Bug Bytes #190 – BBTips, Attacking Wide Scopes, AWS and Containers

By travisintigriti

January 18, 2023

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources.

This issue covers the weeks from January 9th to January 15th

CLICK HERE TO SUBSCRIBE

Intigriti News

From my notebook

The rough theme for this week is cloud security, honestly this is a must learn skill for bug bounty hunters in 2023, at least the basics of how to deploy to AWS. I’ve walked right past a valid AWS key without realising it, thankfully now I use TruffleHog if I’m looking at open source but it’s definitely a skill worth picking up even with tools.

  1. Beginners Guide to Container Security

  2. AWS Autoscaling Privilege Escalation | by notdodo

  3. HACKERS ARE HIJACKING WEBSITES!

  4. #NahamCon2022EU: Attacking Wide Scopes by @Hussein98d

  5. Critical Thinking – A Bug Bounty Podcast – Introductions, Bug Bounty Reports, and BB Tips

Other Amazing Things

You may also like

February 20, 2026

Intigriti Bug Bytes #233 - February 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring:  How a read-only Kubernetes permission turned into full cluster takeover AI agent autonomously finds a 1-click RCE  Race condition in blockchain infrastructure worth billions  Finding over 500 high-severity vul

Read more

January 16, 2026

Intigriti Bug Bytes #232 - January 2026 🚀

Welcome to the latest edition of Bug Bytes (and the first of 2026)! In this month’s issue, we’ll be featuring:  Hijacking official AWS GitHub repositories  New anonymous bug bounty forum  Finding more IDORs & SSRFs using a unique methodology  New JavaScript file scanner to find hidden endpoints 

Read more

December 18, 2025

Intigriti Bug Bytes #231 - December 2025 🚀

Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring:  React2Shell scanner (with WAF bypasses) Identifying server origin IP to bypass popular WAFs CSRF exploitation cheat sheet Finding vulnerabilities in sign-ups    And so much more! Let’s dive in! November’s In

Read more