Learn Bug Bounty

Blog
Learn Bug Bounty

PimpMyCaido: DOMLogger++, Caido extension

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

Read More ->

How to use Claude Code for Bug Bounty: find fast, validate manually

Read More ->

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Read More ->

Vulnerability vectors: server-side request forgery

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Read More ->

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Read More ->

Vulnerability vectors from YesWeHack: OS command injection

The ultimate Bug Bounty guide to OS command injection vulnerabilities

Read More ->

The ultimate Bug Bounty guide to OS command injection vulnerabilities

Read More ->

BUG BREAKDOWN: AUTH BYPASS, WORDPRESS AZURE AD SSO PLUGIN

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Read More ->

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Read More ->

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Read More ->

Bug Bounty guide to code analysis from YesWeHack, illustrated with bugs and magnifying glass

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

Read More ->

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

Read More ->

Open-source security testing: the Bug Bounty guide to code analysis

Read More ->

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

Read More ->

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

Read More ->

The ultimate Bug Bounty guide to HTTP request smuggling vulnerabilities

Read More ->

The ultimate Bug Bounty guide to HTTP request smuggling vulnerabilities

Read More ->

The minefield between syntaxes: exploiting syntax confusions in the wild

Read More ->

The minefield between syntaxes: exploiting syntax confusions in the wild

Read More ->

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

Read More ->

Showing 9 of 66 articles.

Learn Bug Bounty

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

How to use Claude Code for Bug Bounty: find fast, validate manually

Hacking in the age of AI: LLMs, agentic CLIs and MCP servers for Bug Bounty hunters

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

The ultimate Bug Bounty guide to OS command injection vulnerabilities

The ultimate Bug Bounty guide to OS command injection vulnerabilities

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation

Server-side request forgery: The ultimate Bug Bounty guide to exploiting SSRF vulnerabilities

Open-source security testing: the Bug Bounty guide to code analysis

Open-source security testing: the Bug Bounty guide to code analysis

Python pitfalls: Turning developer mistakes into vulnerabilities

Python pitfalls: Turning developer mistakes into vulnerabilities

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

XML external entity: The ultimate Bug Bounty guide to exploiting XXE vulnerabilities

Open-source security testing: the Bug Bounty guide to code analysis

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

The ultimate Bug Bounty guide to HTTP request smuggling vulnerabilities

The ultimate Bug Bounty guide to HTTP request smuggling vulnerabilities

The minefield between syntaxes: exploiting syntax confusions in the wild

The minefield between syntaxes: exploiting syntax confusions in the wild

Android recon for Bug Bounty hunters: A complete guide from APK extraction to mapping attack surfaces

Products

Researchers

Resources

Company

Follow us