Insecure by Design: How a Mobile API Let Me Reset Anyone’s Password With Just a Phone Number

Hey there!😁Continue reading on Medium »
Read more...

GraphQL for the next API Penetration Testing
https://0xjar.medium.com/graphql-for-the-next-api-penetration-test-0922b3adef58?source=rss------bug_bounty-5

In this article, I will share a guide that may be useful for you wherever you are. May you be blessed with protection and good health.Continue reading on Medium » (https://0xjar.medium.com/graphql-for-the-next-api-penetration-test-0922b3adef58?source=rss------bug_bounty-5)

How to use “Caido Workflows” to scan for anything

How to build Caido passive workflows to scan HTTP requests & responses…Continue reading on Medium »
Read more...

From File Upload to Shell: A Deep Dive into RCE Exploits

🧠IntroductionContinue reading on Medium »
Read more...

️‍♂️ How I Landed Two P1s and My First Bug Bounty

Back in May 2025, I officially stepped into the world of bug bounty. I had been studying cybersecurity for a while but hadn’t actively…Continue reading on Medium »
Read more...

Public APIs vs. Private APIs: A Bug Hunter’s Perspective

Application Programming Interfaces (APIs) are the backbone of modern software architecture, enabling different systems to communicate and…Continue reading on Medium »
Read more...

SQL injection vulnerability in WHERE clause allowing retrieval of hidden data [ES] [PortSwigger]

La SQL Injection es una vulnerabilidad web que ocurre cuando una aplicación permite que el usuario final manipule entradas que forman…Continue reading on Medium »
Read more...

ShaktiCTF25

السلام عليكم ورحمه الله وربركاته / اهلا بيكم في:Continue reading on Medium »
Read more...

N0aziXss Origin Recon v3.1: The Ultimate CDN Bypass & Infrastructure Mapping Tool

Subtitle: How We Built a Military-Grade Reconnaissance Engine with Enhanced SSL/TLS and Error HandlingContinue reading on Medium »
Read more...

How to use “Caido Workflows” to scan for anything
https://infosecwriteups.com/how-to-use-caido-workflows-to-scan-for-anything-07eed72ba06a?source=rss------bug_bounty-5

How to build Caido passive workflows to scan HTTP requests & responses…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-to-use-caido-workflows-to-scan-for-anything-07eed72ba06a?source=rss------bug_bounty-5)

From File Upload to Shell: A Deep Dive into RCE Exploits
https://medium.com/@digant_15/from-file-upload-to-full-shell-a-deep-dive-into-rce-exploits-9eee5af22242?source=rss------bug_bounty-5

🧠IntroductionContinue reading on Medium » (https://medium.com/@digant_15/from-file-upload-to-full-shell-a-deep-dive-into-rce-exploits-9eee5af22242?source=rss------bug_bounty-5)

Anyone cleared CPTS need help
https://www.reddit.com/r/Pentesting/comments/1m9mb5x/anyone_cleared_cpts_need_help/

<!-- SC_OFF -->Hi, if anyone cleared please ping me I need some help <!-- SC_ON --> submitted by /u/gun_sh0 (https://www.reddit.com/user/gun_sh0)
[link] (https://www.reddit.com/r/Pentesting/comments/1m9mb5x/anyone_cleared_cpts_need_help/) [comments] (https://www.reddit.com/r/Pentesting/comments/1m9mb5x/anyone_cleared_cpts_need_help/)

Hacking File Uploads — Exploiting PNG-only Upload Restrictions

In this post, we’ll walk through various attack techniques to exploit a file upload functionality that only accepts .png files. On the…Continue reading on Medium »
Read more...

“IDOR Attacks Unmasked: Code Exploits and Real-World Breaches”

Hey, I’m Aman Sharma, a cybersecurity enthusiast. While testing web apps, I discovered how IDOR (Insecure Direct Object Reference) can…Continue reading on InfoSec Write-ups »
Read more...

Hacking File Uploads — Exploiting PNG-only Upload Restrictions
https://medium.com/@smabuhaider/in-this-post-well-walk-through-various-attack-techniques-to-exploit-a-file-upload-functionality-e3f487e121fd?source=rss------bug_bounty-5

In this post, we’ll walk through various attack techniques to exploit a file upload functionality that only accepts .png files. On the…Continue reading on Medium » (https://medium.com/@smabuhaider/in-this-post-well-walk-through-various-attack-techniques-to-exploit-a-file-upload-functionality-e3f487e121fd?source=rss------bug_bounty-5)