Bug Bytes #182 – Infosec twitter migrates to Mastodon, Google Pixel Lock Screen Bypass and Next-Gen Spidering with Katana

By travisintigriti

November 16, 2022

Last updated on March 6, 2025

Download

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources.

We’re running a survey about Bug Bytes: What do you think of Bug Bytes? Let us know!

This issue covers the weeks from November 7th until November 13th.

CLICK HERE TO SUBSCRIBE

Intigriti News

From my notebook

There has been some great blog posts this week but I think the whole community was wowed by the lock screen bypass on the Google Pixel and the new tool from project discovery Katana, promising a next-gen spidering tool. I’ve also included Awesome API security which has a ton of API resources, with bugs, how tos, tools and CTFs you can practice on.

  1. Accidental $70k Google Pixel Lock Screen Bypass

  2. SMS Multifactor Authentication in Antarctica

  3. Chaining Path Traversal with SSRF to disclose internal git repo data in a Bank Asset

  4. Katana – A next-generation crawling and spidering framework

  5. Awesome API security

Other Amazing Things

You may also like

April 24, 2026

Intigriti Bug Bytes #235 - April 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring:   Compromising an NPM package with 40M weekly downloads Bypassing Cloudflare WAF for a full ATO 20-part series on exploiting JWT vulnerabilities First Intigriti Bug Bounty Meetup And so much more! Let's dive

Read more

March 27, 2026

Intigriti Bug Bytes #234 - March 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring:   Earning $180K via SSRFs Free Burp Suite Pro licenses for top hackers  Bypassing tricky file upload restrictions Injecting malicious code into AI coding assistants And so much more! Let’s dive in! We've team

Read more

February 20, 2026

Intigriti Bug Bytes #233 - February 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring:  How a read-only Kubernetes permission turned into full cluster takeover AI agent autonomously finds a 1-click RCE  Race condition in blockchain infrastructure worth billions  Finding over 500 high-severity vul

Read more