⤷ Title: From a Single WAF Bypass to 58,000+ Exposed Media Objects
════════════════════════
𐀪 Author: Tarek ElDemerdash
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 12:51:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #web_application_security #penetration_testing #information_security
════════════════════════
𐀪 Author: Tarek ElDemerdash
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 12:51:56 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #web_application_security #penetration_testing #information_security
Medium
From a Single WAF Bypass to 58,000+ Exposed Media Objects
A bug bounty case study in chaining overlooked misconfigurations into a full attack surface
⤷ Title: When the Marketing Page Became the Threat Model: Forging “Verified Reviews” on PriceRunner
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 04:22:20 GMT
════════════════════════
⌗ Tags: #api_security #web_application_security #business_logic #web_security #bug_bounty
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 04:22:20 GMT
════════════════════════
⌗ Tags: #api_security #web_application_security #business_logic #web_security #bug_bounty
Medium
When the Marketing Page Became the Threat Model: Forging “Verified Reviews” on PriceRunner
How a simple business-logic flaw turned a company’s own trust promise into a security test.
⤷ Title: Finding SSRF In Modern Web Apps
════════════════════════
𐀪 Author: Haroon Shahid
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 07:10:05 GMT
════════════════════════
⌗ Tags: #bug_bounty #ssrf #web_application_security #bug_bounty_writeup #cybersecurity
════════════════════════
𐀪 Author: Haroon Shahid
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 07:10:05 GMT
════════════════════════
⌗ Tags: #bug_bounty #ssrf #web_application_security #bug_bounty_writeup #cybersecurity
Medium
Finding SSRF In Modern Web Apps
You think Modern Web Apps are like Labs out there. C’mon. That’s not how Modern Web Apps work. The beginners that say that they know the…
⤷ Title: Hidden URL Parameters: Finding What Web Applications Don’t Show You
════════════════════════
𐀪 Author: Alif Mortaza
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 18:36:24 GMT
════════════════════════
⌗ Tags: #web_application_security #ethical_hacking #bug_bounty #cybersecurity #web_security
════════════════════════
𐀪 Author: Alif Mortaza
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 18:36:24 GMT
════════════════════════
⌗ Tags: #web_application_security #ethical_hacking #bug_bounty #cybersecurity #web_security
Medium
Hidden URL Parameters: Finding What Web Applications Don’t Show You
In many cases, parameters are not documented or directly exposed through a web application’s user interface. Some may support internal…
⤷ Title: Session Management: Understanding and Exploiting Insecure Sessions THM
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 06:37:18 GMT
════════════════════════
⌗ Tags: #security #session_management #tryhackme_writeup #penetration_testing #web_application_security
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 06:37:18 GMT
════════════════════════
⌗ Tags: #security #session_management #tryhackme_writeup #penetration_testing #web_application_security
Medium
Session Management: Understanding and Exploiting Insecure Sessions THM
Learn about session management, cookies, tokens, and common attacks against insecure session implementations, including session…
⤷ Title: How an Integer Overflow Let Me Buy Anything for $0
════════════════════════
𐀪 Author: Rohit dalal
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 04:01:48 GMT
════════════════════════
⌗ Tags: #bussiness_logic #bug_bounty #bypass #integer_overflow #web_application_security
════════════════════════
𐀪 Author: Rohit dalal
════════════════════════
ⴵ Time: Mon, 17 Aug 2026 04:01:48 GMT
════════════════════════
⌗ Tags: #bussiness_logic #bug_bounty #bypass #integer_overflow #web_application_security
Medium
How an Integer Overflow Let Me Buy Anything for $0
During a security assessment on a popular e-commerce platform, I stumbled upon a classic yet frequently overlooked vulnerability, an…
⤷ Title: Content Security Policy: Putting the Browser on a Security Diet
════════════════════════
𐀪 Author: Robert Broeckelmann
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 16:50:45 GMT
════════════════════════
⌗ Tags: #web_application_security #csp #application_security #content_security_policy #web_browser
════════════════════════
𐀪 Author: Robert Broeckelmann
════════════════════════
ⴵ Time: Wed, 19 Aug 2026 16:50:45 GMT
════════════════════════
⌗ Tags: #web_application_security #csp #application_security #content_security_policy #web_browser
Medium
Content Security Policy: Putting the Browser on a Security Diet
Web applications have become remarkably powerful.
⤷ Title: WAAP Vendor Evaluation: Comparing Leading Web Application and API Protection Platforms
════════════════════════
𐀪 Author: Gauri Kale
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 07:12:07 GMT
════════════════════════
⌗ Tags: #waap_security #waap #web_application_security #api_security #cybersecurity
════════════════════════
𐀪 Author: Gauri Kale
════════════════════════
ⴵ Time: Mon, 31 Aug 2026 07:12:07 GMT
════════════════════════
⌗ Tags: #waap_security #waap #web_application_security #api_security #cybersecurity
Medium
WAAP Vendor Evaluation: Comparing Leading Web Application and API Protection Platforms
Web applications and APIs have become essential to modern digital businesses, but they are also prime targets for sophisticated…
⤷ Title: Application Security Testing: Evaluating Leading Vendors and Market Trends
════════════════════════
𐀪 Author: Gauri Kale
════════════════════════
ⴵ Time: Wed, 02 Sep 2026 04:51:20 GMT
════════════════════════
⌗ Tags: #cloud_security #security_testing #application_security #app_security #web_application_security
════════════════════════
𐀪 Author: Gauri Kale
════════════════════════
ⴵ Time: Wed, 02 Sep 2026 04:51:20 GMT
════════════════════════
⌗ Tags: #cloud_security #security_testing #application_security #app_security #web_application_security
Medium
Application Security Testing: Evaluating Leading Vendors and Market Trends
As organizations accelerate cloud adoption, DevSecOps, API development, and software modernization, Application Security Testing (AST) has…
⤷ Title: SimpleCTF | TryHackMe
════════════════════════
𐀪 Author: Aalishaf
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 01:25:45 GMT
════════════════════════
⌗ Tags: #information_security #linux #tryhackme #cybersecurity #web_application_security
════════════════════════
𐀪 Author: Aalishaf
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 01:25:45 GMT
════════════════════════
⌗ Tags: #information_security #linux #tryhackme #cybersecurity #web_application_security
Medium
SimpleCTF | TryHackMe
https://tryhackme.com/room/easyctf