Bug Bytes #182 – Infosec twitter migrates to Mastodon, Google Pixel Lock Screen Bypass and Next-Gen Spidering with Katana

By travisintigriti

November 16, 2022

Last updated on August 8, 2026

Download

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources.

We’re running a survey about Bug Bytes: What do you think of Bug Bytes? Let us know!

This issue covers the weeks from November 7th until November 13th.

CLICK HERE TO SUBSCRIBE

Intigriti News

From my notebook

There has been some great blog posts this week but I think the whole community was wowed by the lock screen bypass on the Google Pixel and the new tool from project discovery Katana, promising a next-gen spidering tool. I’ve also included Awesome API security which has a ton of API resources, with bugs, how tos, tools and CTFs you can practice on.

  1. Accidental $70k Google Pixel Lock Screen Bypass

  2. SMS Multifactor Authentication in Antarctica

  3. Chaining Path Traversal with SSRF to disclose internal git repo data in a Bank Asset

  4. Katana – A next-generation crawling and spidering framework

  5. Awesome API security

Other Amazing Things

You may also like

August 28, 2026

Intigriti Bug Bytes #239 - August 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month's issue, we are featuring: Intigriti as the new provider for Adobe's Bug Bounty Program CSS injection as an attack vector inside your email inbox AI doing novel security research: the HTTP Terminator 169 offensive recon skills in one AI-ready

Read more

July 31, 2026

Intigriti Bug Bytes #238 - July 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Intigriti turns 10! RCE in GitHub.com and GitHub Enterprise Server Burp Suite going agentic with Burp AT Hacking Gemini Enterprise for $15,000 3,708 live credentials found by scanning GitHub Archive And so much mo

Read more

June 26, 2026

Intigriti Bug Bytes #237 - June 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month's issue, we are featuring: A 10-year-old pre-auth RCE in phpBB Earning $500K hacking Google with AI Reading any Salesforce Marketing Cloud account's emails New DOMPurify sanitizer bypass Mapping abandoned S3 buckets to redo SolarWinds at scal

Read more