DEV Community

#bugbounty

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
My Snare tool found 22 CVEs in a BBP program
o_73b1d9e0c879e7623c profile
Onix

My Snare tool found 22 CVEs in a BBP program

#bugbounty #cve #cybersecurity #infose
Comments
1 min read
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons
iamfaizanakhtar profile

OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons

#cybersecurity #bugbounty #infosec #vulnerability
Comments
7 min read
Mastering Hydra: 20 Essential Commands for Password Auditing
abhinavsingwal profile

Mastering Hydra: 20 Essential Commands for Password Auditing

#hydra #cybersecurity #bugbounty #ethicalhacking
Comments
5 min read
Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons
iamfaizanakhtar profile

Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons

#cybersecurity #bugbounty #infosec #vulnerability
Comments
6 min read
DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis
iamfaizanakhtar profile

DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis

#cybersecurity #bugbounty #infosec #vulnerability
Comments
6 min read
Google pauses open-source bug bounty over AI slop
techpulse01239 profile

Google pauses open-source bug bounty over AI slop

#cybersecurity #google #ai #bugbounty
Comments
3 min read
How a Fox and a Single Quote Broke the Critter Gallery — SQLi in Intigriti Challenge 0926
duchuaz profile

How a Fox and a Single Quote Broke the Critter Gallery — SQLi in Intigriti Challenge 0926

#security #sql #bugbounty
1
Comments
3 min read
Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked
thefluxread profile

Researchers Used Claude to Hack OpenAI Here's Exactly How the Chain Worked

#aisafety #appsec #bugbounty #claudeai
Comments
4 min read
My Bug Hunting Playbook: How I Found and Fixed 8 Bugs Across 5 OSS Repos in 24 Hours
truongsontung profile

My Bug Hunting Playbook: How I Found and Fixed 8 Bugs Across 5 OSS Repos in 24 Hours

#bugbounty #debugging #github #programming
Comments
4 min read
The 28% Cost Bug: How a Single Character Broke Claude 3 Haiku Cache Pricing
truongsontung profile

The 28% Cost Bug: How a Single Character Broke Claude 3 Haiku Cache Pricing

#bugbounty #pricing #api #python
Comments
2 min read
I Automated the Boring Part of Bug Bounty Hunting
seek3r profile

I Automated the Boring Part of Bug Bounty Hunting

#bugbounty #python #automation #security
Comments
5 min read
Break It, Then Ask Why: Exposing a Hidden Internal Dev Console With One Flipped Flag
seek3r profile

Break It, Then Ask Why: Exposing a Hidden Internal Dev Console With One Flipped Flag

#security #bugbounty #webdev #pentesting
Comments
3 min read
The Ultimate IDOR Testing Checklist (2026 Edition)
medjahdi profile

The Ultimate IDOR Testing Checklist (2026 Edition)

#security #bugbounty #pentesting #infosec
Comments 2
6 min read
Your Secrets Need a VDP, Not Just a Bug Bounty
dwayne_mcdaniel profile

Your Secrets Need a VDP, Not Just a Bug Bounty

#security #secrets #bugbounty #vulnerability
Comments
9 min read
Business Logic Vulnerabilities: The Bugs No Scanner Finds
rxkov profile
Rxkov

Business Logic Vulnerabilities: The Bugs No Scanner Finds

#securitytech #websecurity #penetrationtesting #bugbounty
Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.