CVE-2025–6554: Google Chrome Zero-Day Caused by Type Confusion in V8 Engine

Google just released a security update for zero-day vulnerability in its Google Chrome browser which is tracked as CVE-2025-6554.Continue reading on InfoSec Write-ups »
Read more...

Why Does My Meterpreter Payload Contain ApacheBench Strings? A Peek Inside msfvenom.exe

📌 IntroductionContinue reading on Medium »
Read more...

How I Made $20K+ From Broken Link Hijacking on GitHub Repos
https://infosecwriteups.com/how-i-made-20k-from-broken-link-hijacking-on-github-repos-67d8917912f7?source=rss------bug_bounty-5

Everyone was scanning websites. I focused on GitHub repos — and built a Bash pipeline that helped me uncover broken links others missed.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-made-20k-from-broken-link-hijacking-on-github-repos-67d8917912f7?source=rss------bug_bounty-5)

How I Found a Critical IDOR in Indian Railways Corporate Booking Portal Exposing Millions of Users…
https://infosecwriteups.com/how-i-found-a-critical-idor-in-indian-railways-corporate-booking-portal-exposing-millions-of-users-41fdd2145efe?source=rss------bug_bounty-5

A step-by-step breakdown of how a simple IDOR vulnerability exposed confidential personal details, allowed unauthorized feedback…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-found-a-critical-idor-in-indian-railways-corporate-booking-portal-exposing-millions-of-users-41fdd2145efe?source=rss------bug_bounty-5)

$13,950 Bounty: Exploiting GitLab Integrations for Full XSS
https://infosecwriteups.com/13-950-bounty-exploiting-gitlab-integrations-for-full-xss-19275a030c2b?source=rss------bug_bounty-5

Exploiting a Safe-looking API Response to Trigger Full XSS in Self-Hosted GitLab Instances Lacking CSPContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/13-950-bounty-exploiting-gitlab-integrations-for-full-xss-19275a030c2b?source=rss------bug_bounty-5)

CVE-2025–6554: Google Chrome Zero-Day Caused by Type Confusion in V8 Engine
https://infosecwriteups.com/cve-2025-6554-google-chrome-zero-day-caused-by-type-confusion-in-v8-engine-417e1eab2f22?source=rss------bug_bounty-5

Google just released a security update for zero-day vulnerability in its Google Chrome browser which is tracked as CVE-2025-6554.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/cve-2025-6554-google-chrome-zero-day-caused-by-type-confusion-in-v8-engine-417e1eab2f22?source=rss------bug_bounty-5)

Why Does My Meterpreter Payload Contain ApacheBench Strings? A Peek Inside msfvenom.exe
https://medium.com/@figurx/why-does-my-meterpreter-payload-contain-apachebench-strings-a-peek-inside-msfvenom-exe-6b81c0f8237a?source=rss------bug_bounty-5

📌 IntroductionContinue reading on Medium » (https://medium.com/@figurx/why-does-my-meterpreter-payload-contain-apachebench-strings-a-peek-inside-msfvenom-exe-6b81c0f8237a?source=rss------bug_bounty-5)

Just Released: My Advanced Web-Based Nmap Scanner — Open Source on GitHub!

🙏 Special ThanksContinue reading on Medium »
Read more...

Crashing with Clues: How Improper Error Handling Leaks Secrets

👋 IntroductionContinue reading on Medium »
Read more...

Why Recon Alone Won’t Make You a Top Bug Hunter (My 2025 Reality Check)

IntroductionContinue reading on InfoSec Write-ups »
Read more...

$ Don’t Leave Money on the Table: My Automated Hunt for $50-$500 Info Disclosure Bugs ️‍♂️

Let’s be honest: we all dream of the big RCE. But while you’re chasing that unicorn, there’s a steady stream of smaller, often overlooked…Continue reading on InfoSec Write-ups »
Read more...