Как привлекать от 1000 пдп ежедневно?

Запустить рекламу в MiniApp с оплатой за пдп по 15 руб

Рекламная сеть Telegrow

Продвигай каналы, приложения и ботов на 1000 площадок

Надо было вчера

Про PR и креатив с неожиданных ракурсов и с юмором

Статистика Избранное

The Bug Bounty Hunter

@thebugbountyhunter

Гео и язык канала: Весь мир, Английский

Категория: Софт и приложения

Happy hunting!
thebugbountyhunter.com
hello@thebugbountyhunter.com

Связанные каналы | Похожие каналы

Гео и язык канала

Весь мир, Английский

Категория

Софт и приложения

Статистика

Избранное

Фильтр публикаций

Скрывать удаленные

Скрывать репосты

The Bug Bounty Hunter

21 Dec, 13:00

Intigriti 2024 – A year in review

https://www.intigriti.com/blog/news/intigriti-2024-a-year-in-review

Intigriti 2024 - A year in review

652 0 3

The Bug Bounty Hunter

21 Dec, 01:13

CVE-2024-44825 - Invesalius Arbitrary File Write and Directory Traversal

https://www.partywave.site/show/research/CVE-2024-44825%20-%20Invesalius%20Arbitrary%20File%20Write%20and%20Directory%20Traversal

1.5k 0 9 1

The Bug Bounty Hunter

20 Dec, 14:30

Blind XXE with OOB Interaction via XML Parameter Entities

https://medium.com/the-first-digit/blind-xxe-with-oob-interaction-via-xml-parameter-entities-97244bf2b85e

Blind XXE with OOB Interaction via XML Parameter Entities

Today, we’ll be learning about a vulnerability that is more like the real-world — a vulnerability that is blind.

2.1k 0 23 2

The Bug Bounty Hunter

20 Dec, 14:00

Latest ReconFTW Release v2.9.1!

https://github.com/six2dez/reconftw/releases/tag/v2.9.1

Release v2.9.1 · six2dez/reconftw

What's Changed Updated amass v3 config.ini by @six2dez in #884 Adding Metafinder & Whois to installed tools check. by @0xAW in #889 Fix touch errors in multi-recon by ensuring directories ...

2k 0 15 3

The Bug Bounty Hunter

20 Dec, 13:00

Triage: The not-so-secret hack to impactful bug bounty programs

https://www.intigriti.com/blog/business-insights/triage-the-not-so-secret-hack-to-impactful-bug-bounty-programs

Triage: The not-so-secret hack to impactful bug bounty programs

Intigriti's triage team often sit quietly behind the scenes, but make a big impact for. They bring value to customers and hackers equally.

1.9k 0 16 1

The Bug Bounty Hunter

20 Dec, 12:53

GitHub - gwen001/gitlab-subdomains: Find subdomains on GitLab.

https://github.com/gwen001/gitlab-subdomains

GitHub - gwen001/gitlab-subdomains: Find subdomains on GitLab.

Find subdomains on GitLab. Contribute to gwen001/gitlab-subdomains development by creating an account on GitHub.

1.8k 0 17 1

The Bug Bounty Hunter

20 Dec, 12:45

How an IDOR Vulnerability Led to User Profile Modification

https://www.hackerone.com/vulnerability-management/idor-vulnerability-deep-dive

How an IDOR Vulnerability Led to User Profile Modification

Learn the ins and outs of IDOR vulnerabilities and how one exploitation led to malicious user profile modification.

1.7k 0 16

The Bug Bounty Hunter

20 Dec, 11:24

$750 Domain Hijacking Vulnerability

https://medium.com/@1-day/750-domain-hijacking-vulnerability-f6e4b4445711

$750 Domain Hijacking Vulnerability – A simple P3

A simple P3 on bugcrowd

1.8k 0 17

The Bug Bounty Hunter

20 Dec, 11:00

Team 82 Sharon Brizinov - The Live Hacking Polymath (Ep. 98)

https://www.youtube.com/watch?v=CP3FxNPXh0g

Team 82 Sharon Brizinov - The Live Hacking Polymath (Ep. 98)

Episode 98: In this episode of Critical Thinking - Bug Bounty Podcast Justin Gardner sits down with Sharon,to discuss his journey from early iOS development to leading a research team at Claroty. They address the differences between HackerOne and Pwn2Own, and talk through some intricacies of IoT sec...

1.9k 0 9 3

The Bug Bounty Hunter

19 Dec, 17:49

I’m Lovin’ It: Exploiting McDonald’s APIs to hijack deliveries and order food for a penny

https://eaton-works.com/2024/12/19/mcdelivery-india-hack/

I’m Lovin’ It: Exploiting McDonald’s APIs to hijack deliveries and order food for a penny

A series of API flaws in McDelivery India made it possible to order food for a penny, hijack other people’s delivery orders, view user information, and more.

2.3k 0 33 5

The Bug Bounty Hunter

19 Dec, 15:30

Limitations Are Just An Illusion: Brumens on Leveraging Advanced SSTI Exploitation to Achieve RCE

https://www.youtube.com/watch?v=FVm6wYc1S6A

2.5k 0 22

The Bug Bounty Hunter

19 Dec, 15:13

How an obscure PHP footgun led to RCE in Craft CMS

https://www.assetnote.io/resources/research/how-an-obscure-php-footgun-led-to-rce-in-craft-cms

How an obscure PHP footgun led to RCE in Craft CMS

Craft CMS is one of the most popular PHP-based CMSes globally, boasting over 150,000 sites worldwide. This blog post details a pre-authentication RCE vulnerability affecting Craft CMS versions below 4.13.1 and 5.5.1.

2.3k 0 10

The Bug Bounty Hunter

19 Dec, 15:13

Exploiting Reflected Input Via the Range Header

https://attackshipsonfi.re/p/exploiting-reflected-input-via-the

Exploiting Reflected Input Via the Range Header

TL;DR Reflected input is often unexploitable because the attack ends up in a place which stops it activating, such as within a comment section, or inside an attribute.

2.2k 0 13 2

The Bug Bounty Hunter

18 Dec, 14:30

How to Write Great Bug Bounty & Pentest Report (Proof of Concepts)

https://www.youtube.com/watch?v=qR_OQsRFd7g

How to Write Great Bug Bounty & Pentest Report (Proof of Concepts)

LIKE and SUBSCRIBE with NOTIFICATIONS ON if you enjoyed the video! 👍 📚 If you want to learn bug bounty hunting from me: https://bugbounty.nahamsec.training 💻 If you want to practice some of my free labs and challenges: https://app.hackinghub.io 💵 FREE $200 DigitalOcean Credit: https://m.do.co/c/...

2.6k 0 25 11

The Bug Bounty Hunter

18 Dec, 13:00

Insecure file uploads: A complete guide to finding advanced file upload vulnerabilities

https://www.intigriti.com/researchers/blog/hacking-tools/insecure-file-uploads-a-complete-guide-to-finding-advanced-file-upload-vulnerabilities

Insecure file uploads: A complete guide to finding advanced file upload vulnerabilities

File upload vulnerabilities are fun to find, they are impactful by nature and in some cases even result in remote code execution. Nowadays, most developers are educated on insecure file upload impleme...

2.5k 0 34

The Bug Bounty Hunter

18 Dec, 12:45

How To Find Broken Access Control Vulnerabilities in the Wild

https://www.hackerone.com/community/find-broken-access-control-vulnerabilities

How To Find Broken Access Control Vulnerabilities in the Wild

Learn the ins and outs of broken access control vulnerabilities and how to find them in your security research.

2.4k 0 37 3

The Bug Bounty Hunter

18 Dec, 12:00

267 - Buggy Operating Systems Are Coming to Town

https://dayzerosec.com/podcast/267.html

Buggy Operating Systems Are Coming to Town

In our last episode of 2024, we delve into some operating system bugs in both Windows and Linux, as well as some bugs that are not bugs but rather AI slop.

2.4k 0 6

The Bug Bounty Hunter

18 Dec, 10:06

Authentication Bypass Vulnerability in Philips IntelliSpace Cardiovascular

https://outurnate.com/authentication-bypass-vulnerability-in-philips-intellispace-cardiovascular

2.5k 0 17

The Bug Bounty Hunter

18 Dec, 01:14

Exposing Facebook’s Hidden Goldmine: Creators’ Private Data at Risk

https://medium.com/@gtm0x01/exposing-facebooks-hidden-goldmine-creators-private-data-at-risk-01317f3f0031

Exposing Facebook’s Hidden Goldmine: Creators’ Private Data at Risk

This bug revealed sensitive data such as email addresses, phone numbers, birthdays, associated pages and apps, banking details and many…

2.8k 0 16 2

The Bug Bounty Hunter

17 Dec, 18:02

🎅 revisited patchstackapp HQ. He needs you to find more difficult vulns in #WordPress plugins and themes.

📅 When: 17-23 Dec

🛡 What: SQLi, PHP Object Injection, Insecure Deserialization

📊 CVSS: 7.0+

📈 Installs: 50+

🎁 $4700 bounty pool

2.7k 0 8 8

Показано 20 последних публикаций.

43 276

подписчиков

Статистика канала

Популярное в канале

Android's CVE-2020-0238 (AccountTypePreferenceLoader)

MSSQL Identified as Vulnerable to Emoji String Exploitation https://decrypt.lol/posts/2024/11/29...

🔥 Black Friday is here! Get Burp Bounty Pro for just €79/year – save €40! Optimize your web vu...

OSINT: Following the Breadcrumbs - "No Comment" [INTIGRITI 1337UP CTF 2024] https://www.youtube....

The cyber threat landscape part 3: Evolving attack techniques and tactics https://blog.intigriti...