--- title: "#bountytipsbrowser articles | Hashnode" description: "Explore 12 articles tagged #bountytipsbrowser on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/bountytipsbrowser" --- Tag # #bountytipsbrowser 12 posts · 0 followers [zeeagil](https://hashnode.com/@zeeagil) · [Dec 19, 2025](https://hashnode.com/posts/1000-hidden-browser-permission-execution-via-picture-in-picture-overlay/6945660038e199c57d2a66cc) ### [$1000 Hidden Browser Permission Execution via Picture-in-Picture Overlay](https://bountyproofs.com/1000-hidden-browser-permission-execution-via-picture-in-picture-overlay?utm_source=hashnode&utm_medium=feed) Saya menemukan bug pada browser di mana fitur Picture-in-Picture (PiP) dapat menutupi dialog permission, seperti permission akses kamera dan permission sens 1 min read · [bountyproofs.com](https://bountyproofs.com/1000-hidden-browser-permission-execution-via-picture-in-picture-overlay?utm_source=hashnode&utm_medium=feed) [Frozzipies](https://hashnode.com/@frozzipies) · [Nov 9, 2025](https://hashnode.com/posts/1000-from-chrome-vrp-for-a-simple-file-download-dialog-handling-bug-on-android/69102d1246207bf4e53356d5) ### [$1000 from Chrome VRP for a Simple File Download Dialog Handling Bug on Android](https://bountyproofs.com/1000-from-chrome-vrp-for-a-simple-file-download-dialog-handling-bug-on-android?utm_source=hashnode&utm_medium=feed) Alhamdulillah, beberapa bulan lalu saya berhasil mendapatkan bounty $1000 dari Chrome VRP melalui bug insecure download handling yang saya temukan pada Chro 3 min read · [bountyproofs.com](https://bountyproofs.com/1000-from-chrome-vrp-for-a-simple-file-download-dialog-handling-bug-on-android?utm_source=hashnode&utm_medium=feed) [zeeagil](https://hashnode.com/@zeeagil) · [Oct 1, 2025](https://hashnode.com/posts/misplaced-file-picker-dialog-across-tabs-in-browser/68dd5fa3f1bd8d2de9309d48) ### [Misplaced File Picker Dialog Across Tabs in Browser](https://bountyproofs.com/misplaced-file-picker-dialog-across-tabs-in-browser?utm_source=hashnode&utm_medium=feed) Misplaced File Picker Dialog Across Tabs in Browser 1 min read · [bountyproofs.com](https://bountyproofs.com/misplaced-file-picker-dialog-across-tabs-in-browser?utm_source=hashnode&utm_medium=feed) [Frozzipies](https://hashnode.com/@frozzipies) · [Jun 1, 2025](https://hashnode.com/posts/chromium-vrp-bypass-characters-on-filename-lead-to-file-origin-spoofing/683c28e3cde7a310bd8edac4) ### [\[Chromium VRP\] Bypass :// Characters on Filename lead to File Origin Spoofing](https://bountyproofs.com/chromium-vrp-bypass-characters-on-filename-lead-to-file-origin-spoofing?utm_source=hashnode&utm_medium=feed) Pada kesempatan kali ini saya akan membahas kerentanan yang agak berbeda, yaitu kerentanan browser spoofing. Kerentanan yang saya temukan ini terjadi ketika seorang attacker bisa memanipulasi origin atau source dari suatu file ketika di download. Con... 3 min read · [bountyproofs.com](https://bountyproofs.com/chromium-vrp-bypass-characters-on-filename-lead-to-file-origin-spoofing?utm_source=hashnode&utm_medium=feed) [zeeagil](https://hashnode.com/@zeeagil) · [May 13, 2025](https://hashnode.com/posts/spoofing-file-download-origin-using-long-subdomain/68229918a7f957787cfd6d09) ### [Spoofing File Download Origin Using Long Subdomain](https://bountyproofs.com/spoofing-file-download-origin-using-long-subdomain?utm_source=hashnode&utm_medium=feed) Spoofing File Download Origin Using Long Subdomain 1 min read · [bountyproofs.com](https://bountyproofs.com/spoofing-file-download-origin-using-long-subdomain?utm_source=hashnode&utm_medium=feed) [zeeagil](https://hashnode.com/@zeeagil) · [May 13, 2025](https://hashnode.com/posts/4-platform-hosting-gratis-untuk-uji-kerentanan-browser/68229deb4cbb3e79d6693886) ### [4 Platform Hosting Gratis untuk Uji Kerentanan Browser](https://bountyproofs.com/4-platform-hosting-gratis-untuk-uji-kerentanan-browser?utm_source=hashnode&utm_medium=feed) 4 Platform Hosting Gratis untuk Uji Kerentanan Browser 1 min read · [bountyproofs.com](https://bountyproofs.com/4-platform-hosting-gratis-untuk-uji-kerentanan-browser?utm_source=hashnode&utm_medium=feed) [zeeagil](https://hashnode.com/@zeeagil) · [May 13, 2025](https://hashnode.com/posts/gunakan-scrcpy-v32-untuk-mirror-android-cara-efektif-menguji-kerentanan-browser-di-android/6822a58b8c9655e10fb4ff3c) ### [🧪 Gunakan scrcpy v3.2 untuk Mirror Android: Cara Efektif Menguji Kerentanan Browser di android](https://bountyproofs.com/gunakan-scrcpy-v32-untuk-mirror-android-cara-efektif-menguji-kerentanan-browser-di-android?utm_source=hashnode&utm_medium=feed) Gunakan scrcpy v3.2 untuk Mirror Android: Cara Efektif Menguji Kerentanan Browser di android 1 min read · [bountyproofs.com](https://bountyproofs.com/gunakan-scrcpy-v32-untuk-mirror-android-cara-efektif-menguji-kerentanan-browser-di-android?utm_source=hashnode&utm_medium=feed) [zeeagil](https://hashnode.com/@zeeagil) · [May 10, 2025](https://hashnode.com/posts/simple-url-spoof-in-address-bar/681f8ea52fa760b5e239b6cb) ### [Simple URL spoof in address bar](https://bountyproofs.com/simple-url-spoof-in-address-bar?utm_source=hashnode&utm_medium=feed) Simple URL spoof in address bar 1 min read · [bountyproofs.com](https://bountyproofs.com/simple-url-spoof-in-address-bar?utm_source=hashnode&utm_medium=feed) [zeeagil](https://hashnode.com/@zeeagil) · [May 10, 2025](https://hashnode.com/posts/timing-based-tel-protocol-spoofing-via-chained-navigation/681f8cfd2fa760b5e239b6ab) ### [Timing-Based tel: Protocol Spoofing via Chained Navigation](https://bountyproofs.com/timing-based-tel-protocol-spoofing-via-chained-navigation?utm_source=hashnode&utm_medium=feed) Bountytips : Timing-Based tel: Protocol Spoofing via Chained Navigation 1 min read · [bountyproofs.com](https://bountyproofs.com/timing-based-tel-protocol-spoofing-via-chained-navigation?utm_source=hashnode&utm_medium=feed) [zeeagil](https://hashnode.com/@zeeagil) · [May 10, 2025](https://hashnode.com/posts/url-spoofing-via-historyreplacestate/681f109f00d849fd40d21c33) ### [URL Spoofing via history.replaceState()](https://bountyproofs.com/url-spoofing-via-historyreplacestate?utm_source=hashnode&utm_medium=feed) Bug Bounty Tips : URL Spoofing via history.replaceState() 1 min read · [bountyproofs.com](https://bountyproofs.com/url-spoofing-via-historyreplacestate?utm_source=hashnode&utm_medium=feed)