This is a post about how I found a simple yet really critical vulnerability in a bug bounty program. It was the most critical bug I have ever found. All started after I found a path in a subdomain that was almost a blank page with no functionality at all. …

There are lots of guides on how to start into Bug Bounty Hunting but I will share my personal experience of getting into bug bounty hunting without previous knowledge of coding or web development and will also share some useful resources as well as answering some common questions. How I…

If you are familiar with what IDOR is, you will know that it can be anywhere from url, request body, GET or POST requests and yes, in cookies too.. After spending quite a lot of time in a private program i was invited, i started to learn how everything works…