The Bug Bounty Hunter

@thebugbountyhunter

Channel's geo and language: World, English

Category: Software & Applications

Happy hunting!
thebugbountyhunter.com
hello@thebugbountyhunter.com

Related channels | Similar channels

Channel's geo and language

World, English

The Bug Bounty Hunter

10 Mar, 12:01

Reversing Samsung’s H-Arx Hypervisor Framework - Part 1

https://dayzerosec.com/blog/2025/03/08/reversing-samsungs-h-arx-hypervisor-part-1.html

Reversing Samsung's H-Arx Hypervisor Framework - Part 1

In many ways, mobile devices lead the security industry when it comes to defense-in-depth and mitigation. Over the years, it has been proven time and again that the kernel cannot be trusted to be secure. As such, there has been effort put into moving secrets (ie. encryption keys) and other sensitive...

1.3k 0 9 2

The Bug Bounty Hunter

10 Mar, 01:58

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam

https://www.elttam.com/blog/rails-sqlite-gadget-rce/

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam

elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.

1.9k 0 13

The Bug Bounty Hunter

10 Mar, 00:53

From Partial IDOR to GPS Tracking — API Flaw Explained

https://infosecwriteups.com/from-partial-idor-to-gps-tracking-api-flaw-explained-5eebab2af32a

From Partial IDOR to GPS Tracking — API Flaw Explained

Hey Infosec buddies! I’m back with an interesting finding from last year. During testing redacted.com, my Spidey Sense kicked in when I…

1.9k 0 17

The Bug Bounty Hunter

8 Mar, 18:03

Reversing Samsung's H-Arx Hypervisor Framework - Part 1

https://dayzerosec.com/blog/2025/03/08/reversing-samsungs-h-arx-hypervisor-part-1.html

Reversing Samsung's H-Arx Hypervisor Framework - Part 1

2.4k 0 19 2

The Bug Bounty Hunter

8 Mar, 13:45

Latest Nuclei Release v3.3.10!

https://github.com/projectdiscovery/nuclei/releases/tag/v3.3.10

Release v3.3.10 · projectdiscovery/nuclei

What's Changed Other Changes added support to generate CPU & PGO profiles by @dwisiswant0 in #6058 added escape code blocks for markdown formatting by @Ice3man543 in #6089 fixed auth valid...

2.5k 0 15

The Bug Bounty Hunter

8 Mar, 12:30

Vulnerability Reward Program: 2024 in Review

http://security.googleblog.com/2025/03/vulnerability-reward-program-2024-in.html

Vulnerability Reward Program: 2024 in Review

Posted by Dirk Göhmann In 2024, our Vulnerability Reward Program confirmed the ongoing value of engaging with the security research communit...

2.3k 0 8

The Bug Bounty Hunter

7 Mar, 14:53

A very fancy way to obtain RCE on a Solr server

https://www.hacefresko.com/posts/rce-on-solr-server-via-replication

A very fancy way to obtain RCE on a Solr server

2.7k 0 32 4

The Bug Bounty Hunter

7 Mar, 14:00

Latest ReconFTW Release v3.0.0!

https://github.com/six2dez/reconftw/releases/tag/v3.0.0

Release v3.0.0 · six2dez/reconftw

What's Changed Faraday integration for WebUI and reporting Update install.sh - Mantra Install Fix by @tux3d0 in #918 Add --check-tools option and GitHub workflow by @pgrenaud in #920 Fix macos...

2.7k 0 21 1

The Bug Bounty Hunter

7 Mar, 11:00

Exploiting SAAS Misconfigurations

https://www.youtube.com/watch?v=8pzsjgWB8IQ

Exploiting SAAS Misconfigurations

#hacking #bugbounty #bugbountytips #websecurity #infosec #saas

2.5k 0 8

The Bug Bounty Hunter

6 Mar, 18:26

The Burn Notice, Part 2/5 | AI Agents: When Everything Becomes an Attack Surface

https://medium.com/@attias.dor/the-burn-notice-part-2-5-ai-agents-when-everything-becomes-an-attack-surface-bbcece386f02

The Burn Notice, Part 2/5 | AI Agents: When Everything Becomes an Attack Surface

We Manipulated an HR Agent to Betray Its Own Organization and Discovered a Critical Vulnerability in The Process (CVE-2025–26319)

2.8k 0 15 1

The Bug Bounty Hunter

6 Mar, 17:17

Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218) › Searchlight Cyber

https://slcyber.io/blog/sitecore-unsafe-deserialization-again-cve-2025-27218/

Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218) › Searchlight Cyber

Assetnote, now a searchlight cyber company, has uncovered a zero day REMOTE COMMAND EXECUTION VULNERABILITY in SITECORE EXPERIENCE PLATFORM new Sitecore vulnerabilities discovered

2.5k 0 13 2

The Bug Bounty Hunter

6 Mar, 15:30

Talkie Pwnii #4: Exploiting Punycode Homograph Attacks & Escaping NodeJS VM Module Sandboxes

https://www.youtube.com/watch?v=Js9NEE4cJCs

2.5k 0 8 1

The Bug Bounty Hunter

6 Mar, 10:34

Understanding and Mitigating TOCTOU Vulnerabilities in C# Applications - AFINE - digitally secure

https://afine.com/understanding-and-mitigating-toctou-vulnerabilities-in-c-applications/

Understanding and Mitigating TOCTOU Vulnerabilities in C# Applications - AFINE - digitally secure

In this article, we explore TOCTOU vulnerabilities, subtle yet dangerous race conditions that occur when security checks and resource usage are not tightly coupled. In C# development on Windows, where file operations and dynamic code loading are common, understanding and mitigating these risks is es...

2.7k 0 10 3

The Bug Bounty Hunter

5 Mar, 16:00

Do you know this common Go vulnerability?

https://www.youtube.com/watch?v=wVknDjTgQoo

Do you know this common Go vulnerability?

When auditing code it's crucial to know about common issues. In this video we explore a Go issue that I was not aware of. Learn hacking on https://www.hextree.io/ (ad) 38c3 CTF - Fajny Jagazyn Wartości Kluczy: https://2024.ctf.link/internal/challenge/fb03748d-7e94-4ca2-8998-a5e0ffcbd761/ Unintend...

2.7k 0 30 11

The Bug Bounty Hunter

5 Mar, 15:06

In-store physical Pentest: feedback on a real case study - Hackmosphere

https://www.hackmosphere.fr/in-store-physical-pentest-feedback-on-a-real-case-study/?lang=en

In-store physical Pentest: feedback on a real case study - Hackmosphere

A physical pentest carried out in a furniture store uncovered several major security vulnerabilities.

2.8k 0 12

The Bug Bounty Hunter

5 Mar, 15:05

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam

https://www.elttam.com/blog/rails-sqlite-gadget-rce/

New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam

elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.

2.6k 0 7

The Bug Bounty Hunter

5 Mar, 12:30

New AI-Powered Scam Detection Features to Help Protect You on Android

http://security.googleblog.com/2025/03/new-ai-powered-scam-detection-features.html

New AI-Powered Scam Detection Features to Help Protect You on Android

Posted by Lyubov Farafonova, Product Manager, Phone by Google; Alberto Pastor Nieto, Sr. Product Manager Google Messages and RCS Spam and Ab...

3k 0 12 1

The Bug Bounty Hunter

5 Mar, 12:01

275 - Path Confusion and Mixing Public/Private Keys

https://dayzerosec.com/podcast/275.html

Path Confusion and Mixing Public/Private Keys

This week's episode features a variety of vulnerabilities, including a warning on mixing up public and private keys in OpenID Connect deployments, as well as path confusion with an nginx+apache setup.

2.9k 0 9 1

The Bug Bounty Hunter

4 Mar, 17:55

Client-Side Path Traversal | VeryLazyTech

https://www.verylazytech.com/client-side-path-traversal

Client-Side Path Traversal | VeryLazyTech

3.3k 0 34 3

The Bug Bounty Hunter

4 Mar, 15:01

Empowering ethical hackers: How Intigriti builds a thriving security researcher community

https://www.youtube.com/watch?v=IrzPr-zqCI4

3.1k 0 6

20 last posts shown.

42 469

subscribers

Channel statistics

Popular in the channel

Achieving RCE in famous Japanese chat tool with an obsolete Electron feature https://flatt.tech/...

Hacking High-Profile Bug Bounty Targets: Deep Dive into a Client-Side Chain https://vitorfalcao....

Announcing our new cohost... (Ep. 106) https://www.youtube.com/watch?v=3rkg1CUDpjA

Nginx/Apache Path Confusion to Auth Bypass in PAN-OS (CVE-2025-0108) › Searchlight Cyber https:/...

Tomorrow our #WCAsia Capture The Flag starts. If you're into WordPress security challenges you sh...

Site language

SearcheeBot

Telegram Analytics

TGStat Bot

TGAlertsBot

The Bug Bounty Hunter

Channel's geo and language

Category

42 469

Popular in the channel