List: Bug Bounty / Application Security | Curated by Raymond Lind

Sep 23, 2024

40 stories

2 saves

Bug Bounty / Application SecurityA list containing application bugs and exploits that I have found and the details on how they were found.
In
OSINT Team
by
Raunak Gupta Aka Biscuit
Top 10 Browser Extensions Every Bug Bounty Hunter Needs— — — — — — — — — Free Article link: Hereeee!!! — — — — — — — — —
As bug bounty hunters, we need to save time by avoiding constant…
Jun 13, 2024
8
Jun 13, 2024
8
In
OSINT Team
by
Andrew Blooman
Build Your Own Cyber Threat Intelligence System…at Home!Learn how to collect Threat Intelligence for free
Aug 2, 2024
18
Aug 2, 2024
18
 This story is no longer available
Adam G
5 SaaS Ideas You Can Build as a SOLO Founder using chatGPT v2.The dynamic landscape of technology, especially with the advent of AI tools like ChatGPT, presents a fertile ground for innovative SaaS…
Jan 10, 2024
1
Jan 10, 2024
1
In
Level Up Coding
by
Sanjay Priyadarshi
How to Get Started With a $1 Million SaaS Without Leaving Your 9–5Killer Tips
Sep 26, 2023
7
Sep 26, 2023
7
Yeo Bo Wen
Zero to OSCP 2023: it isn’t as tough as you thinkIntroduction
Aug 10, 2023
7
Aug 10, 2023
7
kerstan
HTTP/2 Request SmugglingSubscribed to: https://medium.com/@kerstan
Dec 15, 2023
Dec 15, 2023
In
Practice in Public
by
Michael Lim
How I Built A Six-Figure Personal Brand Alongside A 9–5 Job (Without Being Cringe).Warning: It’s simple to understand, but not easy to do.
Oct 28, 2023
18
Oct 28, 2023
18
In
InfoSec Write-ups
by
Security Lit Limited
Decoding Advanced XSS Payload Chaining TacticsThe digital landscape is an ever-evolving battlefield, with cybersecurity experts and malicious hackers continually adapting to each…
Nov 8, 2023
Nov 8, 2023
In
InfoSec Write-ups
by
M7arm4n
[CORS] Easy peasy lemon squeezyThis blog post provides an accessible explanation of CORS and its misconfigurations.
Sep 18, 2023
Sep 18, 2023
Khaled Mohamed
Uncovering SSRF Vulnerabilities Made Simple: Leveraging the Wayback Machine’s Saved PagesHi, I’m Khaled Mohamed — xElkomy. Excited to share my latest bug bounty finding! Stay tuned for the details! #BugBounty #Cybersecurity 🐛🔍
Jul 19, 2023
1
Jul 19, 2023
1
Vaibhav Kumar Srivastava
Citrix Gateway XSS & Open Redirection (CVE-2023–24488)Hello, everyone! The Citrix gateway CVE has been in the news a lot over the last few weeks. Let’s explore how one can identify the…
Jul 27, 2023
Jul 27, 2023
In
System Weakness
by
1337.Krip
Automating XSSHey folks,
Jul 4, 2023
Jul 4, 2023
Cuncis
The Ultimate SQLmap Tutorial: Master SQL Injection and Vulnerability Assessment!SQL Injection is a type of cyber attack where malicious actors exploit vulnerabilities in web applications to inject malicious SQL code…
Apr 17, 2023
2
Apr 17, 2023
2
kerstan
How I Discovered SSRF on Hackerone ProgramHi guys, I am Kerstan. Today, I will share you how I discoverd SSRF on hackerone Program.
Dec 7, 2023
2
Dec 7, 2023
2
Musab Alharany
10 ways to exploit JWT (JSON Web Token):بسم الله الرحمن الرحيم
Jul 14, 2023
3
Jul 14, 2023
3
In
InfoSec Write-ups
by
nav1n
I Earned $3500 and  40 Points for A GraphQL Blind SQL Injection Vulnerability.Thank you for your love and appreciation for my recent blog post on MySQL SQL Injection that I found in a major international retail…
Mar 10, 2023
10
Mar 10, 2023
10
 This story is no longer available
Mba-oji Chiagoziem
My First Case of SSRF Using DirsearchHello, I am a 16-year-old bug bounty hunter. I would like to appreciate God Almighty for helping me to find this bug.
Apr 18, 2023
9
Apr 18, 2023
9
Lopseg
Markdown XSS polyglotTL;DR
Dec 7, 2023
Dec 7, 2023

Bug Bounty / Application Security

A list containing application bugs and exploits that I have found and the details on how they were found.

Top 10 Browser Extensions Every Bug Bounty Hunter Needs

— — — — — — — — — Free Article link: Hereeee!!! — — — — — — — — — As bug bounty hunters, we need to save time by avoiding constant…

Build Your Own Cyber Threat Intelligence System…at Home!

Learn how to collect Threat Intelligence for free

5 SaaS Ideas You Can Build as a SOLO Founder using chatGPT v2.

The dynamic landscape of technology, especially with the advent of AI tools like ChatGPT, presents a fertile ground for innovative SaaS…

How to Get Started With a $1 Million SaaS Without Leaving Your 9–5

Killer Tips

Zero to OSCP 2023: it isn’t as tough as you think

Introduction

HTTP/2 Request Smuggling

Subscribed to: https://medium.com/@kerstan

How I Built A Six-Figure Personal Brand Alongside A 9–5 Job (Without Being Cringe).

Warning: It’s simple to understand, but not easy to do.

Decoding Advanced XSS Payload Chaining Tactics

The digital landscape is an ever-evolving battlefield, with cybersecurity experts and malicious hackers continually adapting to each…

[CORS] Easy peasy lemon squeezy

This blog post provides an accessible explanation of CORS and its misconfigurations.

Uncovering SSRF Vulnerabilities Made Simple: Leveraging the Wayback Machine’s Saved Pages

Hi, I’m Khaled Mohamed — xElkomy. Excited to share my latest bug bounty finding! Stay tuned for the details! #BugBounty #Cybersecurity 🐛🔍

Citrix Gateway XSS & Open Redirection (CVE-2023–24488)

Hello, everyone! The Citrix gateway CVE has been in the news a lot over the last few weeks. Let’s explore how one can identify the…

Automating XSS

Hey folks,

The Ultimate SQLmap Tutorial: Master SQL Injection and Vulnerability Assessment!

SQL Injection is a type of cyber attack where malicious actors exploit vulnerabilities in web applications to inject malicious SQL code…

How I Discovered SSRF on Hackerone Program

Hi guys, I am Kerstan. Today, I will share you how I discoverd SSRF on hackerone Program.

10 ways to exploit JWT (JSON Web Token):

بسم الله الرحمن الرحيم

I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability.

Thank you for your love and appreciation for my recent blog post on MySQL SQL Injection that I found in a major international retail…

My First Case of SSRF Using Dirsearch

Hello, I am a 16-year-old bug bounty hunter. I would like to appreciate God Almighty for helping me to find this bug.

Markdown XSS polyglot

TL;DR

Raymond Lind