Stored DoS via Missing Parameter

بِسْمِ اللَّهِ الرَّحْمَنِ الرَّحِيمِ ─────────────Continue reading on Medium »
Read more...

Stored DoS via Missing Parameter
https://medium.com/@mostafaabogoda8/stored-dos-via-missing-parameter-4e0394f211d4?source=rss------bug_bounty-5

بِسْمِ اللَّهِ الرَّحْمَنِ الرَّحِيمِ ─────────────Continue reading on Medium » (https://medium.com/@mostafaabogoda8/stored-dos-via-missing-parameter-4e0394f211d4?source=rss------bug_bounty-5)

Adventures at Black Hat Asia 2026: Windows Shellcoding Training and MSRC Researcher Celebration

It’s been a crazy week at Black Hat Asia 2026 in Singapore.Continue reading on InfoSec Write-ups »
Read more...

From Fake Flag to Full RCE — Clankers Market Writeup

Clankers Market | b01lers CTF Solved by: S0n1c_404Continue reading on Medium »
Read more...

Environment Cross-Trust: Leveraging Staging APIs to “Buy” for $0.00

Many bug hunters are afraid to delve into the scope of famous companies, thinking it’s the most complex system they’ve ever seen. Based on…Continue reading on Medium »
Read more...

How I Earned €200 in 10 Minutes by Exploiting a Race Condition on a Job Application Portal

A simple business logic bypass using Burp Suite’s parallel sending feature — no complex exploit, no fancy tooling. Just timing.Continue reading on Medium »
Read more...

Easiest $100 on Hackerone | Null Byte Broke Authentication

Welcome again!Continue reading on OSINT Team »
Read more...

WebVersePro Labs — Challenge: Herbalist Remedies Writeup (NoSQL Injection)

OBJECTIVE: Bypass the authentication mechanism of a MongoDB-backed web application by exploiting a NoSQL Injection (NoSQLi) vulnerability…Continue reading on Medium »
Read more...

SSRF Master Guide: Exploitation and Mitigation Strategies

Learn how to identify and exploit SSRF vulnerabilities in cloud-native environments, from metadata services to filter bypass.Continue reading on Medium »
Read more...

Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses

Before diving into the lab, there are some important concepts we need to understand first: what Content-Length and Transfer-Encoding are…Continue reading on Medium »
Read more...

How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite | Google Cloud Blog
https://www.reddit.com/r/redteamsec/comments/1stmdjy/how_unc6692_employed_social_engineering_to_deploy/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://cloud.google.com/blog/topics/threat-intelligence/unc6692-social-engineering-custom-malware/) [comments] (https://www.reddit.com/r/redteamsec/comments/1stmdjy/how_unc6692_employed_social_engineering_to_deploy/)

Abusing EFS to create a LOL ransomware that avoids usual ransomware detection
https://www.reddit.com/r/redteamsec/comments/1stpven/abusing_efs_to_create_a_lol_ransomware_that/

<!-- SC_OFF -->Windows provides with cipher.exe powerful tool for LOL ransomware which avoids usual ransomware detection. I created an unobfuscated script that proofs the concept of the encryption. <!-- SC_ON --> submitted by /u/Difficult-Advice3002 (https://www.reddit.com/user/Difficult-Advice3002)
[link] (https://github.com/Schich/LOLCipherLock) [comments] (https://www.reddit.com/r/redteamsec/comments/1stpven/abusing_efs_to_create_a_lol_ransomware_that/)

Noctambulist.exe CLI Knowledge hub Windows 11
https://www.reddit.com/r/redteamsec/comments/1stqdam/noctambulistexe_cli_knowledge_hub_windows_11/

<!-- SC_OFF -->Noctambulist is a powerful command management tool supporting 500+ CLI utilities, designed to make your workflow faster, easier, and error-free. Built in C# using .NET WinForms and developed in VS Code by Levi Santegoets, it provides an intuitive interface for accessing, understanding, and copying commands instantly. <!-- SC_ON --> submitted by /u/LessHelicopter4431 (https://www.reddit.com/user/LessHelicopter4431)
[link] (https://github.com/LeviSantegoets/Noctambulist) [comments] (https://www.reddit.com/r/redteamsec/comments/1stqdam/noctambulistexe_cli_knowledge_hub_windows_11/)

Bug Bounty Series — Part 2 (Open Redirect)

Inside: A deep dive into the lessons learned and techniques applied during my latest hands-on experiments.Continue reading on Medium »
Read more...

Bypassing WDAC and AppLocker Using Ligolo

Modern enterprises rely on AppLocker and Windows Defender Application Control (WDAC) to prevent unauthorized binaries from executing.Continue reading on Medium »
Read more...

How I Started My Cybersecurity Journey: From Basics to Bug Bounty Hunting

How I Started My Cybersecurity Journey: From Basics to Bug Bounty HuntingContinue reading on AWS in Plain English »
Read more...

Gobuster: The Directory Busting Tool Every Hacker Should Know

What is Gobuster?Continue reading on Medium »
Read more...

Business Logic → Financial Abuse — Turning Flows Into Real Money Impact

✍️ IntroductionContinue reading on Bug Bounty Hunting: A Comprehensive Guide in English and french »
Read more...

Race Condition Allow Limit Bypass Free Tier Account

Hello, this is my first post on Medium about bug hunting. Here, I’ll explain how I discovered a race condition bug that allows bypassing…Continue reading on Medium »
Read more...