I've just added an API routes wordlist containing 953011 possible API paths from the HTTPArchive dataset. Download it at https://t.co/Y04dyFY5q1 - all paths which start with "/api/", "/v1/", "/v2", or "/rest/". Good luck hacking! Thanks for requesting this…

iOS Facebook Messenger Leaking Users Access Token POC 2020 Bounty: 15k$ https://t.co/PEWlV9NL0x #bugbounty #bugbountytips #bugbountywriteup #security #facebook

Different methodology to Recon targets

Subdomains Enumeration + File Bruteforcing + Code Review = $10K Blind SSRF

Hi everyone, today I’m gonna talk about vulnerability that I found it in IBM that allowed me to get full access on many services.

Hello all the amazing hackers and cyber security enthusiasts. My name is Vedant and I’m an aspiring bug bounty hunter and a cyber security…

S

Hi All,

This time Ron talks about two bugs he found in 1Password that worth $3,300, at the end of the video, he also shares three bug bounty tips to improve your hacking skills.

This video is sponsored by Intigriti. Join Intigriti to become an ethical hacker today:…

In this video, Ron Chan talks about a $20,000 bug that could've allowed attackers to read anyone's outlook email.

Hello My Name Orwa Atyat

Top disclosed reports from HackerOne. Contribute to reddelexc/hackerone-reports development by creating an account on GitHub.

Workshop on XML External Entity attacks. 5 exercises with different techniques and tricks to reach RCE.

Create a post on any Facebook page Vulnerability

David Schütz's bug bounty writeups

Today at 1651 UTC, we opened an internal incident entitled "Facebook DNS lookup returning SERVFAIL" because we were worried that something was wrong with our DNS resolver 1.1.1.1. But as we were about to post on our public status page we realized something…

Hello everyone, I’m Fares. Today, I’ll share the story of how I successfully identified a reflected XSS vulnerability within a public bug…