⤷ Title: SAR 2,629 For Stored XSS via svg Image Leading to ATO
════════════════════════
𐀪 Author: Anas NadY
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:18:36 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #penetration_testing #bug_bounty_writeup
════════════════════════
𐀪 Author: Anas NadY
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:18:36 GMT
════════════════════════
⌗ Tags: #bug_bounty #bug_bounty_tips #cybersecurity #penetration_testing #bug_bounty_writeup
Medium
SAR 2,629 For Stored XSS via svg Image Leading to ATO
REPORT BOUNTY
⤷ Title: Lab Walkthrough: Exploiting Username Enumeration via Different Responses
════════════════════════
𐀪 Author: 5um1t0x
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:09:47 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #burpsuite #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: 5um1t0x
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:09:47 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #burpsuite #penetration_testing #cybersecurity
Medium
Lab Walkthrough: Exploiting Username Enumeration via Different Responses
Introduction
⤷ Title: Finding Reflected XSS Parameters Fast: A Deep Dive into RefleX
════════════════════════
𐀪 Author: whoami_404
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:04:09 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_security #cybersecurity #python
════════════════════════
𐀪 Author: whoami_404
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:04:09 GMT
════════════════════════
⌗ Tags: #bug_bounty #web_security #cybersecurity #python
Medium
Finding Reflected XSS Parameters Fast: A Deep Dive into RefleX
How a multi-threaded Python scanner turns manual parameter testing into an automated, context-aware workflow
⤷ Title: Room 8 Is Live: Why Server-Side Request Forgery Still Challenges Modern Security Teams
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:28:36 GMT
════════════════════════
⌗ Tags: #web_security #owasp #bug_bounty #cybersecurity #penetration_testing
════════════════════════
𐀪 Author: THM{0x416469747961204D6163686972616A75}
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:28:36 GMT
════════════════════════
⌗ Tags: #web_security #owasp #bug_bounty #cybersecurity #penetration_testing
Medium
Room 8 Is Live: Why Server-Side Request Forgery Still Challenges Modern Security Teams
Friendly Link:
⤷ Title: When -1 Crossed a Library Boundary: How libvips Hardened Its TIFF Loader
════════════════════════
𐀪 Author: Aleens-labs
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:20:03 GMT
════════════════════════
⌗ Tags: #open_source #bug_bounty #cybersecurity #cve #information_security
════════════════════════
𐀪 Author: Aleens-labs
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:20:03 GMT
════════════════════════
⌗ Tags: #open_source #bug_bounty #cybersecurity #cve #information_security
Medium
When -1 Crossed a Library Boundary: How libvips Hardened Its TIFF Loader
A routine read error exposed a dangerous contract mismatch with libtiff and showed why downstream defenses still matter
⤷ Title: US Penetration Testing Market Size, Trends & Growth Forecast to 2031
════════════════════════
𐀪 Author: Sheetalbhusari
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:09:26 GMT
════════════════════════
⌗ Tags: #us_penetration_testing #penetration_testing
════════════════════════
𐀪 Author: Sheetalbhusari
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:09:26 GMT
════════════════════════
⌗ Tags: #us_penetration_testing #penetration_testing
Medium
US Penetration Testing Market Size, Trends & Growth Forecast to 2031
According to MarketsandMarkets™, the US Penetration Testing Market is projected to grow from USD 1.98 billion in 2025 to USD 4.38 billion…
⤷ Title: From Shell to Domain: Binary Exploitation, Network Pivoting, and Lateral Movement in a Single…
════════════════════════
𐀪 Author: Odai Mherat
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:08:22 GMT
════════════════════════
⌗ Tags: #ethical_hacking #active_directory #binary_exploitation #pivoting #penetration_testing
════════════════════════
𐀪 Author: Odai Mherat
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:08:22 GMT
════════════════════════
⌗ Tags: #ethical_hacking #active_directory #binary_exploitation #pivoting #penetration_testing
Medium
From Shell to Domain: Binary Exploitation, Network Pivoting, and Lateral Movement in a Single Engagement
By Odai Mherat
⤷ Title: How Enterprise Security Leaders Evaluate AI Pentesting Platforms for Long-Term Success
════════════════════════
𐀪 Author: Nicholas James
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:00:46 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ai_pentesting #ai_penetration_testing
════════════════════════
𐀪 Author: Nicholas James
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:00:46 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #ai_pentesting #ai_penetration_testing
Medium
How Enterprise Security Leaders Evaluate AI Pentesting Platforms for Long-Term Success
Artificial intelligence is reshaping cybersecurity, but it is also reshaping how organizations evaluate security tools. As attack surfaces…
⤷ Title: Guided Pentest: Web (Penetration Testing Foundations)
════════════════════════
𐀪 Author: Vineet Pratap Singh
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:40:59 GMT
════════════════════════
⌗ Tags: #tryhackme #thm_writeup
════════════════════════
𐀪 Author: Vineet Pratap Singh
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 07:40:59 GMT
════════════════════════
⌗ Tags: #tryhackme #thm_writeup
Medium
Guided Pentest: Web (Penetration Testing Foundations)
This room is a guided pentesting path for the web applications that contains following engagements/topics:
⤷ Title: Session Management | TryHackMe WalkThrough
════════════════════════
𐀪 Author: Cyrus Isaac
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:57:38 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #session_management #tryhackme_writeup
════════════════════════
𐀪 Author: Cyrus Isaac
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:57:38 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #session_management #tryhackme_writeup
Medium
Session Management | TryHackMe WalkThrough
Task1: Introduction
⤷ Title: Intro to Malware…… | THM Walkthrough | by Dharavath Nagaraju
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:40:16 GMT
════════════════════════
⌗ Tags: #sandboxing #static_and_dynamic #malware_analysis #cybersecurity #tryhackme
════════════════════════
𐀪 Author: Dharavathnagaraju
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 06:40:16 GMT
════════════════════════
⌗ Tags: #sandboxing #static_and_dynamic #malware_analysis #cybersecurity #tryhackme
Medium
Intro to Malware…… | THM Walkthrough | by Dharavath Nagaraju
This room introduces the fundamentals of malware analysis and the techniques used to safely investigate malicious software. It covers the…
⤷ Title: Misconfigured Server Exposes Three AiTM Phishing Operators
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 08:37:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AitM Phishing #Device Code Phishing #evilginx #LEXFO #MFA Bypass #Microsoft 365 #phishing
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 08:37:55 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AitM Phishing #Device Code Phishing #evilginx #LEXFO #MFA Bypass #Microsoft 365 #phishing
Daily CyberSecurity
Misconfigured Server Exposes Three AiTM Phishing Operators
At a glance Actor / group codemado, mail-argenta, saroula01 (online aliases) Activity AiTM phishing and OAuth Device Code Flow abuse Targets / victims Corporate Microsoft 365 accounts, plus crypto…
⤷ Title: 292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 08:21:34 +0000
════════════════════════
⌗ Tags: #Malware #Arctic Wolf #BoryptGrab #brand impersonation #DLL side_loading #github #Infostealer
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 08:21:34 +0000
════════════════════════
⌗ Tags: #Malware #Arctic Wolf #BoryptGrab #brand impersonation #DLL side_loading #github #Infostealer
Daily CyberSecurity
292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users
At a Glance Malware family BoryptGrab-lineage in-memory infostealer Threat actor Unattributed; financially motivated, likely Russian-speaking Targets Opportunistic Windows users across sectors Del…
⤷ Title: EU Orders Google to Open Android to Rival AI Assistants and Share Search Data Under the DMA
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 08:05:07 +0000
════════════════════════
⌗ Tags: #Technology #AI #android #DMA #European Commission #Gemini #google
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 08:05:07 +0000
════════════════════════
⌗ Tags: #Technology #AI #android #DMA #European Commission #Gemini #google
Daily CyberSecurity
EU Orders Google to Open Android to Rival AI Assistants and Share Search Data Under the DMA
The European Commission has issued two major legally binding decisions against Google under the Digital Markets Act (DMA). The rulings require Google to open the Android operating system’s l…
⤷ Title: Bypassing Authentication Gates: SQL Injection (Auth Bypass) on Login Portal
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:52:43 GMT
════════════════════════
⌗ Tags: #admin_takeover #web_security_academy #sql_injection #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: M0stafaX404
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:52:43 GMT
════════════════════════
⌗ Tags: #admin_takeover #web_security_academy #sql_injection #bug_bounty #cybersecurity
Medium
Bypassing Authentication Gates: SQL Injection (Auth Bypass) on Login Portal
Executive Summary
⤷ Title: The Unseen Share: How I Downloaded Every File on 9 Tail Fox
════════════════════════
𐀪 Author: 0B1To_X_ucH!h4
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:18:44 GMT
════════════════════════
⌗ Tags: #abc #file_sharing #idor #bug_bounty
════════════════════════
𐀪 Author: 0B1To_X_ucH!h4
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:18:44 GMT
════════════════════════
⌗ Tags: #abc #file_sharing #idor #bug_bounty
Medium
The Unseen Share: How I Downloaded Every File on 9 Tail Fox
An IDOR vulnerability in shared links, a $700 bounty, and the invisible permission that wasn’t there
⤷ Title: Broken Access Control & Authentication Misconfiguration Led to Internal Employee Account Takeover…
════════════════════════
𐀪 Author: Sm
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:15:13 GMT
════════════════════════
⌗ Tags: #web_security #penetration_testing #infosec #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Sm
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:15:13 GMT
════════════════════════
⌗ Tags: #web_security #penetration_testing #infosec #bug_bounty #cybersecurity
Medium
Broken Access Control & Authentication Misconfiguration Led to Internal Employee Account Takeover and Full Internal Panel Access
A story of a Cannot GET / that turned into full administrative control over an internal enterprise dashboard.
⤷ Title: My Learning Journey with Bug Bounty Bootcamp book…
════════════════════════
𐀪 Author: Crazzzy_Sam
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:08:40 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty_writeup #cybersecurity #web_application_security #bug_bounty
════════════════════════
𐀪 Author: Crazzzy_Sam
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:08:40 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty_writeup #cybersecurity #web_application_security #bug_bounty
Medium
My Learning Journey with Bug Bounty Bootcamp book…
Over the past few days, I’ve been working through the Bug Bounty Bootcamp book to build a stronger foundation in web application security.
⤷ Title: Clicked a Phishing Link by Mistake? Here’s Exactly What to Do (2026)
════════════════════════
𐀪 Author: Qnaydshackersacadamy
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:05:59 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #hacking
════════════════════════
𐀪 Author: Qnaydshackersacadamy
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:05:59 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #hacking
Medium
Clicked a Phishing Link by Mistake? Here’s Exactly What to Do (2026)
Suggested Meta Description: Clicked a phishing link by mistake? Learn exactly what happens next, what to do immediately, and how to protect…
⤷ Title: COM Oversimplified: Understanding The Windows Technology Behind COM Hijacking, DCOM, and Modern…
════════════════════════
𐀪 Author: Mr. Robot.txt
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:42:41 GMT
════════════════════════
⌗ Tags: #ethical_hacking #red_teaming #pentesting #penetration_testing #infosec
════════════════════════
𐀪 Author: Mr. Robot.txt
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 09:42:41 GMT
════════════════════════
⌗ Tags: #ethical_hacking #red_teaming #pentesting #penetration_testing #infosec
Medium
COM Oversimplified: Understanding The Windows Technology Behind COM Hijacking, DCOM, and Modern…
Before we start, my apologies in advance. This is going to be a long one. Needed to really break this down as much as I can for y’all…
⤷ Title: Prompt Injection Attacks
════════════════════════
𐀪 Author: Bervice
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 08:10:00 GMT
════════════════════════
⌗ Tags: #ai_security #innovation #machine_learning #infosec #artificial_intelligence
════════════════════════
𐀪 Author: Bervice
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 08:10:00 GMT
════════════════════════
⌗ Tags: #ai_security #innovation #machine_learning #infosec #artificial_intelligence
Medium
Prompt Injection Attacks
How to Protect Large Language Models from Manipulation and Abuse