Update: The Ending of My $500 Loss and Web Cache Poisoning Story. In my previous article, I published a story about how losing $500 unexpectedly led me back to a Web Cache Poisoning vulnerability …

InfoSecWriteUps' platform is  dedicated to providing insights and resources for cybersecurity professionals and enthusiasts. Through articles, tutorials, and security research, InfoSecWriteUps offers insights into cybersecurity vulnerabilities, attack techniques, and defense strategies. Readers can learn about penetration testing, threat intelligence, and incident response to enhance their cybersecurity knowledge and skills.

InfoSec Write-ups

A follow-up to a previous bug bounty story involving a $500 unauthorized charge and a web cache poisoning vulnerability discovery. The account tied to the unexpected charge was eventually deactivated, and the disputed funds were returned via the bank's chargeback process. The cache poisoning bug turned out to be a duplicate, so no bounty was awarded. The author reflects on the realities of bug bounty hunting — duplicate reports, financial setbacks, and the importance of persistence despite outcomes that don't always end in a payout.