Posts on bug-bounty
2 posts on bug-bounty. Notes from public sources and my own test lab.
Beyond IDOR: Logic Flaws and Invisible Doors in the API World
A deep dive into BOLA (Broken Object Level Authorization) and why modern security is no longer just about firewalls, but about the logic within our endpoints.
June 27, 2026·4 dk readapi-securitybolabug-bounty
Saving Pennies or Stashing Bugs? Tales from the Bug Bounty Trenches
Bug bounty isn't just about finding flaws; it’s about outsmarting the system and staying patient. Here’s a look at the real grind behind the hunt.
February 16, 2026·5 dk readbug-bountyidorpenetration-testing