I Broke Proofsec With 3.3 Million Numbers #bugbounty
Alex Cybersecurity
Aug 22, 2026 12:45
Create an account to hide videos, mark them watched, or save them to Don't Miss.
Create an account to hide videos, mark them watched, or save them to Don't Miss.
Create an account to hide videos, mark them watched, or save them to Don't Miss.
What happens when you copy-paste an 800-page book (3.3 million characters) into a single input field?
In this Proofsec devlog, I tested an application-layer DoS on my own bug bounty platform. The payload broke the hacker POV: freezing network requests, breaking the UI layout, and lagging browser rendering.
Adding maxLength=5000 on the frontend isn't a security boundary, so I implemented strict server-side schema validation to drop oversized requests at the API gateway before they touch the database.
#cybersecurity #bugbounty #ethicalhacking #devlog #proofsec #webdevelopment #fullstack #nextjs #programming
Channel Memberships: Do you want exclusive videos and early access?
Support the channel and join our Premium community!
-------------------------------------------------------------------------------------------------------------------------
JOIN THE COMMUNITY:
Discord: https://discord.gg/dHhXmzaC2E
Instagram: https://instagram.com/alex.cybersecurity
-------------------------------------------------------------------------------------------------------------------------
Science & Technology
#Alex Cybersecurity
#ACS
#Alex Cybersec
#proofsec
#application layer dos
#bug bounty
#bug bounty platform
#web security
#ethical hacking
#devlog
#input validation
#client side vs server side
#full stack developer
#nextjs
#react rendering
#software engineering
#build in public
#hackerone
#bugcrowd
#api security
#denial of service