Search for a command to run...
Hi, I’m a bug bounty hunter and cybersecurity enthusiast who began my journey in 2023. I enjoy exploring and discovering hidden vulnerabilities in browsers, applications, and various platforms—especially those that are rarely examined by others. My focus is on browser and website security issues. I also share my findings and educational content through my YouTube channel, Lazy Cyber Security. https://8da993bf3fa4.ngrok-free.app
No comments yet. Be the first to comment.
Saya menemukan sebuah kerentanan di mana address bar dapat disalahgunakan (spoofing) melalui penggunaan subdomain yang sangat panjang. Masalah ini terjadi karena antarmuka (UI) browser tidak mampu men
Dalam proses bug bounty, terutama saat menguji potensi DoS (Denial of Service) atau resource exhaustion, kita sering harus mencoba banyak payload secara berulang. Kalau masih manual copy paste, itu cu
Assalamualaikum, my name is Syarif Muhammad Sajjad, also known as syarif07 on HackerOne. In this writeup, I’ll walk through one of my findings that was assigned CVE-2025-14812, a high-severity vulnera
Intigriti 0226 challenge by d3dn0v4 This is a brief story of how I approached and solved the Intigriti 0226 challenge from identifying the weak points to chaining them into a working. Let’s Get Starte
Pada kesempatan kali ini saya akan membahas kerentanan yang seringkali terlewat oleh mata telanjang tapi punya impact yang sangat fatal, yaitu Race Condition. Kerentanan ini saya temukan pada fitur Redeem Voucher di sebuah platform E-Commerce (mari k...
![[Bug Bounty] Race Condition: Redeeming Single-Use Coupon Multiple Times](/_next/image?url=https%3A%2F%2Fcdn.hashnode.com%2Fres%2Fhashnode%2Fimage%2Fupload%2Fv1770116456998%2F629ff44d-4a0a-4445-91bf-c37d3e84c104.jpeg&w=3840&q=75)