By Danny Robinson and Rotem Bar

Collection of methodology and test case for various web vulnerabilities. - KathanP19/HowToHunt

Hi People, Yesterday I was hunting on one application and got 5 different ATO’S and even without user interaction in a single application…

Bug Bounty: Leak of internal Facebook documents

Recon While browsing Starbucks Singapore, I noticed a page loaded with content from a 3rd party site. Let’s call this site example.com in order not to disclose it. When I did some research on this site, I saw the same login page on card.starbucks.com.sg in…

Hi Info sec community

TL;DR: This is how I was able to exploit a HTTP Request Smuggling in a Mobile Device Management (MDM) servers and send any MDM command to…

Between the period of July 6th to October 6th myself, Brett Buerhaus, Ben Sadeghipour, Samuel Erb, and Tanner Barnes worked together and hacked on the Apple bug bounty program.

Hi Folks! hope you all doing good so I am back with another amazing way of bypassing the WAF which is blocking me from weaponizing the XSS…

Intercepting traffic on iOS13 in Burp Suite, Find SQL injections (command combo), Get scope of Bugcrowd programs in CLI, GraphQL notes for beginners, Chaining file uploads with other vulns, GitHub dorks for AWS, Jira, Okta .. secrets, Simple reflected XSS…

403 to RCE in XAMPP
Some of the best advice I was ever given at how to become more successful at vulnerability discovery is to always try and dig a little deeper. Whether you are a penetration tester, red teamer, or bug bounty hunter, this advice has always…

Bounty Thursdays is an independent show covering whats going on in the Bug Bounty, web app penetration testing, appsec space, covering news, life & community.

Get all the links mentioned in this video by signing up to the newsletter over at https://stokfredrik.com…

$5K for Rest API Key.

How to access to company without being part of it with google oauth, with your gmail account.. [it only works if the company has a misconfiguration!] #bugbountytips #bugbounty

Status[+]:Duplicate