Articles Writeups CVE Programs

Sign in Start free

BUGFLARE

Threat intelligence and bug bounty research platform. Live vulnerability data, in-app writeup reading, and program tracking — aggregated from trusted public sources.

Explore

Articles Writeups CVE Programs Create account

Legal

© 2026 Bugflare. Publishers retain authorship; always verify on the source.

bugflare.site

Blog · Bugflare

In-app reader

Blog

PentesterLandAugust 13, 2026Sign in to save

Sign in to like · 0

**

Pentester Land

**

Writeups
Blog
Contact
GitHub
Twitter

**

Blog

Filter by category

ALL
Articles
Cheatsheets
Conference Notes
Newsletter
Podcast
Site News
Writeups

Make Nmap list any number of its most common ports

Posted in Articles on January 3, 2023

Cypher Injection Cheat Sheet

Posted in Cheatsheets on December 26, 2022

Conference notes: Cypher Query Injection - the new “SQL Injection”

Posted in Conference notes on November 29, 2022

Conference notes: Mechanizing the Methodology

Posted in Conference notes on November 22, 2022

The newsletter is dead, long live the newsletter!

Posted in Site news on July 12, 2020

The 5 Hacking NewsLetter 107

Posted in Newsletter on May 27, 2020

The 5 Hacking NewsLetter 106

Posted in Newsletter on May 20, 2020

««
«
1
2
3
4
5
»
»»

Top

Source

Originally published by PentesterLand (pentester.land).

Shown in Bugflare for convenience. Ownership and accuracy remain with the original publisher — always verify on the source when it matters.

Open original on pentester.land →https://pentester.land/blog/

Discussion

Comments

Sign in to join the discussion.

No comments yet — start the thread.

Keep reading

More on Bugflare

WriteupHow to Find Path Traversal and LFI Bugs in Web AppsPath traversal / LFI testing made readable — common parameters, encoding tricks, what to prove safely, and how these bugs become larger incidents.
WriteupHow to Find Stored XSS in Bug Bounty (Still Paying in 2026)A practical stored XSS hunting guide — high-value sinks, admin-only paths, CSP friction, and how to turn a saved payload into clear account impact.
WriteupHow to Find CORS Misconfiguration Bugs (With Real Impact)CORS bugs explained for hunters — origin reflection, credentialed requests, and how to prove data theft instead of reporting a theoretical header issue.
WriteupHow to Test for OS Command Injection in Web AppsOS command injection testing for bug bounty — common sinks, blind vs in-band clues, safe proof ideas, and remediation language that developers accept.
WriteupWhat Is SSTI? How to Find Server-Side Template Injection

Server-Side Template Injection explained simply — how to spot template contexts, safe detection payloads, and why SSTI can become RCE in some engines.

WriteupHow to Find Race Condition Bugs in Bug Bounty ProgramsLearn how to hunt race conditions — limit bypasses, double-spend style flaws, and parallel request testing — with clear examples and report tips.

Optional: create a free account to save items, track programs, and sync across web + app. Reading stays free.