What This Bug Is, in Plain Words

Before you can understand AWS privilege escalation, you need to understand the identities that receive permissions and the policies that…

One of the most rewarding aspects of bug bounty hunting is that impactful vulnerabilities often begin with a simple question.

Here’s a confession: the bug class behind most of my valid reports isn’t SSTI, isn’t a deserialization chain, isn’t anything that would…

When you send data over the internet, it doesn’t always travel as plain text. Websites often encode their messages first. Why? Because…

How an unauthenticated ASP.NET upload endpoint exposed a direct path to server-side code execution — and why minimal-impact validation…

Sometimes you don’t need a complicated exploit to find something interesting.

Real-world bug bounty findings on how fitness apps can be turned into spyware

Hey everyone! In this writeup, I’m excited to share my experience finding a Broken Access Control / Cross-Portal Authorization Bypass…

I’m Hossam Hamada, a security researcher and bug bounty hunter. During an authorized security assessment, I discovered an interesting OTP…