L4ZZ3RJ0D·Just nowHow a Broken Email Confirmation Flow Took Over Any Shopify StoreReal chain this time, not one report but three linked ones, all from the same researcher, Ron Chan, who goes by ngalog on HackerOne. This…
Avinash Kumar·1d ago[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes RemotelyHi everyone!A response icon1A response icon1
starkwizzer·2d agoKilled by a Browser, Revived by a BackslashSingle Quote Turned a Dead Bug to Full JS Control over NASA.govA response icon1A response icon1
InOSINT TeambyDevansh Patel·Oct 23The frontend knew who was an admin. The server forgot to checkJavaScript often contains a near-complete map of an application’s roles and routes. The bug appears when the backend mistakes a hidden…
Pablo Vergara·Oct 8AI Script Kiddies Broke Bug Bounty HuntingIt only took a few months and AI models for a few to ruin it for everyone
Bugitrix·Oct 8How One Student Earned $1,030 From an Adobe Bug: A Bugitrix Case StudyIntroduction: From Beginner to Paid Bug Hunter
Paradox hunt(N.u) Darknight21·Sep 13My Journey From 0 to 10k$So i will keep this writeup to the point without talking any fluffA response icon1A response icon1
Muhamed Fazal PS·Sep 1One Researcher Earned $811,000 Hunting Bugs for Googleif you are not a premium member then you can read this article for free here
WhoAdnan·Aug 30💸 ₹4,000 for a 2-Minute Google Search: Publicly Exposed Invoice Leaking Customer PIIIntroduction
![[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes Remotely](https://webproxy.poorya-velaei-d67.workers.dev/https://miro.medium.com/v2/resize:fill:160:106/1*BnUqWuLxIdDhHDLlp1HmdA.png)
![[$10,000] Google Jules — The Silent Code Heist - Stealing Github Codes Remotely](https://webproxy.poorya-velaei-d67.workers.dev/https://miro.medium.com/v2/resize:fill:320:214/1*BnUqWuLxIdDhHDLlp1HmdA.png)
