How I Found a Critical Bug in My First 24 Hours

A Beginner’s Guide to Finding Critical Bugs FastContinue reading on Medium »
Read more...

[03]. I received $200 from Mozilla for a simple bypass

Hackerone: https://hackerone.com/yoyomiskiContinue reading on Medium »
Read more...

Bug Bounty Entry: Getting Started with Platforms like HackerOne and Bugcrowd
https://rafalw3bcraft.medium.com/bug-bounty-entry-getting-started-with-platforms-like-hackerone-and-bugcrowd-849ffb8ba046?source=rss------bug_bounty-5

In the rapidly evolving digital landscape, cyber threats loom large, and organizations are increasingly relying on proactive defense…Continue reading on Medium » (https://rafalw3bcraft.medium.com/bug-bounty-entry-getting-started-with-platforms-like-hackerone-and-bugcrowd-849ffb8ba046?source=rss------bug_bounty-5)

How I could Takeover any Account by Bypassing OTP Rate Limits
https://medium.com/@anonymousshetty2003/how-i-could-takeover-any-account-by-bypassing-otp-rate-limits-1155d616d947?source=rss------bug_bounty-5

Every penetration tester dreams of finding that one flaw that flips a security model upside down.
 In my recent assessment, I stumbled…Continue reading on Medium » (https://medium.com/@anonymousshetty2003/how-i-could-takeover-any-account-by-bypassing-otp-rate-limits-1155d616d947?source=rss------bug_bounty-5)

The 3 Best Tools for Bug Bounty / Pentesting
https://medium.com/@dr_1n-ctrl/the-3-best-tools-for-bug-bounty-pentesting-915e95686e6f?source=rss------bug_bounty-5

There are lots of web application security tools. A lot of these tools are not being used to their fullest potential by bug hunters…Continue reading on Medium » (https://medium.com/@dr_1n-ctrl/the-3-best-tools-for-bug-bounty-pentesting-915e95686e6f?source=rss------bug_bounty-5)

How a Simple Rate Limit Issue Earned Me €500

Hey everyone,Continue reading on Medium »
Read more...

Changing Email Despite UI Restriction

Ever thought a simple disabled input field could be hiding a real vulnerability? It all started with a greyed-out email field, which I…Continue reading on Medium »
Read more...

The Bug that made me a Bounty in only a Few Minutes

Some security flaws are so simple that almost anyone can grasp them with minimal explanation. The problem is that these common weaknesses…Continue reading on Medium »
Read more...

From Curiosity to Critical: Uncovering Chained Vulnerabilities in a Private Web App Pentest

Sometimes, the difference between a standard pentest and a high-impact security discovery is simply… not stopping too early.Continue reading on Medium »
Read more...

“Day 9: Cloud Heist Unlocked — How I Discovered a $100 AWS Vulnerability (Ethically)”

A White Hat’s Journey Through Lambda Misconfigurations & IAM DangersContinue reading on InfoSec Write-ups »
Read more...

Bug Bounty: Information Disclosure — Leaks, Logs & Loose Ends

“Information is power. If you control the flow of data, you control everything.”Continue reading on Medium »
Read more...

Your Website’s Silent Guardians: A Deep Dive into Security Headers

Security headers are more than just a technical detail — they’re the silent guardians that protect your website and your users’ data from…Continue reading on Medium »
Read more...

From Pre-Account Takeover to Full Account Takeover using Google OAuth

“بِسْمِ اللَّهِ، وَالْحَمْدُ لِلَّهِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى رَسُولِ اللَّهِ، اللَّهُمَّ عَلِّمْنَا مَا يَنْفَعُنَا، وَانْفَعْنَا…Continue reading on Medium »
Read more...

Stop Wasting Time! The Secret Method to Find Exploits in Minutes

✨ Free Link in the first commentContinue reading on Medium »
Read more...

Informational Finding #1: Clickjacking on Non-Sensitive Action

OverviewContinue reading on Medium »
Read more...

Hacking Flutter apps: Static, dynamic and beyond

Flutter is Google’s cross-platform app framework that lets developers write apps in Dart and ship them to Android, iOS, web, and desktop…Continue reading on Medium »
Read more...

From Curiosity to Critical: Uncovering Chained Vulnerabilities in a Private Web App Pentest
https://medium.com/@samruthsriram/from-curiosity-to-critical-uncovering-chained-vulnerabilities-in-a-private-web-app-pentest-febdc60a19ce?source=rss------bug_bounty-5

Sometimes, the difference between a standard pentest and a high-impact security discovery is simply… not stopping too early.Continue reading on Medium » (https://medium.com/@samruthsriram/from-curiosity-to-critical-uncovering-chained-vulnerabilities-in-a-private-web-app-pentest-febdc60a19ce?source=rss------bug_bounty-5)