Daily Bug Bounty Writeups by @Piyush Kumawat

This repository contains Bug Bounty writeups

• 💯October 13, 2026 - Password Login vs Password Reset: Which One Is the Real Authentication System?

• 💯October 13, 2026 - From Hall of Fame to My First $250: How a VDP Hunter Finally Got Paid

• 💯October 13, 2026 - How I Bypassed a Trusted URL Allowlist to Inject CSS and Trigger External Browser Requests

• 💯October 13, 2026 - How I Discovered 5,000+ Subdomains in Seconds Using Subfinder on Kali Linux

• 💯October 13, 2026 - Beyond Reflection: Eliminating False Positives in Cross-Site Scripting (XSS) with Context-Aware…

• 💯October 13, 2026 - How I Found a Bug Bounty Vulnerability That Let Me Remove Other Users’ Access

• 💯October 13, 2026 - Local Privilege Escalation via Keploy’s Log File

• 💯October 13, 2026 - I’ve Been Learning Bug Bounty for 6 Months. Here’s What Nobody Told Me About the Waiting.

• 💯October 13, 2026 - My First Bug Bounty Paid Nothing

• 💯October 13, 2026 - Local Privilege Escalation in Keploy’s Self-Updater