Daily Bug Bounty Writeups by @Piyush Kumawat

This repository contains Bug Bounty writeups

• 💯December 20, 2025 - GraphQL Hacking Toolkit 2025: 20 Commands & Payloads Every Pentester Should Master

• 💯December 20, 2025 - From Curiosity to Cash: How I Bypassed 2FA and Earned $300!

• 💯December 20, 2025 - I’m Zer0Figure — Exploring Security One Vulnerability at a Time

• 💯December 20, 2025 - Improper SVG Handling in AI Generated Output

• 💯December 20, 2025 - Analysis of Sensitive Information Vulnerability in Public XML Files

• 💯December 19, 2025 - Unauthorized access to any presentation at Dropbox

• 💯December 19, 2025 - How I Found an Unauthenticated XXE That Allowed Arbitrary File Read in NASA

• 💯December 19, 2025 - Information disclosure, but not in the way you might expect

• 💯December 19, 2025 - CVE-2025–67418: When Default Credentials Become a Remote Root Button

• 💯December 19, 2025 - Recon Fatigue Is Real — Until This One URL Paid My Rent