Beyond recon tools and low-hanging IDOR — the craft has evolved. Have you?Continue reading on Medium » (https://infyra.medium.com/the-bug-bounty-landscape-in-2026-what-serious-hunters-need-to-know-c556953cb100?source=rss------bug_bounty-5)

BAC: Sensitive Information Disclosure via Publicly Accessible Database Backup Files (users.sql)-Disc

Impact — CriticalContinue reading on Medium »
Read more...

BAC: Sensitive Information Disclosure via Publicly Accessible Database Backup Files (users.sql)-Disc
https://medium.com/@abinsecurityresearcher/bac-sensitive-information-disclosure-via-publicly-accessible-database-backup-files-users-sql-disc-ca2cd6d4370f?source=rss------bug_bounty-5

Impact — CriticalContinue reading on Medium » (https://medium.com/@abinsecurityresearcher/bac-sensitive-information-disclosure-via-publicly-accessible-database-backup-files-users-sql-disc-ca2cd6d4370f?source=rss------bug_bounty-5)

The Hardest Year of My Career Journey

Hey Everyone, I am Dishant Modi. Today in this writeup I am not going to explain/decode any bug class and also not showing any bug…Continue reading on InfoSec Write-ups »
Read more...

Build Your Own Security Operations Center (SOC) at Home

Most people think a Security Operations Center (SOC) only exists inside massive enterprises with expensive hardware, dedicated analysts…Continue reading on Medium »
Read more...

Introducing Keyhog: The First GPU Accelerated secret scanner
https://www.reddit.com/r/redteamsec/comments/1tr8rd9/introducing_keyhog_the_first_gpu_accelerated/

<!-- SC_OFF -->EDIT: forgot to link github it is below KeyHog is a fast OSS secret scanner written in Rust with GPU acceleration. It scans source trees, git history, staged changes, Docker images, S3 buckets, GitHub orgs, stdin, and local filesystems for leaked credentials. It has 891 service-specific detectors. AWS, Azure, GCP, Cloudflare, Stripe, GitHub, GitLab, npm, Slack, Discord, Twilio, OpenAI, Anthropic, HuggingFace, Postgres URLs, MongoDB URLs, Redis URLs, private keys, JWT secrets, and generic high-entropy credentials. It uses Hyperscan on CPU and has a GPU backend for accelerated scanning. It scans decoded content. Base64 blobs, Kubernetes Secrets, Docker auth blobs, JWT payloads, Helm values, and encoded env files are decoded before matching. It handles split secrets. JS string concatenation, YAML multiline strings, Makefile continuations, and templated config are reassembled before scanning. It uses validation where plain pattern matching gets noisy. Some detectors check companion fields, checksums, entropy, nearby context, or known token structure before reporting. Each finding gets a confidence score. You can raise or lower the reporting threshold without ripping out detectors. Daemon mode keeps pre-commit and editor scans fast by avoiding repeated detector startup cost. Install: cargo install keyhog Common commands: keyhog scan .
keyhog scan --git-history .
keyhog scan --git-staged
keyhog scan --docker-image registry/app:v1
keyhog scan . --format sarif -o keyhog.sarif
keyhog hook install CI/baseline commands: keyhog scan . --baseline .keyhog-baseline.json
keyhog diff before.json after.json Lockdown mode is for scanning machines that may already contain live credentials. It avoids printing plaintext secrets, refuses cache writes, disables live verification, and applies process hardening where supported. <!-- SC_ON --> submitted by /u/MT_Carnage (https://www.reddit.com/user/MT_Carnage)
[link] (https://santh.dev/blog/keyhog/) [comments] (https://www.reddit.com/r/redteamsec/comments/1tr8rd9/introducing_keyhog_the_first_gpu_accelerated/)

Weekly Purple Team (Herding Katz Edition)
https://www.reddit.com/r/redteamsec/comments/1trfu74/weekly_purple_team_herding_katz_edition/

<!-- SC_OFF -->MorphKatz + KSLKatz — Bypassing Defender & Dumping Creds | Weekly Purple Team Dropped a new episode this week covering KSLKatz morphed with MorphKatz to evade Defender signatures before hitting LSASS. Paired it with the full detection breakdown on the blue team side so you can see exactly what telemetry fires and how to build coverage against it. Covers T1003.001 and T1562 with the full red vs. blue format. 🎥 Watch here (https://youtu.be/m2KTm7UYMuc) Happy to answer questions in the comments on either the offensive tradecraft or the detection side. <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://youtu.be/m2KTm7UYMuc) [comments] (https://www.reddit.com/r/redteamsec/comments/1trfu74/weekly_purple_team_herding_katz_edition/)

When Identity Breaks! How a Single Parameter Corrupted an Authentication System

A lot has been happening lately.Continue reading on Medium »
Read more...

File Upload Attacks: Understanding the Basics

What happens when a web application lets you upload anything — and why that’s a bigger problem than most developers realize. Part 1 of the…Continue reading on Medium »
Read more...

CSS Injection in Real Bug Bounty Engagements: A Reproducible Pattern in Custom Profile Features

SummaryContinue reading on Medium »
Read more...

The Hardest Year of My Career Journey
https://infosecwriteups.com/the-hardest-year-of-my-career-journey-65fd8edd19a3?source=rss------bug_bounty-5

Hey Everyone, I am Dishant Modi. Today in this writeup I am not going to explain/decode any bug class and also not showing any bug…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/the-hardest-year-of-my-career-journey-65fd8edd19a3?source=rss------bug_bounty-5)

Build Your Own Security Operations Center (SOC) at Home
https://medium.com/@pentesterclubpvtltd/build-your-own-security-operations-center-soc-at-home-a29208eebc42?source=rss------bug_bounty-5

Most people think a Security Operations Center (SOC) only exists inside massive enterprises with expensive hardware, dedicated analysts…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/build-your-own-security-operations-center-soc-at-home-a29208eebc42?source=rss------bug_bounty-5)

When Identity Breaks! How a Single Parameter Corrupted an Authentication System
https://medium.com/@sudosu01/when-identity-breaks-how-a-single-parameter-corrupted-an-authentication-system-8d41549e1365?source=rss------bug_bounty-5