Bug Bytes #200 – AI Red Teaming, Firmware and Reverse Engineering, Prompt Injection Defence

By travisintigriti

May 17, 2023

Last updated on March 6, 2025

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources.

This issue covers the weeks from May 8th to May 14th

Click here to subscribe

Intigriti News

From my notebook

  1. I MADE $100,000 IN TWO MONTHS!

  2. 1 tip to improve your pentesting & bug bounty hunting

  3. My Internship Journey

  4. AI Village at DEF CON announces largest-ever public Generative AI Red Team

  5. Issue 219: Money Lover app exposes user data, most web API flaws missed by standard testing

You may also like

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Intigriti turns 10! RCE in GitHub.com and GitHub Enterprise Server Burp Suite going agentic with Burp AT Hacking Gemini Enterprise for $15,000 3,708 live credentials found by scanning GitHub Archive And so m

Read more

Welcome to the latest edition of Bug Bytes! In this month's issue, we are featuring: A 10-year-old pre-auth RCE in phpBB Earning $500K hacking Google with AI Reading any Salesforce Marketing Cloud account's emails New DOMPurify sanitizer bypass Mapping abandoned S3 buckets to redo SolarWinds at

Read more

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Earning $148K via RCE in Google Cloud How public Google API keys became Gemini credentials Our first official Burp Suite extension Two new bypasses for Chrome's Sanitizer API One-click account takeover from a

Read more