DEV Community

#bugbounty

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
My toxic relationship with Meta's bug bounty program
zerox80 profile

My toxic relationship with Meta's bug bounty program

#security #cpp #quic #bugbounty
Comments
4 min read
OpenAI Bug Bounty: New $30,000 Critical Tier vs Old Rates
shaam_ai profile
Shaam

OpenAI Bug Bounty: New $30,000 Critical Tier vs Old Rates

#openai #bugbounty #bugcrowd #chatgpt
Comments
7 min read
đź“Ź CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved
krishna_kumar_75bdf350b26 profile

đź“Ź CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

#security #bugbounty #appsec #webdev
Comments
10 min read
🎯 ffuf Content Discovery: Cut the False Positives, Prove the Hits
krishna_kumar_75bdf350b26 profile

🎯 ffuf Content Discovery: Cut the False Positives, Prove the Hits

#security #bugbounty #cybersecurity #tutorial
Comments
9 min read
Why Unauthenticated API Endpoints are Still a Major Threat
vaultvult profile

Why Unauthenticated API Endpoints are Still a Major Threat

#cybersecurity #api #webdev #bugbounty
1
Comments
3 min read
How to Reverse Engineer a Web3 Frontend to Find Hidden API Endpoints
vaultvult profile

How to Reverse Engineer a Web3 Frontend to Find Hidden API Endpoints

#web3 #cybersecurity #bugbounty #javascript
1
Comments
3 min read
Bypassing Android SSL Pinning: A Journey with mitmproxy and APK-Mitm
vaultvult profile

Bypassing Android SSL Pinning: A Journey with mitmproxy and APK-Mitm

#android #cybersecurity #reverseengineering #bugbounty
1
Comments
3 min read
🗺️ Hidden API Endpoints in JavaScript Bundles: Find and Prove Them
krishna_kumar_75bdf350b26 profile

🗺️ Hidden API Endpoints in JavaScript Bundles: Find and Prove Them

#security #javascript #bugbounty #webdev
1
Comments
10 min read
🤖 AI Pentest Agents: What to Delegate, What to Guard, What to Prove
krishna_kumar_75bdf350b26 profile

🤖 AI Pentest Agents: What to Delegate, What to Guard, What to Prove

#security #ai #cybersecurity #bugbounty
Comments
8 min read
🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins
krishna_kumar_75bdf350b26 profile

🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins

#security #api #bugbounty #webdev
Comments
7 min read
Detection Is Not Proof: How to Verify a Bug Before You Report It
krishna_kumar_75bdf350b26 profile

Detection Is Not Proof: How to Verify a Bug Before You Report It

#security #bugbounty #webdev #beginners
Comments
4 min read
Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis
iamfaizanakhtar profile

Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis

#cybersecurity #bugbounty #infosec #vulnerability
Comments
7 min read
Google Dorking: 20 Queries That Expose What Search Engines Index
abhinavsingwal profile

Google Dorking: 20 Queries That Expose What Search Engines Index

#googledorks #dorks #cybersecurity #bugbounty
Comments
4 min read
My Snare tool found 22 CVEs in a BBP program
o_73b1d9e0c879e7623c profile
Onix

My Snare tool found 22 CVEs in a BBP program

#bugbounty #cve #cybersecurity #infose
Comments
1 min read
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons
iamfaizanakhtar profile

OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons

#cybersecurity #bugbounty #infosec #vulnerability
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.