Bug Bounty - Security Alert

Bug Bounty

Users without roles are able to find out whether the “Invite other people” feature on a Pinterest…

Users without roles are able to find out whether the “Invite other peo...

2 months ago 35

How I Explored Further and Chained HTTP Request Smuggling with Other Vulnerabilities

How I Explored Further and Chained HTTP Request Smuggling with Other V...

2 months ago 30

As Luck Would Have It — tales of good fortune in bug bounty

As Luck Would Have It — tales of good fortune in bug bounty

2 months ago 36

Google Dork Mastery Part 1 : Finding Hidden Critical Files with Google Dorks Like a Pro

Google Dork Mastery Part 1 : Finding Hidden Critical Files with Google...

2 months ago 42

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Master Mobile Traffic Hacking: Intercept Android App Data with Burp Suite

Master Mobile Traffic Hacking: Intercept Android App Data with Burp Su...

2 months ago 38

[$12000] 3 Critical 0-click TikTok Account Takeover Vulnerabilities, 2FA bypass & more security…

[$12000] 3 Critical 0-click TikTok Account Takeover Vulnerabilities, 2...

2 months ago 35

OAuth Based CSRF: Exploiting The Flaw In Implementation Of State Parameter

OAuth Based CSRF: Exploiting The Flaw In Implementation Of State Param...

2 months ago 36

Google Map API Key Exposure $$$ | Just 2 Minutes | Don’t Miss Your Bounty

Google Map API Key Exposure $$$ | Just 2 Minutes | Don’t Miss Your Bou...

2 months ago 47

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Day 28 of 30 Day — 30 Vulnerabilities | DOM-based XSS

Day 28 of 30 Day — 30 Vulnerabilities | DOM-based XSS

2 months ago 38

Bounty Hunter’s Handbook: Practical Tips for Bug Hunting

Bounty Hunter’s Handbook: Practical Tips for Bug Hunting

2 months ago 36

Hidden Reflected XSS on 403 Page.

Hidden Reflected XSS on 403 Page.

2 months ago 34

How I Discovered an HTTP Request Smuggling Vulnerability in a Major Web Console

How I Discovered an HTTP Request Smuggling Vulnerability in a Major We...

2 months ago 51

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

My first Bug : Uncovering a Reflected XSS with a Simple Payload

My first Bug : Uncovering a Reflected XSS with a Simple Payload

2 months ago 31

Reflected XSS | US Department of Education Recognition

Reflected XSS | US Department of Education Recognition

2 months ago 41

Blocking Users from Registration

Blocking Users from Registration

2 months ago 40

Uncover Hidden Subdomains with Sublist3r and curl: Boost Your Bug Hunting Success

Uncover Hidden Subdomains with Sublist3r and curl: Boost Your Bug Hunt...

2 months ago 36

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Cybersecurity 101 : Subdomain Scanner ทำงานยังไง ?

Cybersecurity 101 : Subdomain Scanner ทำงานยังไง ?

2 months ago 34

Practical Bug Bounty — TCM Academy | Automated Tools

Practical Bug Bounty — TCM Academy | Automated Tools

2 months ago 37

SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff

SSTI in Bug Bounty Program: The Time I Played with Handlebars and Brok...

2 months ago 38

RCE Exploits Explained: Techniques & Tools in 2024

RCE Exploits Explained: Techniques & Tools in 2024

2 months ago 43

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

What is WAF? & Secret Techniques to Bypass It

What is WAF? & Secret Techniques to Bypass It

2 months ago 31

How 100% Manual Hacking (Without Even Kali And Burp) Led To 2 Medium Vulnerabilities On YesWeHack

How 100% Manual Hacking (Without Even Kali And Burp) Led To 2 Medium V...

2 months ago 29

Day 27 of 30 Day — 30 Vulnerabilities | Server-Side Template Injection (SSTI)

Day 27 of 30 Day — 30 Vulnerabilities | Server-Side Template Injection...

2 months ago 31

Exploiting Salesforce Lightning Permissions Issues

Exploiting Salesforce Lightning Permissions Issues

2 months ago 25

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Advanced Strategies to Defend Against HTTP Request Smuggling: A Deep Dive

Advanced Strategies to Defend Against HTTP Request Smuggling: A Deep D...

2 months ago 32

Decoding the Enigma: A Deep Dive into the /home/000~ROOT~000/ Directory

Decoding the Enigma: A Deep Dive into the /home/000~ROOT~000/ Director...

2 months ago 30

TeamCity Takedown: Breach, Backup, and Break-in.

TeamCity Takedown: Breach, Backup, and Break-in.

2 months ago 29

My First Bounty: How I Exploited a CORS Misconfiguration

My First Bounty: How I Exploited a CORS Misconfiguration

3 months ago 29

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Easy 500$ Bounty with Host Header Injection By Ramthulla

Easy 500$ Bounty with Host Header Injection By Ramthulla

3 months ago 29

Advanced Web Application Security Checklist

Advanced Web Application Security Checklist

3 months ago 29

How I Found an Easy CVE in Yamaha

How I Found an Easy CVE in Yamaha

3 months ago 30

[Specially Customized] TECNO Security 3rd Anniversary Bug Hunting Competition!

[Specially Customized] TECNO Security 3rd Anniversary Bug Hunting Comp...

3 months ago 38

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

The Accidental Discovery

The Accidental Discovery

3 months ago 39

26.18 Lab: Bypassing access controls via HTTP/2 request tunneling

26.18 Lab: Bypassing access controls via HTTP/2 request tunneling

3 months ago 33

How I found My first P1 Bug which ended up ….$?

How I found My first P1 Bug which ended up ….$?

3 months ago 46

How to Get Started in Bug Bounty Hunting: A Comprehensive Beginner’s Guide

How to Get Started in Bug Bounty Hunting: A Comprehensive Beginner’s G...

3 months ago 88

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

The Discovery of CVE-2024–5947: Authentication Bypass in Deep Sea Electronics DSE855

The Discovery of CVE-2024–5947: Authentication Bypass in Deep Sea Elec...

3 months ago 44

The Hunt for XXE to LFI: How I Uncovered CVE-2019–9670 in a Bug Bounty Program

The Hunt for XXE to LFI: How I Uncovered CVE-2019–9670 in a Bug Bounty...

3 months ago 37

How I Got $250 For My Second Bug In HackerOne

How I Got $250 For My Second Bug In HackerOne

3 months ago 38

Subdomain Discovery Tool

Subdomain Discovery Tool

3 months ago 35

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

OWASP A05 :Security Misconfiguration

OWASP A05 :Security Misconfiguration

3 months ago 40

A Story About How I Found XSS in ASUS

A Story About How I Found XSS in ASUS

3 months ago 34

# 5 Install OWASP Juice Shop on Kali Linux — Guide for Burp Suite

# 5 Install OWASP Juice Shop on Kali Linux — Guide for Burp Suite

3 months ago 36

How I found exif metdata leak and earned small bounty

How I found exif metdata leak and earned small bounty

3 months ago 46

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

Advanced Techniques for Exploiting SSRF Vulnerabilities

Advanced Techniques for Exploiting SSRF Vulnerabilities

3 months ago 32

Race condition to bypass email verify, part #2

Race condition to bypass email verify, part #2

3 months ago 42

The Wild World of Path Traversal: Sneaking Around the Web’s Dark Corners

The Wild World of Path Traversal: Sneaking Around the Web’s Dark Corne...

3 months ago 32

How Attackers Sneak in Hidden Requests and What You Can Do About It

How Attackers Sneak in Hidden Requests and What You Can Do About It

3 months ago 36

BOOK THIS SPACE FOR AD

468x60 AD AFTER 4 POSTS

From Reset to Takeover: The Exploitation Potential of IDOR in Password Recovery Systems

From Reset to Takeover: The Exploitation Potential of IDOR in Password...

3 months ago 31

How to find webcams using the Google Dorking.

How to find webcams using the Google Dorking.

3 months ago 34