This Weeks Bug Bounty Writeups You Shouldn't Miss

Journey to Top Starts from Gaining Knowledge

Author

Spectat0r Guy
January 08, 2025

Hi Subscribers,

This week, I’ve curated a list of insightful bug bounty writeups that are packed with practical tips, clever exploitation techniques, and lessons learned from real-world applications. Whether you're just starting or are a seasoned hunter, these writeups will expand your perspective:

Bypassing Email verification through HTTP response interception

In the Name of Allah, the Most Beneficent, the Most Merciful. All the praises and thanks be to Allah, the Lord of the ‘Alamin (mankind…

infosecwriteups.com/bypassing-email-verification-through-http-response-interception-7644a907899a

Blind OS Command Injection with Output Redirection

Today, we’ll be diving into another blind vulnerability — a scenario more like what you’ll find while testing applications in the…

medium.com/@rcxsecurity/blind-os-command-injection-with-output-redirection-1d08c3793ff1

How I Ethically Hacked the Indian Army for the Second Time

Hello, Infosec Community!

cybersecuritywriteups.com/how-i-ethically-hacked-the-indian-army-for-the-second-time-edf6ec4495f8

The Rate Limit bypass which almost killed my brain

My name is Sirat, im an active bug hunter on hackerone. I have previously shared some rate limit stories and how to bypass them, today I…

siratsami71.medium.com/this-rate-limit-bypass-which-almost-killed-my-brain-1905749a5f4d

How a YouTube Video Led Me to $650: My Host Header Injection Adventure

Let’s rewind to a few weeks ago. I stumbled upon a fascinating video on YouTube discussing Host Header Injection Vulnerabilities. It looked…

medium.com/@trffnsec/how-a-youtube-video-led-me-to-650-my-host-header-injection-adventure-696fd82b2886

A Beginner’s Guide to Pentesting GraphQL APIs

GraphQL has gained immense popularity for its flexibility in API design. As a bug bounty hunter or pentester, understanding how to exploit…

infosecwriteups.com/a-beginners-guide-to-pentesting-graphql-apis-395fa1878f6a

Beginners Introduction To Server Side Request Forgery

Unveiling the Power of SSRF: Exploiting Servers, Bypassing Firewalls, and Protecting Your Infrastructure

bitpanic.medium.com/beginners-introduction-to-server-side-request-forgery-85c3a35eb726

Burp Suite + Form Deletion = Admin Storage Nightmare

In the Name of Allah, the Most Beneficent, the Most Merciful. All the praises and thanks be to Allah, the Lord of the ‘Alamin (mankind…

infosecwriteups.com/burp-suite-form-deletion-admin-storage-nightmare-240618a8c983

That's a wrap for this week! I hope these insights and resources help you level up your bug bounty journey. Remember, persistence is key, and there’s always something new to learn.

Stay curious, stay motivated, and keep hacking responsibly. See you next week with more tips, tricks, and updates!

Happy hunting,

@Spectatorguy