Bug Bounty - Security Alert

Bug Bounty

Response manipulation to Account takeover

Response manipulation to Account takeover

3 years ago 458

Facebook OAuth 2.0 Misconfiguration

Facebook OAuth 2.0 Misconfiguration

3 years ago 153

IDOR to Account Takeover: My First Bug Bounty Write-up at the Age of 16

IDOR to Account Takeover: My First Bug Bounty Write-up at the Age of 1...

3 years ago 233

How we was able to takeover whole organization via Privilege Escalation

How we was able to takeover whole organization via Privilege Escalatio...

3 years ago 227

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Taking Over Employee Accounts by Managers with Zero Employee Interaction

Taking Over Employee Accounts by Managers with Zero Employee Interacti...

3 years ago 161

How I found read/write access to the personal data of 3 million users of an E-commerce website?

How I found read/write access to the personal data of 3 million users ...

3 years ago 312

How I do subdomain take over in ten minutes?

How I do subdomain take over in ten minutes?

3 years ago 259

Bug Bounties Versus Penetration Testing

Bug Bounties Versus Penetration Testing

3 years ago 253

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Hacker101 CTF — Micro-CMS v1 — FLAG0 (Español)

Hacker101 CTF — Micro-CMS v1 — FLAG0 (Español)

3 years ago 200

How I collected sensitive data from examination software?

How I collected sensitive data from examination software?

3 years ago 232

WAF bypasses: Tearing down the wall

WAF bypasses: Tearing down the wall

3 years ago 192

How I get my first swag from Achmea

How I get my first swag from Achmea

3 years ago 233

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Neat XSS trick from a G.O.A.T — Gareth Heyes special

Neat XSS trick from a G.O.A.T — Gareth Heyes special

3 years ago 223

Setup Guide for Nahamsec’s Intro To Bug Bounty Labs

Setup Guide for Nahamsec’s Intro To Bug Bounty Labs

3 years ago 399

Account Takeover using Update Password functionality + Weak Password Policy

Account Takeover using Update Password functionality + Weak Password P...

3 years ago 250

Simple HTML Injection to $250

Simple HTML Injection to $250

3 years ago 273

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Blind SSRF in URL Validator

Blind SSRF in URL Validator

3 years ago 384

UPDATE: Bug Bounty — Winners Circle

UPDATE: Bug Bounty — Winners Circle

3 years ago 239

Седмична актуализация 8/3

Седмична актуализация 8/3

3 years ago 361

RCE via failed regex check — One dot to rule ’em all!

RCE via failed regex check — One dot to rule ’em all!

3 years ago 255

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

How I Found Reflected XSS ON FORGOT PASSWORD PAGE

How I Found Reflected XSS ON FORGOT PASSWORD PAGE

3 years ago 285

Hey guys,

Hey guys,

3 years ago 170

Twitter algorithm found something?

Twitter algorithm found something?

3 years ago 139

Dexfolio x Immunifi: $12,000 Bug Bounty

Dexfolio x Immunifi: $12,000 Bug Bounty

3 years ago 199

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Hacker101 CTF — Trivial — A little something to get you started — (Español)

Hacker101 CTF — Trivial — A little something to get you started — (Esp...

3 years ago 165

The Graph Joins Immunefi with the World’s Largest ug bounty in history: $2.5 Million

The Graph Joins Immunefi with the World’s Largest ug bounty in history...

3 years ago 222

Hats.finance is live with $100k active bounty!

Hats.finance is live with $100k active bounty!

3 years ago 165

Bug Hunting PhoenixRadioBali [ SQL Injection ]

Bug Hunting PhoenixRadioBali [ SQL Injection ]

3 years ago 268

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Apron Network Supports Polkadot Ecosystem With Node Service

Apron Network Supports Polkadot Ecosystem With Node Service

3 years ago 210

Buka Lapak BugBounty [ XSS Reflected ]

Buka Lapak BugBounty [ XSS Reflected ]

3 years ago 165

[TR] TryHackMe: LazyAdmin Makine Çözümü

[TR] TryHackMe: LazyAdmin Makine Çözümü

3 years ago 246

Setup Your Private Burp Collaborator for SSRF/XXE

Setup Your Private Burp Collaborator for SSRF/XXE

3 years ago 247

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

How a 15 year old hacked his way to $1000

How a 15 year old hacked his way to $1000

3 years ago 237

Common GraphQL Misconceptions: A rant

Common GraphQL Misconceptions: A rant

3 years ago 185

Find XSS in wide scope with kxss

Find XSS in wide scope with kxss

3 years ago 263

Exploiting JWT to Account Takeover

Exploiting JWT to Account Takeover

3 years ago 173

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

P1: Easy Access to Grafana Dashboard

P1: Easy Access to Grafana Dashboard

3 years ago 186

What is BOLA? 3-digit bounty from Topcoder ($$$)

What is BOLA? 3-digit bounty from Topcoder ($$$)

3 years ago 185

Disclosing 1000 confidential documents through s3 bucket

Disclosing 1000 confidential documents through s3 bucket

3 years ago 188

Intigriti’s PHP challenge breakdown

Intigriti’s PHP challenge breakdown

3 years ago 321

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Temporarily suspension of Mint/Redeem Function

Temporarily suspension of Mint/Redeem Function

3 years ago 160

Easiest Critical Bug triaged on HackerOne

Easiest Critical Bug triaged on HackerOne

3 years ago 187

Vulnerabilidades de Path Traversal

Vulnerabilidades de Path Traversal

3 years ago 246

Let’s build an API to hack: Information disclosure

Let’s build an API to hack: Information disclosure

3 years ago 313

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

$400 From Laravel Miss Configuration [hoki]

$400 From Laravel Miss Configuration [hoki]

3 years ago 157

Cyber Security Interview Questions Part-4

Cyber Security Interview Questions Part-4

3 years ago 301

Github recon to P2

Github recon to P2

3 years ago 162

Bug Bounty Stories #3: Docstring Injection to XSS

Bug Bounty Stories #3: Docstring Injection to XSS

3 years ago 226

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Peeking into the Future

Peeking into the Future

3 years ago 173

How I got Reflected Cross Site Scripting(RXSS) on Manchester Metropolitan University

How I got Reflected Cross Site Scripting(RXSS) on Manchester Metropoli...

3 years ago 179