Hello Community👋, I’m Divyank Sitapara, an Application Security Researcher and Bug Bounty Hunter. This is my 3rd write-up, where I’ll…

I pointed Opus 4.6 and GPT-5.6 Sol at a big, hardened open source project and told them to hunt for zero-days. Opus 4.6 out-counted GPT-5.6…

What’s up everyone! Nitin here 👋

I started bug bounty hunting two years ago knowing absolutely nothing. No formal training, no course just YouTube. I didn’t grind through…

A practical pipeline for narrowing thousands of URLs down to the handful worth manually testing for Cross-Site Scripting.

Learn web encoding with practical examples of URL, HTML, Unicode, UTF-8,Base64, Hex, and serialization for web security

Introduction

While testing a public bug bounty program, I came across an interesting file:

OAuth 2.0 is everywhere — “Login with Google,” “Login with Microsoft,” third-party API integrations. It’s an authorization framework, not…

If there is a golden rule in bug bounty hunting, it’s this: The most secure platforms in the world almost always leave their back door…