Posts tagged "bugbounty"

(Ⅱ) Android Identity Authentication

In the previous sharing, we learned about some misunderstandings and security risks related to identity authentication and also gained some understanding of blind spots related to Activity identity au...

26.03.2025 0 Read More

Next.js Middleware Broken Access Controls

Recently, an Authorization Bypass vulnerability was discovered in the Next.js framework (one of the most popular today) and was cataloged as CVE-2025-29927 and received a CVSS score of 9.1 (which is v...

27.03.2025 0 Read More

Server-Side Template Injection in Go

Server-Side Template Injection is a vulnerability that arises when user input is improperly processed by a template engine, potentially leading to remote code execution or reading of confidential file...

27.03.2025 0 Read More

Bug Bounty 2025: The Unfiltered Roadmap to Hunting Success

Introduction Let's cut through the noise: the bug bounty landscape of 2025 isn't what the YouTube tutorials promised you. I've watched this ecosystem transform from a haven for passionate hac...

30.03.2025 0 Read More

How I found my "First Bug" in a public bug bounty program

Today I was reviewing my Telegram channels and realized that I hadn't written a summary of my "first bug" (in quotes - only those in the know will understand). It happened that while searching on a pu...

18.04.2025 0 Read More

Alibaba Cloud OOS Misconfiguration: File Upload via HTTP PUT

Security misconfiguration represents one of the most common vulnerabilities in cloud environments. In this short write-up, I’ll demonstrate a misconfiguration in Alibaba Cloud Object Storage Service...

18.04.2025 0 Read More

How to Use Burp Suite for Bug Bounty Hunting: A Beginner-Friendly Guide

** 🛠️ What is Burp Suite? **Burp Suite is one of the most powerful tools for web application security testing. It allows ethical hackers and bug bounty hunters to intercept, manipulate, a...

22.04.2025 0 Read More

Git Tales: Secrets in the Shadows

⛶Part 1 of 3 in Git Tales Series Overview In my recent bug hunting, I stumbled across something that perfectly shows why "deleted" doesn't always mean "gone." I discovered a particularly cri...

29.04.2025 0 Read More