Daily Bug Bounty Writeups by @Piyush Kumawat

This repository contains Bug Bounty writeups

• 💯January 5, 2026 - YARA Rule Cheatsheet: 20 Malware Sample Patterns Every Threat Hunter Should Know

• 💯January 5, 2026 - Faster Ways to Find Open Redirect Vulnerabilities (With Automation)

• 💯January 5, 2026 - Account Takeover via IDOR in GraphQL Invitation Flow

• 💯January 4, 2026 - What You’ll Learn After Gaining Your 1'st Hacking Certifcate? | Certificated Hacker’s Roadmap #1

• 💯January 4, 2026 - Insecure Direct Object Reference (IDOR)

• 💯January 4, 2026 - The Right Methodology for Hacking Anything

• 💯January 4, 2026 - Deep-Dive PII Hunting & Validation Techniques (Part 2/3)

• 💯January 4, 2026 - Burp Suite said “Critical”, Chrome said “Nope”: My ~$1,000 Mistake

• 💯January 4, 2026 - Lab: CORS vulnerability with basic origin reflection(Portswigger Labs)

• 💯January 4, 2026 - The Bug Bounty Hunter Making $500K/Year Without a CS Degree