⤷ Title: Got My First $$ Bug Bounty
════════════════════════
𐀪 Author: Prajwal
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 16:13:13 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #bug_bounty #web_security #bug_bounty_tips
════════════════════════
𐀪 Author: Prajwal
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 16:13:13 GMT
════════════════════════
⌗ Tags: #vulnerability #cybersecurity #bug_bounty #web_security #bug_bounty_tips
Medium
Got My First $$ Bug Bounty 🎉
I finally got my first bug bounty.
⤷ Title: Aplikasi Sudah Bisa Login, Berarti Aman? Ini yang Baru Saya Pahami dari Penetration Testing
════════════════════════
𐀪 Author: Adinda mirza devani
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 22:49:08 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #penetration_testing #application_security #api_security
════════════════════════
𐀪 Author: Adinda mirza devani
════════════════════════
ⴵ Time: Fri, 14 Aug 2026 22:49:08 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #penetration_testing #application_security #api_security
Medium
Aplikasi Sudah Bisa Login, Berarti Aman? Ini yang Baru Saya Pahami dari Penetration Testing
Coba bayangkan sebuah aplikasi yang berjalan mulus. Halaman login terbuka tanpa error, dashboard muncul tepat setelah kita masuk, data yang…
⤷ Title: One Invitation, Three Vulnerabilities: Breaking RBAC Across Two Applications
════════════════════════
𐀪 Author: OWL
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 03:52:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #pentesting #broken_access_control
════════════════════════
𐀪 Author: OWL
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 03:52:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #bug_bounty #pentesting #broken_access_control
Medium
One Invitation, Three Vulnerabilities: Breaking RBAC Across Two Applications
Introduction
⤷ Title: When the Marketing Page Became the Threat Model: Forging “Verified Reviews” on PriceRunner
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 04:22:20 GMT
════════════════════════
⌗ Tags: #api_security #web_application_security #business_logic #web_security #bug_bounty
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 04:22:20 GMT
════════════════════════
⌗ Tags: #api_security #web_application_security #business_logic #web_security #bug_bounty
Medium
When the Marketing Page Became the Threat Model: Forging “Verified Reviews” on PriceRunner
How a simple business-logic flaw turned a company’s own trust promise into a security test.
⤷ Title: Hidden URL Parameters: Finding What Web Applications Don’t Show You
════════════════════════
𐀪 Author: Alif Mortaza
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 18:36:24 GMT
════════════════════════
⌗ Tags: #web_application_security #ethical_hacking #bug_bounty #cybersecurity #web_security
════════════════════════
𐀪 Author: Alif Mortaza
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 18:36:24 GMT
════════════════════════
⌗ Tags: #web_application_security #ethical_hacking #bug_bounty #cybersecurity #web_security
Medium
Hidden URL Parameters: Finding What Web Applications Don’t Show You
In many cases, parameters are not documented or directly exposed through a web application’s user interface. Some may support internal…
⤷ Title: How a Locale Path Bypass Exposed 339,000 Media Objects and Multiple Cloud Backends
════════════════════════
𐀪 Author: Tarek ElDemerdash
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 18:00:36 GMT
════════════════════════
⌗ Tags: #cloud_security #bug_bounty #cybersecurity #web_security #ethical_hacking
════════════════════════
𐀪 Author: Tarek ElDemerdash
════════════════════════
ⴵ Time: Sat, 15 Aug 2026 18:00:36 GMT
════════════════════════
⌗ Tags: #cloud_security #bug_bounty #cybersecurity #web_security #ethical_hacking
Medium
How a Locale Path Bypass Exposed 339,000 Media Objects and Multiple Cloud Backends
Overview
⤷ Title: How a Simple File Download Bug Turned Into an S3 Signing Oracle
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 09:20:40 GMT
════════════════════════
⌗ Tags: #aws #bug_bounty #ethical_hacking #web_security #cybersecurity
════════════════════════
𐀪 Author: redhunter01
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 09:20:40 GMT
════════════════════════
⌗ Tags: #aws #bug_bounty #ethical_hacking #web_security #cybersecurity
Medium
How a Simple File Download Bug Turned Into an S3 Signing Oracle
How I found a bug in a file download feature that could let one tenant access another tenant’s files.
⤷ Title: Fools Mate,Revenge
════════════════════════
𐀪 Author: Blacq
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 13:35:56 GMT
════════════════════════
⌗ Tags: #api_security #web_security #red_team #cybersecurity #api
════════════════════════
𐀪 Author: Blacq
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 13:35:56 GMT
════════════════════════
⌗ Tags: #api_security #web_security #red_team #cybersecurity #api
Medium
Fools Mate,Revenge
Navigate to https://10.49.187.140:3000/
⤷ Title: Web Application Mapping: Complete Guide
════════════════════════
𐀪 Author: Ph
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 14:19:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_development #cybersecurity #web_security #bug_bounty
════════════════════════
𐀪 Author: Ph
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 14:19:46 GMT
════════════════════════
⌗ Tags: #ethical_hacking #web_development #cybersecurity #web_security #bug_bounty
Medium
Application Mapping: Web Security Foundation
Explore web application mapping, manual reconnaissance, automated crawling, hidden paths, and crawler limitations.
⤷ Title: Grand Larceny Auto: Finding the Real Flag Behind the Decoy
════════════════════════
𐀪 Author: ghosteye
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 18:47:28 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme #cybersecurity #web_security #reverse_engineering
════════════════════════
𐀪 Author: ghosteye
════════════════════════
ⴵ Time: Sun, 16 Aug 2026 18:47:28 GMT
════════════════════════
⌗ Tags: #ctf #tryhackme #cybersecurity #web_security #reverse_engineering
Medium
Grand Larceny Auto: Finding the Real Flag Behind the Decoy
https://tryhackme.com/room/grandlarcenyautoii