🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Day 10 - 16 : IDOR Refer : hackerone.com/reports/2586584

Price Manipulation ? Here are few Blogs to learn about price manipulation! 1. anupamsimonmasih.medium.com/from-30k-to-2k… 2. infosecwriteups.com/unique-case-fo… 3. infosecwriteups.com/bugbounty-how-… 4. infosecwriteups.com/parameter-tamp… 5. nazeemarif.medium.com/how-i-was-able… 6. marxchryz.medium.com/price-manipula… 7. medium.com/@raghav2039/bu… Explore

GraphQl bug Bounties ? Here are few blogs to learn more about it! 1. medium.com/dsc-sastra-dee… 2. infosecwriteups.com/1000-bug-using… 3. medium.com/@Land2Cyber/ex… 4. medium.com/@zerodaystorie… 5. infosecwriteups.com/a-beginners-gu… 6. medium.com/@0xbugatti/js-… Explore Our Trainings! Bug Bounty

🔥 Bug Bounty Master Course is Training! 🔥 The journey has begun—50 days of live hacking, & real-world bug bounty training. 💻🚀 Want to check it out! bugbounty.thecyberboy.com

Github Dorking ? Here are few blogs to learn more about it! 1. mchklt.medium.com/rce-via-depend… 2. infosecwriteups.com/how-i-earned-2… 3. infosecwriteups.com/full-github-do… 4. bevijaygupta.medium.com/github-dorking… 5. infosecwriteups.com/github-dorking… 6. obheda12.medium.com/gitdorker-a-ne… 7. bevijaygupta.medium.com/the-easiest-wa… 8.

RCE ? Here are few blogs to learn more about it! 1. medium.com/@HX007/a-journ… 2. medium.com/@akashoffsec/h… 3. medium.com/@0xold/15k-rce… 4. medium.com/@gokulsspace/h… 5. medium.com/@yousefmoh15/h… 6. medium.com/@sahul1996l/ho… 7. medium.com/@jeetpal2007/e… 8. fdzdev.medium.com/lfi-to-rce-bug… 9.

Bugs & JSON? Here are few blogs to learn about it! 1. infosecwriteups.com/exploiting-jso… 2. medium.com/@0xbugatti/eas… 3. infosecwriteups.com/effortlessly-f… 4. infosecwriteups.com/json-web-token… 5. infosecwriteups.com/attacks-on-jso… 6. medium.com/bug-bounty-hun… 7. medium.com/@kumawatabhije… 8. medium.com/@bountyget/exp… 9.

CSRF Bypass Techniques ! 1. Token Manipulation: - Remove the entire CSRF token parameter or just its value. - Replace the token with a random one of the same length. - Try using a token that is one character longer or shorter than expected. - Inject the

What an incredible experience training students at SVNIT Surat! Glad to have shared insights on Web Security, IoT Security, and Web3 & Smart Contracts Security, delivered by me and my team. The energy and curiosity of the students made it an amazing experience! From admiring

officially, im an ethical hacker guys, quick tip, add actuator/prometheus in your wordlist, and make quick bounty and also hunnid thanks to zseano VAIDIK PANDYA @

300$ Bug Reports! here are few blogs to learn about them! 1. medium.com/@dhabaleshward… 2. infosecwriteups.com/finding-the-hi… 3. infosecwriteups.com/300-bounty-ssr… 4. infosecwriteups.com/easy-300-templ… 5. krishna-cyber.medium.com/how-a-simple-r… 6. medium.com/@bugbounty_lea… 7. medium.com/@anandrishav22… 8.

Blind SSRF! - part 2 here are few blogs to learn about them! 1. medium.com/@hacker_might/… 2. medium.com/@Land2Cyber/ex… 3. starlox.medium.com/how-do-i-found… 4. infosecwriteups.com/10-5-lab-blind… 5. mukibas37.medium.com/escalating-bli… 6. medium.com/@yasmeena_rezk… 7. p4n7h3rx.medium.com/blind-ssrf-the… 8.

Blind SSRF! - part 1 here are few blogs to learn about them! 1. medium.com/@Land2Cyber/un… 2. sirleeroyjenkins.medium.com/just-gopher-it… 3. notifybugme.medium.com/chaining-an-bl… 4. infosecwriteups.com/my-first-bug-b… 5. medium.com/@codingbolt.in… 6. medium.com/@Manojchy/blin… 7. medium.com/@DrakenKun/how… 8.

Posted this a while back but forgot to share it here. 🎥 Catch it now : youtu.be/G2CwvYzAXzQ?si…

Credential leaks! here are few blogs to learn about them! 1. medium.com/@blackarazi/br… 2. systemweakness.com/how-i-found-th… 3. systemweakness.com/story-about-es… 4. raymondlind.medium.com/ssrf-bug-leads… 5. rudrasarkar.medium.com/digging-into-j… 6. medium.com/@SumeetM.exe/h… 7. infosecwriteups.com/how-this-team-… 8.

Web Cache Poisoning! here are few reports to Explore them! 1. hackerone.com/reports/622122 2. hackerone.com/reports/1096609 3. hackerone.com/reports/1621540 4. hackerone.com/reports/397508 5. hackerone.com/reports/919175 6. hackerone.com/reports/1010858 7. hackerone.com/reports/429747 8.

Bug-by-Feature: Logout - Day 1 Most hackers skip logout… But it's a goldmine if the session isn't killed properly. Here’s what you can hunt: – Replay request after logout (still works?) – Name change/email update after logout – Token still valid? – Mobile app logout = actually