@bugbountywizard

Top bug bounty writeups for bounty Hunter from https://xitter.cf/t.co/3lXxhPa7oQ , https://xitter.cf/t.co/kMVGsjePzq #bugbounty #bugbountytips

 DM for Collaboration
bugbountywizard.app
Joined November 2024
  • Tweets846
  • Following0
  • Followers2.5K
10Media
BugBountyWizard Publication is live. We’re publishing bug bounty writeups, security research, vulnerability analysis and practical offensive security content. Submit your research: docs.google.com/forms/d/1Woj… Read: medium.com/bugbountywizard bugbountywizard.app #bugbounty

BugBountyWizard Contributor Application

Want to publish your security research with BugBountyWizard? We are looking for security researchers, bug bounty hunters, penetration testers, developers, and cybersecurity enthusiasts who want to...

docs.google.com
1
4
1
16
2,998
CVE Patch Bypass: How a Semicolon Reopened a Fixed Access Control Vulnerability — by Youssef Elhosary youssefelhosary.medium.com/c… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

CVE Patch Bypass: How a Semicolon Reopened a Fixed Access-Control Vulnerability

“وما بكم من نعمة فمن الله”

youssefelhosary.medium.com
2
5
296
Android Deep Link Hijacking to Account Takeover via OAuth Code Interception — by 0x3bas 0x3bas.medium.com/android-de… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Android Deep Link Hijacking to Account Takeover via OAuth Code Interception

— — -

0x3bas.medium.com
2
14
455
Client-Side Path Traversal: When Your Frontend Sends the Wrong Request — by RakshaRoot medium.com/@raksharoot/clien… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Client-Side Path Traversal: When Your Frontend Sends the Wrong Request

How a ../ in a URL parameter turns into CSRF, cache deception, and account takeover.

medium.com
1
3
28
995
Invalid Role Leads to Organization Lockout and Unauthorized API Access — by Heinrich Banert medium.com/@banertheinrich/i… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Invalid Role Leads to Organization Lockout and Unauthorized API Access

السلام عليكم

medium.com
2
15
588
How I Bypassed a Region-Locked Comment Feature on a Public Bug Bounty Program — by Mostafa medium.com/@mostafa23110006/… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

How I Bypassed a Region-Locked Comment Feature on a Public Bug Bounty Program

A comment feature was blocked in my country, but it still worked fully through the API.

medium.com
1
11
657
CORS Misconfigurations: When the Browser Hands Over the Keys — by RakshaRoot medium.com/@raksharoot/cors-… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

CORS Misconfigurations: When the Browser Hands Over the Keys

Origin reflection, null tricks, regex bypasses, and the misconfigurations that turn CORS into account takeover.

medium.com
2
11
494
How I Found a Business Logic Flaw That Permanently Orphaned Teams on a Developer Platform — by Atef M. medium.com/@atefm5667/write-… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Write-Up: How I Found a Business Logic Flaw That Permanently Orphaned Teams on a Developer Platform

Author: Mohamed Atef Date: October 2026 Program: Disclosed via Private Bug Bounty Program (HackerOne) — Pending Public Disclosure Severity…

medium.com
2
18
873
Exposed MCP Server: From Recon to OAuth Security Flaws — by ScriptJacker scriptjacker.medium.com/expo… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Exposed MCP Server: From Recon to OAuth Security Flaws

Hey Hackers, I am Parth Narula. A penetration tester, bug hunter, red teamer and overall a security researcher. I live for those moments…

scriptjacker.medium.com
16
792
I Found an OTP Bypass Bug in Mahindra’s Account Creation System — by Falgun Sondagar medium.com/@Falgun_Sondagar/… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

I Found an OTP Bypass Bug in Mahindra’s Account Creation System

A month of silence from Mahindra, and how CERT-In finally got it fixed ~ By Falgun Sondagar

medium.com
2
3
26
1,273
I Asked How Guests Get Their Identity and Found a Meeting Logic Flaw — by Moaty Mohamed medium.com/@moatymohamed897/… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

I Asked How Guests Get Their Identity — and Found a Meeting Logic Flaw

1. The Initial Clue: Understanding How Guests Are Identified

medium.com
4
25
1,009
How I Found IDOR in a Travel Agency Application — by Jagadeeshan jagadeeshan2004.medium.com/h… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

How I found IDOR in a Travel Agency Application

Hello guys, I hope you are all doing well. I spent hours and days finding a critical vulnerability: an Indirect Object Reference (IDOR)…

jagadeeshan2004.medium.com
7
37
975
Bypass the Bypass: XSS — by Belal Mohamed medium.com/@belalmohamed3690… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Bypass the Bypass (XSS)

Without wasting your time — I found a Bypass for an XSS in a VDP program, reported it, and when its fixed i Bypassed it again.

medium.com
5
39
1,381
I Red-Teamed 3 AI Agents — Here’s What I Found — by Fenil Sheta fenilsheta.medium.com/i-red-… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

I Red-Teamed 3 AI Agents — Here’s What I Found

From unsafe code execution to MCP authorization and blind data exfiltration

fenilsheta.medium.com
2
18
746
Stored XSS in an Admin Alert Component via an Admin-Editable Store Name — by Zyad Atef medium.com/@zyadatef2462003/… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Stored XSS in an Admin Alert Component via an Admin-Editable Store Name

TL;DR: In the admin panel of a Ruby on Rails e-commerce platform, the alert component renders its message with .html_safe — i.e. without…

medium.com
3
31
1,297
Bypassing a Coupon’s Usage Limit via a Race Condition in an E-Commerce Platform — by Zyad Atef medium.com/@zyadatef2462003/… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Bypassing a Coupon’s usage_limit via a Race Condition in an E-Commerce Platform

TL;DR: A Ruby on Rails e-commerce platform enforces a promotion’s redemption limit (e.g. a single-use coupon) by counting the completed…

medium.com
1
6
56
2,432
How to Discover Hidden API Endpoints Using JavaScript Analysis — by OSINT Team osintteam.blog/how-to-discov… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

How to Discover Hidden API Endpoints Using JavaScript Analysis

Hi, I’m Vipul — the human behind TheHackersLog.

osintteam.blog
2
25
1,301
How I Bypassed a Trusted URL Allowlist to Inject CSS and Trigger External Browser Requests — by RedHunter01 medium.com/@redhunter01/how-… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

How I Bypassed a Trusted URL Allowlist to Inject CSS and Trigger External Browser Requests

An in-depth bug bounty case study on client-side CSS injection, weak URL validation, and how a seemingly harmless image parameter became an…

medium.com
3
20
757
How I Found an Unauthenticated GraphQL API Leaking User Data — by Omar Tamer medium.com/@OmarTamer0/how-i… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

How I Found an Unauthenticated GraphQL API Leaking User Data

GraphQL shifts a lot of power to the client. One endpoint, one POST request, and the caller decides exactly which objects and fields come…

medium.com
1
5
23
773
Android Deep Link Hijacking to Account Takeover via OAuth Code Interception — by Ahmed M. Abd. Elftah Abbas medium.com/@ahmed.m.abd.elft… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Android Deep Link Hijacking to Account Takeover via OAuth Code Interception

— — -

0x3bas.medium.com
4
22
969
Why Cursor Stripe Webhooks Accept Fake Payments — CWE-345 — by IgniteAI medium.com/@igniteai.ck/why-… Join us on Telegram: t.me/bugbountywizard #bugbounty #bugbountytips #bugbountytip

Why Cursor Stripe Webhooks Accept Fake Payments (CWE-345)

TL;DR

medium.com
2
15
643
Load more