Adarsh S Nair·1d agoHow a Browser Extension Check Led to Uncovering CVE-2021–44528 (Open Redirect)While browsing a target Web application, I clicked on the Shodan Browser Extension to view quick context on the server stack, open ports…
L4ZZ3RJ0D·4d agoHow a Guessable Number Exposed Every Meta AI User’s Private PromptsStarting the AI side of this series with one that genuinely deserves the spotlight. Found by Sandeep Hodkasia, founder of AppSecure…
L4ZZ3RJ0D·5d agoHow Four Lines of Code Could Delete Any Facebook Photo AlbumReal one again, and this time it’s about as clean a textbook IDOR as you’ll ever find written up, which is exactly why it’s worth actually…
L4ZZ3RJ0D·6d agoHow a Broken Email Confirmation Flow Took Over Any Shopify StoreReal chain this time, not one report but three linked ones, all from the same researcher, Ron Chan, who goes by ngalog on HackerOne. This…A response icon1A response icon1
Avinash Kumar·Nov 3[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes RemotelyHi everyone!A response icon2A response icon2
starkwizzer·Nov 2Killed by a Browser, Revived by a BackslashSingle Quote Turned a Dead Bug to Full JS Control over NASA.govA response icon1A response icon1
InOSINT TeambyDevansh Patel·Oct 23The frontend knew who was an admin. The server forgot to checkJavaScript often contains a near-complete map of an application’s roles and routes. The bug appears when the backend mistakes a hidden…
Pablo Vergara·Oct 8AI Script Kiddies Broke Bug Bounty HuntingIt only took a few months and AI models for a few to ruin it for everyone
Bugitrix·Oct 8How One Student Earned $1,030 From an Adobe Bug: A Bugitrix Case StudyIntroduction: From Beginner to Paid Bug Hunter
![[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes Remotely](https://miro.medium.com/v2/resize:fill:160:106/1*BnUqWuLxIdDhHDLlp1HmdA.png)
![[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes Remotely](https://miro.medium.com/v2/resize:fill:320:214/1*BnUqWuLxIdDhHDLlp1HmdA.png)
