The Bug Bounty Hunter
52.1K subscribers
107 photos
1 video
1 file
10.4K links
Happy hunting!
thebugbountyhunter.com
hello@thebugbountyhunter.com
Download Telegram
Top 10 web hacking techniques of 2025: call for nominations

https://portswigger.net/research/top-10-web-hacking-techniques-of-2025-nominations-open
❤5💯2🤔1
Burp MCP + Codex CLI
This guide shows how to connect Burp Suite MCP Server to Codex CLI so that Codex can reason directly on your real HTTP traffic — no API keys, no scanning, no fuzzing.

https://pentestbook.six2dez.com/others/burp#burp-mcp?codex-cli
❤20
Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover

https://ysamm.com/uncategorized/2025/01/13/capig-xss.html
1🔥18❤3🤩2👍1👎1🤔1
Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover

https://ysamm.com/uncategorized/2026/01/13/capig-xss.html
❤3👍2
Self-XSS in Facebook payments flow leads to Instagram and Facebook account takeovers

https://ysamm.com/uncategorized/2026/01/15/self-xss-facebook-payments.html
❤3👍2
Datr cookie theft and AI leads to Facebook account takeover via trusted device recovery

https://ysamm.com/uncategorized/2026/01/15/steal-dtsg-cookie.html
❤3👍2
Two-click Facebook account takeover via FXAuth token and blob theft

https://ysamm.com/uncategorized/2026/01/15/steal-fxauth-leads-instagram-ato.html
❤5👍1
Multiple cross-site leaks disclosing Facebook users in third-party websites

https://ysamm.com/uncategorized/2026/01/16/cross-site-leaks.html
❤6
Instagram account takeover via Meta Pixel script abuse

https://ysamm.com/uncategorized/2026/01/16/leaking-fbevents-ato.html
❤4