About a year ago, when I started my first forays into HackerOne, I discovered one of the most impactful bugs I’ve ever come across. It was January 2021, when I received a private invitation to a VDP (Vulnerability Disclosure Program), it was from an airlines…

Hello Guys 👋 I am Gokul, Python developer, Cyber security researcher, Part time Bug hunter and Open source tool maker, Studying 3rd year…

Same Origin XSS challenge. Contribute to terjanq/same-origin-xss development by creating an account on GitHub.

Quokka is the only mobile security company that discovers and delivers proprietary, defense-grade mobile security intelligence. Learn how to proactively remediate zero-day mobile threats.

What is a polyglot?

Burp Suite Enterprise Edition is the dynamic vulnerability scanner that can help you to secure your whole web portfolio. And with release 2022.3, we've taken those same flexible Burp scans and made th

Burp Suite Professional version 2022.2.3 made Burp Scanner's crawler between 6x - 9x faster when used against static or stateless sites. This helps you to carry out automated reconnaissance much faste

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comp...

This write-up is regarding one of my findings on a private program on HackerOne. As this is a private program so I have made certain…

Hello hackers,

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges. - cider-security-research/cicd-goat

I get asked a lot for my XMIND mindmap template. I start with this and fill it out as I hunt =) Enjoy!

Rename extension to .xmind

Hi all, hope you are keeping well and staying safe. This blog is about my recent experiences with SVG, HTML to PDF SSRF, and bypasses for…

Blockchain security firm Halborn reviews the 5 most common vulnerabilities within Solana smart contracts that an attacker can exploit.

A new series where i will do a video cast reviewing offensive security tools!Last week I took a look at a new favorite of mine, FeroxBuster, a content discovery tool.

Everyone is sick in the house but I had some running scans I needed to check up on.

I found a SQL injection bug on a blog.

Here's how I did it, so you can learn... 👇 Firstly, I ran reconFTW on a set of domains related to the target. I had the main…

Protecting sensitive information is a recurring and widely known concern in the security community. As researchers, we know all too well how information can be used maliciously (I mean, come on … it’s our job). Considering the size of the threat vector that…

### Summary

One of the supported wiki formats is `mediawiki` which is rendered by `WikiCloth` via GitLab...

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comp...