Author | Lightnews

Securitycipher @securitycipher.bsky.social · 5m

The Ghost in the Machine: How I Found IDORs That Were Hiding in Plain Sight

https://medium.com/@iski/the-ghost-in-the-machine-how-i-found-idors-that-were-hiding-in-plain-sight-0c26bca85c2f?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 4h

Guía Avanzada de Penetration Testing en APIs (Parte 1) Mapeo OWASP Top 10 y Fases de Reconocimiento

https://medium.com/@jpablo13/gu%C3%ADa-avanzada-de-penetration-testing-en-apis-parte-1-mapeo-owasp-top-10-y-fases-de-reconocimiento-a859ed5aecc5?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 6h

Why Packet Fuzzing is Still Valuable for Bug Bounties

https://medium.com/@audreyrowen/why-packet-fuzzing-is-still-valuable-for-bug-bounties-5e538f4777e5?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 7h

Race condition chained with logic bug leads to full bypass of free-plan site limit

https://medium.com/@mhmodgm54/race-condition-chained-with-logic-bug-leads-to-full-bypass-of-free-plan-site-limit-5825f5e2cb1c?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 8h

How I Found a Flaw That Permanently Locked Users Out of Their Accounts

https://medium.com/@rajveer_0101/how-i-found-a-flaw-that-permanently-locked-users-out-of-their-accounts-034f67951008?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 9h

What is IDOR?

https://medium.com/@cybersecplayground/what-is-idor-b8ec70302b87?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 10h

The 3 AM Breakthrough: How a CTF Side Quest Unlocked a Critical Bug Bounty

https://santhosh-adiga-u.medium.com/the-3-am-breakthrough-how-a-ctf-side-quest-unlocked-a-critical-bug-bounty-f548f98245fc?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 11h

20 Cache Poisoning Case Study | Depth Analysis of Real-world Bug Reports

https://medium.com/@Aacle/20-cache-poisoning-case-study-depth-analysis-of-real-world-bug-reports-d6aa02a6a44f?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 13h

What Is a CMS? Simple Explanation with Real-Life Examples (No Tech Jargon!)

https://medium.com/@natarajanck2/what-is-a-cms-simple-explanation-with-real-life-examples-no-tech-jargon-1327bfe21509?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 14h

My First Write-Up: Wallet Top-Up Refund Vulnerability (Found on a Real Target)

https://medium.com/@mahdi.eidi7/my-first-write-up-wallet-top-up-refund-vulnerability-found-on-a-real-target-5f7554389a7a?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 18h

Microsoft `x-apikey` Exposed in Mozilla CI Public Logs

https://hackerone.com/reports/3243860

Securitycipher @securitycipher.bsky.social · 18h

The Ultimate Web Reconnaissance Playbook — A Practical Step-by-Step Guide for Security Researchers

https://kirll0s.medium.com/the-ultimate-web-reconnaissance-playbook-a-practical-step-by-step-guide-for-security-researchers-aeaf13fad6d1?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 19h

A Glitch in the Pit Lane: How a Security Flaw Exposed Max Verstappen’s Passport Data

https://medium.com/@devanshpatel930/a-glitch-in-the-pit-lane-how-a-security-flaw-exposed-max-verstappens-passport-data-6c0bf92c4ec4?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 20h

How a Null Byte Unlocked a $XXXX Bounty: My Reflected XSS Story

https://santhosh-adiga-u.medium.com/how-a-null-byte-unlocked-a-xxxx-bounty-my-reflected-xss-story-cb1b94f8ea12?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 20h

HackerOne

https://hackerone.com/reports/3409193

Securitycipher @securitycipher.bsky.social · 21h

Master Forensic-Evasion Techniques for Red Teamers: Actionable Tactics for Staying Undetected

https://medium.com/@verylazytech/master-forensic-evasion-techniques-for-red-teamers-actionable-tactics-for-staying-undetected-3123667b8f49?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 23h

Advanced Web Cache Poisoning: Beyond the Basics

https://medium.com/@Aacle/advanced-web-cache-poisoning-beyond-the-basics-3df645bcbf95?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Server-Side Discount Validation Bypass Enables Arbitrary Price Reduction

https://medium.com/@ali3bdelhady/server-side-discount-validation-bypass-enables-arbitrary-price-reduction-6336dfcea79e?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Unlock Your Hacker Potential: The CTF Platform Every Bug Bounty Hunter Needs

https://medium.com/@pentesterclubpvtltd/unlock-your-hacker-potential-the-ctf-platform-every-bug-bounty-hunter-needs-3d09ac1a9316?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Week 16 — JS Enum Framework: From Blueprint to Reality

https://osintteam.blog/week-16-js-enum-framework-from-blueprint-to-reality-092aea4eaf4f?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

How I Found a Stored XSS Vulnerability Through a PDF Upload

https://medium.com/@Abhiii_Sharma/how-i-found-a-stored-xss-vulnerability-through-a-pdf-upload-75b4bbfbf9a3?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Testing XSS in chatbot instances

https://medium.com/@4osp3l/testing-xss-in-chatbot-instances-aa988c09a6d7?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Stripe Subscription Escalation by Default

https://peeefour.medium.com/stripe-subscription-escalation-by-default-9cacbb0c4ea9?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

IPs, ASN & CIDR — When the Game Is the Network, We Play the Map — How target.com

https://medium.com/@0xmekky/ips-asn-cidr-when-the-game-is-the-network-we-play-the-map-how-target-com-fbaafdb66f0b?source=rss------bug_bounty-5

Securitycipher @securitycipher.bsky.social · 1d

Vamp Byte #3 — SPF, DKIM & DMARC: The Trio That Guards Your Inbox

https://codewithvamp.medium.com/vamp-byte-3-spf-dkim-dmarc-the-trio-that-guards-your-inbox-061de63c0627?source=rss------bug_bounty-5