The Bug Hunter

Bug bounty writeups

Each title shows what the bug first looked like, then what it turned out to be.

  1. Before: a 505 error for an invalid HTTP versionAfter: an open redirect via Host header poisoning
  2. Before: self-XSS, useless on its ownAfter: reflected XSS via CSRF, medium severity
  3. Before: BSCP: fail, fail, failAfter: BSCP: pass on attempt four