List: Free | Curated by Jawstar | Medium

Feb 26, 2025

28 stories

1 save

Free

httpzuz

How I Found 5 Reflected XSS in a Public Program

First thing before we diving in this writeup lets put a name to our target => example.com

5d ago

How I Found 5 Reflected XSS in a Public Program

5d ago

Alayna Ferdarko

Starting the New Year Fresh: A Comprehensive Guide to Cleaning Your Digital Footprint

As we welcome a new year, we often reflect on ways to start fresh — decluttering our homes, adopting healthier habits, or setting goals for…

Dec 31, 2024

Starting the New Year Fresh: A Comprehensive Guide to Cleaning Your Digital Footprint

Dec 31, 2024

Ahmed Najeh

Discovered 30 BOLA + IDOR vulnerabilities in a single subdomain (BBP).

In this article, I’ll walk you through how I identified over 30 BOLA (Broken Object Level Authorization) and IDOR (Insecure Direct Object…

Dec 30, 2024

Discovered 30 BOLA + IDOR vulnerabilities in a single subdomain (BBP).

Dec 30, 2024

#$ubh@nk@r

File Upload (RCE) to Bounty | HackerOne

Intro : Hello Hacker’s😀 what’s up! Hope you are all Fine. Today I am gonna show you how do I get a RCE Vulnerability in a Endpoint that…

Oct 1, 2024

File Upload (RCE) to Bounty | HackerOne

Oct 1, 2024

Da Money Hacker

3 Legit Websites That You Can Use to Earn an Extra $400/Day

Easy as pie…

Aug 17, 2024

3 Legit Websites That You Can Use to Earn an Extra $400/Day

Aug 17, 2024

Rishav anand

How HTML injection can help to make $1000.

HTML Injection is a type of web vulnerability that allows attackers to inject arbitrary HTML code into a web page. This can lead to various…

Oct 31, 2024

How HTML injection can help to make $1000.

Oct 31, 2024

This story is no longer available

In

Cyber Security Write-ups

by

AbhirupKonwar

ARCGIS HACKING

Unauthenticated File Upload Endpoint

Dec 4, 2024

ARCGIS HACKING

Dec 4, 2024

Rishav anand

Android Pentesting can make you $500/day.

Getting Started with Android Mobile Application Penetration Testing

Nov 24, 2024

Android Pentesting can make you $500/day.

Nov 24, 2024

In

OSINT Team

by

grepStrength

You Dirty RAT: AsyncRAT Malware Analysis

Getting familiar with anti-analysis.

Nov 27, 2024

You Dirty RAT: AsyncRAT Malware Analysis

Nov 27, 2024

In

OSINT Team

by

Alimuhammadsecured

How I hacked an Indian University’s CPanel account, email server, EARs, stored XSS, RCE

If you haven’t already read part 1 make sure to check that out here…

Sep 19, 2024

How I hacked an Indian University’s CPanel account, email server, EARs, stored XSS, RCE

Sep 19, 2024

In

OSINT Team

by

Alimuhammadsecured

How I got RCE on an Indian university without admin credentials Tale of directory listing, SQL…

Hacking Indian university’s web servers.

Sep 10, 2024

How I got RCE on an Indian university without admin credentials Tale of directory listing, SQL…

Sep 10, 2024

This story is no longer available

Rishav anand

Learn Cloud Pentesting (Roadmap) and earn in $100,000—$150,000

Cloud Penetration Testing (or Cloud Pentesting) involves testing the security of cloud environments, infrastructure, applications, and…

Oct 25, 2024

Learn Cloud Pentesting (Roadmap) and earn in $100,000—$150,000

Oct 25, 2024

Rishav anand

How a NoSQL Injection Attack Helped Me Earn $500: A Step-by-Step Guide

NoSQL databases, such as MongoDB and Couchbase, have become popular due to their ability to handle large amounts of unstructured data…

Oct 19, 2024

How a NoSQL Injection Attack Helped Me Earn $500: A Step-by-Step Guide

Oct 19, 2024

In

OSINT Team

by

an0nbil

Google dorking the right way.

Using Dekon GUI Tool for Bug Bounty Hunting to get big payouts in less time and less effort.

Nov 25, 2024

Google dorking the right way.

Nov 25, 2024

Lucas Rezaioff

How I passed the OSCP on my first attempt as a university student.

Jun 10, 2024

How I passed the OSCP on my first attempt as a university student.

Jun 10, 2024

This story is no longer available

Mahmoud Hamed

How Disabling 2FA Could End with a Bug?

In 2023, I focused on hunting on HackerOne and found many logical flaws, resulting in achieving the 5th rank in the HackerOne program for…

Oct 8, 2024

How Disabling 2FA Could End with a Bug?

Oct 8, 2024

Hamza Khaled

The Easiest $$$ I Made from a Business Logic Vulnerability

Let’s dive straight into the topic without any fluff.

Nov 19, 2024

The Easiest $$$ I Made from a Business Logic Vulnerability

Nov 19, 2024

Jawstar
99 Followers
I'm a Penetration Tester, Cyber security researcher & Top 1% in Tryhackme
Following
Tahir Ayoub
OSINT Team
PEN-TE3H
System Weakness
The Medium Blog
See all (9)

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams