#BugBountyTips
LightNews LightNews
yogsec.bsky.social
Google Dork to Find Exposed Database Files

Example: site:url ext:db

For more tips join Telegram channel t.me/bugbountyusa

#bugbounty #googledork #recon #infosec #ethicalhacking #pentesting #cybersecurity #bugbountytips #googlehacking #securityresearch
November 1, 2026 at 5:36 AM
yogsec.bsky.social
Google Dork to Find Exposed Laravel Env Files

Example: site:url inurl:.env ext:env

For more tips join Telegram channel t.me/bugbountyusa

#bugbounty #googledork #recon #infosec #ethicalhacking #pentesting #cybersecurity #bugbountytips #googlehacking #securityresearch
November 4, 2026 at 3:24 PM
monke.ie
🐵 MonkeHacks #102
Singapore, Prompt2Pwn, Budapest

monke.ie/p/monkehacks...
#bugbountytips #hacktheplanet #BugBounty
MonkeHacks #102
Singapore, Prompt2Pwn, Budapest
monke.ie
October 30, 2026 at 11:06 AM
monke.ie
🐵 MonkeHacks #101
Cork LHE, Moving, Prompt2Pwn

monke.ie/p/monkehacks...
#bugbountytips #hacktheplanet #BugBounty
MonkeHacks #101
Cork LHE, Moving, Prompt2Pwn
monke.ie
September 24, 2026 at 1:17 PM
httptoolkit.com
Wow - Daoud Youssef on YouTube (www.youtube.com/@daoudyousse...) has just put out 5 (five!) separate intro videos for all sorts of different HTTP Toolkit use cases.

If you want some help getting started, take a look: www.youtube.com/watch?v=vgQA...
05. Intercept android app via ADB and QRcode scan
on this video i have described how to intercept the traffic from Android apps via ADB and qrcode scan #httptoolkit #bugbounty #bugbountytips #infosec #proxy
www.youtube.com
August 24, 2026 at 3:44 PM
stealthcopter.bsky.social
Want to see me do a live demo and explain how I made over $20k with REGEX? Had a blast on this podcast

#BugBounty #BugBountyTips #XSS #AppSec #WordPress

www.youtube.com/live/bpsvcbA...
REGEXSS Demo: How Hackers Exploit Regular Expressions in WordPress | Mat Rollings (Stealthcopter)
YouTube video by Melapress
www.youtube.com
April 30, 2026 at 6:23 PM
stealthcopter.bsky.social
REGEXSS: How .* Turned Into over $6k in Bounties

Overly-greedy regex replacements can break HTML sanitisation & lead to XSS. Includes a live demo you can try exploiting it yourself!

sec.stealthcopter.com/regexss

#BugBounty #BugBountyTips #XSS #AppSec
Stealthcopter
Overly-greedy regex replacements can break HTML sanitisation and lead to XSS. I’ve already pulled in over $6k from this bug class, and there are plenty mo
sec.stealthcopter.com
September 24, 2025 at 7:50 AM
stealthcopter.bsky.social
Last week I found two regex bugs using regex → unauth XSS → 2× $2k = $4k in bounties 🥳 If you’ve been putting it off, learn regex. Seriously.

/regex\+xss/\$4k/

#BugBounty #BugBountyTips
September 11, 2025 at 7:49 AM
gregxsunday.bsky.social
GraphQL CSRF via the HEAD method #bugbounty #bugbountytips #bugbountyhunter
June 30, 2025 at 10:51 AM
gregxsunday.bsky.social
10/10 GraphQL SQL injection bug #bugbounty #bugbountytips #bugbountyhunter
June 28, 2025 at 10:51 AM
gregxsunday.bsky.social
Unexpected privilege escalation deletion bug #bugbounty #bugbountytips #bugbountyhunter
June 27, 2025 at 10:51 AM
gregxsunday.bsky.social
Unauthenticated → Low privileges → admin #bugbounty #bugbountytips #bugbountyhunter
June 26, 2025 at 10:50 AM
gregxsunday.bsky.social
Sometimes, one field is all you need for a bug #bugbounty #bugbountytips #bugbountyhunter
June 25, 2025 at 10:47 AM
gregxsunday.bsky.social
Fuzzing vs broken access control bugs feat. Arthur Aires #bugbounty #bugbountytips #bugbountyhunter
June 16, 2025 at 10:03 AM
gregxsunday.bsky.social
This is why you should run bug bounty tools from a VPS feat. Arthur Aires #bugbounty #bugbountytips #bugbountyhunter
June 14, 2025 at 11:02 AM
gregxsunday.bsky.social
Managing your blind XSS payloads feat. Arthur Aires #bugbounty #bugbountytips #bugbountyhunter
June 13, 2025 at 11:03 AM
gregxsunday.bsky.social
Generating target-specific wordlists feat. Arthur Aires #bugbounty #bugbountytips #bugbountyhunter
June 12, 2025 at 11:07 AM
gregxsunday.bsky.social
Generating target-specific wordlists feat. Arthur Aires #bugbounty #bugbountytips #bugbountyhunter
June 12, 2025 at 11:06 AM
gregxsunday.bsky.social
Automation to get Hackerone program updates feat. Arthur Aires #bugbounty #bugbountytips #bugbountyhunter
June 11, 2025 at 11:06 AM
gregxsunday.bsky.social
An ATO that doesn’t make sense feat. Jasmin “JR0ch17” Landry #bugbounty #bugbountytips #bugbountyhunter
May 21, 2025 at 9:14 AM
gregxsunday.bsky.social
Manipulating referer policy when DOM Purify is used feat. Jasmin “JR0ch17” Landry #bugbounty #bugbountytips #bugbountyhunter
May 20, 2025 at 9:13 AM
gregxsunday.bsky.social
SQLi still exists in 2025 feat. Jasmin “JR0ch17” Landry #bugbounty #bugbountytips #bugbountyhunter
May 19, 2025 at 9:11 AM
gregxsunday.bsky.social
Using match and replace rules for quickly applying polyglot payloads feat. Jasmin “JR0ch17” Landry #bugbounty #bugbountytips #bugbountyhunter
May 17, 2025 at 9:11 AM
gregxsunday.bsky.social
Second order injections feat. Jasmin “JR0ch17” Landry #bugbounty #bugbountytips #bugbountyhunter
May 16, 2025 at 9:19 AM
gregxsunday.bsky.social
Hunting for privilege escalations by modifying the JS feat. @renniepak.nl #bugbounty #bugbountytips #bugbountyhunter
March 19, 2025 at 11:57 AM