cyb3rD1vvy@·5d agoFrom P4 to P1: Day 15 — Business Logic Vulnerabilities: Finding Flaws in Application WorkflowsSeries: From P4 to P1 Day: 15 of 30 Topic: Business Logic Vulnerabilities Category: Web Application Security | API Security
cyb3rD1vvy@·6d agoFrom P4 to P1: Day 14 — Privilege Escalation: Finding Horizontal and Vertical Access Control…Series: From P4 to P1 Day: 14 of 30 Topic: Privilege Escalation in Web Applications Category: Web Application Security | Access Control
cyb3rD1vvy@·Nov 6From P4 to P1: Day 13 — IDOR in File Operations: Finding Unauthorized File and Document AccessSeries: From P4 to P1 Day: 13 of 30 Topic: IDOR in File Operations Category: Web Application Security | API Security
cyb3rD1vvy@·Nov 5From P4 to P1: Day 12 — Server-Side Template Injection (SSTI): Finding and Validating Template…Series: From P4 to P1 Day: 12 of 30 Topic: Server-Side Template Injection (SSTI) Category: Web Application Security
cyb3rD1vvy@·Nov 4From P4 to P1: Day 11 — XML External Entity (XXE) Injection: Finding and Validating XML Parser…Series: From P4 to P1 Day: 11 of 30 Topic: XML External Entity (XXE) Injection Category: Web Application Security | API Security
cyb3rD1vvy@·Nov 2From P4 to P1: Day 10 — Server-Side Request Forgery (SSRF): Finding and Validating Server-Side…Series: From P4 to P1 Day: 10 of 30 Topic: Server-Side Request Forgery (SSRF) Category: Web Application Security | API Security
cyb3rD1vvy@·Nov 1From P4 to P1 — Day 9: Mass Assignment Vulnerabilities in Bug Bounty HuntingSeries: From P4 to P1: The Bug Hunter’s Journey Day: 09/30 Topic: Mass Assignment, Improper Property-Level Authorization, and API Security
cyb3rD1vvy@·Oct 31From P4 to P1 — Day 8: Broken Function-Level Authorization (BFLA) in Bug Bounty HuntingSeries: From P4 to P1: The Bug Hunter’s Journey Day: 08/30 Topic: Broken Function-Level Authorization, Privilege Escalation, and API…
cyb3rD1vvy@·Oct 30From P4 to P1 — Day 7: IDOR and Broken Object-Level Authorization (BOLA) in Bug Bounty HuntingSeries: From P4 to P1: The Bug Hunter’s Journey Day: 07/30 Topic: IDOR, BOLA, Access Control Testing, and Manual Validation
cyb3rD1vvy@·Oct 29From P4 to P1 — Day 6: CORS Misconfigurations in Bug Bounty HuntingSeries: From P4 to P1: The Bug Hunter’s Journey Day: 06/30 Topic: CORS, Cross-Origin Requests, and Sensitive Data Exposure
