Researchers’ blog
Subscribe to our RRS feed to stay up-to-date with our latest blog articles for researchers.
BugBytes #18 – Information disclosure on Shopify, Awesome Asset Discovery & How To Work Smarter Not Harder with Bug Bounty
Bug Bytes
May 14, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!
Bug Bytes #17 – 5 Important Bug Bounty Tips by @stokfredrik & @jhaddix, @securinti Is Just Reading The Docs & the Intigriti XSS Challenge Write-ups
Bug Bytes
May 7, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!
The XSS challenge that +100k people saw but only 90 solved
News
May 6, 2019
CHALLENGE: Can you find the XSS? 🧐 Earn a Burp License, cool swag & private invites! 👉https://t.co/EehqBfFmjA pic.twitter.com/sq8FIYgQOH — Intigriti (@intigriti) April 29, 2019 A couple of days ago we released a XSS challenge. A few hours after sending out the tweet, we noticed the success of this
Bug Bytes #16 – Session fixation on Shopify by @filedescriptor, Keyhacks & How to Hunt Bugs in SAML
Bug Bytes
April 30, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!
Bug Bytes #15 – New Content Discovery Wordlist, IDOR on Shopify & #askstok Bug Bounty live stream by @stokfredrik
Bug Bytes
April 23, 2019
Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 05 to 12 of April. Content_discovery_nullenc0de.txt This is a new content discovery wordlist by @nullenc0de, to use for file & directory bruteforce with tools like dirsearch,
Bug Bytes #14 – Better Exfiltration via HTML Injection by @donutptr, Dell KACE K1000 RCE by @MrTuxracer & BurpFeed
Bug Bytes
April 16, 2019
Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 05 to 12 of April. Better Exfiltration via HTML Injection, tl;dr by @fransrosen & sic (Sequential Import Chaining tool) This is great example of how far collaboration can go
Bug Bytes #13 – Shopify RCE, 0xpatrik’s interview & XSS in Google Search
Bug Bytes
April 9, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!
Bug Bytes #12 – IDOR on Yahoo by @JohnH4X00R, Abusing CORS & @OWASP’s talk on How to Win Big
Bug Bytes
April 2, 2019
Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 22 to 29 of March. Bugbounty scope expanding This paste presents a set of recon steps to expand your bug bounty scope. All of them are well known and documented in most artic
Bug Bytes #11 – Insecure Deeplinks, new XS-techniques and @int0x33 ‘s 365DaysOfPWN
Bug Bytes
March 26, 2019
Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 15 to 22 of March. This is an awesome trick for any bug hunter who uses Chrome. You can create shortcuts to query sites like Shodan, VirusTotal, RiskIQ, etc. For instance, yo
Bug Bytes #10 – Command Injection, Sublert by @yassineaboukir & Bypassing XSS Detection
Bug Bytes
March 19, 2019
Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 8 to 15 of March. OWASP AppSec California 2019, especially: – An Attacker’s View of Serverless and GraphQL Apps & Slides – Endpoint Finder: A static analysis tool to find web
Bug Bytes #9 – Hacking Web Sockets, $10k Facebook Bug by @vulnano & Automated Bug Hunting
Bug Bytes
March 12, 2019
Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 1 to 8 of March. Rescope & Introduction Wow, I love this tool! Have you’ve ever experienced the discomfort of adding several targets one by one or playing with regexes to con
Bug Bytes #8 – XML External Entities, Awesome WAF and Vulnreport
Bug Bytes
March 5, 2019
Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 22 of February to 1 of March. Top 10 Writing Mistakes in Cybersecurity and How You Can Avoid Them One of the first things I was told as a junior pentester was that writing a
Bug Bytes #7 – Abusing bounces, LazyRecon and LiveOverflow’s definition of a vuln
Bug Bytes
February 26, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!
Bug Bytes #6 -25k Facebook CSRF, how to get IDOR, a raise and more!
Bug Bytes
February 19, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers!
Bug Bytes #5 -Lazy Hackers, Stök’s blind XXE and Inception
Bug Bytes
February 12, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. You can sign
Bug Bytes #4 – Misconfigured Jira’s, how to SSRF & DOM XSS challenge
Bug Bytes
February 5, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. You can sign
Bug Bytes #3
Bug Bytes
January 29, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. You can sign
Bug Bytes #2
Bug Bytes
January 23, 2019
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. You can sign
Introducing Bug Bytes, a newsletter curated by the community
Bug Bytes
January 17, 2019
The world of information security changes every day. As tools come out, write-ups are published and zero-days fly by, it can be a challenge to keep up with everything. That is why we are launching Bug Bytes, a newsletter curated by members of the bug bounty community. The first series will be curate
Announcing Bug Bounty for Open Source Software
News
January 15, 2019
As announced by MEP Julia Reda at the end of 2018, and by the European Commission, intigriti and Deloitte are happy to announce that the most exciting cyber security challenge in Europe is about to start. As part of the EU FOSSA 2 project, managed by the European Commission, intigriti and Deloitte w
