Bug Bounty & Agile Pentesting Platform

Bug Bytes #23 – 20K IDOR Trick, Bug Bounty Vloggers everywhere & Persistent Burp Collaborator

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers! These are our favorite resources shared by pentesters […]

Continue reading Continue reading

Bug Bytes #22 – Disabling distracting Firefox traffic from Burp, A 2019 Workflow for Subdomain Enumeration by @0xpatrik & DirectoryImporter

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers! These are our favorite resources shared by pentesters […]

Continue reading Continue reading

Bug Bytes #21 – Automation of the Recon Process by @armaancrockroax, Stored XSS via MIME sniffing & Building Virtual Machine Labs

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers! These are our favorite resources shared by pentesters […]

Continue reading Continue reading

Bug Bytes #20 – Another LFI on Google, Turning your time into bugs by @Zseano & Live Hacking like a MVH by @fransrosen

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers! These are our favorite resources shared by […]

Continue reading Continue reading

Bug Bytes #19 – The Real Impact of Open Redirect, Advanced CORS Exploitation Techniques & Common API Pitfalls

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers! These are our favorite resources shared by pentesters […]

Continue reading Continue reading

BugBytes #18 – Information disclosure on Shopify, Awesome Asset Discovery & How To Work Smarter Not Harder with Bug Bounty

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers! These are our favorite resources shared by pentesters […]

Continue reading Continue reading

Bug Bytes #17 – 5 Important Bug Bounty Tips by @stokfredrik & @jhaddix, @securinti Is Just Reading The Docs & the Intigriti XSS Challenge Write-ups

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers! These are our favorite resources shared by pentesters […]

Continue reading Continue reading

Bug Bytes #16 – Session fixation on Shopify by @filedescriptor, Keyhacks & How to Hunt Bugs in SAML

Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The first series are curated by Mariem, better known as PentesterLand. Every week, she keeps us updated with a comprehensive list of all write-ups, tools, tutorials and resources we should not have missed. Hey hackers! These are our favorite resources shared by pentesters […]

Continue reading Continue reading

Bug Bytes #15 – New Content Discovery Wordlist, IDOR on Shopify & #askstok Bug Bounty live stream by @stokfredrik

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week.This issue covers the week from 05 to 12 of April. Our favorite 5 hacking items 1. Resource of the week Content_discovery_nullenc0de.txt This is a new content discovery wordlist by @nullenc0de, to use for file & directory bruteforce with tools like […]

Continue reading Continue reading

Bug Bytes #14 – Better Exfiltration via HTML Injection by @donutptr, Dell KACE K1000 RCE by @MrTuxracer & BurpFeed

Hey hackers! These are our favorite resources shared by pentesters and bug hunters last week. This issue covers the week from 05 to 12 of April. Our favorite 5 hacking items 1. Article of the week Better Exfiltration via HTML Injection, tl;dr by @fransrosen & sic (Sequential Import Chaining tool) This is  great example of […]

Continue reading Continue reading