Hacking Articles Tips Tricks Videos Tutorials

One “Harmless” Parameter, Full Account Takeover — My Favorite Bug Bounty Find

Hey there!😁Continue reading on InfoSec Write-ups »
Read more...

Medium

🎯 One “Harmless” Parameter, Full Account Takeover — My Favorite Bug Bounty Find

Hey there!😁

1 view07:53

Hacking Articles Tips Tricks Videos Tutorials

The phpinfo() Page That Shouldn’t Have Been There — And How It Exposed NykaaMan’s Internal…

There’s a specific kind of vulnerability that feels almost nostalgic. Something from the early days of PHP. Something every pentester…Continue reading on Medium »
Read more...

Medium

🧪 The phpinfo() Page That Shouldn’t Have Been There — And How It Exposed NykaaMan’s Internal Server Details

There’s a specific kind of vulnerability that feels almost nostalgic. Something from the early days of PHP. Something every pentester…

1 view09:04

Hacking Articles Tips Tricks Videos Tutorials

The Open Redirect That Could Turn a Trusted URL Into a Weapon — A Bug Hunting Story

Some vulnerabilities feel small at first glance — almost too simple to matter.Continue reading on Medium »
Read more...

Medium

🔀 The Open Redirect That Could Turn a Trusted URL Into a Weapon — A Bug Hunting Story

Some vulnerabilities feel small at first glance — almost too simple to matter.

1 view09:04

Hacking Articles Tips Tricks Videos Tutorials

What's a goldmine github project you found?
https://www.reddit.com/r/Pentesting/comments/1pqfq1x/whats_a_goldmine_github_project_you_found/

submitted by /u/Minge_Ninja420 (https://www.reddit.com/user/Minge_Ninja420)
[link] (https://www.reddit.com/r/Pentesting/comments/1pqfq1x/whats_a_goldmine_github_project_you_found/) [comments] (https://www.reddit.com/r/Pentesting/comments/1pqfq1x/whats_a_goldmine_github_project_you_found/)

1 view09:53

Hacking Articles Tips Tricks Videos Tutorials

CVE-2025–20393 (Cisco AsyncOS Zero-Day)

Origination:- Cyber LeelawatContinue reading on Medium »
Read more...

Medium

CVE-2025–20393 (Cisco AsyncOS Zero-Day)

Origination:- Cyber Leelawat

1 view11:11

Hacking Articles Tips Tricks Videos Tutorials

How I Found a $8,560 Password Reset Bug

How a Hidden API Endpoint Allowed an $8,560 Authentication Bypass and Full Account Takeover (A Bug Bounty Case Study)Continue reading on Medium »
Read more...

Medium

How I Found a $8,560 Password Reset Bug

How a Hidden API Endpoint Allowed an $8,560 Authentication Bypass and Full Account Takeover (A Bug Bounty Case Study)

1 view12:41

Hacking Articles Tips Tricks Videos Tutorials

The phpinfo() Page That Shouldn’t Have Been There — And How It Exposed NykaaMan’s Internal…
https://medium.com/@anshubind89/the-phpinfo-page-that-shouldnt-have-been-there-and-how-it-exposed-nykaaman-s-internal-ee5f6e568159?source=rss------bug_bounty-5

There’s a specific kind of vulnerability that feels almost nostalgic.
Something from the early days of PHP.
Something every pentester…Continue reading on Medium » (https://medium.com/@anshubind89/the-phpinfo-page-that-shouldnt-have-been-there-and-how-it-exposed-nykaaman-s-internal-ee5f6e568159?source=rss------bug_bounty-5)

2 views13:05

Hacking Articles Tips Tricks Videos Tutorials

The Open Redirect That Could Turn a Trusted URL Into a Weapon — A Bug Hunting Story
https://medium.com/@anshubind89/the-open-redirect-that-could-turn-a-trusted-url-into-a-weapon-a-bug-hunting-story-c01e47e5ab3a?source=rss------bug_bounty-5

Some vulnerabilities feel small at first glance — almost too simple to matter.Continue reading on Medium » (https://medium.com/@anshubind89/the-open-redirect-that-could-turn-a-trusted-url-into-a-weapon-a-bug-hunting-story-c01e47e5ab3a?source=rss------bug_bounty-5)

1 view13:06

Hacking Articles Tips Tricks Videos Tutorials

CVE-2025–20393 (Cisco AsyncOS Zero-Day)
https://cyberleelawat.medium.com/cve-2025-20393-cisco-asyncos-zero-day-72b35798cdf9?source=rss------bug_bounty-5