https://hunter-archive.vercel.app Searchable security research archive aggregating bug bounty writeups and CTF walkthroughs. Developed by JOJIN JOHN. en-us Thu, 29 Oct 2026 09:54:52 GMT https://infosecwriteups.com/my-ejptv2-journey-82-a135093b247d?source=rss----7b722bfd1b8d---4 d6a60b05-2600-4ace-90cd-cd04b721747a Mon, 27 Jul 2026 09:39:44 GMT https://infosecwriteups.com/unauthenticated-disclosure-of-a-b-test-data-in-convert-pro-how-two-forgotten-ajax-endpoints-dbefc9c3e440?source=rss----7b722bfd1b8d---4 3d0b9191-2448-40bf-abe8-d01c322e4382 Mon, 27 Jul 2026 09:38:59 GMT https://infosecwriteups.com/one-header-away-from-10-gb-of-customer-documents-pii-6k-bounty-0c0ac8c335f2?source=rss----7b722bfd1b8d---4 5ff311dc-07d2-46c7-83e6-5613e3a72c46 Mon, 27 Jul 2026 09:38:35 GMT https://infosecwriteups.com/how-i-found-a-bug-worth-3-500-in-a-feature-nobody-was-watching-6773df9fce72?source=rss----7b722bfd1b8d---4 8977dd85-6338-4686-a697-793fd4d07cbe Mon, 27 Jul 2026 09:37:44 GMT https://infosecwriteups.com/unprotected-admin-functionality-with-unpredictable-url-portswigger-access-control-lab-2-63dd82874875?source=rss----7b722bfd1b8d---4 c597f551-968d-4704-8f57-8fa5396b0866 Mon, 27 Jul 2026 09:36:25 GMT https://infosecwriteups.com/soc169-possible-idor-attack-detected-walkthrough-letsdefend-19c048fea9b1?source=rss----7b722bfd1b8d---4 16c668bb-b133-4c70-b712-0f8eb404dbef Mon, 27 Jul 2026 09:36:11 GMT https://infosecwriteups.com/letsdefend-challenge-memory-analysis-walkthrough-24b15eee4deb?source=rss----7b722bfd1b8d---4 bb35363b-27b3-40ed-bf78-e6f6d52a162c Mon, 27 Jul 2026 09:36:05 GMT https://infosecwriteups.com/vulnnet-roasted-tryhackme-ctf-walkthrough-0f30563c58f7?source=rss----7b722bfd1b8d---4 58d7ca41-523a-41db-9e03-666d55da3aeb Mon, 27 Jul 2026 09:31:45 GMT https://infosecwriteups.com/pickle-rick-tryhackme-ctf-a10360eba93f?source=rss----7b722bfd1b8d---4 3f484967-8f5e-4466-b308-461b74994033 Mon, 27 Jul 2026 09:31:38 GMT https://infosecwriteups.com/tryhackme-new-room-flip-2e2894c52148?source=rss----7b722bfd1b8d---4 097fb443-b8ec-477c-b0ae-90be9720765c Mon, 27 Jul 2026 09:30:14 GMT https://medium.com/@0x0sadat/how-a-hidden-graphql-endpoint-led-me-to-a-critical-sql-injection-worth-2-500-a2e39521944b?source=rss------bug_bounty-5 c5b4b008-5ec1-4e55-8672-43d92cd1dacc Mon, 27 Jul 2026 14:58:18 GMT https://osintteam.blog/python-web-penetration-testing-day-6-detecting-and-exploiting-sql-injection-vulnerabilities-490bf8527686?source=rss------bug_bounty-5 316f0afa-905f-47fc-9868-9eacae6352c5 Mon, 27 Jul 2026 13:14:49 GMT https://medium.com/@nitishmukhiya/subdomain-enumeration-mastery-subdomain-enumeration-like-pro-5ab2c934c880?source=rss------bug_bounty-5 f75a7d4a-4bb3-4d0a-9c8f-5119d441dba8 Mon, 27 Jul 2026 13:11:52 GMT https://medium.com/@xpert4cyber/pentesterflow-how-ai-is-changing-penetration-testing-bdacfbfa533f?source=rss------bug_bounty-5 54d2342f-7727-4012-9961-6999aa114326 Mon, 27 Jul 2026 12:58:07 GMT https://medium.com/@N0aziXss/open-redirect-bypass-techniques-a-practical-methodology-for-security-testing-8cea7631b91b?source=rss------bug_bounty-5 354cf7cd-0f3e-4fa7-b216-01f9f2aec252 Mon, 27 Jul 2026 11:54:35 GMT https://medium.com/@dharrunkrish03/owasp-top-10-isnt-enough-security-tests-every-pentester-should-perform-71bbd19cb1d9?source=rss------bug_bounty-5 8bbbcffe-28a1-416d-a145-676165a84a47 Mon, 27 Jul 2026 11:40:20 GMT https://kd-200.medium.com/certificate-transparency-the-recon-superpower-3dea8f58a5a0?source=rss------bug_bounty-5 d08ca22d-db08-49d9-ad44-d6d8c5db1867 Mon, 27 Jul 2026 11:31:01 GMT https://medium.com/bug-bounty-hunting-a-comprehensive-guide-in/hashcat-blackbelt-cracking-wpa2-wifi-like-a-pro-part-3-bef1118e3258?source=rss------bug_bounty-5 f3b7cf99-e497-4562-bc36-d46312b20b0b Mon, 27 Jul 2026 10:35:34 GMT https://medium.com/@commanak46/a-new-beginning-starting-fresh-on-medium-ad0660659046?source=rss------bug_bounty-5 bb957ccd-8830-49d3-a8d7-f056559d5644 Mon, 27 Jul 2026 07:53:34 GMT https://medium.com/@badekanrohan/turning-disclosed-bug-bounty-reports-into-a-skill-claude-can-execute-6e802ba004c6?source=rss------bug_bounty-5 d6e8ecf1-b778-4d02-b63c-26c7fbcb67d9 Mon, 27 Jul 2026 06:08:47 GMT https://medium.com/@bithowl/smali-by-bithowl-chapter-3-android-bytecode-fundamentals-8b2ea2403f46?source=rss------bugbounty_writeup-5 d49b3090-2383-46d6-8b35-461085559188 Sat, 25 Jul 2026 13:04:01 GMT https://medium.com/@itss4leh/how-a-simple-google-dork-led-me-to-find-reflected-xss-html-injection-on-nasa-and-earn-a-letter-of-83075852de42?source=rss------bugbounty_writeup-5 bfb406fb-2e6f-4295-9a13-76630d9788b1 Thu, 23 Jul 2026 15:07:34 GMT https://mazenrady.medium.com/how-a-simple-profile-setting-revealed-sensitive-credentials-in-a-bug-bounty-program-7809a8bdd827?source=rss------bugbounty_writeup-5 f47c28a1-0f7f-4d20-b1a8-181037a70072 Sun, 19 Jul 2026 08:09:01 GMT https://ameensec.medium.com/how-i-earned-a-300-bug-bounty-by-finding-an-authorization-bypass-in-a-private-program-cb9b560d1924?source=rss------bugbounty_writeup-5 f49f63cd-eb08-4518-8527-f50689e56be0 Sun, 19 Jul 2026 06:19:51 GMT https://medium.com/@hacdoc/wp2shell-breaking-down-the-critical-wordpress-rce-cve-2026-60137-cve-2026-63030-6dbc48105d7f?source=rss------bugbounty_writeup-5 49fce9e6-1dcd-484e-8066-a3da4c4c856e Sat, 18 Jul 2026 16:50:21 GMT https://medium.com/@bithowl/smali-by-bithowl-chapter-2-why-every-android-hacker-needs-smali-1d89d42f1b7c?source=rss------bugbounty_writeup-5 a0e7f5de-3a3d-40b3-80f2-b470f68d3da7 Thu, 16 Jul 2026 12:20:24 GMT https://root-vaibhav.medium.com/i-spent-5-days-looking-for-a-bug-that-didnt-exist-nasa-91f1ab879d45?source=rss------bugbounty_writeup-5 1129510c-0437-4a8c-a0bb-a0ffbf008206 Mon, 13 Jul 2026 08:03:56 GMT https://medium.com/@sumitshahorg/hacking-the-hackers-assistant-how-i-found-a-critical-stored-xss-in-deepseek-s-code-sandbox-0e31edc90e70?source=rss------bugbounty_writeup-5 709cacfd-25f4-46b6-ae07-9ac5df41dc57 Sun, 12 Jul 2026 14:23:31 GMT https://medium.com/@northsidehacker/how-i-bypassed-a-mandatory-2fa-enforcement-just-by-dropping-one-request-863b79f88771?source=rss------bugbounty_writeup-5 74243442-2097-4e74-9ba6-a63c54a7d10e Fri, 10 Jul 2026 09:19:11 GMT https://medium.com/@eze_tg/tryhackme-passive-reconnaissance-a1dea31a0921?source=rss------penetration_testing-5 97157aff-4b39-47ef-b129-66a2b5da8f2b Mon, 27 Jul 2026 14:27:57 GMT https://medium.com/@huzaifa_X_malik/publisher-tryhackme-ctf-walkthrough-cc97c9506153?source=rss------penetration_testing-5 cc4b2d95-4d12-43d5-99c9-48df0e508e0d Mon, 27 Jul 2026 13:46:02 GMT https://osintteam.blog/python-web-penetration-testing-day-6-detecting-and-exploiting-sql-injection-vulnerabilities-490bf8527686?source=rss------penetration_testing-5 3ccf2329-b214-4c6b-a86f-cd6d06706f5d Mon, 27 Jul 2026 13:14:49 GMT https://medium.com/@xpert4cyber/pentesterflow-how-ai-is-changing-penetration-testing-bdacfbfa533f?source=rss------penetration_testing-5 ec4980cb-bff4-42b8-8755-d5685c8ec182 Mon, 27 Jul 2026 12:58:07 GMT https://medium.com/@akcerman21/setup-oracle-virtualbox-dan-instalasi-kali-linux-sebagai-environment-network-penetration-testing-8546767f8c98?source=rss------penetration_testing-5 cf950719-073d-4d9c-b2f3-0498f9facc43 Mon, 27 Jul 2026 12:15:09 GMT https://medium.com/@sithumsryt/rooting-dc-7-osint-a-leaky-github-repo-and-a-cron-job-waiting-to-be-abused-3d63e0b90875?source=rss------penetration_testing-5 a3bda73b-7805-4699-acc6-572d02b0bbc1 Mon, 27 Jul 2026 11:26:47 GMT https://medium.com/@techlatest.net/gemini-3-5-flash-cyber-explained-googles-ai-powered-code-security-model-e8a5858538fc?source=rss------penetration_testing-5 b87cf8ee-48f4-4ac2-a7f3-916202ce8dbf Mon, 27 Jul 2026 11:24:35 GMT https://medium.com/@nabishajaved/5-affordable-penetration-testing-companies-i-actually-outsourced-to-as-a-startup-bc3ad399ecd5?source=rss------penetration_testing-5 b213bd78-6cea-49cd-9b4c-1b7fc5a2ce9d Mon, 27 Jul 2026 10:55:39 GMT https://medium.com/@manikandank9840/i-built-my-own-local-ai-tool-for-penetration-testing-ff406dff4205?source=rss------penetration_testing-5 937688a3-3f8f-4197-9616-674c0935fdf0 Mon, 27 Jul 2026 09:17:20 GMT https://medium.com/@commanak46/a-new-beginning-starting-fresh-on-medium-ad0660659046?source=rss------penetration_testing-5 02e6ff4f-016a-4be9-980d-8f845c0236d6 Mon, 27 Jul 2026 07:53:34 GMT https://medium.com/@huzaifa_X_malik/publisher-tryhackme-ctf-walkthrough-cc97c9506153?source=rss------ctf_writeup-5 b532bb88-af7e-4a1e-b19d-c2e59cac05e0 Mon, 27 Jul 2026 13:46:02 GMT https://medium.com/@lumenyx/capture-the-flag-with-powershell-underthewire-century-ff61d04fee92?source=rss------ctf_writeup-5 951088ef-ed2a-4c62-98d3-810fc86be18e Mon, 27 Jul 2026 12:29:08 GMT https://ashish-vikramaditya.medium.com/the-beginners-guide-to-the-challenge-library-section-1-5ce0cdfbeaee?source=rss------ctf_writeup-5 11806a80-7a17-4eb5-820f-6310047ddf62 Mon, 27 Jul 2026 12:18:39 GMT https://medium.com/@waltermoar/writeup-for-cylab-picoctf-challenge-repetitions-27d5245bc471?source=rss------ctf_writeup-5 9ac85939-69a8-485b-ae3f-e49eee616a53 Mon, 27 Jul 2026 11:01:01 GMT https://medium.com/@bhatsupshubham/six-locks-one-question-my-fampay-ctf-2026-writeup-2cbf56d16e0b?source=rss------ctf_writeup-5 7d55323f-377b-4089-a52d-1562fb4f01cf Mon, 27 Jul 2026 07:26:03 GMT https://medium.com/@cristopher.gilbert27/conti-tryhackme-writeup-526ff55a778a?source=rss------ctf_writeup-5 25b1431c-fa3b-483b-9652-8685a0def8ef Mon, 27 Jul 2026 07:00:36 GMT https://medium.com/@jyothishbalachandran/tryhackme-simple-ctf-walkthrough-ec4e8da37738?source=rss------ctf_writeup-5 761d65db-4d72-4952-810a-c4f1b4a5b37f Mon, 27 Jul 2026 05:53:33 GMT https://ashish-vikramaditya.medium.com/starting-my-ctf-journey-36c5d7fba14d?source=rss------ctf_writeup-5 0511def6-85f8-4ee3-b3c6-eee0bcacae7c Mon, 27 Jul 2026 02:21:54 GMT https://medium.com/@hassanbounty30/attack-graphql-skills-assessment-writeup-8708f970b577?source=rss------ctf_writeup-5 f8e1f5c7-98fe-4bf6-826f-eda88499cc8f Mon, 27 Jul 2026 02:20:40 GMT https://medium.com/@hassanbounty30/htb-web-attacks-skills-assessment-writeup-3af460a2cab7?source=rss------ctf_writeup-5 843bad9a-b143-48eb-8fbb-e077479ffce0 Mon, 27 Jul 2026 01:56:26 GMT https://medium.com/@0x0sadat/how-a-hidden-graphql-endpoint-led-me-to-a-critical-sql-injection-worth-2-500-a2e39521944b?source=rss------infosec-5 682d162b-7205-48d5-8484-d8783bcce453 Mon, 27 Jul 2026 14:58:18 GMT