Biscuit's Bug Bounty Playbook
Search...
Ctrl + K
Bug Bounty Reports & Articles
3️⃣
Leaks & Disclosure (PII, API Key, etc)
Hunting JavaScript File for Bug Hunters
Stackademic
Analyzing JavaScript Files To Find Bugs
Medium
How to look for JS files Vulnerability for fun and profit?
Medium
Git Directory Exposed Leads to Credentials Disclosure
Medium
JS for Bug Bounties 2.0 Extreme Edition 2024
Medium
JS is love ❤️.
Medium
25+ users sensitive information disclosed by waybackurls
Medium
Information Disclosure
Medium
Plaintext Storage of a Password Lead to sensitive data leakage
Medium
This is the easiest bug you can find right now.
InfoSec Write-ups
IDOR lead to PII Disclosure
Medium
Unauthenticated Massive PII Leak
Medium
Logitech disclosed on HackerOne: Sensitive information disclosure...
HackerOne
Deriv.com disclosed on HackerOne: login to any user's cashier...
HackerOne
X (Formerly Twitter) disclosed on HackerOne: Information Disclosure...
HackerOne
Information Disclosure: Story of 500€ + 400$ Bounty
InfoSec Write-ups
P1 Vulnerability in 60 seconds
InfoSec Write-ups
How I Found a Bug under 3 mins , that could risk the reputation of an entire organisation !
Medium
How to find the Origin IP
Medium
Previous
IDOR (Indirect Object Reference)
Next
Open Redirects
Last updated
4 months ago
How I can easily get four P1 at NASA using Simple Google Dorking.
Medium