XSS sanitizer bypass with namespaces #bugbounty #bugbountytips #bugbountyhunter
$50k XSS in a web3 website feat. renniepak #bugbounty #bugbountytips #bugbountyhunter
Top hunters think about everything when submitting a report #bugbounty #bugbountytips
GraphQL CSRF via the HEAD method #bugbounty #bugbountytips #bugbountyhunter
This differentiates top hunters from the rest #bugbounty #bugbountytips #bugbountyhunter
These privilege escalation endpoints are overlooked feat. Douglas Day #bugbounty #bugbountytips #bug
Creating custom wordlists feat. @rez0 #bugbounty #bugbountytips #bugbountyhunter
You should spend more time fuzzing feat. doomerhunter #bugbounty #bugbountytips #bugbountyhunter
$20,000 Misconfigured S3 bucket vulnerability #bugbounty #bugbountytips
Are UUID-based IDORs valid bugs? feat. Douglas Day #bugbounty #bugbountytips #bugbountyhunter
Success in bug bounty is based on this feat. Jhaddix #bugbounty #bugbountytips #bugbountyhunter
You don’t always have to predict the identifier #bugbounty #bugbountytips #bugbountyhunter
Hackbots for looking for privilege escalation bugs? #bugbounty #bugbountytips #bugbountyhunter
Being careful with brute-forcing identifiers #bugbounty #bugbountytips #bugbountyhunter
Turning a verbose error into an RCE #bugbounty #bugbountytips #bugbountyhunter
SQLi still exists in 2025 feat. Jasmin “JR0ch17” Landry #bugbounty #bugbountytips #bugbountyhunter