Topic · 3 articles

pii

Intermediate level

Account enumeration via LinkedIn + phone — exposure of millions of users

Real case: API account enumeration combined with LinkedIn scraping + reverse phone lookups to correlate real identities with private accounts. Critical privacy impact.

14 minaccount-enumerationpiiprivacy

Read article

Free

URL shortener as a mass PII leak — extraction of ~300 people/hour

Low-entropy codes + no rate limiting + a ticket with no auth = enumeration of phone numbers, cards (BIN+last 4) and real customers' purchases.

11 mininformation-disclosurerate-limitingpii

Read article

Advanced level

Free

Mass PII Extraction via GraphQL — 93 real profiles in 1 hour

A contact-sync GraphQL endpoint with no rate limiting, no ownership verification and batching of 200 numbers per request. Phone → real identity resolution.

13 mingraphqlenumerationpii

Read article

Practice pii with real labs

Apply the techniques in safe environments based on real bug bounty reports.

See pii labs

All topics Academy

hunters training: 711
labs from real reports: 55
completions: 1,205
in bounties practiced: $213,970

46 flags captured this week·Real reports from HackerOne · Bugcrowd · Intigriti·No commitment·Free Academy

BBLabs · bug bounty training

Stop reading about bugs and start hunting them

Create your free account and practice on labs based on real reports that paid out thousands of euros. The Academy is free forever.

Create free account See the labs

No card · free Academy · cancel anytime