The Bug Bounty Hunter

Public

View Channel

7.8K

404

Can't Join? @thebugbountyhunter

46.9k Members

Updated: May 29, 2026 at 8:18 PM

The Bug Bounty Hunter

Happy hunting! thebugbountyhunter.com [email protected]

Follow @thebugbountyhunter to stay updated with the latest thebugbountyhuntercom and hunting trends and news

Ranking

Global Ranking

#11143

-78

Language Ranking

#2029

-17

Category Ranking

#33

Participant Growth (Last 30 Days)

Total: 46.9K

24h growth: +0 0%

Latest Posts

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

Crafting a Full Read SSRF: A Journey Through Oauth DCR, Open URL Redirects, and Path Normalization

https://eib.hashnode.dev/crafting-a-full-read-ssrf-a-journey-through-oauth-dcr-open-url-redirects-and-path-normalization

4,960

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

What we learned about TEE security from auditing WhatsApp

https://blog.trailofbits.com/2026/04/07/what-we-learned-about-tee-security-from-auditing-whatsapps-private-inference/

4,950

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

Five takeaways from the UK’s Cyber Security & Resilience Bill

https://www.intigriti.com/blog/news/key-takeaways-from-the-uk-cyber-security-and-resilience-bill

4,630

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

PortSwigger partners with Meta Bug Bounty to empower bug hunters with training and Pro licenses

https://portswigger.net/blog/portswigger-partners-with-meta-bug-bounty-to-empower-bug-hunters-with-training-and-pro-licenses

4,840

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

Remote Command Execution in Google Cloud with Single Directory Deletion

https://flatt.tech/research/posts/remote-command-execution-in-google-cloud-with-single-directory-deletion/

9,370

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

Breaking Pingora: HTTP Request Smuggling & Cache Poisoning in Cloudflare's Reverse Proxy

https://xclow3n.github.io/post/6/

7,380

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

ShadowPrompt: How Any Website Could Have Hijacked Claude's Chrome Extension

https://www.koi.ai/blog/shadowprompt-how-any-website-could-have-hijacked-anthropic-claude-chrome-extension

7,600

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

How Command Injection Vulnerability in OpenAI Codex Leads to GitHub Token Compromise

https://www.beyondtrust.com/blog/entry/openai-codex-command-injection-vulnerability-github-token

7,770

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

Instagram Notes Audio Leakage via URL Extraction (Fixed & Rewarded)

https://github.com/i12gocaj/Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

8,460

The Bug Bounty Hunter

Apr 23, 2026, 11:01 AM

How I Earned $76,000 From a Single Program on Bugcrowd

https://anonhunter.medium.com/how-i-earned-76-000-from-a-single-program-on-bugcrowd-adf2a0eeece0

8,760

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

New Burp Bounty Pro v3.0.0 release:
* Multi-Step Scanning: Chain Attacks That Single Requests Can't
* Time-Based Detection Engine: Catch What String Matching Misses
* Global Variables System: Write Profiles Once, Reuse Everywhere
* Per-Scan Performance Control: Different Settings for Different Targets
* True Pause & Resume: No More Lost Scan State
* UI Improvements: Faster Profile Workflow
* Tag-Based Passive Scan Launching

https://bountysecurity.ai/blogs/news/new-burp-bounty-pro-v3-0-0-release

9,380

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

How We Hacked McKinsey's AI Platform
https://codewall.ai/blog/how-we-hacked-mckinseys-ai-platform

6,290

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

Hacking Gemini Enterprise for a $15,000 bounty

https://x.com/behi_sec/status/2029219439028171210?s=46&t=RUHDSSKAhWrUfYiwLCvA2w

View on X (Twitter)

6,510

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

GraphQL Pentesting for Bug Bounty Hunters: From Endpoint Discovery to High-Impact Exploits…!

https://medium.com/@mpjani294/graphql-pentesting-for-bug-bounty-hunters-from-endpoint-discovery-to-high-impact-exploits-821f64a953b5

11,100

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

How I Cured My Bug Hunting AI's Goldfish Memory

https://labs.trace37.com/blog/mastermind-hooks-architecture/

8,960

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

TRUSTING CLAUDE WITH A KNIFE: UNAUTHORIZED PROMPT INJECTION TO RCE IN ANTHROPIC’S CLAUDE CODE ACTION

https://johnstawinski.com/2026/02/05/trusting-claude-with-a-knife-unauthorized-prompt-injection-to-rce-in-anthropics-claude-code-action/

12,100

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

RCE in Google's AI code editor Antigravity - $10000 Bounty

https://www.hacktron.ai/blog/hacking-google-antigravity

12,300

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

When Audits Fail Part 2: From Pre-Auth SSRF to RCE in TRUfusion Enterprise

https://www.rcesecurity.com/2026/02/when-audits-fail-from-pre-auth-ssrf-to-rce-in-trufusion-enterprise/

11,400

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

Evaluating and mitigating the growing risk of LLM-discovered 0-days

https://red.anthropic.com/2026/zero-days/

9,150

The Bug Bounty Hunter

Mar 28, 2026, 05:56 PM

📷 Photo

Understanding and Experimenting with Apple's Pointer Authentication Codes (PAC) on iOS
https://blog.reversesociety.co/blog/2026/pointer-authentication-code-for-ios

9,440

The Bug Bounty Hunter

Mar 26, 2026, 06:45 PM

GatewayToHeaven: Finding a Cross-Tenant Vulnerability in GCP's Apigee

https://omeramiad.com/posts/gatewaytoheaven-gcp-cross-tenant-vulnerability/

10,100

The Bug Bounty Hunter

Mar 23, 2026, 11:32 AM

Leaking the phone number of any Google user

https://brutecat.com/articles/leaking-google-phones

10,600

The Bug Bounty Hunter

Mar 21, 2026, 08:37 AM

Iframe Sandbox Trick
Triggering Authentication Dialogs Without allow-popups

https://phor3nsic.github.io/2026/01/21/trick-iframe-sandbox.html

12,400

The Bug Bounty Hunter

Mar 19, 2026, 08:46 AM

Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK

https://ysamm.com/uncategorized/2026/01/17/math-random-facebook-sdk.html

11,300

The Bug Bounty Hunter

Mar 19, 2026, 08:46 AM

Cloudflare Zero-day: Accessing Any Host Globally

https://fearsoff.org/research/cloudflare-acme

14,600

The Bug Bounty Hunter

Mar 19, 2026, 08:46 AM

Compromising a NASDAQ Financial Giant

https://estse.github.io/posts/compromising-a-nasdaq-financial-giant/

10,800

The Bug Bounty Hunter

Mar 17, 2026, 09:01 AM

Leaking Meta FXAuth Token leading to 2 click Account Takeover

https://ysamm.com/uncategorized/2026/01/16/leaking-fxauth-token.html

10,500

The Bug Bounty Hunter

Mar 15, 2026, 09:07 PM

Instagram account takeover via Meta Pixel script abuse

https://ysamm.com/uncategorized/2026/01/16/leaking-fbevents-ato.html

9,210

The Bug Bounty Hunter

Mar 10, 2026, 02:18 AM

Two-click Facebook account takeover via FXAuth token and blob theft

https://ysamm.com/uncategorized/2026/01/15/steal-fxauth-leads-instagram-ato.html

6,850

The Bug Bounty Hunter

Mar 10, 2026, 02:18 AM

Multiple cross-site leaks disclosing Facebook users in third-party websites

https://ysamm.com/uncategorized/2026/01/16/cross-site-leaks.html

7,960

Showing 30 of 100 posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

Related Telegram Channels

Loading recommended channels...

The Bug Bounty Hunter

The Bug Bounty Hunter

Ranking

Participant Growth (Last 30 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

preluvedpile☁️

milkie ❀ thrifts

bambilys

Cats&Dogs

𝘿𝘼𝙄𝙇𝙔 𝙂𝙄𝙑𝙀𝘼𝙒𝘼𝙔™️

Goodies

TechPuran

Salelooter - Amazon Flipkart Loot Deals

Latest Posts

Related Telegram Channels

preluvedpile☁️

milkie ❀ thrifts

bambilys

Cats&Dogs

𝘿𝘼𝙄𝙇𝙔 𝙂𝙄𝙑𝙀𝘼𝙒𝘼𝙔™️

Goodies

TechPuran

Salelooter - Amazon Flipkart Loot Deals

User Reviews (0)