Hi everyone, today I’m gonna talk about vulnerability that I found it in IBM that allowed me to get full access on many services.

Hello all the amazing hackers and cyber security enthusiasts. My name is Vedant and I’m an aspiring bug bounty hunter and a cyber security…

S

Hi All,

This time Ron talks about two bugs he found in 1Password that worth $3,300, at the end of the video, he also shares three bug bounty tips to improve your hacking skills.

This video is sponsored by Intigriti. Join Intigriti to become an ethical hacker today:…

In this video, Ron Chan talks about a $20,000 bug that could've allowed attackers to read anyone's outlook email.

Hello My Name Orwa Atyat

Top disclosed reports from HackerOne. Contribute to reddelexc/hackerone-reports development by creating an account on GitHub.

Workshop on XML External Entity attacks. 5 exercises with different techniques and tricks to reach RCE.

Create a post on any Facebook page Vulnerability

David Schütz's bug bounty writeups

Today at 1651 UTC, we opened an internal incident entitled "Facebook DNS lookup returning SERVFAIL" because we were worried that something was wrong with our DNS resolver 1.1.1.1. But as we were about to post on our public status page we realized something…

Hello everyone, I’m Fares. Today, I’ll share the story of how I successfully identified a reflected XSS vulnerability within a public bug…

Server-side prototype pollution is hard to detect black-box without causing a DoS. In this post, we introduce a range of safe detection techniques, which we've also implemented in an open source Burp

Good day everyone! I hope all of you are doing well.

In this article, I will talk about how administrators of resources in the Tor Network, i.e. the Darkweb, are identified.

Web application firewalls bypasses collection and testing tools. How to test, evaluate, compare, and bypass web application and API security solutions like WAF, NGWAF, RASP, and WAAP.

This how I was able to bypass SSRF protection after too many failed attempts using DNS rebinding, if you don't know what is DNS rebinding, don't worry, I will briefly explain it and then we will go through the python exploit that I wrote to pull off the attack…