DEV Community

#bugbounty

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Your Secrets Need a VDP, Not Just a Bug Bounty
dwayne_mcdaniel profile

Your Secrets Need a VDP, Not Just a Bug Bounty

#security#secrets#bugbounty#vulnerability
Comments
9 min read
I built an open-source OSINT tool that runs 55 modules with zero API keys
flowthingy profile
FlowThingy

I built an open-source OSINT tool that runs 55 modules with zero API keys

#python#security#osint#bugbounty
Comments
1 min read
Huynh Kien Minh: CVE-2026-13152 — Custom Fields Account Registration For WooCommerce Privilege Escalation
minhhk68 profile

Huynh Kien Minh: CVE-2026-13152 — Custom Fields Account Registration For WooCommerce Privilege Escalation

#security#wordpress#cve#bugbounty
Comments
4 min read
How to Earn $10k+/Year from Bug Bounties
qingluan profile
qing

How to Earn $10k+/Year from Bug Bounties

#security#bugbounty#money#hacking
Comments
5 min read
How I Found a HIGH-Severity AI Security Issue on Khan Academy's VDP
galeops profile
Galeops

How I Found a HIGH-Severity AI Security Issue on Khan Academy's VDP

#bugbounty#security#ai#hackerone
Comments
1 min read
I Found 8 Open Windows Bug Bounties in One GitHub Search (Here is the Pipeline)
hermesxclawctrl profile

I Found 8 Open Windows Bug Bounties in One GitHub Search (Here is the Pipeline)

#bugbounty#windows#opensource#github
Comments
4 min read
The Windows Bug Bounty That Almost Got Away: How I Found $1,000+ in Fixable Issues
hermesxclawctrl profile

The Windows Bug Bounty That Almost Got Away: How I Found $1,000+ in Fixable Issues

#opensource#bounties#windows#bugbounty
Comments
5 min read
"My AI Agent Found a Real Bug Bounty Race Condition — Here's the Full Autopsy"
hermesxclawctrl profile

"My AI Agent Found a Real Bug Bounty Race Condition — Here's the Full Autopsy"

#opensource#automation#devops#bugbounty
Comments
4 min read
From CORS to RCE: WordPress Bug Bounty Chains
ameobius profile
ameobius

From CORS to RCE: WordPress Bug Bounty Chains

#security#bugbounty#webdev#tutorial
Comments
12 min read
Cache Poisoning at the Edge: How Cloudflare Workers & Vercel Edge Functions Break Everything You Thought You Knew
arashad_dodhiya_0e4bdba5a profile

Cache Poisoning at the Edge: How Cloudflare Workers & Vercel Edge Functions Break Everything You Thought You Knew

#websecurity#cachepoisoning#appsec#bugbounty
Comments
7 min read
Subdomain takeover in 2026 — why dangling CNAMEs still pay, and how I find them at scale
0xnull-sec profile
0xNull

Subdomain takeover in 2026 — why dangling CNAMEs still pay, and how I find them at scale

#security#bugbounty#infosec#pentest
Comments
5 min read
Business Logic Attacks Explained Using a Banking App
arashad_dodhiya_0e4bdba5a profile

Business Logic Attacks Explained Using a Banking App

#testing#webdev#cybersecurity#bugbounty
Comments
4 min read
The Pentester’s Guide to Finding CBC Bit Flipping Vulnerabilities
arashad_dodhiya_0e4bdba5a profile

The Pentester’s Guide to Finding CBC Bit Flipping Vulnerabilities

#bugbounty#webtesting#cryptography#websecurity
Comments
4 min read
CBC Bit Flipping Explained: Why Encryption Alone Doesn't Guarantee Integrity
arashad_dodhiya_0e4bdba5a profile

CBC Bit Flipping Explained: Why Encryption Alone Doesn't Guarantee Integrity

#cryptography#security#bugbounty#webdev
1
Comments
3 min read
A Practical Web Application Reconnaissance Methodology for Penetration Testing
vikash_choudhary_dd42d65d profile

A Practical Web Application Reconnaissance Methodology for Penetration Testing

#cybersecurity#pentesting#websecurity#bugbounty
2
Comments
11 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.