Bug Hunter

The Art of 403 Bypass: From Understanding to Exploitation

by

Press enter or click to view image in full size N0aziXss Feb 3, 2026 https://medium.com/@N0aziXss/the-art-of-403-bypass-from-understanding-to-exploitation-8903118a074d Subtitle: A Systematic Methodology for Identifying and Circumventing Access Control Barriers in Web Applications Byline: By N0aziXss | Security Researcher | HackerOne & BugCrowd Validated Introduction: Deep Dive into HTTP 403🔐 What is Error 403? 403 Forbidden — The server … Read more

From Default IIS Page to Critical SQL Injection

by

Ahmad Mugh33ra Dec 9, 2025 https://mugh33ra.medium.com/from-default-iis-page-to-critical-sql-injection-d0e9950c66fc Why “boring” infrastructure often hides the most dangerous secrets Sometimes the most dangerous vulnerabilities hide in plain sight, waiting for someone who refuses to give up. Assalam-O-Alikum My name is Ahmad Mugheera an Indivisual Security Researcher, Ethical Hacker and bug bounty hunter from Pakistan. Let’s Start The Setup: Another … Read more

A Journey of Limited Path Traversal To RCE With $40,000 Bounty!

by

HX007 Jan 16, 2025 Link: https://medium.com/@HX007/a-journey-of-limited-path-traversal-to-rce-with-40-000-bounty-fc63c89576ea My Name is Abdullah Nawaf, Full Time Bug Bounty Hunter, Working actively in BugCrowd with a Top 50 Rank, Rank 11 for P1 Bugs With 226 P1 , Hunting For P1, and P2 Bugs. In this write-up, I will detail how I& Orwa Atyat successfully escalated a limited path traversal into an RCE, earning us a $40,000 bounty. #Description: While conducting reconnaissance and port scanning … Read more