Tag

#bug-bounty

← all tagsall articles →
3 posts
infosec
SSRF to internal dashboards: a bug-bounty walkthrough
How a forgotten URL preview endpoint exposed an entire metadata service.
securitybug-bounty
Jul 20262 min
infosec
IDOR via predictable IDs: a logic bug dressed as auth
When UUIDs in the URL aren't secret — and the API never checks ownership.
securitybug-bountyweb
Jul 20262 min
infosec
Logic bugs in checkout flows
When the price is right in the UI but wrong in the API — and how hunters find it.
securitywebbug-bounty
Apr 20262 min