Proud to be ranked #1 in the live #BugBounty#JuicyEvent after an exciting week of pwning.
Congratulations to @yeswehack and partner for the organization of this fantastic event.
#YesWeRHackers
It happened! Our interview with @Issam_Rabhi, our all-time #1 hunter, is out 🎙️
As well as sharing tips, rabhi looks back on his own early days as a hacker, when ethical hackers were largely unappreciated 🕵️
Trust us, you don't want to miss it 👇
piped.video/watch?v=vflHpsiM…
Win your seat for #HIP21 ! Resolve this exclusive #challenge and send us the flag by dm. The first two people who find the answer win a ticket for the conferences and workshops ! No time to lose, click here and let the hacking begin : hip21.chall.malicecyber.com/
Since the PoC for the VMware vCenter RCE (CVE-2021-21972) is now readily available, we're publishing our article covering all of the technical details.
Read the article: swarm.ptsecurity.com/unauth-…
Thank you @Yeswehack for the organization of this fantastic event. It has been my great honor to participate in such private #BugBounty.
#BugBounty is a true testament of what can be achieved when bug hunter community work together for the same purpose. #YesWeRHackers
Our final leaderboard for the remote live Bug Bounty is here! Thanks to all the participants for those 48H of pwning! #StarProject#YesWeRHackers
🏆 1st @Gromak123_Sec
🏆 2nd @Issam_Rabhi
🏆 3rd @J0_mart
BIG thanks to our partner for its trust and incredibly fast triage! 💪
ALT Final leaderboard for the live remote bug bounty event on @yeswehack #BugBounty #YesWeRHackers
I wrote a post on @assetnote's blog about hacking in bug bounties for the last four years. This should give you a good idea on what I've been reporting and how I find bugs and incorporate them back into our platform.
blog.assetnote.io/2020/09/15…
Took more than 2 years, but just released the postMessage-tracker Chrome Extension!
github.com/fransr/postMessag…
Look at the functions receiving postMessages directly in the extension, look at the messages and sender/receiver window locations and track everything using a log-URL.