h3xiee·Oct 22I Started Learning Bug Bounty, and I Realized Recon Is Half the BattleAt First, I Thought Bug Bounty Was About Finding Bugs
Coy Emerald·Sep 3Bypassing WhatsApp Web’s Single-Session Restriction Using an Internal Fallback EndpointHello World! I am Coy Emerald
Laibakashif·Mar 18Web Security Series #7 — Exploiting Blind SQL Injection via Session CookiesSQL Injection is one of the most critical vulnerabilities in web applications. However, not all SQL Injection flaws are directly visible…
Laibakashif·Mar 17Web Security Series #6 — Exploiting SQL Injection to Extract Sensitive DataInjection vulnerabilities remain one of the most critical risks in web application security. Among them, SQL Injection (SQLi) is one of the…
Laibakashif·Mar 16Web Security Series #5 — Exploiting Broken Access Control via Token Misuse in API EndpointsAccess control mechanisms are essential for ensuring that users can only perform actions that they are authorized to execute. When these…
Laibakashif·Mar 15Web Security Series #4 — Discovering Unauthorized Resources via IDOR (Burp Suite & ffuf)Access control mechanisms are a fundamental component of web application security. When implemented incorrectly, they can allow attackers…
Laibakashif·Mar 14Web Security Series #3 — Discovering Credentials Using Cluster Bomb Attacks (Burp Suite & ffuf)Authentication mechanisms are a critical component of web application security. However, weak credential management and insufficient…
BugWraith (Lokesh)·Mar 12A Simple P4 Bug That Ended as Duplicate🙃Bug bounty hunting has a funny way of humbling you. Sometimes you spend hours digging deep and find nothing. Other times, a very simple bug…
Md Tanjimul Islam Sifat·Mar 2How I Found Yet Another Misconfiguration on This College SiteNot every bug bounty story starts with a wild hack or some high-stakes drama. Most days, it’s a lot more boring than that — just poking…A response icon1A response icon1
