Bug Bytes #204 – Everything You Missed From NahamCon

By travisintigriti

June 21, 2023

Last updated on August 8, 2026

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources.

This issue covers the week from June 12th to June 18th

Click here to subscribe

Intigriti News

From my notebook

So this week and weekend saw the return of NahamCon and there were some great talks on the main programme and the villages on Saturday, the talks are still being uploaded so we’ll update you when they’re all available but here’s what’s been released so far…

  1. #NahamCon2023: Bug Bounty Village | Free Workshops | !discord

  2. NahamCon x RTV 1 and NahamCon x RTV 2

  3. NahamCon CTF 2023: Web Challenge Walkthroughs

  4. Automation tricks for Burp Suite Pro – Agarri_FR

  5. Going Beyond Microsoft IIS Short File Name Disclosure – NahamCon 2023 Edition

  6. How to Properly Own API’s for Your First Valid Submission

  7. 🫢🤯😱 NAHAMCON 2023 🫢🤯😱

  8. Nahamcon [The Power of Shodan Leveraging Shodan for Critical Vulnerabilities]

You may also like

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Intigriti turns 10! RCE in GitHub.com and GitHub Enterprise Server Burp Suite going agentic with Burp AT Hacking Gemini Enterprise for $15,000 3,708 live credentials found by scanning GitHub Archive And so much mo

Read more

Welcome to the latest edition of Bug Bytes! In this month's issue, we are featuring: A 10-year-old pre-auth RCE in phpBB Earning $500K hacking Google with AI Reading any Salesforce Marketing Cloud account's emails New DOMPurify sanitizer bypass Mapping abandoned S3 buckets to redo SolarWinds at scal

Read more

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Earning $148K via RCE in Google Cloud How public Google API keys became Gemini credentials Our first official Burp Suite extension Two new bypasses for Chrome's Sanitizer API One-click account takeover from a sani

Read more