Helvede

0 posts0 participants0 posts today

César Pose90% of code will be writen by AI, they say... And Bug Bounty Hunters... 😅😅😅😅😅😅<a href="https://infosec.exchange/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ai</a> <a href="https://infosec.exchange/tags/aicoding" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#aicoding</a> <a href="https://infosec.exchange/tags/programming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#programming</a> <a href="https://infosec.exchange/tags/bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bugbounty</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

The New OilA new security fund opens up to help protect the <a href="https://mastodon.thenewoil.org/tags/fediverse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fediverse</a><a href="https://techcrunch.com/2025/04/02/a-new-security-fund-opens-up-to-help-protect-the-fediverse/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techcrunch.com/2025/04/02/a-new-security-fund-opens-up-to-help-protect-the-fediverse/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.thenewoil.org/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a> <a href="https://mastodon.thenewoil.org/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a>

Peter N. M. HansteenAnd following the result of the poll, here is the whole thing in the raw: <a href="https://nxdomain.no/~peter/bugbounty/20250401_ahmedraslanco@gmail.com_bugbounty_plz_drift@nuug.no.txt" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nxdomain.no/~peter/bugbounty/20250401_ahmedraslanco@gmail.com_bugbounty_plz_drift@nuug.no.txt</a> <a href="https://mastodon.social/tags/bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bugbounty</a> <a href="https://mastodon.social/tags/bugbunnies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bugbunnies</a> <a href="https://mastodon.social/tags/scriptkiddies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scriptkiddies</a> <a href="https://mastodon.social/tags/scammers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scammers</a> <a href="https://mastodon.social/tags/spammers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spammers</a> <a href="https://mastodon.social/tags/scambunnies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scambunnies</a>

Peter N. M. HansteenA message just inboxed here with"To: undisclosed-recipients: ; Subject: Request to Join Your Private Bug Bounty Program"Should I put the entire message on display somewhere and post the link to the fediverse?<a href="https://mastodon.social/tags/scriptkiddies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scriptkiddies</a> <a href="https://mastodon.social/tags/bugbunnies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bugbunnies</a> <a href="https://mastodon.social/tags/bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bugbounty</a> <a href="https://mastodon.social/tags/scammers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scammers</a> <a href="https://mastodon.social/tags/spammers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spammers</a> <a href="https://mastodon.social/tags/scambunnies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scambunnies</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/OpenAI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenAI</a> now pays researchers $100,000 for critical vulnerabilities<a href="https://www.bleepingcomputer.com/news/security/openai-now-pays-researchers-100-000-for-critical-vulnerabilities/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/openai-now-pays-researchers-100-000-for-critical-vulnerabilities/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.thenewoil.org/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a>

Konstantin :C_H:With <a href="https://infosec.exchange/tags/CVE_2025_29927" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE_2025_29927</a>, Next.js has now suffered its second major vulnerability in just three months, following <a href="https://infosec.exchange/tags/CVE_2024_51479" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE_2024_51479</a>.I originally built CVE Crowd with <a href="https://infosec.exchange/tags/NextJS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NextJS</a>.However, as the application became more complex (especially with authentication), I decided to switch to a framework I was more familiar with.Honestly, I’m feeling a bit relieved about that right now...<a href="https://infosec.exchange/tags/Pentesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pentesting</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a> <a href="https://infosec.exchange/tags/Hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hacking</a> <a href="https://infosec.exchange/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE</a> <a href="https://infosec.exchange/tags/CVECrowd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVECrowd</a>

B'ad Samurai 🐐<a href="https://infosec.exchange/@cR0w" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@cR0w</a> If you're in a BB program like Hacker1, they are very quick to claim these. Often -1 to +1 day my tooling will.If your org suffers this often, I do recommend including it within the scope of your BB program**First must start a BB program <a href="https://infosec.exchange/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a> <a href="https://infosec.exchange/tags/bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bugbounty</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> paid $12 million in bug bounties last year to security researchers<a href="https://www.bleepingcomputer.com/news/security/google-paid-12-million-in-bug-bounties-last-year-to-security-researchers/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/google-paid-12-million-in-bug-bounties-last-year-to-security-researchers/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.thenewoil.org/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a>

Konstantin :C_H:I'm excited to share CVE Crowd's Top 5 Vulnerabilities from February 25!These five stood out among the 352 CVEs actively discussed across the Fediverse.For each CVE, I’ve included a standout post from the community.Enjoy exploring! 👇<a href="https://infosec.exchange/tags/Pentesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pentesting</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a> <a href="https://infosec.exchange/tags/Hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hacking</a> <a href="https://infosec.exchange/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE</a> <a href="https://infosec.exchange/tags/CveCrowd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CveCrowd</a>

Max Maass :donor:Update on the <a href="https://infosec.exchange/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a> project: a mixed bag so far. Two of the reports were accepted as low findings (fair enough), with a combined reward of 100€, which is nice. Others were closed as out of scope, admonishing me to read the scope document.I always figured that the "no brute force" exclusions in bug bounty scopes means that I should not try to brute force passwords, but if I find a way to guess passwords in a way that is much more efficient than the regular login form, this would still qualify, as long as I didn’t actively exploit it. But it seems like some programs disagree. So, if I find a misconfiguration that opens an authentication server up to more efficient password guessing, I should... just sit on it since it is out of scope? I don't even necessarily want a bounty, I just want people to fix it, but apparently some of these just get closed by triage and not even forwarded to the affected companies…Would be interested in hearing your experience with this kind of situation - how do you handle such scope issues, especially if you’re not really in it for the money and just want the companies to close easily fixed issues in their configs?

Hush LineSoftware teams, how do you receive vulnerability reports? You can use Hush Line, our free, open-source, anonymous reporting platform. It's easy to set up and end-to-end encrypted, so only you can read your messages.<a href="https://hushline.app" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hushline.app</a><a href="https://mastodon.social/tags/software" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#software</a> <a href="https://mastodon.social/tags/developer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#developer</a> <a href="https://mastodon.social/tags/reporting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#reporting</a> <a href="https://mastodon.social/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a> <a href="https://mastodon.social/tags/bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bugbounty</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/Microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microsoft</a> raises rewards for <a href="https://mastodon.thenewoil.org/tags/Copilot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Copilot</a> <a href="https://mastodon.thenewoil.org/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> <a href="https://mastodon.thenewoil.org/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a> program<a href="https://www.bleepingcomputer.com/news/microsoft/microsoft-raises-rewards-for-copilot-ai-bug-bounty-program/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.bleepingcomputer.com/news/microsoft/microsoft-raises-rewards-for-copilot-ai-bug-bounty-program/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a>

Mohammad E. SepehrA show-off bug hunter: "No helmet? That’s a serious bug! Time for a fix!"<a href="https://mastodon.social/tags/comics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#comics</a> <a href="https://mastodon.social/tags/humor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#humor</a> <a href="https://mastodon.social/tags/funfact" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#funfact</a> <a href="https://mastodon.social/tags/bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bugbounty</a> <a href="https://mastodon.social/tags/bughunter" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bughunter</a> <a href="https://mastodon.social/tags/programming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#programming</a> <a href="https://mastodon.social/tags/code" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#code</a> <a href="https://mastodon.social/tags/bug" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bug</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>

Konstantin :C_H:🚨 Biggest update to CVE Crowd since launch! 🚨 More than a year after its release, cvecrowd.com is getting its most significant update yet.Here's a quick overview of what's new: ✅ Choosable timeframes (24h, 7d, 30d) ✅ Search functionality ✅ Custom feedsLearn more below 🧵<a href="https://infosec.exchange/tags/Pentesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pentesting</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSec</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a> <a href="https://infosec.exchange/tags/Hacking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Hacking</a> <a href="https://infosec.exchange/tags/CVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE</a> <a href="https://infosec.exchange/tags/CveCrowd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CveCrowd</a>

Bálint MagyarI've just published my first article on my security research; starting things off light with a fun little content injection. :)(This also happens to be the debut of a basic site generator I whipped up in Lua — long live the <a href="https://mastodon.social/tags/IndieWeb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IndieWeb</a>, long live static HTML!)<a href="https://bm.gy/qrinj" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://bm.gy/qrinj</a><a href="https://mastodon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://mastodon.social/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a> <a href="https://mastodon.social/tags/Vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vulnerability</a>

Gi7w0rmHey, we even have a <a href="https://infosec.exchange/tags/Bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bugbounty</a> Program, we are so secure! The Bugbounty program:

mretka :neocat_comfy_happy: :heart_cyber:Here's my <a href="https://infosec.exchange/tags/introduction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#introduction</a> long overdue!Hi! I'm a software engineer during the day and <a href="https://infosec.exchange/tags/music" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#music</a> <a href="https://infosec.exchange/tags/math" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#math</a> <a href="https://infosec.exchange/tags/planners" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#planners</a> <a href="https://infosec.exchange/tags/stationery" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#stationery</a> nerd during after hours :DMy interests:- I play the guitar, now I'm moving to playing the bass guitar. - <a href="https://infosec.exchange/tags/emacs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#emacs</a> and <a href="https://infosec.exchange/tags/orgmode" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#orgmode</a>. <a href="https://infosec.exchange/tags/lisp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lisp</a> is growing on me. - <a href="https://infosec.exchange/tags/machinelearning" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#machinelearning</a> and <a href="https://infosec.exchange/tags/jupyter" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jupyter</a> in general - <a href="https://infosec.exchange/tags/statistics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#statistics</a> - Mostly <a href="https://infosec.exchange/tags/manga" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#manga</a> nowadays and some <a href="https://infosec.exchange/tags/anime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#anime</a>. And then I started to learn Japanese as a result. - <a href="https://infosec.exchange/tags/drawing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#drawing</a> - Recently got into <a href="https://infosec.exchange/tags/lockpicking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lockpicking</a> and <a href="https://infosec.exchange/tags/locksport" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#locksport</a>. Tried my hand at <a href="https://infosec.exchange/tags/bugbounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bugbounty</a> in the beginning of last year. - <a href="https://infosec.exchange/tags/cooking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cooking</a> - <a href="https://infosec.exchange/tags/fashion" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fashion</a> - <a href="https://infosec.exchange/tags/chess" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#chess</a> I'm a big fan of <a href="https://infosec.exchange/tags/irc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#irc</a> and <a href="https://infosec.exchange/tags/rss" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#rss</a> feeds as well. I like using Matrix too btw.

Claudius LinkI should check what disclosure periods <a href="https://infosec.exchange/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a> organisations use.Maybe <a href="https://infosec.exchange/@k8em0" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@k8em0</a> would have some input 🙂<a href="https://infosec.exchange/@k8em0/110186072873805241" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://infosec.exchange/@k8em0/110186072873805241</a> contains some

MSkwar🎉 Just landed my first real-world RCE! Discovered a critical vuln in a web app’s file upload parsing via a white-box assessment. 🕵️‍♂️ Fuzzed directories, intercepted uploads, and demoed with “Hello World” to show the impact.Takeaway? Insider access helps, but thinking like an attacker is the key! 🔒 <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a>

Cassidy James :eos: :gg: :fh:We didn’t have the best experience with bug bounties at elementary—the platform we were using turning into a cryptocoin rug pull notwithstanding.That said, it’s been a while since I heard about bounty programs for open source projects. Maybe we were just inexperienced, or the platform we were using was not set up well. Has anyone seen successful examples?Someone recently pointed out <a href="https://algora.io" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://algora.io</a>. Has anyone here used it?<a href="https://mastodon.blaede.family/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://mastodon.blaede.family/tags/BugBounties" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounties</a> <a href="https://mastodon.blaede.family/tags/BugBounty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BugBounty</a> <a href="https://mastodon.blaede.family/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a> <a href="https://mastodon.blaede.family/tags/funding" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#funding</a>

Recent searches

Search options

Administered by:

Server stats:

#bugbounty