⤷ Title: bWAPP, Logout Management (Session Invalidation Failure)
════════════════════════
𐀪 Author: Rat-Bully
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:19:01 GMT
════════════════════════
⌗ Tags: #web_security #information_security #bug_bounty #pentesting #cybersecurity
════════════════════════
𐀪 Author: Rat-Bully
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:19:01 GMT
════════════════════════
⌗ Tags: #web_security #information_security #bug_bounty #pentesting #cybersecurity
Medium
bWAPP, Logout Management (Session Invalidation Failure)
Author: Ratbully Platform: bWAPP (Broken Web Application) Lab/Module: Broken Auth, Logout Management Category: Broken Authentication /…
⤷ Title: When the PDF Started Oversharing: From XXE to Reading /etc/passwd
════════════════════════
𐀪 Author: Omar Elsayed
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:21:01 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty_writeup #web_security
════════════════════════
𐀪 Author: Omar Elsayed
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:21:01 GMT
════════════════════════
⌗ Tags: #information_security #bug_bounty_writeup #web_security
Medium
When the PDF Started Oversharing: From XXE to Reading /etc/passwd
A bug bounty journey that started with an ordinary Export button and ended with a server putting the contents of its own files inside a…
⤷ Title: How can a zero width character leads to privilege escalation
════════════════════════
𐀪 Author: Tomahawk
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:23:44 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #information_security #security #bug_bounty
════════════════════════
𐀪 Author: Tomahawk
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:23:44 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #information_security #security #bug_bounty
Medium
How can a zero width character leads to privilege escalation
Whoami??
⤷ Title: Web Cache Deception: How a Harmless .css Becomes Full Account Takeover
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:09:45 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #application_security #bug_bounty #penetration_testing
════════════════════════
𐀪 Author: Krishna Kumar
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:09:45 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #application_security #bug_bounty #penetration_testing
Medium
🧊🎯🔓💥 Web Cache Deception: How a Harmless .css Becomes Full Account Takeover
A CDN and your app can read the exact same URL two different ways. That tiny disagreement is enough to hand one user’s session token to a…
⤷ Title: The Complete Bug Bounty Recon Methodology: From Subdomain Enumeration to Vulnerability Discovery |…
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:01:03 GMT
════════════════════════
⌗ Tags: #reconnaissance #penetration_testing #bug_bounty #cybersecurity #vulnerability
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 14:01:03 GMT
════════════════════════
⌗ Tags: #reconnaissance #penetration_testing #bug_bounty #cybersecurity #vulnerability
Medium
The Complete Bug Bounty Recon Methodology: From Subdomain Enumeration to Vulnerability Discovery | by Samadhan Shimple
When I start testing a web application, I don’t immediately jump into vulnerability scanning. I think good reconnaissance is one of the…
⤷ Title: How I found BAC leads to De-escalate the Administrator privilege
════════════════════════
𐀪 Author: Raccoon
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:13:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #cybersecurity #bug_bounty_tips
════════════════════════
𐀪 Author: Raccoon
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:13:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #cybersecurity #bug_bounty_tips
Medium
How I found BAC leads to De-escalate the Administrator privilege
Summary
⤷ Title: I Just Found Out What Happens to the Bugs I Report. It Changed How I Hunt.
════════════════════════
𐀪 Author: Riya Limba
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:12:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint #bug_bounty_tips #ethical_hacking #bug_bounty
════════════════════════
𐀪 Author: Riya Limba
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:12:52 GMT
════════════════════════
⌗ Tags: #cybersecurity #osint #bug_bounty_tips #ethical_hacking #bug_bounty
Medium
I Just Found Out What Happens to the Bugs I Report. It Changed How I Hunt.
HackerOne says fix times improved 54%. The backlog still grew 131%. Here’s the math nobody explains to beginners.
⤷ Title: How I HMAC’d a Server With Its Own Public Key
════════════════════════
𐀪 Author: Akash
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 18:06:47 GMT
════════════════════════
⌗ Tags: #jwt #infosec #cybersecurity #penetration_testing #bug_bounty
════════════════════════
𐀪 Author: Akash
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 18:06:47 GMT
════════════════════════
⌗ Tags: #jwt #infosec #cybersecurity #penetration_testing #bug_bounty
Medium
How I HMAC’d a Server With Its Own Public Key
An expert PortSwigger lab, and the five walls I hit before it cracked.
⤷ Title: OSINT Without Paid APIs: 5 Free Sources to Start With
════════════════════════
𐀪 Author: X-3306
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 20:43:27 GMT
════════════════════════
⌗ Tags: #reconnaissance #cybersecurity #osint #infosec #bug_bounty
════════════════════════
𐀪 Author: X-3306
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 20:43:27 GMT
════════════════════════
⌗ Tags: #reconnaissance #cybersecurity #osint #infosec #bug_bounty
Medium
OSINT Without Paid APIs: 5 Free Sources to Start With
Wikidata, Overpass, RDAP, crt.sh…and the last one is the tool you probably haven’t tried yet
⤷ Title: Private Bug Bounty Experience— Tata Play Bug Bounty Program
════════════════════════
𐀪 Author: Shivang Tiwari
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 20:02:09 GMT
════════════════════════
⌗ Tags: #tata #bug_bounty #security #ethics
════════════════════════
𐀪 Author: Shivang Tiwari
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 20:02:09 GMT
════════════════════════
⌗ Tags: #tata #bug_bounty #security #ethics
Medium
Private Bug Bounty Experience— Tata Play Bug Bounty Program
A duplicate decision may settle a reward. It does not settle whether a reported vulnerability has been fixed.