Telegram-Kanal "The Bug Bounty Hunter"

The Bug Bounty Hunter

Public

Attentions : It important to do your own research before placing your trust in any information, particularly if there's a request for money involved.

Can't Join? @thebugbountyhunter

45.1k Members

Updated: March 13, 2026 at 2:24 PM

The Bug Bounty Hunter

Happy hunting! thebugbountyhunter.com [email protected]

Follow @thebugbountyhunter to stay updated with the latest thebugbountyhuntercom and hunting trends and news

Ranking

Global Ranking

#5569

Language Ranking

#1168

Category Ranking

#21No change

Participant Growth (Last 30 Days)

Total: 45.1K

24h growth: -34 0%

Latest Posts

The Bug Bounty Hunter

13. März 2026, 00:28

📷 Photo

Understanding and Experimenting with Apple's Pointer Authentication Codes (PAC) on iOS
https://blog.reversesociety.co/blog/2026/pointer-authentication-code-for-ios

8,270

The Bug Bounty Hunter

13. März 2026, 00:28

GatewayToHeaven: Finding a Cross-Tenant Vulnerability in GCP's Apigee

https://omeramiad.com/posts/gatewaytoheaven-gcp-cross-tenant-vulnerability/

8,830

The Bug Bounty Hunter

13. März 2026, 00:28

Evaluating and mitigating the growing risk of LLM-discovered 0-days

https://red.anthropic.com/2026/zero-days/

7,980

The Bug Bounty Hunter

13. März 2026, 00:28

Cloudflare Zero-day: Accessing Any Host Globally

https://fearsoff.org/research/cloudflare-acme

14,100

The Bug Bounty Hunter

13. März 2026, 00:28

Iframe Sandbox Trick
Triggering Authentication Dialogs Without allow-popups

https://phor3nsic.github.io/2026/01/21/trick-iframe-sandbox.html

11,900

The Bug Bounty Hunter

13. März 2026, 00:28

Leaking the phone number of any Google user

https://brutecat.com/articles/leaking-google-phones

9,990

The Bug Bounty Hunter

13. März 2026, 00:28

Compromising a NASDAQ Financial Giant

https://estse.github.io/posts/compromising-a-nasdaq-financial-giant/

10,500

The Bug Bounty Hunter

13. März 2026, 00:28

Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK

https://ysamm.com/uncategorized/2026/01/17/math-random-facebook-sdk.html

11,100

The Bug Bounty Hunter

13. März 2026, 00:28

Instagram account takeover via Meta Pixel script abuse

https://ysamm.com/uncategorized/2026/01/16/leaking-fbevents-ato.html

9,150

The Bug Bounty Hunter

13. März 2026, 00:28

Leaking Meta FXAuth Token leading to 2 click Account Takeover

https://ysamm.com/uncategorized/2026/01/16/leaking-fxauth-token.html

10,400

The Bug Bounty Hunter

9. März 2026, 20:48

Two-click Facebook account takeover via FXAuth token and blob theft

https://ysamm.com/uncategorized/2026/01/15/steal-fxauth-leads-instagram-ato.html

6,850

The Bug Bounty Hunter

9. März 2026, 20:48

Multiple cross-site leaks disclosing Facebook users in third-party websites

https://ysamm.com/uncategorized/2026/01/16/cross-site-leaks.html

7,960

The Bug Bounty Hunter

9. März 2026, 20:48

Datr cookie theft and AI leads to Facebook account takeover via trusted device recovery

https://ysamm.com/uncategorized/2026/01/15/steal-dtsg-cookie.html

6,200

The Bug Bounty Hunter

8. März 2026, 07:34

Self-XSS in Facebook payments flow leads to Instagram and Facebook account takeovers

https://ysamm.com/uncategorized/2026/01/15/self-xss-facebook-payments.html

5,920

The Bug Bounty Hunter

2. März 2026, 02:24

Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover

https://ysamm.com/uncategorized/2026/01/13/capig-xss.html

5,570

The Bug Bounty Hunter

23. Feb. 2026, 03:28

Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover

https://ysamm.com/uncategorized/2025/01/13/capig-xss.html

5,710

The Bug Bounty Hunter

16. Feb. 2026, 07:17

Burp MCP Agents
Practical setup guides and helpers to connect Burp Suite MCP Server to multiple AI backends

https://github.com/six2dez/burp-mcp-agents

6,390

The Bug Bounty Hunter

9. Feb. 2026, 22:55

Burp MCP + Codex CLI
This guide shows how to connect Burp Suite MCP Server to Codex CLI so that Codex can reason directly on your real HTTP traffic — no API keys, no scanning, no fuzzing.

https://pentestbook.six2dez.com/others/burp#burp-mcp?codex-cli

6,440

The Bug Bounty Hunter

6. Feb. 2026, 07:26

Droid LLM Hunter is a tool to scan for vulnerabilities in Android applications using Large Language Models (LLMs)
https://github.com/roomkangali/droid-llm-hunter

4,770

The Bug Bounty Hunter

6. Feb. 2026, 07:26

Two CVEs, Zero Ego: A Mailpit Story

https://rosecurify.com/two-cves-zero-ego-a-mailpit-story/

4,830

The Bug Bounty Hunter

4. Feb. 2026, 12:10

Arista Firewall XSS to RCE Chain

https://bishopfox.com/blog/arista-nextgen-firewall-xss-to-rce-chain

4,630

The Bug Bounty Hunter

2. Feb. 2026, 19:38

Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691)

https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/

5,040

The Bug Bounty Hunter

30. Jan. 2026, 09:29

Case study: How Libya’s Leading Host - Libyan Spider - Blocked 65k+ Threats with Patchstack - Patchstack

https://patchstack.com/articles/case-study-how-libyas-leading-host-libyan-spider-blocked-65k-threats-with-patchstack/

4,580

The Bug Bounty Hunter

6. Dez. 2025, 10:56

InQL v6.1.0 Just Landed with New Features and Contribution Swag! 🚀 · Doyensec's Blog

https://blog.doyensec.com/2025/12/02/inql-v610.html

2,250

The Bug Bounty Hunter

6. Dez. 2025, 10:56

Reverse engineering Bluetooth on Amazon Kindle eReaders
https://sighery.com/posts/reverse-engineering-bluetooth-on-kindle-ereaders/

2,090

The Bug Bounty Hunter

6. Dez. 2025, 10:56

[Beginners] All About Android Pentesting: A Complete Methodology
https://xcheater.medium.com/all-about-android-pentesting-f047b7c7e0f1

2,380

The Bug Bounty Hunter

6. Dez. 2025, 10:56

PortSwigger x TryHackMe: Supporting Advent of Cyber

https://portswigger.net/blog/portswigger-x-tryhackme-supporting-advent-of-cyber

3,020

The Bug Bounty Hunter

6. Dez. 2025, 10:56

SonarQube Compare Community vs Developer vs Enterprise vs Data Center

https://www.sonarsource.com/blog/sonarqube-compare-editions/

3,100

The Bug Bounty Hunter

6. Dez. 2025, 10:56

https://octayus.com/blog/DependencyConfusionRCE

2,690

The Bug Bounty Hunter

6. Dez. 2025, 10:56

How AI is leveraged to enhance the Intigriti platform.

https://www.intigriti.com/blog/news/how-ai-is-leveraged-to-enhance-the-intigriti-platform

2,690

Showing 30 of 91 posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

The Bug Bounty Hunter

Happy hunting! thebugbountyhunter.com [email protected]

Follow @thebugbountyhunter to stay updated with the latest thebugbountyhuntercom and hunting trends and news

Ranking

Global Ranking

#5569

Language Ranking

#1168

Category Ranking

#21No change

Participant Growth (Last 30 Days)

Total: 45.1K

24h growth: -34 0%

Latest Posts

The Bug Bounty Hunter

13. März 2026, 00:28

📷 Photo

Understanding and Experimenting with Apple's Pointer Authentication Codes (PAC) on iOS
https://blog.reversesociety.co/blog/2026/pointer-authentication-code-for-ios

8,270

The Bug Bounty Hunter

13. März 2026, 00:28

GatewayToHeaven: Finding a Cross-Tenant Vulnerability in GCP's Apigee

https://omeramiad.com/posts/gatewaytoheaven-gcp-cross-tenant-vulnerability/

8,830

The Bug Bounty Hunter

13. März 2026, 00:28

Evaluating and mitigating the growing risk of LLM-discovered 0-days

https://red.anthropic.com/2026/zero-days/

7,980

The Bug Bounty Hunter

13. März 2026, 00:28

Cloudflare Zero-day: Accessing Any Host Globally

https://fearsoff.org/research/cloudflare-acme

14,100

The Bug Bounty Hunter

13. März 2026, 00:28

Iframe Sandbox Trick
Triggering Authentication Dialogs Without allow-popups

https://phor3nsic.github.io/2026/01/21/trick-iframe-sandbox.html

11,900

The Bug Bounty Hunter

13. März 2026, 00:28

Leaking the phone number of any Google user

https://brutecat.com/articles/leaking-google-phones

9,990

The Bug Bounty Hunter

13. März 2026, 00:28

Compromising a NASDAQ Financial Giant

https://estse.github.io/posts/compromising-a-nasdaq-financial-giant/

10,500

The Bug Bounty Hunter

13. März 2026, 00:28

Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK

https://ysamm.com/uncategorized/2026/01/17/math-random-facebook-sdk.html

11,100

The Bug Bounty Hunter

13. März 2026, 00:28

Instagram account takeover via Meta Pixel script abuse

https://ysamm.com/uncategorized/2026/01/16/leaking-fbevents-ato.html

9,150

The Bug Bounty Hunter

13. März 2026, 00:28

Leaking Meta FXAuth Token leading to 2 click Account Takeover

https://ysamm.com/uncategorized/2026/01/16/leaking-fxauth-token.html

10,400

The Bug Bounty Hunter

9. März 2026, 20:48

Two-click Facebook account takeover via FXAuth token and blob theft

https://ysamm.com/uncategorized/2026/01/15/steal-fxauth-leads-instagram-ato.html

6,850

The Bug Bounty Hunter

9. März 2026, 20:48

Multiple cross-site leaks disclosing Facebook users in third-party websites

https://ysamm.com/uncategorized/2026/01/16/cross-site-leaks.html

7,960

The Bug Bounty Hunter

9. März 2026, 20:48

Datr cookie theft and AI leads to Facebook account takeover via trusted device recovery

https://ysamm.com/uncategorized/2026/01/15/steal-dtsg-cookie.html

6,200

The Bug Bounty Hunter

8. März 2026, 07:34

Self-XSS in Facebook payments flow leads to Instagram and Facebook account takeovers

https://ysamm.com/uncategorized/2026/01/15/self-xss-facebook-payments.html

5,920

The Bug Bounty Hunter

2. März 2026, 02:24

Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover

https://ysamm.com/uncategorized/2026/01/13/capig-xss.html

5,570

The Bug Bounty Hunter

23. Feb. 2026, 03:28

Multiple XSS in Meta Conversion API Gateway Leading to Zero-Click Account Takeover

https://ysamm.com/uncategorized/2025/01/13/capig-xss.html

5,710

The Bug Bounty Hunter

16. Feb. 2026, 07:17

Burp MCP Agents
Practical setup guides and helpers to connect Burp Suite MCP Server to multiple AI backends

https://github.com/six2dez/burp-mcp-agents

6,390

The Bug Bounty Hunter

9. Feb. 2026, 22:55

Burp MCP + Codex CLI
This guide shows how to connect Burp Suite MCP Server to Codex CLI so that Codex can reason directly on your real HTTP traffic — no API keys, no scanning, no fuzzing.

https://pentestbook.six2dez.com/others/burp#burp-mcp?codex-cli

6,440

The Bug Bounty Hunter

6. Feb. 2026, 07:26

Droid LLM Hunter is a tool to scan for vulnerabilities in Android applications using Large Language Models (LLMs)
https://github.com/roomkangali/droid-llm-hunter

4,770

The Bug Bounty Hunter

6. Feb. 2026, 07:26

Two CVEs, Zero Ego: A Mailpit Story

https://rosecurify.com/two-cves-zero-ego-a-mailpit-story/

4,830

The Bug Bounty Hunter

4. Feb. 2026, 12:10

Arista Firewall XSS to RCE Chain

https://bishopfox.com/blog/arista-nextgen-firewall-xss-to-rce-chain

4,630

The Bug Bounty Hunter

2. Feb. 2026, 19:38

Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691)

https://labs.watchtowr.com/do-smart-people-ever-say-theyre-smart-smartertools-smartermail-pre-auth-rce-cve-2025-52691/

5,040

The Bug Bounty Hunter

30. Jan. 2026, 09:29

Case study: How Libya’s Leading Host - Libyan Spider - Blocked 65k+ Threats with Patchstack - Patchstack

https://patchstack.com/articles/case-study-how-libyas-leading-host-libyan-spider-blocked-65k-threats-with-patchstack/

4,580

The Bug Bounty Hunter

6. Dez. 2025, 10:56

InQL v6.1.0 Just Landed with New Features and Contribution Swag! 🚀 · Doyensec's Blog

https://blog.doyensec.com/2025/12/02/inql-v610.html

2,250

The Bug Bounty Hunter

6. Dez. 2025, 10:56

Reverse engineering Bluetooth on Amazon Kindle eReaders
https://sighery.com/posts/reverse-engineering-bluetooth-on-kindle-ereaders/

2,090

The Bug Bounty Hunter

6. Dez. 2025, 10:56

[Beginners] All About Android Pentesting: A Complete Methodology
https://xcheater.medium.com/all-about-android-pentesting-f047b7c7e0f1

2,380

The Bug Bounty Hunter

6. Dez. 2025, 10:56

PortSwigger x TryHackMe: Supporting Advent of Cyber

https://portswigger.net/blog/portswigger-x-tryhackme-supporting-advent-of-cyber

3,020

The Bug Bounty Hunter

6. Dez. 2025, 10:56

SonarQube Compare Community vs Developer vs Enterprise vs Data Center

https://www.sonarsource.com/blog/sonarqube-compare-editions/

3,100

The Bug Bounty Hunter

6. Dez. 2025, 10:56

https://octayus.com/blog/DependencyConfusionRCE

2,690

The Bug Bounty Hunter

6. Dez. 2025, 10:56

How AI is leveraged to enhance the Intigriti platform.

https://www.intigriti.com/blog/news/how-ai-is-leveraged-to-enhance-the-intigriti-platform

2,690

Showing 30 of 91 posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

Related Telegram Channels

Loading recommended channels...

Related Telegram Channels

Адвент-календарь Sascha & Deutsch 2025

2100

DRESDEN-GEDENKEN 2026 #DRESDEN26

4.3k0

Германия.Экономика

7550

Ihr DACH

1550

Artem Sokolov | Deutschland

880

Артем Соколов || German Wings

3k0

MitteldeutschlandTV

11.9k0

OVALmedia | Deutsch

23.3k0

Loading recommended channels...

The Bug Bounty Hunter

The Bug Bounty Hunter

Ranking

Participant Growth (Last 30 Days)

Latest Posts

Rating

User Reviews (0)

The Bug Bounty Hunter

Ranking

Participant Growth (Last 30 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

Адвент-календарь Sascha & Deutsch 2025

**DRESDEN-GEDENKEN 2026** #DRESDEN26

Германия.Экономика

Ihr DACH

Artem Sokolov | Deutschland

Артем Соколов || German Wings

MitteldeutschlandTV

OVALmedia | Deutsch

Related Telegram Channels

Адвент-календарь Sascha & Deutsch 2025

**DRESDEN-GEDENKEN 2026** #DRESDEN26

Германия.Экономика

Ihr DACH

Artem Sokolov | Deutschland

Артем Соколов || German Wings

MitteldeutschlandTV

OVALmedia | Deutsch

Latest Posts

Latest Posts

Related Telegram Channels

Адвент-календарь Sascha & Deutsch 2025

**DRESDEN-GEDENKEN 2026** #DRESDEN26

Германия.Экономика

Ihr DACH

Artem Sokolov | Deutschland

Артем Соколов || German Wings

MitteldeutschlandTV

OVALmedia | Deutsch

Related Telegram Channels

Адвент-календарь Sascha & Deutsch 2025

**DRESDEN-GEDENKEN 2026** #DRESDEN26

Германия.Экономика

Ihr DACH

Artem Sokolov | Deutschland

Артем Соколов || German Wings

MitteldeutschlandTV

OVALmedia | Deutsch

User Reviews (0)

User Reviews (0)

DRESDEN-GEDENKEN 2026 #DRESDEN26

DRESDEN-GEDENKEN 2026 #DRESDEN26

DRESDEN-GEDENKEN 2026 #DRESDEN26

DRESDEN-GEDENKEN 2026 #DRESDEN26