Master Bug Bounty Hunting: Your Guide to Breaking into Cybersecurity for Newcomers

Write

CVE-2025-57205: Stored XSS in iNiLabs School Express 6.2 (SMS Express)

Sep 20, 20254 min read

CVE-2025-57203: Stored XSS in MagicAI 9.1 (AI Chat) Enables Arbitrary JavaScript Execution

Sep 20, 20257 min read

CVE-2025-57204: Stored XSS in Stocky POS with Inventory Management & HRM (ui-lib) 5.0

Discovered by: Michael KimVendor: ui-lib (Uilibrary)Product: Stocky – POS with Inventory Management & HRM (“Ultimate Inventory Management System with POS”)Affected Version: 5.0 (as released June 2025)Impact: Arbitrary JavaScript Execution (Stored XSS...

Sep 20, 20254 min read

My Journey to Passing the CAPenX Certification: A Guide for Aspiring Expert-Level AppSec Pentesters

Nov 10, 20246 min read

CVE-2024-37629: Simple XSS Payload Exploits 0day Vulnerability in 10,000 Web Apps

Jun 12, 20242 min read

CVE-2024-34240: Latest Stored XSS 0day Vulnerability Unveiled

How I Quickly Found a Stored XSS 0day in the QDOCS Smart School 7.0.0

May 21, 20242 min read

CVE-2024-34241: A Step-by-Step Discovery Guide

How I Found Several Stored XSS Bugs in Rocket LMS Version 1.9 in Under 10 Minutes

May 17, 20243 min read

Review of the Certified AppSec Pentester Certification: Tips for Passing on Your First Attempt

I was scrolling through LinkedIn and noticed a couple of hackers on my newsfeed posting that they passed the mock exam for the CAPen Certification by The SecOps Group. This caught my interest because I had never heard of the Certified AppSec Penteste...

May 8, 20246 min read

Finding a Basic RCE Vulnerability on a Prominent News Channel

Inspiring new bug bounty hunters with a simple RCE vulnerability discovery.

May 4, 20245 min read

Uncovering an SSRF Vulnerability in PDFMyURL Affecting Numerous Users

A bug bounty story by GRuMPz.

Apr 22, 20242 min read

Hunting and Finding CVE-2023-31045

This is my journey on hunting and finding my first 0day as a security researcher. CVE-2023-31045.

May 31, 20234 min read

Command Palette

Latest articles