025 |
| With BLUF — Always write with clarity and effectiveness! | https://learningsomecti.medium.com/with-bluf-always-write-with-clarity-and-effectiveness-b4450939b841?source=rss------bug_bounty-5 | Andy C | writing, cybersecurity, threat-intelligence, bug-bounty, threat-hunting | 10-Mar-2025 |
| The Hidden Danger of Social Media: How Just Viewing a Post Exposes Your Data | https://medium.com/@sulmanfarooq531/the-hidden-danger-of-social-media-how-just-viewing-a-post-exposes-your-data-b2181ec8d667?source=rss------bug_bounty-5 | Sulman Farooq S | social-media, cybersecurity, data, security, bug-bounty | 10-Mar-2025 |
| Top 10 OAuth 2.0 Hacking Techniques — Part 2 | https://medium.com/@itamar.yochpaz/top-10-oauth-2-0-hacking-techniques-part-2-a45504ee373b?source=rss------bug_bounty-5 | Itamar Yochpaz | penetration-testing, bug-bounty, application-security, cybersecurity, hacking | 10-Mar-2025 |
| Bug Report: Authentication Redirect Issue in Sanicle-AI Platform | https://chanmeng666.medium.com/bug-report-authentication-redirect-issue-in-sanicle-ai-platform-fedbf7c84862?source=rss------bug_bounty-5 | Chan Meng | authentication, bug-bounty, nextjs, nextauth, debugging | 10-Mar-2025 |
| Secure Coding Practices for TEE Applications: A Guide for CA and TA Developers | https://medium.com/@security.tecno/secure-coding-practices-for-tee-applications-a-guide-for-ca-and-ta-developers-43978c4b82d4?source=rss------bug_bounty-5 | TECNO Security | security, bug-bounty, writing, hacking, blog | 10-Mar-2025 |
| How I Earned $2000 Automated Bug Bounty Hunting | https://medium.com/@rafaelczanetti/how-i-earned-2000-automated-bug-bounty-hunting-e46ce02d645d?source=rss------bug_bounty-5 | Rafael Cavalcante | bug-bounty | 10-Mar-2025 |
| Discover the Awesome Bug Bounty Writeups GitHub Repo | https://medium.com/@a.muhzeke/discover-the-awesome-bug-bounty-writeups-github-repo-40d4bfa61241?source=rss------bug_bounty-5 | Anthony Mazyck | threat-hunting, bug-bounty, soc, cybersecurity | 10-Mar-2025 |
| Bypassing Rate Limits Like a Pro: Advanced Exploitation Techniques | https://medium.com/@verylazytech/bypassing-rate-limits-like-a-pro-advanced-exploitation-techniques-a2643a6ea606?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, bypassing-rate-limit, 403-forbidden, web-attack, penetration-testing | 10-Mar-2025 |
| Bypass To 1-Click ATO | https://medium.com/@xiaoshi666/bypass-to-1-click-ato-ebfee258d8cc?source=rss------bug_bounty-5 | xiaoshi | bug-bounty, cybersecurity | 10-Mar-2025 |
| What’s the $5 Secret Behind Exploiting IDOR Vulnerabilities? (You Won’t Believe #3) | https://medium.com/@ibtissamhammadi/whats-the-5-secret-behind-exploiting-idor-vulnerabilities-you-won-t-believe-3-b8e50c21a352?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, cybersecurity, web-security, idor-vulnerability, owasp | 10-Mar-2025 |
| Unexpected input lead to Functionality confusion and P4 easy bug? | https://medium.com/@hamdiyasin135/unexpected-input-lead-to-functionality-confusion-and-p4-easy-bug-ba30013caddd?source=rss------bug_bounty-5 | yassin hamdi | bug-bounty, cyper-security, logic, access-control | 10-Mar-2025 |
| Penetration Testing Planning Phase — Ekta Detailed Guide | https://medium.com/@shoaibbinrashid11/penetration-testing-planning-phase-ekta-detailed-guide-23009766800a?source=rss------bug_bounty-5 | Shoaib Bin Rashid | penetration-testing, bug-bounty, web-security, cybersecurity, pentesting | 10-Mar-2025 |
| Penetration Testing Planning Phase — A Complete Guide | https://medium.com/@shoaibbinrashid11/penetration-testing-planning-phase-a-complete-guide-376140284df0?source=rss------bug_bounty-5 | Shoaib Bin Rashid | web-security, bug-bounty, cybersecurity, penetration-testing, pentesting | 10-Mar-2025 |
| Penetration Testing Phases: Full Bangla Explanation with Example | https://medium.com/@shoaibbinrashid11/penetration-testing-phases-full-bangla-explanation-with-example-8dd3d5a5043c?source=rss------bug_bounty-5 | Shoaib Bin Rashid | bug-bounty, cybersecurity, web-security, pentesting, penetration-testing | 10-Mar-2025 |
| How I Turned Government Website Into a Phishing Machine (And How You Can Prevent It) | https://medium.com/@nebty/how-i-turned-government-website-into-a-phishing-machine-and-how-you-can-prevent-it-fd70dbe57030?source=rss------bug_bounty-5 | Nebty | bug-bounty-tips, phishing, vulnerability, bug-bounty, cybersecurity | 10-Mar-2025 |
| ️♂️ How I Uncovered a $1000 Vulnerability by Exploiting an “Out-of-Sync” Flaw | https://cybersecuritywriteups.com/%EF%B8%8F-%EF%B8%8F-how-i-uncovered-a-1000-vulnerability-by-exploiting-an-out-of-sync-flaw-0b377c9c411d?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, infosec-write-ups, cybersecurity, xss-attack, osint | 10-Mar-2025 |
| Article 2: Setting Up an Emulator in Android Studio with Window ,Linux | https://medium.com/@fancybearIN/article-2-setting-up-an-emulator-in-android-studio-with-window-linux-9b7bb490edb7?source=rss------bug_bounty-5 | Deepak Parkash | appsec, android-app-development, android, bug-bounty, androiddev | 10-Mar-2025 |
| How I Made $500 in 30 Days Using ChatGPT as My Ethical Hacking Coach! ️ | https://krishna-cyber.medium.com/how-i-made-500-in-30-days-using-chatgpt-as-my-ethical-hacking-coach-%EF%B8%8F-f4e8c48c4501?source=rss------bug_bounty-5 | Krish_cyber | cybersecurity, infosec-write-ups, osint, chatgpt, bug-bounty | 10-Mar-2025 |
| Server Side Parameter Pollution — Deep Dive — Part 1 | https://medium.com/@prathmeshshendarkar/server-side-parameter-pollution-deep-dive-part-1-51aed2539c07?source=rss------bug_bounty-5 | Prathmesh S | programming, servers, bugs, web, bug-bounty | 10-Mar-2025 |
| Race Conditions in Bug Bounty: From Beginner to Advanced | https://cyberw1ng.medium.com/race-conditions-in-bug-bounty-from-beginner-to-advanced-4b48586dfc73?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, technology, programming, bug-bounty, cybersecurity | 10-Mar-2025 |
| Extracting Forensic Evidence from Smartwatch Data: A CID Hackathon Experience | https://infosecwriteups.com/extracting-forensic-evidence-from-smartwatch-data-a-cid-hackathon-experience-8a45b6ef7d5b?source=rss------bug_bounty-5 | Xh081iX | iot, bug-bounty, cybersecurity, infosec, ethical-hacking | 10-Mar-2025 |
| How to find hidden parameters in your bug bounty target | https://infosecwriteups.com/how-to-find-hidden-parameters-in-your-bug-bounty-target-35427ac49b91?source=rss------bug_bounty-5 | loyalonlytoday | tips, bug-bounty-tips, cybersecurity, bug-bounty, ethical-hacking | 10-Mar-2025 |
| Race Conditions in Bug Bounty: From Beginner to Advanced | https://systemweakness.com/race-conditions-in-bug-bounty-from-beginner-to-advanced-4b48586dfc73?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, technology, programming, bug-bounty, cybersecurity | 10-Mar-2025 |
| From Partial IDOR to GPS Tracking — API Flaw Explained | https://infosecwriteups.com/from-partial-idor-to-gps-tracking-api-flaw-explained-5eebab2af32a?source=rss------bug_bounty-5 | Mahendra Purbia (Mah3Sec) | api, infosec, pentesting, bug-bounty, idor | 09-Mar-2025 |
| “Blind CSS Exfiltration: The Bug Bounty Tactic That Earns Hackers $10k+ (Here’s How)” | https://osintteam.blog/blind-css-exfiltration-the-bug-bounty-tactic-that-earns-hackers-10k-heres-how-fdb12a82826f?source=rss------bug_bounty-5 | Krish_cyber | info-sec-writeups, osint, bug-bounty-writeup, bug-bounty, cybersecurity | 09-Mar-2025 |
| How I Found a Google API Key Leak in a Bug Bounty Program | https://medium.com/@AhmedSamy-X/how-i-found-a-google-api-key-leak-in-a-bug-bounty-program-c9a497efe479?source=rss------bug_bounty-5 | Ahmedsamy | penetration-testing, hacking, api, cybersecurity, bug-bounty | 09-Mar-2025 |
| The Original Bug Bounty: Alfred Hobbs and the Great Lock Controversy of 1851 | https://caseyjohnellis.medium.com/the-original-bug-bounty-alfred-hobbs-and-the-great-lock-controversy-of-1851-cd390705befb?source=rss------bug_bounty-5 | caseyjohnellis | vulnerability-research, cybersecurity, bug-bounty, locksmith | 09-Mar-2025 |
| Find Exposed Buckets and files, etc., with this resource. | https://infosecwriteups.com/find-exposed-buckets-and-files-etc-with-this-resource-115f8865015b?source=rss------bug_bounty-5 | loyalonlytoday | tips, bug-bounty, penetration-testing, cybersecurity, ethical-hacking | 09-Mar-2025 |
| Attacking and Defending Active Directory: Real-World Scenarios | https://medium.com/@paritoshblogs/attacking-and-defending-active-directory-real-world-scenarios-6533ca82a8d2?source=rss------bug_bounty-5 | Paritosh | hacking, active-directory, blue-team, bug-bounty, red-team | 09-Mar-2025 |
| The Art of Bug Reporting | https://medium.com/nerd-for-tech/the-art-of-bug-reporting-13be09192741?source=rss------bug_bounty-5 | sajith dilshan | bug-bounty, software-testing, bug-report, bug-reporting, qa | 09-Mar-2025 |
| How to Use Nuclei for Bug Hunting | https://medium.com/@vipulsonule71/how-to-use-nuclei-for-bug-hunting-0d60bea1fd92?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, cybersecurity, technology, ai, hacking | 09-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-117) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-117-8211b7ea0a72?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, bug-bounty, cybersecurity, ethical-hacking, hacking | 09-Mar-2025 |
| Found 5 BAC in One Single App within 2 Hours | https://medium.com/@mrro0o0tt/found-5-bac-in-one-single-app-within-2-hours-07a2307db2ca?source=rss------bug_bounty-5 | Whoami | idor-vulnerability, broken-access-control, bug-bounty, bug-bounty-tips, privilege-escalation | 09-Mar-2025 |
| Part-2 | Deep Recon Methodology for Bug Bounty Hunters | https://cybersecuritywriteups.com/part-2-deep-recon-methodology-for-bug-bounty-hunters-2ea73cefb010?source=rss------bug_bounty-5 | Abhijeet Kumawat | recon, infosec, hacking, bug-bounty, cyber-security-awareness | 09-Mar-2025 |
| Top 11 Bug Bounty Extensions That Will Save You Hours | https://infosecwriteups.com/top-11-bug-bounty-extensions-that-will-save-you-hours-bea31a368529?source=rss------bug_bounty-5 | Om Arora | bug-bounty-tips, bug-bounty, technology, cybersecurity, infosec | 09-Mar-2025 |
| Big Bounty: Uncovering Critical Security Flaws in Android Apps | https://hackersatty.medium.com/big-bounty-uncovering-critical-security-flaws-in-android-apps-0935963703e6?source=rss------bug_bounty-5 | hackersatty | javascript, android, android-bug-bounty, bug-bounty, bug-bounty-tips | 09-Mar-2025 |
| JWT Vulnerabilities in Pentesting: Exploitation Techniques & Security Best Practices | https://medium.com/@verylazytech/free-link-in-the-first-comment-d6d0cb759590?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, jwt-security, jwt-pentesting, jwt-hacking, bug-bounty | 09-Mar-2025 |
| Penetration Testing: Hacking for Security — The Beginner’s Guide | https://medium.com/@shoaibbinrashid11/penetration-testing-hacking-for-security-the-beginners-guide-2183261f8d29?source=rss------bug_bounty-5 | Shoaib Bin Rashid | cybersecurity, penetration-testing, ethical-hacking, bug-bounty, pentesting | 09-Mar-2025 |
| “Oops, I Can See Everything!”: A Funny Tale of Broken Access Control | https://medium.com/@bevennyamande/oops-i-can-see-everything-a-funny-tale-of-broken-access-control-9089586d5a86?source=rss------bug_bounty-5 | 0xbeven | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 09-Mar-2025 |
| Penetration Testing: Ethical Hacking Er Shundor Duniya | https://medium.com/@shoaibbinrashid11/penetration-testing-ethical-hacking-er-shundor-duniya-a0335e4e901f?source=rss------bug_bounty-5 | Shoaib Bin Rashid | bug-bounty, pentesting, web-security, cybersecurity, penetration-testing | 09-Mar-2025 |
| SQL Injection | https://medium.com/@julius.grosserode.19/sql-injection-97a239647ac7?source=rss------bug_bounty-5 | Julio | sqli, sql-injection, sql, error-based-sql-injection, bug-bounty | 09-Mar-2025 |
| Stored XSS on a HackerOne Private Bug Bounty Program | https://medium.com/@mohaned0101/stored-xss-on-a-hackerone-private-bug-bounty-program-997d5d4a104a?source=rss------bug_bounty-5 | mohaned alkhlot | xss-vulnerability, bug-bounty, bug-bounty-tips, xss-attack | 09-Mar-2025 |
| The 5 Phases of Penetration Testing: A Complete Guide | https://medium.com/@shoaibbinrashid11/the-5-phases-of-penetration-testing-a-complete-guide-e6a50572262c?source=rss------bug_bounty-5 | Shoaib Bin Rashid | penetration-testing, web-security, pentesting, bug-bounty | 09-Mar-2025 |
| Bug Hunting Recon Guide: Find Hidden Vulnerabilities Like a Pro | https://osintteam.blog/bug-hunting-recon-guide-find-hidden-vulnerabilities-like-a-pro-353accfe65c4?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, hacking, technology, penetration-testing, bug-bounty | 09-Mar-2025 |
| From Remote Code Execution to Data Base Pwnage | https://medium.com/@pandurangisuprit/from-remote-code-execution-to-data-base-pwnage-63404905e044?source=rss------bug_bounty-5 | Suprit Pandurangi | rce, vulnerability, critical-thinking, remote-code-execution, bug-bounty | 09-Mar-2025 |
| Exposing PII and SSNs through Persistent Session Tokens — $15,000 Bug Bounty | https://medium.com/@moblig/exposing-pii-and-ssns-through-persistent-session-tokens-15-000-bug-bounty-293ab06c1606?source=rss------bug_bounty-5 | Moblig | bug-bounty, leaked, cybersecurity, research | 09-Mar-2025 |
| How i Find IDOR lead to account takeover | https://yazeedeliwah.medium.com/how-i-find-idor-lead-to-account-takeover-de762cc1e101?source=rss------bug_bounty-5 | black_virus | recon, cybersecurity, hacking, idor, bug-bounty | 09-Mar-2025 |
| $2,162 Bounty: Exploiting VGA Deadlock in Xen Hypervisor for Maximum Impact | https://cyberw1ng.medium.com/2-162-bounty-exploiting-vga-deadlock-in-xen-hypervisor-for-maximum-impact-2a98238ac0dd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, technology, bug-bounty, careers, programming | 09-Mar-2025 |
| $2,162 Bounty: Exploiting VGA Deadlock in Xen Hypervisor for Maximum Impact | https://osintteam.blog/2-162-bounty-exploiting-vga-deadlock-in-xen-hypervisor-for-maximum-impact-2a98238ac0dd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, technology, bug-bounty, careers, programming | 09-Mar-2025 |
| Exploiting Mass Assignment to ATO | https://medium.com/@GERRR4Y/exploiting-mass-assignment-to-ato-ab0c1aadc2de?source=rss------bug_bounty-5 | Aya Ayman(GERR4Y) | penetration-testing, bug-bounty | 08-Mar-2025 |
| CORS Misconfiguration vs. CSRF: Battle of the Web Villains! | https://medium.com/@shadyfarouk1986/cors-misconfiguration-vs-csrf-battle-of-the-web-villains-6743cb0ed08b?source=rss------bug_bounty-5 | Shady Farouk | bug-bounty-tips, bug-bounty, bounty-program, bug-bounty-writeup | 08-Mar-2025 |
| Why Custom Linux & Python Tools in Bug Bounty Beat Traditional Tools! | https://medium.com/@shadyfarouk1986/why-custom-linux-python-tools-in-bug-bounty-beat-traditional-tools-db2092a8cf9c?source=rss------bug_bounty-5 | Shady Farouk | bug-bounty-tips, bug-bounty-writeup, bug-bounty, pentesting | 08-Mar-2025 |
| Deep Recon Methodology for Bug Bounty Hunters | Part-1 | https://medium.com/@Abhijeet_kumawat_/deep-recon-methodology-for-bug-bounty-hunters-part-1-724fa4d6324c?source=rss------bug_bounty-5 | Abhijeet Kumawat | recon, cybersecurtiy, bug-bounty, hacking, infosec | 08-Mar-2025 |
| LostFuzzer: Passive URL Fuzzing & Nuclei DAST for Bug Hunters | https://infosecwriteups.com/lostfuzzer-passive-url-fuzzing-nuclei-dast-for-bug-hunters-a33501b9563b?source=rss------bug_bounty-5 | coffinxp | automation, penetration-testing, bug-bounty-tips, technology, bug-bounty | 08-Mar-2025 |
| Find apex domains that are related to your bug bounty target (part 2) | https://infosecwriteups.com/find-apex-domains-that-are-related-to-your-bug-bounty-target-part-2-e60644fd3cf8?source=rss------bug_bounty-5 | loyalonlytoday | ethical-hacking, cybersecurity, apex, bug-bounty, tips | 08-Mar-2025 |
| Installing Burp Suite Certificate & Frida Setup for Android Penetration | https://cybersecuritywriteups.com/installing-burp-suite-certificate-frida-setup-for-android-penetration-b242f5c8a0a9?source=rss------bug_bounty-5 | Abdul Rehman Parkar | bug-bounty, cybersecurity, android-pentesting, burpsuite, ethical-hacking | 08-Mar-2025 |
| My First IDOR in Hindustan Times | https://medium.com/@ShreyasMahajann/my-first-idor-in-hindustan-times-0f93ab372de6?source=rss------bug_bounty-5 | Shreyas Mahajan | penetration-testing, bug-bounty, security, cybersecurity | 08-Mar-2025 |
| How a Minor Rounding Error Cost a DeFi Protocol Millions | https://securrtech.medium.com/how-a-minor-rounding-error-cost-a-defi-protocol-millions-5fedcf2b148d?source=rss------bug_bounty-5 | Securr - Web3 Security | smart-contract-auditing, smart-contract-security, web3-security, blockchain-security, bug-bounty | 08-Mar-2025 |
| Installing Burp Suite Certificate & Frida Setup for Android Penetration testing | https://cybersecuritywriteups.com/installing-burp-suite-certificate-frida-setup-for-android-penetration-b242f5c8a0a9?source=rss------bug_bounty-5 | Abdul Rehman Parkar | bug-bounty, cybersecurity, android-pentesting, burpsuite, ethical-hacking | 08-Mar-2025 |
| From Zero to $8k: How I Stumbled Into a Critical Bug (And You Can Too! | https://krishna-cyber.medium.com/from-zero-to-8k-how-i-stumbled-into-a-critical-bug-and-you-can-too-f5cb37832b8d?source=rss------bug_bounty-5 | Krish_cyber | hacking, bugs, bug-bounty, osint, infosec-write-ups | 08-Mar-2025 |
| The Hidden Danger: Sensitive Information Leakage via Log Files! | https://cybersecuritywriteups.com/the-hidden-danger-sensitive-information-leakage-via-log-files-6244175b26be?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, cybersecurity, programming, bug-bounty-writeup, infosec-write-ups | 08-Mar-2025 |
| Article 1: Setting up Android Studio -the foundation for Android pentesting | https://medium.com/@itsboyy0007/article-1-setting-up-android-studio-the-foundation-for-android-pentesting-de86726f486a?source=rss------bug_bounty-5 | Deepak Parkash | bug-bounty, hacking, android, appsec, cybersecurity | 08-Mar-2025 |
| Mr. Robot TryhackMe | https://medium.com/@mr.tripathy/mr-robot-tryhackme-5afa3435b75f?source=rss------bug_bounty-5 | Madhab Tripathy | bug-bounty, penetration-testing, red-team, tryhackme-walkthrough, tryhackme | 08-Mar-2025 |
| How I Found Clickjacking in a Public Program | https://medium.com/@slash0x01/how-i-found-clickjacking-in-a-public-program-9581aa6bab1f?source=rss------bug_bounty-5 | Slash0x01 | penetration-testing, bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup | 08-Mar-2025 |
| 5 Exploitation Techniques to Exploit HTTP Parameter Pollution (HPP) in Web Applications | https://bitpanic.medium.com/5-exploitation-techniques-to-exploit-http-parameter-pollution-hpp-in-web-applications-ead3710f96ac?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, bug-bounty, ai-generated-content, programming, technology | 08-Mar-2025 |
| Mastering Shodan Search Engine Dorks: A Comprehensive Guide for Security Researchers | https://infosecwriteups.com/mastering-shodan-search-engine-dorks-a-comprehensive-guide-for-security-researchers-0e70e4e628cb?source=rss------bug_bounty-5 | Ajay Naik | search-engines, information-technology, penetration-testing, cybersecurity, bug-bounty | 08-Mar-2025 |
| Uncovering a critical bug : Zero-click ATO | https://infosecwriteups.com/uncovering-a-critical-bug-zero-click-ato-cbec5eb33ccf?source=rss------bug_bounty-5 | JEETPAL | account-takeover, bugbounty-writeup, cybersecurity, bugbounty-tips, bug-bounty | 08-Mar-2025 |
| Article 1: Setting up Android Studio -the foundation for Android pentesting | https://medium.com/@fancybearIN/article-1-setting-up-android-studio-the-foundation-for-android-pentesting-de86726f486a?source=rss------bug_bounty-5 | Deepak Parkash | bug-bounty, hacking, android, appsec, cybersecurity | 08-Mar-2025 |
| The Secret to Choosing Targets That Actually Have Vulnerabilities : Bug Bounty Restart Phase 2 | https://omarora1603.medium.com/the-secret-to-choosing-targets-that-actually-have-vulnerabilities-bug-bounty-restart-phase-2-3af718bc89bc?source=rss------bug_bounty-5 | Om Arora | bug-bounty, bug-bounty-tips, programming, technology, cybersecurity | 08-Mar-2025 |
| Static Application Security Testing (SAST) for Xamarin Android Applications | https://medium.com/@k3r0/static-application-security-testing-sast-for-xamarin-android-applications-14b1bff84d14?source=rss------bug_bounty-5 | Kyrillos nady | bug-bounty, red-team, xamarin, android, pentesting | 08-Mar-2025 |
| Bypassing Authentication Like a Pro: Advanced Exploitation Techniques | https://javroot.medium.com/bypassing-authentication-like-a-pro-advanced-exploitation-techniques-a0a6463e4179?source=rss------bug_bounty-5 | Javroot | cybersecurity, web-development, bug-bounty, bug-bounty-tips, infosec | 08-Mar-2025 |
| Automating Information Gathering for Bug Bounty Hunters | https://cyberw1ng.medium.com/automating-information-gathering-for-bug-bounty-hunters-161f23dad2ae?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, automation, bug-bounty, cybersecurity, careers | 08-Mar-2025 |
| The Secret to Choosing Targets That Actually Have Vulnerabilities : Bug Bounty Restart Phase 2 | https://infosecwriteups.com/the-secret-to-choosing-targets-that-actually-have-vulnerabilities-bug-bounty-restart-phase-2-3af718bc89bc?source=rss------bug_bounty-5 | Om Arora | bug-bounty, bug-bounty-tips, programming, technology, cybersecurity | 08-Mar-2025 |
| This tool helped me to find IDOR | https://medium.com/@canonminibeast/this-tool-helped-me-to-find-idor-c87a9c1a04f3?source=rss------bug_bounty-5 | Canonminibeast | bugbout, bug-bounty, website | 08-Mar-2025 |
| This tool helped me to find IDOR | https://medium.com/@canonminibeast/this-tool-helped-me-to-find-idor-c1897eee1b2d?source=rss------bug_bounty-5 | Canonminibeast | bug-bounty, idor-vulnerability, hacking, cybersecurity, hacker | 08-Mar-2025 |
| Automating Information Gathering for Bug Bounty Hunters | https://osintteam.blog/automating-information-gathering-for-bug-bounty-hunters-161f23dad2ae?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, automation, bug-bounty, cybersecurity, careers | 08-Mar-2025 |
| I Found Exposing API Keys and Tokens in a Private Program | https://medium.com/@Abhijeet_kumawat_/i-found-exposing-api-keys-and-tokens-in-a-private-program-1d02ef9e49d0?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, money, cybersecurity, infosec, hacking | 07-Mar-2025 |
| I hacked space x and rewarded 2500$ Bypassing Full Payment to Regain Internet Access | https://bytesnull44.medium.com/i-hacked-space-x-and-rewarded-2500-bypassing-full-payment-to-regain-internet-access-bd6120483a06?source=rss------bug_bounty-5 | Bytesnull | hacking, bug-bounty, bugcrowd, cybersecurity, hackerone | 07-Mar-2025 |
| The Art of SSTI: From Detection to Domination | https://zeusvuln.medium.com/the-art-of-ssti-from-detection-to-domination-f5fdd2411439?source=rss------bug_bounty-5 | ZeUsVuLn | bug-bounty-tips, bug-bounty-writeup, ssti, bug-bounty, cybersecurity | 07-Mar-2025 |
| Anonymous access on SMB [Ejpt exam notes] | https://medium.com/@hrofficial62/anonymous-access-on-smb-ejpt-exam-notes-b898d6f508fc?source=rss------bug_bounty-5 | Mr Horbio | pentesting, ethical-hacking, cybersecurity, hacking, bug-bounty | 07-Mar-2025 |
| Understanding DDoS Attacks: A Threat to Online Services | https://medium.com/@HexaGaurd/understanding-ddos-attacks-a-threat-to-online-services-a837e459a311?source=rss------bug_bounty-5 | HexaGaurd | cybersecurity, ddos, ddos-attack, bug-bounty, hexagaurd | 07-Mar-2025 |
| I Found Exposing API Keys and Tokens in a Private Program | https://cybersecuritywriteups.com/i-found-exposing-api-keys-and-tokens-in-a-private-program-1d02ef9e49d0?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, money, cybersecurity, infosec, hacking | 07-Mar-2025 |
| How I Could Pre-Take Over Accounts on Target.com with a Simple Trick! | https://medium.com/@jeetpal2007/how-i-could-pre-take-over-accounts-on-target-com-with-a-simple-trick-503599009f3c?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, bug-bounty-tips, email-verification, bug-bounty, bugbounty-writeup | 07-Mar-2025 |
| Bug Hunting: From Recon to Reporting | https://osintteam.blog/bug-hunting-from-recon-to-reporting-3ad44ffd94dc?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, penetration-testing, bug-bounty-tips, technology, hacking | 07-Mar-2025 |
| How to Run Tp-Link AC600(Archer T2U Plus) in Kali , and solve error. | https://medium.com/@anandrishav2228/how-to-run-tp-link-ac600-archer-t2u-plus-in-kali-and-solve-error-8758c281cb8d?source=rss------bug_bounty-5 | Rishav anand | aircrack-ng, bug-bounty, cybersecurity, tp-link, wifi | 07-Mar-2025 |
| ⚔️ Cyber Storm: Navigating the Digital Battlefield ⚔️ | https://osintteam.blog/%EF%B8%8F-cyber-storm-navigating-the-digital-battlefield-%EF%B8%8F-8cc433ce7687?source=rss------bug_bounty-5 | Krish_cyber | javascript, programming, technology, bug-bounty, cybersecurity | 07-Mar-2025 |
| How a Hacker Mindset Can Save Your Business from Catastrophic Cyberattacks | https://medium.com/@hackrate/how-a-hacker-mindset-can-save-your-business-from-catastrophic-cyberattacks-fbaf484fc496?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, bug-bounty-tips, penetration-testing, ethical-hacking, cybersecurity | 07-Mar-2025 |
| Wayback Machine for Bug Bounty Hunting | https://medium.com/@thexnumb/wayback-machine-for-bug-bounty-hunting-74802a454769?source=rss------bug_bounty-5 | Thexnumb | wayback-machine, reconnaissance, bug-bounty, infosec, penetration-testing | 07-Mar-2025 |
| Secret Bug Bounty Tips: $10K Daily | https://medium.com/@ibtissamhammadi/secret-bug-bounty-tips-10k-daily-5951273f0c29?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty-program, bug-bounty-hunter, bug-bounty, cybersecurity, bug-bounty-tips | 07-Mar-2025 |
| Uncovering an Account Linking Vulnerability: Persistent Unauthorized Access Without User Awareness | https://medium.com/@patidarbhuwan44/uncovering-an-account-linking-vulnerability-persistent-unauthorized-access-without-user-awareness-70141b5ccd2c?source=rss------bug_bounty-5 | Bhuwan Patidar | vulnerability-disclosure, cybersecurity, bug-bounty, web-security, hacking | 07-Mar-2025 |
| How to Find Vulnerabilities for Bug Hunting ️♂️ | https://medium.com/@vipulsonule71/how-to-find-vulnerabilities-for-bug-hunting-%EF%B8%8F-%EF%B8%8F-050e3a67e40e?source=rss------bug_bounty-5 | Vipul Sonule | ai, cybersecurity, technology, bug-bounty, hacking | 07-Mar-2025 |
| The Ultimate 2025 Guide to Securing a Job in Red Teaming . | https://medium.com/@anandrishav2228/the-ultimate-2025-guide-to-securing-a-job-in-red-teaming-6a1ef6edf1b8?source=rss------bug_bounty-5 | Rishav anand | red-team, bug-bounty, money, hacking, cybersecurity | 07-Mar-2025 |
| WordPress Misconfiguration Lead to User Files Disclosure ($$$) | https://wahaz.medium.com/wordpress-misconfiguration-lead-to-user-files-disclosure-a7cbdce11df0?source=rss------bug_bounty-5 | Rizaldi Wahaz | cybersecurity, wordpress, penetration-testing, hacker, bug-bounty | 07-Mar-2025 |
| Ethically Hacking a Mail Server: Finding Open Relays & Sending Phishing Emails | https://medium.com/@dharineeshj2/ethically-hacking-a-mail-server-finding-open-relays-sending-phishing-emails-235ced92f076?source=rss------bug_bounty-5 | Hack-Bat | cybersecurity, pentesting, hacking, bug-bounty, black-hat-hacker | 07-Mar-2025 |
| How To Start Bug Hunting in 2025 | https://medium.com/@anonyhelps.su/how-to-start-bug-hunting-in-2025-58c0c4dc1e9c?source=rss------bug_bounty-5 | Anonyhelps Su | hacking, bug-bounty, hacking-training, earnings, cybersecurity | 07-Mar-2025 |
| Email Disclosure via .git Config in project: $500 Bounty Bug | https://medium.com/@a13h1/email-disclosure-via-git-config-in-project-500-bounty-bug-ee057ca12e6f?source=rss------bug_bounty-5 | Abhi Sharma | penetration-testing, information-disclosure, bug-bounty, information-security, cybersecurity | 07-Mar-2025 |
| Listen to my Podcast Guest Appearance | https://medium.com/@hacktheplanet/listen-to-my-podcast-guest-appearance-493bd31a5103?source=rss------bug_bounty-5 | SirHaxAlot | tor, sirhaxalot, bug-bounty, darkweb, hacking | 07-Mar-2025 |
| XSS IN OPERA-MINI | https://davidferreira101.medium.com/xss-in-opera-mini-e0c2dd6b60c6?source=rss------bug_bounty-5 | David Ferreira | cybersecurity, pentesting, bug-bounty | 07-Mar-2025 |
| Finding Funded TRON Wallets: Is It Possible? | https://medium.com/meetcyber/finding-funded-tron-wallets-is-it-possible-8e36f68f7448?source=rss------bug_bounty-5 | Erkan Kavas | reconnaissance, trx, tron, bug-bounty, blockchain | 07-Mar-2025 |
| Hunting PII Exposures — A Bug Bounty Perspective | https://medium.com/@blify/hunting-pii-exposures-a-bug-bounty-perspective-79212c65ab10?source=rss------bug_bounty-5 | Blify | information-security, bug-bounty, bug-bounty-tips, cybersecurity | 07-Mar-2025 |
| CSPT: Your way to XSS & CSRF in Modern Apps | https://medium.com/@68abdelrahmanmohamed/cspt-your-way-to-xss-csrf-in-modern-apps-59260c8ad19a?source=rss------bug_bounty-5 | Abdulrahman | web-penetration-testing, bug-bounty, penetration-testing | 07-Mar-2025 |
| ZeroClick Account Takeover : A Four-Bug Chain Exploit | https://medium.com/@Cr40/zeroclick-account-takeover-a-four-bug-chain-exploit-115ce0f6fc23?source=rss------bug_bounty-5 | Asim | bug-bounty, account-takeover, cybersecurity, penetration-testing, bug-bounty-writeup | 07-Mar-2025 |
| OTP Bypass Bug in Public Bug Bounty Program | https://infosecwriteups.com/otp-bypass-bug-in-public-bug-bounty-program-5554eafc18ab?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, otp-bypass, otp-verification, secrets, responsible-disclosure | 07-Mar-2025 |
| 8 Automated Methods to Discover API Keys Across Websites and API Requests | https://cyberw1ng.medium.com/8-automated-methods-to-discover-api-keys-across-websites-and-api-requests-08d547cdbb80?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, cybersecurity, programming, bug-bounty, automation | 07-Mar-2025 |
| Day 23: Account Takeover via Response Manipulation | https://medium.com/@danielbelay/day-23-account-takeover-via-response-manipulation-90a1fe62dd8e?source=rss------bug_bounty-5 | dani3l | cybersecurity, bug-bounty, ethical-hacking, account-takeover-attacks | 07-Mar-2025 |
| Exposed Files: The Gift That Keeps on Giving | https://medium.com/@mahad.ahmed0x1/exposed-files-the-gift-that-keeps-on-giving-d0394df80f12?source=rss------bug_bounty-5 | 404NotPentested | coding, devops, web-development, cybersecurity, bug-bounty | 06-Mar-2025 |
| Stored xss using PDF a bug? | https://medium.com/@dsmodi484/stored-xss-using-pdf-a-bug-0690125015bb?source=rss------bug_bounty-5 | cryptoshant | bug-bounty, lenovo, cybersecurity, pdf, hacking | 06-Mar-2025 |
| How to Find Your First Bug ️♂️ | https://medium.com/@vipulsonule71/how-to-find-your-first-bug-%EF%B8%8F-%EF%B8%8F-d6a0b0ef40b3?source=rss------bug_bounty-5 | Vipul Sonule | ai, cybersecurity, penetration-testing, bug-bounty, hacking | 06-Mar-2025 |
| How To Find Low-Hanging Bugs? | https://cybersecuritywriteups.com/how-to-find-low-hanging-bugs-6e8b3eb8b3ca?source=rss------bug_bounty-5 | Abhijeet Kumawat | infosec, money, bug-bounty, cybersecurity, hacking | 06-Mar-2025 |
| My First Bug Bounty Win: How I Found and Reported a Security Vulnerability | https://heinhtetagg.medium.com/my-first-bug-bounty-win-how-i-found-and-reported-a-security-vulnerability-c41fdfd717c2?source=rss------bug_bounty-5 | Hein Htet Aung | bug-bounty, bug-bounty-writeup | 06-Mar-2025 |
| CORS Exploitation Walkthrough | Bypass & Exploit Misconfigured CORS | Ethical Hacking Tutorial | https://medium.com/@spector-sec/cors-exploitation-walkthrough-bypass-exploit-misconfigured-cors-ethical-hacking-tutorial-db15994788d3?source=rss------bug_bounty-5 | spector-sec | cors, bug-bounty, penetration-testing, info-sec-writeups, cybersecurity | 06-Mar-2025 |
| Use this unique way to find broken link hijacking bugs. | https://infosecwriteups.com/use-this-unique-way-to-find-broken-link-hijacking-bugs-3081878839d4?source=rss------bug_bounty-5 | loyalonlytoday | broken-link, cybersecurity, penetration-testing, ethical-hacking, bug-bounty | 06-Mar-2025 |
| Finding the origin IP part 2 | https://infosecwriteups.com/finding-the-origin-ip-part-2-c96d7488c40e?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, tips, cybersecurity, programming, bug-bounty | 06-Mar-2025 |
| How I Earned $4,000+ in My First Six Months of Bug Bounty Hunting | https://medium.com/@nchaitreddyutilities/how-i-earned-4-000-in-my-first-six-months-of-bug-bounty-hunting-e969144a368a?source=rss------bug_bounty-5 | Chaitanya Reddy | bug-bounty-tips, bug-bounty-writeup, bug-bounty, cybersecurity | 06-Mar-2025 |
| Is Bug Bounty Still a Good Career in 2025? | https://medium.com/@HackerNasr/is-bug-bounty-still-a-good-career-in-2025-d5ef726b07f6?source=rss------bug_bounty-5 | HackerNasr | pentesting, bug-bounty-tips, hacking, bug-bounty, ethical-hacking | 06-Mar-2025 |
| Invite Me Once, I Own Your Account!” (HINDI + ENGLISH) | https://medium.com/@ajay.kumar.695632/invite-me-once-i-own-your-account-hindi-english-b27cb72fe64a?source=rss------bug_bounty-5 | Ajay Kumar | bugs, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 06-Mar-2025 |
| First Italians on Ferrari’s Hall of Fame: Our Experience with the Bug Bounty Program | https://medium.com/@br3ss/first-italians-on-ferraris-hall-of-fame-our-experience-with-the-bug-bounty-program-5c101dba71c6?source=rss------bug_bounty-5 | Br3ss | bug-bounty, ferrari, security, cybersecurity, seo | 06-Mar-2025 |
| Never Underestimate Any Error. This is why I Got Appreciation Letter from Drexel University CISO | https://hiddendom.medium.com/never-underestimate-any-error-this-is-why-i-got-appreciation-letter-from-drexel-university-ciso-ba37a6bad077?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugs, penetration-testing | 06-Mar-2025 |
| How Recon → SQLi Made €€€€ Bounty | https://medium.com/@iski/how-recon-sqli-made-bounty-425fc0fa2e92?source=rss------bug_bounty-5 | Iski | p1-bug, sql, cybersecurity, bug-bounty, bug-bounty-tips | 06-Mar-2025 |
| A list of automated recon tools | https://cybersecuritywriteups.com/a-list-of-automated-recon-tools-f0d034429532?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, recon, tips, penetration-testing, cybersecurity | 06-Mar-2025 |
| Easy Account Takeover Using OTP Bypass | https://medium.com/@dharineeshj2/easy-account-takeover-using-otp-bypass-4de2079fb9b1?source=rss------bug_bounty-5 | Hack-Bat | bug-bounty, hacking, vulnerability, cybersecurity | 06-Mar-2025 |
| Enhancing Bug Bounty Hunting and Web App Pentesting with mitmproxy and Burp suite | https://medium.com/@MutexSec/enhancing-bug-bounty-hunting-and-web-app-pentesting-with-mitmproxy-and-burp-suite-1d6d0f381bd0?source=rss------bug_bounty-5 | Exhaustedmutex | red-team, penetration-testing, proxy, bug-bounty, burpsuite | 06-Mar-2025 |
| Mastering 403 Forbidden Bypass Techniques ✨ | https://cybersecuritywriteups.com/mastering-403-forbidden-bypass-techniques-2ab393f1c77f?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, money, hacking, cybersecurity, infosec | 06-Mar-2025 |
| How to Find SQL Injection ️♂️ | https://medium.com/@vipulsonule71/how-to-find-sql-injection-%EF%B8%8F-%EF%B8%8F-c5e2113ef263?source=rss------bug_bounty-5 | Vipul Sonule | hacking, ai, cybersecurity, bug-bounty, penetration-testing | 06-Mar-2025 |
| How I Ethically Hacked a Government Portal: SQL Injection in a Gov. Portal | https://myselfakash20.medium.com/how-i-ethically-hacked-a-government-portal-sql-injection-in-a-gov-portal-9682869e5999?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty, ethical-hacking | 06-Mar-2025 |
| Understanding Race Conditions in Web Applications | https://medium.com/@shoaibbinrashid11/understanding-race-conditions-in-web-applications-9cc7c5984471?source=rss------bug_bounty-5 | Shoaib Bin Rashid | web-security, penetration-testing, bug-bounty, race-condition | 06-Mar-2025 |
| How I Found My First CVE – A Beginner’s Guide | https://abhinav-porwal.medium.com/how-i-found-my-first-cve-a-beginners-guide-3cf2b56b37f0?source=rss------bug_bounty-5 | Abhinav Porwal | cybersecurity, bug-bounty, bug-bounty-tips, information-security, hacking | 06-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-116) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-116-a9a65ad7f24f?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips, hacking | 06-Mar-2025 |
| The art of hunting logical bugs: Exploiting business logic in modern apps | https://infosecwriteups.com/the-art-of-hunting-logical-bugs-exploiting-business-logic-in-modern-apps-a374c3650b90?source=rss------bug_bounty-5 | Vivek PS | programming, cybersecurity, bug-bounty, ethical-hacking | 06-Mar-2025 |
| Bug Bounty: How a Race Condition Led to Application-Level DoS | https://medium.com/@Bug_Slay3r/bug-bounty-how-a-race-condition-led-to-application-level-dos-76458ae57e9d?source=rss------bug_bounty-5 | Shrujal Mandawkar | bug-bounty, bug-bounty-tips, race-condition, bug-bounty-writeup, bugs | 06-Mar-2025 |
| “Unlock Bug Bounty Rewards by Hunting Exposed debug.log | https://krishna-cyber.medium.com/unlock-bug-bounty-rewards-by-hunting-exposed-debug-log-0d50382a64d1?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty-tips, bug-bounty, osint, programming, infosec-write-ups | 6-Mar-2025 |
| ✨ Cyber Guardians Unleashed: The Dynamic Duo of SOC & SIEM ✨ | https://krishna-cyber.medium.com/cyber-guardians-unleashed-the-dynamic-duo-of-soc-siem-80e3ccdc4c62?source=rss------bug_bounty-5 | Krish_cyber | technology, javascript, cybersecurity, bug-bounty, programming | 6-Mar-2025 |
| Information Disclosure: AWS Sensitive API Key Leakage | https://cyberw1ng.medium.com/information-disclosure-aws-sensitive-api-key-leakage-0b60d3af5109?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, programming, careers, cybersecurity, cloud | 06-Mar-2025 |
| How I Discovered a Stored XSS Vulnerability in JS Files | https://cybersecuritywriteups.com/how-i-discovered-a-stored-xss-vulnerability-in-js-files-7b527d2c8962?source=rss------bug_bounty-5 | Krish_cyber | programming, bug-bounty, xss-attack, cybersecurity, bug-bounty-tips | 06-Mar-2025 |
| Information Disclosure: AWS Sensitive API Key Leakage | https://osintteam.blog/information-disclosure-aws-sensitive-api-key-leakage-0b60d3af5109?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, programming, careers, cybersecurity, cloud | 06-Mar-2025 |
| How I Ethically Hacked a Government Portal: SQL Injection in a Gov. Portal | https://infosecwriteups.com/how-i-ethically-hacked-a-government-portal-sql-injection-in-a-gov-portal-9682869e5999?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, bug-bounty-tips, bug-bounty, ethical-hacking, technology | 06-Mar-2025 |
| How I Found Sensitive Information using Github Dorks in Bug Bounties — Part 1 | https://mukibas37.medium.com/how-i-found-sensitive-information-using-github-dorks-in-bug-bounties-part-1-09c9465fa902?source=rss------bug_bounty-5 | Mukilan Baskaran | ethical-hacking, github-recon, cybersecurity, infosec, bug-bounty | 05-Mar-2025 |
| One Program, Three Takeovers — A Deep Dive into Subdomain Hijacking! | https://medium.com/@AhmedSamy-X/one-program-three-takeovers-a-deep-dive-into-subdomain-hijacking-a97405601a14?source=rss------bug_bounty-5 | Ahmedsamy | penetration-testing, cybersecurity, bug-bounty, subdomain-takeover | 05-Mar-2025 |
| Cracking the Shield: Advanced WAF Bypass Techniques That Still Work in 2025 | https://myselfakash20.medium.com/cracking-the-shield-advanced-waf-bypass-techniques-that-still-work-in-2025-814cee616ccf?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, bug-bounty-tips, bug-bounty, technology, bug-bounty-writeup | 05-Mar-2025 |
| Understanding AES-256 Encryption: The Ultimate Security Standard | https://medium.com/@viveksheela1707/understanding-aes-256-encryption-the-ultimate-security-standard-3535a5a8128a?source=rss------bug_bounty-5 | Vivek Sheela | user-testing, security, security-systems, technology, bug-bounty | 05-Mar-2025 |
| $150 Easy HTML Injection Vulnerability | https://medium.com/@Abhijeet_kumawat_/150-easy-html-injection-vulnerability-08de8584001d?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, infosec, cybersecurity, money, hacking | 05-Mar-2025 |
| Finding jwt tokens that lead to PII data leakage. | https://infosecwriteups.com/finding-jwt-tokens-that-lead-to-pii-data-leakage-b047d45d97bf?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, programming, bug-bounty, bug-bounty-tips, ethical-hacking | 05-Mar-2025 |
| Able to create an account without a phone number. (unique bug) | https://infosecwriteups.com/able-to-create-an-account-without-a-phone-number-unique-bug-1fe2d14b9d54?source=rss------bug_bounty-5 | loyalonlytoday | tips, bug-bounty-tips, ethical-hacking, cybersecurity, bug-bounty | 05-Mar-2025 |
| Find new apex domains that are related to your bug bounty target. | https://infosecwriteups.com/find-new-apex-domains-that-are-related-to-your-bug-bounty-target-a05fdcbf5875?source=rss------bug_bounty-5 | loyalonlytoday | tips, penetration-testing, bug-bounty, cybersecurity, programming | 05-Mar-2025 |
| 2025 OWASP Vulnerabilities Complete Guide for Security Tester | https://infosecwriteups.com/2025-owasp-vulnerabilities-complete-guide-for-security-tester-8b20f754bee4?source=rss------bug_bounty-5 | Ajay Naik | information-security, penetration-testing, owasp, owasp-top-10, bug-bounty | 05-Mar-2025 |
| The Curious Case of an Insecure Password Reset Flaw | https://sapienshack.medium.com/the-curious-case-of-an-insecure-password-reset-flaw-135000e4a462?source=rss------bug_bounty-5 | Sapienshack | pentesting, penetration-testing, bug-bounty, application-security, bug-bounty-writeup | 05-Mar-2025 |
| Cybersecurity Update: Major Attacks and Trends | https://medium.com/@sivaprakash4112/cybersecurity-update-major-attacks-and-trends-981a2c4e12b0?source=rss------bug_bounty-5 | Sivaprakash Sivakumar | cybersecurity, bug-bounty, news, cyberattack, cryptocurrency | 05-Mar-2025 |
| Cache Deception Attack help you make a good Bounty.(0–1) | https://medium.com/@anandrishav2228/cache-deception-attack-help-you-make-a-good-bounty-0-1-3030c21fa3e6?source=rss------bug_bounty-5 | Rishav anand | hacking, bug-bounty, cybersecurity, cache, money | 05-Mar-2025 |
| XSS :- When, Where, and How to Strike in Web and Mobile Apps! and make $$$ Easily | https://medium.com/@anandrishav2228/xss-when-where-and-how-to-strike-in-web-and-mobile-apps-and-make-easily-b41c2f1e73f6?source=rss------bug_bounty-5 | Rishav anand | hacking, money, xss-attack, bug-bounty, cybersecurity | 05-Mar-2025 |
| Command Injection: The Ultimate Guide to Exploiting and Preventing OS Command Execution | https://medium.com/@verylazytech/command-injection-the-ultimate-guide-to-exploiting-and-preventing-os-command-execution-85b74f519fce?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, injection-payloads, prevent-injection, command-injection, os-injection | 05-Mar-2025 |
| $50-$100 worth Sensitive Leaks via Google Dorks | Part 2 | https://infosecwriteups.com/50-100-worth-sensitive-leaks-via-google-dorks-part-2-868f4b1e7919?source=rss------bug_bounty-5 | It4chis3c | google, secrets, bug-bounty, google-hacking, google-dork | 05-Mar-2025 |
| How i Bypass 403 and earn bounty $$$$ | https://medium.com/@anandrishav2228/how-i-bypass-403-and-earn-bounty-faddabb4b497?source=rss------bug_bounty-5 | Rishav anand | servers, cybersecurity, money, bug-bounty, hacking | 05-Mar-2025 |
| Critical IDOR Vulnerability in Order Tracking System Exposes Customer Data | https://jxycybersec.medium.com/critical-idor-vulnerability-in-order-tracking-system-exposes-customer-data-a9dbae34d329?source=rss------bug_bounty-5 | Digvijay Gholase | bug-bounty-tips, bug-bounty, information-security, cybersecurity, bug-bounty-writeup | 05-Mar-2025 |
| 100 Kali Linux Commands for Penetration Testing | https://medium.com/@kanastain1/100-kali-linux-commands-for-penetration-testing-bf578c53b5b6?source=rss------bug_bounty-5 | Kanastain | penetration-testing, cybersecurity, bug-bounty, pentest | 05-Mar-2025 |
| How to Become a Bug Bounty Hunter ️♂️ | https://medium.com/@vipulsonule71/how-to-become-a-bug-bounty-hunter-%EF%B8%8F-%EF%B8%8F-daac7a6a4f16?source=rss------bug_bounty-5 | Vipul Sonule | hacking, cybersecurity, bug-bounty-tips, penetration-testing, bug-bounty | 05-Mar-2025 |
| Cracking the Code: Unveiling the Hidden Dangers of Account Takeover | https://osintteam.blog/cracking-the-code-unveiling-the-hidden-dangers-of-account-takeover-487fb5407c2c?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty-tips, infosec-write-ups, bug-bounty, account-takeover, bug-bounty-writeup | 05-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-115) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-115-35780b6d6fe4?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips, hacking | 05-Mar-2025 |
| How to Run a Bug Bounty Program Without the Overhead | https://medium.com/@hackrate/how-to-run-a-bug-bounty-program-without-the-overhead-bc12bcd87c56?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, hacking, bug-bounty-tips, ethical-hacking, cybersecurity | 05-Mar-2025 |
| How I Hacked NASA and Got a P1 on Bugcrowd | https://0xjin.medium.com/how-i-hacked-nasa-and-got-a-p1-on-bugcrowd-512541e57eab?source=rss------bug_bounty-5 | 0xJin | bugbounty-writeup, ethical-hacking, bugbounty-poc, bug-bounty, bugbounty-tips | 05-Mar-2025 |
| How to find IDORs | https://medium.com/@julius.grosserode.19/how-to-find-idors-595424fe5fce?source=rss------bug_bounty-5 | Julio | idor-vulnerability, idor, owasp-top-10, api, bug-bounty | 05-Mar-2025 |
| My Bug Bounty Journey: Mistakes I Made and Advice for Beginners | https://medium.com/@aminouji23/my-bug-bounty-journey-mistakes-i-made-and-advice-for-beginners-6b4d23ba50b3?source=rss------bug_bounty-5 | Aminouji | methodology, bug-bounty, cybersecurity, mystery | 05-Mar-2025 |
| How IDOR and Broken Access Control Exposed Private Data and Earned Me $4,000 in 1 Day | https://medium.com/@ibtissamhammadi/how-idor-and-broken-access-control-exposed-private-data-and-earned-me-4-000-in-1-day-dd01a07e93e4?source=rss------bug_bounty-5 | Ibtissam Hammadi | idor, bug-bounty, web-application-security, ethical-hacking, broken-access-control | 05-Mar-2025 |
| BreachSeek - Multi-Agent Automated Penetration Tester | https://gaya3-r.medium.com/breachseek-multi-agent-automated-penetration-tester-b5fd61dab0a4?source=rss------bug_bounty-5 | gayatri r | bug-bounty-writeup, pentesting, bug-bounty, llm-pentesting | 05-Mar-2025 |
| Automating Information Gathering in Cloud Environments | https://cyberw1ng.medium.com/automating-information-gathering-in-cloud-environments-ee1e56a4f6bd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | automation, osint, cloud, bug-bounty, cybersecurity | 05-Mar-2025 |
| The Prefix, The Suffix, and the SQL Injection That Almost Got Away | https://clarkvoss.medium.com/the-prefix-the-suffix-and-the-sql-injection-that-almost-got-away-b76376cb74e1?source=rss------bug_bounty-5 | Clark Voss | hacking, cybersecurity, security, hacking-tools, bug-bounty | 05-Mar-2025 |
| Finding Exposed AWS Buckets Like a Pro! : Bug Bounty Recon [Part-2] | https://medium.com/@hrofficial62/finding-exposed-aws-buckets-like-a-pro-bug-bounty-recon-part-2-81012428256f?source=rss------bug_bounty-5 | Mr Horbio | hacking, cybersecurity, pentesting, bug-bounty, ethical-hacking | 04-Mar-2025 |
| different types of burp suite extensions for bug hunting and penetration testing | https://osintteam.blog/different-types-of-burp-suite-extensions-for-bug-hunting-and-penetration-testing-ebc80ec14aa7?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, penetration-testing, tips, cybersecurity, burpsuite | 04-Mar-2025 |
| How I Achieved the Hall of Fame on a U.S. Government Website | https://medium.com/@Abhijeet_kumawat_/how-i-achieved-the-hall-of-fame-on-a-u-s-government-website-8ff6fbdcf176?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, cybersecurity, infosec, hacking, us-government | 04-Mar-2025 |
| Why beginners should look for open redirect vulnerabilities: An easy win in ethical hacking | https://medium.com/@vivekps143/why-beginners-should-look-for-open-redirect-vulnerabilities-an-easy-win-in-ethical-hacking-18fe21cf630d?source=rss------bug_bounty-5 | Vivek PS | programming, hacking, cybersecurity, bugbounty-writeup, bug-bounty | 04-Mar-2025 |
| Rate limit bypass lead to OTP bypass($600) | https://bytesnull44.medium.com/rate-limit-bypass-lead-to-otp-bypass-600-f64f39f9e130?source=rss------bug_bounty-5 | Bytesnull | hackerone, bug-bounty, bugcrowd, cybersecurity | 04-Mar-2025 |
| The Mindset of a Successful Bug Bounty Hunter: Think Like a Hacker, Act Like a Scientist | https://medium.com/@vivekps143/the-mindset-of-a-successful-bug-bounty-hunter-think-like-a-hacker-act-like-a-scientist-744253e2f091?source=rss------bug_bounty-5 | Vivek PS | artificial-intelligence, bug-bounty, ethical-hacking, programming, cybersecurity | 04-Mar-2025 |
| Advanced Bug Hunting Techniques: Unearthing Unique Bugs with AI and Exploits | https://medium.com/@codelinex/advanced-bug-hunting-techniques-unearthing-unique-bugs-with-ai-and-exploits-d404b7aa9c4b?source=rss------bug_bounty-5 | CodelineX Pvt Ltd | bug-bounty, hacking, cybersecurity | 04-Mar-2025 |
| The Underground Art of Client-Side Bug Hunting: Uncovering Hidden Vulnerabilities in Web… | https://medium.com/@codelinex/the-underground-art-of-client-side-bug-hunting-uncovering-hidden-vulnerabilities-in-web-899330fcb6e5?source=rss------bug_bounty-5 | CodelineX Pvt Ltd | cybersecurity, internet, bug-bounty, hacking | 04-Mar-2025 |
| I hack the online gambling via xss upload (part 2) (3500 USD) | https://bytesnull44.medium.com/i-hack-the-online-gambling-via-xss-upload-part-2-3500-usd-18fb7646b506?source=rss------bug_bounty-5 | Bytesnull | cybersecurity, bug-bounty-tips, xss-vulnerability, xss-attack, bug-bounty | 04-Mar-2025 |
| The Art of WAF Bypass: Advanced Techniques and Strategies for Ethical Hackers | https://medium.com/@codelinex/the-art-of-waf-bypass-advanced-techniques-and-strategies-for-ethical-hackers-d8f05cea0353?source=rss------bug_bounty-5 | CodelineX Pvt Ltd | hacking, cybersecurity, bug-bounty-tips, cyber-security-awareness, bug-bounty | 04-Mar-2025 |
| ️♂️ When Google Became My Personal Vulnerability Scanner and helped me to find Exposed… | https://hiddendom.medium.com/%EF%B8%8F-%EF%B8%8F-when-google-became-my-personal-vulnerability-scanner-and-helped-me-to-find-exposed-d1d28d24d2ac?source=rss------bug_bounty-5 | Gokuleswaran B | dorks, bug-bounty-tips, bug-bounty-writeup, vulnerability, bug-bounty | 04-Mar-2025 |
| I hack the online gambling via xss upload (part 1) 5000 USD) | https://bytesnull44.medium.com/i-hack-the-online-gambling-via-xss-upload-part-1-5000-usd-7a27bedd03a5?source=rss------bug_bounty-5 | Bytesnull | hacking, bugbounty-writeup, cybersecurity, bug-bounty | 04-Mar-2025 |
| Critical IDOR on chat message (1000 USD) | https://bytesnull44.medium.com/critical-idor-on-chat-message-1000-usd-e07f3a28730d?source=rss------bug_bounty-5 | Bytesnull | bugbounty-tips, cybersecurity, hacking, bug-bounty | 04-Mar-2025 |
| Bypassing Client-Side Controls | https://medium.com/@muhammad4208/bypassing-client-side-controls-6f85c97747d7?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-program, bug-bounty-hunter, bug-bounty, bug-bounty-tips, web-testing | 4-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-114) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-114-930889caa359?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, ethical-hacking, cybersecurity, hacking, bug-bounty | 4-Mar-2025 |
| $1500 Blind Sql injection via json body | https://bytesnull44.medium.com/1500-blind-sql-injection-via-json-body-4091bf8b02cc?source=rss------bug_bounty-5 | Bytesnull | vulnerability, infosec, cybersecurity, bug-bounty | 4-Mar-2025 |
| Day 22: Account Takeover Worth $1000 | https://medium.com/@danielbelay/day-22-account-takeover-worth-1000-a07ef7dd460f?source=rss------bug_bounty-5 | dani3l | bug-bounty, cybersecurity, account-takeover, ethical-hacking | 4-Mar-2025 |
| Blind SSRF with Out-of-Band Detection | https://medium.com/@codingbolt.in/blind-ssrf-with-out-of-band-detection-0d53e2986a73?source=rss------bug_bounty-5 | codingbolt | ethical-hacking, ssrf, bug-bounty-tips, bug-bounty, ssrf-attack | 04-Mar-2025 |
| Advanced Dorking Methodology for Finding Vulnerabilities (Part 2) | https://hackersatty.medium.com/advanced-dorking-methodology-for-finding-vulnerabilities-part-2-47a251b245c1?source=rss------bug_bounty-5 | hackersatty | medium, bug-bounty-writeup, bug-bounty-tips, google-dork, bug-bounty | 04-Mar-2025 |
| Unauthenticated SharePoint File Enumeration and Downloading | https://soltanali0.medium.com/unauthenticated-sharepoint-file-enumeration-and-downloading-a39ecc07e688?source=rss------bug_bounty-5 | soltanali0 | sharepoint, microsoft, bug-bounty, hacking | 04-Mar-2025 |
| How to Use Automated Tools for Information Gathering | https://medium.com/@vipulsonule71/how-to-use-automated-tools-for-information-gathering-779bae995dc8?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, writing, technology, hacking, cybersecurity | 04-Mar-2025 |
| Breaking and Fixing My Way Into Cybersecurity | https://medium.com/@MutexSec/breaking-and-fixing-my-way-into-cybersecurity-1c888d959823?source=rss------bug_bounty-5 | Exhaustedmutex | penetration-testing, technology, cybersecurity, bug-bounty, journal | 04-Mar-2025 |
| Footprinting & Information Gathering Master Index | https://medium.com/@0xizen/footprinting-information-gathering-master-index-84f00469f45a?source=rss------bug_bounty-5 | Shashi Raj Jha | red-team, information-gathering, footprinting, bug-bounty, bug-bounty-tips | 04-Mar-2025 |
| Do CTFs Really Make You Better at Hacking? | https://medium.com/@HackerNasr/do-ctfs-really-make-you-better-at-hacking-3975e9295266?source=rss------bug_bounty-5 | HackerNasr | bug-bounty-tips, hacking, ctf, bug-bounty, capture-the-flag | 04-Mar-2025 |
| Top 50 Reconnaissance Tools for 2025 | https://medium.com/@codingbolt.in/top-50-reconnaissance-tools-for-2025-711ab067c737?source=rss------bug_bounty-5 | codingbolt | recon, cybersecurity, bug-bounty, reconnaissance, ethical-hacking | 04-Mar-2025 |
| SSRF and the Pitfalls of Blacklist-Based Input Filters | https://medium.com/@codingbolt.in/ssrf-and-the-pitfalls-of-blacklist-based-input-filters-b19e4765fa6d?source=rss------bug_bounty-5 | codingbolt | ethical-hacking, ssrf-attack, ssrf, bug-bounty, bug-bounty-tips | 04-Mar-2025 |
| How I Discovered One More Easy Bug in 5 Minutes | https://medium.com/@Abhijeet_kumawat_/how-i-discovered-one-more-easy-bug-in-5-minutes-e1f07ac766f6?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, infosec, bug-bounty, cybersecurity, money | 04-Mar-2025 |
| Guide to Downloading, Installing, and Configuring Burp Suite Professional on Kali Linux | https://abhinav-porwal.medium.com/guide-to-downloading-installing-and-configuring-burp-suite-professional-on-kali-linux-19ca40b0bba4?source=rss------bug_bounty-5 | Abhinav Porwal | burp-suite-pro, bug-bounty, burpsuite, cybersecurity, ethical-hacking | 04-Mar-2025 |
| Bug Bounty Journey — Valid Report Part 4 | https://medium.com/@0xF3r4t/bug-bounty-journey-valid-report-part-4-b7bc49aaa737?source=rss------bug_bounty-5 | 0xF3r4t | wayback-machine, bug-bounty | 04-Mar-2025 |
| Streamline Reconnaissance with NetSanitizer: A URL Deduplication Powerhouse for Bug Bounty Hunters | https://medium.com/@iamsecure1920/streamline-reconnaissance-with-netsanitizer-a-url-deduplication-powerhouse-for-bug-bounty-hunters-a2832821b03c?source=rss------bug_bounty-5 | iamsecure1920 (Sai Krishna Sobila ) | bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips, bounty-program | 04-Mar-2025 |
| $50-$100 worth Sensitive Leaks via Google Dorks | Part 1 | https://infosecwriteups.com/50-100-worth-sensitive-leaks-via-google-dorks-part-1-b5e72af87513?source=rss------bug_bounty-5 | It4chis3c | google, bug-bounty, google-dork, secrets, dorking | 04-Mar-2025 |
| Day 0: Starting My 100-Day Bug Bounty Journey | https://medium.com/@swethas274/day-0-starting-my-100-day-bug-bounty-journey-37d032c853d3?source=rss------bug_bounty-5 | Swetha | side-hustle, bug-bounty, cybersecurity, hacking, 100daychallenge | 04-Mar-2025 |
| Best Browser Extensions for Bug Hunting and Cybersecurity | https://abhinav-porwal.medium.com/best-browser-extensions-for-bug-hunting-and-cybersecurity-5cfc4866cdab?source=rss------bug_bounty-5 | Abhinav Porwal | information-security, cybersecurity, hacking, bug-bounty, bug-bounty-tips | 04-Mar-2025 |
| How to Find Your First Easy Bug as a Bug Bounty Hunter (Step-by-Step Guide) | https://abhinav-porwal.medium.com/how-to-find-your-first-easy-bug-as-a-bug-bounty-hunter-step-by-step-guide-151f3150ba4e?source=rss------bug_bounty-5 | Abhinav Porwal | ethical-hacking, cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 04-Mar-2025 |
| How i breached the US federal goverment and found 10,000 plus classfied infomation | https://medium.com/@coffeeaddict_exe/how-i-breached-the-us-federal-goverment-and-found-10-000-plus-classfied-infomation-dfac687a8c44?source=rss------bug_bounty-5 | CoffeeAddict | usa, bug-bounty, government, bug-bounty-tips, hacking | 04-Mar-2025 |
| How I Made $5,000 in 3 Days with Bounty Hunting (No Experience Needed) | https://medium.com/@ibtissamhammadi/how-i-made-5-000-in-3-days-with-bounty-hunting-no-experience-needed-9050f3548a84?source=rss------bug_bounty-5 | Ibtissam Hammadi | beginners-guide, cybersecurity, ethical-hacking, bug-bounty, earn-money-online | 04-Mar-2025 |
| From Zero to Hero: Your Step-by-Step Guide to Bagging Your First Bug Bounty (With Real-World… | https://krishna-cyber.medium.com/from-zero-to-hero-your-step-by-step-guide-to-bagging-your-first-bug-bounty-with-real-world-0e2f63ac0030?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, bug-bounty-writeup, bug-zero, bugs, bug-bounty-tips | 04-Mar-2025 |
| Auth Bypass & Unauthorized Access via Hidden Login | https://medium.com/@hossam_hamada/auth-bypass-unauthorized-access-via-hidden-login-65bca9810ddc?source=rss------bug_bounty-5 | Hossam Hamada | bug-bounty-tips, hackerone, bugbounty-writeup, bug-bounty | 04-Mar-2025 |
| Sensitive API Key Leakage Report Disclosure: AWS VDP | https://cyberw1ng.medium.com/sensitive-api-key-leakage-report-disclosure-aws-vdp-b26806e1ecd1?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cloud, programming, jobs, bug-bounty, cybersecurity | 04-Mar-2025 |
| The Art of Recon: Hunting Bugs Before They Hide — Part Three (From Recon to Reward) | https://zeusvuln.medium.com/the-art-of-recon-hunting-bugs-before-they-hide-part-three-from-recon-to-reward-c9eea7cf5b10?source=rss------bug_bounty-5 | ZeUsVuLn | bug-bounty-tips, bug-bounty-writeup, reconnaissance, cybersecurity, bug-bounty | 04-Mar-2025 |
| Defining the Pentest Scope: OWASP ZAP Context & Subdomains | https://err0rsecur1ty.medium.com/defining-the-pentest-scope-owasp-zap-context-subdomains-7e5ff5dfd74d?source=rss------bug_bounty-5 | Zehzah M.A | ( Err0r_SecuR1ty ) | ethical-hacking, cybersecurity, owaspzap, bug-bounty, penetration-testing | 04-Mar-2025 |
| I Discovered a Critical Security Flaw That Changed How I Protect My Data Forever | https://medium.com/@ibtissamhammadi/i-discovered-a-critical-security-flaw-that-changed-how-i-protect-my-data-forever-30becd75d83c?source=rss------bug_bounty-5 | Ibtissam Hammadi | cybersecurity, critical-security, ethical-hacking, bug-bounty, bug-bounty-hunting | 03-Mar-2025 |
| Mastering XSS on the Fly: The Ultimate Guide to Web Vulnerabilities and Bug Bounties | https://cybersecuritywriteups.com/mastering-xss-on-the-fly-the-ultimate-guide-to-web-vulnerabilities-and-bug-bounties-78502107ea9b?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, idor, osint, infosec-write-ups, xss-attack | 03-Mar-2025 |
| From Zero to Hero: How I Uncovered a Critical Privilege Escalation Flaw and Earned $500 | https://cybersecuritywriteups.com/from-zero-to-hero-how-i-uncovered-a-critical-privilege-escalation-flaw-and-earned-500-c6be96484090?source=rss------bug_bounty-5 | Krish_cyber | osint, bug-bounty-tips, bug-bounty, info-sec-writeups, information-security | 03-Mar-2025 |
| ChatGPT for Bug Bounty Hunters: Custom Payloads, Automated Scripts, and More | https://medium.com/@Abhijeet_kumawat_/chatgpt-for-bug-bounty-hunters-custom-payloads-automated-scripts-and-more-125aef1e9a80?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, cybersecurity, infosec, hacking, money | 03-Mar-2025 |
| How to choose a target for Bug-Bounty to earn extra $$$. | https://medium.com/@anandrishav2228/how-to-choose-a-target-for-bug-bounty-to-earn-extra-d081bcd93692?source=rss------bug_bounty-5 | Rishav anand | money, hacking, bug-bounty-tips, cybersecurity, bug-bounty | 03-Mar-2025 |
| A BIG MISCONCEPTION: “MY ORGANISATION IS NOT MATURE ENOUGH FOR BUG BOUNTY” | https://medium.com/@hackrate/a-big-misconception-my-organisation-is-not-mature-enough-for-bug-bounty-93c87b131baf?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, hacking, bug-bounty-tips, bug-bounty, ethical-hacking | 03-Mar-2025 |
| Qumursqa mukofoti | https://medium.com/@buckybyte/qumursqa-mukofoti-1200f848d1b7?source=rss------bug_bounty-5 | Bucky Byte | bug-bounty | 03-Mar-2025 |
| Setting Up XSSHunter(Latest) with Docker and Cloudflare Proxy | https://petruknisme.medium.com/setting-up-xsshunter-latest-with-docker-and-cloudflare-proxy-6c35db80762c?source=rss------bug_bounty-5 | Aan | xsshunter, xs, web-pentesting, pentest, bug-bounty | 03-Mar-2025 |
| Advanced Open Redirection Techniques and Exploitation Using Burp Suite Dynamic Analysis | https://medium.com/@shadyfarouk1986/advanced-open-redirection-techniques-and-exploitation-using-burp-suite-dynamic-analysis-6d6f5bc23f66?source=rss------bug_bounty-5 | Shady Farouk | bug-bounty, bug-bounty-writeup, pentesting, hacking | 03-Mar-2025 |
| You Have No Experience, But Want to Start Bug Bounty Hunting? | https://systemweakness.com/you-have-no-experience-but-want-to-start-bug-bounty-hunting-0fd4e5d700d9?source=rss------bug_bounty-5 | HackerNasr | bug-bounty, ethical-hacking, careers, career-advice, hacking | 03-Mar-2025 |
| Server-Side Request Forgery (SSRF): Attacking Internal Networks via External Requests | https://medium.com/ssd-secure-disclosure/server-side-request-forgery-ssrf-attacking-internal-networks-via-external-requests-333afd84ce94?source=rss------bug_bounty-5 | Oded van Kloeten | ssrf, code, bug-bounty, cybersecurity, hacking | 03-Mar-2025 |
| The Curious Case of a Patched IDOR and the Rabbit Hole That Followed | https://medium.com/@stephenuchechukwu68/the-curious-case-of-a-patched-idor-and-the-rabbit-hole-that-followed-04a40297e5fd?source=rss------bug_bounty-5 | Stephenuchechukwu | cybersecurity, ethical-hacking, bug-bounty | 03-Mar-2025 |
| Secret Google Dorks to Find Bug Bounty Programs | https://medium.com/@Abhijeet_kumawat_/secret-google-dorks-to-find-bug-bounty-programs-3896014e79ce?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, cybersecurity, google-dork, secrets, bug-bounty | 03-Mar-2025 |
| Basic SSRF Against Another Back-End System | https://medium.com/@codingbolt.in/basic-ssrf-against-another-back-end-system-5f285cd83b0a?source=rss------bug_bounty-5 | codingbolt | bugs, ssrf, bug-bounty-tips, ssrf-attack, bug-bounty | 03-Mar-2025 |
| My First Private Bug Bounty Invitation — The Real Game Begins | https://medium.com/@sivasankardas/my-first-private-bug-bounty-invitation-the-real-game-begins-f80af1133f25?source=rss------bug_bounty-5 | Sivasankardas | reconnaissance, hall-of-fame, cybersecurity, bug-bounty, cross-site-scripting-xss | 03-Mar-2025 |
| Asset discovery with favicon hash. | https://medium.com/infosecmatrix/asset-discovery-with-favicon-hash-267cea766385?source=rss------bug_bounty-5 | loyalonlytoday | tips, favicon, programming, cybersecurity, bug-bounty | 03-Mar-2025 |
| IDOR Allows Attackers to Delete Any User’s Identity Documents | IDOR | $$$$ | https://medium.com/@Bug_Slay3r/idor-allows-attackers-to-delete-any-users-identity-documents-idor-18f0cc901d16?source=rss------bug_bounty-5 | Shrujal Mandawkar | vulnerability, bug-bounty-tips, bug-bounty-writeup, bug-bounty, bugs | 03-Mar-2025 |
| Bug Bounty Hunting with Censys: Finding an Unsecured Elasticsearch Instance and Reporting It | https://medium.com/@hacker_might/bug-bounty-hunting-with-censys-finding-an-unsecured-elasticsearch-instance-and-reporting-it-13a619cc0b4e?source=rss------bug_bounty-5 | hacker_might | bug-bounty, reconnaissance, censys, bug-bounty-writeup, threat-intelligence | 03-Mar-2025 |
| “I Missed $2,200 by Closing Burp Suite Too Fast — Here’s How You Can Avoid My Costly Mistake” | https://cybersecuritywriteups.com/i-missed-2-200-by-closing-burp-suite-too-fast-heres-how-you-can-avoid-my-costly-mistake-91dc2e1d865d?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, bug-bounty-tips, infosec-write-ups, cybersecurity, osint | 03-Mar-2025 |
| How I Uncovered an Email Leak That Could Have Cost Millions | https://krishna-cyber.medium.com/how-i-uncovered-an-email-leak-that-could-have-cost-millions-66500548d0b6?source=rss------bug_bounty-5 | Krish_cyber | infosec-write-ups, information-security, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 03-Mar-2025 |
| Hacking My Way to $3,000: Unmasking a Sneaky IDOR Vulnerability ️♂️ | https://cybersecuritywriteups.com/hacking-my-way-to-3-000-unmasking-a-sneaky-idor-vulnerability-%EF%B8%8F-%EF%B8%8F-06ebcb65ba9a?source=rss------bug_bounty-5 | Krish_cyber | vulnerability, osint, infosec-write-ups, hacking, bug-bounty | 03-Mar-2025 |
| Local File Disclosure/.. | https://medium.com/@julius.grosserode.19/local-file-disclosure-743f88291211?source=rss------bug_bounty-5 | Julio | local-file-read, bugs, bug-bounty, directory-traversal, local-file-exposure | 03-Mar-2025 |
| Discovering Sensitive Information Using GitHub Dorks | https://cyberw1ng.medium.com/discovering-sensitive-information-using-github-dorks-10fd7e032bbd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, github, careers, programming, cybersecurity | 03-Mar-2025 |
| Subdomain Takeover: How I Almost Snatched a Vulnerable Subdomain (But Was Too Late!)c | https://medium.com/@AhmedSamy-X/subdomain-takeover-how-i-almost-snatched-a-vulnerable-subdomain-but-was-too-late-c-a2a0afe7b2d9?source=rss------bug_bounty-5 | Ahmedsamy | ethical-hacking, cybersecurity, bug-bounty | 03-Mar-2025 |
| Discovering 3 in a Row: BAC Read-only Vulnerabilities Total $4,182 | https://medium.com/@robert0/discovering-3-in-a-row-bac-read-only-vulnerabilities-total-4-182-59c93b753eb8?source=rss------bug_bounty-5 | Mr Robert | Ahmed M Hassan | hackerone, bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup | 03-Mar-2025 |
| Cross-System Communication: Injection Vulnerabilities Internals | https://kalawy.medium.com/cross-system-communication-injection-vulnerabilities-internals-19d406bb57d5?source=rss------bug_bounty-5 | Kalawy | security-research, bug-bounty, sql-injection, vulnerability, web-attack | 03-Mar-2025 |
| How Reading Disclosed Bug Bounty Reports Can Make You a Better Hacker — And Even Earn You Some… | https://medium.com/@weaponshot/how-reading-disclosed-bug-bounty-reports-can-make-you-a-better-hacker-and-even-earn-you-some-45fb4d1adf4d?source=rss------bug_bounty-5 | Matyis Kong | hackerone, hacking, bugcrowd, cybersecurity, bug-bounty | 03-Mar-2025 |
| Cómo TLS Pass Through Ayuda a Reducir el Ruido en Burp Suite | https://medium.com/@ArtsSEC/c%C3%B3mo-tls-pass-through-ayuda-a-reducir-el-ruido-en-burp-suite-091b2b06d165?source=rss------bug_bounty-5 | ArtsSEC | bug-bounty, pentesting, security, infosec, burpsuite | 03-Mar-2025 |
| Discovering Sensitive Information Using GitHub Dorks | https://osintteam.blog/discovering-sensitive-information-using-github-dorks-10fd7e032bbd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, github, careers, programming, cybersecurity | 03-Mar-2025 |
| Web Vulnerabilities 104: Dependency Confusion — When Your App Trusts the Wrong Stranger! | https://medium.com/@shadyfarouk1986/web-vulnerabilities-104-dependency-confusion-when-your-app-trusts-the-wrong-stranger-46be46fecb93?source=rss------bug_bounty-5 | Shady Farouk | bug-bounty, bugbounty-writeup | 02-Mar-2025 |
| How I Found Sensitive Information Disclosure | https://medium.com/@Abhijeet_kumawat_/how-i-found-sensitive-information-disclosure-21533fb8c6d2?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, sensitive-information, white-hat-hacker, hacking, cybersecurity | 02-Mar-2025 |
| Blind SQL Injection in Oracle Database: Exfiltrating Data with Burp Collaborator — SQL Injection… | https://infosecwriteups.com/blind-sql-injection-in-oracle-database-exfiltrating-data-with-burp-collaborator-sql-injection-2b8062b04d51?source=rss------bug_bounty-5 | Bash Overflow | sql-injection-oracle-db, sqli-data-exfiltration, bug-bounty, blind-sql-injection, bug-bounty-writeup | 02-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-113) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-113-572a98bcfbe0?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty, bug-bounty-tips, hacking, ethical-hacking | 02-Mar-2025 |
| Day 21: Full Account Takeover via Open Redirection | https://medium.com/@danielbelay/day-21-full-account-takeover-via-open-redirection-5f3ca7f0c726?source=rss------bug_bounty-5 | dani3l | bug-bounty, cybersecurity, account-takeover, account-takeover-attacks | 02-Mar-2025 |
| CVE-2024–57062: The iOS App That Keeps You Logged In — Even After Uninstalling | https://medium.com/@sahildabhilkar4/cve-2024-57062-the-ios-app-that-keeps-you-logged-in-even-after-uninstalling-ecc334997b7f?source=rss------bug_bounty-5 | Sahildabhilkar | vulnerability-disclosure, cybersecurity, cve, bug-bounty, ios-security | 02-Mar-2025 |
| This is The Easiest Bug You Can Find✨ | https://medium.com/@Abhijeet_kumawat_/this-is-the-easiest-bug-you-can-find-b418fade22ee?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, hacking, infosec, money, cybersecurity | 02-Mar-2025 |
| Open Redirects | https://medium.com/@julius.grosserode.19/open-redirects-7337ea352c93?source=rss------bug_bounty-5 | Julio | xss-vulnerability, open-redirect, xss-attack, redirect, bug-bounty | 02-Mar-2025 |
| The Idor vulnerability and its impact on users safely | https://medium.com/@Dorking1/steps-to-reproduce-the-vulnerability-df7c7c242507?source=rss------bug_bounty-5 | Dorking1 | penetration-testing, bug-bounty | 02-Mar-2025 |
| I’ve just discovered a new tool that looks very promising: WPProbe, a WordPress security scanner. | https://medium.com/@bidushtripathi/ive-just-discovered-a-new-tool-that-looks-very-promising-wpprobe-a-wordpress-security-scanner-266f2da3bbac?source=rss------bug_bounty-5 | ProgHub | bug-bounty, web-development, cybersecurity, hacking, linux | 02-Mar-2025 |
| TOP 10 Hacking OAuth 2.0 Techniques — Part 1 | https://medium.com/@itamar.yochpaz/top-10-hacking-oauth-2-0-techniques-part-1-107238663a03?source=rss------bug_bounty-5 | Itamar Yochpaz | penetration-testing, cybersecurity, bug-bounty, application-security, hacking | 02-Mar-2025 |
| HackTheBox: APKey Mobile Challenge | https://medium.com/@k3r0/hackthebox-apkey-mobile-challenge-6e3cf5647c2d?source=rss------bug_bounty-5 | Kyrillos nady | hackthebox, bug-bounty, android, mobile, red-team | 02-Mar-2025 |
| From Web Cache Poisoning to Persistent XSS — A High Severity Bug | https://medium.com/@HackerNasr/from-web-cache-poisoning-to-persistent-xss-a-high-severity-bug-87bb6c19239d?source=rss------bug_bounty-5 | HackerNasr | pentesting, bug-bounty, ethical-hacking, cybersecurity, hacking | 02-Mar-2025 |
| 2/30 Cryptographic Failures Bug | https://jooexploit.medium.com/2-30-cryptographic-failures-bug-3c8f9efa523e?source=rss------bug_bounty-5 | Jooexploit | bug-bounty, writeup, cryptographic | 02-Mar-2025 |
| Cloud Security Roadmap | https://medium.com/offensive-black-hat-hacking-security/cloud-security-roadmap-702fdb0815ca?source=rss------bug_bounty-5 | Harshad Shah | bug-bounty, cloud-security, penetration-testing, cloud, cybersecurity | 02-Mar-2025 |
| Top 10 Tools for Bug Bounty Hunting in 2025 | https://bitpanic.medium.com/top-10-tools-for-bug-bounty-hunting-in-2025-52cd7c34094d?source=rss------bug_bounty-5 | Spectat0rguy | ai-generated-content, cybersecurity, technology, programming, bug-bounty | 02-Mar-2025 |
| How I Uncovered IDOR, XSS, and Full Account Takeover in a Single Hunt | https://krishna-cyber.medium.com/how-i-uncovered-idor-xss-and-full-account-takeover-in-a-single-hunt-acfce2f9a84f?source=rss------bug_bounty-5 | Krish_cyber | xss-attack, bug-bounty, hacking, idor, infosec-write-ups | 02-Mar-2025 |
| Bypassing 2FA: Advanced Techniques Hackers Use & How to Stop Them | https://medium.com/@rishishakya30/bypassing-2fa-advanced-techniques-hackers-use-how-to-stop-them-4e7de384258a?source=rss------bug_bounty-5 | CodelineX Pvt Ltd | cybersecurity, bug-bounty | 02-Mar-2025 |
| MongoDB Penetration Testing: A Comprehensive Guide | https://infosecwriteups.com/mongodb-penetration-testing-a-comprehensive-guide-df80d829f060?source=rss------bug_bounty-5 | Ajay Naik | information-technology, bug-bounty, information-security, cybersecurity, cyberattack | 02-Mar-2025 |
| Finding a Publicly Accessible Asset Leak: How I Reported a Critical Vulnerability ##NASA | https://medium.com/@ashokpandiya71/finding-a-publicly-accessible-asset-leak-how-i-reported-a-critical-vulnerability-nasa-9fd626df59f5?source=rss------bug_bounty-5 | Ashok kumar pareek | bug-bounty, bug-bounty-tips, bug-bounty-writeup, cybersecurity, hall-of-fame | 02-Mar-2025 |
| How I Exploited an OTP Vulnerability & Reported It! $$$ | https://medium.com/@Bug_Slay3r/how-i-exploited-an-otp-vulnerability-reported-it-660da35d997a?source=rss------bug_bounty-5 | Shrujal Mandawkar | bug-bounty-writeup, vulnerability, bug-bounty-tips, bug-bounty, bugs | 02-Mar-2025 |
| How to Earn Bug Bounties with GitHub: A Practical Guide for Beginners | https://cyberw1ng.medium.com/how-to-earn-bug-bounties-with-github-a-practical-guide-for-beginners-20463cf2c125?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, programming, git, cybersecurity, bug-bounty | 02-Mar-2025 |
| Day 114 — Exploring Cyber Bug Bounty Programs | https://medium.com/@thecyberkid12/day-114-exploring-cyber-bug-bounty-programs-41b0cc2790fb?source=rss------bug_bounty-5 | Sushrita Swain | bug-bounty, cybersecurity | 02-Mar-2025 |
| Day 113 — Exploring Bug Bounty Programs and Capture the Flag Challenges | https://medium.com/@thecyberkid12/day-113-exploring-bug-bounty-programs-and-capture-the-flag-challenges-ba4d45092e1f?source=rss------bug_bounty-5 | Sushrita Swain | cybersecurity, capture-the-flag, ctf, bug-bounty | 02-Mar-2025 |
| How to Identify Sensitive Data in JavaScript Files | https://medium.com/@khalyylgam/how-to-identify-sensitive-data-in-javascript-files-b0bb7eb6d948?source=rss------bug_bounty-5 | Khalil Gammar | javascript, bug-bounty, web-exploitation | 02-Mar-2025 |
| How I was able to get two account takeovers via OAuth custom scheme hijacking at the same target | https://medium.com/@AlQa3Qa3_M0X0101/how-i-was-able-to-get-two-account-takeovers-via-oauth-custom-scheme-hijacking-at-the-same-target-6a6980ebbac1?source=rss------bug_bounty-5 | Mohamed reda | bug-bounty-tips, android-security, penetration-testing, bug-bounty | 01-Mar-2025 |
| HTML Injection vulnerability in Google | https://medium.com/@Abhijeet_kumawat_/html-injection-vulnerability-in-google-cb2c73ca5996?source=rss------bug_bounty-5 | Abhijeet Kumawat | money, bug-bounty, hacking, cybersecurity, infosec | 01-Mar-2025 |
| Finding Exposed AWS Buckets Like a Pro! : Bug Bounty Recon | https://medium.com/@hrofficial62/finding-exposed-aws-buckets-like-a-pro-bug-bounty-recon-c193cc1f9af5?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, bug-bounty, hacking, ethical-hacking, pentesting | 01-Mar-2025 |
| WordPress ‘xmlrpc.php’ (CVE-2020–28036) — old is gold | https://osintteam.blog/wordpress-xmlrpc-php-cve-2020-28036-old-is-gold-a0b9c301fbac?source=rss------bug_bounty-5 | Abhishek pawar | bug-bounty, ai, programming, wordpress, pi | 01-Mar-2025 |
| Web Application Recon Guide : | https://medium.com/@zerohackerone0/web-application-recon-guide-d010e7761d85?source=rss------bug_bounty-5 | Houssam Miliani | cybersecurity, bug-bounty, hacking | 01-Mar-2025 |
| Beyond the Script: Mastering Exploratory Testing Like a Pro | https://medium.com/@sajith-dilshan/beyond-the-script-mastering-exploratory-testing-like-a-pro-b78d6c7d95fb?source=rss------bug_bounty-5 | sajith dilshan | software-testing, bug-bounty, qa-engineer, qa, exploratory-testing | 01-Mar-2025 |
| VPS Setup for Bug Bounty | Part2 | https://systemweakness.com/vps-setup-for-bug-bounty-part2-07005bf9aa7d?source=rss------bug_bounty-5 | AbhirupKonwar | vps-hosting, information-security, pentesting, bug-bounty, ethical-hacking | 01-Mar-2025 |
| How Hackers Chain Small Bugs into a Multi-Million Dollar Exploit | https://securrtech.medium.com/how-hackers-chain-small-bugs-into-a-multi-million-dollar-exploit-1bc05dd873f9?source=rss------bug_bounty-5 | Securr - Web3 Security | smart-contract-security, web3-security, blockchain-security, smart-contract-auditing, bug-bounty | 01-Mar-2025 |
| Advanced Dorking Methodology for Finding Vulnerabilities (Part 1) | https://hackersatty.medium.com/advanced-dorking-methodology-for-finding-vulnerabilities-part-1-e3564e314819?source=rss------bug_bounty-5 | hackersatty | bug-bounty-writeup, google, medium, dorks, bug-bounty | 01-Mar-2025 |
| How I Bypassed OTP Verification with Response Manipulation | https://medium.com/@pentestersuresh01/how-i-bypassed-otp-verification-with-response-manipulation-98be8d594a3f?source=rss------bug_bounty-5 | Suresh S | otp-verification, bug-bounty, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 01-Mar-2025 |
| PUT到GET轻松收获严重漏洞 | https://medium.com/@xiaoshi666/put%E5%88%B0get%E8%BD%BB%E6%9D%BE%E6%94%B6%E8%8E%B7%E4%B8%A5%E9%87%8D%E6%BC%8F%E6%B4%9E-3d89cd29462d?source=rss------bug_bounty-5 | xiaoshi | bug-bounty, cybersecurity | 01-Mar-2025 |
| easy business logic bug allowed me to install paid applications for my organization for free | https://medium.com/@youssefmohamedelgohre1/easy-business-logic-bug-allowed-me-to-install-paid-applications-for-my-organization-for-free-c992c9959910?source=rss------bug_bounty-5 | Youssef | bug-bounty-writeup, bug-hunting, business-logic, hacking, bug-bounty | 01-Mar-2025 |
| P2 Blind XSS | https://medium.com/@0xchoudhary/p2-blind-xss-ff8206c45372?source=rss------bug_bounty-5 | Sushil Choudhary | hacking, hackerone, bounty-program, hackthebox, bug-bounty | 01-Mar-2025 |
| Bug Bounty Hunting — Complete Guide (Part-112) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-112-a1a25826fe45?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, hacking, bug-bounty-tips, ethical-hacking | 01-Mar-2025 |
| Bypassing Business Logic via Race Condition: A $500 Bounty Bug | https://medium.com/@a13h1/bypassing-business-logic-via-race-condition-a-500-bounty-bug-273396b17ec4?source=rss------bug_bounty-5 | Abhi Sharma | race-condition, infosec, bug-bounty, cybersecurity, pentesting | 01-Mar-2025 |
| Start Bug Bounty and earn $$$: Top Write-Ups, POCs & Tutorials | https://medium.com/@Abhijeet_kumawat_/start-bug-bounty-and-earn-top-write-ups-pocs-tutorials-9f88ef743524?source=rss------bug_bounty-5 | Abhijeet Kumawat | daily-blog, cybersecurity, infosec, bug-bounty, hacking | 01-Mar-2025 |
| How Bug Bounty Programs Scam Hackers and Get Away With It! | https://siratsami71.medium.com/how-bug-bounty-programs-scam-hackers-and-get-away-with-it-175fc06ea45b?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | bug-bounty, scammer, hackerone | 01-Mar-2025 |
| From Bug Bounty To Making Our Own Startup! | https://medium.com/@the.air.cyborg/from-bug-bounty-to-making-our-own-startup-4887c5627823?source=rss------bug_bounty-5 | the_air_cyborg | indie-game, enterpreneurship, startup, crowdfunding, bug-bounty | 01-Mar-2025 |
| Unlock the Power of CyberEagle Scanner! | https://medium.com/@ubaidhassan/unlock-the-power-of-cybereagle-scanner-2a6a37afc648?source=rss------bug_bounty-5 | Ubaid Khan | web, bug-bounty, penetration-testing, website, ethical-hacking | 01-Mar-2025 |
| ⚡ Find XSS Vulnerabilities in Just 2 Minutes! ⏳ | https://cybersecuritywriteups.com/find-xss-vulnerabilities-in-just-2-minutes-ba0e312bbe22?source=rss------bug_bounty-5 | Krish_cyber | osint, xss-attack, infosec-write-ups, bug-bounty, bug-bounty-tips | 01-Mar-2025 |
| Review of Security Research Articles: February 2025 | https://medium.com/meetcyber/review-of-security-research-articles-february-2025-be1791bd6761?source=rss------bug_bounty-5 | Lukasz Wierzbicki | bug-bounty, penetration-testing, security, productivity, review | 01-Mar-2025 |
| The Accidental RCE: How a Simple File Upload Led to Remote Code Execution! | https://cybersecuritywriteups.com/the-accidental-rce-how-a-simple-file-upload-led-to-remote-code-execution-c3aa19d1e8f3?source=rss------bug_bounty-5 | Krish_cyber | rce-vulnerability, idor, osint, infosec-write-ups, bug-bounty | 01-Mar-2025 |
| The Forgotten Google Services: Google Alerts | https://medium.com/pndsec/the-forgotten-google-services-google-alerts-74502ba9c963?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty, old, google, services | 01-Mar-2025 |
| Subdomain Enumeration with BBOT: Comparative Guide to Outperform Other Tools. | https://sankalppatil12112001.medium.com/subdomain-enumeration-with-bbot-comparative-guide-to-outperform-other-tools-5a4b71b28343?source=rss------bug_bounty-5 | XoX | subdomains-enumeration, cybersecurity, hacking, bug-bounty, infosec | 01-Mar-2025 |
| How a Single Vulnerability Exposed Millions! | https://medium.com/@devdharan24/how-a-single-vulnerability-exposed-millions-49fdc95f4f35?source=rss------bug_bounty-5 | DevD | hacking, security, bug-bounty, bug-bounty-writeup, cybersecurity | 01-Mar-2025 |
| Exploiting PostMessage | NahamSec | https://medium.com/@julius.grosserode.19/exploiting-postmessage-nahamsec-b24cb197a299?source=rss------bug_bounty-5 | Julio | bug-bounty, iframe, postmessage, xss-attack | 01-Mar-2025 |
| Firefox and Chrome extensions for bug bounty hunters. (PART 2) | https://osintteam.blog/firefox-and-chrome-extensions-for-bug-bounty-hunters-part-2-be175b813a9b?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, penetration-testing, extension, tips | 01-Mar-2025 |
| VPS Subdomain Monitoring | https://cybersecuritywriteups.com/vps-subdomain-monitoring-ac89050869e4?source=rss------bug_bounty-5 | AbhirupKonwar | penetration-testing, pentesting, bug-bounty-tips, bug-bounty, vps-hosting | 01-Mar-2025 |
| How I Turned the Black Basta Playbook Chat Leak into $4,000 in Just 24 Hours | https://medium.com/@ibtissamhammadi/how-i-turned-the-black-basta-playbook-chat-leak-into-4-000-in-just-24-hours-de60dff8171b?source=rss------bug_bounty-5 | Ibtissam Hammadi | cybersecurity, threat-intelligence, bug-bounty, hacking, infosec | 01-Mar-2025 |
| When ‘Disabled’ Isn’t Really Disabled! — Exploiting a Weird Logic Flaw to Destroy an Organization | https://som3a.medium.com/when-disabled-isn-t-really-disabled-exploiting-a-weird-logic-flaw-to-destroy-an-organization-17ad3d9542d0?source=rss------bug_bounty-5 | 0xSOM3A | cybersecurity, bug-bounty-writeup, business-logic-flaw, bug-bounty-tips, bug-bounty | 01-Mar-2025 |
| Insecure Direct Object Reference (IDOR) Vulnerability: A Comprehensive Guide | https://medium.com/@shadyfarouk1986/insecure-direct-object-reference-idor-vulnerability-a-comprehensive-guide-e61b66bfb20a?source=rss------bug_bounty-5 | Shady Farouk | bugbounty-writeup, bug-bounty | 01-Mar-2025 |
| $35,000 Bounty: How Inappropriate Access Control Led to GitLab Account Takeover | https://cyberw1ng.medium.com/35-000-bounty-how-inappropriate-access-control-led-to-gitlab-account-takeover-39e071b6d9cc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, jobs, cybersecurity, programming | 01-Mar-2025 |
| Time Management for Bug Hunters During Ramadan: Balancing Hacking and Life | https://medium.com/@mahdisalhi0500/time-management-for-bug-hunters-during-ramadan-balancing-hacking-and-life-1cd2bf3cea0d?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | time-management, information-security, cybersecurity, bug-bounty, infosec | 01-Mar-2025 |
| $500 How I Found XSS Using ChatGPT | https://medium.com/@Abhijeet_kumawat_/500-how-i-found-xss-using-chatgpt-54b5492af41a?source=rss------bug_bounty-5 | Abhijeet Kumawat | hacking, infosec, bug-bounty, ai, chatgpt | 28-Feb-2025 |
| root-me | web-server | lab-3 | HTTP — Open redirect walkthrough | https://medium.com/@ssh_fsociety/root-me-web-server-lab-3-http-open-redirect-walkthrough-25cdcfb53100?source=rss------bug_bounty-5 | Sarthak Dukare (ssh_fsociety) | bug-bounty, cybersecurity, web-application-security, infosec, penetration-testing | 28-Feb-2025 |
| CSRF in 2025: “Solved” But Still Bypassable | https://infosecwriteups.com/csrf-in-2025-solved-but-still-bypassable-942ca382ab77?source=rss------bug_bounty-5 | Vivek PS | web-development, cybersecurity, programming, hacking, bug-bounty | 28-Feb-2025 |
| Finding an api key in a .js file in the comments | https://infosecwriteups.com/finding-an-api-key-in-a-js-file-in-the-comments-67b30af1d451?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips, tips | 28-Feb-2025 |
| Find related files to your bug bounty target | https://infosecwriteups.com/find-related-files-to-your-bug-bounty-target-4752d769eecc?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, tips, programming, penetration-testing | 28-Feb-2025 |
| Day 20: Admin Account Takeover via Weird Password Reset Functionality | https://medium.com/@danielbelay/day-20-admin-account-takeover-via-weird-password-reset-functionality-33afb15fa4c0?source=rss------bug_bounty-5 | dani3l | account-takeover, ethical-hacking, cybersecurity, bug-bounty, bug-bounty-tips | 28-Feb-2025 |
| Best VPS for Bug Bounty & Pentesting | https://medium.com/meetcyber/best-vps-for-bug-bounty-pentesting-2b556c375f28?source=rss------bug_bounty-5 | AbhirupKonwar | vps-hosting, bug-bounty-tips, penetration-testing, pentesting, bug-bounty | 28-Feb-2025 |
| OWASP Mobile Top 10 | M3: Insecure Authentication/Authorization | https://z0enix.medium.com/owasp-mobile-top-10-m3-insecure-authentication-authorization-7b94b8f23fc3?source=rss------bug_bounty-5 | Mohamed Hamadou | technology, owasp, bug-bounty, hacking, cybersecurity | 28-Feb-2025 |
| The Road to CRTP Cert — Part 22 | https://medium.com/@dineshkumaar478/the-road-to-crtp-cert-part-22-f2a3d956448a?source=rss------bug_bounty-5 | Dineshkumaar R | bug-bounty, security, cybersecurity, crtp-exam, offensive-security | 28-Feb-2025 |
| Severity vs. Priority in Software Testing: Key Differences & Best Practices | https://medium.com/@shaktisinghQA/severity-vs-priority-in-software-testing-key-differences-best-practices-eae4e5984616?source=rss------bug_bounty-5 | Shakti Singh | bugs, bug-bounty, priority-queue, qa, testing | 28-Feb-2025 |
| Hacking Netflix for $$$ — Stored XSS + IDOR to Session Hijacking & Account Takeover | https://medium.com/@mares.viktor/hacking-netflix-for-stored-xss-idor-to-session-hijacking-account-takeover-9ba1cdeabbf8?source=rss------bug_bounty-5 | Viktor Mares | ethical-hacking, bug-bounty, cybersecurity, netflix, penetration-testing | 28-Feb-2025 |
| A Deep Dive into Open Port Vulnerabilities in Websites | https://medium.com/@sahilchangede2003/a-deep-dive-into-open-port-vulnerabilities-in-websites-b324b9edb8ae?source=rss------bug_bounty-5 | 38_Sahil _Changede | cybersecurity, bug-bounty, cybercrime, education, cyber-security-awareness | 28-Feb-2025 |
| How to Find Your First Bug and Earn Your First Bounty | https://medium.com/@Abhijeet_kumawat_/how-to-find-your-first-bug-and-earn-your-first-bounty-c2d6572eed53?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, money, bug-bounty, infosec, hacking | 28-Feb-2025 |
| بسم الله الرحمن الرحيم | https://medium.com/@dark_zone/%D8%A8%D8%B3%D9%85-%D8%A7%D9%84%D9%84%D9%87-%D8%A7%D9%84%D8%B1%D8%AD%D9%85%D9%86-%D8%A7%D9%84%D8%B1%D8%AD%D9%8A%D9%85-acec5d231cf3?source=rss------bug_bounty-5 | darkzone | bug-bounty-tips, bug-bounty | 28-Feb-2025 |
| Natural Ways to Repel Flower-Eating Bugs | https://medium.com/@deepakbhardwaj23091994/natural-ways-to-repel-flower-eating-bugs-047a9085a74b?source=rss------bug_bounty-5 | Mysticbhard | eating-bugs, bug-bounty-tips, flowers, bugs, bug-bounty | 28-Feb-2025 |
| Useless P5 path traversal to RCE ☠️ | https://medium.com/@Hossam.Mesbah/useless-p5-path-traversal-to-rce-%EF%B8%8F-d2c8d3b169e2?source=rss------bug_bounty-5 | Hossam Mesbah | bug-bounty, bug-hunting, vulnerability-management, cybersecurity, penetration-testing | 28-Feb-2025 |
| Scan React Native APKs for Vulnerable npm Dependencies in 2 Minutes! | https://splitunknown.medium.com/scan-react-native-apks-for-vulnerable-npm-dependencies-in-2-minutes-7579df6fe852?source=rss------bug_bounty-5 | JAY BHATT | bug-bounty, android-hacking-tool, android-reversing, reverse-engineering, bug-bounty-tips | 28-Feb-2025 |
| CORS (Cross-Origin Resource Sharing) | https://medium.com/@julius.grosserode.19/cors-cross-origin-resource-sharing-53b4d5840f92?source=rss------bug_bounty-5 | Julio | cors, cross-origin, bug-bounty, cookies | 28-Feb-2025 |
| The Art of Recon: Hunting Bugs Before They Hide — Part Two (Unleashed) | https://zeusvuln.medium.com/the-art-of-recon-hunting-bugs-before-they-hide-part-two-unleashed-227fbd5216b5?source=rss------bug_bounty-5 | ZeUsVuLn | bug-bounty-tips, bugs, cybersecurity, hacking, bug-bounty | 28-Feb-2025 |
| How I Discovered a P2 Level Sensitive Data Exposure Bug in a Web3 Platform | https://cybersecuritywriteups.com/how-i-discovered-a-p2-level-sensitive-data-exposure-bug-in-a-web3-platform-4562fcbe655e?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | ethical-hacking, bug-bounty-writeup, bug-bounty-tips, cybersecurity, bug-bounty | 28-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-111) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-111-3cd2067c4ec7?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, hacking, ethical-hacking, cybersecurity, bug-bounty | 28-Feb-2025 |
| Exploiting WebView Vulnerabilities: Bypassing SOP to Access Internal App Files | https://medium.com/@k3r0/exploiting-webview-vulnerabilities-bypassing-sop-to-access-internal-app-files-2d95529c0293?source=rss------bug_bounty-5 | Kyrillos nady | android, mobile-app-development, red-team, bug-bounty, pentesting | 28-Feb-2025 |
| 10 Automation Tricks to Uncover SSRF Flaws | https://cyberw1ng.medium.com/10-automation-tricks-to-uncover-ssrf-flaws-8154529e35b4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, careers, cybersecurity, jobs, bug-bounty | 28-Feb-2025 |
| How I Could Access Anyone’s College Subscription — IDOR Strikes Again! | https://medium.com/@shxsu1/how-i-could-access-anyones-college-subscription-idor-strikes-again-a4ea7c30f165?source=rss------bug_bounty-5 | shxsu1 | ethical-hacking, bug-bounty, hackerone, idor | 28-Feb-2025 |
| 10 Automation Tricks to Uncover SSRF Flaws | https://osintteam.blog/10-automation-tricks-to-uncover-ssrf-flaws-8154529e35b4?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, careers, cybersecurity, jobs, bug-bounty | 28-Feb-2025 |
| How to Find XSS Vulnerabilities in React JS Websites | https://medium.com/h7w/how-to-find-xss-vulnerabilities-in-react-js-websites-46f843bb932e?source=rss------bug_bounty-5 | Rendiero | bug-bounty, secure-coding, reactjs, xss-vulnerability, web-security | 27-Feb-2025 |
| How I Found an Open Redirect Vulnerability Easily (Worth $500!) | https://medium.com/@Abhijeet_kumawat_/how-i-found-an-open-redirect-vulnerability-easily-worth-500-44cda132819b?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, open-redirect, bug-bounty, hacking, infosec | 27-Feb-2025 |
| $1000–$25k worth API Bug Attack & Chaining Strategies | https://infosecwriteups.com/1000-25k-worth-api-bug-attack-chaining-strategies-ded4121b5791?source=rss------bug_bounty-5 | It4chis3c | secrets, chaining-vulnerabilities, bug-bounty, api, api-attack | 27-Feb-2025 |
| Sensitive Information Disclosure on Out of scope domain Bug Bounty Writeup ($$$ USD Reward ) | https://medium.com/@rushikeshchaudhari124/sensitive-information-disclosure-on-out-of-scope-domain-bug-bounty-writeup-usd-reward-58adec34acfb?source=rss------bug_bounty-5 | Rushikesh chaudhari | information-disclosure, bug-bounty, responsible-disclosure, hacking | 27-Feb-2025 |
| Bug Bounty Methodology (Part 1: Basic) | https://hackersatty.medium.com/bug-bounty-methodology-part-1-basic-ee4f3f7a4f81?source=rss------bug_bounty-5 | hackersatty | bug-bounty-tips, subdomains-enumeration, medium, bug-bounty, bug-bounty-writeup | 27-Feb-2025 |
| Finding an easy bug in the profile picture field. | https://infosecwriteups.com/finding-an-easy-bug-in-the-profile-picture-field-122a7aca2b42?source=rss------bug_bounty-5 | loyalonlytoday | bugs, bug-bounty, hacking, cybersecurity, programming | 27-Feb-2025 |
| I Found an XSS vulnerability in QuickRide — Here’s how you can too! | https://infosecwriteups.com/i-found-an-xss-vulnerability-in-quickride-heres-how-you-can-too-9606203d9e53?source=rss------bug_bounty-5 | Vivek PS | bug-bounty-tips, cybersecurity, bug-bounty, programming, hacking | 27-Feb-2025 |
| OWASP Mobile Top 10 | M2: Inadequate Supply Chain Security ⛓ | https://z0enix.medium.com/owasp-mobile-top-10-m2-inadequate-supply-chain-security-771edd9ec109?source=rss------bug_bounty-5 | Mohamed Hamadou | mobile, bug-bounty, hacking, security, owasp | 27-Feb-2025 |
| Earn $500-$2000 in WordPress website Bug-Bounty Program. | https://medium.com/@anandrishav2228/earn-500-2000-in-wordpress-website-bug-bounty-program-4351eb6ce647?source=rss------bug_bounty-5 | Rishav anand | money, cybersecurity, bug-bounty, hacking, wordpress | 27-Feb-2025 |
| How To Discover Hidden Endpoints️♂️ | https://medium.com/@Abhijeet_kumawat_/how-to-discover-hidden-endpoints-%EF%B8%8F-%EF%B8%8F-ac9356dec1d2?source=rss------bug_bounty-5 | Abhijeet Kumawat | bug-bounty, hacking, cybersecurity, socrates, infosec | 27-Feb-2025 |
| The Only Guide You Need to Find XSS Like a Pro | https://sudosuraj.medium.com/the-only-guide-you-need-to-find-xss-like-a-pro-c337588f9da3?source=rss------bug_bounty-5 | sudosuraj | bug-bounty-writeup, xss-vulnerability, sudosuraj, bug-bounty, bug-bounty-tips | 27-Feb-2025 |
| How to URLing for Bug Bounties -Mastering URLs : Edition 2025 | https://kongsec.medium.com/how-to-urling-for-bug-bounties-mastering-urls-edition-2025-a9dca9e2a97f?source=rss------bug_bounty-5 | Kongsec | bugcrowd, hackerone, bug-bounty-tips, kongsec, bug-bounty | 27-Feb-2025 |
| Bypassing Email Checks to Access Private Support Chats | https://medium.com/@rahulgairola/bypassing-email-checks-to-access-private-support-chats-c2895b1c9ef2?source=rss------bug_bounty-5 | Rahul Gairola | bug-bounty-writeup, bug-bounty, bug-bounty-tips, security | 27-Feb-2025 |
| How I Hacked HackerOne’s 2FA in 2 Minutes for $50,000 | https://medium.com/@ibtissamhammadi/how-i-hacked-hackerones-2fa-in-2-minutes-for-50-000-13892c888657?source=rss------bug_bounty-5 | Ibtissam Hammadi | cybersecurity, hacking, hackerone, bug-bounty-tips, bug-bounty | 27-Feb-2025 |
| A Logical Bug That Slipped Through | https://infosecwriteups.com/a-logical-bug-that-slipped-through-792b90850e72?source=rss------bug_bounty-5 | callgh0st | bug-bounty, burpsuite, genocide, logic, hacking | 27-Feb-2025 |
| Best Hackers Channels on Internet Worth Following! #2 | https://medium.com/@doby4535/best-hackers-channels-on-internet-worth-following-2-9fe4458b3a50?source=rss------bug_bounty-5 | Dobysec | ethical-hacking, bug-bounty, penetration-testing, hacking, cybersecurity | 27-Feb-2025 |
| How I Discovered 5 XSS Vulnerabilities and Built an Automated XSS Scanner | https://medium.com/@youssefhussein212103168/how-i-discovered-5-xss-vulnerabilities-and-built-an-automated-xss-scanner-4b357423ae61?source=rss------bug_bounty-5 | Youssefhussein | xss-attack, bug-bounty, xss-vulnerability, penetration-testing, cybersecurity | 27-Feb-2025 |
| How to Find More IDORs (Insecure Direct Object References) | https://medium.com/@verylazytech/how-to-find-more-idors-insecure-direct-object-references-fcabeac2f880?source=rss------bug_bounty-5 | Very Lazy Tech | oscp, ethical-hacking, idor, bug-bounty, penetration-testing | 27-Feb-2025 |
| How I Found an HTML Injection in a Bug Bounty Program | https://medium.com/@muhammedgalal66/how-i-found-an-html-injection-in-a-bug-bounty-program-81d1a9cdcfb6?source=rss------bug_bounty-5 | Dg0x6 | bugs, html, xss-attack, html-injection, bug-bounty | 27-Feb-2025 |
| Restricted? Not Anymore! Exploiting a Simple race condition Flaw | https://0xmatrix.medium.com/restricted-not-anymore-exploiting-a-simple-race-condition-flaw-2adaefd45f6f?source=rss------bug_bounty-5 | Mo2men Elmady | cybersecurity, bug-bounty-tips, bug-bounty, hacking, penetration-testing | 27-Feb-2025 |
| Critical phpMyAdmin Authentication Bypass via Shodan Dorking | https://medium.com/@youssefhussein212103168/critical-phpmyadmin-authentication-bypass-via-shodan-dorking-9bf664d053f7?source=rss------bug_bounty-5 | Youssefhussein | dorking, unauthorized-access, shodan, authentication-bypass, bug-bounty | 27-Feb-2025 |
| Account Takeover on Hackerone using Token leakage | https://infosecwriteups.com/account-takeover-on-hackerone-using-token-leakage-407dcf862679?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, cybersecurity, hackerone, hacking, pentesting | 27-Feb-2025 |
| Information Disclosure — The Hidden Risk in Public Reports! | https://medium.com/@momenrezkk90/information-disclosure-the-hidden-risk-in-public-reports-fd4ca13fd658?source=rss------bug_bounty-5 | MOAMEN REZK | cybersecurity, bug-bounty, security, bug-bounty-writeup, bug-bounty-tips | 27-Feb-2025 |
| How I Discovered a High-Severity Information Disclosure via GitHub Dorking | https://medium.com/@youssefhussein212103168/how-i-discovered-a-high-severity-information-disclosure-via-github-dorking-f2a781c0a63d?source=rss------bug_bounty-5 | Youssefhussein | api, pentesting, penetration-testing, cybersecurity, bug-bounty | 27-Feb-2025 |
| How I Found an IDOR Vulnerability and Accessed 100000+ User Details and got $$$ Bounty | https://harshbardhanx.medium.com/how-i-found-an-idor-vulnerability-and-accessed-100000-user-details-and-got-bounty-3f2faf8642cf?source=rss------bug_bounty-5 | Harsh Bardhan | bug-bounty-writeup, cybersecurity, bugs, bug-bounty, bug-bounty-tips | 27-Feb-2025 |
| “65 Euros for an Account Deletion Fail — When Deleted Doesn’t Mean Deleted” | https://balook.medium.com/65-euros-for-an-account-deletion-fail-when-deleted-doesnt-mean-deleted-a6fb055a98ae?source=rss------bug_bounty-5 | baluz | bug-bounty, hacking | 27-Feb-2025 |
| Account Takeover via Duplicate Registration — A 1500 Euro Jackpot | https://balook.medium.com/account-takeover-via-duplicate-registration-a-1500-euro-jackpot-2912c23b3ac4?source=rss------bug_bounty-5 | baluz | bug-bounty, web-apps, hacking, security | 27-Feb-2025 |
| Introduction | https://balook.medium.com/introduction-92e0de28f23a?source=rss------bug_bounty-5 | baluz | hacking, bug-bounty, security | 27-Feb-2025 |
| 0-Click Admin Account Takeover in Netflix Dispatch Project | https://ltsirkov.medium.com/0-click-admin-account-takeover-in-netflix-dispatch-project-feec37326004?source=rss------bug_bounty-5 | Lyubomir Tsirkov | vulnerability, hackerone, cybersecurity, bug-bounty | 27-Feb-2025 |
| JavaScript Enumeration for Bug Bounties: Expose Hidden Endpoints & Secrets Like a Pro! | https://myselfakash20.medium.com/javascript-enumeration-for-bug-bounties-expose-hidden-endpoints-secrets-like-a-pro-418c2aec318f?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, programming, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 27-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-110) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-110-1cb2a3f076ae?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, bug-bounty, hacking, bug-bounty-tips, cybersecurity | 27-Feb-2025 |
| 25,000$ Bounty — Simple SSRF Led to AWS Credentials Exposure | https://cyberw1ng.medium.com/25-000-bounty-simple-ssrf-led-to-aws-credentials-exposure-a6938e0875f9?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, programming, cybersecurity, jobs, careers | 27-Feb-2025 |
| Admin Account Takeover in Netflix Dispatch Project | https://ltsirkov.medium.com/0-click-admin-account-takeover-in-netflix-dispatch-project-feec37326004?source=rss------bug_bounty-5 | Lyubomir Tsirkov | vulnerability, hackerone, cybersecurity, bug-bounty | 27-Feb-2025 |
| Hands-On Web Exploitation Course by NahamSec | https://medium.com/@julius.grosserode.19/hands-on-web-exploitation-course-by-nahamsec-8807aad7de58?source=rss------bug_bounty-5 | Julio | hacking-hub, web-hacking, bug-bounty, ctf-walkthrough, bugbounty-tips | 27-Feb-2025 |
| CSRF | NahamSec Course | https://medium.com/@julius.grosserode.19/csrf-nahamsec-course-f04b49eca048?source=rss------bug_bounty-5 | Julio | self-xss, bug-bounty, csrf-protection, csrf-token, csrf | 27-Feb-2025 |
| SQL Injection Unleashed: How I Learned to Hack (and Protect) Databases | https://osintteam.blog/sql-injection-unleashed-how-i-learned-to-hack-and-protect-databases-6cd2eb572992?source=rss------bug_bounty-5 | Abhishek pawar | hacking, cybersecurity, programming, bug-bounty, sql | 26-Feb-2025 |
| How This $999 XSS Bug Bounty Was Found in Just 17 Minutes | https://infosecwriteups.com/how-this-999-xss-bug-bounty-was-found-in-just-17-minutes-71677d61c2c6?source=rss------bug_bounty-5 | Ibtissam Hammadi | hacking, bug-bounty, cybersecurity, web-security, programming | 26-Feb-2025 |
| ✨$500 HTML Injection in Snapchat | https://medium.com/@Abhijeet_kumawat_/500-html-injection-in-snapchat-9513accc6634?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, infosec, hacking, snapchat, bug-bounty | 26-Feb-2025 |
| $500-$20k worth GraphQL Vulnerabilities | Advanced Tips & Tricks | https://it4chis3c.medium.com/500-20k-worth-graphql-vulnerabilities-advanced-tips-tricks-74e8f4679b91?source=rss------bug_bounty-5 | It4chis3c | attack, graphql-vulnerability, bug-bounty, graphql, secrets | 26-Feb-2025 |
| WaybackURLs for Bug Bounty: How to Find Hidden Vulnerabilities & Sensitive Data | https://hackersatty.medium.com/waybackurls-for-bug-bounty-how-to-find-hidden-vulnerabilities-sensitive-data-aea579849c4d?source=rss------bug_bounty-5 | hackersatty | waybackurls, bug-bounty, hackerone, medium, wayback-machine | 26-Feb-2025 |
| Simple Staking V2 Public test | https://medium.com/tokamak-network/simple-staking-v2-public-test-7eec1e137ed8?source=rss------bug_bounty-5 | Jason | news, public-test, bug-bounty, tokamak-network, staking | 26-Feb-2025 |
| How i Hacked the Windows machine. | https://medium.com/@anandrishav2228/how-i-hacked-the-windows-machine-9c4b08b3d8be?source=rss------bug_bounty-5 | Rishav anand | hacking, bug-bounty, money, cybersecurity, red-team | 26-Feb-2025 |
| CVE-2025–1094: PostgreSQL Injection Vulnerability Exploit | https://infosecwriteups.com/cve-2025-1094-postgresql-sql-injection-vulnerability-exploit-2acf37ae399a?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, security, cybersecurity, bug-bounty, information-security | 26-Feb-2025 |
| Bug Bounty is Broken: How Some Researchers Are Earning Money Without Hacking | https://medium.com/@dasmanish6176/bug-bounty-is-broken-how-some-researchers-are-earning-money-without-hacking-c4155f58d49c?source=rss------bug_bounty-5 | Dasmanish | bug-bounty, ethical-hacking, cybersecurity, sensitive-data, hackerone | 26-Feb-2025 |
| OWASP Mobile Top 10 | M1: Improper Credential Usage | https://z0enix.medium.com/owasp-mobile-top-10-m1-improper-credential-usage-bf6ee99eed69?source=rss------bug_bounty-5 | Mohamed Hamadou | mobile, cybersecurity, hacking, penetration-testing, bug-bounty | 26-Feb-2025 |
| Full Customer DB dump in Service Now and they called it “Medium Risk” — what a joke | https://fdzdev.medium.com/full-customer-db-dump-in-service-now-and-they-called-it-medium-risk-what-a-joke-b9b31cd48172?source=rss------bug_bounty-5 | Facundo Fernandez | hacking, data-breach, vulnerability, penetration-testing, bug-bounty | 26-Feb-2025 |
| AI Agent Vulnerabilities: Structural Flaws and Exploiting Co-Pilots — A Firsthand Account. | https://medium.com/@Logon_thepage/ai-agent-vulnerabilities-structural-flaws-and-exploiting-co-pilots-a-firsthand-account-70f4b221f93d?source=rss------bug_bounty-5 | Logon_thepage | vulnerability-assessment, co-pilot, bug-bounty, ai-agent | 26-Feb-2025 |
| How One Photo Can Unlock Sensitive Information | https://medium.com/@aalgohary950/how-one-photo-can-unlock-sensitive-information-6d65ae982cae?source=rss------bug_bounty-5 | KhopeshH4x | penetration-testing, information-disclosure, data-lake, bug-bounty-tips, bug-bounty | 26-Feb-2025 |
| MISCONCEPTION: “ETHICAL HACKERS CAN NEVER BE TRUSTED 100%” | https://medium.com/@hackrate/misconception-ethical-hackers-can-never-be-trusted-100-a11566fa2f4e?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty-tips, penetration-testing, bug-bounty, ethical-hacking, cybersecurity | 26-Feb-2025 |
| Bypassing AWS S3 Bucket Restrictions: Security Testing Techniques | https://infosecwriteups.com/bypassing-aws-s3-bucket-restrictions-security-testing-techniques-63fe75aa9ff8?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, penetration-testing, information-security, security-testing, cybersecurity | 26-Feb-2025 |
| Maximize Your Bug Bounty Earnings: Automate Endpoint Discovery & Find High-Impact Vulnerabilities | https://hackersatty.medium.com/maximize-your-bug-bounty-earnings-automate-endpoint-discovery-find-high-impact-vulnerabilities-c9a530445e97?source=rss------bug_bounty-5 | hackersatty | medium, waybackurls, bug-bounty, wayback-machine, bug-bounty-writeup | 26-Feb-2025 |
| The Vending Machine Hack: How I Outsmarted a Snack Dispenser! | https://krishna-cyber.medium.com/the-vending-machine-hack-how-i-outsmarted-a-snack-dispenser-033eab2e65d6?source=rss------bug_bounty-5 | Krish_cyber | hacking, bug-bounty, cybersecurity, iot, vending-machines | 26-Feb-2025 |
| $100-$20k worth Stored XSS Vulnerability | Hidden Methods | https://infosecwriteups.com/100-20k-worth-stored-xss-vulnerability-hidden-methods-e56fe57437c4?source=rss------bug_bounty-5 | It4chis3c | bypass, secrets, stored-xss, xss-attack, bug-bounty | 26-Feb-2025 |
| The $900 Bug: How I Cashed In with SSRF & LFI Hacks | https://cybersecuritywriteups.com/the-900-bug-how-i-cashed-in-with-ssrf-lfi-hacks-a2c1e8bb159f?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, bugs, hacking, info-sec-writeups, osint | 26-Feb-2025 |
| Bypassing Authentication in Keycloak — A Deep Dive into Our Discovery | https://bensaad0.medium.com/bypassing-authentication-in-keycloak-a-deep-dive-into-our-discovery-40d89f2b5d45?source=rss------bug_bounty-5 | 0xBen | cybersecurity, bug-bounty | 26-Feb-2025 |
| How I Turned Limited Access Into a $6,500 RCE Bounty | https://medium.com/@ibtissamhammadi/how-i-turned-limited-access-into-a-6-500-rce-bounty-75cfb2344806?source=rss------bug_bounty-5 | Ibtissam Hammadi | technology, bug-bounty, cybersecurity, hacking, 404 | 26-Feb-2025 |
| No Finger? No Problem! iOS Biometrics Bypassed: Bug Bounty Win! | https://medium.com/@pandurangisuprit/no-finger-no-problem-ios-biometrics-bypassed-bug-bounty-win-f17bf619a089?source=rss------bug_bounty-5 | Suprit Pandurangi | ios, cybersecurity, biometrics, bug-bounty, bypass | 26-Feb-2025 |
| JUST CRASHED SYSTEM USING IMAGE AND GOT BOUNTY $ 500 | https://medium.com/@hrofficial62/just-crashed-system-using-image-and-got-bounty-500-eb30dc4b85a5?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, cybersecurity, ethical-hacking, hacking, pentesting | 26-Feb-2025 |
| How to Perform Information Gathering Using Google Dorking | https://medium.com/@vipulsonule71/how-to-perform-information-gathering-using-google-dorking-c89c33f48ccc?source=rss------bug_bounty-5 | Vipul Sonule | penetration-testing, cybersecurity, ethical-hacking, hacking, bug-bounty | 26-Feb-2025 |
| S3 Bucket Recon: Finding Exposed AWS Buckets Like a Pro! | https://infosecwriteups.com/s3-bucket-recon-finding-exposed-aws-buckets-like-a-pro-106be5ab9e1d?source=rss------bug_bounty-5 | coffinxp | aws, bug-bounty-tips, amazon-web-services, technology, bug-bounty | 26-Feb-2025 |
| When a Tiny Sensitive Leak Gave Me a Big $$$ Surprise️ | https://medium.com/@iski/when-a-tiny-sensitive-leak-gave-me-a-big-surprise-%EF%B8%8F-a5feb54d8d82?source=rss------bug_bounty-5 | Iski | bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips, p1-bug | 26-Feb-2025 |
| Project : Recuzzer | https://medium.com/@nevildomain/project-recuzzer-d5a63c195605?source=rss------bug_bounty-5 | Mayh_m | python, security-tool, tools, penetration-testing, bug-bounty | 26-Feb-2025 |
| Manual Exploitation SQL Injection CTF LAB | https://medium.com/@hay.chrifi/manual-exploitation-sql-injection-ctf-lab-92180f06a710?source=rss------bug_bounty-5 | Hayham Chrifi | ethical-hacking, offensive-security, ctf-writeup, bug-bounty | 26-Feb-2025 |
| The $500 Cache Trick: How I Turned Cache Deception into Cold, Hard Cash! | https://osintteam.blog/the-500-cache-trick-how-i-turned-cache-deception-into-cold-hard-cash-13a49a2a6d78?source=rss------bug_bounty-5 | Krish_cyber | careers, jobs, bug-bounty, cybersecurity, programming | 26-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-109) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-109-1840bb5bf3e0?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, cybersecurity, hacking, bug-bounty-tips, bug-bounty | 26-Feb-2025 |
| Cloud Reconnaissance: How to Gather Information from Cloud Services | https://cyberw1ng.medium.com/cloud-reconnaissance-how-to-gather-information-from-cloud-services-34b2e9d42ea0?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, programming, jobs, bug-bounty, careers | 26-Feb-2025 |
| How to Hack a Website | https://medium.com/@vipulsonule71/how-to-hack-a-website-1685484b8c6d?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, bug-bounty, penetration-testing, hacking, technology | 26-Feb-2025 |
| Don’t miss this while working on a bounty target! | https://medium.com/@sb12121111/dont-miss-this-while-working-on-a-bounty-target-fa8c8368129c?source=rss------bug_bounty-5 | Sadra Bakhtiari | security-research, ethical-hacking, cybersecurity, bug-bounty, web-security | 26-Feb-2025 |
| JUST CRASHED SYSTEM USING IMAGE AND GOT BOUNTY $ 500 | https://infosecwriteups.com/just-crashed-system-using-image-and-got-bounty-500-eb30dc4b85a5?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, cybersecurity, ethical-hacking, hacking, pentesting | 26-Feb-2025 |
| How I found clickjacking vulnerability on a bounty target | https://medium.com/@sb12121111/how-i-found-clickjacking-vulnerability-on-a-bounty-target-fe823f352e36?source=rss------bug_bounty-5 | Sadra Bakhtiari | web-security, bug-bounty, cybersecurity, ethical-hacking, security-research | 25-Feb-2025 |
| Best Browser Extensions for Bug Bounty Hunters (Chrome & Firefox) | https://medium.com/@ajudeb55/best-browser-extensions-for-bug-bounty-hunters-chrome-firefox-644c3470359f?source=rss------bug_bounty-5 | Aju Deb | cybersecurity, bug-bounty, technology, pentesting, programming | 25-Feb-2025 |
| How I Earned My First Bug Bounty: POST BASED REFLECTED XSS | https://medium.com/@noorvb5/how-i-earned-my-first-bug-bounty-post-based-reflected-xss-570d0e89961d?source=rss------bug_bounty-5 | MohammedNoor Ebdah | bug-bounty | 25-Feb-2025 |
| $100 Bounty: Username Restriction Bypassed | https://medium.com/@Abhijeet_kumawat_/100-bounty-username-restriction-bypassed-30f5c057c810?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, hacking, make-money, infosec, bug-bounty | 25-Feb-2025 |
| $100-$20k worth Account Takeover Vulnerability | Hidden Practical Steps | https://it4chis3c.medium.com/100-20k-worth-account-takeover-vulnerability-hidden-practical-steps-fd5dd1c8a491?source=rss------bug_bounty-5 | It4chis3c | account-takeover-attacks, bug-bounty, secrets, advanced, account-takeover | 25-Feb-2025 |
| Extracting DOM XSS Vulnerabilities from JavaScript Files | https://z0enix.medium.com/extracting-dom-xss-vulnerabilities-from-javascript-files-606b0d888740?source=rss------bug_bounty-5 | Mohamed Hamadou | hacking, penetration-testing, bug-bounty, security | 25-Feb-2025 |
| How I Made $1000+ from a Simple XSS Bug — My Bug Bounty Journey | https://krishna-cyber.medium.com/how-i-made-1000-from-a-simple-xss-bug-my-bug-bounty-journey-82283becb91b?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty-tips, osint, bug-bounty, xss-attack, infosec | 25-Feb-2025 |
| PostgreSQL Penetration Testing: A Comprehensive Guide | https://infosecwriteups.com/postgresql-penetration-testing-a-comprehensive-guide-33d21c4dceba?source=rss------bug_bounty-5 | Ajay Naik | security, information-security, cybersecurity, bug-bounty, penetration-testing | 25-Feb-2025 |
| How I Discovered a Facebook Privacy Loophole and Earned $1000 | https://infosecwriteups.com/how-i-discovered-a-facebook-privacy-loophole-and-earned-1000-44318d196bfc?source=rss------bug_bounty-5 | Vivek PS | bug-bounty, hacking, cybersecurity, bug-bounty-tips, programming | 25-Feb-2025 |
| Android Security Vulnerabilities and Exploitation | https://infosecwriteups.com/android-security-vulnerabilities-and-exploitation-4ef95e970e2f?source=rss------bug_bounty-5 | Ajay Naik | bug-bounty, penetration-testing, information-technology, cybersecurity, android | 25-Feb-2025 |
| Mastering Subdomain Enumeration | https://infosecwriteups.com/mastering-subdomain-enumeration-05fa958567cd?source=rss------bug_bounty-5 | Monika sharma | penetration-testing, technology, bug-bounty-tips, hacking, bug-bounty | 25-Feb-2025 |
| Part 1- Exploiting Content Injection & Info Disclosure: A High-Impact Bug Worth Big Rewards! | https://hackersatty.medium.com/part-1-exploiting-content-injection-info-disclosure-a-high-impact-bug-worth-big-rewards-34a25519ecc7?source=rss------bug_bounty-5 | hackersatty | owasp-top-10, medium, hackerone, bug-bounty-tips, bug-bounty | 25-Feb-2025 |
| Bypassing IP-Based OTP rate limits: A Bug bounty hunter’s guide | https://infosecwriteups.com/bypassing-ip-based-otp-rate-limits-a-bug-bounty-hunters-guide-16ce8a1f2c71?source=rss------bug_bounty-5 | Vivek PS | programming, bug-bounty-tips, cybersecurity, hacking, bug-bounty | 25-Feb-2025 |
| A simple tool for GitHub Dorking that will be helpful in your bug bounty journey. | https://infosecwriteups.com/a-simple-tool-for-github-dorking-that-will-be-helpful-in-your-bug-bounty-journey-d1720c15fc6d?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty-tips, cybersecurity, hacking, bug-bounty, tips | 25-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-72) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-72-6c721aa447b0?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, ethical-hacking, hacking, bug-bounty, skills | 25-Feb-2025 |
| How to Find P3 Bugs in Bug Bounty | https://medium.com/@vipulsonule71/how-to-find-p3-bugs-in-bug-bounty-07eee36e4696?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, cybersecurity, technology, hacking, ai | 25-Feb-2025 |
| TryHackMe|Gobuster: The Basics Write Up (setup troubleshooting) | https://medium.com/@Adhiyan24/tryhackme-gobuster-the-basics-write-up-setup-troubleshooting-5b0a3f0f48c4?source=rss------bug_bounty-5 | Adhiyan | tryhackme, troubleshooting, bug-bounty, gobuster, hacking | 25-Feb-2025 |
| Mass Assignment Vulnerability in ty-api.xyz.cloud/api/v1/user/me Allows Permanent Account Lockout | https://medium.com/@binnaryninjax/mass-assignment-vulnerability-in-ty-api-xyz-cloud-api-v1-user-me-allows-permanent-account-lockout-02b4b84defd9?source=rss------bug_bounty-5 | Rishav Rayamajhi | cybersecurity, bug-bounty | 25-Feb-2025 |
| Aquatone for Ethical Hackers: Master Reconnaissance Tools | https://devprogramming.medium.com/aquatone-for-ethical-hackers-master-reconnaissance-tools-2573b5b7d295?source=rss------bug_bounty-5 | DevProgramming | tools, hacking-tools, hacking, bug-bounty, penetration-testing | 25-Feb-2025 |
| Scan Like a Pro: Bypass WAFs, IDS/IPS, and modern Cloud Security with Nmap Stealth Techniques | https://medium.com/@moldovanzsombor/scan-like-a-pro-bypass-wafs-ids-ips-and-modern-cloud-security-with-nmap-stealth-techniques-for-62a671229bc0?source=rss------bug_bounty-5 | Moldovan Zsombor | bug-bounty, nmap, cybersecurity, hacking, recon | 25-Feb-2025 |
| The $12,000 2FA Bypass — So Simple, Yet So Critical! | https://medium.com/@rahulgairola/the-12-000-2fa-bypass-so-simple-yet-so-critical-e3f7d7e5751c?source=rss------bug_bounty-5 | Rahul Gairola | bug-bounty, authentication, 2fa, bug-bounty-writeup, bug-bounty-tips | 25-Feb-2025 |
| The Top 10 Most Dangerous Web3 Vulnerabilities Right Now | https://securrtech.medium.com/the-top-10-most-dangerous-web3-vulnerabilities-right-now-a7197f25f3f5?source=rss------bug_bounty-5 | Securr - Web3 Security | bug-bounty, smart-contract-security, web3-security, smart-contract-auditing, blockchain-security | 25-Feb-2025 |
| 3 Must-Read Bug Bounty Books to Level Up Your Skills! | https://medium.com/@Abhijeet_kumawat_/3-must-read-bug-bounty-books-to-level-up-your-skills-2f6f3886ace8?source=rss------bug_bounty-5 | Abhijeet Kumawat | cybersecurity, bug-bounty, money, hacking, infosec | 25-Feb-2025 |
| Think Outside The Box Again, With IDOR ! | https://n0x1.medium.com/think-outside-the-box-again-with-idor-94b010f958ea?source=rss------bug_bounty-5 | Mohammed Khalid | penetration-testing, bug-bounty, bug-bounty-writeup, bug-bounty-tips, web | 25-Feb-2025 |
| A tool to find admin panels in your bug bounty target | https://medium.com/@loyalonlytoday/a-tool-to-find-admin-panels-in-your-bug-bounty-target-c21415e83a87?source=rss------bug_bounty-5 | loyalonlytoday | tips, ethical-hacking, cybersecurity, bug-bounty-tips, bug-bounty | 25-Feb-2025 |
| Steps for Ethical Bug Hunting | https://techhindirai.medium.com/steps-for-ethical-bug-hunting-3d187263e77b?source=rss------bug_bounty-5 | Rahul Kumar | bug-bounty-tips, sql-injection, bug-bounty, ethical-hacking, sql | 25-Feb-2025 |
| Autorize & IDOR: How a Simple Token Swap Exposed Sensitive Data | https://hackersatty.medium.com/autorize-idor-how-a-simple-token-swap-exposed-sensitive-data-f64ee3ceada6?source=rss------bug_bounty-5 | hackersatty | penetration-testing, medium, idor, bug-bounty-writeup, bug-bounty | 25-Feb-2025 |
| Bug Bounty Misconception: “I Don’t Have Sufficient Budget to Pay Hunters” | https://medium.com/@hackrate/bug-bounty-misconception-i-dont-have-sufficient-budget-to-pay-hunters-7d8b39b70c14?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, hacking, bug-bounty-tips, bug-bounty, ethical-hacking | 25-Feb-2025 |
| How to Find Bugs Easily in Bug Hunting | https://medium.com/@vipulsonule71/how-to-find-bugs-easily-in-bug-hunting-515977caafc8?source=rss------bug_bounty-5 | Vipul Sonule | penetration-testing, technology, cybersecurity, hacking, bug-bounty | 25-Feb-2025 |
| How I Unlocked a $5,000 Payday by Hacking a Billion-Dollar App’s Weakest Link | https://medium.com/@ibtissamhammadi/how-i-unlocked-a-5-000-payday-by-hacking-a-billion-dollar-apps-weakest-link-7b9f4055d46a?source=rss------bug_bounty-5 | Ibtissam Hammadi | idor, cybersecurity, hacking, bug-bounty, vulnerability | 25-Feb-2025 |
| Cyber Chat: rs0n | https://osintteam.blog/cyber-chat-rs0n-ea9725394f6d?source=rss------bug_bounty-5 | The Cybersec Café | cybersecurity, penetration-testing, bug-bounty, application-security, information-security | 25-Feb-2025 |
| Breaking the chain of CA Certificate detection & SSL Pinning bypass for Android applications | https://medium.com/@pandurangisuprit/breaking-the-chain-of-ca-certificate-detection-ssl-pinning-bypass-for-android-applications-65c4ac66d9f2?source=rss------bug_bounty-5 | Suprit Pandurangi | ca-certificates, ssl-pinning-bypass, bug-bounty, security, android | 25-Feb-2025 |
| 7 Powerful Ways to Use ChatGPT as a Bug Bounty Assistant | https://bitpanic.medium.com/7-powerful-ways-to-use-chatgpt-as-a-bug-bounty-assistant-c7fc26ce54fc?source=rss------bug_bounty-5 | Spectat0rguy | technology, ai-generated-content, programming, bug-bounty, cybersecurity | 25-Feb-2025 |
| Top Hacking Books for 2025 (plus Resources) — @verylazytech | https://medium.com/@verylazytech/top-hacking-books-for-2025-plus-resources-verylazytech-90875b0f6f93?source=rss------bug_bounty-5 | Very Lazy Tech | python, hacking, ethical-hacking, cybersecurity, bug-bounty | 25-Feb-2025 |
| XXE: When XML Becomes Your Worst Nightmare | https://osintteam.blog/xxe-when-xml-becomes-your-worst-nightmare-291452531da2?source=rss------bug_bounty-5 | #$ubh@nk@r | hacking, xxe, bug-bounty, infosec, owasp | 25-Feb-2025 |
| How I Took Over a Vercel Subdomain | https://medium.com/@Pentestforge/how-i-took-over-a-vercel-subdomain-e7b03dbf222d?source=rss------bug_bounty-5 | Joel I Patrick | information-security, bug-bounty, ethical-hacking, infosec-write-ups, cybersecurity | 25-Feb-2025 |
| How I Exploited a Hidden Race Condition to Bypass Licensing and Claim All Subdomains on the target | https://0onoproblem.medium.com/how-i-exploited-a-hidden-race-condition-to-bypass-licensing-and-claim-all-subdomains-on-the-target-64944b148f49?source=rss------bug_bounty-5 | 0_oNoProblem | vulnerability-assessment, bug-bounty-tips, vulnerability, bug-bounty, bug-bounty-writeup | 25-Feb-2025 |
| web cache deception on private program | https://medium.com/@0x_karim/web-cache-deception-on-private-program-ccce0a612d46?source=rss------bug_bounty-5 | 0xkarim | hacking, hackerone, bug-bounty, bug-bounty-tips, bug-hunting | 25-Feb-2025 |
| Day 19: A Tale of 0-Click Account Takeover and 2FA Bypass | https://medium.com/@danielbelay/day-19-a-tale-of-0-click-account-takeover-and-2fa-bypass-2b2ed4914a3f?source=rss------bug_bounty-5 | dani3l | account-takeover-attacks, bug-bounty | 25-Feb-2025 |
| cyber20 Simple Bug Bounty Automation Techniques | https://cyberw1ng.medium.com/cyber20-simple-bug-bounty-automation-techniques-b850db32591c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, programming, bug-bounty, automation | 25-Feb-2025 |
| 20 Simple Bug Bounty Automation Techniques | https://osintteam.blog/cyber20-simple-bug-bounty-automation-techniques-b850db32591c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, careers, programming, bug-bounty, automation | 25-Feb-2025 |
| I hacked a company using Elon Musk’s AI. | https://medium.com/@niels_ae/i-hacked-a-company-using-elon-musks-ai-6eaa48bef222?source=rss------bug_bounty-5 | Niels | bug-bounty, cybersecurity, hacker | 24-Feb-2025 |
| Uncovering Hidden Cloudflare Pages and Workers | https://infosecwriteups.com/uncovering-hidden-cloudflare-pages-and-workers-af602df05f1a?source=rss------bug_bounty-5 | Scott Lindh | bug-bounty, cyber-security-awareness, hacker, penetration-testing, hackerone | 24-Feb-2025 |
| Free VPS for penetration testing and bounty and part 3 | https://infosecwriteups.com/free-vps-for-penetration-testing-and-bounty-and-part-3-3c5b2f4642cc?source=rss------bug_bounty-5 | loyalonlytoday | vps, cybersecurity, tips, bug-bounty, programming | 24-Feb-2025 |
| Subscription? No Thanks! We Hack Our Way In! | https://medium.com/@ajay.kumar.695632/subscription-no-thanks-we-hack-our-way-in-42f884f56db2?source=rss------bug_bounty-5 | Ajay Kumar | bug-bounty, bugs, bug-bounty-tips, bug-bounty-writeup | 24-Feb-2025 |
| The biggest misconception: Bug Bounty Programs are only for the largest organizations | https://medium.com/@hackrate/the-biggest-misconception-bug-bounty-programs-are-only-for-the-largest-organizations-a31b920b9d18?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, bug-bounty-tips, bug-bounty, hacking, ethical-hacking | 24-Feb-2025 |
| Interesting Case of CSRF in [Redacted] | https://one33se7en.medium.com/interesting-case-of-csrf-in-redacted-981dc2ba5f10?source=rss------bug_bounty-5 | one33se7en | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 24-Feb-2025 |
| Top 5 Bugs can give you $10,000 and more. | https://medium.com/@anandrishav2228/top-5-bugs-can-give-you-10-000-and-more-f51bc93a1162?source=rss------bug_bounty-5 | Rishav anand | hacking, cybersecurity, money, bug-bounty, students | 24-Feb-2025 |
| Invitation Hijacking via Self-Signup in [Redacted] Enterprise | https://one33se7en.medium.com/invitation-hijacking-via-self-signup-in-redacted-enterprise-ab0f885a6cdd?source=rss------bug_bounty-5 | one33se7en | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 24-Feb-2025 |
| $100-$5000 worth LFI Vulnerability | Advanced Tips and Tricks | https://infosecwriteups.com/100-5000-worth-lfi-vulnerability-advanced-tips-and-tricks-f68fb48324a6?source=rss------bug_bounty-5 | It4chis3c | bypass, lfi-vulnerability, secrets, lfi, bug-bounty | 24-Feb-2025 |
| LiveZilla Server XSS Vulnerability | https://cybersecuritywriteups.com/livezilla-server-xss-vulnerability-81563deea5a8?source=rss------bug_bounty-5 | RivuDon | bug-bounty, ethical-hacking, infosecurity, bug-bounty-tips, infosec | 24-Feb-2025 |
| $50k BOUNTY JUST FOR GITHUB TOKEN LEAKS | https://medium.com/@hrofficial62/50k-bounty-just-for-github-token-leaks-93c901e076c4?source=rss------bug_bounty-5 | Mr Horbio | hackerone, pentesting, bug-bounty, hacking, cybersecurity | 24-Feb-2025 |
| Apple has just fixed one of the biggest usability issues with CarPlay | https://medium.com/@mianhamdan.com/apple-has-just-fixed-one-of-the-biggest-usability-issues-with-carplay-1ed387c075d3?source=rss------bug_bounty-5 | Mian Hamdan | artificial-intelligence, bug-bounty, apple, apple-car, apple-music | 24-Feb-2025 |
| How to Find XSS Automatically in Bug Hunting | https://medium.com/@vipulsonule71/how-to-find-xss-automatically-in-bug-hunting-a41a6220dba0?source=rss------bug_bounty-5 | Vipul Sonule | penetration-testing, cybersecurity, hacking, tryhackme-walkthrough, bug-bounty | 24-Feb-2025 |
| NoSQL Injection Vulnerability | https://infosecwriteups.com/nosql-injection-vulnerability-ead8ccd60666?source=rss------bug_bounty-5 | Ajay Naik | cyber-security-awareness, cyberattack, penetration-testing, bug-bounty, cybersecurity | 24-Feb-2025 |
| Interesting Case of CSRF | https://one33se7en.medium.com/interesting-case-of-csrf-in-redacted-981dc2ba5f10?source=rss------bug_bounty-5 | one33se7en | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 24-Feb-2025 |
| DS_Store Hunting: Uncovering Sensitive Data in Bug Bounty Programs | https://maordayanofficial.medium.com/ds-store-hunting-uncovering-sensitive-data-in-bug-bounty-programs-fc3f925c9c52?source=rss------bug_bounty-5 | Maor Dayan - מאור דיין | bug-bounty, security-research, sensitive, python, bug-hunting | 24-Feb-2025 |
| How I Found My First High-Severity Bug and Got Rewarded with 3 Trays of Red Bull! | https://medium.com/@iski/how-i-found-my-first-high-severity-bug-and-got-rewarded-with-3-trays-of-red-bull-29ec0ca6a2e4?source=rss------bug_bounty-5 | Iski | bug-bounty-writeup, bug-bounty-hunting, p1-bug, bug-bounty, bug-bounty-tips | 24-Feb-2025 |
| XSS & HTML Injection via Google Dorking – A Practical Guide | https://medium.com/@gourisankara357/xss-html-injection-via-google-dorking-a-practical-guide-b535a18fad3b?source=rss------bug_bounty-5 | Gouri Sankar A | xss-attack, bug-bounty-tips, google, infosec, bug-bounty | 24-Feb-2025 |
| “ From Zero to $500+: How LFIs Can Line Your Pockets (Real-World Examples Inside!)” | https://osintteam.blog/from-zero-to-500-how-lfis-can-line-your-pockets-real-world-examples-inside-356d55cf46e3?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty-writeup, bug-bounty, osint, money, infosec-write-ups | 24-Feb-2025 |
| How I Found The open redirect vulnerability? | https://doordiefordream.medium.com/how-i-found-the-open-redirect-vulnerability-e0c3583b4e89?source=rss------bug_bounty-5 | Bug hunter balu | vulnerability, ethical-hacking, technology, cybersecurity, bug-bounty | 24-Feb-2025 |
| Unpatched RCE in Laravel Voyager = Big Bounties! | https://osintteam.blog/unpatched-rce-in-laravel-voyager-big-bounties-2eb3ebb09253?source=rss------bug_bounty-5 | 0day stories | technology, bug-bounty, bug-bounty-tips, penetration-testing, cybersecurity | 24-Feb-2025 |
| How I Earned $9,750 in 48 Hours by Finding a Critical Security Flaw | https://medium.com/@ibtissamhammadi/how-i-earned-9-750-in-48-hours-by-finding-a-critical-security-flaw-b3ec6172a7c9?source=rss------bug_bounty-5 | Ibtissam Hammadi | cybersecurity, bug-bounty, hacking, vulnerability, idor | 24-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-107) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-107-983c1cd2e667?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, hacking, ethical, cybersecurity, bug-bounty-tips | 24-Feb-2025 |
| Bug Bounty Recon: Turning Data into Actionable Findings (Part 3) | https://medium.com/@weaponshot/bug-bounty-recon-turning-data-into-actionable-findings-part-3-924d7d001ecc?source=rss------bug_bounty-5 | Matyis Kong | hacking, recon, cybersecurity, bug-bounty | 24-Feb-2025 |
| $20,000 Bounty: How a Leaked Session Cookie Led to an Account Takeover | https://cyberw1ng.medium.com/20-000-bounty-how-a-leaked-session-cookie-led-to-an-account-takeover-06baed26b707?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, programming, bug-bounty, cybersecurity, jobs | 24-Feb-2025 |
| HOW I DISCOVERED AN XSS VULNERABILITY IN A VDP PROGRAM | https://medium.com/@anripo2006/how-i-discovered-an-xss-vulnerability-in-a-vdp-program-7bc3880c6f22?source=rss------bug_bounty-5 | Antonio Rivera Poblete | xss-bypass, xss-vulnerability, bug-bounty | 24-Feb-2025 |
| Special Characters :^) | https://medium.com/cloud-security/special-characters-9a65093c5bfe?source=rss------bug_bounty-5 | Teri Radichel | character, bug-bounty, special-character, encoding, pentesting | 24-Feb-2025 |
| CÓMO DESCUBRÍ UNA VULNERABILIDAD XSS EN UN PROGRAMA VDP | https://medium.com/@anripo2006/c%C3%B3mo-descubr%C3%AD-una-vulnerabilidad-xss-en-un-programa-vdp-c9133241cc5b?source=rss------bug_bounty-5 | Antonio Rivera Poblete | vdp, xss-attack, bug-bounty, xss-bypass, hacking | 24-Feb-2025 |
| $20,000 Bounty: How a Leaked Session Cookie Led to an Account Takeover | https://osintteam.blog/20-000-bounty-how-a-leaked-session-cookie-led-to-an-account-takeover-06baed26b707?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, programming, bug-bounty, cybersecurity, jobs | 24-Feb-2025 |
| Resource consumption Vulnerability | https://medium.com/@VulnRAM/resource-consumption-vulnerability-542d0b38152e?source=rss------bug_bounty-5 | ramzey elsayed mohamed | bug-bounty, penetration-testing, bug-bounty-tips, bugs, bug-bounty-writeup | 23-Feb-2025 |
| Firefox and Chrome extensions for bug-bounty hunters. (PART 1). | https://osintteam.blog/firefox-and-chrome-extensions-for-bug-bounty-hunters-part-1-49e34f70d076?source=rss------bug_bounty-5 | loyalonlytoday | extension, cybersecurity, tips, penetration-testing, bug-bounty | 23-Feb-2025 |
| Administrator Account Takeover | https://medium.com/@hrofficial62/administrator-account-takeover-bf08c592bf6a?source=rss------bug_bounty-5 | Mr Horbio | pentesting, bug-bounty, hacking, hackerone, cybersecurity | 23-Feb-2025 |
| Uncovering Hidden Treasures: Mastering Wayback URLs for Bug Bounty Hunting | https://abhayal.medium.com/uncovering-hidden-treasures-mastering-wayback-urls-for-bug-bounty-hunting-8571357b7649?source=rss------bug_bounty-5 | Abhayal | waybackurls, bug-bounty-tips, bug-bounty, bug-bounty-writeup, hacking | 23-Feb-2025 |
| Information Disclosure Hunting: Tool Tips & Commands | https://infosecwriteups.com/information-disclosure-hunting-tool-tips-commands-48003154e8bb?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty, hacking, penetration-testing, bug-bounty-tips | 23-Feb-2025 |
| Mapping the Application | https://medium.com/@muhammad4208/mapping-the-application-a922729a6772?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | web-mapping, bug-bounty-hunter, bug-bounty, bug-bounty-tips, bug-bounty-program | 23-Feb-2025 |
| The Journey That Changed Everything — My NASA LOR Story | https://medium.com/@sivasankardasdas/the-journey-that-changed-everything-my-nasa-lor-story-744ace9f3caf?source=rss------bug_bounty-5 | Sivasankardas | cybersecurity, nasa, osint, ethical-hacking, bug-bounty | 23-Feb-2025 |
| Profile Avatar Unlock vulnerability | https://medium.com/@ajay.kumar.695632/profile-avatar-unlock-vulnerability-c3f53fe278cd?source=rss------bug_bounty-5 | Ajay Kumar | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bugs | 23-Feb-2025 |
| Web Academy Lab: CORS vulnerability with basic origin reflection | https://medium.com/@mehedihasanemonceh/web-academy-lab-cors-vulnerability-with-basic-origin-reflection-a6130cb49053?source=rss------bug_bounty-5 | Mehedi Hasan Emon | cors-vulnerability, portswigger, bug-bounty, cors, pentesting | 23-Feb-2025 |
| Bypassing HackerOne 2FA due to race condition. | https://akashhamal0x01.medium.com/bypassing-hackerone-2fa-due-to-race-condition-8afe2dbff7c9?source=rss------bug_bounty-5 | Akash Hamal | bug-bounty-tips, hackerone, cybersecurity, bug-bounty | 23-Feb-2025 |
| Subdomain Enumeration Like Never Before: Unveiling rsecloud.com — The Hidden Gem for Advanced Recon | https://medium.com/@hacker_might/subdomain-enumeration-like-never-before-unveiling-rsecloud-com-the-hidden-gem-for-advanced-recon-322bcd900837?source=rss------bug_bounty-5 | hacker_might | bug-bounty, subdomains-enumeration, bug-bounty-tips, reconnaissance, hidden-recon | 23-Feb-2025 |
| Exploiting an Exposed Swagger File to Achieve RCE | https://elhadadx.medium.com/exploiting-an-exposed-swagger-file-to-achieve-rce-cceb4d1f8ad0?source=rss------bug_bounty-5 | 0Xelhadadx | penetration-testing, security, bug-bounty, information-security, rce | 23-Feb-2025 |
| Part 2: $1000 Bug Bounty Guide — Advanced JavaScript Analysis for Hidden Vulnerabilities | https://hackersatty.medium.com/part-2-1000-bug-bounty-guide-advanced-javascript-analysis-for-hidden-vulnerabilities-5a47645b575f?source=rss------bug_bounty-5 | hackersatty | bug-bounty-writeup, penetration-testing, bug-bounty, owasp-top-10, hacking | 23-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-108) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-108-fc10603a0583?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips, hacking | 23-Feb-2025 |
| Cross-site scripting Lab- 2: Stored XSS into HTML context with nothing encoded | https://medium.com/@mehedihasanemonceh/cross-site-scripting-lab-2-stored-xss-into-html-context-with-nothing-encoded-67318fe316b2?source=rss------bug_bounty-5 | Mehedi Hasan Emon | bug-bounty, cross-site-scripting, website-security, portswigger, xss-attack | 23-Feb-2025 |
| $1000-$10k worth Leaks via Github Secret Dorks | https://infosecwriteups.com/1000-10k-worth-leaks-via-github-secret-dorks-6e13a2b7617a?source=rss------bug_bounty-5 | It4chis3c | leaked, secrets, bug-bounty, github, github-dorking | 23-Feb-2025 |
| Admin Account Takeover in Moodle! | https://medium.com/@Nightbloodz/admin-account-takeover-in-moodle-093708a0f749?source=rss------bug_bounty-5 | Alvaro Balada | infosec, cve, cybersecurity, bug-bounty-writeup, bug-bounty | 23-Feb-2025 |
| Comprehensive CEH v13 Study Guide | https://medium.com/@verylazytech/comprehensive-ceh-v13-study-guide-965965af5c06?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, penetration-testing, hacking, ceh-certification, bug-bounty | 23-Feb-2025 |
| Are Private Bug Bounty Programs Worth It? The Truth About Invites | https://medium.com/@HackerNasr/are-private-bug-bounty-programs-worth-it-the-truth-about-invites-164f94842d54?source=rss------bug_bounty-5 | HackerNasr | cybersecurity, ethical-hacking, penetration-testing, hacking, bug-bounty | 23-Feb-2025 |
| Subdomain Enumeration Like Never Before: Unveiling rsecloud.com — The Hidden Gem for Advanced Recon | https://osintteam.blog/subdomain-enumeration-like-never-before-unveiling-rsecloud-com-the-hidden-gem-for-advanced-recon-322bcd900837?source=rss------bug_bounty-5 | hacker_might | bug-bounty, subdomains-enumeration, bug-bounty-tips, reconnaissance, hidden-recon | 23-Feb-2025 |
| How I Found an Easy Dom xss. | https://medium.com/infosecmatrix/how-i-found-an-easy-dom-xss-b93bbe09e2bf?source=rss------bug_bounty-5 | loyalonlytoday | tips, xss-attack, bug-bounty, hacking, cybersecurity | 23-Feb-2025 |
| ️ Top Tools Used for Bug Hunting | https://medium.com/@vipulsonule71/%EF%B8%8F-top-tools-used-for-bug-hunting-d1f40926733a?source=rss------bug_bounty-5 | Vipul Sonule | hacking, technology, writing, bug-bounty, vulnerability | 23-Feb-2025 |
| $100-$5000 worth File Upload Vulnerability | Advanced Techniques | https://infosecwriteups.com/100-5000-worth-file-upload-vulnerability-advanced-techniques-7c598837607f?source=rss------bug_bounty-5 | It4chis3c | file-upload-vulnerability, bug-bounty, secrets, file-upload, bypass | 23-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-106) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-106-f15dc8fd13f8?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty-tips, bug-bounty, ethical-hacking, cybersecurity | 23-Feb-2025 |
| HackTheBox Challenge Only-Hacks | https://medium.com/@maxcyber882/hackthebox-challenge-only-hacks-d96d3aeb465c?source=rss------bug_bounty-5 | Maxcyber | hackthebox, infosec, cybersecurity, bug-bounty | 23-Feb-2025 |
| Bank offer IDOR Fix Bypassed: How I Accessed Unauthorized Offers and Secured a $10,000 Bounty —… | https://bxmbn.medium.com/bank-offer-idor-fix-bypassed-how-i-accessed-unauthorized-offers-and-secured-a-10-000-bounty-41052b31a2fc?source=rss------bug_bounty-5 | bombon | bug-bounty, cybersecurity, idor-vulnerability | 23-Feb-2025 |
| Day 18: How a Researcher Hacked One of the Biggest Airlines Group in the World | https://medium.com/@danielbelay/day-18-how-a-researcher-hacked-one-of-the-biggest-airlines-group-in-the-world-e2b896e74503?source=rss------bug_bounty-5 | dani3l | ethical-hacking, account-takeover, ato, bug-bounty | 23-Feb-2025 |
| Let’s Talk About Encryption And IDORs(Yes, IDOR,s Again)— @bxmbn | https://bxmbn.medium.com/lets-talk-about-encryption-and-idors-yes-idor-s-again-bxmbn-911bfb7a2de3?source=rss------bug_bounty-5 | bombon | bug-bounty, encryption, idor | 23-Feb-2025 |
| How I Hacked India’s Most Popular Matrimony Website and Earned a ₹10,000 Amazon Gift Card | https://infosecwriteups.com/how-i-hacked-indias-most-popular-matrimony-website-and-earned-a-10-000-amazon-gift-card-4dad7b6eff5d?source=rss------bug_bounty-5 | Vivek PS | cybersecurity, bug-bounty, programming, penetration-testing, hacking | 23-Feb-2025 |
| Top 3 Books to get started Bug Hunting | https://medium.com/@julius.grosserode.19/top-3-books-to-get-started-bug-hunting-e20db0ccb9c6?source=rss------bug_bounty-5 | Julio | bug-bounty, hacking-books, hacking | 23-Feb-2025 |
| Hijacking Sessions with IDOR and XSS— @bxmbn | https://bxmbn.medium.com/hijacking-sessions-with-idor-and-xss-bxmbn-396f99761a85?source=rss------bug_bounty-5 | bombon | idor, cross-site-scripting, bug-bounty | 23-Feb-2025 |
| Account Takeover (ATO): A Practical Guide to Finding and Preventing Attacks | https://cyberw1ng.medium.com/account-takeover-ato-a-practical-guide-to-finding-and-preventing-attacks-64c071d0ae84?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, cybersecurity, bug-bounty, careers, education | 23-Feb-2025 |
| Account Takeover (ATO): A Practical Guide to Finding and Preventing Attacks | https://osintteam.blog/account-takeover-ato-a-practical-guide-to-finding-and-preventing-attacks-64c071d0ae84?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, cybersecurity, bug-bounty, careers, education | 23-Feb-2025 |
| How to Find XSS in Web Applications in Bug Hunting ️♂️ | https://medium.com/@vipulsonule71/how-to-find-xss-in-web-applications-in-bug-hunting-%EF%B8%8F-%EF%B8%8F-e5b3e9e27835?source=rss------bug_bounty-5 | Vipul Sonule | technology, writing, bug-bounty, cybersecurity, hacking | 22-Feb-2025 |
| How I Found a Confidential Business Agreement on Wayback Machine | https://aiwolfie.medium.com/how-i-found-a-confidential-business-agreement-on-wayback-machine-efd1f0abf4cf?source=rss------bug_bounty-5 | AIwolfie | bug-bounty, bug-bounty-writeup, cybersecurity, hacking, hackerone | 22-Feb-2025 |
| SQL Injection Vulnerability Analysis and Mitigation | https://medium.com/@shibinkodoth1/sql-injection-vulnerability-analysis-and-mitigation-4a3180976145?source=rss------bug_bounty-5 | Shibin Balakrishnan | hacking, cybersecurity, sql, sql-injection, bug-bounty | 22-Feb-2025 |
| My Approach to Bypassing Strong WAF in XSS | https://medium.com/@randixploit.shtml/my-approach-to-bypassing-strong-waf-in-xss-0c2e0864043b?source=rss------bug_bounty-5 | Just R | penetration-testing, xss-attack, bug-bounty-writeup, bug-bounty, bypass | 22-Feb-2025 |
| Finding the origin IP address | https://infosecwriteups.com/finding-the-origin-ip-address-1e9cd5073e8c?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, programming, tips, ethical-hacking | 22-Feb-2025 |
| What is the Dark Web? A Complete Guide for Businesses | https://medium.com/@08hakr/what-is-the-dark-web-a-complete-guide-for-businesses-15413b9a3aba?source=rss------bug_bounty-5 | Kshirsagar Hrushikesh | hacking, computer-science, cybersecurity, bug-bounty, darkweb | 22-Feb-2025 |
| The Dark Web: A Business Survival Guide | https://medium.com/@cybershastra7/the-dark-web-a-business-survival-guide-dc4d36d4c3ec?source=rss------bug_bounty-5 | CyberShastra | cybersecurity, bug-bounty, darkweb, computer-science, hacking | 22-Feb-2025 |
| Silent Takeover: How We Hacked Authentication Flows to Compromise 2000+ Healthcare Tenants with… | https://pandyamayur2018.medium.com/silent-takeover-how-we-hacked-authentication-flows-to-compromise-2000-healthcare-tenants-with-fa51817c3086?source=rss------bug_bounty-5 | Mayur Pandya | vapt, cybersecurity, authentication, bug-bounty, infosec | 22-Feb-2025 |
| XSS Chronicles: How I Stumbled Upon a Critical API Key Leak | https://medium.com/@soufianehabti/xss-chronicles-how-i-stumbled-upon-a-critical-api-key-leak-9ea65ffc3f5a?source=rss------bug_bounty-5 | Soufiane Habti | bug-bounty, cybersecurity, ethical-hacking | 22-Feb-2025 |
| Silent Takeover: How We Hacked Authentication Flows to Compromise 2000+ Healthcare Tenants with… | https://pandyamayurrr.medium.com/silent-takeover-how-we-hacked-authentication-flows-to-compromise-2000-healthcare-tenants-with-fa51817c3086?source=rss------bug_bounty-5 | Mayur Pandya | vapt, cybersecurity, authentication, bug-bounty, infosec | 22-Feb-2025 |
| Breaking Boundaries: My Journey from limited Stored XSS to Open Redirect & a Sneaky CSRF Referrer… | https://medium.com/@0xNayelx/breaking-boundaries-my-journey-from-limited-stored-xss-to-open-redirect-a-sneaky-csrf-referrer-6dc939cf7aed?source=rss------bug_bounty-5 | 0xNayel | bug-bounty, security, bug-bounty-tips, writeup, bug-bounty-writeup | 22-Feb-2025 |
| Identifying Our Target from Bugcrowd | https://medium.com/@mdsahat6397/identifying-our-target-from-bugcrowd-fdb3de6a98ab?source=rss------bug_bounty-5 | Tasneem Sahat | bugcrowd, bug-bounty | 22-Feb-2025 |
| Web Security Academy: File path traversal, traversal sequences blocked with absolute path bypass | https://medium.com/@mehedihasanemonceh/web-security-academy-file-path-traversal-traversal-sequences-blocked-with-absolute-path-bypass-99255db560d6?source=rss------bug_bounty-5 | Mehedi Hasan Emon | bug-bounty, portswigger, cybersecurity, lfi, path-traversal | 22-Feb-2025 |
| 90% Hunters V/S 10% Hunters | https://bitpanic.medium.com/90-hunters-v-s-10-hunters-fa9089523181?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, programming, bug-bounty-tips, bug-bounty, technology | 22-Feb-2025 |
| 1000$ Bounty in less than 30 Seconds via the power of custom wordlists | https://0xrasputin.medium.com/1000-bounty-in-less-than-30-seconds-via-the-power-of-custom-wordlists-3f7deba5bf08?source=rss------bug_bounty-5 | 0xRasputin | bug-hunting, pentesting, bug-bounty, recon | 22-Feb-2025 |
| Web Application Technologies | https://medium.com/@muhammad4208/web-application-technologies-aaa947303675?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | web-technology, bug-bounty-tips, bug-bounty-program, bug-bounty, bug-bounty-hunter | 22-Feb-2025 |
| Exploiting the Shadows: How I Uncovered a Command Injection via OOB and Bagged $800 | https://medium.com/@kura1yum3/exploiting-the-shadows-how-i-uncovered-a-command-injection-via-oob-and-bagged-800-73c4bc90a130?source=rss------bug_bounty-5 | KuroSh1R0 | hackerone, bug-bounty | 22-Feb-2025 |
| ️♂️How to Find XSS in Bug Hunting ️♂️ | https://medium.com/@vipulsonule71/%EF%B8%8F-%EF%B8%8F-how-to-find-xss-in-bug-hunting-%EF%B8%8F-%EF%B8%8F-d7243160da01?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, ai, bug-bounty, penetration-testing, technology | 22-Feb-2025 |
| $100-$200 worth 403 Bypass Techniques | https://infosecwriteups.com/100-200-worth-403-bypass-techniques-e4c22064091a?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, secrets, bypass, 403-forbidden, hidden | 22-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-105) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-105-6016b1f36174?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty, hacking, ethical-hacking, bug-bounty-tips | 22-Feb-2025 |
| Bug Bounty Restart- Phase 1: Preparation & Mindset | https://infosecwriteups.com/bug-bounty-restart-phase-1-preparation-mindset-57ca877a9278?source=rss------bug_bounty-5 | Om Arora | cybersecurity, infosec, bug-bounty, bug-bounty-writeup, technology | 22-Feb-2025 |
| Day 17: [$5K] Misconfigured Reset Password Leads to Account Takeover (No User Interaction ATO) | https://medium.com/@danielbelay/day-17-5k-misconfigured-reset-password-leads-to-account-takeover-no-user-interaction-ato-4d378e995fc2?source=rss------bug_bounty-5 | dani3l | account-takeover, ato, bug-bounty | 22-Feb-2025 |
| CRLF Injection: How a Simple Bug Can Earn You $1500! | https://cybersecuritywriteups.com/crlf-injection-how-a-simple-bug-can-earn-you-1500-ff3aabc54a77?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, ethical-hacking, infosec-write-ups, bug-bounty-tips, osint | 22-Feb-2025 |
| The Art of Software Testing: Types, Methods, and Best Practices | https://i-am-tibi.medium.com/the-art-of-software-testing-types-methods-and-best-practices-608cc6770136?source=rss------bug_bounty-5 | Tibb.In | software-testing, qa-testing, qa, bugs, bug-bounty | 22-Feb-2025 |
| Earn $500 with Open Redirect Vulnerabilities! | https://osintteam.blog/earn-500-with-open-redirect-vulnerabilities-224d637f683c?source=rss------bug_bounty-5 | Krish_cyber | information-security, bug-bounty, infosec-write-ups, osint, open-redirect | 22-Feb-2025 |
| Methods and Tools for Extracting Information from Websites | https://medium.com/@paritoshblogs/methods-and-tools-for-extracting-information-from-websites-c26b4584ef43?source=rss------bug_bounty-5 | Paritosh | ai, bug-bounty, python, web-scraping, cybersecurity | 22-Feb-2025 |
| Finding Juicy Information from GraphQL | https://cyberw1ng.medium.com/finding-juicy-information-from-graphql-22fb09bd9e61?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, jobs, bug-bounty, programming, cybersecurity | 22-Feb-2025 |
| Finding Juicy Information from GraphQL | https://osintteam.blog/finding-juicy-information-from-graphql-22fb09bd9e61?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, jobs, bug-bounty, programming, cybersecurity | 22-Feb-2025 |
| $100 Bounty: Username Restriction Bypassed | https://medium.com/@kumawatabhijeet2002/100-bounty-username-restriction-bypassed-0d6422564c36?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, cybersecurity, hacking, secrets, bug-bounty | 21-Feb-2025 |
| Burp Suite AI Extension for Pentester | https://hackerassociate.medium.com/burp-suite-ai-extension-for-pentester-742358811884?source=rss------bug_bounty-5 | Harshad Shah | burpsuite, infosec, hacking, cybersecurity, bug-bounty | 21-Feb-2025 |
| 【Recognition】Excellent Security Researcher in January 2025 → iiiiiinv | https://medium.com/@security.tecno/recognition-excellent-security-researcher-in-january-2025-iiiiiinv-29bcf9b3d91b?source=rss------bug_bounty-5 | TECNO Security | web-development, apps, security, research, bug-bounty | 21-Feb-2025 |
| Getting Started with Bug Bounty Hunting: A Simple Guide(Free Version) | https://medium.com/@bombhajohn/getting-started-with-bug-bounty-hunting-a-simple-guide-free-version-3363ecd320c2?source=rss------bug_bounty-5 | Folks47ghee | cyber-security-awareness, bug-bounty, bug-bounty-tips, data, cybersecurity | 21-Feb-2025 |
| OWASP Top 10: The Hacker’s Favorite Menu (And How to Ruin Their Appetite) | https://falilu.medium.com/owasp-top-10-the-hackers-favorite-menu-and-how-to-ruin-their-appetite-12b67dfaa998?source=rss------bug_bounty-5 | Falilu Rahman | owasp-top-10, web-application-security, technology, cybersecurity, bug-bounty | 21-Feb-2025 |
| $100 Bounty: Username Restriction Bypassed | https://infosecwriteups.com/100-bounty-username-restriction-bypassed-0d6422564c36?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, cybersecurity, hacking, secrets, bug-bounty | 21-Feb-2025 |
| $50-$500 worth Information Disclosure Bug Automation | https://it4chis3c.medium.com/50-500-worth-information-disclosure-bug-automation-3afc596fa206?source=rss------bug_bounty-5 | It4chis3c | information-disclosure, sensitive-data, bug-bounty, hidden, secrets | 21-Feb-2025 |
| My First Bug Discovery in Facebook Bug Bounty 2025 | https://medium.com/@bayusetb/my-first-bug-discovery-in-facebook-bug-bounty-2025-728b14eaf6cc?source=rss------bug_bounty-5 | Bayusetb | facebook-bug-bounty, meta-bug-bounty, bug-bounty-writeup, idor, bug-bounty | 21-Feb-2025 |
| From a Steward Security Gaurd to a Cybersecurity Startup Founder! | https://ajakcybersecurity.medium.com/from-a-steward-security-gaurd-to-a-cybersecurity-startup-founder-5fed143b6b24?source=rss------bug_bounty-5 | AJAK Cyber Academy | bug-bounty, cybersecurity, startup, technology, hacking | 21-Feb-2025 |
| Note-taking apps for bug bounty hunting and ethical hacking purposes | https://medium.com/readers-club/note-taking-apps-for-bug-bounty-hunting-and-ethical-hacking-purposes-635a198ec9d9?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, notetaking, tips, notes, cybersecurity | 21-Feb-2025 |
| How to Find Information Disclosure Bugs in Bug Hunting | https://medium.com/@vipulsonule71/how-to-find-information-disclosure-bugs-in-bug-hunting-44954ee8b2fd?source=rss------bug_bounty-5 | Vipul Sonule | technology, cybersecurity, bug-bounty, hacking, penetration-testing | 21-Feb-2025 |
| Burp Suite AI Extension for Pentester | https://medium.com/offensive-black-hat-hacking-security/burp-suite-ai-extension-for-pentester-742358811884?source=rss------bug_bounty-5 | Harshad Shah | burpsuite, infosec, hacking, cybersecurity, bug-bounty | 21-Feb-2025 |
| Find 100+ CVEs Using These 5 Simple GitHub Dorks | https://medium.com/@ibtissamhammadi/find-100-cves-using-these-5-simple-github-dorks-bfdde1653a20?source=rss------bug_bounty-5 | Ibtissam Hammadi | github, programming, infosec, bug-bounty, cybersecurity | 21-Feb-2025 |
| Inside Our Car Hacking Demonstrator: A Training Platform for Automotive Cybersecurity | https://medium.com/@maajix/inside-our-car-hacking-demonstrator-a-training-platform-for-automotive-cybersecurity-4c95035b2994?source=rss------bug_bounty-5 | Majix | bug-bounty-tips, car-hacking, bug-bounty, automotive, hacking | 21-Feb-2025 |
| Day 16: Massive Users Account Takeovers (Chaining Vulnerabilities to IDOR) | https://medium.com/@danielbelay/day-16-massive-users-account-takeovers-chaining-vulnerabilities-to-idor-11d1b0731c4c?source=rss------bug_bounty-5 | dani3l | ethical-hacking, pen-testing-tool, bug-bounty, ato | 21-Feb-2025 |
| Easiest Vulnerability $200 You can test it under 2 minutes | https://progprnv.medium.com/easiest-vulnerability-200-you-can-test-it-under-2-minutes-2f45b4a0c785?source=rss------bug_bounty-5 | progprnv | bug-bounty-tips, bug-bounty-writeup, cybersecurity, bug-bounty | 21-Feb-2025 |
| I Earned $500 in 2 Minutes by Finding a Sensitive File! | https://cybersecuritywriteups.com/i-earned-500-in-2-minutes-by-finding-a-sensitive-file-a71817a66ba9?source=rss------bug_bounty-5 | Krish_cyber | idor, hacking, bug-bounty, ai, infosec | 21-Feb-2025 |
| Pre-Seeding Trap Story: Exploiting PII Data Before It’s Logged | https://medium.com/@ahmedelmorsy312/pre-seeding-trap-story-exploiting-pii-data-before-its-logged-8284f47a5854?source=rss------bug_bounty-5 | Ahmed Elmorsi | bug-hunting, cybersecurity, bug-bounty, hackerone | 21-Feb-2025 |
| How I Discovered a Bug to Delete Any User Account! | https://medium.com/@kumawatabhijeet2002/how-i-discovered-a-bug-to-delete-any-user-account-b8ae1c60a6a9?source=rss------bug_bounty-5 | Abhijeet kumawat | cybersecurity, bug-bounty, infosec, money, hacking | 21-Feb-2025 |
| How to Find Information Disclosure Bug | https://medium.com/@vipulsonule71/how-to-find-information-disclosure-bugs-in-bug-hunting-44954ee8b2fd?source=rss------bug_bounty-5 | Vipul Sonule | technology, cybersecurity, bug-bounty, hacking, penetration-testing | 21-Feb-2025 |
| Announcing the Lysa (Testnet) Bug Bounty Program! | https://medium.com/@GoRWAChain/announcing-the-lysa-testnet-bug-bounty-program-b73ed9adbd5c?source=rss------bug_bounty-5 | Go! SmartChain AI | bug-bounty, blockchain, crypto, web3, cryptocurrency | 21-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-104) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-104-b2c76940b84b?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | ethical-hacking, hacking, bug-bounty-tips, bug-bounty, cybersecurity | 21-Feb-2025 |
| How to Choose a Bug Bounty Platform | https://medium.com/@hackrate/how-to-choose-a-bug-bounty-platform-178e0eb95202?source=rss------bug_bounty-5 | Levente Molnar | hacking, bug-bounty-tips, cybersecurity, ethical-hacking, bug-bounty | 21-Feb-2025 |
| How I Found 5 Reflected XSS in a Public Program | https://medium.com/@mahmodziad40/how-i-found-5-reflected-xss-in-a-public-program-44b168ae6526?source=rss------bug_bounty-5 | httpzuz | bug-bounty-writeup, bug-bounty, reflected-xss, bug-bounty-tips, xss-attack | 21-Feb-2025 |
| API Loophole: How I Bypassed CAPTCHA to Create Unlimited Accounts | https://medium.com/@rahulgairola/api-loophole-how-i-bypassed-captcha-to-create-unlimited-accounts-0d21de1f96e2?source=rss------bug_bounty-5 | Rahul Gairola | api-security, bug-bounty, api-security-testing, bug-bounty-tips, bug-bounty-writeup | 21-Feb-2025 |
| Dynamic Application Security Testing (DAST) | https://medium.com/@evoskolyey/dynamic-application-security-testing-dast-95f70aa16745?source=rss------bug_bounty-5 | Eugene Voskoley | bug-bounty, appsec, devsecops, cybersecurity, dast | 21-Feb-2025 |
| $100 worth Rate Limit Bypass Bug |Advanced Tricks & Tips | https://it4chis3c.medium.com/100-worth-rate-limit-bypass-bug-advanced-tricks-tips-7722a98553e3?source=rss------bug_bounty-5 | It4chis3c | hidden, rate-limit, rate-limit-bypass, secrets, bug-bounty | 21-Feb-2025 |
| How to Find Your First Bug and Get Paid — Bug Bounty Made Easy | https://krishna-cyber.medium.com/how-to-find-your-first-bug-and-get-paid-bug-bounty-made-easy-da3de634265c?source=rss------bug_bounty-5 | Krish_cyber | idor, info-sec-writeups, osint, bug-bounty, readers-club | 21-Feb-2025 |
| Installing and Using Nuclei for Automated Security Scanning | https://abhayal.medium.com/installing-and-using-nuclei-for-automated-security-scanning-1b4f53de3ae5?source=rss------bug_bounty-5 | Abhayal | bug-bounty, reconnaissance, hacking, bug-bounty-writeup, bug-bounty-tips | 21-Feb-2025 |
| Bug Report Rejected? Here’s What You Can Do. | https://medium.com/@HackerNasr/bug-report-rejected-heres-what-you-can-do-b4407d7c19b8?source=rss------bug_bounty-5 | HackerNasr | cybersecurity, hacking, penetration-testing, bug-bounty, ethical-hacking | 21-Feb-2025 |
| 25000$ IDOR: How a Simple ID Enumeration Exposed Private Data | https://cyberw1ng.medium.com/25000-idor-how-a-simple-id-enumeration-exposed-private-data-7de2f60c46fd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | jobs, cybersecurity, careers, bug-bounty, programming | 21-Feb-2025 |
| The Quickest Way To Learn XSS In 2025! (Free Version) | https://medium.com/@bombhajohn/the-quickest-way-to-learn-xss-in-2025-free-version-b006fa64f3ed?source=rss------bug_bounty-5 | Folks47ghee | bug-bounty, cybersecurity, technology, data, bug-bounty-tips | 21-Feb-2025 |
| 25000$ IDOR: How a Simple ID Enumeration Exposed Private Data | https://osintteam.blog/25000-idor-how-a-simple-id-enumeration-exposed-private-data-7de2f60c46fd?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | jobs, cybersecurity, careers, bug-bounty, programming | 21-Feb-2025 |
| Multiple Sensitive Data Leaks — A Deep Dive | https://aiwolfie.medium.com/multiple-sensitive-data-leaks-a-deep-dive-b913172b5146?source=rss------bug_bounty-5 | AIwolfie | cybersecurity, osint, bug-bounty, information-disclosure, hacking | 20-Feb-2025 |
| WordPress users Disclosure Bug Bounty report | https://aimasterprompt.medium.com/wordpress-users-disclosure-bug-bounty-report-d1e901bfc6cb?source=rss------bug_bounty-5 | aimaster | cybersecurity, wordpress, information-technology, infosec, bug-bounty | 20-Feb-2025 |
| Top 10 Tools Every Bug Bounty Hunter Must Use | https://osintteam.blog/top-10-tools-every-bug-bounty-hunter-must-use-18046e2306a8?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, tools, infosec, cybersecurity, bug-bounty | 20-Feb-2025 |
| OWASP Top 10 Vulnerabilities 2025: A Comprehensive Guide | https://osintteam.blog/owasp-top-10-vulnerabilities-2025-a-comprehensive-guide-cc0019ded233?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity, security-testing, bug-bounty, penetration-testing, application-security | 20-Feb-2025 |
| CRLF Injection: Guide to Finding & Exploiting Vulnerabilities | https://osintteam.blog/crlf-injection-guide-to-finding-exploiting-vulnerabilities-75df64c274e6?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, crlf-injection, money, cybersecurity, hacking | 20-Feb-2025 |
| How to crawl a website like a pro | https://siratsami71.medium.com/how-to-crawl-a-website-like-a-pro-008f98f41f9f?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | pentesting, bug-bounty | 20-Feb-2025 |
| $5M Critical Vulnerability Discovery: 3 Warning Signs for 2025 | https://medium.com/@ibtissamhammadi/5m-critical-vulnerability-discovery-3-warning-signs-for-2025-f407bb9b7998?source=rss------bug_bounty-5 | Ibtissam Hammadi | security, bug-bounty, vulnerability, infosec, cybersecurity | 20-Feb-2025 |
| ₹1,000 in 10 mins: BookMyShow’s Open redirect bug! | https://infosecwriteups.com/1-000-in-10-mins-bookmyshows-open-redirect-bug-914f47590ecf?source=rss------bug_bounty-5 | Vivek PS | cybersecurity, bug-bounty, hacking, bug-bounty-tips, programming | 20-Feb-2025 |
| Core Defense Mechanisms | https://medium.com/@muhammad4208/core-defense-mechanisms-b9ac54c29e52?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | defense-mechanism, bug-bounty-tips, web-development, bug-bounty | 20-Feb-2025 |
| UUID Injection: 0-Click Superadmin ATO | https://medium.com/@RekoJR/uuid-injection-0-click-superadmin-ato-3dc46a19c9ad?source=rss------bug_bounty-5 | Reko ! | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 20-Feb-2025 |
| $1000 Bug Bounty Guide: Uncovering Hidden Vulnerabilities Through JavaScript Analysis | https://hackersatty.medium.com/1000-bug-bounty-guide-uncovering-hidden-vulnerabilities-through-javascript-analysis-c3f1a698b91b?source=rss------bug_bounty-5 | hackersatty | hacking, penetration-testing, owasp-top-10, bug-bounty-writeup, bug-bounty | 20-Feb-2025 |
| Exploiting GraphQL Vulnerabilities: How Misconfigurations Can Lead to Data Leaks | https://cyberw1ng.medium.com/exploiting-graphql-vulnerabilities-how-misconfigurations-can-lead-to-data-leaks-c41d50a64cc3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, jobs, careers, education, bug-bounty | 20-Feb-2025 |
| Y2FuIHlvdSByZWNvbj8/ | can you recon? | Hacker101 CTF Write-Up | https://medium.com/@sari.mmusab/y2fuihlvdsbyzwnvbj8-can-you-recon-hacker101-ctf-write-up-f2a446ecc9f0?source=rss------bug_bounty-5 | Musab Sarı | cybersecurity, php, ctf, bug-bounty, writeup | 20-Feb-2025 |
| Open redirect in logout | https://medium.com/@muhmoud.barket/open-redirect-in-logout-53656dbb922c?source=rss------bug_bounty-5 | Mahmoud Barkat | bug-bounty-writeup, bug-bounty-tips, bug-bounty | 20-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-103) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-103-695beef8d81c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, hacking, ethical-hacking, bug-bounty-tips, cybersecurity | 20-Feb-2025 |
| $100 worth Open Redirect Automation | https://it4chis3c.medium.com/100-worth-open-redirect-automation-3e2f9e36bade?source=rss------bug_bounty-5 | It4chis3c | hidden, secrets, open-redirect, bug-bounty, practical | 20-Feb-2025 |
| The Most Innovative Bug Bounty Platform | https://medium.com/@hackrate/the-most-innovative-bug-bounty-platform-bcd812cb3670?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty-tips, hacking, bug-bounty, ethical-hacking, cybersecurity | 20-Feb-2025 |
| Even Brahma Had Brahmastra — GarudaX Have Digi-Astra for You | https://medium.com/@modernshubhamgupta/even-brahma-had-brahmastra-garudax-have-digi-astra-for-you-834a75d7b337?source=rss------bug_bounty-5 | Shubham Raj | vapt, bug-bounty, vulnerability-assessment, digi-astra, cybersecurity | 20-Feb-2025 |
| Why PortSwigger Labs is Essential for Beginner bug hunter | https://medium.com/@mehedihasanemonceh/why-portswigger-labs-is-essential-for-beginner-bug-hunter-8a940472d126?source=rss------bug_bounty-5 | Mehedi Hasan Emon | portswigger-lab, bug-bounty, portswigger, bug-hunter, cybersecurity | 20-Feb-2025 |
| Future of Bug Reporting: How AI in Chrome DevTools is Revolutionizing QA | https://medium.com/@hafizghulamabbas/future-of-bug-reporting-how-ai-in-chrome-devtools-is-revolutionizing-qa-b2335c092541?source=rss------bug_bounty-5 | Hafiz Ghulam Abbas - Sr. SQA Automation Engineer | qa, ai, chrome, testing, bug-bounty | 20-Feb-2025 |
| Shodan for Hackers: The Search Engine for the Internet of Everything | https://medium.com/@ajudeb55/shodan-for-hackers-the-search-engine-for-the-internet-of-everything-1a6a7c962d85?source=rss------bug_bounty-5 | Aju Deb | programming, hacking, bug-bounty, cybersecurity, technology | 20-Feb-2025 |
| Exploiting GraphQL Vulnerabilities: How Misconfigurations Can Lead to Data Leaks | https://osintteam.blog/exploiting-graphql-vulnerabilities-how-misconfigurations-can-lead-to-data-leaks-c41d50a64cc3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, jobs, careers, education, bug-bounty | 20-Feb-2025 |
| Top Search Engines for Hackers: The Ultimate Guide | https://medium.com/@ajudeb55/top-search-engines-for-hackers-the-ultimate-guide-00f7ab52689e?source=rss------bug_bounty-5 | Aju Deb | programming, hacking, cybersecurity, bug-bounty, technology | 19-Feb-2025 |
| Bug Bounty Made Me a MADMAN | https://medium.com/@thedevtaskofficial/bug-bounty-made-me-a-madman-346205a6e4af?source=rss------bug_bounty-5 | thedevtask official | bug-bounty, security-token, security, hacking, vulnerability | 19-Feb-2025 |
| Free VPS for penetration testing and bug bounty part 2 | https://infosecwriteups.com/free-vps-for-penetration-testing-and-bug-bounty-part-2-d88e7ec00e2c?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, vps, tips, bug-bounty, awareness | 19-Feb-2025 |
| Insecure Deserialization + Lab Resolution | https://medium.com/@0xpedrop/insecure-deserialization-lab-resolution-1f53adbf26a1?source=rss------bug_bounty-5 | 0xPedrop | cybersecurity, hacking, bug-bounty, bug-bounty-tips | 19-Feb-2025 |
| Unauthorized Access to Internal Panel via Response Manipulation | https://0onoproblem.medium.com/unauthorized-access-to-internal-panel-via-response-manipulation-0b6baaae9346?source=rss------bug_bounty-5 | 0_oNoProblem | bug-hunting, vulnerability-assessment, bug-bounty, info-sec-writeups, vulnerability | 19-Feb-2025 |
| $1000 Bounty: Command Injection Vulnerability | https://medium.com/infosecmatrix/1000-bounty-command-injection-vulnerability-b190222bf07a?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, hacking, command-injection, infosec | 19-Feb-2025 |
| How i got a fileupload vulnerability so easily | https://infosecwriteups.com/how-i-got-a-fileupload-vulnerability-so-easily-a659421a0523?source=rss------bug_bounty-5 | Le_Merdien | hacking, bug-bounty, networking, hackerone, penetration-testing | 19-Feb-2025 |
| I Hacked FIDE.com — Call me Hacknus Carlsen! | https://infosecwriteups.com/i-hacked-fide-com-call-me-hacknus-carlsen-529eeb55440d?source=rss------bug_bounty-5 | Vivek PS | chess, hacking, programming, cybersecurity, bug-bounty | 19-Feb-2025 |
| The Quickest Way To Learn XSS In 2025! | https://medium.com/@bombhajohn/how-i-learned-xss-e593a9b956e3?source=rss------bug_bounty-5 | Folks47ghee | cybersecurity, bug-bounty-tips, bug-bounty, bug-bounty-writeup, technology | 19-Feb-2025 |
| How to Find Subdomain Takeover in Bug Hunting | https://medium.com/@vipulsonule71/how-to-find-subdomain-takeover-in-bug-hunting-863b39a68755?source=rss------bug_bounty-5 | Vipul Sonule | penetration-testing, hacking, cybersecurity, bug-bounty, technology | 19-Feb-2025 |
| Inside Agoda’s Bug Bounty Program: How We Stay Ahead of Cyber Threats | https://medium.com/agoda-engineering/how-agoda-works-with-hackers-to-strengthen-its-security-2e4129299b8b?source=rss------bug_bounty-5 | Agoda Engineering | bug-bounty, engineering, cybersecurity, security, technology | 19-Feb-2025 |
| How easy is it to earn from bug bounties? The truth behind ethical hacking rewards | https://infosecwriteups.com/how-easy-is-it-to-earn-from-bug-bounties-the-truth-behind-ethical-hacking-rewards-1a88e1f58444?source=rss------bug_bounty-5 | Vivek PS | hacking, programming, cybersecurity, growth-mindset, bug-bounty | 19-Feb-2025 |
| Learn how to find one of the easy p4 bug | https://cybersecuritywriteups.com/learn-how-to-find-one-of-the-easy-p4-bug-4f6bdf29044c?source=rss------bug_bounty-5 | loyalonlytoday | bugs, penetration-testing, bug-bounty, cybersecurity, ethical-hacking | 19-Feb-2025 |
| OTP Login Rate Limit Bypass — The Easiest Bug for Beginners to Discover | https://infosecwriteups.com/otp-login-rate-limit-bypass-the-easiest-bug-for-beginners-to-discover-74cbf2432b72?source=rss------bug_bounty-5 | Vivek PS | ethical-hacking, programming, bug-bounty-tips, web-security, bug-bounty | 19-Feb-2025 |
| How I Earned a Hall of Fame Spot at UNESCO by Bypassing 403 Forbidden | https://infosecwriteups.com/how-i-earned-a-hall-of-fame-spot-at-unesco-by-bypassing-403-forbidden-fdb2185383f7?source=rss------bug_bounty-5 | Krunal Patel | bug-bounty, bug-bounty-writeup, hacking, penetration-testing, hall-of-fame | 19-Feb-2025 |
| Bluetooth Low Energy Hacking 101 | https://medium.com/@majix_de/bluetooth-low-energy-hacking-101-15a471d3e956?source=rss------bug_bounty-5 | Majix | bluetooth, hacking, penetration-testing, pentesting, bug-bounty | 19-Feb-2025 |
| How i got my name featured on Nebraska University Hall Of Fame. | https://medium.com/@eabubakr21/how-i-got-my-name-featured-on-nebraska-university-hall-of-fame-fdb1c16fc0f7?source=rss------bug_bounty-5 | Eslam Abu Bakr | penetration-testing, information-technology, bug-bounty, ethical-hacking, cybersecurity | 19-Feb-2025 |
| Linux Privilege Escalation, some ideas from tryhackme machines — part 2 | https://medium.com/@loaymorad11/linux-privilege-escalation-some-ideas-from-tryhackme-machines-part-2-77def0b1e361?source=rss------bug_bounty-5 | Loaymorad | tryhackme, bug-bounty, cybersecurity, hacking, hackthebox | 19-Feb-2025 |
| Beginner’s Guide: Basic Methods for Finding Android Application Vulnerabilities | https://medium.com/@security.tecno/beginners-guide-basic-methods-for-finding-android-application-vulnerabilities-f1da4e05341c?source=rss------bug_bounty-5 | TECNO Security | hacking, bug-bounty, apps, bonus, security | 19-Feb-2025 |
| Critical Security Vulnerability: Unauthenticated Access to /shipments/deleted Endpoint Leads to… | https://hackersatty.medium.com/critical-security-vulnerability-unauthenticated-access-to-shipments-deleted-endpoint-leads-to-7edb5d9b7f76?source=rss------bug_bounty-5 | hackersatty | hackerone, bug-bounty-writeup, penetration-testing, bug-bounty, owasp-top-10 | 19-Feb-2025 |
| How to Identify a Server’s Origin IP — And hy? | https://medium.com/@verylazytech/how-to-identify-a-servers-origin-ip-and-hy-b6312af71e51?source=rss------bug_bounty-5 | Very Lazy Tech | bypass, penetration-testing, cloudflare, ethical-hacking, bug-bounty | 19-Feb-2025 |
| File Upload Restrictions Bypass in S3 Bucket | https://saeed0x1.medium.com/file-upload-restrictions-bypass-in-s3-bucket-87c2717664a3?source=rss------bug_bounty-5 | SAEED | bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips, aws | 19-Feb-2025 |
| tool to generate XSS payloads. | https://medium.com/cyberscribers-exploring-cybersecurity/tool-to-generate-xss-payloads-7d8b323d187d?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, bug-bounty, xss-vulnerability, bugs, cross-site-scripting | 19-Feb-2025 |
| $2,000 Bounty: Unauthenticated Remote Code Execution to Reverse Shell — A Real-World Example | https://medium.com/@krishna9823420058/2-000-bounty-unauthenticated-remote-code-execution-to-reverse-shell-a-real-world-example-fd9dff5d9c3f?source=rss------bug_bounty-5 | Krish_cyber | osint, idor, hacking, infosec, bug-bounty | 19-Feb-2025 |
| How I Made $6,000 by Exploiting JWT Manipulation on a Web3 Crypto App | https://medium.com/@krishna9823420058/how-i-made-6-000-by-exploiting-jwt-manipulation-on-a-web3-crypto-app-f3ab440f02b6?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, jwt-token, osint, hacking, cybersecurity | 19-Feb-2025 |
| HTTP FILTER: Streamlining HTTP Response Analysis for Security Researchers | https://yogsec.medium.com/http-filter-streamlining-http-response-analysis-for-security-researchers-9e356e2065d2?source=rss------bug_bounty-5 | YogSec | http-filter, httpx, bug-bounty, http-tool, hacking-tools | 19-Feb-2025 |
| No Rate Limit: The Easiest Bug Bounty Payout You’re Missing | https://medium.com/@abdulbasitpriv/no-rate-limit-the-easiest-bug-bounty-payout-youre-missing-79335e39c377?source=rss------bug_bounty-5 | Abdul Basit Khan | bug-bounty, website, rate-limit, vulnerability, penetration-testing | 19-Feb-2025 |
| How I found SQL injection vulnerability on the government organization website! | https://hiddendom.medium.com/how-i-found-sql-injection-vulnerability-on-the-government-organization-website-01533dba5158?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-tips, bug-bounty, sql-injection, sql-injection-attack, bug-bounty-writeup | 19-Feb-2025 |
| LFI Advanced Methodology by Abhijeet | https://infosecwriteups.com/lfi-advanced-methodology-by-abhijeet-6663bede44c6?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, lfi, hacking, money, bug-bounty | 19-Feb-2025 |
| How to Identify a Server’s Origin IP — And Why? | https://medium.com/@verylazytech/how-to-identify-a-servers-origin-ip-and-hy-b6312af71e51?source=rss------bug_bounty-5 | Very Lazy Tech | bypass, penetration-testing, cloudflare, ethical-hacking, bug-bounty | 19-Feb-2025 |
| JSFScan: Automation for JavaScript Recon in Bug Bounty | https://bevijaygupta.medium.com/jsfscan-automation-for-javascript-recon-in-bug-bounty-af3273ac61bf?source=rss------bug_bounty-5 | Vijay Kumar Gupta | recon, automation, javascript, bug-bounty, jsfscan | 19-Feb-2025 |
| Turning XSS into Account Takeover (ATO): How to Level Up Your Exploit $$$ | https://medium.com/@HackerNasr/turning-xss-into-account-takeover-ato-how-to-level-up-your-exploit-16126c271476?source=rss------bug_bounty-5 | HackerNasr | cybersecurity, hacking, penetration-testing, ethical-hacking, bug-bounty | 19-Feb-2025 |
| EASY P3 “Broken Access Control” | https://medium.com/@a0xtrojan/easy-p3-broken-access-control-a178dcda8c58?source=rss------bug_bounty-5 | A0X_Trojan | bug-bounty, broken-access-control, privilege-escalation, medium, bug-bounty-writeup | 19-Feb-2025 |
| CAPHTB | https://medium.com/@a.essam0_o/caphtb-32d9a8c5ded1?source=rss------bug_bounty-5 | A.Essam | hacking, networking, ssh, privilege-escalation, bug-bounty | 19-Feb-2025 |
| Bug Bounty Methodology: Exploiting Dev & Staging Environments for Maximum Bounty | https://medium.com/@zerodaystories/bug-bounty-methodology-exploiting-dev-staging-environments-for-maximum-bounty-414419faf744?source=rss------bug_bounty-5 | 0day stories | penetration-testing, bug-bounty-writeup, bug-bounty, bug-bounty-tips, cybersecurity | 19-Feb-2025 |
| $50-$100 P5 & P4 Bug Automation with Nuclei | https://cybersecuritywriteups.com/50-100-p5-p4-bug-automation-with-nuclei-e7fce9a60dfd?source=rss------bug_bounty-5 | It4chis3c | secrets, nuclei-template, nucleus, bug-bounty, hidden | 19-Feb-2025 |
| Hacked My Way Into Google’s Hall of Fame! The Relentless Bug Bounty Hunt | https://rootxabit.medium.com/hacked-my-way-into-googles-hall-of-fame-the-relentless-bug-bounty-hunt-75d9d2cdd8a0?source=rss------bug_bounty-5 | xabit • hacks | bug-bounty, google, hacker, tryhackme, bugcrowd | 19-Feb-2025 |
| The Web Application Hacker’s Handbook: Web Application (In)security | https://medium.com/@muhammad4208/the-web-application-hackers-handbook-web-application-in-security-b2e7df531100?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty, bug-bounty-tips, web-application-security | 19-Feb-2025 |
| Subdomain Enumeration: Expanding the Attack Surface | https://medium.com/@muhammad4208/subdomain-enumeration-expanding-the-attack-surface-5fefe74f1d83?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty, bug-bounty-hunter, bug-bounty-program, subdomains-enumeration, bug-bounty-tips | 19-Feb-2025 |
| How I Stumbled Upon India’s Government Data Leak – and Why It’s a Wake-Up Call | https://medium.com/@warisjeet31/how-i-stumbled-upon-indias-government-data-leak-and-why-it-s-a-wake-up-call-c90695d84a29?source=rss------bug_bounty-5 | sin99xx | information-technology, bug-bounty, infosec, penetration-testing, cybersecurity | 19-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-102) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-102-33f5cc96116c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, hacking, bug-bounty-tips, ethical-hacking, bug-bounty | 19-Feb-2025 |
| How I Found a CSRF via a misconfiguration in graphql | https://medium.com/@ismailismailgamal52/how-i-found-a-csrf-via-a-misconfiguration-in-graphql-42676a1e12b7?source=rss------bug_bounty-5 | ISMAILSHADOW | bug-bounty, graphql, csrf | 19-Feb-2025 |
| Did You Know … A Woman Launched the U.S. Government’s First Bug Bounty Program | https://medium.com/did-you-know-short-fun-facts/did-you-know-a-woman-launched-the-u-s-governments-first-bug-bounty-program-3b7a32ebf00b?source=rss------bug_bounty-5 | Marisa Tranchitella Foltz | cybersecurity, did-you-know, bug-bounty, women-in-tech, people | 19-Feb-2025 |
| “There is no subdomain with no usage” How understanding this rule led to 5 Criticals | https://kalawy.medium.com/there-is-no-subdomain-with-no-usage-how-understanding-this-rule-led-to-5-criticals-59e815ca6df2?source=rss------bug_bounty-5 | Kalawy | information-disclosure, bug-bounty, ssrf, bug-hunting, hacking | 19-Feb-2025 |
| EASY P3 “Broken Access Control” | https://medium.com/@a0xtrojan/easy-p3-broken-access-control-7c28702cb1ee?source=rss------bug_bounty-5 | A0X_Trojan | broken-access-control, bug-bounty, privilege-escalation, bug-bounty-writeup, medium | 19-Feb-2025 |
| How a GraphQL Misconfiguration Exposed Sensitive Information: A $25,000 Bug Bounty Report | https://cyberw1ng.medium.com/how-a-graphql-misconfiguration-exposed-sensitive-information-a-25-000-bug-bounty-report-a8207bc7ff11?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, cybersecurity, jobs, careers, bug-bounty | 19-Feb-2025 |
| How a GraphQL Misconfiguration Exposed Sensitive Information: A $25,000 Bug Bounty Report | https://osintteam.blog/how-a-graphql-misconfiguration-exposed-sensitive-information-a-25-000-bug-bounty-report-a8207bc7ff11?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, cybersecurity, jobs, careers, bug-bounty | 19-Feb-2025 |
| ✨$500 HTML Injection in Snapchat | https://cybersecuritywriteups.com/500-html-injection-in-snapchat-c546282f1f60?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, infosec, html, snapchat, bug-bounty | 18-Feb-2025 |
| How I Bypassed BookMyShow’s OTP Limit with Just a Space & Got ₹1000 for It! | https://infosecwriteups.com/how-i-bypassed-bookmyshows-otp-limit-with-just-a-space-got-1000-for-it-70eab29fb6aa?source=rss------bug_bounty-5 | Vivek PS | bug-bounty-writeup, hacking, progamming, web-security, bug-bounty | 18-Feb-2025 |
| No email verification leads to an Oauth account takeover. | https://infosecwriteups.com/no-email-verification-leads-to-an-oauth-account-takeover-02eb30496939?source=rss------bug_bounty-5 | loyalonlytoday | awareness, bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips | 18-Feb-2025 |
| Android App Endpoint API Discovery Using Static Analysis Methods | https://medium.com/@BugRey/android-app-endpoint-api-discovery-using-static-analysis-methods-2cb2c83ccfbb?source=rss------bug_bounty-5 | ./Rey~ | bug-bounty-tips, pentesting, penetration-testing, bug-bounty, android-security | 18-Feb-2025 |
| Practical Guide Arbitrary File Upload | https://medium.com/@BugRey/practical-guide-arbitrary-file-upload-7c6a6e6becd6?source=rss------bug_bounty-5 | ./Rey~ | bug-bounty-tips, web-security, penetration-testing, pentesting, bug-bounty | 18-Feb-2025 |
| Monday Vulnerability Disclosure (February 17, 2025) | https://medium.com/@bombhajohn/monday-vulnerability-disclosure-february-17-2025-08d7fe29c39b?source=rss------bug_bounty-5 | Folks47ghee | bug-bounty, data, cybersecurity, data-leak | 18-Feb-2025 |
| JavaScript for Hackers: A Full Tutorial | https://medium.com/@hrofficial62/javascript-for-hackers-a-full-tutorial-84a2be091427?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, javascript, bug-bounty, pentesting, ethical-hacking | 18-Feb-2025 |
| Hackyholidays CTF (Grinch Network) Write-Up | Part 1 | Hacker101 CTF | https://medium.com/@sari.mmusab/hackyholidays-ctf-grinch-network-write-up-part-1-hacker101-ctf-4dcf8d1fb2ed?source=rss------bug_bounty-5 | Musab Sarı | burpsuite, ctf, web, bug-bounty, cybersecurity | 18-Feb-2025 |
| Ever Found a Valid Bug/Leaks in JavaScript Files? Part 1 | https://systemweakness.com/ever-found-a-valid-bug-leaks-in-javascript-files-part-1-efe1f535983b?source=rss------bug_bounty-5 | It4chis3c | extraction, secrets, js, javascript, bug-bounty | 18-Feb-2025 |
| How I Hacked My Own Phone, Found 2 Critical Vulnerabilities, and Cashed In $1,500 | https://medium.com/@krishna9823420058/how-i-hacked-my-own-phone-found-2-critical-vulnerabilities-and-cashed-in-1-500-139535f25fa1?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, osint, bug-bounty-tips, cybersecurity, idor | 18-Feb-2025 |
| Improper Authentication: Account TakeOver | https://medium.com/@mvenkata.bharath/improper-authentication-account-takeover-5dc9095c0b28?source=rss------bug_bounty-5 | Bharath Kumar | authentication, bug-bounty, cybersecurity, information-security, security-research | 18-Feb-2025 |
| Insecure Direct Object Reference — Simple case | https://medium.com/@mvenkata.bharath/insecure-direct-object-reference-simple-case-1bc2afd4e362?source=rss------bug_bounty-5 | Bharath Kumar | bug-bounty, cybersecurity, information-security, idor-vulnerability | 18-Feb-2025 |
| Instagram Authentication Flaw in Android App | https://medium.com/@akashkarmakar787/instagram-authentication-flaw-in-android-app-cf2a59e6a175?source=rss------bug_bounty-5 | Akash Karmakar | instagram, bug-bounty, facebook, login, security | 18-Feb-2025 |
| Recon — Finding Information About a Target | https://medium.com/@yassentaalab51/recon-finding-information-about-a-target-ff146160fb1a?source=rss------bug_bounty-5 | Killua | cybersecurity, penetration-testing, bug-bounty, recon | 18-Feb-2025 |
| Unverified Email Change Flaw on Apps.Target.com: A Sneaky Account Takeover Trick | https://infosecwriteups.com/unverified-email-change-flaw-on-apps-target-com-a-sneaky-account-takeover-trick-2d3402223f4f?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, bug-bounty, bugbounty-writeup, account-takeover, bug-bounty-tips | 18-Feb-2025 |
| CORS + XSS : Chaining Vulnerabilities for Critical Data Extraction | https://medium.com/@blify/cors-xss-chaining-vulnerabilities-for-critical-data-extraction-aed9d8fbd814?source=rss------bug_bounty-5 | Blify | security, bug-bounty, hacking, bug-bounty-writeup | 18-Feb-2025 |
| Mastering Bug Bounties in 2025 — The Smart Way to Hunt & Earn Big | https://medium.com/@shaheeryasirofficial/mastering-bug-bounties-in-2025-the-smart-way-to-hunt-earn-big-df69d78ddb10?source=rss------bug_bounty-5 | Shaheer Yasir | bug-bounty-tips, cybersecurity, hackerone, hacking, bug-bounty | 18-Feb-2025 |
| Ever Found a Valid Bug/Leaks in JavaScript Files in Bug Bounties? | https://infosecwriteups.com/ever-found-a-valid-bug-leaks-in-javascript-files-in-bug-bounties-81ba362612a7?source=rss------bug_bounty-5 | It4chis3c | js, bug-bounty, javascript, practical, secrets | 18-Feb-2025 |
| $4000 Blind SQL Injection in inDrive | https://medium.com/@kumawatabhijeet2002/4000-blind-sql-injection-in-indrive-a0a4dcd99cb9?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, infosec, sql-injection, money, bug-bounty | 18-Feb-2025 |
| ️♂️ How to Start Bug Hunting Using These 5 Simple Steps | https://medium.com/@vipulsonule71/%EF%B8%8F-%EF%B8%8F-how-to-start-bug-hunting-using-these-5-simple-steps-1c15f227f852?source=rss------bug_bounty-5 | Vipul Sonule | hacking, technology, machine-learning, cybersecurity, bug-bounty | 18-Feb-2025 |
| How I Discovered a 0-Click Account Takeover (ATO) Vulnerability in a Flutter Application | https://medium.com/@k3r0/how-i-discovered-a-0-click-account-takeover-ato-vulnerability-in-a-flutter-application-74c7a5c4dc70?source=rss------bug_bounty-5 | Kyrillos nady | flutter, penetration-testing, android-pentesting, hacking, bug-bounty | 18-Feb-2025 |
| Registration logic error — 2500$ bug bounty | https://theclemvp.medium.com/registration-logic-error-2500-bug-bounty-72728ce5ffd0?source=rss------bug_bounty-5 | Molx32 | security, web-security, writeup, cybersecurity, bug-bounty | 18-Feb-2025 |
| Day 13: Chaining Improper Authentication to IDOR and No Rate Limit for Mass Account Takeover | https://medium.com/@danielbelay/day-13-chaining-improper-authentication-to-idor-and-no-rate-limit-for-mass-account-takeover-bd6be94a96c3?source=rss------bug_bounty-5 | dani3l | account-takeover-attacks, bug-bounty | 18-Feb-2025 |
| The Highest-Paid Bug Bounty Hunters in the World (And Their Secrets) | https://medium.com/@krishna9823420058/the-highest-paid-bug-bounty-hunters-in-the-world-and-their-secrets-2e0f13d4fc6a?source=rss------bug_bounty-5 | Krish_cyber | cybersecurity, infosec, ethical-hacking, hacking, bug-bounty | 18-Feb-2025 |
| Finding Peace in the Chaos: A Security Researcher’s Perspective | https://medium.com/@thedevtaskofficial/finding-peace-in-the-chaos-a-security-researchers-perspective-06812e7ff767?source=rss------bug_bounty-5 | thedevtask official | security, vulnerability, peace, bug-bounty, philosophy | 18-Feb-2025 |
| Reconnaissance with Sn1per: Is This the Ultimate Recon Weapon? | https://medium.com/@paritoshblogs/reconnaissance-with-sn1per-is-this-the-ultimate-recon-weapon-b05bf69dc8e1?source=rss------bug_bounty-5 | Paritosh | hacking, bug-bounty, information-technology, cybersecurity, sn1per | 18-Feb-2025 |
| Bug Bounty in 2025: Part 3 — Investigating 4 Open Redirect Reports at HackerOne, So You Don’t Have… | https://medium.com/@halfcircassian/bug-bounty-in-2025-part-3-investigating-4-open-redirect-reports-at-hackerone-so-you-dont-have-499948a0e6b1?source=rss------bug_bounty-5 | Sıla Özeren | bug-bounty-tips, open-redirect, bug-bounty, bug-bounty-writeup, hackerone | 18-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-101) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-101-ef5f9ed33841?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, hacking, ethical-hacking, bug-bounty, cybersecurity | 18-Feb-2025 |
| The Biggest Bug Bounty Myths | https://medium.com/@hackrate/the-biggest-bug-bounty-myths-ec5b56b39e5e?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, hacking, ethical-hacking, bug-bounty-tips, cybersecurity | 18-Feb-2025 |
| The Hidden Risks in Multipart/Form-Data Requests | https://medium.com/@melodicbook/the-hidden-risks-in-multipart-form-data-requests-65a8f8557b22?source=rss------bug_bounty-5 | Sam Mirov | bug-bounty-tips, api-security, security-research, bug-bounty, web-application-security | 18-Feb-2025 |
| Advanced Techniques to Discover and Secure Exposed Credentials Online | https://cyberw1ng.medium.com/advanced-techniques-to-discover-and-secure-exposed-credentials-online-977e5ec53095?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, careers, jobs, education, cybersecurity | 18-Feb-2025 |
| How to Earn $50k Finding Critical Vulnerabilities in Bug Bounty | https://medium.com/@ibtissamhammadi/how-to-earn-50k-finding-critical-vulnerabilities-in-bug-bounty-b78806051ab8?source=rss------bug_bounty-5 | Ibtissam Hammadi | technology, bug-bounty, hacking, cybersecurity, programming | 18-Feb-2025 |
| Steal Secrets From The Web: Master Parameter Fuzzing | Recon Part 9 | https://it4chis3c.medium.com/ever-used-burp-suite-to-the-fullest-recon-part-9-22c389a29ad7?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, parameter, fuzzing, extraction, secrets | 17-Feb-2025 |
| How I Found an Open Redirect Vulnerability Easily (Worth $500!) | https://cybersecuritywriteups.com/how-i-found-an-open-redirect-vulnerability-easily-worth-500-d677d7693c06?source=rss------bug_bounty-5 | Abhijeet kumawat | open-redirect, bugbounty-tips, infosec, bug-bounty, hacking | 17-Feb-2025 |
| The Rise of Industrialized Cybercrime: How Threat Actors Scaled Their Operations | https://medium.com/@paritoshblogs/the-rise-of-industrialized-cybercrime-how-threat-actors-scaled-their-operations-0e863667a383?source=rss------bug_bounty-5 | Paritosh | cybersecurity, hacking, information-technology, cybercrime, bug-bounty | 17-Feb-2025 |
| Finding Vulnerabilities with Nmap | https://medium.com/@dasmanish6176/finding-vulnerabilities-with-nmap-713bd8693369?source=rss------bug_bounty-5 | Dasmanish | nmap, network-security, ethical-hacking, bug-bounty, cybersecurity | 17-Feb-2025 |
| Hidden method to find Bugcrowd Programs | https://medium.com/meetcyber/hidden-method-to-find-bugcrowd-programs-c6ac027be4f4?source=rss------bug_bounty-5 | AbhirupKonwar | ethical-hacking, pentesting, bug-bounty, osint, bug-bounty-tips | 17-Feb-2025 |
| Bug Hunting Automation | https://infosecwriteups.com/bug-hunting-automation-f91ce2ce70bc?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, bug-bounty, bug-bounty-tips, hacking | 17-Feb-2025 |
| API Endpoints Discovery using Kiterunner | https://bitpanic.medium.com/api-endpoints-discovery-using-kiterunner-ded82e092543?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, bug-bounty, ai-generated-content, technology, programming | 17-Feb-2025 |
| How a Simple Graphql Vulnerability led to Admin Dashboard | https://medium.com/@rishi1.beria/how-a-simple-graphql-vulnerability-led-to-admin-dashboard-2fb10df3607a?source=rss------bug_bounty-5 | Rishi Beria | penetration-testing, hacking, cybersecurity, bug-bounty, graphql | 17-Feb-2025 |
| Finding more subdomains using security trails api key | https://infosecwriteups.com/finding-more-subdomains-using-security-trails-api-key-0abdadd60574?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, hacking, reconnaissance, subdomain | 17-Feb-2025 |
| Exploiting the Log4j Vulnerability (CVE-2021–44228) — Proof of Concept (PoC) | https://medium.com/@muhammadwaseem29/exploiting-the-log4j-vulnerability-cve-2021-44228-proof-of-concept-poc-9b462b73b7a8?source=rss------bug_bounty-5 | Muhammad Waseem | hacking, bug-bounty-tips, infosec, cybersecurity, bug-bounty | 17-Feb-2025 |
| From Curiosity to $10,000: How I Found a Critical Account Takeover Bug | https://medium.com/@rahulgairola/from-curiosity-to-10-000-how-i-found-a-critical-account-takeover-bug-ca6dd169c36b?source=rss------bug_bounty-5 | Rahul Gairola | bug-bounty-tips, bug-bounty-writeup, account-takeover, bug-bounty, authentication-bypass | 17-Feb-2025 |
| A Beginner’s Guide to Bash [Special for Hacker | https://medium.com/@hrofficial62/a-beginners-guide-to-bash-special-for-hacker-ffe5c7ce4c21?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, pentesting, kali-linux, bug-bounty, bash | 17-Feb-2025 |
| Zoho Account Takeover: How a Single Click Can Lead to Full Control over your Zoho account | https://infosecwriteups.com/zoho-account-takeover-how-a-single-click-can-lead-to-full-control-over-your-zoho-account-cd6f0c245272?source=rss------bug_bounty-5 | HackerWithOutHat | infose, javascript, bug-bounty, security | 17-Feb-2025 |
| WHAT IS THE IMPORTANCE OF FINDING AQUISITIONS FOR BUG BOUNTY. | https://osintteam.blog/what-is-the-importance-of-finding-aquisitions-for-bug-bounty-3d4920796dc5?source=rss------bug_bounty-5 | loyalonlytoday | awareness, tips, cybersecurity, bug-bounty, hacking | 17-Feb-2025 |
| How to Find Subdomains Using Shodan and the Favicon Hash Trick on Kali Linux | https://medium.com/@securitytalent/how-to-find-subdomains-using-shodan-and-the-favicon-hash-trick-on-kali-linux-8829e3d10297?source=rss------bug_bounty-5 | MD Mehedi Hasan | favicon-hash-trick, bug-bounty, find-subdomain | 17-Feb-2025 |
| I Pasted a Simple HTML Code on BookMyShow… and Got ₹1000 for It! | https://infosecwriteups.com/i-pasted-a-simple-html-code-on-bookmyshow-and-got-1000-for-it-26313f0e2115?source=rss------bug_bounty-5 | Vivek PS | web-security, programming, bug-bounty, bug-bounty-writeup, hacking | 17-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-100) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-100-ded60fc66bf5?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, ethical-hacking, bug-bounty, bug-bounty-tips, cybersecurity | 17-Feb-2025 |
| Top CVEs to Watch in 2025: Hunting Critical Bugs | https://medium.com/@zerodaystories/top-cves-to-watch-in-2025-hunting-critical-bugs-3d7fee7ef95e?source=rss------bug_bounty-5 | 0day stories | bug-bounty-tips, technology, penetration-testing, cybersecurity, bug-bounty | 17-Feb-2025 |
| IDOR Vulnerability in Group Profile Picture Feature($$) | https://medium.com/@Tanvir0x1/idor-vulnerability-in-group-profile-picture-feature-72bbf96e0f6e?source=rss------bug_bounty-5 | Tanvir Ahmed | bugs, bug-bounty-tips, bug-bounty | 17-Feb-2025 |
| Ethical Hacking Roadmap 2025: Your Ultimate Guide to Landing a Cybersecurity Job! | https://medium.com/@krishna9823420058/ethical-hacking-roadmap-2025-your-ultimate-guide-to-landing-a-cybersecurity-job-57b0367fb070?source=rss------bug_bounty-5 | Krish_cyber | hacking, bug-bounty, ai, cybersecurity, ethical-hacking | 17-Feb-2025 |
| Bug Bounty 101 for Companies | https://medium.com/@hackrate/bug-bounty-101-for-companies-a6747ae0e3bb?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty-tips, hacking, bug-bounty, cybersecurity, ethical-hacking | 17-Feb-2025 |
| How to Find SQL Injection and Get Bounty of $100, $200, $500 | https://medium.com/@kumawatabhijeet2002/how-to-find-sql-injection-and-get-bounty-of-100-200-500-f44e0df0ba77?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, sql-injection, infosec, hacking | 17-Feb-2025 |
| Top 7 Payloads lists Every Bug Bounty Hunter Need To Know | https://medium.com/@verylazytech/top-7-payloads-lists-every-bug-bounty-hunter-need-to-know-bbb72c87c779?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, bug-bounty, red-team, payload, ethical-hacking | 17-Feb-2025 |
| Subdomain Bruteforcing Using Burp Suite: A Step-by-Step Guide for Ethical Hackers | https://medium.com/@hacker_might/subdomain-bruteforcing-using-burp-suite-a-step-by-step-guide-for-ethical-hackers-6f48f59b9f00?source=rss------bug_bounty-5 | hacker_might | bug-bounty, reconnaissance, subdomains-enumeration, brute-force, burpsuite | 17-Feb-2025 |
| 10 Secrets Every Bug Bounty Hunter Must Know | https://medium.com/@ibtissamhammadi/10-secrets-every-bug-bounty-hunter-must-know-20d71c3858a7?source=rss------bug_bounty-5 | Ibtissam Hammadi | cybersecurity, infosec, tech-career, bug-bounty, hacking | 17-Feb-2025 |
| Open Redirect to Xss | https://medium.com/@0x_karim/open-redirect-to-xss-d35eb8eb1cf4?source=rss------bug_bounty-5 | 0xkarim | bug-hunting, bug-bounty-tips, bug-bounty, hackerone, hacking | 17-Feb-2025 |
| Finding Exposed Credentials and Sensitive Data in Cloud, Repositories, and Logs | https://cyberw1ng.medium.com/finding-exposed-credentials-and-sensitive-data-in-cloud-repositories-and-logs-a4a4c9e5323c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, jobs, hacking, bug-bounty, cybersecurity | 17-Feb-2025 |
| Bug Bounty Recon: Mastering the Art of Information Gathering (Part 1) | https://medium.com/@weaponshot/bug-bounty-recon-mastering-the-art-of-information-gathering-part-1-01e24bb24462?source=rss------bug_bounty-5 | Matyis Kong | cybersecurity, bug-bounty | 17-Feb-2025 |
| Finding Exposed Credentials and Sensitive Data in Cloud, Repositories, and Logs | https://osintteam.blog/finding-exposed-credentials-and-sensitive-data-in-cloud-repositories-and-logs-a4a4c9e5323c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, jobs, hacking, bug-bounty, cybersecurity | 17-Feb-2025 |
| $500 How I Found XSS Using ChatGPT | https://medium.com/@kumawatabhijeet2002/500-how-i-found-xss-using-chatgpt-ec55792e35bb?source=rss------bug_bounty-5 | Abhijeet kumawat | xss-attack, hacking, chatgpt, bug-bounty, ai | 16-Feb-2025 |
| Finding a p4 as per bug crowd vrt | https://cybersecuritywriteups.com/finding-a-p4-as-per-bug-crowd-vrt-1de5f8074cda?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, bugs, cybersecurity, ethical-hacking, 4ps | 16-Feb-2025 |
| Bug Bounty Hunting: Automatic Vulnerability Discovery Using Fuzzers | https://medium.com/@muhammad4208/bug-bounty-hunting-automatic-vulnerability-discovery-using-fuzzers-6da56581c8ae?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | web-testing, bug-bounty-hunter, bug-bounty, bug-bounty-program, bug-bounty-tips | 16-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (API Testing) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-api-testing-96a49acc4f35?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-tips, bug-bounty, api-testing, bug-bounty-hunter, bug-bounty-program | 16-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Android Hacking Apps) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-android-hacking-apps-c74f85e81c90?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-tips, bug-bounty, android-hacking-tool, bug-bounty-program, bug-bounty-hunter | 16-Feb-2025 |
| IDOR Nightmare: Indian Post Office Portal Exposed Thousands of KYC Records with Article ID with… | https://systemweakness.com/idor-nightmare-indian-post-office-portal-exposed-thousands-of-kyc-records-with-article-id-with-735cc35a3984?source=rss------bug_bounty-5 | Gokuleswaran B | idor-vulnerability, bugbounty-writeup, bug-bounty, bug-bounty-writeup, idor | 16-Feb-2025 |
| Business Logic Vulnerabilities | https://medium.com/@0x1di0t/business-logic-vulnerabilities-843ea2a316f2?source=rss------bug_bounty-5 | Wahid Najim | bug-bounty-writeup, business-logic-flaw, business-logic, bug-bounty, business-logic-bug | 16-Feb-2025 |
| LivePwn Tool: The Ultimate Swiss Army Knife for Hackers and Bug Bounty Hunters | https://livepwn.medium.com/livepwn-tool-the-ultimate-swiss-army-knife-for-hackers-and-bug-bounty-hunters-6faac2c7157c?source=rss------bug_bounty-5 | livepwn | cybersecurity, ctf, cybertool, bug-bounty, hacking | 16-Feb-2025 |
| How I Found a Sensitive Data Leak in Microsoft!” | https://rootxabit.medium.com/how-i-found-a-sensitive-data-leak-in-microsoft-6c20c66d0ead?source=rss------bug_bounty-5 | xabit • hacks | bug-bounty, hacking, hacker, medium, microsoft | 16-Feb-2025 |
| CORS vs Access-Control-Allow-Origin | https://medium.com/@shadyfarouk1986/cors-vs-access-control-allow-origin-af5cecc3f4c7?source=rss------bug_bounty-5 | Shady Farouk | bug-bounty-program, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 16-Feb-2025 |
| Day 11: Full Account Takeover (ATO) — A Tale of Two Bugs | https://medium.com/@danielbelay/day-11-full-account-takeover-ato-a-tale-of-two-bugs-2e630aeb56ff?source=rss------bug_bounty-5 | dani3l | bug-bounty, account-takeover | 16-Feb-2025 |
| Hacking Exposed .git Directories: Because Developers Still Don’t Learn | https://medium.com/@mahad.ahmed0x1/hacking-exposed-git-directories-because-developers-still-dont-learn-095de0b96e2c?source=rss------bug_bounty-5 | 404NotPentested | information-security, infosec, cybersecurity, penetration-testing, bug-bounty | 16-Feb-2025 |
| $9,060 OS Command Injection — Private Bug Bounty P1 | 2023 | https://medium.com/@krishna9823420058/9-060-os-command-injection-private-bug-bounty-p1-2023-c9ac83a0fe2a?source=rss------bug_bounty-5 | Krish_cyber | osint, bugs, hacking, infosec-write-ups, bug-bounty | 16-Feb-2025 |
| Portswigger Web Security Academy : “Excessive trust in client-side controls” walkthrough | https://medium.com/@Kinqdathacker/portswigger-web-security-academy-excessive-trust-in-client-side-controls-walkthrough-ddf5457a6e7b?source=rss------bug_bounty-5 | Kinqdathacker | web-hacking, penetration-testing, ctf, bug-bounty, business-logic-flaw | 16-Feb-2025 |
| How To Discover Hidden Endpoints | https://medium.com/@kumawatabhijeet2002/how-to-discover-hidden-endpoints-fef261d619c1?source=rss------bug_bounty-5 | Abhijeet kumawat | secrets, bug-bounty, infosec, hidden, hacking | 16-Feb-2025 |
| Top Web Application Penetration Testing Tools in 2025: A Comprehensive Guide for Ethical Hackers | https://medium.com/@verylazytech/top-web-application-penetration-testing-tools-in-2025-a-comprehensive-guide-for-ethical-hackers-863c0640baab?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, cyber, ethical-hacking, penetration-testing | 16-Feb-2025 |
| Bug Bounty 101: How to Get Started and Earn Your First Reward | https://medium.com/@krishna9823420058/bug-bounty-101-how-to-get-started-and-earn-your-first-reward-4693846cc553?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, information-security, ethical-hacking, osint, infosec | 16-Feb-2025 |
| Discovering the Power of WaybackURLs: A Tool for Web Archiving and Reconnaissance | https://medium.com/@cyberawareness/discovering-the-power-of-waybackurls-a-tool-for-web-archiving-and-reconnaissance-2881a1fc614e?source=rss------bug_bounty-5 | SourceFul Space | wayback-machine, penetration-testing, cybersecurity, bug-bounty, waybackurls | 16-Feb-2025 |
| find hidden subdomain | https://medium.com/@dark_zone/find-hidden-subdomain-5d7cc42de1e8?source=rss------bug_bounty-5 | darkzone | bug-bounty, bug-bounty-tips | 16-Feb-2025 |
| How a Simple RFI Turned into a $300 RCE Jackpot — A Hacker’s Wild Ride! | https://medium.com/@krishna9823420058/how-a-simple-rfi-turned-into-a-300-rce-jackpot-a-hackers-wild-ride-207e636e2398?source=rss------bug_bounty-5 | Krish_cyber | penetration-testing, bug-bounty, vulnerability, cybersecurity, ethical-hacking | 16-Feb-2025 |
| “Hack the Bounty: Automate Bug Hunting & Get a Free VPS to Supercharge Your Game!” | https://medium.com/@krishna9823420058/hack-the-bounty-automate-bug-hunting-get-a-free-vps-to-supercharge-your-game-8ee8ed90b5dc?source=rss------bug_bounty-5 | Krish_cyber | infosec, cybersecurity, money, ethical-hacking, bug-bounty | 16-Feb-2025 |
| How to Earn $100k as a Bug Bounty Hunter | https://medium.com/@ibtissamhammadi/how-to-earn-100k-as-a-bug-bounty-hunter-584690e63ab4?source=rss------bug_bounty-5 | Ibtissam Hammadi | cybersecurity, ethical-hacking, bug-bounty, tech-career, programming | 16-Feb-2025 |
| XSS Hunting Like a Pro: The Ultimate Guide to Finding Cross-Site Scripting Bugs | https://medium.com/@krishna9823420058/xss-hunting-like-a-pro-the-ultimate-guide-to-finding-cross-site-scripting-bugs-3a459245b4bc?source=rss------bug_bounty-5 | Krish_cyber | osint, sql-injection, bug-bounty, xss-attack, hacking | 16-Feb-2025 |
| Mastering SQL Injection: The Ultimate Guide to Finding Vulnerabilities Like a Pro | https://medium.com/@krishna9823420058/mastering-sql-injection-the-ultimate-guide-to-finding-vulnerabilities-like-a-pro-e64a0ba2d257?source=rss------bug_bounty-5 | Krish_cyber | osint, ethical-hacking, sql-injection, bug-bounty, cybersecurity | 16-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-99) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-99-a31faa45f6b8?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty, hacking, bug-bounty-tips, ethical-hacking | 16-Feb-2025 |
| Bypassing OTP via Inspect Element | https://medium.com/@noobsechunter/bypassing-otp-via-inspect-element-c95e8df29e54?source=rss------bug_bounty-5 | Whoami | learning, bug-bounty, otp-bypass, beginner | 16-Feb-2025 |
| From Noob to $10k: How I Cracked the Bug Bounty Code as a Beginner! ✨ | https://medium.com/@krishna9823420058/from-noob-to-10k-how-i-cracked-the-bug-bounty-code-as-a-beginner-f4a672ec3169?source=rss------bug_bounty-5 | Krish_cyber | information-security, bug-bounty, hacking, osint, ethical-hacking | 16-Feb-2025 |
| The Ultimate Bug Bounty Hunter’s Toolkit: Must-Have Tools to Hack Your Way to Success! ️♂️ | https://medium.com/@krishna9823420058/the-ultimate-bug-bounty-hunters-toolkit-must-have-tools-to-hack-your-way-to-success-%EF%B8%8F-%EF%B8%8F-be4dfc958d4b?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, bug-bounty-tips, hacking, ethical-hacking, osint | 16-Feb-2025 |
| Hackers Assemble: The Vulniverse Saga | https://medium.com/@abhishek-ji/hackers-assemble-the-vulniverse-saga-84992359a522?source=rss------bug_bounty-5 | Abhishek Gupta | paruluniversity, bug-bounty, web-app-security, cybersecurity, the-hackers-meetup | 16-Feb-2025 |
| How to Write the Perfect Bug Bounty Report (With Examples!) | https://medium.com/@krishna9823420058/how-to-write-the-perfect-bug-bounty-report-with-examples-5d95b95559ea?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty-tips, bug-bounty, cybersecurity, osint, bug-bounty-writeup | 16-Feb-2025 |
| Top 10 Platforms to Find Bug Bounty Programs in 2025: Hunt Bugs, Earn Cash, and Save the… | https://medium.com/@krishna9823420058/top-10-platforms-to-find-bug-bounty-programs-in-2025-hunt-bugs-earn-cash-and-save-the-dbc9a6ac13d1?source=rss------bug_bounty-5 | Krish_cyber | ethical-hacking, osint, bug-bounty, infosec-write-ups, bug-bounty-tips | 16-Feb-2025 |
| Log4j RCE Vulnerability (CVE-2021–44228) Exploitation | https://medium.com/@muhammadwaseem29/log4j-rce-vulnerability-cve-2021-44228-exploitation-041ff74e1349?source=rss------bug_bounty-5 | Muhammad Waseem | cyber, rce, bug-bounty-tips, bug-bounty, hacking | 16-Feb-2025 |
| # Exposure of Internal PHP Source Code Leading to Credential & Sensitive Data Leakage | https://medium.com/@bevennyamande/exposure-of-internal-php-source-code-leading-to-credential-sensitive-data-leakage-209383740e1e?source=rss------bug_bounty-5 | 0xbeven | bug-bounty-writeup, bug-bounty-tips, bug-bounty | 16-Feb-2025 |
| How to Extract Information from Websites: Automated OSINT Techniques and Tools | https://cyberw1ng.medium.com/how-to-extract-information-from-websites-automated-osint-techniques-and-tools-434204e9c9dc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | jobs, osint, cybersecurity, bug-bounty, careers | 16-Feb-2025 |
| Symfonos2 Security Challenge | https://medium.com/@Y_Waheed/symfonos2-security-challenge-3d6a2a514f37?source=rss------bug_bounty-5 | Joo | penetration-testing, bug-bounty, bug-bounty-writeup, cybersecurity | 16-Feb-2025 |
| How I Found My First Bug: A Beginner’s Guide to Bug Bounty Hunting | https://medium.com/@azizkilani88/how-i-found-my-first-bug-a-beginners-guide-to-bug-bounty-hunting-f41afef630d3?source=rss------bug_bounty-5 | A_SKILLER_007 | bugbounty-tips, bug-bounty, cybersecurity | 16-Feb-2025 |
| How to Extract Information from Websites: Automated OSINT Techniques and Tools | https://osintteam.blog/how-to-extract-information-from-websites-automated-osint-techniques-and-tools-434204e9c9dc?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | jobs, osint, cybersecurity, bug-bounty, careers | 16-Feb-2025 |
| Breaking Architect: Matrix AI Security Challenge by Repello | https://osintteam.blog/breaking-architect-matrix-ai-security-challenge-by-repello-6853c34a6874?source=rss------bug_bounty-5 | Rudrakshacker | ai, prompt-engineering, cybersecurity, bug-bounty, chatbots | 15-Feb-2025 |
| From Recon to Exploitation: The Power of TerminatorZ | https://osintteam.blog/from-recon-to-exploitation-the-power-of-terminatorz-e86d8bf59c08?source=rss------bug_bounty-5 | Monika sharma | technology, penetration-testing, bug-bounty, hacking, bug-bounty-tips | 15-Feb-2025 |
| How to Easily Find Exposed Credentials in Bug Hunting | https://osintteam.blog/how-to-easily-find-exposed-credentials-in-bug-hunting-bb70ac603bae?source=rss------bug_bounty-5 | RivuDon | hacking, bug-bounty, infosec, bug-bounty-writeup, bug-bounty-tips | 15-Feb-2025 |
| Day 10:Turned Cookie-Based XSS into Account Takeover | https://medium.com/@danielbelay/day-10-turned-cookie-based-xss-into-account-takeover-ea28620f2888?source=rss------bug_bounty-5 | dani3l | bug-bounty, ethical-hacking | 15-Feb-2025 |
| WEB APP PENTESTING CHECKLIST 2025 | https://medium.com/@shaheeryasirofficial/web-app-pentesting-checklist-2025-438eb646b47a?source=rss------bug_bounty-5 | Shaheer Yasir | offensive-security, web-app-security, bug-bounty, ethical-hacking, pentesting | 15-Feb-2025 |
| Command Execution in Bug Bounties: How to Find, Test, and Exploit | https://rootxabit.medium.com/command-execution-in-bug-bounties-how-to-find-test-and-exploit-4f863c4a7240?source=rss------bug_bounty-5 | xabit • hacks | bug-bounty, recon, osint, oscp, website-hacking | 15-Feb-2025 |
| Rate Limits Bypassed — Business Logic Flaw | https://medium.com/@muhammad_saud/rate-limits-bypassed-business-logic-flaw-948a11dce0e4?source=rss------bug_bounty-5 | Msaud | bug-bounty, hackerone, bug-bounty-writeup, penetration-testing, hacking | 15-Feb-2025 |
| How I Earned $5,000 from a Single Bug Report | https://medium.com/@krishna9823420058/how-i-earned-5-000-from-a-single-bug-report-d4a793290a58?source=rss------bug_bounty-5 | Krish_cyber | information-security, ethical-hacking, bug-bounty, bug-bounty-tips, osint | 15-Feb-2025 |
| The Blueprint to Your First $1,000+ Bug Bounty Reward | https://medium.com/@krishna9823420058/the-blueprint-to-your-first-1-000-bug-bounty-reward-380e1df3b2b2?source=rss------bug_bounty-5 | Krish_cyber | info-sec-writeups, bug-bounty-tips, ethical-hacking, osint, bug-bounty | 15-Feb-2025 |
| How I Made $200 in 2 Minutes on HackerOne — Zomato Bug Bounty Program (With Real Example) | https://medium.com/@krishna9823420058/how-i-made-200-in-2-minutes-on-hackerone-zomato-bug-bounty-program-with-real-example-a851c4042ca6?source=rss------bug_bounty-5 | Krish_cyber | cybersecurity, osint, infosec-write-ups, hacking, bug-bounty | 15-Feb-2025 |
| The Ultimate Guide to Subdomain Enumeration: Brute-Forcing Hidden Subdomains with dnsx, mgwls, and… | https://medium.com/@hacker_might/the-ultimate-guide-to-subdomain-enumeration-brute-forcing-hidden-subdomains-with-dnsx-mgwls-and-ffa36ad86519?source=rss------bug_bounty-5 | hacker_might | reconnaissance, brute-force, subdomains-enumeration, bug-bounty, bug-bounty-tips | 15-Feb-2025 |
| Content Provider Exploitation: From Simple Misconfiguration to Application Lockdown | https://medium.com/@muhammedgalal66/content-provider-exploitation-from-simple-misconfiguration-to-application-lockdown-fd09520e9d3a?source=rss------bug_bounty-5 | Dg0x6 | bug-bounty-tips, bug-bounty-writeup, android-app-testing, bug-bounty, bugs | 15-Feb-2025 |
| Cache Control: An Easy P4 Vulnerability | https://infosecwriteups.com/cache-control-an-easy-p4-vulnerability-746138597d10?source=rss------bug_bounty-5 | JEETPAL | cache-control, bugbounty-tips, bug-bounty-writeup, bug-bounty, cybersecurity | 15-Feb-2025 |
| Exposed Admin Panel, $8000 Bounty — The Power of Shodan Recon!” | https://medium.com/@rahulgairola/exposed-admin-panel-8000-bounty-the-power-of-shodan-recon-3408ce97531c?source=rss------bug_bounty-5 | Rahul Gairola | bug-bounty-writeup, bug-bounty-tips, authentication-bypass, authentication, bug-bounty | 15-Feb-2025 |
| The Ultimate Guide to Subdomain Enumeration: Brute-Forcing Hidden Subdomains with dnsx, mgwls, and… | https://osintteam.blog/the-ultimate-guide-to-subdomain-enumeration-brute-forcing-hidden-subdomains-with-dnsx-mgwls-and-ffa36ad86519?source=rss------bug_bounty-5 | hacker_might | reconnaissance, brute-force, subdomains-enumeration, bug-bounty, bug-bounty-tips | 15-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-98) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-98-65be156058f4?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, hacking, bug-bounty-tips, ethical-hacking, cybersecurity | 15-Feb-2025 |
| From Cookie to P1: Exploiting a Simple Flaw for Maximum Impact | https://infosecwriteups.com/from-cookie-to-p1-exploiting-a-simple-flaw-for-maximum-impact-a05ef35c3e8c?source=rss------bug_bounty-5 | 0day stories | bug-bounty-writeup, bug-bounty-tips, cybersecurity, bug-bounty, penetration-testing | 15-Feb-2025 |
| SSRF Advanced Methodology✨ | https://medium.com/@kumawatabhijeet2002/ssrf-advanced-methodology-ecbe289886ef?source=rss------bug_bounty-5 | Abhijeet kumawat | money, infosec, ssrf, hacking, bug-bounty | 15-Feb-2025 |
| Unauthorized Access to Blinkist Premium Audiobooks — A Case Study | https://medium.com/@rstuv/unauthorized-access-to-blinkist-premium-audiobooks-a-case-study-8b3d7e6c3c17?source=rss------bug_bounty-5 | rstuv | bug-bounty, cybersecurity | 15-Feb-2025 |
| From $0 to $2,500: My Journey Finding Critical Vulnerability Through Bug Bounty Programs | https://medium.com/@ibtissamhammadi/from-0-to-2-500-my-journey-finding-critical-vulnerability-through-bug-bounty-programs-c4d8a5059eec?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, cybersecurity, hacking, infosec, programming | 15-Feb-2025 |
| Comparing Burp Suite Pro and OWASP ZAP: Which One is Right for You? | https://medium.com/@shadyfarouk1986/comparing-burp-suite-pro-and-owasp-zap-which-one-is-right-for-you-56629b2dac6d?source=rss------bug_bounty-5 | Shady Farouk | bug-bounty-tips, bug-bounty, vulnerability-assessment, bug-bounty-writeup | 15-Feb-2025 |
| How a Hidden GitHub Token Led to a $50,000 Bug Bounty | https://cyberw1ng.medium.com/how-a-hidden-github-token-led-to-a-50-000-bug-bounty-6bbec61114d9?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, jobs, careers, bug-bounty, programming | 15-Feb-2025 |
| API Testing ( Port Swigger Labs ) Solutions | https://medium.com/@youssefawad1357/api-testing-port-swigger-labs-solutions-2f8f7b949f9f?source=rss------bug_bounty-5 | youssef awad | api, pentesting, apihacking, penetration-testing, bug-bounty | 15-Feb-2025 |
| Best Bug Bounty Platforms in 2025: A Comprehensive Comparison | https://medium.com/@hackrate/best-bug-bounty-platforms-in-2025-a-comprehensive-comparison-70aaa7d967eb?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, bug-bounty-tips, ethical-hacking, cybersecurity, hacking | 15-Feb-2025 |
| How a Hidden GitHub Token Led to a $50,000 Bug Bounty | https://osintteam.blog/how-a-hidden-github-token-led-to-a-50-000-bug-bounty-6bbec61114d9?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, jobs, careers, bug-bounty, programming | 15-Feb-2025 |
| A Powerful Web Crawling and OSINT Tool | https://osintteam.blog/a-powerful-web-crawling-and-osint-tool-c0a5d118f398?source=rss------bug_bounty-5 | Monika sharma | hacking, bug-bounty-tips, penetration-testing, bug-bounty, technology | 14-Feb-2025 |
| HyperText Transfer Protocol (HTTP) | https://medium.com/bug-bounty-bug-hunter-academy/hypertext-transfer-protocol-http-3719e3eda9ea?source=rss------bug_bounty-5 | Michael Mancuso | http-request, bug-bounty, web, https | 14-Feb-2025 |
| Get Your First Bug | https://cybersecuritywriteups.com/get-your-first-bug-b50dadbea60a?source=rss------bug_bounty-5 | Abhijeet kumawat | money, bug-bounty, infosec, hacking, ai | 14-Feb-2025 |
| How I can trigger Remote Code Execution Via Cron Job | https://r0b0ts.medium.com/how-i-can-trigger-remote-code-execution-via-cron-job-b7d9d7dc9372?source=rss------bug_bounty-5 | r0b0ts | bug-bounty-writeup, pentesting, bug-bounty, bug-bounty-tips, web-security | 14-Feb-2025 |
| How to Bypass Web Application Firewalls (WAFs) | https://medium.com/@vipulsonule71/how-to-bypass-web-application-firewalls-wafs-d4a0212b6fa5?source=rss------bug_bounty-5 | Vipul Sonule | technology, hacking, bug-bounty, penetration-testing, cybersecurity | 14-Feb-2025 |
| Crack World | https://medium.com/@loaymorad11/crack-world-49be8914684d?source=rss------bug_bounty-5 | Loaymorad | tryhackme, bug-bounty, cybersecurity, hacking | 14-Feb-2025 |
| How to Find Your First Bug and Get Paid — Bug Bounty Made Easy | https://medium.com/@krishna9823420058/how-to-find-your-first-bug-and-get-paid-bug-bounty-made-easy-cb595ef2aaee?source=rss------bug_bounty-5 | Krish_cyber | infosec-write-ups, bugs, hacking, bug-bounty, osint | 14-Feb-2025 |
| Mastering Reconnaissance in Bug Bounty: The Art of Finding Hidden Vulnerabilities | https://abhayal.medium.com/mastering-reconnaissance-in-bug-bounty-the-art-of-finding-hidden-vulnerabilities-c34d87cb98c0?source=rss------bug_bounty-5 | Abhayal | hackerone, reconnaissance, bug-bounty, vulnerability, bug-bounty-tips | 14-Feb-2025 |
| Find secret in S3 Bucket and earn $500 and more | https://medium.com/@anandrishav2228/find-secret-in-s3-bucket-and-earn-500-and-more-640b341dfe54?source=rss------bug_bounty-5 | Rishav anand | money, aws, cybersecurity, amazon, bug-bounty | 14-Feb-2025 |
| Day 9: CRLF to Account Takeover (Chaining Bugs) | https://medium.com/@danielbelay/day-9-crlf-to-account-takeover-chaining-bugs-8e621c9be109?source=rss------bug_bounty-5 | dani3l | bug-bounty-writeup, ethical-hacking, bug-bounty | 14-Feb-2025 |
| Top CTF Competitions and Where to Practice | https://medium.com/@BlackHat123/top-ctf-competitions-and-where-to-practice-f71c56ecfef1?source=rss------bug_bounty-5 | blackhat | ctf, competition, bug-bounty, walkthrough | 14-Feb-2025 |
| Why Bug Bounty Programs Are Essential for In-Depth Vulnerability Detection | https://medium.com/@hackrate/why-bug-bounty-programs-are-essential-for-in-depth-vulnerability-detection-06bcfd3c6c18?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, bug-bounty, hacking, ethical-hacking, bug-bounty-tips | 14-Feb-2025 |
| $1,700 IDOR: Unauthorized Modification of Web Hosting Configuration | https://medium.com/@a13h1/1-700-idor-unauthorized-modification-of-web-hosting-configuration-d6febc6c6a41?source=rss------bug_bounty-5 | Abhi Sharma | bug-bounty, cybersecurity, vulnerability, idor, pentesting | 14-Feb-2025 |
| How I got a Stored XSS by searching through JS files. | https://medium.com/@oXnoOneXo/how-i-got-a-stored-xss-by-searching-through-js-files-fdfe2490668b?source=rss------bug_bounty-5 | oXnoOneXo | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 14-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-97) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-97-34ad1a8bc36c?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | hacking, bug-bounty-tips, bug-bounty, cybersecurity, ethical-hacking | 14-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-96) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-96-c1cb10e05488?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, hacking, bug-bounty-tips, cybersecurity, ethical-hacking | 14-Feb-2025 |
| Are You Missing Subdomains? The Resolver Trick You Need to Know! | https://medium.com/@maakthon/are-you-missing-subdomains-the-resolver-trick-you-need-to-know-71da4abeb39d?source=rss------bug_bounty-5 | Mahmoud Abd Alkarim | subdomain, penetration-testing, enumeration, bug-bounty, dns | 14-Feb-2025 |
| Breaking Through the Firewall: How I Bypassed a WAF and Found a Critical Bug with $1700 | https://myselfakash20.medium.com/breaking-through-the-firewall-how-i-bypassed-a-waf-and-found-a-critical-bug-with-1700-0680e28c8785?source=rss------bug_bounty-5 | Akash Ghosh | programming, bug-bounty, bugbounty-tips, bug-bounty-writeup, cybersecurity | 14-Feb-2025 |
| Easy $300: Template Injection | https://medium.com/@kumawatabhijeet2002/easy-300-template-injection-71e3395c53b3?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, ssti, money, bug-bounty, infosec | 14-Feb-2025 |
| $1,700 IDOR: Unauthorized Modification of Web Hosting Configuration | https://infosecwriteups.com/1-700-idor-unauthorized-modification-of-web-hosting-configuration-d6febc6c6a41?source=rss------bug_bounty-5 | Abhi Sharma | bug-bounty, cybersecurity, vulnerability, idor, pentesting | 14-Feb-2025 |
| From SQL Injection to Remote Code Execution: A Bug Bounty Hunter’s Unexpected Journey | https://medium.com/@gouravrathod8788/from-sql-injection-to-remote-code-execution-a-bug-bounty-hunters-unexpected-journey-bc91a3697f24?source=rss------bug_bounty-5 | Gourav Singh Rajput | bug-bounty, cybersecurity | 14-Feb-2025 |
| Hackers Wanted: Bug Bounty Program Pays $50,000 for Critical Vulnerabilities | https://medium.com/@ibtissamhammadi/hackers-wanted-bug-bounty-program-pays-50-000-for-critical-vulnerabilities-e113b868ee0f?source=rss------bug_bounty-5 | Ibtissam Hammadi | ethical-hacking, bug-bounty, cybersecurity, tech-career, programming | 14-Feb-2025 |
| Advanced Secrets Hunting: Finding Exposed Credentials in Unconventional Places | https://cyberw1ng.medium.com/advanced-secrets-hunting-finding-exposed-credentials-in-unconventional-places-9aaaf52330a3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, jobs, programming, cybersecurity | 14-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Secure Code Review) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-secure-code-review-39c61b961afc?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-tips, bug-bounty, secure-code-review, bug-bounty-program, bug-bounty-hunter | 14-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Information Disclosure) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-information-disclosure-b1ef91dc0208?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-hunter, information-disclosure, bug-bounty-program, bug-bounty-tips, bug-bounty | 14-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Single Sign-On services) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-single-sign-on-services-8fc6e85e5ece?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-tips, single-sign-on, bug-bounty-hunter, bug-bounty-program, bug-bounty | 14-Feb-2025 |
| Advanced Secrets Hunting: Finding Exposed Credentials in Unconventional Places | https://osintteam.blog/advanced-secrets-hunting-finding-exposed-credentials-in-unconventional-places-9aaaf52330a3?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | careers, bug-bounty, jobs, programming, cybersecurity | 14-Feb-2025 |
| Powerful Burp Suite Extensions | https://osintteam.blog/powerful-burp-suite-extensions-d1c960f376b5?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, hacking, bug-bounty-tips, penetration-testing, technology | 13-Feb-2025 |
| Mastering SQL Injection: Detection, Exploitation & Automation Guide | https://rootxabit.medium.com/mastering-sql-injection-detection-exploitation-automation-guide-7f0195fe435d?source=rss------bug_bounty-5 | xabit • hacks | exploitation, bug-bounty, sqlinjectiontypes, zero-day-vulnerability, hacking | 13-Feb-2025 |
| $10.5k Bounty Story | https://aimasterprompt.medium.com/10-5k-bounty-story-aa55497d77b6?source=rss------bug_bounty-5 | aimaster | bug-bounty, programming, technology, cybersecurity, infosec | 13-Feb-2025 |
| Earn $$$$ by Finding CSRF Vulnerabilities! | https://infosecwriteups.com/earn-by-finding-csrf-vulnerabilities-638f876918cf?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, infosec, money, csrf, bug-bounty | 13-Feb-2025 |
| ️♂️ How to Information Gathering in Bug Hunting on Target | https://medium.com/@vipulsonule71/%EF%B8%8F-%EF%B8%8F-how-to-information-gathering-in-bug-hunting-on-target-00de7e20afc0?source=rss------bug_bounty-5 | Vipul Sonule | bug-bounty, hacking, cybersecurity, penetration-testing, technology | 13-Feb-2025 |
| Threat Actor Attribution: A Detailed Guide | https://medium.com/@paritoshblogs/threat-actor-attribution-a-detailed-guide-39f5b81086ac?source=rss------bug_bounty-5 | Paritosh | cybersecurity, threat-intelligence, ai, bug-bounty, information-technology | 13-Feb-2025 |
| Day 8: Self-XSS + Login & Logout CSRF + OAuth Hijacking | https://medium.com/@danielbelay/day-8-self-xss-login-logout-csrf-oauth-hijacking-83c848ad9a1e?source=rss------bug_bounty-5 | dani3l | ethical-hacking, account-takeover, bug-bounty | 13-Feb-2025 |
| How Bug Bounty Programs Have Evolved: From Early Experiments to Modern Security Frameworks | https://medium.com/@hackrate/how-bug-bounty-programs-have-evolved-from-early-experiments-to-modern-security-frameworks-32b071e44513?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, hacking, cybersecurity, bug-bounty, bug-bounty-tips | 13-Feb-2025 |
| Bug Bounty in 2025: Part 2 — Intro to Open Redirect Vulnerability with a Conceptual Lab | https://medium.com/@halfcircassian/bug-bounty-in-2025-part-2-intro-to-open-redirect-vulnerability-with-a-conceptual-lab-c0db11537778?source=rss------bug_bounty-5 | Sıla Özeren | bug-bounty-writeup, open-redirect, bug-bounty-tips, bug-bounty, vulnerability | 13-Feb-2025 |
| 3 Steps to Landing the Highest Paid Bug Bounty: $150K in 30 Days | https://medium.com/@ibtissamhammadi/3-steps-to-landing-the-highest-paid-bug-bounty-150k-in-30-days-662da049fb4d?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, programming, infosec, cybersecurity, ethical-hacking | 13-Feb-2025 |
| How does an extension help me find a PII data bug? | https://infosecwriteups.com/how-does-an-extension-help-me-find-a-pii-data-bug-a95d83043f9a?source=rss------bug_bounty-5 | loyalonlytoday | hacking, bug-bounty, programming, cybersecurity, tips | 13-Feb-2025 |
| Community Bug Bounty Campaign | https://medium.com/bitoro-network/community-bug-bounty-campaign-853538e88021?source=rss------bug_bounty-5 | Kayla.Bitoro | bug-bounty, defi, injective, arbitrum, testnet | 13-Feb-2025 |
| website leaking OTP in inspect element | https://cybersecuritywriteups.com/website-leaking-otp-in-inspect-element-aa38d15059c9?source=rss------bug_bounty-5 | loyalonlytoday | penetration-testing, cybersecurity, bug-bounty, hacking, bugs | 13-Feb-2025 |
| Can Crowdsourced Ethical Hacking Replace Yearly Penetration Testing? | https://medium.com/@hackrate/can-crowdsourced-ethical-hacking-replace-yearly-penetration-testing-2c525820088b?source=rss------bug_bounty-5 | Levente Molnar | penetration-testing, bug-bounty, ethical-hacking, hacking, cybersecurity | 13-Feb-2025 |
| Get Internship Offers During Second Year of College in Cybersecurity — offensive security domain | https://abhishekmorla.medium.com/get-internship-offers-during-second-year-of-college-in-cybersecurity-offensive-security-domain-7caecdfaabe5?source=rss------bug_bounty-5 | Abhishek Morla | btech, bug-bounty, red-team, cse, cybersecurity | 13-Feb-2025 |
| Locked Features, Unlocked Access: Breaking Restrictions with Response Manipulation | https://medium.com/@0x5atab/locked-features-unlocked-access-breaking-restrictions-with-response-manipulation-c7546a39c4c7?source=rss------bug_bounty-5 | Muhammad Khatab | bug-hunting, bug-bounty-writeup, infosec, bugbounty-writeup, bug-bounty | 13-Feb-2025 |
| BUG IN QWEN AI CHATBOT | https://medium.com/@rr-1k/bug-in-qwen-ai-chatbot-77d02e89d77f?source=rss------bug_bounty-5 | rr-1k | bug-bounty, bug-bounty-tips, deepseek, qwen, ai | 13-Feb-2025 |
| Automate Open Redirect and Earn $250, $200, $100! | https://cybersecuritywriteups.com/automate-open-redirect-and-earn-250-200-100-b6bfd75a5dc7?source=rss------bug_bounty-5 | Abhijeet kumawat | money, infosec, hacking, bug-bounty, openai | 13-Feb-2025 |
| Mr Robot CTF | https://medium.com/@princepr99/mr-robot-ctf-305aea527bcc?source=rss------bug_bounty-5 | Prince P Ravi | cybersecurity, ethical-hacking, bug-bounty | 13-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-95) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-95-81b5e24c7f11?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, cybersecurity, bug-bounty-tips, ethical-hacking, hacking | 13-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-94) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-94-f6432847ad99?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips, hacking | 13-Feb-2025 |
| $2000 Bounty: Unauthenticated Remote Code Execution to Reverse Shell — A Real-World Example | https://medium.com/@krishna9823420058/2000-bounty-unauthenticated-remote-code-execution-to-reverse-shell-a-real-world-example-aee9a7c6851b?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty, info-sec-writeups, bugs, hacking, osint | 13-Feb-2025 |
| Arcgis SQLi — CVE-2012–4949 | https://medium.com/@metogmer/arcgis-sqli-cve-2012-4949-06ea278ab6a4?source=rss------bug_bounty-5 | Muntadhar M. Ahmed | bug-bounty, bug-hunter, hackerone, cybersecurity, sql-injection | 13-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Remote Code Execution) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-remote-code-execution-3935b5823657?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-hunter, bug-bounty-tips, bug-bounty, remote-code-execution, bug-bounty-program | 13-Feb-2025 |
| New to Bug bounty (simple way) | https://medium.com/@bombhajohn/new-to-bug-bounty-simple-way-62cd38d0b9fc?source=rss------bug_bounty-5 | Bombhajohn | cybersecurity, bug-bounty, bug-bounty-tips | 13-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Application Logic Errors and Broken Access Control) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-application-logic-errors-and-broken-access-control-cd15bb9ccc0c?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-program, broken-access-control, bug-bounty-hunter, bug-bounty-tips, bug-bounty | 13-Feb-2025 |
| Finding Hidden API Keys, Tokens, and Sensitive Information in Applications | https://cyberw1ng.medium.com/finding-hidden-api-keys-tokens-and-sensitive-information-in-applications-d8a40a5a162a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, bug-bounty, jobs, careers, cybersecurity | 13-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Same-Origin Policy) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-same-origin-policy-23aabe865729?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty, bug-bounty-program, bug-bounty-hunter, same-origin-policy, bug-bounty-tips | 13-Feb-2025 |
| New to Bug bounty (simple way) | https://medium.com/@bombhajohn/new-to-bug-bounty-simple-way-62cd38d0b9fc?source=rss------bug_bounty-5 | Folks47ghee | cybersecurity, bug-bounty, bug-bounty-tips | 13-Feb-2025 |
| Finding Hidden API Keys, Tokens, and Sensitive Information in Applications | https://osintteam.blog/finding-hidden-api-keys-tokens-and-sensitive-information-in-applications-d8a40a5a162a?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | programming, bug-bounty, jobs, careers, cybersecurity | 13-Feb-2025 |
| N#S# server security misconfiguration. | https://medium.com/@hunter_sv/nasa-server-security-misconfiguration-4b7b9b7331b5?source=rss------bug_bounty-5 | Hunter_sv | bug-bounty | 12-Feb-2025 |
| BFAC: The Ultimate Tool to Uncover Hidden Backup Files | https://osintteam.blog/bfac-the-ultimate-tool-to-uncover-hidden-backup-files-4a0de1f9e8de?source=rss------bug_bounty-5 | Monika sharma | bug-bounty, technology, penetration-testing, hacking, bug-bounty-tips | 12-Feb-2025 |
| How I Found an ATO in a Public Program | https://medium.com/@khaledahmed_56157/how-i-found-an-ato-in-a-public-program-5209be3140f4?source=rss------bug_bounty-5 | Khaled Ahmed | bug-bounty, cybersecurity, penetration-testing, vulnerability, hackerone | 12-Feb-2025 |
| Earn $5000 using Subdomain Takeover: Step By Step Guide | https://cybersecuritywriteups.com/earn-5000-using-subdomain-takeover-step-by-step-guide-eec3e8e6336d?source=rss------bug_bounty-5 | Abhijeet kumawat | subdomain-takeover, money, hacking, infosec, bug-bounty | 12-Feb-2025 |
| Day 7: Drag & Drop XSS + Cookie Bomb for OAuth Hijacking | https://medium.com/@danielbelay/day-7-drag-drop-xss-cookie-bomb-for-oauth-hijacking-a9b828cd9c54?source=rss------bug_bounty-5 | dani3l | bug-bounty, ethical-hacking | 12-Feb-2025 |
| Accessing Admin Portal Without Credentials via Long Redirection Response | https://systemweakness.com/accessing-admin-portal-without-credentials-via-long-redirection-response-da79d84bb93a?source=rss------bug_bounty-5 | Kushanmaduranga | redirection, web-security, bug-bounty, burpsuite, hacking | 12-Feb-2025 |
| Exploiting crAPI with jwt_tool | https://medium.com/@samhilliard/in-this-post-ill-show-you-how-to-use-jwt-tool-to-analyze-and-exploit-jwt-vulnerabilities-in-97c62a0e6ac5?source=rss------bug_bounty-5 | Sam Hilliard | web, bug-bounty, pentesting, jwt, hacking | 12-Feb-2025 |
| Let’s Build a Cybersecurity Knowledge Hub! | https://medium.com/@Mike_3xploit3r/lets-build-a-cybersecurity-knowledge-hub-5686d251f632?source=rss------bug_bounty-5 | Mike_3xploit3r | penetration-testing-tools, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 12-Feb-2025 |
| Account Takeover via Lack of Email Verification Vulnerability | https://medium.com/@whitehat29/account-takeover-via-lack-of-email-verification-vulnerability-9b9be0751d8b?source=rss------bug_bounty-5 | Whitehat | infosec, hacking, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 12-Feb-2025 |
| Katana: A Fast and Powerful Web Fuzzer | https://medium.com/meetcyber/katana-a-fast-and-powerful-web-fuzzer-fc41c757d8a0?source=rss------bug_bounty-5 | Erkan Kavas | katana, bug-hunting, toolkit, bug-bounty, cybersecurity | 12-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (XML External Entity) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-xml-external-entity-c4f1b4b629f3?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | xxe-attack, bug-bounty-tips, bug-bounty, bug-bounty-hunter, xxe | 12-Feb-2025 |
| Currently, HackerOne Has Over 1400 Bug Bounty Programs. Is It Really That Good? | https://medium.com/@hackrate/currently-hackerone-has-over-1400-bug-bounty-programs-is-it-really-that-good-eac92a515e29?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty-tips, ethical-hacking, bug-bounty, hacking, cybersecurity | 12-Feb-2025 |
| How I Found Information Disclosure Vulnerability? | https://doordiefordream.medium.com/how-i-found-information-disclosure-vulnerability-e673c421c104?source=rss------bug_bounty-5 | Bug hunter balu | web3, ethical-hacking, cybersecurity, technology, bug-bounty | 12-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Insecure Deserialization) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-insecure-deserialization-6df3491dc33c?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-hunter, insecure-deserialization, bug-bounty-tips, bug-bounty, bug-bounty-program | 12-Feb-2025 |
| Unleashing the Power of Amass: A Comprehensive Guide to Subdomain Enumeration & Network Mapping… | https://medium.com/@zoningxtr/unleashing-the-power-of-amass-a-comprehensive-guide-to-subdomain-enumeration-network-mapping-4d4a9889b2c7?source=rss------bug_bounty-5 | Zoningxtr | penetration-testing, web-development, web3, cybersecurity, bug-bounty | 12-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Template Injection) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-template-injection-373ee3c8b80c?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-tips, template-injection, bug-bounty-hunter, bug-bounty, bug-bounty-program | 12-Feb-2025 |
| Free VPS for ethical hacking and bug bounty hunting. | https://infosecwriteups.com/free-vps-for-ethical-hacking-and-bug-bounty-hunting-d9098c2fbe2a?source=rss------bug_bounty-5 | loyalonlytoday | ethical-hacking, hacking, bug-bounty, vps, cybersecurity | 12-Feb-2025 |
| I Pasted a Link, Inspected the HTML, and Facebook Gave Me $1000 | https://infosecwriteups.com/i-pasted-a-link-inspected-the-html-and-facebook-gave-me-1000-9ed4a91e24d1?source=rss------bug_bounty-5 | Vivek PS | hacking, bug-bounty-writeup, bug-bounty-tips, programming, bug-bounty | 12-Feb-2025 |
| Broken Brute-Force Protection: How to Bypass Rate Limiting in a Single Request — Authentication… | https://infosecwriteups.com/broken-brute-force-protection-how-to-bypass-rate-limiting-in-a-single-request-authentication-a4a761fc0b5a?source=rss------bug_bounty-5 | Bash Overflow | bypass-login-protection, brute-force-attack, bypass-rate-limiting, broken-access-control, bug-bounty | 12-Feb-2025 |
| “.DS_Store” – The Accidental Treasure Map Devs Keep Handing Hackers | https://medium.com/@mahad.ahmed0x1/ds-store-the-accidental-treasure-map-devs-keep-handing-hackers-da0dceeead7d?source=rss------bug_bounty-5 | 404NotPentested | ethical-hacking, bug-bounty-tips, penetration-testing, cybersecurity, bug-bounty | 12-Feb-2025 |
| Client-Side Template Injection (CSTI): A Comprehensive Guide | https://medium.com/@verylazytech/client-side-template-injection-csti-a-comprehensive-guide-ac2f49a77aae?source=rss------bug_bounty-5 | Very Lazy Tech | injection, ethical-hacking, web, pentesting, bug-bounty | 12-Feb-2025 |
| Unleashing the Power of Sublist3r: The Ultimate Guide to Subdomain Enumeration | https://medium.com/@zoningxtr/unleashing-the-power-of-sublist3r-the-ultimate-guide-to-subdomain-enumeration-62d1468a2933?source=rss------bug_bounty-5 | Zoningxtr | security-token, cybersecurity, web-development, bug-bounty, penetration-testing | 12-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-92) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-92-0cc43d2fedb2?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | cybersecurity, bug-bounty-tips, ethical-hacking, bug-bounty, hacking | 12-Feb-2025 |
| How to Automate Hunting for Open Redirect | https://infosecwriteups.com/how-to-automate-hunting-for-open-redirect-46537cd67b35?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, bug-bounty-tips, programming, technology, bug-bounty | 12-Feb-2025 |
| $900 Bounty: Open Redirection Bug | https://cybersecuritywriteups.com/900-bounty-open-redirection-bug-aa82142b0e9d?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, bounty-program, money, bug-bounty, infosec | 12-Feb-2025 |
| How I Discovered a WordPress Vulnerability: Exposed Usernames & XML-RPC Exploitation | https://medium.com/@iamshafayat/how-i-discovered-a-wordpress-vulnerability-exposed-usernames-xml-rpc-exploitation-b35b0ec63a54?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | bug-bounty-methodology, cybersecurity, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 12-Feb-2025 |
| Bug Bounty Hunting — Complete Guide (Part-93) | https://medium.com/@rafid19/bug-bounty-hunting-complete-guide-part-93-d66c26764179?source=rss------bug_bounty-5 | Mehedi Hasan Rafid | bug-bounty-tips, cybersecurity, hacking, ethical-hacking, bug-bounty | 12-Feb-2025 |
| Bug Bounty in 2025: Part 1 — Mastering Regex for Security | https://medium.com/@halfcircassian/bug-bounty-in-2025-part-1-mastering-regex-for-security-3d58bcf51102?source=rss------bug_bounty-5 | Sıla Özeren | regex, open-redirect, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 12-Feb-2025 |
| Facebook Bug Bounty: Can You Really Earn $500 for Finding Bugs | https://medium.com/@ibtissamhammadi/facebook-bug-bounty-can-you-really-earn-500-for-finding-bugs-4e71c81af2a2?source=rss------bug_bounty-5 | Ibtissam Hammadi | facebook, hacking, cybersecurity, technology, bug-bounty | 12-Feb-2025 |
| Hacking tools — Art of my creation | https://medium.com/@zatikyan.sevada/hacking-tools-art-of-my-creation-2f47ab1eca18?source=rss------bug_bounty-5 | Zatikyan Sevada | bug-bounty, hacking-tools, hacking, cybersecurity | 12-Feb-2025 |
| $10,500 SSO Misconfiguration Bug on Grammarly | https://cyberw1ng.medium.com/10-500-sso-misconfiguration-bug-on-grammarly-438f2cb87a0c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | jobs, bug-bounty, careers, money, cybersecurity | 12-Feb-2025 |
| $10,500 SSO Misconfiguration Bug on Grammarly | https://osintteam.blog/10-500-sso-misconfiguration-bug-on-grammarly-438f2cb87a0c?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | jobs, bug-bounty, careers, money, cybersecurity | 12-Feb-2025 |
| The Hidden Business Logic Error That Exists On Most E-Commerce Web Application | https://medium.com/@makarov_bm/the-hidden-business-logic-error-that-exists-on-most-e-commerce-web-application-7b9be9113073?source=rss------bug_bounty-5 | makarov | bug-bounty-writeup, business-logic, bug-bounty, web-security | 11-Feb-2025 |
| HOW TO GET STARTED IN BUG BOUNTY AS A BEGINNER | https://medium.com/@pjha80122/how-to-get-started-in-bug-bounty-as-a-beginner-af49089c375c?source=rss------bug_bounty-5 | Pratik Jha | ethical-hacking, penetration-testing, bug-bounty, web-security, cybersecurity | 11-Feb-2025 |
| Easy $1000-$10000+ Bounty Using Wayback Machine | https://medium.com/infosecmatrix/easy-1000-10000-bounty-using-wayback-machine-cb6c5cb77543?source=rss------bug_bounty-5 | Abhijeet kumawat | sensitive, bug-bounty, infosec, money, hacking | 11-Feb-2025 |
| Finding subdomains that are hidden in the cloud. | https://infosecwriteups.com/finding-subdomains-that-are-hidden-in-the-cloud-ec54412802bf?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, hacking, penetration-testing, cybersecurity, cloud | 11-Feb-2025 |
| Threat Hunting Techniques and Generative AI: A Practical Approach | https://medium.com/@paritoshblogs/threat-hunting-techniques-and-generative-ai-a-practical-approach-797a86ada4fd?source=rss------bug_bounty-5 | Paritosh | information-technology, cybersecurity, bug-bounty, threat-hunting, ai | 11-Feb-2025 |
| Notify Tutorial for Bug Hunters | https://cybersecuritywriteups.com/notify-tutorial-for-bug-hunters-8ccb8d0d0b74?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, cybersecurity, pentesting, hacking, bug-bounty-tips | 11-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Server-side request forgery) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-server-side-request-forgery-7fb15230a807?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-program, bug-bounty-tips, bug-bounty, bug-bounty-hunter, ssrf | 11-Feb-2025 |
| GitHub Dorks & Leaks: How To Find Sensitive Data | https://medium.com/@verylazytech/github-dorks-leaks-how-to-find-sensitive-data-4e96e67f1d51?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, bug-bounty, github, ethical-hacking, exploit | 11-Feb-2025 |
| Finding SQL Injection Using Wayback Machine | https://medium.com/@muhammadwaseem29/finding-sql-injection-using-wayback-machine-69409204a205?source=rss------bug_bounty-5 | Muhammad Waseem | sql-injection, hacking, infosec, bug-bounty, cybersecurity | 11-Feb-2025 |
| How Pentest-as-a-Service Works: The Ultimate Guide | https://medium.com/@hackrate/how-pentest-as-a-service-works-the-ultimate-guide-a9bc92b28c87?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, bug-bounty, penetration-testing, hacking, cybersecurity | 11-Feb-2025 |
| Get $5000: GitHub Dorks & Leaks | https://cybersecuritywriteups.com/get-5000-github-dorks-leaks-30a6a324f368?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, infosec, money, github, bug-bounty | 11-Feb-2025 |
| How to Report a Security Bug in a Chinese Government Website Responsibly | https://yogsec.medium.com/how-to-report-a-security-bug-in-a-chinese-government-website-responsibly-7ab8f7d5a3e1?source=rss------bug_bounty-5 | YogSec | china-cybersecurity, report-bug-in-chinese, hacking, bug-report, bug-bounty | 11-Feb-2025 |
| Security researchers, ethical hackers, and bug bounty hunters often come across vulnerabilities in… | https://yogsec.medium.com/security-researchers-ethical-hackers-and-bug-bounty-hunters-often-come-across-vulnerabilities-in-45e03a7e156c?source=rss------bug_bounty-5 | YogSec | hacking, bug-bounty, cybersecurity, cybersecurity-usa, how-to-report-bug | 11-Feb-2025 |
| Using Malicious-Website-Demo for Security Research and Bug Bounty Reports | https://yogsec.medium.com/using-malicious-website-demo-for-security-research-and-bug-bounty-reports-fbb25c6773f0?source=rss------bug_bounty-5 | YogSec | hacking-tools, sqli, bug-bounty, xs, cybersecurity | 11-Feb-2025 |
| How I Found a Critical Vulnerability and Earned $4,000 in Bug Bounty Hunting | https://medium.com/@krishna9823420058/how-i-found-a-critical-vulnerability-and-earned-4-000-in-bug-bounty-hunting-2cd8e8ad6f43?source=rss------bug_bounty-5 | Krish_cyber | info-sec-writeups, osint, bugs, hacking, bug-bounty | 11-Feb-2025 |
| ️♂️ How to Choose a Target in Bug Hunting ️♀️ | https://medium.com/@vipulsonule71/%EF%B8%8F-%EF%B8%8F-how-to-choose-a-target-in-bug-hunting-%EF%B8%8F-%EF%B8%8F-2e7dd0ed5c95?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, ai, technology, bug-bounty, hacking | 11-Feb-2025 |
| IAST-Inspired Approach to Security Testing with LLM | https://medium.com/@pirikara077/iast-inspired-approach-to-security-testing-with-llm-8aae36f4088c?source=rss------bug_bounty-5 | Tomoya Yamashita | llm, cybersecurity, vulnerability-assessment, bug-bounty, penetration-testing | 11-Feb-2025 |
| How I gained access to Tamil Nadu’s Property Approval Portal Dashboard just with a simple… | https://hiddendom.medium.com/how-i-gained-access-to-tamil-nadus-property-approval-portal-dashboard-just-with-a-simple-f0b463cc0635?source=rss------bug_bounty-5 | Gokuleswaran B | tamil-nadu, bug-bounty-writeup, bug-bounty, bug-bounty-tips, ethical-hacking | 11-Feb-2025 |
| How I found 3 CSRFs on a Public Program | https://medium.com/@shellreaper/how-i-found-3-csrfs-on-a-public-program-e9b9ff52c1a0?source=rss------bug_bounty-5 | ShellReaper | bug-bounty, bug-bounty-writeup, bug-bounty-tips, csrf-attack, web-security | 11-Feb-2025 |
| From Brute-Force to Bounty: My $200 and Double XSS Win on Acronis | https://muzamilsheikh.medium.com/from-brute-force-to-bounty-my-200-and-double-xss-win-on-acronis-4fc7c7ccff39?source=rss------bug_bounty-5 | MuzamilSheikh | bug-bounty-writeup, bug-bounty-tips, bug-bounty, cyber-security-awareness, cybersecurity | 11-Feb-2025 |
| Restarting My Bug Bounty Journey: Why I Quit and What’s Next | https://infosecwriteups.com/restarting-my-bug-bounty-journey-why-i-quit-and-whats-next-16b0ae1a027b?source=rss------bug_bounty-5 | Om Arora | technology, cybersecurity, bug-bounty-tips, infosec, bug-bounty | 11-Feb-2025 |
| How a Simple Clickjacking Bug Can Lead to Big Security Risks | https://cyberw1ng.medium.com/how-a-simple-clickjacking-bug-can-lead-to-big-security-risks-a61882702370?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, programming, jobs, bug-bounty, careers | 11-Feb-2025 |
| Best Port Scanner for Bug Bounty: How to Install and Use Naabu Efficiently | https://medium.com/@hacker_might/best-port-scanner-for-bug-bounty-how-to-install-and-use-naabu-efficiently-4bffdab35ed5?source=rss------bug_bounty-5 | hacker_might | naabu, port-scanning, reconnaissance, bug-bounty-tips, bug-bounty | 11-Feb-2025 |
| Burp Suite — Creación de Issues Manuales | https://medium.com/@ArtsSEC/burp-suite-creaci%C3%B3n-de-issues-manuales-ac65c5767852?source=rss------bug_bounty-5 | ArtsSEC | burpsuite, pentesting, infosec, bug-bounty, security | 11-Feb-2025 |
| The 7 Most Hilarious Bugs I’ve Encountered in My Career | https://blog.stackademic.com/the-7-most-hilarious-bugs-ive-encountered-in-my-career-128aa23532ab?source=rss------bug_bounty-5 | Coders Stop | software-development, bug-bounty, programming, bugs, coding | 10-Feb-2025 |
| Bypassed Cloudflare: XSS Pop-Up | https://medium.com/@kumawatabhijeet2002/bypassed-cloudflare-xss-pop-up-f9c67952abcf?source=rss------bug_bounty-5 | Abhijeet kumawat | xss-attack, infosec, hacking, bug-bounty-tips, bug-bounty | 10-Feb-2025 |
| HTML Injection in Email Invitations: A Security Flaw Exploited | https://medium.com/@muralidharan1530/html-injection-in-email-invitations-a-security-flaw-exploited-39394f6ac266?source=rss------bug_bounty-5 | Murali Dharan | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 10-Feb-2025 |
| GetSubDomains: A Fast & Efficient Subdomain Enumeration Tool ️ | https://yogsec.medium.com/getsubdomains-a-fast-efficient-subdomain-enumeration-tool-%EF%B8%8F-11c7d8003931?source=rss------bug_bounty-5 | YogSec | subfinder, subdomains-finder, bug-bounty, cybersecurity, hacking-tools | 10-Feb-2025 |
| ERC-20, ERC-721, ERC-1155: How Token Standards Introduce Unique Security Risks | https://securrtech.medium.com/erc-20-erc-721-erc-1155-how-token-standards-introduce-unique-security-risks-ed9fe5083200?source=rss------bug_bounty-5 | Securr - Web3 Security | smart-contract-security, blockchain-security, bug-bounty, web3-security, smart-contract-auditing | 10-Feb-2025 |
| Bypassed Cloudflare: XSS Pop-Up | https://cybersecuritywriteups.com/bypassed-cloudflare-xss-pop-up-f9c67952abcf?source=rss------bug_bounty-5 | Abhijeet kumawat | xss-attack, infosec, hacking, bug-bounty-tips, bug-bounty | 10-Feb-2025 |
| Stored XSS into Onclick Event: Bypassing Angle Brackets, Double Quotes, and Escaped Characters —… | https://infosecwriteups.com/stored-xss-into-onclick-event-bypassing-angle-brackets-double-quotes-and-escaped-characters-ee347b9e19d9?source=rss------bug_bounty-5 | Bash Overflow | exploiting-onclick-xss, bug-bounty, portswigger-xss-lab, stored-xss-bypass, bypass-html-encoding | 10-Feb-2025 |
| Bug Bounty Hunting: A Step-by-Step Guide for Beginners | https://medium.com/cyberilluminati/bug-bounty-hunting-a-step-by-step-guide-for-beginners-05505b12769d?source=rss------bug_bounty-5 | IAMnk | bug-bounty, cyber, bug-bounty-tips, cybersecurity, red-team | 10-Feb-2025 |
| Finding more subdomains Part 3 | https://infosecwriteups.com/finding-more-subdomains-part-3-dee1c581c49b?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, ethical-hacking, infosec, tips, cybersecurity | 10-Feb-2025 |
| My First Paid Bug Bounty: A $250 Reward For Session Management Vulnerability | https://medium.com/@sauravkrish59/my-first-paid-bug-bounty-a-250-reward-for-session-management-vulnerability-22cb5163e05f?source=rss------bug_bounty-5 | Sauravkrish | bug-bounty-writeup, bug-bounty-tips, bug-bounty, ethical-hacking | 10-Feb-2025 |
| How to Get Started in Bug Bounty as a Beginner | https://medium.com/@pjha80122/how-to-get-started-in-bug-bounty-as-a-beginner-48bca31622ec?source=rss------bug_bounty-5 | Pratik | cybersecurity, bug-bounty, ethical-hacking, web-security, penetration-testing | 10-Feb-2025 |
| One of the best tool for subdomain finding | https://medium.com/infosecmatrix/one-of-the-best-tool-for-subdomain-finding-0a066c9e0841?source=rss------bug_bounty-5 | loyalonlytoday | ethical-hacking, cybersecurity, bug-bounty, subdomain, hacking | 10-Feb-2025 |
| Jira Misconfiguration Leading to Unauthorized Access | https://metanetwebhostingsecurity.medium.com/jira-misconfiguration-leading-to-unauthorized-access-69d32ab5a5c7?source=rss------bug_bounty-5 | metanetwebhosting security | cyber-security-awareness, bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 10-Feb-2025 |
| My First Year in Bug Bounty: from 0$ to 10k$ Lessons, Successes, and Encouragement for Beginners | https://medium.com/@hhack4737/my-first-year-in-bug-bounty-from-0-to-10k-lessons-successes-and-encouragement-for-beginners-932bb8884a87?source=rss------bug_bounty-5 | xssor-dz | bug-bounty, bug-bounty-writeup | 10-Feb-2025 |
| Unveiling EXIF Metadata: How to Extract Hidden Information from Images | https://rootxabit.medium.com/unveiling-exif-metadata-how-to-extract-hidden-information-from-images-55e7f3c7f844?source=rss------bug_bounty-5 | xabit • hacks | bugcrowd, hacking, 2025, exiftool, bug-bounty | 10-Feb-2025 |
| How to Start Your Journey in Bug Bounty Hunting | https://medium.com/@vipulsonule71/how-to-start-your-journey-in-bug-bounty-hunting-7e939b75a314?source=rss------bug_bounty-5 | Vipul Sonule | tools, bug-bounty, technology, penetration-testing, cybersecurity | 10-Feb-2025 |
| STIX/TAXII: The Cybersecurity Game-Changer You’re Not Using Yet!” | https://medium.com/@paritoshblogs/stix-taxii-the-cybersecurity-game-changer-youre-not-using-yet-f6ac012dae31?source=rss------bug_bounty-5 | Paritosh | threat-intelligence, hacking, information-technology, cybersecurity, bug-bounty | 10-Feb-2025 |
| How Bug Bounty Programs Work: The Ultimate Guide | https://medium.com/@hackrate/how-bug-bounty-programs-work-the-ultimate-guide-143a7bd93451?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty-tips, cybersecurity, ethical-hacking, hacking, bug-bounty | 10-Feb-2025 |
| XML-RPC Vulnerability: Easy Exploit, Easy Bounty! | https://keroayman77.medium.com/xml-rpc-vulnerability-easy-exploit-easy-bounty-8019a35c700b?source=rss------bug_bounty-5 | Kerolos Ayman | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 10-Feb-2025 |
| Exposed API Keys & Config Files in js file! || Bug Bounty | https://keroayman77.medium.com/exposed-api-keys-config-files-in-js-file-bug-bounty-790b02a015ff?source=rss------bug_bounty-5 | Kerolos Ayman | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 10-Feb-2025 |
| Bug Bounty Target Selection: How Hackers Find the Most Profitable & Juicy Bugs Before Anyone Else! | https://myselfakash20.medium.com/bug-bounty-target-selection-how-hackers-find-the-most-profitable-juicy-bugs-before-anyone-else-061510e83698?source=rss------bug_bounty-5 | Akash Ghosh | programming, bug-bounty-tips, cybersecurity, bug-bounty-writeup, bug-bounty | 10-Feb-2025 |
| International Operation Dismantles Phobos Ransomware Gang: Key Arrests and 8Base Takedown | https://medium.com/@wiretor/international-operation-dismantles-phobos-ransomware-gang-key-arrests-and-8base-takedown-61e126bb54c9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, gangs, ai, money | 10-Feb-2025 |
| Day 6: CSS Injection + Clickjacking to Account Takeover | https://medium.com/@danielbelay/day-6-css-injection-clickjacking-to-account-takeover-c0a0622ac250?source=rss------bug_bounty-5 | dani3l | bug-bounty, ethical-hacking, account-takeover | 10-Feb-2025 |
| Understanding and Exploiting an Open Redirect Vulnerability in NVIDIA | https://medium.com/@g0kb0ru/understanding-and-exploiting-an-open-redirect-vulnerability-in-nvidia-3b1b429cb3c5?source=rss------bug_bounty-5 | g0kb0ru | open-redirect, bug-bounty, bug-bounty-writeup, pentesting, bug-bounty-tips | 10-Feb-2025 |
| Bug Bounty Target Selection: How Hackers Find the Most Profitable & Juicy Bugs Before Anyone Else! | https://infosecwriteups.com/bug-bounty-target-selection-how-hackers-find-the-most-profitable-juicy-bugs-before-anyone-else-061510e83698?source=rss------bug_bounty-5 | Akash Ghosh | technology, programming, cybersecurity, bug-bounty-writeup, bug-bounty | 10-Feb-2025 |
| Easy $250: Discovered Exposed .env Files | https://cybersecuritywriteups.com/easy-250-discovered-exposed-env-files-47e0d425795d?source=rss------bug_bounty-5 | Abhijeet kumawat | money, bug-bounty, ai, hacking, infosec | 09-Feb-2025 |
| How I got Bounty and Hall of Fame for finding easy bugs | https://infosecwriteups.com/how-i-got-bounty-and-hall-of-fame-for-finding-easy-bugs-1a72aefe6c3a?source=rss------bug_bounty-5 | RivuDon | bug-bounty-writeup, ethical-hacking, bug-bounty, infosec, bug-bounty-tips | 09-Feb-2025 |
| How to find bugs in the Microsoft IIS page. | https://infosecwriteups.com/how-to-find-bugs-in-the-microsoft-iis-page-120c2050b66f?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, info-sec-writeups, hacking, bugs, cybersecurity | 09-Feb-2025 |
| Sniper: An Automated Penetration Testing Tool | https://osintteam.blog/sniper-an-automated-penetration-testing-tool-fb54c506f60d?source=rss------bug_bounty-5 | Monika sharma | hacking, bug-bounty-tips, bug-bounty, technology, penetration-testing | 09-Feb-2025 |
| From Duplicate to Letter of Appreciation: How I Hacked NASA | https://medium.com/@cyberhrsh/from-duplicate-to-letter-of-appreciation-how-i-hacked-nasa-3f8b5a6c105c?source=rss------bug_bounty-5 | Harsh kothari | nasa, swag, bug-bounty, vdp, hacking | 09-Feb-2025 |
| Solidity: The Language That Powers the Crypto Revolution | https://medium.com/@legendh238/imagine-youre-in-a-futuristic-city-where-every-transaction-contract-and-agreement-is-1a1b49c873aa?source=rss------bug_bounty-5 | johan | bug-bounty, bitcoin, coding, solidity-language, solidity | 09-Feb-2025 |
| Takeover fresh install nextcloud server admin. | https://medium.com/@nanwinata/takeover-fresh-install-nextcloud-server-admin-142b5c179fe4?source=rss------bug_bounty-5 | nanwn | bug-bounty, nextcloud, hackerone | 09-Feb-2025 |
| How I Found Reflected XSS Vulnerability on Australian Government. [CVE-2022–35653] | https://systemweakness.com/how-i-found-reflected-xss-vulnerability-on-australian-government-cve-2022-35653-ead0e56db243?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-tips, xss-vulnerability, bug-bounty-writeup, xss-attack, bug-bounty | 09-Feb-2025 |
| BUG BOUNTY Roadmap | https://medium.com/@codingbolt.in/bug-bounty-roadamp-4acc1220e123?source=rss------bug_bounty-5 | codingbolt | bug-bounty-tips, bugs, bug-bounty, bug-hunting, bug-bounty-writeup | 09-Feb-2025 |
| ️♂️My Journey of Securing WHO | https://infosecwriteups.com/%EF%B8%8F-%EF%B8%8Fmy-journey-of-securing-who-85f36c6caf0f?source=rss------bug_bounty-5 | cryptoshant | html, tips, bug-bounty, hacking, cybersecurity | 09-Feb-2025 |
| Automated Bug Hunting With Semgrep: Your Secret Weapon for Catching Sneaky Bugs! | https://systemweakness.com/automated-bug-hunting-with-semgrep-your-secret-weapon-for-catching-sneaky-bugs-91439484acf4?source=rss------bug_bounty-5 | The Cyber Ghost | bug-bounty, bugs, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 09-Feb-2025 |
| My Experience at TheDeccanCTF 2025: A Night of Cybersecurity and Challenges | https://medium.com/@pavitr_swain/my-experience-at-thedeccanctf-2025-a-night-of-cybersecurity-and-challenges-b7dc2bc1f114?source=rss------bug_bounty-5 | Pavitr swain | bug-bounty, cybersecurity, thedeccanctf | 09-Feb-2025 |
| How AI Revolutionizes Load Balancing in NGINX, F5 LTM, and GTM ⚙️ | https://medium.com/@deepdive4learn/how-ai-revolutionizes-load-balancing-in-nginx-f5-ltm-and-gtm-%EF%B8%8F-ee6c8edce7d7?source=rss------bug_bounty-5 | DeepDive4learn | cybersecurity, information-technology, pentesting, bug-bounty, web-development | 09-Feb-2025 |
| Best USB WiFi Adapters for Linux and Windows in 2025 | https://medium.com/@verylazytech/best-usb-wifi-adapters-for-linux-and-windows-in-2025-fd6dfc4bad2c?source=rss------bug_bounty-5 | Very Lazy Tech | wifi-hack, wifi, bug-bounty, penetration-testing, cybersecurity | 09-Feb-2025 |
| How to Start Bug Bounty Hunting: A Beginner’s Guide with BugBoard | https://yogsec.medium.com/how-to-start-bug-bounty-hunting-a-beginners-guide-with-bugboard-2be48dffc598?source=rss------bug_bounty-5 | YogSec | hacking-tools, bug-bounty, cybersecurity, hacking | 09-Feb-2025 |
| How Amazon BBP Gave Me $400 bymistake | https://medium.com/@thedevtaskofficial/how-amazon-bbp-gave-me-400-bymistake-1968334003ac?source=rss------bug_bounty-5 | thedevtask official | cybersecurity, vulnerability, penetration-testing, bug-bounty, ethical-hacking | 09-Feb-2025 |
| Ghauri Tool usage for extreme SLQi | https://medium.com/@anandrishav2228/ghauri-tool-usage-for-extreme-slqi-8eb90e65ea64?source=rss------bug_bounty-5 | Rishav anand | sqli, hacking, money, bug-bounty, cybersecurity | 09-Feb-2025 |
| How I Chained 3 Vulnerabilities to Achieve Account Takeover (ATO) | https://medium.com/@hhack4737/how-i-chained-3-vulnerabilities-to-achieve-account-takeover-ato-5238b8acc1ae?source=rss------bug_bounty-5 | xssor-dz | bug-bounty-writeup, bug-bounty | 09-Feb-2025 |
| Threat Hunting with Email Servers: A Practical Guide | https://medium.com/@paritoshblogs/threat-hunting-with-email-servers-a-practical-guide-635d524d72f7?source=rss------bug_bounty-5 | Paritosh | hacking, threat-intelligence, bug-bounty, threat-hunting, information-technology | 09-Feb-2025 |
| Automating Subdomain Takeover Detection: A Step-by-Step Guide | https://bitpanic.medium.com/automating-subdomain-takeover-detection-a-step-by-step-guide-30d692f70752?source=rss------bug_bounty-5 | Spectat0rguy | programming, bug-bounty, technology, cybersecurity, bug-bounty-tips | 09-Feb-2025 |
| Privacy Disclosure on m.facebook.com after add photo to the post | https://infosecwriteups.com/title-privacy-disclosure-on-m-facebook-com-after-add-photo-to-the-post-e7e07e2083e5?source=rss------bug_bounty-5 | Mohamed Laajimi | bug-bounty-writeup, cybersecurity, bug-bounty | 09-Feb-2025 |
| Automate Google Dorking And Get Bugs! | https://osintteam.blog/automate-google-dorking-and-get-bugs-a34e4e06767c?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, ai, hacking, infosec | 09-Feb-2025 |
| Mobile Pentesting with Frida: A Beginner’s Guide | https://medium.com/meetcyber/mobile-pentesting-with-frida-a-beginners-guide-996411fa0202?source=rss------bug_bounty-5 | Erkan Kavas | ios, android, frida, mobile-pentesting, bug-bounty | 09-Feb-2025 |
| How to Find Primary Domains Using crt.sh: The Ultimate Guide for Beginners and Experts | https://medium.com/@hacker_might/how-to-find-primary-domains-using-crt-sh-the-ultimate-guide-for-beginners-and-experts-354ec0c56557?source=rss------bug_bounty-5 | hacker_might | reconnaissance, primary-domain, pentesting, bug-bounty, recon | 09-Feb-2025 |
| How to Uncover Hidden Attack Surfaces? Recon part 6 | https://infosecwriteups.com/how-to-uncover-hidden-attack-surfaces-recon-part-6-61e43976ed22?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, attack-surface, hidden, port-scanning, ip-scans | 09-Feb-2025 |
| How to Find Primary Domains Using crt.sh: The Ultimate Guide for Beginners and Experts | https://osintteam.blog/how-to-find-primary-domains-using-crt-sh-the-ultimate-guide-for-beginners-and-experts-354ec0c56557?source=rss------bug_bounty-5 | hacker_might | reconnaissance, primary-domain, pentesting, bug-bounty, recon | 09-Feb-2025 |
| Day 5: Chaining Bugs from Self-XSS to Full Account Takeover | https://medium.com/@danielbelay/day-5-chaining-bugs-from-self-xss-to-full-account-takeover-d01ab3759e06?source=rss------bug_bounty-5 | dani3l | bug-bounty, ethical-hacking, account-takeover | 09-Feb-2025 |
| Insecure root-path FileProvider Config Leading to Path Traversal Vulnerability | https://medium.com/@k3r0/insecure-root-path-fileprovider-config-leading-to-path-traversal-vulnerability-7be2d6994aaf?source=rss------bug_bounty-5 | Kyrillos nady | bug-bounty, mobile-app-development, penetration-testing, android, hacking | 09-Feb-2025 |
| The Art of Recon: Hunting Bugs Before They Hide (Part One) | https://zeusvuln.medium.com/the-art-of-recon-hunting-bugs-before-they-hide-part-one-1df269ab1d68?source=rss------bug_bounty-5 | ZeUsVuLn | reconnaissance, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 09-Feb-2025 |
| Exploiting an IDOR Vulnerability in Target.com Account Management System | https://bugbountylogs.medium.com/exploiting-an-idor-vulnerability-in-target-com-account-management-system-a5bec149e69f?source=rss------bug_bounty-5 | Bug Bounty Logs | idor, cyber-security-awareness, csrf-attack, bug-bounty-tips, bug-bounty | 09-Feb-2025 |
| SQL Injection and Stored Cross-Site Scripting Vulnerability in Super Store Finder Plugin | https://medium.com/@wiretor/sql-injection-and-stored-cross-site-scripting-vulnerability-in-super-store-finder-plugin-214237191b5a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, ai, sql-injection, money | 09-Feb-2025 |
| Massive Data Breach: 882,000 Patients Affected in US Health System Cyberattack | https://medium.com/@wiretor/massive-data-breach-882-000-patients-affected-in-us-health-system-cyberattack-ce8ddca0edc0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, malware, ai, breach, bug-bounty | 09-Feb-2025 |
| Exploiting Web Cache Poisoning with Multiple Headers: A Practical Guide Using Param Miner — Web… | https://bashoverflow.medium.com/exploiting-web-cache-poisoning-with-multiple-headers-a-practical-guide-using-param-miner-web-aca990356da8?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, bug-bounty-tips, cache-poisoning-xss, web-cache-attack, web-cache-poisoning | 08-Feb-2025 |
| Selecting A Program for Bug Bounty on HackerOne | https://vijetareigns.medium.com/selecting-a-program-for-bug-bounty-on-hackerone-e51ce8a83b2a?source=rss------bug_bounty-5 | the_unlucky_guy | bug-bounty-tips, bug-bounty-writeup, cybersecurity, hackerone, bug-bounty | 08-Feb-2025 |
| Sensitive Information Disclosure | https://medium.com/@kumawatabhijeet2002/sensitive-information-disclosure-f374fa508809?source=rss------bug_bounty-5 | Abhijeet kumawat | money, hacking, infosec, bug-bounty-tips, bug-bounty | 08-Feb-2025 |
| nullcon HackIM CTF Goa 2025 | https://aftab700.medium.com/nullcon-hackim-ctf-goa-2025-a7e9c6b1c293?source=rss------bug_bounty-5 | Aftab Sama | ctf, cybersecurity, ctf-writeup, bug-bounty, nullcon | 08-Feb-2025 |
| Find RXSS using Nuclei (DAST) | https://cybersecuritywriteups.com/find-rxss-using-nuclei-dast-87080542adde?source=rss------bug_bounty-5 | AbhirupKonwar | cybersecurity, pentesting, xss-attack, bug-bounty, bug-bounty-tips | 08-Feb-2025 |
| Behind the Message: Two Critical XSS Vulnerabilities in Zoho’s Web Applications | https://infosecwriteups.com/behind-the-message-two-critical-xss-vulnerabilities-in-zohos-web-applications-86aa42887129?source=rss------bug_bounty-5 | HackerWithOutHat | javascript, bugbounty-writeup, bug-bounty, vulnerability, infosec | 08-Feb-2025 |
| Best Browser Extensions for Bug Hunting and Cybersecurity | https://infosecwriteups.com/best-browser-extensions-for-bug-hunting-and-cybersecurity-77faf6bd8188?source=rss------bug_bounty-5 | coffinxp | bug-bounty, hacking, bug-bounty-tips, cybersecurity, technology | 08-Feb-2025 |
| Web Security 101: Understanding LFI and RFI Attacks: A Bug Bounty Hunter’s Guide | https://anmolvishwakarma7466.medium.com/web-security-101-understanding-lfi-and-rfi-attacks-a-bug-bounty-hunters-guide-299b6b1d76e7?source=rss------bug_bounty-5 | Anmolvishwakarma | vulnerability, lfi, hacking, cybersecurity, bug-bounty | 08-Feb-2025 |
| How to Get Your First Bug Bounty: A Beginner’s Guide | https://medium.com/@krishna9823420058/how-to-get-your-first-bug-bounty-a-beginners-guide-c2a07bb4e792?source=rss------bug_bounty-5 | Krish_cyber | bug-bounty-tips, bug-bounty, cybersecurity, bugbounty-writeup, ethical-hacking | 08-Feb-2025 |
| BONUS for NAs! How? | https://medium.com/@thedevtaskofficial/bonus-for-well-written-nas-46a55eb20bc9?source=rss------bug_bounty-5 | thedevtask official | ethical-hacking, cybersecurity, bug-bounty, penetration-testing, vulnerability | 08-Feb-2025 |
| Bug bounty triagers have blacklisted you! | https://medium.com/@thedevtaskofficial/the-bug-bounty-secret-nobody-tells-you-e66c99adb013?source=rss------bug_bounty-5 | thedevtask official | vulnerability, ethical-hacking, cybersecurity, penetration-testing, bug-bounty | 08-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Insecure Direct Object References) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-insecure-direct-object-references-a39038e8f7a3?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-program, bug-bounty-tips, bug-bounty, idor, bug-bounty-hunter | 08-Feb-2025 |
| Lack of Clarity Costed me $500 | https://medium.com/@naveen_sparks/lack-of-clarity-costed-me-500-26565aeb05e7?source=rss------bug_bounty-5 | Naveen Kumar | mfa, bug-bounty, 2fa-bypass | 08-Feb-2025 |
| $500 Bounty: Unlocking Premium Job Features with a Simple API Trick! | https://medium.com/@a13h1/500-bounty-unlocking-premium-job-features-with-a-simple-api-trick-1c59814ad8f4?source=rss------bug_bounty-5 | Abhi Sharma | cybersecurity, penetration-testing, api, infosec, bug-bounty | 08-Feb-2025 |
| Account Verification OTP Bypass in Microsoft Security Response Centre | https://medium.com/@official.armanreza/account-verification-otp-bypass-in-microsoft-security-response-centre-21855731a6f5?source=rss------bug_bounty-5 | armanxreza | bug-bounty-writeup, security, bug-bounty, microsoft, msrc | 08-Feb-2025 |
| Account Takeover via Email Change: Exploiting Weak Verification to Access Support Accounts | https://medium.com/@umd04843/account-takeover-via-email-change-exploiting-weak-verification-to-access-support-accounts-a3bb8d59e753?source=rss------bug_bounty-5 | Mohamed Usman | account-takeover, cybersecurity, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 08-Feb-2025 |
| How I Found My First Bug $$$ | https://medium.com/@HackerNasr/how-i-found-my-first-bug-c976920cbbe3?source=rss------bug_bounty-5 | HackerNasr | xss-attack, penetration-testing, ethical-hacking, cybersecurity, bug-bounty | 08-Feb-2025 |
| Strange SQL Injection on a public program | https://medium.com/@68abdelrahmanmohamed/strange-sql-injection-on-a-public-program-50e93a94f02a?source=rss------bug_bounty-5 | Abdulrahman | bug-bounty, sql-injection, web-app-security, pentesting, web-app-pentesting | 08-Feb-2025 |
| My First Finding In Hackerone | https://islammeshriff.medium.com/my-first-finding-in-hackerone-7521597ca04d?source=rss------bug_bounty-5 | Islam Meshrif | bug-bounty, bug-bounty-writeup, information-disclosure | 08-Feb-2025 |
| From Hidden XSS to Full Account Takeover – A Deep Dive into Exploiting Modern Web Applications | https://medium.com/@mahad.ahmed0x1/from-hidden-xss-to-full-account-takeover-a-deep-dive-into-exploiting-modern-web-applications-811380417387?source=rss------bug_bounty-5 | 404NotPentested | web-security, xss-attack, cybersecurity, cross-site-scripting, bug-bounty | 08-Feb-2025 |
| How Subdomain Fuzzing Earned Me a $35,000 Bug Bounty! | https://medium.com/@ibtissamhammadi1/how-subdomain-fuzzing-earned-me-a-35-000-bug-bounty-994b39763451?source=rss------bug_bounty-5 | Ibtissam hammadi | web-security, hacking, cybersecurity, bug-bounty, infosec | 08-Feb-2025 |
| EASIEST P4 TO FIND IN BUG BOUNTY PART 1 | https://medium.com/@sahusujal.dev2004/easiest-p4-to-find-in-bug-bounty-part-1-b903ad3cea37?source=rss------bug_bounty-5 | Sujal Sahu | cybersecurity, bug-bounty, bug-bounty-tips, bugs, real-world-bug-hunting | 08-Feb-2025 |
| Ethical Hacking: Reconnaissance/Footprinting | https://medium.com/@paritoshblogs/ethical-hacking-reconnaissance-footprinting-214055abbf44?source=rss------bug_bounty-5 | Paritosh | ethical-hacking, reconnaissance, bug-bounty, information-technology, footprinting | 08-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (Race Condition) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-race-condition-2af68c166721?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-tips, bug-bounty-hunter, bug-bounty-program, bug-bounty, race-condition | 08-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerability (SQL injection) | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerability-sql-injection-1abe0f72832d?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-hunter, bug-bounty, sql-injection, bug-bounty-tips, bug-bounty-program | 08-Feb-2025 |
| My Journey to Earning the HTB Bug Bounty Hunter Certificate: An Honest Review | https://medium.com/@Arsenelupin12/my-journey-to-earning-the-htb-bug-bounty-hunter-certificate-an-honest-review-323fb71b306a?source=rss------bug_bounty-5 | Wasted Resources | hacking, hackerone, bug-bounty-tips, bug-bounty, cybersecurity | 08-Feb-2025 |
| Hackers Exploit Cityworks RCE Bug to Breach Microsoft IIS Servers | https://medium.com/@wiretor/hackers-exploit-cityworks-rce-bug-to-breach-microsoft-iis-servers-ad48fc0e13e9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, money, ai, trump | 08-Feb-2025 |
| HPE Notifies Employees of Data Breach After Russian Office 365 Hack | https://medium.com/@wiretor/hpe-notifies-employees-of-data-breach-after-russian-office-365-hack-d5bfed1fd135?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | trump, ai, malware, bug-bounty, money | 08-Feb-2025 |
| 2.8 Million IPs Power Large-Scale Attack on VPN and Security Devices | https://medium.com/@wiretor/2-8-million-ips-power-large-scale-attack-on-vpn-and-security-devices-a889473a5c36?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, usa, trump, ai, money | 08-Feb-2025 |
| Just a Writeup about 2FA Bypass at a Private Program 🙂 | https://v0ltex.medium.com/just-a-writeup-about-2fa-bypass-at-a-private-program-509238a0a3a1?source=rss------bug_bounty-5 | Abdo Rabea | bug-hunting, 2fa-bypass, bug-bounty-writeup, bug-bounty, pentesting | 08-Feb-2025 |
| The $50,000 Mistake — A Read/Write Profile IDOR Story | https://medium.com/@shxsu1/the-50-000-mistake-a-read-write-profile-idor-story-c31c353446d4?source=rss------bug_bounty-5 | shxsu1 | hackerone, bug-bounty, college, hacking, idor | 07-Feb-2025 |
| [PART 2] Anyone can use unlimited Trial Premium on accounts that have used Trial Premium before | https://aidilarf.medium.com/part-2-anyone-can-use-unlimited-trial-premium-on-accounts-that-have-used-trial-premium-before-b1ac65c9a2d6?source=rss------bug_bounty-5 | Aidil Arief | bugs, bug-bounty, hackerone, business-logic-bug, linkedin | 07-Feb-2025 |
| How to Exploit Web Cache Poisoning with an Unkeyed Header Using Param Miner — Web Cache… | https://bashoverflow.medium.com/how-to-exploit-web-cache-poisoning-with-an-unkeyed-header-using-param-miner-web-cache-a3ffacc546a1?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty-tips, web-cache-poisoning, bug-bounty, cache-poisoning-xss, web-cache-exploit | 07-Feb-2025 |
| 50+ XSS: Mass Hunting | https://medium.com/@kumawatabhijeet2002/50-xss-mass-hunting-37e51fce5369?source=rss------bug_bounty-5 | Abhijeet kumawat | money, xss-attack, hacking, infosec, bug-bounty | 07-Feb-2025 |
| How I Found an Excel Sheet with 200+ Bank Testing Account Login Details! | https://systemweakness.com/how-i-found-an-excel-sheet-with-200-bank-testing-account-login-details-883c38492424?source=rss------bug_bounty-5 | Gokuleswaran B | google-dork, reconnaissance, bug-bounty, dorking, bug-bounty-tips | 07-Feb-2025 |
| Do You Struggle Finding Internal/Hidden Subdomains? Recon part 5 | https://osintteam.blog/do-you-struggle-finding-internal-hidden-subdomains-recon-part-5-b06c99a11364?source=rss------bug_bounty-5 | It4chis3c | subdomain-enumeration, hidden, bug-bounty, brute-force, secrets | 07-Feb-2025 |
| RXSS Hacking Law Enforcement | https://systemweakness.com/rxss-hacking-law-enforcement-434ad9b5c03f?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, bug-bounty-tips, ethical-hacking, cybersecurity, pentesting | 07-Feb-2025 |
| Bug Bounty Program: Crypto Rewards for Finding Bugs in ARMswap Platform | https://medium.com/@michaeltaylor.armswap/bug-bounty-program-crypto-rewards-for-finding-bugs-in-armswap-platform-e863185b0b07?source=rss------bug_bounty-5 | Michael Taylor | bug-bounty, bug-bounty-program, bug-bounty-hunter, bug-bounty-tips, armswap | 07-Feb-2025 |
| Exploiting CSRF in GraphQL Applications | https://fdzdev.medium.com/exploiting-csrf-in-graphql-applications-f262411588f7?source=rss------bug_bounty-5 | Facundo Fernandez | bug-bounty, data-breach, penetration-testing, cybersecurity, offensive-security | 07-Feb-2025 |
| How to Find Your 1st Easy Bug as a Bug Bounty Hunter (Step-by-Step Guide) On Real Live Websites | https://medium.com/@shaikhminhaz1975/how-to-find-your-1st-easy-bug-as-a-bug-bounty-hunter-step-by-step-guide-on-real-live-websites-cc586d51e1e7?source=rss------bug_bounty-5 | Shaikh Minhaz | ethical-hacking, cybersecurity, bug-bounty, information-disclosure, how-to | 07-Feb-2025 |
| How to Approach a Target for Bug Hunting | https://medium.com/@vipulsonule71/how-to-approach-a-target-for-bug-hunting-ef45c32cf8ee?source=rss------bug_bounty-5 | Vipul Sonule | cybersecurity, penetration-testing, hacking, bug-bounty, technology | 07-Feb-2025 |
| 3 Digit Codes That Decides Your Future | https://bitpanic.medium.com/3-digit-codes-that-decides-your-future-dd078f099b06?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, technology, cybersecurity, web-development, bug-bounty-tips | 07-Feb-2025 |
| How I Found Sensitive Log Files | https://medium.com/@kumawatabhijeet2002/how-i-found-sensitive-log-files-2336cd86226f?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, infosec, logistics, hacking, money | 07-Feb-2025 |
| Day 3: Account Takeover via XSS in E-Signature Feature (Worth $2500) | https://medium.com/@danielbelay/day-3-account-takeover-via-xss-in-e-signature-feature-worth-2500-71db9449f74b?source=rss------bug_bounty-5 | dani3l | bugs, bug-bounty, ethical-hacking | 07-Feb-2025 |
| Cloudflare Outage Disrupts Multiple Services Due to Phishing Block Mishap | https://medium.com/@wiretor/cloudflare-outage-disrupts-multiple-services-due-to-phishing-block-mishap-4fdac4bcd365?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, cloudflare, bug-bounty, money, malware | 07-Feb-2025 |
| Kimsuky Hackers Deploy Custom RDP Wrapper for Remote Access | https://medium.com/@wiretor/kimsuky-hackers-deploy-custom-rdp-wrapper-for-remote-access-aa9d9eae74f6?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, money, malware, ai | 07-Feb-2025 |
| Bypassing Rate Limit on Password Reset Page | https://medium.com/@omaroymdm/bypassing-rate-limit-on-password-reset-page-63814feec6f5?source=rss------bug_bounty-5 | Omar Mahmoud | rate-limiting, bug-bounty, pentesting | 07-Feb-2025 |
| User Interface Says No, Backend Says Yes — Story of Bypassing Email Verification | https://som3a.medium.com/user-interface-says-no-backend-says-yes-story-of-bypassing-email-verification-b469f20a141f?source=rss------bug_bounty-5 | 0xSOM3A | bug-bounty-writeup, bug-bounty, bug-bounty-tips, cybersecurity | 07-Feb-2025 |
| Introducing Zerodayf, A dynamic, AI-driven code analysis vulnerability scanner | https://medium.com/@kohihamed3/introducing-zerodayf-a-dynamic-ai-driven-code-analysis-vulnerability-scanner-7e9ab4ffb6e6?source=rss------bug_bounty-5 | 0xHamy | ai, bug-bounty, cve, appsec, vulnerability | 07-Feb-2025 |
| Extreme Recon Dorking | https://medium.com/meetcyber/extreme-recon-dorking-eace7444b7c2?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, bug-bounty-tips, api-testing, bug-bounty, ethical-hacking | 06-Feb-2025 |
| The $750 API Leak: Could This Happen to You? | https://deepseng.medium.com/the-750-api-leak-could-this-happen-to-you-08fb858b4af1?source=rss------bug_bounty-5 | Deep SenGupta | cybersecurity, api, bug-bounty | 06-Feb-2025 |
| How I got an Account-Takeover By Race-conditions on Login page | https://medium.com/@krishnast545/how-i-got-an-account-takeover-by-race-conditions-on-login-page-3775faaffb4f?source=rss------bug_bounty-5 | Krishna | bug-bounty, bounty-hunter, web-app-security, race-condition, account-take-over | 06-Feb-2025 |
| Automating Ghauri for SQLi with Bash Script | https://medium.com/meetcyber/automating-ghauri-for-sqli-with-bash-script-6ce8fb62c367?source=rss------bug_bounty-5 | Erkan Kavas | sqli, sql-injection, ethical-hacking, bug-bounty-tips, bug-bounty | 06-Feb-2025 |
| Subdomain Enumeration: A Practical Guide | https://medium.com/@nakshatrasirohi/subdomain-enumeration-a-practical-guide-03b2007aedd7?source=rss------bug_bounty-5 | Nakshatra Sirohi | hacking, bug-bounty, recon, reconnaissance, bug-bounty-tips | 06-Feb-2025 |
| Flutsploit : Flutter on the web manifest exploiter | https://medium.com/@raituzki/flutsploit-flutter-on-the-web-manifest-exploiter-8fc6b50b9de7?source=rss------bug_bounty-5 | Muhamad Raidinoor Pasha | security, bug-bounty, exploit, flutter | 06-Feb-2025 |
| How to Earn Money in Cybersecurity: A Quick Guide | https://medium.com/@krishna9823420058/how-to-earn-money-in-cybersecurity-a-quick-guide-30422f14b2e7?source=rss------bug_bounty-5 | Krish_cyber | earn-money-online, cyber-security-awareness, ethical-hacking, cybersecurity, bug-bounty | 06-Feb-2025 |
| Old CVE in my Old Organization | https://medium.com/@naveen_sparks/old-cve-in-my-old-organization-b4f863049171?source=rss------bug_bounty-5 | Naveen Kumar | cve, cve-2023-24488, bug-bounty | 06-Feb-2025 |
| PHP Type Juggling Vulnerabilities: How Attackers Exploit Loose Comparisons | https://0xkratos.medium.com/php-type-juggling-vulnerabilities-how-attackers-exploit-loose-comparisons-e4e0c78ec9e6?source=rss------bug_bounty-5 | Amal PK | bug-bounty, bug-bounty-tips, programming, hacking, cybersecurity | 06-Feb-2025 |
| DAY[4/30] CSRF (Cross-Site Request Forgery): Exploitation and Prevention in depth | https://medium.com/@hrofficial62/csrf-cross-site-request-forgery-exploitation-and-prevention-in-depth-72ed72ebf23a?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, bug-bounty, ethical-hacking, owasp, pentesting | 06-Feb-2025 |
| Time to braking your NOS (☞ﾟヮﾟ)☞ | https://medium.com/@mahdisalhi0500/time-to-braking-your-nos-%EF%BE%9F%E3%83%AE%EF%BE%9F-834ee204bdd2?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | bug-bounty, information-security, penetration-testing, infosec, cybersecurity | 06-Feb-2025 |
| $300 Bounty for Easy Default Credential | https://medium.com/@kumawatabhijeet2002/300-bounty-for-easy-default-credential-617de40114c4?source=rss------bug_bounty-5 | Abhijeet kumawat | medium, infosec, hacking, money, bug-bounty | 06-Feb-2025 |
| DAY[3/30] XSS Attack Techniques: A Deep Dive into Exploitation and Defense | https://medium.com/@hrofficial62/xss-attack-techniques-a-deep-dive-into-exploitation-and-defense-df62b5f66c44?source=rss------bug_bounty-5 | Mr Horbio | ethical-hacking, pentesting, cybersecurity, bug-bounty, xss-attack | 06-Feb-2025 |
| Advanced Techniques for Identifying Leaked API Keys in JS Files | https://systemweakness.com/advanced-techniques-for-identifying-leaked-api-keys-in-js-files-bb67845e5c0e?source=rss------bug_bounty-5 | Reju Kole | bug-bounty, javascript, bug-bounty-writeup, api, bug-bounty-tips | 06-Feb-2025 |
| Mastering XSS: An Advanced Cheat Sheet for Exploiting Cross-Site Scripting Vulnerabilities | https://medium.com/@Arsenelupin12/mastering-xss-an-advanced-cheat-sheet-for-exploiting-cross-site-scripting-vulnerabilities-a1eb1470c3ae?source=rss------bug_bounty-5 | Wasted Resources | bug-bounty, xss-vulnerability, cybersecurity, hacking, xss-attack | 06-Feb-2025 |
| TikTok Bug Bounty — $250 | https://medium.com/@bhussain894/tiktok-bug-bounty-250-82293995c9e4?source=rss------bug_bounty-5 | Bilal Hussain | bug-bounty, bug-bounty-writeup, ti̇ktok | 06-Feb-2025 |
| How to Install and Use ZAP Tool for Web Application Security Testing: A Step-by-Step Guide | https://yaminiyadav583.medium.com/how-to-install-and-use-zap-tool-for-web-application-security-testing-a-step-by-step-guide-f07697a5e6fc?source=rss------bug_bounty-5 | Yamini Yadav | zap, bug-bounty, security, penetration-testing | 06-Feb-2025 |
| Search Engines Every Pentester Should Know | https://osintteam.blog/search-engines-every-pentester-should-know-faabe0c7fb64?source=rss------bug_bounty-5 | Sacony Chukwu | bug-bounty-tips, hacking, bug-bounty, bugbounty-writeup, cybersecurity | 06-Feb-2025 |
| Automating Google Dorking for Bug Bounty | https://osintteam.blog/automating-google-dorking-for-bug-bounty-2339abb4b910?source=rss------bug_bounty-5 | Monika sharma | technology, bug-bounty-tips, hacking, penetration-testing, bug-bounty | 06-Feb-2025 |
| Day 2: Account Takeover via Stored XSS | https://medium.com/@danielbelay/day-2-account-takeover-via-stored-xss-ac62c49b20c1?source=rss------bug_bounty-5 | dani3l | bug-bounty, learning | 06-Feb-2025 |
| How to stop a blockchain from reaching consensus? Or 40k bounty for stalling CometBFT | https://medium.com/@unknown_feature/how-to-stop-a-blockchain-from-reaching-consensus-or-40k-bounty-for-stalling-cometbft-1b8a6959e0f0?source=rss------bug_bounty-5 | Anna Skirko (unknown_feature) | crypto, code-review, bug-bounty, blockchain, hacking | 06-Feb-2025 |
| How to Shutdown Your Computer Remotely by Pressing a Button on Your Smartwatch or Phone | https://navnee1h.medium.com/how-to-shutdown-your-computer-remotely-by-pressing-a-button-on-your-smartwatch-or-phone-77c07e2562e9?source=rss------bug_bounty-5 | Navaneeth M S | hacking, webhooks, bug-bounty, linux, automation | 06-Feb-2025 |
| DDoS Attacks Reportedly Behind DayZ and Arma Network Outages | https://medium.com/@wiretor/ddos-attacks-reportedly-behind-dayz-and-arma-network-outages-937a1078d4c3?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, money, ddos, bug-bounty, hacker | 06-Feb-2025 |
| Hackers Exploit SimpleHelp RMM Flaws to Deploy Sliver Malware | https://medium.com/@wiretor/hackers-exploit-simplehelp-rmm-flaws-to-deploy-sliver-malware-51d42d46079f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, hacker, ai, bug-bounty, malware | 06-Feb-2025 |
| Critical RCE Bug in Microsoft Outlook Now Exploited in Attacks | https://medium.com/@wiretor/critical-rce-bug-in-microsoft-outlook-now-exploited-in-attacks-ea10ec8761c8?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, money, bug-bounty, malware, rce | 06-Feb-2025 |
| The Importance of Proxy Usage in Bug Hunting | https://medium.com/meetcyber/the-importance-of-proxy-usage-in-bug-hunting-9896618da7fc?source=rss------bug_bounty-5 | Erkan Kavas | ethical-hacking, bug-bounty, payload, bug-bounty-tips, proxy | 06-Feb-2025 |
| FINDING A DOS BUG(STEP BY STEP). | https://medium.com/infosecmatrix/finding-a-dos-bug-step-by-step-22216cac37d8?source=rss------bug_bounty-5 | loyalonlytoday | bugs, hacking, bug-bounty, cybersecurity, do | 05-Feb-2025 |
| Critical Session Management Vulnerability Leading to Account Hijacking | https://medium.com/@ahmadzuriqi4/critical-session-management-vulnerability-leading-to-account-hijacking-ec71e966265a?source=rss------bug_bounty-5 | Ahmadzuriqi | bug-bounty-tips, bug-bounty, bug-bounty-writeup, hacking, hacker | 05-Feb-2025 |
| DOM-Based Reflected XSS in MTN Group’s Notification Server | https://medium.com/@regan_temudo/dom-based-reflected-xss-in-mtn-groups-notification-server-84289a87094e?source=rss------bug_bounty-5 | Regan Temudo | web-security, bug-bounty, xss-attack, cybersecurity, ethical-hacking | 05-Feb-2025 |
| Get Easy $$$ Bugs by These Dorks | https://medium.com/@kumawatabhijeet2002/get-easy-bugs-by-these-dorks-b811ca815f3c?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, ai, hacking, bug-bounty, money | 05-Feb-2025 |
| Bypassing OTP Verification: Exposing a Critical Authentication Flaw | https://medium.com/@amanba13.ab/bypassing-otp-verification-exposing-a-critical-authentication-flaw-80a1065a432c?source=rss------bug_bounty-5 | Aman Banga | cybersecurity, authentication, ios, bug-bounty | 05-Feb-2025 |
| PII Exposure: The Data Heist You Never Knew Was Possible! | https://infosecwriteups.com/pii-exposure-the-data-heist-you-never-knew-was-possible-5577b84a1074?source=rss------bug_bounty-5 | th3.d1p4k | misconfiguration, hacking, bug-bounty, smtp, api | 05-Feb-2025 |
| Brute Forcing Financial Apps With HackerOne | https://infosecwriteups.com/brute-forcing-financial-apps-with-hackerone-86e22add374e?source=rss------bug_bounty-5 | Aleksa Zatezalo | hackerone, vulnerability, hacking, disclosure, bug-bounty | 05-Feb-2025 |
| Get Easy $$$ Bugs by These Dorks | https://osintteam.blog/get-easy-bugs-by-these-dorks-b811ca815f3c?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, ai, hacking, bug-bounty, money | 05-Feb-2025 |
| Accidental Information Disclosure! | https://medium.com/@dopednaveen/accidental-information-disclosure-477198f071eb?source=rss------bug_bounty-5 | Naveen Kumar | bug-bounty, bug-bounty-writeup, pentesting | 05-Feb-2025 |
| 10 Must-Have Burp Suite Extensions for Pro Bug Hunters ️ | https://medium.com/@kumawatabhijeet2002/10-must-have-burp-suite-extensions-for-pro-bug-hunters-%EF%B8%8F-e53aa3b5af48?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, hacking, bug-bounty, ai, money | 05-Feb-2025 |
| Penetration Testing as a Service (PTaaS): The Future of Cybersecurity | https://medium.com/@hackrate/penetration-testing-as-a-service-ptaas-the-future-of-cybersecurity-f8c0f223069b?source=rss------bug_bounty-5 | Levente Molnar | hacking, ethical-hacking, cybersecurity, penetration-testing, bug-bounty | 05-Feb-2025 |
| How to find an easy bug is worth $100 | https://medium.com/cyberscribers-exploring-cybersecurity/how-to-find-an-easy-bug-is-worth-100-bbee4ca57d3d?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, hacking, tips, ethical-hacking | 05-Feb-2025 |
| ($$$$) Critical IDOR Vulnerability Leads to User Information Disclosure | https://medium.com/@Tanvir0x1/critical-idor-vulnerability-leads-to-user-information-disclosure-b0bb7f06aef5?source=rss------bug_bounty-5 | Tanvir Ahmed | bug-bounty, idor | 05-Feb-2025 |
| From Demo to Live: Zero-Click Account Takeover via the Same Encryption Algorithm | https://infosecwriteups.com/from-demo-to-live-zero-click-account-takeover-via-the-same-encryption-algorithm-38b6cabfb21e?source=rss------bug_bounty-5 | can1337 | bugbounty-writeup, account-takeover, bug-bounty, cybersecurity | 05-Feb-2025 |
| Accidental Information Disclosure! | https://medium.com/@naveen_sparks/accidental-information-disclosure-477198f071eb?source=rss------bug_bounty-5 | Naveen Kumar | bug-bounty, bug-bounty-writeup, pentesting | 05-Feb-2025 |
| OTP Bypass on [Redacted]: Contact Forms to Unauthorized Calls | https://medium.com/@manav.surti.13728342/otp-bypass-on-redacted-contact-forms-to-unauthorized-calls-453d09837fa4?source=rss------bug_bounty-5 | Manav Surti | bug-bounty, cybersecurity, otp-bypass | 05-Feb-2025 |
| Day 1: Defeating the HttpOnly Flag for Account Takeover via RXSS | https://medium.com/@danielbelay/day-1-defeating-the-httponly-flag-for-account-takeover-via-rxss-a2fa9cbc0156?source=rss------bug_bounty-5 | dani3l | ethical-hacking, security, writeup, bug-bounty | 05-Feb-2025 |
| Cyberforce 2024: How I found my first CVE OpenPLCV3 | https://medium.com/@alimuhammadsecured/cyberforce-2024-how-i-found-my-first-cve-openplcv3-16c058b114b0?source=rss------bug_bounty-5 | Alimuhammadsecured | ctf, vulnerability, exploit, cve, bug-bounty | 05-Feb-2025 |
| Netgear Warns of Zero-Day Vulnerabilities in WiFi Routers | https://medium.com/@wiretor/netgear-warns-of-zero-day-vulnerabilities-in-wifi-routers-ffc2d8299b8f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, netgear, usa, money, ai | 05-Feb-2025 |
| All You Need To Know About Path Traversal | https://medium.com/@ossama.cybersec/all-you-need-to-know-about-path-traversal-5a01c18e01e4?source=rss------bug_bounty-5 | Ossama Ahmed (@pent0ss) | bug-bounty, pentesting, bug-bounty-tips, path-traversal, vulnerability | 05-Feb-2025 |
| Practical and Easy Steps to Find XSS with a REAL CASE Study | https://medium.com/@BugRey/practical-and-easy-steps-to-find-xss-with-a-real-case-study-6959a3fbd6bf?source=rss------bug_bounty-5 | ./Rey~ | web-security, penetration-testing, web-security-testing, bug-bounty-tips, bug-bounty | 04-Feb-2025 |
| How I Hacked My Way Into College (and Became a Life Job Afterward) | https://medium.com/@shxsu1/how-i-hacked-my-way-into-college-and-became-a-life-job-afterward-aef3e0e7e843?source=rss------bug_bounty-5 | shxsu1 | college, bug-bounty, hacking | 04-Feb-2025 |
| [A Practical Guide] Exploiting SSRF with Filter Bypass via Open Redirection — SSRF Labs | https://bashoverflow.medium.com/a-practical-guide-exploiting-ssrf-with-filter-bypass-via-open-redirection-ssrf-labs-e0cfaa0c5774?source=rss------bug_bounty-5 | Bash Overflow | bug-bounty, ssrf-exploitation, open-redirection-exploit, ssrf, bypassing-ssrf-filters | 04-Feb-2025 |
| Bug Bounty Hunting: Lab Setup & Traffic Interception Guide | https://medium.com/@muhammad4208/bug-bounty-hunting-lab-setup-traffic-interception-guide-d2b9956fa455?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty, bug-bounty-program, bug-bounty-tips | 04-Feb-2025 |
| How I Earned 50000 United Miles(And how you can!) | https://medium.com/@thedevtaskofficial/how-i-earned-50000-united-miles-and-how-you-can-793a3b47142e?source=rss------bug_bounty-5 | thedevtask official | cybersecurity, vulnerability, ethical-hacking, bug-bounty, penetration-testing | 04-Feb-2025 |
| Exposing Millions of Apple Users’ ticket and other details! ( Part -1 ) | https://virtuvil.medium.com/exposing-millions-of-apple-users-ticket-and-other-details-part-1-36bf35281cd6?source=rss------bug_bounty-5 | Virtuvil | apple, mac, iphone, bug-bounty, bugs | 04-Feb-2025 |
| Hacking the Unseen: Finding Bugs Others Miss | https://medium.com/@Zebbern/hacking-the-unseen-finding-bugs-others-miss-a561efecf35d?source=rss------bug_bounty-5 | Zebbern | bug-bounty, pentesting, cybersecurity, hacking, artificial-intelligence | 04-Feb-2025 |
| How I Found 2000+ Employee Details of the Indian Government Using Just Google Dorks(And What You… | https://hiddendom.medium.com/how-i-found-2000-employee-details-of-the-indian-government-using-just-google-dorks-and-what-you-d8e07afba27e?source=rss------bug_bounty-5 | Gokuleswaran B | bug-bounty-tips, bug-bounty, bugs, google-dork, penetration-testing | 04-Feb-2025 |
| Easy Way to Find Exposed Sensitive API Keys in JS Files | https://infosecwriteups.com/easy-way-to-find-exposed-sensitive-api-keys-in-js-files-d9f9fccb18bb?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, bug-bounty, hacking, money, bug-bounty-tips | 04-Feb-2025 |
| Bug Bounty Hunting: Web Hacking Reconnaissance | https://medium.com/@muhammad4208/bug-bounty-hunting-web-hacking-reconnaissance-78ac0effbae7?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-tips, bug-bounty-hunter, bug-bounty, bug-bounty-program | 04-Feb-2025 |
| How I Earned 50000 bounty(And how you can do it too) | https://medium.com/@thedevtaskofficial/how-i-earned-50000-united-miles-and-how-you-can-793a3b47142e?source=rss------bug_bounty-5 | thedevtask official | cybersecurity, vulnerability, ethical-hacking, bug-bounty, penetration-testing | 04-Feb-2025 |
| The Rising Importance of Bug Bounty Programs in the Fight Against Cybercrime | https://medium.com/@moredevraj370/the-rising-importance-of-bug-bounty-programs-in-the-fight-against-cybercrime-266f3e03bc2a?source=rss------bug_bounty-5 | Devraj More | linux, cybersecurity-course, bug-bounty, ethical-hacking-course, ransomware | 04-Feb-2025 |
| Bug Bounty Hunting: Web Vulnerabilities | https://medium.com/@muhammad4208/bug-bounty-hunting-web-vulnerabilities-1e9b6a0d5ec3?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty, bug-bounty-hunter, bug-bounty-program, bug-bounty-tips | 04-Feb-2025 |
| Mastering Burp Suite: The Ultimate Cyber Swiss Army Knife for Bug Bounties | https://myselfakash20.medium.com/mastering-burp-suite-the-ultimate-cyber-swiss-army-knife-for-bug-bounties-df1398bb037f?source=rss------bug_bounty-5 | Akash Ghosh | technology, bug-bounty-tips, bugbounty-writeup, bug-bounty, cybersecurity | 04-Feb-2025 |
| XSS — Cross-site scripting (DOM-Based) | https://medium.com/@F4lc0n/xss-cross-site-scripting-dom-based-e7b83ab67a1e?source=rss------bug_bounty-5 | F4lc0n | hacking, pentest, dom-based-xss, bug-bounty, xss-vulnerability | 04-Feb-2025 |
| Day[2/30] Bug Bounty for Beginners Full course | https://medium.com/@hrofficial62/day-2-30-bug-bounty-for-beginners-full-course-0a8de66836c0?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, tips, ethical-hacking, pentesting, cybersecurity | 04-Feb-2025 |
| Find Details of Any Phone Number Using PhoneInfoga | https://aimasterprompt.medium.com/find-details-of-any-phone-number-using-phoneinfoga-8b200015a479?source=rss------bug_bounty-5 | aimaster | technology, investigation, cybersecurity, bug-bounty, infosec | 04-Feb-2025 |
| The Silent Breach: A Story of Leaked Token and PII | https://medium.com/@bughunt.bochi/the-silent-breach-a-story-of-leaked-token-and-pii-4576658030e3?source=rss------bug_bounty-5 | Yash Nimbalkar | security, bug-bounty, bug-bounty-writeup, information-security, cybersecurity | 04-Feb-2025 |
| Best Hackers Channels on Internet Worth Following! | https://medium.com/@doby4535/best-hackers-channels-on-internet-worth-following-a498f1caf697?source=rss------bug_bounty-5 | Dobysec | exploit, penetration-testing, bug-bounty, hacking, ethical-hacking | 04-Feb-2025 |
| Russian Hackers Exploit Zero-Day Attacks Against Ukraine | https://medium.com/@wiretor/russian-hackers-exploit-zero-day-attacks-against-ukraine-c96042b7989e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, bug-bounty, ai, hacker, russian | 04-Feb-2025 |
| Exploring a New SQLi Vulnerability: A Ghauri Experience | https://medium.com/meetcyber/exploring-a-new-sqli-vulnerability-a-ghauri-experience-541c588dc00d?source=rss------bug_bounty-5 | Erkan Kavas | sql-injection, bug-bounty, bug-bounty-tips, bug-bounty-writeup, cybersecurity | 04-Feb-2025 |
| From Rookie to Bounty: How a $400 IDOR Flaw on HackerOne Cracked Open My Cybersecurity Journey | https://medium.com/@Arsenelupin12/from-rookie-to-bounty-how-a-400-idor-flaw-on-hackerone-cracked-open-my-cybersecurity-journey-1566b8564ae4?source=rss------bug_bounty-5 | Wasted Resources | bug-bounty-tips, hacking, bug-bounty, hackthebox, cybersecurity | 04-Feb-2025 |
| From alert(origin) to ATO, an XSS Story | https://medium.com/@remmy9/from-alert-origin-to-ato-an-xss-story-d6bd2684bdca?source=rss------bug_bounty-5 | Remmy | bug-bounty, xss-attack, cybersecurity | 04-Feb-2025 |
| Live Love WAF — Skirt the firewalls or die trying | https://medium.com/@l_s_/live-love-waf-skirt-the-firewalls-or-die-trying-4120facb41c8?source=rss------bug_bounty-5 | LS | bug-bounty, hacking, javascript, bug-bounty-writeup, cybersecurity | 04-Feb-2025 |
| The Ghost Email Heist — Stealing Accounts from the Future | https://medium.com/@shxsu1/the-ghost-email-heist-stealing-accounts-from-the-future-9fce3ae1c086?source=rss------bug_bounty-5 | shxsu1 | hacking, email, brute-force, account-takeover, bug-bounty | 04-Feb-2025 |
| Understanding API Security with OpenAPI: A Security Engineer’s Perspective | https://medium.com/cyprox-io/understanding-api-security-with-openapi-a-security-engineers-perspective-b8083c457a8a?source=rss------bug_bounty-5 | Orhan YILDIRIM | bug-bounty, ai, web, cybersecurity, artificial-intelligence | 03-Feb-2025 |
| Javascript to API Bugs | https://medium.com/cyprox-io/javascript-to-api-bugs-3b5a778e51b7?source=rss------bug_bounty-5 | Orhan YILDIRIM | api, vulnerability-scanning, bug-bounty, web-application-security, bug-bounty-tips | 03-Feb-2025 |
| Google did an Oopsie: a simple IDOR worth $3,133.7 | https://infosecwriteups.com/google-did-an-oopsie-a-simple-idor-worth-3-133-7-2abefaef954d?source=rss------bug_bounty-5 | accalon | idor, hacking, bug-bounty | 03-Feb-2025 |
| Blind SSRF with Out-of-Band Detection: Step-by-Step Exploitation & Prevention — SSRF Labs | https://bashoverflow.medium.com/blind-ssrf-with-out-of-band-detection-step-by-step-exploitation-prevention-ssrf-labs-d8a4d890184d?source=rss------bug_bounty-5 | Bash Overflow | portswigger-lab, ssrf, blind-ssrf, ssrf-exploitation, bug-bounty | 03-Feb-2025 |
| Top 235 IDOR Bug Bounty Reports | https://aimasterprompt.medium.com/top-235-idor-bug-bounty-reports-e00c8061fe28?source=rss------bug_bounty-5 | aimaster | infosec, bug-bounty, vulnerability, hacking, idor | 03-Feb-2025 |
| Manually Bypassing the Client-Side Validation leading to Command Injection | https://medium.com/@markanthonyagudo/manually-bypassing-the-client-side-validation-leading-to-command-injection-b0aa6ee531e4?source=rss------bug_bounty-5 | Angelo Agudo | cybersecurity, security, hacking, bug-bounty, hackthebox | 03-Feb-2025 |
| When the Walls Aren’t as Secure as They Seem: My Instagram Discovery | https://medium.com/@nowshekhari/when-the-walls-arent-as-secure-as-they-seem-my-instagram-discovery-cf29a7f40741?source=rss------bug_bounty-5 | Abhishek Hari | meta, cybersecurity, bug-bounty, privacy, instagram | 03-Feb-2025 |
| 20 Comprehensive Browser Extensions You Can’t Miss as a Bug Bounty Hunter | https://osintteam.blog/20-comprehensive-browser-extensions-you-cant-miss-as-a-bug-bounty-hunter-e33042e59a6d?source=rss------bug_bounty-5 | Sacony Chukwu | bug-bounty-tips, penetration-testing, cybersecurity, hacking, bug-bounty | 03-Feb-2025 |
| FFUF Mastery: The Ultimate Web Fuzzing Guide | https://osintteam.blog/ffuf-mastery-the-ultimate-web-fuzzing-guide-f7755c396b92?source=rss------bug_bounty-5 | coffinxp | technology, hacking, bug-bounty, bug-bounty-tips, cybersecurity | 03-Feb-2025 |
| Finding a no-limit bug on the invite teammate page. | https://cybersecuritywriteups.com/finding-a-no-limit-bug-on-the-invite-teammate-page-c495f9f86781?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, no-rate-limit, hacking, penetration-testing | 03-Feb-2025 |
| Web Cache Poisoning: The Overlooked Attack with High Impact | https://medium.com/@HackerNasr/web-cache-poisoning-the-overlooked-attack-with-high-impact-4cede5c04f7b?source=rss------bug_bounty-5 | HackerNasr | bug-bounty, cybersecurity, penetration-testing, ethical-hacking, web-security | 03-Feb-2025 |
| 1 Click ATO on a public Bugcrowd Program | https://medium.com/@68abdelrahmanmohamed/1-click-ato-on-a-public-bugcrowd-program-94ef037d0d50?source=rss------bug_bounty-5 | Abdulrahman | bug-bounty | 03-Feb-2025 |
| Solving the Basic Pentesting CTF | TryHackMe | https://medium.com/@heshammr.robot/solving-the-basic-pentesting-ctf-tryhackme-fceb90aa1fbe?source=rss------bug_bounty-5 | 0xData Ghost | hacking, tryhackme, penetration-testing, ctf, bug-bounty | 03-Feb-2025 |
| Platforms and vulnerable web apps for practicing and learning web pen testing | https://medium.com/h7w/platforms-and-vulnerable-web-apps-for-practicing-and-learning-web-pen-testing-815a86ea5247?source=rss------bug_bounty-5 | loyalonlytoday | hacking, cybersecurity, tips, learning, bug-bounty | 03-Feb-2025 |
| Best YouTube channels to learn bug hunting and penetration testing | https://osintteam.blog/best-youtube-channels-to-learn-bug-hunting-and-penetration-testing-350b1422bbe9?source=rss------bug_bounty-5 | loyalonlytoday | ethical-hacking, cybersecurity, bug-bounty, tips, hacking | 03-Feb-2025 |
| how i found xss in lenovo asset? | https://doordiefordream.medium.com/how-i-found-xss-in-lenovo-asset-64cf5e58676a?source=rss------bug_bounty-5 | Bug hunter balu | technology, bug-bounty, cybersecurity, ethical-hacking, web3 | 03-Feb-2025 |
| Top Hacking Gadgets for 2025 | https://medium.com/@verylazytech/top-hacking-gadgets-for-2025-174c5bd4f284?source=rss------bug_bounty-5 | Very Lazy Tech | hacking-gadgets, hacking, hak5, cybersecurity, bug-bounty | 03-Feb-2025 |
| Mattermost Privilege Escalation — A Business Acceptable Risk? | https://medium.com/@duality084/mattermost-privilege-escalation-a-business-acceptable-risk-d83b91d4413e?source=rss------bug_bounty-5 | Matias Ramirez | bugbounty-writeup, bug-bounty-tips, mattermost, bug-bounty | 03-Feb-2025 |
| Get Easy $$$ from Web Parameter Tampering | https://medium.com/readers-club/get-easy-from-web-parameter-tampering-df993b0136b1?source=rss------bug_bounty-5 | Abhijeet kumawat | ai, bug-bounty, hacking, infosec, money | 03-Feb-2025 |
| ⚡Critical XSS in DeepSeek AI | https://systemweakness.com/critical-xss-in-deepseek-ai-b57090985e97?source=rss------bug_bounty-5 | It4chis3c | xss-attack, ai, hacking, bug-bounty, deepseek | 03-Feb-2025 |
| Find Primary Domains for Bug Bounty Using Censys Search: Complete Guide | https://medium.com/@hacker_might/find-primary-domains-for-bug-bounty-using-censys-search-complete-guide-a26ea5eea5c2?source=rss------bug_bounty-5 | hacker_might | bug-bounty, reconnaissance, primary-domain, recon, bug-bounty-tips | 03-Feb-2025 |
| How Loose Regex Can Earn You a Bounty for an Open Redirect Filter Bypass Bug | https://medium.com/@halfcircassian/how-bad-regex-can-earn-you-a-bounty-for-an-open-redirect-filter-bypass-bug-6845a2b83f7c?source=rss------bug_bounty-5 | Sıla Özeren | bug-bounty-writeup, regex, bug-bounty-tips, open-redirect, bug-bounty | 03-Feb-2025 |
| From Debug page to Database access | https://ro0od.medium.com/from-debug-page-to-database-access-e81ca8be1711?source=rss------bug_bounty-5 | rood | bug-bounty | 03-Feb-2025 |
| Discovering and Reporting a Reflective XSS Vulnerability | https://medium.com/@debang5hu/discovering-and-reporting-a-reflective-xss-vulnerability-8c5e14206d17?source=rss------bug_bounty-5 | debang5hu | cross-site-scripting, blackbox-ai, cybersecurity, bug-bounty | 03-Feb-2025 |
| Common Vulnerabilities Found in Bug Bounty Programs but Overlooked in Traditional Penetration… | https://medium.com/@hackrate/common-vulnerabilities-found-in-bug-bounty-programs-but-overlooked-in-traditional-penetration-10edc6a9ec1e?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, hacking, ethical-hacking, bug-bounty-tips, penetration-testing | 03-Feb-2025 |
| Secator: A Powerful Security Workflow Automation Tool | https://osintteam.blog/secator-a-powerful-security-workflow-automation-tool-41995057c731?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tips, hacking, bug-bounty, technology, penetration-testing | 03-Feb-2025 |
| Practical Guide to Finding SQL Injection (Real Case Study) | https://medium.com/@BugRey/practical-guide-to-finding-sql-injection-real-case-study-3625bdb9d8c3?source=rss------bug_bounty-5 | ./Rey~ | bug-bounty, bug-bounty-tips, web-security-testing, web-security, penetration-testing | 03-Feb-2025 |
| Find Primary Domains for Bug Bounty Using Censys Search: Complete Guide | https://osintteam.blog/find-primary-domains-for-bug-bounty-using-censys-search-complete-guide-a26ea5eea5c2?source=rss------bug_bounty-5 | hacker_might | bug-bounty, reconnaissance, primary-domain, recon, bug-bounty-tips | 03-Feb-2025 |
| Top 10 Bug Bounty Platforms to Earn Money Online | https://hackreveals.medium.com/top-10-bug-bounty-platforms-to-earn-money-online-fbea54cf7cbb?source=rss------bug_bounty-5 | Prakash Tiwari | bug-bounty, side-hustle, earn-money-online, make-money-online, bug-bounty-writeup | 02-Feb-2025 |
| Automate Vulnerability Detection in Burp Suite with bChecks | https://medium.com/mr-plan-publication/automate-vulnerability-detection-in-burp-suite-with-bchecks-667b6e58a70c?source=rss------bug_bounty-5 | Monika sharma | pentesting, bug-bounty-tips, hacking, bug-bounty, technology | 02-Feb-2025 |
| XSS on GeeksforGeeks | https://cybersecuritywriteups.com/xss-on-geeksforgeeks-2eafcbbf90b0?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, xss-attack, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 02-Feb-2025 |
| Bug Bounty Hunting: How the Internet Works | https://medium.com/@muhammad4208/bug-bounty-hunting-how-the-internet-works-ca0327bf53c5?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty, bug-bounty-program, bug-bounty-tips, bug-bounty-hunter | 02-Feb-2025 |
| Bug Bounty Hunting: Sustaining Your Success | https://medium.com/@muhammad4208/bug-bounty-hunting-sustaining-your-success-6b9e3880411b?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty, bug-bounty-tips, bug-bounty-program, bug-bounty-hunter | 02-Feb-2025 |
| Introducing CMS Detector — A Powerful CMS Detection Tool! | https://mistry4592.medium.com/introducing-cms-detector-a-powerful-cms-detection-tool-8b7a2f1dcdc4?source=rss------bug_bounty-5 | Chirag-Mistry | python3, cms-detector, penetration-testing, bug-bounty, cybersecurity | 02-Feb-2025 |
| Bug Bounty Hunting | https://medium.com/@muhammad4208/bug-bounty-hunting-ac9b732559b5?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-tips, bug-bounty, bug-bounty-hunter, bug-bounty-program | 02-Feb-2025 |
| Day[1/30] Bug Bounty for Beginners Full course | https://medium.com/@hrofficial62/day-1-30-bug-bounty-for-beginners-full-course-e88e7425c92c?source=rss------bug_bounty-5 | Mr Horbio | hacking, pentesting, cybersecurity, bug-bounty, ethical-hacking | 02-Feb-2025 |
| Hacking Routers & IoT Devices with Routersploit: A Detailed Cheat Sheet | https://medium.com/@verylazytech/hacking-routers-iot-devices-with-routersploit-a-detailed-cheat-sheet-470a54fd3621?source=rss------bug_bounty-5 | Very Lazy Tech | routersploit, penetration-testing, hacking-router, iot-security, bug-bounty | 02-Feb-2025 |
| Unveiling the Power of Shodan: A Step-by-Step Technical Guide to Internet Reconnaissance | https://medium.com/@zoningxtr/unveiling-the-power-of-shodan-a-step-by-step-technical-guide-to-internet-reconnaissance-e61212b7407f?source=rss------bug_bounty-5 | Zoningxtr | python-programming, bug-bounty, penetration-testing, web-development, iot | 02-Feb-2025 |
| 100 DAYS OF JAVASCRIPT | https://medium.com/@KC100/100-days-of-javascript-09392b1797fc?source=rss------bug_bounty-5 | Keorapetse Malgas | bug-bounty, ethical-hacking, 100daysofcode, cybersecurity, javascript | 02-Feb-2025 |
| 2 Arrested in Crackdown on Nulled and Cracked Hacking Forums | https://medium.com/@wiretor/2-arrested-in-crackdown-on-nulled-and-cracked-hacking-forums-249ed458214a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, money, cybersecurity, lafires, ai | 02-Feb-2025 |
| Apple iPhone USB-C Security Breach | https://medium.com/@wiretor/apple-iphone-usb-c-security-breach-34011863045a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, money, malware, ai, apple | 02-Feb-2025 |
| Finding Exposed Sensitive API Keys in JS Files | https://infosecwriteups.com/finding-exposed-sensitive-api-keys-in-js-files-5c129fb1f2c7?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, technology, programming, bug-bounty, bug-bounty-tips | 02-Feb-2025 |
| DeepSeek’s Vulnerabilities and Challenges: A Critical Analysis | https://medium.com/@HexaGaurd/deepseeks-vulnerabilities-and-challenges-a-critical-analysis-7b350644626d?source=rss------bug_bounty-5 | HexaGaurd | ethical-hacking, penetration-testing, security, bug-bounty, cybersecurity | 02-Feb-2025 |
| 2025: The Year to Start PTaaS | https://medium.com/@hackrate/2025-the-year-to-start-ptaas-c180f83617dd?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, cybersecurity, hacking, ethical-hacking, penetration-testing | 02-Feb-2025 |
| A $150 Bug in My Methodology! | https://medium.com/@jkooo12/a-150-bug-in-my-methodology-8a51cdac53d4?source=rss------bug_bounty-5 | jack markez | cybersecurity, hackerone, hacking, bug-bounty, writers-on-medium | 02-Feb-2025 |
| Easy Peasy RXSS | https://medium.com/@dsmodi484/easy-peasy-rxss-2f4bb1ec1d38?source=rss------bug_bounty-5 | cryptoshant | cybersecurity, bug-bounty, xss-attack, sqlmap, hacking | 01-Feb-2025 |
| Finding an easy bug to get an easy $$$ | https://osintteam.blog/finding-an-easy-bug-to-get-an-easy-14f2426ba933?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, tips, penetration-testing, cybersecurity, hacking | 01-Feb-2025 |
| Google: HTML Injection Bug | https://medium.com/@kumawatabhijeet2002/google-html-injection-bug-14a50e12bb96?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, hacking, infosec, bug-bounty-tips | 01-Feb-2025 |
| The Art of Doing Source Code Review | https://green-terminals.medium.com/the-art-of-doing-source-code-review-c98ae0e35f84?source=rss------bug_bounty-5 | Aditya Rana | cybersecurity, ai, source-code-review, programming, bug-bounty | 01-Feb-2025 |
| Dangerous Commands You Shouldn’t Execute in Linux | https://bitpanic.medium.com/dangerous-commands-you-shouldnt-execute-in-linux-fce596a45a8c?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, cybersecurity, programming, technology, bug-bounty | 01-Feb-2025 |
| How to Create Advanced Custom Wordlist? Dive into Recon Part 4 | https://systemweakness.com/how-to-create-advanced-custom-wordlist-dive-into-recon-part-4-78c2d218a35a?source=rss------bug_bounty-5 | It4chis3c | subdomain-enumeration, secrets, custom-wordlist, bug-bounty, wordlist | 01-Feb-2025 |
| How I Earned a $500 Bounty by Exploiting a Hidden Vulnerability (Without Even Trying) | https://medium.com/@thedevtaskofficial/how-i-earned-a-500-bounty-by-exploiting-a-hidden-vulnerability-without-even-trying-d22229d4d8bd?source=rss------bug_bounty-5 | thedevtask official | bug-bounty-tips, bug-bounty-writeup, bug-bounty, hacking, bugs | 01-Feb-2025 |
| Most Overlooked & Easiest Vulnerability - Part 2 | https://progprnv.medium.com/most-overlooked-easiest-vulnerability-ever-existed-550f1e2dc912?source=rss------bug_bounty-5 | progprnv | bug-bounty-writeup, bug-bounty-tips, bug-bounty, bug-bounty-program, cybersecurity | 01-Feb-2025 |
| How to hack cameras easily and quickly | https://medium.com/@CTRL2030/how-to-hack-cameras-easily-and-quickly-babde709a9b8?source=rss------bug_bounty-5 | CTRL | cybersecurity, hacking, bug-bounty, penetration-testing, iot | 01-Feb-2025 |
| WEB REQUEST — CRUD API | https://medium.com/@markanthonyagudo/web-request-crud-api-962284ea5e2b?source=rss------bug_bounty-5 | Angelo Agudo | cybersecurity, bug-bounty, penetration-tester, webrequest, web-security | 01-Feb-2025 |
| How I Earned a $500 Bounty by Exploiting a Hidden Vulnerability (Without Even Trying) | https://medium.com/@thedevtaskofficial/how-i-earned-a-500-bounty-by-exploiting-a-hidden-vulnerability-without-even-trying-d22229d4d8bd?source=rss------bug_bounty-5 | thedevtask official | bug-bounty, vulnerability, penetration-testing, ethical-hacking, cybersecurity | 01-Feb-2025 |
| Unauthorized Data Upload in Alibaba Cloud Object Storage Service | https://medium.com/@muhammadwaseem29/unauthorized-data-upload-in-alibaba-cloud-object-storage-service-cefa6abcef7f?source=rss------bug_bounty-5 | Muhammad Waseem | bug-bounty-tips, infosec, bug-bounty, cybersecurity, hacking | 01-Feb-2025 |
| Collection of Wordlists for Bug Bounty Hunters | https://aimasterprompt.medium.com/collection-of-wordlists-for-bug-bounty-hunters-a07c0dee92ff?source=rss------bug_bounty-5 | aimaster | cybersecurity, bug-bounty-tips, bug-bounty, technology, infosec | 01-Feb-2025 |
| Top Forensic Tools Every Investigator Should Know About | The Complete Guide to Essential Tools and… | https://mhmmuneef.medium.com/top-forensic-tools-every-investigator-should-know-about-the-complete-guide-to-essential-tools-and-b32081321cf9?source=rss------bug_bounty-5 | Mohammed Muneef | forensics, hacking, technology, bug-bounty, cybersecurity | 01-Feb-2025 |
| ️Nmap Command that Bug Hunters use often️ | https://medium.com/@shaheeryasirx1/%EF%B8%8Fnmap-command-that-bug-hunters-use-often-%EF%B8%8F-6bc599576641?source=rss------bug_bounty-5 | Shaheer Yasir | bug-bounty, offensive-security, hacking, cybersecurity, nmap | 01-Feb-2025 |
| Basics In Reverse Engineering (RE) | https://medium.com/@lukwagoasuman236/basics-in-reverse-engineering-re-0591c96b5c1e?source=rss------bug_bounty-5 | lukewago | malware-analysis, reverse-engineering, bug-bounty, programming-languages, cybersecurity | 01-Feb-2025 |
| Top Alternatives to Burp Collaborator: Using Interactsh for SSRF Detection and Bug Bounty Hunting | https://medium.com/@hacker_might/top-alternatives-to-burp-collaborator-using-interactsh-for-ssrf-detection-and-bug-bounty-hunting-099a1e156dfc?source=rss------bug_bounty-5 | hacker_might | reconnaissance, discovery-projects, ssrf, ssrf-detection, bug-bounty | 01-Feb-2025 |
| 1000$ Bounty: OAuth Bypass | https://cybersecuritywriteups.com/1000-bounty-oauth-bypass-97c3658729c0?source=rss------bug_bounty-5 | Abhijeet kumawat | money, hacking, bug-bounty, infosec, bug-bounty-tips | 01-Feb-2025 |
| PS 5 pin bypass | https://medium.com/@momo334678/ps-5-pin-bypass-457c41aca93b?source=rss------bug_bounty-5 | coderMohammed | programming, bug-bounty, playstation, automation, hacking | 01-Feb-2025 |
| Easy P3 Bug | LDAP Null Bind leads to extract sensitive credentials | https://medium.com/meetcyber/easy-p3-bug-ldap-null-bind-leads-to-extract-sensitive-credentials-0d06b8d58d99?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, vulnerability, bug-bounty-tips, pentesting, bug-bounty-writeup | 01-Feb-2025 |
| picoCTF Web Exploitation: IntroToBurp | https://medium.com/@Kamal_S/picoctf-web-exploitation-introtoburp-a2b50bf8e985?source=rss------bug_bounty-5 | Kamal S | owasp, bug-bounty, burpsuite, picoctf, intro-to-burp | 01-Feb-2025 |
| Mock Test Capen: How We Cracked It | https://medium.com/@aleens09/mock-test-capen-how-we-cracked-it-f735df5a6a2c?source=rss------bug_bounty-5 | Aleens | cybersecurity, capture-the-flag, bug-bounty, hacking, ctf-writeup | 01-Feb-2025 |
| Connect Burp suite to your Browser. | https://medium.com/@aravindhyox/connect-burp-suite-to-your-browser-f819fada96a5?source=rss------bug_bounty-5 | Aravindh Yox | burpsuite, bug-bounty, browsers, hacking | 01-Feb-2025 |
| My Bug Hunting Methodology Approach to Finding Bugs Easily | https://medium.com/@mahdisalhi0500/my-bug-hunting-methodology-approach-to-finding-bugs-easily-30082f35b455?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | bug-bounty-tips, hacking, bug-bounty, information-security, penetration-testing | 01-Feb-2025 |
| Understanding MITRE ATT&CK Groups: A Technical Analysis | https://medium.com/@paritoshblogs/understanding-mitre-att-ck-groups-a-technical-analysis-e35773a46cd5?source=rss------bug_bounty-5 | Paritosh | hacking, cybersecurity, information-technology, mitre-attack, bug-bounty | 01-Feb-2025 |
| Texas Governor Orders Ban on DeepSeek, RedNote for Government Devices | https://medium.com/@wiretor/texas-governor-orders-ban-on-deepseek-rednote-for-government-devices-45faa723107e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, ai, deepseek, bug-bounty | 01-Feb-2025 |
| Hackers Exploit Gemini AI to Enhance Cyberattacks | https://medium.com/@wiretor/hackers-exploit-gemini-ai-to-enhance-cyberattacks-45f360de9de5?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, ai, bug-bounty, google, hacking | 01-Feb-2025 |
| Top Alternatives to Burp Collaborator: Using Interactsh for SSRF Detection and Bug Bounty Hunting | https://osintteam.blog/top-alternatives-to-burp-collaborator-using-interactsh-for-ssrf-detection-and-bug-bounty-hunting-099a1e156dfc?source=rss------bug_bounty-5 | hacker_might | reconnaissance, discovery-projects, ssrf, ssrf-detection, bug-bounty | 01-Feb-2025 |
| $150 Bug Bounty No Rate Limit 🙂 | https://cyberritzzz.medium.com/150-bug-bounty-no-rate-limit-b77cc6fa7708?source=rss------bug_bounty-5 | Cyb3rR1tzzz | cybersecurity, bug-bounty, hackerone | 01-Feb-2025 |
| AI & Digital Tools for Neurodiverse Bug Bounty Hunters — A Beginner’s Guide | https://medium.com/@neurodiversehackers/ai-digital-tools-for-neurodiverse-bug-bounty-hunters-a-beginners-guide-b1d24fdc7bbb?source=rss------bug_bounty-5 | NeurodiverseHackers | cybersecurity, cyber-security-awareness, organization, neurodiversity, bug-bounty | 01-Feb-2025 |
| OoHow to get a Job in the Cybersecurity field [With my experience] | https://medium.com/@hrofficial62/oohow-to-get-a-job-in-the-cybersecurity-field-with-my-experience-84b34ad95641?source=rss------bug_bounty-5 | Mr Horbio | pentesting, bug-bounty, bugbounty-writeup, ethical-hacking, cybersecurity | 31-Jan-2025 |
| How I used shodan to discover 3 easy bugs on VDP program? | https://medium.com/@hamdiyasin135/how-i-used-shodan-to-discover-3-easy-bugs-on-vdp-program-1ddd8b291320?source=rss------bug_bounty-5 | yassin hamdi | hacking, hacker, recon, information-security, bug-bounty | 31-Jan-2025 |
| Fuzzuli: A Powerful Content Discovery Tool for Bug Bounty Hunters | https://medium.com/@commanak46/fuzzuli-a-powerful-content-discovery-tool-for-bug-bounty-hunters-f33b67dd4410?source=rss------bug_bounty-5 | Monika sharma | bug-bounty-tool, technology, bug-bounty-tips, bug-bounty, pentesting | 31-Jan-2025 |
| Secret Dork Hunting Methodology (Part1) | https://systemweakness.com/secret-dork-hunting-methodology-part1-6f06b5c47931?source=rss------bug_bounty-5 | AbhirupKonwar | penetration-testing, pentesting, bug-bounty, ethical-hacking, bug-bounty-tips | 31-Jan-2025 |
| AI Security: Challenges and Practical Solutions | https://medium.com/@paritoshblogs/ai-security-challenges-and-practical-solutions-8a78a348fe1d?source=rss------bug_bounty-5 | Paritosh | security, hacking, bug-bounty, ai, cybersecurity | 31-Jan-2025 |
| Zero Trust Security: Why It’s the Future of Cyber Protection in 2025 | https://medium.com/@adibostoninstitute123/zero-trust-security-why-its-the-future-of-cyber-protection-in-2025-86b5f0e42fa4?source=rss------bug_bounty-5 | Aditya Tripathi | ethical-hacking, bug-bounty, cybersecurity, cybersecurity-course, security | 31-Jan-2025 |
| Finding an Easy Bug | https://cybersecuritywriteups.com/finding-an-easy-bug-a326dca448ed?source=rss------bug_bounty-5 | loyalonlytoday | tips, cybersecurity, bug-bounty, hacking, bugs | 31-Jan-2025 |
| Start Web3 Bug Bounty and earn upto $1M | https://medium.com/@anandrishav2228/start-web3-bug-bounty-and-earn-upto-1m-e212f9468b88?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, web3, money, cybersecurity, hacking | 31-Jan-2025 |
| XSS + ARP Poisoning results in full account takeover | https://medium.com/@amir_kazi3/xss-arp-poisoning-results-in-full-account-takeover-f3f2be2ff843?source=rss------bug_bounty-5 | Amirali Kazerooni | cybersecurity, xss-attack, pentesting, networking, bug-bounty | 31-Jan-2025 |
| How I Found Dom-XSS on My Collage Website !!! | https://medium.com/@jainilborisagar123/how-i-found-dom-xss-on-my-collage-website-572453ed1227?source=rss------bug_bounty-5 | Jainil Borisagar | bug-bounty, college, xss-attack, cybersecurity, xss-vulnerability | 31-Jan-2025 |
| Dorks For Sensitive Information Disclosure | https://medium.com/@devanshpatel930/dorks-for-sensitive-information-disclosure-31fb90ad6f21?source=rss------bug_bounty-5 | Devanshpatel | bug-bounty, information-disclosure, bug-bounty-tips, bug-bounty-writeup, cybersecurity | 31-Jan-2025 |
| Admin Panel Exploit Leaks 1 Million User Records on Logitech | https://medium.com/@zerodaystories/admin-panel-exploit-leaks-1-million-user-records-on-logitech-3c0b20189d30?source=rss------bug_bounty-5 | 0day stories | bug-bounty-tips, penetration-testing, bug-bounty, cybersecurity, bug-bounty-writeup | 31-Jan-2025 |
| SaaS platform for Subdomain Enumeration Tool for Bug Hunters and Pentesters | https://aimasterprompt.medium.com/saas-platform-for-subdomain-enumeration-tool-for-bug-hunters-and-pentesters-cf20d4b8ff18?source=rss------bug_bounty-5 | aimaster | technology, bug-bounty-writeup, saas, cybersecurity, bug-bounty | 31-Jan-2025 |
| Admin Panel Exploit Leaks 1 Million User Records on Logitech | https://osintteam.blog/admin-panel-exploit-leaks-1-million-user-records-on-logitech-3c0b20189d30?source=rss------bug_bounty-5 | 0day stories | bug-bounty-tips, penetration-testing, bug-bounty, cybersecurity, bug-bounty-writeup | 31-Jan-2025 |
| Web Cache Deception Attack: How Hackers Trick Your Cache | https://medium.com/@nikith_g_karkera/web-cache-deception-attack-how-hackers-trick-your-cache-e71fd64b5e23?source=rss------bug_bounty-5 | zer0_bugs | pentesting, hacking, web-cache-deception, ethical-hacking, bug-bounty | 31-Jan-2025 |
| Title:The Silent Takeover: How a Tiny Oversight Led to a Major Security Risk | https://medium.com/@thedevtaskofficial/title-the-silent-takeover-how-a-tiny-oversight-led-to-a-major-security-risk-1d051030d6e8?source=rss------bug_bounty-5 | thedevtask official | hacking, hacker, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 31-Jan-2025 |
| Account Takeover via Cookie Attribute Manipulation — A Unique Method | https://medium.com/@pauldipesh29/account-takeover-via-cookie-attribute-manipulation-a-unique-method-ea66a78cdb06?source=rss------bug_bounty-5 | Dipesh Paul | owasp, hacking, ethical-hacking, bug-bounty, penetration-testing | 31-Jan-2025 |
| Globe Life Data Breach May Impact an Additional 850,000 Clients | https://medium.com/@wiretor/globe-life-data-breach-may-impact-an-additional-850-000-clients-822a0d4084c1?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, bug-bounty, globe, trump, money | 31-Jan-2025 |
| Mizuno USA Data Breach: Hackers Had Access for Two Months | https://medium.com/@wiretor/mizuno-usa-data-breach-hackers-had-access-for-two-months-ed0ae492ada5?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | mizuno, bug-bounty, money, ai, trump | 31-Jan-2025 |
| Google Blocks 2.36 Million Risky Android Apps from Play Store in 2024 | https://medium.com/@wiretor/google-blocks-2-36-million-risky-android-apps-from-play-store-in-2024-8ae68808d046?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, bug-bounty, trump, google, money | 31-Jan-2025 |
| $100 Easy Bounty p4 bug 🙂 | https://cyberritzzz.medium.com/100-easy-bounty-p4-bug-083943865238?source=rss------bug_bounty-5 | Cyb3rR1tzzz | writers-on-medium, hacking, bug-bounty, bugs, hackerone | 31-Jan-2025 |
| Bug Bounty Recon Guide — Part: 1 | https://aimasterprompt.medium.com/bug-bounty-recon-guide-part-1-0927e7df82ef?source=rss------bug_bounty-5 | aimaster | cybersecurity, bug-bounty, bug-bounty-tips, infosec, technology | 30-Jan-2025 |
| From the Dark Web to Ethical Hacking: The Journey of Monsif Hmouri in Cybersecurity | https://monsifhmouri.medium.com/from-the-dark-web-to-ethical-hacking-the-journey-of-monsif-hmouri-in-cybersecurity-db0f5056b044?source=rss------bug_bounty-5 | MONSIF HMOURI | anonymous, hacker, ethical-hacking, hacking, bug-bounty | 30-Jan-2025 |
| Web Cache Deception: Understanding and Mitigating Security Risks | https://0xkratos.medium.com/web-cache-deception-understanding-and-mitigating-security-risks-c35b79963a49?source=rss------bug_bounty-5 | Amal PK | web-security, bug-bounty, cybersecuirty, hacking, technology | 30-Jan-2025 |
| ️♂️ Mastering Recon in Bug Bounty: Tools, Techniques, and a Step-by-Step Guide | https://medium.com/@zoningxtr/%EF%B8%8F-%EF%B8%8F-mastering-recon-in-bug-bounty-tools-techniques-and-a-step-by-step-guide-d27345269a5e?source=rss------bug_bounty-5 | Zoningxtr | cybersecurity, penetration-testing, web3, api, bug-bounty | 30-Jan-2025 |
| AppSec Logic Master on OpenBugBounty | https://medium.com/mr-plan-publication/appsec-logic-master-on-openbugbounty-5fe67f4cd07a?source=rss------bug_bounty-5 | AbhirupKonwar | technology, pentesting, cybersecurity, bug-bounty, ethical-hacking | 30-Jan-2025 |
| Earnings in 2025 | https://medium.com/@workwithsane/earnings-in-2025-1f7f344cd07d?source=rss------bug_bounty-5 | Sane | earning-money-online, making-money, earning-money, bug-bounty, earnings | 30-Jan-2025 |
| Most Overlooked & Easiest P4 Vulnerability | https://progprnv.medium.com/most-overlooked-easiest-p4-vulnerability-d3a89cb10497?source=rss------bug_bounty-5 | progprnv | bug-bounty-writeup, hacking, bug-bounty-tips, cybersecurity, bug-bounty | 30-Jan-2025 |
| Ridiculously Wrong Time to Get Into Bug Bounty | https://medium.com/@thedevtaskofficial/ridiculously-wrong-time-to-get-into-bug-bounty-364e066d6017?source=rss------bug_bounty-5 | thedevtask | hacking, bugcrowd, cybersecurity, hackerone, bug-bounty | 30-Jan-2025 |
| Campaign: Report a Bug & Earn GUIDE Tokens | https://bmy-guide.medium.com/campaign-report-a-bug-earn-guide-tokens-0b1d6b5613a2?source=rss------bug_bounty-5 | bmy.guide | rewards, bmy-guide, bug-bounty, report, crypto | 30-Jan-2025 |
| Ultimate Nuclei Templates: Private Collection for Quick Bounties | https://medium.com/meetcyber/my-private-nuclei-template-collection-for-easy-bounties-ba704073d065?source=rss------bug_bounty-5 | coffinxp | bug-bounty, technology, bug-bounty-tips, hacking, cybersecurity | 30-Jan-2025 |
| 3 Must-Read Bug Bounty Books to Level Up Your Skills! | https://medium.com/@kumawatabhijeet2002/3-must-read-bug-bounty-books-to-level-up-your-skills-2a1c3bc2b72f?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-tips, money, bug-bounty, hacking, books | 30-Jan-2025 |
| How I Hacked the Dutch Government and Got a Lousy T-Shirt | https://medium.com/@cyberhrsh/how-i-hacked-the-dutch-government-and-got-a-lousy-t-shirt-bb0f5716bbe1?source=rss------bug_bounty-5 | Harsh kothari | dutch, swag, hacking, dutch-government, bug-bounty | 30-Jan-2025 |
| Exploring the World of Offensive Linux Security: A Deep Dive into Cyber Warfare Tools | https://medium.com/@thecyberghost/exploring-the-world-of-offensive-linux-security-a-deep-dive-into-cyber-warfare-tools-35785e82a36d?source=rss------bug_bounty-5 | The Cyber Ghost | offensive-security, cybersecurity, bug-bounty, cyber-security-awareness | 30-Jan-2025 |
| Advanced GitHub Dorking: More Secrets, More Automation, More Bounties! | https://myselfakash20.medium.com/advanced-github-dorking-more-secrets-more-automation-more-bounties-f39dd553b1c2?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, bug-bounty, technology, bugbounty-writeup, bug-bounty-tips | 30-Jan-2025 |
| # API Penetration Testing: Basics and Roadmap for Aspiring Security Professionals | https://medium.com/@hack8655793/api-penetration-testing-basics-and-roadmap-for-aspiring-security-professionals-4b957e6f85ac?source=rss------bug_bounty-5 | CrackBugbounthunter | testing-tools, bug-bounty, api-pentesting | 30-Jan-2025 |
| New Syncjacking Attack Hijacks Devices Using Chrome Extensions | https://medium.com/@wiretor/new-syncjacking-attack-hijacks-devices-using-chrome-extensions-8d3afc416e3d?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, bug-bounty, money, ai | 30-Jan-2025 |
| Ransomware Attack Disrupts New York Blood Donation Giant | https://medium.com/@wiretor/ransomware-attack-disrupts-new-york-blood-donation-giant-a0f51c787fc6?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, trump, blood, bug-bounty, ai | 30-Jan-2025 |
| Police Seizes Cracked and Nulled Hacking Forum Servers, Arrests Suspects | https://medium.com/@wiretor/police-seizes-cracked-and-nulled-hacking-forum-servers-arrests-suspects-6f837dfec1b0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | police, ai, money, servers, bug-bounty | 30-Jan-2025 |
| How I Bagged $300 for a Sneaky yet Simple Bug | https://medium.com/@thedevtaskofficial/how-i-bagged-300-for-a-sneaky-yet-simple-bug-f21a8a02b6e1?source=rss------bug_bounty-5 | thedevtask | money, hacking, bounty-program, money-making-ideas, bug-bounty | 30-Jan-2025 |
| If Pentest-as-a-Service Is So Effective, Why Don’t Most Companies Adopt It? | https://medium.com/@hackrate/if-pentest-as-a-service-is-so-effective-why-dont-most-companies-adopt-it-8b5c66ce679c?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, cybersecurity, hacking, penetration-testing, bug-bounty | 30-Jan-2025 |
| How I Earned $200 Using GitHub Dorking P=2:Advanced GitHub Dorking: More Secrets, More Automation… | https://myselfakash20.medium.com/advanced-github-dorking-more-secrets-more-automation-more-bounties-f39dd553b1c2?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, bug-bounty, technology, bugbounty-writeup, bug-bounty-tips | 30-Jan-2025 |
| Bug Bounty Hunt : Playbook | https://santhosh-adiga-u.medium.com/bug-bounty-hunt-playbook-418866d82e84?source=rss------bug_bounty-5 | Santhosh Adiga U | hacking-tools, owasp-top-10, ethical-hacking, penetration-testing, bug-bounty | 30-Jan-2025 |
| Google Dorking for Bug Bounty Hunters: Beginner’s Edition | https://medium.com/@ajudeb55/google-dorking-for-bug-bounty-hunters-beginners-edition-969ecf7ccd63?source=rss------bug_bounty-5 | Aju Deb | hacking, technology, google, bug-bounty, programming | 30-Jan-2025 |
| Bug Hunting Recon: Finding acquisitions of target | https://medium.com/@ethicalhackerhuzaifa/bug-hunting-recon-finding-acquisitions-of-target-de4ec6a252a9?source=rss------bug_bounty-5 | Huzaifa Shaikh | recon, penetration-testing, bug-bounty-writeup, hacking, bug-bounty | 30-Jan-2025 |
| Step-by-Step Guide to Solving HTB’s XSS Module: Section-by-Section Flag Solutions | https://medium.com/@Arsenelupin12/step-by-step-guide-to-solving-htbs-xss-module-section-by-section-flag-solutions-bc07e0cb9928?source=rss------bug_bounty-5 | Wasted Resources | hacking, bug-bounty, cybersecurity, xss-attack, htb | 30-Jan-2025 |
| Sensitive Information Disclosure in 5 minutes | https://medium.com/@mhaziqulkhair/sensitive-information-disclosure-in-5-minutes-0de7ce868069?source=rss------bug_bounty-5 | Muhammad Haziqul Khair | sensitive-data-exposure, web-pentesting, reconnaissance, cybersecurity, bug-bounty | 29-Jan-2025 |
| Start Bug Bounty and earn $$$: Top Write-Ups, POCs & Tutorials | https://cybersecuritywriteups.com/start-bug-bounty-and-earn-top-write-ups-pocs-tutorials-739b8a8456ab?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, infosec, bounty-program, money, bug-bounty | 29-Jan-2025 |
| Discovering a Critical Vulnerability in Deepseek’s Password Reset Functionality leads to Zero Click… | https://medium.com/@teamtea.ye/discovering-a-critical-vulnerability-in-deepseeks-password-reset-functionality-leads-to-zero-click-96c597fe852c?source=rss------bug_bounty-5 | Teamtea | penetration-testing, account-takeover, deepseek-v3, deepseek, bug-bounty | 29-Jan-2025 |
| Uncovering SQL Injection Vulnerabilities through JavaScript File Analysis | https://medium.com/@muhammad-/uncovering-sql-injection-vulnerabilities-through-javascript-file-analysis-d07e430ef862?source=rss------bug_bounty-5 | Mohammad | reconnaissance, security, sql-injection, bug-bounty, web-hacking | 29-Jan-2025 |
| A case study of vulnerabilities in US government systems | https://research.ifcr.dk/a-case-study-of-vulnerabilities-in-us-government-systems-a82e9afbf6c2?source=rss------bug_bounty-5 | Martin Thirup Christensen | bug-bounty | 29-Jan-2025 |
| Uncovering Deepseek AI’s Hidden Flaw: A Dive Into Its Response Filtering System | https://1-day.medium.com/uncovering-deepseek-ais-hidden-flaw-a-dive-into-its-response-filtering-system-96203b727192?source=rss------bug_bounty-5 | 1day | ai, deepseek, bug-bounty, deepseek-ai, deepseek-v3 | 29-Jan-2025 |
| 2025: The Year to Start a Bug Bounty Program | https://medium.com/@hackrate/2025-the-year-to-start-a-bug-bounty-program-6fa1b96f2013?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips, hacking | 29-Jan-2025 |
| Top 8 Bug Bounty Books for 2025: Must-Reads for Ethical Hackers | https://medium.com/@verylazytech/top-8-bug-bounty-books-for-2025-must-reads-for-ethical-hackers-9c73d457c0f9?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, exploit, ethical-hacking, bug-bounty, hacking | 29-Jan-2025 |
| How to Find More Subdomains for Bug Bounties? Dive into Recon part 3 | https://it4chis3c.medium.com/how-to-find-more-subdomains-for-bug-bounties-dive-into-recon-part-3-c9825eac2d68?source=rss------bug_bounty-5 | It4chis3c | subdomain, subdomains-enumeration, assets, bug-bounty-tips, bug-bounty | 29-Jan-2025 |
| Hackers exploiting flaws in SimpleHelp RMM to breach networks | https://medium.com/@wiretor/hackers-exploiting-flaws-in-simplehelp-rmm-to-breach-networks-d923ec39b353?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, hacking, bug-bounty, malware, hacker | 29-Jan-2025 |
| Garmin GPS Watches Crash and Enter Reboot Loop, Users Frustrated | https://medium.com/@wiretor/garmin-gps-watches-crash-and-enter-reboot-loop-users-frustrated-d1b60092a1bb?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, ai, hacker, garmin, bug-bounty | 29-Jan-2025 |
| Incident Response & Forensics: Log Analysis, Timeline Creation, and Root Cause Analysis | https://medium.com/@paritoshblogs/incident-response-forensics-log-analysis-timeline-creation-and-root-cause-analysis-95085ab1fc49?source=rss------bug_bounty-5 | Paritosh | incident-response, cybersecurity, hacking, bug-bounty, forensics | 29-Jan-2025 |
| The $500 Vulnerability: How Censys Search Led Me to a Quick Bug Bounty | https://medium.com/@hacker_might/the-500-vulnerability-how-censys-search-led-me-to-a-quick-bug-bounty-afabeec7a176?source=rss------bug_bounty-5 | hacker_might | bug-bounty, reconnaissance, censys, recon, bounty-program | 29-Jan-2025 |
| Easiest $225 Ever: A Simple SQL Injection Win! | https://medium.com/@whoadnan01/easiest-225-ever-a-simple-sql-injection-win-f40c0a6b8e45?source=rss------bug_bounty-5 | WhoAdnan | security, bug-bounty-tips, bug-hunting, bug-bounty-writeup, bug-bounty | 29-Jan-2025 |
| Race Condition Attacks: Exploiting Tiny Gaps in Business Logic | https://medium.com/@HackerNasr/race-condition-attacks-exploiting-tiny-gaps-in-business-logic-c2589b9ac2e7?source=rss------bug_bounty-5 | HackerNasr | infosec, ethical-hacking, penetration-testing, bug-bounty, cybersecurity | 29-Jan-2025 |
| How to Find More Subdomains for Bug Bounties? Dive into Recon part 3 | https://systemweakness.com/how-to-find-more-subdomains-for-bug-bounties-dive-into-recon-part-3-c9825eac2d68?source=rss------bug_bounty-5 | It4chis3c | subdomain, subdomains-enumeration, assets, bug-bounty-tips, bug-bounty | 29-Jan-2025 |
| Start your CTF journey now.(101) | https://medium.com/@anandrishav2228/start-your-ctf-journey-now-101-fa68ed995bca?source=rss------bug_bounty-5 | Rishav anand | ctf, hacking, bug-bounty, money, cybersecurity | 28-Jan-2025 |
| My Journey to Finding a Bug and Earning an Appreciation Letter | https://medium.com/@sachinkewat809/my-journey-to-finding-a-bug-and-earning-an-appreciation-letter-88cac7109e0e?source=rss------bug_bounty-5 | Sachin kewat | cybersecurity, hacking, oscp, vulnerability, bug-bounty | 28-Jan-2025 |
| Rank Top 66 + 214 Rep on HackerOne | https://medium.com/meetcyber/rank-top-66-214-rep-on-hackerone-c260d244ae61?source=rss------bug_bounty-5 | AbhirupKonwar | cybersecurity, bug-bounty, hackerone, penetration-testing, ethical-hacking | 28-Jan-2025 |
| Feeding Nuclei! | https://clarkvoss.medium.com/feeding-nuclei-06192a30de1c?source=rss------bug_bounty-5 | Clark Voss | bug-bounty, hacking-tools, hacking, security, cybersecurity | 28-Jan-2025 |
| Opengrep : A Hype and Marketing Gimmick, let’s rename it to Privategrep. | https://rohitcoder.medium.com/opengrep-a-hype-and-marketing-gimmick-lets-rename-it-to-privategrep-61225dbf9090?source=rss------bug_bounty-5 | Rohit kumar | infosec, bug-bounty, hacking, semgrep, cybersecurity | 28-Jan-2025 |
| 20 Comprehensive Browser Extensions You Can’t Miss as a Bug Bounty Hunter | https://cybersecuritywriteups.com/20-comprehensive-browser-extensions-you-cant-miss-as-a-bug-bounty-hunter-e85b7d7c4234?source=rss------bug_bounty-5 | Sacony Chukwu | bug-bounty-tips, penetration-testing, hacking, bug-bounty, cybersecurity | 28-Jan-2025 |
| ️♂️Ultimate Guide to Finding Bugs in APIs: From Recon to Bounty | https://medium.com/@zoningxtr/ultimate-guide-to-finding-bugs-in-apis-from-recon-to-bounty-f0cc3487780b?source=rss------bug_bounty-5 | Zoningxtr | api, bug-bounty, bug-bounty-tips, cybersecurity, bug-bounty-writeup | 28-Jan-2025 |
| Secondary Context Leads To Company Takeover. | https://medium.com/@Berserker1337/secondary-context-leads-to-company-takeover-0dc88ca751ea?source=rss------bug_bounty-5 | Berserker | cybersecurity, web-security, vulnerability, infosec, bug-bounty | 28-Jan-2025 |
| Introduction to WhiteBox Testing | https://medium.com/@huyvo2910/introduction-to-whitebox-testing-ae4316269915?source=rss------bug_bounty-5 | Huy Vo | white-box-testing, bug-bounty, web-application-security, cybersecurity, penetration-testing | 28-Jan-2025 |
| Web Proxyler ve Burp Suite | https://medium.com/@onalahmet2631/web-proxyler-ve-burp-suite-c2fffb373da5?source=rss------bug_bounty-5 | Ahmet Önal | penetration-testing, pentesting, red-team, cybersecurity, bug-bounty | 28-Jan-2025 |
| How to Exploit Reflected XSS and Bypass Cloudflare Using Waybackurls — A Bug Hunter’s Guide | https://hackersatty.medium.com/how-to-exploit-reflected-xss-and-bypass-cloudflare-using-waybackurls-a-bug-hunters-guide-3aef1ffb80ee?source=rss------bug_bounty-5 | hackersatty | bug-bounty, bug-bounty-writeup, xss-attack, bypass-cloudflare, penetration-testing | 28-Jan-2025 |
| Why Companies Are Hesitant About Bug Bounty Programs | https://medium.com/@hackrate/why-companies-are-hesitant-about-bug-bounty-programs-a5dcdea30f5c?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty-tips, hacking, cybersecurity, bug-bounty, ethical-hacking | 28-Jan-2025 |
| How I Found a Ticket Booking Bug That Allowed Me to Travel Almost for Free in TNSTC | https://infosecwriteups.com/how-i-found-a-ticket-booking-bug-that-allowed-me-to-travel-almost-for-free-in-tnstc-2c7aa23aebf6?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup, infosec | 28-Jan-2025 |
| CRLF Injection: A Critical Web Application Vulnerability | https://0xkratos.medium.com/understanding-crlf-injection-and-its-exploitation-b8271d14452a?source=rss------bug_bounty-5 | Amal PK | cybersecurity, vulnerability, injection, bug-bounty, web | 28-Jan-2025 |
| FEW DATA BREACHES AND LEAK’S SEARCH ENGINES. | https://medium.com/secure-g-o-a-t/few-data-breaches-and-leaks-search-engines-62e82e2ae682?source=rss------bug_bounty-5 | loyalonlytoday | hacking, penetration-testing, leaked, bug-bounty, cybersecurity | 28-Jan-2025 |
| XSS and CSRF ki Jodi | https://medium.com/@ajay.kumar.695632/xss-and-csrf-ki-jodi-800c3b940ddb?source=rss------bug_bounty-5 | Ajay Kumar | penetration-testing, bug-bounty-writeup, xss-attack, bug-bounty, bug-bounty-tips | 28-Jan-2025 |
| How to Find First Bug (For Beginners) | https://medium.com/@hrofficial62/how-to-find-first-bug-for-beginners-de5d82302f25?source=rss------bug_bounty-5 | Mr Horbio | cybersecurity, penetration-testing, bug-bounty, hacking | 28-Jan-2025 |
| How I Earned $200 Using GitHub Dorking: A Manual and Automated Guide to Finding Sensitive… | https://myselfakash20.medium.com/how-i-earned-200-using-github-dorking-a-manual-and-automated-guide-to-finding-sensitive-ebbbfcad7296?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, bug-bounty, technology, cybersecurity, bug-bounty-writeup | 28-Jan-2025 |
| Insecure Data Transport: The Hidden Danger of Downloads Without Integrity Checks | https://medium.com/@HackerNasr/insecure-data-transport-the-hidden-danger-of-downloads-without-integrity-checks-e190883d3f14?source=rss------bug_bounty-5 | HackerNasr | bug-bounty, cybersecurity, data-analysis, penetration-testing, ethical-hacking | 28-Jan-2025 |
| The Biggest Mistake in My Bug Bounty Journey and How I Fixed It | https://medium.com/@mahdisalhi0500/the-biggest-mistake-in-my-bug-bounty-journey-and-how-i-fixed-it-576e2d43ea2f?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | penetration-testing, learning, infosec, information-security, bug-bounty | 28-Jan-2025 |
| SubFinder: Automating Subdomain Enumeration for Bug Bounty in 2025 | https://medium.com/@halfcircassian/subfinder-automating-subdomain-enumeration-for-bug-bounty-in-2025-2fc17e385e4f?source=rss------bug_bounty-5 | Sıla Özeren | subfinder, bug-bounty, bug-bounty-tips, bugbounty-writeup, subdomains-enumeration | 28-Jan-2025 |
| What is a Supply Chain Attack? | https://medium.com/@stish834/what-is-a-supply-chain-attack-84f485e371bf?source=rss------bug_bounty-5 | stish834 | computer-science, bug-bounty-tips, bug-bounty-writeup, bug-bounty, vulnerability | 28-Jan-2025 |
| 5 Things You Should Understand Before Jumping into Bug Bounty | https://bitpanic.medium.com/5-things-you-should-understand-before-jumping-into-bug-bounty-813cd960c6bc?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, technology, programming, bug-bounty, bug-bounty-tips | 28-Jan-2025 |
| EU Sanctions Russian GRU Hackers for Cyberattacks Against Estonia | https://medium.com/@wiretor/eu-sanctions-russian-gru-hackers-for-cyberattacks-against-estonia-ac7fcd59f84b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, hacker, bug-bounty, trump, money | 28-Jan-2025 |
| How do I find my first CVE ? | https://medium.com/@AhmadSopyan/how-do-i-find-my-first-cve-e368a89c93c5?source=rss------bug_bounty-5 | Ahmad Sopyan | cve, cybersecurity, bug-bounty, worpdress, hacking | 28-Jan-2025 |
| Working SSRF Methodology For ME! | https://medium.com/@sharathi72/working-ssrf-methodology-for-me-4763ae34b7db?source=rss------bug_bounty-5 | sharathi72 | bug-bounty-tips, bug-bounty, cybersecurity, methodology, bugbounty-writeup | 28-Jan-2025 |
| Don’t know how to find Bounty Earning Assets? Let’s Dive Deep into Recon part 2 | https://it4chis3c.medium.com/dont-know-how-to-find-bounty-earning-assets-let-s-dive-deep-into-recon-part-2-7c85fdd5b6b7?source=rss------bug_bounty-5 | It4chis3c | dmarc-record, bug-bounty-tips, dns, bug-bounty, bug-bounty-writeup | 28-Jan-2025 |
| A Security Gap (PII) in a Bus Company | https://medium.com/meetcyber/a-security-gap-pii-in-a-bus-company-ecfe972875ff?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty-tips, pii, bug-bounty-writeup, cybersecurity, bug-bounty | 28-Jan-2025 |
| .DS_Store File: A Gift for Researchers and a Headache for Website Owners | https://infosecwriteups.com/ds-store-file-a-gift-for-researchers-and-a-headache-for-website-owners-219724b99043?source=rss------bug_bounty-5 | Jionin | bug-bounty, tools, information-security, mac | 28-Jan-2025 |
| Pimcore 11.4.2-SQL Injection (CVE-2024–11956) | https://medium.com/@maeitsec/pimcore-11-4-2-sql-injection-cve-2024-11956-869c7d5812d8?source=rss------bug_bounty-5 | Maeitsec | bug-bounty, security | 28-Jan-2025 |
| Pimcore 11.4.2-Stored XSS (CVE-2024–11954) | https://medium.com/@maeitsec/pimcore-11-4-2-stored-xss-cve-2024-11954-fc262469e5b4?source=rss------bug_bounty-5 | Maeitsec | poc, bug-bounty, security | 28-Jan-2025 |
| Practical amass — How I configure and use amass in my recon flow | https://medium.com/@samhilliard/practical-amass-how-i-configure-and-use-amass-in-my-recon-flow-94b8814b9025?source=rss------bug_bounty-5 | Sam Hilliard | bug-bounty-tips, recon, web, bug-bounty | 27-Jan-2025 |
| IDOR Leads to Deletion of Organization Owner | https://medium.com/@saurabhcsec/idor-leads-to-deletion-of-organization-owner-0f0deb6a71aa?source=rss------bug_bounty-5 | Saurabhcsec | bug-bounty-writeup, bug-bounty-tips, cybersecurity, bug-bounty | 27-Jan-2025 |
| Finding an easy p4 it can be worth 200$ | https://medium.com/infosecmatrix/finding-a-easy-p4-it-can-be-worth-200-ddd90ffe08d8?source=rss------bug_bounty-5 | loyalonlytoday | hacking, 4ps, ethical-hacking, bug-bounty, cybersecurity | 27-Jan-2025 |
| Mastering Bug Management (Part 1) | https://medium.com/@vadoliya.nikhil99/mastering-bug-management-part-1-f951e1cf46d0?source=rss------bug_bounty-5 | Nikhil Vadoliya | leadership, product-management, technology, bug-bounty, programming | 27-Jan-2025 |
| Bypassing Web Application Firewalls with Shell Globbing | https://0xkratos.medium.com/bypassing-web-application-firewalls-with-shell-globbing-8af82ff0cc8a?source=rss------bug_bounty-5 | Amal PK | linux, cybersecurity, bug-bounty, bash, waf | 27-Jan-2025 |
| Duplicate Accounts Using the Same Email [BUG]: A Business Logic Vulnerability | https://medium.com/@osamamohamed21212121/duplicate-accounts-using-the-same-email-bug-a-business-logic-vulnerability-d1852a589c79?source=rss------bug_bounty-5 | Osamamohamed (db3wy) | bug-bounty-tips, bugs, bug-bounty, cybersecurity, bug-bounty-writeup | 27-Jan-2025 |
| how i got $$$$ from old public bug bounty program | https://medium.com/@ibrahimsyamgame/how-i-got-from-old-public-bug-bounty-program-aee4af074bbd?source=rss------bug_bounty-5 | Ibrahimsyamgame | bug-bounty, bug-bounty-tips, bug-bounty-writeup | 27-Jan-2025 |
| Exploring the Top 10 Free OSINT Tools for 2025 | https://medium.com/@verylazytech/exploring-the-top-10-free-osint-tools-for-2025-5f23d0e4e49a?source=rss------bug_bounty-5 | Very Lazy Tech | recon, hacking, cybersecurity, bug-bounty, osint | 27-Jan-2025 |
| Admin Panel Login Bypass Programs HackerOne $3000 | https://medium.com/@HackerPlus/admin-panel-login-bypass-programs-hackerone-3000-4e95803fff92?source=rss------bug_bounty-5 | HackerPlus+ | bug-bounty, ctf-writeup, bugcrowd, ctf, hackerone | 27-Jan-2025 |
| Automating Bug Bounty with Python | https://medium.com/@Chandravarma.Hattaraki/automating-bug-bounty-with-python-ca146dcc5a9d?source=rss------bug_bounty-5 | Chandravarma.Hattaraki | bugbounty-automation, pentesting, vapt, vulnerability, bug-bounty | 27-Jan-2025 |
| Beginner’s Toolkit: 9 Tools That Simplified My Cybersecurity Journey | https://medium.com/@d3vilz50n/beginners-toolkit-9-tools-that-simplified-my-cybersecurity-journey-420c3c320d0a?source=rss------bug_bounty-5 | d3vilz50n | ethical-hacking, hacking-tools, cybersecurity, bug-bounty, cybersecurity-tools | 27-Jan-2025 |
| Finding Bugs Beyond the Obvious: A Rate Limit Bypass Story | https://medium.com/@dev.rawal0143/finding-bugs-beyond-the-obvious-a-rate-limit-bypass-story-d627e926b7e5?source=rss------bug_bounty-5 | Dev Rawal | rate-limit-bypass, bugs, hackerone, rate-limiting, bug-bounty | 27-Jan-2025 |
| $9,500 Bug Bounty: How I Chained IDOR and BAC to Discover This Critical Vulnerability | https://medium.com/@ibtissamhammadi/9-500-bug-bounty-how-i-chained-idor-and-bac-to-discover-this-critical-vulnerability-a6ff942d4bac?source=rss------bug_bounty-5 | Ibtissam Hammadi | hacking, bug-bounty, cybersecurity, infosec, programing | 27-Jan-2025 |
| “From Frustration to Fulfillment:Why Bug Bounty Hunting is Worth the Effort and How to Succeed” | https://medium.com/@Arsenelupin12/from-frustration-to-fulfillment-why-bug-bounty-hunting-is-worth-the-effort-and-how-to-succeed-ed632833f78d?source=rss------bug_bounty-5 | Wasted Resources | hacking, hackathons, bug-bounty, bug-bounty-tips, cybersecurity | 27-Jan-2025 |
| Guía de Bug Bounty Hunting #1 | https://medium.com/@mon.cybersec/gu%C3%ADa-de-bug-bounty-hunting-1-b40f056a98d8?source=rss------bug_bounty-5 | Mon Patiño | cybersecurity, hacking, bug-bounty, ciberseguridad, bug-bounty-tips | 27-Jan-2025 |
| 2 good tools for subdomain enumeration. | https://osintteam.blog/2-good-tools-for-subdomain-enumeration-fdceb84ac685?source=rss------bug_bounty-5 | loyalonlytoday | pentesting, cybersecurity, subdomains-enumeration, reconnaissance, bug-bounty | 27-Jan-2025 |
| ATM | Penetration Testing | https://medium.com/@HackerPlus/atm-penetration-testing-24a9514c6858?source=rss------bug_bounty-5 | HackerPlus+ | ctf, pentesting, atm, bug-bounty, hacker | 27-Jan-2025 |
| How I found a p4 as per bug crowd vrt. | https://medium.com/h7w/how-i-found-a-p4-as-per-bug-crowd-vrt-aacbd2e9d285?source=rss------bug_bounty-5 | loyalonlytoday | 4ps, bug-bounty, ethical-hacking, cybersecurity, pentesting | 27-Jan-2025 |
| HTTP Request Smuggling ft TryHackMe and more | https://medium.com/@rizn0x0cruz/http-request-smuggling-a92a5411435e?source=rss------bug_bounty-5 | rinz0x0cruz | web-hacking, bug-bounty, tryhackme-writeup, cybersecurity, computer-science | 27-Jan-2025 |
| The Evolution of Cybersecurity: Trends, Threats, and Solutions for 2025 | https://0xhassan.medium.com/the-evolution-of-cybersecurity-trends-threats-and-solutions-for-2025-d7f7a7726423?source=rss------bug_bounty-5 | Hassan Ali Arshad | cybersecurity, bug-bounty, infosec, it, information-technology | 27-Jan-2025 |
| Subdomain TakeOver Programs BugCrowd $2100 Bounty | https://medium.com/@HackerPlus/subdomain-takeover-programs-bugcrowd-2100-bounty-f47e78cdb945?source=rss------bug_bounty-5 | HackerPlus+ | bug-bounty, bug-bounty-tips, ctf-writeup, ctf, hackerone | 27-Jan-2025 |
| My Journey to Finding My First XSS Vulnerability | https://medium.com/@shaikrief2/my-journey-to-finding-my-first-xss-vulnerability-a342f685d7dc?source=rss------bug_bounty-5 | Shxikrf | bug-bounty, cybersecurity, bug-bounty-writeup | 27-Jan-2025 |
| Way to find IDORs or Broken access bugs | https://medium.com/@curiouskhanna/way-to-find-idors-or-broken-access-bugs-2c9a07c32281?source=rss------bug_bounty-5 | Shubham Khanna | idor, cybersecurity, bug-bounty, hacking, broken-access-control | 27-Jan-2025 |
| These books will help to learn bug bounty & penetration testing and ethical hacking. Part 1. | https://cybersecuritywriteups.com/these-books-will-help-to-learn-bug-bounty-penetration-testing-and-ethical-hacking-part-1-852f54c6e075?source=rss------bug_bounty-5 | loyalonlytoday | books, pdf, bug-bounty, cybersecurity, ethical-hacking | 26-Jan-2025 |
| These books will help to learn bug bounty & penetration testing and ethical hacking. Final part. | https://cybersecuritywriteups.com/these-books-will-help-to-learn-bug-bounty-penetration-testing-and-ethical-hacking-final-part-b1147247c9dc?source=rss------bug_bounty-5 | loyalonlytoday | books, bug-bounty, pdf, hacking, cybersecurity | 26-Jan-2025 |
| These books will help to learn bug bounty & penetration testing and ethical hacking—part 2. | https://cybersecuritywriteups.com/these-books-will-help-to-learn-bug-bounty-penetration-testing-and-ethical-hacking-part-2-7796010139e2?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, pdf, books, cybersecurity, hacking | 26-Jan-2025 |
| Here are some solutions on countering CTF mistake happened while panicking and over extement. | https://medium.com/@shalomo.social/here-are-some-solutions-on-countering-ctf-mistake-happened-while-panicking-and-over-extement-9f090424f08b?source=rss------bug_bounty-5 | Shalomo Agarwarkar | bug-bounty, machine-learning, cryptocurrency, programming, data-science | 26-Jan-2025 |
| Securing NASA For Certificate: P3 Vulnerability | https://medium.com/@manan_sanghvi/securing-nasa-for-certificate-p3-vulnerability-272a6e5f2fca?source=rss------bug_bounty-5 | Manan Sanghvi | manan-sanghvi, bug-bounty, nasa, penetration-testing, hacking | 26-Jan-2025 |
| Finding an easy p4 bug. | https://medium.com/cyberscribers-exploring-cybersecurity/finding-an-easy-p4-bug-489d91e9c754?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, hacking, bug-bounty, bugs, penetration-testing | 26-Jan-2025 |
| Técnicas Avanzadas para Analizar y Comprender Web Application Firewalls (WAF) | https://medium.com/@kimera71/t%C3%A9cnicas-avanzadas-para-analizar-y-comprender-web-application-firewalls-waf-515713cf6edd?source=rss------bug_bounty-5 | Kimera | red-team, bug-bounty, waf, pentesting | 26-Jan-2025 |
| Light: TryHackMe Writeup | https://medium.com/@samyakkatiyar2/light-tryhackme-writeup-230c3d6c26ca?source=rss------bug_bounty-5 | Samyakkatiyar | ctf-writeup, ethical-hacking, cybersecurity, bug-bounty, application-security | 26-Jan-2025 |
| Beginner’s Guide to Bug Bounty: Easy Tips for Finding Open Redirect Vulnerabilities | https://medium.com/@anishnarayan/beginners-guide-to-bug-bounty-easy-tips-for-finding-open-redirect-vulnerabilities-ffda668e6533?source=rss------bug_bounty-5 | Anish Narayan | bug-bounty-tips, open-redirect, bug-bounty, bug-bounty-writeup, bug-bounty-hunting | 26-Jan-2025 |
| Unlock the Full Potential of the Wayback Machine for Bug Bounty | https://infosecwriteups.com/unlock-the-full-potential-of-the-wayback-machine-for-bug-bounty-8b6f57e2637d?source=rss------bug_bounty-5 | coffinxp | bug-bounty-tips, technology, tech, hacking, bug-bounty | 26-Jan-2025 |
| How I “Hacked” discord.rocks | https://medium.com/@iusedarchbtw/how-i-hacked-discord-rocks-8044266b4775?source=rss------bug_bounty-5 | Wuemeli | discord, bug-bounty | 26-Jan-2025 |
| Waybackurls: The Ultimate Tool for Recon in Bug Bounty Hunting | https://medium.com/@verylazytech/waybackurls-the-ultimate-tool-for-recon-in-bug-bounty-hunting-3465a1786162?source=rss------bug_bounty-5 | Very Lazy Tech | recon, waybackurls, hacking, bug-bounty, cybersecurity | 26-Jan-2025 |
| Ransomware Gang Exploits SSH Tunnels for Stealthy VMware ESXi Access | https://medium.com/@wiretor/ransomware-gang-exploits-ssh-tunnels-for-stealthy-vmware-esxi-access-1f281b18deb8?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, malware, ai, hacking, bug-bounty | 26-Jan-2025 |
| Mastering Amass: The Ultimate Recon Toolkit | https://medium.com/@muhammad4208/mastering-amass-the-ultimate-recon-toolkit-d66a56627849?source=rss------bug_bounty-5 | Muhammad Abdullah Niazi | bug-bounty-tips, reconnaissance, enumeration, bug-bounty | 26-Jan-2025 |
| Silver Platter | TryHackMe | Walkthrough | https://medium.com/@lkmn1/silver-platter-tryhackme-walkthrough-7ae5719aa8c0?source=rss------bug_bounty-5 | Lukman Ardiyansyah | hacking, pentesting, linux, cybersecurity, bug-bounty | 26-Jan-2025 |
| How I Gained Admin Access Through DeepLink Hijacking | https://medium.com/@k3r0/privilege-escalation-via-deeplink-hijacking-23b30f74b0ff?source=rss------bug_bounty-5 | Kyrillos nady | penetration-testing, hacking, mobile-app-development, bug-bounty, android | 26-Jan-2025 |
| If Bug Bounty Programs Are So Effective, Why Don’t Most Companies Have Them? | https://medium.com/@hackrate/if-bug-bounty-programs-are-so-effective-why-dont-most-companies-have-them-fbba2f221089?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, hacking, cybersecurity, ethical-hacking, bug-bounty-tips | 26-Jan-2025 |
| Netgate Needs a Bug Bounty | https://medium.com/cloud-security/netgate-needs-a-bug-bounty-90ae5eebe821?source=rss------bug_bounty-5 | Teri Radichel | bug-bounty, ubiquiti, pfsense, troubleshooting, net-gate | 26-Jan-2025 |
| Exploiting XSS To Steal Cookies | https://osintteam.blog/exploiting-xss-to-steal-cookies-f0aebdcd815b?source=rss------bug_bounty-5 | The Cybersec Café | bug-bounty-tips, penetration-testing, cybersecurity, bug-bounty, information-security | 25-Jan-2025 |
| Threat Hunting with Python (Cybersecurity) | https://medium.com/@paritoshblogs/threat-hunting-with-python-cybersecurity-b90b76415972?source=rss------bug_bounty-5 | Paritosh | cybersecurity, threat-hunting, bug-bounty, programming, python | 25-Jan-2025 |
| How I Turned a Tiny Security Flaw into a $250 Bounty | https://medium.com/@ramshath1999/how-i-turned-a-tiny-security-flaw-into-a-250-bounty-90a0227d6c6f?source=rss------bug_bounty-5 | Ramshath | pentesting, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 25-Jan-2025 |
| How I Discovered a Bypass in WhatsApp’s “View Once” Feature | https://medium.com/@ramshath1999/how-i-discovered-a-bypass-in-whatsapps-view-once-feature-aea3bdf6405a?source=rss------bug_bounty-5 | Ramshath | hacking, bug-bounty, pentesting, meta | 25-Jan-2025 |
| How to Bypass SSL Pinning for Android Apps: A Step-by-Step Guide for Security Testing | https://medium.com/@usmandasthaheer/how-to-bypass-ssl-pinning-for-android-apps-a-step-by-step-guide-for-security-testing-13f2f4d10a2e?source=rss------bug_bounty-5 | The Cyber Monkey | bug-bounty, penetration-testing, bug-bounty-tips, cybersecurity | 25-Jan-2025 |
| Practical Bug Bounty: A Complete Guide to Finding & Reporting Vulnerabilities | https://santhosh-adiga-u.medium.com/practical-bug-bounty-a-complete-guide-to-finding-reporting-vulnerabilities-b46a79910ab8?source=rss------bug_bounty-5 | Santhosh Adiga U | bug-bounty, ethical-hacking, penetration-testing, cybersecurity | 25-Jan-2025 |
| Hello everyone! | https://medium.com/@sahusujal.dev2004/hello-everyone-8550eb37820f?source=rss------bug_bounty-5 | Sujal Sahu | bug-bounty-tips, bug-bounty, bounty-program, bug-bounty-dorks, bug-bounty-program | 25-Jan-2025 |
| JSON Web Token (JWT) Vulnerabilities: Breaking Tokens for Fun and Profit | https://medium.com/@HackerNasr/json-web-token-jwt-vulnerabilities-breaking-tokens-for-fun-and-profit-cf36fc0122db?source=rss------bug_bounty-5 | HackerNasr | web-security, bug-bounty, infosec, pentesting, ethical-hacking | 25-Jan-2025 |
| Business Logic Vulnerability — IDOR (Insecure Direct Object Reference) | https://medium.com/@ilhambachtiar578/business-logic-vulnerability-idor-insecure-direct-object-reference-3dfe04298392?source=rss------bug_bounty-5 | Ilhambachtiar | idor, penteration-testing, idor-vulnerability, bug-bounty, cybersecurity | 25-Jan-2025 |
| FINDING UNIQUE BUG BOUNTY PROGRAMS | https://medium.com/@sahusujal.dev2004/hello-everyone-8550eb37820f?source=rss------bug_bounty-5 | Sujal Sahu | bug-bounty-tips, bug-bounty, bounty-program, bug-bounty-dorks, bug-bounty-program | 25-Jan-2025 |
| $35K Bug Bounty: Python Scripts Crack Subdomains | https://medium.com/@ibtissamhammadi/35k-bug-bounty-python-scripts-crack-subdomains-bd2a131cc372?source=rss------bug_bounty-5 | Ibtissam Hammadi | python-hacking, bug-bounty, ethical-hacking, cybersecurity, network-security | 25-Jan-2025 |
| OSINT (Reconnaissance) section: What is GithubDorking ? | https://medium.com/@nagavicyn2/osint-reconnaissance-section-what-is-githubdorking-0145221d1206?source=rss------bug_bounty-5 | Jionin | bug-bounty, github, github-dorking, reconnaissance, osint | 25-Jan-2025 |
| Hemos lanzado un programa de recompensas por errores de $500,000 para identificar vulnerabilidades… | https://medium.com/@dolaresciberneticos/hemos-lanzado-un-programa-de-recompensas-por-errores-de-500-000-para-identificar-vulnerabilidades-d4c16fe7ec84?source=rss------bug_bounty-5 | Carlos Melgar | proof-system, expander-polyhdera, zero-knowledge, bug-bounty, expander | 25-Jan-2025 |
| How I Found a Vulnerability in Lemonsqueezy’s Checkout Flow | https://medium.com/@rstuv/how-i-found-a-vulnerability-in-lemonsqueezys-checkout-flow-393cc7026ab0?source=rss------bug_bounty-5 | rstuv | bug-bounty, cybersecurity | 25-Jan-2025 |
| Zyxel Warns of Critical Firewall Issues Due to Faulty Update | https://medium.com/@wiretor/zyxel-warns-of-critical-firewall-issues-due-to-faulty-update-1bedcc5ad085?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, bug-bounty, zynel, malware, hacking | 25-Jan-2025 |
| Privilege Escalation in GraphQL : Exploiting Finance Role Token to Access Admin Data : Part 1 | https://hackersatty.medium.com/privilege-escalation-in-graphql-exploiting-finance-role-token-to-access-admin-data-part-1-7a017a7aeb89?source=rss------bug_bounty-5 | hackersatty | idor, vulnerability, medium, bug-bounty, graphql | 25-Jan-2025 |
| PayPal Agrees to $2 Million Settlement Over 2022 Data Breach | https://medium.com/@wiretor/paypal-agrees-to-2-million-settlement-over-2022-data-breach-672e1b417dcc?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, malware, bug-bounty, paypal, money | 25-Jan-2025 |
| Subdomain enumeration technique to discover critical vulnerabilities… | https://mahim-firoj.medium.com/subdomain-enumeration-technique-to-discover-critical-vulnerabilities-dfb4f4daa1af?source=rss------bug_bounty-5 | Md. Mahim Bin Firoj | vulnerability-assessment, subdomain, cybersecurity, bug-bounty, enumeration | 25-Jan-2025 |
| Shodan Dorking : 50+ Dorks To Uncover Hidden World | https://bitpanic.medium.com/shodan-dorking-50-dorks-to-uncover-hidden-world-41e10819b7c8?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, bug-bounty-tips, programming, bug-bounty, technology | 25-Jan-2025 |
| Comprehensive Guide to SQL Injection Attacks: Understanding and Prevention | By Gentil Security | https://gentilsecurity.medium.com/comprehensive-guide-to-sql-injection-attacks-understanding-and-prevention-by-gentil-security-8f02e3461344?source=rss------bug_bounty-5 | Gentil Security | penetration-testing, sql-injection, cybersecurity, web-vulnerabilities, bug-bounty | 25-Jan-2025 |
| Full GitHub Dorking guide: for OSINT and BugBounty (Reconnaissance) | https://infosecwriteups.com/full-github-dorking-guide-for-osint-and-bugbounty-reconnaissance-27557fb67ee0?source=rss------bug_bounty-5 | Jionin | github, reconnaissance, bug-bounty, osint, github-dorking | 25-Jan-2025 |
| Making use of Javascript Source Maps (js.map) files in Bug Bounty — Information gathering tips | https://medium.com/@0x_Ju1ian/making-use-of-javascript-source-maps-js-map-files-in-bug-bounty-information-gathering-tips-87deddf1aa8d?source=rss------bug_bounty-5 | 0x_Ju1ian | bug-bounty-tips, bug-bounty | 24-Jan-2025 |
| $200 Easy Directory Listing Vulnerability on a US Website | https://cybersecuritywriteups.com/200-easy-directory-listing-vulnerability-on-a-us-website-7d35fcda8aa2?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, bug-bounty, hacking, medium, money | 24-Jan-2025 |
| CTF vs. Bug Bounty: Navigating Two Worlds of Cybersecurity | https://medium.com/@mehakchoradia1/ctf-vs-bug-bounty-navigating-two-worlds-of-cybersecurity-919ed152bed3?source=rss------bug_bounty-5 | Mehakchoradia | guidance, cybersecurity, capture-the-flag, careers, bug-bounty | 24-Jan-2025 |
| How I Found a Stripe Key Disclosure Leading to PII Exposure | https://medium.com/@nihaltikka/how-i-found-a-stripe-key-disclosure-leading-to-pii-exposure-6e57d5fca9d5?source=rss------bug_bounty-5 | EL_Cazad0r | bug-bounty, bug-bounty-tips, bug-bounty-writeup, penetration-testing | 24-Jan-2025 |
| Broken Link : My Story Of Hijacking a Twitter Handle | https://bitpanic.medium.com/broken-link-my-story-of-hijacking-a-twitter-handle-f087536db8c5?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, technology, programming, bug-bounty, bug-bounty-tips | 24-Jan-2025 |
| How to Spot XSS Bugs on Any Website | https://medium.com/h7w/how-to-spot-xss-bugs-on-any-website-5b4eed955c35?source=rss------bug_bounty-5 | Rendiero | penetration-testing, xss-attack, red-team, bug-bounty, vulnerability | 24-Jan-2025 |
| Bug Bounty Scams in 2025: How to Identify Fake Opportunities and Safeguard Yourself | https://medium.com/@adibostoninstitute123/bug-bounty-scams-in-2025-how-to-identify-fake-opportunities-and-safeguard-yourself-e08cd7af5bce?source=rss------bug_bounty-5 | Aditya Tripathi | cybersecurity, learn-ethical-hacking, bug-bounty, cybersecurity-course, ethical-hacking-course | 24-Jan-2025 |
| Subdomain Enumeration: A Practical Guide | https://medium.com/@nakshatrasirohi/subdomain-enumeration-a-practical-guide-31eb662d3bfb?source=rss------bug_bounty-5 | Nakshatra Sirohi | reconnaissance, bug-bounty, bug-bounty-tips, hacking-tools, recon | 24-Jan-2025 |
| Exploiting XSS via Markdown on Xiaomi | https://medium.com/@n45ht/exploiting-xss-via-markdown-on-xiaomi-ad93519a42f5?source=rss------bug_bounty-5 | N45HT | web-security, cross-site-scripting, xs, bug-bounty, markdown | 24-Jan-2025 |
| Bypassed Access Control Using a Simple Method-Based Request Trick — Access Control Labs | https://bashoverflow.medium.com/bypassed-access-control-using-a-simple-method-based-request-trick-access-control-labs-61ec15242d88?source=rss------bug_bounty-5 | Bash Overflow | bypass-access-control, http-method-based-bypass, privilege-escalation, bug-bounty, access-control-flaw | 24-Jan-2025 |
| Linux Basics for Hackers, Developers, and System Administrators | https://medium.com/@v1xtron/linux-basics-for-hackers-developers-and-system-administrators-419b828f2a98?source=rss------bug_bounty-5 | v1xtron | bug-bounty, bug-bounty-writeup, ethical-hacking, linux, system-administration | 24-Jan-2025 |
| Currently Bugcrowd has over 1400 bug bounty programs. Is it really so good? | https://medium.com/@hackrate/currently-bugcrowd-has-over-1400-bug-bounty-programs-is-it-really-so-good-383130cfb406?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, ethical-hacking, bug-bounty, hacking, bug-bounty-tips | 24-Jan-2025 |
| Become a Bug Bounty Expert: Tips to Maximize Your Earnings | https://medium.com/@ramanidhaval11/become-a-bug-bounty-expert-tips-to-maximize-your-earnings-1cd13984631a?source=rss------bug_bounty-5 | Er Dhaval Ramani | ai, cybersecurity, bug-bounty | 24-Jan-2025 |
| Admin Panel Exploit to Access Logitech Dashboard | https://medium.com/@asingh25377/admin-panel-exploit-to-access-logitech-dashboard-e4c3943dbf21?source=rss------bug_bounty-5 | aman singh | bugbounty-writeup, bugs, bug-bounty | 24-Jan-2025 |
| CORS Misconfigurations: How Poor Policies Open Doors to Exploits | https://medium.com/@HackerNasr/cors-misconfigurations-how-poor-policies-open-doors-to-exploits-ef0af71e0302?source=rss------bug_bounty-5 | HackerNasr | penetration-testing, infosec, bug-bounty, ethical-hacking, web-security | 24-Jan-2025 |
| Best Linux Distros for Cyber Security , Web & App Development | https://bitpanic.medium.com/best-linux-distros-for-cyber-security-web-app-development-72422faa37a2?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, web-development, cybersecurity, technology, programming | 24-Jan-2025 |
| SQL injection in largest Electricity Board of Sri Lanka | https://infosecwriteups.com/sql-injection-in-largest-electricity-board-of-sri-lanka-1a55c12104bd?source=rss------bug_bounty-5 | coffinxp | technology, sql-injection, sql, hacking, bug-bounty | 24-Jan-2025 |
| Bypassing Rate Limit Protection to Account Takeover | https://medium.com/@sohailahmed0x0/bypassing-rate-limit-protection-to-account-takeover-fe44598fc1df?source=rss------bug_bounty-5 | Sohail Ahmed | brute-force, rate-limiting, cybersecurity, bug-bounty, pentesting | 24-Jan-2025 |
| Setting up Lab for Active Directory | https://medium.com/@sohailahmed0x0/setting-up-lab-for-active-directory-9b0cb69041cd?source=rss------bug_bounty-5 | Sohail Ahmed | cybersecurity, infosec, bug-bounty, active-directory, pentesting | 24-Jan-2025 |
| Escalate P3 SSRF TO P1 | https://medium.com/@anonanoon9/escalate-p3-ssrf-to-p1-a9ed4eaaefeb?source=rss------bug_bounty-5 | Yazeed Bilal | bug-bounty, bug-bounty-strategy, bug-bounty-tips, bug-bounty-hunter, bug-bounty-writeup | 23-Jan-2025 |
| Easy $10,000 bounty using Wayback Machine | https://blog.bugbountyhunter.xyz/easy-10-000-bounty-using-wayback-machine-1b08e3b1cafe?source=rss------bug_bounty-5 | Japz Divino | bug-bounty-tips, bug-bounty-writeup, hackerone, bug-bounty | 23-Jan-2025 |
| Create Your Free Red Teaming Lab at Zero Cost! | https://medium.com/@paritoshblogs/create-your-free-red-teaming-lab-at-zero-cost-d2547b2de11a?source=rss------bug_bounty-5 | Paritosh | cybersecurity, how-to, bug-bounty, hacking, pentesting | 23-Jan-2025 |
| A Simple P2 Bug Via Forced Browsing | https://medium.com/@cyberpro151/a-simple-p2-bug-via-forced-browsing-d4926a82891f?source=rss------bug_bounty-5 | cyberpro151 | bug-bounty, bug-bounty-writeup, bug-bounty-tips, broken-access-control, cybersecurity | 23-Jan-2025 |
| Get sonyliv free subscriptions | https://medium.com/@hrofficial62/get-sonyliv-free-subscriptions-fcc58f89bae6?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, bugbounty-writeup, cybersecurity, pentesting, hacki | 23-Jan-2025 |
| Exposed Credentials Guide: Not just in client javascripts || 101 case studies | https://medium.com/@illoyscizceneghposter/exposed-credentials-guide-not-just-in-client-javascripts-101-case-studies-131b765e07a2?source=rss------bug_bounty-5 | Illoy Scizceneghposter | bug-bounty, hacking, infosec | 23-Jan-2025 |
| Security Risks of Medium Paywall Bypass Methods. | https://pwndecoco.medium.com/security-risks-of-medium-paywall-bypass-methods-28b92f557a3a?source=rss------bug_bounty-5 | Pwndec0c0 | bug-bounty, hacking, bug-bounty-writeup, bug-bounty-tips, medium | 23-Jan-2025 |
| $600 Vulnerability: My First Bug Hunting Journey | https://asyary.medium.com/600-vulnerability-my-first-bug-hunting-journey-98b961a62f4b?source=rss------bug_bounty-5 | Asyary Raihan | bug-bounty, bug-hunting, bug-bounty-writeup, hacking, cybersecurity | 23-Jan-2025 |
| Introducing AZEx Incentivized Testnet | https://medium.com/@AZEX.io/introducing-azex-incentivized-testnet-04ddc32d83a1?source=rss------bug_bounty-5 | AZEX | testnet, berachain, defi, azex, bug-bounty | 23-Jan-2025 |
| How a Vulnerability in Cinema Booking Systems Can Block Seats and Impact Revenue | https://medium.com/@anonymousshetty2003/how-a-vulnerability-in-cinema-booking-systems-can-block-seats-and-impact-revenue-c28e93d26616?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty-writeup, bug-bounty, ethical-hacking, hacking, cybersecurity | 23-Jan-2025 |
| Finding more subdomains.(part 2) | https://medium.com/readers-club/finding-more-subdomains-part-2-07a64b331b43?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, penetration-testing, subdomains-enumeration, hacking, bug-bounty | 23-Jan-2025 |
| $5,000 Bug Bounty: The Hacker’s Unexpected Goldmine | https://medium.com/@ibtissamhammadi/5-000-bug-bounty-the-hackers-unexpected-goldmine-b87ab9fd0c3b?source=rss------bug_bounty-5 | Ibtissam Hammadi | bug-bounty, ethical-hacking, cybersecurity, infosec, tech-jobs | 23-Jan-2025 |
| OSINT (Reconnaissance) section: What is GitDorking ? | https://medium.com/@nagavicyn2/osint-reconnaissance-section-what-is-gitdorking-3215520de9c7?source=rss------bug_bounty-5 | Jionin | github, osint, recon, bug-bounty, pentesting | 23-Jan-2025 |
| Next.js, cache, and chains: the stale elixir | https://medium.com/@zhero_/next-js-cache-and-chains-the-stale-elixir-a4c6b3062e1b?source=rss------bug_bounty-5 | Rachid.A | javascript, cve, hacking, nextjs, bug-bounty | 23-Jan-2025 |
| The Ultimate Guide to Hacking AWS S3: Find Vulnerable Buckets and Earn Big $$$$ | https://medium.com/@nebty/the-ultimate-guide-to-hacking-aws-s3-find-vulnerable-buckets-and-earn-big-5b089d921814?source=rss------bug_bounty-5 | Nebty | penetration-testing, cybersecurity, ethical-hacking, bug-bounty, s3 | 23-Jan-2025 |
| Biggest innovation in Penetration Testing so far | https://medium.com/@hackrate/biggest-innovation-in-penetration-testing-so-far-d6fac4800119?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, bug-bounty, penetration-testing, cybersecurity, hacking | 23-Jan-2025 |
| How To Convert Your Android Device In A Recon Device ? | https://bitpanic.medium.com/how-to-convert-your-android-device-in-a-recon-device-4ad22c3bbdab?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, technology, programming, bug-bounty-tips, cybersecurity | 23-Jan-2025 |
| How I Found a Bug in Sony and Earned Exclusive Swag! | https://medium.com/@josekuttykunnelthazhebinu/how-i-found-a-bug-in-sony-and-earned-exclusive-swag-f565d56c395e?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty, cybersecurity, programming, technology, vulnerability | 23-Jan-2025 |
| Essential Tools and Technologies Every SOC Analyst Must Master to Stay Ahead in Cybersecurity | https://mhmmuneef.medium.com/essential-tools-and-technologies-every-soc-analyst-must-master-to-stay-ahead-in-cybersecurity-50d76cc87ec5?source=rss------bug_bounty-5 | Mohammed Muneef | hacking, bug-bounty, cybersecurity, technology, soc | 23-Jan-2025 |
| CTI REPORT - LockBit 3.0: | https://medium.com/@muhammetalgan3547/cti-report-lockbit-3-0-33e224e1d8d6?source=rss------bug_bounty-5 | Muhammet ALGAN | bug-bounty, cybersecurity, incident-response, cyber-threat-intelligence, hacking | 23-Jan-2025 |
| Unique ways to Recon for Bug Hunters: Short series [Part 1] | https://osintteam.blog/unique-ways-to-recon-for-bug-hunters-short-series-part-1-7e91f3fcfe25?source=rss------bug_bounty-5 | RivuDon | ethical-hacking, infosec, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 22-Jan-2025 |
| Polluting My Way to Victory: How I Found HTTP Parameter Pollution (HPP) and Exploited It Like a Pro | https://myselfakash20.medium.com/polluting-my-way-to-victory-how-i-found-http-parameter-pollution-hpp-and-exploited-it-like-a-pro-c4cf39ec90fe?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, bug-bounty, bug-bounty-writeup, technology, bug-bounty-tips | 22-Jan-2025 |
| Appreciation Letter from NASA for Uncovering Unauthorized file Access | https://medium.com/@hackxb12/appreciation-letter-from-nasa-for-uncovering-unauthorized-file-access-a1d1497a33e6?source=rss------bug_bounty-5 | Bhautik Patel | cybersecurity, bug-bounty | 22-Jan-2025 |
| Threat Hunting Using Powershell | https://medium.com/@paritoshblogs/threat-hunting-using-powershell-ce8502307b65?source=rss------bug_bounty-5 | Paritosh | programming, threat-hunting, bug-bounty, cybersecurity, powershell | 22-Jan-2025 |
| Earn $100–500 after Pentesting OAuth | https://medium.com/@anandrishav2228/earn-100-500-after-pentesting-oauth-02018371d4c2?source=rss------bug_bounty-5 | Rishav anand | pentesting, money, cybersecurity, oauth, bug-bounty | 22-Jan-2025 |
| Polluting My Way to Victory: How I Found HTTP Parameter Pollution (HPP) and Exploited It Like a Pro | https://osintteam.blog/polluting-my-way-to-victory-how-i-found-http-parameter-pollution-hpp-and-exploited-it-like-a-pro-c4cf39ec90fe?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, programming, bug-bounty, bug-bounty-writeup, technology | 22-Jan-2025 |
| BY USING JAVASCRIPT ANALYSIS GOT 200$ for JUST AN API TOKEN Leak [Information Disclosure… | https://medium.com/@hrofficial62/by-using-javascript-analysis-got-200-for-just-an-api-token-leak-information-disclosure-a2f1868ab94f?source=rss------bug_bounty-5 | Mr Horbio | ethical-hacking, bug-bounty, cybersecurity, pentesting, hacking | 22-Jan-2025 |
| What if XML-RPC.php file show 403 Forbidden | https://medium.com/@hrofficial62/what-if-xml-rpc-php-file-show-403-forbidden-0ba7141a8d52?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, hacking, penetration-testing, wordpress, cybersecurity | 22-Jan-2025 |
| Recon | Subdomains | https://z0enix.medium.com/recon-subdomains-230f37ea97b1?source=rss------bug_bounty-5 | Mohamed Hamadou | recon, subdomain, bug-bounty, bug-bounty-tips | 22-Jan-2025 |
| CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) | https://z0enix.medium.com/cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-db5719c34014?source=rss------bug_bounty-5 | Mohamed Hamadou | bug-bounty, vulnerability | 22-Jan-2025 |
| Account Tackover | https://z0enix.medium.com/account-tackover-765357c12e45?source=rss------bug_bounty-5 | Mohamed Hamadou | bug-bounty, bug-bounty-tips | 22-Jan-2025 |
| How I Hacked a User Management System and Found 3 Critical GraphQL Vulnerabilities | https://medium.com/@4bdo/how-i-hacked-a-user-management-system-and-found-3-critical-graphql-vulnerabilities-4362eff1a38f?source=rss------bug_bounty-5 | 4bd0_m4g3d | infosec, cybersecurity, data-privacy, bug-bounty, ethical-hacking | 22-Jan-2025 |
| Understanding Privilege Escalation in Linux and Windows Systems - [Part 1] | https://bashoverflow.medium.com/understanding-privilege-escalation-in-linux-and-windows-systems-part-1-f9c98c8a0a14?source=rss------bug_bounty-5 | Bash Overflow | privilege-escalation, penetration-testing, bug-bounty, linux-priv-esc, windows-priv-escalation | 22-Jan-2025 |
| CertificateFinder: A Game-Changer for All Hidden Subdomains(freeGUI tool) | https://anontriager.medium.com/certificatefinder-a-game-changer-for-all-hidden-subdomains-freegui-tool-c9c58c910b3c?source=rss------bug_bounty-5 | Anonymous Traiger | jobs, hacking, bug-bounty, programming, developer | 22-Jan-2025 |
| My Bug Bounty Journey: A Middle-Class Kid’s Quest for Free and Beyond | https://medium.com/@vivekps143/my-bug-bounty-journey-a-middle-class-kids-quest-for-free-and-beyond-1cd6b65240d6?source=rss------bug_bounty-5 | Vivek PS | bug-bounty-writeup, web-security, hacking, bug-bounty | 22-Jan-2025 |
| The Biggest Bug Bounty Payouts of All Time and What We Learned | https://medium.com/@hackrate/the-biggest-bug-bounty-payouts-of-all-time-and-what-we-learned-0a35c8a327c2?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, cybersecurity, ethical-hacking, hacking, bug-bounty-tips | 22-Jan-2025 |
| IPany VPN Breached in Supply-Chain Attack: Hackers Deploy SlowStepper Malware | https://medium.com/@wiretor/ipany-vpn-breached-in-supply-chain-attack-hackers-deploy-slowstepper-malware-ba0ae1c2ddb9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacker, ai, malware, hacking | 22-Jan-2025 |
| ️ How to Stay Anonymous Online: A Hacker’s Perspective | https://medium.com/@atnoforcybersecurity/%EF%B8%8F-how-to-stay-anonymous-online-a-hackers-perspective-920b4bdc2401?source=rss------bug_bounty-5 | ATNO For Cybersecurity | Hacking | bug-bounty, cybersecurity, cyberattack, cybercrime | 22-Jan-2025 |
| Easy Hacking with Google Dorking — Finding NASA High P2 Vulnerability | https://abhirdd.medium.com/easy-hacking-with-google-dorking-finding-nasa-high-p2-vulnerability-8b9797eac370?source=rss------bug_bounty-5 | Abhi Rantia Dharmawan | bug-bounty-tips, bugcrowd, bug-bounty, bug-bounty-writeup, nasa | 22-Jan-2025 |
| Intent Redirect: Unlocking Hidden Pathways in Android Applications | https://medium.com/@k3r0/intent-redirect-unlocking-hidden-pathways-in-android-applications-8f3390965236?source=rss------bug_bounty-5 | Kyrillos nady | android-app-development, hacking, mobile-app-development, bug-bounty, pentesting | 22-Jan-2025 |
| Basic Windows CMD Commands for Hackers: A Guide to Privilege Escalation | https://medium.com/@ajudeb55/basic-windows-cmd-commands-for-hackers-a-guide-to-privilege-escalation-99ad396aadf6?source=rss------bug_bounty-5 | Aju Deb | bug-bounty, money, technology, programming, cybersecurity | 21-Jan-2025 |
| From Order to Exploit: A Deep Dive into Restaurant Network Security | https://medium.com/@davimouar/from-order-to-exploit-a-deep-dive-into-restaurant-network-security-64aeaf3a6f64?source=rss------bug_bounty-5 | Davi Moura | programming, bug-bounty, cybersecurity, hacking, security | 21-Jan-2025 |
| Comprehensive XSS Learning Roadmap | https://medium.com/@shuklaneel525/comprehensive-xss-learning-roadmap-6f48585d8fe8?source=rss------bug_bounty-5 | NEEL SHUKLA | cross-site-scripting, bug-bounty-tips, cybersecurity, ethical-hacking, bug-bounty | 21-Jan-2025 |
| Earn $1000–2000 by identifying Common vulnerability in Tech. | https://medium.com/@anandrishav2228/earn-1000-2000-by-identifying-common-vulnerability-in-tech-e8fd44da2a1c?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, security, hacking, cyber, money | 21-Jan-2025 |
| These Hackers Earn 7 figure income | https://medium.com/@BlackHat123/these-hackers-earn-7-figure-income-73013c4225f4?source=rss------bug_bounty-5 | blackhat | bug-bounty, ethical-hacking, earn-money-online, hackerone, hacker | 21-Jan-2025 |
| How a Routine Security Test Led to My First CVE and Bug Bounty: Lessons in API Security and Beyond | https://tech.cashfree.com/how-a-routine-security-test-led-to-my-first-cve-and-bug-bounty-lessons-in-api-security-and-beyond-8f0da2bb553e?source=rss------bug_bounty-5 | Anubhav Sharma | vulnerability, api-security, infosec, bug-bounty, cybersecurity | 21-Jan-2025 |
| I found my first bug [Google Dorking] | https://medium.com/@krishnathegr817/i-found-my-first-bug-google-dorking-30c974be94f2?source=rss------bug_bounty-5 | Krishna Agarwal | cybersecurity, bug-bounty, first-bug | 21-Jan-2025 |
| Easy MFA Setup bypass Lead to unauthorized access to PII data Of users | https://medium.com/@0xOsman/easy-mfa-setup-bypass-lead-to-unauthorized-access-to-pii-data-of-users-443d41ae98a3?source=rss------bug_bounty-5 | Abdalah Osman | 2fa-bypass, bug-bounty, bugbounty-writeup, bugbounty-tips | 21-Jan-2025 |
| “My Journey as a Bug Hunter: Reporting to the Dutch Government” | https://cybersecuritywriteups.com/my-journey-as-a-bug-hunter-reporting-to-the-dutch-government-7bfd18d616fa?source=rss------bug_bounty-5 | Taha Diwan | hacking, dutch-government, bug-bounty, cybersecurity, ethical-hacking | 21-Jan-2025 |
| Bug Bounty Insights: 10 Key Findings - ZeroClick Account Takeover - Part 5 | https://medium.com/@maakthon/bug-bounty-insights-10-key-findings-zeroclick-account-takeover-part-5-a6acb3dce5e7?source=rss------bug_bounty-5 | Mahmoud Abd Alkarim | web-development, bug-bounty, hacking, account-takeover, bugbounty-writeup | 21-Jan-2025 |
| How AI and Free Open-Source Tools are Revolutionizing Bug Bounty Hunting | https://medium.com/@zoningxtr/how-ai-and-free-open-source-tools-are-revolutionizing-bug-bounty-hunting-37241798177b?source=rss------bug_bounty-5 | Zoningxtr | bug-bounty, cybersecurity, penetration-testing | 21-Jan-2025 |
| Unauthenticated Vulnerabilities: Maximum Impact $$$ | https://medium.com/@HackerNasr/unauthenticated-vulnerabilities-maximum-impact-9b51b4a0c719?source=rss------bug_bounty-5 | HackerNasr | information-security, cyberattack, bug-bounty, cybersecurity, vulnerability | 21-Jan-2025 |
| How to Install MobSF on Kali Linux for Android Application Pentesting (2025) | https://medium.com/@usmandasthaheer/how-to-install-mobsf-on-kali-linux-for-android-application-pentesting-2025-50c4948a1c0d?source=rss------bug_bounty-5 | Usman Dasthaheer | penetration-testing, bug-bounty, cybersecurity, kali-linux | 21-Jan-2025 |
| 7-Zip Fixes Bug That Bypasses Windows MoTW Security Warnings | https://medium.com/@wiretor/7-zip-fixes-bug-that-bypasses-windows-motw-security-warnings-569ac8a89068?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, bug-bounty, 7zip, money, malware | 21-Jan-2025 |
| Hi everyone, and welcome to this lab project: Finding Open Service Ports Using Kali Linux. | https://medium.com/@.rai/hi-everyone-and-welcome-to-this-lab-project-finding-open-service-ports-using-kali-linux-9be24cde101e?source=rss------bug_bounty-5 | Gamuchirai | open-source, metasploitable, nmap, kali, bug-bounty | 21-Jan-2025 |
| The correct approach to testing for privilege escalation bugs...❕❗ | https://medium.com/@mahdisalhi0500/the-correct-approach-to-testing-for-privilege-escalation-bugs-d03bd9281a3e?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, bug-bounty-tips, penetration-testing, information-security, bug-bounty | 21-Jan-2025 |
| How to transition from Pentesting to Bug Bounty Hunting | https://medium.com/@hackrate/how-to-transition-from-pentesting-to-bug-bounty-hunting-f98398c4ea0a?source=rss------bug_bounty-5 | Levente Molnar | penetration-testing, hacking, bug-bounty, cybersecurity, ethical-hacking | 21-Jan-2025 |
| WordPress Hacking 2025 | https://medium.com/infosec-notes/wordpress-hacking-2025-03985e7d2e08?source=rss------bug_bounty-5 | Mr Horbio | wordpress, pentesting, cybersecurity, ethical-hacking, bug-bounty | 21-Jan-2025 |
| response manipulation leads to access admin panel | https://medium.com/@ajax12395/response-manipulation-leads-to-access-admin-panel-2295655c646d?source=rss------bug_bounty-5 | xlr7 | bug-bounty | 20-Jan-2025 |
| How I Turned a $10 RFI Bug into a $300 RCE Bounty (Step-by-Step Guide) | https://medium.com/@ibtissamhammadi/how-i-turned-a-10-rfi-bug-into-a-300-rce-bounty-step-by-step-guide-75042267969a?source=rss------bug_bounty-5 | Ibtissam Hammadi | web-security, rce, rfi, infosec, bug-bounty | 20-Jan-2025 |
| Found HTML Injection in Emails! Earned HOF | https://medium.com/@dsmodi484/found-html-injection-in-emails-earned-hof-24a8a8223f29?source=rss------bug_bounty-5 | cryptoshant | cybersecurity, hacking, security, html, bug-bounty | 20-Jan-2025 |
| Insecure Direct Object Reference (iDOR) via Programs HackerOne | https://medium.com/@HackerPlus/insecure-direct-object-reference-idor-via-programs-hackerone-3c8e261b7ca3?source=rss------bug_bounty-5 | HackerPlus+ | ctf, bug-bounty, bug-bounty-writeup, bug-bounty-tips, hackerone | 20-Jan-2025 |
| How to Prepare for Incident Response ? A Step-by-Step Guide for Students | https://mhmmuneef.medium.com/how-to-prepare-for-incident-response-a-step-by-step-guide-for-students-fcf9f77cc56b?source=rss------bug_bounty-5 | Mohammed Muneef | bug-bounty, study-abroad, cybersecurity, technology, incident-response | 20-Jan-2025 |
| Unlock Hidden Backups with wayBackupFinder.py | https://anmolksachan.medium.com/unlock-hidden-backups-with-waybackupfinder-py-7b98041a82d9?source=rss------bug_bounty-5 | Anmol K Sachan | writeup, bug-bounty, backup, automation, pentesting | 20-Jan-2025 |
| Various Methods to Exploit Insecure Direct Object Reference (IDOR) | https://medium.com/@sahusujal.dev2004/various-methods-to-exploit-insecure-direct-object-reference-idor-f50a131fe651?source=rss------bug_bounty-5 | Sujal Sahu | bug-reporting, bug-bounty, writeup, web-penetration-testing, bug-bounty-tips | 20-Jan-2025 |
| How to Turn Bug Bounty Scopes into Goldmines: Recon Techniques That Work | https://medium.com/@HackerNasr/how-to-turn-bug-bounty-scopes-into-goldmines-recon-techniques-that-work-4b6a1bd4979d?source=rss------bug_bounty-5 | HackerNasr | cyber-security-awareness, bug-bounty-writeup, bug-bounty, security-research, cybersecurity | 20-Jan-2025 |
| Using Tor Network to Bypass Rate Limits | https://saeed0x1.medium.com/using-tor-network-to-bypass-rate-limits-9fe2b174c316?source=rss------bug_bounty-5 | SAEED | bug-bounty-writeup, bug-bounty-tips, tor, bug-bounty, cybersecurity | 20-Jan-2025 |
| Agent Sudo 2.0 | https://medium.com/@pavanboss/agent-sudo-2-0-1d92f6232ff8?source=rss------bug_bounty-5 | PavanBoss | bug-bounty, sudo, agents, thm, ctf | 20-Jan-2025 |
| Reconnaissance — Finding Apex/Root Domains | https://it4chis3c.medium.com/reconnaissance-finding-apex-root-domains-b822cf54663e?source=rss------bug_bounty-5 | It4chis3c | secrets, bug-bounty, apex-domain, reconnaissance, bug-bounty-tips | 20-Jan-2025 |
| Security Session #2 | https://medium.com/@mon.cybersec/security-session-2-7b2ec1a2d03e?source=rss------bug_bounty-5 | Mon Works | burpsuite, hacking, bug-bounty, security, ciberseguridad | 20-Jan-2025 |
| The ROI of Bug Bounty Programs: Cost vs. Impact | https://medium.com/@hackrate/the-roi-of-bug-bounty-programs-cost-vs-impact-591de5eb3630?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, bug-bounty-tips, hacking, cybersecurity, bug-bounty | 20-Jan-2025 |
| Using Tor Network to Bypass Rate Limits | https://systemweakness.com/using-tor-network-to-bypass-rate-limits-9fe2b174c316?source=rss------bug_bounty-5 | SAEED | bug-bounty-writeup, bug-bounty-tips, tor, bug-bounty, cybersecurity | 20-Jan-2025 |
| 40+ Google Dorks For Low Hanging Fruits | https://bitpanic.medium.com/40-google-dorks-for-low-hanging-fruits-d8fc3d5d7a8d?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, bug-bounty, programming, bug-bounty-tips, technology | 20-Jan-2025 |
| HTML Injection At Email Via Programs HackerOne | https://medium.com/@HackerPlus/html-injection-at-email-via-programs-hackerone-07f2e6652523?source=rss------bug_bounty-5 | HackerPlus+ | bug-bounty-tips, ctf, bugcrowd, bug-bounty, hackerone | 20-Jan-2025 |
| Discovering backups, secrets, and more using the wayBackupFinder.py tool. | https://anmolksachan.medium.com/discovering-backups-secrets-and-more-using-the-waybackupfinder-py-tool-b97f67e95c50?source=rss------bug_bounty-5 | Anmol K Sachan | wayback-machine, bug-bounty, pentesting, bug-bounty-tips, osint | 20-Jan-2025 |
| A Beginner’s Guide to Testing for Directory Traversal Attacks | https://medium.com/@mcooter/a-beginners-guide-to-testing-for-directory-traversal-attacks-300e7af275bd?source=rss------bug_bounty-5 | Michael Cooter | bug-bounty, oswa, directory-traversal, hacking, web-application-security | 20-Jan-2025 |
| Exploiting Race Condition Bugs | https://medium.com/@vuk.ivanovic9000/exploiting-race-condition-bugs-41af288c9e0f?source=rss------bug_bounty-5 | Vuk Ivanovic | race-condition, exploitation, burpsuite, infosec, bug-bounty | 20-Jan-2025 |
| A List of Known and Unknown Bug Bounty Platforms | https://medium.com/meetcyber/a-list-of-known-and-unknown-bug-bounty-platforms-c7e8a87e59f8?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, hacking, ethical-hacking | 20-Jan-2025 |
| How I found S3 buckets in Bug bounties | https://infosecwriteups.com/how-i-found-s3-buckets-in-bug-bounties-501faf76c3f9?source=rss------bug_bounty-5 | Mukilan Baskaran | bug-bounty, s3, s3-bucket, aws, aws-hacking | 20-Jan-2025 |
| How I Made $500 in 30 Days Using ChatGPT as My Hacking Mentor | https://medium.com/@ibtissamhammadi/how-i-made-500-in-30-days-using-chatgpt-as-my-hacking-mentor-113226deed78?source=rss------bug_bounty-5 | Ibtissam Hammadi | ethical-hacking, hacking, cybersecurity, chatgpt, bug-bounty | 20-Jan-2025 |
| What is a WAF ? How it works ? | https://medium.com/@rohitmaity001/what-is-a-waf-how-it-works-931a5f6fee84?source=rss------bug_bounty-5 | Rohit Maity | how-it-works, cyber, cybersecurity, cyber-securty, bug-bounty | 20-Jan-2025 |
| PicoCTF Writeup — Web Gauntlet | https://medium.com/@sobatistacyber/picoctf-writeup-web-gauntlet-7c3b8c7c7946?source=rss------bug_bounty-5 | SoBatista | penetration-testing, hacking, ctf, sql-injection, bug-bounty | 20-Jan-2025 |
| Hackers Deploy Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTP | https://medium.com/@wiretor/hackers-deploy-malicious-npm-packages-to-steal-solana-wallet-keys-via-gmail-smtp-cfdae9876dec?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, hacker, ai, bug-bounty | 20-Jan-2025 |
| Easy P4: Cloudflare Bypass, Origin IP Found (Part 2) | https://sudosuraj.medium.com/easy-p4-cloudflare-bypass-origin-ip-found-part-2-5ffc615bff1f?source=rss------bug_bounty-5 | sudosuraj | cloudflare, bug-bounty-tips, bug-bounty-writeup, bug-bounty, sudosuraj | 20-Jan-2025 |
| SQL Injection Vulnerability in Microsoft’s DevBlogs [devblogs.microsoft.com] | https://zhenwarx.medium.com/sql-injection-vulnerability-in-microsofts-devblogs-devblogs-microsoft-com-690792213d1f?source=rss------bug_bounty-5 | Zhenwarx | bug-bounty, sql-injection, microsoft | 20-Jan-2025 |
| Incident Response in Digital Forensics | A Beginners-Friendly Guide | https://mhmmuneef.medium.com/incident-response-in-digital-forensics-a-beginners-friendly-guide-7ec0b4789519?source=rss------bug_bounty-5 | Mohammed Muneef | hacking, information-technology, technology, bug-bounty, cybersecurity | 20-Jan-2025 |
| Finding my First SQL Injection On HackerOne | https://infosecwriteups.com/finding-my-first-sql-injection-on-hackerone-6a031ab5aa1c?source=rss------bug_bounty-5 | Aleksa Zatezalo | hackerone, sql-injection, bug-bounty, burpsuite, hacking | 19-Jan-2025 |
| Unlimited XSS | This is the Dumbest Way to Find XSS Bug | https://medium.com/readers-club/unlimited-xss-this-is-the-dumbest-way-to-find-xss-bug-6ee92de5df38?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, xss-attack, money, bug-bounty, hacking | 19-Jan-2025 |
| From Path Traversal to RCE: A $40,000 Bug Bounty Journey | https://medium.com/@ibtissamhammadi/from-path-traversal-to-rce-a-40-000-bug-bounty-journey-a8316994ab3d?source=rss------bug_bounty-5 | Ibtissam Hammadi | infosec, hacking-tutorial, remote-code-execution, bug-bounty, web-security | 19-Jan-2025 |
| Monsif Hmouri: بين الأخلاقيات التقنية والنضال من أجل العدالة | https://monsifhmouri.medium.com/monsif-hmouri-%D8%A8%D9%8A%D9%86-%D8%A7%D9%84%D8%A3%D8%AE%D9%84%D8%A7%D9%82%D9%8A%D8%A7%D8%AA-%D8%A7%D9%84%D8%AA%D9%82%D9%86%D9%8A%D8%A9-%D9%88%D8%A7%D9%84%D9%86%D8%B6%D8%A7%D9%84-%D9%85%D9%86-%D8%A3%D8%AC%D9%84-%D8%A7%D9%84%D8%B9%D8%AF%D8%A7%D9%84%D8%A9-dd651dada725?source=rss------bug_bounty-5 | MONSIF HMOURI | bug-bounty, cybersecurity, palestinian-cause, digital-activism, ethical-hacking | 19-Jan-2025 |
| Choosing Your First Program in Bug Bounties: A Beginner’s Guide | https://it4chis3c.medium.com/choosing-your-first-program-in-bug-bounties-a-beginners-guide-6b27c58316da?source=rss------bug_bounty-5 | It4chis3c | bug-bounty-writeup, bug-bounty-tips, secrets, roadmaps, bug-bounty | 19-Jan-2025 |
| How i am Starting my Bug Hunting..? | https://medium.com/@Charon19d/how-i-am-starting-my-bug-hunting-7a727e3dfb74?source=rss------bug_bounty-5 | Charon19d | hacking, learning, cybersecurity, bug-bounty, bug-hunting | 19-Jan-2025 |
| Command Injection for Beginners: From Detection to Exploitation | https://medium.com/@HackerNasr/command-injection-for-beginners-from-detection-to-exploitation-8e7816dcb53d?source=rss------bug_bounty-5 | HackerNasr | cyber-secuity, bug-bounty, information-security, security-research | 19-Jan-2025 |
| Wolf Haldenstein Data Breach Impacts 3.4 Million Individuals | https://medium.com/@wiretor/wolf-haldenstein-data-breach-impacts-3-4-million-individuals-8e567c04e0b6?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, money, ai, hacker, bug-bounty | 19-Jan-2025 |
| Star Blizzard Hackers Abuse WhatsApp to Target High-Value Diplomats | https://medium.com/@wiretor/star-blizzard-hackers-abuse-whatsapp-to-target-high-value-diplomats-beed8a06a0ec?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, hacker, money, bug-bounty, malware | 19-Jan-2025 |
| CVE-2024–57767: Critical Server-Side Request Forgery (SSRF) Vulnerability | https://medium.com/@wiretor/cve-2024-57767-critical-server-side-request-forgery-ssrf-vulnerability-722db6cbba17?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ai, bug-bounty, money, ssrf | 19-Jan-2025 |
| How I Found a SQL Injection Vulnerability in website | https://medium.com/@Bl4cky/how-i-found-a-sql-injection-vulnerability-in-website-56a8b2b1edab?source=rss------bug_bounty-5 | Bl4cky | penetration-testing, sqlmap, bug-bounty, sql-injection, pentest | 19-Jan-2025 |
| API Testing | https://0xy37.medium.com/api-testing-9de53e7736d3?source=rss------bug_bounty-5 | Yara AlHumaidan (0xy37) | bug-bounty, security, api, api-testing | 19-Jan-2025 |
| From Low to Whoa: Elevating a P5 SSRF to a P3 | https://medium.com/@loayahmed686/from-low-to-whoa-elevating-a-p5-ssrf-to-a-p3-6db1afdbde4c?source=rss------bug_bounty-5 | r00t | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 19-Jan-2025 |
| How Did a Simple Path Traversal to RCE Bug Land Me $40K? | https://medium.com/@ibtissamhammadi/how-did-a-simple-path-traversal-to-rce-bug-land-me-40k-e20aecb162b0?source=rss------bug_bounty-5 | Ibtissam Hammadi | cybersecurity, information-security, ethical-hacking, bug-bounty | 18-Jan-2025 |
| The Road to CRTP Cert — Part 16 | https://medium.com/@dineshkumaar478/the-road-to-crtp-cert-part-16-edc129cf1277?source=rss------bug_bounty-5 | Dineshkumaar R | pentesting, hacking, cybersecurity, active-directory, bug-bounty | 18-Jan-2025 |
| How to Stay Anonymous While Doing OSINT | https://medium.com/@paritoshblogs/how-to-stay-anonymous-while-doing-osint-519f607fa79d?source=rss------bug_bounty-5 | Paritosh | threat-intelligence, osint, hacking, bug-bounty, chatgpt | 18-Jan-2025 |
| Bug Bounty | Privilege Escalation From Admin To Owner | https://medium.com/@yog_sahare/bug-bounty-privilege-escalation-from-admin-to-owner-90d86e2395e6?source=rss------bug_bounty-5 | Yog Sahare | bug-bounty, bug-bounty-writeup, privilege-escalation, vulnerability, idor-vulnerability | 18-Jan-2025 |
| Google XSS Game | https://medium.com/@PhilopaterSh/google-xss-game-6dbd1c8b3eb8?source=rss------bug_bounty-5 | Philopater Shenouda | google-xss-game, xss-attack, xss-challenge, web-penetration-testing, bug-bounty | 18-Jan-2025 |
| AI-Powered Recon: Unearthing PII from Non-English Files | https://bunny0417.medium.com/ai-powered-recon-unearthing-pii-from-non-english-files-4bf9e91e6b6b?source=rss------bug_bounty-5 | Aayush kumar | bugbounty-writeup, infosec, bug-bounty-tips, bug-bounty, ai-security | 18-Jan-2025 |
| This 200 Dorks cheats can change your life. | https://medium.com/@anandrishav2228/this-200-dorks-cheats-can-change-your-life-13217162aba4?source=rss------bug_bounty-5 | Rishav anand | hacking, bug-bounty, money, google-dork, cybersecurity | 18-Jan-2025 |
| Threat Hunting Tool: Email Analyzer | https://hackerassociate.medium.com/threat-hunting-tool-email-analyzer-19518c7d2645?source=rss------bug_bounty-5 | Harshad Shah | infosec, bug-bounty, cyberattack, threat-hunting, cybersecurity | 18-Jan-2025 |
| WIFI Hacking , user and password hacking [How hackers get Password of any wifi network] | https://medium.com/@hrofficial62/wifi-hacking-user-and-password-hacking-how-hackers-get-password-of-any-wifi-network-015ae6575bed?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, hacking, wifi, cybersecurity, pentesting | 18-Jan-2025 |
| Comprehensive Scripts for Red teaming | https://saconychukwu.medium.com/comprehensive-scripts-for-red-teaming-72c3d2980369?source=rss------bug_bounty-5 | Sacony Chukwu | hacking, cybersecurity, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 18-Jan-2025 |
| Basic Linux Commands Every Newbie Bug Bounty Hunter Should Know | https://bitpanic.medium.com/basic-linux-commands-every-newbie-bug-bounty-hunter-should-know-d990da113f1c?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, bug-bounty-tips, bug-bounty, technology, programming | 18-Jan-2025 |
| Unlocking the Doors: How I Took Over Accounts with a Single Flaw! | https://medium.com/@omdubey170/unlocking-the-doors-how-i-took-over-accounts-with-a-single-flaw-239900ab5ee9?source=rss------bug_bounty-5 | Omdubey | bug-bounty-tips, bug-bounty-writeup, bugs, cybersecurity, bug-bounty | 18-Jan-2025 |
| Re-captcha token generating secret key leaking identified via way back machine | https://medium.com/@swaroopvenkat828/re-captcha-token-generating-secret-key-leaking-identified-via-way-back-machine-8b7fc04e90f8?source=rss------bug_bounty-5 | swaroop 04|16 | bug-bounty, wayback-machine, bug-bounty-writeup, bugbounty-tips, sensitive-information | 18-Jan-2025 |
| Master Bug Bounty Recon: Using GoWitness and Eyeballer to Uncover Juicy Subdomains | https://medium.com/@hacker_might/master-bug-bounty-recon-using-gowitness-and-eyeballer-to-uncover-juicy-subdomains-c7f79a3f3d06?source=rss------bug_bounty-5 | hacker_might | recon, bug-bounty-tips, tools, bug-bounty, reconnaissance | 18-Jan-2025 |
| Game Real-Time Communication Is Vulnerability higher impact than XSS and ATO | https://medium.com/@bylyblyblybly/game-real-time-communication-is-vulnerability-higher-impact-than-xss-and-ato-c3d6b9ba77e5?source=rss------bug_bounty-5 | Bylyblyblybly | bug-bounty, gamehacking, android-bugs, cyper-security, android-security | 18-Jan-2025 |
| Stored XSS to Admin in Unauthenticated-WordPress | https://infosecwriteups.com/stored-xss-to-admin-in-unauthenticated-wordpress-cb76bae66623?source=rss------bug_bounty-5 | c0d3x27 | bug-bounty, javascript, cybersecurity, hacking, software-development | 18-Jan-2025 |
| Tools Used by Bug Bounty Hunters: A Comprehensive Guide | https://medium.com/@ajudeb55/tools-used-by-bug-bounty-hunters-a-comprehensive-guide-c5286a0da36a?source=rss------bug_bounty-5 | Aju Deb | cybersecurity, bug-bounty, hacking, programming, python | 18-Jan-2025 |
| IDOR to Partial Access and ACCOUNT TAKEOVER in a Top 5 Cloud Storage Platform | https://q19.medium.com/idor-to-partial-access-and-account-takeover-in-a-top-5-cloud-storage-platform-844707a2cc01?source=rss------bug_bounty-5 | Q19 | hacking, security, bug-bounty, vulnerability | 18-Jan-2025 |
| Otelier Data Breach Exposes Info, Hotel Reservations of Millions | https://medium.com/@wiretor/otelier-data-breach-exposes-info-hotel-reservations-of-millions-14e75e47e589?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, ai, malware, breach, bug-bounty | 18-Jan-2025 |
| Malicious PyPi Package Steals Discord Auth Tokens from Developers | https://medium.com/@wiretor/malicious-pypi-package-steals-discord-auth-tokens-from-developers-2a6707bb84f7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ai, money, bug-bounty, python | 18-Jan-2025 |
| Tool Overview | https://xss0r.medium.com/tool-overview-6c255fe7ec9b?source=rss------bug_bounty-5 | xss0r | xss0, bug-bounty, xss0rrecon, recon | 18-Jan-2025 |
| Find First Bug for Beginner Bounty Hunters | https://infosecwriteups.com/find-first-bug-for-beginner-bounty-hunters-533f2da9dab1?source=rss------bug_bounty-5 | Mr Horbio | hacking, ethical-hacking, pentesting, bug-bounty, cybersecurity | 18-Jan-2025 |
| WIFI Hacking , user and password hacking [How hackers get Password of any wifi network] | https://infosecwriteups.com/wifi-hacking-user-and-password-hacking-how-hackers-get-password-of-any-wifi-network-015ae6575bed?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, hacking, wifi, cybersecurity, pentesting | 18-Jan-2025 |
| Zero Click Account Takeover — JWT Token Manipulation via Programs HackerOne | https://medium.com/@HackerPlus/zero-click-account-takeover-jwt-token-manipulation-via-programs-hackerone-07da3868ada9?source=rss------bug_bounty-5 | HackerPlus+ | bugcrowd, js, hackerone, jwt, bug-bounty | 18-Jan-2025 |
| Cross-Site Scripting (XSS) attacks | https://medium.com/@rishuraj2666/cross-site-scripting-xss-attacks-cbb84d7f912d?source=rss------bug_bounty-5 | Rishuraj | xss-vulnerability, cybersecurity, security-researchers, hacking, bug-bounty | 18-Jan-2025 |
| S3Bucket Enumeration and Takeover | https://medium.com/@sahusujal.dev2004/s3bucket-enumeration-and-takeover-f1ff24ad8187?source=rss------bug_bounty-5 | Sujal Sahu | bug-bounty, s3-bucket, cybersecurity, information-disclosure, bucket-takeover | 18-Jan-2025 |
| How I Discovered a Password Reset Vulnerability on a Web Application | https://medium.com/@Dorking1/how-i-discovered-a-password-reset-vulnerability-on-a-web-application-14fe29f9499c?source=rss------bug_bounty-5 | Dorking1 | penetration-testing, bug-bounty, cybersecurity | 18-Jan-2025 |
| Day 2 — Hacker101 MicroCMS v1 Flag 3 Write-Up | https://medium.com/@devinmack39/hacker101-microcms-v1-flag-3-write-up-db82e442b922?source=rss------bug_bounty-5 | Devin McCullum | appsec, learning, bug-bounty | 17-Jan-2025 |
| Critical Vulnerability Alert: CVE-2025-22949 – Tenda AC9 Router Command Injection | https://medium.com/@muhammetalgan3547/critical-vulnerability-alert-cve-2025-22949-tenda-ac9-router-command-injection-3fe10252a835?source=rss------bug_bounty-5 | Muhammet ALGAN | bug-bounty, network-security, hacking, vulnerability, cybersecurity | 17-Jan-2025 |
| Android Intent Redirection: A Hacker’s Gateway to Internal Components | https://medium.com/@0x3adly/android-intent-redirection-a-hackers-gateway-to-internal-components-ebe126bbb2e0?source=rss------bug_bounty-5 | Anas Eladly ( 0x3adly ) | cybersecurity, bug-bounty, mobile-security, penetration-testing, android | 17-Jan-2025 |
| One More Easy Bug | HTML Injection | https://medium.com/@kumawatabhijeet2002/one-more-easy-bug-html-injection-4279fccabbc6?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, money, bug-bounty, hacking, bug-bounty-tips | 17-Jan-2025 |
| One More Easy Bug | HTML Injection | https://cybersecuritywriteups.com/one-more-easy-bug-html-injection-4279fccabbc6?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, money, bug-bounty, hacking, bug-bounty-tips | 17-Jan-2025 |
| Stored DOM-based XSS Vulnerability on VPSServer.com | https://medium.com/@hasanfahad769/stored-dom-based-xss-vulnerability-on-vpsserver-com-f96980104e4b?source=rss------bug_bounty-5 | Fahad Hossain | bug-bounty, cybersecurity, web-security-testing | 17-Jan-2025 |
| Focusing on Expired Sessions to Uncover IDOR Vulnerabilities | https://medium.com/@alvinbijo_174/focusing-on-expired-sessions-to-uncover-idor-vulnerabilities-75f5055c7452?source=rss------bug_bounty-5 | session-x | bugs, bug-bounty, bug-bounty-tips, bugbounting, bugbounty-writeup | 17-Jan-2025 |
| Collected XSS Payloads ⛏✌️⬇️ | https://medium.com/@alvinbijo_174/collected-xss-payloads-%EF%B8%8F-%EF%B8%8F-da7df1be4bbb?source=rss------bug_bounty-5 | session-x | hacking, bugbounty-tips, idor, bugbounty-writeup, bug-bounty | 17-Jan-2025 |
| Privilege Escalation in 5 minutes: When you’re just one URL away from becoming the Boss… | https://medium.com/@forte.social/privilege-escalation-in-5-minutes-when-youre-just-one-url-away-from-becoming-the-boss-32a1f0934a0b?source=rss------bug_bounty-5 | eSecForte | bug-bounty, bugbounty-tips, hacking, privilege-escalation, web-app-security | 17-Jan-2025 |
| Account Takeover: Trading OAuth Codes for fun and profit | https://medium.com/@sazouki/account-takeover-trading-oauth-codes-for-fun-and-profit-f65463e9a6c9?source=rss------bug_bounty-5 | Sazouki | bugbounty-writeup, bug-bounty | 17-Jan-2025 |
| Hacker101 MicroCMS v1 Flag 3 Write-Up | https://medium.com/@devinmack39/hacker101-microcms-v1-flag-3-write-up-db82e442b922?source=rss------bug_bounty-5 | Devin McCullum | appsec, learning, bug-bounty | 17-Jan-2025 |
| Why You Should Start a Bug Bounty Program for Your Mobile Applications | https://medium.com/@hackrate/why-you-should-start-a-bug-bounty-program-for-your-mobile-applications-a476c3646978?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, bug-bounty, ethical-hacking, bug-bounty-tips, hacking | 17-Jan-2025 |
| XSS: Bypass CloudFront WAF | https://medium.com/@n45ht/xss-bypass-cloudfront-waf-9d0c8a12dc33?source=rss------bug_bounty-5 | N45HT | bug-bounty-writeup, cross-site-scripting, xs, bug-bounty-tips, bug-bounty | 17-Jan-2025 |
| How I Hacked Hackers Account | https://0xshuvo.medium.com/how-i-hacked-hackers-account-d5409b095133?source=rss------bug_bounty-5 | Shuvo Kumar Saha | bugbounty-writeup, idor, infose, bug-bounty, bugbounty-tips | 17-Jan-2025 |
| Account Takeover via IDOR form JWT Programs HackerOne 2500$ | https://medium.com/@HackerPlus/account-takeover-via-idor-form-jwt-programs-hackerone-2500-0a378fe2c951?source=rss------bug_bounty-5 | HackerPlus+ | hackerone, hacker, bug-hunting, bugcrowd, bug-bounty | 17-Jan-2025 |
| The rise of scammer bug bounty programs — and the reason I quit bug bounty hunting. | https://medium.com/@brotheralameen/the-rise-of-scammer-bug-bounty-programs-and-the-reason-i-quit-bug-bounty-hunting-4cc661c92e09?source=rss------bug_bounty-5 | Alameen Karim Merali | bugs, bug-bounty-writeup, bug-bounty, bug-bounty-tips, cybersecurity | 17-Jan-2025 |
| Leaking PII at Scale: How Third Parties Can Unintentionally Put Your Data at Risk. | https://medium.com/@omarahmed_13016/leaking-pii-at-scale-how-third-parties-can-unintentionally-put-your-data-at-risk-6101fcb3d5e0?source=rss------bug_bounty-5 | Omar Ahmed | hacking, writeup, vulnerability, hackerone, bug-bounty | 17-Jan-2025 |
| Web Directory Free Plugin <= 1.7.2: Unauthenticated LFI Exploit (CVE-2024-3673) | https://bashoverflow.medium.com/web-directory-free-plugin-1-7-2-unauthenticated-lfi-exploit-cve-2024-3673-f3721f79477d?source=rss------bug_bounty-5 | Bash Overflow | cve-2024-3673, unauthenticated-lfi, bug-bounty, bug-bounty-tips, exploiting-lfi | 17-Jan-2025 |
| US Sanctions Chinese Firm and Hacker Behind Treasury and Telecom Hacks | https://medium.com/@wiretor/us-sanctions-chinese-firm-and-hacker-behind-treasury-and-telecom-hacks-c25cfb0ae32a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, money, ai, hacking, malware | 17-Jan-2025 |
| US Cracks Down on North Korea’s IT Worker Army with New Sanctions | https://medium.com/@wiretor/us-cracks-down-on-north-koreas-it-worker-army-with-new-sanctions-e95efd40850a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, north, malware, money, ai | 17-Jan-2025 |
| W3 Total Cache Plugin Flaw Exposes Over 1 Million WordPress Sites to Attacks | https://medium.com/@wiretor/w3-total-cache-plugin-flaw-exposes-over-1-million-wordpress-sites-to-attacks-15e0b6ace4e0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, marketing, ai, malware, hacker | 17-Jan-2025 |
| 100 Free Tools To Supercharge Your Bug Bounty Journey | https://bitpanic.medium.com/100-free-tools-to-supercharge-your-bug-bounty-journey-747ffb5d4bef?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, bug-bounty, bug-bounty-tips, programming, technology | 17-Jan-2025 |
| Finding a easy p4 it can be worth 200$ | https://medium.com/infosecmatrix/finding-a-easy-p4-it-can-be-worth-200-5d65a9faad0b?source=rss------bug_bounty-5 | loyalonlytoday | hacking, ethical-hacking, bugs, bug-bounty, cybersecurity | 16-Jan-2025 |
| Day One — HACKER 101 MicroCMS v1 Flag 1 — CTF | https://medium.com/@devinmack39/day-one-hacker-101-microcms-v1-flag-1-ctf-eb606905eea7?source=rss------bug_bounty-5 | Devin McCullum | bug-bounty, web-app-security, learning-and-development, ctf-writeup, sql-injection | 16-Jan-2025 |
| This is The Easiest Bug You Can Find✨ | https://cybersecuritywriteups.com/this-is-the-easiest-bug-you-can-find-feadc3ef95a5?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, hacking, infosec, easy | 16-Jan-2025 |
| Capturing of Network Traffic Using Wireshark Tool | https://mhmmuneef.medium.com/capturing-of-network-traffic-using-wireshark-tool-09a9926f18dd?source=rss------bug_bounty-5 | Mohammed Muneef | networking, cybersecurity, technology, bug-bounty, hacking | 16-Jan-2025 |
| Kicking Off 2025: Findings on U.S. Department of Energy | https://cybersecuritywriteups.com/kicking-off-2025-findings-on-u-s-department-of-energy-a92149e43102?source=rss------bug_bounty-5 | Guru Prasad Pattanaik || TH3N00BH4CK3R | ethical-hacking, bug-bounty, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 16-Jan-2025 |
| How to Tackle Vulnerable JavaScript Dependencies: Lessons from the Kerala Government Website | https://medium.com/@ashwin74/how-to-tackle-vulnerable-javascript-dependencies-lessons-from-the-kerala-government-website-220722709ac4?source=rss------bug_bounty-5 | ASHWIN KUMAR | bug-bounty-tips, bug-bounty-writeup, bug-bounty, cybersecurity, javascript | 16-Jan-2025 |
| Bug Bounty is live: Code breakers, welcome to Apillon! | https://blog.apillon.io/bug-bounty-is-live-code-breakers-welcome-to-apillon-6dd4ff40fc82?source=rss------bug_bounty-5 | Apillon | apillon-news, web3, bug-bounty, web3-development, rewards-programs | 16-Jan-2025 |
| Cybersecurity with AI Roadmap in 2025 | https://medium.com/@anandrishav2228/cybersecurity-with-ai-roadmap-in-2025-25ced0372d5b?source=rss------bug_bounty-5 | Rishav anand | roadmaps, hacking, ai, bug-bounty, cybersecurity | 16-Jan-2025 |
| My first step into Bug Bounty | https://medium.com/@n4itr0_07/my-first-step-into-bug-bounty-718d967e0576?source=rss------bug_bounty-5 | N4!TR0 07 | bug-bounty-writeup, sql-injection, bug-bounty-tips, security, bug-bounty | 16-Jan-2025 |
| Hack The Box Curling Writeup:[Linux][Retired] | https://medium.com/@vignesh6872610/hack-the-box-curling-writeup-linux-retired-7be2cc094707?source=rss------bug_bounty-5 | Vignesh P | bug-bounty-tips, hackthebox-writeup, retiredmachine, hackthebox, bug-bounty | 16-Jan-2025 |
| CISA Adds Two New Actively Exploited Vulnerabilities to Known Exploited Vulnerabilities Catalog | https://medium.com/@shalomo.social/cisa-adds-two-new-actively-exploited-vulnerabilities-to-known-exploited-vulnerabilities-catalog-023c1bd81754?source=rss------bug_bounty-5 | Shalomo Agarwarkar | cybersecurity, data-science, business, programming, bug-bounty | 16-Jan-2025 |
| Using Full potential of Virustotal for Bugbounty | https://osintteam.blog/using-full-potential-of-virustotal-for-bugbounty-51d27750f588?source=rss------bug_bounty-5 | loyalonlytoday | hacking, bug-bounty, bugs, ethical-hacking, cybersecurity | 16-Jan-2025 |
| A Journey of Limited Path Traversal To RCE With $40,000 Bounty! | https://medium.com/@HX007/a-journey-of-limited-path-traversal-to-rce-with-40-000-bounty-fc63c89576ea?source=rss------bug_bounty-5 | HX007 | programming, hacking, cybersecurity, security, bug-bounty | 16-Jan-2025 |
| OTP BYPASS TECHNIQUE its My StOry [sweet and sour] | https://medium.com/infosec-notes/otp-bypass-technique-its-my-story-sweet-and-sour-3e96b9eb63a0?source=rss------bug_bounty-5 | Mr Horbio | pentesting, hacking, bug-bounty, cybersecurity, ethical-hacking | 16-Jan-2025 |
| Java Script file analysis to find bugs | https://medium.com/@hrofficial62/java-script-file-analysis-to-find-bugs-1fb865fee83e?source=rss------bug_bounty-5 | Mr Horbio | ethical-hacking, pentesting, bug-bounty, hacking, cybersecurity | 16-Jan-2025 |
| Bug Bounty Unlocked: Secrets, Strategies, and Mindset Hacks for Success | https://it4chis3c.medium.com/bug-bounty-unlocked-secrets-strategies-and-mindset-hacks-for-success-e5d94a632220?source=rss------bug_bounty-5 | It4chis3c | mindset, secrets, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 16-Jan-2025 |
| Bounty Hunters Take Note: How Leaked Zoom Links Can Unveil Security Flaws | https://bevijaygupta.medium.com/bounty-hunters-take-note-how-leaked-zoom-links-can-unveil-security-flaws-9f524423b5bc?source=rss------bug_bounty-5 | Vijay Kumar Gupta | zoom-meetings, securityflaw, bug-bounty, security, zoom | 16-Jan-2025 |
| Hackers Leak Configs and VPN Credentials for 15,000 FortiGate Devices | https://medium.com/@wiretor/hackers-leak-configs-and-vpn-credentials-for-15-000-fortigate-devices-c9586b6e6051?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, money, vpn, hacker, bug-bounty | 16-Jan-2025 |
| How to pass EMAPT exam | https://medium.com/@nomad8061/how-to-pass-emapt-exam-78bed982d061?source=rss------bug_bounty-5 | Ahmed Badry | ine, bug-bounty, bug-bounty-writeup, bug-bounty-tips, emapt | 16-Jan-2025 |
| Exploring CORS Misconfiguration Vulnerabilities in Modern Applications | https://rootast.medium.com/exploring-cors-misconfiguration-vulnerabilities-in-modern-applications-def492a23e95?source=rss------bug_bounty-5 | Arash Shahbazi | cross-origin-resource, pentest, owasp-top-10, web-application-security, bug-bounty | 16-Jan-2025 |
| The Top 8 Kali Linux Tools For 2025 | https://mhmmuneef.medium.com/the-top-8-kali-linux-tools-for-2025-d5904319b1d7?source=rss------bug_bounty-5 | Mohammed Muneef | bug-bounty, technology, hacking, kali-linux, cybersecurity | 16-Jan-2025 |
| What You Can Expect: A Personal Introduction and Blog Overview | https://medium.com/@T3chnocr4t/what-you-can-expect-a-personal-introduction-and-blog-overview-3a0a6cc984f6?source=rss------bug_bounty-5 | T3chnocr4t | bug-bounty-writeup, writeup, bug-bounty-tips, cybersecurity, bug-bounty | 15-Jan-2025 |
| Metasploit for Beginners — A Guide to the Powerful Exploitation Framework | https://medium.com/@manishmshiva/metasploit-for-beginners-a-guide-to-the-powerful-exploitation-framework-a8b4245c8893?source=rss------bug_bounty-5 | Manish Shivanandhan | cybersecurity, bug-bounty, penetration-testing, metasploit, ethical-hacking | 15-Jan-2025 |
| Hack with your mind! That’s enough? | https://osintteam.blog/hack-with-your-mind-thats-enough-1c6b645d1384?source=rss------bug_bounty-5 | Abu Hurayra | infosec, ethical-hacking, cybersecurity, bug-bounty, hacking | 15-Jan-2025 |
| NTLM Auth Disclosing Internal System Info via HTTP/2 to HTTP/1.1 Downgrade | https://medium.com/meetcyber/ntlm-auth-disclosing-internal-system-info-via-http-2-to-http-1-1-downgrade-603cc35c2dc4?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, cybersecurity, bug-bounty, infosec, vulnerability | 15-Jan-2025 |
| kya medium account jo suspend ho giya vo vapes aya ga .?? | https://medium.com/@subhash_9358/kya-medium-account-jo-suspend-ho-giya-vo-vapes-aya-ga-1d480676922e?source=rss------bug_bounty-5 | Schoudhary | bug-bounty, culture, cryptocurrency, business, artificial-intelligence | 15-Jan-2025 |
| Bypassing Razer’s WAF for XSS | https://medium.com/@n45ht/bypassing-razers-waf-for-xss-afcaea744ab4?source=rss------bug_bounty-5 | N45HT | bug-bounty-tips, bug-bounty-writeup, bug-bounty, xs, cross-site-scripting | 15-Jan-2025 |
| My 2nd Bounty on the Same Company Again: ¥15,000 for a Medium Bug | https://medium.com/@dibyaranjanmohanta2806/my-2nd-bounty-on-the-same-company-again-15-000-for-a-medium-bug-e3dd70c0d40a?source=rss------bug_bounty-5 | Dibyaranjanmohanta | money, currency, reporting, bug-bounty, japan | 15-Jan-2025 |
| Exploiting IDOR in a Support Portal Chatbot | https://infosecwriteups.com/exploiting-idor-in-a-support-portal-chatbot-f1d0617bace1?source=rss------bug_bounty-5 | Supun Halangoda (Suppa) | bug-bounty, idor-vulnerability, bugbounty-tips, cybersecurity | 15-Jan-2025 |
| EMC Mainnet Is Live! Join the Bug Bounty Blitz Program and Earn Rewards! | https://medium.com/@EdgeMatrixChain/emc-mainnet-is-live-join-the-bug-bounty-blitz-program-and-earn-rewards-f309b16ee396?source=rss------bug_bounty-5 | EMC ( Edge Matrix Chain) | ai, mainnet, depin, emc, bug-bounty | 15-Jan-2025 |
| Stored XSS Found in Query Parameters of dhtmlxGrid.js on NASA.gov Subdomain (P3) | https://medium.com/@aleenscode/stored-xss-found-in-query-parameters-of-dhtmlxgrid-js-on-nasa-gov-subdomain-p3-2b343fa5f045?source=rss------bug_bounty-5 | Aleenscode | bug-bounty, hackerone, bugcrowd, cross-site-scripting, cybersecurity | 15-Jan-2025 |
| User Enumeration: From Overlooked to Medium-Impact Bug | https://infosecwriteups.com/user-enumeration-from-overlooked-to-medium-impact-bug-48bbefa2ab3b?source=rss------bug_bounty-5 | callgh0st | genocide, bug-bounty, hacking, email, palestine | 15-Jan-2025 |
| The Future of Bug Bounty and Penetration Testing | https://medium.com/@hackrate/the-future-of-bug-bounty-and-penetration-testing-bce3f23cb095?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, penetration-testing, ethical-hacking, hacking, cybersecurity | 15-Jan-2025 |
| I found Reflected XSS on another university’s website | https://medium.com/@Bl4cky/hunting-reflected-xss-uncovering-vulnerabilities-on-university-websites-daa6c5ac790d?source=rss------bug_bounty-5 | Bl4cky | xss-attack, pentest, reflected-xss, bug-bounty | 15-Jan-2025 |
| What Is Bug Bounty Hunting? A Complete Guide | https://medium.com/@atnoforcybersecurity/what-is-bug-bounty-hunting-a-complete-guide-58f7019e5871?source=rss------bug_bounty-5 | ATNO For Cybersecurity | Hacking | bug-bounty, hacking, network-security, cybersecurity | 15-Jan-2025 |
| Allstate Faces Lawsuit for Tracking Drivers Without Permission | https://medium.com/@wiretor/allstate-faces-lawsuit-for-tracking-drivers-without-permission-e53b2cf5ed6b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, malware, money, hacker, bug-bounty | 15-Jan-2025 |
| Web Cache Poisoning: Turning Speed into a Security Nightmare | https://medium.com/@bughunt.bochi/web-cache-poisoning-turning-speed-into-a-security-nightmare-b2cde92e1036?source=rss------bug_bounty-5 | Bochixx | cyber-security-awareness, ethical-hacking, vulnerability, bug-bounty, web-cache-poisoning | 15-Jan-2025 |
| Zero Day Alert: Google OAuth Flaw Could Expose Abandoned Accounts | https://medium.com/@wiretor/zero-day-alert-google-oauth-flaw-could-expose-abandoned-accounts-40dbaa77260d?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, money, bug-bounty, zero-day, business | 15-Jan-2025 |
| FBI Deletes Chinese PlugX Malware from Thousands of US Computers | https://medium.com/@wiretor/fbi-deletes-chinese-plugx-malware-from-thousands-of-us-computers-f212a3f27f14?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, ai, hacker, fbi, money | 15-Jan-2025 |
| Basics of Bypassing Authentication Mechanisms | https://bitpanic.medium.com/cracking-the-code-how-hackers-bypass-authentication-mechanisms-efa9a09f41ea?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, bug-bounty-tips, technology, cybersecurity, programming | 15-Jan-2025 |
| How I Found and Reported a Critical Credential Stuffing Bug Worth $2000 | https://medium.com/@sc128496/how-i-found-and-reported-a-critical-credential-stuffing-bug-worth-2000-a76d3b4eebb2?source=rss------bug_bounty-5 | Sahil Choudhary | technology, information-security, hacking, cybersecurity, bug-bounty | 15-Jan-2025 |
| how I found a Google map it’s worth 300$ | https://cybersecuritywriteups.com/how-i-found-a-google-map-its-worth-300-99da8061fc67?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, bug-bounty, ethical-hacking, hacking, bugs | 15-Jan-2025 |
| Best Resources for Learning Cybersecurity: A Student’s Guide | https://medium.com/@himzyoti.talukdar1234/best-resources-for-learning-cybersecurity-a-students-guide-002694679378?source=rss------bug_bounty-5 | Himjyoti talukdar | penetration-testing, ctf, infosec, bug-bounty, cybersecurity | 15-Jan-2025 |
| How i found RXSS in href Attribute | https://medium.com/@mohaned0101/how-i-found-rxss-in-href-attribute-13a85e4e2c4d?source=rss------bug_bounty-5 | mohaned alkhlot | xss-attack, bug-bounty, bug-bounty-tips, xss-vulnerability | 15-Jan-2025 |
| Account Takeover in Mobile Apps: How to Exploit Vulnerabilities | https://medium.com/meetcyber/account-takeover-in-mobile-apps-how-to-exploit-vulnerabilities-dc1b55ef6891?source=rss------bug_bounty-5 | Erkan Kavas | account-take-over, mobile-app-development, phishing, bug-bounty, cybersecurity | 15-Jan-2025 |
| Tips to find Stored XSS [Bug_Bounty_Tips] | https://medium.com/infosec-notes/tips-to-find-stored-xss-bug-bounty-tips-86cb62a529c8?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty, xss-attack, bugbounty-writeup, cybersecurity, pentesting | 14-Jan-2025 |
| OWASP Top 10 Testing Guide V4 Checklist | https://medium.com/@enigma_/owasp-top-10-testing-guide-v4-checklist-02448c971539?source=rss------bug_bounty-5 | enigma_ | owasp, oscp, infosec, cybersecurity, bug-bounty | 14-Jan-2025 |
| The Road to CRTP Cert — Part 15 | https://medium.com/@dineshkumaar478/the-road-to-crtp-cert-part-15-d9ab41f827a4?source=rss------bug_bounty-5 | Dineshkumaar R | cybersecurity, bug-bounty, active-directory, hacking, offensive-security | 14-Jan-2025 |
| OWASP Top 10 Testing Guide V4 Checklist | https://infosecwriteups.com/owasp-top-10-testing-guide-v4-checklist-02448c971539?source=rss------bug_bounty-5 | enigma_ | owasp, oscp, infosec, cybersecurity, bug-bounty | 14-Jan-2025 |
| Mobile Pentesting Tools | https://hackerassociate.medium.com/mobile-pentesting-tools-479b797cd6a5?source=rss------bug_bounty-5 | Harshad Shah | cybersecurity, infosec, pentesting, bug-bounty, mobile-app-development | 14-Jan-2025 |
| From Zero to Bounty — My Journey as a Bug Hunter | https://medium.com/@joaovmb15/from-zero-to-bounty-my-journey-as-a-bug-hunter-44d2bd63f657?source=rss------bug_bounty-5 | 0xJotave | bug-hunter, bug-hunting, cybersecurity, bug-bounty | 14-Jan-2025 |
| Nmap Cheat Sheet: Essential Commands and Advanced Techniques for Scanning | https://medium.com/@verylazytech/nmap-cheat-sheet-essential-commands-and-advanced-techniques-for-scanning-2274e21654e0?source=rss------bug_bounty-5 | Very Lazy Tech | oscp, vulnerability, cybersecurity, nmap, bug-bounty | 14-Jan-2025 |
| Reflected XSS protected by very strict CSP, with dangling markup attack (Port Swigger XSS Lab) | https://medium.com/@hackllego/reflected-xss-protected-by-very-strict-csp-with-dangling-markup-attack-port-swigger-xss-lab-e8811c2e476d?source=rss------bug_bounty-5 | Hackllego | bug-hunting, pentesting, bug-bounty, bug-bounty-tips, web-security | 14-Jan-2025 |
| Simple Tips for Bug Bounty Beginners: Finding Open AWS S3 buckets, impact, and causes | https://medium.com/@anishnarayan/simple-tips-for-bug-bounty-beginners-finding-open-aws-s3-buckets-impact-and-causes-52f252bcddfa?source=rss------bug_bounty-5 | Anish Narayan | cybersecurity, bug-bounty-writeup, programming, bug-bounty-tips, bug-bounty | 14-Jan-2025 |
| Improper Authentication in a famous Trading website | https://medium.com/@anonymousshetty2003/improper-authentication-in-a-famous-trading-website-0ffd27fb665e?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, otp-bypass, cybersecurity, ethical-hacking, improper-access-control | 14-Jan-2025 |
| How I found an account take over by session fixation (Bugbounty) | https://medium.com/@leomsec/how-i-found-an-account-take-over-by-session-fixation-bugbounty-f2551f19be3e?source=rss------bug_bounty-5 | Leonardo | hacking, hacker, bug-bounty-tips, bug-bounty, web-hacking | 14-Jan-2025 |
| Bug Bounty Programs: YES or NO? | https://medium.com/@hackrate/bug-bounty-programs-yes-or-no-6b866eea8b01?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, bug-bounty-tips, hacking, cybersecurity, bug-bounty | 14-Jan-2025 |
| Day 4. The 100-Day Bug Bounty Challenge: Understanding SQL Injection Classic(In-band) | https://mahhesshh.medium.com/day-4-the-100-day-bug-bounty-challenge-understanding-sql-injection-classic-in-band-2b8854d2e0e5?source=rss------bug_bounty-5 | Mahesh Dhakad | hacking, sql-injection, bug-bounty, sqli, cybersecurity | 14-Jan-2025 |
| 7 Ways to Be Better at Bug Bounty Hunting | https://bitpanic.medium.com/7-ways-to-be-better-at-bug-bounty-hunting-7eae956e500d?source=rss------bug_bounty-5 | Spectat0rguy | technology, bug-bounty-tips, programming, bug-bounty, cybersecurity | 14-Jan-2025 |
| Improper Authentication in a famous Trading website | https://medium.com/@anonymousshetty2003/improper-authentication-in-a-famous-trading-website-0ffd27fb665e?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, cybersecurity, ethical-hacking, improper-access-control, bug-bounty-tips | 14-Jan-2025 |
| How to Use Wireshark: Comprehensive Tutorial + Tips | https://mhmmuneef.medium.com/how-to-use-wireshark-comprehensive-tutorial-tips-24252ed2673d?source=rss------bug_bounty-5 | Mohammed Muneef | bug-bounty, wireshark, cybersecurity, hacking, technology | 14-Jan-2025 |
| Guía: instalación de VM + Kali | https://medium.com/@mon.cybersec/gu%C3%ADa-instalaci%C3%B3n-de-vm-kali-fb7230a5263c?source=rss------bug_bounty-5 | Mon Works | kali-linux, hacking, virtualbox, ciberseguridad, bug-bounty | 14-Jan-2025 |
| The Definitive Guide to GitHub Recon: Lessons from Analyzing 100+ Reports | https://medium.com/@iamakashce19010/the-definitive-guide-to-github-recon-lessons-from-analyzing-100-reports-bd5d4891a815?source=rss------bug_bounty-5 | Akash | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 14-Jan-2025 |
| From Containers to Host: Privilege Escalation Techniques in Docker | https://medium.com/@kankojoseph4/from-containers-to-host-privilege-escalation-techniques-in-docker-487fe2124b8e?source=rss------bug_bounty-5 | Joseph "Sk4r1” KANKO | bug-bounty, cybersecurity, hacking, ethical-hacking, docker | 13-Jan-2025 |
| Hire a hacker | https://medium.com/@carl19722401/hire-a-hack-c54710808c3c?source=rss------bug_bounty-5 | Dimitris Nicholas | cybersecurity, hire-a-hacker, find-a-hacker, bug-bounty, ethical-hacking | 13-Jan-2025 |
| Stored CSRF via Uploaded HTML File in User Account Document Section | https://medium.com/@dee.gholase/stored-csrf-via-uploaded-html-file-in-user-account-document-section-dbe98e9184a3?source=rss------bug_bounty-5 | Digvijay Gholase | bug-bounty-tips, bug-bounty, infosec, bug-bounty-writeup, cybersecurity | 13-Jan-2025 |
| JavaScript Recon | https://anontriager.medium.com/javascript-recon-efd981a85cfc?source=rss------bug_bounty-5 | Anonymous Traiger | jobs, cybersecurity, hacker, programming, bug-bounty | 13-Jan-2025 |
| Diving in Android Security | https://anontriager.medium.com/diving-in-android-security-a93f017b16f0?source=rss------bug_bounty-5 | Anonymous Traiger | jobs, hacking, troubleshooting, cybersecurity, bug-bounty | 13-Jan-2025 |
| Emerging Cyber Threats: The Latest Trends in Ransomware, Phishing, and APTs | https://medium.com/@paritoshblogs/emerging-cyber-threats-the-latest-trends-in-ransomware-phishing-and-apts-e3393f6410bc?source=rss------bug_bounty-5 | Paritosh | cybersecurity, ransomware, threat-intelligence, hacking, bug-bounty | 13-Jan-2025 |
| How I got my name on WHO’s Hall of Fame | https://infosecwriteups.com/how-i-got-my-name-on-whos-hall-of-fame-060d57662b16?source=rss------bug_bounty-5 | RivuDon | bug-bounty, bug-bounty-tips, cybersecurity, hall-of-fame, infosec | 13-Jan-2025 |
| Stored CSRF via Uploaded HTML File in User Account Document Section | https://jxycybersec.medium.com/stored-csrf-via-uploaded-html-file-in-user-account-document-section-dbe98e9184a3?source=rss------bug_bounty-5 | Digvijay Gholase | bug-bounty-tips, bug-bounty, infosec, bug-bounty-writeup, cybersecurity | 13-Jan-2025 |
| Remember, the key is to stay motivated at every step. | https://medium.com/@rhonnysharma783/linkedin-linkedin-com-in-rhonny-99f682300332?source=rss------bug_bounty-5 | Rhonnysharma | bug-zero, bug-bounty, bug-bounty-tips, bugs, bug-bounty-writeup | 13-Jan-2025 |
| Breaking into Jenkins for fun | https://medium.com/@24bkdoor/breaking-into-jenkins-for-fun-7070496521eb?source=rss------bug_bounty-5 | 24BkDoor | cybersecurity, jenkins, hacking, web-development, bug-bounty | 13-Jan-2025 |
| Crack the Code — Part 2 | https://it4chis3c.medium.com/crack-the-code-part-2-aeaa5055251e?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, roadmap-to-success, bug-bounty-writeup, bug-bounty-tips, roadmaps | 13-Jan-2025 |
| MASS HUNTING TO FIND XSS(CROSS SITE SCRIPTING) | https://medium.com/h7w/mass-hunting-to-find-xss-cross-site-scripting-fd8218822dca?source=rss------bug_bounty-5 | loyalonlytoday | cross-site-scripting, xss-attack, hacking, bugs, bug-bounty | 13-Jan-2025 |
| Does Your Company Need a Bug Bounty Program? | https://medium.com/@hackrate/does-your-company-need-a-bug-bounty-program-22d8dc5c1e7f?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, bug-bounty-tips, hacking, bug-bounty, cybersecurity | 13-Jan-2025 |
| This is How I Turned an Informative Bug into a Valid $500 Bug | https://infosecwriteups.com/this-is-how-i-turned-an-informative-bug-into-a-valid-500-bug-174ffeb94737?source=rss------bug_bounty-5 | Shubham Bhamare | facebook-bug-bounty, bug-bounty-tips, cybersecurity, bug-bounty, infosec | 13-Jan-2025 |
| Building Your Own Bug Bounty Lab: A Hands-On Guide with Metasploit and More | https://myselfakash20.medium.com/building-your-own-bug-bounty-lab-a-hands-on-guide-with-metasploit-and-more-9595a71fc4c6?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, bug-bounty, cybersecurity, technology, bug-bounty-writeup | 13-Jan-2025 |
| Critical Vulnerability Discovered: CVE-2025–22567 | https://medium.com/@wiretor/critical-vulnerability-discovered-cve-2025-22567-b0e4d9d852c1?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, hacker, xss-attack, hacking | 13-Jan-2025 |
| Top Hacking Tools and Skills You Need to Learn in 2025 | https://medium.com/@verylazytech/top-hacking-tools-and-skills-you-need-to-learn-in-2025-70cb90650c0f?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, hacking, bug-bounty, 2025, linux | 13-Jan-2025 |
| I Changed Someone’s Profile Picture… And They Had No Idea!! | https://infosecwriteups.com/i-changed-someones-profile-picture-and-they-had-no-idea-a1dc621d12c4?source=rss------bug_bounty-5 | Krishnadev P Melevila | bug-bounty, cybersecurity, infosec, pentesting, burp | 13-Jan-2025 |
| Bug Bounty Kültürü Neden Önemlidir? | https://medium.com/@omermertkaya/bug-bounty-k%C3%BClt%C3%BCr%C3%BC-neden-%C3%B6nemlidir-cdb126ede8cb?source=rss------bug_bounty-5 | Ömer Mert KAYA | security-awareness, cybersecurity, bug-bounty, vulnerability-management, proactive-security | 13-Jan-2025 |
| How to Make Nmap Recognize New Services | https://mhmmuneef.medium.com/how-to-make-nmap-recognize-new-services-af44e6f9c20e?source=rss------bug_bounty-5 | Mohammed Muneef | cybersecurity, technology, networking, bug-bounty | 13-Jan-2025 |
| Building Your Own Bug Bounty Lab: A Hands-On Guide with Metasploit and More | https://infosecwriteups.com/building-your-own-bug-bounty-lab-a-hands-on-guide-with-metasploit-and-more-9595a71fc4c6?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, bug-bounty, cybersecurity, technology, bug-bounty-writeup | 13-Jan-2025 |
| How To Bypass CSRF Defenses With XSS | https://medium.com/@dante.falls/how-to-bypass-csrf-defenses-with-xss-44a124b7646a?source=rss------bug_bounty-5 | Dante Falls | information-security, web-security, cybersecurity, bug-bounty | 13-Jan-2025 |
| Get Your First Bug Bounty with Burp Suite’s Match and Replace Feature | https://medium.com/@mahdisalhi0500/get-your-first-bug-bounty-with-burp-suites-match-and-replace-feature-7a32f81a3cb0?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, penetration-testing, cybersecurity, bug-bounty-tips, bug-bounty | 13-Jan-2025 |
| Methodology for Detecting IDOR Vulnerability | https://medium.com/@dogxxx10/methodology-for-detecting-idor-vulnerability-1590b14d45a9?source=rss------bug_bounty-5 | Dogx0x | bug-bounty-writeup, web-hacking, bug-bounty-tips, hacking, bug-bounty | 13-Jan-2025 |
| Bug Bounty vs VDP: Building Effective Security Programs with Hacker Collaboration | https://medium.com/@dzianisskliar29/bug-bounty-vs-vdp-building-effective-security-programs-with-hacker-collaboration-0a7db1b3f2df?source=rss------bug_bounty-5 | Dzianis Skliar | hackerone, bugcrowd, intigriti, bug-bounty, attack-surface-management | 13-Jan-2025 |
| Security Session #1 | https://medium.com/@mon.cybersec/security-session-1-9457a0f5bd27?source=rss------bug_bounty-5 | Mon Works | bug-bounty, pentesting, ciberseguridad, cybersecurity, hacking | 13-Jan-2025 |
| The Ultimate IDOR Testing Checklist | https://medium.com/@muhammetalgan3547/the-ultimate-idor-testing-checklist-ba4a7c094def?source=rss------bug_bounty-5 | Muhammet ALGAN | cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 12-Jan-2025 |
| How i Hacked into NASA & got Hall-Of-Fame, Acknowledgement -2025 | https://medium.com/@securityinsights/how-i-hacked-into-nasa-got-hall-of-fame-acknowledgement-2025-d22815f09e29?source=rss------bug_bounty-5 | Mehboob Khan | hacking, cybersecurity, nasa, ethical-hacking, bug-bounty | 12-Jan-2025 |
| How to find my first bounty $$$$$ | https://systemweakness.com/how-to-find-my-first-bounty-68ba0022dcf0?source=rss------bug_bounty-5 | Mr Horbio | pentesting, cybersecurity, hacking, ethical-hacking, bug-bounty | 12-Jan-2025 |
| How I Found This Crazy PII Data Leak Worth 500$ | https://medium.com/@sc128496/how-i-found-this-crazy-pii-data-leak-worth-500-e39d6dd19133?source=rss------bug_bounty-5 | Sahil Choudhary | outside-the-box, think-different, cybersecurity, reconnaissance, bug-bounty | 12-Jan-2025 |
| The Road to CRTP Cert — Part 14 | https://medium.com/@dineshkumaar478/the-road-to-crtp-cert-part-14-b7f9cb8bd87f?source=rss------bug_bounty-5 | Dineshkumaar R | infosec, vapt, penetration-testing, red-team, bug-bounty | 12-Jan-2025 |
| Server-Side Vulnerabilities | #5 File Upload Vulnerabilities | https://medium.com/@agapehearts/server-side-vulnerabilities-5-file-upload-vulnerabilities-7f5f68688cc7?source=rss------bug_bounty-5 | Agape HearTs | vulnerability, bug-bounty, ethical-hacking, portswigger, bugs | 12-Jan-2025 |
| 10 Best Bug Bounty Platforms to Earn Money Online | https://hackreveals.medium.com/10-best-bug-bounty-platforms-to-earn-money-online-e5b83767ac20?source=rss------bug_bounty-5 | Prakash Tiwari | bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-program, osint | 12-Jan-2025 |
| How I Got Access to Over 60,000 Traders’ Data | https://0xglss.medium.com/how-i-got-access-to-over-60-000-traders-data-b6043b2363c3?source=rss------bug_bounty-5 | 0xglss | admin-panel, account-takeover, xss-attack, bug-bounty, penetration-testing | 12-Jan-2025 |
| hunting #2 | https://medium.com/@dark_zone/hunting-2-f06b275adf5c?source=rss------bug_bounty-5 | darkzone | bug-bounty | 12-Jan-2025 |
| Day 3. The 100-Day Bug Bounty Challenge: Understanding DOM-Based XSS (Cross-Site Scripting) | https://mahhesshh.medium.com/day-2-the-100-day-bug-bounty-challenge-understanding-dom-based-xss-cross-site-scripting-96b2bf92a7f0?source=rss------bug_bounty-5 | Mahesh Dhakad | xss-attack, cybersecurity, dom-xss, bug-bounty, cross-site-scripting | 12-Jan-2025 |
| nform“SOCMINT: The Digital Crystal Ball of Cybersecurity and Beyond” | https://medium.com/@paritoshblogs/nform-socmint-the-digital-crystal-ball-of-cybersecurity-and-beyond-1dfddad6193b?source=rss------bug_bounty-5 | Paritosh | hacking, socmint, information-technology, bug-bounty, cybersecurity | 12-Jan-2025 |
| How To Get free burpsuite professional | https://cybersecuritywriteups.com/how-to-get-free-burpsuite-professional-f124ebaf529d?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, hacking, burpsuite, penetration-testing, cybersecurity | 12-Jan-2025 |
| Unmasking a Captcha Bypass Vulnerability: Step-by-Step Walkthrough | https://medium.com/@vishalsharma445500/unmasking-a-captcha-bypass-vulnerability-step-by-step-walkthrough-6131519a3788?source=rss------bug_bounty-5 | Vishal Sharma | cybersecurity, ethical-hacking, vulnerability, penetration-testing, bug-bounty | 12-Jan-2025 |
| IDOR & UUIDs to leak PII | https://medium.com/@CANITEY/idor-uuids-to-leak-pii-7675130ab784?source=rss------bug_bounty-5 | CANITEY | idor, cybersecurity, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 12-Jan-2025 |
| How Improper cache storage lead to Make me $$$ | https://medium.com/@test123cybertest/how-improper-cache-storage-lead-to-make-me-4de4c003b376?source=rss------bug_bounty-5 | praveenarsh0xx0 | bug-bounty, tips-and-tricks, cybersecurity, ethical-hacking, penetration-testing | 12-Jan-2025 |
| Logic Bugs in Payment Gateway | https://bitpanic.medium.com/logic-bugs-in-payment-gateway-25d5d48068c4?source=rss------bug_bounty-5 | Spectat0rguy | technology, cybersecurity, bug-bounty-tips, programming, bug-bounty | 12-Jan-2025 |
| A Simple Bug to Get Started in Bug Bounty | https://medium.com/infosecmatrix/a-simple-bug-to-get-started-in-bug-bounty-599121c1b997?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, hacking, bugs, pentesting | 12-Jan-2025 |
| How i found Broken Access Control | https://medium.com/@gitlime71/how-i-found-broken-access-control-c3377d3df60e?source=rss------bug_bounty-5 | Raccoon | bug-bounty, pentesting, bug-bounty-tips, bug-bounty-writeup, penetration-testing | 12-Jan-2025 |
| The State of Web3 Security in 2024 | https://medium.com/coinmonks/the-state-of-web3-security-in-2024-f3713fbe9e04?source=rss------bug_bounty-5 | Raiders | bug-bounty, web3, blockchain, hacking, security | 12-Jan-2025 |
| The Art of Note-Taking in Bug Bounty Hunting | https://medium.com/@mahdisalhi0500/the-art-of-note-taking-in-bug-bounty-hunting-9b28876316e3?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, information-security, penetration-testing, bug-bounty, bug-bounty-tips | 12-Jan-2025 |
| Portswigger Web Security Academy : File path traversal, simple case walkthrough | https://medium.com/@Kinqdathacker/portswigger-web-security-academy-file-path-traversal-simple-case-walkthrough-d04418d04b76?source=rss------bug_bounty-5 | Kinqdathacker | path-traversal, web-security, hacking, web-app-security, bug-bounty | 12-Jan-2025 |
| Server-side vulnerabilities | #4 Server-Side Request Forgery | https://medium.com/@agapehearts/server-side-vulnerabilities-4-server-side-request-forgery-71b7c525eadc?source=rss------bug_bounty-5 | Agape HearTs | servers, bug-bounty, ethical-hacking, cybersecurity, bugs | 11-Jan-2025 |
| Crawling for Emails In Websites — OSINT Methodology | https://osintteam.blog/crawling-for-emails-in-websites-osint-methodology-602e2b274c6e?source=rss------bug_bounty-5 | Jason Jacobs, MSc. | osint, bug-bounty, cybersecurity | 11-Jan-2025 |
| LFI Bug can help you make $500 and more.(Noob-Advance) | https://medium.com/@anandrishav2228/lfi-bug-can-help-you-make-500-and-more-noob-advance-be001cb2d152?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, money, bug-bounty, hacking, lfi | 11-Jan-2025 |
| How to Hack Single Page Applications (SPAs): Modern Techniques | https://medium.com/@bootstrapsecurity/how-to-hack-single-page-applications-spas-modern-techniques-4f69c020b0ff?source=rss------bug_bounty-5 | BootstrapSecurity | bug-bounty-tips, hacking, bug-bounty, api, ethical-hacking | 11-Jan-2025 |
| Understanding Large Language Models (LLMs): The Power of AI in Text Generation | https://medium.com/@paritoshblogs/understanding-large-language-models-llms-the-power-of-ai-in-text-generation-dce8c1ddeb7b?source=rss------bug_bounty-5 | Paritosh | chatgpt, llm, ai, hacking, bug-bounty | 11-Jan-2025 |
| From Innocent Messages to Total Takeover: How I Hacked a Professional Network! | https://medium.com/@lordofheaven1234/from-innocent-messages-to-total-takeover-how-i-hacked-a-professional-network-2033537d5d6a?source=rss------bug_bounty-5 | Lord Heaven | blind-xss, bug-bounty, hacking, account-takeover | 11-Jan-2025 |
| GOT 700$ BOUNTY BY Store XSS VULNERABILITY | https://medium.com/@hrofficial62/got-700-bounty-by-store-xss-vulnerability-bc48f2e31e46?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty-tips, ethical-hacking, cybersecurity, bug-bounty, xss-attack | 11-Jan-2025 |
| Microsoft ADFS Recon | https://medium.com/meetcyber/microsoft-adfs-recon-e56fcace8551?source=rss------bug_bounty-5 | AbhirupKonwar | cybersecurity, infosec, bug-bounty, penetration-testing, bug-bounty-tips | 11-Jan-2025 |
| Breaking Vercel’s Clone URL with a Simple XSS Exploit | https://medium.com/@n45ht/breaking-vercels-clone-url-with-a-simple-xss-exploit-8f55b21f32eb?source=rss------bug_bounty-5 | N45HT | bug-bounty, hacking, bug-bounty-writeup, cross-site-scripting, xs | 11-Jan-2025 |
| Telefónica Confirms Internal Ticketing System Breach After Data Leak | https://medium.com/@wiretor/telef%C3%B3nica-confirms-internal-ticketing-system-breach-after-data-leak-6067f759f65d?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, money, malware, bug-bounty, ai | 11-Jan-2025 |
| The Subdomain They Forgot — How I Chained Bugs for a $1,000 Bounty | https://myselfakash20.medium.com/the-subdomain-they-forgot-how-i-chained-bugs-for-a-1-000-bounty-094d89758489?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, cybersecurity, bug-bounty-tips, technology, bug-bounty-writeup | 11-Jan-2025 |
| Secure Code Review Assessment for Javascript (Full Stack NextJS) | https://medium.com/@0xNayelx/secure-code-review-assessment-for-javascript-full-stack-nextjs-59651da6fb24?source=rss------bug_bounty-5 | 0xNayel | source-code, ctf-writeup, pentesting, bug-bounty, offensive-security | 11-Jan-2025 |
| Exposing the Weak Points: Vulnerabilities in REST APIs | https://bitpanic.medium.com/exposing-the-weak-points-vulnerabilities-in-rest-apis-8e4acb4861b0?source=rss------bug_bounty-5 | Spectat0rguy | programming, bug-bounty-tips, cybersecurity, technology, bug-bounty | 11-Jan-2025 |
| Crack the Code: Your Bug Bounty Hunting Journey Starts Here | https://it4chis3c.medium.com/crack-the-code-your-bug-bounty-hunting-journey-starts-here-e61701f8cb36?source=rss------bug_bounty-5 | It4chis3c | bug-bounty-tips, bug-bounty-writeup, bug-bounty, tryhackme, hackthebox | 11-Jan-2025 |
| Critical IDOR Vulnerability: Unauthorized Users Can Modify Company’s PayPal Email | https://medium.com/@mahdisalhi0500/critical-idor-vulnerability-unauthorized-users-can-modify-companys-paypal-email-92bf24ae19df?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | infosec, bug-bounty, bug-bounty-tips, ethical-hacking, pentesting | 11-Jan-2025 |
| EXIF Metadata-Based XSS Attacks: A Web Security Research | https://medium.com/@enesonder001/exif-metadata-based-xss-attacks-a-web-security-research-e88c7ea7b69b?source=rss------bug_bounty-5 | enes önder | bugs, bug-bounty-tips, xss-attack, xss-vulnerability, bug-bounty | 11-Jan-2025 |
| GOT 700$ BOUNTY BY Store XSS VULNERABILITY | https://systemweakness.com/got-700-bounty-by-store-xss-vulnerability-bc48f2e31e46?source=rss------bug_bounty-5 | Mr Horbio | bug-bounty-tips, ethical-hacking, cybersecurity, bug-bounty, xss-attack | 11-Jan-2025 |
| Day 08: My Bug Bounty Challenge … 0–100k without knowledge in one year! | https://medium.com/@dogxxx10/day-08-my-bug-bounty-challenge-0-100k-without-knowledge-in-one-year-70422a5cd7eb?source=rss------bug_bounty-5 | Dogx0x | hacking, bug-bounty-writeup, bug-bounty, bug-bounty-tips, hacking-training | 10-Jan-2025 |
| Finding a easy p3 | https://medium.com/h7w/finding-a-easy-p3-a16186613391?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, ethical-hacking, cybersecurity, hacking, penetration-testing | 10-Jan-2025 |
| 30+ Standard Linux Commands for Beginner or Intermediate Users | https://medium.com/@BetterBy0x01/30-standard-linux-commands-for-beginner-or-intermediate-users-eacae976d92c?source=rss------bug_bounty-5 | Ashutosh Singh Patel | command-line, linux, hacking, bug-bounty, security | 10-Jan-2025 |
| Server-side vulnerabilities | #3 AUTHENTICATION | https://medium.com/@agapehearts/server-side-vulnerabilities-3-authentication-ff80ac2efdb4?source=rss------bug_bounty-5 | Agape HearTs | bugs, bug-bounty, ethical-hacking, authentication, web-applications | 10-Jan-2025 |
| The Road to CRTP Cert — Part 13 | https://medium.com/@dineshkumaar478/the-road-to-crtp-cert-part-13-8d14193f660f?source=rss------bug_bounty-5 | Dineshkumaar R | active-directory, hacking, cybersecurity, security, bug-bounty | 10-Jan-2025 |
| Mastering HTTP Request Smuggling: Bypassing Firewalls and Filters | https://medium.com/@bootstrapsecurity/mastering-http-request-smuggling-bypassing-firewalls-and-filters-a3d69bcbe4d9?source=rss------bug_bounty-5 | BootstrapSecurity | hacking, ethical-hacking, bug-bounty-tips, api, bug-bounty | 10-Jan-2025 |
| How I got CERT-EU Hall of Fame | https://cybersecuritywriteups.com/how-i-got-cert-eu-hall-of-fame-e65b3e72510b?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, bug-bounty, pentesting, bug-bounty-writeup, cybersecurity | 10-Jan-2025 |
| PoC — Vulnérabilité Cache Varnish PURGE DDoS by @GupS3C | https://medium.com/@GupS3C/poc-vuln%C3%A9rabilit%C3%A9-cache-varnish-purge-ddos-by-gups3c-9ce181fe7fca?source=rss------bug_bounty-5 | GupS3C | bug-bounty, bug-bounty-writeup, varnish-cache, bug-hunt, pentesting | 10-Jan-2025 |
| Web Application Pentesting Roadmap | https://medium.com/@codingbolt.in/web-application-pentesting-roadmap-4013e89b963b?source=rss------bug_bounty-5 | codingbolt | pentesting, web-pen-testing, bug-bounty, penetration-testing, bug-hunting | 10-Jan-2025 |
| Finding Hidden Subdomains with OSINT Tools | https://infosecwriteups.com/finding-hidden-subdomains-with-osint-tools-ad7e411587ee?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | hacking, bug-bounty, technology, cybersecurity, careers | 10-Jan-2025 |
| From Directory Traversal to Full Account Takeover: A Researcher’s Journey | https://medium.com/@sulmanfarooq531/from-directory-traversal-to-full-account-takeover-a-researchers-journey-150044cbf109?source=rss------bug_bounty-5 | Sulman Farooq S | directory-traversal, cybersecurity, path-traversal, bug-bounty, account-takeover | 10-Jan-2025 |
| Missing Rate Limit on Several Endpoints $1300 | https://ehteshamulhaq198.medium.com/missing-rate-limit-on-several-endpoints-1300-60f37e16be6b?source=rss------bug_bounty-5 | Ehtesham Ul Haq | technology, hacking, infosec, cybersecurity, bug-bounty | 10-Jan-2025 |
| My Worst Informative Report //false positive Bug | https://medium.com/@0xoroot/my-worst-informative-report-false-positive-bug-6117039012cb?source=rss------bug_bounty-5 | 0xoroot | bug-bounty-tips, programming, hacking, bug-bounty, bounty-program | 10-Jan-2025 |
| how i found the “Insufficient Authorization in Password Change Endpoint” vulnerability ? | https://doordiefordream.medium.com/how-i-found-the-insufficient-authorization-in-password-change-endpoint-vulnerability-1f0e943daeea?source=rss------bug_bounty-5 | Bug hunter balu | hacking, bug-bounty, cybersecurity, ethical-hacking, vulnerability | 10-Jan-2025 |
| MirrorFace Hackers Targeting Japanese Government & Politicians Since 2019 | https://medium.com/@wiretor/mirrorface-hackers-targeting-japanese-government-politicians-since-2019-080121705345?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, ai, malware, hacking, bug-bounty | 10-Jan-2025 |
| Data Breach Alert: BayMark Health Services Targeted by Ransomware Attack | https://medium.com/@wiretor/data-breach-alert-baymark-health-services-targeted-by-ransomware-attack-5c4cf81d8e79?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, hacking, money, ai | 10-Jan-2025 |
| How to Identify Overlooked Bugs in Android Applications: A Bug Bounty Hunter’s Guide | https://bitpanic.medium.com/how-to-identify-overlooked-bugs-in-android-applications-a-bug-bounty-hunters-guide-5c194ed283a4?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, bug-bounty, technology, programming, cybersecurity | 10-Jan-2025 |
| A New Bug Hunting Story: Open Redirection Vulnerability | https://medium.com/meetcyber/a-new-bug-hunting-story-open-redirection-vulnerability-33a1b6374f88?source=rss------bug_bounty-5 | Erkan Kavas | bug-bounty, open-redirection, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 10-Jan-2025 |
| Behind the Scenes: How I Discovered Flaws in a Rewards and Recognition Portal | https://medium.com/@niraj1mahajan/behind-the-scenes-how-i-discovered-flaws-in-a-rewards-and-recognition-portal-27948a75c4d4?source=rss------bug_bounty-5 | Niraj Mahajan | bug-bounty, idor, broken-access-control, hacking, cybersecurity | 10-Jan-2025 |
| Race Condition to Bypass Rate-Limiting: A new technique made by Nillsx | https://infosecwriteups.com/race-condition-to-bypass-rate-limiting-a-new-technique-made-by-nillsx-6a60f41dbae6?source=rss------bug_bounty-5 | Nillsx | bug-bounty, ethical-hacking, race-condition, bug-bounty-writeup, rate-limit | 10-Jan-2025 |
| Revisiting a Simple SQL Injection Methodology | https://infosecwriteups.com/revisiting-a-simple-sql-injection-methodology-ecd42634a21e?source=rss------bug_bounty-5 | Jason Jacobs, MSc. | bug-bounty, ethical-hacking, cybersecurity, penetration-testing | 10-Jan-2025 |
| Day 09: My Bug Bounty Challenge … 0–100k without knowledge in one year! | https://medium.com/@dogxxx10/day-09-my-bug-bounty-challenge-0-100k-without-knowledge-in-one-year-220c7c6bb0cf?source=rss------bug_bounty-5 | Dogx0x | hacking, hackthebox, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 10-Jan-2025 |
| Telegram Leaks PII, doesn’t care. | https://medium.com/@hacktheplanet/telegram-leaks-pii-doesnt-care-c75465be1cc2?source=rss------bug_bounty-5 | sirhaxalot | hacking, telegram, bug-bounty, security | 09-Jan-2025 |
| Discovering Hidden Subdomains: Tools, Techniques | https://medium.com/@bootstrapsecurity/discovering-hidden-subdomains-tools-techniques-7c874c4f5966?source=rss------bug_bounty-5 | BootstrapSecurity | hacking, api, bug-bounty, ethical-hacking, bug-bounty-tips | 09-Jan-2025 |
| The following content is purely fictional written with the intent to motivate the reader. | https://medium.com/@personaldevelop100/the-following-content-is-purely-fictional-written-with-the-intent-to-motivate-the-reader-6b23c19d70d8?source=rss------bug_bounty-5 | Personal_hunt | bug-bounty, motivation, bug-hunting | 09-Jan-2025 |
| Finding subdomains using goole dorking. | https://medium.com/infosecmatrix/finding-subdomains-using-goole-dorking-4d6966e70637?source=rss------bug_bounty-5 | loyalonlytoday | dorking, penetration-testing, bug-bounty, hacking, cybersecurity | 09-Jan-2025 |
| Hack. Earn. Secure the Future: Bug Bounties in 2025 | https://sagarjethi.medium.com/hack-earn-secure-the-future-bug-bounties-in-2025-0e2d05fcb364?source=rss------bug_bounty-5 | Sagar Jethi | hackathons, earn, bug-bounty, smart-contract-auditing, blockchain-developer | 09-Jan-2025 |
| NTLM Authentication Disclosure Vulnerability Report | https://medium.com/@dasmanish6176/ntlm-authentication-disclosure-vulnerability-report-b47029c2e491?source=rss------bug_bounty-5 | Dasmanish | vapt, web-app-security, active-directory, ethical-hacking, bug-bounty | 09-Jan-2025 |
| How I get 7 open redirect and 7 XSS in public program! | https://medium.com/@mohamed.yasser442200/how-i-get-7-open-redirect-and-7-xss-in-public-program-7518a3f26b49?source=rss------bug_bounty-5 | Spider4 | bug-bounty, security, bug-bounty-tips, xss-attack, bug-bounty-writeup | 09-Jan-2025 |
| From Exploit to Payday-Chaining Stored XSS in PDF Upload to Full AccountTakeover via Email change… | https://medium.com/@meljith6355484/from-exploit-to-payday-chaining-stored-xss-in-pdf-upload-to-full-accounttakeover-via-email-change-d36e855e0575?source=rss------bug_bounty-5 | Meljith Pereira | hacking, ethical-hacking, xss-attack, bugcrowd, bug-bounty | 09-Jan-2025 |
| Unlock the Ultimate Resource Hub for Security Researchers | https://infosecwriteups.com/unlock-the-ultimate-resource-hub-for-security-researchers-9fa52bbff1ff?source=rss------bug_bounty-5 | JEETPAL | bug-bounty-hunter, bug-bounty, bugbounty-writeup, cybersecurity, bugbounty-tips | 09-Jan-2025 |
| Exposing Sensitive Data: A Wake-Up Call for Nokia's Security | https://medium.com/@gourisankara357/exposing-sensitive-data-a-wake-up-call-for-nokias-security-c5ba75fddd22?source=rss------bug_bounty-5 | Gouri Sankar A | info-sec-writeups, bug-bounty, infosec-write-ups, cybersecurity, bugs | 09-Jan-2025 |
| Biggest Misconceptions About Bug Bounty Programs (From a Company Perspective) | https://medium.com/@hackrate/biggest-misconceptions-about-bug-bounty-programs-from-a-company-perspective-42481997d40d?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, bug-bounty-tips, bug-bounty, hacking, ethical-hacking | 09-Jan-2025 |
| Critical [9.8] SQL Injection in a Major Indonesian Web Hosting Platform | https://medium.com/@n45ht/critical-9-8-sql-injection-in-a-major-indonesian-web-hosting-platform-8bda5d2913d3?source=rss------bug_bounty-5 | N45HT | bug-bounty-writeup, bug-bounty, vulnerability, sql-injection, hacking | 09-Jan-2025 |
| Hacking made easy with XSSIFY | https://aravind07.medium.com/hacking-made-easy-with-xssify-9637890cd33b?source=rss------bug_bounty-5 | Gnana Aravind K | hacking, security, xss-attack, cybersecurity, bug-bounty | 09-Jan-2025 |
| Stay Ahead of Cyber Threats, Top Websites for Real-Time Updates and Insights | https://medium.com/@b.mythili123/stay-ahead-of-cyber-threats-top-websites-for-real-time-updates-and-insights-57a1b384cdfa?source=rss------bug_bounty-5 | Hello Love | hackthebox, tryhackme, cybersecurity, bug-bounty, hacking | 09-Jan-2025 |
| Top 10 Overlooked Business Logic Flaws in Web Applications | https://bitpanic.medium.com/top-10-overlooked-business-logic-flaws-in-web-applications-6745d42f3786?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, technology, cybersecurity, bug-bounty-tips, programming | 09-Jan-2025 |
| From N/A to $$$: A Simple Python Script Led to Application-Level DoS | https://hashimamin.medium.com/from-n-a-to-a-simple-python-script-led-to-application-level-dos-83a65f75b7dc?source=rss------bug_bounty-5 | Hashim Amin | bug-bounty, privilege-escalation, infosec, cybersecurity, pentesting | 09-Jan-2025 |
| Urgent: Patch SonicWall SSLVPN Vulnerability Now | https://medium.com/@wiretor/urgent-patch-sonicwall-sslvpn-vulnerability-now-385713cdfa2f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, hacking, money, sonicwall | 09-Jan-2025 |
| The Great FAQ Collection About Bug Bounty | https://medium.com/@hackrate/the-great-faq-collection-about-bug-bounty-87421d970ddd?source=rss------bug_bounty-5 | Levente Molnar | hacking, bug-bounty-tips, bug-bounty, cybersecurity, ethical-hacking | 09-Jan-2025 |
| What Is Cross Site Scripting (XSS)? | https://medium.com/@dante.falls/what-is-cross-site-scripting-xss-d74b19920d8e?source=rss------bug_bounty-5 | Dante Falls | information-security, bug-bounty, web-security, cybersecurity, xss-attack | 09-Jan-2025 |
| How I Discovered a Delete CSRF Vulnerability | https://medium.com/@Ursula-/how-i-discovered-a-delete-csrf-vulnerability-a46d4bc2e700?source=rss------bug_bounty-5 | Fatma Mustafa | bug-hunting, bug-bounty, bug-bounty-writeup | 09-Jan-2025 |
| Threat Hunting with MITRE ATT&CK: A Proactive Approach to Cyber Defence | https://medium.com/@paritoshblogs/threat-hunting-with-mitre-att-ck-a-proactive-approach-to-cyber-defence-a84945f61bda?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, cybersecurity, mitre-attck, threat-hunting | 08-Jan-2025 |
| A Beginner’s Guide to Pentesting GraphQL APIs | https://medium.com/@suprajabaskaran8/a-beginners-guide-to-pentesting-graphql-apis-395fa1878f6a?source=rss------bug_bounty-5 | Suprajabaskaran | graphql, cybersecurity, bug-bounty, bugbounty-writeup, hacking | 08-Jan-2025 |
| First bounty — Second Order Stored XSS on club.paris2024.org | https://medium.com/@swaroopvenkat828/first-bounty-second-order-stored-xss-on-club-paris2024-org-9a3ad7fe7c7f?source=rss------bug_bounty-5 | swaroop 04|16 | bug-bounty-tips, bug-bounty, bug-bounty-writeup | 08-Jan-2025 |
| Weird JavaScript files | https://medium.com/@dsmodi484/weird-javascript-files-7e6e7296e914?source=rss------bug_bounty-5 | cryptoshant | hacking, cybersecurity, javascript, bug-bounty, tips | 08-Jan-2025 |
| File Upload Vulnerabilities: Techniques and Payloads | https://medium.com/@bootstrapsecurity/file-upload-vulnerabilities-techniques-and-payloads-b0bdf97eb298?source=rss------bug_bounty-5 | BootstrapSecurity | hacking, ethical-hacking, bug-bounty-tips, bug-bounty, api | 08-Jan-2025 |
| ChatGPT for Bug Bounty Hunters: Custom Payloads, Automated Scripts, and More | https://medium.com/@kumawatabhijeet2002/chatgpt-for-bug-bounty-hunters-custom-payloads-automated-scripts-and-more-8a15690c3fa5?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, chatgpt, hacking, bug-bounty, bug-bounty-tips | 08-Jan-2025 |
| A Beginner’s Guide to Pentesting GraphQL APIs | https://infosecwriteups.com/a-beginners-guide-to-pentesting-graphql-apis-395fa1878f6a?source=rss------bug_bounty-5 | Suprajabaskaran | graphql, cybersecurity, bug-bounty, bugbounty-writeup, hacking | 08-Jan-2025 |
| POC — WordPress File Upload plugin, in the wfu_file_downloader.php | https://medium.com/@verylazytech/poc-wordpress-file-upload-plugin-in-the-wfu-file-downloader-php-57a173ab9e90?source=rss------bug_bounty-5 | Very Lazy Tech | wordpress-plugins, cve-2024-9047, cybersecurity, bug-bounty, hacking | 08-Jan-2025 |
| Day 0. The 100-Day Bug Bounty Challenge: Sharing 100 Vulnerabilities in 100 Days | https://medium.com/@mahhesshh/day-0-the-100-day-bug-bounty-challenge-sharing-100-vulnerabilities-in-100-days-17308f82d741?source=rss------bug_bounty-5 | Mahesh Dhakad | cybersecurity, bug-bounty, hacking, vulnerability, 100daychallenge | 08-Jan-2025 |
| How a YouTube Video Led Me to $650: My Host Header Injection Adventure | https://medium.com/@trffnsec/how-a-youtube-video-led-me-to-650-my-host-header-injection-adventure-696fd82b2886?source=rss------bug_bounty-5 | TrffnSec | ethical-hacking, cybersecurity, bug-bounty, website-testing | 08-Jan-2025 |
| The Rate Limit bypass which almost killed my brain | https://siratsami71.medium.com/this-rate-limit-bypass-which-almost-killed-my-brain-1905749a5f4d?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | brute-force, hackerone, bug-bounty | 08-Jan-2025 |
| Automate-XSS Five-In-One Tool | https://medium.com/@saket590/automate-xss-five-in-one-tool-95a947545b2c?source=rss------bug_bounty-5 | Dr. Saket Acharya | bug-bounty, hacking, xss-vulnerability, xss-attack, xss-bypass | 08-Jan-2025 |
| Day 0. The 100-Day Bug Bounty Challenge: Sharing 100 Vulnerabilities in 100 Days | https://mahhesshh.medium.com/day-0-the-100-day-bug-bounty-challenge-sharing-100-vulnerabilities-in-100-days-17308f82d741?source=rss------bug_bounty-5 | Mahesh Dhakad | cybersecurity, bug-bounty, hacking, vulnerability, 100daychallenge | 08-Jan-2025 |
| Weird JavaScript files | https://infosecwriteups.com/weird-javascript-files-7e6e7296e914?source=rss------bug_bounty-5 | cryptoshant | hacking, cybersecurity, javascript, bug-bounty, tips | 08-Jan-2025 |
| Leaky Response, Easy Takeover! | https://medium.com/@tanyago/leaky-response-easy-takeover-25367c18f0dc?source=rss------bug_bounty-5 | Tanya Goyal | bug-bounty, bug-bounty-tips, bug-bounty-writeup | 08-Jan-2025 |
| Why Companies Should Adopt a Bug Bounty Program | https://medium.com/@hackrate/why-companies-should-adopt-a-bug-bounty-program-cd4e1a492989?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, hacking, cybersecurity, ethical-hacking, bug-bounty-tips | 08-Jan-2025 |
| How I Ethically Hacked the Indian Army for the Second Time | https://cybersecuritywriteups.com/how-i-ethically-hacked-the-indian-army-for-the-second-time-edf6ec4495f8?source=rss------bug_bounty-5 | Guru Prasad Pattanaik || TH3N00BH4CK3R | cybersecurity, bug-bounty-writeup, ethical-hacking, bug-bounty-tips, bug-bounty | 08-Jan-2025 |
| Blind OS Command Injection with Output Redirection | https://osintteam.blog/blind-os-command-injection-with-output-redirection-1d08c3793ff1?source=rss------bug_bounty-5 | The Cybersec Café | cybersecurity, bug-bounty, penetration-testing, bug-bounty-tips, information-security | 08-Jan-2025 |
| No Session Expiry after log-out, attacker can reuse the old cookies | https://mknayek101.medium.com/no-session-expiry-after-log-out-attacker-can-reuse-the-old-cookies-b90a4a45032d?source=rss------bug_bounty-5 | MkNayek | penetration-testing, cybersecurity, bug-bounty-tips, bug-bounty, pentesting | 08-Jan-2025 |
| Disclosure of any bpost.be username via email | https://mknayek101.medium.com/disclosure-of-any-bpost-be-username-via-email-afde00aff7d9?source=rss------bug_bounty-5 | MkNayek | penetration-testing, pentesting, bug-bounty-tips, bug-bounty, cybersecurity | 08-Jan-2025 |
| User information disclosed via API endpoint | https://mknayek101.medium.com/user-information-disclosed-via-api-endpoint-80a1b82e3f3a?source=rss------bug_bounty-5 | MkNayek | penetration-testing, web-hacking, pentesting, bug-bounty-tips, bug-bounty | 08-Jan-2025 |
| AI Security Insights from HackerOne’s 8th Annual Security Report | https://medium.com/ai-security-hub/ai-security-insights-from-hackerones-8th-annual-security-report-f775473c1226?source=rss------bug_bounty-5 | Tal Eliyahu | hackerone, bug-bounty, hacking, cybersecurity, artificial-intelligence | 08-Jan-2025 |
| PowerSchool Hacked: 18K Customers and 60M Students’ Privacy Compromised | https://medium.com/@wiretor/powerschool-hacked-18k-customers-and-60m-students-privacy-compromised-e418e3ed8ccc?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, ai, malware, powerschool, bug-bounty | 08-Jan-2025 |
| UN Aviation Agency Hit by Cyberattack: 42K Recruitment Records Stolen | https://medium.com/@wiretor/un-aviation-agency-hit-by-cyberattack-42k-recruitment-records-stolen-6a51c8817d7f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, bug-bounty, un, ai, malware | 08-Jan-2025 |
| Green Bay Packers Pro Shop Breach: Over 8,500 Credit Cards Stolen! | https://medium.com/@wiretor/green-bay-packers-pro-shop-breach-over-8-500-credit-cards-stolen-e99ea97bf154?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | money, green-bay, ai, malware, bug-bounty | 08-Jan-2025 |
| CISA Alerts: Critical Oracle WebLogic & Mitel Vulnerabilities Exploited! | https://medium.com/@wiretor/cisa-alerts-critical-oracle-weblogic-mitel-vulnerabilities-exploited-136f227dcfb0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, programming, malware, business, bug-bounty | 08-Jan-2025 |
| Breaking Barriers: Understanding and Mastering WAF Bypass Techniques | https://bitpanic.medium.com/breaking-barriers-understanding-and-mastering-waf-bypass-techniques-2277150d2574?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, bug-bounty, technology, programming, bug-bounty-tips | 08-Jan-2025 |
| Day 07: My Bug Bounty Challenge … 0–100k without knowledge in one year! | https://medium.com/@dogxxx10/day-07-my-bug-bounty-challenge-0-100k-without-knowledge-in-one-year-cc5eff18ae10?source=rss------bug_bounty-5 | Dogx0x | bug-bounty-writeup, bug-bounty, web-hacking, hacking, bug-bounty-tips | 08-Jan-2025 |
| Detect Open Redirect Vulnerabilities with RedirXploit | https://angixblack.medium.com/detect-open-redirect-vulnerabilities-with-redirxploit-946ac287846f?source=rss------bug_bounty-5 | Angix black | bugs, open-redirect, tools, bug-bounty, bug-bounty-tips | 07-Jan-2025 |
| How i found ssti injection (Server-side template injection)on yeswehack platform in public program | https://medium.com/@ravindrajatav0709/how-i-found-ssti-injection-server-side-template-injection-on-yeswehack-platform-in-public-program-bfde6a89f477?source=rss------bug_bounty-5 | Ravindrajatav | bug-bounty, bugbounty-writeup, bug-bounty-tips, bugs, cybersecurity | 07-Jan-2025 |
| Getting Started with Bug Bounty Hunting in 2025: A Real World Guide | https://medium.com/@hackbynight/getting-started-with-bug-bounty-hunting-in-2025-a-real-world-guide-051a3fb36376?source=rss------bug_bounty-5 | hackbynight | bug-bounty-tips, bug-bounty, cybersecurity, information-security, hacking | 07-Jan-2025 |
| Server-Side Template Injection (SSTI): Advanced Exploitation Techniques | https://medium.com/@bootstrapsecurity/server-side-template-injection-ssti-advanced-exploitation-techniques-2d8ccdf6270f?source=rss------bug_bounty-5 | BootstrapSecurity | ethical-hacking, bug-bounty-tips, bug-bounty, api, hacking | 07-Jan-2025 |
| Finding more subdomains | https://medium.com/@loyalonlytoday/finding-more-subdomains-8b1abb32f3e5?source=rss------bug_bounty-5 | loyalonlytoday | reconnaissance, hacking, bug-bounty-tips, cybersecurity, bug-bounty | 07-Jan-2025 |
| Burp Suite + Form Deletion = Admin Storage Nightmare | https://infosecwriteups.com/burp-suite-form-deletion-admin-storage-nightmare-240618a8c983?source=rss------bug_bounty-5 | callgh0st | humanity, hacking, gaza, genocide, bug-bounty | 07-Jan-2025 |
| Web Application Penetration Testing Checklist | https://saconychukwu.medium.com/web-application-penetration-testing-checklist-3da7d3be8f1a?source=rss------bug_bounty-5 | Sacony Chukwu | bug-bounty-tips, hacking, bug-bounty, bug-bounty-writeup, cybersecurity | 07-Jan-2025 |
| Automated Penetration Testing: A Guide to Domain Collection | https://medium.com/@security.tecno/automated-penetration-testing-a-guide-to-domain-collection-a79df50d74a0?source=rss------bug_bounty-5 | TECNO Security | web, hacking, bug-bounty, security | 07-Jan-2025 |
| Hack The Box UpDown[Retired][Linux] | https://medium.com/@vignesh6872610/hack-the-box-updown-retired-linux-5e0a9f6ec84e?source=rss------bug_bounty-5 | Vignesh P | htb-writeup, hackthebox-walkthrough, retiredmachine, bug-bounty, linux | 07-Jan-2025 |
| P4 Bugs and POC | Part-9 | https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-9-16b5a8ffb52d?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, bug-bounty-tips, hacking, infosec, money | 07-Jan-2025 |
| bug-bounty Rate Limit vulnerability | https://medium.com/@eslamatef396/bug-bounty-rate-limit-vulnerability-cb81481456bc?source=rss------bug_bounty-5 | UnStoppable | web-penetration-testing, rate-limiting, bug-bounty | 07-Jan-2025 |
| CVE-2024–12033: A Critical WordPress Vulnerability in Jupiter X Core | https://medium.com/@wiretor/cve-2024-12033-a-critical-wordpress-vulnerability-in-jupiter-x-core-38ac3380b909?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, wordpress, malware, rce, cve | 07-Jan-2025 |
| CVE-2024–12532: Vulnerability in BWD Elementor Addons Plugin | https://medium.com/@wiretor/cve-2024-12532-vulnerability-in-bwd-elementor-addons-plugin-da1a34bd2f99?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, malware, wordpress, hacking, bug-bounty | 07-Jan-2025 |
| CVE-2024–12711: Vulnerability in RSVP and Event Management Plugin | https://medium.com/@wiretor/cve-2024-12711-vulnerability-in-rsvp-and-event-management-plugin-2a0b374807e1?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, malware, ai, bug-bounty, hacking | 07-Jan-2025 |
| Critical Infrastructure Ransomware Attack Tracker Surpasses 2,000 Incidents! | https://medium.com/@wiretor/critical-infrastructure-ransomware-attack-tracker-surpasses-2-000-incidents-431f5531a2af?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, bug-bounty, hacking, business, malware | 07-Jan-2025 |
| Bug Bounty Hunting Prerequisites | https://it4chis3c.medium.com/bug-bounty-hunting-prerequisites-964560919547?source=rss------bug_bounty-5 | It4chis3c | roadmaps, bug-bounty, bug-bounty-tips, bug-bounty-writeup, bug-hunting | 07-Jan-2025 |
| The Most Groundbreaking Bug Bounty Discoveries That Changed Cybersecurity Forever | https://medium.com/@hackrate/the-most-groundbreaking-bug-bounty-discoveries-that-changed-cybersecurity-forever-a2a39e7e10af?source=rss------bug_bounty-5 | Levente Molnar | hacking, bug-bounty, bug-bounty-tips, ethical-hacking, cybersecurity | 07-Jan-2025 |
| Beginners Introduction To Server Side Request Forgery | https://bitpanic.medium.com/beginners-introduction-to-server-side-request-forgery-85c3a35eb726?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, programming, bug-bounty, cybersecurity, technology | 07-Jan-2025 |
| My Journey to Finding Two XSS Vulnerabilities on a Bug Bounty Website | https://medium.com/@mickaelbenlolo/my-journey-to-finding-two-xss-vulnerabilities-on-a-bug-bounty-website-b6a1e38425df?source=rss------bug_bounty-5 | Mickael Benlolo | penetration-testing, xss-vulnerability, cybersecurity, bug-bounty | 07-Jan-2025 |
| Humorous XSS Vulnerabilities in a Movie Website | https://medium.com/meetcyber/humorous-xss-vulnerabilities-in-a-movie-website-3600d7828661?source=rss------bug_bounty-5 | Erkan Kavas | xss-vulnerability, cybersecurity, xss-challenge, xss-attack, bug-bounty | 07-Jan-2025 |
| Day 06: My Bug Bounty Challenge ... 0–100k without knowledge in one year! | https://medium.com/@dogxxx10/day-06-my-bug-bounty-challenge-0-100k-without-knowledge-in-one-year-5ed71536fd89?source=rss------bug_bounty-5 | Dogx0x | bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty, web-hacking | 07-Jan-2025 |
| P4 Bugs and POC | Part 7 | https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-7-a379f057ba96?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, bug-bounty, infosec, bug-bounty-tips, money | 06-Jan-2025 |
| Day 27 of 30 Day — 30 Vulnerabilities | Server-Side Template Injection (SSTI) | https://it4chis3c.medium.com/day-27-of-30-day-30-vulnerabilities-server-side-template-injection-ssti-12f933587800?source=rss------bug_bounty-5 | It4chis3c | bug-bounty, 30dayswritingchallenge, ssti, bug-bounty-tips, bug-bounty-writeup | 06-Jan-2025 |
| From oos — getting bounty Improper Access Control to create an commentor account on the application. | https://medium.com/@swaroopvenkat828/from-oos-getting-bounty-improper-access-control-to-create-an-commentor-account-on-the-application-027b517928bb?source=rss------bug_bounty-5 | swaroop 04|16 | bug-bounty-tips, bugbounty-writeup, bug-bounty | 06-Jan-2025 |
| Bypassing API Authentication: Exploiting Token Reuse and Expiry | https://medium.com/@bootstrapsecurity/bypassing-api-authentication-exploiting-token-reuse-and-expiry-0432e7689659?source=rss------bug_bounty-5 | BootstrapSecurity | bug-bounty, api, bug-bounty-tips, ethical-hacking, hacking | 06-Jan-2025 |
| Missing SPF BUG HUNTING | https://medium.com/@cybertips96/missing-spf-bug-hunting-121294c9572e?source=rss------bug_bounty-5 | Cybertips | bug-bounty | 06-Jan-2025 |
| How I Found PII at NASA Using Google Dorking | https://medium.com/@salaheddine_kalada/how-i-found-pii-at-nasa-using-google-dorking-6447a89decc7?source=rss------bug_bounty-5 | Salaheddine KALADA | bug-bounty-tips, bug-bounty-writeup, bug-bounty-program, bug-bounty, bug-bounty-hunter | 06-Jan-2025 |
| How I Got My First Critical Bug ## Easy Bug | https://medium.com/@0xoroot/how-i-got-my-first-critical-bug-easy-bug-fb5d1631bcd4?source=rss------bug_bounty-5 | 0xoroot | critical-thinking, bug-bounty, penetration-testing, hacking, bugs | 06-Jan-2025 |
| How I Was Able to Block Any Username | https://infosecwriteups.com/how-i-was-able-to-block-any-username-5707a1fbd25c?source=rss------bug_bounty-5 | JEETPAL | bug-bounty-tips, cybersecurity, bug-bounty-writeup, business-logic-flaw, bug-bounty | 06-Jan-2025 |
| Chrome Extension Hacked: - A Wake-Up Call for Users. | https://medium.com/@forte.social/chrome-extension-hacked-a-wake-up-call-for-users-c0c8de0281aa?source=rss------bug_bounty-5 | eSecForte | bug-bounty-tips, cybersecurity, chrome-extension, bug-bounty, hacking | 06-Jan-2025 |
| The Evolution of Bug Bounties: A Decade of Digital Vigilance | https://medium.com/@hackrate/the-evolution-of-bug-bounties-a-decade-of-digital-vigilance-99b1e86421b0?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, hacking, bug-bounty-tips, bug-bounty, cybersecurity | 06-Jan-2025 |
| How IBM Helped Me Get Private Invites on Hacker1 | https://medium.com/@oxab/how-ibm-helped-me-get-private-invites-on-hacker1-ffbe3c1b26d3?source=rss------bug_bounty-5 | Oxab | bugbounting, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 06-Jan-2025 |
| Introduction to My Bug Bounty Hunting Series | https://it4chis3c.medium.com/introduction-to-my-bug-bounty-hunting-series-79a68dcb07a6?source=rss------bug_bounty-5 | It4chis3c | bug-hunting, bug-bounty, bug-bounty-writeup, web-security, bug-bounty-tips | 06-Jan-2025 |
| Comprehensive Command and Control Tools for Red Teaming Operations | https://saconychukwu.medium.com/comprehensive-command-and-control-tools-for-red-teaming-operations-23e458d830c0?source=rss------bug_bounty-5 | Sacony Chukwu | bug-bounty, bug-bounty-tips, bug-bounty-writeup, cybersecurity, ethical-hacking | 06-Jan-2025 |
| Advanced C# Offensive Frameworks for Red Team Operations | https://saconychukwu.medium.com/advanced-c-offensive-frameworks-for-red-team-operations-a001cac7e10f?source=rss------bug_bounty-5 | Sacony Chukwu | ethical-hacking, bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-tips | 06-Jan-2025 |
| Exploiting Session Hijacking Vulnerability: My Bug Bounty Experience | https://medium.com/@mickaelbenlolo/exploiting-session-hijacking-vulnerability-my-bug-bounty-experience-659706a24a93?source=rss------bug_bounty-5 | Mickael Benlolo | bug-bounty, session-hijacking, penetration-testing, cybersecurity | 06-Jan-2025 |
| Chasing Bugs, Finding Purpose: My Journey to the First Bounty! | https://medium.com/@he4dr0/chasing-bugs-finding-purpose-my-journey-to-the-first-bounty-cf610c0f023e?source=rss------bug_bounty-5 | he4dr0 | bug-bounty, hackerone, security-research, information-disclosure, journey | 06-Jan-2025 |
| How I Found My First Bug | https://medium.com/@dibyaranjanmohanta2806/i-found-my-first-bug-52e20e37b429?source=rss------bug_bounty-5 | Dibyaranjanmohanta | bugs, my-first-bug, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 06-Jan-2025 |
| Eagerbee Backdoor Targets Middle Eastern Government Orgs & ISPs | https://medium.com/@wiretor/eagerbee-backdoor-targets-middle-eastern-government-orgs-isps-e0246bb044c4?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | backdoor, bug-bounty, business, malware, ai | 06-Jan-2025 |
| Cryptocurrency Wallet Drainers Stole $500 Million in 2024 | https://medium.com/@wiretor/cryptocurrency-wallet-drainers-stole-500-million-in-2024-7e1da1edb1b7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, malware, crypto, bug-bounty, ai | 06-Jan-2025 |
| ⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips | https://mhmmuneef.medium.com/thn-weekly-recap-top-cybersecurity-threats-tools-and-tips-b11776bb3c7b?source=rss------bug_bounty-5 | Mohammed Muneef | technology, cybersecurity, bug-bounty, cybercrime, hacking | 06-Jan-2025 |
| Breaking News: Chinese Hackers Breach U.S. Telecom Networks! | https://medium.com/@wiretor/breaking-news-chinese-hackers-breach-u-s-telecom-networks-be8249641716?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, cve, ai, malware | 06-Jan-2025 |
| A List Of Default Admin Panel Passwords to Boost Your Bug Bounty | https://bitpanic.medium.com/a-list-of-default-admin-panel-passwords-to-boost-your-bug-bounty-67af4c4f45b2?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, programming, bug-bounty, technology, bug-bounty-tips | 06-Jan-2025 |
| HR Admin Account Takeover: Chaining Stored XSS and IDOR in a Human Resource App | https://medium.com/@abdullah12987654/hr-admin-account-takeover-chaining-stored-xss-and-idor-in-a-human-resource-app-9718c9e77d34?source=rss------bug_bounty-5 | Abdullah | cyebrsecurity, offensive-security, bug-bounty, ethical-hacking, hacking | 06-Jan-2025 |
| Bug Bounty — How I Found an XSS Vulnerability Through a “Change Email” Option! | https://medium.com/@mickaelbenlolo/bug-bounty-how-i-found-an-xss-vulnerability-through-a-change-email-option-3ed57ba2d11f?source=rss------bug_bounty-5 | Mickael Benlolo | xss-vulnerability, penetration-testing, bug-bounty, cybersecurity | 06-Jan-2025 |
| How I Found My First Bug (RXSS) | https://medium.com/@a0xtrojan/how-i-found-my-first-bug-rxss-2ac44e94d628?source=rss------bug_bounty-5 | A0X_Trojan | tips-and-tricks, xss-attack, bug-bounty, penetration-testing, web-app-security | 06-Jan-2025 |
| Hidden Dangers of XSS Vulnerabilities — Real Case | https://medium.com/meetcyber/hidden-dangers-of-xss-vulnerabilities-real-case-22177daa6fc8?source=rss------bug_bounty-5 | Erkan Kavas | xss-bypass, cybersecurity, xss-attack, bug-bounty, xss-vulnerability | 06-Jan-2025 |
| Day 0 — 05 : M y Bug Bounty Challenge 0–100k without knowledge in one year! | https://medium.com/@dogxxx10/day-0-05-m-y-bug-bounty-challenge-0-100k-without-knowledge-in-one-year-94f090fdf54a?source=rss------bug_bounty-5 | Dogxxx | bug-bounty-writeup, hacking, bug-bounty, bug-bounty-tips, web-hacking | 06-Jan-2025 |
| P4 Bugs and POC | Part-8 | https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-8-2b4ed878c53a?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, bug-bounty-tips, infosec, hacking | 06-Jan-2025 |
| How I Exposed IDOR and Path Traversal Vulnerabilities in a Parking Portal | https://medium.com/@br3ss/how-i-exposed-idor-and-path-traversal-vulnerabilities-in-a-parking-portal-0ae8e4940306?source=rss------bug_bounty-5 | Br3ss | idor, cybersecurity, hacking, path-traversal, bug-bounty | 06-Jan-2025 |
| P4 Bugs and POC | Part-8 | https://infosecwriteups.com/p4-bugs-and-poc-part-8-2b4ed878c53a?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, bug-bounty-tips, infosec, hacking | 06-Jan-2025 |
| My First Bug Report in Microsoft Windows Task Manager | https://medium.com/@abdullah.farwees/my-first-bug-report-in-microsoft-windows-task-manager-726972722e50?source=rss------bug_bounty-5 | Abdullah Farwees - Video Audio Software Engineer | microsoft-bug, microsoft-bug-bounty, bug-bounty-tips, bugs, bug-bounty | 05-Jan-2025 |
| From Recon to Exploitation: 100 Linux Commands Every Pentester Must Know | https://medium.com/@rundcodehero/from-recon-to-exploitation-100-linux-commands-every-pentester-must-know-e8f118226de6?source=rss------bug_bounty-5 | Randi Adhityas Saputra | bug-bounty, linux-tutorial, cybersecurity, command-line, penetration-testing | 05-Jan-2025 |
| Exploiting CORS Misconfigurations: A Bug Bounty Case Study | https://medium.com/@mickaelbenlolo/exploiting-cors-misconfigurations-a-bug-bounty-case-study-8e85a868c3c8?source=rss------bug_bounty-5 | Mickael Benlolo | bug-bounty, cybersecurity, entry-level, pentesting | 05-Jan-2025 |
| Frontrunning Vulnerability: What It Is, How to Exploit, Prevent, and Mitigate It | https://infosecwriteups.com/frontrunning-vulnerability-what-it-is-how-to-exploit-prevent-and-mitigate-it-19149db077bd?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, front-running, web3, bugbounty-writeup, bug-bounty | 05-Jan-2025 |
| Peering into the Shadows: How an Empty Domain Led to a Full-Blown Exploitation Chain | https://medium.com/@tusharpuri6/peering-into-the-shadows-how-an-empty-domain-led-to-a-full-blown-exploitation-chain-b06219d92d0e?source=rss------bug_bounty-5 | Tusharpuri | bug-bounty, penetration-testing, application-security, offensive-security, infosec | 05-Jan-2025 |
| Easy P4: Cloudflare Bypass, Origin IP Found (Part 1) | https://sudosuraj.medium.com/easy-p4-cloudflare-bypass-origin-ip-found-part-1-685d27e73dd0?source=rss------bug_bounty-5 | sudosuraj | hackerone, bug-bounty, sudosuraj, bug-bounty-writeup, info-sec-writeups | 05-Jan-2025 |
| Comprehensive Reconnaissance Tools for Red Teaming and OSINT Operations | https://saconychukwu.medium.com/comprehensive-reconnaissance-tools-for-red-teaming-and-osint-operations-17b06b698548?source=rss------bug_bounty-5 | Sacony Chukwu | penetration-testing, bug-bounty, hacking | 05-Jan-2025 |
| Comprehensive Phishing Tools for Red Teaming and Delivery Tactics | https://saconychukwu.medium.com/comprehensive-phishing-tools-for-red-teaming-and-delivery-tactics-cf30c615ab24?source=rss------bug_bounty-5 | Sacony Chukwu | ethical-hacking, penetration-testing, hacking, bug-bounty | 05-Jan-2025 |
| Bug Bounty — Finding and Exploiting a Cookie Security Flaw: A Deep Dive into PHPSESSID and Missing… | https://medium.com/@mickaelbenlolo/bug-bounty-finding-and-exploiting-a-cookie-security-flaw-a-deep-dive-into-phpsessid-and-missing-3aca0db6c1cd?source=rss------bug_bounty-5 | Mickael Benlolo | penetration-testing, bug-bounty, cybersecurity, entry-level | 05-Jan-2025 |
| Discovering SQLi Vulnerabilities Through Deeper Analysis | https://medium.com/@erkankavas/discovering-sqli-vulnerabilities-through-deeper-analysis-4e305dfbc181?source=rss------bug_bounty-5 | Erkan Kavas | cybersecurity, bug-bounty-tips, bug-bounty-writeup, sqli, bug-bounty | 05-Jan-2025 |
| How I was able to Sign Up at one of the Company Panels ? P3 $$$ | https://19whoami19.medium.com/how-i-was-able-to-sign-up-at-one-of-the-company-panels-p3-c824d76e36e9?source=rss------bug_bounty-5 | WHO AM I ? | cybersecurity, bug-bounty, pentesting, broken-access-control | 05-Jan-2025 |
| Finding and Reporting an XSS Vulnerability: My Bug Bounty Journey | https://medium.com/@mickaelbenlolo/finding-and-reporting-an-xss-vulnerability-my-bug-bounty-journey-0bc4a4609d34?source=rss------bug_bounty-5 | Mickael Benlolo | entry-level, xss-vulnerability, cybersecurity, penetration-testing, bug-bounty | 05-Jan-2025 |
| Strategies to Maximize Your Earnings on Bug Bounty Platforms | https://bitpanic.medium.com/strategies-to-maximize-your-earnings-on-bug-bounty-platforms-6053aaf0a781?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, information-technology, technology, bug-bounty, bug-bounty-tips | 05-Jan-2025 |
| CVE-2025–0224: Provision-ISR SH-4050A-2 Server.js Information Disclosure | https://medium.com/@wiretor/cve-2025-0224-provision-isr-sh-4050a-2-server-js-information-disclosure-42df13998a66?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | cve, ai, bug-bounty, malware, business | 05-Jan-2025 |
| CVE-2025–0226: Information Disclosure Vulnerability in Tsinghua Unigroup Electronic Archives… | https://medium.com/@wiretor/cve-2025-0226-information-disclosure-vulnerability-in-tsinghua-unigroup-electronic-archives-cf44084fc78c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware, ai, business | 05-Jan-2025 |
| Account Deletion Flaw Exposes Chats, Researcher Gets $1,000 (5/30DAYS) | https://medium.com/@zerodaystories/account-deletion-flaw-exposes-chats-researcher-gets-1-000-5-30days-d51245c30c65?source=rss------bug_bounty-5 | 0day stories | technology, bug-bounty, penetration-testing, hacking, cybersecurity | 05-Jan-2025 |
| Bug Bounty Goldmine: The Wildest Cybersecurity Discoveries | https://medium.com/@hackrate/bug-bounty-goldmine-the-wildest-cybersecurity-discoveries-bb6d1be478dd?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, bug-bounty-tips, bug-bounty, hacking, cybersecurity | 05-Jan-2025 |
| Top 8 Bug Bounty Platforms in 2025 | https://hackers-guild-blog.medium.com/top-8-bug-bounty-platforms-in-2025-84a1f6b7b226?source=rss------bug_bounty-5 | Hackers Guild | bug-bounty, hacking, osint, hacker, bug-bounty-program | 05-Jan-2025 |
| Brute Force Attack (Owaspbwa Lab, Hydra Tool) | https://medium.com/@BetterBy0x01/brute-force-attack-owaspbwa-lab-hydra-tool-f3cd947f86bb?source=rss------bug_bounty-5 | Ashutosh Singh Patel | bug-bounty, hacking, security, attack, owasp | 04-Jan-2025 |
| Besides bXSS | https://wanderication.medium.com/besides-bxss-681f3d97cda9?source=rss------bug_bounty-5 | Jay Wandery | bug-bounty, xss-attack | 04-Jan-2025 |
| Account TakeOver | Abusing the Application logic flaw in the reset password functionality | https://wanderication.medium.com/account-takeover-abusing-the-application-logic-flaw-in-the-reset-password-functionality-1b0a92caafca?source=rss------bug_bounty-5 | Jay Wandery | account-takeover-attacks, bug-bounty | 04-Jan-2025 |
| Account Takeover via Facebook Oauth | https://anontriager.medium.com/account-takeover-via-facebook-oauth-cd1f6219f7dd?source=rss------bug_bounty-5 | Anonymous Traiger | bug-bounty, programming, jobs, hacker, cybersecurity | 04-Jan-2025 |
| Top 15 Vulnerable Web Applications and Websites for Ethical Hacking Practice | https://saconychukwu.medium.com/top-15-vulnerable-web-applications-and-websites-for-ethical-hacking-practice-d2062e5bc383?source=rss------bug_bounty-5 | Sacony Chukwu | pentesting, bug-bounty, hacking | 04-Jan-2025 |
| Boost Cybersecurity with Bug Bounty Programs | https://medium.com/@ramanidhaval11/boost-cybersecurity-with-bug-bounty-programs-26498ce74226?source=rss------bug_bounty-5 | Er Dhaval Ramani | cybersecurity, bug-bounty, cyber-security-awareness, bugbounty-writeup | 04-Jan-2025 |
| How I Discovered an Email Disclosure Vulnerability | https://infosecwriteups.com/how-i-discovered-an-email-disclosure-vulnerability-bf798d3f3228?source=rss------bug_bounty-5 | JEETPAL | bug-bounty-writeup, cybersecurity, bug-bounty, bugbounty-tips | 04-Jan-2025 |
| Bug Bash: 11 Creeping Critters Every QA Tester Must Squash! | https://medium.com/@divyarajsinhdev/bug-bash-11-creeping-critters-every-qa-tester-must-squash-31d4da2f7805?source=rss------bug_bounty-5 | Divyarajsinh Dodia | bug-bounty, software-testing, qa, automation, software-development | 04-Jan-2025 |
| List of Top Bug Bounty Platforms for 2025 | https://medium.com/@hackrate/list-of-top-bug-bounty-platforms-for-2025-a13d86290a14?source=rss------bug_bounty-5 | Levente Molnar | penetration-testing, ethical-hacking, cybersecurity, bug-bounty, hacking | 04-Jan-2025 |
| The Power of Swagger UI Docs-Broken access control | https://medium.com/@hamdiyasin135/the-power-of-swagger-ui-docs-broken-access-control-a3b57fb035bd?source=rss------bug_bounty-5 | yassin hamdi | access-control, hackerone, bug-bounty | 04-Jan-2025 |
| P4 Bugs and PoC | Part 4 | https://infosecwriteups.com/p4-bugs-and-poc-part-4-c65113b489b0?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, bug-bounty-tips, infosec, hacking | 04-Jan-2025 |
| Microsoft Vulnerability Exploitation — [IDOR] — Unbinding of Any Microsoft Account’s Recovery Email | https://medium.com/@iamjamehas/microsoft-vulnerability-exploitation-idor-unbinding-of-any-microsoft-accounts-recovery-email-0f6dcf50820e?source=rss------bug_bounty-5 | jamehadv | zero-day, red-team, exploits-zero-day, microsoft, bug-bounty | 04-Jan-2025 |
| API Fuzzing for Bug Bounty: Unlock the Secrets of Vulnerable APIs | https://bevijaygupta.medium.com/api-fuzzing-for-bug-bounty-unlock-the-secrets-of-vulnerable-apis-d8b297280caa?source=rss------bug_bounty-5 | Vijay Kumar Gupta | api, fuzzing, vulnerability, bug-bounty, api-vulnerabilities | 04-Jan-2025 |
| Bad Tenable Plugin Updates Take Down Nessus Agents Worldwide | https://medium.com/@wiretor/bad-tenable-plugin-updates-take-down-nessus-agents-worldwide-baf7c48c34a3?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, xss-attack, ai, malware, bug-bounty | 04-Jan-2025 |
| New Android Malware Alert: FireScam Targets RuStore Users! | https://medium.com/@wiretor/new-android-malware-alert-firescam-targets-rustore-users-b5de983bd805?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, rce, ai, bug-bounty, xss-attack | 04-Jan-2025 |
| Find XSS Vulnerabilities in Minutes | https://medium.com/@phirojshah20/find-xss-vulnerabilities-in-minutes-912d02d2b848?source=rss------bug_bounty-5 | Phirojshah | bugs, bug-bounty, bug-bounty-tips, xss-vulnerability, cybersecurity | 04-Jan-2025 |
| Detecting GraphQL Injection: Tools and Techniques for Security Testers | https://bitpanic.medium.com/detecting-graphql-injection-tools-and-techniques-for-security-testers-f3742d0388aa?source=rss------bug_bounty-5 | Spectat0rguy | technology, programming, bug-bounty-tips, bug-bounty, cybersecurity | 04-Jan-2025 |
| How I Found P1 Vulnerability Using Google Dork | https://h0x1d.medium.com/how-i-found-a-p1-vulnerability-using-google-dork-33ac0250df89?source=rss------bug_bounty-5 | Hamed Mohamed - h0x1d | bug-bounty, bug-bounty-writeup, bug-bounty-tips | 04-Jan-2025 |
| My First Year in Bug Bounty | https://cyxbugs.medium.com/my-first-year-in-bug-bounty-42f39a42fc7f?source=rss------bug_bounty-5 | Cyx | bug-bounty-tips, cybersecurity, hacking, bug-bounty | 04-Jan-2025 |
| Nikto : VulnerabilityScanner COMMANDS | https://jawstar.medium.com/nikto-vulnerabilityscanner-commands-578b76344097?source=rss------bug_bounty-5 | Jawstar | penetration-testing, technology, cybersecurity, bug-bounty, nikto | 04-Jan-2025 |
| P4 Bugs and POC | Part 5 | https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-5-556962ec83f7?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, infosec, hacking, bug-bounty-tips | 04-Jan-2025 |
| What Is Cross Site Request Forgery? | https://medium.com/@dante.falls/what-is-cross-site-request-forgery-a52a48562f58?source=rss------bug_bounty-5 | Dante Falls | cybersecurity, information-security, web-security, bug-bounty | 04-Jan-2025 |
| Detecting GraphQL Injection: Tools and Techniques for Security Testers | https://medium.com/infosecmatrix/detecting-graphql-injection-tools-and-techniques-for-security-testers-f3742d0388aa?source=rss------bug_bounty-5 | Spectat0rguy | technology, programming, bug-bounty-tips, bug-bounty, cybersecurity | 04-Jan-2025 |
| SQL Injection: A Beginner’s Guide PART 1 | https://medium.com/@hamzamabdulrhman/sql-injection-a-beginners-guide-part-1-0bdb41ec8609?source=rss------bug_bounty-5 | Hamza M. Abdulrhman | bug-bounty, sql-injection, hacking, sql, sql-server | 03-Jan-2025 |
| How My Journey Started as a Bug Bounty Hunter | https://virpalsinh.medium.com/how-my-journey-started-as-a-bug-bounty-hunter-67641b57d01f?source=rss------bug_bounty-5 | virpalsinh | information-security, cybersecurity, careers, ethical-hacking, bug-bounty | 03-Jan-2025 |
| What is an Advanced Persistent Threat (APT)? | https://ritikshrivas.medium.com/what-is-an-advanced-persistent-threat-apt-bbf9bb366e2d?source=rss------bug_bounty-5 | Ritik Shrivas | bug-bounty, information-security, vulnerability, cybersecurity, information-technology | 03-Jan-2025 |
| P4 Bugs and POC | Part 1 | https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-1-0dab3517bbe9?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, money, infosec, hacking, bug-bounty-tips | 03-Jan-2025 |
| How I Uncovered an LFI in 15 Seconds: The Tale of a Curious Hacker and an Unprepared Server | https://medium.com/@shyamfdo82/how-i-uncovered-an-lfi-in-15-seconds-the-tale-of-a-curious-hacker-and-an-unprepared-server-e49925452007?source=rss------bug_bounty-5 | Shyamfdo | cybersecurity, red-team, hacking, penetration-testing, bug-bounty | 03-Jan-2025 |
| Use SQL-Map at its best. | https://medium.com/@anandrishav2228/use-sql-map-at-its-best-64180f9ad279?source=rss------bug_bounty-5 | Rishav anand | hacker, money, cybersecurity, bug-bounty, sql | 03-Jan-2025 |
| Bug Bounty Methodology Version 2025 | https://medium.com/@techinsights5/bug-bounty-methodology-version-2025-4cb701838658?source=rss------bug_bounty-5 | TechInsights | bug-bounty-tips, cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-methodology | 03-Jan-2025 |
| PDF.js Arbitrary JavaScript Code Execution (CVE-2024-4367) | https://infosecwriteups.com/pdf-js-arbitrary-javascript-code-execution-cve-2024-4367-be4a64f877df?source=rss------bug_bounty-5 | coffinxp | cve, bug-bounty-tips, bug-bounty, bug-bounty-writeup, pdf | 03-Jan-2025 |
| What is a Hacker? | https://hackers-guild-blog.medium.com/what-is-a-hacker-c957e390855b?source=rss------bug_bounty-5 | Hackers Guild | bounty-program, osint, cybersecurity, hacking, bug-bounty | 03-Jan-2025 |
| Here’s 24 web-application hacking tools: | https://saconychukwu.medium.com/heres-24-web-application-hacking-tools-17369f7f5097?source=rss------bug_bounty-5 | Sacony Chukwu | bug-bounty | 03-Jan-2025 |
| My First RCE Vulnerability | https://medium.com/@RekoJR/my-first-rce-vulnerability-636cdc9f2dab?source=rss------bug_bounty-5 | Reko ! | bug-bounty, bug-bounty-writeup | 03-Jan-2025 |
| PDF.js Arbitrary JavaScript Code Execution (CVE-2024-4367) | https://infosecwriteups.com/pdf-js-arbitrary-javascript-code-execution-cve-2024-4367-be4a64f877df?source=rss------bug_bounty-5 | coffinxp | bug-bounty-tips, bug-bounty, bug-bounty-writeup, technology, xss-attack | 03-Jan-2025 |
| How to Start Penetration Testing: Tools, Techniques, and Tips. | https://cybersaurabh.medium.com/how-to-start-penetration-testing-tools-techniques-and-tips-bfbf09a0130a?source=rss------bug_bounty-5 | The Saurabh Pal | penetration-testing, bug-bounty-writeup, bug-bounty, ethical-hacking, hacking | 03-Jan-2025 |
| Free Labs to Practice XSS | https://medium.com/@MaMad4Ever/free-labs-to-practice-xss-08b11016ba05?source=rss------bug_bounty-5 | MaMad | xss-attack, xss-vulnerability, penetration-testing, xss-challenge, bug-bounty | 03-Jan-2025 |
| The Ultimate Guide to Top Bug Bounty Platforms in 2025 | https://medium.com/@hackrate/the-ultimate-guide-to-top-bug-bounty-platforms-in-2025-b6d6c3442188?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, ethical-hacking, cybersecurity, hacking, penetration-testing | 03-Jan-2025 |
| MFA Bypass Exposed: A C Flaw in Two-Factor Authentication | https://medium.com/@swaroopvenkat828/mfa-bypass-exposed-a-c-flaw-in-two-factor-authentication-6e126b1cfbd0?source=rss------bug_bounty-5 | swaroop 04 | mfa, bug-bounty, mfa-bypass, 2025, bugbounty-writeup | 03-Jan-2025 |
| Siri Privacy Crisis: Apple Faces $95 Million Settlement for Secret Recordings! | https://medium.com/@wiretor/siri-privacy-crisis-apple-faces-95-million-settlement-for-secret-recordings-32472ca8e705?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, business, apple, siri, ai | 03-Jan-2025 |
| €10B Cybersecurity Giant Denies Space Bears Ransomware Breach Claims | https://medium.com/@wiretor/10b-cybersecurity-giant-denies-space-bears-ransomware-breach-claims-464a80206f57?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, ai, business, malware | 03-Jan-2025 |
| Hackers’ New Trick — DoubleClickjacking Hijacks Your Accounts Without a Trace | https://medium.com/@wiretor/hackers-new-trick-doubleclickjacking-hijacks-your-accounts-without-a-trace-d812ec920ac8?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, malware, hacker, bug-bounty, ai | 03-Jan-2025 |
| Over 3 Million Mail Servers Exposed: Time to Encrypt! | https://medium.com/@wiretor/over-3-million-mail-servers-exposed-time-to-encrypt-1c1065932c89?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, ai, malware, bug-bounty, hacking | 03-Jan-2025 |
| Improper Access Control in APIs Earns $3,900 Bounty(4/30 DAYS) | https://medium.com/@zerodaystories/improper-access-control-in-apis-earns-3-900-bounty-4-30-days-5a8668695b84?source=rss------bug_bounty-5 | 0day stories | penetration-testing, bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-tips | 03-Jan-2025 |
| Time based user enumeration [identitytoolkit.googleapis.com] | https://medium.com/bug-bounty/time-based-user-enumeration-identitytoolkit-googleapis-com-72b2710b380a?source=rss------bug_bounty-5 | Philippe Delteil | user-enumeration, google-api, bug-bounty | 03-Jan-2025 |
| P4 Bugs and PoC | Part 2 | https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-2-0842039eddf3?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-tips, infosec, bug-bounty, money, hacking | 03-Jan-2025 |
| PicoCTF Writeups — dont-use-client-side | https://medium.com/@sobatistacyber/picoctf-writeups-dont-use-client-side-1cda7ae1cc87?source=rss------bug_bounty-5 | SoBatista | ctf, bug-bounty, picoctf, hacking, penetration-testing | 03-Jan-2025 |
| Mastering 403 Bypass Techniques: A Penetration Tester’s Guide | https://bitpanic.medium.com/mastering-403-bypass-techniques-a-penetration-testers-guide-f3a1cb16b9a3?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, cybersecurity, technology, programming, bug-bounty | 03-Jan-2025 |
| Python libraries every Hacker should know | https://infosecwriteups.com/python-libraries-every-hacker-should-know-97fb5dae2efd?source=rss------bug_bounty-5 | Abhishek pawar | hacking, programming, cybersecurity, python, bug-bounty | 03-Jan-2025 |
| #ERROR! | https://medium.com/@cybertips96/-d6a3961c1fdd?source=rss------bug_bounty-5 | Cybertips | bug-bounty | 03-Jan-2025 |
| Vulnerability Testing Techniques | https://medium.com/@phirojshah20/vulnerability-testing-techniques-b9498fefd4b3?source=rss------bug_bounty-5 | Phirojshah | bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty, bugs | 03-Jan-2025 |
| P4 Bugs and PoC | Part 3 | https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-3-8ca9776c87bc?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, hacking, bug-bounty-tips, bug-bounty, money | 03-Jan-2025 |
| TOP 10 VULNERABILITIES IN CYBER SECURITY | https://medium.com/@saiganesh18062003/top-10-vulnerabilities-in-cyber-security-337bb7a28760?source=rss------bug_bounty-5 | Levi Ackerman | security, cybersecurity, technology, bug-bounty, security-services | 03-Jan-2025 |
| Be Aware Of It, Hacker! How To Keep Yourself Off Dangerous Triggers During Hacking Story! | https://medium.com/@nnface/be-aware-of-it-hacker-how-to-keep-yourself-off-dangerous-triggers-during-hacking-story-b4e0962c05a7?source=rss------bug_bounty-5 | NnFace | scammer-alert, cybersecurity, bug-bounty, scam, hacking | 03-Jan-2025 |
| How I Found an Open AWS S3 Bucket and Used It to Take Over a Subdomain | https://medium.com/@bochamekh21/how-i-found-an-open-aws-s3-bucket-and-used-it-to-take-over-a-subdomain-75736e90c945?source=rss------bug_bounty-5 | Boubker Chamekh | subdomain-takeover, bug-bounty, hacking, hackerone, bug-bounty-writeup | 03-Jan-2025 |
| P4 Bugs and PoC | Part 3 | https://infosecwriteups.com/p4-bugs-and-poc-part-3-8ca9776c87bc?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, hacking, bug-bounty-tips, bug-bounty, money | 03-Jan-2025 |
| Security Misconfiguration (Tryhackme) | https://medium.com/@BetterBy0x01/security-misconfiguration-tryhackme-9c763a743a71?source=rss------bug_bounty-5 | Ashutosh Singh Patel | tryhackme-writeup, tryhackme, hacking, security, bug-bounty | 02-Jan-2025 |
| Zero Click Account Takeover | https://anontriager.medium.com/zero-click-account-takeover-7f8bdcda2236?source=rss------bug_bounty-5 | Anonymous Traiger | rewards, bug-bounty, programing, hacking, cybersecurity | 02-Jan-2025 |
| hunting #1 | https://medium.com/@dark_zone/hunting-1-ee308e923359?source=rss------bug_bounty-5 | darkzone | bug-bounty | 02-Jan-2025 |
| A Recon Tool That Uses AI to Predict Subdomains | https://medium.com/@kumawatabhijeet2002/a-recon-tool-that-uses-ai-to-predict-subdomains-73a41aaa774d?source=rss------bug_bounty-5 | Abhijeet kumawat | ai, bug-bounty, infosec, hacking, recon | 02-Jan-2025 |
| Code Analysis can help you make $200-$500 (C,C++,Node and general codes) | https://medium.com/@anandrishav2228/code-analysis-can-help-you-make-200-500-c-c-node-and-general-codes-cb7752617931?source=rss------bug_bounty-5 | Rishav anand | money, programming, cybersecurity, bug-bounty, code | 02-Jan-2025 |
| WP-CRON Leading to a Complete Denial of Service (DoS) for Bank ‘X’ | https://cybersecuritywriteups.com/wp-cron-leading-to-a-complete-denial-of-service-dos-for-bank-x-82de725dfa4f?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | ethical-hacking, cyber-security-awareness, cyberattack, bug-bounty, cybersecurity | 02-Jan-2025 |
| 【Activities Guide】A detailed overview of the TECNO Security Response Center’s security incentive… | https://medium.com/@security.tecno/activities-guide-a-detailed-overview-of-the-tecno-security-response-centers-security-incentive-6e43effd8d37?source=rss------bug_bounty-5 | TECNO Security | bug-bounty, hacking, security, activity | 02-Jan-2025 |
| How to Build a Cloud Security Monitoring Dashboard ! | https://medium.com/@paritoshblogs/how-to-build-a-cloud-security-monitoring-dashboard-81951b57613f?source=rss------bug_bounty-5 | Paritosh | cloud-security, bug-bounty, hacking, cybersecurity, cloud | 02-Jan-2025 |
| Google Dorks Checklist for Bug Bounty — Bug Bounty Thursday | https://medium.com/@kerstan/google-dorks-checklist-for-bug-bounty-bug-bounty-thursday-ab5ccadb91b2?source=rss------bug_bounty-5 | kerstan | cybersecurity, bug-bounty, hacking | 02-Jan-2025 |
| Zendesk Access Token Disclosed in a JavaScript File Allowing Ticket Access | https://medium.com/@aloneh1/zendesk-access-token-disclosed-in-a-javascript-file-allowing-ticket-access-cfc5ba637dde?source=rss------bug_bounty-5 | Anzil | bug-bounty, vapt, cybersecurity, bug-bounty-writeup | 02-Jan-2025 |
| Finding Hidden API-Keys & How to Use them | https://medium.com/@sumitcfe/finding-hidden-api-keys-how-to-use-them-9c8a187d922b?source=rss------bug_bounty-5 | Sumit Jain | vulnerability, bug-bounty, bug-bounty-tips, bug-bounty-writeup, bugs | 02-Jan-2025 |
| US Arrests Army Soldier Over AT&T, Verizon Hacking | Linked to Presidential Call Log Leaks | https://medium.com/@wiretor/us-arrests-army-soldier-over-at-t-verizon-hacking-linked-to-presidential-call-log-leaks-25897c6b4e0b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacker, bug-bounty, malware, ai, business | 02-Jan-2025 |
| Rhode Islanders’ Data Breach: Protect Yourself from Cyberattacks Today! | https://medium.com/@wiretor/rhode-islanders-data-breach-protect-yourself-from-cyberattacks-today-1c0f4f79b40b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, business, bug-bounty, hacking, ai | 02-Jan-2025 |
| Election Interference Exposed: Iranian and Russian Cyber Tactics in the Spotlight | https://medium.com/@wiretor/election-interference-exposed-iranian-and-russian-cyber-tactics-in-the-spotlight-3e9059006021?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, business, ai, bug-bounty | 02-Jan-2025 |
| Three Russian-German Nationals Charged with Spying for Russia | https://medium.com/@wiretor/three-russian-german-nationals-charged-with-spying-for-russia-838f9b0d39d4?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ransomware, hacking, secret-service, bug-bounty | 02-Jan-2025 |
| postMessage XSS | https://medium.com/@rootast/postmessage-xss-f5402c9e219c?source=rss------bug_bounty-5 | Arash Shahbazi | javascript, api, xss-attack, bug-bounty, postmessage | 02-Jan-2025 |
| WP-CRON Leading to a Complete Denial of Service (DoS) for Bank ‘X’ | https://cybersecuritywriteups.com/wp-cron-leading-to-a-complete-denial-of-service-dos-for-bank-x-82de725dfa4f?source=rss------bug_bounty-5 | Guru Prasad Pattanaik || TH3N00BH4CK3R | ethical-hacking, cyber-security-awareness, cyberattack, bug-bounty, cybersecurity | 02-Jan-2025 |
| A Guide to MITRE ATT&CK Cloud Matrices: Simplified with Examples | https://medium.com/@paritoshblogs/a-guide-to-mitre-att-ck-cloud-matrices-simplified-with-examples-2f6588b9ac0e?source=rss------bug_bounty-5 | Paritosh | cloud, bug-bounty, hacking, cloud-computing, cybersecurity | 01-Jan-2025 |
| Refer Friends, Win Credit Rewards! | https://medium.com/@security.tecno/refer-friends-win-credit-rewards-574795eeb6a9?source=rss------bug_bounty-5 | TECNO Security | bug-bounty, hacker, rewards, security | 01-Jan-2025 |
| Bug Bounty Journey in 2024 | https://medium.com/@suganthankumaralingam/bug-bounty-journey-in-2024-e4f23874f991?source=rss------bug_bounty-5 | Suganthankumaralingam | bug-bounty-writeup, bug-zero, hackerone, bug-bounty-tips, bug-bounty | 01-Jan-2025 |
| Bypassing Email verification through HTTP response interception | https://callgh0st.medium.com/bypassing-email-verification-through-http-response-interception-7644a907899a?source=rss------bug_bounty-5 | callgh0st | email, bug-bounty, gaza, hacking, support | 01-Jan-2025 |
| Win the Race | Exploiting Race Condition Vulnerability | https://medium.com/codingninjablogs/win-the-race-exploiting-race-condition-vulnerability-21ba7297f039?source=rss------bug_bounty-5 | #$ubh@nk@r | infosec, bug-bounty, web-security, race-condition, hacking | 01-Jan-2025 |
| My first 100 Days with Bug Bounties. | https://medium.com/@rootplinix/my-first-100-days-with-bug-bounties-7c4f69f73d3d?source=rss------bug_bounty-5 | Abu Hurayra | bug-bounty, infosec, vulnerability, cybersecurity, hacking | 01-Jan-2025 |
| Bypassing Email verification through HTTP response interception | https://infosecwriteups.com/bypassing-email-verification-through-http-response-interception-7644a907899a?source=rss------bug_bounty-5 | callgh0st | email, bug-bounty, gaza, hacking, support | 01-Jan-2025 |
| Understanding DNS for Bug Bounty Hunting | https://medium.com/@mastergojo122/understanding-dns-for-bug-bounty-hunting-428ec422aac6?source=rss------bug_bounty-5 | Wahid Najim | dns-servers, dns, bug-bounty, bug-bounty-writeup | 01-Jan-2025 |
| Advanced Enumeration Techniques | https://medium.com/@phirojshah20/advanced-enumeration-techniques-45cbeb429231?source=rss------bug_bounty-5 | Phirojshah | bugs, cybersecurity, bug-bounty, bug-bounty-tips | 01-Jan-2025 |
| Discovery and Probing Tools | https://medium.com/@phirojshah20/discovery-and-probing-tools-5bb0a594b5d2?source=rss------bug_bounty-5 | Phirojshah | bug-bounty-tips, cybersecurity, bug-bounty | 01-Jan-2025 |
| Bug Bounty Hunting Methodology 2025 | https://medium.com/@phirojshah20/bug-bounty-hunting-methodology-2025-797bf8ae4c27?source=rss------bug_bounty-5 | Phirojshah | bug-bounty, bug-hunting, reconnaissance, cybersecurity, bugs | 01-Jan-2025 |
| CVE-2024–56803: Ghostty Vulnerability Allows Command Injection | https://medium.com/@wiretor/cve-2024-56803-ghostty-vulnerability-allows-command-injection-23e41eb1e8ad?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, ai, bug-bounty, business, malware | 01-Jan-2025 |
| Uncover Hidden Web Paths with Recursive Dirbusting | https://bitpanic.medium.com/uncover-hidden-web-paths-with-recursive-dirbusting-6befea8ab485?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, technology, bug-bounty, cybersecurity, programming | 01-Jan-2025 |
| Over 3.1 Million Fake Stars on GitHub: A Threat to Trust & Security ️ | https://medium.com/@wiretor/over-3-1-million-fake-stars-on-github-a-threat-to-trust-security-%EF%B8%8F-f6af3a43224d?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, bug-bounty, malware, hacking, business | 01-Jan-2025 |
| This Simple GraphQL SSRF Bug Earned Me $3,000 (3/30 DAYS) | https://medium.com/@zerodaystories/this-simple-graphql-ssrf-bug-earned-me-3-000-3-30-days-9bd13e2c2f9d?source=rss------bug_bounty-5 | 0day stories | bug-bounty, penetration-testing, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 01-Jan-2025 |
| Dive into Go: A Full Guide for Penetration Testers, Bounty Hunters, and Developers | https://medium.com/@v1xtron/dive-into-go-a-full-guide-for-penetration-testers-bounty-hunters-and-developers-5cc013d3f5c6?source=rss------bug_bounty-5 | v1xtron | go, learn-to-code, programming-languages, bug-bounty | 01-Jan-2025 |
| Welcome to our first article on this account! | https://medium.com/@Dorking1/welcome-to-our-first-article-on-this-account-f7eb4049b768?source=rss------bug_bounty-5 | Dorking1 | bug-bounty, penetration-testing, cybersecurity | 01-Jan-2025 |
| This Simple GraphQL SSRF Bug Earned $3,000 (3/30 DAYS) | https://medium.com/@zerodaystories/this-simple-graphql-ssrf-bug-earned-me-3-000-3-30-days-9bd13e2c2f9d?source=rss------bug_bounty-5 | 0day stories | bug-bounty, penetration-testing, bug-bounty-writeup, cybersecurity, bug-bounty-tips | 01-Jan-2025 |
| File upload bypass — Fuzz magic bytes / Mime types with ffuf | https://medium.com/@opabravo/file-upload-bypass-fuzz-magic-bytes-mime-types-with-ffuf-b218171533d4?source=rss------bug_bounty-5 | Fate Walker | ffuf, fuzzing, penetration-testing, file-upload-vulnerability, bug-bounty | 31-Dec-2024 |
| From Hidden Parameter to Account Takeover | https://medium.com/@radwan0x/from-hidden-parameter-to-account-takeover-e6905f35d93a?source=rss------bug_bounty-5 | Mohamed Radwan | bug-bounty, csrf-attack, bug-bounty-tips | 31-Dec-2024 |
| Vertical Privilege Escalation from Manager to Owner: A Bug Bounty Story | https://medium.com/@swaroopvenkat828/vertical-privilege-escalation-from-manager-to-owner-a-bug-bounty-story-7a039eb0b938?source=rss------bug_bounty-5 | swaroop 04 | privilege-escalation, bug-bounty-tips, bug-bounty | 31-Dec-2024 |
| Sensitive Data Exposure (Tryhackme) | https://medium.com/@BetterBy0x01/sensitive-data-exposure-tryhackme-111ed71542af?source=rss------bug_bounty-5 | Ashutosh Singh Patel | security, data, tryhackme, hacking, bug-bounty | 31-Dec-2024 |
| Mastering XSS in a single read! | https://anontriager.medium.com/mastering-xss-in-a-single-read-40bc850427bd?source=rss------bug_bounty-5 | Anonymous Traiger | bug-bounty, hacker, programming, cybersecurity, jobs | 31-Dec-2024 |
| Mastering 403 Forbidden Bypass Techniques Part-2✨ | https://medium.com/@kumawatabhijeet2002/mastering-403-forbidden-bypass-techniques-part-2-658af618d5b0?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-tips, 403-forbidden, hacking, infosec, bug-bounty | 31-Dec-2024 |
| How I Discovered Exposed .env Files on a Subdomain of a Popular Exam Proctoring Website | https://medium.com/@anonymousshetty2003/how-i-discovered-exposed-env-files-on-a-subdomain-of-a-popular-exam-proctoring-website-50f1847a9e59?source=rss------bug_bounty-5 | Anonymousshetty | information-disclosure, hacking, bug-bounty, cybersecurity, bug-bounty-tips | 31-Dec-2024 |
| How I Discovered a Leaked cAdvisor Panel Dashboard on a Website | https://medium.com/@anonymousshetty2003/how-i-discovered-a-leaked-cadvisor-panel-dashboard-on-a-website-1f097b526b3e?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, shodan, hacking, bug-bounty, bug-hunting | 31-Dec-2024 |
| API Pentesting: Unrestricted Resource Consumption | https://devilwrites.medium.com/api-pentesting-unrestricted-resource-consumption-2692bf368575?source=rss------bug_bounty-5 | hackerdevil | api, api-penetration-testing, owasp, api-security, bug-bounty | 31-Dec-2024 |
| Advanced Analysis: XSS Vulnerability in an AI-Powered Chatbot Service | https://medium.com/@MianHammadx0root/advanced-analysis-xss-vulnerability-in-an-ai-powered-chatbot-service-53212f545624?source=rss------bug_bounty-5 | Mian Hammad | xss-attack, cybersecurity, ai-chat-bot, ai, bug-bounty | 31-Dec-2024 |
| How I Discovered an 8.2 Severity bug on hackerone for Account Takeover via HTML Injection | https://medium.com/@ravindrajatav0709/how-i-discovered-an-8-2-severity-bug-on-hackerone-for-account-takeover-via-html-injection-3e5b0ec32cc9?source=rss------bug_bounty-5 | Ravindrajatav | bugs, bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 31-Dec-2024 |
| My First Year in Bug Bounty Hunting | https://0xshuvo.medium.com/my-first-year-in-bug-bounty-hunting-2b5c2cb9c205?source=rss------bug_bounty-5 | Shuvo Kumar Saha | bug-bounty-hunter, bug-bounty-writeup, bug-bounty, bug-bounty-tips, infosec | 31-Dec-2024 |
| OTP Bypass Leads to $2000 (2/30 DAYS) | https://medium.com/@zerodaystories/otp-bypass-leads-to-2000-2-30-days-7845b2580e7e?source=rss------bug_bounty-5 | 0day stories | bug-bounty-tips, bug-bounty-writeup, bug-bounty, cybersecurity, penetration-testing | 31-Dec-2024 |
| 2024 Bug Bounty Achievements | https://medium.com/readers-club/2024-bug-bounty-achievements-15c5195031d3?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, cybersecurity, failure, growth-mindset, never-give-up | 31-Dec-2024 |
| How was I able to lock any user’s account? | https://zerocode-ph.medium.com/how-was-i-able-to-lock-any-users-account-4303ff175a04?source=rss------bug_bounty-5 | Syd Ricafort (0cod3) | bug-bounty | 31-Dec-2024 |
| The Struggles of Manual Security Testers in an Automation-Heavy Bug Bounty Era | https://mixbanana.medium.com/the-struggles-of-manual-security-testers-in-an-automation-heavy-bug-bounty-era-22cccf32fc13?source=rss------bug_bounty-5 | MixBanana | penetration-testing, security, bug-bounty, cybersecurity | 31-Dec-2024 |
| U.S. Treasury Breached via Remote Support Platform: Lessons for Cybersecurity Professionals | https://medium.com/@wiretor/u-s-treasury-breached-via-remote-support-platform-lessons-for-cybersecurity-professionals-bd25d69ee856?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, bug-bounty, ai, xss-attack, hacker | 31-Dec-2024 |
| Session Hijacking Vulnerability in Password Reset Flow Leading to Cross-Account Access | https://medium.com/@iPsalmy/session-hijacking-vulnerability-in-password-reset-flow-leading-to-cross-account-access-4823d88e680a?source=rss------bug_bounty-5 | iPsalmy | penetration-testing, cybersecurity, application-security, information-security, bug-bounty | 31-Dec-2024 |
| My story of hacking Dutch Government | by Chinmaya Rana | https://chinmayarana.medium.com/my-story-of-hacking-dutch-government-by-chinmaya-rana-b54ea26c92dd?source=rss------bug_bounty-5 | Chinmaya Rana | hacking, readteam, bug-bounty, cybersecurity, web-security | 31-Dec-2024 |
| Unleashing My Recon Weapon: A Custom Bash Tool for Bug Bounty | https://medium.com/@kumawatabhijeet2002/unleashing-my-recon-weapon-a-custom-bash-tool-for-bug-bounty-d946b5f26dd9?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, bug-bounty-tips, recon, hacking, infosec | 31-Dec-2024 |
| This is a writeup of how can I get critical $$$$ bounty from PII Disclosure - Broken Access | https://medium.com/@0xNayelx/this-is-a-writeup-of-how-can-i-get-critical-bounty-from-pii-disclosure-broken-access-7a113e5dc50c?source=rss------bug_bounty-5 | 0xNayel | bug-bounty-writeup, ctf-writeup, cybersecurity, bug-bounty-tips, bug-bounty | 31-Dec-2024 |
| SQLi Time-Based Blind Finding Methods | https://medium.com/@erkankavas/sqli-time-based-blind-finding-methods-cdef02de2d0e?source=rss------bug_bounty-5 | Erkan Kavas | sqli, ethical-hacking, bug-bounty, bug-bounty-tips, hacking | 31-Dec-2024 |
| Old School Out-of-Band (OOB) SQL Injection Manual Approach | https://anontuttuvenus.medium.com/old-school-out-of-band-oob-sql-injection-manual-approach-cc50b81c5984?source=rss------bug_bounty-5 | Anon Tuttu Venus | webapplicationpentest, sql-injection, bug-bounty, owasp-top-10, sqli | 31-Dec-2024 |
| Alhamdulillah ❤️ | https://medium.com/@momenrezkk90/alhamdulillah-%EF%B8%8F-4c8ba456bec1?source=rss------bug_bounty-5 | MOAMEN REZK | bug-bounty, cybersecurity, penetration-testing, bugs, red-team | 31-Dec-2024 |
| Mastering Wfuzz: Uncover Hidden Web Vulnerabilitiese | https://medium.com/@kumawatabhijeet2002/mastering-wfuzz-uncover-hidden-web-vulnerabilitiese-351cbbef18d6?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, bug-bounty-tips, bug-bounty, infosec, medium | 30-Dec-2024 |
| Sql Injection Vulnerability via Registration Form | https://medium.com/@kevstrs_/sql-injection-vulnerability-via-registration-form-ccaf7bbddd0b?source=rss------bug_bounty-5 | kevstrs_ | sql-injection, bug-bounty, injection, pentesting | 30-Dec-2024 |
| How I was able to delete a production backend server in my first finding. | https://gr3yg05t.medium.com/how-i-was-able-to-delete-a-production-backend-server-in-my-first-finding-5dcce8aa093c?source=rss------bug_bounty-5 | Mr Grey | bug-bounty, bug-bounty-tips, info-sec-writeups, infosec, bug-bounty-writeup | 30-Dec-2024 |
| Triaging an LFI Vulnerability Report | https://anontriager.medium.com/triaging-an-lfi-vulnerability-report-ad9a33016f0c?source=rss------bug_bounty-5 | Anonymous Traiger | jobs, programming, money, bug-bounty, cybersecurity | 30-Dec-2024 |
| US Healthcare Providers May Be Hit With New Cybersecurity Rules | https://mhmmuneef.medium.com/us-healthcare-providers-may-be-hit-with-new-cybersecurity-rules-61aa2655ea79?source=rss------bug_bounty-5 | Mohammed Muneef | healthcare-technology, cybersecurity-awareness, news, bug-bounty, technology | 30-Dec-2024 |
| ️♂️ Enhancing Bug Bounty Programs in an AI-Driven Market | https://infosecwriteups.com/%EF%B8%8F-%EF%B8%8F-enhancing-bug-bounty-programs-in-an-ai-driven-market-e512b0b2766a?source=rss------bug_bounty-5 | Tal Eliyahu | bug-bounty, genai, artificial-intelligence, security, cybersecurity | 30-Dec-2024 |
| DNS Tunneling to Bypass Firewall. | https://medium.com/@anandrishav2228/dns-tunneling-to-bypass-firewall-ab5e9d91bd7b?source=rss------bug_bounty-5 | Rishav anand | firewall, bug-bounty, money, hacking, cybersecurity | 30-Dec-2024 |
| When APIs Can’t Keep Up: How I Exploited Misconfigured Rate Limits to Crash the Party | https://myselfakash20.medium.com/when-apis-cant-keep-up-how-i-exploited-misconfigured-rate-limits-to-crash-the-party-e5be48d4cacd?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, bug-bounty, bug-bounty-writeup, technology, cybersecurity | 30-Dec-2024 |
| Exploiting SQLi to Query Database Version on MySQL and Microsoft | https://osintteam.blog/exploiting-sqli-to-query-database-version-on-mysql-and-microsoft-8d38a3ec42b4?source=rss------bug_bounty-5 | The Cybersec Café | sql-injection, cybersecurity, information-security, penetration-testing, bug-bounty | 30-Dec-2024 |
| Server-side vulnerabilities | #1 PATH TRAVERSAL | https://medium.com/@agapehearts/server-side-vulnerabilities-1-path-traversal-5df782acb60d?source=rss------bug_bounty-5 | Agape HearTs | ethical-hacking, portswigger, servers, cybersecurity, bug-bounty | 30-Dec-2024 |
| CSRF Enable 2FA allow User Lose Access to Their Account. | https://anjarwilujeng.medium.com/csrf-enable-2fa-allow-user-lose-access-to-their-account-331eaed89d25?source=rss------bug_bounty-5 | AWesome | bug-bounty, bug-bounty-writeup, csrf | 30-Dec-2024 |
| Hacker Nedir ve Türleri Nelerdir? | https://medium.com/@gzmpyrz99/hacker-nedir-ve-t%C3%BCrleri-nelerdir-abff0e616fbf?source=rss------bug_bounty-5 | Gizem Poyraz | blue-team, hacker, red-team, scriptkkiddie, bug-bounty | 30-Dec-2024 |
| When APIs Can’t Keep Up: How I Exploited Misconfigured Rate Limits to Crash the Party | https://infosecwriteups.com/when-apis-cant-keep-up-how-i-exploited-misconfigured-rate-limits-to-crash-the-party-e5be48d4cacd?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, hacking, programming, technology, cybersecurity | 30-Dec-2024 |
| Weirdest access control vulnerability I have ever found… | https://siratsami71.medium.com/weirdest-access-control-vulnerability-i-have-ever-found-b3ea97019fad?source=rss------bug_bounty-5 | Sirat Sami (analyz3r) | hackerone, security, pentesting, bug-bounty | 30-Dec-2024 |
| What Bug Bounty Hunters Don’t Tell You. | https://medium.com/@padhyepushkar/what-bug-bounty-hunters-dont-tell-you-78969ca0916a?source=rss------bug_bounty-5 | Pushkar Padhye | bug-bounty, bug-bounty-writeup, bug-bounty-tips, blogging, knowledge | 30-Dec-2024 |
| Unauthorized Account Deletion via Email Spoofing | https://medium.com/@Salmansaifeldin/unauthorized-account-deletion-via-email-spoofing-dbfccad287c7?source=rss------bug_bounty-5 | Salman SaifEl-Din | bug-bounty-tips, cybersecurity, bug-bounty | 30-Dec-2024 |
| Unlocking Secrets: How to Create Your Own Wordlist for Hidden Directories and Endpoints ✨ | https://medium.com/@kumawatabhijeet2002/unlocking-secrets-how-to-create-your-own-wordlist-for-hidden-directories-and-endpoints-9d78539857b3?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-tips, hacking, bug-bounty, medium, infosec | 30-Dec-2024 |
| Bug Bounty Insights: 10 Key Findings - Email Verification Flaws - Part 4 | https://medium.com/@maakthon/bug-bounty-insights-10-key-findings-email-verification-flaws-part-4-49412c461450?source=rss------bug_bounty-5 | Mahmoud Abd Alkarim | bug-bounty-tips, security-research, bug-bounty, cybersecurity, broken-access-control | 30-Dec-2024 |
| Delete any comment without admin privilege | https://medium.com/@a.essam0_o/delete-any-comment-without-admin-privilege-d5af9105ed9d?source=rss------bug_bounty-5 | A.Essam | attack, bug-bounty, web, hacking, pentesting | 30-Dec-2024 |
| PortSwigger — Authentication | https://medium.com/@rzashirinov38/portswigger-authentication-e3760f4d1411?source=rss------bug_bounty-5 | Rza Shirinov | portswigger, authentication, web, bug-bounty, login | 30-Dec-2024 |
| Hidden Gems: Simple Exploits Overlooked by Most Bug Hunters | https://bitpanic.medium.com/hidden-gems-simple-exploits-overlooked-by-most-bug-hunters-3113cc1db4b8?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, bug-bounty, technology, cybersecurity, programming | 30-Dec-2024 |
| Apache MINA CVE-2024–52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization | https://medium.com/@wiretor/apache-mina-cve-2024-52046-cvss-10-0-flaw-enables-rce-via-unsafe-serialization-1d042d0ad53e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | xss-attack, malware, hacking, bug-bounty, apache-mina | 30-Dec-2024 |
| Outdated D-Link Routers Under Siege: Botnets Exploit Vulnerabilities | https://medium.com/@wiretor/outdated-d-link-routers-under-siege-botnets-exploit-vulnerabilities-24fa380d9e2e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, ai, xss-attack, hacking | 30-Dec-2024 |
| US Cracks Down on Foreign Exploitation of Personal Information | https://medium.com/@wiretor/us-cracks-down-on-foreign-exploitation-of-personal-information-1c57dd844750?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, usa, bug-bounty, hacker, xss-attack | 30-Dec-2024 |
| Telecom Giants Secure Networks After Salt Typhoon Espionage Scandal | https://medium.com/@wiretor/telecom-giants-secure-networks-after-salt-typhoon-espionage-scandal-106159c959ba?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | xss-attack, bug-bounty, malware, ai, hacking | 30-Dec-2024 |
| Useful Extensions for Bug Bounty Hunting | https://medium.com/@phirojshah20/useful-extensions-for-bug-bounty-hunting-0a1f4e32344c?source=rss------bug_bounty-5 | Phirojshah | cybersecurity, bug-bounty, bugs, bug-bounty-tips, extension | 30-Dec-2024 |
| How to Find Origin IP of any Website Behind a WAF | https://infosecwriteups.com/how-to-find-origin-ip-of-any-website-behind-a-waf-c85095156ef7?source=rss------bug_bounty-5 | coffinxp | bug-bounty-tips, waf-bypass, bug-bounty, technology, recon | 30-Dec-2024 |
| Mastering the Art of Bug Bounty Hunting: A Step-by-Step Guide | https://medium.com/@kumawatabhijeet2002/mastering-the-art-of-bug-bounty-hunting-a-step-by-step-guide-8eaabfe1cbf6?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, infosec, hacking, free, bug-bounty-tips | 30-Dec-2024 |
| Discovered 30 BOLA + IDOR vulnerabilities in a single subdomain (BBP). | https://im4x.medium.com/discovered-30-bola-idor-vulnerabilities-in-a-single-subdomain-bbp-a382e4554e71?source=rss------bug_bounty-5 | Ahmed Najeh | hacking, bug-bounty, hackerone | 30-Dec-2024 |
| How I Took Over Millions of Instagram Accounts Using SQL Injection Method & Takeover via Filtering… | https://pwn0sec.medium.com/how-i-took-over-millions-of-instagram-accounts-using-sql-injection-method-takeover-via-filtering-cd858d486a54?source=rss------bug_bounty-5 | PwnOsec Research Groups | indonesian, bug-bounty, pemerintah-indonesia, bug-bounty-tips | 30-Dec-2024 |
| Breaking app’s logic workflow to decrease the payments’ amounts | https://medium.com/@bag0zathev2/breaking-apps-logic-workflow-to-decrease-the-payments-amounts-9c9f44efe23d?source=rss------bug_bounty-5 | Fares Walid (SirBugs) | cybersecurity, bug-bounty, bug-hunting, payment-gateway, payments | 29-Dec-2024 |
| Command Injection (Tryhackme and Owaspbwa) | https://medium.com/@BetterBy0x01/command-injection-tryhackme-and-owaspbwa-6765b324c99d?source=rss------bug_bounty-5 | Ashutosh Singh Patel | command-injection, security, bug-hunting, hacking, bug-bounty | 29-Dec-2024 |
| how i found the parameter tempering vulnerability? | https://doordiefordream.medium.com/how-i-found-the-parameter-tempering-vulnerability-09c4ea5f9675?source=rss------bug_bounty-5 | Bug hunter balu | bug-bounty, hacking, cybersecurity, ethical-hacking, web3 | 29-Dec-2024 |
| Cross-Domain Referrer Leakage (Bug Bounty) | https://anontriager.medium.com/cross-domain-referrer-leakage-bug-bounty-5c7fb967883d?source=rss------bug_bounty-5 | Anonymous Traiger | bug-bounty, cybersecurity, bug-bounty-tips, jobs, bug-bounty-writeup | 29-Dec-2024 |
| How to find SSRF, Bypass Cloudflare, and extract AWS metadata | https://anontriager.medium.com/how-to-find-ssrf-bypass-cloudflare-and-extract-aws-metadata-46d1ee6d1857?source=rss------bug_bounty-5 | Anonymous Traiger | cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty, jobs | 29-Dec-2024 |
| Uncovering Race Conditions in Endpoint API Key Generation | https://anjarwilujeng.medium.com/uncovering-race-conditions-in-endpoint-api-key-generation-dec3abf31a83?source=rss------bug_bounty-5 | AWesome | race-condition, bug-bounty-writeup, bug-bounty | 29-Dec-2024 |
| HTB Write-Up: Retrieving the Flag via cURL | 使用 cURL 提取 Flag | https://medium.com/@lixinlovestudy/htb-write-up-retrieving-the-flag-via-curl-%E4%BD%BF%E7%94%A8-curl-%E6%8F%90%E5%8F%96-flag-5987084868bb?source=rss------bug_bounty-5 | Lixin Zhang | hackthebox, writeup, bug-bounty | 29-Dec-2024 |
| Complete Guide to SQL Injection Detection: A Security Researcher’s Handbook | https://medium.com/@phirojshah20/complete-guide-to-sql-injection-detection-a-security-researchers-handbook-c3b25d40bdb6?source=rss------bug_bounty-5 | Phirojshah | cybersecurity, bug-bounty, sql, sql-injection, bugs | 29-Dec-2024 |
| Apk Bug Boundy Guide | https://medium.com/@adithyakrishnav001/apk-bug-boundy-guide-7968d04baf7e?source=rss------bug_bounty-5 | Adithyakrishna V | hacking, android, bug-bounty, apk, aad1 | 29-Dec-2024 |
| Crack the Code: A Beginner’s Blueprint to Cybersecurity Success | https://medium.com/@divyesh.jagad/crack-the-code-a-beginners-blueprint-to-cybersecurity-success-6aa6546a89bd?source=rss------bug_bounty-5 | Divyesh Jagad | infosec, cybersecurity, bug-bounty, beginner, income | 29-Dec-2024 |
| Hunting Hidden Gems: Bug Bounties in the Code of JavaScript | https://medium.com/@loayahmed686/hunting-hidden-gems-bug-bounties-in-the-code-of-javascript-f369a6617204?source=rss------bug_bounty-5 | r00t | code-review, bug-bounty-tips, bug-bounty | 29-Dec-2024 |
| BEST AUTOMATED TOOLS THAT YOU NEED TO KNOW NOW ????? | https://jawstar.medium.com/best-automated-tools-that-you-need-to-know-now-f7c883f0487c?source=rss------bug_bounty-5 | Jawstar | automation-testing, automation, penetration-testing, vulnerability, bug-bounty | 29-Dec-2024 |
| OWASP Top 10 2025: What to Expect | https://infosecwriteups.com/owasp-top-10-2025-what-to-expect-22b8ede0c428?source=rss------bug_bounty-5 | Aditya Sawant | penetration-testing, bug-bounty, information-security, owasp, cybersecurity | 29-Dec-2024 |
| Brazilian Hacker Charged with Extorting $3.2M in Bitcoin After Breaching 300,000 Accounts | https://medium.com/@wiretor/brazilian-hacker-charged-with-extorting-3-2m-in-bitcoin-after-breaching-300-000-accounts-22a888c20177?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | xss-attack, ai, business, bug-bounty, malware | 29-Dec-2024 |
| Ruijie Networks’ Cloud Platform Vulnerabilities Could Expose 50,000 Devices to Remote Attacks | https://medium.com/@wiretor/ruijie-networks-cloud-platform-vulnerabilities-could-expose-50-000-devices-to-remote-attacks-0c71e3e230b0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacker, bug-bounty, ai, business, malware | 29-Dec-2024 |
| Critical Alert: CVE-2024–12356 Command Injection Vulnerability in BeyondTrust RS & PRA | https://medium.com/@wiretor/critical-alert-cve-2024-12356-command-injection-vulnerability-in-beyondtrust-rs-pra-6e8df2f63471?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, ai, bus, malware | 29-Dec-2024 |
| Hackers Target ZAGG Customers in Third-Party Breach: Credit Card Data Exposed | https://medium.com/@wiretor/hackers-target-zagg-customers-in-third-party-breach-credit-card-data-exposed-8d2ac0f66ba2?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, business, bug-bounty, malware, hacker | 29-Dec-2024 |
| Mastering DIRB: Your Guide to Uncovering Hidden Web Directories | https://medium.com/@kumawatabhijeet2002/mastering-dirb-your-guide-to-uncovering-hidden-web-directories-d336f6dafa36?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, hacking, infosec, free, bug-bounty-tips | 29-Dec-2024 |
| Every Flask app hides a story—be the one to uncover it | https://bitpanic.medium.com/every-flask-app-hides-a-story-be-the-one-to-uncover-it-32f2942f7927?source=rss------bug_bounty-5 | Spectat0rguy | information-security, cybersecurity, technology, bug-bounty, bug-bounty-tips | 29-Dec-2024 |
| How I Unsubscribed 100+ Emails Including CEO*CTO*CISO* Etc Of The Company With Out User Interaction | https://medium.com/@alexandermr289/how-i-unsubscribed-100-emails-including-ceo-cto-ciso-etc-of-the-company-with-out-user-interaction-f6d78320ddaf?source=rss------bug_bounty-5 | Mr_alexander | osint, cybersecurity, medium, bug-bounty, darkweb | 29-Dec-2024 |
| HTML Injection | https://medium.com/@mastergojo122/html-injection-b6f4151c7d6a?source=rss------bug_bounty-5 | Wahid Najim | html-injection, bug-bounty-writeup, cybersecurity, bug-bounty | 29-Dec-2024 |
| 403/401 Bypass Methods + Bash Automation + Your Support 😉 | https://anontriager.medium.com/403-401-bypass-methods-bash-automation-your-support-5468b93599fd?source=rss------bug_bounty-5 | Anonymous Traiger | bug-bounty, cybersecurity, bugbounty-tips, bug-bounty-writeup | 28-Dec-2024 |
| The Bug Bounty Reconnaissance Framework (BBRF) | https://anontriager.medium.com/the-bug-bounty-reconnaissance-framework-bbrf-9e6d5d814551?source=rss------bug_bounty-5 | Anonymous Traiger | bug-bounty, cybersecurity, bugbounty-tips, bug-bounty-writeup | 28-Dec-2024 |
| You can find hardcoded API-Key, Secret, Token Etc… | https://anontriager.medium.com/you-can-find-hardcoded-api-key-secret-token-etc-d27130c481a8?source=rss------bug_bounty-5 | Anonymous Traiger | cybersecurity, bugbounty-poc, bug-bounty, bugbounting, bug-bounty-tips | 28-Dec-2024 |
| Exploiting Weak Password Change Mechanisms: Real-World Scenarios | https://medium.com/@alvinbijo_174/exploiting-weak-password-change-mechanisms-real-world-scenarios-84394158e9d8?source=rss------bug_bounty-5 | session-x | bug-bounty-tips, bug-bounty | 28-Dec-2024 |
| IDOR Flaw Leads to $1160 Bounty (1/30 DAYS) | https://medium.com/@zerodaystories/idor-flaw-leads-to-1160-bounty-1-30-days-406cd288bebb?source=rss------bug_bounty-5 | 0day stories | bug-bounty, cybersecurity, bug-bounty-tips, bug-bounty-writeup, penetration-testing | 28-Dec-2024 |
| How I was able to delete MFA of any user without Authentication | https://medium.com/@sharp488/how-i-was-able-to-delete-mfa-of-any-user-without-authentication-814904b506a2?source=rss------bug_bounty-5 | Sharat Kaikolamthuruthil | bug-bounty-writeup, information-security, bug-bounty-hunter, bug-bounty-tips, bug-bounty | 28-Dec-2024 |
| Bug Hunting Methodology: A Comprehensive Guide | https://medium.com/@phirojshah20/bug-hunting-methodology-a-comprehensive-guide-619978852f89?source=rss------bug_bounty-5 | Phirojshah | recon, reconnaissance, bug-bounty, bug-bounty-tips, cybersecurity | 28-Dec-2024 |
| Best Cyber Security tools You Must Know before 2024 ENDS | https://medium.com/meetcyber/best-cyber-security-tools-you-must-know-before-2024-ends-c207bd6ba0cd?source=rss------bug_bounty-5 | Abhishek pawar | bug-bounty, hacking, news, cybersecurity, ethical-hacking | 28-Dec-2024 |
| Default Credentials Put 15,000+ Four-Faith Routers at Risk | https://medium.com/@wiretor/default-credentials-put-15-000-four-faith-routers-at-risk-65d235b23cfe?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacker, malware, business, bug-bounty, ai | 28-Dec-2024 |
| ✈️ Japan Airlines Hit by Cyberattack: A Wake-Up Call for Aviation Cybersecurity! ✈️ | https://medium.com/@wiretor/%EF%B8%8F-japan-airlines-hit-by-cyberattack-a-wake-up-call-for-aviation-cybersecurity-%EF%B8%8F-dfddcafa3d34?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, xss-attack, hacking, japan, bug-bounty | 28-Dec-2024 |
| Volkswagen Leak Reveals 800,000 Cars’ Data: Precision Geo-Locations Exposed! | https://medium.com/@wiretor/volkswagen-leak-reveals-800-000-cars-data-precision-geo-locations-exposed-80acc7587581?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ai, bug-bounty, hacking, business | 28-Dec-2024 |
| Chinese Hackers Target U.S. Telecoms: What You Need to Know | https://medium.com/@wiretor/chinese-hackers-target-u-s-telecoms-what-you-need-to-know-4637ca456eeb?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, malware, ai, business | 28-Dec-2024 |
| Mastering Gobuster: Unveiling Hidden Paths in Web Applications | https://medium.com/@kumawatabhijeet2002/mastering-gobuster-unveiling-hidden-paths-in-web-applications-2c7b6bb2fb1d?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, bug-bounty-tips, hidden, hacking, infosec | 28-Dec-2024 |
| Admin Hunter: Fast and Efficient Admin Panel Discovery | https://medium.com/@rootspaghetti/admin-hunter-fast-and-efficient-admin-panel-discovery-6461e818942c?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty-tips, bug-bounty | 28-Dec-2024 |
| Logic Flaw: Turning an Invitation Function into a Revenue Blocker | https://gr3yg05t.medium.com/logic-flaw-turning-an-invitation-function-into-a-revenue-blocker-b4523dc46dde?source=rss------bug_bounty-5 | Mr Grey | bug-bounty-writeup, bug-bounty-tips, bug-bounty, business-logic-flaw, infosec | 27-Dec-2024 |
| Most commonly found Vulnerabilities in Web Applications. | https://medium.com/paktolus-engineering/most-commonly-found-vulnerabilities-in-web-applications-01dfb54530e2?source=rss------bug_bounty-5 | Jay Shankar | penetration-testing, web-vulnerabilities, bug-bounty-writeup, bug-bounty, vapt-services | 27-Dec-2024 |
| Logic Flaw: Using Invitation Function to Block Other Accounts | https://gr3yg05t.medium.com/logic-flaw-turning-an-invitation-function-into-a-revenue-blocker-b4523dc46dde?source=rss------bug_bounty-5 | Mr Grey | bug-bounty-writeup, bug-bounty-tips, bug-bounty, business-logic-flaw, infosec | 27-Dec-2024 |
| Cookie Replay | https://vikasrai11.medium.com/cookie-replay-e379800e40b2?source=rss------bug_bounty-5 | Vikas Rai | penetration-testing, bug-bounty, vulnerability, security-token, cybersecurity | 27-Dec-2024 |
| How i accidentally found a 1-click account takeover bug | https://infosecwriteups.com/how-i-accidentally-found-a-1-click-account-takeover-bug-dd27a512dd22?source=rss------bug_bounty-5 | callgh0st | account-takeover, transparency, gaza, bug-bounty, hacking | 27-Dec-2024 |
| Is 2025 the Year to Begin Bug Bounty Hunting? Here’s What you need to Know .. | https://medium.com/@techinsights5/is-2025-the-year-to-begin-bug-bounty-hunting-heres-what-you-need-to-know-3e61bcf14a4b?source=rss------bug_bounty-5 | TechInsights | ethical-hacking, bug-bounty-tips, bug-bounty-writeup, bug-bounty, cybersecurity | 27-Dec-2024 |
| AdsPower「安全众测计划」后，What’s Next？ | https://medium.com/@AdsPowerHK/adspower-%E5%AE%89%E5%85%A8%E4%BC%97%E6%B5%8B%E8%AE%A1%E5%88%92-%E5%90%8E-whats-next-01a612937c93?source=rss------bug_bounty-5 | AdsPower 指紋瀏覽器 | bug-bounty, 指纹浏览器, adspower | 27-Dec-2024 |
| The WAF Gambit: How I Bypassed a Client’s Web Application Firewall and Exposed a Vulnerability | https://medium.com/@GHOSTWIELD/the-waf-gambit-how-i-bypassed-a-clients-web-application-firewall-and-exposed-a-vulnerability-d8f47452429a?source=rss------bug_bounty-5 | GhostWield | cybersecurity, money, hacking, trends, bug-bounty | 27-Dec-2024 |
| Game Hacking: Exploiting Executables and Libraries | https://medium.com/@k3r0/game-hacking-exploiting-executables-and-libraries-27c1b144732a?source=rss------bug_bounty-5 | Kyrillos nady | hacking, android, bug-bounty, penetration-testing, games | 27-Dec-2024 |
| Bug Bounty Hunting Using Android: A Mobile Hacker’s Toolkit | https://bitpanic.medium.com/bug-bounty-hunting-using-android-a-mobile-hackers-toolkit-195ea39cccd6?source=rss------bug_bounty-5 | Spectat0rguy | information-security, bug-bounty, technology, bug-bounty-tips, cybersecurity | 27-Dec-2024 |
| Hackers Exploit CVE-2024–3393 to Disable Palo Alto Networks Firewalls | https://medium.com/@wiretor/hackers-exploit-cve-2024-3393-to-disable-palo-alto-networks-firewalls-00e89bb60c11?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, xss-attack, malware, hacking | 27-Dec-2024 |
| Beware of ‘OtterCookie’ Malware: Devs Targeted with Fake Job Offers! | https://medium.com/@wiretor/beware-of-ottercookie-malware-devs-targeted-with-fake-job-offers-01367c51f639?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, malware, bug-bounty, hacking, ai | 27-Dec-2024 |
| Chrome Extensions Hijacked: Protect Your Data Now! | https://medium.com/@wiretor/chrome-extensions-hijacked-protect-your-data-now-8bd0e43d8473?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | xs, hacking, malware, bug-bounty, ai | 27-Dec-2024 |
| Mastering FFUF: The Ultimate Fuzzing Toolkit | https://medium.com/@kumawatabhijeet2002/mastering-ffuf-the-ultimate-fuzzing-toolkit-e16a85416c5c?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, bug-bounty, bug-bounty-tips, infosec, medium | 27-Dec-2024 |
| BPP [$750]Arbitrary File Upload Vulnerability To Remote Code Execution (RCE) Outside the Platform. | https://aryasec.medium.com/bpp-750-arbitrary-file-upload-vulnerability-to-remote-code-execution-rce-outside-the-platform-9093b51d044d?source=rss------bug_bounty-5 | Tengku Arya Saputra | rce-vulnerability, penetration-testing, bug-bounty, rce, bug-bounty-writeup | 27-Dec-2024 |
| Must-Have Browser Extensions for Bug Bounty Hunters | https://aiwolfie.medium.com/must-have-browser-extensions-for-bug-bounty-hunters-58edff558912?source=rss------bug_bounty-5 | AIwolfie | bug-bounty, bug-bounty-tips, hacking, ethical-hacking, bug-bounty-writeup | 27-Dec-2024 |
| Bug Chain: pre-auth takeover to permanent access. | https://gr3yg05t.medium.com/bug-chain-pre-auth-takeover-to-permanent-access-4d92829ed816?source=rss------bug_bounty-5 | Mr Grey | bug-bounty-tips, bug-bounty, infosec, bug-bounty-writeup, business-logic-flaw | 27-Dec-2024 |
| Bug Bounty Hunting Using Android: A Mobile Hacker’s Toolkit | https://medium.com/infosecmatrix/bug-bounty-hunting-using-android-a-mobile-hackers-toolkit-195ea39cccd6?source=rss------bug_bounty-5 | Spectat0rguy | information-security, bug-bounty, technology, bug-bounty-tips, cybersecurity | 27-Dec-2024 |
| Uncovering Amazon S3 Bucket Vulnerabilities: A Comprehensive Guide for Ethical Hackers | https://medium.com/@kumawatabhijeet2002/uncovering-amazon-s3-bucket-vulnerabilities-a-comprehensive-guide-for-ethical-hackers-124790bf9e62?source=rss------bug_bounty-5 | Abhijeet kumawat | s3, amazon, hacking, bug-bounty-tips, bug-bounty | 26-Dec-2024 |
| How i Found WCP To DoS Attack Worth of $$$ | https://medium.com/@RekoJR/how-i-found-wcp-to-dos-attack-worth-of-f1a14553be82?source=rss------bug_bounty-5 | Reko ! | bug-bounty-tips, cache, bug-bounty | 26-Dec-2024 |
| My Second Year into Bug Bounties — From Google Dorks to Manual Hunting | https://medium.com/@vedantroy/my-second-year-into-bug-bounties-from-google-dorks-to-manual-hunting-ea8f80dc5b21?source=rss------bug_bounty-5 | Vedant Roy | bugbounty-writeup, cybersecurity, bugs, bug-bounty, bug-bounty-tips | 26-Dec-2024 |
| Find XSS Vulnerabilities in Just 2 Minutes | https://coffinxp.medium.com/find-xss-vulnerabilities-in-just-2-minutes-d14b63d000b1?source=rss------bug_bounty-5 | coffinxp | xss-attack, hacking, automation, bug-bounty-tips, bug-bounty | 26-Dec-2024 |
| Uncovering Amazon S3 Bucket Vulnerabilities: A Comprehensive Guide for Ethical Hackers | https://medium.com/infosecmatrix/uncovering-amazon-s3-bucket-vulnerabilities-a-comprehensive-guide-for-ethical-hackers-124790bf9e62?source=rss------bug_bounty-5 | Abhijeet kumawat | s3, amazon, hacking, bug-bounty-tips, bug-bounty | 26-Dec-2024 |
| Easy Bounties: JavaScript (JS) File Analysis | https://aditya-narayan.medium.com/easy-bounties-javascript-js-file-analysis-72ba5eb44822?source=rss------bug_bounty-5 | Aditya Narayan | bug-bounty-writeup, cybersecurity, writers-on-medium, bug-bounty-tips, bug-bounty | 26-Dec-2024 |
| Stuxnet: The Virus That Shook the World | https://medium.com/@zerodaystories/stuxnet-the-virus-that-shook-the-world-27e7f1349c8f?source=rss------bug_bounty-5 | 0day stories | technology, science, bug-bounty, cybersecurity, hacking | 26-Dec-2024 |
| Unauthenticated RCE Bug Bounty POC | Private Bug Bounty Program | CVE-2020–11798 | https://pwn0sec.medium.com/unauthenticated-rce-bug-bounty-poc-private-bug-bounty-program-cve-2020-11798-dbbb626b9fdb?source=rss------bug_bounty-5 | PwnOsec Research Groups | ferari, bug-bounty-tips, bug-bounty | 26-Dec-2024 |
| Access Granted ! | https://vikasrai11.medium.com/access-granted-5f4747775247?source=rss------bug_bounty-5 | Vikas Rai | bug-bounty, cybersecurity, acces, vulnerability | 26-Dec-2024 |
| Traditional Pentest vs. Bug Bounty Program: The Pros, The Cons, and How to Do It Right | https://medium.com/@hackrate/traditional-pentest-vs-bug-bounty-program-the-pros-the-cons-and-how-to-do-it-right-f2d8beff40bf?source=rss------bug_bounty-5 | Levente Molnar | penetration-testing, ethical-hacking, hacking, cybersecurity, bug-bounty | 26-Dec-2024 |
| Apache Traffic Control Vulnerability Let Attackers Inject Malicious SQL Commands | https://mhmmuneef.medium.com/apache-traffic-control-vulnerability-let-attackers-inject-malicious-sql-commands-66188cbcd84d?source=rss------bug_bounty-5 | Mohammed Muneef | hacking, bug-bounty, information-security, technology, cybersecurity | 26-Dec-2024 |
| Critical SQL Injection Vulnerability in Apache Traffic Control | https://medium.com/@wiretor/critical-sql-injection-vulnerability-in-apache-traffic-control-a28cedca8b93?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, malware, xss-attack, bug-bounty, ai | 26-Dec-2024 |
| IBM AIX Vulnerability: Attackers Can Trigger DoS Condition | https://medium.com/@wiretor/ibm-aix-vulnerability-attackers-can-trigger-dos-condition-5a5532a8ba66?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, hacker, xss-attack, malware | 26-Dec-2024 |
| Find Secrets in Hidden Directories Using Fuzzing ️ | https://medium.com/@kumawatabhijeet2002/find-secrets-in-hidden-directories-using-fuzzing-%EF%B8%8F-21a9a96c3246?source=rss------bug_bounty-5 | Abhijeet kumawat | fuzzing, infosec, bug-bounty, hacking, bounty-program | 26-Dec-2024 |
| How I found an IDOR on Achmea | https://medium.com/@nayeems3c/how-i-found-idor-on-achmea-cf9ce4b7d908?source=rss------bug_bounty-5 | Nayeem Islam | bug-bounty, idor, penetration-testing, bug-bounty-writeup, web-security | 26-Dec-2024 |
| Earn up to $30,000 by just thinking like a pro hacker while pentesting. | https://medium.com/@anandrishav2228/earn-up-to-30-000-by-just-thinking-like-a-pro-hacker-while-pentesting-da8e5984ccb9?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, hacker, money, penetration-testing, cybersecurity | 26-Dec-2024 |
| Fuzzing with AFL++ | https://medium.com/@arohablue/introduction-to-fuzzing-with-afl-42d37ea78386?source=rss------bug_bounty-5 | Aroha blue | bug-bounty, afl, fuzzing, kali, security | 26-Dec-2024 |
| XSS Via SVG File Upload | https://abhishekgk.medium.com/xss-via-svg-file-upload-5c30af809107?source=rss------bug_bounty-5 | Abhishekgk | bug-bounty, file-upload-vulnerability, bug-bounty-tips, xss-attack, bug-bounty-writeup | 26-Dec-2024 |
| Interesting Technique to Enumerate Table Names in MySQL 8.x | https://j3x.medium.com/interesting-technique-to-enumerate-table-names-in-mysql-8-x-668857d43186?source=rss------bug_bounty-5 | Amdjed Zerrougui | bug-bounty, cybersecurity, hacking, penetration-testing | 26-Dec-2024 |
| Bug Critical Flaw: Default Password to Super Admin! | https://medium.com/@firdansp/bug-critical-flaw-default-password-to-super-admin-ef20c4214231?source=rss------bug_bounty-5 | 0verRida | bugs, cybersecurity, bug-bounty, bug-bounty-tips, hacker | 25-Dec-2024 |
| Business logic: I can order anything from your account without paying for it | https://gr3yg05t.medium.com/business-logic-i-can-order-anything-from-your-account-without-paying-for-it-86ef070e01dd?source=rss------bug_bounty-5 | Mr Grey | infosec, bug-bounty, business-logic-flaw, infosec-write-ups, bug-bounty-writeup | 25-Dec-2024 |
| My First Encounter with Stored XSS ️♂️ | https://infosecwriteups.com/my-first-encounter-with-stored-xss-%EF%B8%8F-%EF%B8%8F-88e167582b7e?source=rss------bug_bounty-5 | cryptoshant | cybersecurity, bug-bounty, hacking, stored-xss, success | 25-Dec-2024 |
| How I accidentally found an IDOR bug in Google slides and rewarded $3,133.70 | https://medium.com/@atikqur007/how-i-accidentally-found-an-idor-bug-in-google-slides-and-rewarded-3-133-70-96866fac3af1?source=rss------bug_bounty-5 | Atikqur Rahman | bugbounty-writeup, cybersecurity, bug-bounty, google, pentesting | 25-Dec-2024 |
| Escalating a duplicate Access Control bug to hijack Google Calendar Accounts for a €300 Bounty | https://medium.com/@saltify/escalating-a-duplicate-access-control-bug-to-hijack-google-calendar-accounts-for-a-300-bounty-a5358cfc868f?source=rss------bug_bounty-5 | saltify | infosec, bug-bounty, ethical-hacking, cybersecurity | 25-Dec-2024 |
| API Pentesting: Broken Object Property Level Authorization | https://devilwrites.medium.com/api-pentesting-broken-object-property-level-authorization-21d65939ad24?source=rss------bug_bounty-5 | hackerdevil | api-security, api, owasp, penetration-testing, bug-bounty | 25-Dec-2024 |
| Autentic Platform Launches Bug Bounty Program to Strengthen Security | https://autentic.medium.com/autentic-platform-launches-bug-bounty-program-to-strengthen-security-0aaad03b4a6e?source=rss------bug_bounty-5 | Autentic RWA | autentic, bug-bounty | 25-Dec-2024 |
| 10 of the biggest cybersecurity stories of 2024 | https://mhmmuneef.medium.com/10-of-the-biggest-cybersecurity-stories-of-2024-45037b13530f?source=rss------bug_bounty-5 | Mohammed Muneef | news, medium, bug-bounty, technology, hacker | 25-Dec-2024 |
| 10 Burp Suite Extensions you must have in your arsenal | https://bitpanic.medium.com/10-burp-suite-extensions-you-must-have-in-your-arsenal-a3ce81fefb05?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, technology, infosec, cybersecurity, bug-bounty-tips | 25-Dec-2024 |
| Cross-Site Scripting (XSS): Techniques, Bypasses, and Detection | https://medium.com/@rootast/cross-site-scripting-xss-techniques-bypasses-and-detection-927af5a55d02?source=rss------bug_bounty-5 | Arash shahbazi | xss-attack, javascript, hacker, methodology, bug-bounty | 25-Dec-2024 |
| How Would I Start Cybersecurity If I Knew This? A 1-Year Roadmap for 2025 | https://medium.com/@afilalbadr2/how-would-i-start-cybersecurity-if-i-knew-this-a-1-year-roadmap-for-2025-c069ba183dc0?source=rss------bug_bounty-5 | Afilalbadr | job-preparation, active-directory-attack, hacking, bug-bounty, penetration-testing | 25-Dec-2024 |
| The Ultimate Checklist for Detecting IDOR and Broken Access Control Vulnerabilities | https://thexssrat.medium.com/the-ultimate-checklist-for-detecting-idor-and-broken-access-control-vulnerabilities-b1585dd4e999?source=rss------bug_bounty-5 | Thexssrat | hacking, bug-bounty, hacker, broken-access-control, bug-bounty-tips | 25-Dec-2024 |
| How Would I Start Cybersecurity If I Knew This? A 1-Year Roadmap for 2025 | https://medium.com/@GHOSTWIELD/how-would-i-start-cybersecurity-if-i-knew-this-a-1-year-roadmap-for-2025-c069ba183dc0?source=rss------bug_bounty-5 | GhostWield | job-preparation, active-directory-attack, hacking, bug-bounty, penetration-testing | 25-Dec-2024 |
| Website Enumeration and Information Gathering [Part 2] | https://medium.com/@BetterBy0x01/website-enumeration-and-information-gathering-part-2-3588cf9e0529?source=rss------bug_bounty-5 | Ashutosh Singh Patel | security, bug-bounty, hacking, bug-bounty-tips | 24-Dec-2024 |
| How I Test for Open Redirect | https://osintteam.blog/how-i-test-for-open-redirect-271cd0d0ae55?source=rss------bug_bounty-5 | Cybersec with Hemmars | bug-bounty, cybersecurity, technology, open-redirect, bug-bounty-writeup | 24-Dec-2024 |
| Find Bug in 10 Minutes: Critical SQL File Leak Reveals Sensitive Data | https://medium.com/@firdansp/find-bug-in-10-minutes-critical-sql-file-leak-reveals-sensitive-data-84e48fece4bb?source=rss------bug_bounty-5 | 0verRida | bug-bounty-tips, bug-bounty, bugs, cybersecurity, writeup | 24-Dec-2024 |
| Important Windows Events Every SOC Analyst Should Know | https://medium.com/@paritoshblogs/important-windows-events-every-soc-analyst-should-know-ed91bce15ed2?source=rss------bug_bounty-5 | Paritosh | bug-bounty, information-technology, chatgpt, cybersecurity, hacking | 24-Dec-2024 |
| Rickdiculouslyeasy 1 — VulnHub Write-up | https://medium.com/@aminouji23/rickdiculouslyeasy-1-vulnhub-write-up-eb59e824baa7?source=rss------bug_bounty-5 | Aminouji | vulnhub, bug-bounty, ctf-writeup, penetration-testing, cybersecurity | 24-Dec-2024 |
| Bug Bounty Journey — Valid Report Part 2 | https://medium.com/@0xF3r4t/bug-bounty-journey-valid-report-part-2-0f3a075e2a65?source=rss------bug_bounty-5 | 0xF3r4t | waybackurls, bug-bounty-writeup, bug-bounty | 24-Dec-2024 |
| Bug Bounty Journey — Valid Report 1 | https://medium.com/@0xF3r4t/bug-bounty-journey-valid-report-1-ffc38d6799a4?source=rss------bug_bounty-5 | 0xF3r4t | dirsearch, bug-bounty, vdp | 24-Dec-2024 |
| Penetration Testing Tools — The Basics | https://medium.com/@iamshafayat/penetration-testing-tools-the-basics-46367acc653e?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | pentest, cybersecurity, bug-bounty, pentest-tools, penetration-testing | 24-Dec-2024 |
| 500$ Secrets: Uncovering Critical Vulnerabilities with Advanced JavaScript Analysis | https://hackersatty.medium.com/500-secrets-uncovering-critical-vulnerabilities-with-advanced-javascript-analysis-ab9a970dc8e8?source=rss------bug_bounty-5 | hackersatty | medium, bug-bounty, javascript, hackerone, bug-bounty-tips | 24-Dec-2024 |
| A Seemingly Harmless Bug That Could Cost a Company Millions | https://bitpanic.medium.com/a-seemingly-harmless-bug-that-could-cost-a-company-millions-aeada3a31bae?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, technology, programming, bug-bounty, bug-bounty-tips | 24-Dec-2024 |
| Why 2025 Will Be the Year of Bug Bounty | https://medium.com/@hackrate/why-2025-will-be-the-year-of-bug-bounty-9811e3987e78?source=rss------bug_bounty-5 | Levente Molnar | penetration-testing, cybersecurity, ethical-hacking, hacking, bug-bounty | 24-Dec-2024 |
| RISE OF 0-DAY | https://medium.com/@zerodaystories/rise-of-0-day-cd35fe1c8e62?source=rss------bug_bounty-5 | 0day stories | penetration-testing, hacker, technology, bug-bounty, hacking | 24-Dec-2024 |
| Seven Critical Vulnerabilities Found in Premium WPLMS WordPress Plugins | https://medium.com/@wiretor/seven-critical-vulnerabilities-found-in-premium-wplms-wordpress-plugins-c3ce57c55bae?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, xss-attack, bug-bounty, hacking, ai | 24-Dec-2024 |
| New Glutton Malware Exploits Popular PHP Frameworks | https://medium.com/@wiretor/new-glutton-malware-exploits-popular-php-frameworks-2a5914f89407?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, ai, malware, hacking, bug-bounty | 24-Dec-2024 |
| Advent of Cyber 2024 [ Day 24 ] Writeup with Answers | TryHackMe Walkthrough | https://medium.com/infosecmatrix/advent-of-cyber-2024-day-24-writeup-with-answers-tryhackme-walkthrough-18393b422649?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | bug-bounty, cybersecurity, tryhackme, hacking, careers | 24-Dec-2024 |
| From Broken Access Control to First Bounty | https://infosecwriteups.com/from-broken-access-control-to-first-bounty-01712b1dab53?source=rss------bug_bounty-5 | callgh0st | gaza, bug-bounty, palestine, hacking, access-control | 24-Dec-2024 |
| Received an Appreciation Letter from NASA | https://medium.com/@kumawatabhijeet2002/received-an-appreciation-letter-from-nasa-927c3d1ae828?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, nasa, appreciation, xss-attack, infosec | 24-Dec-2024 |
| A Seemingly Harmless Bug That Could Cost a Company Millions | https://medium.com/infosecmatrix/a-seemingly-harmless-bug-that-could-cost-a-company-millions-aeada3a31bae?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, technology, programming, bug-bounty, bug-bounty-tips | 24-Dec-2024 |
| Breaking Through the Limits: How I Bypassed Rate-Limiting with IP and Username Rotation | https://medium.com/@abdelrahhmanhisham/breaking-through-the-limits-how-i-bypassed-rate-limiting-with-ip-and-username-rotation-d8de230aec2a?source=rss------bug_bounty-5 | Abdelrahhmanhisham | bug-bounty-tips, bug-bounty, rate-limit, exploit, rate-limit-bypass | 23-Dec-2024 |
| How I Discovered Private Programs and New Programs Set to Launch on HackerOne | https://medium.com/@hossam_hamada/how-i-discovered-private-programs-and-new-programs-set-to-launch-on-hackerone-a85117a70d7b?source=rss------bug_bounty-5 | Hossam Hamada | hacking, bugbounty-writeup, hackerone, bug-bounty, bugbounty-tips | 23-Dec-2024 |
| Website Enumeration & Information Gathering [Part 1] | https://medium.com/@BetterBy0x01/website-enumeration-information-gathering-part-1-8392422178da?source=rss------bug_bounty-5 | Ashutosh Singh Patel | bug-hunting, enumeration, bug-bounty, information-gathering | 23-Dec-2024 |
| Website Leak (gov): Sensitive Credentials and API Keys Exposed | https://medium.com/@firdansp/website-leak-gov-sensitive-credentials-and-api-keys-exposed-44b2ebbebb7b?source=rss------bug_bounty-5 | 0verRida | bug-bounty, bug-bounty-tips, cybersecurity, bugs, red-team | 23-Dec-2024 |
| PROTOTYPE POLLUTION VULNERABILITY | https://medium.com/@0xpedrop/prototype-pollution-vulnerability-f62e1c59a3fd?source=rss------bug_bounty-5 | Pedro Paulo D. | bug-bounty-tips, cybersecurity, bug-bounty | 23-Dec-2024 |
| Google Dorks to Find Bug Bounty Programs | https://medium.com/infosecmatrix/google-dorks-to-find-bug-bounty-programs-003a80375d13?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, google, dorks, infosec, bug-bounty | 23-Dec-2024 |
| Shield Your Enterprise: Tackling Cyber Threats Head-On | https://medium.com/@paritoshblogs/shield-your-enterprise-tackling-cyber-threats-head-on-fd26be10c366?source=rss------bug_bounty-5 | Paritosh | ai, hacking, cybersecurity, information-technology, bug-bounty | 23-Dec-2024 |
| Bash Scripting: Guide for Security & Bug Bounty Hunters | https://infosecwriteups.com/bash-scripting-guide-for-security-bug-bounty-hunters-cybersecurity-d07794c33412?source=rss------bug_bounty-5 | Mukilan Baskaran | security-researchers, bug-bounty, cybersecurity, information-security, penetration-testing | 23-Dec-2024 |
| POC — CVE-2024–50623- Cleo Unrestricted file upload and download | https://medium.com/@verylazytech/poc-cve-2024-50623-cleo-unrestricted-file-upload-and-download-382afa5a15db?source=rss------bug_bounty-5 | Very Lazy Tech | unrestricted-file-upload, vulnerability, exploit, bug-bounty, cve-2024-50623 | 23-Dec-2024 |
| Bug Bounty Pemula Kusus Peretasan Aplikasi Web | https://medium.com/@mansorihack/bug-bounty-pemula-kusus-peretasan-aplikasi-web-cb7e8ea75f75?source=rss------bug_bounty-5 | Mansorihack | bug-bounty, cybersecurity, readteam | 23-Dec-2024 |
| How I Found an XSS Bug That Made Websites Scream “Alert!” | https://aiwolfie.medium.com/how-i-found-an-xss-bug-that-made-websites-scream-alert-1b6f9eebcf14?source=rss------bug_bounty-5 | AIwolfie | pentesting, xss-attack, ethical-hacking, bug-bounty, hacking | 23-Dec-2024 |
| Exploiting Password Reset Link After Email Change | https://medium.com/@0xboody/exploiting-password-reset-link-after-email-change-17fe2babc01e?source=rss------bug_bounty-5 | Abdelrahman Sayed | bug-bounty-writeup, bug-bounty, bug-bounty-tips, penetration-testing | 23-Dec-2024 |
| Blazing-Fast Recon & Vulnerability Scanning with SubDomainRadar.io | https://medium.com/@alexandrevandammepro/blazing-fast-recon-vulnerability-scanning-with-subdomainradar-io-701baef23ff2?source=rss------bug_bounty-5 | Alexandre Vandamme | bug-bounty, cybersecurity, vulnerability, bug-bounty-tips, bounty-program | 23-Dec-2024 |
| Stop Data Breaches in Their Tracks with LeakRadar.io | https://medium.com/@alexandrevandammepro/stop-data-breaches-in-their-tracks-with-leakradar-io-cc3c4b887c14?source=rss------bug_bounty-5 | Alexandre Vandamme | bug-bounty, data, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 23-Dec-2024 |
| Dutch DPA Fines Netflix €4.75 Million for GDPR Violations | https://medium.com/@wiretor/dutch-dpa-fines-netflix-4-75-million-for-gdpr-violations-d2ad59170118?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, malware, ai, business | 23-Dec-2024 |
| North Korean Hackers Steal $1.3 Billion in Crypto in 2024 | https://medium.com/@wiretor/north-korean-hackers-steal-1-3-billion-in-crypto-in-2024-d53c409930df?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware | 23-Dec-2024 |
| Italy Fines OpenAI €15 Million for ChatGPT GDPR Violations | https://medium.com/@wiretor/italy-fines-openai-15-million-for-chatgpt-gdpr-violations-42a93c87a4fe?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, ai, business, hacking | 23-Dec-2024 |
| [$$$ Bug Bounty Write Up] SSRF in OAuth Implementation of a Client Application | https://medium.com/@ahmedfadel6162/bug-bounty-write-up-ssrf-in-oauth-implementation-of-a-client-application-57ba02539e20?source=rss------bug_bounty-5 | Ahmed Fadel | bug-bounty, penetration-testing, cybersecurity, hacking | 23-Dec-2024 |
| This Is How I Bypassed The Most Critical Security Check! | https://medium.com/@mdnafeed3/this-is-how-i-bypassed-the-most-critical-security-check-00e9ba525ebc?source=rss------bug_bounty-5 | H4cker-Nafeed | bug-bounty, bug-bounty-tips, cybersecurity, hacking, technology | 23-Dec-2024 |
| EWPTX Examination Structure and Content | https://medium.com/@vishalsuwalkab/ewptx-examination-structure-and-content-577d81379c39?source=rss------bug_bounty-5 | Vishalsuwalkab | cybersecurity, ewptx, ejpt, ine, bug-bounty | 23-Dec-2024 |
| How Technology Can Enhance Information Security in Organizations | https://medium.com/@bi___ya/how-technology-can-enhance-information-security-in-organizations-9b0ce5029472?source=rss------bug_bounty-5 | biya | information-security, bug-bounty, company, hacking, business | 23-Dec-2024 |
| Bug Bounty Isn’t Always Fair: A Researcher’s Perspective | https://medium.com/@ph4nt0mbyt3/bug-bounty-isnt-always-fair-a-researcher-s-perspective-be0a62b9f0eb?source=rss------bug_bounty-5 | ph4nt0mbyt3 | bug-bounty | 23-Dec-2024 |
| How to Make Money with WebSocket: 10 Vulnerabilities You Should Be Aware Of | https://im4x.medium.com/what-is-wss-fa2476eeddc1?source=rss------bug_bounty-5 | Ahmed Najeh | bug-bounty, hacker, hackerone, websocket, wss | 23-Dec-2024 |
| EWPTX Examination Structure and Content Part(2) | https://medium.com/@vishalsuwalkab/ewptx-examination-structure-and-content-577d81379c39?source=rss------bug_bounty-5 | Vishalsuwalkab | cybersecurity, ewptx, ejpt, ine, bug-bounty | 23-Dec-2024 |
| Very Basic Beginner Bug Bounty Methodology: Practical Tips and Techniques for Web Apps | https://thexssrat.medium.com/very-basic-beginner-bug-bounty-methodology-practical-tips-and-techniques-for-web-apps-3cf9104e7f50?source=rss------bug_bounty-5 | Thexssrat | hacks, hacking, bug-bounty-tips, bug-bounty | 23-Dec-2024 |
| 100 CLI Flags and Tricks Every Bug Bounty Hunter Should Know | https://thexssrat.medium.com/100-cli-flags-and-tricks-every-bug-bounty-hunter-should-know-959813992077?source=rss------bug_bounty-5 | Thexssrat | hacks, hacking, cli, bug-bounty-tips, bug-bounty | 23-Dec-2024 |
| Reflected XSS bypass WAF & Page notfound | https://kresec.medium.com/reflected-xss-bypass-waf-page-notfound-e149db1ee6c4?source=rss------bug_bounty-5 | KreSec | xss-attack, security, bug-bounty | 22-Dec-2024 |
| Automate MAC Address Change on Arch Linux at Boot | https://theexploitlab.medium.com/automate-mac-address-change-on-arch-linux-at-boot-893f6ccdb1b4?source=rss------bug_bounty-5 | The Exploit Lab | bug-bounty, bugs, macchanger, cybersecurity | 22-Dec-2024 |
| Different terms, same services across providers (AWS, Azure, GCP) | https://medium.com/@RaunakGupta1922/different-terms-same-services-across-providers-aws-azure-gcp-2337af0640db?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | gcp, azure, bug-bounty, aws, devops | 22-Dec-2024 |
| API pentesting: Broken Authentication | https://infosecwriteups.com/api-pentesting-broken-authentication-987658c691c0?source=rss------bug_bounty-5 | hackerdevil | penetration-testing, owasp, bug-bounty, api-security, api | 22-Dec-2024 |
| Top 7 Cybersecurity Certificates in 2025 | https://osintteam.blog/top-7-cybersecurity-certificates-in-2025-26228b661f1d?source=rss------bug_bounty-5 | Tahir Ayoub | technology, ai, ethical-hacking, bug-bounty, cybersecurity | 22-Dec-2024 |
| Day 24 of 30 Days — 30 Vulnerabilities | Web Cache Poisoning | https://it4chis3c.medium.com/day-24-of-30-days-30-vulnerabilities-web-cache-poisoning-790697f073da?source=rss------bug_bounty-5 | It4chis3c | 30dayswritingchallenge, bug-bounty-tips, bug-bounty, web-cache-poisoning | 22-Dec-2024 |
| Unveiling default Security Flaws with the defaulty Nmap Script | https://medium.com/@defaulty.io/unveiling-default-security-flaws-with-the-defaulty-nmap-script-800d97654a15?source=rss------bug_bounty-5 | Defaulty.io | hacking, bug-bounty, compliance, pentesting, cybersecurity | 22-Dec-2024 |
| Bug Bounty Hunting With Burp Suite (Intercept, Repeater & Intruder) | https://medium.com/@BetterBy0x01/bug-bounty-hunting-with-burp-suite-intercept-repeater-intruder-cdcb3e3966bf?source=rss------bug_bounty-5 | Ashutosh Singh Patel | bug-hunting, burpsuite, bug-bounty, proxy | 22-Dec-2024 |
| 10 Minutes to Finding Your First Open Redirect Bug | https://medium.com/@k4r7h1kn/10-minutes-to-finding-your-first-open-redirect-bug-68f764d6b5d3?source=rss------bug_bounty-5 | Karthikeyan | cybersecurity, bug-bounty-tips, bug-bounty, hacking, open-redirect | 22-Dec-2024 |
| How to Enable HTTPS Using a Free SSL Certificate from Certbot | https://medium.com/@awsdevops183/how-to-enable-https-using-a-free-ssl-certificate-from-certbot-99b71f808b1e?source=rss------bug_bounty-5 | Madhukar Reddy | security, bug-bounty, tls, amazon-web-services, devops | 22-Dec-2024 |
| open redirect GET — Based | https://medium.com/@zpx15266/open-redirect-get-based-bc86e62c3af2?source=rss------bug_bounty-5 | ramzey elsayed mohamed | cve, bug-bounty, bug-bounty-writeup, bugs, penetration-testing | 22-Dec-2024 |
| SSRF Burpsuite Extension | https://hackerassociate.medium.com/ssrf-burpsuite-extension-b494d4e70b28?source=rss------bug_bounty-5 | Harshad Shah | hacking, infosec, bug-bounty, cybersecurity, penetration-testing | 22-Dec-2024 |
| Chasing P3 Bug: My Hunt for Vulnerabilities in the ‘Wishlists’ Functionality and Its Results | https://medium.com/@nebty/chasing-p3-bug-my-hunt-for-vulnerabilities-in-the-wishlists-functionality-and-its-results-86b6e79b9274?source=rss------bug_bounty-5 | Nebty | cybersecurity, bug-bounty-tips, idor, ethical-hacking, bug-bounty | 22-Dec-2024 |
| So, You want a strong bug bounty methodology? | https://medium.com/@shaheen101sec/so-you-want-a-strong-bug-bounty-methodology-57fdef27cad6?source=rss------bug_bounty-5 | Shaheen101sec | bug-bounty-writeup, cybersecurity, bug-bounty, pentesting, bug-bounty-tips | 22-Dec-2024 |
| Exposed‼️ How a Simple Bug Uncovered a Default Credential Data Leak on Indonesia Government | https://medium.com/@firdansp/exposed-how-a-simple-bug-uncovered-a-default-credential-data-leak-on-indonesia-government-ba73f2175e81?source=rss------bug_bounty-5 | 0verRida | data-leak, bugs, cybersecurity, bug-bounty, bug-bounty-tips | 22-Dec-2024 |
| How I Found My First Bug Using Shodan | https://medium.com/@bughunt.bochi/how-i-found-my-first-bug-using-shodan-3d8826a7655b?source=rss------bug_bounty-5 | Bochixx | bug-bounty, bug-bounty-writeup, pentesting, ethical-hacking | 22-Dec-2024 |
| SSRF Burpsuite Extension | https://medium.com/offensive-black-hat-hacking-security/ssrf-burpsuite-extension-b494d4e70b28?source=rss------bug_bounty-5 | Harshad Shah | hacking, infosec, bug-bounty, cybersecurity, penetration-testing | 22-Dec-2024 |
| The Top 2 Strategies for Finding Your First XSS Vulnerability — Part 2 | https://medium.com/@halfcircassian/the-top-2-strategies-for-finding-your-first-xss-vulnerability-part-2-8bae7b49cc6d?source=rss------bug_bounty-5 | Sıla Özeren | cybersecurity, web-application-security, bug-bounty, xss-attack, dom-manipulation | 22-Dec-2024 |
| Payment Bypass Guide for Bug Bounty | 69 case studies | https://medium.com/@illoyscizceneghposter/payment-bypass-guide-for-bug-bounty-69-case-studies-15379b4f76fa?source=rss------bug_bounty-5 | Illoy Scizceneghposter | bug-bounty, bug-bounty-tips, cybersecurity | 21-Dec-2024 |
| The Bounty Hunters: Bug Bounty Programs | https://medium.com/@investigator515/the-bounty-hunters-bug-bounty-programs-8dcd24d5bafa?source=rss------bug_bounty-5 | Investigator515 | hacking, technology, information-security, bug-bounty, cybersecurity | 21-Dec-2024 |
| How I Exploited an OTP Bypass Vulnerability on a Cryptocurrency Platform | https://medium.com/@anonymous512/how-i-exploited-an-otp-bypass-vulnerability-on-a-cryptocurrency-platform-2a817b02b3ea?source=rss------bug_bounty-5 | Wafa Abbas | account-hacking, bug-bounty, authentication-bypass, otp-bypass, vulnerability | 21-Dec-2024 |
| Mastering 403 Forbidden Bypass Techniques ✨ | https://medium.com/@kumawatabhijeet2002/mastering-403-forbidden-bypass-techniques-4ab1482afe49?source=rss------bug_bounty-5 | Abhijeet kumawat | bounty-program, infosec, 403-forbidden, hacking, bug-bounty | 21-Dec-2024 |
| Kali Linux 2024.4: 14 New Tools to Supercharge Your Penetration Testing Arsenal | https://bitpanic.medium.com/kali-linux-2024-4-14-new-tools-to-supercharge-your-penetration-testing-arsenal-543ff8370091?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, technology, cybersecurity, programming, bug-bounty | 21-Dec-2024 |
| Understanding Tycoon 2FA Phishing: A New Era of Security Threats | https://medium.com/@paritoshblogs/understanding-tycoon-2fa-phishing-a-new-era-of-security-threats-19fb14dc83a5?source=rss------bug_bounty-5 | Paritosh | cybersecurity, information-technology, hacking, tycoon-phshing, bug-bounty | 21-Dec-2024 |
| Malicious Rspack & Vant Packages Exploited Using Stolen NPM Tokens | https://medium.com/@wiretor/malicious-rspack-vant-packages-exploited-using-stolen-npm-tokens-0b69df1512fd?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ai, business, hacking, bug-bounty | 21-Dec-2024 |
| FlowerStorm: The New Microsoft Phishing Threat Filling the Void Left by Rockstar2FA | https://medium.com/@wiretor/flowerstorm-the-new-microsoft-phishing-threat-filling-the-void-left-by-rockstar2fa-578144a14487?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, bug-bounty, microsoft, hacking, malware | 21-Dec-2024 |
| LockBit Developer Rostislav Panev Charged for Billions in Global Ransomware Damages | https://medium.com/@wiretor/lockbit-developer-rostislav-panev-charged-for-billions-in-global-ransomware-damages-bee0bfc4c9b9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, malware, bug-bounty, business, ai | 21-Dec-2024 |
| Kali Linux 2024.4: 14 New Tools to Supercharge Your Penetration Testing Arsenal | https://medium.com/infosecmatrix/kali-linux-2024-4-14-new-tools-to-supercharge-your-penetration-testing-arsenal-543ff8370091?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, technology, cybersecurity, programming, bug-bounty | 21-Dec-2024 |
| Mastering 403 Forbidden Bypass Techniques ✨ | https://medium.com/infosecmatrix/mastering-403-forbidden-bypass-techniques-4ab1482afe49?source=rss------bug_bounty-5 | Abhijeet kumawat | bounty-program, infosec, 403-forbidden, hacking, bug-bounty | 21-Dec-2024 |
| Blind XXE with OOB Interaction via XML Parameter Entities | https://osintteam.blog/blind-xxe-with-oob-interaction-via-xml-parameter-entities-97244bf2b85e?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Café | cybersecurity, bug-bounty-tips, information-security, bug-bounty, pentesting | 20-Dec-2024 |
| CSRF On Delete Profile: High Severity(7.1) HackerOne | https://medium.com/@josuofficial327/csrf-on-delete-profile-high-severity-7-1-hackerone-33bdb598ef67?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | bug-bounty-writeup, bug-bounty, ethical-hacking, bug-bounty-program, cybersecurity | 20-Dec-2024 |
| Part-2 | Deep Recon Methodology for Bug Bounty Hunters | https://medium.com/@kumawatabhijeet2002/part-2-deep-recon-methodology-for-bug-bounty-hunters-644077ee41d4?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty-writeup, infosec, bugs, bug-bounty, hacking | 20-Dec-2024 |
| The Most Easiest OTP Bypass Vulnerability I’ve Found: A Critical Flaw in Session Management | https://medium.com/@ajay.kumar.695632/the-most-easiest-otp-bypass-vulnerability-ive-found-a-critical-flaw-in-session-management-09b1555dbf9e?source=rss------bug_bounty-5 | Ajay Kumar | bug-hunting, bug-bounty, bug-bounty-tips, bugs, bug-bounty-writeup | 20-Dec-2024 |
| The Secret World of Hackers: A Beginner’s Guide to Understanding Cyber Attacks | https://medium.com/@paritoshblogs/the-secret-world-of-hackers-a-beginners-guide-to-understanding-cyber-attacks-81377a0b477e?source=rss------bug_bounty-5 | Paritosh | ai, information-technology, cybersecurity, bug-bounty, hacking | 20-Dec-2024 |
| Utilizing machine learning to collect more subdomains using subwiz | https://medium.com/@demonia/utilizing-machine-learning-to-collect-more-subdomains-using-subwiz-2d65cec1ee80?source=rss------bug_bounty-5 | Mohammed Dief | bug-bounty, recon, cybersecurity, reconnaissance, bug-bounty-tips | 20-Dec-2024 |
| Information Disclosure On Password cancel Endpoint | https://medium.com/@regan_temudo/information-disclosure-on-password-cancel-endpoint-4b6f43cc5fd7?source=rss------bug_bounty-5 | Regan Temudo | cybersecurity, information-disclosure, bug-bounty, ethical-hacking, csrf | 20-Dec-2024 |
| OSI Model Explanation | https://medium.com/@hossennaim547/osi-model-explanation-09259ce7a5af?source=rss------bug_bounty-5 | naimHOSSEN | bug-bounty, hacking, osi-model, cybersecurity | 20-Dec-2024 |
| Simple ATO in private program. | https://medium.com/@oXnoOneXo/simple-ato-in-private-program-890cd1485675?source=rss------bug_bounty-5 | oXnoOneXo | bug-bounty-tips, bug-bounty-writeup, bug-bounty | 20-Dec-2024 |
| From Comments to Command Execution: How an E-Book Platform Gave Me RCE | https://imooaaz.medium.com/from-comments-to-command-execution-how-an-e-book-platform-gave-me-rce-f27a079ca584?source=rss------bug_bounty-5 | Moaaz Afifi | bug-bounty, penetration-testing, cybersecurity, rce-vulnerability, xss-attack | 20-Dec-2024 |
| Unlocking Web Security: A Deep Dive into the OWASP Top 10 | https://medium.com/@rootast/unlocking-web-security-a-deep-dive-into-the-owasp-top-10-d669199277bd?source=rss------bug_bounty-5 | Arash shahbazi | cybersecurity, students, owasp-top-10, bug-bounty, university | 20-Dec-2024 |
| Discover All Paths in Next.js Websites | https://rhashibur75.medium.com/discover-all-paths-in-next-js-websites-43e319b24be9?source=rss------bug_bounty-5 | Kazi Hashibur Rahman | bug-bounty, bug-bounty-tips, bug-bounty-writeup, nextjs, penetration-testing | 20-Dec-2024 |
| Ascension Data Breach: 5.6M Health Records Stolen by Black Basta Ransomware | https://medium.com/@wiretor/ascension-data-breach-5-6m-health-records-stolen-by-black-basta-ransomware-a8d2f7ba6856?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, business, malware, ai | 20-Dec-2024 |
| Android Malware on Amazon Appstore Disguised as Health App | https://medium.com/@wiretor/android-malware-on-amazon-appstore-disguised-as-health-app-3cda80dfc856?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, ai, hacking, malware | 20-Dec-2024 |
| SQL Injection via ORDER BY Parameter | https://medium.com/@mfthylmaz/sql-injection-via-order-by-parameter-a7cb7d04017f?source=rss------bug_bounty-5 | mfthylmaz | sql-injection, bug-bounty, web-security, hacking | 20-Dec-2024 |
| Essential Stuff For Your First Hacking Trip. Hacking Gadgets #2 “Assortment For The Little Hacker” | https://medium.com/h7w/essential-stuff-for-your-first-hacking-trip-hacking-gadgets-2-assortment-for-the-little-hacker-e886dba68a11?source=rss------bug_bounty-5 | NnFace | hacking, trip, technology, bug-bounty, cybersecurity | 19-Dec-2024 |
| No Rate Limit Vulnerability on a US Government Website | https://medium.com/@kumawatabhijeet2002/no-rate-limit-vulnerability-on-a-us-government-website-ae47402b663d?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty | 19-Dec-2024 |
| How I Got $1000 AWS Credits and Maximized Its Potential | https://medium.com/@awsdevops183/how-i-got-1000-aws-credits-and-maximized-its-potential-e08650930171?source=rss------bug_bounty-5 | Madhukar Reddy | aws, devops, python, cybersecurity, bug-bounty | 19-Dec-2024 |
| The Day I Found a Cross-Site Scripting (XSS) Vulnerability in a Bug Bounty Program | https://medium.com/@awsdevops183/the-day-i-found-a-cross-site-scripting-xss-vulnerability-in-a-bug-bounty-program-4edec6f09bed?source=rss------bug_bounty-5 | Madhukar Reddy | cybersecurity, bug-bounty, devsecops, cross-site-scripting | 19-Dec-2024 |
| First Google Chrome v8 JIT bug bounty before Christmas . | https://vxrl.medium.com/first-google-chrome-v8-jit-bug-bounty-before-christmas-1338fb2c8255?source=rss------bug_bounty-5 | VXRL | google, v8, chromium, psvr, bug-bounty | 19-Dec-2024 |
| Exploiting a Rate Limiting Bug in the Chat Section of a Health Application (got me $200) | https://medium.com/@awsdevops183/exploiting-a-rate-limiting-bug-in-the-chat-section-of-a-health-application-got-me-200-a06ca465707f?source=rss------bug_bounty-5 | Madhukar Reddy | devsecops, cybersecurity, information-technology, bug-bounty, burpsuite | 19-Dec-2024 |
| POC — CVE-2024–9935 — PDF Generator Addon for Elementor Page Builder <= 1.7.5 | https://medium.com/@verylazytech/poc-cve-2024-9935-pdf-generator-addon-for-elementor-page-builder-1-7-5-2c3436b95fb1?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, arbitrary-file-download, cybersecurity, lfi, cve-2024-9935 | 19-Dec-2024 |
| The Day I Found a Cross-Site Scripting (XSS) Vulnerability in a Bug Bounty Program ( $411) | https://medium.com/@awsdevops183/the-day-i-found-a-cross-site-scripting-xss-vulnerability-in-a-bug-bounty-program-4edec6f09bed?source=rss------bug_bounty-5 | Madhukar Reddy | cybersecurity, bug-bounty, devsecops, cross-site-scripting | 19-Dec-2024 |
| How I Bypassed View-Only Mode with a Simple Trick ( duplicate bug ) | https://medium.com/@mahdisalhi0500/how-i-bypassed-view-only-mode-with-a-simple-trick-duplicate-bug-92e1ec91a8d7?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | security, information-security, bug-bounty, penetration-testing, infosec | 19-Dec-2024 |
| How i Found X-Forwarded Header Injection — Server Be Like, ‘Ab Toh Trust Issues Ho Rahe Hain!’ | https://aiwolfie.medium.com/how-i-found-x-forwarded-header-injection-server-be-like-ab-toh-trust-issues-ho-rahe-hain-220e100332a3?source=rss------bug_bounty-5 | AIwolfie | cybersecurity, bug-bounty, servers, ethical-hacking, host-header-injection | 19-Dec-2024 |
| Subdomain Takeover guides, methodology and exploit POCs | https://aditya-narayan.medium.com/subdomain-takeover-guides-methodology-and-exploit-pocs-9f5dd632c175?source=rss------bug_bounty-5 | Aditya Narayan | bug-bounty-writeup, subdomain-takeover, bug-bounty-tips, reconnaissance, bug-bounty | 19-Dec-2024 |
| Installing Xposed Framework for Enhanced Penetration Testing (SSLunpinning) | https://medium.com/@sumith.ec12/installing-xposed-framework-for-enhanced-penetration-testing-sslunpinning-d50fbb2354c6?source=rss------bug_bounty-5 | sumith p v | bug-bounty, vapt, pentesting, security-testing, ssl-pinning-bypass | 19-Dec-2024 |
| HTML Injection to Mass Phishing | https://infosecwriteups.com/html-injection-to-mass-phishing-5701d495cdc2?source=rss------bug_bounty-5 | Bharat Singh | phishing, bug-bounty, cybersecurity, penetration-testing, bug-bounty-writeup | 19-Dec-2024 |
| Zero-Click Account Takeover Through Response Manipulation | https://medium.com/@abdullayman04/zero-click-account-takeover-through-response-manipulation-ee786a7a06dd?source=rss------bug_bounty-5 | Abdullah Ayman | cybersecurity, bug-bounty, account-takeover, penetration-testing | 19-Dec-2024 |
| How I Found an Authentication Bypass Vulnerability in the Password Change Process | https://medium.com/@ajay.kumar.695632/how-i-found-an-authentication-bypass-vulnerability-in-the-password-change-process-160359fae1bc?source=rss------bug_bounty-5 | Ajay Kumar | bugs, bug-bounty-writeup, bug-bounty-tips, bug-bounty, bug-hunting | 19-Dec-2024 |
| HACKING NASA TO GET APPRECIATION LETTER | https://medium.com/@click2jit/hacking-nasa-to-get-appreciation-letter-a6ff93a3bcbc?source=rss------bug_bounty-5 | Prasenjit Malakar | cybersecurity, bug-bounty, ethical-hacking, programming, xss-attack | 19-Dec-2024 |
| Interpol Replaces “Pig Butchering” with “Romance Baiting” to Protect Victims | https://medium.com/@wiretor/interpol-replaces-pig-butchering-with-romance-baiting-to-protect-victims-4c702d62adaa?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, ai, bug-bounty, malware, hacker | 19-Dec-2024 |
| Beginners Guide for Exploiting Race Conditions | https://bitpanic.medium.com/beginners-guide-for-exploiting-race-conditions-ab73c843b44a?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, programming, cybersecurity, bug-bounty-tips, technology | 19-Dec-2024 |
| “Do Your Best, and Let Allah Do the Rest” led me to a Privilege Escalation Bug | https://medium.com/@mrasg/do-your-best-and-let-allah-do-the-rest-leads-me-to-privilege-escalation-bug-60a3c028c802?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | pentesting, penetration-testing, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 19-Dec-2024 |
| Successfully Gained Full Admin Access and Changed the Password Through Token Manipulation ⚔️ | https://medium.com/@momenrezkk90/successfully-gained-full-admin-access-and-changed-the-password-through-token-manipulation-%EF%B8%8F-fe91fc0d9a0f?source=rss------bug_bounty-5 | Momenrezk | penetration-testing, bug-bounty, cybersecurity | 18-Dec-2024 |
| Easiest P1 $$$$$! | https://medium.com/@mrsingh10978/easiest-p1-702990960a50?source=rss------bug_bounty-5 | Anonymous Traiger | bug-bounty-program, bug-bounty-hunter, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 18-Dec-2024 |
| Mobile Application Bounty Practice: SQL Injection Principles, Vulnerability Discovery and… | https://medium.com/@security.tecno/mobile-application-bounty-practice-sql-injection-principles-vulnerability-discovery-and-3921ad2e6998?source=rss------bug_bounty-5 | TECNO Security | hacking, security, sql, bug-bounty | 18-Dec-2024 |
| FROM STRUGGLES TO SUCCESS: MY JOURNEY TO THE NASA HALL OF FAME | https://rootxabit.medium.com/from-struggles-to-success-my-journey-to-the-nasa-hall-of-fame-38700dd6303a?source=rss------bug_bounty-5 | sudo-xabit | info-sec-writeups, bugcrowd, bug-bounty, hacked, nasa | 18-Dec-2024 |
| Admin Panel Access via Default Credentials | https://infosecwriteups.com/admin-panel-access-via-default-credentials-215b92b030bb?source=rss------bug_bounty-5 | cryptoshant | bug-bounty-tips, pentesting, bug-bounty, hall-of-fame, hacking | 18-Dec-2024 |
| Rate Limit Bypass Using Response Manipulation. | https://aman0.medium.com/rate-limit-bypass-using-response-manipulation-dcce19aff7ef?source=rss------bug_bounty-5 | Aman H | web3, bug-bounty, infosec, bug-bounty-tips, penetration-testing | 18-Dec-2024 |
| $150 Easy HTML Injection Vulnerability | https://medium.com/@kumawatabhijeet2002/150-easy-html-injection-vulnerability-5c176b5d07fa?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, bounty-program, infosec, bug-bounty, bug-bounty-tips | 18-Dec-2024 |
| What is Passive Reconnaissance? ️♂️ | https://theexploitlab.medium.com/what-is-passive-reconnaissance-%EF%B8%8F-%EF%B8%8F-4de8a9ce5003?source=rss------bug_bounty-5 | The Exploit Lab | hacking, bugs, bug-bounty, bug-bounty-tips | 18-Dec-2024 |
| How to Use Enum4linux for SMB Enumeration in Kali Linux | https://theexploitlab.medium.com/how-to-use-enum4linux-for-smb-enumeration-in-kali-linux-d96e27f9391d?source=rss------bug_bounty-5 | The Exploit Lab | bug-bounty, smb, bug-bounty-tips, bugs | 18-Dec-2024 |
| How to Use Corsy for CORS Misconfiguration Scanning | https://theexploitlab.medium.com/how-to-use-corsy-for-cors-misconfiguration-scanning-7ba7b22ee9d5?source=rss------bug_bounty-5 | The Exploit Lab | cors, hacking, bug-bounty, bug-bounty-tips | 18-Dec-2024 |
| Useful Wordlists for Bug Bounty Hunters | https://medium.com/@iamshafayat/useful-wordlists-for-bug-bounty-hunters-09f9b3cd2344?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | bug-bounty, cybersecurity, penetration-testing, bug-bounty-tips, bug-bounty-writeup | 18-Dec-2024 |
| Step-by-Step Guide to Building Secure Web Applications with OWASP Top 10 | https://medium.com/@dhatchu9715/step-by-step-guide-to-building-secure-web-applications-with-owasp-top-10-7c603dda58f3?source=rss------bug_bounty-5 | Dhatchu | owasp, bug-bounty, hacking, networking, cybersecurity | 18-Dec-2024 |
| Bug Bounty Findings: 10 Major Vulnerabilities Exposed in Cloverleaf’s Application - BAC in GraphQL… | https://medium.com/@maakthon/bug-bounty-findings-10-major-vulnerabilities-exposed-in-cloverleafs-application-bac-in-graphql-0ae1ee0eb4d5?source=rss------bug_bounty-5 | Mahmoud Abd Alkarim | cybersecurity, bug-bounty, broken-access-control, bug-bounty-writeup, security-research | 18-Dec-2024 |
| The Dark Side of Shodan | https://yasinspace.medium.com/the-dark-side-of-shodan-2d9b422e28a8?source=rss------bug_bounty-5 | Yasin | red-team, hacking, bug-bounty, shodan, bug-bounty-tips | 18-Dec-2024 |
| This 200$ Gadget Can Hack Anything | https://osintteam.blog/this-200-gadget-can-hack-anything-c482888871e3?source=rss------bug_bounty-5 | Tahir Ayoub | bug-bounty, cybersecurity, technology, cybercrime, hacking | 18-Dec-2024 |
| Best python scripts for cybersecurity analyst | https://medium.com/@paritoshblogs/best-python-scripts-for-cybersecurity-analyst-d5ebc91b4cdb?source=rss------bug_bounty-5 | Paritosh | information-technology, cybersecurity, hacking, bug-bounty, python | 18-Dec-2024 |
| Turning a Known Issue into €100 Bounty: My Bug Bounty Breakthrough✨ | https://medium.com/@anmolv77654/turning-a-known-issue-into-a-100-bounty-my-bug-bounty-breakthrough-3bd89c281ea9?source=rss------bug_bounty-5 | AnmolSecSavvy | web-security, cybersecurity, bug-bounty, ethical-hacking, bug-bounty-tips | 18-Dec-2024 |
| $750 Domain Hijacking Vulnerability | https://1-day.medium.com/750-domain-hijacking-vulnerability-f6e4b4445711?source=rss------bug_bounty-5 | 1day | bug-bounty, information-security, penetration-testing, ethical-hacking, bug-bounty-tips | 18-Dec-2024 |
| Meta Hit with $264M Fine! Irish DPC Takes a Stand on Facebook Data Breach | https://medium.com/@wiretor/meta-hit-with-264m-fine-irish-dpc-takes-a-stand-on-facebook-data-breach-60cb69abe3df?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, ai, business, malware | 18-Dec-2024 |
| Beware of New Ledger Phishing Attack: Protect Your Crypto Wallet! | https://medium.com/@wiretor/beware-of-new-ledger-phishing-attack-protect-your-crypto-wallet-a048705d2b58?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, ai, hacking, business | 18-Dec-2024 |
| CVE-2024–54385 | WordPress Plugin | https://medium.com/@malvinval/cve-2024-54385-wordpress-plugin-7ff0f8e5ad1d?source=rss------bug_bounty-5 | Malvin Valerian | cve, hacking, cybersecurity, bug-bounty, wordpress | 17-Dec-2024 |
| 200$ DLL Hijacking Attack | https://cybersecuritywriteups.com/200-dll-hijacking-attack-fdb4fd46fea9?source=rss------bug_bounty-5 | AbhirupKonwar | cybersecurity, penetration-testing, bug-bounty, bug-bounty-writeup, bug-bounty-tips | 17-Dec-2024 |
| OSINT AND DORKING TOOLS | https://medium.com/@reazatih/osint-and-dorking-tools-67dc970d049d?source=rss------bug_bounty-5 | Re@Za | osint, hacking, dorks, bug-bounty | 17-Dec-2024 |
| Utilizing MITRE ATT&CK Framework: Examples and Practical Applications | https://medium.com/@paritoshblogs/utilizing-mitre-att-ck-framework-examples-and-practical-applications-0c4ea468ad53?source=rss------bug_bounty-5 | Paritosh | mitre-attck, hacking, threat-intelligence, bug-bounty, cybersecurity | 17-Dec-2024 |
| Open Redirect to XSS: Chaining Vulnerabilities for Maximum Impact | https://medium.com/@iPsalmy/open-redirect-to-xss-chaining-vulnerabilities-for-maximum-impact-36ae8dd9f198?source=rss------bug_bounty-5 | iPsalmy | web-application-security, bug-bounty, xss-attack | 17-Dec-2024 |
| API Keys Attack: How to Find and Exploit Secrets in Web Applications | https://medium.com/@bootstrapsecurity/api-keys-attack-how-to-find-and-exploit-secrets-in-web-applications-1896d75d716b?source=rss------bug_bounty-5 | BootstrapSecurity | ethical-hacking, bug-bounty, api, hacking, hacking-team | 17-Dec-2024 |
| Top 9 Books to Master Bug Hunting and Penetration Testing | https://osintteam.blog/top-9-books-to-master-bug-hunting-and-penetration-testing-c40039b330bb?source=rss------bug_bounty-5 | Bicitro Biswas | hacking, cybersecurity, bug-bounty, books, penetration-testing | 17-Dec-2024 |
| Exposing Facebook’s Hidden Goldmine: Creators’ Private Data at Risk | https://gtm0x01.medium.com/exposing-facebooks-hidden-goldmine-creators-private-data-at-risk-01317f3f0031?source=rss------bug_bounty-5 | Gtm Mänôz | graphql, hacking, facebook, infosec, bug-bounty | 17-Dec-2024 |
| SubScanX: A Powerful Recon Tool for Bug Bounty and Pentesting | https://medium.com/@rootspaghetti/subscanx-a-powerful-recon-tool-for-bug-bounty-and-pentesting-ed229128a661?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty-tips, bug-bounty | 17-Dec-2024 |
| Documenting Bug Bounty Journey and Current Approach | https://aditya-narayan.medium.com/documenting-bug-bounty-journey-and-current-approach-334db57e857e?source=rss------bug_bounty-5 | Aditya Narayan | bug-bounty-tips, writeup, hacker, bug-bounty, cybersecurity | 17-Dec-2024 |
| How I got Appreciation Letters for finding bugs. | https://infosecwriteups.com/how-i-got-appreciation-letters-for-finding-bugs-e935f42e2f71?source=rss------bug_bounty-5 | Rivek Raj Tamang ( RivuDon ) | hacking, cybersecurity, ethical-hacking, bug-bounty, bug-bounty-tips | 17-Dec-2024 |
| How I Broke the Speed Limit: A Bug Bounty Tale of Bypassing Rate Limiting | https://infosecwriteups.com/how-i-broke-the-speed-limit-a-bug-bounty-tale-of-bypassing-rate-limiting-29a1ec4e8681?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, cybersecurity, bug-bounty, bug-bounty-tips, technology | 17-Dec-2024 |
| 6 AI Tools Used by Hackers 2025 | https://ai.plainenglish.io/6-ai-tools-used-by-hackers-2025-dfdda79cf51f?source=rss------bug_bounty-5 | Tahir Ayoub | chatgpt, hacking, ai, cybersecurity, bug-bounty | 17-Dec-2024 |
| 403 Bypass changing http method only | https://rahman0x01.medium.com/403-bypass-changing-http-method-only-f0a32b43a3c8?source=rss------bug_bounty-5 | rahman0x01 | hunting, ethical-hacking, bug-bounty | 17-Dec-2024 |
| Cybersecurity Alert: Texas Tech University System Data Breach Impacts 1.4 Million Patients! | https://medium.com/@wiretor/cybersecurity-alert-texas-tech-university-system-data-breach-impacts-1-4-million-patients-caceb8096be9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, ai, hacking, business | 17-Dec-2024 |
| FBI ALERT: HiatusRAT Malware Attacks Targeting Web Cameras & DVRs! | https://medium.com/@wiretor/fbi-alert-hiatusrat-malware-attacks-targeting-web-cameras-dvrs-37f2eeb2bd01?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, business, hacking, fbi, malware | 17-Dec-2024 |
| Easy 100$ in public Hackerone program under 3 minutes | https://medium.com/@loayahmed686/easy-100-in-public-hackerone-program-under-3-minutes-69b20e185d3b?source=rss------bug_bounty-5 | r00t | bug-bounty | 17-Dec-2024 |
| Uncovering Vulnerabilities Through Swagger UI Directory Enumeration | https://hackersatty.medium.com/uncovering-vulnerabilities-through-swagger-ui-directory-enumeration-49e6b43558cd?source=rss------bug_bounty-5 | hackersatty | cybersecurity, javascript, vulnerability, bug-bounty, swagger | 17-Dec-2024 |
| Top 5 Ways to Hack APIs and find good bugs | https://medium.com/@sreedeep200/top-5-ways-to-hack-apis-and-find-good-bugs-dfd4a7bbb623?source=rss------bug_bounty-5 | Sreedeep cv | cybersecurity, hacking, api, security, bug-bounty | 17-Dec-2024 |
| Exploiting Access Control Misconfiguration: Privilege Escalation via Improper PATCH Method… | https://medium.com/@momenrezkk90/exploiting-access-control-misconfiguration-privilege-escalation-via-improper-patch-method-b653bb92ada6?source=rss------bug_bounty-5 | Momenrezk | bug-bounty, privilege-escalation, cybersecurity, penetration-testing | 17-Dec-2024 |
| HTB University CTF 2024 Web challenges writeup: Armaxis[very easy] | https://medium.com/@0xNayelx/htb-university-ctf-2024-web-challenges-writeup-armaxis-very-easy-404ac9f101b8?source=rss------bug_bounty-5 | 0xNayel | security, web-security, htb, ctf, bug-bounty | 16-Dec-2024 |
| HTB University CTF 2024 Web challenges writeup: Breaking Bank[easy] | https://medium.com/@0xNayelx/htb-university-ctf-2024-web-challenges-writeup-breaking-bank-easy-1c3064092abc?source=rss------bug_bounty-5 | 0xNayel | writeup, htb, bug-bounty, ctf, security | 16-Dec-2024 |
| Advanced Google Dorking | Part14 | https://systemweakness.com/advanced-google-dorking-part14-79b21e11ae25?source=rss------bug_bounty-5 | AbhirupKonwar | penetration-testing, cybersecurity, ethical-hacking, bug-bounty, bug-bounty-tips | 16-Dec-2024 |
| How I Got 200 euro bounty? | https://doordiefordream.medium.com/how-i-got-200-euro-bounty-03bcce712a51?source=rss------bug_bounty-5 | Bug hunter balu | hacking, vulnerability, ethical-hacking, bug-bounty, cybersecurity | 16-Dec-2024 |
| Master the Art of Cyber Defense: Top Open-Source Tools for Threat Intelligence! | https://medium.com/@paritoshblogs/master-the-art-of-cyber-defense-top-open-source-tools-for-threat-intelligence-7c575e69b853?source=rss------bug_bounty-5 | Paritosh | cybersecurity, hacking, bug-bounty, information-technology, threat-intelligence | 16-Dec-2024 |
| How I Discovered SSTI Vulnerability in Just 5 Minutes | $300 Bounty | https://medium.com/@kumawatabhijeet2002/how-i-discovered-ssti-vulnerability-in-just-5-minutes-f7ac31f3f6b0?source=rss------bug_bounty-5 | Abhijeet kumawat | infose, hacking, bug-bounty-tips, bug-bounty, penetration-testing | 16-Dec-2024 |
| Unmasking a Privacy Oversight: A Deep Dive into Persistent User Data | https://medium.com/@najeebkm010/unmasking-a-privacy-oversight-a-deep-dive-into-persistent-user-data-5ee433397021?source=rss------bug_bounty-5 | Najeebkm | bug-bounty, information-disclosure, cyber, security | 16-Dec-2024 |
| RCE in 2 Universities | https://osintteam.blog/rce-in-2-universities-d2f13a2a2afb?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, cybersecurity, cyberattack, penetration-testing, bug-bounty-tips | 16-Dec-2024 |
| Ethical Dilemmas in Using AI for Security Testing and Bug Bounties | https://pointlessai.medium.com/ethical-dilemmas-in-using-ai-for-security-testing-and-bug-bounties-ad6d75e6fab7?source=rss------bug_bounty-5 | PointlessAI Medium | chatgpt, bug-bounty, bugbounty-writeup, ai | 16-Dec-2024 |
| My Bug Hunting Methodology: Recon | https://gentilsecurity.medium.com/my-bug-hunting-methodology-recon-cbc6821708d8?source=rss------bug_bounty-5 | GenTiL | reconnaissance, cybersecurity, hacking, bug-hunting, bug-bounty | 16-Dec-2024 |
| How to Hack JSON Web Tokens (JWT): Weak Implementations for Critical Vulnerabilities | https://medium.com/@bootstrapsecurity/how-to-hack-json-web-tokens-jwt-weak-implementations-for-critical-vulnerabilities-75462988cb11?source=rss------bug_bounty-5 | BootstrapSecurity | ethical-hacking, cybersecurity, jwt-token, bug-bounty, bug-bounty-tips | 16-Dec-2024 |
| A Beginner's guide for Starting Web3 Bug Bounty | https://bitpanic.medium.com/how-to-start-web3-bug-bounty-30f7f968ae11?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty, cybersecurity, web3, bug-bounty-tips, technology | 16-Dec-2024 |
| My Bug Hunting Methodology: Recon | by ahmedhamdy0x | https://gentilsecurity.medium.com/my-bug-hunting-methodology-recon-cbc6821708d8?source=rss------bug_bounty-5 | GenTiL | reconnaissance, cybersecurity, hacking, bug-hunting, bug-bounty | 16-Dec-2024 |
| 2FA Testing Tips for Bug Bounty Hunters | https://bevijaygupta.medium.com/2fa-testing-tips-for-bug-bounty-hunters-d6d77322e1b4?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty, bug-bounty-tips, 2fa-authentication, bugs, 2fa | 16-Dec-2024 |
| How I Discovered a High-Severity Vulnerability on Discord (and got rewarded) | https://mirzebaba.medium.com/how-i-discovered-a-high-severity-vulnerability-on-discord-and-got-rewarded-bb327902fbb9?source=rss------bug_bounty-5 | Mirzəbaba | vulnerabilit, discord, ethical-hacking, cybersecurity, bug-bounty | 16-Dec-2024 |
| Clop Ransomware Gang Behind Major Cleo Data Breach | https://medium.com/@wiretor/clop-ransomware-gang-behind-major-cleo-data-breach-421b729bafde?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, ai, hacking, business | 16-Dec-2024 |
| ConnectOnCall Breach Exposes 900K+ Records! Don’t Be Next — Get Wire Tor Protection Today | https://medium.com/@wiretor/connectoncall-breach-exposes-900k-records-dont-be-next-get-wire-tor-protection-today-d4dd7de3570d?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, malware, ai, business | 16-Dec-2024 |
| Winnti Hackers Strike Again: New ‘Glutton’ Backdoor Exposed! | https://medium.com/@wiretor/winnti-hackers-strike-again-new-glutton-backdoor-exposed-5cd7bbb0faf0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, business, hacking, malware, ai | 16-Dec-2024 |
| [Hacking Scope] Exposure for tons of secret documents | https://medium.com/@nagashygaballah/hacking-scope-exposure-for-tons-of-secret-documents-5ba5c3906600?source=rss------bug_bounty-5 | 111xNagashy | bug-bounty, penetration-testing, hacking | 16-Dec-2024 |
| Traditional Penetration Testing vs. Bug Bounty Programs | https://medium.com/@hackrate/traditional-penetration-testing-vs-bug-bounty-programs-bb792a4d0d3f?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, penetration-testing, bug-bounty, hacking, cybersecurity | 16-Dec-2024 |
| From Minor Glitches to Major Wins: How I Chained CSRF and IDOR for a Critical Exploit | https://osintteam.blog/from-minor-glitches-to-major-wins-how-i-chained-csrf-and-idor-for-a-critical-exploit-0b110170cd9c?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, programming, cybersecurity, technology, bug-bounty | 16-Dec-2024 |
| Searching web security lessons? | https://medium.com/@l1ttlewing/searching-web-security-lessons-8a4dbefd0d04?source=rss------bug_bounty-5 | littlewing | infosec, cybersecurity, bug-bounty, information-security, web-security | 16-Dec-2024 |
| Wordlists Every Pentester Must Have !! | https://theartificialthinker.medium.com/wordlists-every-pentester-must-have-7ad4c1e46ce5?source=rss------bug_bounty-5 | Abhishek pawar | ethical-hacking, hacker, tech, pentest, bug-bounty | 16-Dec-2024 |
| JWT Auth Gone Wild: The Unexpected Twist! | https://medium.com/@ProwlSec/jwt-auth-gone-wild-the-unexpected-twist-a0b2ed943225?source=rss------bug_bounty-5 | ProwlSec | jwt, bugs, bug-bounty, hacking, pentesting | 15-Dec-2024 |
| What are Low Hanging Bugs? | Easy way to find them️♂️ | https://medium.com/@kumawatabhijeet2002/what-are-low-hanging-bugs-easy-way-to-find-them-%EF%B8%8F-%EF%B8%8F-399b37b354b7?source=rss------bug_bounty-5 | Abhijeet kumawat | hacking, bug-bounty-tips, infose, bugs, bug-bounty | 15-Dec-2024 |
| MSSQL (Microsoft SQL Server) — Port 1433 | https://medium.com/@verylazytech/mssql-microsoft-sql-server-port-1433-bc26d0bbdca9?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, mssql, oscp, bug-bounty, cybersecurity | 15-Dec-2024 |
| Automotive Penetration Testing Checklist | https://infosecwriteups.com/automotive-penetration-testing-checklist-8bbe83091c47?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, cybersecurity, information-technology, information-security, bug-bounty | 15-Dec-2024 |
| SQL Injection Vulnerability on a Security Awareness website: From Database Dump to cPanel Access | https://medium.com/@anonymousshetty2003/sql-injection-vulnerability-on-a-security-awareness-website-from-database-dump-to-cpanel-access-4bb3645eef07?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, sql-injection, cybersecurity, ethical-hacking | 15-Dec-2024 |
| How i found a Email Spoofing vulnerability to perform Phishing Attacks | https://medium.com/@anonymousshetty2003/how-i-found-a-email-spoofing-vulnerability-to-perform-phishing-attacks-00ec2cc934bb?source=rss------bug_bounty-5 | Anonymousshetty | email-spoofing, cybersecurity, bug-bounty, ethical-hacking | 15-Dec-2024 |
| ShadowJS: JavaScript File Discovery Tool | https://medium.com/@rootspaghetti/shadowjs-javascript-file-discovery-tool-1ede2f3172b6?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty-tips, bug-bounty | 15-Dec-2024 |
| Ultimate Django Vulnerability Checklist | https://bitpanic.medium.com/ultimate-django-vulnerability-checklist-ceb7f428c45f?source=rss------bug_bounty-5 | Spectat0rguy | technology, cybersecurity, python, bug-bounty, bug-bounty-tips | 15-Dec-2024 |
| LKQ Hacked: Cyberattack Disrupts Canadian Unit Operations and Exposes Company Data | https://medium.com/@wiretor/lkq-hacked-cyberattack-disrupts-canadian-unit-operations-and-exposes-company-data-7db6b9763011?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, xs, bug-bounty, lkq, hacking | 15-Dec-2024 |
| Russia Blocks Viber: Latest Move to Censor Communications | https://medium.com/@wiretor/russia-blocks-viber-latest-move-to-censor-communications-9dce4d823d67?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | russia, malware, viber, hacking, bug-bounty | 15-Dec-2024 |
| JavaScript BugBounty Method | https://medium.com/@cc1a2bb/javascript-bugbounty-method-5b789bfa7f44?source=rss------bug_bounty-5 | cc1a2b | hacking, cybersecurity, javascript, bug-bounty, bug-bounty-tips | 15-Dec-2024 |
| Cybersecurity Roadmap 2025 | https://hackerassociate.medium.com/cybersecurity-roadmap-2025-f7ad9d4ac49c?source=rss------bug_bounty-5 | Harshad Shah | cybersecurity, infosec, bug-bounty, penetration-testing, hacking | 14-Dec-2024 |
| Simplifying Reconnaissance: Building a Custom Bug Hunting Discord Bot | https://medium.com/@najeebkm010/simplifying-reconnaissance-building-a-custom-bug-hunting-discord-bot-6792ab4249bf?source=rss------bug_bounty-5 | Najeebkm | bug-bounty-tool, bug-bounty, cybersecurity | 14-Dec-2024 |
| How I Discovered a $7,000 Critical Vulnerability: IDOR to BAC to Account Takeover | https://medium.com/@najeebkm010/how-i-discovered-a-7-000-critical-vulnerability-idor-to-bac-to-account-takeover-0c195eae2ed2?source=rss------bug_bounty-5 | Najeebkm | bug-bounty-writeup, bug-bounty | 14-Dec-2024 |
| 10 day with Me | OWASP Top 10 | Day -1: Broken Access Control | https://infyra.medium.com/10-day-with-me-owasp-top-10-day-1-broken-access-control-e75572ce157e?source=rss------bug_bounty-5 | Md. EMTIAZ AHMED | broken-access-control, owasp, owasp-top-10, bug-bounty, cybersecurity | 14-Dec-2024 |
| Exploiting API Rate Limiting: Bypassing Restrictions | https://medium.com/@bootstrapsecurity/exploiting-api-rate-limiting-bypassing-restrictions-c89a1bd61aee?source=rss------bug_bounty-5 | BootstrapSecurity | api-security, development, rate-limiting, hacking, bug-bounty | 14-Dec-2024 |
| How I Found a Broken Link Hijacking Vulnerability in 2 Minutes | $250 Bounty | https://medium.com/@kumawatabhijeet2002/how-i-found-a-broken-link-hijacking-vulnerability-in-2-minutes-250-bounty-0d991eb9c61b?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, bugs, infosec, broken-link-hijacking, hacking | 14-Dec-2024 |
| My First Critical Bug: Exposing 3.5 Lakh+ PII! ️ | https://infosecwriteups.com/my-first-critical-bug-exposing-3-5-lakh-pii-%EF%B8%8F-fbad616ddbea?source=rss------bug_bounty-5 | cryptoshant | hacking, bug-bounty-tips, penetration-testing, cybersecurity, bug-bounty | 14-Dec-2024 |
| Git Information Leak: How to Exploit an Exposed .git Repository on a Web Server | https://medium.com/@burhankhansodhar/git-information-leak-how-to-exploit-an-exposed-git-repository-on-a-web-server-ac190ae18928?source=rss------bug_bounty-5 | Itz Burhan Khan | penetration-testing, web-server, directory-listing, bug-bounty, git | 14-Dec-2024 |
| Are you looking for an Intigriti alternative? | https://medium.com/@hackrate/are-you-looking-for-an-intigriti-alternative-4128a25888ed?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, bug-bounty, hacking, ethical-hacking, penetration-testing | 14-Dec-2024 |
| Dubai Police Identity Used in Sophisticated UAE Mobile Scams | https://medium.com/@wiretor/dubai-police-identity-used-in-sophisticated-uae-mobile-scams-36b9d149db17?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, malware, hacking, ai, bug-bounty | 14-Dec-2024 |
| Using Platform Profiles to send Fake in Information: A Security Risk Good logic bug | https://medium.com/@mahdisalhi0500/using-platform-profiles-to-send-fake-in-information-a-security-risk-good-logic-bug-0510d73802b8?source=rss------bug_bounty-5 | CaptinSHArky(Mahdi) | penetration-testing, cybersecurity, bug-bounty-tips, bug-bounty, security | 14-Dec-2024 |
| P4 bug’s and their POC steps | Part 9 | https://osintteam.blog/p4-bugs-and-their-poc-steps-part-9-c1f873227917?source=rss------bug_bounty-5 | socalledhacker | infosec, bug-bounty, bug-bounty-tips, cybersecurity, hacking | 14-Dec-2024 |
| Reflected XSS on Gaming Blog Website | https://medium.com/@enigma_/reflected-xss-on-gaming-blog-website-edc448d613a3?source=rss------bug_bounty-5 | enigma_ | writeup, bug-bounty-writeup, hackin, penetration-testing, bug-bounty | 13-Dec-2024 |
| Introducing ShodanSpider v2: Your Ultimate Free Tool for CVE Searching and Shodan Data Analysis… | https://shubhamrooter.medium.com/introducing-shodanspider-v2-your-ultimate-free-tool-for-cve-searching-and-shodan-data-analysis-ba7c7b3097b0?source=rss------bug_bounty-5 | Shubham Tiwari | cybersecurity, shodanspider, bug-bounty, redteam-tool, pentesting | 13-Dec-2024 |
| #ERROR! | https://medium.com/meetcyber/hidden-ace-up-hackers-sleeve-hacking-gadgets-1-phone-on-a-simmy-8b3d3cd540cf?source=rss------bug_bounty-5 | NnFace | cybersecurity, hacking, termux, kali-linux, bug-bounty | 13-Dec-2024 |
| Deep Recon Methodology for Bug Bounty Hunters | Part-1 | https://medium.com/@kumawatabhijeet2002/deep-recon-methodology-for-bug-bounty-hunters-part-1-54bdac09dcf4?source=rss------bug_bounty-5 | Abhijeet kumawat | infosec, bug-bounty, methodology, bug-bounty-tips | 13-Dec-2024 |
| Critical Unauthorized Access to Admin Pages via Vulnerable Endpoints | https://hackersatty.medium.com/critical-unauthorized-access-to-admin-pages-via-vulnerable-endpoints-e8799b3f7f69?source=rss------bug_bounty-5 | hackersatty | admin-panel, javascript, bug-bounty, hackerone, hackersatty | 13-Dec-2024 |
| Third Party Services Takeover using Oauth Misconfiguration | https://infosecwriteups.com/third-party-services-takeover-using-oauth-misconfiguration-8888a0c1ad86?source=rss------bug_bounty-5 | Ronak Patel | information-security, cybersecurity, ethical-hacking, bug-bounty | 13-Dec-2024 |
| Idor Is Easy ! You may Don’t know ! The Longest PrivEsc I’ve ever faced on Public BBP | https://medium.com/@Ahmex000/idor-is-easy-you-may-dont-know-the-longest-privesc-i-ve-ever-faced-on-public-bbp-1bf67cd699d8?source=rss------bug_bounty-5 | Ahmex000 | bug-bounty, bug-bounty-tips, bug-bounty-hunter, bug-hunting, bugbounty-writeup | 13-Dec-2024 |
| How I Found and Fixed XSS on a Website: A Bug Hunter’s Tale | https://medium.com/@mayankmalaviya3/how-i-found-and-fixed-xss-on-a-website-a-bug-hunters-tale-bc7351043928?source=rss------bug_bounty-5 | Mayank Malaviya (Aiwolfie) | hacking, bug-bounty, security, xss-attack, vulnerability | 13-Dec-2024 |
| 429 Bypasser Extension Guide | https://medium.com/@raxomara/429-bypasser-extension-guide-1d4f86b7d630?source=rss------bug_bounty-5 | Raxomara | cybersecurity, 429-bypasser, rate-limit-bypass, bug-bounty, bug-bounty-tips | 13-Dec-2024 |
| Make Penetration Testing Sexy Again | https://medium.com/@hackrate/make-penetration-testing-sexy-again-with-hackgate-51c556944c0b?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, bug-bounty, cybersecurity, penetration-testing, hacking | 13-Dec-2024 |
| The Growing Threat of Identity Attacks in Cybersecurity | https://medium.com/@paritoshblogs/the-growing-threat-of-identity-attacks-in-cybersecurity-5e847cf4ab6d?source=rss------bug_bounty-5 | Paritosh | information-technology, hacking, cybersecurity, identity, bug-bounty | 13-Dec-2024 |
| Bug Bounty Training Program | https://bevijaygupta.medium.com/bug-bounty-training-program-78c927572385?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-writeup, bug-bounty, bug-bounty-tips, bugs, bug-zero | 13-Dec-2024 |
| A Beginner’s Guide to Testing for Server-Side Request Forgery (SSRF) | https://medium.com/@mcooter/a-beginners-guide-to-testing-for-server-side-request-forgery-ssrf-9a4b5e16fdd2?source=rss------bug_bounty-5 | Michael Cooter | bug-bounty, ssrf, oswa, web-application-security, hacking | 13-Dec-2024 |
| Android vs iOS Security Intro | https://medium.com/@in3tinct/android-vs-ios-security-intro-4a9b5ecc65cf?source=rss------bug_bounty-5 | Vaibhav | security, android, bug-bounty, ios, mobile-app-development | 13-Dec-2024 |
| Bug Bounty Findings: 10 Major Vulnerabilities Exposed in Cloverleaf’s Application — IDOR — Part 2 | https://medium.com/@maakthon/bug-bounty-findings-10-major-vulnerabilities-exposed-in-cloverleafs-application-idor-part-2-932746b6b445?source=rss------bug_bounty-5 | Mahmoud Abd Alkarim | security-research, web-application-security, cybersecurity, bug-bounty, bug-bounty-writeup | 13-Dec-2024 |
| APIS are so easy to exploit | https://medium.com/@momen_besher/apis-are-so-easy-to-exploit-80bf65941e28?source=rss------bug_bounty-5 | steve55555 | api, vulnerability, bug-bounty-tips, cybersecurity, bug-bounty | 13-Dec-2024 |
| 【Award-winning Survey】About Security Vulnerability Submission Function | https://medium.com/@security.tecno/award-winning-survey-about-security-vulnerability-submission-function-c3113e2baec0?source=rss------bug_bounty-5 | TECNO Security | rewards, bugs, surveys, hacking, bug-bounty | 12-Dec-2024 |
| [Bugbounty]SQLI — Data Exfiltration via DNS | https://medium.com/@kauenavarro/bugbounty-sqli-data-exfiltration-via-dns-3e68ece08205?source=rss------bug_bounty-5 | Kauê Navarro | hacking, sqli, bug-hunter, bug-bounty, bugcrowd | 12-Dec-2024 |
| How I Bypassed Email Confirmation: A Playful Journey into the World of Bug Hunting | https://medium.com/@mrasg/how-i-bypassed-email-confirmation-a-playful-journey-into-the-world-of-bug-hunting-30f72d6c2fb6?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | pentesting, bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty | 12-Dec-2024 |
| Measuring the Success of Bug Bounty Programs: Outdated vs. Modern Approaches | https://medium.com/@hackrate/measuring-the-success-of-bug-bounty-programs-outdated-vs-modern-approaches-9cf87655092b?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, penetration-testing, cybersecurity, hacking, bug-bounty | 12-Dec-2024 |
| How I hacked University | https://medium.com/@Wantet/how-i-hacked-university-76097e703cb5?source=rss------bug_bounty-5 | Wantet | penetration-testing, university, bug-bounty, hacking | 12-Dec-2024 |
| How to Find and Identify Race Condition Vulnerabilities as a Penetration Tester | https://cyberw1ng.medium.com/how-to-find-and-identify-race-condition-vulnerabilities-as-a-penetration-tester-9d9ecce6ed56?source=rss------bug_bounty-5 | Karthikeyan Nagaraj | cybersecurity, bug-bounty, hacking, careers, technology | 12-Dec-2024 |
| Bug Bounty Findings: 10 Major Vulnerabilities Exposed in Cloverleaf’s Application - Open Redirect … | https://medium.com/@maakthon/bug-bounty-findings-10-major-vulnerabilities-exposed-in-cloverleafs-web-application-part-1-95f659ff7d0a?source=rss------bug_bounty-5 | Mahmoud Abd Alkarim | web-application-security, cybersecurity, bug-bounty-writeup, bug-bounty, security-research | 12-Dec-2024 |
| Account Takeover using SSO Logins | https://rikeshbaniya.medium.com/account-takeover-using-sso-logins-fa35f28a358b?source=rss------bug_bounty-5 | Rikesh Baniya | bugcrowd, bug-bounty-writeup, bug-bounty-tips, hackerone, bug-bounty | 12-Dec-2024 |
| Hack The Box Academy — File Inclusion — Skills Assessment | https://medium.com/@d4nglz17/hack-the-box-academy-file-inclusion-skills-assessment-1ca0283a9a06?source=rss------bug_bounty-5 | Danglz | hackthebox, penetration-testing, bug-bounty-writeup, bug-bounty, information-security | 12-Dec-2024 |
| Identity & Access Alert: Microsoft MFA Bypassed via AuthQuake Attack! | https://medium.com/@wiretor/identity-access-alert-microsoft-mfa-bypassed-via-authquake-attack-fc57043fe39a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, microsoft, bug-bounty, ai, business | 12-Dec-2024 |
| Critical Alert: Hackers Exploit Hunk Companion WordPress Plugin! | https://medium.com/@wiretor/critical-alert-hackers-exploit-hunk-companion-wordpress-plugin-50fcf5834f84?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, wordpress, hacking, bug-bounty, malware | 12-Dec-2024 |
| €XXX bounty for 2FA disabled without password and OTP by response manipulation | https://osintteam.blog/xxx-bounty-for-2fa-disabled-without-password-and-otp-by-response-manipulation-499ba5234a4f?source=rss------bug_bounty-5 | socalledhacker | hacking, bug-bounty, infosec, cybersecurity, bug-bounty-tips | 12-Dec-2024 |
| “Bypasseando controles en un POS” (Un poco de humo… del bueno) | https://medium.com/@andresbe.be/bypasseando-controles-en-un-pos-un-poco-de-humo-del-bueno-b18b6ecbc775?source=rss------bug_bounty-5 | Andres Barroso | bypass-restriction, point-of-sale-device, bug-bounty | 12-Dec-2024 |
| How a Race Condition Became an Account Takeover Vulnerability | https://medium.com/@mrasg/how-a-race-condition-became-an-account-takeover-vulnerability-756f14990f38?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty-writeup, bug-bounty-tips, security, pentesting, bug-bounty | 12-Dec-2024 |
| “Bypasseando controles en un POS” | https://medium.com/@andresbe.be/bypasseando-controles-en-un-pos-un-poco-de-humo-del-bueno-b18b6ecbc775?source=rss------bug_bounty-5 | Andres Barroso | bypass-restriction, point-of-sale-device, bug-bounty | 12-Dec-2024 |
| Exposed Git Directory P1 Bug | https://medium.com/@abhirupkonwar04/exposed-git-directory-p1-bug-5fd272a62f51?source=rss------bug_bounty-5 | AbhirupKonwar | vulnerability-management, pentesting, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 11-Dec-2024 |
| We Faced a Brute Force Attack — Here’s What Saved Us! | https://medium.com/@paritoshblogs/we-faced-a-brute-force-attack-heres-what-saved-us-1d33547eca61?source=rss------bug_bounty-5 | Paritosh | information-technology, hacking, cybersecurity, bug-bounty, brute-force | 11-Dec-2024 |
| Exposed Git Directory P1 Bug | https://systemweakness.com/exposed-git-directory-p1-bug-5fd272a62f51?source=rss------bug_bounty-5 | AbhirupKonwar | vulnerability-management, pentesting, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 11-Dec-2024 |
| Email Flooding Without Knowing Victim Email Via CSRF | https://0xshuvo.medium.com/email-flooding-without-knowing-victim-email-via-csrf-8de8bf5de3a3?source=rss------bug_bounty-5 | Shuvo Kumar Saha | email-flooding, csrf, bug-bounty, bugbounty-writeup, bug-bounty-tips | 11-Dec-2024 |
| How I Earned My First $100 in a Bug Bounty Program (And How You Can Too!) | https://medium.com/@divyesh.jagad/how-i-earned-my-first-100-in-a-bug-bounty-program-and-how-you-can-too-57b58b37226a?source=rss------bug_bounty-5 | Divyesh Jagad | passive-income, data-security, bug-bounty, ethical-hacking, cybersecurity | 11-Dec-2024 |
| Easy SQLI in just 30 minutes | https://medium.com/@mohammed01550038865/easy-sqli-in-just-30-minutes-0296038bb473?source=rss------bug_bounty-5 | Muhammed Mubarak | bug-bounty, hackerone, sql-injection, bugcrowd, writing-tips | 11-Dec-2024 |
| IDOR leads to leak private user’s data | https://medium.com/@banertheinrich/idor-leads-to-leak-private-users-data-3a2b59f58826?source=rss------bug_bounty-5 | Adham Heinrich | idor, bug-bounty, idor-vulnerability, cybersecurity, penetration-testing | 11-Dec-2024 |
| Hackrate PTaaS Powered by HackGATE: Redefining Penetration Testing | https://medium.com/@hackrate/hackrate-ptaas-powered-by-hackgate-redefining-penetration-testing-cb91c07ecc8f?source=rss------bug_bounty-5 | Levente Molnar | penetration-testing, bug-bounty, ethical-hacking, cybersecurity, hacking | 11-Dec-2024 |
| Data Breach: 446K Patients & Employees Affected at Center for Vein Restoration | https://medium.com/@wiretor/data-breach-446k-patients-employees-affected-at-center-for-vein-restoration-a75cf6fc1a5e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ai, bug-bounty, hacking, malware, business | 11-Dec-2024 |
| Urgent Warning: Ivanti CSA Flaw Exposes Admin Controls to Hackers! | https://medium.com/@wiretor/urgent-warning-ivanti-csa-flaw-exposes-admin-controls-to-hackers-d6937ede4389?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, ivanti, ransomware, business | 11-Dec-2024 |
| Critical WPForms Flaw Exposes 6M Sites to Unauthorized Stripe Refunds | https://medium.com/@wiretor/critical-wpforms-flaw-exposes-6m-sites-to-unauthorized-stripe-refunds-da9f48a7bfd0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, wpforms, business, malware | 11-Dec-2024 |
| How I Secured The Indian Army? | https://cybersecuritywriteups.com/how-i-secured-the-indian-army-9a80ba399202?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | bug-bounty-tips, cybersecurity, ethical-hacking, bug-bounty-writeup, bug-bounty | 11-Dec-2024 |
| Mastering JavaScript, Can It Make You an XSS Bug Hunter? | https://rendiero.medium.com/mastering-javascript-can-it-make-you-an-xss-bug-hunter-a0f0aaba0c6f?source=rss------bug_bounty-5 | Rendiero | hacking, penetration-testing, bug-bounty, xss-attack, javascript | 10-Dec-2024 |
| Email and home address disclosure using unauthenticated API endpoint worth $500 | https://vijetareigns.medium.com/email-and-home-address-disclosure-using-unauthenticated-api-endpoint-worth-500-4a497ff0678c?source=rss------bug_bounty-5 | the_unlucky_guy | cybersecurity, bug-bounty, application-security, bug-bounty-writeup, bug-bounty-tips | 10-Dec-2024 |
| Investigating a Linux Machine Security Breach Without Tools! | https://medium.com/@paritoshblogs/investigating-a-linux-machine-security-breach-without-tools-464e14bdeab0?source=rss------bug_bounty-5 | Paritosh | hacking, information-technology, linux, bug-bounty, cybersecurity | 10-Dec-2024 |
| $500 Bypassing Cloudflare WAF to Achieve XSS | https://medium.com/@kumawatabhijeet2002/500-bypassing-cloudflare-waf-to-achieve-xss-f3b9c4acb702?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, xss-vulnerability, bug-bounty-writeup, bug-bounty-tips, bugs | 10-Dec-2024 |
| HackerOne 香港汇丰接收赏金 | https://medium.com/@dem0ns/hackerone-%E9%A6%99%E6%B8%AF%E6%B1%87%E4%B8%B0%E6%8E%A5%E6%94%B6%E8%B5%8F%E9%87%91-353356389bc9?source=rss------bug_bounty-5 | 猫猫虫 | hsbc, h1, bug-bounty, hackerone, 挖洞 | 10-Dec-2024 |
| One way hackers stole API keys, Passwords, Tokens and Secrets. | https://osintteam.blog/one-way-hackers-stole-api-keys-passwords-tokens-and-secrets-4e731435bbd4?source=rss------bug_bounty-5 | Pwndec0c0 | programming, bug-bounty, cybersecurity, hacking, web-development | 10-Dec-2024 |
| Zoho QEngine: Arbitrary File Read | https://infosecwriteups.com/zoho-qengine-arbitrary-file-read-08df3d1e167e?source=rss------bug_bounty-5 | Jayateertha Guruprasad | hacking, cybersecurity, bug-bounty, bug-bounty-tips, bug-bounty-writeup | 10-Dec-2024 |
| NASA P2 Google Dorking | https://medium.com/@srinathkk99/nasa-p3-google-dorking-f7bd4b56d395?source=rss------bug_bounty-5 | Srinath K K | cybersecurity, bug-bounty, nasa, vulnerability, appreciation | 10-Dec-2024 |
| The Ultimate Guide to Starting a Bug Bounty Program: A Company’s Perspective | https://medium.com/@hackrate/the-ultimate-guide-to-starting-a-bug-bounty-program-a-companys-perspective-4feebb585ac4?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, hacking, penetration-testing, cybersecurity, bug-bounty | 10-Dec-2024 |
| I Found 7 Log4j (RCE) in a Single Program! | https://medium.com/@rootplinix/i-found-7-log4j-rce-in-a-single-program-5afb7d02dd06?source=rss------bug_bounty-5 | Abu Hurayra | bug-bounty-tips, cybersecurity, bug-bounty-writeup, log4shell, bug-bounty | 10-Dec-2024 |
| Must-Have Hacking Extensions For Bugbounty Hunters | https://medium.com/@The_scratch/must-have-hacking-extensions-for-bugbounty-hunters-5de4c56c6963?source=rss------bug_bounty-5 | Scratch | reconnaissance, bug-bounty, cybersecurity, hacking, bug-bounty-tips | 10-Dec-2024 |
| Naabu: A Fast and Efficient Port Scanning Tool | https://medium.com/@rootspaghetti/naabu-a-fast-and-efficient-port-scanning-tool-a5f8a4cf0641?source=rss------bug_bounty-5 | Root@Spaghetti | bug-bounty-tips, hacking, bug-bounty | 10-Dec-2024 |
| OAuth Account Hijacking via redirect_uri | https://osintteam.blog/oauth-account-hijacking-via-redirect-uri-ae8ca7a66930?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Café | bug-bounty, pentesting, bug-bounty-tips, information-security, cybersecurity | 10-Dec-2024 |
| How i bypassed 403 forbidden (private method) | https://medium.com/@reazatih/how-i-bypassed-403-forbidden-private-method-fc066c11f90f?source=rss------bug_bounty-5 | Re@Za | cybersecurity, bug-bounty, penetration-testing, 403-forbidden, hacking | 10-Dec-2024 |
| $50M Crypto Heist Linked to North Korean Hackers in Radiant Capital Attack | https://medium.com/@wiretor/50m-crypto-heist-linked-to-north-korean-hackers-in-radiant-capital-attack-71be5b6515d7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, ai, crypto, bug-bounty, malware | 10-Dec-2024 |
| Chinese Cyber Attack Targets European IT Firms Using Visual Studio Code for Supply-Chain… | https://medium.com/@wiretor/chinese-cyber-attack-targets-european-it-firms-using-visual-studio-code-for-supply-chain-761a472b00b2?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, ai, bug-bounty, malware, hacking | 10-Dec-2024 |
| Romanian Energy Supplier Electrica Hit by Ransomware Attack ⚡ | https://medium.com/@wiretor/romanian-energy-supplier-electrica-hit-by-ransomware-attack-8e1b3d8e453d?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, hacking, malware, romania, bug-bounty | 10-Dec-2024 |
| OpenWrt Sys upgrade Flaw: Hackers Can Push Malicious Firmware Images | https://medium.com/@wiretor/openwrt-sys-upgrade-flaw-hackers-can-push-malicious-firmware-images-088a0d23a1b0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, openwrt, business, bug-bounty, hacking | 10-Dec-2024 |
| Mastering Bug Bounty Recon: Essential Techniques for Ethical Hackers | https://medium.com/@verylazytech/mastering-bug-bounty-recon-essential-techniques-for-ethical-hackers-549c5b472975?source=rss------bug_bounty-5 | Very Lazy Tech | subdomain-enumeration, bug-bounty, github-recon, ethical-hacking, bug-bounty-techniques | 10-Dec-2024 |
| How I Bypassed OTP Like a Devil, Leading to Full Account Takeover | https://infosecwriteups.com/how-i-bypassed-otp-like-a-devil-leading-to-full-account-takeover-7bb7a673f7a0?source=rss------bug_bounty-5 | Ranjan | account-takeover, bug-bounty, ethical-hacking, otp-bypass, hacking | 10-Dec-2024 |
| How I Earned Over 100 Points on HackerOne with Email Spoofing. | https://j0nasdias.medium.com/how-i-earned-over-100-points-on-hackerone-with-email-spoofing-1ae0c4bc6aba?source=rss------bug_bounty-5 | Jonas Dias Rebelo | pentest, vulnerability, email-spoofing, hackerone, bug-bounty | 10-Dec-2024 |
| NASA P3 Google Dorking | https://cybersecuritywriteups.com/nasa-p3-google-dorking-6779970b6f03?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-writeup, cybersecurity, bug-bounty-tips, pentesting, bug-bounty | 09-Dec-2024 |
| Vote Manipulation & Debug Exposure, Another Interesting Finding… | https://medium.com/@josuofficial327/vote-manipulation-debug-exposure-another-interesting-finding-ec31f8cb939c?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | programming, bug-bounty-tips, penetration-testing, cybersecurity, bug-bounty | 09-Dec-2024 |
| How I Exploited Amazon Cognito Misconfigurations to Access Confidential S3 Data | https://1-day.medium.com/how-i-exploited-amazon-cognito-misconfigurations-to-access-confidential-s3-data-badb62cabfab?source=rss------bug_bounty-5 | 1day | bug-bounty-writeup, writeup, pentesting, bug-bounty, aws | 09-Dec-2024 |
| From Couch to Cloud: Bug Hunting Made Easy! | https://udayshelke17-40981.medium.com/from-couch-to-cloud-bug-hunting-made-easy-993039c8208b?source=rss------bug_bounty-5 | sudo uday | hacking, bug-bounty, cybersecurity, cloud-security, bug-bounty-tips | 09-Dec-2024 |
| How I Earned $$$ | Open Redirection | https://medium.com/@A0X-Y0S3TRX/how-i-earned-open-redirection-c26e191dbff2?source=rss------bug_bounty-5 | A0X-Y0S3TRX | bug-bounty-tips, bug-bounty-writeup, bug-bounty, bug-bounty-hunter, bug-bounty-program | 09-Dec-2024 |
| The List of Top Penetration Testing as a Service (PTaaS) Platforms for 2024 | https://medium.com/@hackrate/the-list-of-top-penetration-testing-as-a-service-ptaas-platforms-for-2024-e04969614042?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, cybersecurity, bug-bounty, hacking, penetration-testing | 09-Dec-2024 |
| How I Exploited Amazon Cognito Misconfigurations to Access Confidential S3 Data | https://awstip.com/how-i-exploited-amazon-cognito-misconfigurations-to-access-confidential-s3-data-badb62cabfab?source=rss------bug_bounty-5 | 1day | bug-bounty-writeup, writeup, pentesting, bug-bounty, aws | 09-Dec-2024 |
| VPS for Hackers: Top Picks for Bug Bounty and Cloud Pentesters Enthusiasts 2025 | https://hackerassociate.medium.com/vps-for-hackers-top-picks-for-bug-bounty-and-cloud-pentesters-enthusiasts-2025-195b17eea9f7?source=rss------bug_bounty-5 | Harshad Shah | cybersecurity, bug-bounty, penetration-testing, infosec, vps | 09-Dec-2024 |
| Exposed Prometheus Server Endpoint | https://osintteam.blog/exposed-prometheus-server-endpoint-cfb8e82e441b?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, bug-bounty, bug-bounty-writeup, vulnerability-management, bug-bounty-tips | 09-Dec-2024 |
| 2.9 Billion Records Compromised in NPD Breach: The Largest Data Leak Ever! | https://medium.com/@wiretor/2-9-billion-records-compromised-in-npd-breach-the-largest-data-leak-ever-9edaa25d362c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, ransomware, bug-bounty, breach, malware | 09-Dec-2024 |
| One Phishing Hit Leads to Massive Breach: 11K Children’s Data Exposed | https://medium.com/@wiretor/one-phishing-hit-leads-to-massive-breach-11k-childrens-data-exposed-f8bb80abc574?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | phising, business, malware, bug-bounty, hacking | 09-Dec-2024 |
| Eight Suspected Phishers Arrested in Belgium, Netherlands for Multi-Million Euro Fraud Scheme | https://medium.com/@wiretor/eight-suspected-phishers-arrested-in-belgium-netherlands-for-multi-million-euro-fraud-scheme-2df2e53d1fe3?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, phishing, business, malware, scam | 09-Dec-2024 |
| How to Earn Money with Bug Bounties and Other Platforms | https://medium.com/@tuteja_lovish/how-to-earn-money-with-bug-bounties-and-other-platforms-6a248db1a94d?source=rss------bug_bounty-5 | Lovish Kumar | security-token, bugs, bug-bounty, security, bounties | 09-Dec-2024 |
| QR Codes Bypass Browser Isolation for Malicious C2 Communication ️ | https://medium.com/@wiretor/qr-codes-bypass-browser-isolation-for-malicious-c2-communication-%EF%B8%8F-6dddc201d532?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, business, bug-bounty, qr-code | 09-Dec-2024 |
| Server Security Misconfiguration: Misconfigured DNS — High-Impact Subdomain Takeover (P2) | https://medium.com/@mathewskuruvila32/server-security-misconfiguration-misconfigured-dns-high-impact-subdomain-takeover-p2-cb9e7ccadf2d?source=rss------bug_bounty-5 | Mathews kuruvila | vulnerability, hacking, ethical-hacking, web-app-development, bug-bounty | 09-Dec-2024 |
| The HackerOne-Wayback Machine Saga: An Unofficial Vulnerability or Just Public Oversight? | https://huntrai.medium.com/the-hackerone-wayback-machine-saga-an-unofficial-vulnerability-or-just-public-oversight-22c1fb0112bb?source=rss------bug_bounty-5 | Aditya sunny | bug-bounty, bugs, hacking | 09-Dec-2024 |
| How I Discovered a Critical Vulnerability in WhatsApp’s Admin System | https://huntrai.medium.com/how-i-discovered-a-critical-vulnerability-in-whatsapps-admin-system-ce0a3f2bbcb2?source=rss------bug_bounty-5 | Aditya sunny | infosec, bug-bounty, hackerone, hacking, bugs | 09-Dec-2024 |
| 1-Click Account Takeover (ATO) via CORS Misconfiguration | https://medium.com/@mohammed01550038865/1-click-account-takeover-ato-via-cors-misconfiguration-64dc26d24917?source=rss------bug_bounty-5 | Muhammed Mubarak | hackerone, bugcrowd, bug-bounty-tips, ato, bug-bounty | 09-Dec-2024 |
| From Dev to Disaster: My Hilarious First Attempt at Bug Bounties with Burp Suite Pro | https://medium.com/@zero_4583/from-dev-to-disaster-my-hilarious-first-attempt-at-bug-bounties-with-burp-suite-pro-20fddd3ad295?source=rss------bug_bounty-5 | Nathan Vincent | bug-bounty, burpsuite, appsec, penetration-testing | 08-Dec-2024 |
| Misconfigurations That Paid Me Big: How I Exploited Them (And How You Can Stop Me) | https://systemweakness.com/misconfigurations-that-paid-me-big-how-i-exploited-them-and-how-you-can-stop-me-788a5375aa3c?source=rss------bug_bounty-5 | Akash Ghosh | technology, bug-bounty, cybersecurity, bug-bounty-writeup, programming | 08-Dec-2024 |
| $400 Bounty in 10 sec | https://systemweakness.com/400-bounty-in-10-sec-14d26c2976ec?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-writeup, pentesting, bug-bounty-tips, cybersecurity, bug-bounty | 08-Dec-2024 |
| Critical Authentication Bypass & Account Takeover via Attacker’s MFA Code | https://medium.com/@sharp488/critical-authentication-bypass-account-takeover-via-attackers-mfa-code-fadf36fe6e34?source=rss------bug_bounty-5 | Sharat Kaikolamthuruthil | bug-bounty, information-technology, bug-bounty-writeup, bug-bounty-tips, information-security | 08-Dec-2024 |
| WhiteLevel Error Page / Spring Boot Actuators Hunting | https://0xshuvo.medium.com/whitelevel-error-page-spring-boot-actuators-hunting-b0290c4ccdbd?source=rss------bug_bounty-5 | Shuvo Kumar Saha | bug-bounty-writeup, bug-bounty, infosec, bug-hunting, exploit | 08-Dec-2024 |
| The Dark Side of AI: Inside PyTorch’s Unpatched Vulnerabilities | https://medium.com/@piyushbhor22/the-dark-side-of-ai-inside-pytorchs-unpatched-vulnerabilities-0d8ce74fc9b5?source=rss------bug_bounty-5 | Pi - The Kernel Panic | machine-learning, pytorch, zero-day, exploits-zero-day, bug-bounty | 08-Dec-2024 |
| All About Pentesting & Securing Checkouts and Transactions | https://infosecwriteups.com/all-about-pentesting-securing-checkouts-and-transactions-f7bb1de4fd7b?source=rss------bug_bounty-5 | Xcheater | bug-bounty, appsec, payment-gateway | 08-Dec-2024 |
| Exploiting PHP Insecure Deserialization | https://medium.com/@mayank_prajapati/exploiting-php-insecure-deserialization-2e301557f12f?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | bug-bounty, cybersecurity, red-team, ethical-hacking, penetration-testing | 08-Dec-2024 |
| $200 Recon Bug Bounty | https://medium.com/infosecmatrix/200-recon-bug-bounty-3538566b94dc?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, pentesting, bug-bounty-writeup, ethical-hacking, bug-bounty | 08-Dec-2024 |
| The Ultimate Guide to Starting a Penetration Testing as a Service (PTaaS) Project for Your Company | https://medium.com/@hackrate/the-ultimate-guide-to-starting-a-penetration-testing-as-a-service-ptaas-project-for-your-company-5d7919eed353?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, hacking, penetration-testing, ethical-hacking, cybersecurity | 08-Dec-2024 |
| PoC: Bypass Input with SQL Injection to Gaining Information in SMK Maarif Terpadu Cicalengka and… | https://medium.com/@baracarlo/poc-bypass-input-with-sql-injection-to-gaining-information-in-smk-maarif-terpadu-cicalengka-and-51d56cfbbd60?source=rss------bug_bounty-5 | Baradika | sql-injection, cybersecurity, bug-hunting, bug-bounty | 08-Dec-2024 |
| How I Found Info disclosure vulnerability? | https://doordiefordream.medium.com/how-i-found-info-disclosure-vulnerability-32fa9e9b9a45?source=rss------bug_bounty-5 | Bug hunter balu | ethical-hacking, hacking, cybersecurity, bug-bounty, web3 | 08-Dec-2024 |
| Russia’s ‘BlueAlpha’ APT Hides in Cloudflare Tunnels | https://medium.com/@wiretor/russias-bluealpha-apt-hides-in-cloudflare-tunnels-7d7372615241?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware, business, russia | 08-Dec-2024 |
| Top 5 Must-Read Books to Master Web Penetration Testing (Beginners & Beyond) | https://medium.com/@verylazytech/top-5-must-read-books-to-master-web-penetration-testing-beginners-beyond-9bf99651445f?source=rss------bug_bounty-5 | Very Lazy Tech | hacking, bug-bounty, penetration-testing, web-development, web-penetration-testing | 08-Dec-2024 |
| How I Found a Critical Vulnerability and Earned $4,000 in Bug Bounty Hunting | https://medium.com/@zack0x01_/how-i-found-a-critical-vulnerability-and-earned-4-000-in-bug-bounty-hunting-2ce4a1227fdc?source=rss------bug_bounty-5 | zack0x01 | idor, cybersecurity, bug-bounty, hacking | 08-Dec-2024 |
| Mastering Git Conflicts: A Developer’s Guide to Seamless Merges ️⚡ | https://rajuhemanth456.medium.com/mastering-git-conflicts-a-developers-guide-to-seamless-merges-%EF%B8%8F-19718b819da0?source=rss------bug_bounty-5 | Hemanth Raju | bug-bounty, coding, software-development, interview, github | 08-Dec-2024 |
| Privilege Escalation via Impersonation Features feature | https://medium.com/@0x_xnum/privilege-escalation-via-impersonation-features-feature-c49cf3a3dc03?source=rss------bug_bounty-5 | Ahmed Tarek | privilege-escalation, hacking, bug-bounty-tips, bug-bounty, pentesting | 08-Dec-2024 |
| Mastering Internet Scanning: How to Use ZMap and Censys for Ethical Hacking — Part 1 | https://systemweakness.com/mastering-internet-scanning-how-to-use-zmap-and-censys-for-ethical-hacking-part-1-2ca54401e2e0?source=rss------bug_bounty-5 | hacker_might | reconnaissance, recon, ip-security, zmap, bug-bounty | 08-Dec-2024 |
| Unlocking Cybersecurity with Censys: A Guide to Ethical Hacking, Bug Bounties, and Pentesting —… | https://systemweakness.com/unlocking-cybersecurity-with-censys-a-guide-to-ethical-hacking-bug-bounties-and-pentesting-4e1c6e4358c3?source=rss------bug_bounty-5 | hacker_might | fun, bug-bounty, recon, censys, osint | 08-Dec-2024 |
| Mastering Subdomain Visualization: Using Aquatone for Effective Reconnaissanc | https://medium.com/@kalkumbe7745/mastering-subdomain-visualization-using-aquatone-for-effective-reconnaissanc-6409c7846c2c?source=rss------bug_bounty-5 | Rutvik Kalkumbe | ethical-hacking, cybersecurity, bug-bounty, security, aquatone | 08-Dec-2024 |
| How I Test for Cross-Site Scripting | https://osintteam.blog/how-i-test-for-cross-site-scripting-9262de5e949d?source=rss------bug_bounty-5 | Cybersec with Hemmars | writing, technology, cybersecurity, bug-bounty | 08-Dec-2024 |
| My First Bounty of ₹₹₹ | https://osintteam.blog/my-first-bounty-of-37c2d40cbdd9?source=rss------bug_bounty-5 | cryptoshant | password-reset, bug-bounty, journey, cybersecurity, hacking | 07-Dec-2024 |
| From Low Privileges to Owner Rights: A Wild Journey Through an ATO Vulnerability | https://medium.com/@mrasg/from-low-privileges-to-owner-rights-a-wild-journey-through-an-ato-vulnerability-cb21c468634c?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty-tips, bug-bounty-writeup, cybersecurity, hacking, bug-bounty | 07-Dec-2024 |
| P3 Bug in Few Minutes | https://medium.com/meetcyber/p3-bug-in-few-minutes-006f57913f71?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, cybersecurity, bug-bounty, infosec, bug-bounty-tips | 07-Dec-2024 |
| How I Found an ATO Vulnerability in Stripe Program in an Overlooked Corner | https://medium.com/@mrasg/how-i-found-an-ato-vulnerability-in-stripe-program-in-an-overlooked-corner-dce7d2cdaaf9?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | security, bug-bounty-tips, bug-bounty-writeup, hacking, bug-bounty | 07-Dec-2024 |
| How to Make a Clickjacking Vulnerability Scanner with Python | https://infosecwriteups.com/how-to-make-a-clickjacking-vulnerability-scanner-with-python-a53f48e70b58?source=rss------bug_bounty-5 | Muhammad Abdullahi | python, cybersecurity, bug-bounty, hacking, python-programming | 07-Dec-2024 |
| Beyond signUP OR resetPassword || Send , Confirm AND Setting ! | https://medium.com/@0xAwali/beyond-signup-or-resetpassword-send-confirm-and-setting-d153f3ab6e17?source=rss------bug_bounty-5 | Mahmoud M. Awali | web-security, bug-bounty | 07-Dec-2024 |
| 5 Ways I Got RCE’s In the Wild | https://medium.com/@red.whisperer/5-ways-i-got-rces-99a78901ba33?source=rss------bug_bounty-5 | Chux | cybersecurity, hacking, bug-bounty, technology, programming | 07-Dec-2024 |
| Code Flaws and Consequences: The Bug That Exposed PII | https://medium.com/@CANITEY/code-flaws-and-consequences-the-bug-that-exposed-pii-3de5251e1484?source=rss------bug_bounty-5 | CANITEY | penetration-testing, bugbounty-writeup, pentesting, cybersecurity, bug-bounty | 07-Dec-2024 |
| When One Isn’t Enough: Multiple SQL Injections Found in 1 VDP | https://osintteam.blog/when-one-isnt-enough-multiple-sql-injections-found-in-1-vdp-f45de0b4c674?source=rss------bug_bounty-5 | #$ubh@nk@r | hackerone, infosec, sql-injection, bug-bounty, web-security | 07-Dec-2024 |
| Ransomware Breach Exposes 310K Patient Records at Anna Jaques Hospital | https://medium.com/@wiretor/ransomware-breach-exposes-310k-patient-records-at-anna-jaques-hospital-8548c120ad63?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, hacking, bug-bounty, business, malware | 07-Dec-2024 |
| Ultralytics AI Supply Chain Breach: Cryptominer Infects Thousands! | https://medium.com/@wiretor/ultralytics-ai-supply-chain-breach-cryptominer-infects-thousands-5a0d82d1c32e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | machine-learning, hacking, bug-bounty, malware, ai | 07-Dec-2024 |
| New Windows Zero-Day Alert: NTLM Credentials at Risk! | https://medium.com/@wiretor/new-windows-zero-day-alert-ntlm-credentials-at-risk-ad6256807d0c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, bug-bounty-tips, windows, hacking | 07-Dec-2024 |
| Police Shut Down Manson Cybercrime Market & Arrest Key Suspects! | https://medium.com/@wiretor/police-shut-down-manson-cybercrime-market-arrest-key-suspects-29bdcbaae6cf?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, bus, bug-bounty, malware, manson | 07-Dec-2024 |
| 11 Must-Read Blogs to Understand IDOR | https://saminbinh.medium.com/11-best-blogs-to-learn-idor-7769511d5e05?source=rss------bug_bounty-5 | SAMIN BIN HUMAYUN | information-technology, cybersecurity, bug-bounty, idor, idor-vulnerability | 07-Dec-2024 |
| How I discovered my first CVE | https://medium.com/@zumiyumi/how-i-discovered-my-first-cve-7b1e2987326c?source=rss------bug_bounty-5 | Zumi Yumi | bug-bounty, xss-attack, cve, code-review, cybersecurity | 07-Dec-2024 |
| Hackers Aren’t Built by Tools — They Build the Tools | https://shuvonsec.medium.com/hackers-arent-built-by-tools-they-build-the-tools-6581f38dbb34?source=rss------bug_bounty-5 | Shariar Shahnawaz Shuvon | hacking, bug-bounty, information-security, cybersecurity, bug-bounty-tips | 07-Dec-2024 |
| Why Are You Not Identifying Bugs in Website 2025 | https://osintteam.blog/why-are-you-not-identifying-bugs-in-website-2025-8ff218815b7d?source=rss------bug_bounty-5 | Tahir Ayoub | hacking, cyber-security-awareness, bug-bounty-tips, bug-bounty, hackathons | 06-Dec-2024 |
| How I Found 3x XSS in 6 Seconds! Without Automated Tools | https://medium.com/@embossdotar/how-i-found-3x-xss-in-6-seconds-without-automated-tools-b0c852dea66f?source=rss------bug_bounty-5 | embossdotar | cybersecurity-awareness, hacking, bug-bounty, cybersecurity, ethical-hacking | 06-Dec-2024 |
| 10 RXSS on HackerOne VDPs | https://medium.com/infosecmatrix/10-rxss-on-hackerone-vdps-5162d3ee42af?source=rss------bug_bounty-5 | AbhirupKonwar | infosec, cybersecurity, xss-attack, bug-bounty, pentesting | 06-Dec-2024 |
| From Newbie to Pro: My Journey to a $3,000 Bug Bounty | https://myselfakash20.medium.com/from-newbie-to-pro-my-journey-to-a-3-000-bug-bounty-61abe935e3db?source=rss------bug_bounty-5 | Akash Ghosh | technology, bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips | 06-Dec-2024 |
| The Art of Pwning Okta For Profit and Fun | https://whoisshuvam.medium.com/the-art-of-pwning-okta-for-profit-and-fun-075dedbc4715?source=rss------bug_bounty-5 | Suvam Adhikari | bug-bounty-tips, cybersecurity, info-sec-writeups, bug-bounty, hackerone | 06-Dec-2024 |
| “The Hidden GPS Threat: Unstripped Metadata on Redacted.com led 5K Rubel in bounties” ️♂️ | https://infosecwriteups.com/the-hidden-gps-threat-unstripped-metadata-on-redacted-com-led-5k-rubel-in-bounties-%EF%B8%8F-%EF%B8%8F-fd044d2031b6?source=rss------bug_bounty-5 | JEETPAL | bug-bounty, bug-bounty-writeup, exif-data, cybersecurity, bugbounty-tips | 06-Dec-2024 |
| 10 Essential Tips for Bug Bounty Beginners: A Fun, Practical, and Slightly Cheeky Guide to Kicking… | https://medium.com/@mrasg/10-essential-tips-for-bug-bounty-beginners-a-fun-practical-and-slightly-cheeky-guide-to-kicking-c7da8a9b1b31?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | hacking, cybersecurity, penetration-testing, bug-bounty, bug-bounty-tips | 06-Dec-2024 |
| Atrium Health Data Breach Impacts 585,000 People: Why Healthcare Cybersecurity Needs Immediate… | https://medium.com/@wiretor/atrium-health-data-breach-impacts-585-000-people-why-healthcare-cybersecurity-needs-immediate-38a479e96e39?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, bug-bounty, marketing, business, malware | 06-Dec-2024 |
| ️ BREAKING: U.S. Arrests Scattered Spider Suspect Behind Telecom Hacks & Phishing Scams ️ | https://medium.com/@wiretor/%EF%B8%8F-breaking-u-s-arrests-scattered-spider-suspect-behind-telecom-hacks-phishing-scams-%EF%B8%8F-cd44ea215b09?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, business, ransomware, malware, hacking | 06-Dec-2024 |
| Now let’s set Frida For SSL Pinning Bypass. | https://aman0.medium.com/now-lets-set-frida-for-ssl-pinning-bypass-9ee8ae11b7b5?source=rss------bug_bounty-5 | Aman H | penetration-testing, bug-bounty, mobile-app-development, infosec, hacking | 06-Dec-2024 |
| List of Top Bug Bounty Platforms for 2024 | https://medium.com/@hackrate/list-of-top-bug-bounty-platforms-for-2024-fc31553c2e78?source=rss------bug_bounty-5 | Levente Molnar | penetration-testing, cybersecurity, vulnerability, bug-bounty, ethical-hacking | 06-Dec-2024 |
| Path Traversal Vulnerabilities in Web Applications: Understanding CVE-2024–9935 and How to Protect… | https://chintalatarakaram.medium.com/path-traversal-vulnerabilities-in-web-applications-understanding-cve-2024-9935-and-how-to-protect-40de3cca8ac8?source=rss------bug_bounty-5 | Chintala Taraka Ram | vulnerability, bug-bounty, python, education, web-development | 06-Dec-2024 |
| How I Found 3x XSS in 6 Seconds! Without Automated Tools | https://medium.com/meetcyber/how-i-found-3x-xss-in-6-seconds-without-automated-tools-b0c852dea66f?source=rss------bug_bounty-5 | embossdotar | cybersecurity-awareness, hacking, bug-bounty, cybersecurity, ethical-hacking | 06-Dec-2024 |
| A01: Broken Access Control and A05: Security Misconfiguration Leads to Unauthenticated Access to… | https://medium.com/@enigma_/a01-broken-access-control-and-a05-security-misconfiguration-leads-to-unauthenticated-access-to-0897e3bec491?source=rss------bug_bounty-5 | enigma | cybersecurity, bug-bounty, vulnerability, penetration-testing, ethical-hacking | 06-Dec-2024 |
| How I Turned a Low-Hanging Fruit Bug Into Mass Unauthorized Deletion of Invited Members | https://medium.com/@ahmedsamirghallab/how-i-turned-a-low-hanging-fruit-bug-into-mass-unauthorized-deletion-of-invited-members-6f195deffe11?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty, bug-bounty-tips, bug-bounty-writeup, hacking, penetration-testing | 05-Dec-2024 |
| How To Find Sensitive Log Files Easily.. | https://medium.com/@josuofficial327/how-to-find-sensitive-log-files-easily-1dd14bb5f221?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | ethical-hacking, vulnerability, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 05-Dec-2024 |
| Mission: Exploit – Advanced Bug Bounty Techniques Inspired by James Bond | https://bitpanic.medium.com/mission-exploit-advanced-bug-bounty-techniques-inspired-by-james-bond-a891ee3d0ef9?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, bug-bounty, cybersecurity, programming, technology | 05-Dec-2024 |
| How I Achieved a Full Account Takeover Through Information Disclosure | https://medium.com/@ahmedsamirghallab/how-i-achieved-a-full-account-takeover-through-information-disclosure-16c6f697b76e?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty-tips, penetration-testing, bug-bounty-writeup, bug-bounty, cybersecurity | 05-Dec-2024 |
| How Note-Taking and Hacktivity Analysis Led to Privilege Escalation | https://medium.com/@ahmedsamirghallab/how-note-taking-and-hacktivity-analysis-led-to-privilege-escalation-627aaf3bbd84?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | pentesting, bug-bounty-tips, bug-bounty-writeup, security, bug-bounty | 05-Dec-2024 |
| Unveiling the Unseen: A Journey from Simple Recon Using Shodan to Leaking AWS Secrets | https://medium.com/@security.tecno/unveiling-the-unseen-a-journey-from-simple-recon-using-shodan-to-leaking-aws-secrets-bc7bed1ad16f?source=rss------bug_bounty-5 | TECNO Security | hacking, security, writing, bug-bounty | 05-Dec-2024 |
| How Note-Taking and Hacktivity Analysis Led to Privilege Escalation | https://medium.com/@mrasg/how-note-taking-and-hacktivity-analysis-led-to-privilege-escalation-627aaf3bbd84?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | pentesting, bug-bounty-tips, bug-bounty-writeup, security, bug-bounty | 05-Dec-2024 |
| How I Achieved a Full Account Takeover Through Information Disclosure | https://medium.com/@mrasg/how-i-achieved-a-full-account-takeover-through-information-disclosure-16c6f697b76e?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty-tips, penetration-testing, bug-bounty-writeup, bug-bounty, cybersecurity | 05-Dec-2024 |
| How I Turned a Low-Hanging Fruit Bug Into Mass Unauthorized Deletion of Invited Members | https://medium.com/@mrasg/how-i-turned-a-low-hanging-fruit-bug-into-mass-unauthorized-deletion-of-invited-members-6f195deffe11?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | bug-bounty, bug-bounty-tips, bug-bounty-writeup, hacking, penetration-testing | 05-Dec-2024 |
| How Two Hardcoded Credentials Led To Payment System Takeover, Exposed 20,000 Credit Cards & Enabled… | https://medium.com/@Berserker1337/how-two-hardcoded-credentials-led-to-payment-system-takeover-exposed-20-000-credit-cards-enabled-04b0ac232786?source=rss------bug_bounty-5 | Berserker | bug-hunting, bug-bounty, writeup, cybersecurity, web-security | 05-Dec-2024 |
| Fix “Failed to load BApp” Burp Suite Extensions! | https://medium.com/@d3vilz50n/fix-failed-to-load-bapp-burp-suite-extensions-923efa10659d?source=rss------bug_bounty-5 | d3vilz50n | hacking-tools, hacking, fix, bug-bounty, burpsuite | 05-Dec-2024 |
| How I Earned My First Bug Bounty: A Beginner’s Story | https://medium.com/@kingstar75114/how-i-earned-my-first-bug-bounty-a-beginners-story-58e8a3023cc6?source=rss------bug_bounty-5 | TehanG07 | bugs, bug-hunting, bug-bounty-tips, bug-bounty, bug-hunter | 05-Dec-2024 |
| Correct Innerstanding + Overstanding | https://medium.com/@onelovemafia/correct-innerstanding-overstanding-8d3cfd9baa7d?source=rss------bug_bounty-5 | OneLoveMafia | deep-learning, mysticism, bug-bounty, game-development, zen | 05-Dec-2024 |
| Earn $10,000 XSS in Android Apps Scratch to Advance. | https://medium.com/@anandrishav2228/earn-10-000-xss-in-android-apps-scratch-to-advance-cb3aa6c2b98f?source=rss------bug_bounty-5 | Rishav anand | hacking, bug-bounty, cybersecurity, xss-attack, money | 05-Dec-2024 |
| AZEx Testnet Campaign is LIVE | https://medium.com/@AZEX.io/azex-testnet-campaign-is-live-ac553c18af8a?source=rss------bug_bounty-5 | AZEX | berachain, bug-bounty, testnet, dois, azex | 05-Dec-2024 |
| How I Exploited Passkey to Gain Unauthorized Access and TakeOver Invited Accounts | https://medium.com/@mrasg/how-i-exploited-passkey-to-gain-unauthorized-access-and-takeover-invited-accounts-b8b4547ffe70?source=rss------bug_bounty-5 | Ahmed Samir Ghallab | penetration-testing, pentesting, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 05-Dec-2024 |
| How I Broke Into My Dev Friend’s Website in Less Than 24 Hour | https://infosecwriteups.com/how-i-broke-into-my-dev-friends-website-in-less-than-24-hour-6fdb31ad65a1?source=rss------bug_bounty-5 | sM0ky4 | hacking, bug-bounty, cyberattack, cybersecurity, bug-bounty-writeup | 05-Dec-2024 |
| The Story of How I Hacked an International University in Indonesia | https://infosecwriteups.com/the-story-of-how-i-hacked-an-international-university-in-indonesia-ec819a8c8fc0?source=rss------bug_bounty-5 | JC | bug-bounty-tips, infosec, cybersecurity, bug-bounty-writeup, bug-bounty | 05-Dec-2024 |
| Penetration Testing on Steroids: Revolutionizing Ethical Hacking with Hackrate and HackGATE | https://medium.com/@hackrate/penetration-testing-on-steroids-revolutionizing-ethical-hacking-with-hackrate-and-hackgate-7edaf7244075?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, penetration-testing, ethical-hacking, cybersecurity-news, bug-bounty | 05-Dec-2024 |
| Practical Bug Bounty — TCM Academy | Report writing, Bypass, Best Programs. | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-report-writing-bypass-best-programs-710516804f53?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | penetration-testing, cybersecurity, ethical-hacking, web-penetration-testing, bug-bounty | 05-Dec-2024 |
| Chinese Hackers Salt Typhoon Breach Global Telecom Networks | https://medium.com/@wiretor/chinese-hackers-salt-typhoon-breach-global-telecom-networks-00b40e0ce07e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | telecom, bug-bounty, business, hacking, networking | 05-Dec-2024 |
| New DroidBot Malware Targets 77 Banking & Crypto Apps! | https://medium.com/@wiretor/new-droidbot-malware-targets-77-banking-crypto-apps-1b5105a66625?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bots, hacking, bug-bounty, business, malware | 05-Dec-2024 |
| UK Cracks Down on Russian Money Laundering Networks | https://medium.com/@wiretor/uk-cracks-down-on-russian-money-laundering-networks-4dfae89f9000?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, uk, business, malware, bug-bounty | 05-Dec-2024 |
| ⚠️ Critical Zero-Day Uncovered: Mitel MiCollab Wide Open to Attackers! ⚠️ | https://medium.com/@wiretor/%EF%B8%8F-critical-zero-day-uncovered-mitel-micollab-wide-open-to-attackers-%EF%B8%8F-cdc36da3552e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, zero-day, business, programming | 05-Dec-2024 |
| Bug Hunting | https://medium.com/meetcyber/bug-hunting-ff366260d8df?source=rss------bug_bounty-5 | Nazrul Islam Rana | bug-hunting, platform, hacker, xx, bug-bounty | 05-Dec-2024 |
| From Frustration to Exploitation: How a Link Shortener Helped Me Bypass WAF | https://imooaaz.medium.com/from-frustration-to-exploitation-how-a-link-shortener-helped-me-bypass-waf-03724dca1592?source=rss------bug_bounty-5 | Moaaz Afifi | bug-bounty, bugs, bug-bounty-tips, bug-bounty-writeup, cybersecurity | 05-Dec-2024 |
| How I Climbed to #1 Hacker | https://medium.com/@CipherHawk/how-i-climbed-to-1-hacker-ffb52e2799c3?source=rss------bug_bounty-5 | CipherHawk | networking, bug-bounty-tips, cybersecurity, hacking, bug-bounty | 04-Dec-2024 |
| Modern Security Vulnerabilities: Lessons from Recent Breaches | https://medium.com/@SakshifromKushoAI/modern-security-vulnerabilities-lessons-from-recent-breaches-b925a6928bbf?source=rss------bug_bounty-5 | Sakshi from KushoAI | secure-coding, cybersecurity, bug-bounty, app-security, data-breach | 04-Dec-2024 |
| Path Traversal, bypass file extension validation with null bytes | https://medium.com/@sulthanyluthfi/path-traversal-bypass-file-extension-validation-with-null-bytes-0cedc4fb53f5?source=rss------bug_bounty-5 | Luthfi Sulthany | cybersecurity, bug-bounty, burpsuite, penetration-testing, path-traversal | 04-Dec-2024 |
| Firebase URL Exploitation: Taking Over Android Databases Like a Pro! | https://infosecwriteups.com/firebase-url-exploitation-taking-over-android-databases-like-a-pro-79a00844496d?source=rss------bug_bounty-5 | JEETPAL | bug-bounty, android, cybersecurirty, bug-bounty-tips, bugbountywriteup | 04-Dec-2024 |
| How to Bypass Firewalls and IDS on Filtered Ports: The Ultimate Step-by-Step Guide to Advanced… | https://medium.com/@shaikhminhaz1975/how-to-bypass-firewalls-and-ids-on-filtered-ports-the-ultimate-step-by-step-guide-to-advanced-9cb238d66450?source=rss------bug_bounty-5 | Shaikh Minhaz | firewall, step-by-step-guide, cybersecurity, bug-bounty, penetration-testing | 04-Dec-2024 |
| Critical RCE Vulnerability in Veeam Service Provider Console — Update Now! ️ | https://medium.com/@wiretor/critical-rce-vulnerability-in-veeam-service-provider-console-update-now-%EF%B8%8F-1e147e98458b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, hacking, rce, business | 04-Dec-2024 |
| Critical RCE Flaw Discovered in WhatsUp Gold (CVE-2024–8785) — Update Immediately! ️ | https://medium.com/@wiretor/critical-rce-flaw-discovered-in-whatsup-gold-cve-2024-8785-update-immediately-%EF%B8%8F-8b6e69c183ab?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | business, bug-bounty, ransomware, malware, rce | 04-Dec-2024 |
| Backdoor Discovered in Solana’s Web3.js npm Library: Crypto Wallets at Risk | https://medium.com/@wiretor/backdoor-discovered-in-solanas-web3-js-npm-library-crypto-wallets-at-risk-605bcb02a292?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, solana-network, business, malware, bug-bounty | 04-Dec-2024 |
| CORS Implementation & Various Headers, CORS series (Part 2) | https://medium.com/@vipulparveenjain/cors-implementation-various-headers-cors-series-part-2-895a04ef481d?source=rss------bug_bounty-5 | Vipul Jain | bug-bounty, cors-vulnerability, cross-origin-resource, web-security, hacking | 04-Dec-2024 |
| Bug Bounty Methodology Checklist for Web Applications (B2B Apps) | https://thexssrat.medium.com/bug-bounty-methodology-checklist-for-web-applications-b2b-apps-b876a20236d0?source=rss------bug_bounty-5 | Thexssrat | bug-bounty-tips, hacker, bug-bounty, hacks, hacking | 04-Dec-2024 |
| My Experience at the 2024 FIRST & AfricaCERT Symposium: A CyberGirl’s Perspective- Part Final | https://medium.com/@.rai/my-experience-at-the-2024-first-africacert-symposium-a-cybergirls-perspective-part-final-b190349785b4?source=rss------bug_bounty-5 | Gamuchirai | forensics, osint, bug-bounty, open-source, digital-marketing | 04-Dec-2024 |
| SQL injection UNION attack, finding a column containing text | https://medium.com/@Laxious8848/sql-injection-union-attack-finding-a-column-containing-text-10a0e36cc062?source=rss------bug_bounty-5 | Laxious | sql-injection, web-penetration-testing, union-based-sql-injection, bug-bounty, web-pen-testing | 04-Dec-2024 |
| Why Penetration Testing as a Service (PTaaS) Outperforms Traditional Pentest Providers | https://medium.com/@hackrate/why-penetration-testing-as-a-service-ptaas-outperforms-traditional-pentest-providers-7b1e6b0a6d0a?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, ethical-hacking, bug-bounty, penetration-testing | 03-Dec-2024 |
| Bug Bounty Tips Series: 10 Ways To Find HTTP Host Header Injection Vulnerability | https://medium.com/@alishoaib5929/bug-bounty-tips-series-10-ways-to-find-http-host-header-injection-vulnerability-1ad56c9dddd2?source=rss------bug_bounty-5 | Shoaib Ali | web-hacking, bug-bounty, bug-bounty-writeup, bug-bounty-tips, web-security | 03-Dec-2024 |
| The Art of Blind Command Injection: Unlocking Internal Secrets | https://medium.com/@yogeshbhandage/the-art-of-blind-command-injection-unlocking-internal-secrets-917daa755463?source=rss------bug_bounty-5 | Yogesh Bhandage | bug-bounty, bug-bounty-tips, hacking, penetration-testing, command-injection | 03-Dec-2024 |
| 20 Bug Bounty CrowdSourced Platforms | https://systemweakness.com/20-bug-bounty-crowdsourced-platforms-a4c486c85671?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty-tips, pentesting, infosec, ethical-hacking, bug-bounty | 03-Dec-2024 |
| Practical Bug Bounty — TCM Academy | Other Common Vulnerabilities | https://medium.com/@awabhassan/practical-bug-bounty-tcm-academy-other-common-vulnerabilities-433dc6b1b3bc?source=rss------bug_bounty-5 | Mohammad Awab Hassan Nizami | penetration-testing, ethical-hacking, bug-bounty, cybersecurity, tcm-academy | 03-Dec-2024 |
| Story Of 15 Vulnerabilities in one public BBP ! | https://medium.com/@Ahmex000/story-of-15-vulnerabilities-in-one-buplic-bbp-561e68213991?source=rss------bug_bounty-5 | Ahmex000 | bug-bounty-hunter, bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips | 03-Dec-2024 |
| Critical Bug: Deny Sign-In & Steal Sensitive Info on Behalf of Victims | https://infosecwriteups.com/critical-bug-deny-sign-in-steal-sensitive-info-on-behalf-of-victims-cad4ced9227d?source=rss------bug_bounty-5 | JEETPAL | cybersecurity, bugbounty-tips, auth-bypass, bug-bounty, bug-bounty-writeup | 03-Dec-2024 |
| Ensuring Comprehensive Ethical Hacking with Penetration Testing as a Service | https://medium.com/@hackrate/ensuring-comprehensive-ethical-hacking-with-penetration-testing-as-a-service-9b67734f46cd?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, penetration-testing, bug-bounty, cybersecurity | 03-Dec-2024 |
| Tricky & Simple EXIF protection Bypass | https://saurabhsanmane.medium.com/tricky-simple-exif-protection-bypass-5d0babd908f3?source=rss------bug_bounty-5 | Saurabh sanmane | bug-bounty, information-disclosure, vulnerability, ethical-hacking, cybersecurity | 03-Dec-2024 |
| Exploring Lightning Bounties: The Intersection of Open-Source and Bitcoin | https://medium.com/@mabramo11/exploring-lightning-bounties-the-intersection-of-open-source-and-bitcoin-8555c6403310?source=rss------bug_bounty-5 | Mike Abramo | bug-bounty, lightning-bounties, open-source, bitcoin, lightning-network | 03-Dec-2024 |
| Cisco Warns of Attacks Exploiting Decade-Old ASA Vulnerability | https://medium.com/@wiretor/cisco-warns-of-attacks-exploiting-decade-old-asa-vulnerability-11462bd60f7b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | programming, business, hacking, bug-bounty, cisco | 03-Dec-2024 |
| Energy Sector Contractor ENGlobal Targeted in Ransomware Attack | https://medium.com/@wiretor/energy-sector-contractor-englobal-targeted-in-ransomware-attack-a56112b119d3?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, energy, business, bug-bounty, malware | 03-Dec-2024 |
| Docker/Kubernetes (K8s)Penetration Testing Checklist | https://infosecwriteups.com/docker-kubernetes-k8s-penetration-testing-checklist-4d0a13c38495?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, bug-bounty, docker, kubernetes, cybersecurity | 03-Dec-2024 |
| How to Create an Android Payload in Just 1 Minute | Ethical Hacking | https://bjamali.medium.com/how-to-create-an-android-payload-in-just-1-minute-ethical-hacking-bc109b368909?source=rss------bug_bounty-5 | Babar Ali Jamali | penetration-testing, ethical-hacking, android, bug-bounty, cybersecurity | 03-Dec-2024 |
| Crack the Code: Earn Up to $500K in InceptionLRT’s Bug Bounty Program | https://medium.com/@InceptionLRT/crack-the-code-earn-up-to-500k-in-inceptionlrts-bug-bounty-program-3b5d2feb6ed6?source=rss------bug_bounty-5 | InceptionLRT | crypto, restaking, bug-bounty, defi, ethereum | 03-Dec-2024 |
| What is Cybersecurity | https://twanstcodes.medium.com/what-is-cybersecurity-52e71fe7dfa2?source=rss------bug_bounty-5 | Twana Muhammed | it, programming, cybersecurity, bug-bounty | 03-Dec-2024 |
| Mastering Bug Bounty Hunting with White Rabbit Neo AI | https://medium.com/@curiouskhanna/mastering-bug-bounty-hunting-with-white-rabbit-neo-ai-452a3bc3adce?source=rss------bug_bounty-5 | Shubham Khanna | hackerone, bug-bounty, ai, security-researchers | 03-Dec-2024 |
| Python — Program Security Headers | https://medium.com/@ibnu.rusdianto55/python-program-security-headers-966786261d5f?source=rss------bug_bounty-5 | Ibnu Rusdianto | python, bug-bounty, security-header, indonesia, keamanan-siber | 03-Dec-2024 |
| How I got access to Credentials easily | https://medium.com/infosecmatrix/how-i-got-access-to-credentials-easily-00ced4ba15bd?source=rss------bug_bounty-5 | AbhirupKonwar | bug-bounty, cybersecurity, ethical-hacking, google-dork, pentest | 02-Dec-2024 |
| How to Master Advanced Threat Hunting | https://medium.com/@paritoshblogs/how-to-master-advanced-threat-hunting-bcfb9d1e159c?source=rss------bug_bounty-5 | Paritosh | cybersecurity, threat-hunting, hacking, ai, bug-bounty | 02-Dec-2024 |
| CTFLearn Series| Challenge 96 : Forensics 101 — Walkthrough | https://medium.com/@rishikeshkhot26/ctflearn-series-challenge-96-forensics-101-walkthrough-13100d9f45fb?source=rss------bug_bounty-5 | Rishikesh_Khot | hacking, forensics, bug-bounty, capture-the-flag, cybersecurity | 02-Dec-2024 |
| Some Easiest P4 Bugs | https://icecream23.medium.com/some-easiest-p4-bugs-561cd710a7e1?source=rss------bug_bounty-5 | Aman Bhuiyan | ethical-hacking, bugbounty-tips, bug-bounty, p4-bugs, bug-hunter | 02-Dec-2024 |
| All UPI IDs in India have Predictable Patterns that allow the disclosure of mail IDs! | https://infosecwriteups.com/all-upi-ids-in-india-have-predictable-patterns-that-allow-the-disclosure-of-mail-ids-eede37a35758?source=rss------bug_bounty-5 | JEETPAL | upi, cybersecurity, bugbounty-tips, bug-bounty, bug-bounty-writeup | 02-Dec-2024 |
| Command Injection: Mastering Exploitation Techniques with a Comprehensive Cheatsheet | https://medium.com/@verylazytech/command-injection-mastering-exploitation-techniques-with-a-comprehensive-cheatsheet-6f549fee46b8?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, command-injection, cybersecurity, bug-bounty, oscp | 02-Dec-2024 |
| $3 Billion Crypto Exchange XT Allegedly Hacked | https://medium.com/@wiretor/3-billion-crypto-exchange-xt-allegedly-hacked-c560c9572168?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | crypto, xt, malware, bug-bounty, ransomeware | 02-Dec-2024 |
| Hackers Steal $17 Million from Uganda’s Central Bank | https://medium.com/@wiretor/hackers-steal-17-million-from-ugandas-central-bank-533dcbabbeff?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacked, ransomeware, bug-bounty, bank-hacked, malware | 02-Dec-2024 |
| Small Bugs, Big Bounties: A Hacker’s Guide to Quick Wins | https://myselfakash20.medium.com/small-bugs-big-bounties-a-hackers-guide-to-quick-wins-46a75dbc3573?source=rss------bug_bounty-5 | Akash Ghosh | programming, technology, bug-bounty, bug-bounty-tips, cybersecurity | 02-Dec-2024 |
| Critical Vulnerability Discovered in Zabbix Network Monitoring Tool | https://medium.com/@wiretor/critical-vulnerability-discovered-in-zabbix-network-monitoring-tool-df358293a1a9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomeware, malware, bug-bounty, zabbix, hacking | 02-Dec-2024 |
| From File Upload To LFI: A Journey To Exploitation | https://medium.com/@red.whisperer/from-file-upload-to-lfi-a-journey-to-exploitation-02ab5e1a7d0a?source=rss------bug_bounty-5 | Chux | bug-bounty, cybersecurity, hacking, ethical-hacking, infosec | 02-Dec-2024 |
| Small Bugs, Big Bounties: A Hacker’s Guide to Quick Wins | https://infosecwriteups.com/small-bugs-big-bounties-a-hackers-guide-to-quick-wins-46a75dbc3573?source=rss------bug_bounty-5 | Akash Ghosh | programming, hacking, technology, bug-bounty, cybersecurity | 02-Dec-2024 |
| Unpacking an IDOR-Based Exploit in International Shipping (70 Million+ PII Data Breach) | https://medium.com/@susapr/unpacking-an-idor-based-exploit-in-international-shipping-70-million-pii-data-breach-8c29cf33347d?source=rss------bug_bounty-5 | susapr | bug-bounty-writeup, cybersecurity, data-breach, information-technology, bug-bounty | 02-Dec-2024 |
| How I got my first Hall of Fame - Bug Bounty | https://medium.com/@pranavrp77/how-i-got-my-first-hall-of-fame-bug-bounty-d296637e37dd?source=rss------bug_bounty-5 | Pranav Patil | bug-bounty, hacking, bug-bounty-writeup, bug-bounty-tips, cybersecurity | 02-Dec-2024 |
| Command Injection: Mastering Exploitation Techniques with a Comprehensive Cheatsheet | https://systemweakness.com/command-injection-mastering-exploitation-techniques-with-a-comprehensive-cheatsheet-6f549fee46b8?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, command-injection, cybersecurity, bug-bounty, oscp | 02-Dec-2024 |
| Understanding the Scope: Navigating Website Pentesting and Bug Bounty Targets | https://medium.com/@zero_4583/understanding-the-scope-navigating-website-pentesting-and-bug-bounty-targets-a6ab701df932?source=rss------bug_bounty-5 | Nathan Vincent | appsec, bug-bounty, pentesting, scopes | 01-Dec-2024 |
| Critical Account Takeover (MFA + Auth Bypass) due to Cookie Misconfiguration | https://medium.com/@sharp488/critical-account-takeover-mfa-auth-bypass-due-to-cookie-misconfiguration-3ca7d1672f9d?source=rss------bug_bounty-5 | Sharat Kaikolamthuruthil | bug-bounty, hackerone, information-security, bug-bounty-writeup, bug-bounty-tips | 01-Dec-2024 |
| Week 4: A Drive to Recharge and Reconnect | https://mokhansec.medium.com/week-4-a-drive-to-recharge-and-reconnect-4d0f8b7258d0?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-writeup, bug-bounty-tips, bugs, cybersecurity, bug-bounty | 01-Dec-2024 |
| From Minor Bug to Major DoS: My Journey with Web Cache Poisoning | https://crunkcode.medium.com/from-minor-bug-to-major-dos-my-journey-with-web-cache-poisoning-4b721e5358f4?source=rss------bug_bounty-5 | Ayushkr | web-exploitation, web-cache-poisoning, bug-bounty, pentesting | 01-Dec-2024 |
| Exploiting Facebook Ads: $2100 Bug Bounty for Role Management DoS | https://infosecwriteups.com/exploiting-facebook-ads-2100-bug-bounty-for-role-management-dos-afe09c1ecbb0?source=rss------bug_bounty-5 | Kiril Krivoguz | facebook, cybersecurity, hacking, information-security, bug-bounty | 01-Dec-2024 |
| Smart Contract Funds Lost Due to Missing Address Validation: $80M in Danger! | https://medium.com/@jeetpal2007/smart-contract-funds-lost-due-to-missing-address-validation-80m-in-danger-a4ec7d823a3f?source=rss------bug_bounty-5 | JEETPAL | smartcontract-audit, cybsersecurity, zeroaddress, web3, bug-bounty | 01-Dec-2024 |
| How I Discovered an API Security Issue: My First Bug Bounty Blog | https://hackersatty.medium.com/how-i-discovered-an-api-security-issue-my-first-bug-bounty-blog-7deec48453ff?source=rss------bug_bounty-5 | hackersatty | bug-bounty, hackersatty, bug-bounty-writeup, swagger-ui, api-security | 01-Dec-2024 |
| Hack IOT devices to earn $100–$200 in an hour. | https://medium.com/@anandrishav2228/hack-iot-devices-to-earn-100-200-in-an-hour-f211a54e87f3?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, penetration-testing, money, bug-bounty, iot | 01-Dec-2024 |
| Ketika Validasi MIME Type Tak Cukup: Perbaikan Aman untuk Upload File | https://medium.com/@ferizco/ketika-validasi-mime-type-tak-cukup-perbaikan-aman-untuk-upload-file-4df4ac6ec0ff?source=rss------bug_bounty-5 | Ferizco | bug-bounty, security, cybersecurity, web-development, php | 01-Dec-2024 |
| Firmware Penetration Testing Checklist | https://infosecwriteups.com/firmware-penetration-testing-checklist-9d5e70388371?source=rss------bug_bounty-5 | Ajay Naik | penetration-testing, security, information-technology, bug-bounty, cybersecurity | 01-Dec-2024 |
| Basics of SQL Injection | https://medium.com/@mayank_prajapati/basics-of-sql-injection-88ab0e57588b?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | penetration-testing, vulnerability, hacking, bug-bounty-tips, bug-bounty | 01-Dec-2024 |
| Why I Failed This November: A Clown’s Reflection on Failure | https://jackhavoltrey.medium.com/why-i-failed-this-november-a-clowns-reflection-on-failure-3223fec4451e?source=rss------bug_bounty-5 | Jack Havoltrey | bug-bounty-tips, bug-bounty | 01-Dec-2024 |
| Execution of a clickjacking attack on Gemini (Google’s AI-powered assistant) - which I recently… | https://systemweakness.com/execution-of-a-clickjacking-attack-on-gemini-googles-ai-powered-assistant-which-i-recently-45e60a98316a?source=rss------bug_bounty-5 | NIKHIL KUMAR GANDLA | penetration-testing, cybersecurity, bug-bounty, application-security, information-security | 01-Dec-2024 |
| From Minor Bug to Major DoS: My Journey with Web Cache Poisoning | https://ayushkr12.medium.com/from-minor-bug-to-major-dos-my-journey-with-web-cache-poisoning-4b721e5358f4?source=rss------bug_bounty-5 | Ayushkr | web-exploitation, web-cache-poisoning, bug-bounty, pentesting | 01-Dec-2024 |
| Russia Arrests Cybercriminal Wazawaka Tied to Ransomware Gangs | https://medium.com/@wiretor/russia-arrests-cybercriminal-wazawaka-tied-to-ransomware-gangs-9354c557f1d5?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, hacking, wazawaka, malware, bug-bounty | 01-Dec-2024 |
| SpyLoan Android Malware Installed Over 8 Million Times on Google Play! | https://medium.com/@wiretor/spyloan-android-malware-installed-over-8-million-times-on-google-play-d0331b3c762e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, hacking, ransomeware, bug-bounty, spyloan | 01-Dec-2024 |
| picoCTF Web Exploitation: Unminify | https://medium.com/@Kamal_S/picoctf-web-exploitation-unminify-6dd45341b7f5?source=rss------bug_bounty-5 | Kamal S | owasp, unminify, ctf, bug-bounty, picoctf | 01-Dec-2024 |
| Exploring Alternatives to Cobalt: Why Hackrate Stands Out | https://medium.com/@hackrate/exploring-alternatives-to-cobalt-why-hackrate-stands-out-67473c1e74e6?source=rss------bug_bounty-5 | Levente Molnar | cybersecurity, bug-bounty, ethical-hacking, penetration-testing | 01-Dec-2024 |
| Web Shell Upload via Extension Blacklist Bypass — File Upload Vulnerability | https://medium.com/@rcxsecurity/web-shell-upload-via-extension-blacklist-bypass-file-upload-vulnerability-f98ee877aff1?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Café | cybersecurity, hacking, information-security, bug-bounty, pentesting | 01-Dec-2024 |
| The Ultimate Guide to Top Pentest-as-a-Service Providers in 2024 | https://medium.com/@hackrate/the-ultimate-guide-to-top-pentest-as-a-service-providers-in-2024-f03b0408b0a5?source=rss------bug_bounty-5 | Levente Molnar | ethical-hacking, cybersecurity, penetration-testing, bug-bounty, hacking | 01-Dec-2024 |
| SQL injection UNION attack, determining the number of columns returned by the query | https://medium.com/@Laxious8848/sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query-4792d89ad93f?source=rss------bug_bounty-5 | Laxious | sql-injection, web-pen-testing, web-penetration-testing, bug-bounty, union-based-sql-injection | 01-Dec-2024 |
| Out of Scope, Out of Mind? The | https://medium.com/@talatumsolutions/out-of-scope-out-of-mind-the-0e5f558c43ba?source=rss------bug_bounty-5 | Talatum-solutions | talatum, hacking, cyber-security-solutions, pentesting, bug-bounty | 30-Nov-2024 |
| Turn Cybersecurity Tricks Into Cash: Here’s How You Can Start Today | https://medium.com/@divyesh.jagad/turn-cybersecurity-tricks-into-cash-heres-how-you-can-start-today-9ccfff1ee0f4?source=rss------bug_bounty-5 | Divyesh Jagad | trending, bug-bounty, freelancing, infosec, remote-working | 30-Nov-2024 |
| Privilege Escalation via Role Persistence Vulnerability | https://medium.com/@aalgohary950/privilege-escalation-via-role-persistence-vulnerability-0c22a002d6ff?source=rss------bug_bounty-5 | C1pher_1 | hacking, penetration-testing, bug-bounty, access-control, privilege-escalation | 30-Nov-2024 |
| Discovery of Xss / Html Injection by analyzing target source code | https://medium.com/@gheeX/discovery-of-xss-html-injection-by-analyzing-target-source-code-0bc7a96c3ca4?source=rss------bug_bounty-5 | Ghee1337 | vulnerability, bug-bounty-writeup, bug-bounty-tips, xss-attack, bug-bounty | 30-Nov-2024 |
| Delete Account Functionality Helped Me Earn $250 | https://vijetareigns.medium.com/delete-account-functionality-helped-me-earn-250-21baa23c4034?source=rss------bug_bounty-5 | the_unlucky_guy | bug-bounty-tips, bug-bounty, bug-bounty-writeup, application-security, cybersecurity | 30-Nov-2024 |
| Marianas Web — The Danger Part of the Internet! | https://medium.com/@TahirAyoub/marianas-web-the-danger-part-of-the-internet-be69e3118e3d?source=rss------bug_bounty-5 | Tahir Ayoub | cybersecurity, darkweb, bug-bounty, deep-web, hacking | 30-Nov-2024 |
| A massive security breach at Andrew Tate’s platform The Real World has exposed the personal… | https://medium.com/@wiretor/a-massive-security-breach-at-andrew-tates-platform-the-real-world-has-exposed-the-personal-576892ffca1c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware, expose, andrew-tate | 30-Nov-2024 |
| 5 Side Hustles For Ethical Hackers | https://medium.com/@red.whisperer/5-side-hustles-for-ethical-hackers-8f3e0ca983ed?source=rss------bug_bounty-5 | Chux | ethical-hacking, cybersecurity, hacking, bug-bounty, side-hustle | 30-Nov-2024 |
| The Ultimate Guide to Top Ethical Hacking Platforms in 2024 | https://medium.com/@hackrate/the-ultimate-guide-to-top-ethical-hacking-platforms-in-2024-adcfc808caea?source=rss------bug_bounty-5 | Hackrate | bug-bounty, cybersecurity, ethical-hacking, penetration-testing | 30-Nov-2024 |
| ⚠️ Microsoft Hacking Warning 450 Million Windows Users Must Now Act! ️ | https://medium.com/@wiretor/%EF%B8%8F-microsoft-hacking-warning-450-million-windows-users-must-now-act-%EF%B8%8F-a7be6255a338?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, windows, ransomeware, breached, bug-bounty | 30-Nov-2024 |
| Russian Script Kiddie Builds Massive DDoS Botnet | https://medium.com/@wiretor/russian-script-kiddie-builds-massive-ddos-botnet-bac1b6c57e9f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, programming, hacking, russian | 30-Nov-2024 |
| P4 bug’s and their POC steps | Part 8 | https://osintteam.blog/p4-bugs-and-their-poc-steps-part-8-910ee6ba5710?source=rss------bug_bounty-5 | socalledhacker | cybersecurity, infosec, bug-bounty, hacking, bug-bounty-tips | 30-Nov-2024 |
| X(twitter) & my first real bug | https://medium.com/@elkhawaga1900/x-twitter-my-first-real-bug-7c7d26bef48f?source=rss------bug_bounty-5 | sponge2003 | bug-bounty, duplicate | 30-Nov-2024 |
| The Ultimate Guide to Top Ethical Hacking Platforms in 2024 | https://medium.com/@hackrate/the-ultimate-guide-to-top-ethical-hacking-platforms-in-2024-adcfc808caea?source=rss------bug_bounty-5 | Levente Molnar | bug-bounty, cybersecurity, ethical-hacking, penetration-testing | 30-Nov-2024 |
| The Ultimate Guide to Top Bug Bounty Platforms in 2024 | https://medium.com/@hackrate/the-ultimate-guide-to-top-bug-bounty-platforms-in-2024-08f53b117063?source=rss------bug_bounty-5 | Hackrate | ethical-hacking, cybersecurity, penetration-testing, bug-bounty | 29-Nov-2024 |
| The Ultimate Guide to Top Bug Bounty Platforms in 2024: Why Hackrate Stands Out | https://medium.com/@hackrate/the-ultimate-guide-to-top-bug-bounty-platforms-in-2024-why-hackrate-stands-out-d402c86c407b?source=rss------bug_bounty-5 | Hackrate | penetration-testing, bug-bounty, ethical-hacking, cybersecurity | 29-Nov-2024 |
| Exploring Alternatives to HackerOne: Why Hackrate Stands Out | https://medium.com/@hackrate/exploring-alternatives-to-hackerone-why-hackrate-stands-out-894092aec0aa?source=rss------bug_bounty-5 | Hackrate | ethical-hacking, penetration-testing, cybersecurity, bug-bounty, hacking | 29-Nov-2024 |
| How To Become Up-To-Date Hacker? 8 Gold Points To Stay Informed During Lifetime-Hacking Story | https://osintteam.blog/how-to-become-up-to-date-hacker-8-gold-points-to-stay-informed-during-lifetime-hacking-story-2e95f33c5d6f?source=rss------bug_bounty-5 | NnFace | bug-bounty, cybersecurity, kali-linux, hacking, technology | 29-Nov-2024 |
| Advanced Google Dorking | Part7 | https://systemweakness.com/advanced-google-dorking-part7-a8df43d00743?source=rss------bug_bounty-5 | AbhirupKonwar | infosec, pentesting, ethical-hacking, cybersecurity, bug-bounty | 29-Nov-2024 |
| Email Verification Bypass Vulnerability: A Critical Flaw Exploited | https://medium.com/@muralidharan1530/email-verification-bypass-vulnerability-a-critical-flaw-exploited-1d7a316b2514?source=rss------bug_bounty-5 | Murali Dharan | bounties, bug-bounty-writeup, bug-bounty, bugs, bug-bounty-tips | 29-Nov-2024 |
| POC — CVE-2024–21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE) due to improper input… | https://medium.com/@verylazytech/poc-cve-2024-21534-jsonpath-plus-vulnerable-to-remote-code-execution-rce-due-to-improper-input-a466ae69aa92?source=rss------bug_bounty-5 | Very Lazy Tech | cybersecurity, cve, exploit, cve-2024-21534, bug-bounty | 29-Nov-2024 |
| hackthebox-Administrator-walkthrough | https://medium.com/@ryuzakiryuga31/hackthebox-administrator-walkthrough-217d01374d00?source=rss------bug_bounty-5 | R09sh | bug-bounty, hackthebox, network-security, network-penetration-test, system-administration | 29-Nov-2024 |
| Google Dorking Made Simpler with GFU | https://medium.com/@sheryx00/google-dorking-made-simpler-with-gfu-20c67c5c8fc4?source=rss------bug_bounty-5 | Sheryx00 | google-dork, open-source, bug-bounty, pentesting, bug-bounty-tips | 29-Nov-2024 |
| Authentication Bypass Vulnerability 🙂 | https://aman0.medium.com/authentication-bypass-vulnerability-a7b8fff3361f?source=rss------bug_bounty-5 | Aman H | authentication-bypass, vulnerability, penetration-testing, bug-bounty-tips, bug-bounty | 29-Nov-2024 |
| Exploring Alternatives to Bugcrowd: Why Hackrate Stands Out | https://medium.com/@hackrate/exploring-alternatives-to-bugcrowd-why-hackrate-stands-out-8d54235f62d1?source=rss------bug_bounty-5 | Hackrate | bug-bounty, cybersecurity, penetration-testing, ethical-hacking | 29-Nov-2024 |
| The Ultimate Bug Bounty Roadmap Zero to Pro | https://medium.com/@adinesh02/the-ultimate-bug-bounty-roadmap-zero-to-pro-56440ac4cef2?source=rss------bug_bounty-5 | DINESH A | technology, tech, bug-bounty, hacking, cybersecurity | 29-Nov-2024 |
| Phishing-as-a-Service (PhaaS): “Rockstar 2FA” Targets Microsoft 365 with AiTM Attacks | https://medium.com/@wiretor/phishing-as-a-service-phaas-rockstar-2fa-targets-microsoft-365-with-aitm-attacks-572617422ea5?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, xs, phaa, american-dream, hacking | 29-Nov-2024 |
| Critical Flaw in ProjectSend Under Active Exploitation — Protect Your Servers! | https://medium.com/@wiretor/critical-flaw-in-projectsend-under-active-exploitation-protect-your-servers-c0903ab96a68?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | xs, malware, bug-bounty, hacking, pentest | 29-Nov-2024 |
| Unmasking Open Redirect Vulnerabilities: A Real-World Discovery | https://medium.com/@360Security/unmasking-open-redirect-vulnerabilities-a-real-world-discovery-348081e5d03e?source=rss------bug_bounty-5 | Anand Patel | penetration-testing, vapt, bug-bounty, web-security, cybersecurity | 29-Nov-2024 |
| Hacking AI — Understanding LLM Attacks and Prompt Injections | https://medium.com/@anmol.sh/hacking-ai-understanding-llm-attacks-and-prompt-injections-9354f26a8353?source=rss------bug_bounty-5 | Anmol Shah | ai, hacking, penetration-testing, artificial-intelligence, bug-bounty | 29-Nov-2024 |
| Website’s for fake mobile numbers and sms services. | https://osintteam.blog/websites-for-fake-mobile-numbers-and-sms-services-9057442ef82b?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, cybersecurity, bug-bounty-tips, tips, hacking | 28-Nov-2024 |
| 30 Best Hacking Prompts | https://medium.com/@TahirAyoub/30-best-hacking-prompts-0c10ee61edf4?source=rss------bug_bounty-5 | Tahir Ayoub | bug-bounty, hacking, chatgpt, cybersecurity, ai | 28-Nov-2024 |
| The More Confident You Are About Your Testing, The Bigger the Bug You Missed | https://manishsaini74.medium.com/the-more-confident-you-are-about-your-testing-the-bigger-the-bug-you-missed-189fe169c005?source=rss------bug_bounty-5 | Manish Saini | bug-bounty, test-automation, software-engineering, software-testing, quality-assurance | 28-Nov-2024 |
| 8 Shocking Ways to Protect Your Identity Online | https://medium.com/@paritoshblogs/8-shocking-ways-to-protect-your-identity-online-fe13ad3b92e1?source=rss------bug_bounty-5 | Paritosh | ai, identity, hacking, cybersecurity, bug-bounty | 28-Nov-2024 |
| Finding Low-Hanging Bugs: A Practical Guide with Commands | https://medium.com/@ayansheikh45689/finding-low-hanging-bugs-a-practical-guide-with-commands-d6fb9159857d?source=rss------bug_bounty-5 | Ayan | penetration-testing, bug-finding, bug-bounty, ethical-hacking, cybersecurity | 28-Nov-2024 |
| Finding more subdomains.(part 2) | https://infosecwriteups.com/finding-more-subdomains-part-2-1850ead4dd92?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, penetration-testing, reconnaissance, cybersecurity, hacking | 28-Nov-2024 |
| JWTs: A Comedy of Errors and Exploits | https://jackhavoltrey.medium.com/jwts-a-comedy-of-errors-and-exploits-81d1fb25d24d?source=rss------bug_bounty-5 | Jack Havoltrey | bug-bounty, authentication, bug-bounty-tips, jwt, web-development | 28-Nov-2024 |
| Bug Bounty Chronicles: Exploiting the PUT Method for Remote Code Execution (RCE) | https://medium.com/@pawarpushpak36/bug-bounty-chronicles-exploiting-the-put-method-for-remote-code-execution-rce-c2782bea61da?source=rss------bug_bounty-5 | Pawarpushpak | bug-zero, remote-code-execution, bug-bounty-tips, bug-bounty, infosec | 28-Nov-2024 |
| The Art of Account Take Over #1: Chaining XSS and non-HttpOnly Session Cookie | https://xdead4f.medium.com/the-art-of-account-take-over-1-chaining-xss-and-non-httponly-session-cookie-8e474bc83e5c?source=rss------bug_bounty-5 | 0xdead4f | xs, penetration-testing, bug-bounty, cybersecurity | 28-Nov-2024 |
| How to find Access control vulnerabilities useful Tips PART (1)☢ | https://medium.com/@mahmodziad40/how-to-find-access-control-vulnerabilities-useful-tips-part-1-56ca1a9c60ce?source=rss------bug_bounty-5 | httpzuz | portswigger, penetration-testing, access-control, bug-bounty-tips, bug-bounty | 28-Nov-2024 |
| UK Hospital Network Hit by Cyberattack, Procedures Postponed | https://medium.com/@wiretor/uk-hospital-network-hit-by-cyberattack-procedures-postponed-3b9622eec715?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, malware, cyberattack, uk-hospital-attack, bug-bounty | 28-Nov-2024 |
| T-Mobile Detects Network Intrusion Attempts from Wireline Provider | https://medium.com/@wiretor/t-mobile-detects-network-intrusion-attempts-from-wireline-provider-ee7fab1a7eac?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, xs, t-mobile, hacking | 28-Nov-2024 |
| Malicious npm Library @0xengine/xmlrpc Steals Data and Mines Cryptocurrency | https://medium.com/@wiretor/malicious-npm-library-0xengine-xmlrpc-steals-data-and-mines-cryptocurrency-50171f172ef7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, xs, bug-bounty, malware, ransomeware | 28-Nov-2024 |
| Exploiting CSRF and OTP Reuse: How Weak Token Management Enables Password Reset Attacks, Leading… | https://medium.com/@iPsalmy/exploiting-csrf-and-otp-reuse-how-weak-token-management-enables-password-reset-attacks-leading-to-c2f6b914f398?source=rss------bug_bounty-5 | iPsalmy | bug-bounty, infosec, web-application-security, api-security, cybersecurity | 28-Nov-2024 |
| #HappyThanksgiving from Wire Tor! | https://medium.com/@wiretor/happythanksgiving-from-wire-tor-5a655498f35f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, happy-thanksgiving, happy-thanksgiving-day, malware | 28-Nov-2024 |
| Private IP Disclosure in Bug Bounty Programs: Understanding the Risk and Reward | https://medium.com/@shamzen96/private-ip-disclosure-in-bug-bounty-programs-understanding-the-risk-and-reward-6441aa866db0?source=rss------bug_bounty-5 | Shivam Raj | bug-bounty, bug-bounty-tips | 27-Nov-2024 |
| The P2 Bug You Could Miss Without Reading the Documentation | https://mokhansec.medium.com/the-p2-bug-you-could-miss-without-reading-the-documentation-b0eacc3b7587?source=rss------bug_bounty-5 | Mohsin khan | cybersecurity, bugs, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 27-Nov-2024 |
| Easy Way To Root Your Virtual Device 🙂 | https://aman0.medium.com/easy-way-to-root-your-virtual-device-9d1a2aa99ea1?source=rss------bug_bounty-5 | Aman H | penetration-testing, mobile-app-development, root-android-phone, bug-bounty, app-security-testing | 27-Nov-2024 |
| Install MassDNS in Linux | https://medium.com/@mohamdaminporsalari/install-massdns-in-linux-4a5937829972?source=rss------bug_bounty-5 | MaMad | bug-bounty, dns, massdns, pentesting, bug-bounty-tool | 27-Nov-2024 |
| How I Turned NASA’s Search Bar into a Phishing Gateway | https://systemweakness.com/how-i-turned-nasas-search-bar-into-a-phishing-gateway-697de30859b0?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, cybersecurity, technology, bug-bounty, programming | 27-Nov-2024 |
| 0-Click ATO: How I Can Take Over Every Account on the Website | https://medium.com/@aesmail034/0-click-ato-how-i-can-take-over-every-account-on-the-website-9a69c9afb57c?source=rss------bug_bounty-5 | Ahmed Esmail | hackerone, bug-bounty, cybersecurity, account-takeover | 27-Nov-2024 |
| Race Condition Exploit Enables Free Plan Users to Access Premium Features | https://medium.com/@rawansa3ed2002/race-condition-exploit-enables-free-plan-users-to-access-premium-features-9619d0fa0a53?source=rss------bug_bounty-5 | Rawansaed | bug-bounty, race-condition, hackerone, penetration-testing, cybersecurity | 27-Nov-2024 |
| System Hacking Technique | https://medium.com/@TahirAyoub/system-hacking-technique-ac376bd3f0ef?source=rss------bug_bounty-5 | Tahir Ayoub | bug-bounty, hacking-tools, cybersecurity, hacking, computer-security | 27-Nov-2024 |
| Install MassDNS in Linux | https://medium.com/@MaMad4Ever/install-massdns-in-linux-4a5937829972?source=rss------bug_bounty-5 | MaMad | bug-bounty, dns, massdns, pentesting, bug-bounty-tool | 27-Nov-2024 |
| Introducing JSNinja: Your Ultimate JavaScript Bug Hunting Companion ️♂️ | https://medium.com/@vikas0vks/introducing-jsninja-your-ultimate-javascript-bug-hunting-companion-%EF%B8%8F-%EF%B8%8F-bee1fcc4bd75?source=rss------bug_bounty-5 | Vikas | information-security, bug-bounty-tips, bug-bounty | 27-Nov-2024 |
| SMB Enumeration and Exploitation: Master Ports 139 and 445 for Penetration Testing | https://medium.com/@verylazytech/smb-enumeration-and-exploitation-master-ports-139-and-445-for-penetration-testing-ddca90a384c5?source=rss------bug_bounty-5 | Very Lazy Tech | bug-bounty, oscp, smb, hacking, cybersecurity | 27-Nov-2024 |
| Understanding Ethical Hacking: The Key to Cybersecurity | https://medium.com/@harshkatiyar5556/understanding-ethical-hacking-the-key-to-cybersecurity-454c6671c5f9?source=rss------bug_bounty-5 | Harsh Katiyar | web3, mind-hacking-techniques, ethical-hacking, cybersecurity, bug-bounty | 27-Nov-2024 |
| How to Find DNS Rebinding Vulnerabilities in Bug Bounty Hunting | https://dineshpathro9.medium.com/how-to-find-dns-rebinding-vulnerabilities-in-bug-bounty-hunting-3323da71f5ee?source=rss------bug_bounty-5 | Hunter | bugs, bug-bounty-tips, bug-bounty, bug-zero | 27-Nov-2024 |
| 0-Click ATO: How I Can Take Over Every Account on the Website | https://som3a.medium.com/0-click-ato-how-i-can-take-over-every-account-on-the-website-9a69c9afb57c?source=rss------bug_bounty-5 | Ahmed Esmail | hackerone, bug-bounty, cybersecurity, account-takeover | 27-Nov-2024 |
| IDOR Allows an Admin to Add SuperAdmin (Which is not allowed) | https://medium.com/@mrro0o0tt/idor-allows-an-admin-to-add-superadmin-which-is-not-allowed-239fcc82ff69?source=rss------bug_bounty-5 | Whoami | idor-vulnerability, bug-bounty, broken-access-control, business-logic-bug, bug-bounty-tips | 27-Nov-2024 |
| Researchers Unveil “Bootkitty” — The First UEFI Bootkit Targeting Linux Kernels! | https://medium.com/@wiretor/researchers-unveil-bootkitty-the-first-uefi-bootkit-targeting-linux-kernels-30ff7b7c6819?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | zero-day, cve, bug-bounty, malware, bootkitty | 27-Nov-2024 |
| Interpol Arrests 1,000+ in Massive ‘Operation Serengeti’ Anti-Cybercrime Crackdown | https://medium.com/@wiretor/interpol-arrests-1-000-in-massive-operation-serengeti-anti-cybercrime-crackdown-45ffa24e6f4a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, xss-attack, interpol, hacking, bug-bounty | 27-Nov-2024 |
| New NachoVPN Attack: Rogue VPN Servers Installing Malicious Updates ️ | https://medium.com/@wiretor/new-nachovpn-attack-rogue-vpn-servers-installing-malicious-updates-%EF%B8%8F-262c85645850?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, vpn, malware, bug-bounty, programming | 27-Nov-2024 |
| JS Review and Abuse GraphQL Result 10xBAC + Admin Panel ATO | https://medium.com/@0xbugatti/js-review-and-abuse-graphql-result-10xbac-admin-panel-ato-0f013fe471ea?source=rss------bug_bounty-5 | 0xbugatti | owasp-top-10, bug-bounty, bugbounty-writeup, web-app-security, bugbounty-tips | 27-Nov-2024 |
| How I abled to get users/admins PII Disclosure | https://medium.com/@a7madhacck/how-i-abled-to-get-users-admins-pii-disclosure-6c02fef82c11?source=rss------bug_bounty-5 | Ahmad Yussef | technology, hackerone, bug-bounty-writeup, cybersecurity, bug-bounty | 27-Nov-2024 |
| Automating the Setup of a Bug Bounty Toolkit | https://dineshpathro9.medium.com/automating-the-setup-of-a-bug-bounty-toolkit-05b3e589eb84?source=rss------bug_bounty-5 | hunter | bug-bounty, bug-bounty-tips, bugs, hacking | 26-Nov-2024 |
| VOIP Penetration Testing Checklist | https://infosecwriteups.com/voip-penetration-testing-checklist-890bb4e09bac?source=rss------bug_bounty-5 | Ajay Naik | security, information-technology, penetration-testing, cybersecurity, bug-bounty | 26-Nov-2024 |
| Find Website Vulnerabilities with One Hacking Tool | https://medium.com/@TahirAyoub/find-website-vulnerabilities-with-one-hacking-tool-0008a908c6fd?source=rss------bug_bounty-5 | Tahir Ayoub | cybersecurity, bug-bounty-tips, bug-bounty, hacking, tools | 26-Nov-2024 |
| Bugbounty Hunting: The First Step After Finding Your Target | https://dineshpathro9.medium.com/bugbounty-hunting-the-first-step-after-finding-your-target-998267eeeb28?source=rss------bug_bounty-5 | Hunter | bug-bounty-tips, bug-bounty, bug-zero, bugs | 26-Nov-2024 |
| Challenges and Pitfalls of Automating Bug Bounty Submissions with AI | https://pointlessai.medium.com/challenges-and-pitfalls-of-automating-bug-bounty-submissions-with-ai-adb06ab0d2c6?source=rss------bug_bounty-5 | PointlessAI Medium | ai, bug-bounty, cybersecurity, chatgpt, vulnerability-management | 26-Nov-2024 |
| IBM Fixes RCE Vulnerabilities in Data Virtualization Manager and Security SOAR | https://medium.com/@wiretor/ibm-fixes-rce-vulnerabilities-in-data-virtualization-manager-and-security-soar-dfbc178710f5?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, rce, bug-bounty, malware, ibm | 26-Nov-2024 |
| Firefox and Windows Zero-Days Exploited by Russian RomCom Hackers: A Cybersecurity Wake-Up Call! | https://medium.com/@wiretor/firefox-and-windows-zero-days-exploited-by-russian-romcom-hackers-a-cybersecurity-wake-up-call-a8029dacd27b?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, malware, windows-hacking, bug-bounty, firefox-hacked | 26-Nov-2024 |
| Critical Vulnerabilities Discovered in Popular Anti-Spam Plugin for WordPress ️ | https://medium.com/@wiretor/critical-vulnerabilities-discovered-in-popular-anti-spam-plugin-for-wordpress-%EF%B8%8F-353b3a727d7e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacked, malware, wordpress, ransomware, bug-bounty | 26-Nov-2024 |
| Find Website Vulnerabilities with One Hacking Tool | https://blog.cubed.run/find-website-vulnerabilities-with-one-hacking-tool-0008a908c6fd?source=rss------bug_bounty-5 | Tahir Ayoub | cybersecurity, bug-bounty-tips, bug-bounty, hacking, tools | 26-Nov-2024 |
| How I Hacked NASA | https://vikram1337.medium.com/how-i-hacked-nasa-74f4ada6e90c?source=rss------bug_bounty-5 | Vikram | writeup, pentesting, bug-bounty, nasa | 26-Nov-2024 |
| race condition on BBP | https://medium.com/@mohanad9837/race-condition-on-bbp-7294e8582ade?source=rss------bug_bounty-5 | mohaned | bug-bounty, race-condition | 25-Nov-2024 |
| Why Subdomain Enumeration ? | https://ahmed-rezk.medium.com/why-subdomain-enumeration-3e4570dd9aba?source=rss------bug_bounty-5 | Ahmed Rezk | cybersecurity, red-teaming, bug-bounty-tips, pentesting, bug-bounty | 25-Nov-2024 |
| Privilege Escalation in Collaborative Platforms — BugBounty | https://medium.com/@Zero-Ray/privilege-escalation-in-collaborative-platforms-bugbounty-e1e240384b43?source=rss------bug_bounty-5 | Mahmoud Fawzy | privilege-escalation, bug-bounty, bug-bounty-hunter, bugcrowd, bug-bounty-writeup | 25-Nov-2024 |
| HOW I FOUND MY FIRST XSS BUG | https://medium.com/@Zeroo_sec/how-i-found-my-first-xss-bug-553225548d29?source=rss------bug_bounty-5 | Ranjan | ethical-hacking, hacking, bug-bounty, bug-bounty-tips | 25-Nov-2024 |
| Google Dorks for Bug Bounty: The Ultimate Guide | https://medium.com/@verylazytech/google-dorks-for-bug-bounty-the-ultimate-guide-e7611b533aee?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, google-dork, google-hacking, penetration-testing, bug-bounty | 25-Nov-2024 |
| Google dorking the right way. | https://osintteam.blog/google-dorking-the-right-way-27b0eeb31212?source=rss------bug_bounty-5 | an0nbil | bug-bounty-tips, bug-bounty, programming, ethical-hacking, cybersecurity | 25-Nov-2024 |
| Microlise Data Breach Confirmed: SafePay Ransomware Group Claims Responsibility ️ | https://medium.com/@wiretor/microlise-data-breach-confirmed-safepay-ransomware-group-claims-responsibility-%EF%B8%8F-035e36e25afc?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | usa, ransomeware, bug-bounty, malware, xs | 25-Nov-2024 |
| Bangkok Busts High-Tech SMS Scam Operation | https://medium.com/@wiretor/bangkok-busts-high-tech-sms-scam-operation-e13909a2625f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, bug-bounty, hacking, malware, xxe | 25-Nov-2024 |
| Finastra Data Breach: What Financial Institutions Need to Know ️ | https://medium.com/@wiretor/finastra-data-breach-what-financial-institutions-need-to-know-%EF%B8%8F-df9e960c90c7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, pentest, hacking, xs | 25-Nov-2024 |
| SSRF To Internal Data Access Via PDF Print Feature | https://bishal0x01.medium.com/ssrf-to-internal-data-access-via-pdf-print-feature-b8e6a912844a?source=rss------bug_bounty-5 | Bishal Shrestha | ssrf, bug-bounty, information-security | 25-Nov-2024 |
| Bug Bounty Tips and Tricks | https://bevijaygupta.medium.com/bug-bounty-tips-and-tricks-7b25317c8e7e?source=rss------bug_bounty-5 | Vijay Gupta | bug-bounty-tips, bug-zero, bug-bounty-writeup, bugs, bug-bounty | 25-Nov-2024 |
| Google Dorks for Bug Bounty: The Ultimate Guide | https://systemweakness.com/google-dorks-for-bug-bounty-the-ultimate-guide-e7611b533aee?source=rss------bug_bounty-5 | Very Lazy Tech | ethical-hacking, google-dork, google-hacking, penetration-testing, bug-bounty | 25-Nov-2024 |
| here is how I got my first bounty $$$ | https://medium.com/@mohanad9837/here-is-how-i-got-my-first-bounty-78c18da7feeb?source=rss------bug_bounty-5 | mohaned | xss-vulnerability, xss-bypass, bug-bounty, xss-attack | 25-Nov-2024 |
| GitTrash: Digging Deep into Git Repositories for Hidden Treasures | https://medium.com/@sheryx00/gittrash-digging-deep-into-git-repositories-for-hidden-treasures-dfa6b3ff9251?source=rss------bug_bounty-5 | Sheryx00 | pentesting, bug-bounty, open-source, git | 24-Nov-2024 |
| SSRF(Server-Side Request Forgery) | https://medium.com/@mukkagopi50/ssrf-server-side-request-forgery-50329b7e39fb?source=rss------bug_bounty-5 | Gopi Mukka | vapt, ssrf, ssrf-attack, vulnerability-assessment, bug-bounty | 24-Nov-2024 |
| Mastering Web Application Pentesting Part — II | https://infosecwriteups.com/mastering-web-application-pentesting-part-ii-f02898bf48e3?source=rss------bug_bounty-5 | Mukilan Baskaran | web-security, infosec, bug-bounty, cybersecurity, computer-security | 24-Nov-2024 |
| Week 3: When the Drive to Work Fades | https://mokhansec.medium.com/week-3-when-the-drive-to-work-fades-3e94a89559c0?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-writeup, bugs, bug-bounty-tips, bug-bounty, cybersecurity | 24-Nov-2024 |
| Hacking WordPress: Where to Begin? | https://0x4a6f76616e.medium.com/hacking-wordpress-where-to-begin-60179dc403d9?source=rss------bug_bounty-5 | Jovan | bug-bounty, hacking, pentesting, vulnerability, wordpress | 24-Nov-2024 |
| 7 Steps guide to CNAME Subdomain Takeover | https://bitpanic.medium.com/7-steps-guide-to-cname-subdomain-takeover-f10eebd7e952?source=rss------bug_bounty-5 | Spectat0rguy | bug-bounty-tips, cybersecurity, information-security, bug-bounty | 24-Nov-2024 |
| Cyberattack at French Hospital Exposes Health Data of 750,000 Patients | https://medium.com/@wiretor/cyberattack-at-french-hospital-exposes-health-data-of-750-000-patients-01b8f62893d1?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | pentest, hacking, xs, malware, bug-bounty | 24-Nov-2024 |
| Microsoft Disrupts ONNX Phishing-as-a-Service Operation ️ | https://medium.com/@wiretor/microsoft-disrupts-onnx-phishing-as-a-service-operation-%EF%B8%8F-a1b5535f5d9a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, malware, xs, bug-bounty, pentest | 24-Nov-2024 |
| Microsoft Tests Third-Party Passkey Support in Windows 11: A Passwordless Future | https://medium.com/@wiretor/microsoft-tests-third-party-passkey-support-in-windows-11-a-passwordless-future-92a5fe28571a?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | microsoft, pentest, bug-bounty, hacking, xs | 24-Nov-2024 |
| Hackers Exploit Avast Anti-Rootkit Driver to Disable Security Defenses | https://medium.com/@wiretor/hackers-exploit-avast-anti-rootkit-driver-to-disable-security-defenses-13df8a3c313e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, ransomware, bug-bounty, malware, xss-attack | 24-Nov-2024 |
| How I got 50euro bounty? | https://doordiefordream.medium.com/how-i-got-50euro-bounty-71dcf4c6e335?source=rss------bug_bounty-5 | Bug hunter balu | html, cybersecurity, technology, vulnerability, bug-bounty | 24-Nov-2024 |
| Recon. Useful Tips for Bug Bounty — PART 1 | https://medium.com/@dzchalevich/recon-useful-tips-for-bug-bounty-part-1-0defee9bc7cf?source=rss------bug_bounty-5 | theroo@ttt | web-security, bug-bounty-tips, bug-bounty, penetration-testing, recon | 24-Nov-2024 |
| Happy hunting! | https://medium.com/@hacker_33169/happy-hunting-eae0a858b540?source=rss------bug_bounty-5 | B3ntl3y | cybersecurity, bug-bounty, penetration-testing | 24-Nov-2024 |
| Beginner’s Guide to Ethical Hacking: What I Learned from My First Bug Bounty | https://medium.com/@yarmuhammadnizamani556/beginners-guide-to-ethical-hacking-what-i-learned-from-my-first-bug-bounty-724a9f97f38b?source=rss------bug_bounty-5 | Curious Mind | ethical-hacking, cybersecurity, bug-bounty | 24-Nov-2024 |
| Android Pentesting can make you $500/day. | https://medium.com/@anandrishav2228/android-pentesting-can-make-you-500-day-818158f9b43d?source=rss------bug_bounty-5 | Rishav anand | cybersecurity, android, hacking, money, bug-bounty | 24-Nov-2024 |
| How I do my recon and end up finding hidden assets and vulnerabilities before anyone else Pt.2 | https://medium.com/@demonia/how-i-do-my-recon-and-end-up-finding-hidden-assets-and-vulnerabilities-before-anyone-else-pt-2-2c8dd13d6c19?source=rss------bug_bounty-5 | Mohammed Dief | cybersecurity, information-security, bug-bounty, hackerone, recon | 24-Nov-2024 |
| IDOR is NOT only on the ID | https://medium.com/@mshulkhan/idor-is-not-only-on-the-id-8e94b5cc193e?source=rss------bug_bounty-5 | M Shulkhan | google-bug, bug-bounty, hacking, hackerkamp150, sysbraykr | 24-Nov-2024 |
| My Bug Bounty Hunting Methodology | https://cybersechemmars.medium.com/my-bug-bounty-hunting-methodology-51ac0a891978?source=rss------bug_bounty-5 | Cybersec with Hemmars | cybersecurity, writing, bug-bounty, bug-bounty-writeup | 24-Nov-2024 |
| TryHackMe | NoSQLi Walkthrough | https://medium.com/@k3r0/tryhackme-nosqli-walkthrough-155c6380f5b3?source=rss------bug_bounty-5 | Kyrillos nady | penetration-testing, bug-bounty, nosql, web-penetration-testing, hacking | 24-Nov-2024 |
| Bug House Exterminator in Wilton: Your Ultimate Guide to a Pest-Free Home | https://medium.com/@muhammadmohsinsiddique46/bug-house-exterminator-in-wilton-your-ultimate-guide-to-a-pest-free-home-47d56773c394?source=rss------bug_bounty-5 | Muhammadmohsinsiddique | bed-bug-extermination, bug-bounty, wilton, bugs | 23-Nov-2024 |
| 7 Main Sins Of A Hacker, What To Stay Away From During Hacking Story? | https://medium.com/h7w/7-main-sins-of-a-hacker-what-to-stay-away-from-during-hacking-story-115d749952e2?source=rss------bug_bounty-5 | NnFace | faith, hacking, bug-bounty, cybersecurity, kali-linux | 23-Nov-2024 |
| HTML INJECTION- My Second Major Bounty | https://medium.com/@josuofficial327/html-injection-my-second-major-bounty-cb7c3b32ce60?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | owasp-top-10, bug-bounty-tips, cybersecurity, penetration-testing, bug-bounty | 23-Nov-2024 |
| Building a Bug Bounty Journey: Exploring Web Security with a Custom CMS | https://medium.com/@zero_4583/building-a-bug-bounty-journey-exploring-web-security-with-a-custom-cms-06dffc81e969?source=rss------bug_bounty-5 | Nathan Vincent | php, appsec, cms-development, bug-bounty | 23-Nov-2024 |
| Why Bug Bounty Is Just for You 🙂 | https://infosecwriteups.com/why-bug-bounty-is-just-for-you-61541deb62b8?source=rss------bug_bounty-5 | Satyam Pathania | bug-bounty, money, cybersecurity, infosec, technology | 23-Nov-2024 |
| Disallowed but Discoverable: The Hacker’s robots.txt Playbook | https://myselfakash20.medium.com/disallowed-but-discoverable-the-hackers-robots-txt-playbook-73dca570f23e?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, cybersecurity, technology, programming, bug-bounty-writeup | 23-Nov-2024 |
| Vulnerable WordPress October 2024 (Zahhak Castle) | https://medium.com/@onhexgroup/vulnerable-wordpress-october-2024-zahhak-castle-fb7da609b5e1?source=rss------bug_bounty-5 | Onhexgroup | information-security, infosec, cybersecurity, bug-bounty, wordpress | 23-Nov-2024 |
| North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn | https://medium.com/@wiretor/north-korean-hackers-steal-10m-with-ai-driven-scams-and-malware-on-linkedin-25daddc61809?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware, ai, programming | 23-Nov-2024 |
| Over 2,000 Palo Alto Firewalls Hacked Using Recently Patched Bugs | https://medium.com/@wiretor/over-2-000-palo-alto-firewalls-hacked-using-recently-patched-bugs-ccc83ef8b4d6?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, hacking, hacked, xss-attack | 23-Nov-2024 |
| Chinese Hackers Target Linux with WolfsBane Malware | https://medium.com/@wiretor/chinese-hackers-target-linux-with-wolfsbane-malware-c4a313c0e63f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | chinese, linux, hacking, malware, bug-bounty | 23-Nov-2024 |
| Cyber Alert: APT28 Hackers Breach US Firm with Innovative “Nearest Neighbor Attack” | https://medium.com/@wiretor/cyber-alert-apt28-hackers-breach-us-firm-with-innovative-nearest-neighbor-attack-9245d88841d8?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, apt-28, hacking, xss-attack | 23-Nov-2024 |
| Ubuntu Users Alert: Decade-Old Needrestart Flaws Expose Root Privilege Risks | https://medium.com/@wiretor/ubuntu-users-alert-decade-old-needrestart-flaws-expose-root-privilege-risks-a504f5d2b949?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | usa, ubuntu, penetration-testing, bug-bounty, malware | 23-Nov-2024 |
| Step into my Professional Life(:Finding my first Bug:) | https://medium.com/@anshjain722/step-into-my-professional-life-finding-my-first-bug-e8175b1d9601?source=rss------bug_bounty-5 | Ansh Jain | cybersecurity, xss-vulnerability, vulnerability, bugs, bug-bounty | 23-Nov-2024 |
| Methods to bypass 403 & 401 | https://infosecwriteups.com/methods-to-bypass-403-401-38df4cec069e?source=rss------bug_bounty-5 | Dishant Modi | penetration-testing, cybersecurity, bug-bounty-tips, bug-bounty, hacking | 23-Nov-2024 |
| How I Discovered an Email Change Vulnerability Leading to Pre-Account Takeover | p2 | https://medium.com/@dhananjay_00/how-i-discovered-an-email-change-vulnerability-leading-to-pre-account-takeover-p2-7e76e0002eef?source=rss------bug_bounty-5 | Dhananjay Pathak | bug-bounty-writeup, cybersecurity, bug-bounty-tips, bug-bounty, hacking | 23-Nov-2024 |
| Why I Switched from Cloud to Local Password Management | https://expectme.medium.com/why-i-switched-from-cloud-to-local-password-management-2b79448495dc?source=rss------bug_bounty-5 | Mamoud Eid | bug-bounty, privacy, cybersecurity | 23-Nov-2024 |
| Bug Bounty Beginner’s Roadmap-02 | https://medium.com/@sheikh.mohammad.adil.71/bug-bounty-beginners-roadmap-02-3236f15df715?source=rss------bug_bounty-5 | SHEIKH MOHAMMAD ADIL | roadmaps, ethical-hacking, bounty-program, bug-bounty | 23-Nov-2024 |
| My OSWA Experience | https://medium.com/@zumyumi/my-oswa-experience-eaa4e94d1797?source=rss------bug_bounty-5 | Zumi Yumi | oswe, oscp, web, oswa, bug-bounty | 23-Nov-2024 |
| ️♂️ Bug Bounty Beginner’s Roadmap-01 | https://medium.com/@sheikh.mohammad.adil.71/%EF%B8%8F-%EF%B8%8F-ultimate-bug-bounty-roadmap-ee81e805ad6b?source=rss------bug_bounty-5 | SHEIKH MOHAMMAD ADIL | bug-bounty, ethical-hacking, hackerone, cybersecurity, roadmaps | 23-Nov-2024 |
| File path traversal, validation of file extension with null byte bypass | https://medium.com/@Laxious8848/file-path-traversal-validation-of-file-extension-with-null-byte-bypass-6625f4a4fbec?source=rss------bug_bounty-5 | Laxious | web-penetration-testing, lfi, lfi-vulnerability, bug-bounty, web-pen-testing | 22-Nov-2024 |
| File path traversal, validation of start of path | https://medium.com/@Laxious8848/file-path-traversal-validation-of-start-of-path-063e8995a55d?source=rss------bug_bounty-5 | Laxious | lfi, web-penetration-testing, web-pen-testing, lfi-vulnerability, bug-bounty | 22-Nov-2024 |
| Ghost Tap Exploits NFC Payments for Fraud | https://medium.com/@wiretor/ghost-tap-exploits-nfc-payments-for-fraud-dc2a263ff603?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ransomware, hacking, programming, bug-bounty | 22-Nov-2024 |
| Oracle Agile PLM Vulnerability Exploited in the Wild: Protect Your Data! | https://medium.com/@wiretor/oracle-agile-plm-vulnerability-exploited-in-the-wild-protect-your-data-129f8d9ac922?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, ransomware, malware, pentest, hacking | 22-Nov-2024 |
| File path traversal, traversal sequences stripped with superfluous URL-decode | https://medium.com/@Laxious8848/file-path-traversal-traversal-sequences-stripped-with-superfluous-url-decode-0b303cfe5b69?source=rss------bug_bounty-5 | Laxious | web-penetration-testing, web-pen-testing, bug-bounty, lfi-vulnerability, lfi | 22-Nov-2024 |
| Resolving the “externally-managed-environment” Error in Python | https://medium.com/@prathameshbagul/resolving-the-externally-managed-environment-error-in-python-b91650d45946?source=rss------bug_bounty-5 | Prath | bug-bounty, python, pentesting, kali-linux, cybersecurity | 22-Nov-2024 |
| ShodanSpider: A Powerful Tool for Cybersecurity Research | https://shubhamrooter.medium.com/shodanspider-a-powerful-tool-for-cybersecurity-research-02eac3ed75e2?source=rss------bug_bounty-5 | Shubham Tiwari | bug-bounty, security-analytics, vapt, shodan, bug-hunting | 22-Nov-2024 |
| My Journey Finding Bugs on NASA | https://cybersecuritywriteups.com/my-journey-finding-bugs-on-nasa-a2296d142b0a?source=rss------bug_bounty-5 | Shridhar Rajaput | bug-bounty-writeup, inspiration, cybersecurity, bug-bounty, information-technology | 22-Nov-2024 |
| Why Bug Bounty Could Be a Career for You 🙂 | https://osintteam.blog/why-bug-bounty-could-be-a-career-for-you-17b6b7b66e16?source=rss------bug_bounty-5 | Satyam Pathania | money, technology, cybersecurity, bug-bounty, infosec | 22-Nov-2024 |
| Unveiling a Critical Bug in One of the World’s Largest Banks: My Barclays Story | https://cybersecuritywriteups.com/unveiling-a-critical-bug-in-one-of-the-worlds-largest-banks-my-barclays-story-34a9fb5f5140?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | bug-bounty-tips, bug-bounty, cybersecurity, bug-bounty-writeup, ethical-hacking | 22-Nov-2024 |
| The $900 Bug: My Journey Through SSRF and LFI Exploits | https://myselfakash20.medium.com/the-900-bug-my-journey-through-ssrf-and-lfi-exploits-222feb276deb?source=rss------bug_bounty-5 | Akash Ghosh | programming, technology, cybersecurity, hacking, bug-bounty | 22-Nov-2024 |
| IDOR Checklist 2025 | https://medium.com/@mohanad9837/idor-checklist-2025-443575a389d4?source=rss------bug_bounty-5 | mohaned | idor, bug-bounty, idor-vulnerability | 22-Nov-2024 |
| Finding and Exploiting open SMB service [bug bounty write-up]. | https://medium.com/@sugamdangal52/finding-and-exploiting-open-smb-service-bug-bounty-write-up-492d72cd2fa3?source=rss------bug_bounty-5 | Sugam Dangal | ethical-hacking, bug-bounty, bug-hunting, hacking, bug-bounty-writeup | 22-Nov-2024 |
| Forbidden Bypass Cloudflare Zero Trust — English Version | https://medium.com/@j0hnZ3RA/forbidden-bypass-cloudflare-zero-trust-english-version-436efff4a548?source=rss------bug_bounty-5 | j0hnZ3RA | bug-bounty, red-team, pentesting, security | 22-Nov-2024 |
| Forbidden Bypass Cloudflare Zero Trust | https://medium.com/@j0hnZ3RA/forbidden-bypass-cloudflare-zero-trust-6bcc7ad464ee?source=rss------bug_bounty-5 | j0hnZ3RA | security, pentesting, bypass, red-team, bug-bounty | 22-Nov-2024 |
| They Ignored My Bug Report but Fixed It Silently: My Experience with Enhancv | https://medium.com/@0xw01f/they-ignored-my-bug-report-but-fixed-it-silently-my-experience-with-enhancv-a8ffe5e3e790?source=rss------bug_bounty-5 | w01f | cybersecurity, bug-bounty, vulnerability, responsibility, ethics | 22-Nov-2024 |
| HTML encode ilə XSS və HTML İnjection hücumlarının qarşısının alınması | https://medium.com/@rootelvin/html-encode-il%C9%99-xss-v%C9%99-html-i%CC%87njection-h%C3%BCcumlar%C4%B1n%C4%B1n-qar%C5%9F%C4%B1s%C4%B1n%C4%B1n-al%C4%B1nmas%C4%B1-01e21dfe11b5?source=rss------bug_bounty-5 | Elvin Nuruyev | appsec-testing, web-pentesting, cyber-security-solutions, secure-coding, bug-bounty | 22-Nov-2024 |
| captainX404 | https://medium.com/@captainX404/captainx404-b41a7f1e3ff3?source=rss------bug_bounty-5 | captainX404 | bug-bounty | 22-Nov-2024 |
| Reconnaissance on archive URLs | https://medium.com/@mayank_prajapati/reconnaissance-on-archive-urls-4125ce7544ed?source=rss------bug_bounty-5 | Mayank Kumar Prajapati | bug-bounty-tips, cybersecurity, bugs, bug-bounty, hacking | 22-Nov-2024 |
| HTML encode ilə XSS və HTML İnjection hücumlarının qarşısının alınması | https://elvinnuruyev.medium.com/html-encode-il%C9%99-xss-v%C9%99-html-i%CC%87njection-h%C3%BCcumlar%C4%B1n%C4%B1n-qar%C5%9F%C4%B1s%C4%B1n%C4%B1n-al%C4%B1nmas%C4%B1-01e21dfe11b5?source=rss------bug_bounty-5 | Elvin Nuruyev | appsec-testing, web-pentesting, cyber-security-solutions, secure-coding, bug-bounty | 22-Nov-2024 |
| Cloud Hacking : flaws.cloud level 1 walkthrough | https://medium.com/@Kinqdathacker/cloud-hacking-flaws-cloud-level-1-walkthrough-9f966da07e82?source=rss------bug_bounty-5 | Kinqdathacker | ctf-writeup, cloud-security, bug-bounty, s3-bucket, hacking | 22-Nov-2024 |
| How i finded a p4 as per bugcrowd. | https://osintteam.blog/how-i-finded-a-p4-as-per-bugcrowd-c7c72718583a?source=rss------bug_bounty-5 | loyalonlytoday | hacking, tips, bugs, bug-bounty, cybersecurity | 21-Nov-2024 |
| Master My Skill Student got highest bounty of $5000 by Vikrant Sharma | https://medium.com/@mastermyskill/master-my-skill-student-got-highest-bounty-of-5000-by-vikrant-sharma-287a9b46522e?source=rss------bug_bounty-5 | Master My Skill | bug-bounty | 21-Nov-2024 |
| Unlock the $4 Million Bounty: Join Microsoft’s Zero Day Quest! | https://byteshiva.medium.com/unlock-the-4-million-bounty-join-microsofts-zero-day-quest-87c6e50c1010?source=rss------bug_bounty-5 | Siva | infosec, cybersecurity, microsoftzerodayquest, hacking, bug-bounty | 21-Nov-2024 |
| Unique XSS Earned Me a $$$ Bounty | https://wgetkb.medium.com/unique-xss-earned-me-a-bounty-b7156c36fd32?source=rss------bug_bounty-5 | Prasad KB | bounty-program, xss-vulnerability, infosec, bug-bounty, security | 21-Nov-2024 |
| Insecure direct object references | https://medium.com/@Laxious8848/insecure-direct-object-references-2ce01fa76018?source=rss------bug_bounty-5 | Laxious | web-pen-testing, idor, idor-vulnerability, webapplicationpentest, bug-bounty | 21-Nov-2024 |
| HTB — Learn the basics of Penetration Testing: Meow | https://medium.com/@febrywiji12/htb-learn-the-basics-of-penetration-testing-meow-6158f97c3c6e?source=rss------bug_bounty-5 | Sheperd01 | telnet, hackthebox, ctf, bug-bounty, tutorial | 21-Nov-2024 |
| How to Find Open Redirect Vulnerabilities: A Comprehensive Guide | https://medium.com/@rupaitanudas/how-to-find-open-redirect-vulnerabilities-a-comprehensive-guide-e2b6e8c965c6?source=rss------bug_bounty-5 | Rupaitanudas | open-redirect, bug-bounty, web-application-security | 21-Nov-2024 |
| BugBoard: The Ultimate Dashboard for Bug Hunters | https://medium.com/@abhinavsingwal/bugboard-the-ultimate-dashboard-for-bug-hunters-1fc7177117bb?source=rss------bug_bounty-5 | Abhinavsingwal | bug-bounty, hacking, hacker, bugboard, hacking-tools | 21-Nov-2024 |
| Introduction to CORS-Cross-origin resource sharing & SOP-Same Origin Policy, CORS series (Part 1) | https://medium.com/@vipulparveenjain/introduction-to-cors-cross-origin-resource-sharing-sop-same-origin-policy-cors-series-part-1-149ad6f77cf6?source=rss------bug_bounty-5 | Vipul Jain | hacking, bug-bounty, web-security-testing, cors-vulnerability, cross-origin-resource | 21-Nov-2024 |
| Antivirus Evasion for Beginners: A Step-by-Step Guide to Bypassing AV for Penetration Testers | https://medium.com/@verylazytech/antivirus-evasion-for-beginners-a-step-by-step-guide-to-bypassing-av-for-penetration-testers-e600de35be20?source=rss------bug_bounty-5 | Very Lazy Tech | penetration-testing, bug-bounty, antivirus-evasion, bypassing-av, hacking | 21-Nov-2024 |
| How I Hacked a Website While Dancing | https://medium.com/@shaikhminhaz1975/how-i-hacked-a-website-while-dancing-22c3e1cd3431?source=rss------bug_bounty-5 | Shaikh Minhaz | hacking, cybersecurity, how-to, ethical-hacking, bug-bounty | 21-Nov-2024 |
| BugBoard: The Ultimate Dashboard for Bug Hunters | https://medium.com/@abhinavsingwal/bugboard-the-ultimate-dashboard-for-bug-hunters-1fc7177117bb?source=rss------bug_bounty-5 | Abhinav Singwal | bug-bounty, hacking, hacker, bugboard, hacking-tools | 21-Nov-2024 |
| Bypass Email Verification in Mozilla | https://0d-amr.medium.com/bypass-email-verification-in-mozilla-2ab45ac36c42?source=rss------bug_bounty-5 | Amr | bug-bounty-tips, cybersecurity, ethical-hacking, penetration-testing, bug-bounty | 21-Nov-2024 |
| Mastering Web Application Pentesting with TryhackMe | https://infosecwriteups.com/mastering-web-application-pentesting-with-tryhackme-24257ef182c5?source=rss------bug_bounty-5 | Mukilan Baskaran | tryhackme, cybersecurity, bug-bounty, tryhackme-walkthrough, infosec | 21-Nov-2024 |
| PART 2: THE NEXT CHAPTER IN MY NASA BUG HUNTING JOURNEY | https://rootxabit.medium.com/part-2-the-next-chapter-in-my-nasa-bug-hunting-journey-1d6338c5f017?source=rss------bug_bounty-5 | sudo-xabit | hacking-nasa, bug-bounty, india, tips, nasa | 21-Nov-2024 |
| File path traversal, simple case | https://medium.com/@Laxious8848/file-path-traversal-simple-case-d0dd8c493981?source=rss------bug_bounty-5 | Laxious | lfi, webapplicationpentest, lfi-vulnerability, bug-bounty, web-pen-testing | 21-Nov-2024 |
| File path traversal, traversal sequences stripped non-recursively | https://medium.com/@Laxious8848/file-path-traversal-traversal-sequences-stripped-non-recursively-647780ace38e?source=rss------bug_bounty-5 | Laxious | web-penetration-testing, web-pen-testing, lfi, bug-bounty, lfi-vulnerability | 21-Nov-2024 |
| File path traversal, traversal sequences blocked with absolute path bypass | https://medium.com/@Laxious8848/file-path-traversal-traversal-sequences-blocked-with-absolute-path-bypass-b909ad161fa2?source=rss------bug_bounty-5 | Laxious | bug-bounty, web-pentesting, web-penetration-testing, lfi-vulnerability, lfi | 21-Nov-2024 |
| HTB — Learn the basics of Penetration Testing: Meow | https://medium.com/@febrywiji/htb-learn-the-basics-of-penetration-testing-meow-6158f97c3c6e?source=rss------bug_bounty-5 | Sheperd01 | telnet, hackthebox, ctf, bug-bounty, tutorial | 21-Nov-2024 |
| Worth 10000$ Cracking the Price Barrier: Exploiting Price Tampering on an E-Commerce Website | https://medium.com/@kumawatabhijeet2002/worth-10000-cracking-the-price-barrier-exploiting-price-tampering-on-an-e-commerce-website-19e3f82f52aa?source=rss------bug_bounty-5 | Abhijeet kumawat | bug-bounty, bug-bounty-writeup, bug-bounty-tips, bugs | 20-Nov-2024 |
| How I was able to Take over a Subdomain and got Hall of Fame | https://rivudon.medium.com/how-i-was-able-to-take-over-a-subdomain-and-got-hall-of-fame-aca4aaca761b?source=rss------bug_bounty-5 | Rivek Raj Tamang ( RivuDon ) | subdomain-takeover, ethical-hacking, bug-bounty-tips, bug-hunting, bug-bounty | 20-Nov-2024 |
| Web vulnerability bounty rules update | https://medium.com/@security.tecno/web-vulnerability-bounty-rules-update-20bcf6f6e3da?source=rss------bug_bounty-5 | TECNO Security | hacking, web, security, bug-bounty | 20-Nov-2024 |
| Bypassing Password Reuse Restriction A Security Flaw. | https://aman0.medium.com/bypassing-password-reuse-restriction-a-security-flaw-1bf2210d9bbd?source=rss------bug_bounty-5 | Aman H | bug-bounty-writeup, vulnerability, information-security, penetration-testing, bug-bounty | 20-Nov-2024 |
| The $2,200 ATO Most Bug Hunters Overlooked by Closing Intruder Too Soon | https://mokhansec.medium.com/the-2-200-ato-most-bug-hunters-overlooked-by-closing-intruder-too-soon-505f21d56732?source=rss------bug_bounty-5 | Mohsin khan | cybersecurity, bug-bounty, bug-bounty-writeup, bugs, bug-bounty-tips | 20-Nov-2024 |
| Reflected Cross-Site Scripting (XSS) via POST request: | https://ak-rizk.medium.com/reflected-cross-site-scripting-xss-via-post-request-f0d54ee84f99?source=rss------bug_bounty-5 | A-RIZK | xss-attack, web-hacking, pentesting, bug-bounty | 20-Nov-2024 |
| How Hidden 3xXSS got revealed | https://medium.com/@0xbugatti/how-hidden-3xxss-got-revealed-b42f041d36f6?source=rss------bug_bounty-5 | 0xbugatti | bug-bounty, bug-bounty-writeup, web-app-security, web-app-pentesting, bug-bounty-tips | 20-Nov-2024 |
| How I Earned $650 Using Just Recon: A Bug Hunter’s Success Story | https://myselfakash20.medium.com/how-i-earned-650-using-just-recon-a-bug-hunters-success-story-4d78788e46a5?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, programming, penetration-testing, cybersecurity, technology | 20-Nov-2024 |
| Swiss Army Knife of Top Bug Hunters | https://bitpanic.medium.com/swiss-army-knife-of-top-bug-hunters-dd1bf237c513?source=rss------bug_bounty-5 | Spectat0rguy | information-security, bug-bounty-tips, cybersecurity, cyber-security-awareness, bug-bounty | 20-Nov-2024 |
| Honey, did you leave the APIs open again? | https://medium.com/@l_s_/honey-you-left-the-apis-open-again-c382a3a2d917?source=rss------bug_bounty-5 | LS | hacking, api, bug-bounty, cybersecurity, bug-bounty-writeup | 20-Nov-2024 |
| Introduction to Bug Bounty | https://medium.com/@hakoje3813/introduction-to-bug-bounty-5461825079ad?source=rss------bug_bounty-5 | Hacker | aidp, bug-bounty | 20-Nov-2024 |
| How to Start in the Masochistic World of Bug Bounty — what nobody told you before. | https://j0nasdias.medium.com/how-to-start-in-the-masochistic-world-of-bug-bounty-what-nobody-told-you-before-22b789933cdd?source=rss------bug_bounty-5 | Jonas Dias Rebelo | intigriti, hackerone, xs, pentest, bug-bounty | 20-Nov-2024 |
| GhostFilter: Automating URL Filtering for Smarter Bug Hunting | https://osintteam.blog/ghostfilter-automating-url-filtering-for-smarter-bug-hunting-d779d8fc844f?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | hacking, bug-bounty-tips, bug-bounty, ctf, cybersecurity | 20-Nov-2024 |
| Importance of Shodan in Bug Hunting: Your Ultimate Guide to Finding Hidden Gems | https://osintteam.blog/importance-of-shodan-in-bug-hunting-your-ultimate-guide-to-finding-hidden-gems-45cf87201d11?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, bug-bounty-writeup, bug-bounty-tips, cybersecurity, infosec | 19-Nov-2024 |
| Finding subdomains those are hidden in cloud. | https://osintteam.blog/finding-subdomains-those-are-hidden-in-cloud-f0c13d3d80ea?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, bugs, tips, cybersecurity, hacking | 19-Nov-2024 |
| 【Vulnerability Campaign】Earn Your Thanksgiving Bonus Rebate | https://medium.com/@security.tecno/vulnerability-campaign-earn-your-thanksgiving-bonus-rebate-95847ac8b144?source=rss------bug_bounty-5 | TECNO Security | hacking, security, bonus, bug-bounty | 19-Nov-2024 |
| OTP Bypass — Weak brute-force protection | https://medium.com/@Jitheshjithu/otp-bypass-weak-brute-force-protection-42c3f6b7899d?source=rss------bug_bounty-5 | Jithesh | bug-bounty-tips, brute-force, bug-bounty, otp-bypass, burpsuite | 19-Nov-2024 |
| How a CSRF Vulnerability Can Be Exploited to Target Email Accounts — A Practical Walkthrough | https://medium.com/@muhammedgalal66/how-a-csrf-vulnerability-can-be-exploited-to-target-email-accounts-a-practical-walkthrough-60e6c2eac31f?source=rss------bug_bounty-5 | Dg0x6 | bug-bounty, bounty-program, bug-hunting, csrf, hunting | 19-Nov-2024 |
| The Easiest $$$ I Made from a Business Logic Vulnerability | https://medium.com/@0xsussy/the-easiest-i-made-from-a-business-logic-vulnerability-5c11a31ca455?source=rss------bug_bounty-5 | Hamza Khaled | bugbounty-writeup, bugbounty-poc, bug-bounty, bugbounty-tips | 19-Nov-2024 |
| Enumeração de subdomínios através da homepage | https://medium.com/@sarkis093/enumera%C3%A7%C3%A3o-de-subdom%C3%ADnios-atrav%C3%A9s-da-homepage-971d7aa341bf?source=rss------bug_bounty-5 | sarkis093 | shell, pentesting, red-team, osint, bug-bounty | 19-Nov-2024 |
| From User to Admin: The Art of Privilege Escalation | https://bootcampsecurity.medium.com/from-user-to-admin-the-art-of-privilege-escalation-b80a4cd1e89b?source=rss------bug_bounty-5 | Garv Kataria | cybersecurity, privilege-escalation, ethical-hacking, bug-bounty-tips, bug-bounty | 19-Nov-2024 |
| Common Security Risks in Browser Extensions | https://medium.com/@Parag_Bagul/common-security-risks-in-browser-extensions-e61422499f7c?source=rss------bug_bounty-5 | ParagBagul | browser-extension, web-browser-extension, cybersecurity, bug-bounty, extension-development | 19-Nov-2024 |
| Exploiting Business Logic Flaws in e-commerce platforms | https://medium.com/@Pentestforge/exploiting-business-logic-flaws-in-e-commerce-platforms-c3042a240c4a?source=rss------bug_bounty-5 | Joel I Patrick | ethical-hacking, bug-bounty, cybersecurity, web-exploitation, hacking | 19-Nov-2024 |
| Unlock Bug Bounty Brilliance: The Ultimate Guide to Browser Extensions That Supercharge Your… | https://osintteam.blog/unlock-bug-bounty-brilliance-the-ultimate-guide-to-browser-extensions-that-supercharge-your-fbb323e29dc0?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty, bug-bounty-tips, extension, bug-bounty-writeup, cybersecurity | 19-Nov-2024 |
| Critical Remote Code Execution (RCE) Bug in VMware vCenter Server Now Exploited in Active… | https://medium.com/@wiretor/critical-remote-code-execution-rce-bug-in-vmware-vcenter-server-now-exploited-in-active-a03c8fe37d02?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | programming, hacking, pentesting, bug-bounty, malware | 19-Nov-2024 |
| Maxar Data Breach: U.S. Space Tech Giant Compromised | https://medium.com/@wiretor/maxar-data-breach-u-s-space-tech-giant-compromised-391640982117?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, pentest, programming, malware, bug-bounty | 19-Nov-2024 |
| Chinese Hackers Exploit Fortinet VPN Zero-Day to Steal Credentials | https://medium.com/@wiretor/chinese-hackers-exploit-fortinet-vpn-zero-day-to-steal-credentials-b10232aaabef?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, hacking, bug-bounty, progamming, malware | 19-Nov-2024 |
| How I Uncovered an Unsubscribe Exploit While Checking My Internship Applications | https://expl0it32.medium.com/how-i-uncovered-an-unsubscribe-exploit-while-checking-my-internship-applications-9661aacad8f9?source=rss------bug_bounty-5 | eXpl0it_32 | hacking, cybersecurity, idor, bug-report, bug-bounty | 19-Nov-2024 |
| HOW I FOUND A BUG IN NASA | https://rootxabit.medium.com/how-i-found-a-bug-in-nasa-f76800eaf3b9?source=rss------bug_bounty-5 | sudo-xabit | bug-bounty, hacking, hall-of-fame, nasa, vdp | 19-Nov-2024 |
| Bug bounty hunting : Profitable Pursuit or Time Trap? | https://medium.com/@Arsenelupin12/bug-bounty-hunting-profitable-pursuit-or-time-trap-a99ecb11358f?source=rss------bug_bounty-5 | Lupin | bug-bounty, bug-bounty-tips, hackthebox, cybersecurity, hacking | 19-Nov-2024 |
| SQL injection vulnerability in where clause allowing retrieval of hidden data | https://medium.com/@Laxious8848/sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data-c6ca0c949382?source=rss------bug_bounty-5 | Laxious | penetration-testing, bug-bounty, webapplicationpentest, error-based-sql-injection, sql-injection | 19-Nov-2024 |
| BUG BOUNTY HUNTING | https://medium.com/@muazutopclass/bug-bounty-hunting-0536a314d4e4?source=rss------bug_bounty-5 | Mu'azu S. Ahmed | cybersecurity, money, bug-bounty, techie-delight, freelancing | 19-Nov-2024 |
| Easy admin Access By Gaming with JSON | https://medium.com/@0xbugatti/easy-admin-access-by-gaming-with-json-5ec5313e2236?source=rss------bug_bounty-5 | 0xbugatti | bug-bounty, web-security, penetration-testing, bug-bounty-tips, bug-bounty-writeup | 19-Nov-2024 |
| Bug bounty hunting : Profitable Pursuit or Time Trap? | https://medium.com/@Arsenelupin12/bug-bounty-hunting-profitable-pursuit-or-time-trap-a99ecb11358f?source=rss------bug_bounty-5 | Wasted Resources | bug-bounty, bug-bounty-tips, hackthebox, cybersecurity, hacking | 19-Nov-2024 |
| Hackers’ Cache Hotlist | https://medium.com/h7w/hackers-cache-hotlist-5649742c35b1?source=rss------bug_bounty-5 | Lukasz Wierzbicki | bug-bounty, pentesting, hacking, articles, security | 18-Nov-2024 |
| How SubDomainRadar.io Simplifies Your Recon Workflow | https://medium.com/@alexandrevandammepro/how-subdomainradar-io-simplifies-your-recon-workflow-173e4061ceb3?source=rss------bug_bounty-5 | Alexandre Vandamme | infosec, cyberattack, bug-bounty, hacking, cybersecurity | 18-Nov-2024 |
| File Upload - Upload. Intercept. Exploit. | https://p4n7h3rx.medium.com/file-upload-upload-intercept-exploit-b5aa18cb8e9d?source=rss------bug_bounty-5 | p4n7h3rx | bug-bounty, pentesting, pentest, bug-bounty-tips, hacking | 18-Nov-2024 |
| BioCorp CTF | https://ghostman01.medium.com/biocorp-ctf-99a072260842?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | ctf, web-hacking, bug-bounty, cybersecurity, hacking | 18-Nov-2024 |
| M4 — Insufficient Input/Output Validation | https://medium.com/@tamires.scruz/m4-insufficient-input-output-validation-fccc6cfc2561?source=rss------bug_bounty-5 | Tamy Angel | cybersecurity, android, pentesting, bug-bounty, vulnerability | 18-Nov-2024 |
| From Novice to Pro: My Journey to Earning Through Bug Bounty Hunting | https://myselfakash20.medium.com/from-novice-to-pro-my-journey-to-earning-through-bug-bounty-hunting-3f123d19c39a?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, ethical-hacking, bug-bounty, cybersecurity, bug-bounty-tips | 18-Nov-2024 |
| Automating XXE Exploitation: A Write-Up on Intigriti CTF 2024 BioCorp Challenge | https://osintteam.blog/biocorp-ctf-99a072260842?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | ctf, web-hacking, bug-bounty, cybersecurity, hacking | 18-Nov-2024 |
| How I Hacked an Entire Company’s IT Infrastructure by Uncovering a Critical Bug Through Effective… | https://medium.com/@0xbedo/how-i-hacked-an-entire-companys-it-infrastructure-by-uncovering-a-critical-bug-through-effective-8322d4d763a8?source=rss------bug_bounty-5 | 0xbedo | bug-bounty, aem, pentesting, cybersecurity, security | 18-Nov-2024 |
| Top 9 Books on Cyber Security | https://medium.com/@bicitrobiswas/top-9-books-on-cyber-security-e3984ec1e48b?source=rss------bug_bounty-5 | Bicitro Biswas | cybersecurity, hacking, programming, bug-bounty, students | 18-Nov-2024 |
| How I Found an IDOR Vulnerability in a Local News App and What You Can Learn From It | https://medium.com/@sulmanfarooq531/how-i-found-an-idor-vulnerability-in-a-local-news-app-and-what-you-can-learn-from-it-0b02a2ab91d5?source=rss------bug_bounty-5 | Sulman Farooq S | cybersecurity, bug-bounty, idor-vulnerability, idor | 18-Nov-2024 |
| How to Use Proxy for Bug Hunting | https://medium.com/@Progsky/how-to-use-proxy-for-bug-hunting-64e08cb33cc1?source=rss------bug_bounty-5 | Progsky | bug-hunting, ethical-hacking, ethical-hacking-tools, bug-bounty, cybersecurity | 18-Nov-2024 |
| AI vs. Human: Why Bug Bounty Hunting Still Needs Human Intuition | https://pointlessai.medium.com/ai-vs-human-why-bug-bounty-hunting-still-needs-human-intuition-40b6e023c184?source=rss------bug_bounty-5 | PointlessAI | bug-bounty-tips, ai, bug-bounty, chatgpt, vulnerability-management | 18-Nov-2024 |
| Data Breaches Demand Proactive Security: AnnieMac Hack Impacts 171,000 Individuals ️ | https://medium.com/@wiretor/data-breaches-demand-proactive-security-anniemac-hack-impacts-171-000-individuals-%EF%B8%8F-27a46bece7d2?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | anniemac-hacked, bug-bounty, data-breach, programming, hacked | 18-Nov-2024 |
| Phishing Emails Using SVG Attachments: A Growing Threat | https://medium.com/@wiretor/phishing-emails-using-svg-attachments-a-growing-threat-c531fe9d3806?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, bug-bounty, phising, hacking, email | 18-Nov-2024 |
| How to Start a Career in Cybersecurity: A Step-by-Step Guide for Beginners | https://medium.com/@griffin_dev.il/how-to-start-a-career-in-cybersecurity-a-step-by-step-guide-for-beginners-77a5457aa6e7?source=rss------bug_bounty-5 | GriFfin_Dev.iL | ethical-hacking, cybersecurity, cyber-security-awareness, bug-bounty, careers | 18-Nov-2024 |
| B-Hunters | https://medium.com/@ebraamemil/b-hunters-a5b53aa9df42?source=rss------bug_bounty-5 | Ebraam Emil | bug-bounty-tips, framework, bug-bounty | 18-Nov-2024 |
| 2FA simple bypass | https://medium.com/@kcaaditya976/2fa-simple-bypass-1eb82080b914?source=rss------bug_bounty-5 | Laxious | bug-bounty, web-application-security, web-penetration-testing, mfa-bypass, web-pentesting | 18-Nov-2024 |
| CTF Walkthrough: Grayboard | https://medium.com/@nehalrajesh10/ctf-walkthrough-grayboard-c5955fff6410?source=rss------bug_bounty-5 | Nehal Pillai | ctf, bug-bounty, ctf-walkthrough | 18-Nov-2024 |
| Breaking into Bug Bounties: A Guide to Hunting Business Logic and BAC Vulnerabilities in B2B… | https://thexssrat.medium.com/breaking-into-bug-bounties-a-guide-to-hunting-business-logic-and-bac-vulnerabilities-in-b2b-58a8f4a89711?source=rss------bug_bounty-5 | Thexssrat | idor-vulnerability, penetration-testing, bug-bounty, hacking, hacker | 18-Nov-2024 |
| 2FA simple bypass | https://medium.com/@Laxious8848/2fa-simple-bypass-1eb82080b914?source=rss------bug_bounty-5 | Laxious | bug-bounty, web-application-security, web-penetration-testing, mfa-bypass, web-pentesting | 18-Nov-2024 |
| Vietnamese Hackers Unleash PXA Stealer: Targeting Sensitive Data Across Europe and Asia | https://medium.com/@wiretor/vietnamese-hackers-unleash-pxa-stealer-targeting-sensitive-data-across-europe-and-asia-2d0723c11ff1?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, ransomeware, xss-attack, hacking, bug-bounty | 17-Nov-2024 |
| DEEPDATA Malware Exploits Fortinet Flaw to Steal VPN Credentials | https://medium.com/@wiretor/deepdata-malware-exploits-fortinet-flaw-to-steal-vpn-credentials-2605280c2e8c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomeware, xss-attack, bug-bounty, hacking, malware | 17-Nov-2024 |
| Botnet Exploits GeoVision Zero-Day to Install Mirai Malware | https://medium.com/@wiretor/botnet-exploits-geovision-zero-day-to-install-mirai-malware-98ce1622dc21?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, bug-bounty, usa, malware, hacking | 17-Nov-2024 |
| Comprehensive Guide to Exploitation Techniques for Bug Bounty Hunters: From Beginner to Advanced | https://myselfakash20.medium.com/comprehensive-guide-to-exploitation-techniques-for-bug-bounty-hunters-from-beginner-to-advanced-b32001326b9e?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, exploitation, bug-bounty-tips, cybersecurity, bug-bounty | 17-Nov-2024 |
| The $300 Journey from RFI to RCE that Changed Everything | https://medium.com/@dhabaleshward/the-300-journey-from-rfi-to-rce-that-changed-everything-2b4c00c05da0?source=rss------bug_bounty-5 | Dhabaleshwar Das | penetration-testing, bug-bounty, vulnerability, ethical-hacking, cybersecurity | 17-Nov-2024 |
| How I Found open-redirect vulnerability using virus total? | https://doordiefordream.medium.com/how-i-found-open-redirect-using-virus-total-460d721b9596?source=rss------bug_bounty-5 | balu bandi | bug-bounty-tips, ethical-hacking, bug-bounty, cybersecurity, vulnerability | 17-Nov-2024 |
| Week 2: Hard Work Transforms into a 5-Digit Payday | https://mokhansec.medium.com/week-2-hard-work-transforms-into-a-5-digit-payday-8087819bccd9?source=rss------bug_bounty-5 | Mohsin khan | bug-bounty-tips, bugs, cybersecurity, bug-bounty, bug-bounty-writeup | 17-Nov-2024 |
| Exposing Open Redirect Vulnerabilities: JavaScript File Analysis in HTTP History Burp Suite | https://medium.com/@gheeX/exposing-open-redirect-vulnerabilities-javascript-file-analysis-in-http-history-burp-suite-c64bd1c93c54?source=rss------bug_bounty-5 | Ghee1337 | bug-bounty-writeup, javascript, vulnerability, bug-bounty-tips, bug-bounty | 17-Nov-2024 |
| XSS in Registration Form: A Bug Bounty Success | https://medium.com/@ziadsakr/xss-in-registration-form-a-bug-bounty-success-6fb9450b0e66?source=rss------bug_bounty-5 | Ziad Sakr | xss-bypass, xss-vulnerability, bug-bounty, xss-attack, firewall | 17-Nov-2024 |
| 8 Advanced Techniques For Novice Bug Bounty Hunters | https://bitpanic.medium.com/8-advanced-techniques-for-novice-bug-bounty-hunters-ab6110185e55?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, information-security, cyber-security-awareness, bug-bounty, bug-bounty-tips | 17-Nov-2024 |
| SQL injection vulnerability allowing login bypass | https://medium.com/@kcaaditya976/sql-injection-vulnerability-allowing-login-bypass-1e9f7bd45adf?source=rss------bug_bounty-5 | Laxious | sql, web-penetration-testing, web-pentesting, bug-bounty, sql-injection | 17-Nov-2024 |
| Bug bounty Cheatsheet | https://medium.com/@shardulsawant67/bug-bounty-cheatsheet-b87d3250bc2e?source=rss------bug_bounty-5 | Shardul Sawant | bug-bounty, bug-bounty-cheatsheet, web-penetration-testing, hacking, website-hacking | 17-Nov-2024 |
| API Hacktics: Unveiling Vulnerabilities in Modern Web APIs | https://myselfakash20.medium.com/api-hacktics-unveiling-vulnerabilities-in-modern-web-apis-e41cc09a2b9d?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bugs, bug-bounty | 17-Nov-2024 |
| How to Find P4 Vulnerabilities and Information Disclosure Bugs | Step-by-Step Guide to All Key… | https://medium.com/@shaikhminhaz1975/how-to-find-p4-vulnerabilities-and-information-disclosure-bugs-step-by-step-guide-to-all-key-6ba8fc84c882?source=rss------bug_bounty-5 | Shaikh Minhaz | penetration-testing, how-to-find-bug, information-disclosure, ethical-hacking, bug-bounty | 17-Nov-2024 |
| Hunting for Default Credentials: A Deeper Dive into the Toolkit | https://medium.com/@defaulty.io/hunting-for-default-credentials-a-deeper-dive-into-the-toolkit-2b3edde86f01?source=rss------bug_bounty-5 | Defaulty.io | cybersecurity, information-security, hacking, bug-bounty, penetration-testing | 17-Nov-2024 |
| FB OAuth Misconfiguration | https://xsametyigit.medium.com/fb-oauth-misconfiguration-d6c2f5d067d8?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, bug-bounty-tips, bug-bounty | 17-Nov-2024 |
| OWASP Top 10–2021 Tryhackme Writeup | https://infosecwriteups.com/owasp-top-10-2021-tryhackme-writeup-56f2a04c895e?source=rss------bug_bounty-5 | Mukilan Baskaran | cybersecurity, bug-bounty, infosec, information-security, web-security | 17-Nov-2024 |
| DOM XSS in document.write sink using source location.search | https://medium.com/@kcaaditya976/dom-xss-in-document-write-sink-using-source-location-search-cc0ba7b461c2?source=rss------bug_bounty-5 | Laxious | xss-attack, web-pen-testing, dom-xss, bug-bounty, xss-vulnerability | 17-Nov-2024 |
| Who needs credentials, when you have the phone number…? | https://medium.com/@thelazypentester/who-needs-credentials-when-you-have-the-phone-number-fc0c8f51b87e?source=rss------bug_bounty-5 | Jobson | idor, bug-bounty, hacking, cybersecurity, sensitive-information | 17-Nov-2024 |
| API Hacktics: Unveiling Vulnerabilities in Modern Web APIs | https://osintteam.blog/api-hacktics-unveiling-vulnerabilities-in-modern-web-apis-e41cc09a2b9d?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, cybersecurity, bug-bounty-writeup, bugs, bug-bounty | 17-Nov-2024 |
| Lemons: A Bug Bounty Analogy | https://medium.com/@lixipluv/lemons-a-bug-bounty-analogy-ef427f514b2a?source=rss------bug_bounty-5 | Lixipluv | lemon, introduction, bug-bounty | 16-Nov-2024 |
| Race condition — can cause a flood of forgotten password verification SMS requests | https://medium.com/@viperblitzz/race-condition-can-cause-a-flood-of-forgotten-password-verification-sms-requests-1775a375653d?source=rss------bug_bounty-5 | Viperblitzz | bug-bounty-tips, bug-hunting, bug-bounty | 16-Nov-2024 |
| Chaining CSRF and an Open-Redirect leads to sensitive information disclosure | https://medium.com/@rvanwart_49640/chaining-csrf-and-an-open-redirect-leads-to-sensitive-information-disclosure-5915b24bc53b?source=rss------bug_bounty-5 | Raymond Van Wart | bug-bounty, cybersecurity, web-application-security | 16-Nov-2024 |
| Heroku Subdomain Takeover | https://xsametyigit.medium.com/heroku-subdomain-takeover-39b9f1ce7c4c?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, bug-bounty, subdomain-takeover, bug-bounty-tips | 16-Nov-2024 |
| Secret OSINT Tricks to Dig Up Hidden Info Online! | https://medium.com/@paritoshblogs/secret-osint-tricks-to-dig-up-hidden-info-online-5401ffdd9c89?source=rss------bug_bounty-5 | Paritosh | bug-bounty, hacking, osint, cybersecurity, information-technology | 16-Nov-2024 |
| Chaining CSRF and an Open-Redirect leads to sensitive information disclosure | https://raymondv.medium.com/chaining-csrf-and-an-open-redirect-leads-to-sensitive-information-disclosure-5915b24bc53b?source=rss------bug_bounty-5 | Raymond Van Wart | bug-bounty, cybersecurity, web-application-security | 16-Nov-2024 |
| How I Helped Secure Millions of Users’ Medical Reports — Bug Bounty! | https://kumarmohank889.medium.com/how-i-helped-secure-millions-of-users-medical-reports-bug-bounty-bccf61a8ecee?source=rss------bug_bounty-5 | Mohan Kumar N | cybersecurity, hacking, bug-bounty-tips, ethical-hacking, bug-bounty | 16-Nov-2024 |
| Mastering Recon for Bug Hunters, Part 4: Advanced Strategies & Real-World Examples | https://myselfakash20.medium.com/mastering-recon-for-bug-hunters-part-4-advanced-strategies-real-world-examples-5de1a7aa7f84?source=rss------bug_bounty-5 | Akash Ghosh | bugs, bug-bounty, cybersecurity, bug-bounty-writeup, bug-bounty-tips | 16-Nov-2024 |
| Account takover via forget password | https://medium.com/@amirreza.marzban/account-takover-via-forget-password-4ec6514f29ee?source=rss------bug_bounty-5 | AmirReza Marzban | bug-bounty, bug-bounty-writeup, hacking, account-takeover, bug-bounty-hunter | 16-Nov-2024 |
| Account takover of an online casino | https://bug-abdelilah.medium.com/account-takover-of-an-online-casino-e13987835266?source=rss------bug_bounty-5 | abdelilah | bug-bounty, xss-attack, penetration-testing, cybersecurity, account-takeover | 16-Nov-2024 |
| How Did I Get My First Collaboration Bounty Of $1000? | https://medium.com/@pguru978/how-did-i-get-my-first-collaboration-bounty-of-1000-dc64ec02a6c7?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | bug-bounty, bug-bounty-writeup, ethical-hacking, cybersecurity, bug-bounty-tips | 16-Nov-2024 |
| Exploiting Android Activities with Drozer: A Step-by-Step Guide | https://medium.com/@ayushkumar12021987/exploiting-android-activities-with-drozer-a-step-by-step-guide-ebc9b564758d?source=rss------bug_bounty-5 | Ayush Kumar | bug-bounty, pentesting, android, bug-bounty-writeup, security | 16-Nov-2024 |
| How I Turned a Low Blind SSRF Into a Critical Vulnerability With Strategic Impact Escalation | https://medium.com/@DrakenKun/how-i-turned-a-low-blind-ssrf-into-a-critical-vulnerability-with-strategic-impact-escalation-536505cc4352?source=rss------bug_bounty-5 | DrakenKun | web-security, pentesting, bug-bounty, ssrf, cybersecurity | 16-Nov-2024 |
| Sensitive Data Exposure in a Moodle Config File | https://medium.com/@mrcix/sensitive-data-exposure-in-a-moodle-config-file-648ca3d54676?source=rss------bug_bounty-5 | mrci0x1 | bug-bounty, information-security, web-security | 16-Nov-2024 |
| These Two Tools Helped Me Earn $40K in Bounties | https://medium.com/@alwalxed/these-two-tools-helped-me-earn-40k-in-bounties-8c688b9deccd?source=rss------bug_bounty-5 | Awa | osint, cybersecurity, bug-bounty, golang, tools | 16-Nov-2024 |
| Bypass of Username Policy: Breaking the Rules with a Simple Trick | https://medium.com/@mrcix/bypass-of-username-policy-breaking-the-rules-with-a-simple-trick-fcf7ce97925c?source=rss------bug_bounty-5 | mrci0x1 | bug-bounty-tips, penetration-testing, bug-bounty-writeup, web-security, bug-bounty | 16-Nov-2024 |
| How Did I Get My First Collaboration Bounty Of $1000? | https://cybersecuritywriteups.com/how-did-i-get-my-first-collaboration-bounty-of-1000-dc64ec02a6c7?source=rss------bug_bounty-5 | Guru Prasad Pattanaik | bug-bounty, bug-bounty-writeup, ethical-hacking, cybersecurity, bug-bounty-tips | 16-Nov-2024 |
| $500 Bounty for Account Takeover on European Bug Bounty Platform | https://0vulns.medium.com/500-bounty-for-account-takeover-on-european-bug-bounty-platform-cd5af3edb1ec?source=rss------bug_bounty-5 | 0vulns | cybersecurity, bug-bounty | 15-Nov-2024 |
| HOW I HACKED BILLION ANDROID USERS SOCIAL AND 3rd PARTY ACCOUNT | A STORY ABOUT 5000$ BUG |… | https://medium.com/@karthithehacker/how-i-hacked-billion-android-users-social-and-3rd-party-account-a-story-about-5000-bug-54d8b6ce75df?source=rss------bug_bounty-5 | Karthikeyan.V | bug-bounty, bugbounty-writeup | 15-Nov-2024 |
| NahamStore CTF Çözümü: Web Güvenlik Açıklarıyla Bug Bounty Pratiği | https://berkkahya0.medium.com/nahamstore-ctf-%C3%A7%C3%B6z%C3%BCm%C3%BC-web-g%C3%BCvenlik-a%C3%A7%C4%B1klar%C4%B1yla-bug-bounty-prati%C4%9Fi-a1b3d7133329?source=rss------bug_bounty-5 | Berk Kahya | bug-bounty, tryhackme, nahamstore, ctf-writeup, cybersecurity | 15-Nov-2024 |
| Simple RXSS di website insight.kontan.co.id | https://medium.com/@0xRedFox29/simple-rxss-di-website-insight-kontan-co-id-cfb39dd64a3a?source=rss------bug_bounty-5 | kunx90 | bug-bounty-tips, bug-bounty | 15-Nov-2024 |
| TAKEOVER | https://medium.com/@mukkagopi50/takeover-16aa79977e6b?source=rss------bug_bounty-5 | Gopi Mukka | account-takeover-attacks, vulnerability, bug-bounty, takeovers | 15-Nov-2024 |
| Server-Side Request Forgery (SSRF) | https://medium.com/@mukkagopi50/server-side-request-forgery-ssrf-80d168fd82f7?source=rss------bug_bounty-5 | Gopi Mukka | bug-bounty, vulnerability, ssrf | 15-Nov-2024 |
| How to Test for DNS Zone Transfer Attacks | https://dineshpathro9.medium.com/how-to-test-for-dns-zone-transfer-attacks-bf7c604bb28a?source=rss------bug_bounty-5 | hunter | bug-bounty, bug-bounty-writeup, hacking, bugs, bug-bounty-tips | 15-Nov-2024 |
| How I Exploited a Vulnerability to Change a User’s Backup Email Address (Easy P1 vulnerability) | https://medium.com/@hasap134/how-i-exploited-a-vulnerability-to-change-a-users-backup-email-address-easy-p1-vulnerability-f854041f8e91?source=rss------bug_bounty-5 | Beesco | cybersecurity, vulnerability, bug-bounty, bug-bounty-tips, bugs | 15-Nov-2024 |
| Earn $5000 After Learning How to Bypass the Rate Limiting for API Bug Hunting . | https://medium.com/@anandrishav2228/earn-5000-after-learning-how-to-bypass-the-rate-limiting-for-api-bug-hunting-89dc40289120?source=rss------bug_bounty-5 | Rishav anand | api, money, cybersecurity, bug-bounty, hacking-tools | 15-Nov-2024 |
| TALE OF A VULNERABILITY WHICH LEADS TO ACCOUNT TAKEOVER OF GOVERNMENT ANDROID APPLICATION | https://medium.com/@karthithehacker/tale-of-a-vulnerability-which-leads-to-account-takeover-of-government-android-application-6f47a57b8cfb?source=rss------bug_bounty-5 | Karthikeyan.V | vapt, bug-bounty, android | 15-Nov-2024 |
| Easy $20,160 bug from hackerone | https://medium.com/@loaymorad11/easy-20-160-bug-from-hackerone-aeac67ce3e81?source=rss------bug_bounty-5 | Loaymorad | cybersecurity, penetration-testing, bug-bounty, hackerone, bugbounty-writeup | 15-Nov-2024 |
| How did I found Account Takeover Vulnerability on takeuforward.org | https://rajukani100.medium.com/how-did-i-found-account-takeover-vulnerability-on-takeuforward-org-735630b4167c?source=rss------bug_bounty-5 | Raj Ukani | hacking, cyber-security-awareness, bug-bounty, bug-bounty-writeup, developer | 15-Nov-2024 |
| Today How to get $500 Bounty on HackerOne — P3 | https://medium.com/@bugbounty_learners/today-how-to-get-500-bounty-on-hackerone-p3-345fa44f76a3?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-writeup, bugs, bug-bounty-tips, software-development, bug-bounty | 15-Nov-2024 |
| My first bounty | https://medium.com/@josuofficial327/my-first-bounty-fdddb7ef5611?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | penetration-testing, ethical-hacking, bug-bounty-writeup, bug-bounty, bug-bounty-tips | 15-Nov-2024 |
| These books will help to learn bug bounty & penetration testing and ethical hacking. Part 1 . | https://osintteam.blog/these-books-will-help-to-learn-bug-bounty-penetration-testing-and-ethical-hacking-part-1-635781cd3aaa?source=rss------bug_bounty-5 | loyalonlytoday | tips, books, hacking, bug-bounty, cybersecurity | 15-Nov-2024 |
| Known Brands, Government Domains, and More Hijacked via Sitting Ducks Attacks! | https://medium.com/@wiretor/known-brands-government-domains-and-more-hijacked-via-sitting-ducks-attacks-fddd61bd6105?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | usa, hacking, ransomware, malware, bug-bounty | 15-Nov-2024 |
| New Glove Infostealer Malware Bypasses Chrome’s Cookie Encryption: A Growing Threat | https://medium.com/@wiretor/new-glove-infostealer-malware-bypasses-chromes-cookie-encryption-a-growing-threat-e4377ef1f2a7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, malware, programming, hacking | 15-Nov-2024 |
| Critical Plugin Flaw Exposed 4 Million WordPress Websites to Takeover | https://medium.com/@wiretor/critical-plugin-flaw-exposed-4-million-wordpress-websites-to-takeover-7cf7b5984ab4?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | programming, ransomware, malware, bug-bounty, wordpress | 15-Nov-2024 |
| CSRF leads to delete account | https://xsametyigit.medium.com/csrf-leads-to-delete-account-711dde21af1e?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-tips, bugbounty-writeup, bug-bounty | 15-Nov-2024 |
| How I Got Access to an Admin Portal by Response Manipulation | https://medium.com/@anonymousshetty2003/how-i-got-access-to-an-admin-portal-by-response-manipulation-d2abeec7ce58?source=rss------bug_bounty-5 | Anonymousshetty | cybersecurity, bug-bounty, bug-bounty-writeup, bug-bounty-tips, ethical-hacking | 15-Nov-2024 |
| 3 reflected XSS in one program | https://xsametyigit.medium.com/3-reflected-xss-in-one-program-c50469c6d522?source=rss------bug_bounty-5 | Samet Yiğit | bug-bounty-writeup, bug-bounty, bug-bounty-tips | 15-Nov-2024 |
| New Script — Leakix CLI by VECERT | https://medium.com/@vecert/new-script-leakix-cli-by-vecert-68abbf35d08d?source=rss------bug_bounty-5 | VECERT | pentesting, leakix, osint, bug-bounty | 15-Nov-2024 |
| 2 good tools for subdomain enumration. | https://osintteam.blog/2-good-tools-for-subdomain-enumration-ca3ee36fbf81?source=rss------bug_bounty-5 | loyalonlytoday | tips, hacking, bug-bounty, subdomains-enumeration, cybersecurity | 14-Nov-2024 |
| Beginner's guide for Input Data Validation Checklist | https://bitpanic.medium.com/beginners-guide-for-input-data-validation-checklist-2f9d5ef4a341?source=rss------bug_bounty-5 | Spectat0rguy | cybersecurity, information-technology, bug-bounty, cyber-security-awareness, bug-bounty-tips | 14-Nov-2024 |
| Critical File Upload Vulnerabilities: Exploits and Mitigation Strategies | https://medium.com/@security.tecno/critical-file-upload-vulnerabilities-exploits-and-mitigation-strategies-90230e8a31bf?source=rss------bug_bounty-5 | TECNO Security | blog, scurity, bug-bounty, hacking | 14-Nov-2024 |
| Is HackerOne Support Service Degrading? | https://medium.com/@abdulparkar/is-hackerone-support-service-degrading-cbfa6adc1027?source=rss------bug_bounty-5 | Abdul Rehman Parkar | programming, hackerone, cybersecurity, ethical-hacking, bug-bounty | 14-Nov-2024 |
| ISRO: YouTube Broken Link Hijack | https://infosecwriteups.com/isro-youtube-broken-link-hijack-304a92001b47?source=rss------bug_bounty-5 | Dishant Modi | bug-bounty, bug-bounty-tips, broken-link, hall-of-fame, vulnerability | 14-Nov-2024 |
| Helpful Resources for Bug Hunters | https://medium.com/meetcyber/helpful-resources-for-bug-hunters-53dbe011cdd4?source=rss------bug_bounty-5 | AbhirupKonwar | ethical-hacking, bug-bounty-tips, bug-bounty, pentesting, hacking | 14-Nov-2024 |
| How i hacked NASA (WARNING: Dad Jokes) | https://medium.com/@rootplinix/how-i-hacked-nasa-warning-dad-jokes-7424faec5790?source=rss------bug_bounty-5 | Abu Hurayra | hacking, cybersecurity-awareness, bug-bounty, cybersecurity, bug-bounty-tips | 14-Nov-2024 |
| Finding Security Design Flaw in a FAANG to later be ghosted by Recruiter: A funny Tale | https://medium.com/bug-bounty-hunting/finding-security-design-flaw-in-a-faang-to-later-be-ghosted-by-recruiter-a-funny-tale-73e73fb0d6aa?source=rss------bug_bounty-5 | Ronnie Joseph | google, netflix, bug-bounty, cybersecurity, meta | 14-Nov-2024 |
| AI in Bug Bounty Hunting: A Step-by-Step Tutorial for Beginners | https://prakash888kpk.medium.com/ai-in-bug-bounty-hunting-a-step-by-step-tutorial-for-beginners-673e24aed66c?source=rss------bug_bounty-5 | Lets Unlearn | machine-learning, bug-bounty, bug-bounty-tips, ai, bug-bounty-writeup | 14-Nov-2024 |
| How I Uncovered an SSRF Vulnerability in a Private HackerOne Program | https://medium.com/@josuofficial327/how-i-uncovered-an-ssrf-vulnerability-in-a-private-hackerone-program-4c3146b414ff?source=rss------bug_bounty-5 | Josekutty Kunnelthazhe Binu | ethical-hacking, bugbounty-writeup, bug-bounty-tips, bug-bounty, bug-bounty-writeup | 14-Nov-2024 |
| Basics of Stored XSS and Demo | https://medium.com/@kcaaditya976/basics-of-stored-xss-and-demo-d410714a77c0?source=rss------bug_bounty-5 | Laxious | bug-bounty, cybersecurity, bug-bounty-hunting, xss-attack, stored-xss | 14-Nov-2024 |
| Bug Report: Broken Access Control in Google Photos | https://medium.com/@abhinavsingwal/bug-report-broken-access-control-in-google-photos-d9c10ca8c472?source=rss------bug_bounty-5 | Abhinavsingwal | google-vulnerability, bug-bounty, google-bug-report, bug-report, google-photos-bug | 14-Nov-2024 |
| My Journey to Drugs Hall of Fame in just 10 minutes | https://medium.com/@bugbounty_learners/my-journey-to-drugs-hall-of-fame-in-just-10-minutes-dcd03240e42a?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-tips, bug-bounty-writeup, bugs, web-development, bug-bounty | 14-Nov-2024 |
| Mastering Reconnaissance Part 3: Unleashing Advanced Exploitation and Post-Recon Tactics | https://myselfakash20.medium.com/mastering-reconnaissance-part-3-unleashing-advanced-exploitation-and-post-recon-tactics-b81369678040?source=rss------bug_bounty-5 | Akash Ghosh | cybersecurity, bug-bounty-tips, bug-bounty-writeup, bugbounty-writeup, bug-bounty | 14-Nov-2024 |
| CISA & FBI Confirm China Hacked Telecom Providers for Spying: What Does This Mean for Your… | https://medium.com/@wiretor/cisa-fbi-confirm-china-hacked-telecom-providers-for-spying-what-does-this-mean-for-your-f523b2459c75?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, pentest, bug-bounty, malware, ransomeware | 14-Nov-2024 |
| Idaho Man Sentenced to 10 Years for Hacking, Data Theft, and Extortion | https://medium.com/@wiretor/idaho-man-sentenced-to-10-years-for-hacking-data-theft-and-extortion-003b243e419f?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | programming, malware, bug-bounty, zero-day, hacking | 14-Nov-2024 |
| Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions | https://medium.com/@wiretor/windows-zero-day-exploited-by-russia-triggered-with-file-drag-and-drop-delete-actions-0dd82469e486?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | malware, usa, hacking, bug-bounty, ransomware | 14-Nov-2024 |
| Storm-1811’s Quick-Assist phishing could have been worse | https://mrsheepsheep.medium.com/storm-1811s-quick-assist-phishing-could-have-been-worse-fd84e04b0daa?source=rss------bug_bounty-5 | Alexandre Souleau | cybersecurity, xss-attack, bug-bounty, microsoft | 14-Nov-2024 |
| Server-Side Request Forgery $(SSRF)$ allows internal ports scanning | https://medium.com/h7w/server-side-request-forgery-ssrf-allows-internal-ports-scanning-ef7edf6534b7?source=rss------bug_bounty-5 | socalledhacker | hacking, infosec, cybersecurity, bug-bounty-tips, bug-bounty | 14-Nov-2024 |
| Bypass Rate-Limit via X-Forwarded-For | https://medium.com/@null.x.b1ty/bypass-rate-limit-via-x-forwarded-for-ea26c7a25a90?source=rss------bug_bounty-5 | Snoop-dog | hackerone, bug-bounty | 14-Nov-2024 |
| How i Finded a easy dom xss. | https://infosecwriteups.com/how-i-finded-a-easy-dom-xss-6499afc21b5d?source=rss------bug_bounty-5 | loyalonlytoday | bug-bounty, tips, hacking, xss-attack, cybersecurity | 14-Nov-2024 |
| SQL Injection: How I Secured Personal Information (PII) of 1.1M Job Seekers | https://infosecwriteups.com/sql-injection-how-i-secured-personal-information-pii-of-1-1m-job-seekers-7f7c55d11fbc?source=rss------bug_bounty-5 | brutexploiter | cybersecurity, software-engineering, bug-bounty, technology, programming | 14-Nov-2024 |
| Exposing a Data Leak Vulnerability: My Journey to Discovery | https://infosecwriteups.com/exposing-a-data-leak-vulnerability-my-journey-to-discovery-d7222b48d81c?source=rss------bug_bounty-5 | Abhishek Bhujang | security, hacking, bug-hunting, ethical-hacking, bug-bounty | 14-Nov-2024 |
| Discovering My First Vulnerability in a Few Minutes | https://medium.com/@jagdishdammala/discovering-my-first-vulnerability-in-a-few-minutes-6bbc9419cbfc?source=rss------bug_bounty-5 | Jagdish Dammala | bug-bounty | 14-Nov-2024 |
| Account Takeover: How I Gained Access to Any User Account Through a Simple Registration Flaw | https://0d-amr.medium.com/account-takeover-how-i-gained-access-to-any-user-account-through-a-simple-registration-flaw-96f9f6bdc0ae?source=rss------bug_bounty-5 | Amr | ctf, pentesting, hacking, bug-bounty, security | 14-Nov-2024 |
| Exploiting SSTI Vulnerability on an E-commerce Website: A Professional Walkthrough | https://medium.com/@MianHammadx0root/exploiting-ssti-vulnerability-on-an-e-commerce-website-a-professional-walkthrough-6cc95afb2b38?source=rss------bug_bounty-5 | Mian Hammad | bug-bounty, server-side, server-security, penetration-testing, ssti | 13-Nov-2024 |
| How I Found an SQL Injection in coupon code | https://medium.com/@gheeX/how-i-found-an-sql-injection-in-coupon-code-f31d6eb1a720?source=rss------bug_bounty-5 | Ghee1337 | bug-bounty, infosec, bug-bounty-tips, sql-injection, bug-bounty-writeup | 13-Nov-2024 |
| Breaking In with Guest: My First Bug Bounty | https://ghostman01.medium.com/guest-admin-a7c70aa10ddb?source=rss------bug_bounty-5 | SIDDHANT SHUKLA | hacking, bug-bounty, bug-bounty-writeup, cybersecurity, bug-hunting | 13-Nov-2024 |
| Introducing Loxs: The Ultimate Multi-Vulnerability Scanner for Web Applications | https://anishalx.medium.com/introducing-loxs-the-ultimate-multi-vulnerability-scanner-for-web-applications-907ed2b2004b?source=rss------bug_bounty-5 | Anish alx | hacking-tools, python, pentesting, hacking, bug-bounty | 13-Nov-2024 |
| 1500$ Open Reduction Bug: Performed Restricted Actions in login page | https://medium.com/@bugbounty_learners/1500-open-reduction-bug-performed-restricted-actions-in-login-page-4194359c1fc2?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-writeup, bug-bounty-tips, web-development, bug-bounty, open-redirect | 13-Nov-2024 |
| Blind XSS Bug Hunting Methodology | https://osintteam.blog/blind-xss-bug-hunting-methodology-b997c37a9620?source=rss------bug_bounty-5 | AbhirupKonwar | pentesting, cybersecurity, ethical-hacking, xss-attack, bug-bounty | 13-Nov-2024 |
| A Deep Dive into Nmap Scripts for Web Application Testing | https://systemweakness.com/a-deep-dive-into-nmap-scripts-for-web-application-testing-6a9b3a06995e?source=rss------bug_bounty-5 | Khaleel Khan | hacking, nmap, infosec, bug-bounty, cybersecurity | 13-Nov-2024 |
| SQL Injection UNION Attack, Retrieving Data from Other Tables | https://medium.com/@marduk.i.am/sql-injection-union-attack-retrieving-data-from-other-tables-38f471813c57?source=rss------bug_bounty-5 | Marduk I Am | bug-bounty, information-security, sql-injection, portswigger-lab, sqli | 13-Nov-2024 |
| Easy Bug: How I Uncovered and Re-Exploited a Resolved Vulnerability from a Disclosed Report | https://medium.com/@cvjvqmmsm/easy-bug-how-i-uncovered-and-re-exploited-a-resolved-vulnerability-from-a-disclosed-report-ab2211a98b7b?source=rss------bug_bounty-5 | Barbarossa | bug-bounty, bugbounty-writeup | 13-Nov-2024 |
| Common Mistakes in Coding: How to Avoid Them | https://medium.com/@kharodawalam/common-mistakes-in-coding-how-to-avoid-them-9e5c881b0473?source=rss------bug_bounty-5 | Mohammed Kharodawala | mistakes-to-avoid, bug-bounty, data-structure-algorithm, programming, software-development | 13-Nov-2024 |
| Mobile Application Penetration Testing Checklist | https://infosecwriteups.com/mobile-application-penetration-testing-checklist-460deadf3d9f?source=rss------bug_bounty-5 | Ajay Naik | information-security, penetration-testing, information-technology, cybersecurity, bug-bounty | 13-Nov-2024 |
| 5 Golden Tips to Land Your First Job in Offensive Security | https://medium.com/@eran25670/5-golden-tips-to-land-your-first-job-in-offensive-security-e960b4215dc7?source=rss------bug_bounty-5 | Eran | cybersecurity, offensive-security, penetration-testing, bug-bounty-tips, bug-bounty | 13-Nov-2024 |
| clickjacking: definição, impactos, mecanismo e prevenção | https://medium.com/@Poystick/clickjacking-defini%C3%A7%C3%A3o-impactos-mecanismo-e-preven%C3%A7%C3%A3o-46e05a89614b?source=rss------bug_bounty-5 | Tarcísio Luchesi | hacking, bug-bounty, programação | 12-Nov-2024 |
| Mastering Reconnaissance Part 2: Advanced Scanning, Content Discovery, and Automation for Bug… | https://myselfakash20.medium.com/mastering-reconnaissance-part-2-advanced-scanning-content-discovery-and-automation-for-bug-8903a7c190a6?source=rss------bug_bounty-5 | Akash Ghosh | bugbounty-writeup, bug-bounty-writeup, bug-bounty, cybersecurity, bug-bounty-tips | 12-Nov-2024 |
| Your Guide to Web Reconnaissance: Mastering the Art of Information Gathering | https://medium.com/@secinfinitylabs/your-guide-to-web-reconnaissance-mastering-the-art-of-information-gathering-32dfee5f2deb?source=rss------bug_bounty-5 | Secinfinity Labs | information-gathering, information-security, penetration-testing, bug-bounty-tips, bug-bounty | 12-Nov-2024 |
| Top 10 Threat Actors of 2024 | https://medium.com/@alexandermr289/top-10-threat-actors-of-2024-4ac605357291?source=rss------bug_bounty-5 | Mr_alexander | osint, cybersecurity, bug-bounty, news, medium | 12-Nov-2024 |
| Become a Writer for Cybersecurity Write-ups! | https://cybersecuritywriteups.com/become-a-writer-for-cybersecurity-write-ups-3f1e780323a8?source=rss------bug_bounty-5 | Abdul Rehman Parkar | bug-bounty, ethical-hacking, cybersecurity, bug-bounty-tips, bugbounty-writeup | 12-Nov-2024 |
| Showing Impact is Your friend (500$+500$ bounties) | https://medium.com/@noureldin1042/showing-impact-is-your-friend-500-500-bounties-2ed87f3a64b7?source=rss------bug_bounty-5 | Noureldin(0x_5wf) | programming-languages, bug-bounty, bug-bounty-tips, programming, bug-bounty-writeup | 12-Nov-2024 |
| Exploring docker-compose.yaml leads to sensitive disclosure | https://medium.com/@raituzki/exploring-docker-compose-yaml-leads-to-sensitive-disclosure-1feaa3d3317f?source=rss------bug_bounty-5 | Muhamad Raidinoor Pasha | hacking, bug-bounty-tips, docker, yaml, bug-bounty | 12-Nov-2024 |
| How I hacked 100 hackers | https://corneacristian.medium.com/how-i-hacked-100-hackers-5c3c313e8a1a?source=rss------bug_bounty-5 | Cristian Cornea | bug-bounty, intelligence, hacking, cybersecurity, penetration-testing | 12-Nov-2024 |
| Bug Bounty | Here’s Why Your Way To Success Doesn’t Lie In Learning | https://medium.com/@sM0ky4/bug-bounty-heres-why-your-way-to-success-doesn-t-lie-in-learning-bc72d4000b88?source=rss------bug_bounty-5 | sM0ky4 | cybersecurity, bug-bounty-tips, bug-bounty, time-management | 12-Nov-2024 |
| How Can You Be Sure That Ethical Hackers Are TRULY Ethical? | https://medium.com/@hackrate/how-can-you-be-sure-that-ethical-hackers-are-truly-ethical-17ee0fcc6058?source=rss------bug_bounty-5 | Hackrate | bug-bounty, ethical-hacking, hacking, penetration-testing, cybersecurity | 12-Nov-2024 |
| HTTP Desync Attack (Request Smuggling) - Mass Account Takeover | https://medium.com/@bugbounty_learners/http-desync-attack-request-smuggling-mass-account-takeover-0292fcc8c4a4?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty, web-development, bug-bounty-tips, bug-bounty-writeup, bugs | 12-Nov-2024 |
| Complete Guide to Securing Web Applications on Ports 80 and 443 | https://medium.com/@verylazytech/complete-guide-to-securing-web-applications-on-ports-80-and-443-a123def0b82c?source=rss------bug_bounty-5 | Very Lazy Tech | owasp-top-10, web-application-security, bug-bounty, penetration-testing, web-security | 12-Nov-2024 |
| Advanced Techniques for Bypassing Web Filters: A Practical Guide to Identifying and Exploiting XSS… | https://thexssrat.medium.com/advanced-techniques-for-bypassing-web-filters-a-practical-guide-to-identifying-and-exploiting-xss-f6cadeedf9ca?source=rss------bug_bounty-5 | Thexssrat | hacks, bug-bounty, penetration-testing, xss-attack, hacking | 12-Nov-2024 |
| M3 — Insecure Authentication/Authorization | https://medium.com/@tamires.scruz/m3-insecure-authentication-authorization-cedf6e94d1ce?source=rss------bug_bounty-5 | Tamy Angel | bug-bounty, owasp, pentesting, android, cybersecurity | 12-Nov-2024 |
| SHODAN Cheat Sheet — A Comprehensive Guide to Shodan: The Search Engine for Hackers | https://medium.com/@iamshafayat/shodan-cheat-sheet-a-comprehensive-guide-to-shodan-the-search-engine-for-hackers-451b403f328f?source=rss------bug_bounty-5 | Shafayat Ahmed Alif | cheatsheet, shodan, cybersecurity, ethical-hacking, bug-bounty | 12-Nov-2024 |
| Exploiting Server-Side Template Injection (SSTI) with a Custom Exploit: PortSwigger Lab Walkthrough | https://medium.com/@0xA4zOo0/exploiting-server-side-template-injection-ssti-with-a-custom-exploit-portswigger-lab-walkthrough-a661d5c47001?source=rss------bug_bounty-5 | A Z O | bug-bounty, ssti, hacking | 12-Nov-2024 |
| Complete Guide to pentesting Web Applications on Ports 80 and 443 | https://medium.com/@verylazytech/complete-guide-to-securing-web-applications-on-ports-80-and-443-a123def0b82c?source=rss------bug_bounty-5 | Very Lazy Tech | owasp-top-10, web-application-security, bug-bounty, penetration-testing, web-security | 12-Nov-2024 |
| How I Hijacked an Abandoned Twitter Account and Why Broken Link Hijacking Matters | https://medium.com/@anonymousshetty2003/how-i-hijacked-an-abandoned-twitter-account-and-why-broken-link-hijacking-matters-0128e0f562c8?source=rss------bug_bounty-5 | Anonymousshetty | ethical-hacking, broken-link-hijacking, cybersecurity, bug-bounty | 12-Nov-2024 |
| How AI is Making Bug Bounties More Accessible for New Hackers | https://pointlessai.medium.com/how-ai-is-making-bug-bounties-more-accessible-for-new-hackers-726f9a058eac?source=rss------bug_bounty-5 | PointlessAI | bug-bounty-tips, ai, bug-bounty, vulnerability-management | 12-Nov-2024 |
| How I Discovered a Private Key Leak on a Company’s Subdomain | https://medium.com/@anonymousshetty2003/how-i-discovered-a-private-key-leak-on-a-companys-subdomain-929100e7a561?source=rss------bug_bounty-5 | Anonymousshetty | bug-bounty, cybersecurity, ethical-hacking | 12-Nov-2024 |
| Top Cybersecurity Tools Every Professional Should Know | https://medium.com/@paritoshblogs/top-cybersecurity-tools-every-professional-should-know-0aff34558518?source=rss------bug_bounty-5 | Paritosh | information-security, chatgpt, bug-bounty, cybersecurity, hacking | 12-Nov-2024 |
| North Korean Hackers Use Flutter Apps to Evade macOS Security | https://medium.com/@wiretor/north-korean-hackers-use-flutter-apps-to-evade-macos-security-e22221dd9696?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | pentesting, malware, bug-bounty, ransomware, hacking | 12-Nov-2024 |
| Massive Data Breach Affects Millions of Hot Topic Customers | https://medium.com/@wiretor/massive-data-breach-affects-millions-of-hot-topic-customers-b03fe562e0f7?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | pentesting, malware, bug-bounty, ransomware | 12-Nov-2024 |
| Form I-9 Compliance Data Breach Impacts Over 190,000 People | https://medium.com/@wiretor/form-i-9-compliance-data-breach-impacts-over-190-000-people-adee0a89694c?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, malware, hacking, bug-bounty, pentesting | 12-Nov-2024 |
| Finding more infromation about a email using a osint tool. | https://osintteam.blog/finding-more-infromation-about-a-email-using-a-osint-tool-d557a0579414?source=rss------bug_bounty-5 | loyalonlytoday | cybersecurity, osint, bug-bounty, hacking, osint-investigation | 12-Nov-2024 |
| ️♂️Recon For New Bug bounty Hunters — Short Story | https://sud-defcon.medium.com/%EF%B8%8F-%EF%B8%8Frecon-for-new-bug-bounty-hunters-short-story-2992e780fbbb?source=rss------bug_bounty-5 | Sudarshan Patel | reconnaissance, bug-bounty-tips, bug-bounty, recon, bug-bounty-writeup | 12-Nov-2024 |
| Hacking Knowledge Around The Corner. From Where To Learn Hacking Skills? | https://medium.com/meetcyber/hacking-knowledge-around-the-corner-c2a48214d052?source=rss------bug_bounty-5 | NnFace | cybersecurity, kali-linux, bug-bounty, hacking, knowledge | 12-Nov-2024 |
| Volt Typhoon Botnet Rebuilds After FBI Crackdown | https://medium.com/@wiretor/volt-typhoon-botnet-rebuilds-after-fbi-crackdown-e23a74459ff6?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | hacking, programming, malware, ransomeware, bug-bounty | 12-Nov-2024 |
| Extract full photos/videos database from any locked Google Pixel phone | https://medium.com/@rus1r105/extract-full-photos-videos-database-from-any-locked-google-pixel-phone-be6da35ad93d?source=rss------bug_bounty-5 | rus1r105 | cybersecurity, android, google-vrp, bug-bounty, writeup | 11-Nov-2024 |
| How I Found an HTML Injection in Email Vulnerability on Samsung, Leading to a $$$$ Payday | https://cybersecuritywriteups.com/how-an-html-injection-vulnerability-in-samsung-emails-led-to-a-payday-3dcfccc12a36?source=rss------bug_bounty-5 | Taha Diwan | bug-bounty, cybersecurity, ethical-hacking, penetration-testing, web-penetration-testing | 11-Nov-2024 |
| [2024 Thanksgiving] Security Technology Research Writing Activity | https://medium.com/@security.tecno/2024-thanksgiving-security-technology-research-writing-activity-325e4b0fd9c8?source=rss------bug_bounty-5 | TECNO Security | writing, research, bug-bounty, security | 11-Nov-2024 |
| Hacking Active Directory and Earn upto $30,000. | https://medium.com/@anandrishav2228/hacking-active-directory-and-earn-upto-30-000-9561858a3c8f?source=rss------bug_bounty-5 | Rishav anand | bug-bounty, active-directory, money, hacking, cybersecurity | 11-Nov-2024 |
| Recon JavaScript Files with Rarely Encountered Techniques | https://zucki.medium.com/recon-javascript-files-with-rarely-encountered-techniques-5882a3ad1955?source=rss------bug_bounty-5 | Marzucki | bug-bounty, automation, recon, automation-testing, javascript | 11-Nov-2024 |
| #Task 20 - HTTP Request Sumgling — Basics & Types -> Only for Bigners | https://medium.com/@bugbounty_learners/task-1-http-request-sumgling-basics-types-only-for-bigners-2157461dca3e?source=rss------bug_bounty-5 | bugbounty_learners | cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty, web-development | 11-Nov-2024 |
| GetSimpleCMS CSRF | Parol Dəyişdirmə Funksiyasında Tapdığım CSRF boşluğu | https://zeynalxan.medium.com/getsimplecms-csrf-parol-d%C9%99yi%C5%9Fdirm%C9%99-funksiyas%C4%B1nda-tapd%C4%B1%C4%9F%C4%B1m-csrf-bo%C5%9Flu%C4%9Fu-8786c125453e?source=rss------bug_bounty-5 | Zeynalxan Quliyev | csrf-attack, csrf, ato, bug-bounty, cybersecurity | 11-Nov-2024 |
| PRE-ACCOUNT TAKEOVER through Oauth misconfiguration on a mailing website | https://infosecwriteups.com/pre-account-takeover-through-misconfigured-oauth-on-a-mailing-website-b906a5c118e9?source=rss------bug_bounty-5 | Harish | cybersecurity, ethical-hacking, cyber-security-awareness, bug-bounty-tips, bug-bounty | 11-Nov-2024 |
| Jumping into Bug Bounty Automation | https://bitpanic.medium.com/jumping-into-bug-bounty-automation-4739abdb6d15?source=rss------bug_bounty-5 | Spectat0rguy | information-security, cybersecurity, bug-bounty, information-technology, infosec | 11-Nov-2024 |
| Won’t Fix Vulnerabilities in Google Colab | https://0xjin.medium.com/wont-fix-vulnerabilities-in-google-colab-fcd3b6581746?source=rss------bug_bounty-5 | 0xJin | bug-bounty, bug-bounty-writeup, google, bug-bounty-tips | 11-Nov-2024 |
| Exposing the Dark Side of Google Dorks: How I Extracted Millions of Emails. | https://pwndecoco.medium.com/exposing-the-dark-side-of-google-dorks-how-i-extracted-millions-of-emails-0fe0f7f6db8b?source=rss------bug_bounty-5 | Pwndec0c0 | hacking, cybersecurity, bug-bounty-writeup, bug-bounty-tips, bug-bounty | 11-Nov-2024 |
| Server-Side Template Injection in an Unknown Language with a Documented Exploit — SSTI… | https://medium.com/@rcxsecurity/server-side-template-injection-in-an-unknown-language-with-a-documented-exploit-ssti-de01a069b946?source=rss------bug_bounty-5 | Ryan G. Cox - The Cybersec Café | hacking, information-security, pentesting, bug-bounty, cybersecurity | 11-Nov-2024 |
| P4 bug’s and their POC steps | Part 7 | $Easy Money$ | https://medium.com/h7w/p4-bugs-and-their-poc-steps-part-7-easy-money-d7cb9270f539?source=rss------bug_bounty-5 | socalledhacker | infosec, hacking, cybersecurity, bug-bounty-tips, bug-bounty | 11-Nov-2024 |
| How I Found a Critical 9.8 Bug — Directory Listing leads to Critical P1 Exposure of PII and more | https://medium.com/@enigma_/how-i-found-a-critical-9-8-9c4d14d82e20?source=rss------bug_bounty-5 | enigma | owasp, bug-bounty, directory-listing, ethical-hacking, hacker | 10-Nov-2024 |
| Addressing OWASP Top 10 Vulnerabilities: Why You Need Wire Tor’s Pentesting Services | https://medium.com/@wiretor/addressing-owasp-top-10-vulnerabilities-why-you-need-wire-tors-pentesting-services-5d2f374c3f22?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | breached, hacking, usa, bug-bounty, malware | 10-Nov-2024 |
| How I was able to inject my malicious link in Email Confirmation Link ( Link Injection / Open… | https://infosecwriteups.com/how-i-able-to-inject-my-malicious-link-in-email-confirmation-link-link-injection-open-redirect-dbf95075f89c?source=rss------bug_bounty-5 | Abdul Rehman Parkar | cybersecurity, bug-bounty-writeup, infosec-write-ups, ethical-hacking, bug-bounty | 10-Nov-2024 |
| Mastering Reconnaissance: The Ultimate Guide for Bug Hunters (Part 1) | https://myselfakash20.medium.com/mastering-reconnaissance-the-ultimate-guide-for-bug-hunters-part-1-b91a2367ee65?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-writeup, bug-bounty, bug-bounty-tips, recon, bugbounty-writeup | 10-Nov-2024 |
| Week 1: Documenting My Journey as a Full-Time Bug Hunter | https://mokhansec.medium.com/week-1-documenting-my-journey-as-a-full-time-bug-hunter-fbe1bbefeb79?source=rss------bug_bounty-5 | Mohsin khan | bugs, bug-bounty-tips, bug-bounty-writeup, bug-bounty | 10-Nov-2024 |
| From P5(Informational)to Medium(P3) : How I was able to achieve it it in Dept of Defense VDP? | https://medium.com/@tirqwork1/from-p5-informational-to-medium-p3-how-i-was-able-to-achieve-it-it-in-dept-of-defense-vdp-76e5eda28b5a?source=rss------bug_bounty-5 | ARoy | us-dept-of-defense, data-protection, hackerone, bug-bounty, cybersecurity | 10-Nov-2024 |
| From System Administrator to Bug Bounty Hunter: A Journey into Web Security | https://medium.com/@zero_4583/from-system-administrator-to-bug-bounty-hunter-a-journey-into-web-security-9b37bb52dde2?source=rss------bug_bounty-5 | Nathan Vincent | app-security, learning-to-code-journey, bug-bounty, secure-coding | 10-Nov-2024 |
| How I was able to inject malicious link in Email Confirmation Link ( Link Injection / Open… | https://cybersecuritywriteups.com/how-i-able-to-inject-my-malicious-link-in-email-confirmation-link-link-injection-open-redirect-dbf95075f89c?source=rss------bug_bounty-5 | Abdul Rehman Parkar | cybersecurity, bug-bounty-writeup, infosec-write-ups, ethical-hacking, bug-bounty | 10-Nov-2024 |
| How a Unique Combination Opened the Door to an IDOR | https://infosecwriteups.com/how-a-unique-combination-opened-the-door-to-an-idor-f44a3efe51e8?source=rss------bug_bounty-5 | Supun Halangoda (Suppa) | cybersecurity, bug-bounty-writeup, bug-bounty-tips, secure-coding, bug-bounty | 10-Nov-2024 |
| POC — CVE-2024–10914 Command Injection Vulnerability in `name` parameter for D-Link NAS | https://medium.com/@verylazytech/poc-cve-2024-10914-command-injection-vulnerability-in-name-parameter-for-d-link-nas-194e70f68120?source=rss------bug_bounty-5 | Very Lazy Tech | command-injection, cybersecurity, cve-2024-10914, bug-bounty, remote-code-execution | 10-Nov-2024 |
| CRLF Injection Zero to Master | https://medium.com/@bugbounty_learners/crlf-injection-zero-to-master-17a93afc33a3?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-tips, bug-bounty-writeup, bug-bounty, software-development, web-development | 10-Nov-2024 |
| Possible subdomain takeovers gives me 1000 dollars | https://medium.com/lucky-vulnerabilities/possible-subdomain-takeovers-gives-me-1000-dollars-9f3ad682ddce?source=rss------bug_bounty-5 | Lucky Vulnerabilities | bug-bounty, bug-bounty-tips, bug-hunting, updates, news | 10-Nov-2024 |
| HackTheBox: Information Gathering | https://medium.com/@rodripadisec/hackthebox-information-gathering-7af3526f13f5?source=rss------bug_bounty-5 | pad1ryoshi | reconnaissance, web3, hackthebox-academy, hackthebox, bug-bounty | 10-Nov-2024 |
| Understanding Common Windows Commands and How Threat Actors Use Them: | https://medium.com/@wtrentond/understanding-common-windows-commands-and-how-threat-actors-use-them-34298408e163?source=rss------bug_bounty-5 | Trent W | tech, cybersecurity, microsoft, bug-bounty, technology | 10-Nov-2024 |
| Double Race Condition : Breaking Rules | https://sayedv2.medium.com/double-race-condition-breaking-rules-88850372afb8?source=rss------bug_bounty-5 | Mohamed Sayed | cybersecurity, bugbounty-writeup, race-condition, bugbounty-tips, bug-bounty | 10-Nov-2024 |
| Ethical Hacking — How It Helps Prevent Cyber Attacks | https://medium.com/@RocketMeUpCybersecurity/ethical-hacking-how-it-helps-prevent-cyber-attacks-41d3d791c7c9?source=rss------bug_bounty-5 | RocketMe Up Cybersecurity | ethical-hacking, bug-bounty, cyberattack, penetration-testing, vulnerability-assessment | 10-Nov-2024 |
| Hackers Evade Detection with New ZIP File Concatenation Technique! | https://medium.com/@wiretor/hackers-evade-detection-with-new-zip-file-concatenation-technique-3bd29544f96e?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransom, bug-bounty, hacking, pentesting, malware | 10-Nov-2024 |
| HackTheBox: Information Gathering | https://pad1ryoshi.medium.com/hackthebox-information-gathering-7af3526f13f5?source=rss------bug_bounty-5 | pad1ryoshi | reconnaissance, web3, hackthebox-academy, hackthebox, bug-bounty | 10-Nov-2024 |
| 30 Books To Learn H@acking | https://osintteam.blog/30-books-to-learn-h-acking-2911c57f148c?source=rss------bug_bounty-5 | Raunak Gupta Aka Biscuit | programming, bug-bounty, books, technology, hacking | 10-Nov-2024 |
| Understanding Common Windows Commands and How Threat Actors Use Them: | https://medium.com/@wtrentond/understanding-common-windows-commands-and-how-threat-actors-use-them-34298408e163?source=rss------bug_bounty-5 | Trent W | tech, artificial-intelligence, cybersecurity, bug-bounty, technology | 10-Nov-2024 |
| Possible subdomain takeovers gives me 1000 dollars | https://medium.com/lucky-vulnerabilities/possible-subdomain-takeovers-gives-me-1000-dollars-9f3ad682ddce?source=rss------bug_bounty-5 | Lucky Vulnerabilities | bug-bounty, bug-bounty-tips, bug-hunting, updates, news | 10-Nov-2024 |
| BugBounty — Mastering the Basics (along with Resources)[Part-3] | https://medium.com/@iabhipathak/bugbounty-mastering-the-basics-along-with-resources-part-3-1619f6854e20?source=rss------bug_bounty-5 | Abhinav Pathak | security, privacy, cybersecurity, hacking, bug-bounty | 09-Nov-2024 |
| Analyzing JavaScript Files for Retrieving Admin Credentials | https://medium.com/@abdullah12987654/analyzing-javascript-files-for-retrieving-admin-credentials-0c6f25ff507a?source=rss------bug_bounty-5 | Abdullah | web-vulnerabilities, pentesting, cyber-security-services, hacking, bug-bounty | 09-Nov-2024 |
| IDOR and Excessive Data Exposure in Mobile Application — The Tale of an IDOR # 02 | https://medium.com/@abdullah12987654/idor-and-excessive-data-exposure-in-mobile-application-9bab953ea2b6?source=rss------bug_bounty-5 | Abdullah | bug-bounty, idor-vulnerability, hacking, cyber-security-services, pentesting | 09-Nov-2024 |
| Username restrictions bypass on Hackerone program | https://medium.com/@bugbounty_learners/username-restrictions-bypass-on-hackerone-program-61f4c8ff8b44?source=rss------bug_bounty-5 | bugbounty_learners | bug-bounty-writeup, bug-bounty, bug-zero, bug-bounty-tips, bugs | 09-Nov-2024 |
| API Security Penetration Testing Checklist | https://infosecwriteups.com/api-security-testing-penetration-testing-checklist-bb2969906ec1?source=rss------bug_bounty-5 | Ajay Naik | infosec, information-security, information-technology, bug-bounty, cybersecurity | 09-Nov-2024 |
| how i found 3 open redirect bugs on hackerone public program? | https://doordiefordream.medium.com/how-i-found-3-open-redirect-bugs-on-hackerone-public-program-d6f75850996b?source=rss------bug_bounty-5 | balu bandi | ethical-hacking, hacking, cybersecurity, vulnerability, bug-bounty | 09-Nov-2024 |
| How I Accidentally Found a ‘Cache Magic Trick’ — aka Unauthenticated PURGE on Varnish (Hold My… | https://medium.com/@mayankmalaviya3/how-i-accidentally-found-a-cache-magic-trick-aka-unauthenticated-purge-on-varnish-hold-my-5e13e5056618?source=rss------bug_bounty-5 | Mayank Malaviya (Aiwolfie) | bug-bounty, unauthenticated-purge, penetration-testing, security, unauthenticated | 09-Nov-2024 |
| “Hack Smarter, Not Harder: Google Dorks for Fast Bug Hunting and Recon” | https://myselfakash20.medium.com/hack-smarter-not-harder-google-dorks-for-fast-bug-hunting-and-recon-3029a4004cfd?source=rss------bug_bounty-5 | Akash Ghosh | bug-bounty-tips, bugs, bug-bounty, bug-bounty-writeup | 09-Nov-2024 |
| John the Ripper in Cybersecurity | https://infosecwriteups.com/john-the-ripper-in-cybersecurity-46c8f5c3a99f?source=rss------bug_bounty-5 | Ajay Naik | cybersecurity-training, cybersecurity, bug-bounty, information-technology, penetration-testing | 09-Nov-2024 |
| Predicting Cyber Threats: Can We Use Threat Intelligence to Forecast Attacks Like Weather? | https://medium.com/@paritoshblogs/predicting-cyber-threats-can-we-use-threat-intelligence-to-forecast-attacks-like-weather-4f57175b25ec?source=rss------bug_bounty-5 | Paritosh | information-technology, bug-bounty, hacking, threat-intelligence, cybersecurity | 09-Nov-2024 |
| Critical Vulnerabilities in Aruba Access Points: What You Need to Know! | https://medium.com/@wiretor/critical-vulnerabilities-in-aruba-access-points-what-you-need-to-know-7053d6349bf1?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | pentesting, malware, bug-bounty, ransomware, hacking | 09-Nov-2024 |
| D-Link Exposes 60,000+ NAS Devices to Unpatched Critical Flaw | https://medium.com/@wiretor/d-link-exposes-60-000-nas-devices-to-unpatched-critical-flaw-c06b62cf67e9?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | ransomware, hacking, xss-attack, malware, bug-bounty | 09-Nov-2024 |
| Critical Veeam RCE Vulnerability Exploited in New Frag Ransomware Attacks | https://medium.com/@wiretor/critical-veeam-rce-vulnerability-exploited-in-new-frag-ransomware-attacks-ae75d32f6bb0?source=rss------bug_bounty-5 | WIRE TOR - The Ethical Hacking Services | bug-bounty, hacking, malware, ransomware, xss-attack | 09-Nov-2024 |
| Palo Alto Networks Warns of Potential PAN-OS RCE Vulnerability! ️ | |
