this is my first bug i found just using ai and mannual i know first bug is not easy you found many duplicate and n/a bug buf after the lot of submission i found my first bug that is not a hugher …

In Part 1, we covered the recon phase, BOLA, Broken Authentication (including a JWT deep-dive), and Broken Object Property Level…

APIs are everywhere now. Every mobile app, every SPA, every ‘modern’ web product you use today is really just a thin UI sitting on top of…

Hello friends! Toryy here! I’m excited to share with you an Authentication Bypass that I discovered on LinkedIn. I’m particularly proud of it because of its unexpected and sneaky nature. Let’s …

30-second version: I read through HackerOne’s top 201 disclosed “Business Logic” reports. Roughly 40% weren’t business logic at all — they…

In web application security testing, simply enumerating the application’s content — finding all its pages and links — is only a small part…

Part 1 ended with the door identified: CVE-2008-3681, a password-reset bug in Joomla 1.5.0, proven but not yet executed. Part 2 is the…

Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to make a server-side application send requests to a…

الحمد لله الذي عَلَّمَ بالقلم، عَلَّمَ الإنسان ما لم يعلم، والصلاة والسلام على سيدنا محمد ﷺ وبعد

Hello everyone, and welcome to this new video where we’re going to solve the Active Directory machine called Sauna.