⤷ Title: [CVE-2021–28379] Abusing file uploads to get an SSH backdoor
════════════════════════
𐀪 Author: Fady Othman
════════════════════════
ⴵ Time: Mon, 26 Jan 2026 09:12:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #vulnerability_research #cve #bug_bounty_writeup #rce
════════════════════════
𐀪 Author: Fady Othman
════════════════════════
ⴵ Time: Mon, 26 Jan 2026 09:12:23 GMT
════════════════════════
⌗ Tags: #bug_bounty #vulnerability_research #cve #bug_bounty_writeup #rce
Medium
[CVE-2021–28379] Abusing file uploads to get an SSH backdoor
Free Link
⤷ Title: HTML Injection to Data Exfiltration: Weaponizing CSS
════════════════════════
𐀪 Author: Jayateertha Guruprasad
════════════════════════
ⴵ Time: Mon, 26 Jan 2026 09:09:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #blog #bug_bounty #hacking #infosec
════════════════════════
𐀪 Author: Jayateertha Guruprasad
════════════════════════
ⴵ Time: Mon, 26 Jan 2026 09:09:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #blog #bug_bounty #hacking #infosec
Medium
HTML Injection to Data Exfiltration: Weaponizing CSS
🐞 Found HTML Injection ? Don’t Stop There.
⤷ Title: easy $100 | bypass 403 to 200 ok
════════════════════════
𐀪 Author: Swarnim Bandekar
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:25:04 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #hacking #infosec
════════════════════════
𐀪 Author: Swarnim Bandekar
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:25:04 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #hacking #infosec
Medium
easy $100 | bypass 403 to 200 ok
read how origin IP exposed a .env file and got me a $100. how can one bypass 403 to 200 ok.
⤷ Title: The Company Fixed the Bug — but Forgot the Cache
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:24:26 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #hacking #bug_bounty_tips #cybersecurity
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:24:26 GMT
════════════════════════
⌗ Tags: #infosec #bug_bounty #hacking #bug_bounty_tips #cybersecurity
Medium
The Company Fixed the Bug — but Forgot the Cache 😈🧠
Hey there!😁
⤷ Title: How I Convinced an AI to Hack Itself: Prompt Injection to XSS ️
════════════════════════
𐀪 Author: Mahendra Purbia (Mah3Sec)
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:15:41 GMT
════════════════════════
⌗ Tags: #security #ai #pentesting #bug_bounty
════════════════════════
𐀪 Author: Mahendra Purbia (Mah3Sec)
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:15:41 GMT
════════════════════════
⌗ Tags: #security #ai #pentesting #bug_bounty
Medium
How I Convinced an AI to Hack Itself: Prompt Injection to XSS 🕷️
Free Link🔗
⤷ Title: Cache Deception: When “Harmless Caching” Becomes a Real Risk
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:15:26 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #hacking #bug_bounty_writeup #bug_bounty_tips
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:15:26 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #hacking #bug_bounty_writeup #bug_bounty_tips
Medium
Cache Deception: When “Harmless Caching” Becomes a Real Risk
Hello everyone, I’m Nitin Yadav. Back again with another practical blog.
⤷ Title: From JS File to Jailbreak: How Frontend Code Gave Me Backend Access
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:14:22 GMT
════════════════════════
⌗ Tags: #hacking #infosec #cybersecurity #bug_bounty_tips #bug_bounty
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:14:22 GMT
════════════════════════
⌗ Tags: #hacking #infosec #cybersecurity #bug_bounty_tips #bug_bounty
Medium
From JS File to Jailbreak: How Frontend Code Gave Me Backend Access 💻🔑
Free Link 🎈
⤷ Title: How a Simple PDF Export Feature Led to a Critical Local File Inclusion
════════════════════════
𐀪 Author: Abhiram
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:12:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #web_security #application_security #web_application_security
════════════════════════
𐀪 Author: Abhiram
════════════════════════
ⴵ Time: Sun, 25 Jan 2026 14:12:43 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #web_security #application_security #web_application_security
Medium
How a Simple PDF Export Feature Led to a Critical Local File Inclusion
A real-world case study showing how improper file handling and excessive privileges turned a simple feature into a critical security flaw.
⤷ Title: Intigriti 0126 CTF Challenge: Exploiting insecure postMessage handlers
════════════════════════
𐀪 Author: Ayoub
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Hacking Tools
════════════════════════
𐀪 Author: Ayoub
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Hacking Tools
Intigriti
Intigriti 0126 CTF Challenge: Exploiting insecure postMessage handlers
At Intigriti, we host monthly web-based Capture The Flag (CTF) challenges as a way to engage with the security researcher community. January's challenge presented participants with CRYPTIGRITI, a cryp...
⤷ Title: 31 bite-sized tips, techniques, and bug bounty resources to kick off 2026!
════════════════════════
𐀪 Author: Eleanor Barlow
════════════════════════
ⴵ Time: Thu, 22 Jan 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Business Insights
════════════════════════
𐀪 Author: Eleanor Barlow
════════════════════════
ⴵ Time: Thu, 22 Jan 2026 00:00:00 GMT
════════════════════════
⌗ Tags: #Business Insights
Intigriti
31 bite-sized tips, techniques, and bug bounty resources to kick off 2026!
31 practical bite-sized bug bounty tips and techniques, and proven approaches for finding, prioritizing, and validating vulnerabilities more efficiently in real-world programs.
⤷ Title: ECA Digital: Tudo que você precisa saber sobre a nova legislação
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 19:38:59 GMT
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 19:38:59 GMT
════════════════════════
⌗ Tags: No_Tags
BugHunt
ECA Digital: o que muda com a nova lei e os impactos para empresas
Entenda o que é o ECA Digital, por que a nova lei foi criada e como ela impacta empresas, plataformas e a proteção de crianças no ambiente digital.
⤷ Title: Supply Chain Attack: o guia prático de prevenção e defesa
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Tue, 20 Jan 2026 17:31:00 GMT
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Bughunt
════════════════════════
ⴵ Time: Tue, 20 Jan 2026 17:31:00 GMT
════════════════════════
⌗ Tags: No_Tags
BugHunt
Supply Chain Attack: guia prático de prevenção e defesa
Entenda o que é um supply chain attack, por que ele se espalha na cadeia de suprimentos e como se prevenir na prática com medidas de defesa e segurança.
⤷ Title: HTTP Request Smuggling Lab Basic CL.TE vulnerability
════════════════════════
𐀪 Author: Mukilan Baskaran
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 11:40:32 GMT
════════════════════════
⌗ Tags: #security #infosec #cybersecurity #bug_bounty #medium
════════════════════════
𐀪 Author: Mukilan Baskaran
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 11:40:32 GMT
════════════════════════
⌗ Tags: #security #infosec #cybersecurity #bug_bounty #medium
Medium
HTTP Request Smuggling Lab Basic CL.TE vulnerability
CL.TE
⤷ Title: Pentester Bytes: GraphQL Tools
════════════════════════
𐀪 Author: Shivam Bathla
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 11:34:57 GMT
════════════════════════
⌗ Tags: #graphql #hacking #cybersecurity #pentesting #bug_bounty
════════════════════════
𐀪 Author: Shivam Bathla
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 11:34:57 GMT
════════════════════════
⌗ Tags: #graphql #hacking #cybersecurity #pentesting #bug_bounty
Medium
Pentester Bytes: GraphQL Tools
Let’s check out some pentesting tools on GraphQL to up your game!
⤷ Title: Top Free Cybersecurity Courses From Big Tech Companies (2026)
════════════════════════
𐀪 Author: Shaif Ali
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 10:25:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #ethical_hacking #bug_bounty #hacking
════════════════════════
𐀪 Author: Shaif Ali
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 10:25:15 GMT
════════════════════════
⌗ Tags: #cybersecurity #information_security #ethical_hacking #bug_bounty #hacking
Medium
Top Free Cybersecurity Courses From Big Tech Companies (2026)
Want to build cybersecurity skills without spending money? Here’s a curated list of top free Cybersecurity courses from big tech companies.
⤷ Title: Werkzeug Debugger Authentication Bypass via Client-Side Response Manipulation
════════════════════════
𐀪 Author: AAKASH SHARMA
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 09:28:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #bug_bounty #web_security
════════════════════════
𐀪 Author: AAKASH SHARMA
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 09:28:11 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #bug_bounty #web_security
Medium
Werkzeug Debugger Authentication Bypass via Client-Side Response Manipulation
imagine
⤷ Title: Prompt Injection Toolkit: 25 Payloads & Techniques for Mastering AI Pentesting
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 08:34:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #cybersecurity #bug_bounty #machine_learning
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 08:34:04 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #cybersecurity #bug_bounty #machine_learning
Medium
Prompt Injection Toolkit: 25 Payloads & Techniques for Mastering AI Pentesting
Ever tried breaking an AI chatbot with a ‘please ignore all previous instructions’ prompt, only to realize it’s trickier than you thought…
⤷ Title: How to Read a Web App Like a Hacker (Even If You’re Not Technical Yet)
════════════════════════
𐀪 Author: Er Dhaval Ramani
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 05:14:47 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cyber_security_awareness #cybersecurity #bug_bounty_writeup
════════════════════════
𐀪 Author: Er Dhaval Ramani
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 05:14:47 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #cyber_security_awareness #cybersecurity #bug_bounty_writeup
Medium
How to Read a Web App Like a Hacker (Even If You’re Not Technical Yet)
When I first tried to understand bug bounty, I honestly thought I was too early to even look at real websites.
⤷ Title: CyberLessons101: Dockerized CTF Challenge Index.
════════════════════════
𐀪 Author: Josh Beck
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 01:56:16 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #bug_bounty #ctf_writeup
════════════════════════
𐀪 Author: Josh Beck
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 01:56:16 GMT
════════════════════════
⌗ Tags: #ctf #cybersecurity #bug_bounty #ctf_writeup
Medium
CyberLessons101: Dockerized CTF Challenge Index.
Direct Link First: (https://cyberlessons101.com)
⤷ Title: When “Draft” Doesn’t Mean Private: Finding an IDOR in an Unpublished Resource
════════════════════════
𐀪 Author: AKU
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 01:02:18 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #idor #hacking #web_development
════════════════════════
𐀪 Author: AKU
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 01:02:18 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #idor #hacking #web_development
Medium
When “Draft” Doesn’t Mean Private: Finding an IDOR in an Unpublished Resource
When we think about draft content in web applications, there’s an unspoken assumption: If something isn’t published, it’s private.
⤷ Title: WhatWeb Guide: Fingerprinting and Recognition for Bug Hunting
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 00:01:03 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #technology #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: JPablo13
════════════════════════
ⴵ Time: Sat, 31 Jan 2026 00:01:03 GMT
════════════════════════
⌗ Tags: #hacking #penetration_testing #technology #cybersecurity #bug_bounty
Medium
WhatWeb Guide: Fingerprinting and Recognition for Bug Hunting
Master WhatWeb to identify web technologies, detect vulnerabilities, and optimize your recognition in Bug Bounty.