In recent years, cybersecurity researchers have uncovered a worrying trend: browser extensions — once considered “low-risk” productivity…Continue reading on Medium » (https://medium.com/@paritoshblogs/the-growing-threat-landscape-of-browser-extensions-how-trusted-tools-turned-into-attack-vectors-3f8c2bacf1ba?source=rss------bug_bounty-5)

Wild Bug Bounty Bugs You’ve Probably Never Seen
https://infosecwriteups.com/wild-bug-bounty-bugs-youve-probably-never-seen-38c13a18a7fa?source=rss------bug_bounty-5

If you want to stop finding the same bugs as everyone else — 
 This series is for you.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/wild-bug-bounty-bugs-youve-probably-never-seen-38c13a18a7fa?source=rss------bug_bounty-5)

I Solved 92 Labs and Made $0: Why I Quit Web Hacking for Binary Exploitation
https://medium.com/@sivaaditya456/i-solved-92-labs-and-made-0-why-i-quit-web-hacking-for-binary-exploitation-59a2285db910?source=rss------bug_bounty-5

For two years, I lived the “Bug Bounty Dream.”Continue reading on Medium » (https://medium.com/@sivaaditya456/i-solved-92-labs-and-made-0-why-i-quit-web-hacking-for-binary-exploitation-59a2285db910?source=rss------bug_bounty-5)

Race Condition — HTTP Smuggling — HTTP/3 Protokol Versiyon

(PART 3)Continue reading on Medium »
Read more...

Simple Endpoint, Critical Impact: How I Sabotaged Refunds

When hunting in programs that have been active for years, many researchers fear “duplicates.” However, bugs often hide in specific…Continue reading on Medium »
Read more...

Post Board Writeup — MobileHackingLab

بسم الله الرحمن الرحيمContinue reading on Medium »
Read more...

[Templates] — Exploiting PugJS Server-Side Template Injection to Remote Shell Access

How unsafe Pug interpolation turns template rendering into code execution.Continue reading on MeetCyber »
Read more...

Race Condition — HTTP Smuggling — HTTP/3 Protokol Versiyon
https://medium.com/@0bat.exe1/race-condition-http-smuggling-http-3-protokol-versiyon-74165353a191?source=rss------bug_bounty-5

(PART 3)Continue reading on Medium » (https://medium.com/@0bat.exe1/race-condition-http-smuggling-http-3-protokol-versiyon-74165353a191?source=rss------bug_bounty-5)

Simple Endpoint, Critical Impact: How I Sabotaged Refunds
https://medium.com/@xelcezeri/simple-endpoint-critical-impact-how-i-sabotaged-refunds-1cd0ac7a4cb2?source=rss------bug_bounty-5

When hunting in programs that have been active for years, many researchers fear “duplicates.” However, bugs often hide in specific…Continue reading on Medium » (https://medium.com/@xelcezeri/simple-endpoint-critical-impact-how-i-sabotaged-refunds-1cd0ac7a4cb2?source=rss------bug_bounty-5)

Post Board Writeup — MobileHackingLab
https://mohammadibnibrahim.medium.com/post-board-writeup-mobilehackinglab-ce045b6db36c?source=rss------bug_bounty-5

بسم الله الرحمن الرحيمContinue reading on Medium » (https://mohammadibnibrahim.medium.com/post-board-writeup-mobilehackinglab-ce045b6db36c?source=rss------bug_bounty-5)

[Templates]  —  Exploiting PugJS Server-Side Template Injection to Remote Shell Access
https://meetcyber.net/templates-exploiting-pugjs-server-side-template-injection-to-remote-shell-access-464677793862?source=rss------bug_bounty-5

How unsafe Pug interpolation turns template rendering into code execution.Continue reading on MeetCyber » (https://meetcyber.net/templates-exploiting-pugjs-server-side-template-injection-to-remote-shell-access-464677793862?source=rss------bug_bounty-5)