<![CDATA[Bug Bounty Hunting on Medium]]> https://medium.com/tag/bug-bounty-hunting/latest?source=rss------bug_bounty_hunting-5 https://cdn-images-1.medium.com/proxy/1*TGH72Nnw24QL3iV9IOm4VA.png Bug Bounty Hunting on Medium https://medium.com/tag/bug-bounty-hunting/latest?source=rss------bug_bounty_hunting-5 Medium Wed, 06 May 2026 18:30:34 GMT <![CDATA[ The Ultimate Bug Bounty Course: From Zero to Advanced Hacker 1]]>

Volume 1, Post 1: Welcome to the Bug Bounty Universe

Continue reading on Medium »

]]> https://medium.com/@dasielramirezhernandez/the-ultimate-bug-bounty-course-from-zero-to-advanced-hacker-269160fa6518?source=rss------bug_bounty_hunting-5 https://medium.com/p/269160fa6518 Tue, 24 Mar 2026 17:48:00 GMT 2026-03-24T18:08:12.004Z <![CDATA[Web Security Series #7 — Exploiting Blind SQL Injection via Session Cookies]]>

SQL Injection is one of the most critical vulnerabilities in web applications. However, not all SQL Injection flaws are directly visible…

Continue reading on Medium »

]]> https://medium.com/@laibakashif0011/web-security-series-7-exploiting-blind-sql-injection-via-session-cookies-8a82bc573211?source=rss------bug_bounty_hunting-5 https://medium.com/p/8a82bc573211 Wed, 18 Mar 2026 10:03:26 GMT 2026-03-18T10:03:26.125Z <![CDATA[Web Security Series #6 — Exploiting SQL Injection to Extract Sensitive Data]]>

Injection vulnerabilities remain one of the most critical risks in web application security.

Continue reading on Medium »

]]> https://medium.com/@laibakashif0011/web-security-series-6-exploiting-sql-injection-to-extract-sensitive-data-26c5c11e4779?source=rss------bug_bounty_hunting-5 https://medium.com/p/26c5c11e4779 Tue, 17 Mar 2026 09:18:53 GMT 2026-03-17T09:18:53.304Z <![CDATA[Web Security Series #5 — Exploiting Broken Access Control via Token Misuse in API Endpoints]]>

Access control mechanisms are essential for ensuring that users can only perform actions that they are authorized to execute. When these…

Continue reading on Medium »

]]> https://medium.com/@laibakashif0011/web-security-series-5-exploiting-broken-access-control-via-token-misuse-in-api-endpoints-c0d89ceaadd1?source=rss------bug_bounty_hunting-5 https://medium.com/p/c0d89ceaadd1 Mon, 16 Mar 2026 14:32:42 GMT 2026-03-16T14:32:42.445Z <![CDATA[Web Security Series #4 — Discovering Unauthorized Resources via IDOR (Burp Suite & ffuf)]]>

Access control mechanisms are a fundamental component of web application security. When implemented incorrectly, they can allow attackers…

Continue reading on Medium »

]]> https://medium.com/@laibakashif0011/web-security-series-4-discovering-unauthorized-resources-via-idor-burp-suite-ffuf-bd878726f8a2?source=rss------bug_bounty_hunting-5 https://medium.com/p/bd878726f8a2 Sun, 15 Mar 2026 16:45:35 GMT 2026-03-15T16:45:35.958Z <![CDATA[Web Security Series #3 — Discovering Credentials Using Cluster Bomb Attacks (Burp Suite & ffuf)]]>

Authentication mechanisms are a critical component of web application security. However, weak credential management and insufficient…

Continue reading on Medium »

]]> https://medium.com/@laibakashif0011/web-security-series-3-discovering-credentials-using-cluster-bomb-attacks-burp-suite-ffuf-a2dc4bb6ebc3?source=rss------bug_bounty_hunting-5 https://medium.com/p/a2dc4bb6ebc3 Sat, 14 Mar 2026 18:06:12 GMT 2026-03-14T18:06:12.431Z <![CDATA[Web Security Series #2 — Bypassing Authentication via MFA Tampering (Second-Factor Replay Attack)]]>

Multi-Factor Authentication (MFA) is widely used to strengthen authentication mechanisms by requiring users to verify their identity using…

Continue reading on Medium »

]]> https://medium.com/@laibakashif0011/web-security-series-2-bypassing-authentication-via-mfa-tampering-second-factor-replay-attack-ddb578f6ffc3?source=rss------bug_bounty_hunting-5 https://medium.com/p/ddb578f6ffc3 Fri, 13 Mar 2026 14:55:26 GMT 2026-03-13T14:55:26.179Z <![CDATA[A Simple P4 Bug That Ended as Duplicate]]>

Bug bounty hunting has a funny way of humbling you.

Continue reading on Medium »

]]> https://bugwraith.medium.com/a-simple-p4-bug-that-ended-as-duplicate-4cb0c4ca75b2?source=rss------bug_bounty_hunting-5 https://medium.com/p/4cb0c4ca75b2 Thu, 12 Mar 2026 18:11:47 GMT 2026-03-12T18:11:47.196Z <![CDATA[The Bug Bounty Hunter Roadmap (2026): From Curious Beginner to Real Vulnerability Finder]]>

The Hacker Dream Most People Get Wrong

Continue reading on Medium »

]]> https://medium.com/@bugitrix/the-bug-bounty-hunter-roadmap-2026-from-curious-beginner-to-real-vulnerability-finder-6605198b820c?source=rss------bug_bounty_hunting-5 https://medium.com/p/6605198b820c Wed, 11 Mar 2026 08:12:14 GMT 2026-03-11T08:12:14.531Z