DEV Community

#bugbounty

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Detection Is Not Proof: How to Verify a Bug Before You Report It
krishna_kumar_75bdf350b26 profile

Detection Is Not Proof: How to Verify a Bug Before You Report It

#security #bugbounty #webdev #beginners
Comments
4 min read
Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis
iamfaizanakhtar profile

Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis

#cybersecurity #bugbounty #infosec #vulnerability
Comments
7 min read
Google Dorking: 20 Queries That Expose What Search Engines Index
abhinavsingwal profile

Google Dorking: 20 Queries That Expose What Search Engines Index

#googledorks #dorks #cybersecurity #bugbounty
Comments
4 min read
My Snare tool found 22 CVEs in a BBP program
o_73b1d9e0c879e7623c profile
Onix

My Snare tool found 22 CVEs in a BBP program

#bugbounty #cve #cybersecurity #infose
Comments
1 min read
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons
iamfaizanakhtar profile

OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons

#cybersecurity #bugbounty #infosec #vulnerability
Comments
7 min read
Mastering Hydra: 20 Essential Commands for Password Auditing
abhinavsingwal profile

Mastering Hydra: 20 Essential Commands for Password Auditing

#hydra #cybersecurity #bugbounty #ethicalhacking
Comments
5 min read
Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons
iamfaizanakhtar profile

Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons

#cybersecurity #bugbounty #infosec #vulnerability
Comments
6 min read
DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis
iamfaizanakhtar profile

DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis

#cybersecurity #bugbounty #infosec #vulnerability
Comments
6 min read
Google pauses open-source bug bounty over AI slop
techpulse01239 profile

Google pauses open-source bug bounty over AI slop

#cybersecurity #google #ai #bugbounty
Comments
3 min read
How a Fox and a Single Quote Broke the Critter Gallery — SQLi in Intigriti Challenge 0926
duchuaz profile

How a Fox and a Single Quote Broke the Critter Gallery — SQLi in Intigriti Challenge 0926

#security #sql #bugbounty
1
Comments
3 min read
Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked
thefluxread profile

Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked

#aisafety #appsec #bugbounty #claudeai
Comments
4 min read
My Bug Hunting Playbook: How I Found and Fixed 8 Bugs Across 5 OSS Repos in 24 Hours
truongsontung profile

My Bug Hunting Playbook: How I Found and Fixed 8 Bugs Across 5 OSS Repos in 24 Hours

#bugbounty #debugging #github #programming
Comments
4 min read
The 28% Cost Bug: How a Single Character Broke Claude 3 Haiku Cache Pricing
truongsontung profile

The 28% Cost Bug: How a Single Character Broke Claude 3 Haiku Cache Pricing

#bugbounty #pricing #api #python
Comments
2 min read
I Automated the Boring Part of Bug Bounty Hunting
seek3r profile

I Automated the Boring Part of Bug Bounty Hunting

#bugbounty #python #automation #security
Comments
5 min read
Break It, Then Ask Why: Exposing a Hidden Internal Dev Console With One Flipped Flag
seek3r profile

Break It, Then Ask Why: Exposing a Hidden Internal Dev Console With One Flipped Flag

#security #bugbounty #webdev #pentesting
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.