Never leave this tip while you hunting Broken Access Control

Leaking All Users Google Drive Files

Hacking Moodle Apps Via External Functions

Data Theft in Salesforce: Manipulating Public Links

When Certificates Fail: A Story of Bypassed MFA in Remote Access

SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff