Web Security | Bug hunting

https://scriptjacker.in/blogs/Hyperlink-Injection-Bypass/

https://labs.detectify.com/security-guidance/ssrf-vulnerabilities-and-where-to-find-them/

We lost a great friend, a talented information security researcher two days ago. I hope you remember him in your prayers and contribute to spreading his articles so that his memory may endure.
https://lynguist0.medium.com/

https://salt.security/blog/traveling-with-oauth-account-takeover-on-booking-com

https://seth0x41.github.io/2023/12/24/jwt-attacks

https://rafa.hashnode.dev/exploiting-http-parsers-inconsistencies

https://www.sonarsource.com/blog/vscode-security-markdown-vulnerabilities-in-extensions

https://medium.com/@salman_bugskipper/1-250-worth-of-host-header-injection-96563a2ac7e8

https://blog.voorivex.team/9240-bounty-in-30-days-hunt-challenge

https://neupanemizzle.medium.com/server-side-template-injection-leading-to-rce-on-google-vrp-75f0a4bc6ebc

Please read it carefully:
When I started learning security engineering, I did it with the intention of making the internet more secure to prevent people from being affected by blackmail or any other malicious activities stemming from security issues. I created this channel to share the articles I found useful after reading them, with the goal of increasing the overall security of the world. This channel now boasts 3,500 members, the majority of whom are bug bounty hunters capable of conducting reconnaissance and OSINT to uncover the truth behind various matters.
All I ask of you is to carefully read and verify the information presented here. If you find it to be accurate, I encourage you to share it with your friends so that they too can be well-informed. The mainstream Western media has a tendency to disseminate misinformation, often portraying victims as culprits in order to elicit sympathy. use Snapchat maps to review posts from both sides can help reveal the truth, and you can apply your own analytical approach to the situation. While I am not Palestinian, it is worth considering that your country might one day face a similar situation if others decide to take similar actions. In such circumstances, it might be challenging to find individuals committed to uncovering the truth to safeguard your right to life could be challenging.

English: https://twitter.com/MoatAwesome_/status/1711563040917721455
भारतीय संस्करण : https://twitter.com/MoatAwesome_/status/1711651069393039858
한글판 : https://twitter.com/MoatAwesome_/status/1712650840241017324
中文版 : https://twitter.com/MoatAwesome_/status/1711856153548804216
Русская версия: https://twitter.com/MoatAwesome_/status/1712645974655385885
française: https://twitter.com/MoatAwesome_/status/1712563350675320893
español: https://twitter.com/MoatAwesome_/status/1712536782292873497
Norsk: https://twitter.com/MoatAwesome_/status/1712221743253786688
português: https://twitter.com/MoatAwesome_/status/1712195387480506639
έκδοση: https://twitter.com/MoatAwesome_/status/1712120438208291167
Svensk: https://twitter.com/MoatAwesome_/status/1712111484996583516
ڤێرژنی کوردی: https://twitter.com/MoatAwesome_/status/1711850584989438235
deutschliche: https://twitter.com/injyosamaaa/status/1711736459286180206
Türkçe: https://twitter.com/MoatAwesome_/status/1711626117969305904

check these videos too:
https://twitter.com/omr94_/status/1712881048944533555
https://twitter.com/yourfavmemes_/status/1712883711291601236
https://twitter.com/ajplus/status/1712868549138763937
https://twitter.com/AJEnglish/status/1712907775301365989
if you want to ask for anything, please share it in the comments of the tweet.

https://www.sonarsource.com/blog/code-vulnerabilities-leak-emails-in-proton-mail/

https://www.youtube.com/watch?v=90AdmqqPo1Y

https://waf-bypass.com/

https://medium.com/@moon_osint/how-to-find-the-administrator-of-an-onion-site-89d176b0061a

https://infosecwriteups.com/how-i-escalated-a-time-based-sql-injection-to-rce-bbf0d68cb398

https://portswigger.net/research/server-side-prototype-pollution

https://bugbountyguide.org/wp-content/uploads/2023/08/hackerone-Reports.pdf

https://blog.azuki.vip/csrf/

https://fares7elsadek.medium.com/my-first-bug-how-i-was-able-to-bypass-the-waf-and-uncover-a-reflected-xss-e0534b6f05e4