Researchers’ blog

Subscribe to our RRS feed to stay up-to-date with our latest blog articles for researchers.

BugBytes #18 – Information disclosure on Shopify, Awesome Asset Discovery & How To Work Smarter Not Harder with Bug Bounty

Bug Bytes

Bug Bytes

May 14, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!

Continue reading: BugBytes #18 – Information disclosure on Shopify, Awesome Asset Discovery & How To Work Smarter Not Harder with Bug Bounty

Bug Bytes #17 – 5 Important Bug Bounty Tips by @stokfredrik & @jhaddix, @securinti Is Just Reading The Docs & the Intigriti XSS Challenge Write-ups

Bug Bytes

Bug Bytes

May 7, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!

Continue reading: Bug Bytes #17 – 5 Important Bug Bounty Tips by @stokfredrik & @jhaddix, @securinti Is Just Reading The Docs & the Intigriti XSS Challenge Write-ups

The XSS challenge that +100k people saw but only 90 solved

Company News

News

May 6, 2019

CHALLENGE: Can you find the XSS? 🧐 Earn a Burp License, cool swag & private invites! 👉https://t.co/EehqBfFmjA pic.twitter.com/sq8FIYgQOH — Intigriti (@intigriti) April 29, 2019 A couple of days ago we released a XSS challenge. A few hours after sending out the tweet, we noticed the success of this

Continue reading: The XSS challenge that +100k people saw but only 90 solved

Bug Bytes #16 – Session fixation on Shopify by @filedescriptor, Keyhacks & How to Hunt Bugs in SAML

Bug Bytes

Bug Bytes

April 30, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!

Continue reading: Bug Bytes #16 – Session fixation on Shopify by @filedescriptor, Keyhacks & How to Hunt Bugs in SAML

Bug Bytes #15 – New Content Discovery Wordlist, IDOR on Shopify & #askstok Bug Bounty live stream by @stokfredrik

Bug Bytes

Bug Bytes

April 23, 2019

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 05 to 12 of April. Content_discovery_nullenc0de.txt This is a new content discovery wordlist by @nullenc0de, to use for file & directory bruteforce with tools like dirsearch,

Continue reading: Bug Bytes #15 – New Content Discovery Wordlist, IDOR on Shopify & #askstok Bug Bounty live stream by @stokfredrik

Bug Bytes #14 – Better Exfiltration via HTML Injection by @donutptr, Dell KACE K1000 RCE by @MrTuxracer & BurpFeed

Bug Bytes

Bug Bytes

April 16, 2019

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 05 to 12 of April. Better Exfiltration via HTML Injection, tl;dr by @fransrosen & sic (Sequential Import Chaining tool) This is great example of how far collaboration can go

Continue reading: Bug Bytes #14 – Better Exfiltration via HTML Injection by @donutptr, Dell KACE K1000 RCE by @MrTuxracer & BurpFeed

Bug Bytes #13 – Shopify RCE, 0xpatrik’s interview & XSS in Google Search

Bug Bytes

Bug Bytes

April 9, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!

Continue reading: Bug Bytes #13 – Shopify RCE, 0xpatrik’s interview & XSS in Google Search

Bug Bytes #12 – IDOR on Yahoo by @JohnH4X00R, Abusing CORS & @OWASP’s talk on How to Win Big

Bug Bytes

Bug Bytes

April 2, 2019

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 22 to 29 of March. Bugbounty scope expanding This paste presents a set of recon steps to expand your bug bounty scope. All of them are well known and documented in most artic

Continue reading: Bug Bytes #12 – IDOR on Yahoo by @JohnH4X00R, Abusing CORS & @OWASP’s talk on How to Win Big

Bug Bytes #11 – Insecure Deeplinks, new XS-techniques and @int0x33 ‘s 365DaysOfPWN

Bug Bytes

Bug Bytes

March 26, 2019

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 15 to 22 of March. This is an awesome trick for any bug hunter who uses Chrome. You can create shortcuts to query sites like Shodan, VirusTotal, RiskIQ, etc. For instance, yo

Continue reading: Bug Bytes #11 – Insecure Deeplinks, new XS-techniques and @int0x33 ‘s 365DaysOfPWN

Bug Bytes #10 – Command Injection, Sublert by @yassineaboukir & Bypassing XSS Detection

Bug Bytes

Bug Bytes

March 19, 2019

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 8 to 15 of March. OWASP AppSec California 2019, especially: – An Attacker’s View of Serverless and GraphQL Apps & Slides – Endpoint Finder: A static analysis tool to find web

Continue reading: Bug Bytes #10 – Command Injection, Sublert by @yassineaboukir & Bypassing XSS Detection

Bug Bytes #9 – Hacking Web Sockets, $10k Facebook Bug by @vulnano & Automated Bug Hunting

Bug Bytes

Bug Bytes

March 12, 2019

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 1 to 8 of March. Rescope & Introduction Wow, I love this tool! Have you’ve ever experienced the discomfort of adding several targets one by one or playing with regexes to con

Continue reading: Bug Bytes #9 – Hacking Web Sockets, $10k Facebook Bug by @vulnano & Automated Bug Hunting

Bug Bytes #8 – XML External Entities, Awesome WAF and Vulnreport

Bug Bytes

Bug Bytes

March 5, 2019

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 22 of February to 1 of March. Top 10 Writing Mistakes in Cybersecurity and How You Can Avoid Them One of the first things I was told as a junior pentester was that writing a

Continue reading: Bug Bytes #8 – XML External Entities, Awesome WAF and Vulnreport

Bug Bytes #7 – Abusing bounces, LazyRecon and LiveOverflow’s definition of a vuln

Bug Bytes

Bug Bytes

February 26, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!

Continue reading: Bug Bytes #7 – Abusing bounces, LazyRecon and LiveOverflow’s definition of a vuln

Bug Bytes #6 -25k Facebook CSRF, how to get IDOR, a raise and more!

Bug Bytes

Bug Bytes

February 19, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!

Continue reading: Bug Bytes #6 -25k Facebook CSRF, how to get IDOR, a raise and more!

Bug Bytes #5 -Lazy Hackers, Stök’s blind XXE and Inception

Bug Bytes

Bug Bytes

February 12, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. You can sign

Continue reading: Bug Bytes #5 -Lazy Hackers, Stök’s blind XXE and Inception

Bug Bytes #4 – Misconfigured Jira’s, how to SSRF & DOM XSS challenge

Bug Bytes

Bug Bytes

February 5, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. You can sign

Continue reading: Bug Bytes #4 – Misconfigured Jira’s, how to SSRF & DOM XSS challenge

Bug Bytes #3

Bug Bytes

Bug Bytes

January 29, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. You can sign

Continue reading: Bug Bytes #3

Bug Bytes #2

Bug Bytes

Bug Bytes

January 23, 2019

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. You can sign

Continue reading: Bug Bytes #2

Introducing Bug Bytes, a newsletter curated by the community

Bug Bytes

Bug Bytes

January 17, 2019

The world of information security changes every day. As tools come out, write-ups are published and zero-days fly by, it can be a challenge to keep up with everything. That is why we are launching Bug Bytes, a newsletter curated by members of the bug bounty community. The first series will be curate

Continue reading: Introducing Bug Bytes, a newsletter curated by the community

Announcing Bug Bounty for Open Source Software

Company News

News

January 15, 2019

As announced by MEP Julia Reda at the end of 2018, and by the European Commission, intigriti and Deloitte are happy to announce that the most exciting cyber security challenge in Europe is about to start. As part of the EU FOSSA 2 project, managed by the European Commission, intigriti and Deloitte w

Continue reading: Announcing Bug Bounty for Open Source Software