Bug Bytes #208 – Burp gets an update, Sharefile gets a CVE and JavaScript files get analysed

By travisintigriti

July 19, 2023

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources.

This issue covers the week from July 10th – July 16th

CLICK HERE TO SUBSCRIBE

Intigriti News

From my notebook

  1. Improve your API Security Testing with Burp BCheck Scripts

  2. Introducing jswzl: In-depth JavaScript analysis for web security testers

  3. Exploiting XSS in hidden inputs and meta tags

  4. Using MiTMProxy as a scriptable pre-proxy for BurpSuite

  5. Encrypted Doesn’t Mean Authenticated: ShareFile RCE (CVE-2023-24489)

You may also like

February 20, 2026

Intigriti Bug Bytes #233 - February 2026 🚀

Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring:  How a read-only Kubernetes permission turned into full cluster takeover AI agent autonomously finds a 1-click RCE  Race condition in blockchain infrastructure worth billions  Finding over 500 high-severity vul

Read more

January 16, 2026

Intigriti Bug Bytes #232 - January 2026 🚀

Welcome to the latest edition of Bug Bytes (and the first of 2026)! In this month’s issue, we’ll be featuring:  Hijacking official AWS GitHub repositories  New anonymous bug bounty forum  Finding more IDORs & SSRFs using a unique methodology  New JavaScript file scanner to find hidden endpoints 

Read more

December 18, 2025

Intigriti Bug Bytes #231 - December 2025 🚀

Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring:  React2Shell scanner (with WAF bypasses) Identifying server origin IP to bypass popular WAFs CSRF exploitation cheat sheet Finding vulnerabilities in sign-ups    And so much more! Let’s dive in! November’s In

Read more