--- title: "#bugbountytips articles | Hashnode" description: "Explore 85 articles tagged #bugbountytips on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/bugbountytips" --- Tag # #bugbountytips 85 posts · 205 followers [B0dj0x](https://hashnode.com/@b0dj0x) · [Jul 27](https://hashnode.com/posts/how-to-start-bug-bounty-hunting-in-2026-the-complete-beginner-s-guide/6a67bb3565ac78cdccf0ddc9) ### [How to Start Bug Bounty Hunting in 2026: The Complete Beginner's Guide](https://b0dj0x.hashnode.dev/how-to-start-bug-bounty-hunting-in-2026-the-complete-beginner-s-guide?utm_source=hashnode&utm_medium=feed) How to Start Bug Bounty Hunting in 2026: The Complete Beginner's Guide 6 min read · [b0dj0x.hashnode.dev](https://b0dj0x.hashnode.dev/how-to-start-bug-bounty-hunting-in-2026-the-complete-beginner-s-guide?utm_source=hashnode&utm_medium=feed) [shemkar](https://hashnode.com/@shemkar) · [Apr 26](https://hashnode.com/posts/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate/69ee7c173d6a492cdd4ecfcd) ### [One Extra JSON Key: How a Harmless Profile Endpoint Became an ATO Candidate](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed) A real bug bounty lesson about mass assignment, impact proof, and learning from weak reports. 6 min read · [shemkar.hashnode.dev](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed) [0xryz](https://hashnode.com/@0x0ryz) · [Feb 21](https://hashnode.com/posts/idor-fallout-leaking-2-million-sensitive-files-with-a-simple-trick/69999fbda20b74e093ef8698) ### [IDOR Fallout: Leaking 2 Million Sensitive Files with a Simple Trick](https://n1ghtm4r3.hashnode.dev/idor-fallout-leaking-2-million-sensitive-files-with-a-simple-trick?utm_source=hashnode&utm_medium=feed) When you see a public bug bounty program that has been running for over a decade, the assumption is usually that it's been picked completely clean. Every obvious endpoint has been hammered, and every 8 min read · [n1ghtm4r3.hashnode.dev](https://n1ghtm4r3.hashnode.dev/idor-fallout-leaking-2-million-sensitive-files-with-a-simple-trick?utm_source=hashnode&utm_medium=feed) [Mohammad Reza Mirzadzare](https://hashnode.com/@mirzadzare) · [Feb 20](https://hashnode.com/posts/ip-spoofing-to-account-takeover/699845e6014d86b82dde75d4) ### [IP Spoofing to Account Takeover: You Patched It? Really?](https://blog.mirzadzare.net/ip-spoofing-to-account-takeover?utm_source=hashnode&utm_medium=feed) Explains how an OAuth patch was bypassed using IP spoofing and chained bugs to achieve account takeover, revealing flaws in authentication defenses. 7 min read · [blog.mirzadzare.net](https://blog.mirzadzare.net/ip-spoofing-to-account-takeover?utm_source=hashnode&utm_medium=feed) [Eib](https://hashnode.com/@Eib) · [Feb 16](https://hashnode.com/posts/building-a-custom-js-monitoring-tool-with-no-coding-knowledge-using-ai/69933a857b9e8e48b47ecf47) ### [Building a custom JS monitoring tool with no coding knowledge using AI](https://eib.hashnode.dev/building-a-custom-js-monitoring-tool-with-no-coding-knowledge-using-ai?utm_source=hashnode&utm_medium=feed) Background I had a very interesting JavaScript-heavy target I was working on, which was built using a microservice architecture. The main domain contains a lot of sub-apps, so doing subdomain enumeration did not result in any significant success othe... 7 min read · [eib.hashnode.dev](https://eib.hashnode.dev/building-a-custom-js-monitoring-tool-with-no-coding-knowledge-using-ai?utm_source=hashnode&utm_medium=feed) [MaMad4Ever](https://hashnode.com/@MaMad4Ever) · [Feb 15](https://hashnode.com/posts/boost-your-burp-suite-configuration-extensions/69919d7583bab70f1eb20280) ### [Boost Your Burp Suite: Configuration $ Extensions](https://mikagelabs.hashnode.dev/boost-your-burp-suite-configuration-extensions?utm_source=hashnode&utm_medium=feed) Take your bug bounty workflow to the next level with burp 6 min read · [mikagelabs.hashnode.dev](https://mikagelabs.hashnode.dev/boost-your-burp-suite-configuration-extensions?utm_source=hashnode&utm_medium=feed) [Hacktus](https://hashnode.com/@Hacktus) · [Jan 23](https://hashnode.com/posts/what-can-you-do-with-a-leaked-cognito-identity-pool-id/69737d2933399ec8f3ff48fd) ### [What Can You Do With a Leaked Cognito Identity Pool ID?](https://hackt.us/what-can-you-do-with-a-leaked-cognito-identity-pool-id?utm_source=hashnode&utm_medium=feed) Discover risks of leaked AWS Cognito Identity Pool IDs and misconfigured IAM policies causing severe security vulnerabilities 3 min read · [hackt.us](https://hackt.us/what-can-you-do-with-a-leaked-cognito-identity-pool-id?utm_source=hashnode&utm_medium=feed) [Hacktus](https://hashnode.com/@Hacktus) · [Dec 21, 2025](https://hashnode.com/posts/can-you-compromise-a-multi-billion-dollar-company-via-health/6947e3c8505c0d43dc7b1ffd) ### [Can you compromise a multi-billion dollar company via /health?](https://hackt.us/can-you-compromise-a-multi-billion-dollar-company-via-health?utm_source=hashnode&utm_medium=feed) Discover how a seemingly innocuous \`/health\` endpoint leak led to exposing a multi-billion dollar company's entire cloud infrastructure 4 min read · [hackt.us](https://hackt.us/can-you-compromise-a-multi-billion-dollar-company-via-health?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/can-you-compromise-a-multi-billion-dollar-company-via-health/6947e3c8505c0d43dc7b1ffd) [MaMad4Ever](https://hashnode.com/@MaMad4Ever) · [Dec 8, 2025](https://hashnode.com/posts/sop-for-hackers/6936b0e118cc7de6f9d3027d) ### [Understanding Same-Origin Policy (SOP): Protecting Your Web Security](https://mikagelabs.hashnode.dev/sop-for-hackers?utm_source=hashnode&utm_medium=feed) Attacking the Browser: Practical Limits of the Same-Origin Policy 2 min read · [mikagelabs.hashnode.dev](https://mikagelabs.hashnode.dev/sop-for-hackers?utm_source=hashnode&utm_medium=feed) [Mohammad Reza Mirzadzare](https://hashnode.com/@mirzadzare) · [Dec 1, 2025](https://hashnode.com/posts/from-log-in-with-oauth-to-your-account-is-mine-desktop-app-edition/692d4ba3e3cea7afcaf37031) ### [From "Log in with OAuth" to "Your Account Is Mine" – Desktop App Edition](https://blog.mirzadzare.net/from-log-in-with-oauth-to-your-account-is-mine-desktop-app-edition?utm_source=hashnode&utm_medium=feed) Security flaw in desktop app OAuth allows account takeover with malicious links. Understand attack steps, why it works, and fix strategies 9 min read · [blog.mirzadzare.net](https://blog.mirzadzare.net/from-log-in-with-oauth-to-your-account-is-mine-desktop-app-edition?utm_source=hashnode&utm_medium=feed) [2](https://hashnode.com/posts/from-log-in-with-oauth-to-your-account-is-mine-desktop-app-edition/692d4ba3e3cea7afcaf37031)