--- title: "#bug-bounty-hunter articles | Hashnode" description: "Explore 20 articles tagged #bug-bounty-hunter on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/bug-bounty-hunter" --- Tag # #bug-bounty-hunter 20 posts · 71 followers [shemkar](https://hashnode.com/@shemkar) · [Apr 26](https://hashnode.com/posts/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate/69ee7c173d6a492cdd4ecfcd) ### [One Extra JSON Key: How a Harmless Profile Endpoint Became an ATO Candidate](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed) A real bug bounty lesson about mass assignment, impact proof, and learning from weak reports. 6 min read · [shemkar.hashnode.dev](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed) [MaMad4Ever](https://hashnode.com/@MaMad4Ever) · [Feb 15](https://hashnode.com/posts/boost-your-burp-suite-configuration-extensions/69919d7583bab70f1eb20280) ### [Boost Your Burp Suite: Configuration $ Extensions](https://mikagelabs.hashnode.dev/boost-your-burp-suite-configuration-extensions?utm_source=hashnode&utm_medium=feed) Take your bug bounty workflow to the next level with burp 6 min read · [mikagelabs.hashnode.dev](https://mikagelabs.hashnode.dev/boost-your-burp-suite-configuration-extensions?utm_source=hashnode&utm_medium=feed) [MaMad4Ever](https://hashnode.com/@MaMad4Ever) · [Dec 8, 2025](https://hashnode.com/posts/http-cookies/6936bceacda32cbc3e689e23) ### [🍪 HTTP Cookies](https://mikagelabs.hashnode.dev/http-cookies?utm_source=hashnode&utm_medium=feed) Learn about HTTP cookies, their attributes, usage, and how cookie settings impact web security and cross-site requests 2 min read · [mikagelabs.hashnode.dev](https://mikagelabs.hashnode.dev/http-cookies?utm_source=hashnode&utm_medium=feed) [ToxSec](https://hashnode.com/@ToxSec) · [Nov 16, 2025](https://hashnode.com/posts/oscp-proving-grounds-levram-walkthrough/6919693efcd5613de29ac564) ### [OSCP Proving Grounds – Levram Walkthrough](https://toxsec.hashnode.dev/oscp-proving-grounds-levram-walkthrough?utm_source=hashnode&utm_medium=feed) ToxSec | Web Exploitation & Linux Privilege Escalation Practice 0x00 OSCP Proving Grounds - Levram Levram is lean and surgical. No filler, no rabbit holes. You go from lazy creds on a forgotten web panel, to an authenticated RCE, and finish with a s... 5 min read · [toxsec.hashnode.dev](https://toxsec.hashnode.dev/oscp-proving-grounds-levram-walkthrough?utm_source=hashnode&utm_medium=feed) [ToxSec](https://hashnode.com/@ToxSec) · [Nov 6, 2025](https://hashnode.com/posts/privacy-as-a-bounty-vector-gdpr-for-higher-severity-reports/690d26c1cb47e7f45b388d69) ### [Privacy as a Bounty Vector: GDPR for Higher-Severity Reports](https://toxsec.hashnode.dev/privacy-as-a-bounty-vector-gdpr-for-higher-severity-reports?utm_source=hashnode&utm_medium=feed) TL;DR: The bug bounty game is expanding. Massive payouts are now coming from privacy flaws due to huge GDPR/CCPA fines. This guide shows you how to find common data exposure bugs, report them based on legal and business risk, and cash in on the new f... 7 min read · [toxsec.hashnode.dev](https://toxsec.hashnode.dev/privacy-as-a-bounty-vector-gdpr-for-higher-severity-reports?utm_source=hashnode&utm_medium=feed) [ToxSec](https://hashnode.com/@ToxSec) · [Nov 6, 2025](https://hashnode.com/posts/a-bug-hunters-guide-to-cloud-misconfigurations/690d24495ce761270e77b63d) ### [A Bug Hunter's Guide to Cloud Misconfigurations](https://toxsec.hashnode.dev/a-bug-hunters-guide-to-cloud-misconfigurations?utm_source=hashnode&utm_medium=feed) ToxSec | A guide for bug bounty hunters on cloud misconfigurations. 7 min read · [toxsec.hashnode.dev](https://toxsec.hashnode.dev/a-bug-hunters-guide-to-cloud-misconfigurations?utm_source=hashnode&utm_medium=feed) [MaMad4Ever](https://hashnode.com/@MaMad4Ever) · [Oct 28, 2025](https://hashnode.com/posts/mastering-google-dork/6900ab5f85728ca4ef3173db) ### [Mastering Google Dork](https://mikagelabs.hashnode.dev/mastering-google-dork?utm_source=hashnode&utm_medium=feed) Think like a real hunter — stop using pre-made dorks. 3 min read · [mikagelabs.hashnode.dev](https://mikagelabs.hashnode.dev/mastering-google-dork?utm_source=hashnode&utm_medium=feed) [MaMad4Ever](https://hashnode.com/@MaMad4Ever) · [Oct 20, 2025](https://hashnode.com/posts/critical-really-is-critical/68f583ee1b0bd229bffc7513) ### ["Critical" Really Is Critical – But Not Always Complicated](https://mikagelabs.hashnode.dev/critical-really-is-critical?utm_source=hashnode&utm_medium=feed) Critical Means Impactful — Not Just Technically Impressive 2 min read · [mikagelabs.hashnode.dev](https://mikagelabs.hashnode.dev/critical-really-is-critical?utm_source=hashnode&utm_medium=feed) [ToxSec](https://hashnode.com/@ToxSec) · [Oct 6, 2025](https://hashnode.com/posts/bug-bounty-hunting-for-genai/68e3ceb32715ea012e3e60d0) ### [Bug Bounty Hunting for GenAI](https://toxsec.hashnode.dev/bug-bounty-hunting-for-genai?utm_source=hashnode&utm_medium=feed) ToxSec | How to deal with GenAI in bug bounty programs. 9 min read · [toxsec.hashnode.dev](https://toxsec.hashnode.dev/bug-bounty-hunting-for-genai?utm_source=hashnode&utm_medium=feed) [amin Ouji](https://hashnode.com/@amin182) · [Sep 14, 2025](https://hashnode.com/posts/how-i-found-a-race-condition-vulnerability-on-a-major-social-media-platform/68c71ade04e2aac75de477b5) ### [How I Found a Race Condition Vulnerability on a Major Social Media Platform](https://hunteramine.hashnode.dev/how-i-found-a-race-condition-vulnerability-on-a-major-social-media-platform?utm_source=hashnode&utm_medium=feed) Introduction Hey everyone! In this blog post, I’ll walk you through a recent security vulnerability I discovered during my bug bounty journey. I found a race condition in the unfollow mechanism of a major social media platform (let’s call it “example... 3 min read · [hunteramine.hashnode.dev](https://hunteramine.hashnode.dev/how-i-found-a-race-condition-vulnerability-on-a-major-social-media-platform?utm_source=hashnode&utm_medium=feed)