ATIT0·2d agoHow I Found My First Bug: Information Disclosure via Exposed Directory ListingIntroduction
Samadhan shimple·4d agoHow I Hunt for Information Disclosure Bugs: My Complete Bug Bounty Methodology | by Samadhan…When I started learning bug bounty hunting, I thought finding security vulnerabilities was mostly about testing parameters and running…A response icon2A response icon2
kjulius·Oct 23The Metadata Nobody Reads: How a Government Portal Leaked Internal Usernames Across 15,000…A short writeup of a bulk-harvestable metadata leak, how I found it, and what it says about the way we publish documents.
L4ZZ3RJ0D·Oct 11Recreating the DeepSeek Database Leak Wiz Research FoundBack in January 2025, Wiz Research found a completely open, unauthenticated ClickHouse database sitting on the public internet, tied…A response icon1A response icon1
Gabriel Odusanya·Oct 8Hunting archived URLs for information disclosureThe Wayback Machine keeps copies of pages it has already crawled. Its CDX API lets you list those URLs. That list is a lead. It is not a…
Yash Panchal·Oct 2Secret Supernovas | CSS CTF Semester 2 2026 WriteupChallenge: Secret Supernovas Category: Web Exploitation Difficulty: Medium Points: 50 Platform: Cybersecurity Sydney CTF 2026
MaMad·Sep 6Exposed Django Debug Mode on a Development SubdomainInformation Disclosure via Django Debug Mode
Affanhaxor·Sep 2Unminify — picoCTF Write-up | Sometimes the Flag Is Right in Front of YouIntroduction
0xnay33m·Aug 8Chaining Information Disclosure, SMB Access, and Sudo Misconfiguration to Root — Lab WalkthroughIn this lab, an exposed web directory leaked a backup credential file that provided access to an SMB share. The share contained an SSH…
