How I Found a SQL Injection on an IP in Just 20 Minutes

It started with a simple IP address. No domain, no login page — just a basic Apache default page. At first glance, nothing looked…Continue reading on Medium »
Read more...

⚙️ 03. — Password Reset Broken Logic
https://medium.com/@The4v1/%EF%B8%8F-03-password-reset-broken-logic-b44c9897848e?source=rss------bug_bounty-5

Difficulty: 🟢 ApprenticeContinue reading on Medium » (https://medium.com/@The4v1/%EF%B8%8F-03-password-reset-broken-logic-b44c9897848e?source=rss------bug_bounty-5)

⚙️ 04. — Username Enumeration via Subtly Different Responses
https://medium.com/@The4v1/%EF%B8%8F-04-username-enumeration-via-subtly-different-responses-af394d67fa04?source=rss------bug_bounty-5

Difficulty: 🟡 PractitionerContinue reading on Medium » (https://medium.com/@The4v1/%EF%B8%8F-04-username-enumeration-via-subtly-different-responses-af394d67fa04?source=rss------bug_bounty-5)

⚙️ 07. — Username Enumeration via Account Lock

Difficulty: 🟡 PractitionerContinue reading on Medium »
Read more...

⚙️ 08. — 2FA Broken Logic

Difficulty: 🟡 PractitionerContinue reading on Medium »
Read more...

⚙️ 09. — Brute-forcing a Stay-Logged-In Cookie

Difficulty: 🟡 PractitionerContinue reading on Medium »
Read more...

⚙️ 10. — Offline Password Cracking

Difficulty: 🟡 PractitionerContinue reading on Medium »
Read more...

Idor in “track your order” page

this is an e-commerce application, i ordered something then i open the order page.Continue reading on Medium »
Read more...

You’re Reading Bug Bounty Writeups Wrong

I read a lot of bug bounty writeups.Continue reading on Medium »
Read more...

⚙️ 11. — Password Reset Poisoning via Middleware

Difficulty: 🟡 PractitionerContinue reading on Medium »
Read more...

Why Cybersecurity Is a Growing Field

I fell into it by accident. Now I can’t imagine doing anything else.Continue reading on MeetCyber »
Read more...

⚙️ 12. — Password Brute-Force via Password Change

Difficulty: 🟡 PractitionerContinue reading on Medium »
Read more...

⚙️ 13. — Broken Brute-Force Protection, Multiple Credentials per Request

Difficulty: 🔴 ExpertContinue reading on Medium »
Read more...

How to Start Bug Bounty Without Coding (Step-by-Step Guide for Beginners)

Many beginners think bug bounty requires strong coding skills. That’s not true. You can start bug bounty without coding by focusing on…Continue reading on Medium »
Read more...

⚙️ 08. — 2FA Broken Logic
https://medium.com/@The4v1/%EF%B8%8F-08-2fa-broken-logic-99d68ad3d8bf?source=rss------bug_bounty-5

Difficulty: 🟡 PractitionerContinue reading on Medium » (https://medium.com/@The4v1/%EF%B8%8F-08-2fa-broken-logic-99d68ad3d8bf?source=rss------bug_bounty-5)