Hello hackers! I hope you’re enjoying your good old days of bug hunting. Today, I’m excited to share a test case that helped me secure a…Continue reading on Medium » (https://medium.com/@swaroopvenkat828/from-oos-getting-bounty-improper-access-control-to-create-an-commentor-account-on-the-application-027b517928bb?source=rss------bug_bounty-5)

From oos — getting bounty Improper Access Control to create an commentor account on the application.

Hello hackers! I hope you’re enjoying your good old days of bug hunting. Today, I’m excited to share a test case that helped me secure a…Continue reading on Medium »
Read more...

Day 27 of 30 Day — 30 Vulnerabilities | Server-Side Template Injection (SSTI)

Day 27: Mastering Server-Side Template Injection (SSTI) — Essential Tricks & Techniques Based on Personal Experience and Valuable POCsContinue reading on Medium »
Read more...

P4 Bugs and POC | Part 7

Hi everyone! 👋 I’m Abhijeet Kumawat — a passionate bug bounty hunter and security researcher who loves exploring and sharing knowledge…Continue reading on Medium »
Read more...

How I Found PII at NASA Using Google Dorking

Continue reading on Medium »
Read more...

Missing SPF BUG HUNTING

SPF (Sender Policy Framework) is an email authentication protocol designed to detect and prevent email spoofing. It allows the owner of a…Continue reading on Medium »
Read more...

Bypassing API Authentication: Exploiting Token Reuse and Expiry

API authentication vulnerabilities present a lucrative opportunity for ethical hackers and bug bounty hunters. One of the most overlooked…Continue reading on Medium »
Read more...

Overview of PDF potential leaks: Awareness about preventing informations leaks via PDFs
https://www.reddit.com/r/redteamsec/comments/1huqjvy/overview_of_pdf_potential_leaks_awareness_about/

submitted by /u/Party_Wolf6604 (https://www.reddit.com/user/Party_Wolf6604)
[link] (https://www.youtube.com/live/hncHOnppwl8) [comments] (https://www.reddit.com/r/redteamsec/comments/1huqjvy/overview_of_pdf_potential_leaks_awareness_about/)

Day 27 of 30 Day — 30 Vulnerabilities | Server-Side Template Injection (SSTI)
https://it4chis3c.medium.com/day-27-of-30-day-30-vulnerabilities-server-side-template-injection-ssti-12f933587800?source=rss------bug_bounty-5

Day 27: Mastering Server-Side Template Injection (SSTI) — Essential Tricks & Techniques Based on Personal Experience and Valuable POCsContinue reading on Medium » (https://it4chis3c.medium.com/day-27-of-30-day-30-vulnerabilities-server-side-template-injection-ssti-12f933587800?source=rss------bug_bounty-5)

P4 Bugs and POC | Part 7
https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-7-a379f057ba96?source=rss------bug_bounty-5

Hi everyone!
👋 I’m Abhijeet Kumawat — a passionate bug bounty hunter and security researcher who loves exploring and sharing knowledge…Continue reading on Medium » (https://medium.com/@kumawatabhijeet2002/p4-bugs-and-poc-part-7-a379f057ba96?source=rss------bug_bounty-5)

How I Found PII at NASA Using Google Dorking
https://medium.com/@salaheddine_kalada/how-i-found-pii-at-nasa-using-google-dorking-6447a89decc7?source=rss------bug_bounty-5

Continue reading on Medium » (https://medium.com/@salaheddine_kalada/how-i-found-pii-at-nasa-using-google-dorking-6447a89decc7?source=rss------bug_bounty-5)

Missing SPF BUG HUNTING
https://medium.com/@cybertips96/missing-spf-bug-hunting-121294c9572e?source=rss------bug_bounty-5

SPF (Sender Policy Framework) is an email authentication protocol designed to detect and prevent email spoofing. It allows the owner of a…Continue reading on Medium » (https://medium.com/@cybertips96/missing-spf-bug-hunting-121294c9572e?source=rss------bug_bounty-5)

Bypassing API Authentication: Exploiting Token Reuse and Expiry
https://medium.com/@bootstrapsecurity/bypassing-api-authentication-exploiting-token-reuse-and-expiry-0432e7689659?source=rss------bug_bounty-5

API authentication vulnerabilities present a lucrative opportunity for ethical hackers and bug bounty hunters. One of the most overlooked…Continue reading on Medium » (https://medium.com/@bootstrapsecurity/bypassing-api-authentication-exploiting-token-reuse-and-expiry-0432e7689659?source=rss------bug_bounty-5)

Frontrunning Vulnerability: What It Is, How to Exploit, Prevent, and Mitigate It

FREE ARTICLEContinue reading on InfoSec Write-ups »
Read more...

Chrome Extension Hacked: - A Wake-Up Call for Users.

A new attack campaign has recently rocked the world of Chrome browser extensions, leading to a significant security breach. At least “35…Continue reading on Medium »
Read more...