rix4uni/medium-writeups: This repository updates latest Bug Bounty medium writeups every 10 minutes, https://readmedium.com/Medium_URL, https://archive.ph/Medium_URL, https://freedium.cfd/Medium_URL

| Time | Title | Feed | IsNew | IsToday | |-----------|-----|-----|-----|-----| | Mon, 19 Oct 2026 21:52:29 GMT | Privacy Rights Justified: Countering the ‘Nothing to Hide’ Ar... | security | Yes | Yes | | Mon, 19 Oct 2026 22:01:32 GMT | How Many Security Cameras Does a Business Need in Dallas? | security | Yes | Yes | | Mon, 19 Oct 2026 22:23:06 GMT | The Fastest Way to Convert Hex to ASCII (and Vice Versa) Without ... | cybersecurity | Yes | Yes | | Mon, 19 Oct 2026 21:06:28 GMT | Ten places a deleted user still lives | security | Yes | Yes | | Mon, 19 Oct 2026 22:29:53 GMT | Kings of the Digital Shrine | cybersecurity | Yes | Yes | | Mon, 19 Oct 2026 22:25:11 GMT | Buying or Selling USDT on P2P? 9 Checks You Should Never Skip Bef... | cybersecurity | Yes | Yes | | Mon, 19 Oct 2026 22:01:02 GMT | REA-Lab #2: crea una máquina virtual aislada para análisis con ... | cybersecurity | Yes | Yes | | Mon, 19 Oct 2026 20:25:26 GMT | Life after AI for a Guy who Learnt Cyber without it !! | hacking | Yes | Yes | | Mon, 19 Oct 2026 21:59:56 GMT | TryHackMe: BRUTE IT CTF Write-up | cybersecurity, penetration-testing | Yes | Yes | | Mon, 19 Oct 2026 20:29:57 GMT | How I Bypassed Meta’s Muse AI Agent Waitlist And Discovered 30+... | penetration-testing | Yes | Yes | | Mon, 19 Oct 2026 20:59:08 GMT | My Cybersecurity Journey | information-technology | Yes | Yes | | Mon, 19 Oct 2026 19:57:14 GMT | My HTB CWES Journey: Taking One Step at a Time | penetration-testing, web-security | Yes | Yes | | Mon, 19 Oct 2026 20:11:52 GMT | How to Redact a PDF So the Deleted Text Stays Deleted | security | Yes | Yes | | Mon, 19 Oct 2026 20:44:19 GMT | Shadow AI: The cyber security risk hiding in plain sight for uk b... | cyber-security-awareness | Yes | Yes | | Mon, 19 Oct 2026 20:01:01 GMT | Secure DNS and GSLB: Keeping Users on a Healthy Data Center | information-security | Yes | Yes | | Mon, 19 Oct 2026 22:35:42 GMT | Will this AI agent obey its soul? Meet ALMA Forge | cybersecurity | Yes | Yes | | Mon, 19 Oct 2026 19:23:43 GMT | How a Drone Is Watching Over Enugu. | security | Yes | Yes | | Mon, 19 Oct 2026 20:22:14 GMT | How to Find Business Logic Vulnerabilities in Web Apps: Step-by-S... | bug-bounty, penetration-testing, bug-bounty-tips | Yes | Yes | | Mon, 19 Oct 2026 21:14:58 GMT | Your AI Coding Agent Just Exposed Your Supabase Database—Fix It... | web-security | Yes | Yes | | Mon, 19 Oct 2026 19:22:41 GMT | Real terminal, real tools, real techniques. NODE: PROTOCOL’s fr... | hacking | Yes | Yes | | Mon, 19 Oct 2026 22:10:34 GMT | Building a Secure Two-Tier AWS Network Using a Bastion Host | cybersecurity | Yes | Yes | | Mon, 19 Oct 2026 22:01:02 GMT | AI Knows What Turns You On. Who Else Gets a Copy? | cybersecurity | Yes | Yes | | Mon, 19 Oct 2026 20:01:50 GMT | Themes of Gaming | information-technology | Yes | Yes | | Mon, 19 Oct 2026 22:41:19 GMT | It Can’t Be Turtles All the Way Down: Defence in Depth for AI O... | cybersecurity | Yes | Yes | | Mon, 19 Oct 2026 21:16:01 GMT | CVE-2026–0322: The PAN-OS Zero-Day That Turns an Admin Login In... | information-security | Yes | Yes | | Mon, 19 Oct 2026 04:57:55 GMT | How I almost gave up on Medium and almost came back | vulnerability | | Yes | | Mon, 19 Oct 2026 16:59:02 GMT | TryHackMe: Anthem CTF Walkthrough | penetration-testing | | Yes | | Mon, 19 Oct 2026 16:29:35 GMT | THM - Linux Threat Detection 3 | infosec | | Yes | | Mon, 19 Oct 2026 08:54:46 GMT | He Listed His Medications Before the Spinach Dip Arrived. Then Sh... | vulnerability | | Yes | | Mon, 19 Oct 2026 19:03:08 GMT | Insecure Direct Object Reference (IDOR) — Unauthorized Product ... | bug-bounty, penetration-testing, bug-bounty-writeup, idor | | Yes | | Mon, 19 Oct 2026 11:58:21 GMT | Everyone Loves the Convenience of Cloud. So Why Are Some Users St... | information-technology | | Yes | | Mon, 19 Oct 2026 17:11:54 GMT | Cloudflare Free Plan Security: My Exact Settings | web-security | | Yes | | Mon, 19 Oct 2026 18:06:09 GMT | ConnectWise Cloud Backup Incident And M365 Tenant Compromise | vulnerability | | Yes | | Mon, 19 Oct 2026 15:06:14 GMT | Your Password Is Probably Already Leaked. Here’s How to Stop Ca... | information-security | | Yes | | Mon, 19 Oct 2026 14:38:31 GMT | CVE Decoded #5: CVE-2026–65640 (WordPress) | infosec, cve | | Yes | | Mon, 19 Oct 2026 10:37:37 GMT | PortSwigger Lab: SQL Injection Attack, Querying the Database Type... | infosec, web-security | | Yes | | Mon, 19 Oct 2026 15:25:36 GMT | Managing AI Agents and your ‘Claws’ | information-security | | Yes | | Mon, 19 Oct 2026 11:31:01 GMT | 6,820 Subdomains And One 403 That Broke Me | bug-bounty-tips, pentesting | | Yes | | Mon, 19 Oct 2026 11:47:59 GMT | I Found Vulnerabilities in a Government Company When I Was Just a... | vulnerability | | Yes | | Mon, 19 Oct 2026 16:48:12 GMT | GPP Password Attack in AD: Exploitation, Detection and Prevention | ethical-hacking | | Yes | | Mon, 19 Oct 2026 17:12:01 GMT | Why developers should never trust a null origin (Portswigger CORS... | bug-bounty | | Yes | | Mon, 19 Oct 2026 18:09:32 GMT | How to Keep Your Crypto Card Safe: 10 Security Tips for Spending ... | security | | Yes | | Mon, 19 Oct 2026 13:32:02 GMT | Cómo uso Burp AT para Automatizar Tareas de Testing Manual | pentesting | | Yes | | Mon, 19 Oct 2026 18:06:00 GMT | Cybersecurity Lead & Cryptographer | ethical-hacking | | Yes | | Mon, 19 Oct 2026 18:38:41 GMT | Building a SOC Lab with Wazuh, Sysmon, Custom Detection Rules, an... | cyber-security-awareness | | Yes | | Mon, 19 Oct 2026 14:29:50 GMT | The Job Test That Wasn’t: Anatomy of a Fake Recruiter Malware C... | hacking | | Yes | | Mon, 19 Oct 2026 14:01:48 GMT | Learning Burp Suite: My First Steps into Web Security | pentesting, vapt | | Yes | | Mon, 19 Oct 2026 14:26:12 GMT | Bookstore — Tryhackme writeup | lfi | | Yes | | Mon, 19 Oct 2026 18:26:01 GMT | I planted fake files that text me the second anyone opens them. | security, infosec | | Yes | | Mon, 19 Oct 2026 11:57:30 GMT | Quishing Explained: How QR Codes Became a Cybersecurity Risk | information-technology | | Yes | | Mon, 19 Oct 2026 18:20:45 GMT | When the Security Shield Becomes the Attack Path: Hackers Exploit... | application-security | | Yes | | Mon, 19 Oct 2026 06:15:47 GMT | LOVE WAS NOT THE FIRST TO DIE | vulnerability | | Yes | | Mon, 19 Oct 2026 14:55:28 GMT | OverTheWire Bandit Walkthrough Part 6: Levels 25–29 | ethical-hacking | | Yes | | Mon, 19 Oct 2026 17:51:00 GMT | Bir Web Sitesine Güvenirsiniz. Peki Ya O Web Sitesi Size Karşı... | web-security, xss-attack | | Yes | | Mon, 19 Oct 2026 18:14:53 GMT | Cyber Resilience Starts at the Core: Why Security Must Be Built i... | cyber-security-awareness | | Yes | | Mon, 19 Oct 2026 14:19:58 GMT | How I Triggered XSS in an AI Image Generator Using Image Recreati... | xss-attack | | Yes | | Mon, 19 Oct 2026 17:42:48 GMT | Intercept HTTP Traffic Using Bettercap \| Ethical Hacking Tutori... | bug-bounty | | Yes | | Mon, 19 Oct 2026 14:55:10 GMT | OverTheWire Bandit WalkthroughPart 7: Levels 30–32 | ethical-hacking | | Yes | | Mon, 19 Oct 2026 17:03:12 GMT | One Race Condition, Nine Projects, One Shared Data | bug-bounty | | Yes | | Mon, 19 Oct 2026 16:50:36 GMT | cloudstorm: Load Testing From Many AWS Regions With One Command L... | penetration-testing | | Yes | | Mon, 19 Oct 2026 18:00:21 GMT | Logistics Company Admin Panel Compromise | bug-bounty, xss-attack, bug-bounty-writeup | | Yes | | Mon, 19 Oct 2026 11:48:42 GMT | The User Changed One ID. I Tested What the Server Actually Truste... | vulnerability, idor | | Yes | | Mon, 19 Oct 2026 10:38:57 GMT | What Is Bug Bounty Hunting and How Does It Work? | web-security | | Yes | | Mon, 19 Oct 2026 16:56:43 GMT | Bypassing OTP Verification by Modifying the Server Response | bugbounty-writeup | | Yes | | Mon, 19 Oct 2026 15:41:17 GMT | MALFEX: A Malicious npm Package Hides a Windows Shellcode Loader | information-security | | Yes | | Mon, 19 Oct 2026 12:42:49 GMT | Beyond Security Tools: How to Choose the Right Cybersecurity Part... | cyber-security-awareness | | Yes | | Mon, 19 Oct 2026 16:29:10 GMT | When PKCE Isn’t Enough: How an OAuth Redirect URI Flaw Can Lead... | bug-bounty, hacking, web-security | | Yes | | Mon, 19 Oct 2026 18:03:01 GMT | How is Information Used in Controlling? | hacking | | Yes | | Mon, 19 Oct 2026 16:22:53 GMT | Anthropic Tested Whether Small AI Models Could Spread Across Devi... | hacking | | Yes | | Mon, 19 Oct 2026 05:15:55 GMT | The Backup Tool Became the Backdoor: Inside the ConnectWise Appli... | application-security | | Yes | | Mon, 19 Oct 2026 14:49:33 GMT | THE COST OF BEING THE “STRONG ONE” : WHEN SILENCE IS YOUR ONL... | vulnerability | | Yes | | Mon, 19 Oct 2026 14:35:27 GMT | I Tested the Same Bug on 3 Programs. Only One Paid Me. Here’s W... | bug-bounty-tips | | Yes | | Mon, 19 Oct 2026 16:55:32 GMT | Command Injection: When the Shell Runs Your Input | bug-bounty, penetration-testing, web-security, ethical-hacking | | Yes | | Mon, 19 Oct 2026 17:38:56 GMT | TryHackMe Smag Grotto — Full Walkthrough ️‍♂️ | penetration-testing, infosec | | Yes | | Mon, 19 Oct 2026 12:21:01 GMT | To the Person I Became After You | vulnerability | | Yes | | Mon, 19 Oct 2026 05:04:13 GMT | Your Browser Is Keeping Years of Your WhatsApp. | infosec | | Yes | | Mon, 19 Oct 2026 04:44:57 GMT | CVE-2026–107806 Explained: When the Same Person Holds Both the ... | cve | | Yes | | Mon, 19 Oct 2026 05:06:20 GMT | Could This Have Been a €1,000 Bug? My First Accepted Bug Bounty... | bug-bounty-tips, bug-bounty-writeup | | Yes | | Mon, 19 Oct 2026 13:14:01 GMT | Ransomware: Dijital Çağın Siber Kabusu | cyber-security-awareness | | Yes | | Mon, 19 Oct 2026 13:32:02 GMT | Denmark Just Proved a Multi-Billion Dollar Cyber Strategy is No M... | cyber-security-awareness | | Yes | | Mon, 19 Oct 2026 13:01:13 GMT | From file to flag: reversing "kindling" (Malware Space Village) w... | hacking | | Yes | | Mon, 19 Oct 2026 11:56:21 GMT | How my eyes became vulnerable to shed tears | vulnerability | | Yes | | Mon, 19 Oct 2026 17:39:18 GMT | IT Business Solutions: What They Are and How to Buy | information-technology | | Yes | | Mon, 19 Oct 2026 18:05:51 GMT | At the Edge of Survival: Why Border Security Cannot Ignore Local ... | security | | Yes | | Mon, 19 Oct 2026 18:56:01 GMT | Finding Virtual Hosts with ffuf: A Practical Guide | security, ethical-hacking | | Yes | | Mon, 19 Oct 2026 14:04:25 GMT | The desktop computer just quietly stopped being a thing you buy. | cyber-security-awareness | | Yes | | Mon, 19 Oct 2026 16:11:18 GMT | White Hat Hacker from Tajikistan: How Pro Muzafarov Shukron Safeg... | infosec | | Yes | | Mon, 19 Oct 2026 14:01:06 GMT | CYBER BRIEFING \| October 19, 2026 | hacking | | Yes | | Mon, 19 Oct 2026 10:57:11 GMT | Website Development Guam: Building a Strong Foundation for Online... | information-technology | | Yes | | Mon, 19 Oct 2026 16:22:49 GMT | HTB Lame | hacking | | Yes | | Mon, 19 Oct 2026 16:36:19 GMT | I Built a Tool That Finds Bug Bounty Programs Across 4 Platforms | bug-bounty, web-security, ethical-hacking | | Yes | | Mon, 19 Oct 2026 10:32:29 GMT | Redis Under Threat: Understanding CVE-2026–81934, From Use-Afte... | cve | | Yes | | Mon, 19 Oct 2026 06:26:01 GMT | $4,800 for an Equals Sign: CSV Formula Injection That Turns an Ex... | bug-bounty-writeup | | Yes | | Mon, 19 Oct 2026 12:41:29 GMT | A Nonce Is Not a Boundary: Separating Replay, Cancellation and Do... | hacking | | Yes | | Mon, 19 Oct 2026 13:18:42 GMT | How a Learning Management System Is Transforming Modern Education | information-technology | | Yes | | Mon, 19 Oct 2026 15:22:51 GMT | The Cybersecurity Skills I Would Bet My Career on for the Next 5 ... | information-security | | Yes | | Mon, 19 Oct 2026 16:23:39 GMT | Healthcare Cybersecurity: Protecting Trust in a Digital World | cyber-security-awareness | | Yes | | Mon, 19 Oct 2026 02:56:53 GMT | A Slit of Light | vulnerability | | Yes | | Mon, 19 Oct 2026 08:46:13 GMT | When an AI Sandbox’s Security Boundaries Fail | application-security | | Yes | | Mon, 19 Oct 2026 11:43:09 GMT | Anthropic Commits 5% of Its Shares to a Public Benefit Fund | information-technology | | Yes | | Mon, 19 Oct 2026 18:47:21 GMT | Your Company Doesn't Have a Cybersecurity Problem. It Has a Visib... | cyber-security-awareness | | Yes | | Mon, 19 Oct 2026 15:36:53 GMT | I Started Learning Cybersecurity. Then One Link Made Me Think Twi... | cyber-security-awareness | | Yes | | Mon, 19 Oct 2026 12:01:01 GMT | When a UI API Becomes a Security Boundary | application-security | | Yes | | Mon, 19 Oct 2026 13:26:32 GMT | How Email-Change Token Exposure Led to Access to To Private Repos... | bug-bounty-tips, information-security | | Yes | | Mon, 19 Oct 2026 13:51:51 GMT | OWASP Top 10:2025: What Security Teams Should Operationalize | application-security | | Yes | | Mon, 19 Oct 2026 15:18:20 GMT | ️ Security Patch 是什麼？為什麼 IT 部門總是叫你更... | information-technology, information-security | | Yes | | Mon, 19 Oct 2026 09:03:42 GMT | Business Logic Flaws That Pay More Than SQLi — And How to Find ... | infosec | | Yes | | Mon, 19 Oct 2026 13:39:29 GMT | Shadow AI in the Enterprise: The Security Risks of Unofficial AI ... | information-security | | Yes | | Mon, 19 Oct 2026 17:05:53 GMT | Beyond Open Ports: My Practical Nmap Lab and Risk-Based Vulnerabi... | penetration-testing, ethical-hacking | | Yes | | Mon, 19 Oct 2026 13:16:09 GMT | SBOM vs CBOM vs HBOM | information-security | | Yes | | Mon, 19 Oct 2026 10:19:47 GMT | HF2019 Linux Walkthrough | vapt | | Yes | | Mon, 19 Oct 2026 15:01:32 GMT | A Primitive Is Not an Attack Path | ethical-hacking, security-research | | Yes | | Mon, 19 Oct 2026 15:31:15 GMT | XSS by Proxy: “Tricking the AI Into Reading Its Own Death Sente... | xss-attack, bug-bounty-writeup | | Yes | | Mon, 19 Oct 2026 14:48:50 GMT | The Story of Spark: The Mind Made of Light | information-technology | | Yes | | Mon, 19 Oct 2026 14:59:47 GMT | I Stopped Reading Error Messages as Errors | ethical-hacking | | Yes | | Tue, 01 Sep 2026 19:13:24 GMT | pixi on UBI-micro: A Safer, Smaller Multi-Stage Container Build | vulnerability-scanning | | | | Mon, 21 Sep 2026 07:59:14 GMT | Installing Nmap on Windows: A Quick Start Guide | recon | | | | Sat, 18 Jul 2026 19:00:12 GMT | XSS Bypass — The Hackers Labs | xss-bypass | | | | Wed, 30 Sep 2026 11:04:54 GMT | When Deleting the Default Workspace Made the Entire Account Unusa... | bugcrowd | | | | Sun, 18 Oct 2026 18:59:56 GMT | Is Traditional DAST Dead? AI Pentesting Is Changing the Security ... | application-security | | | | Thu, 08 Oct 2026 13:34:27 GMT | How One Student Earned $1,030 From an Adobe Bug: A Bugitrix Case ... | bug-bounty-hunter | | | | Tue, 06 Oct 2026 18:31:01 GMT | Top 20 curl Commands Every Hacker Should Know. | cybersecurity-tools | | | | Fri, 12 Jun 2026 12:04:09 GMT | The Print Button That Handed Me Your Account: Stored XSS to Full ... | xss-bypass | | | | Sun, 09 Aug 2026 18:20:11 GMT | I Took Over Someone’s Subdomain and Put a Cat On It | subdomain-takeover | | | | Wed, 09 Sep 2026 11:01:53 GMT | Wild Bounty Showdown PG Soft di HORE889: Pola Cascade | bounties | | | | Sun, 13 Sep 2026 12:00:56 GMT | Stored Cross-Site-Scripting(XSS): A Beginner’s Guide | cross-site-scripting | | | | Sun, 18 Oct 2026 14:55:54 GMT | The asset is dead! Long live the asset! | application-security | | | | Thu, 06 Aug 2026 20:28:38 GMT | Kali CTF Writeup: Uncovering “the unbroken shelf” (OSINT) | google-dork | | | | Sat, 20 Apr 2024 17:20:58 GMT | TryHackMe — Brute Walkthrough \| TheHiker | log-poisoning | | | | Fri, 16 Oct 2026 16:24:54 GMT | How a 56KB PNG Brought Down a Library with Millions of Downloads ... | cve | | | | Wed, 17 Jun 2026 07:53:43 GMT | Operation Liwanag: The Same Map a Chinese Intelligence Asset Drew... | censys | | | | Fri, 02 Oct 2026 06:56:42 GMT | Secret Supernovas \| CSS CTF Semester 2 2026 Writeup | information-disclosure | | | | Mon, 07 Sep 2026 10:29:47 GMT | The 5-Phase Pentesting Model, Explained Simply | pentest | | | | Sun, 18 Oct 2026 16:42:51 GMT | Bir Hacker Gibi Düşünmek — #14 | file-upload | | | | Sat, 19 Sep 2026 01:21:26 GMT | What I learned From Managing Bug Bounty Program | bug-bounty-program | | | | Thu, 02 Jul 2026 16:02:56 GMT | Strengthening Web3 Trust with Blockchain Incident Response & Fore... | bug-bounty-program | | | | Wed, 06 May 2026 11:36:01 GMT | Google Dorking | dorking | | | | Thu, 03 Sep 2026 06:34:00 GMT | WebDecode — picoCTF Write-up \| Finding and Decoding a Hidden F... | information-disclosure | | | | Tue, 21 Apr 2026 14:42:50 GMT | Web Security Series # 16— Exploiting Local File Inclusion (LFI) | file-inclusion | | | | Sun, 18 Oct 2026 13:51:02 GMT | LLMNR Poisoning (Active Directory Attack) | pentesting | | | | Wed, 23 Sep 2026 13:29:31 GMT | The Vulnerability Disappeared. Was It Actually Fixed? | vulnerability-scanning | | | | Tue, 25 Aug 2026 09:49:53 GMT | B2B Directory Listing Sites: Top 10 for 2026 | directory-listing | | | | Sun, 13 Sep 2026 17:41:55 GMT | The Deal Is Broken: What Bugcrowd’s Triage Machine Actually Sel... | bugcrowd, vulnerability-disclosure | | | | Wed, 30 Sep 2026 08:50:40 GMT | CVE-2022–1471: Achieving RCE on Android with SnakeYAML via Cust... | rce | | | | Fri, 09 Oct 2026 13:58:07 GMT | UUIDs vs Sequential IDs: Which One Actually Stops IDOR? | idor | | | | Mon, 28 Sep 2026 11:43:26 GMT | Citrix Zero-Day: How Vulnerable Is the Netherlands’ Digital Inf... | rce | | | | Sat, 06 Dec 2025 23:06:15 GMT | Big News from DorkFi — PreFi Rewards Drop + Contest Live! | dorks | | | | Tue, 30 Jun 2026 12:11:15 GMT | El toro de Wall Street ya está en WhiteBIT | bounty-program | | | | Mon, 22 Jun 2026 06:51:54 GMT | Find exposed sensitive data in AWS, Google Cloud, and other platf... | dorks | | | | Sat, 26 Sep 2026 09:03:27 GMT | Crashing a Webhook Endpoint by Disguising an IP Address — $100 ... | ssrf | | | | Wed, 14 Oct 2026 14:29:39 GMT | Mungkin Memang Bukan Jalannya(?) | vdp | | | | Mon, 20 Jul 2026 06:24:37 GMT | Using Cache Deception Techniques to Discover Cache Poisoning Vect... | web-cache-poisoning | | | | Sat, 26 Sep 2026 05:56:36 GMT | From File Preview to Server-Side File Read: Testing DuckDB SQL Ex... | local-file-inclusion | | | | Sat, 03 Oct 2026 19:49:47 GMT | AI-POWERED APPLICATION SECURITY WITH HCL APPSCAN | cybersecurity-tools | | | | Tue, 15 Sep 2026 12:01:02 GMT | I Built a Recon Pipeline That Maps a Target Before I Touch It | recon | | | | Tue, 13 Oct 2026 14:17:32 GMT | KPMG CTF 2026 Web Challenges: The Dragon Warrior Solution | bugbounty-writeup | | | | Fri, 05 Jun 2026 04:49:28 GMT | Price Manipulation in Payment Gateway / Shopping Cart | vdp | | | | Wed, 19 Nov 2025 19:44:02 GMT | The Pulse of Liquidity: How DorkFi’s Interest Rates Adapt in Re... | dorks | | | | Mon, 13 Apr 2026 06:37:51 GMT | File Inclusion on DVWA | file-inclusion | | | | Wed, 14 Oct 2026 09:12:23 GMT | One Random Search Led Me to Exposed PDFs During a Bug Bounty Hunt | recon | | | | Sat, 17 Oct 2026 14:48:30 GMT | AWS IAM Access Analyzer Explained: Detecting External Access and ... | bugbounty-writeup | | | | Thu, 13 Mar 2025 18:09:56 GMT | How I Found Sensitive Information using Github Dorks in Bug Bount... | github-dorking | | | | Wed, 15 Jul 2026 11:30:22 GMT | TryHackMe \| Google Dorking | google-dorking | | | | Mon, 13 Apr 2026 03:31:01 GMT | Google Dorks Google Ko Bana Do Apna Hacking Tool: Free Mein Bugs ... | github-dorking | | | | Fri, 10 Nov 2023 03:38:01 GMT | Apache error.log advanced Log poisoning RCE | log-poisoning | | | | Wed, 09 Sep 2026 09:11:00 GMT | The Ultimate 2026 Shodan Cheat Sheet Guide | shodan | | | | Wed, 30 Sep 2026 15:26:01 GMT | The Perfect Phishing ⚔️ | bugcrowd | | | | Thu, 20 Nov 2025 17:16:47 GMT | The Health Factor: How DorkFi Keeps Your Position Safe | dorks | | | | Wed, 14 Oct 2026 19:47:10 GMT | The Fall Bug Invasion Isn’t About Dirt. It’s About Your Sunny... | bugs | | | | Sat, 17 Oct 2026 18:21:51 GMT | Toxssin: Exploring XSS Exploitation with an Open-Source Security ... | xss-attack | | | | Wed, 14 Oct 2026 12:12:53 GMT | Choosing a VAPT Partner? Your Industry Changes What You Need to T... | vapt | | | | Tue, 29 Sep 2026 10:37:26 GMT | Practical SQL Injection Testing with sqlmap | cybersecurity-tools | | | | Thu, 08 Oct 2026 04:04:43 GMT | How We Made File Uploads Resume Instead of Restart | file-upload | | | | Sat, 25 Jul 2026 04:56:38 GMT | Writeup VDP CVE-2026–42031 (CKAN SQLI & Autherization bypass) d... | vdp | | | | Wed, 07 Oct 2026 13:13:34 GMT | TryHackMe: Corridor — When Obscurity Fails Against IDOR | idor | | | | Sat, 10 Oct 2026 05:32:48 GMT | VAPTOR AI Expands Compliance Mapping with POPIA and SOC 2 Framewo... | pentest | | | | Fri, 25 Sep 2026 10:04:49 GMT | Basics of Subdomain Takeover | subdomain-takeover | | | | Sat, 17 Oct 2026 12:44:58 GMT | I Just Found Out What Happens to the Bugs I Report. It Changed Ho... | bug-bounty-tips | | | | Fri, 09 Oct 2026 08:48:33 GMT | Who’s Who in Banking: CIF, GCIF, Account Numbers and IBAN Expla... | bug-bounty-hunter | | | | Tue, 11 Aug 2026 08:57:49 GMT | DEV DIARIES — TRY HACK ME WALKTHROUGH: | subdomain-enumeration | | | | Sat, 19 Sep 2026 19:06:37 GMT | Google Dorking for Bug Hunters: Real-World Case Studies | google-dork | | | | Mon, 14 Sep 2026 15:09:52 GMT | Guided Pentest: Chaining Web Vulnerabilities to RCE | remote-code-execution | | | | Mon, 11 Dec 2023 18:17:01 GMT | Exploiting a Log Poisoning. | log-poisoning | | | | Tue, 11 Nov 2025 16:43:14 GMT | Beyond Google: Navigating the Hidden Internet with Shodan and Cen... | censys | | | | Sat, 14 Mar 2026 18:06:12 GMT | Web Security Series #3 — Discovering Credentials Using Cluster ... | bug-bounty-hunting | | | | Wed, 07 Oct 2026 06:01:01 GMT | How I Found an IDOR Bug That Exposed Other Users’ Account Infor... | idor | | | | Sat, 10 Oct 2026 08:02:31 GMT | Your Backend Doesn’t Have to Carry Every File to S3 | file-upload | | | | Wed, 23 Sep 2026 13:57:18 GMT | How to Promote Your Business Online Without a Website in India | directory-listing | | | | Wed, 16 Jul 2025 12:07:42 GMT | Hackers Love This 1979 Protocol (Because It Can’t Defend Itself... | censys | | | | Sun, 18 Oct 2026 06:55:06 GMT | The Form Said No, the API Said Yes: The Story of My Second CVE | cve | | | | Tue, 18 Aug 2026 09:49:57 GMT | The Hidden Internet in Plain Sight: 9 Google Operators That Fuel ... | google-dork | | | | Sat, 17 Oct 2026 05:14:01 GMT | TATA Group Security Research Discovering a Hardcoded AES Key | vulnerability-disclosure | | | | Wed, 14 Oct 2026 09:15:25 GMT | Node.js Buffers Explained: What Happens Below JavaScript Strings? | file-upload | | | | Wed, 29 Jul 2026 12:30:32 GMT | Is Google Dorking Legal? Understanding the Ethical and Legal Aspe... | google-dorking, google-dork | | | | Wed, 14 Oct 2026 08:55:37 GMT | HOW TO WORK ON SOME PORT ON Metasploit able | exploit | | | | Fri, 18 Sep 2026 12:48:09 GMT | How I Found a Critical Jenkins Vulnerability in 10 Minutes and Ea... | remote-code-execution | | | | Thu, 03 Sep 2026 11:34:27 GMT | TryHackMe: Lo-Fi Walkthrough | local-file-inclusion | | | | Tue, 13 Oct 2026 21:46:10 GMT | Gitea Guarded Three Doors and Forgot the Fourth | ssrf | | | | Tue, 25 Aug 2026 02:21:01 GMT | Recon Is the Whole Game — You’re Just Not Playing It Righ... | google-dork | | | | Wed, 18 Mar 2026 10:03:26 GMT | Web Security Series #7 — Exploiting Blind SQL Injection via Ses... | bug-bounty-hunting | | | | Mon, 05 Oct 2026 12:04:28 GMT | Bypassing Bad-Word Filters with Unicode Homoglyphs | bugbounty-writeup | | | | Mon, 24 Aug 2026 11:13:05 GMT | Fools guide to UAT-10147 | pentest | | | | Mon, 12 Oct 2026 12:35:32 GMT | TryHackMe:Vulnversity | file-upload | | | | Sat, 09 May 2026 02:26:22 GMT | How I Discovered a Reflected XSS Vulnerability on a Major German ... | xss-bypass | | | | Mon, 27 Jan 2025 16:51:28 GMT | The man who suffered 11 years in hell for freedom has now been fr... | web-pentest | | | | Wed, 07 Oct 2026 13:17:16 GMT | Critical BAC: IDOR + Weak Appointment Code Enables Unauthorized A... | idor | | | | Fri, 07 Aug 2026 08:34:38 GMT | I Gave an Open-Weight Model a Linux Kernel Bug(CVE-2026–64564). | cyber-sec | | | | Tue, 29 Sep 2026 17:06:32 GMT | How I Bypassed an OTP Verification Limit by Chaining Multiple Log... | bugcrowd | | | | Wed, 30 Sep 2026 13:06:58 GMT | Road to First Bug Day 0/90 | bug-bounty-hunter | | | | Mon, 31 Aug 2026 12:33:36 GMT | A Senior Pentester’ Approach to IDOR and Authorization Testing