IntroductionContinue reading on Medium » (https://akashxak.medium.com/insecure-direct-object-reference-idor-in-a-government-portal-973758a23473?source=rss------bug_bounty-5)

Bug Hunting for Real: Tools, Tactics, and Truths No One Talks About

Let’s Skip the “Sign Up on HackerOne” TalkContinue reading on Medium »
Read more...

How I Reported My First Vulnerability
https://medium.com/@0x004sec/how-i-reported-my-first-vulnerability-b4504ed77ec5?source=rss------bug_bounty-5

Hello fellow hackers!Continue reading on Medium » (https://medium.com/@0x004sec/how-i-reported-my-first-vulnerability-b4504ed77ec5?source=rss------bug_bounty-5)

Found a bug? Get rewarded!
https://medium.com/@roma_k90/found-a-bug-get-rewarded-94a922aa8ff9?source=rss------bug_bounty-5

STON.fi has launched a Bug Bounty for its v2 smart contracts — with a massive $500,000 prize pool 💰Continue reading on Medium » (https://medium.com/@roma_k90/found-a-bug-get-rewarded-94a922aa8ff9?source=rss------bug_bounty-5)

🔍 Inside CVE-2025-24054: Purple Team Attack Breakdown
https://www.reddit.com/r/redteamsec/comments/1k6rh7x/inside_cve202524054_purple_team_attack_breakdown/

<!-- SC_OFF -->In this week’s episode of “The Weekly Purple Team,” we deep-dive into CVE-2025-24054, which can be exploited by unzipping or touching a library-ms file. Threat actors have actively used this exploit, which is pretty novel. Check it out! <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://youtu.be/d06oveNhIYo) [comments] (https://www.reddit.com/r/redteamsec/comments/1k6rh7x/inside_cve202524054_purple_team_attack_breakdown/)

Can anyone appreciate me a little, i just bypassed the window 11 defender
https://www.reddit.com/r/redteamsec/comments/1k6q97s/can_anyone_appreciate_me_a_little_i_just_bypassed/

submitted by /u/amberchalia (https://www.reddit.com/user/amberchalia)
[link] (https://youtu.be/EkTzv-vKpIE?si=_EyRD7iuj7rTO2Vm) [comments] (https://www.reddit.com/r/redteamsec/comments/1k6q97s/can_anyone_appreciate_me_a_little_i_just_bypassed/)

Bug Hunting for Real: Tools, Tactics, and Truths No One Talks About
https://ehteshamulhaq198.medium.com/bug-hunting-for-real-tools-tactics-and-truths-no-one-talks-about-661f6786d5b3?source=rss------bug_bounty-5

Let’s Skip the “Sign Up on HackerOne” TalkContinue reading on Medium » (https://ehteshamulhaq198.medium.com/bug-hunting-for-real-tools-tactics-and-truths-no-one-talks-about-661f6786d5b3?source=rss------bug_bounty-5)

Inject, Exploit, Repeat: Real-World Adventures in XSS

💀 Hello Hackers: A Midnight XSS You’ll Never ForgetContinue reading on Medium »
Read more...

Inject, Exploit, Repeat: Real-World Adventures in XSS
https://medium.com/@es0557533/inject-exploit-repeat-real-world-adventures-in-xss-a8fd8f7066c8?source=rss------bug_bounty-5

💀 Hello Hackers: A Midnight XSS You’ll Never ForgetContinue reading on Medium » (https://medium.com/@es0557533/inject-exploit-repeat-real-world-adventures-in-xss-a8fd8f7066c8?source=rss------bug_bounty-5)

How I Found phpinfo Exposure In telkomsigma.co.id

hi semua, kembali lagi. pada artikel ini saya akan membagikan kepada kalian bagaimana saya mendapatkan informasi sensitif dari situs…Continue reading on Medium »
Read more...

not debian
https://www.reddit.com/r/Pentesting/comments/1k75gt4/not_debian/

<!-- SC_OFF -->whats a os thats not debian (i cant get debian to work on my laptop) that i can use for pentesting im use to parrot but thats not a option rn <!-- SC_ON --> submitted by /u/Zulu843x (https://www.reddit.com/user/Zulu843x)
[link] (https://www.reddit.com/r/Pentesting/comments/1k75gt4/not_debian/) [comments] (https://www.reddit.com/r/Pentesting/comments/1k75gt4/not_debian/)

How to Find Hidden HackerOne & Bugcrowd Programs

Stop hunting bugs — discover private bounty programs instead!Continue reading on Medium »
Read more...