Bug Bytes #188 – Hello 2023!
By travisintigriti
January 3, 2023
Last updated on August 8, 2026
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources.
This issue covers the weeks from December 26th until January 1st.
Intigriti News
From my notebook
Happy 2023! As hackers around the world rang in the new year we saw many recap their 2022 or look towards 2023 with new goals. With that in mind I’ve brought together some resources on the theme of learning new skills in the new year, for me I really want to develop new technical skills, at are you looking to learn in 2023?
JNDI Injection Series: RMI Vector — 1, JNDI Injection Series: RMI Vector — Dynamic Class Loading From Remote URL
Difficulty of Reproducing Old Exploits and Difficulty of Reproducing Old Exploits (Part Two)
Other Amazing Things
Can ChatGPT Solve Cyber Capture The Flag Puzzles? (Live Event Testing)
How I scale my containerized bug bounty automation! (Automation Series)
What advice would you give your younger self about cyber security
MrTuxracer’s Bug Bounty recap, mcipekci’s recap, harshbothra reviews his educational resources and another from haxor31337
Best bug found in 2022?, what type of bugs did you find in 2022 and what is going to be big in 2023
Endpoint Security: The Protection Mechanism of Web Application and Networks
Efficient methodology to get P2 level – subdomain takeover vulnerability
How I Design My Prefect Bug Bounty Automation (1), How I Design My Prefect Bug Bounty Automation(2) and How I Design My Prefect Bug Bounty Automation(3)
!00 Complex terms related to Bug Bounty Explained for a Newbie
Spice up your persistence: loading PHP extensions from memory
Diving into an Old Exploit Chain and Discovering 3 new SIP-Bypass Vulnerabilities
Tautulli 2.1.9 version; Cross-Site Request Forgery (ShutDown) and Denial of Service (Metasploit)
LDAP anonymous login story of my 3 simple P3 findings in DHS
Unauthorized Sign-up on Subdomain of Subdomain leading to Organization takeover worth $2000
How Capabilities actually Work ? | Exploitation | Privilege Escalation
How I got a Bug At Apple that lead’s to takeover accounts of any user who view my profile
Account Takeover Due to Cognito Misconfiguration Earns Me €xxxx
OSINT Case Study: Validating a website if its fraud or legit
CVE-2022-38627: A journey through SQLite Injection to compromise the whole enterprise building
My report on how the admin panel took over and I got X, $500 bounty from my report Hello hackers,
Advent of Cyber 2022 [Day 1 — Day 24] All Challenges Walkthrough and Writeups with Answers
DOM XSS Using Web Messages (Practioner) — Portswigger Lab 1 | Solution and Approach
Compromising a vulnerable GCP, INE-Labs GCPGoat walkthrough. Part-1 / Compromising a vulnerable GCP, INE-Labs GCPGoat walkthrough. Part-2
You may also like
July 31, 2026
Intigriti Bug Bytes #238 - July 2026 🚀
Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Intigriti turns 10! RCE in GitHub.com and GitHub Enterprise Server Burp Suite going agentic with Burp AT Hacking Gemini Enterprise for $15,000 3,708 live credentials found by scanning GitHub Archive And so much mo
June 26, 2026
Intigriti Bug Bytes #237 - June 2026 🚀
Welcome to the latest edition of Bug Bytes! In this month's issue, we are featuring: A 10-year-old pre-auth RCE in phpBB Earning $500K hacking Google with AI Reading any Salesforce Marketing Cloud account's emails New DOMPurify sanitizer bypass Mapping abandoned S3 buckets to redo SolarWinds at scal
May 30, 2026
Intigriti Bug Bytes #236 - May 2026 🚀
Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Earning $148K via RCE in Google Cloud How public Google API keys became Gemini credentials Our first official Burp Suite extension Two new bypasses for Chrome's Sanitizer API One-click account takeover from a sani