Bug Bytes #207 - IIS, LLMs and iOS

By travisintigriti

July 12, 2023

Last updated on June 13, 2025

Download

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources.

This issue covers the week from July 3rd – July 9th

Intigriti News

From my notebook

  1. How to Write Great Bug Bounty Reports

  2. 303-iOS Privacy & Security

  3. Hunting for Bitwarden master passwords stored in memory | Red Maple Technologies

  4. Beyond Microsoft IIS Short File Name Disclosure

  5. OWASP Top 10 for Large Language Model Applications

Join 125,000+ Security Researchers Getting Monthly Bug Bounty Tips & Insights!

Subscribe Now

You may also like

June 26, 2026

Intigriti Bug Bytes #237 - June 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month's issue, we are featuring: A 10-year-old pre-auth RCE in phpBB Earning $500K hacking Google with AI Reading any Salesforce Marketing Cloud account's emails New DOMPurify sanitizer bypass Mapping abandoned S3 buckets to redo SolarWinds at

Read more

May 30, 2026

Intigriti Bug Bytes #236 - May 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Earning $148K via RCE in Google Cloud How public Google API keys became Gemini credentials Our first official Burp Suite extension Two new bypasses for Chrome's Sanitizer API One-click account takeover from a

Read more

April 24, 2026

Intigriti Bug Bytes #235 - April 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring:   Compromising an NPM package with 40M weekly downloads Bypassing Cloudflare WAF for a full ATO 20-part series on exploiting JWT vulnerabilities First Intigriti Bug Bounty Meetup And so much more! Let's dive

Read more