The simplest answer to this question was that it was a sense of inferiority that brought me this far.

A story about a LinkedIn DM that aged surprisingly well, why I started caring about bug bounty when I swore I never would, and the exact…

I built a penetration testing system in Python over three months, and this is the result. The core features of the system include CVE, OCENT subdomain enumeration, directory and file discovery …

I’m Hossam Hamada, a security researcher and bug bounty hunter. During an authorized security assessment, I discovered an interesting OTP…

While testing a web application for broken access control issues, I came across an interesting case where a workspace that was supposed to…

The pursuit of lucrative vulnerabilities within Intel systems has unexpectedly ceased to be financially rewarding. In mid-September, the corporation replaced its paid Bug Bounty initiative with a …

First of all, hello everyone. I am a researcher with little experience, but I often find myself daydreaming about exploits and exploit…

How a Predictable Activity ID Bypassed an Unguessable Invite Link and Earned Me a $1,000 Bounty

How Changing a POST Request to GET Exposed Users’ Privacy Requests

I discovered that a CRM platform’s “Custom Code Functions” feature (an Enterprise-tier automation capability) allows any authenticated user…