CVE-2025-38739 https://t.co/bYiEUgCNZL

A lot of hackers fail because they only look for bugs, not systems. If you want to find vulnerabilities others miss, you need to model how the application works first. Here are 5 ways to do it right 👇 1️⃣ Identify valuable target data Start by asking: what data does the

“Full-Blown SSRF to Gain Access to Millions of Users’ Records and Multiple Internal Panels” by Skyer https://t.co/ridKB8NW91

I've included all the proven 403 bypass techniques that consistently work in real-world scenarios. After reading this write-up you won't need to refer to any other article or video on the topic anymore..i will update more things in it soon.. https://t.co/GFqZb3Hu5b

“Escalating Impact: Full Account Takeover in Microsoft via XSS in Login Flow” by Asem Eleraky https://t.co/vt13dJJlT4

read this

Writing a technical book is only a small fraction of the work. You still need: 1. Technical review 2. General editing 3. Copy editing 4. Cover designing 5. Proof reading <— I am here “From Day Zero to Zero Day” is a way better book thanks to the amazing team at @nostarch and I

It's been on my TODO list for soooooooo long, but finally got my self-hosted interactsh server sorted, with file hosting. Thanks @pdiscoveryio for the great tools! 🤘 And also a nice Burp extension https://t.co/Qc3Mcf0AME which will be useful

Here’s my new blog post: “Redacted bugs #3: Hunting for bugs worth $7,750 in an adult content platform.” Happy reading!

Leaking the email of any YouTube user for $10,000

“A Journey of Limited Path Traversal To RCE With $40,000 Bounty!” by HX007 https://t.co/QTZcVxmyE1

🖐 ways to test for broken access control!

https://t.co/bxkltsG1lh

How I Hacked a User Management System and Found 3 Critical GraphQL Vulnerabilities | by 4bd0_m4g3d | Jan, 2025 | Medium

happy to release my new article entitled: Next.js and cache poisoning: a quest for the black hole https://t.co/v7aqiYJjyX good reading;

very pleased to announce the release of my new article based on my research that led to CVE-2024-46982 titled: Next.js, cache, and chains: the stale elixir https://t.co/UFndJxNYLI note: does not cover the latest findings shared in my recent posts enjoy reading;

[HackerNotes Ep.100] 8 Fav Bugs of 2024, Farewell Joel, Hello Shift - Cursor of Hacking

User/Pass, service name,... exposed on github Download service -> Decomplier -> find endpoints -> access data #BugBounty #bugbountytips

Modify 302 Found --> 200 Ok #BugBounty #bugcrowd

Program Manager’s Guide To Running a Successful Bug Bounty Program https://t.co/f60KmQHhTP