A step-by-step bug bounty writeup that any beginner can learn fromContinue reading on Medium » (https://medium.com/@HackerMD/i-found-a-critical-ssrf-vulnerability-that-could-have-exposed-an-entire-server-heres-how-0a69c2ba2dee?source=rss------bug_bounty-5)
From a Simple Stack Trace to Accessing an SAP Portal.
Short StoryContinue reading on Medium »
Read more...
Short StoryContinue reading on Medium »
Read more...
Medium
From a Simple Stack Trace to Accessing an SAP Portal.
Short Story
How I found CVE-2026–27161 (Sensitive Disclosure) | Cyber Tamarin
Continue reading on Medium »
Read more...
Continue reading on Medium »
Read more...
Medium
How I found CVE-2026–27161 (Sensitive Disclosure) | Cyber Tamarin
How I found CVE-2026–27161 (Sensitive Disclosure) | Cyber Tamarin Introduction During continued testing of the application — after identifying Stored XSS and CSRF vulnerabilities — I focused on …
WP-Hunter v2.0.2 Released: Faster, Smarter WordPress Security Scanning with 23 Exclusive PHP Rules
The ultimate open-source WordPress security scanner just got even better.Continue reading on Medium »
Read more...
The ultimate open-source WordPress security scanner just got even better.Continue reading on Medium »
Read more...
Medium
WP-Hunter v2.0.2 Released: Faster, Smarter WordPress Security Scanning with 23 Exclusive PHP Rules
The ultimate open-source WordPress security scanner just got even better.
Exploiting Weak JWT Secrets in a Bug Bounty Target
In this report, I will walk through a JWT-related security issue identified during testing and explain the steps taken to analyze it.Continue reading on Medium »
Read more...
In this report, I will walk through a JWT-related security issue identified during testing and explain the steps taken to analyze it.Continue reading on Medium »
Read more...
Medium
Exploiting Weak JWT Secrets in a Bug Bounty Target
In this report, I will walk through a JWT-related security issue identified during testing and explain the steps taken to analyze it.
The Invite That Took Over Accounts: A Logic Flaw
Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…Continue reading on LegionHunters »
Read more...
Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…Continue reading on LegionHunters »
Read more...
Medium
The Invite That Took Over Accounts: A Logic Flaw
Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…
My First CVSS 10.0 Bug: How I Took Control of Industrial Robots from My Bedroom ?
What if I told you that from my student bedroom, I was able to control robots located thousands of kilometers away? No, this isn’t science…Continue reading on Medium »
Read more...
What if I told you that from my student bedroom, I was able to control robots located thousands of kilometers away? No, this isn’t science…Continue reading on Medium »
Read more...
Medium
My First CVSS 10.0 Bug: How I Took Control of Industrial Robots from My Bedroom ?
What if I told you that from my student bedroom, I was able to control robots located thousands of kilometers away? No, this isn’t science…
Mass Account Lockout Using Organization Invites
الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي الناسِ الخير محمد أما بعدContinue reading on Medium »
Read more...
الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي الناسِ الخير محمد أما بعدContinue reading on Medium »
Read more...
Medium
Mass Account Lockout Using Organization Invites
الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي الناسِ الخير محمد أما بعد
Privilege Escalation via Role Manipulation
Last month I discovered a vulnerability in a private healthcare program that rewarded me $$$$ through their bug bounty program.Continue reading on Medium »
Read more...
Last month I discovered a vulnerability in a private healthcare program that rewarded me $$$$ through their bug bounty program.Continue reading on Medium »
Read more...
Medium
Privilege Escalation via Role Manipulation
Last month I discovered a vulnerability in a private healthcare program that rewarded me $$$$ through their bug bounty program.
From a Simple Stack Trace to Accessing an SAP Portal.
https://medium.com/@gjethva10/from-a-simple-stack-trace-to-accessing-an-sap-portal-4238c110ff3c?source=rss------bug_bounty-5
https://medium.com/@gjethva10/from-a-simple-stack-trace-to-accessing-an-sap-portal-4238c110ff3c?source=rss------bug_bounty-5
Short StoryContinue reading on Medium » (https://medium.com/@gjethva10/from-a-simple-stack-trace-to-accessing-an-sap-portal-4238c110ff3c?source=rss------bug_bounty-5)
How I found CVE-2026–27161 (Sensitive Disclosure) | Cyber Tamarin
https://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5
https://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5
WP-Hunter v2.0.2 Released: Faster, Smarter WordPress Security Scanning with 23 Exclusive PHP Rules
https://medium.com/@xeloxa/wp-hunter-v2-0-2-released-faster-smarter-wordpress-security-scanning-with-23-exclusive-php-rules-0f4913010afa?source=rss------bug_bounty-5
https://medium.com/@xeloxa/wp-hunter-v2-0-2-released-faster-smarter-wordpress-security-scanning-with-23-exclusive-php-rules-0f4913010afa?source=rss------bug_bounty-5
The ultimate open-source WordPress security scanner just got even better.Continue reading on Medium » (https://medium.com/@xeloxa/wp-hunter-v2-0-2-released-faster-smarter-wordpress-security-scanning-with-23-exclusive-php-rules-0f4913010afa?source=rss------bug_bounty-5)
6. WebSocket Authorization Bypass Vulnerability leads to $$$
Modern applications love WebSockets.Continue reading on InfoSec Write-ups »
Read more...
Modern applications love WebSockets.Continue reading on InfoSec Write-ups »
Read more...
Medium
6. WebSocket Authorization Bypass Vulnerability leads to $$$
Modern applications love WebSockets.
Lab: CORS vulnerability with basic origin reflection(Portswigger Labs)
This website has an insecure CORS configuration in that it trusts all origins.Continue reading on InfoSec Write-ups »
Read more...
This website has an insecure CORS configuration in that it trusts all origins.Continue reading on InfoSec Write-ups »
Read more...
Medium
Lab: CORS vulnerability with basic origin reflection(Portswigger Labs)
This website has an insecure CORS configuration in that it trusts all origins.