bugcrowd@BugcrowdAug 13Testing IDOR is not just swapping IDs in the URL. If the obvious ?user_id=123 to 124 does not work, explore IDOR in: 🧵👇33126417K
bugcrowd@BugcrowdAug 13You have 10 seconds to review this. ⏱️ 10… 9… 8… 7… 6… 5… 4… 3… 2… 1… Did you spot the bug? Share your payloads! 👇16813015K
bugcrowd@BugcrowdAug 11This hacking secret may lead to your first P1. 😏 Spoiler: This may also lead to your first RCE. Here's a quick watch: 👇00:0023327314K
bugcrowd@BugcrowdAug 11How to filter out 10,000+ subdomains. 🌐 Spoiler: they used httpx. Here's a short explainer: 👇00:006767.9K