I Hack Everything. Bug Bounty Hunter.

Tag

pentesting

#pentesting

More content

Read more stories on Hashnode

Articles with this tag

CVE-2024-37629: Simple XSS Payload Exploits 0day Vulnerability in 10,000 Web Apps

Jun 12, 20242 min read

The Power of Simplicity: A Bug Bounty Tale with Big Results · Late one night, after working on a couple of bug bounty platforms, I decided to revisit a...

CVE-2024-37629: Simple XSS Payload Exploits 0day Vulnerability in 10,000 Web Apps

CVE-2024-34240: Latest Stored XSS 0day Vulnerability Unveiled

May 21, 20242 min read

How I Quickly Found a Stored XSS 0day in the QDOCS Smart School 7.0.0 · Late in the evening, I decided to explore some PHP applications focused on...

CVE-2024-34240: Latest Stored XSS 0day Vulnerability Unveiled

CVE-2024-34241: A Step-by-Step Discovery Guide

May 17, 20243 min read

How I Found Several Stored XSS Bugs in Rocket LMS Version 1.9 in Under 10 Minutes · It was late at night, and I was starting to burn out from hunting...

CVE-2024-34241: A Step-by-Step Discovery Guide

Review of the Certified AppSec Pentester Certification: Tips for Passing on Your First Attempt

May 8, 20246 min read

I was scrolling through LinkedIn and noticed a couple of hackers on my newsfeed posting that they passed the mock exam for the CAPen Certification by...

Review of the Certified AppSec Pentester Certification: Tips for Passing on Your First Attempt

Uncovering an SSRF Vulnerability in PDFMyURL Affecting Numerous Users

Apr 22, 20242 min read

A bug bounty story by GRuMPz. · While enumerating the scope of a target on a private bug bounty program, I came across a subdomain used for generating...

Uncovering an SSRF Vulnerability in PDFMyURL Affecting Numerous Users