pentesting

6 posts tagged with pentesting.

2026-08-21reconbug bountypentesting6 min read

Nobody opens the documents

Everybody reads the JavaScript now. Almost nobody opens the PDFs, the spreadsheets and the decks a target publishes on purpose, and those carry staff names, internal paths, printer queues and database connection strings.

2026-07-23bug bountypentestingweb security4 min read

Why I ask for two accounts per role

Finding an IDOR with one account is the easy half. Confirming it is where one account falls apart. Two accounts at the same level turn an identifier you cannot explain into user A retrieved user B's invoice.

2026-03-08bug bountypentestingmindset4 min read

Your scope protects from findings, not from attackers

Attackers don't follow your scope. Limited bug bounty programs protect you from findings while leaving your real attack surface wide open. Here's why wide scopes and recon matter.

2026-02-27bug bountypentestingrecon4 min read

Go wide before you go deep

The best vulnerabilities aren't on the main domain. Here's why wildcard scopes beat limited ones and how going wide leads to the findings that actually matter.

2026-02-13pentestingbug bountymindset3 min read

Know your audience: translating technical findings into business impact

Technical expertise matters, but if you want your findings fixed, you need to speak your audience's language. Here's how to translate security issues into business decisions.

2025-11-26bug bountypentestingweb security2 min read

The uppercase letter that bypassed authorization

Sometimes a single case change in a URL path is enough to bypass 401/403 errors. Here's why this edge case works and when to test for it.