bugbounty-learning-hub

bugbounty-learning-hub | by humaira924

This repo is my journey from zero to Microsoft MSRC & GitHub Security Researcher.

🎯 Current Focus: Microsoft Azure SDKs

I am currently researching vulnerabilities in:

• azure-sdk-for-python
• @azure/core-client
• Azure DevOps Pipelines

🔍 My MSRC Reports (Sep 2026)

| ID | Title | Status | |—|—|—| | 1 | Azure DevOps System.AccessToken Exposure | Under Review | | 2 | Critical RCE in azure-sdk-for-python | Under Review | | 3 | Prototype Pollution @azure/core-client | Under Review | | 4 | SSRF in @azure services | Fixed | | 5 | Info Disclosure in ClientSecretCredential | Under Review |

Note: Details will be published only after fix as per responsible disclosure.

🛠️ Learning Log

• Day 1-10: Learned POC creation for SSRF & RCE
• Day 11-20: Submitted 6 reports to MSRC
• Next: Writing public writeups after fix

📫 Contact

Found something? Let’s connect: [Your LinkedIn / Twitter]

---

Disclaimer: All findings reported responsibly to vendors first.