⤷ Title: Bug Bounty / Web Application Security Hunting Checklist - 2026 XSS Rat version
════════════════════════
𐀪 Author: Thexssrat
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:39:59 GMT
════════════════════════
⌗ Tags: #bug_bounty_hunter #bug_bounty_tips #bug_bounty #hacking #cybersecurity
════════════════════════
𐀪 Author: Thexssrat
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:39:59 GMT
════════════════════════
⌗ Tags: #bug_bounty_hunter #bug_bounty_tips #bug_bounty #hacking #cybersecurity
Medium
Bug Bounty / Web Application Security Hunting Checklist
Bug Bounty / Web Application Security Hunting Checklist A practical checklist for web application security testing and bug bounty hunting. Work through each section methodically and expand the list …
⤷ Title: Hunting an Exposed ClickHouse Database — From Recon to Data Exfiltration
════════════════════════
𐀪 Author: Yadvesh yadav
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:12:21 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #data_security #ethical_hacking #cybersecurity
════════════════════════
𐀪 Author: Yadvesh yadav
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:12:21 GMT
════════════════════════
⌗ Tags: #bug_bounty #penetration_testing #data_security #ethical_hacking #cybersecurity
Medium
🔓 Hunting an Exposed ClickHouse Database — From Recon to Data Exfiltration
Introduction
⤷ Title: How a Simple GraphQL Query Exposed Facebook Page Admins and Their Personal Emails — A $15,000 Bug…
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:46:02 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #cybersecurity #programming
════════════════════════
𐀪 Author: Vivek PS
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:46:02 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #hacking #cybersecurity #programming
Medium
How a Simple GraphQL Query Exposed Facebook Page Admins and Their Personal Emails — A $15,000 Bug Bounty Story -A Review of Philippe…
I made this writeup interactive! Experience this bug as a challenge on my platform Bug Story Quest — where you think like a hacker, not…
⤷ Title: CSRF Bypass via Missing Referer Header (PortSwigger Lab Walkthrough)
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:24:41 GMT
════════════════════════
⌗ Tags: #hacking #walkthrough #cybersecurity #portswigger_lab
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:24:41 GMT
════════════════════════
⌗ Tags: #hacking #walkthrough #cybersecurity #portswigger_lab
Medium
CSRF Bypass via Missing Referer Header (PortSwigger Lab Walkthrough)
Today I solved a really interesting CSRF lab where the protection looked strong… but actually wasn’t
⤷ Title: كوريا الشمالية تضرب في عمق سلسلة التوريد والتمويل اللامركزي: كيف تحوّل الهجوم إلى سلاح استراتيجي؟
════════════════════════
𐀪 Author: Rynbsd
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:08:21 GMT
════════════════════════
⌗ Tags: #news #axios #hacking #cryptocurrency #npm
════════════════════════
𐀪 Author: Rynbsd
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:08:21 GMT
════════════════════════
⌗ Tags: #news #axios #hacking #cryptocurrency #npm
Medium
كوريا الشمالية تضرب في عمق سلسلة التوريد والتمويل اللامركزي: كيف تحوّل الهجوم إلى سلاح استراتيجي؟
285 مليون دولار من Drift في 12 دقيقة، وباب خلفي في مكتبة Axios تُنَزَّل 100 مليون مرة أسبوعيًا. كوريا الشمالية تعيد تعريف الحرب السيبرانية…
⤷ Title: Understanding CVE, CVSS and Real Security
════════════════════════
𐀪 Author: Little_Sun4lower
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:51:23 GMT
════════════════════════
⌗ Tags: #ethical_hacking #tech #vulnerability_management #cybersecurity #infosec
════════════════════════
𐀪 Author: Little_Sun4lower
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:51:23 GMT
════════════════════════
⌗ Tags: #ethical_hacking #tech #vulnerability_management #cybersecurity #infosec
Medium
Understanding CVE, CVSS and Real Security
Software today runs almost everything banking apps, hospitals, airplanes, and even the coffee machines in offices.
⤷ Title: PowerShell Profiles as Attack Vectors — Deep dive into Event Triggered Execution T1546.013
════════════════════════
𐀪 Author: Sami ST
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:42:11 GMT
════════════════════════
⌗ Tags: #penetration_testing #mitre_attack #cybersecurity #powershell #red_team
════════════════════════
𐀪 Author: Sami ST
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:42:11 GMT
════════════════════════
⌗ Tags: #penetration_testing #mitre_attack #cybersecurity #powershell #red_team
Medium
PowerShell Profiles as Attack Vectors — Deep dive into Event Triggered Execution T1546.013
We’re gonna talk about the sub-technique T1546.013 from MITRE ATT&CK which is named ‘PowerShell Profile’ under T1546:Event Triggerd…
⤷ Title: GamingServer — TryHackMe WalkThrough
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:43:04 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #cybersecurity #red_team #penetration_testing
════════════════════════
𐀪 Author: Rayenhafsawy
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:43:04 GMT
════════════════════════
⌗ Tags: #tryhackme #tryhackme_walkthrough #cybersecurity #red_team #penetration_testing
Medium
GamingServer — TryHackMe WalkThrough
Date: 06/04/2026
⤷ Title: [RT EP.1] — HTB Support
════════════════════════
𐀪 Author: Pattharadanai Sanitjairak
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:08:36 GMT
════════════════════════
⌗ Tags: #red_team #osep_preperation #penetration_testing #hackthebox #active_directory
════════════════════════
𐀪 Author: Pattharadanai Sanitjairak
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:08:36 GMT
════════════════════════
⌗ Tags: #red_team #osep_preperation #penetration_testing #hackthebox #active_directory
Medium
[RT EP.1] — HTB Support
Let’s prepare for OSEP examination
⤷ Title: Internal — TryHackMe Write-up
════════════════════════
𐀪 Author: Monas
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 08:57:38 GMT
════════════════════════
⌗ Tags: #tryhackme_ctf #tryhackme #tryhackme_internal #tryhackme_writeup #ctf_writeup
════════════════════════
𐀪 Author: Monas
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 08:57:38 GMT
════════════════════════
⌗ Tags: #tryhackme_ctf #tryhackme #tryhackme_internal #tryhackme_writeup #ctf_writeup
Medium
Internal — TryHackMe Write-up
Platform: TryHackMe Difficulty: Hard Category: Web Application
⤷ Title: This One-Word URL Change Paid Bug Bounty Hunters $10,000 — Here’s How They Did It
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:18:20 GMT
════════════════════════
⌗ Tags: #web_security #programming #bug_bounty_tips #ethical_hacking #cybersecurity
════════════════════════
𐀪 Author: morgan_hack
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:18:20 GMT
════════════════════════
⌗ Tags: #web_security #programming #bug_bounty_tips #ethical_hacking #cybersecurity
Medium
This One-Word URL Change Paid Bug Bounty Hunters $10,000 — Here’s How They Did It
Another step in my Access Control journey. This is my 7th lab, focused on IDOR with data leakage in redirect responses.
⤷ Title: Penetration Test Report
════════════════════════
𐀪 Author: Abdulmalik Adebayo
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:07:34 GMT
════════════════════════
⌗ Tags: #web_hacking #web_penetration_testing #ethical_hacking #ctf_walkthrough
════════════════════════
𐀪 Author: Abdulmalik Adebayo
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 10:07:34 GMT
════════════════════════
⌗ Tags: #web_hacking #web_penetration_testing #ethical_hacking #ctf_walkthrough
Medium
Penetration Test Report
Cyber Pride Security Group — CTF Assessment
⤷ Title: From IDOR to SQL Injection in GraphQL WebSocket Escalated to PII & Document Leak
════════════════════════
𐀪 Author: Ahmed Ghadban
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 09:29:20 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #security #cybersecurity
════════════════════════
𐀪 Author: Ahmed Ghadban
════════════════════════
ⴵ Time: Sun, 05 Apr 2026 09:29:20 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #security #cybersecurity
Medium
From IDOR to SQL Injection in GraphQL WebSocket Escalated to PII & Document Leak
Bounty: $2,000 Severity: Critical
⤷ Title: How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 17:15:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 17:15:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: North Korean Hackers Pose as Trading Firm to Steal $285M from Drift
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:09:26 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Scams and Fraud #Blockchain #Crypto #Drift #Drift Protocol #Fraud #North Korea #Scam #UNC4736
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:09:26 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Scams and Fraud #Blockchain #Crypto #Drift #Drift Protocol #Fraud #North Korea #Scam #UNC4736
Hackread
North Korean Hackers Pose as Trading Firm to Steal $285M from Drift
North Korean hackers (UNC4736) posed as a trading firm for six months to infiltrate Drift Protocol, using social engineering tactics to steal $285M without suspicion.
⤷ Title: Whitespace Flaw Re-Opens Critical JWT “Algorithm Confusion” Bypass
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:11:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Algorithm Confusion #Authentication Bypass #Cache Collision #CVE_2026_34950 #CVE_2026_35039 #cybersecurity #fast_jwt #HMAC #infosec #JWT #Node.js #Regex Flaw #RSA #Web Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:11:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Algorithm Confusion #Authentication Bypass #Cache Collision #CVE_2026_34950 #CVE_2026_35039 #cybersecurity #fast_jwt #HMAC #infosec #JWT #Node.js #Regex Flaw #RSA #Web Security
Daily CyberSecurity
Whitespace Flaw Re-Opens Critical JWT "Algorithm Confusion" Bypass
CVE-2026-34950: A critical 9.1 CVSS flaw in fast-jwt allows authentication bypass via leading whitespace. Learn how a regex error leads to algorithm confusion.
⤷ Title: Building a Secure Command Sandbox in Python
════════════════════════
𐀪 Author: Mani vidyadhar
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:52:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #sandbox #kali_linux #soc
════════════════════════
𐀪 Author: Mani vidyadhar
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:52:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #sandbox #kali_linux #soc
Medium
🔐 Building a Secure Command Sandbox in Python
A Practical Approach to Zero-Trust Security (Kali Secure Sandbox v2.0)
⤷ Title: The No-Nonsense Guide to Cybersecurity Vulnerabilities
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:24:24 GMT
════════════════════════
⌗ Tags: #security #information_security #cybersecurity #cyber_security_awareness #bug_bounty
════════════════════════
𐀪 Author: Dhanush N
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 12:24:24 GMT
════════════════════════
⌗ Tags: #security #information_security #cybersecurity #cyber_security_awareness #bug_bounty
Medium
The No-Nonsense Guide to Cybersecurity Vulnerabilities
From CVSS scores to Host Scanners, everything you need to understand your security posture before the bad guys do.
⤷ Title: The Bug Bounty Checklist That Turns Beginners Into Hackers The Day I Missed a $500 Bug…
════════════════════════
𐀪 Author: Krish_cyber
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:37:41 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #info_sec_writeups #cybersecurity
════════════════════════
𐀪 Author: Krish_cyber
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:37:41 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #bug_bounty #info_sec_writeups #cybersecurity
Medium
The Bug Bounty Checklist That Turns Beginners Into Hackers 💻🔥The Day I Missed a $500 Bug…
💻 From Zero to Finding Real Vulnerabilities — The Exact Checklist I Wish I Had Earlier
⤷ Title: 2026 Top 10 Chrome Extensions Every Bug Bounty Hunter Must Use
════════════════════════
𐀪 Author: Pradeeptadi
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:34:56 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Pradeeptadi
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:34:56 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty
Medium
🚀 2026 Top 10 Chrome Extensions Every Bug Bounty Hunter Must Use
🚀 2026 Top 10 Chrome Extensions Every Bug Bounty Hunter Must Use If you’re doing bug bounty, your browser is your main weapon. But here’s the truth: 👉 You don’t need hundreds of …