#bug-hunting

I Took Over Someone’s Subdomain and Put a Cat On It

Was poking around a wildcard scope, let’s call the target *.l4zz3rj0d.com for this one. Ran subzy against a pile of subdomains to check for…

How I Bypassed Access Control by Just Reading

Access control bugs have a reputation problem. Everyone agrees they’re important, most checklists mention them in one line, and then almost…

How I Found and Claimed a Subdomain Takeover on cewe.kruidvat.nl

Subdomain takeovers are one of those vulnerabilities that sound simple in theory but pay well in practice — and I recently found one on a…

Mastering FFUF: The Complete Guide to Web Fuzzing with FFUF (Fuzz Faster U Fool)

From directory brute-forcing to parameter mining, virtual host discovery and autocalibration—every flag explained with a working example…

Understanding Timing Vulnerabilities: A Real Bug Hunting Experience

Timing vulnerabilities are often overlooked because they do not immediately expose sensitive data or allow account takeover. However…

Understanding OWASP Top 10: A Beginner's Guide to Web Application Security

Breaking Down Two Simple Vulnerabilities That Exposed A School’s Admission Records

By: Kavin Jindal (@Klevr)

I Turned a “What’s Your Name?” Field Into a Malicious Link — My First HTML Injection

TryHackMe — How Websites Work

Blind vs Out-of-Band Vulnerabilities: Understanding the Difference Every Security Researcher Should…

Hanafeyz

Account Takeover via OTP Bypass Through Response Manipulation — A Real-World Bug Finding

TL;DR: I discovered a critical vulnerability on tpl.com.bd that allows any unauthenticated attacker to fully take over any user account —…

I Almost Scrolled Past This URL… Then I Got Curious

How a boring static image path led me to understanding one of bug bounty’s sneaky classics — LFI

🚀 Hunting For xmlrpc: Uncovering WordPress XML-RPC & Admin Path Disclosures

LinkedIn:- https://www.linkedin.com/in/vansh-rathore-cybersecurity?utm_source=share_via&utm_content=profile&utm_medium=member_android

From 401 to BAC: How a Refresh Broke Workspace Authorization

The Setup

I Tried Logging In… and Accidentally Did Responsible Disclosure 😅

👋 Introduction

The Secret Bug Hunter Browser Extension Replaced Burp

Every bug hunter has a secret weapon — one tool they trust above all the hype. It’s not the one blowing up on Twitter. Definitely not…

AWS Security — S3cret Santa | AoC 2025 Day - 23 | By Mynk

Learn the basics of AWS enumeration.

SOC Alert Triaging — Tinsel Triage | AoC 2025 Day — 10 | By Mynk

Investigate and triage alerts through Microsoft Sentinel.

JWT Signature Bypass: A Code-Oriented Walkthrough

How a simple type mismatch (RS256 → HS256) lets attackers forge admin tokens using your own public key.

How to Easily Get the Hall of Fame on NASA’s Vulnerability Disclosure Program

In this blog, I share my experience of finding vulnerabilities (bugs) in NASA | Part 1

Building Unique Wordlists with Crunch

Crunch is a popular open-source tool used for creating custom wordlists or dictionaries for password cracking, network security testing, or…

How Searching by IP Addresses Can Reveal Hidden Gems

Searching by IP addresses can provide a range of benefits, including access to hidden or restricted content, identification of potential…

Bug Hunting from zero to 0(day) to ($)0

Vulnerabilities discovery can be challenging for novice. In our talk, we will share the steps(and failure) we went through from beginner…