anshh.bohara·Sep 20How I Found an Undocumented GraphQL Endpoint Leaking Home Addresses of French Company Owners (EUR…The documented unauthenticated endpoint had 1 query. The undocumented one had 7 queries and 7 mutations. One of those queries returned…
Ishaq Ahmad Mohammad·Aug 31Why Is an API Key Not the Same as Delegated Authority for an AI Agent?If you ask a standard LLM agent to monitor prices, negotiate vendor deals, or manage bounties, the current industry status quo forces you…
Amir Mohseni·Aug 16Critical Security Assessment of Veilo Privacy Protocol Smart ContractsPrepared for: Veilo Bug Bounty Program (Superteam) Date: August 16, 2026 Repository Analyzed: VeiloSolana/privacy-program Mainnet Program…
EMTIAZ AHMED 🍥·Apr 17Bug Bounty 2026: Why the “End of the World” is Actually a $500k OpportunityThe “death” of bug bounty hunting has been predicted every year since 2015. Yet, here we are in 2026, and the industry is more lucrative —…
Tanmaytarte·Apr 4We’ve messed up, a lot. Here’s Why Scribble Still Exists to celebrate it’s 2nd BirthdayBirthdays are supposed to be about celebration.
Marinovharisan·Feb 16BOUNTY | HTB | Windows |Walkthrough | Write upBounty is suppose to be an easy Windows machine from Hack The Box that shows you the basics of ASPX exploitation, how services run in…
Muntadhar M. Ahmed·Jan 29Turning Fuzzing Into $2,550: How a Simple Bug Gave Me Access to Employee IDs & ContractsWhile testing on a private program (ima name it redacted.com) I started like any security researcher would, doing basic reconnaissance…A response icon3A response icon3
Anshubind·Dec 23, 2025📦 The Night I Found a Backup ZIP File Sitting in Plain Sight — And Why It Could Have Exposed Far…Some bugs make you dig deep. Others make you write payloads, bypass filters, or chain logic flaws together.
CyberTechAjju·Nov 18, 2025How I Received an Appreciation Letter from NASA for Identifying a CVEA Late-Night Bug Hunting Story Filled With Persistence, Music & “Bass 3 Targets Aur Dekh Leta Hoon!” 🎧A response icon1A response icon1
