PinnedInGeek CulturebyThe XSS Rat·Apr 9, 2021Main App Bug Bounty Methodology — V3IntroductionA response icon2A response icon2
PinnedThe XSS Rat·Nov 26, 2020IDORs: What are they and how do you test for them?In this article i try to completely cover IDORs.
The XSS Rat·3d agoGraphQL Is a Gift to Bug Hunters — Here’s My Introspection-to-Takeover WorkflowMost hunters test GraphQL like it’s REST and walk straight past the money bugs. Here’s how I read the schema, map the mutations, and turn…A response icon1A response icon1
The XSS Rat·4d agoThe Forgot-Password Flow Is Where I Take Over Accounts: My Password-Reset Attack ChainSix checks I run on every reset function — host-header poisoning, token leaks, and the logic bugs that hand you someone else’s account.
The XSS Rat·Nov 5The Five-Check JWT Chain: How I Break Token Auth Before I Touch the Business LogicMost JSON Web Token bugs die on the first three checks. Here’s the exact order I run them, and why I never start with the clever stuff.
The XSS Rat·Nov 3The Three-Request IDOR Method: How I Find Broken Access Control Before BreakfastTwo accounts, three requests and one matrix — the routine that still pays my bounties in 2026
The XSS Rat·Oct 10The OWASP Top 10 2025 Is Here — And You Can Hack Every Item LiveA hands-on walkthrough of the new list by Wesley Thijs — The XSS Rat
The XSS Rat·Oct 10subScraper: The Broad-Scope PlaybookA hands-on recon guide by Wesley Thijs — The XSS Rat
The XSS Rat·Apr 14Uncle Rat’s Bug Bounty Methdology — 2026 VersionThis methodology has been based on a hunt on tesla.com.A response icon5A response icon5
The XSS Rat·Apr 6Bug Bounty / Web Application Security Hunting Checklist - 2026 XSS Rat versionA response icon6A response icon6
