Over the past year, CSPT bugs have gained significant attention, with numerous blogs and...

InfoSec Write-ups

· ~3 min read · April 19, 2018 (Updated: June 19, 2018) · Free: Yes

Hi Guys,

InfoSec Write-ups

· ~4 min read · April 13, 2025 (Updated: May 7, 2025) · Free: No

From countless dead ends to a single Swagger UI payload — the unexpected breakthrough that...

#Introduce Myself:

Bug bounty hunting had been on my radar for a while. After reading dozens of write-ups and diving...

👋Hey security enthusiasts! 🚀

As a bug hunter, discovering privilege escalation vulnerabilities is a valuable and lucrative...

Are you tired of sifting through countless search results and unsure which websites truly have...

By Zoningxtr

InfoSec Write-ups

· ~14 min read · February 19, 2026 (Updated: March 15, 2026) · Free: No

A comprehensive, step-by-step guide to running penetration tests the way that actually works —...

Hey there, back again with another post! 😄

Hello guys! I&#39m back again with a real-life example of how I turned a simple open redirect...

Ever burned a whole weekend on manual recon, only to realize you missed a low-hanging RCE vector...

𝐀𝐈 𝐦𝐨𝐧𝐤𝐬.𝐢𝐨

· ~3 min read · September 3, 2024 (Updated: November 17, 2024) · Free: No

Use Immersive Translate Here:

An in-depth analysis of real-world cache poisoning vulnerabilities discovered on major platforms,...

MeetCyber

· ~5 min read · November 18, 2025 (Updated: November 18, 2025) · Free: No

Explore and learn about the Django CVE-2025–64459 vulnerability.

Bug hunting is a critical part of ensuring the security and stability of software systems, and it...

InfoSec Write-ups

· ~11 min read · September 27, 2025 (Updated: October 30, 2025) · Free: No

A step-by-step guide to my most effective, shortcut methods for bug bounty hunting.

Ever spent hours manually fuzzing inputs or hunting for XSS, only to find out you missed a simple...

InfoSec Write-ups

· ~5 min read · October 7, 2025 (Updated: October 7, 2025) · Free: No

I&#39m a cybersecurity enthusiast and the writer behind The Hacker&#39s Log — where I break down...

✨ Link for the full article in the first comment

InfoSec Write-ups

· ~4 min read · September 19, 2025 (Updated: September 19, 2025) · Free: No

When most people think of a website, they imagine the main domain: example.com. But hackers know...

Ever sat across from a client, nodding as they ask about "just running Nessus or nmap"...

InfoSec Write-ups

· ~8 min read · October 6, 2025 (Updated: October 6, 2025) · Free: No

A hands-on walkthrough to find, test and exploit Actuator endpoints for bug hunters.

InfoSec Write-ups

· ~3 min read · August 10, 2024 (Updated: November 18, 2024) · Free: Yes

This write-up is about 2 IDORs and an XSS I found on a housing website. However what led me into...

Java Script For Hacker , Learn To Think Like Hacker

Theory → Code → Project → Interview Questions → Real Scenarios

InfoSec Write-ups

· ~4 min read · October 2, 2025 (Updated: October 4, 2025) · Free: No

Error Based Hunting for API Exposure

OSINT Team

· ~7 min read · June 5, 2026 (Updated: June 6, 2026) · Free: No

Hackers don&#39t always crack passwords. Sometimes they just click "Forgot Password?"...

Revere engineering, also called back engineering is the process by which a man-made object is...

In today&#39s Pentesting Methodology Lab Walkthrough at the Cybersec Cafe, I&#39ll be approaching...

Essential guide to mass DNS resolution, takeover detection, and sensitive records in bug bounty...

Bug Bounty Hunting: A Comprehensive Guide in English and french

· ~3 min read · February 12, 2026 (Updated: February 12, 2026) · Free: No

🧰 My Bug Bounty Tool Stack (2026 Edition)

"All your Git repos are belong to us."

The $2,800 Bug That Took Just 1 Hour to Find

✨ Link for the full article in the first comment

Disclaimer

InfoSec Write-ups

· ~13 min read · May 23, 2026 (Updated: May 23, 2026) · Free: No

Turn exposed Google API keys into real-world impact by accessing Gemini and other Google services...

Cloud Security

· ~33 min read · March 16, 2025 (Updated: May 24, 2025) · Free: No

How do I hack thee? Let me count the ways…

Data Science in Your Pocket

· ~16 min read · April 30, 2025 (Updated: June 8, 2025) · Free: Yes

Advanced Prompt Engineering Techniques From Cursor&#39s System Prompt

InfoSec Write-ups

· ~4 min read · July 29, 2024 (Updated: November 19, 2024) · Free: No

Improve your bug bounty hunting, pentesting, and appsec skills with the JS Link Finder Burp Suite...

InfoSec Write-ups

· ~13 min read · January 15, 2026 (Updated: January 15, 2026) · Free: No

Step-by-Step Methods to Identify, Exploit and Bypass WAF Protections

🚀 Supercharge Your Bug Hunting with Brilliant One-Liners and Crush Vulnerabilities! 🚀

In this article, we will discuss Race Condition vulnerability, how to find one, and present 25...

System Weakness

· ~6 min read · September 11, 2025 (Updated: September 12, 2025) · Free: No

You type a simple message into ChatGPT, and suddenly it spills its entire system prompt, reveals...