JWT, Meet Me Outside: How I Decoded, Re-Signed, and Owned the App
https://infosecwriteups.com/jwt-meet-me-outside-how-i-decoded-re-signed-and-owned-the-app-95791eabcf5d?source=rss------bug_bounty-5

Hey there!😁Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/jwt-meet-me-outside-how-i-decoded-re-signed-and-owned-the-app-95791eabcf5d?source=rss------bug_bounty-5)

Question for pentesters
https://www.reddit.com/r/Pentesting/comments/1k9o3si/question_for_pentesters/

<!-- SC_OFF -->I'd like to know which distro you use for your pentests ? Kali, parrot, Debian,...? Is it in a VM or as your main OS ? <!-- SC_ON --> submitted by /u/Adventurous_Day_6939 (https://www.reddit.com/user/Adventurous_Day_6939)
[link] (https://www.reddit.com/r/Pentesting/comments/1k9o3si/question_for_pentesters/) [comments] (https://www.reddit.com/r/Pentesting/comments/1k9o3si/question_for_pentesters/)

ISA/IEC 62443 Cybersecurity Certificate Program
https://www.reddit.com/r/Pentesting/comments/1k9pzkv/isaiec_62443_cybersecurity_certificate_program/

<!-- SC_OFF -->Hi ,
I am not sure this is the right forum or not to ask this question or not.
Could anybody please tell me about this certification (https://www.isa.org/certification/certificate-programs/isa-iec-62443-cybersecurity-certificate-program) ? Is this useful to pursue or not ? Thanks. <!-- SC_ON --> submitted by /u/babula2018 (https://www.reddit.com/user/babula2018)
[link] (https://www.reddit.com/r/Pentesting/comments/1k9pzkv/isaiec_62443_cybersecurity_certificate_program/) [comments] (https://www.reddit.com/r/Pentesting/comments/1k9pzkv/isaiec_62443_cybersecurity_certificate_program/)

Launching: Digital Footprint OSINT Tool – Track Social Presence, Discover Domains, Find Contacts
https://www.reddit.com/r/Pentesting/comments/1k9qa6d/launching_digital_footprint_osint_tool_track/

<!-- SC_OFF -->Hey everyone! If you're into cybersecurity, ethical hacking, OSINT (Open Source Intelligence), or just want to analyze someone's digital footprint — you're going to love this tool! 🔥 I'm excited to share a new open-source project I built:
Digital-Footprint-OSINT-Tool Github: https://github.com/Hamed233/Digital-Footprint-OSINT-Tool <!-- SC_ON --> submitted by /u/hamedessamdev (https://www.reddit.com/user/hamedessamdev)
[link] (https://www.reddit.com/r/Pentesting/comments/1k9qa6d/launching_digital_footprint_osint_tool_track/) [comments] (https://www.reddit.com/r/Pentesting/comments/1k9qa6d/launching_digital_footprint_osint_tool_track/)

GraphQL API hacking Series for bug hunters 01

Understanding GraphQL and Its Security ImplicationsContinue reading on Medium »
Read more...

JWT, Meet Me Outside: How I Decoded, Re-Signed, and Owned the App

Hey there!😁Continue reading on InfoSec Write-ups »
Read more...

How I Earned $8947 bounty for Remote Code Execution via a Hijacked GitHub Module

Continue reading on Medium »
Read more...

POC — CVE-2025–29306 FOXCMS /images/index.html Code Execution Vulnerability

OverviewContinue reading on Medium »
Read more...

How I Earned $8947 bounty for Remote Code Execution via a Hijacked GitHub Module
https://nvk0x.medium.com/how-i-earned-8947-bounty-for-remote-code-execution-via-a-hijacked-github-module-91c4a4b63255?source=rss------bug_bounty-5

Continue reading on Medium » (https://nvk0x.medium.com/how-i-earned-8947-bounty-for-remote-code-execution-via-a-hijacked-github-module-91c4a4b63255?source=rss------bug_bounty-5)

POC — CVE-2025–29306 FOXCMS /images/index.html Code Execution Vulnerability
https://medium.com/@verylazytech/poc-cve-2025-29306-foxcms-images-index-html-code-execution-vulnerability-0c4db3905fd0?source=rss------bug_bounty-5

OverviewContinue reading on Medium » (https://medium.com/@verylazytech/poc-cve-2025-29306-foxcms-images-index-html-code-execution-vulnerability-0c4db3905fd0?source=rss------bug_bounty-5)

Simple Tips for Bug Bounty Beginners: Content Spoofing via HTML Injection

NOTE: Make sure to test only on sites where it is allowed to test and carefully read and follow the guidelines for testing on the site.Continue reading on Medium »
Read more...

The $2500 bug: Remote Code Execution via Supply Chain Attack

Hey there!😇Continue reading on Medium »
Read more...

Exploiting a Referer Header for Open Redirect

Hello Everyone!Continue reading on Medium »
Read more...

I Hijacked Accounts in 10 Minutes (IDOR Bug)

How I Found a Critical IDOR ATO Exploit in HackerOne (2025)Continue reading on Medium »
Read more...

# Walkthrough: VulnHub Machine — Ted 1 (Full Root Access)

⚠️ Disclaimer: This write-up is created purely for educational purposes. The testing was performed in a controlled lab environment on a…Continue reading on Medium »
Read more...