Researchers’ blog

Subscribe to our RRS feed to stay up-to-date with our latest blog articles for researchers.

Bug Bytes #68 – Memory leaks in webapps, @samwcyo’s Rocket League chain & JavaScript for Hackers

Bug Bytes

Bug Bytes

April 28, 2020

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensive list of write-ups, tools, tutorials and resources. This issue covers the week from 10 to 17

Continue reading: Bug Bytes #68 – Memory leaks in webapps, @samwcyo’s Rocket League chain & JavaScript for Hackers

Bug Bounty Q&A #3: What effort does is take to set up a bug bounty program?

Hacker Spotlight

Hacker Spotlight

April 23, 2020

Intigriti ceo Stijn Jans answers your questions about ethical hacking and bug bounty At Intigriti, we love a good conversation. You can find us on Twitter, LinkedIn and Facebook. If the situation permits, we attend events and conferences. When the conversation turns to ethical hacking and bug bounty

Continue reading: Bug Bounty Q&A #3: What effort does is take to set up a bug bounty program?

Bug Bytes #67 – Hacking Containers, Auth0 Bypass & @Hussein98d’s Methodologies

Bug Bytes

Bug Bytes

April 21, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #67 – Hacking Containers, Auth0 Bypass & @Hussein98d’s Methodologies

Bug Bytes #66 – Abusing Slack’s TURN, Breaking AWS & Azure & @spaceraccoonsec SQLi secrets

Bug Bytes

Bug Bytes

April 14, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #66 – Abusing Slack’s TURN, Breaking AWS & Azure & @spaceraccoonsec SQLi secrets

Bug Bounty Q&A #1: What is ethical hacking and bug bounty?

Hacker Spotlight

Hacker Spotlight

April 10, 2020

Intigriti ceo Stijn Jans answers your questions about ethical hacking and bug bounty At Intigriti, we love a good conversation. You can find us on Twitter, LinkedIn and Facebook. If the situation permits, we attend events and conferences. When the conversation turns to ethical hacking and bug bounty

Continue reading: Bug Bounty Q&A #1: What is ethical hacking and bug bounty?

Bug Bytes #65 – Hacking webcams, internal servicedesks & parsers

Bug Bytes

Bug Bytes

April 7, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #65 – Hacking webcams, internal servicedesks & parsers

Bug Bounty Q&A #2: Isn’t bug bounty only for large companies with large budgets?

Hacker Spotlight

Hacker Spotlight

April 2, 2020

intigriti ceo Stijn Jans answers your questions about ethical hacking and bug bounty At intigriti, we love a good conversation. You can find us on Twitter, LinkedIn and Facebook. If the situation permits, we attend events and conferences. When the conversation turns to ethical hacking and bug bounty

Continue reading: Bug Bounty Q&A #2: Isn’t bug bounty only for large companies with large budgets?

Bug Bytes #64 – Hacking Captcha’s, Unix-Style Testing & New Public Bounty

Bug Bytes

Bug Bytes

March 31, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #64 – Hacking Captcha’s, Unix-Style Testing & New Public Bounty

Bug Bytes #63 – Bruteforce With Selenium, XXE Through Request Smuggling & Bug Bounty Podcast

Bug Bytes

Bug Bytes

March 24, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #63 – Bruteforce With Selenium, XXE Through Request Smuggling & Bug Bounty Podcast

Bug Bytes #62 – Talks worth watching in self-quarantine, $6K Google and Slack bug and bug hunting tips

Bug Bytes

Bug Bytes

March 17, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #62 – Talks worth watching in self-quarantine, $6K Google and Slack bug and bug hunting tips

Bug Bytes #61 – Facebook Account Takeover, @thedawgyg’s Darknet Diaries and Bug Bounty Millionaire @inhibitor181

Bug Bytes

Bug Bytes

March 10, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #61 – Facebook Account Takeover, @thedawgyg’s Darknet Diaries and Bug Bounty Millionaire @inhibitor181

Bug Business #2 – Hacking, traveling and vlogging with @STÖK

Hacker Spotlight

Hacker Spotlight

March 9, 2020

Bug Business is a series of interviews in which experts from the bug bounty industry shine their light on bug types and trends. Fredrik Alexandersson — better known as STÖK, has become a bug bounty sensation in months. With 40.000 YouTube subscribers and 25.000 followers on Twitter, his fanbase is r

Continue reading: Bug Business #2 – Hacking, traveling and vlogging with @STÖK

Bug Bytes #60 - Bypassing AWS signing, @samwcyo’s secrets and WordPress leaks

Bug Bytes

Bug Bytes

March 5, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #60 - Bypassing AWS signing, @samwcyo’s secrets and WordPress leaks

Twitter Recap #2 – Polls by the Intigriti Community

Company News

News

February 27, 2020

As a community-driven platform, we build upon the insights and feedback from our valuable hackers. Over the past few months, we’ve asked our researcher community various questions concerning bug bounties, DevSecOps and infosecurity in general. Here are some key takeaways: Based on our research, a la

Continue reading: Twitter Recap #2 – Polls by the Intigriti Community

Bug Bytes #59 – Exploiting Insecure XML and ZIP File Parsers to Create a Web Shell, Low Competition Bug Hunting & RCE on Tesla

Bug Bytes

Bug Bytes

February 25, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #59 – Exploiting Insecure XML and ZIP File Parsers to Create a Web Shell, Low Competition Bug Hunting & RCE on Tesla

Twitter Recap #1 – Bug Bounty Tips by the Intigriti Community

Company News

News

February 24, 2020

Over the past years we have shared a lot of tips to help our readers in one way or another. Thinking outside the box or trying a different approach could be the defining factor in finding that one juicy bug! We dove deep into our archives and made a list out of all the Bug Bounty tips we posted up u

Continue reading: Twitter Recap #1 – Bug Bounty Tips by the Intigriti Community

Bug Bytes #58 – Live with @zseano, Mobile Hacking Cheatsheet & On Full-Time Bug Hunting

Bug Bytes

Bug Bytes

February 18, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #58 – Live with @zseano, Mobile Hacking Cheatsheet & On Full-Time Bug Hunting

Bug Bytes #57 – Th3G3nt3lman’s Secret Recon Methods, Checkmarx VS API’s & Vulns in React Native Apps

Bug Bytes

Bug Bytes

February 11, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #57 – Th3G3nt3lman’s Secret Recon Methods, Checkmarx VS API’s & Vulns in React Native Apps

Bug Bytes #56 – Pwning A Pwned Citrix, Upgrading Your Recon with Discord & Tip of the week by @jobertabma

Bug Bytes

Bug Bytes

February 5, 2020

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series is curated by Mariem, better known as PentesterLand. Every week, she keeps us up to date with a comprehensiv

Continue reading: Bug Bytes #56 – Pwning A Pwned Citrix, Upgrading Your Recon with Discord & Tip of the week by @jobertabma

Bug Business #1: Inside Logic Flaws with EdOverflow

Hacker Spotlight

Hacker Spotlight

February 3, 2020

Bug Business is a series of interviews in which experts from the bug bounty industry shine their light on bug types and trends. Edwin Foudil — aka EdOverflow — is not only known for his legendary frog profile picture, but also for his active contributions to the bug bounty community and his work on

Continue reading: Bug Business #1: Inside Logic Flaws with EdOverflow