DEV Community

#bugbounty

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
🎯 ffuf Content Discovery: Cut the False Positives, Prove the Hits
krishna_kumar_75bdf350b26 profile

🎯 ffuf Content Discovery: Cut the False Positives, Prove the Hits

#security #bugbounty #cybersecurity #tutorial
Comments
9 min read
Why Unauthenticated API Endpoints are Still a Major Threat
vaultvult profile

Why Unauthenticated API Endpoints are Still a Major Threat

#cybersecurity #api #webdev #bugbounty
1
Comments
3 min read
How to Reverse Engineer a Web3 Frontend to Find Hidden API Endpoints
vaultvult profile

How to Reverse Engineer a Web3 Frontend to Find Hidden API Endpoints

#web3 #cybersecurity #bugbounty #javascript
1
Comments
3 min read
Bypassing Android SSL Pinning: A Journey with mitmproxy and APK-Mitm
vaultvult profile

Bypassing Android SSL Pinning: A Journey with mitmproxy and APK-Mitm

#android #cybersecurity #reverseengineering #bugbounty
1
Comments
3 min read
🗺️ Hidden API Endpoints in JavaScript Bundles: Find and Prove Them
krishna_kumar_75bdf350b26 profile

🗺️ Hidden API Endpoints in JavaScript Bundles: Find and Prove Them

#security #javascript #bugbounty #webdev
1
Comments
10 min read
🤖 AI Pentest Agents: What to Delegate, What to Guard, What to Prove
krishna_kumar_75bdf350b26 profile

🤖 AI Pentest Agents: What to Delegate, What to Guard, What to Prove

#security #ai #cybersecurity #bugbounty
Comments
8 min read
🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins
krishna_kumar_75bdf350b26 profile

🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins

#security #api #bugbounty #webdev
Comments
7 min read
Detection Is Not Proof: How to Verify a Bug Before You Report It
krishna_kumar_75bdf350b26 profile

Detection Is Not Proof: How to Verify a Bug Before You Report It

#security #bugbounty #webdev #beginners
Comments
4 min read
Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis
iamfaizanakhtar profile

Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis

#cybersecurity #bugbounty #infosec #vulnerability
Comments
7 min read
Google Dorking: 20 Queries That Expose What Search Engines Index
abhinavsingwal profile

Google Dorking: 20 Queries That Expose What Search Engines Index

#googledorks #dorks #cybersecurity #bugbounty
Comments
4 min read
My Snare tool found 22 CVEs in a BBP program
o_73b1d9e0c879e7623c profile
Onix

My Snare tool found 22 CVEs in a BBP program

#bugbounty #cve #cybersecurity #infose
Comments
1 min read
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons
iamfaizanakhtar profile

OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons

#cybersecurity #bugbounty #infosec #vulnerability
Comments
7 min read
Mastering Hydra: 20 Essential Commands for Password Auditing
abhinavsingwal profile

Mastering Hydra: 20 Essential Commands for Password Auditing

#hydra #cybersecurity #bugbounty #ethicalhacking
Comments
5 min read
Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons
iamfaizanakhtar profile

Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons

#cybersecurity #bugbounty #infosec #vulnerability
Comments
6 min read
DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis
iamfaizanakhtar profile

DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis

#cybersecurity #bugbounty #infosec #vulnerability
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.