PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Disclosing YouTube Creator Emails for a $20k Bounty

brutecat.com | blog | #bug-bounty | #information-disclosure | #api-security | #youtube | #google | #content-id
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Dumping hidden parameters in a YouTube Studio endpoint via error-based schema leaks exposed Content Manager data tied to Content ID, revealing private email addresses of monetized creators.
Published
Collected

Related coverage

blog · labs.cognisys.group
Keys to the Kingdom Live Stripe Credentials Exposed via Unauthenticated OAuth Endpoint
There is a particular category of finding that stops you mid-test. Not because it is technically complex, but because of what you are looking at. A single unauthenticated GET request that returns live payment credentials for a platform processing real customer transactions is one such finding.
blog · bughunters.google.com
ESCAL8 2026: Agentic Hacking in the Lion City
Check out this post to learn more about ESCAL8 2026, Google’s annual flagship security conference, coming to Singapore from October 23–25, 2026!
blog · bughunters.google.com
Breaking into Google's GFile for $100k
This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.
blog · bughunters.google.com
Scaling Memory Safety: AI-Assisted Rewrites of C/C++ Dependencies to Rust
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · bughunters.google.com
More Cryptanalysis Makes Us All Safer
This post analyzes results published by Anthropic and argues that these recent advances do not signal the downfall of cryptography.
blog · portswigger.net
Burp Suite tips from power user and "hackfluencer" Stök
YouTuber and long-time Burp Suite fan Stök shares how he got into web security and offers practical tips for beginners, from mastering the basics to using Intruder and Repeater effectively.
Back