It wasn’t an RCE. It wasn’t an SQLi. It was a simple JSON response that told me exactly which version of Java to attack. Here is the story…Continue reading on Medium » (https://zer0figure.medium.com/the-tmi-endpoint-why-unauthenticated-health-checks-are-a-hackers-best-friend-and-why-i-got-0-2945d21ea08f?source=rss------bug_bounty-5)

The Quiet Glitch: How a Missing Rate Limit Opened the Door to Mass Account Abuse

Early on a Monday, the operations dashboard at a fast-growing SaaS platform showed what looked like healthy traffic. Logins were spiking…Continue reading on Medium »
Read more...

Learning Bug Bounty the Hard Way: Notes, Mistakes, and Progress

Bug bounty is often portrayed as a fast track to money, flashy dashboards, and automated scanners that magically uncover vulnerabilities…Continue reading on Medium »
Read more...

How a Critical Race Condition in a Management System Led to a $0 Bounty

Bypassing subscription limits through non-atomic checks: A deep dive into the race condition the automated scanners missed.Continue reading on InfoSec Write-ups »
Read more...

OTP Bypass via Client-Side Encryption Flaw

How exposed cryptographic logic led to account creation without valid verificationContinue reading on Medium »
Read more...

2. OAuth Misbinding Vulnerability

The Silent Account Takeover Nobody Notices.Continue reading on InfoSec Write-ups »
Read more...

ReconFTW : automatiser la reconnaissance pour une surface d’attaque complète

🔎 Introduction à ReconFTW — la reconnaissance automatisée pour les chercheurs en sécuritéContinue reading on Bug Bounty Hunting: A Comprehensive Guide in English and french »
Read more...

How I Got My First Real Attention in Bug Bounty (And Why This Matters More Than Money)

Bug bounty hunting can feel like shouting into the void sometimes. You spend hours, days, even weeks hunting for vulnerabilities, writing…Continue reading on Medium »
Read more...

CVE-2026–0800: Unauthenticated Stored Cross-Site Scripting in User Submitted Posts WordPress Plugin

Hi, I’m Balamurugan R. I am currently an unemployed cybersecurity student and an independent security researcher.Continue reading on Medium »
Read more...

How I Earned a 4-Digit Bounty: Complete Account Takeover via Insecure Session Cookie

TL;DR: A missing `Secure` flag on a session cookie led to a complete account takeover vulnerability on a popular AI-powered SaaS platform…Continue reading on Medium »
Read more...

Escaping the Matrix: A Deep Dive into SandboxJS RCE (CVE-2026–23830)

How a simple oversight in AsyncFunctions led to a full Remote Code Execution (RCE) via Sandbox Escape.Continue reading on Medium »
Read more...

Exploit Lab: WPQuery (CVE-2024–50498)

CVE-2024–50498, a critical Unauthenticated Remote Code Execution (RCE) vulnerability in the WordPress plugin “WP Query Console”…Continue reading on Medium »
Read more...

Broken Link Hijacking: That One Bug Everyone Ignores (Until It Pays )

Let me guess.Continue reading on Medium »
Read more...

Retour d’expérience sur la HTB CWES

Après avoir décroché la certification HTB Certified Web Exploitation Specialist (CWES), je reviens sur mon parcours, ma préparation et mes…Continue reading on Medium »
Read more...

Homoglyph-based Email Identity Collision in a Secure Email Platform

🐦‍🔥 Platform OverviewContinue reading on Medium »
Read more...

2. OAuth Misbinding Vulnerability
https://infosecwriteups.com/2-oauth-misbinding-vulnerability-ed0e0830bdde?source=rss------bug_bounty-5

The Silent Account Takeover Nobody Notices.Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/2-oauth-misbinding-vulnerability-ed0e0830bdde?source=rss------bug_bounty-5)

ReconFTW : automatiser la reconnaissance pour une surface d’attaque complète
https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/reconftw-automatiser-la-reconnaissance-pour-une-surface-dattaque-compl%C3%A8te-e3a474ecc92d?source=rss------bug_bounty-5

🔎 Introduction à ReconFTW — la reconnaissance automatisée pour les chercheurs en sécuritéContinue reading on Bug Bounty Hunting: A Comprehensive Guide in English and french » (https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/reconftw-automatiser-la-reconnaissance-pour-une-surface-dattaque-compl%C3%A8te-e3a474ecc92d?source=rss------bug_bounty-5)