cyb3rD1vvy@·22h agoFrom P4 to P1: Day 11 — XML External Entity (XXE) Injection: Finding and Validating XML Parser…Series: From P4 to P1 Day: 11 of 30 Topic: XML External Entity (XXE) Injection Category: Web Application Security | API Security
physics·4d agoAi can,t Solve this easy Challenge and CTF are now be like this.I was exploring Ai for a time. Today i did something.
InInfoSec Write-upsbyRivuDon·6d agoMy Second Year in Bug Bounty $$$$Learn from my experience and use it in yours.A response icon3A response icon3
Asad Mohsin·6d agoPractical Bug Bounty Hunting: Finding API Leaks, PII Exposure, and Password Reset VulnerabilitiesIntroduction
Shahzeb Ali·Oct 27When the Maintainer Says No: What Closing My MLflow Fix Taught MeA bot closed my pull request twice, a maintainer closed the issue, and the right move turned out to be a thank-you note
Shahzeb Ali·Oct 25What Filing a Bug Actually Earns You (When Nobody Merges Your PR Yet)A day after my silent bugs post, three things happened that were not merges, and they mattered more than I expected
Shahzeb Ali·Oct 23The Worst Bugs Do Not Crash. They Quietly Give You the Wrong Answer.A day spent hunting silent bugs in DataFusion, PyIceberg and Arrow
Shambhukapadi·Oct 23Part 3: Mastering App Components, Deep Links & WebViews1. Activities: The Front Door of Every App
Foysal Hossain, Senior Consultant @EY·Oct 21I Got a Critical Vulnerability in a Popular Social Media App Within 5 MinutesFive minutes. That’s all it took between opening a rooted Android device for the first time and sitting on a Critical severity finding in a…
Shahd mourad·Oct 19One Race Condition, Nine Projects, One Shared DataWhile testing a web application I found a race condition in its project creation feature that allowed me to create nine projects with the…A response icon1A response icon1
