Implement This Methods To Earn Bounties

Hunting Bugs Your Way

Spectat0r Guy
January 10, 2025

Are you sure about your methods that are created by you or copied from somewhere will earn you bounties?

‘Yes or No’

If ‘Yes’ then you should read Or ‘No’ then you definitely READ this…

I have compiled a list of methods that can be used by you to hunt for bugs and these methods can be implemented in your ongoing metholodigies…

After scorning the 50+ metholodigies I have something for you , following are the methods which can be used by you for hunting :

Race Condition to Bypass Rate-Limiting: A new technique made by Nillsx

Hi, Security Researchers!

infosecwriteups.com/race-condition-to-bypass-rate-limiting-a-new-technique-made-by-nillsx-6a60f41dbae6

Facebook Text Injection Vulnerability: A Creative Approach | Bug Bounty

Hi Guys, In this write-up, we’ll walk through the steps we took to identify the vulnerability of a simple text injection and how we…

infosecwriteups.com/facebook-text-injection-vulnerability-a-creative-approach-bug-bounty-048076ad35ea

Bypassing Email verification through HTTP response interception

In the Name of Allah, the Most Beneficent, the Most Merciful. All the praises and thanks be to Allah, the Lord of the ‘Alamin (mankind…

infosecwriteups.com/bypassing-email-verification-through-http-response-interception-7644a907899a

How to Find Origin IP of any Website Behind a WAF

Hello, everyone, and welcome back! In today’s guide, I’ll share some amazing methods to find the origin IP of any website protected by a…

infosecwriteups.com/how-to-find-origin-ip-of-any-website-behind-a-waf-c85095156ef7

Admin Panel Access via Default Credentials 🤩

Hello Hackers, In this write-up I am going to tell how quickly and easily I can access to admin panel using default credentials.

infosecwriteups.com/admin-panel-access-via-default-credentials-215b92b030bb

API pentesting: Broken Authentication

Basics of Broken Authentication

infosecwriteups.com/api-pentesting-broken-authentication-987658c691c0

Wordlists Every Pentester Must Have !!

Essential wordlists and tools that power password cracking, brute force attacks, and directory enumeration

infosecwriteups.com/wordlists-every-pentester-must-have-7ad4c1e46ce5

Reflected XSS on Gaming Blog Website

I found a reflected XSS vulnerability on a website I used to frequent when playing a text-based MUD (multi user dungeon).

infosecwriteups.com/reflected-xss-on-gaming-blog-website-edc448d613a3

OAuth Account Hijacking via redirect_uri

Today, we’ll be walking through my step-by-step methodology as I approach an Oauth vulnerability. This is part of my Methodology…

infosecwriteups.com/oauth-account-hijacking-via-redirect-uri-ae8ca7a66930

Uncovering an IDOR on Reacted.com — A Curious Bug Hunter’s Tale 🕵️‍♂️✨

Sometimes, bug hunting feels like treasure hunting — you never know what you might find hidden just beneath the surface. And this time, it…

infosecwriteups.com/uncovering-an-idor-on-reacted-com-a-curious-bug-hunters-tale-%EF%B8%8F-%EF%B8%8F-99f2bcf742af

SQL Injection: How I Secured Personal Information (PII) of 1.1M Job Seekers

This blog discusses the discovery of an SQL Injection vulnerability on SLRC asset, exposing personal information of 1.1M job seekers.

infosecwriteups.com/sql-injection-how-i-secured-personal-information-pii-of-1-1m-job-seekers-7f7c55d11fbc

How I Leveraged HTML Injection to Create an Account Using Someone Else’s Email

HTML Injection

infosecwriteups.com/how-i-leveraged-html-injection-to-create-an-account-using-someone-elses-email-b80f83ab9465

Above are the medium Write-Ups written by our fellow bug hunters and they explained their step-by-step approach that leads to bug 🪲.

So you should try to understand the basic principles behind the development of applications. So , That's It for Today.

@spectat0rguy