Exploiting XSS to Bypass CSRF Defenses: Change Victim’s Email

Learn how a stored XSS flaw can be weaponized to defeat CSRF defenses and perform unauthorized actions on behalf of users.Continue reading on InfoSec Write-ups »
Read more...

Bug Bounty Methodology for Finding Bugs Easily

Welcome, bug bounty hunters! 🕵️‍♂️ Whether you’re just starting out or looking to sharpen your methodology, this guide will help you…Continue reading on InfoSec Write-ups »
Read more...

Credential Stuffing: How One Stolen Password Can Unlock Thousands of Accounts

30-Second RundownContinue reading on Medium »
Read more...

How I Bypassed a Strict WAF Using SQL Injection Tricks
https://infosecwriteups.com/how-i-bypassed-a-strict-waf-using-sql-injection-tricks-b0a500b712d8?source=rss------bug_bounty-5

The Silent SQL Injection Cloudflare Almost Hid From MeContinue reading on InfoSec Write-ups » (https://infosecwriteups.com/how-i-bypassed-a-strict-waf-using-sql-injection-tricks-b0a500b712d8?source=rss------bug_bounty-5)

Bifrost Launches $500,000 Bug Bounty with Immunefi — One Critical Find Could Change Everything

In DeFi, a single overlooked flaw can trigger millions in losses. Just ask Hydration — they recently paid a $500,000 whitehat bounty to…Continue reading on Medium »
Read more...

How I Became a University’s Worst Cybersecurity Nightmare And Forced an Upgrade

Sometimes, all it takes is one recon to unravel an entire infrastructure.Continue reading on Medium »
Read more...

Dork to find Laravel Debug Mode Enabled

Advanced FOFA & ZoomEye Dorking for HackersContinue reading on MeetCyber »
Read more...

Account Takeover via Email Injection Tricks

Sometimes, you don’t need an RCE or SQLi — just a weak email parser. Here’s a sneaky way to hijack accounts when signup/login flows have…Continue reading on Medium »
Read more...

From Zero to Hero

Our First Steps into Bug Bounty HuntingContinue reading on Medium »
Read more...

Become a hacker — 101, A list of resources

A massive list of resources to help you get into the wonderful world of ethical hacking …Continue reading on Medium »
Read more...

HTTP Request Smuggling: From Basics to Bounty

IntroductionContinue reading on Medium »
Read more...

HTTP/1.1 Its No Longer Safe

Millions of websites are still at risk because HTTP/1.1 can get confused about where one request ends and the next begins. Hackers are ….Continue reading on Medium »
Read more...

Business Logic Flaw in Invitation Feature Allows Full Account Takeover

📌 PendahuluanContinue reading on Medium »
Read more...

How I Chained Rate Limiting to Earn a Spot in Apple’s Hall of Fame

IntroductionContinue reading on Medium »
Read more...

How I Found a Logout Flaw That Kept Sessions Alive — A Real-World Bug Bounty Lesson

A powerful reminder that in bug bounty hunting, scope is everything.Continue reading on Medium »
Read more...

Dork to find Laravel Debug Mode Enabled
https://medium.com/meetcyber/dork-to-find-laravel-debug-mode-enabled-253d1d1e97c8?source=rss------bug_bounty-5

Advanced FOFA & ZoomEye Dorking for HackersContinue reading on MeetCyber » (https://medium.com/meetcyber/dork-to-find-laravel-debug-mode-enabled-253d1d1e97c8?source=rss------bug_bounty-5)

Account Takeover via Email Injection Tricks
https://medium.com/@7error/account-takeover-via-email-injection-tricks-db7701f3cddd?source=rss------bug_bounty-5

Sometimes, you don’t need an RCE or SQLi — just a weak email parser.
Here’s a sneaky way to hijack accounts when signup/login flows have…Continue reading on Medium » (https://medium.com/@7error/account-takeover-via-email-injection-tricks-db7701f3cddd?source=rss------bug_bounty-5)