DEV Community

#bugbounty

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
How to find bug bounty and disclosure programs, and get a report accepted

How to find bug bounty and disclosure programs, and get a report accepted

Comments
10 min read
🕵️ Hidden HTTP Parameters: Find Them with Arjun, Then Prove They Matter

🕵️ Hidden HTTP Parameters: Find Them with Arjun, Then Prove They Matter

Comments 1
10 min read
OpenAI Bug Bounty: New $30,000 Critical Tier vs Old Rates

OpenAI Bug Bounty: New $30,000 Critical Tier vs Old Rates

Comments
7 min read
📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

Comments
10 min read
🎯 ffuf Content Discovery: Cut the False Positives, Prove the Hits

🎯 ffuf Content Discovery: Cut the False Positives, Prove the Hits

Comments
9 min read
Why Unauthenticated API Endpoints are Still a Major Threat

Why Unauthenticated API Endpoints are Still a Major Threat

1
Comments
3 min read
How to Reverse Engineer a Web3 Frontend to Find Hidden API Endpoints

How to Reverse Engineer a Web3 Frontend to Find Hidden API Endpoints

1
Comments
3 min read
Bypassing Android SSL Pinning: A Journey with mitmproxy and APK-Mitm

Bypassing Android SSL Pinning: A Journey with mitmproxy and APK-Mitm

1
Comments
3 min read
🗺️ Hidden API Endpoints in JavaScript Bundles: Find and Prove Them

🗺️ Hidden API Endpoints in JavaScript Bundles: Find and Prove Them

1
Comments
10 min read
🤖 AI Pentest Agents: What to Delegate, What to Guard, What to Prove

🤖 AI Pentest Agents: What to Delegate, What to Guard, What to Prove

Comments
8 min read
🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins

🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins

Comments
7 min read
Detection Is Not Proof: How to Verify a Bug Before You Report It

Detection Is Not Proof: How to Verify a Bug Before You Report It

Comments
4 min read
Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis

Session Forgery + Cross-Environment Token Trust: One Request to Fleet-Wide Admin Access — Analysis

Comments
7 min read
My Snare tool found 22 CVEs in a BBP program

My Snare tool found 22 CVEs in a BBP program

Comments
1 min read
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons

OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
⌂ 换网址