How I Earned €200 in 10 Minutes by Exploiting a Race Condition on a Job Application Portal

A simple business logic bypass using Burp Suite’s parallel sending feature — no complex exploit, no fancy tooling. Just timing.Continue reading on Medium »
Read more...

Easiest $100 on Hackerone | Null Byte Broke Authentication

Welcome again!Continue reading on OSINT Team »
Read more...

WebVersePro Labs — Challenge: Herbalist Remedies Writeup (NoSQL Injection)

OBJECTIVE: Bypass the authentication mechanism of a MongoDB-backed web application by exploiting a NoSQL Injection (NoSQLi) vulnerability…Continue reading on Medium »
Read more...

SSRF Master Guide: Exploitation and Mitigation Strategies

Learn how to identify and exploit SSRF vulnerabilities in cloud-native environments, from metadata services to filter bypass.Continue reading on Medium »
Read more...

Lab: HTTP request smuggling, confirming a CL.TE vulnerability via differential responses

Before diving into the lab, there are some important concepts we need to understand first: what Content-Length and Transfer-Encoding are…Continue reading on Medium »
Read more...

How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite | Google Cloud Blog
https://www.reddit.com/r/redteamsec/comments/1stmdjy/how_unc6692_employed_social_engineering_to_deploy/

submitted by /u/dmchell (https://www.reddit.com/user/dmchell)
[link] (https://cloud.google.com/blog/topics/threat-intelligence/unc6692-social-engineering-custom-malware/) [comments] (https://www.reddit.com/r/redteamsec/comments/1stmdjy/how_unc6692_employed_social_engineering_to_deploy/)

Abusing EFS to create a LOL ransomware that avoids usual ransomware detection
https://www.reddit.com/r/redteamsec/comments/1stpven/abusing_efs_to_create_a_lol_ransomware_that/

<!-- SC_OFF -->Windows provides with cipher.exe powerful tool for LOL ransomware which avoids usual ransomware detection. I created an unobfuscated script that proofs the concept of the encryption. <!-- SC_ON --> submitted by /u/Difficult-Advice3002 (https://www.reddit.com/user/Difficult-Advice3002)
[link] (https://github.com/Schich/LOLCipherLock) [comments] (https://www.reddit.com/r/redteamsec/comments/1stpven/abusing_efs_to_create_a_lol_ransomware_that/)

Noctambulist.exe CLI Knowledge hub Windows 11
https://www.reddit.com/r/redteamsec/comments/1stqdam/noctambulistexe_cli_knowledge_hub_windows_11/

<!-- SC_OFF -->Noctambulist is a powerful command management tool supporting 500+ CLI utilities, designed to make your workflow faster, easier, and error-free. Built in C# using .NET WinForms and developed in VS Code by Levi Santegoets, it provides an intuitive interface for accessing, understanding, and copying commands instantly. <!-- SC_ON --> submitted by /u/LessHelicopter4431 (https://www.reddit.com/user/LessHelicopter4431)
[link] (https://github.com/LeviSantegoets/Noctambulist) [comments] (https://www.reddit.com/r/redteamsec/comments/1stqdam/noctambulistexe_cli_knowledge_hub_windows_11/)

Bug Bounty Series — Part 2 (Open Redirect)

Inside: A deep dive into the lessons learned and techniques applied during my latest hands-on experiments.Continue reading on Medium »
Read more...

Bypassing WDAC and AppLocker Using Ligolo

Modern enterprises rely on AppLocker and Windows Defender Application Control (WDAC) to prevent unauthorized binaries from executing.Continue reading on Medium »
Read more...

How I Started My Cybersecurity Journey: From Basics to Bug Bounty Hunting

How I Started My Cybersecurity Journey: From Basics to Bug Bounty HuntingContinue reading on AWS in Plain English »
Read more...

Gobuster: The Directory Busting Tool Every Hacker Should Know

What is Gobuster?Continue reading on Medium »
Read more...

Business Logic → Financial Abuse — Turning Flows Into Real Money Impact

✍️ IntroductionContinue reading on Bug Bounty Hunting: A Comprehensive Guide in English and french »
Read more...

Race Condition Allow Limit Bypass Free Tier Account

Hello, this is my first post on Medium about bug hunting. Here, I’ll explain how I discovered a race condition bug that allows bypassing…Continue reading on Medium »
Read more...

Bug Bounty Series — Part 3 (HTTP Parameter Pollution)

Inside: A deep dive into the lessons learned and techniques applied during my latest hands-on experiments.Continue reading on Medium »
Read more...

How I Blinded a Zen RASP Firewall with a Single Comma

Imagine a runtime protection system that claims it understands your application. Not just filtering requests, not just matching payloads…Continue reading on Medium »
Read more...

Top CVEs to Hunt in 2026 — A Bug Bounty Hunter’s Playbook

131 new vulnerabilities drop every single day. Here’s how I decide which ones are worth my time and effort.Continue reading on Medium »
Read more...

Threat Hunting for Network Based Attacks - LetsDefend [Part 1]

This write-up is based on a training scenario from LetsDefend and is shared for educational purposes only.Continue reading on Medium »
Read more...

AI Agents for Bug Bounty | Smarter Hunting Workflow

Smarter Hunting Workflow with AI Pentest AgentContinue reading on Medium »
Read more...

How a Small Validation Flaw Led to a 0-Click Account Takeover

Bug bounty hunting, for me, is mostly about understanding how applications handle authentication. Login, registration, password reset…Continue reading on Medium »
Read more...

Gobuster: The Directory Busting Tool Every Hacker Should Know
https://medium.com/@gauravkumaramtics/gobuster-the-directory-busting-tool-every-hacker-should-know-5907d7c87374?source=rss------bug_bounty-5