The Subdomain Subfinder Missed: How a German Wordlist Led Me to a Hidden Bug (and a CHF 100…

“Sometimes bug bounty isn’t about finding the biggest vulnerability. Sometimes it’s about finding the application everyone else missed.”