GET /secret-dir -> 404 ❌ GET /secret-dir/ -> 404 ❌ GET /secret-dir/x -> 404 ❌ PUT /secret-dir -> 405 💡 Don't forget the other HTTP methods when fuzzing a target as they can reveal interesting info ✅ #bugbountytip

When someone says reflective instead of reflected XSS

Kinda surprised how much of a muscle memory aspect bug bounty has

I might just load even more extensions, why thank you

holy f

Finally a CVSS I agree on 😌

I may or may not inadvertently been doing progressive overload with my weighted blanket to the point there isn't one in the market heavy enough and am just considering stacking them together 😂

Proper bounty life lesson here

kinda hilarious we're reaching a time where people will brag about finding bugs WITHOUT the need of using AI. going full circle 😂

Everyone knows about proxying your traffic via VPN to bypass geo-based restrictions. But also relevant to bypass some particular WAFs is to consider regions, say proxying via eu-west-1 or us-east-2. Very, very useful. #bugbountytips

no doubt the best bugs are the ones you ruminate on for hours or sometimes days

Only one right answer

Hard to swallow truth, but maximizing the parameters below + optimizing for health is probably the big secret for a successful, prosperous and happy life

Launching today! Volerion transforms raw CVEs into structured and instant insights #CVE #CyberSecurity #infosec

Am I the only one that reads Greg's posts in his voice/tone? Mixed in with the obligatory "Enjoy!" 😇 As always, great stuff!

Pre-orders have started shipping and getting to readers around the world! Whether you’re new to vulnerability research or sharpening an existing skill set, this book will show you how to think (and work) like a bug hunter. This book will teach you how to: ✅ Identify promising

Grown-up happiness is buying an electronic item and finding that it includes a USB power adapter 🙏

BB success = time * skill * √(right programs for you)

I still remember when they took my old notification bell away Not forgotten. Not forgiven.

spicy take, but if you are raising mediation requests.. you're just not submitting enough reports 😜 fire & forget baby