Bug bounty Tips
الذهاب إلى القناة على Telegram
🛡️ Cybersecurity enthusiast | 💻 Helping secure the digital world | 🌐 Web App Tester | 🕵️♂️ OSINT Specialist Admin: @laazy_hack3r
إظهار المزيد7 582
المشتركون
+924 ساعات
+567 أيام
+29230 أيام
أرشيف المشاركات
7 582
Browser games. No install. Full list below.
Zombies
BO1 Zombies: vel.gg/bo1z
Moon: moon-zombies.pages.dev
Kino der Toten: kino-der-toten.pages.dev
BO3 Cheese Cube: cheese-cube.pages.dev
Shooters
Black Ops 2: vibeslops.luckeysystems.com
Modern Warfare 2: ovz-game-production.up.railway.app
Halo CE: mitchellhynes.com/halo
Halo CE mobile: hcemobile.com
Quake 1: q1.pieter.com
Quake 2: q2.pieter.com
Quake 3: q3.pieter.com
Return to Castle Wolfenstein: rtcw.pieter.com
Unreal Tournament: ut.pieter.com
Half-Life: pixelsuft.github.io/hl/
Half-Life / CS 1.6: x8bitrain.github.io/webXash/
CS Surf: surfd.net
Diablo: johnimril.github.io/diablo_web/
Open world / other
GTA 5: web.archive.org/web/2026100605…
GTA Vice City: joncodeofficial.github.io/gta-vice-city-…
The Simpsons: Hit & Run: shar-wasm.cjoseph.workers.dev/?skipmovie
Skate 3: skate.aaddpp.lol
Skate Rust: global-terror.net
PES 6: pes6.optijuegos.net
Hedgewars: webwars.link
More GTA / Minecraft: wasmarcade.com
7 582
7 582
#MLSecOps
"Jailbreaking Open-Weight LLMs via Random Embedding Perturbations", Oct. 2026.
]-> https://github.com/AbhinavDubey30/Perturbed-Embedding-Vectors
// Perturbed Embedding Vector (PEV) attack - simple and fast "jailbreaking" technique that is cheaper than prior approaches, which typically require gradient computations, per-prompt optimizations, or altering internal weights of the models. PEV just adds independent Gaussian noise in the embedding vector representations of the prompt, with no need for further manipulations...
7 582
#SCADA_Security
"Bridge:Break: Vulnerabilities Thrive in Serial-to-Ethernet Converters", 2026.
See also:
]-> Fooling the Master: Pepperl+Fuchs IO-Link Under Attack
]-> Chilling Discoveries: Unpacking Vulnerabilities in Copeland XWEB Pro Controllers
7 582
#NetSec
#MLSecOps
"Cooldown Landmines: Cross-Tenant Interference Attacks on LLM Gateways", Oct 2026.
]-> This repo contains the paper draft, experiments, and data for a cross-tenant vulnerability class in multi-tenant LLM gateways (LiteLLM, Portkey, Kong AI Gateway)
7 582
#RAG_Security
"Hop-Decayed Influence: New Vulnerabilities of Structural Auxiliary Indexing in GraphRAG Pipelines with LLM", Oct. 2026.
]-> https://github.com/Jisung-Pacific/HDI-GraphRAG-Attack
// GraphRAG pipelines construct auxiliary structures during offline indexing - semantic summaries, hierarchical edges, and pre-computed scores - that determine how retrieval is prioritized at query time. Prior attacks target only instance-level components (nodes, edges, triples), overlooking these schema-level structures. This work formalizes the Auxiliary Schema-Level Entity as a novel attack surface and proposes the 3S Framework (Semantics, Structure, Scoring) for its systematic exploitation. Its Hop-Decayed Influence attack identifies high-impact targets through query-aware influence propagation and corrupts their auxiliary structures post-indexing
7 582
#Tech_book
#Offensive_security
#Red_Team_Tactics
"Red Team Engineering: The Art of Building Offensive Tools and Infrastructure", (.pdf) 2026.
]-> Various course materials, scripts, and configurations
7 582
#Analytics
#Threat_Research
An analytical review of the main cybersecurity events (Sep 26 - Oct 03, 2026)
1⃣ Here We Go Again:
Citrix NetScaler DTLS Preauth Memory Overflow
// CVE-2026-88772
2⃣ A Realistic Code Execution Exploit Chain in OpenBao and Vault
3⃣ Attackers abuse ChatGPT to deliver RAT via ClickFix
4⃣ Poper Blocker: The Adblocker That Spies on You
5⃣ PoC for macOS CoreServices Priv. Escalation
// CVE-2026-43786
6⃣ PaperCut MF Zero-Day Intrusion: Java Loader, Web Shell, and AdaptixC2 via CVE-2026-82078 and CVE-2026-81578
7⃣ CVE-2026-86950: The Great Glyph Grift
// An in-the-wild iOS bug with a possible WhatsApp zero-click path
8⃣ Stopping a coordinated campaign to distill models
9⃣ nDPI TCP Fingerprint: A Stable, Patent-Free Way to Fingerprint TCP Stacks
7 582
#SCA
#compilers
#Kernel_Security
"Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries", Oct. 2026.
]-> Repo
]-> BTR end-to-end exploit on cBPF
// A new BTR (Branch Target Reuse) attack method has been developed, belonging to the Spectre-v2 class, allowing for the bypass of memory isolation mechanisms on systems with Intel, AMD, ARM processors. Memory leaks are initiated during speculative instruction execution during a BTR attack by manipulating JIT compilers. The feasibility of attacking through the cBPF JIT engines in the Linux kernel, Oracle GraalVM, and SpiderMonkey in Firefox has been analyzed
7 582
#AppSec
1⃣ Sender spoofing in Proton Mail via display-name homograph
https://alonsovidales.github.io/protonmail-sender-spoofing
2⃣ Acer System Monitor: from standard user to SYSTEM with CVE-2026-50610
https://www.intrinsec.com/cve-2026-50610-elevation-privileges-acer-nitrosense
3⃣ Spoofing Arbitrary Apple iCloud Identities
https://sec-consult.com/blog/detail/from-anyoneicloudcom-spoofing-arbitrary-apple-icloud-identities
4⃣ Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)
https://blog.quarkslab.com/cato-vpn-client-split-tunnel-and-privilege-escalation-cve-2026-10739.html
7 582
#MLSecOps
#Threat_Research
#Malware_analysis
"The Innocent Courier: Covert Exfiltration Through Legitimate LLM Web Fetching", Oct. 2026.
// In this paper, the authors demonstrate with LLMLeak a novel attack vector where malicious software that runs locally but cannot communicate directly with the internet abuses LLMs to establish a covert channel. While inputs that instruct the LLM to send data directly via generated code are easy to detect and network libraries are typically restricted, LLMLeak relies only on the LLM’s tool to fetch websites for further information
7 582
#MLSecOps
"CodeMimicry Exploiting Safety Generalization Lag in Large Language Models via Structured Code Completion", Sep 2026.
]-> https://github.com/lzzzr123/CodeMimicry
// In this work, it identifies a previously underexplored failure mode - safety generalization lag - where alignment trained predominantly on natural language fails to transfer to the code domain. The work shows that this lag induces a code-completion blind spot, allowing malicious intent embedded within syntactically valid code to evade safety mechanisms
7 582
#NetSec
#Offensive_security
I’ll hack you via a SYN packet, OFFZONE 2026.
// CVE-2026-10817 in the TCP stack of NetScaler ADC and Gateway. Yes, attackers can leak decrypted data via a truncated TCP timestamp
See also:
]-> NetScaler NSE script
]-> Various scripts to triage compromised systems (Linux, ESXi, FreeBSD/NetScaler)
7 582
🐛 Bug Bounty Writeup
Fixing Frida LIBUSB_TRANSFER_STALL by Switching from USB to Wi-Fi: https://osintteam.blog/fixing-frida-libusb-transfer-stall-by-switching-from-usb-to-wi-fi-627817b60f23
The Recon Habit That Separates Paid Hackers From Tool Users: https://osintteam.blog/the-recon-habit-that-separates-paid-hackers-from-tool-users-187a6245d545
How I Solved Intigriti’s September 2026 Challenge: https://medium.com/@ronaldo.shrestha713/how-i-solved-intigritis-september-2026-challenge-e29292a20662
Broken Access Control: Unauthenticated Read/Write Access to Every Conversation in an Tiktok AI…: https://medium.com/@ayedmostafa330/broken-access-control-unauthenticated-read-write-access-to-every-conversation-in-an-tiktok-ai-0a6eb481f5fd
Your AI Agent Just Leaked Your Email — And a Fake Restaurant Review Did It: https://infosecwriteups.com/your-ai-agent-just-leaked-your-email-and-a-fake-restaurant-review-did-it-6867b0daa9b9
How I Made a Fox Snitch on Its Own Database: https://medium.com/@sadhshitiz/how-i-made-a-fox-snitch-on-its-own-database-93920e37a12f
The Easy Bug Series | #04: https://medium.com/@huntersoham/the-easy-bug-series-04-529f49e9717f
How I Started Bug Bounty Hunting During My BCA Degree (With No Coding Background): https://sukhveersingh97997.medium.com/how-i-started-bug-bounty-hunting-during-my-bca-degree-with-no-coding-background-2e05b7d179f4
Why Beginners Fail at Pentesting (And How to Fix It): https://medium.com/@arfatkhan3708/why-beginners-fail-at-pentesting-and-how-to-fix-it-0fb5afd0c3bd
Bookmarklet — picoCTF Write-up | Understanding JavaScript Bookmarklets and Client-Side Decryption: https://medium.com/@affanhaxor/bookmarklet-picoctf-write-up-understanding-javascript-bookmarklets-and-client-side-decryption-304368b08bd4
7 582
🐛 Bug Bounty Writeup
How I Got Into Cybersecurity — My Roadmap: https://medium.com/@sairajthorat077/how-i-got-into-cybersecurity-my-roadmap-a1d516eaa5f2
The Forgotten Bucket: How a 404 Became a High-Severity Subdomain Takeover: https://0xkrishn.medium.com/the-forgotten-bucket-how-a-404-became-a-high-severity-subdomain-takeover-739a0c4e5cab
The Illusion of Instant Block: https://medium.com/@yosefmostef99/the-illusion-of-instant-block-4620220283f9
Telegram Desktop: From Proxy to RCE in 35 Seconds: https://medium.com/@expatch/telegram-desktop-from-proxy-to-rce-in-35-seconds-64de025fb0b4
Fake Ledger Update Email! DON’T Click This Button — Here’s How I Exposed It: https://medium.com/@pentesterclubpvtltd/fake-ledger-update-email-dont-click-this-button-here-s-how-i-exposed-it-536e43f1f749
Advanced Web Pentesting — Attack Techniques Cheat Sheet: https://mohamedalgabry.medium.com/advanced-web-pentesting-attack-techniques-cheat-sheet-cbf6dc365393
$17,000 for Walking a Class Hierarchy: Escaping a Template Sandbox to Full RCE: https://medium.com/@t4nv1/17-000-for-walking-a-class-hierarchy-escaping-a-template-sandbox-to-full-rce-2c8483e62935
From Leaked API Key to Full Account Takeover: Uncovering a Mass PII Vulnerability: https://medium.com/@Brian_Bange/from-leaked-api-key-to-full-account-takeover-uncovering-a-mass-pii-vulnerability-228a4a3d6bef
Six Auth Checks That Turn an MCP Server Into a Bug Report: https://meetcyber.net/six-auth-checks-that-turn-an-mcp-server-into-a-bug-report-8794240abb77
100 Days of Bug Bounty — Day 5: https://zubairahm3d.medium.com/100-days-of-bug-bounty-day-5-605f464ce771
7 582
#MLSecOps
"DeepSeek Elastic Compute (DSec):
A Sandbox Infrastructure for Effective Agentic Training at Scale", Sep 2026.
// This report presents DeepSeek Elastic Compute (DSec), a production sandbox platform that exposes FnCall, container, microVM, and full-VM sandbox backends through a unified SDK
7 582
#Cyber_Education
#Offensive_security
Agentic Deobfuscation: An Attacker's Playbook
https://github.com/mrphrazer/binary-cartography/tree/main/2026-09-agentic_deobfuscation
// Designed for technical security professionals, reverse engineers, and malware analysts working with binaries or low-level software, this webinar focuses on practical workflows for taking obfuscated code apart
7 582
#Tech_book
#Offensive_security
"The Ultimate Kali Linux Book, Third Edition:
Harness Nmap, Metasploit, Aircrack-ng, and Empire for cutting-edge pentesting", 2024.
]-> Repo
