---
title: "Amr Elsagaei - Blog, page 3"
description: "Page 3 of the archive. Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be."
canonical_url: "https://amrelsagaei.com/blog/3"
meta:
  "og:description": "Page 3 of the archive. Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be."
  "og:title": "Amr Elsagaei - Blog, page 3"
---

# Blog

Write-ups on web application security: how each bug was found, what was tried before it worked, and what the fix turned out to be.

- ## [All You Need to Start Bug Bounty. The 3 Essentials](https://amrelsagaei.com/all-you-need-to-start-bug-bounty-the-3-essentials)

  You don't need fifty tools to start bug bounty. The three things that actually produce results: a platform, a proxy, and a lean Linux toolkit.
- ## [Hacking HubSpot | Live Bug Bounty Hunting](https://amrelsagaei.com/hacking-hubspot-live-bug-bounty-hunting)

  A live bug bounty session against HubSpot with no scripted recon, going straight into the app to show how a target breaks down from the inside.
- ## [Don’t Report Bugs. Chain Them.](https://amrelsagaei.com/dont-report-bugs-chain-them)

  A weak header, a loose CORS policy and a small injection are low alone. Chaining is how they turn critical, with a demo from HTML injection to RCE.
- ## [Stop Guessing. Start Hunting. (The Roadmap)](https://amrelsagaei.com/stop-guessing-start-hunting-the-roadmap)

  A path from beginner to paid bug bounty hunter: Linux and networking fundamentals, hands-on practice, structured training and private invites.
- ## [CORS Like You’ve Never Seen](https://amrelsagaei.com/cors-like-youve-never-seen)

  Wildcard origins, reflected origins and the WordPress API trap: the CORS misconfigurations that lead to account takeover, and how to spot them fast.
- ## [Forget Low-Hanging Fruit. Hunt These Instead](https://amrelsagaei.com/forget-low-hanging-fruit-hunt-these-instead)

  XSS and SQLi labs don't survive Cloudflare. The bug classes worth your time: account takeover, 2FA bypass, 403 bypass, API auth and privilege escalation.
- ## [Caido Masterclass – From Setup to Exploits](https://amrelsagaei.com/caido-masterclass-from-setup-to-exploits)

  A full Caido walkthrough, from first setup to real exploitation, and why this modern proxy has become a serious alternative to Burp Suite.
- ## [Hack. Hustle. Repeat. with NahamSec | SecMeet 0x04](https://amrelsagaei.com/hack-hustle-repeat-with-nahamsec-secmeet-0x04)

  SecMeet 0x04 with NahamSec on starting out in bug bounty, breaking through plateaus, going full-time, financial discipline and building a brand that lasts.
- ## [Full-Time Bug Hunting - with Rhynorater | SecMeet 0x03](https://amrelsagaei.com/full-time-bug-hunting-with-rhynorater-secmeet-0x03)

  SecMeet 0x03 with Justin Gardner (Rhynorater) on going full-time in bug bounty, the Caido versus Burp debate, and making no-fluff hacker content.

## Sitemap

See the full [sitemap](/sitemap.md) for all pages.