<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://bugflare.site</loc>
<lastmod>2026-08-16T23:42:38.969Z</lastmod>
<changefreq>daily</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://bugflare.site/writeups</loc>
<lastmod>2026-08-16T23:42:38.969Z</lastmod>
<changefreq>hourly</changefreq>
<priority>0.95</priority>
</url>
<url>
<loc>https://bugflare.site/articles</loc>
<lastmod>2026-08-16T23:42:38.969Z</lastmod>
<changefreq>hourly</changefreq>
<priority>0.95</priority>
</url>
<url>
<loc>https://bugflare.site/privacy</loc>
<lastmod>2026-08-16T23:42:38.969Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.2</priority>
</url>
<url>
<loc>https://bugflare.site/terms</loc>
<lastmod>2026-08-16T23:42:38.969Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.2</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/desktop-app-local-api-idor</loc>
<lastmod>2026-08-16T23:39:32.846Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/electron-app-rce-bug-bounty</loc>
<lastmod>2026-08-16T23:39:32.477Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/browser-extension-privilege-abuse</loc>
<lastmod>2026-08-16T23:39:32.105Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/mcp-server-security-testing</loc>
<lastmod>2026-08-16T23:39:31.725Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/rag-poisoning-bug-bounty-basics</loc>
<lastmod>2026-08-16T23:39:31.354Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/llm-output-handling-xss-idor</loc>
<lastmod>2026-08-16T23:39:30.977Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/vibe-coding-security-checklist-hunters</loc>
<lastmod>2026-08-16T23:39:30.605Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/private-invites-bug-bounty-strategy</loc>
<lastmod>2026-08-16T23:39:30.227Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/duplicate-report-avoidance-tips</loc>
<lastmod>2026-08-16T23:39:29.842Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-pick-bug-bounty-programs</loc>
<lastmod>2026-08-16T23:39:29.463Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/git-directory-exposure-bug-bounty</loc>
<lastmod>2026-08-16T23:39:25.622Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/backup-file-exposure-bug-bounty</loc>
<lastmod>2026-08-16T23:39:25.260Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/robots-sitemap-hidden-paths</loc>
<lastmod>2026-08-16T23:39:24.897Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/wayback-urls-parameter-mining</loc>
<lastmod>2026-08-16T23:39:24.531Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/certificate-transparency-recon</loc>
<lastmod>2026-08-16T23:39:24.166Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/asn-cidr-mapping-bug-bounty</loc>
<lastmod>2026-08-16T23:39:23.808Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/subdomain-brute-wordlists-2026</loc>
<lastmod>2026-08-16T23:39:23.448Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/dns-zone-transfer-axfr-recon</loc>
<lastmod>2026-08-16T23:39:23.086Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/imap-command-injection-notes</loc>
<lastmod>2026-08-16T23:39:22.712Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/smtp-injection-bug-bounty-guide</loc>
<lastmod>2026-08-16T23:39:22.338Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/gitlab-ci-variable-leakage</loc>
<lastmod>2026-08-16T23:39:19.280Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/github-actions-oidc-misconfig</loc>
<lastmod>2026-08-16T23:39:18.882Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/terraform-state-exposure-bug-bounty</loc>
<lastmod>2026-08-16T23:39:18.502Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ecr-public-image-secrets</loc>
<lastmod>2026-08-16T23:39:18.131Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/secrets-manager-overpermission</loc>
<lastmod>2026-08-16T23:39:17.748Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/cloudfront-origin-access-misconfig</loc>
<lastmod>2026-08-16T23:39:17.368Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/lambda-url-auth-bypass</loc>
<lastmod>2026-08-16T23:39:16.997Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ecs-task-role-ssrf-impact</loc>
<lastmod>2026-08-16T23:39:16.626Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/iam-role-trust-policy-abuse</loc>
<lastmod>2026-08-16T23:39:16.250Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/aws-bucket-policy-wildcard-principal</loc>
<lastmod>2026-08-16T23:39:15.871Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/wordpress-rest-api-idor</loc>
<lastmod>2026-08-16T23:39:12.708Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/shopify-app-proxy-auth-bugs</loc>
<lastmod>2026-08-16T23:39:12.308Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/paypal-ipn-validation-bypass</loc>
<lastmod>2026-08-16T23:39:11.916Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/stripe-webhook-replay-attacks</loc>
<lastmod>2026-08-16T23:39:11.520Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/supabase-rls-bypass-testing</loc>
<lastmod>2026-08-16T23:39:11.126Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/firebase-auth-misconfig-bug-bounty</loc>
<lastmod>2026-08-16T23:39:10.730Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/expo-react-native-api-idor</loc>
<lastmod>2026-08-16T23:39:10.339Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/mobile-certificate-pinning-bypass-notes</loc>
<lastmod>2026-08-16T23:39:09.943Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ios-universal-links-abuse</loc>
<lastmod>2026-08-16T23:39:09.523Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/android-deeplink-hijacking-bug-bounty</loc>
<lastmod>2026-08-16T23:39:09.122Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/wallet-double-spend-race</loc>
<lastmod>2026-08-16T23:39:05.135Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/subscription-downgrade-privilege-keep</loc>
<lastmod>2026-08-16T23:39:04.760Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/shipping-fee-bypass-logic</loc>
<lastmod>2026-08-16T23:39:04.390Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/gift-card-balance-manipulation</loc>
<lastmod>2026-08-16T23:39:04.012Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/seat-limit-bypass-multi-tenant</loc>
<lastmod>2026-08-16T23:39:03.655Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/trial-reset-abuse-saas</loc>
<lastmod>2026-08-16T23:39:03.283Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/refund-race-condition-bug-bounty</loc>
<lastmod>2026-08-16T23:39:02.919Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/coupon-stacking-abuse-bug-bounty</loc>
<lastmod>2026-08-16T23:39:02.559Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/price-manipulation-hidden-fields</loc>
<lastmod>2026-08-16T23:39:02.199Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/negative-quantity-cart-logic-bugs</loc>
<lastmod>2026-08-16T23:39:01.833Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/content-type-nosniff-bypass</loc>
<lastmod>2026-08-16T23:38:58.733Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/unicode-normalization-bypass-xss</loc>
<lastmod>2026-08-16T23:38:58.388Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/dangling-markup-injection</loc>
<lastmod>2026-08-16T23:38:58.017Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/base-tag-hijacking-bug-bounty</loc>
<lastmod>2026-08-16T23:38:57.673Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/mutation-xss-mxss-bug-bounty</loc>
<lastmod>2026-08-16T23:38:57.332Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/svg-foreignobject-xss-bug-bounty</loc>
<lastmod>2026-08-16T23:38:56.985Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/mhtml-xss-legacy-browsers</loc>
<lastmod>2026-08-16T23:38:56.640Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/postmessage-wildcard-origin-bugs</loc>
<lastmod>2026-08-16T23:38:56.300Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/document-referrer-dom-xss</loc>
<lastmod>2026-08-16T23:38:55.957Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/window-name-dom-xss-bug-bounty</loc>
<lastmod>2026-08-16T23:38:55.610Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/rss-import-ssrf-bug-bounty</loc>
<lastmod>2026-08-16T23:38:52.646Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/image-proxy-ssrf-bug-bounty</loc>
<lastmod>2026-08-16T23:38:52.276Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/link-preview-ssrf-bug-bounty</loc>
<lastmod>2026-08-16T23:38:51.914Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/saml-metadata-url-ssrf</loc>
<lastmod>2026-08-16T23:38:51.539Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/oidc-discovery-misconfiguration</loc>
<lastmod>2026-08-16T23:38:51.175Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/webauthn-passkey-bypass-testing</loc>
<lastmod>2026-08-16T23:38:50.798Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/grpc-reflection-authorization-bugs</loc>
<lastmod>2026-08-16T23:38:50.424Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/soap-wsdl-xxe-bug-bounty</loc>
<lastmod>2026-08-16T23:38:50.060Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/graphql-introspection-production-risks</loc>
<lastmod>2026-08-16T23:38:49.694Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/swagger-openapi-exposure-bug-bounty</loc>
<lastmod>2026-08-16T23:38:49.325Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/hunting-bugs-in-ci-cd-pipelines</loc>
<lastmod>2026-08-16T23:18:52.026Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/webhook-signature-bypass-bug-bounty</loc>
<lastmod>2026-08-16T23:18:51.681Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/invite-flow-privilege-escalation</loc>
<lastmod>2026-08-16T23:18:51.342Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/account-linking-oauth-takeover</loc>
<lastmod>2026-08-16T23:18:50.964Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/mfa-bypass-response-manipulation</loc>
<lastmod>2026-08-16T23:18:50.562Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/flash-crossdomain-policy-bugs</loc>
<lastmod>2026-08-16T23:18:50.220Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/client-side-template-injection-csti</loc>
<lastmod>2026-08-16T23:18:49.879Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/relative-path-overwrite-rpo</loc>
<lastmod>2026-08-16T23:18:49.533Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/cache-key-confusion-bug-bounty</loc>
<lastmod>2026-08-16T23:18:49.186Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/http2-smuggling-cloudflare-workers</loc>
<lastmod>2026-08-16T23:18:48.824Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/bug-bounty-scope-parsing-tips</loc>
<lastmod>2026-08-16T23:18:42.742Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/saml-assertion-replay-bug-bounty</loc>
<lastmod>2026-08-16T23:18:42.380Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/jwt-jku-x5u-header-injection</loc>
<lastmod>2026-08-16T23:18:41.995Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/dom-xss-location-hash-sinks</loc>
<lastmod>2026-08-16T23:18:41.648Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/second-order-xss-bug-bounty</loc>
<lastmod>2026-08-16T23:18:41.273Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/blind-ssrf-out-of-band-bug-bounty</loc>
<lastmod>2026-08-16T23:18:40.914Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/poisoned-registration-xss-ssti</loc>
<lastmod>2026-08-16T23:18:40.559Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/virtual-host-enumeration-bug-bounty</loc>
<lastmod>2026-08-16T23:18:40.202Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/favicon-hash-shodan-recon</loc>
<lastmod>2026-08-16T23:18:39.852Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/origin-ip-discovery-waf-bypass</loc>
<lastmod>2026-08-16T23:18:39.496Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/bounty-triage-impact-writing-guide</loc>
<lastmod>2026-08-16T23:13:58.767Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/polyglot-payloads-bug-bounty</loc>
<lastmod>2026-08-16T23:13:58.404Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/file-upload-svg-xss-xxe-chains</loc>
<lastmod>2026-08-16T23:13:58.043Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/websocket-csrf-like-attacks-bug-bounty</loc>
<lastmod>2026-08-16T23:13:57.676Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/graphql-mutation-authorization-bugs</loc>
<lastmod>2026-08-16T23:13:57.311Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/js-secrets-source-maps-bug-bounty</loc>
<lastmod>2026-08-16T23:13:56.939Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/hunting-bugs-in-graphql-subscriptions</loc>
<lastmod>2026-08-16T23:13:02.630Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/idor-in-export-pdf-invoices</loc>
<lastmod>2026-08-16T23:13:02.000Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/referral-bonus-abuse-logic-bugs</loc>
<lastmod>2026-08-16T23:13:01.386Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/magic-link-token-leakage-bug-bounty</loc>
<lastmod>2026-08-16T23:13:00.779Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/refresh-token-reuse-detection</loc>
<lastmod>2026-08-16T23:13:00.131Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/cookie-session-fixation-bug-bounty</loc>
<lastmod>2026-08-16T23:12:59.765Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/gcp-metadata-ssrf-bug-bounty</loc>
<lastmod>2026-08-16T23:12:59.402Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/azure-blob-sas-url-exposure</loc>
<lastmod>2026-08-16T23:12:59.026Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/aws-cognito-misconfig-bug-bounty</loc>
<lastmod>2026-08-16T23:12:58.660Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/cloudflare-waf-bypass-bug-bounty</loc>
<lastmod>2026-08-16T23:12:58.288Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/recon-methodology-bug-bounty-2026</loc>
<lastmod>2026-08-16T23:12:54.257Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/account-takeover-checklist-bug-bounty</loc>
<lastmod>2026-08-16T23:12:53.892Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/trusted-types-dom-xss-bypass</loc>
<lastmod>2026-08-16T23:12:53.520Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/waf-bypass-techniques-bug-bounty</loc>
<lastmod>2026-08-16T23:12:53.151Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/finding-hidden-parameters-arjun-param-miner</loc>
<lastmod>2026-08-16T23:05:23.217Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/http-parameter-pollution-auth-bypass</loc>
<lastmod>2026-08-16T23:05:22.834Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/css-injection-data-exfil-bug-bounty</loc>
<lastmod>2026-08-16T23:05:22.439Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/tabnabbing-opener-phishing-bug-bounty</loc>
<lastmod>2026-08-16T23:05:22.060Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/jsonp-callback-xss-bug-bounty</loc>
<lastmod>2026-08-16T23:05:21.683Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/same-site-cookie-bypass-bug-bounty</loc>
<lastmod>2026-08-16T23:05:21.308Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/internal-endpoint-bypass-via-smuggling</loc>
<lastmod>2026-08-16T23:05:20.926Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/cache-poisoning-via-smuggling-bug-bounty</loc>
<lastmod>2026-08-16T23:05:20.538Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/timing-oracle-smuggling-detection</loc>
<lastmod>2026-08-16T23:05:20.147Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/burp-http-request-smuggler-extension-guide</loc>
<lastmod>2026-08-16T23:05:19.755Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/nuclei-templates-bug-bounty-recon</loc>
<lastmod>2026-08-16T23:05:15.933Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/gitleaks-trufflehog-secrets-hunting</loc>
<lastmod>2026-08-16T23:05:15.569Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ipv6-nat64-ssrf-bypass</loc>
<lastmod>2026-08-16T23:05:15.206Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/open-redirect-to-ssrf-chain</loc>
<lastmod>2026-08-16T23:05:14.846Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/reflected-cors-origin-bug-bounty</loc>
<lastmod>2026-08-16T23:05:14.487Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/cors-null-origin-credentials-bypass</loc>
<lastmod>2026-08-16T23:05:14.117Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ssrf-filter-bypass-encoding-redirects</loc>
<lastmod>2026-08-16T23:05:13.746Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/h2-h1-desync-smuggling-bug-bounty</loc>
<lastmod>2026-08-16T23:05:13.382Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/te-cl-http-request-smuggling-bug-bounty</loc>
<lastmod>2026-08-16T23:05:13.015Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/cl-te-http-request-smuggling-bug-bounty</loc>
<lastmod>2026-08-16T23:05:12.631Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/xss-to-csrf-token-theft-stored</loc>
<lastmod>2026-08-16T22:56:04.861Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/spring-boot-actuator-exposure-bug-bounty</loc>
<lastmod>2026-08-16T22:56:03.948Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/firebase-realtime-database-rules-misconfig</loc>
<lastmod>2026-08-16T22:56:03.591Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/x-tenant-id-header-authorization-bypass</loc>
<lastmod>2026-08-16T22:56:03.221Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/oauth-pkce-bypass-public-clients</loc>
<lastmod>2026-08-16T22:56:02.862Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/dom-invader-find-dom-xss-bug-bounty</loc>
<lastmod>2026-08-16T22:56:02.495Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/graphql-schema-reconstruction-clairvoyance</loc>
<lastmod>2026-08-16T22:56:02.107Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/graphql-query-complexity-dos-bug-bounty</loc>
<lastmod>2026-08-16T22:56:01.744Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/password-reset-poisoning-host-header</loc>
<lastmod>2026-08-16T22:56:01.385Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/self-xss-csrf-chain-account-takeover</loc>
<lastmod>2026-08-16T22:56:01.024Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/dangling-dns-azure-github-pages-takeover</loc>
<lastmod>2026-08-16T22:55:57.864Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/oauth-missing-state-csrf-bug-bounty</loc>
<lastmod>2026-08-16T22:55:57.493Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/markdown-html-stored-xss-bug-bounty</loc>
<lastmod>2026-08-16T22:55:57.133Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/soft-deleted-records-still-accessible-idor</loc>
<lastmod>2026-08-16T22:55:56.773Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/uuid-idor-leaked-guid-exploitation</loc>
<lastmod>2026-08-16T22:55:56.412Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/saml-xml-signature-wrapping-xsw</loc>
<lastmod>2026-08-16T22:55:56.050Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/login-csrf-account-takeover-bug-bounty</loc>
<lastmod>2026-08-16T22:55:55.691Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/graphql-alias-batching-otp-bruteforce</loc>
<lastmod>2026-08-16T22:55:55.322Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/jwt-algorithm-confusion-rs256-hs256</loc>
<lastmod>2026-08-16T22:55:54.958Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/autorize-burp-extension-idor-automation</loc>
<lastmod>2026-08-16T22:55:54.566Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/hunting-in-single-page-apps-spa-apis</loc>
<lastmod>2026-08-16T22:39:45.498Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/csp-report-only-misconfig-bug-bounty</loc>
<lastmod>2026-08-16T22:39:45.149Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/admin-panel-recon-bug-bounty</loc>
<lastmod>2026-08-16T22:39:44.801Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/export-import-data-exfiltration-bugs</loc>
<lastmod>2026-08-16T22:39:44.463Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/invite-token-security-bug-bounty</loc>
<lastmod>2026-08-16T22:39:44.106Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/feature-flag-authorization-bypass</loc>
<lastmod>2026-08-16T22:39:43.762Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/multi-tenant-isolation-bugs-saas</loc>
<lastmod>2026-08-16T22:39:43.416Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/dns-rebinding-ssrf-bug-bounty</loc>
<lastmod>2026-08-16T22:39:43.073Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/privilege-escalation-horizontal-vertical-web</loc>
<lastmod>2026-08-16T22:39:39.514Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/open-redirect-phishing-chains-bug-bounty</loc>
<lastmod>2026-08-16T22:39:39.143Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/csv-formula-injection-bug-bounty</loc>
<lastmod>2026-08-16T22:39:38.782Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/html-injection-email-clients-bug-bounty</loc>
<lastmod>2026-08-16T22:39:38.406Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/pdf-generators-ssrf-xss-bug-bounty</loc>
<lastmod>2026-08-16T22:39:38.042Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/mobile-api-idor-bug-bounty</loc>
<lastmod>2026-08-16T22:39:37.682Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/websocket-security-testing-bug-bounty</loc>
<lastmod>2026-08-16T22:39:37.314Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/api-key-leakage-github-js-bug-bounty</loc>
<lastmod>2026-08-16T22:39:36.911Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/bopla-broken-object-property-authorization</loc>
<lastmod>2026-08-16T22:39:36.542Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/imdsv2-bypass-techniques-ssrf-hunters</loc>
<lastmod>2026-08-16T22:39:36.176Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ssti-server-side-template-injection</loc>
<lastmod>2026-08-16T22:39:33.358Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/xxe-xml-external-entity-bug-bounty</loc>
<lastmod>2026-08-16T22:39:33.001Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/insecure-deserialization-java-php</loc>
<lastmod>2026-08-16T22:39:32.638Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ldap-injection-bug-bounty</loc>
<lastmod>2026-08-16T22:39:32.281Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/xpath-injection-bug-bounty</loc>
<lastmod>2026-08-16T22:39:31.927Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/prototype-pollution-client-side-bug-bounty</loc>
<lastmod>2026-08-16T22:39:31.567Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/desync-attacks-bug-bounty</loc>
<lastmod>2026-08-16T22:39:31.211Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/http-request-smuggling-bug-bounty-basics</loc>
<lastmod>2026-08-16T22:39:30.840Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/cache-poisoning-web-cache-deception</loc>
<lastmod>2026-08-16T22:39:30.483Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/blind-xss-bug-bounty-hunting</loc>
<lastmod>2026-08-16T22:39:30.120Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/postmessage-xss-bug-bounty</loc>
<lastmod>2026-08-16T22:39:27.115Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/race-condition-coupon-wallet-bug-bounty</loc>
<lastmod>2026-08-16T22:39:26.744Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/mass-assignment-api-bug-bounty</loc>
<lastmod>2026-08-16T22:39:26.360Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/s3-bucket-misconfiguration-bug-bounty</loc>
<lastmod>2026-08-16T22:39:25.980Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/oauth-redirect-uri-misconfiguration</loc>
<lastmod>2026-08-16T22:39:25.606Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/graphql-idor-batching-bug-bounty</loc>
<lastmod>2026-08-16T22:39:25.231Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/jwt-alg-none-kid-injection-bug-bounty</loc>
<lastmod>2026-08-16T22:39:24.855Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/webhook-ssrf-bug-bounty-hunting</loc>
<lastmod>2026-08-16T22:39:24.475Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/bola-broken-object-level-authorization-api</loc>
<lastmod>2026-08-16T22:39:24.101Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ssrf-cloud-metadata-imdsv2-bug-bounty</loc>
<lastmod>2026-08-16T22:39:23.711Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/mime-sniffing-content-type-confusion-xss</loc>
<lastmod>2026-08-16T22:10:13.194Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/finding-bugs-in-nextjs-react-apps-bug-bounty</loc>
<lastmod>2026-08-16T22:10:12.814Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/insecure-randomness-predictable-tokens-bug-bounty</loc>
<lastmod>2026-08-16T22:10:12.431Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/email-header-injection-how-to-test</loc>
<lastmod>2026-08-16T22:10:12.002Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/subdomain-enumeration-recon-bug-bounty</loc>
<lastmod>2026-08-16T22:10:11.623Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-chain-bugs-bug-bounty-critical</loc>
<lastmod>2026-08-16T22:10:11.239Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/content-security-policy-bypass-xss-bug-bounty</loc>
<lastmod>2026-08-16T22:10:10.854Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/crlf-injection-http-response-splitting</loc>
<lastmod>2026-08-16T22:10:10.470Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/account-enumeration-login-signup-bug-bounty</loc>
<lastmod>2026-08-16T22:10:10.074Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-use-burp-suite-bug-bounty-beginners</loc>
<lastmod>2026-08-16T22:10:09.683Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-test-webhooks-ssrf-security</loc>
<lastmod>2026-08-16T21:51:55.472Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/reverse-tabnabbing-noopener-security</loc>
<lastmod>2026-08-16T21:51:55.110Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/second-order-sql-injection-bug-bounty</loc>
<lastmod>2026-08-16T21:51:54.745Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ldap-injection-how-to-test-bug-bounty</loc>
<lastmod>2026-08-16T21:51:54.384Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/postmessage-xss-how-to-find-bug-bounty</loc>
<lastmod>2026-08-16T21:51:54.031Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/broken-function-level-authorization-bfla-api</loc>
<lastmod>2026-08-16T21:51:53.673Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/http-parameter-pollution-hpp-bug-bounty</loc>
<lastmod>2026-08-16T21:51:53.316Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/session-fixation-how-to-test-bug-bounty</loc>
<lastmod>2026-08-16T21:51:52.960Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/dependency-confusion-supply-chain-bug-bounty</loc>
<lastmod>2026-08-16T21:51:52.589Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-write-bug-bounty-report-that-gets-paid</loc>
<lastmod>2026-08-16T21:51:52.224Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-find-rate-limiting-bugs-bug-bounty</loc>
<lastmod>2026-08-16T21:12:39.853Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-find-exposed-api-keys-secrets-bug-bounty</loc>
<lastmod>2026-08-16T21:12:39.442Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/s3-bucket-misconfiguration-cloud-storage-bug-bounty</loc>
<lastmod>2026-08-16T21:12:39.005Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/cross-site-websocket-hijacking-cswsh-guide</loc>
<lastmod>2026-08-16T21:12:38.637Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/host-header-injection-how-to-find-bug-bounty</loc>
<lastmod>2026-08-16T21:12:38.266Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/clickjacking-how-to-test-prove-impact</loc>
<lastmod>2026-08-16T21:12:37.891Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/insecure-deserialization-how-to-find-bug-bounty</loc>
<lastmod>2026-08-16T21:12:37.517Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/web-cache-poisoning-how-to-find-bug-bounty</loc>
<lastmod>2026-08-16T21:12:37.146Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/prototype-pollution-bug-bounty-how-to-find</loc>
<lastmod>2026-08-16T21:12:36.767Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-start-bug-bounty-2026-beginner-roadmap</loc>
<lastmod>2026-08-16T21:12:36.382Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/business-logic-vulnerabilities-bug-bounty</loc>
<lastmod>2026-08-15T22:44:01.149Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-test-2fa-bypass-bug-bounty</loc>
<lastmod>2026-08-15T22:44:00.759Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/saml-sso-vulnerabilities-bug-bounty-guide</loc>
<lastmod>2026-08-15T22:44:00.372Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/mass-assignment-api-security-bug-bounty</loc>
<lastmod>2026-08-15T22:43:59.991Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/blind-xss-bug-bounty-how-to-find</loc>
<lastmod>2026-08-15T22:43:59.595Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/nosql-injection-bug-bounty-how-to-find</loc>
<lastmod>2026-08-15T22:43:59.203Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ai-agent-security-checklist-owasp</loc>
<lastmod>2026-08-15T22:27:28.609Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/password-reset-vulnerabilities-account-takeover</loc>
<lastmod>2026-08-15T22:27:28.240Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/web-cache-deception-attack-testing-guide</loc>
<lastmod>2026-08-15T22:27:27.872Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/graphql-security-testing-bola-introspection-dos</loc>
<lastmod>2026-08-15T22:27:27.499Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-find-oauth-vulnerabilities-account-takeover</loc>
<lastmod>2026-08-15T22:27:27.123Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/prompt-injection-attacks-how-to-test-llm-apps</loc>
<lastmod>2026-08-15T22:27:26.727Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-find-path-traversal-lfi-bugs</loc>
<lastmod>2026-08-12T19:06:27.017Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-find-stored-xss-bug-bounty</loc>
<lastmod>2026-08-12T19:06:26.670Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-find-cors-misconfiguration-bugs</loc>
<lastmod>2026-08-12T19:06:26.271Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-test-os-command-injection-web-apps</loc>
<lastmod>2026-08-12T19:06:25.911Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/what-is-ssti-how-to-find-template-injection</loc>
<lastmod>2026-08-12T19:06:25.564Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-find-race-condition-bugs-bug-bounty</loc>
<lastmod>2026-08-12T19:06:25.213Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/what-is-xxe-injection-how-to-test</loc>
<lastmod>2026-08-12T19:06:24.833Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-find-file-upload-vulnerabilities-bug-bounty</loc>
<lastmod>2026-08-12T19:06:24.483Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-open-redirects-become-high-impact-bugs</loc>
<lastmod>2026-08-12T18:58:36.198Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/broken-access-control-owasp-a01-bug-hunters</loc>
<lastmod>2026-08-12T18:58:35.819Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-hunt-subdomain-takeovers-bug-bounty</loc>
<lastmod>2026-08-12T18:58:35.453Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-find-jwt-authentication-flaws-apis</loc>
<lastmod>2026-08-12T18:58:35.085Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/what-is-csrf-attack-explained-login-session</loc>
<lastmod>2026-08-12T18:58:34.714Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/how-to-test-sql-injection-web-apps-beginners</loc>
<lastmod>2026-08-12T18:58:34.319Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/idor-methodology-bug-bounty-checklist</loc>
<lastmod>2026-08-12T18:21:18.119Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/xss-to-account-takeover-chains-that-still-work</loc>
<lastmod>2026-08-12T18:21:17.758Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/http-request-smuggling-desync-primer-for-hunters</loc>
<lastmod>2026-08-12T18:21:17.392Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/dom-clobbering-for-bug-bounty-hunters</loc>
<lastmod>2026-08-12T18:21:17.038Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/react2shell-cve-2025-55182-explained-for-hunters</loc>
<lastmod>2026-08-12T18:21:16.675Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/writeups/ssrf-hunting-playbook-metadata-filters-and-impact</loc>
<lastmod>2026-08-12T18:21:16.284Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://bugflare.site/articles/wireshark-4-6-8-released-sun-aug-16th-ubvbqy14iz</loc>
<lastmod>2026-08-16T21:31:48.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/automating-on-actual-programs-1ehtob1uj1</loc>
<lastmod>2026-08-16T20:11:51.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/cve-2026-6837-command-injection-in-zyxel-export-cgi-pkcs-12-export-han-198x8gv1dl</loc>
<lastmod>2026-08-16T18:48:50.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/any-suggestions-or-guidance-in-this-matter-3s2xkk10l8</loc>
<lastmod>2026-08-16T18:25:09.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/ama-with-black-hat-speakers-lidor-b-elad-meged-pre-auth-rce-in-enterpr-isxo351p9w</loc>
<lastmod>2026-08-16T19:38:08.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/best-way-to-make-money-as-a-hacker-other-than-bug-bounty-iwjrmr3h1y</loc>
<lastmod>2026-08-16T14:01:15.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/cve-2026-33696-from-a-schema-name-to-rce-in-n8n-yac98cj4o3</loc>
<lastmod>2026-08-16T13:33:02.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/token-optimizer-mcp-os-command-injection-in-smart-user-via-username-in-1iddqbwxiv</loc>
<lastmod>2026-08-14T21:42:06.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/s2n-quic-has-excessive-memory-allocation-m8zqk1137p</loc>
<lastmod>2026-08-14T21:44:19.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/token-optimizer-mcp-unauthenticated-path-traversal-in-dashboard-sessio-1c0l3c3dwv</loc>
<lastmod>2026-08-14T21:43:54.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/friday-squid-blogging-searching-for-the-colossal-squid-migfw218kj</loc>
<lastmod>2026-08-14T21:01:49.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/upcoming-speaking-engagements-1ly6bljqym</loc>
<lastmod>2026-08-14T16:01:59.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/how-cloudflare-detects-mcp-traffic-and-helps-secure-it-lxdwxk1tw4</loc>
<lastmod>2026-08-14T13:12:12.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/secure-all-your-internal-vibe-coded-applications-in-one-click-o3pi55c68w</loc>
<lastmod>2026-08-14T13:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/if-the-markets-reject-openai-and-anthropic-the-us-should-nationalize-t-azjcu81d8d</loc>
<lastmod>2026-08-14T11:03:50.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/who-s-tracking-you-use-this-new-service-to-find-out-1fpo88f1th</loc>
<lastmod>2026-08-14T11:24:35.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/apt-group-honeymyte-upgrades-coolclient-the-backdoor-gets-a-kernel-lev-1tv7t7yelj</loc>
<lastmod>2026-08-14T09:00:14.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/isc-stormcast-for-friday-august-14th-2026-https-isc-sans-edu-podcastde-qg0w1c17av</loc>
<lastmod>2026-08-14T02:00:03.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/curiouser-and-curiouser-boht9y1m8l</loc>
<lastmod>2026-08-13T18:00:18.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/total-eclipse-of-the-internet-traffic-impacts-in-iceland-spain-and-por-1uxf5ti10f</loc>
<lastmod>2026-08-13T19:58:01.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/dissecting-the-jwr-phishing-framework-13z8dvm1bs</loc>
<lastmod>2026-08-13T10:00:35.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/armored-likho-expands-its-cyber-espionage-toolkit-10jdzb7196</loc>
<lastmod>2026-08-13T08:00:15.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/attackers-exploit-sharepoint-authentication-bypass-after-public-poc-re-ifp18s12a4</loc>
<lastmod>2026-08-13T06:09:48.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/using-gemma4-with-ollama-testing-file-hash-analysis-and-recommendation-rjzat8166w</loc>
<lastmod>2026-08-13T01:26:53.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/lazarus-exploits-windows-zero-day-to-gain-system-access-and-deploy-bac-vmilav1aoe</loc>
<lastmod>2026-08-12T17:39:27.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/microsoft-patch-tuesday-for-august-2026-snort-rules-and-prominent-vuln-13u3fnf60g</loc>
<lastmod>2026-08-11T22:21:02.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/737-chrome-vpn-extensions-caught-routing-traffic-through-proxies-check-1kq5utt9dn</loc>
<lastmod>2026-08-12T14:09:50.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/how-trail-of-bits-helps-verify-the-integrity-of-your-signal-chats-w9613h3cm9</loc>
<lastmod>2026-08-11T17:30:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/the-august-2026-security-update-review-xkqu2p1490</loc>
<lastmod>2026-08-11T17:56:34.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/kimwolf-v7-an-evolution-of-the-kimwolf-botnet-5ulf7ieflh</loc>
<lastmod>2026-08-11T10:00:16.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/microsoft-plugs-nearly-400-security-holes-7rks591es7</loc>
<lastmod>2026-08-11T21:28:35.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/the-permanent-threat-analyzing-aeternum-s-blockchain-based-c2-operatio-paxjbb1gfw</loc>
<lastmod>2026-08-10T22:00:02.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/project-cav3rn-continues-google-apps-script-as-c2-relay-and-dns-based-1ucpz2fmev</loc>
<lastmod>2026-08-11T10:00:19.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/microsoft-named-a-leader-in-the-2026-idc-marketscape-for-mdr-mxdr-for-pl1vwl1cgl</loc>
<lastmod>2026-08-10T16:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/deadlock-ransomware-breaking-down-a-rust-based-encryptor-with-decentra-d9b79ayo83</loc>
<lastmod>2026-08-10T15:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/inside-the-modern-soc-the-identity-front-door-1shybet2yp</loc>
<lastmod>2026-08-07T23:00:01.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/css-the-bomb-inside-your-inbox-1aqeurip9k</loc>
<lastmod>2026-08-06T22:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/crlf-powered-desync-attacks-beheading-http-streams-igxqg3n94l</loc>
<lastmod>2026-08-05T23:30:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/can-ai-do-novel-security-research-meet-the-http-terminator-1h4en0ruxw</loc>
<lastmod>2026-08-05T19:30:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/canadian-man-pleads-guilty-in-snowflake-extortions-16ojmcl1ki</loc>
<lastmod>2026-08-06T17:00:56.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/from-open-lures-to-cloaked-gates-how-a-macos-clickfix-campaign-learned-14gewingnp</loc>
<lastmod>2026-08-05T15:48:39.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/a-few-notes-on-aws-nitro-enclaves-kms-integration-i689441h6k</loc>
<lastmod>2026-08-05T11:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/the-july-2026-apple-security-update-review-1qwyvepxkw</loc>
<lastmod>2026-07-30T14:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/building-secure-uniswap-v4-hooks-1ij8ux1qu7</loc>
<lastmod>2026-07-30T11:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/pwn2own-ireland-2026-new-targets-and-categories-787zv21tbr</loc>
<lastmod>2026-07-21T17:23:48.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/a-0-click-exploit-chain-for-the-pixel-10-when-a-door-closes-a-window-o-kh8fjmiq3s</loc>
<lastmod>2026-05-13T07:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/on-the-effectiveness-of-mutational-grammar-fuzzing-1ove5209g9</loc>
<lastmod>2026-03-05T08:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/a-deep-dive-into-the-getprocesshandlefromhwnd-api-115zq48cm9</loc>
<lastmod>2026-02-26T08:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/sponsorship-cxpkvz1dwg</loc>
<lastmod>2022-09-10T21:07:30.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/writeups-2ihf7ont9w</loc>
<lastmod>2022-09-10T14:00:43.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/versions-17fkhae1vs</loc>
<lastmod>2021-09-24T06:50:23.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/cve-2026-33696-from-a-schema-name-to-rce-in-n8n-1hu9d3j1f6</loc>
<lastmod>2026-08-16T13:32:38.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/do-you-spend-the-most-time-hacking-on-public-or-private-programs-1r2arssjqg</loc>
<lastmod>2026-08-16T05:22:26.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/contextforge-dns-toctou-race-condition-causes-ssrf-protection-bypass-a-1h5ecvk129</loc>
<lastmod>2026-08-14T19:49:14.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/surrealdb-array-element-level-field-select-permissions-leak-denied-ele-si2hj41bdn</loc>
<lastmod>2026-08-14T19:40:48.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/finding-hidden-internal-apps-through-public-certificate-logs-1y4b6u067r</loc>
<lastmod>2026-08-15T13:39:43.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/you-re-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452-wa-1pciiwggc0</loc>
<lastmod>2026-08-14T07:10:17.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/certificate-transparency-monitoring-is-now-generally-available-7bs1ce12e2</loc>
<lastmod>2026-08-13T13:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/separating-ai-s-technological-problems-from-its-capitalism-problems-ceevr1xoti</loc>
<lastmod>2026-08-13T11:07:19.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/isc-stormcast-for-thursday-august-13th-2026-https-isc-sans-edu-podcast-r003fa17uu</loc>
<lastmod>2026-08-13T02:00:03.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/prompt-injections-for-defense-1y57d0w16f</loc>
<lastmod>2026-08-12T09:56:37.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/openai-anthropic-google-api-flaw-let-weaker-ai-models-decode-stronger-erfmsh10rs</loc>
<lastmod>2026-08-12T11:47:38.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/enterprise-defenses-recovered-at-the-edge-and-collapsed-inside-txoc5l1dbv</loc>
<lastmod>2026-08-12T11:41:34.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/linux-kernel-process-accounting-wed-aug-12th-s3yi7616qv</loc>
<lastmod>2026-08-12T14:21:10.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/head-mare-apt-is-exploiting-vulnerabilities-in-an-unpatched-trueconf-s-12k85da10w</loc>
<lastmod>2026-08-11T12:00:55.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/cloudflare-ddos-threat-report-h1-2026-1-tbps-attacks-soar-as-dns-flood-1dbaiare01</loc>
<lastmod>2026-08-11T13:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/it-threat-evolution-in-q2-2026-non-mobile-statistics-1ocf9c74uu</loc>
<lastmod>2026-08-10T10:00:37.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/chaindrop-inside-a-self-propagating-npm-worm-1lf4rdh1i5</loc>
<lastmod>2026-08-06T22:26:39.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/why-metaphor-may-dictate-your-security-strategy-1jkta0apbq</loc>
<lastmod>2026-08-06T18:00:01.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/token-jacking-cybercriminals-could-be-stealing-your-ai-resources-hekeua1v02</loc>
<lastmod>2026-08-06T10:00:49.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/microsoft-named-a-leader-in-the-kuppingercole-leadership-compass-for-c-13q7hdr1jj</loc>
<lastmod>2026-08-05T16:30:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/chaindrop-supply-chain-compromise-anatomy-of-a-self-propagating-worm-yepzx8czyw</loc>
<lastmod>2026-08-04T23:46:41.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/keep-going-bro-you-ve-got-this-a-data-driven-look-at-how-adversaries-a-xbpd6xlinn</loc>
<lastmod>2026-08-04T10:00:11.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/read-this-before-you-buy-that-tv-streaming-stick-sxbgnfk7sp</loc>
<lastmod>2026-07-30T16:49:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/how-we-use-goal-to-find-bugs-in-patch-the-planet-7exa2jhf0r</loc>
<lastmod>2026-07-28T11:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/lg-to-ban-residential-proxies-from-smart-tv-apps-1268gf4kud</loc>
<lastmod>2026-07-22T01:10:38.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/the-july-2026-security-update-review-yackte9ntl</loc>
<lastmod>2026-07-14T17:56:54.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/rust-proof-your-code-with-our-new-testing-handbook-chapter-6uewq81wp9</loc>
<lastmod>2026-07-13T11:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/cve-2026-47291-remote-code-execution-in-the-windows-http-sys-d481k2h4un</loc>
<lastmod>2026-07-10T14:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/bypassing-administrator-protection-by-abusing-ui-access-1ggrhji1oe</loc>
<lastmod>2026-02-12T08:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/breaking-the-sound-barrier-part-ii-exploiting-cve-2024-54529-6k78jao3lb</loc>
<lastmod>2026-01-30T08:00:00.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/top-10-web-hacking-techniques-of-2025-1i1bsiu953</loc>
<lastmod>2026-02-05T15:28:08.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/top-10-web-hacking-techniques-of-2025-call-for-nominations-1pyp3kbc94</loc>
<lastmod>2026-01-06T15:31:28.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/blog-15yc2871ho</loc>
<lastmod>2020-10-06T08:49:55.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://bugflare.site/articles/contact-nzgsp58k6y</loc>
<lastmod>2020-08-27T17:25:12.000Z</lastmod>
<changefreq>daily</changefreq>
<priority>0.7</priority>
</url>
</urlset>
