⤷ Title: Toxssin: Exploring XSS Exploitation with an Open-Source Security Tool
════════════════════════
𐀪 Author: BENSEC
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 18:21:51 GMT
════════════════════════
⌗ Tags: #kali_linux #bug_bounty #infosec #cybersecurity #xss_attack
════════════════════════
𐀪 Author: BENSEC
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 18:21:51 GMT
════════════════════════
⌗ Tags: #kali_linux #bug_bounty #infosec #cybersecurity #xss_attack
Medium
Toxssin: Exploring XSS Exploitation with an Open-Source Security Tool 🔥
What if a single Cross-Site Scripting (XSS) vulnerability could expose much more than a pop-up message?
⤷ Title: Client-Side Template Injection: When the Browser Executes Your Input
════════════════════════
𐀪 Author: Raksharoot
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 17:06:28 GMT
════════════════════════
⌗ Tags: #pentesting #ethical_hacking #cybersecurity #bug_bounty #web_security
════════════════════════
𐀪 Author: Raksharoot
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 17:06:28 GMT
════════════════════════
⌗ Tags: #pentesting #ethical_hacking #cybersecurity #bug_bounty #web_security
Medium
Client-Side Template Injection: When the Browser Executes Your Input
AngularJS, Vue, and the frontend frameworks that trust the wrong string.
⤷ Title: Inside a Bug Bounty Investigation : From Reconnaissance to a Reproducible Security Finding
════════════════════════
𐀪 Author: Akarsh_¢haturvedi
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 19:25:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #api_security #web_security #bug_bounty
════════════════════════
𐀪 Author: Akarsh_¢haturvedi
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 19:25:41 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #api_security #web_security #bug_bounty
Medium
Inside a Bug Bounty Investigation : From Reconnaissance to a Reproducible Security Finding
1.1 The Security Question
⤷ Title: Can Your Phone Spy on You Even When You Are Not Using It? A Cybersecurity Case Study
════════════════════════
𐀪 Author: Asad Mohsin
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 19:20:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #science #mobile #bug_bounty
════════════════════════
𐀪 Author: Asad Mohsin
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 19:20:39 GMT
════════════════════════
⌗ Tags: #cybersecurity #technology #science #mobile #bug_bounty
Medium
Can Your Phone Spy on You Even When You Are Not Using It? A Cybersecurity Case Study
1. Introduction
⤷ Title: One Pending Invitation Was Enough to Restore Revoked Admin Privileges
════════════════════════
𐀪 Author: seif nasr
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 23:59:40 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #web_security #cybersecurity #bug_bounty #bug_bounty_writeup
════════════════════════
𐀪 Author: seif nasr
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 23:59:40 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #web_security #cybersecurity #bug_bounty #bug_bounty_writeup
Medium
One Pending Invitation Was Enough to Restore Revoked Admin Privileges
During a web application security assessment, I was testing a team management system with different roles and permission levels.
⤷ Title: Bypassing an AWS WAF Challenge Through URL-Encoding: An Edge-versus-Origin Normalization Mismatch
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 02:04:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #waff_bypass #penetration_testing #ethical_hacking #bug_bounty
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 02:04:40 GMT
════════════════════════
⌗ Tags: #cybersecurity #waff_bypass #penetration_testing #ethical_hacking #bug_bounty
Medium
Bypassing an AWS WAF Challenge Through URL-Encoding: An Edge-versus-Origin Normalization Mismatch
How a single percent-encoded path character caused a production authentication request to bypass an edge-level anti-automation challenge…
⤷ Title: How I Turned a Language Parameter Into DOM-Based XSS Across Multiple Affiliate Portals
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 00:59:36 GMT
════════════════════════
⌗ Tags: #xs #penetration_testing #bug_bounty #ethical_hacking #cybersecurity
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 00:59:36 GMT
════════════════════════
⌗ Tags: #xs #penetration_testing #bug_bounty #ethical_hacking #cybersecurity
Medium
How I Turned a Language Parameter Into DOM-Based XSS Across Multiple Affiliate Portals
From a harmless-looking URL parameter to browser-confirmed JavaScript execution: a deep dive into unsafe jQuery HTML construction and…
⤷ Title: I Analyzed 12 IDOR-to-ATO Reports. The Email-Change Endpoint Wins.
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 03:45:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #web_security #idor #account_takeover
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 03:45:39 GMT
════════════════════════
⌗ Tags: #ethical_hacking #bug_bounty #web_security #idor #account_takeover
Medium
I Analyzed 12 IDOR-to-ATO Reports. The Email-Change Endpoint Wins.
Read-only IDORs get upvotes. Write-capable IDORs get accounts.
⤷ Title: $9,800 for Sending the Same Parameter Twice: An HTTP Parameter Pollution Story That Bypassed a…
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 06:21:01 GMT
════════════════════════
⌗ Tags: #hacking #security #bug_bounty #cybersecurity #bug_bounty_tips
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 06:21:01 GMT
════════════════════════
⌗ Tags: #hacking #security #bug_bounty #cybersecurity #bug_bounty_tips
Medium
$9,800 for Sending the Same Parameter Twice: An HTTP Parameter Pollution Story That Bypassed a Security Control Meant to Stop It
I want to start with something that surprised me when I got back into bug hunting seriously this year: the 2026 bounty landscape has gotten…
⤷ Title: Deathnote (VulnHub): You Won’t Be Able to Kill Me
════════════════════════
𐀪 Author: Mahmudul Hasan
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 07:39:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #ctf_writeup
════════════════════════
𐀪 Author: Mahmudul Hasan
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 07:39:28 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #ctf_writeup
Medium
Deathnote (VulnHub): You Won’t Be Able to Kill Me
A full walkthrough of the Deathnote box, from a manga themed hint to a root shell.