🐛 Bug Bounty Writeup
TryHackMe Injectics CTF Writeup: From SQL Injection to RCE: https://medium.com/@ziy4d0x/tryhackme-injectics-ctf-writeup-from-sql-injection-to-rce-8f46652e966b
From Public Jenkins Exposure to Remote Code Execution: https://medium.com/@prasannasalunkhe19/from-public-jenkins-exposure-to-remote-code-execution-670cd15078ed
Blind SQL Injection Behind a WAF: Bypassing Filters with a NOT IN + CASE WHEN SLEEP Oracle: https://medium.com/@donghcoder/blind-sql-injection-behind-a-waf-bypassing-filters-with-a-not-in-case-when-sleep-oracle-081b7eb48d50
Critical IDOR in Order Tracking: Sequential IDs + Zero Authentication = Anyone’s Orders (and PII): https://medium.com/@donghcoder/critical-idor-in-order-tracking-sequential-ids-zero-authentication-anyones-orders-and-pii-789247650c89
How I Found My First $5,000 Bug With Zero CS Degree: https://medium.com/@bugitrix/how-i-found-my-first-5-000-bug-with-zero-cs-degree-f43e87f67177
Part 2 — Wireshark: Understanding Packets, Protocols & Network Layers: https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/part-2-wireshark-understanding-packets-protocols-network-layers-6e003d13d121
My Autonomous Hunt Harness Found an Origin-Hostname Bypass That Exposed a Non-Public WordPress Site: https://medium.com/@redhunter01/my-autonomous-hunt-harness-found-an-origin-hostname-bypass-that-exposed-a-non-public-wordpress-site-10e04d42b8e1
How I Got Regular Users to Bypass Admin Approval and Accept Live Shares (Broken Access Control) —…: https://medium.com/@tonmoydatta495/how-i-got-regular-users-to-bypass-admin-approval-and-accept-live-shares-broken-access-control-c4e086da86ec
AI Proxies Explained: How AI Gateways Work and Where the Security Risks Are: https://medium.com/@paritoshblogs/ai-proxies-explained-how-ai-gateways-work-and-where-the-security-risks-are-4826b5b271ce