My step-by-step bug bounty recon methodology, from reading scope to continuous monitoring, with the tools I run at each stage.
Read More
Hi everyone, In this post I want to share a quick win from my bug bounty recon: how a single uncover query found the exposed origin server of a company's…
Read More
What's a Bug Bounty Program? Imagine a company paying you to break into their system—legally, of course. That’s what bug bounty programs are all about. Companies set these up so…
Read More
WannaCry was one of the most damaging ransomware outbreaks in history. On 12 May 2017 it spread around the world in a matter of hours, encrypting more than 200,000 computers…
Read More
In May 2019, Flipboard, the news aggregation app, disclosed that attackers had gained unauthorised access to some of its databases and copied user account information. This post looks back at…
Read More
Every company that runs a website, an app or a cloud account is a potential target. Attackers do not need to be sophisticated; they only need to find one weakness…
Read More
Personal alarms and GPS trackers give families peace of mind. An elderly parent living alone can press an SOS button to call for help, some devices detect falls automatically, and…
Read More
Almost everything we do now has a digital side: banking, shopping, work and staying in touch with family. That convenience has also made online crime one of the most common…
Read More
Hello friends, This is my first write-up: how I found and exploited CVE-2022-21500, a vulnerability in Oracle E-Business Suite, during bug bounty testing, and how it exposed a company's employee…
Read More