Discovering SQLi Vulnerabilities Through Deeper Analysis

During a deeper exploration of the site I mentioned in my recent Medium blog, I discovered not only XSS vulnerabilities but also SQLi…Continue reading on Medium »
Read more...

Strategies to Maximize Your Earnings on Bug Bounty Platforms

Unlock the secrets to earning top bounties with these proven strategies for bug hunters.Continue reading on Medium »
Read more...

Pentester in USA
https://www.reddit.com/r/Pentesting/comments/1hu92fd/pentester_in_usa/

<!-- SC_OFF -->Hi Redditors, i have 2 years of experience as a pentester and hold BSCP, OSCP, OSWA, and OSWP certifications. I’m planning to obtain the OSWE certification this year. I am a EU citizen and eager to take the next step in my career by working in the United States. I have the ability to reside in the US directly, which should make the relocation process smoother. However, I’m curious about the process of obtaining a visa and how employers typically handle it. For those of you who’ve successfully transitioned to working in the US in the cybersecurity field, I’d love to hear about your experiences! How did you navigate the visa process? What challenges did you encounter, and how did you overcome them? Were there any specific steps or preparations that helped you secure a position? I’d greatly appreciate any advice, tips, or success stories that could guide me in achieving this goal! :) <!-- SC_ON --> submitted by /u/Radiant_Eye122 (https://www.reddit.com/user/Radiant_Eye122)
[link] (https://www.reddit.com/r/Pentesting/comments/1hu92fd/pentester_in_usa/) [comments] (https://www.reddit.com/r/Pentesting/comments/1hu92fd/pentester_in_usa/)

Account Deletion Flaw Exposes Chats, Researcher Gets $1,000 (5/30DAYS)

Uncovering the Chat Privacy Vulnerability and How It Was FixedContinue reading on Medium »
Read more...

Discovering SQLi Vulnerabilities Through Deeper Analysis
https://medium.com/@erkankavas/discovering-sqli-vulnerabilities-through-deeper-analysis-4e305dfbc181?source=rss------bug_bounty-5

During a deeper exploration of the site I mentioned in my recent Medium blog, I discovered not only XSS vulnerabilities but also SQLi…Continue reading on Medium » (https://medium.com/@erkankavas/discovering-sqli-vulnerabilities-through-deeper-analysis-4e305dfbc181?source=rss------bug_bounty-5)

Strategies to Maximize Your Earnings on Bug Bounty Platforms
https://bitpanic.medium.com/strategies-to-maximize-your-earnings-on-bug-bounty-platforms-6053aaf0a781?source=rss------bug_bounty-5

Unlock the secrets to earning top bounties with these proven strategies for bug hunters.Continue reading on Medium » (https://bitpanic.medium.com/strategies-to-maximize-your-earnings-on-bug-bounty-platforms-6053aaf0a781?source=rss------bug_bounty-5)

Account Deletion Flaw Exposes Chats, Researcher Gets $1,000 (5/30DAYS)
https://medium.com/@zerodaystories/account-deletion-flaw-exposes-chats-researcher-gets-1-000-5-30days-d51245c30c65?source=rss------bug_bounty-5

Uncovering the Chat Privacy Vulnerability and How It Was FixedContinue reading on Medium » (https://medium.com/@zerodaystories/account-deletion-flaw-exposes-chats-researcher-gets-1-000-5-30days-d51245c30c65?source=rss------bug_bounty-5)

CVE-2025–0226: Information Disclosure Vulnerability in Tsinghua Unigroup Electronic Archives…
https://medium.com/@wiretor/cve-2025-0226-information-disclosure-vulnerability-in-tsinghua-unigroup-electronic-archives-cf44084fc78c?source=rss------bug_bounty-5

WIRE TOR — The Ethical Hacking ServicesContinue reading on Medium » (https://medium.com/@wiretor/cve-2025-0226-information-disclosure-vulnerability-in-tsinghua-unigroup-electronic-archives-cf44084fc78c?source=rss------bug_bounty-5)

CVE-2025–0224: Provision-ISR SH-4050A-2 Server.js Information Disclosure
https://medium.com/@wiretor/cve-2025-0224-provision-isr-sh-4050a-2-server-js-information-disclosure-42df13998a66?source=rss------bug_bounty-5

WIRE TOR — The Ethical Hacking ServicesContinue reading on Medium » (https://medium.com/@wiretor/cve-2025-0224-provision-isr-sh-4050a-2-server-js-information-disclosure-42df13998a66?source=rss------bug_bounty-5)

Would anyone be interested in buying an OSWA Course + Exam Voucher voucher at a discount?
https://www.reddit.com/r/Pentesting/comments/1huedkl/would_anyone_be_interested_in_buying_an_oswa/

<!-- SC_OFF -->(i realize how this might sound like a scam but bear with me here) Hi, you may have seen this post already if you frequent r/oscp (https://www.reddit.com/r/oscp) but I'm currently on the lookout for a buyer for the OSWA course (90 day lab) + exam voucher, worth $1649 on the offsec website. We recently won this as a prize in a Hackathon [well technically, we were forced to take it :( ] but neither me nor my team members are interested in pentesting/cybersec so were hoping to sell it to someone who could truly benefit from it. Here are some common doubts you may have - 1) Is this legal? Yes it is, we have received an okay from the sponsor that its fine to resell this. Technically, it’s not a "voucher" but rather something transferable to a specific email address. 2) How much of a discount are we talking about? This is negotiable, but were hoping for something in the 200-300$ range, we might go lower though so feel free to shoot a dm. 3) What's the expiry We were told that the course needs to be started within 6 months, so June 2025. Once its been started it lasts for 90 days. 4) How can i make sure that you won't scam me? We were thinking of using paypal since it has an inbuilt purchase protection mechanism but if that's not enough, we're also open to using an escrow service. <!-- SC_ON --> submitted by /u/Moltenlava5 (https://www.reddit.com/user/Moltenlava5)
[link] (https://www.reddit.com/r/Pentesting/comments/1huedkl/would_anyone_be_interested_in_buying_an_oswa/) [comments] (https://www.reddit.com/r/Pentesting/comments/1huedkl/would_anyone_be_interested_in_buying_an_oswa/)

CVE-2025–0226: Information Disclosure Vulnerability in Tsinghua Unigroup Electronic Archives…

WIRE TOR — The Ethical Hacking ServicesContinue reading on Medium »
Read more...