DEV Community

#bugbounty

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
🪟 Clickjacking: When a Missing X-Frame-Options Is a Real Bug

🪟 Clickjacking: When a Missing X-Frame-Options Is a Real Bug

1
Comments 1
10 min read
A to Z Bug Bounty Hunting Tools: Full Arsenal Breakdown, Storage Sizing & Kali Setup

A to Z Bug Bounty Hunting Tools: Full Arsenal Breakdown, Storage Sizing & Kali Setup

Comments
6 min read
Automating Kali Linux on Apple Silicon: Headless GUI Orchestration, Burp Suite BApps & Recon Pipelines

Automating Kali Linux on Apple Silicon: Headless GUI Orchestration, Burp Suite BApps & Recon Pipelines

Comments
4 min read
🧟 Old API Versions: Find the /v1 That Never Died, Then Prove It

🧟 Old API Versions: Find the /v1 That Never Died, Then Prove It

Comments
11 min read
Installing Kali Linux on an Apple Silicon Mac for Bug Bounty: Storage Audits, VM Sizing & Performance Tuning

Installing Kali Linux on an Apple Silicon Mac for Bug Bounty: Storage Audits, VM Sizing & Performance Tuning

Comments
5 min read
🕸️ GraphQL BOLA: One Object, Many Paths, and How to Prove the Gap

🕸️ GraphQL BOLA: One Object, Many Paths, and How to Prove the Gap

Comments
10 min read
How to find bug bounty and disclosure programs, and get a report accepted

How to find bug bounty and disclosure programs, and get a report accepted

Comments
10 min read
🕵️ Hidden HTTP Parameters: Find Them with Arjun, Then Prove They Matter

🕵️ Hidden HTTP Parameters: Find Them with Arjun, Then Prove They Matter

Comments 1
10 min read
OpenAI Bug Bounty: New $30,000 Critical Tier vs Old Rates

OpenAI Bug Bounty: New $30,000 Critical Tier vs Old Rates

Comments
7 min read
📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

Comments
10 min read
🎯 ffuf Content Discovery: Cut the False Positives, Prove the Hits

🎯 ffuf Content Discovery: Cut the False Positives, Prove the Hits

Comments
9 min read
🗺️ Hidden API Endpoints in JavaScript Bundles: Find and Prove Them

🗺️ Hidden API Endpoints in JavaScript Bundles: Find and Prove Them

1
Comments
10 min read
🤖 AI Pentest Agents: What to Delegate, What to Guard, What to Prove

🤖 AI Pentest Agents: What to Delegate, What to Guard, What to Prove

Comments
8 min read
🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins

🧬 Mass Assignment: One Extra JSON Field That Turns Users into Admins

Comments
7 min read
Detection Is Not Proof: How to Verify a Bug Before You Report It

Detection Is Not Proof: How to Verify a Bug Before You Report It

Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.