A practitioner’s deep-dive into every tested technique — passive, active, brute-force, and permutation-based — for mapping the full attack…Continue reading on Medium » (https://medium.com/@tanvir.infosec/the-definitive-guide-to-subdomain-enumeration-e2c04476ef27?source=rss------bug_bounty-5)

SAML Username Collision Leading to Full ATO

I was testing an application that supported both local accounts and SAML-based SSO. Nothing looked obviously broken. Signatures were valid…Continue reading on Medium »
Read more...

Private Polls? Not Really — Exploiting Access Control and Logic Flaws

بسْمِ اللَّهِ الرَّحْمٰنِ الرَّحِيمِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى النَّبِيِّ الْمُجَاهِدِ الشَّهِيدِ…اللَّهُمَّ انصُرْ أَهْلَ غَزَّةَ…Continue reading on Medium »
Read more...

CSRF Account Takeover: Rejected by the Security Team, Rewarded by the Security Director ($$$)

Hi guys,Continue reading on Medium »
Read more...

Reporting a Low-Severity YouTube Logic Issue to Google Taught Me a Lot

There’s a strange moment every beginner in cybersecurity remembers.Continue reading on Medium »
Read more...

SAML Username Collision Leading to Full ATO
https://medium.com/@m0n3m/saml-username-collision-leading-to-full-ato-b1f3595e1cc8?source=rss------bug_bounty-5

I was testing an application that supported both local accounts and SAML-based SSO. Nothing looked obviously broken. Signatures were valid…Continue reading on Medium » (https://medium.com/@m0n3m/saml-username-collision-leading-to-full-ato-b1f3595e1cc8?source=rss------bug_bounty-5)

Private Polls? Not Really — Exploiting Access Control and Logic Flaws
https://medium.com/@yosefmostef99/private-polls-not-really-exploiting-access-control-and-logic-flaws-943ff0bb5cc4?source=rss------bug_bounty-5

بسْمِ اللَّهِ الرَّحْمٰنِ الرَّحِيمِ، وَالصَّلَاةُ وَالسَّلَامُ عَلَى النَّبِيِّ الْمُجَاهِدِ الشَّهِيدِ…اللَّهُمَّ انصُرْ أَهْلَ غَزَّةَ…Continue reading on Medium » (https://medium.com/@yosefmostef99/private-polls-not-really-exploiting-access-control-and-logic-flaws-943ff0bb5cc4?source=rss------bug_bounty-5)

CSRF Account Takeover: Rejected by the Security Team, Rewarded by the Security Director ($$$)
https://medium.com/@bhavishthakral123/csrf-account-takeover-rejected-by-the-security-team-rewarded-by-the-security-director-d00022676d87?source=rss------bug_bounty-5

Hi guys,Continue reading on Medium » (https://medium.com/@bhavishthakral123/csrf-account-takeover-rejected-by-the-security-team-rewarded-by-the-security-director-d00022676d87?source=rss------bug_bounty-5)

Reporting a Low-Severity YouTube Logic Issue to Google Taught Me a Lot
https://medium.com/@m4inal/i-reported-a-youtube-logic-issue-to-google-my-first-real-vulnerability-disclosure-experience-616593c392d4?source=rss------bug_bounty-5

There’s a strange moment every beginner in cybersecurity remembers.Continue reading on Medium » (https://medium.com/@m4inal/i-reported-a-youtube-logic-issue-to-google-my-first-real-vulnerability-disclosure-experience-616593c392d4?source=rss------bug_bounty-5)

JWT Security Testing Methodology: A Complete Guide for Bug Bounty Hunters

IntroductionContinue reading on Medium »
Read more...

JWT Security Testing Methodology: A Complete Guide for Bug Bounty Hunters
https://medium.com/@mohahakeem566/jwt-security-testing-methodology-a-complete-guide-for-bug-bounty-hunters-1b4547c85fa5?source=rss------bug_bounty-5