By Aditya Sunny
Bug Bounty Hunter | Security Researcher | Ethical Hacker
📅 Reported: July 2025
🎯 Target: *.linktr.ee

Most hackers ignore Open Redirects — but this one turned into a $1,000 payday. Here’s how.

This article describe about JWT token. How JWT helps in authentication? and how to use JWT?

Recon, exploitation, privilege escalation.

Discover how attackers exploit reflected XSS in restricted HTML contexts to bypass filters and trigger Javanoscript (print())execution.

🚀 Introduction

Time is a critical factor in penetration testing, so I have automated the use of several reconnaissance tools to efficiently gather…

Okay, let’s talk about something that should scare you a little: password security. Or rather, the lack thereof. Imagine discovering that…

A proof-of-concept that turns plain HTTP into a full-fledged C2 infrastructure, built entirely in C++.

So, you want to break into cybersecurity, huh? Awesome choice! It’s a wild ride, but super rewarding. Now comes the big question: Do you…

Software development isn’t just about writing code — it’s also about protecting it. Once your code is compiled into a binary and shipped…

Okay, let’s address the elephant in the room. The cybersecurity world is buzzing about the recent layoffs at Rapid7. It’s never good news…

“‘IoA’ Indicator of Attack VS ‘IOC’ Indicator of Compromise”

Di era digital seperti sekarang, keamanan siber menjadi hal yang sangat penting. Setiap hari, jutaan perangkat komputer dan smartphone…

Discover how AI-powered Security Operations Centers (SOCs) are revolutionizing cybersecurity with AI,

Discover how AI SOC agents reduce alert fatigue by 83%, cut MTTR by 90%, and autonomously investigate threats 24/7.

Learn how AI SOC Analysts are revolutionizing traditional SOC. How to use AI in SOC and much more!

Measuring cybersecurity by just risk scores is like judging a car’s health just by how clean the windshield is. Sounds moot, right?

Hello everyone! This room gave off immediate nostalgic vibes, but we’re here for exploits — although, fun bonus if you’re a Spidey fan thi…

Web #1:
The first web application is vulnerable to Cross-Site Scripting (XSS) via the loan comment field, where malicious input such as…

A real stored XSS vulnerability led to a $500 bug bounty. Here’s what happened, why stored XSS is dangerous, and how to protect your apps.